@authup/server-core 1.0.0-beta.58 → 1.0.0-beta.59

package/dist/app/modules/http/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["Client","AuthupError","App","serve","ConfigInjectionKey","createInternalUIHttpClient","NoopAuthFlowMetrics","ModuleName","HTTPInjectionKey","MetricsInjectionKey","PromAuthFlowMetrics","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","options","trustProxy","e","Error","message","String","registerUIHttpClient","registerMetrics","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","enabled","middlewarePrometheus","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { AuthupError } from '@authup/errors';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { NoopAuthFlowMetrics } from '../../../core/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { MetricsInjectionKey, PromAuthFlowMetrics } from '../metrics/index.ts';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        // Every request helper deriving proxy-dependent request facts\n        // (getRequestIP, hostname, protocol) resolves the trust contract from\n        // the app options — call sites must NOT pass their own `trustProxy`.\n        let router : App;\n        try {\n            router = new App({ options: { trustProxy: config.trustProxy } });\n        } catch (e) {\n            // proxy-addr compiles the allowlist form inside the App\n            // constructor; its error (\"invalid IP address: …\") does not name\n            // the offending config key — attribute it.\n            throw new AuthupError(\n                `Invalid trustProxy (TRUST_PROXY) configuration: ${e instanceof Error ? e.message : String(e)}`,\n            );\n        }\n\n        this.registerUIHttpClient(container);\n        this.registerMetrics(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    /**\n     * Auth-flow metric counters for the emit points (plan 058 Part 2).\n     * Registered before the controllers are built — the factories resolve the\n     * token. Prometheus-backed iff the prometheus middleware is enabled\n     * (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),\n     * otherwise a noop so emit sites never need a guard beyond `?.`.\n     */\n    protected registerMetrics(container: IContainer): void {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const enabled = typeof config.middlewarePrometheus !== 'boolean' ||\n            config.middlewarePrometheus === true;\n\n        container.register(MetricsInjectionKey, {\n            useValue: enabled ?\n                new PromAuthFlowMetrics() :\n                new NoopAuthFlowMetrics(),\n        });\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        container.unregister(MetricsInjectionKey);\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAac,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAOR,WAAWc;EACvB,KAAKL,eAAe;GAACT,WAAWe;GAAQf,WAAWgB;GAAQhB,WAAWiB;GAAgBjB,WAAWkB;GAAUlB,WAAWmB;EAAO;EAC7H,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EACjC,MAAM2B,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAKb,IAAIC;EACJ,IAAI;GACAA,SAAS,IAAI/B,IAAI,EAAEgC,SAAS,EAAEC,YAAYN,OAAOM,WAAW,EAAE,CAAA;EAClE,SAASC,GAAG;GAIR,MAAM,IAAInC,YACN,mDAAmDmC,aAAaC,QAAQD,EAAEE,UAAUC,OAAOH,CAAAA,GAAI;EAEvG;EAEA,KAAKI,qBAAqBZ,SAAAA;EAC1B,KAAKa,gBAAgBb,SAAAA;EAErB,MAAM,KAAKV,WAAWwB,YAAYT,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAWwB,MAAMV,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAW0B,WAAWX,QAAQL,SAAAA;EAEzC,MAAMiB,SAAS1C,MAAM8B,QAAQ;GACzBa,MAAMjB,OAAOiB;GACbC,UAAUlB,OAAOmB;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAKlC,WAAW4B;EAEhB,IAAIA,OAAOO,KACPrB,OAAOC,MAAM,gBAAgBa,OAAOO,KAAK;EAG7CxB,UAAUyB,SAAS7C,iBAAiB8C,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/Dd,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAU4B,IAAIhD,iBAAiBiD,YAAY,GAC3C;EAGJ7B,UAAUyB,SAAS7C,iBAAiBiD,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAM9B,SAAS8B,EAAE7B,QAAQ1B,kBAAAA;GAMzB,MAAMyC,SAASc,EAAEH,IAAIhD,iBAAiB8C,MAAM,IACxCK,EAAE7B,QAAQtB,iBAAiB8C,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAO/C,2BAA2B;IAC9BwD,WAAWhC,OAAOiC;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAIpD,OAAO,EAAEgE,SAASnC,OAAOiC,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAK7C,yBAAyB;CAClC;;;;;;;IASA,gBAA0BQ,WAA6B;EACnD,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EAEjC,MAAM8D,UAAU,OAAOrC,OAAOsC,yBAAyB,aACnDtC,OAAOsC,yBAAyB;EAEpCvC,UAAUyB,SAAS5C,qBAAqB,EACpC8C,UAAUW,UACN,IAAIxD,oBAAAA,IACJ,IAAIJ,oBAAAA,EACZ,CAAA;CACJ;CAIA,MAAM8D,SAASxC,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAUyC,WAAW7D,iBAAiBiD,YAAY;GAClD,KAAKrC,yBAAyB;EAClC;EAEAQ,UAAUyC,WAAW5D,mBAAAA;EAErB,IAAI,CAAC,KAAKQ,UAAU;EAEpBW,UAAUyC,WAAW7D,iBAAiB8C,MAAM;EAE5C,MAAM,KAAKrC,SAASqD,MAAK;EACzB,KAAKrD,WAAW2C,KAAAA;CACpB;AACJ"}
+{"version":3,"file":"module.mjs","names":["Client","AuthupError","App","serve","ConfigInjectionKey","bindConsolePackages","createInternalUIHttpClient","NoopAuthFlowMetrics","ModuleName","HTTPInjectionKey","MetricsInjectionKey","PromAuthFlowMetrics","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","options","trustProxy","e","Error","message","String","authConsolePath","accountConsolePath","registerUIHttpClient","registerMetrics","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","enabled","middlewarePrometheus","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { AuthupError } from '@authup/errors';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { bindConsolePackages, createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { NoopAuthFlowMetrics } from '../../../core/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { MetricsInjectionKey, PromAuthFlowMetrics } from '../metrics/index.ts';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        // Every request helper deriving proxy-dependent request facts\n        // (getRequestIP, hostname, protocol) resolves the trust contract from\n        // the app options — call sites must NOT pass their own `trustProxy`.\n        let router : App;\n        try {\n            router = new App({ options: { trustProxy: config.trustProxy } });\n        } catch (e) {\n            // proxy-addr compiles the allowlist form inside the App\n            // constructor; its error (\"invalid IP address: …\") does not name\n            // the offending config key — attribute it.\n            throw new AuthupError(\n                `Invalid trustProxy (TRUST_PROXY) configuration: ${e instanceof Error ? e.message : String(e)}`,\n            );\n        }\n\n        // Before any route is mounted: a substituted console package that\n        // no longer fulfills its contract must stop the boot, not surface\n        // as a confusing per-request failure on /authorize.\n        await bindConsolePackages({\n            authConsolePath: config.authConsolePath,\n            accountConsolePath: config.accountConsolePath,\n        });\n\n        this.registerUIHttpClient(container);\n        this.registerMetrics(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    /**\n     * Auth-flow metric counters for the emit points (plan 058 Part 2).\n     * Registered before the controllers are built — the factories resolve the\n     * token. Prometheus-backed iff the prometheus middleware is enabled\n     * (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),\n     * otherwise a noop so emit sites never need a guard beyond `?.`.\n     */\n    protected registerMetrics(container: IContainer): void {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const enabled = typeof config.middlewarePrometheus !== 'boolean' ||\n            config.middlewarePrometheus === true;\n\n        container.register(MetricsInjectionKey, {\n            useValue: enabled ?\n                new PromAuthFlowMetrics() :\n                new NoopAuthFlowMetrics(),\n        });\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        container.unregister(MetricsInjectionKey);\n\n        await this.middleware.teardown();\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAae,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAOR,WAAWc;EACvB,KAAKL,eAAe;GAACT,WAAWe;GAAQf,WAAWgB;GAAQhB,WAAWiB;GAAgBjB,WAAWkB;GAAUlB,WAAWmB;EAAO;EAC7H,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQ3B,kBAAAA;EACjC,MAAM4B,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAKb,IAAIC;EACJ,IAAI;GACAA,SAAS,IAAIhC,IAAI,EAAEiC,SAAS,EAAEC,YAAYN,OAAOM,WAAW,EAAE,CAAA;EAClE,SAASC,GAAG;GAIR,MAAM,IAAIpC,YACN,mDAAmDoC,aAAaC,QAAQD,EAAEE,UAAUC,OAAOH,CAAAA,GAAI;EAEvG;EAKA,MAAMhC,oBAAoB;GACtBoC,iBAAiBX,OAAOW;GACxBC,oBAAoBZ,OAAOY;EAC/B,CAAA;EAEA,KAAKC,qBAAqBd,SAAAA;EAC1B,KAAKe,gBAAgBf,SAAAA;EAErB,MAAM,KAAKV,WAAW0B,YAAYX,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAW0B,MAAMZ,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAW4B,WAAWb,QAAQL,SAAAA;EAEzC,MAAMmB,SAAS7C,MAAM+B,QAAQ;GACzBe,MAAMnB,OAAOmB;GACbC,UAAUpB,OAAOqB;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAKpC,WAAW8B;EAEhB,IAAIA,OAAOO,KACPvB,OAAOC,MAAM,gBAAgBe,OAAOO,KAAK;EAG7C1B,UAAU2B,SAAS/C,iBAAiBgD,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/DhB,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAU8B,IAAIlD,iBAAiBmD,YAAY,GAC3C;EAGJ/B,UAAU2B,SAAS/C,iBAAiBmD,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAMhC,SAASgC,EAAE/B,QAAQ3B,kBAAAA;GAMzB,MAAM4C,SAASc,EAAEH,IAAIlD,iBAAiBgD,MAAM,IACxCK,EAAE/B,QAAQtB,iBAAiBgD,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAOjD,2BAA2B;IAC9B0D,WAAWlC,OAAOmC;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAIvD,OAAO,EAAEmE,SAASrC,OAAOmC,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAK/C,yBAAyB;CAClC;;;;;;;IASA,gBAA0BQ,WAA6B;EACnD,MAAMC,SAASD,UAAUE,QAAQ3B,kBAAAA;EAEjC,MAAMiE,UAAU,OAAOvC,OAAOwC,yBAAyB,aACnDxC,OAAOwC,yBAAyB;EAEpCzC,UAAU2B,SAAS9C,qBAAqB,EACpCgD,UAAUW,UACN,IAAI1D,oBAAAA,IACJ,IAAIJ,oBAAAA,EACZ,CAAA;CACJ;CAIA,MAAMgE,SAAS1C,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAU2C,WAAW/D,iBAAiBmD,YAAY;GAClD,KAAKvC,yBAAyB;EAClC;EAEAQ,UAAU2C,WAAW9D,mBAAAA;EAErB,MAAM,KAAKS,WAAWoD,SAAQ;EAE9B,IAAI,CAAC,KAAKrD,UAAU;EAEpBW,UAAU2C,WAAW/D,iBAAiBgD,MAAM;EAE5C,MAAM,KAAKvC,SAASuD,MAAK;EACzB,KAAKvD,WAAW6C,KAAAA;CACpB;AACJ"}

package/dist/app/modules/http/modules/controller.d.ts

@@ -1,6 +1,6 @@
 import type { App } from 'routup';
 import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, KeyController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, SessionController, TrustAnchorController, UserAttributeController, UserAuthenticatorController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
-import { ActivateController, AuthenticatorChallengeController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController, UserInfoController } from '../../../../adapters/http/controllers/index.ts';
+import { AccountController, ActivateController, AuthenticatorChallengeController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController, UserInfoController } from '../../../../adapters/http/controllers/index.ts';
 import type { IContainer } from 'eldin';
 import { ConsentService, OAuth2AccessPolicyEvaluator, OAuth2MfaLoginService, PasswordRecoveryService, RegistrationService, UserAuthenticatorService, UserService } from '../../../../core/index.ts';
 import type { StatusResponseFeatures } from '@authup/core-http-kit';
@@ -17,6 +17,7 @@ export declare class HTTPControllerModule {
     createRegisterController(container: IContainer): RegisterController;
     createLogoutController(container: IContainer): LogoutController;
     createStatusController(container: IContainer): StatusController;
+    createAccountController(container: IContainer): AccountController;
     buildUIFeatures(config: Config): StatusResponseFeatures;
     createRegistrationService(container: IContainer): RegistrationService;
     createIdentityProvider(container: IContainer): IdentityProviderController;

package/dist/app/modules/http/modules/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAmElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EACrB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAMd,2BAA2B,EAG3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EASnB,wBAAwB,EAGxB,WAAW,EAEd,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAuE9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAmFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAoC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAsD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,iBAAiB,CAAC,SAAS,EAAE,UAAU;IAgBvC,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAI1C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CA8C9C"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAmElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EACrB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAMd,2BAA2B,EAG3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EAUnB,wBAAwB,EAGxB,WAAW,EACd,MAAM,2BAA2B,CAAC;AAKnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAwE9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAmFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAY7C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IASxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAoC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAsD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,iBAAiB,CAAC,SAAS,EAAE,UAAU;IAgBvC,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAI1C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAiD9C"}

package/dist/app/modules/http/modules/controller.mjs

@@ -29,7 +29,7 @@ import { LoginThrottleService } from "../../../../core/authentication/login-thro
 import { CredentialsAuthenticator } from "../../../../core/authentication/module.mjs";
 import { ClientCertificateValidator } from "../../../../core/client-certificate/module.mjs";
 import { ClientService } from "../../../../core/entities/client/service.mjs";
-import { WebClientProvisioner } from "../../../../core/entities/client/web-client.mjs";
+import { SystemClientProvisioner } from "../../../../core/entities/client/system-clients.mjs";
 import { ClientPermissionService } from "../../../../core/entities/client-permission/service.mjs";
 import { ClientRoleService } from "../../../../core/entities/client-role/service.mjs";
 import { ClientScopeService } from "../../../../core/entities/client-scope/service.mjs";
@@ -107,6 +107,7 @@ import { IdentityProviderRoleMappingController } from "../../../../adapters/http
 import { KeyController } from "../../../../adapters/http/controllers/entities/key/module.mjs";
 import { PermissionController } from "../../../../adapters/http/controllers/entities/permission/module.mjs";
 import { PermissionPolicyController } from "../../../../adapters/http/controllers/entities/permission-policy/module.mjs";
+import { AccountController } from "../../../../adapters/http/controllers/workflows/account/module.mjs";
 import { ActivateController } from "../../../../adapters/http/controllers/workflows/activate/module.mjs";
 import { AuthenticatorChallengeController } from "../../../../adapters/http/controllers/workflows/authenticator-challenge/module.mjs";
 import { AuthorizeController } from "../../../../adapters/http/controllers/workflows/authorize/module.mjs";
@@ -138,6 +139,7 @@ import { OAuth2InjectionToken } from "../../oauth2/constants.mjs";
 import { IdentityInjectionKey } from "../../identity/constants.mjs";
 import "../../identity/index.mjs";
 import "../../oauth2/index.mjs";
+import { LazyWildcardRealmProvisioner } from "../../provisioning/lazy-wildcard.mjs";
 import { MailInjectionKey, MailTemplateRendererInjectionKey } from "../../mail/constants.mjs";
 import "../../mail/index.mjs";
 import { decorators } from "@routup/decorators";
@@ -179,6 +181,7 @@ var HTTPControllerModule = class {
 			this.createLogoutController(container),
 			this.createAuthenticatorChallengeController(container),
 			this.createUserInfoController(container),
+			this.createAccountController(container),
 			this.createStatusController(container),
 			clientController,
 			clientPermissionController,
@@ -381,11 +384,20 @@ var HTTPControllerModule = class {
 		const config = container.resolve(ConfigInjectionKey);
 		return new StatusController({ options: { features: this.buildUIFeatures(config) } });
 	}
+	createAccountController(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		return new AccountController({ options: {
+			baseURL: config.publicUrl,
+			features: this.buildUIFeatures(config),
+			trustedOrigins: getAppOrigins(config)
+		} });
+	}
 	buildUIFeatures(config) {
 		return {
 			registration: config.registrationEnabled,
 			passwordRecovery: config.passwordRecoveryEnabled,
-			emailVerification: config.emailVerificationEnabled
+			emailVerification: config.emailVerificationEnabled,
+			accountConsole: config.accountConsoleEnabled
 		};
 	}
 	createRegistrationService(container) {
@@ -786,7 +798,7 @@ var HTTPControllerModule = class {
 			realmRepository
 		});
 		const logger = container.resolve(LoggerInjectionKey);
-		const webClientProvisioner = new WebClientProvisioner({
+		const systemClientProvisioner = new SystemClientProvisioner({
 			clientRepository,
 			scopeRepository: new ScopeRepositoryAdapter({
 				repository: container.resolve(ScopeEntity),
@@ -802,8 +814,11 @@ var HTTPControllerModule = class {
 		});
 		const service = new RealmService({
 			repository,
-			webClientProvisioner,
-			keyProvisioner,
+			realmProvisioners: [
+				systemClientProvisioner,
+				keyProvisioner,
+				new LazyWildcardRealmProvisioner(container)
+			],
 			logger
 		});
 		const keyRepository = dataSource.getRepository(KeyEntity);

package/dist/app/modules/http/modules/controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserAuthenticatorEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","TrustAnchorRepositoryAdapter","UserAttributeRepositoryAdapter","UserAuthenticatorRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","ConsentController","EventController","IdentityProviderController","IdentityProviderRoleMappingController","KeyController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","TrustAnchorController","UserAttributeController","UserAuthenticatorController","UserController","UserPermissionController","UserRoleController","useRequestEventContext","ActivateController","AuthenticatorChallengeController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","UserInfoController","ClientCertificateValidator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","ConsentService","CredentialsAuthenticator","IdentityProviderRoleMappingService","KeyProvisioner","KeyService","LoginThrottleService","OAuth2AccessPolicyEvaluator","OAuth2ClientAuthenticator","OAuth2EndSessionService","OAuth2MfaLoginService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmCipher","RealmService","RegistrationService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","TrustAnchorService","UserAttributeService","UserAuthenticator","UserAuthenticatorService","UserPermissionService","UserRoleService","UserService","WebClientProvisioner","AuthenticationInjectionKey","OAuth2InjectionToken","IdentityInjectionKey","ConfigInjectionKey","getAppOrigins","CacheInjectionKey","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","MetricsInjectionKey","HTTPControllerModule","mount","router","container","eventController","createEventController","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","keyController","createKeyController","trustAnchorController","createTrustAnchorController","sessionController","createSessionController","consentController","createConsentController","userController","createUserController","userAttributeController","createUserAttributeController","userAuthenticatorController","createUserAuthenticatorController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createAuthenticatorChallengeController","createUserInfoController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","eventService","EventService","metrics","options","baseURL","publicUrl","features","buildUIFeatures","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","resolveUserAuthenticatorService","accessPolicyEvaluator","resolveAccessPolicyEvaluator","consentService","createConsentService","logger","dataSource","DataSource","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyStore","KeyStore","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","userAuthenticator","oauth2ClientAuthenticator","certificateValidator","trustAnchorRepository","loginThrottleService","repository","EventRepository","enabled","loginAttemptThrottleEnabled","threshold","loginAttemptThreshold","windowSeconds","loginAttemptWindow","userAuthenticatorService","mfaLoginService","resolveMfaLoginService","tokenRefreshGracePeriod","certificateSource","realmRepository","service","createRegistrationService","createPasswordRecoveryService","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","registration","registrationEnabled","passwordRecovery","emailVerification","accountManager","ProviderAccountManager","stateManager","AuthorizationStateManager","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","requestContext","SessionRepository","ConsentRepository","policyProvider","userRepository","issuer","webauthn","url","URL","hostname","rpId","rpName","origin","undefined","cache","cipher","mfaEnabled","required","mfaRequired","ticketIssuer","MfaTokenIssuer","createUserService","getRepository","webClientProvisioner","scopeRepository","clientScopeRepository","appOrigins","keyProvisioner","keyRepository","mtlsBaseURL","mtlsPublicUrl","clientCertificatesEnabled"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserAuthenticator as UserAuthenticatorModel,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserAuthenticatorEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    TrustAnchorRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserAuthenticatorRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    ConsentController,\n    EventController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    KeyController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    TrustAnchorController,\n    UserAttributeController,\n    UserAuthenticatorController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n    useRequestEventContext,\n} from '../../../../adapters/http/index.ts';\nimport {\n    ActivateController,\n    AuthenticatorChallengeController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n    UserInfoController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCertificateValidator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    ConsentService,\n    CredentialsAuthenticator,\n    IdentityProviderRoleMappingService,\n    KeyProvisioner,\n    KeyService,\n    LoginThrottleService,\n    OAuth2AccessPolicyEvaluator,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    OAuth2MfaLoginService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmCipher,\n    RealmService,\n    RegistrationService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    TrustAnchorService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserAuthenticatorService,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n    WebClientProvisioner,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { CacheInjectionKey } from '../../cache/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\nimport { MetricsInjectionKey } from '../../metrics/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const eventController = this.createEventController(container);\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const keyController = this.createKeyController(container);\n        const trustAnchorController = this.createTrustAnchorController(container);\n        const sessionController = this.createSessionController(container);\n        const consentController = this.createConsentController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userAuthenticatorController = this.createUserAuthenticatorController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n                this.createAuthenticatorChallengeController(container),\n                this.createUserInfoController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                consentController,\n                eventController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                keyController,\n                trustAnchorController,\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                userController,\n                userAttributeController,\n                userAuthenticatorController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n                mfaFreshnessMaxAge: config.mfaFreshnessMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n\n            eventService,\n            metrics,\n\n            mfaChallengeProvider: this.resolveUserAuthenticatorService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            consentService: this.createConsentService(container),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyStore = container.resolve(OAuth2InjectionToken.KeyStore);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator({\n            identityResolver,\n            certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) }),\n        });\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        const loginThrottleService = new LoginThrottleService({\n            repository: container.resolve(DatabaseInjectionKey.EventRepository),\n            options: {\n                enabled: config.loginAttemptThrottleEnabled,\n                threshold: config.loginAttemptThreshold,\n                windowSeconds: config.loginAttemptWindow,\n            },\n        });\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyStore,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            eventService,\n            metrics,\n            loginThrottleService,\n            userAuthenticatorService: this.resolveUserAuthenticatorService(container),\n            mfaLoginService: this.resolveMfaLoginService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n            certificateSource: config.certificateSource,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { baseURL: config.publicUrl },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            clientRepository: container.resolve(OAuth2InjectionToken.ClientRepository),\n\n            accountManager,\n\n            codeIssuer,\n            codeRequestVerifier,\n            stateManager,\n\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createKeyController(container: IContainer) {\n        // the DI singleton carries the optional KEK cipher — never construct\n        // a fresh adapter here.\n        const service = new KeyService({\n            repository: container.resolve(OAuth2InjectionToken.KeyStore),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new KeyController({ service });\n    }\n\n    createTrustAnchorController(container: IContainer) {\n        const repository = new TrustAnchorRepositoryAdapter(\n            container.resolve(DatabaseInjectionKey.DataSource),\n        );\n        const service = new TrustAnchorService({\n            repository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new TrustAnchorController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({ repository });\n        return new SessionController({ service });\n    }\n\n    protected createConsentService(container: IContainer) : ConsentService {\n        const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);\n        return new ConsentService({ repository });\n    }\n\n    createConsentController(container: IContainer) {\n        return new ConsentController({ service: this.createConsentService(container) });\n    }\n\n    private accessPolicyEvaluator? : OAuth2AccessPolicyEvaluator;\n\n    protected resolveAccessPolicyEvaluator(container: IContainer) : OAuth2AccessPolicyEvaluator {\n        if (this.accessPolicyEvaluator) {\n            return this.accessPolicyEvaluator;\n        }\n\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        this.accessPolicyEvaluator = new OAuth2AccessPolicyEvaluator({\n            policyProvider: new PolicyRepository(dataSource),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        return this.accessPolicyEvaluator;\n    }\n\n    private userAuthenticatorService? : UserAuthenticatorService;\n\n    protected resolveUserAuthenticatorService(container: IContainer) : UserAuthenticatorService {\n        if (this.userAuthenticatorService) {\n            return this.userAuthenticatorService;\n        }\n\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const repository = new UserAuthenticatorRepositoryAdapter(\n            container.resolve<Repository<UserAuthenticatorModel>>(UserAuthenticatorEntity),\n        );\n        const userRepository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n\n        let issuer : string | undefined;\n        let webauthn : {\n            rpId: string, \n            rpName: string, \n            origin: string \n        } | undefined;\n        try {\n            const url = new URL(config.publicUrl);\n            issuer = url.hostname;\n            webauthn = {\n                rpId: url.hostname,\n                rpName: issuer,\n                origin: url.origin,\n            };\n        } catch {\n            issuer = undefined;\n            webauthn = undefined;\n        }\n\n        this.userAuthenticatorService = new UserAuthenticatorService({\n            repository,\n            userRepository,\n            cache: container.resolve(CacheInjectionKey),\n            cipher: new RealmCipher({ keyStore: container.resolve(OAuth2InjectionToken.KeyStore) }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            mailClient: container.resolve(MailInjectionKey),\n            mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),\n            options: {\n                enabled: config.mfaEnabled,\n                required: config.mfaRequired,\n                issuer,\n                webauthn,\n            },\n        });\n\n        return this.userAuthenticatorService;\n    }\n\n    createUserAuthenticatorController(container: IContainer) {\n        return new UserAuthenticatorController({ service: this.resolveUserAuthenticatorService(container) });\n    }\n\n    private mfaLoginService? : OAuth2MfaLoginService;\n\n    protected resolveMfaLoginService(container: IContainer) : OAuth2MfaLoginService {\n        if (this.mfaLoginService) {\n            return this.mfaLoginService;\n        }\n\n        this.mfaLoginService = new OAuth2MfaLoginService({\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            ticketIssuer: container.resolve(OAuth2InjectionToken.MfaTokenIssuer),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n            tokenRepository: container.resolve(OAuth2InjectionToken.TokenRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            metrics: container.resolve(MetricsInjectionKey),\n        });\n\n        return this.mfaLoginService;\n    }\n\n    createAuthenticatorChallengeController(container: IContainer) {\n        return new AuthenticatorChallengeController({\n            service: this.resolveUserAuthenticatorService(container),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            mfaLoginService: this.resolveMfaLoginService(container),\n        });\n    }\n\n    createEventController(container: IContainer) {\n        const service = container.resolve(DatabaseInjectionKey.EventService);\n        return new EventController({ service });\n    }\n\n    createUserService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        return new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n    }\n\n    createUserController(container: IContainer) {\n        return new UserController({ service: this.createUserService(container) });\n    }\n\n    createUserInfoController(container: IContainer) {\n        return new UserInfoController({ service: this.createUserService(container) });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const webClientProvisioner = new WebClientProvisioner({\n            clientRepository,\n            scopeRepository: new ScopeRepositoryAdapter({\n                repository: container.resolve<Repository<Scope>>(ScopeEntity),\n                realmRepository,\n            }),\n            clientScopeRepository: new ClientScopeRepositoryAdapter(\n                container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n            ),\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n        const keyProvisioner = new KeyProvisioner({\n            keyStore: container.resolve(OAuth2InjectionToken.KeyStore),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            webClientProvisioner,\n            keyProvisioner,\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: {\n                baseURL: config.publicUrl,\n                mtlsBaseURL: config.mtlsPublicUrl,\n                clientCertificatesEnabled: config.certificateSource !== 'disabled',\n            },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsKA,IAAagI,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,kBAAkB,KAAKC,sBAAsBJ,SAAAA;EACnD,MAAMK,iBAAiB,KAAKC,qBAAqBN,SAAAA;EACjD,MAAMO,uBAAuB,MAAM,KAAKC,2BAA2BR,SAAAA;EACnE,MAAMS,6BAA6B,KAAKC,iCAAiCV,SAAAA;EACzE,MAAMW,mBAAmB,KAAKC,uBAAuBZ,SAAAA;EACrD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,0BAA0B,KAAKC,8BAA8BpB,SAAAA;EACnE,MAAMqB,2BAA2B,KAAKC,+BAA+BtB,SAAAA;EACrE,MAAMuB,kBAAkB,KAAKC,sBAAsBxB,SAAAA;EACnD,MAAMyB,gBAAgB,KAAKC,oBAAoB1B,SAAAA;EAC/C,MAAM2B,wBAAwB,KAAKC,4BAA4B5B,SAAAA;EAC/D,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,oBAAoB,KAAKC,wBAAwBhC,SAAAA;EACvD,MAAMiC,iBAAiB,KAAKC,qBAAqBlC,SAAAA;EACjD,MAAMmC,0BAA0B,KAAKC,8BAA8BpC,SAAAA;EACnE,MAAMqC,8BAA8B,KAAKC,kCAAkCtC,SAAAA;EAC3E,MAAMuC,2BAA2B,KAAKC,+BAA+BxC,SAAAA;EACrE,MAAMyC,qBAAqB,KAAKC,yBAAyB1C,SAAAA;EACzD,MAAM2C,mBAAmB,KAAKC,uBAAuB5C,SAAAA;EACrD,MAAM6C,iCAAiC,KAAKC,qCAAqC9C,SAAAA;EAEjFD,OAAOgD,IAAIlL,WAAW,EAClBmL,aAAa;GACT,KAAKC,gBAAgBjD,SAAAA;GACrB,KAAKkD,YAAYlD,SAAAA;GACjB,KAAKmD,oBAAoBnD,SAAAA;GACzB,KAAKoD,uBAAuBpD,SAAAA;GAC5B,KAAKqD,yBAAyBrD,SAAAA;GAC9B,KAAKsD,+BAA+BtD,SAAAA;GACpC,KAAKuD,8BAA8BvD,SAAAA;GACnC,KAAKwD,yBAAyBxD,SAAAA;GAC9B,KAAKyD,uBAAuBzD,SAAAA;GAC5B,KAAK0D,uCAAuC1D,SAAAA;GAC5C,KAAK2D,yBAAyB3D,SAAAA;GAE9B,KAAK4D,uBAAuB5D,SAAAA;GAE5BW;GACAE;GACAE;GACAE;GACAc;GACA9B;GACA4C;GACA,KAAKgB,uBAAuB7D,SAAAA;GAC5ByB;GACAE;GACApB;GACAE;GACAkC;GACAxC;GACAE;GACAc;GACAE;GACAE;GACAM;GACAI;GACAE;GACAE;GACAE;GACAE;EACH,EACL,CAAA,CAAA;CACJ;CAIAQ,gBAAgBjD,WAAuB;EACnC,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,MAAM0E,aAAahE,UAAU+D,QAAQ3E,qBAAqB6E,uBAAuB;EACjF,MAAMC,sBAAsBlE,UAAU+D,QAAQ3E,qBAAqB+E,gCAAgC;EAEnG,MAAMC,iBAAiBpE,UAAU+D,QAAQ5E,2BAA2BkF,cAAc;EAElF,MAAMC,eAAetE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;EACxE,MAAMC,UAAUxE,UAAU+D,QAAQnE,mBAAAA;EAElC,OAAO,IAAIxD,oBAAoB;GAC3BqI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;IAC/BgB,mBAAmBhB,OAAOgB;IAC1BC,oBAAoBjB,OAAOiB;GAC/B;GAEAf;GACAE;GAEAE;GAEAE;GACAE;GAEAQ,sBAAsB,KAAKC,gCAAgCjF,SAAAA;GAC3DkF,uBAAuB,KAAKC,6BAA6BnF,SAAAA;GAEzDoF,gBAAgB,KAAKC,qBAAqBrF,SAAAA;GAC1CsF,QAAQtF,UAAU+D,QAAQtE,kBAAAA;EAC9B,CAAA;CACJ;CAEAyD,YAAYlD,WAAuB;EAC/B,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMgG,SAAStF,UAAU+D,QAAQtE,kBAAAA;EACjC,MAAM8F,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EAEpE,MAAMpB,iBAAiBpE,UAAU+D,QAAQ5E,2BAA2BkF,cAAc;EAElF,MAAMoB,eAAezF,UAAU+D,QAAQ3E,qBAAqBsG,yBAAyB;EAErF,MAAMC,oBAAoB3F,UAAU+D,QAAQ3E,qBAAqBwG,iBAAiB;EAClF,MAAMC,qBAAqB7F,UAAU+D,QAAQ3E,qBAAqB0G,kBAAkB;EACpF,MAAMC,oBAAoB/F,UAAU+D,QAAQ3E,qBAAqB4G,iBAAiB;EAClF,MAAMC,WAAWjG,UAAU+D,QAAQ3E,qBAAqB8G,QAAQ;EAEhE,MAAMC,eAAenG,UAAU+D,QAAQ3E,qBAAqBgH,YAAY;EACxE,MAAMC,gBAAgBrG,UAAU+D,QAAQ3E,qBAAqBkH,aAAa;EAC1E,MAAMC,kBAAkBvG,UAAU+D,QAAQ3E,qBAAqBoH,eAAe;EAC9E,MAAMC,yBAAyBzG,UAAU+D,QAAQ3E,qBAAqBsH,sBAAsB;EAE5F,MAAMC,mBAAmB3G,UAAU+D,QAAQ1E,qBAAqBuH,QAAQ;EACxE,MAAMC,8CAA8C7G,UAAU+D,QAAQ1E,qBAAqByH,mCAAmC;EAE9H,MAAMC,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAE5F,MAAMC,oBAAoB,IAAI7J,yBAAyB,CACnDyJ,6CACA,IAAIhI,kBAAkB8H,gBAAAA,CACzB,CAAA;EAED,MAAMO,4BAA4B,IAAIxJ,0BAA0B;GAC5DiJ;GACAQ,sBAAsB,IAAIrK,2BAA2B,EAAEsK,uBAAuB,IAAIjN,6BAA6BoL,UAAAA,EAAY,CAAA;EAC/H,CAAA;EAEA,MAAMjB,eAAetE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;EACxE,MAAMC,UAAUxE,UAAU+D,QAAQnE,mBAAAA;EAElC,MAAMyH,uBAAuB,IAAI7J,qBAAqB;GAClD8J,YAAYtH,UAAU+D,QAAQxK,qBAAqBgO,eAAe;GAClE9C,SAAS;IACL+C,SAAS1D,OAAO2D;IAChBC,WAAW5D,OAAO6D;IAClBC,eAAe9D,OAAO+D;GAC1B;EACJ,CAAA;EAEA,OAAO,IAAIjL,gBAAgB;GACvB6I;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAnC;GACAE;GACA6C;GACAS,0BAA0B,KAAK7C,gCAAgCjF,SAAAA;GAC/D+H,iBAAiB,KAAKC,uBAAuBhI,SAAAA;GAC7CkF,uBAAuB,KAAKC,6BAA6BnF,SAAAA;GAEzDiI,yBAAyBnE,OAAOmE;GAChC3C;GAEAqB;GACAI;GAEAE;GAEAC;GACAgB,mBAAmBpE,OAAOoE;GAE1BC,iBAAiB,IAAIrO,uBAAuBkG,UAAU+D,QAA2BvL,WAAAA,CAAAA;GAEjF4L;EACJ,CAAA;CACJ;CAEAhB,uBAAuBpD,WAAuB;EAC1C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,OAAO,IAAI/C,iBAAiB,EAAEmI,SAASZ,OAAOa,UAAU,CAAA;CAC5D;CAEAtB,yBAAyBrD,WAAuB;EAC5C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,OAAO,IAAIpD,mBAAmB;GAC1BuI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0BrI,SAAAA;EAC5C,CAAA;CACJ;CAEAsD,+BAA+BtD,WAAuB;EAClD,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,OAAO,IAAI9C,yBAAyB;GAChCiI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8BtI,SAAAA;EAChD,CAAA;CACJ;CAEAuD,8BAA8BvD,WAAuB;EACjD,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,OAAO,IAAI7C,wBAAwB;GAC/BgI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8BtI,SAAAA;EAChD,CAAA;CACJ;CAEAsI,8BAA8BtI,WAAuB;EACjD,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMiG,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM2C,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAI/M,sBAAsB;GACzC+M,YAAY,IAAIrO,eAAesM,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAavI,UAAU+D,QAAQrE,gBAAAA;EACrC,MAAM8I,uBAAuBxI,UAAU+D,QAAQpE,gCAAAA;EAE/C,OAAO,IAAI9B,wBAAwB;GAC/B0K;GACAC;GACAlB;GACAa,iBAAiB,IAAIrO,uBAAuBqO,eAAAA;GAC5C7D,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEE,SAAS;IACLgE,yBAAyB3E,OAAO2E;IAChCC,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEAnF,yBAAyBxD,WAAuB;EAC5C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,OAAO,IAAI5C,mBAAmB;GAC1B+H,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0BrI,SAAAA;EAC5C,CAAA;CACJ;CAEAyD,uBAAuBzD,WAAuB;EAC1C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAM+G,gBAAgBrG,UAAU+D,QAAQ3E,qBAAqBkH,aAAa;EAC1E,MAAMlC,iBAAiBpE,UAAU+D,QAAQ5E,2BAA2BkF,cAAc;EAClF,MAAMuE,mBAAmB5I,UAAU+D,QAAQ3E,qBAAqByJ,gBAAgB;EAChF,MAAMV,kBAAkB,IAAIrO,uBAAuBkG,UAAU+D,QAA2BvL,WAAAA,CAAAA;EAExF,MAAMsQ,oBAAoB,IAAInL,wBAAwB;GAClD0I;GACAjC;GACAwE;GACAT;GACA7D,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEwE,iBAAiBjF,OAAOkF;EAC5B,CAAA;EAEA,OAAO,IAAI1M,iBAAiB;GACxBmI,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GACrCmE;EACJ,CAAA;CACJ;CAEAlF,uBAAuB5D,WAAuB;EAC1C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EAEjC,OAAO,IAAI3C,iBAAiB,EAAE8H,SAAS,EAAEG,UAAU,KAAKC,gBAAgBf,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAe,gBAAgBf,QAAyC;EACrD,OAAO;GACHmF,cAAcnF,OAAOoF;GACrBC,kBAAkBrF,OAAO2E;GACzBW,mBAAmBtF,OAAO4E;EAC9B;CACJ;CAEAL,0BAA0BrI,WAAuB;EAC7C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMiG,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM2C,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAI/M,sBAAsB;GACzC+M,YAAY,IAAIrO,eAAesM,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAavI,UAAU+D,QAAQrE,gBAAAA;EACrC,MAAM8I,uBAAuBxI,UAAU+D,QAAQpE,gCAAAA;EAE/C,OAAO,IAAItB,oBAAoB;GAC3BkK;GACAC;GACAlB;GACAa,iBAAiB,IAAIrO,uBAAuBqO,eAAAA;GAC5C7D,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEE,SAAS;IACLyE,qBAAqBpF,OAAOoF;IAC5BR,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEA9E,uBAAuB7D,WAAuB;EAC1C,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMiG,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EAEpE,MAAM6D,iBAAiBrJ,UAAU+D,QAAQ1E,qBAAqBiK,sBAAsB;EAEpF,MAAMtF,aAAahE,UAAU+D,QAAQ3E,qBAAqB6E,uBAAuB;EAEjF,MAAMC,sBAAsBlE,UAAU+D,QAAQ3E,qBAAqB+E,gCAAgC;EAEnG,MAAMoF,eAAevJ,UAAU+D,QAAQ3E,qBAAqBoK,yBAAyB;EAErF,MAAMrB,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAE7D,MAAM8O,aAAa,IAAI9N,kCAAkC;GACrD8N,YAAY,IAAIpP,2BAA2BqN,UAAAA;GAC3C4C;EACJ,CAAA;EAEA,OAAO,IAAIpN,2BAA2B;GAClC0J,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC2C;GACAa,iBAAiB,IAAIrO,uBAAuBqO,eAAAA;GAC5CS,kBAAkB5I,UAAU+D,QAAQ3E,qBAAqByJ,gBAAgB;GAEzEQ;GAEArF;GACAE;GACAqF;GAEArE,uBAAuB,KAAKC,6BAA6BnF,SAAAA;EAC7D,CAAA;CACJ;CAEAY,uBAAuBZ,WAAuB;EAC1C,MAAMmI,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAIlO,wBAAwB;GAC3CkO,YAAYtH,UAAU+D,QAA4BjM,YAAAA;GAClDqQ;EACJ,CAAA;EACA,MAAMsB,yBAAyB,IAAI3P,uBAAuBqO,eAAAA;EAC1D,MAAMC,UAAU,IAAIlL,cAAc;GAC9BoK;GACAa,iBAAiBsB;EACrB,CAAA;EACA,OAAO,IAAIhP,iBAAiB;GACxB2N;GACAd;EACJ,CAAA;CACJ;CAEQoC,2BAA2B1J,WAAoD;EACnF,OAAO,IAAIpG,4BAA4B;GACnC0N,YAAYtH,UAAU+D,QAAgC1L,gBAAAA;GACtD8P,iBAAiBnI,UAAU+D,QAA2BvL,WAAAA;EAC1D,CAAA;CACJ;CAEQmR,qBAAqB3J,WAA8C;EACvE,OAAO,IAAI/F,sBAAsB;GAC7BqN,YAAYtH,UAAU+D,QAA0BrL,UAAAA;GAChDyP,iBAAiBnI,UAAU+D,QAA2BvL,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAMgI,2BAA2BR,WAAuB;EACpD,MAAMuF,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM2C,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAI1N,4BAA4B;GAC/C0N,YAAYtH,UAAU+D,QAAgC1L,gBAAAA;GACtD8P;EACJ,CAAA;EAEA,MAAMsB,yBAAyB,IAAI3P,uBAAuBqO,eAAAA;EAC1D,MAAMyB,iBAAiB,IAAI3P,sBAAsB;GAC7CqN,YAAYtH,UAAU+D,QAA0BrL,UAAAA;GAChDyP;EACJ,CAAA;EACA,MAAM0B,2BAA2B,IAAI7P,gCACjCgG,UAAU+D,QAAoCpL,oBAAAA,CAAAA;EAElD,MAAMmR,mBAAmB,IAAIjQ,wBAAwB;GACjDyN,YAAY,IAAI/O,iBAAiBgN,UAAAA;GACjC4C;EACJ,CAAA;EAEA,MAAM4B,6BAA6B,IAAIpQ,kCACnCqG,UAAU+D,QAAsCzL,sBAAAA,CAAAA;EAGpD,MAAM8P,UAAU,IAAIpK,kBAAkB;GAClCsJ;GACAa,iBAAiBsB;GACjBG;GACAC;GACAC;GACAC;EACJ,CAAA;EAEA,MAAMhD,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMgD,qBAAqB,IAAItQ,2BAA2B6L,UAAAA;EAE1D,MAAM0E,iBAAiB,IAAInM,yBAAyB;GAChDwJ;GACAa,iBAAiBsB;GACjBO;GACAjD;EACJ,CAAA;EAEA,OAAO,IAAI7L,qBAAqB;GAC5BkN;GACA6B;EACJ,CAAA;CACJ;CAEA3J,qBAAqBN,WAAuB;EACxC,MAAMmI,kBAAkB,IAAIrO,uBACxBkG,UAAU+D,QAA2BvL,WAAAA,CAAAA;EAEzC,MAAM8O,aAAa,IAAIrN,sBAAsB;GACzCqN,YAAYtH,UAAU+D,QAA0BrL,UAAAA;GAChDyP,iBAAiBnI,UAAU+D,QAA2BvL,WAAAA;EAC1D,CAAA;EACA,MAAM4P,UAAU,IAAI5J,YAAY;GAC5B8I;GACAa;EACJ,CAAA;EACA,OAAO,IAAI5M,eAAe,EAAE6M,QAAQ,CAAA;CACxC;CAEAtH,iCAAiCd,WAAuB;EACpD,MAAMsH,aAAa,IAAInO,kCACnB6G,UAAU+D,QAAsChM,sBAAAA,CAAAA;EAEpD,MAAMmS,uBAAuB,KAAKR,2BAA2B1J,SAAAA;EAC7D,MAAM+G,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIrL,wBAAwB;GACxCuK;GACA4C;GACAnD;EACJ,CAAA;EACA,OAAO,IAAIrM,2BAA2B,EAAE0N,QAAQ,CAAA;CACpD;CAEApH,2BAA2BhB,WAAuB;EAC9C,MAAMsH,aAAa,IAAIjO,4BACnB2G,UAAU+D,QAAgC/L,gBAAAA,CAAAA;EAE9C,MAAM+O,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIpL,kBAAkB;GAAEsK;GAAYP;EAA2B,CAAA;EAC/E,OAAO,IAAIpM,qBAAqB,EAAEyN,QAAQ,CAAA;CAC9C;CAEAlH,4BAA4BlB,WAAuB;EAC/C,MAAMsH,aAAa,IAAIhO,6BACnB0G,UAAU+D,QAAiC9L,iBAAAA,CAAAA;EAE/C,MAAMmQ,UAAU,IAAInL,mBAAmB,EAAEqK,WAAW,CAAA;EACpD,OAAO,IAAI1M,sBAAsB,EAAEwN,QAAQ,CAAA;CAC/C;CAEAhH,8BAA8BpB,WAAuB;EACjD,MAAMuF,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM8B,aAAa,IAAIvN,+BACnBiG,UAAU+D,QAAmCtL,mBAAAA,CAAAA;EAEjD,MAAM0R,gBAAgB,IAAIC,IACtB7E,WAAW8E,YAAY3R,UAAAA,CAAAA,CAAY4R,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMrC,UAAU,IAAI9J,qBAAqB;GAAEgJ;GAAY6C;EAAc,CAAA;EACrE,OAAO,IAAI7O,wBAAwB,EAAE8M,QAAQ,CAAA;CACjD;CAEA9G,+BAA+BtB,WAAuB;EAClD,MAAMsH,aAAa,IAAItN,gCACnBgG,UAAU+D,QAAoCpL,oBAAAA,CAAAA;EAElD,MAAMuR,uBAAuB,KAAKR,2BAA2B1J,SAAAA;EAC7D,MAAM+G,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI7J,sBAAsB;GACtC+I;GACA4C;GACAnD;EACJ,CAAA;EACA,OAAO,IAAIvL,yBAAyB,EAAE4M,QAAQ,CAAA;CAClD;CAEA1H,iCAAiCV,WAAuB;EACpD,MAAMsH,aAAa,IAAI3N,kCACnBqG,UAAU+D,QAAsCzL,sBAAAA,CAAAA;EAEpD,MAAM8P,UAAU,IAAIrK,wBAAwB,EAAEuJ,WAAW,CAAA;EACzD,OAAO,IAAInM,2BAA2B,EAAEiN,QAAQ,CAAA;CACpD;CAEA5G,sBAAsBxB,WAAuB;EACzC,MAAMmI,kBAAkB,IAAIrO,uBACxBkG,UAAU+D,QAA2BvL,WAAAA,CAAAA;EAEzC,MAAM8O,aAAa,IAAIpN,uBAAuB;GAC1CoN,YAAYtH,UAAU+D,QAA2BnL,WAAAA;GACjDuP,iBAAiBnI,UAAU+D,QAA2BvL,WAAAA;EAC1D,CAAA;EACA,MAAM4P,UAAU,IAAI3J,aAAa;GAC7B6I;GACAa;EACJ,CAAA;EACA,OAAO,IAAI1M,gBAAgB,EAAE2M,QAAQ,CAAA;CACzC;CAEA1G,oBAAoB1B,WAAuB;EAGvC,MAAMoI,UAAU,IAAI7K,WAAW;GAC3B+J,YAAYtH,UAAU+D,QAAQ3E,qBAAqB8G,QAAQ;GAC3D5B,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEmG,gBAAgBzO;EACpB,CAAA;EACA,OAAO,IAAIhB,cAAc,EAAEmN,QAAQ,CAAA;CACvC;CAEAxG,4BAA4B5B,WAAuB;EAC/C,MAAMsH,aAAa,IAAInN,6BACnB6F,UAAU+D,QAAQxK,qBAAqBiM,UAAU,CAAA;EAErD,MAAM4C,UAAU,IAAIzJ,mBAAmB;GACnC2I;GACAhD,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEmG,gBAAgBzO;EACpB,CAAA;EACA,OAAO,IAAIN,sBAAsB,EAAEyM,QAAQ,CAAA;CAC/C;CAEAtG,wBAAwB9B,WAAuB;EAC3C,MAAMsH,aAAatH,UAAU+D,QAAQ5E,2BAA2BwL,iBAAiB;EACjF,MAAMvC,UAAU,IAAI1J,eAAe,EAAE4I,WAAW,CAAA;EAChD,OAAO,IAAI5L,kBAAkB,EAAE0M,QAAQ,CAAA;CAC3C;CAEU/C,qBAAqBrF,WAAwC;EACnE,MAAMsH,aAAatH,UAAU+D,QAAQ3E,qBAAqBwL,iBAAiB;EAC3E,OAAO,IAAIzN,eAAe,EAAEmK,WAAW,CAAA;CAC3C;CAEAtF,wBAAwBhC,WAAuB;EAC3C,OAAO,IAAInF,kBAAkB,EAAEuN,SAAS,KAAK/C,qBAAqBrF,SAAAA,EAAW,CAAA;CACjF;CAEQkF;CAEEC,6BAA6BnF,WAAqD;EACxF,IAAI,KAAKkF,uBACL,OAAO,KAAKA;EAGhB,MAAMK,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EAEpE,KAAKN,wBAAwB,IAAIzH,4BAA4B;GACzDoN,gBAAgB,IAAItS,iBAAiBgN,UAAAA;GACrCwB,4BAA4B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;GACrF1B,QAAQtF,UAAU+D,QAAQtE,kBAAAA;EAC9B,CAAA;EAEA,OAAO,KAAKyF;CAChB;CAEQ4C;CAEE7C,gCAAgCjF,WAAkD;EACxF,IAAI,KAAK8H,0BACL,OAAO,KAAKA;EAGhB,MAAMhE,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMiG,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EAEpE,MAAM8B,aAAa,IAAIjN,mCACnB2F,UAAU+D,QAA4CjL,uBAAAA,CAAAA;EAE1D,MAAMgS,iBAAiB,IAAIvQ,sBAAsB;GAC7C+M,YAAY,IAAIrO,eAAesM,UAAAA;GAC/B4C,iBAAiBnI,UAAU+D,QAA2BvL,WAAAA;EAC1D,CAAA;EAEA,IAAIuS;EACJ,IAAIC;EAKJ,IAAI;GACA,MAAMC,MAAM,IAAIC,IAAIpH,OAAOa,SAAS;GACpCoG,SAASE,IAAIE;GACbH,WAAW;IACPI,MAAMH,IAAIE;IACVE,QAAQN;IACRO,QAAQL,IAAIK;GAChB;EACJ,QAAQ;GACJP,SAASQ,KAAAA;GACTP,WAAWO,KAAAA;EACf;EAEA,KAAKzD,2BAA2B,IAAIhJ,yBAAyB;GACzDwI;GACAwD;GACAU,OAAOxL,UAAU+D,QAAQvE,iBAAAA;GACzBiM,QAAQ,IAAItN,YAAY,EAAE8H,UAAUjG,UAAU+D,QAAQ3E,qBAAqB8G,QAAQ,EAAE,CAAA;GACrF5B,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEgE,YAAYvI,UAAU+D,QAAQrE,gBAAAA;GAC9B8I,sBAAsBxI,UAAU+D,QAAQpE,gCAAAA;GACxC8E,SAAS;IACL+C,SAAS1D,OAAO4H;IAChBC,UAAU7H,OAAO8H;IACjBb;IACAC;GACJ;EACJ,CAAA;EAEA,OAAO,KAAKlD;CAChB;CAEAxF,kCAAkCtC,WAAuB;EACrD,OAAO,IAAInE,4BAA4B,EAAEuM,SAAS,KAAKnD,gCAAgCjF,SAAAA,EAAW,CAAA;CACtG;CAEQ+H;CAEEC,uBAAuBhI,WAA+C;EAC5E,IAAI,KAAK+H,iBACL,OAAO,KAAKA;EAGhB,KAAKA,kBAAkB,IAAInK,sBAAsB;GAC7CwG,gBAAgBpE,UAAU+D,QAAQ5E,2BAA2BkF,cAAc;GAC3EwH,cAAc7L,UAAU+D,QAAQ3E,qBAAqB0M,cAAc;GACnEnG,mBAAmB3F,UAAU+D,QAAQ3E,qBAAqBwG,iBAAiB;GAC3EC,oBAAoB7F,UAAU+D,QAAQ3E,qBAAqB0G,kBAAkB;GAC7ES,iBAAiBvG,UAAU+D,QAAQ3E,qBAAqBoH,eAAe;GACvElC,cAActE,UAAU+D,QAAQxK,qBAAqBgL,YAAY;GACjEC,SAASxE,UAAU+D,QAAQnE,mBAAAA;EAC/B,CAAA;EAEA,OAAO,KAAKmI;CAChB;CAEArE,uCAAuC1D,WAAuB;EAC1D,OAAO,IAAI7D,iCAAiC;GACxCiM,SAAS,KAAKnD,gCAAgCjF,SAAAA;GAC9CoE,gBAAgBpE,UAAU+D,QAAQ5E,2BAA2BkF,cAAc;GAC3E0D,iBAAiB,KAAKC,uBAAuBhI,SAAAA;EACjD,CAAA;CACJ;CAEAE,sBAAsBF,WAAuB;EACzC,MAAMoI,UAAUpI,UAAU+D,QAAQxK,qBAAqBgL,YAAY;EACnE,OAAO,IAAIzJ,gBAAgB,EAAEsN,QAAQ,CAAA;CACzC;CAEA2D,kBAAkB/L,WAAuB;EACrC,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMiG,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM2C,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAI/M,sBAAsB;GACzC+M,YAAY,IAAIrO,eAAesM,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMsB,yBAAyB,IAAI3P,uBAAuBqO,eAAAA;EAC1D,OAAO,IAAIlJ,YAAY;GACnBqI;GACAa,iBAAiBsB;GACjBd,mBAAmB7E,OAAO6E;EAC9B,CAAA;CACJ;CAEAzG,qBAAqBlC,WAAuB;EACxC,OAAO,IAAIlE,eAAe,EAAEsM,SAAS,KAAK2D,kBAAkB/L,SAAAA,EAAW,CAAA;CAC3E;CAEA2D,yBAAyB3D,WAAuB;EAC5C,OAAO,IAAInD,mBAAmB,EAAEuL,SAAS,KAAK2D,kBAAkB/L,SAAAA,EAAW,CAAA;CAC/E;CAEAoC,8BAA8BpC,WAAuB;EACjD,MAAMuF,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM8B,aAAa,IAAIlN,+BACnB4F,UAAU+D,QAAmClL,mBAAAA,CAAAA;EAEjD,MAAMsR,gBAAgB,IAAIC,IACtB7E,WAAW8E,YAAYtR,UAAAA,CAAAA,CAAYuR,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMrC,UAAU,IAAIxJ,qBAAqB;GAAE0I;GAAY6C;EAAc,CAAA;EACrE,OAAO,IAAIvO,wBAAwB,EAAEwM,QAAQ,CAAA;CACjD;CAEA5F,+BAA+BxC,WAAuB;EAClD,MAAMsH,aAAa,IAAIhN,gCACnB0F,UAAU+D,QAAoC/K,oBAAAA,CAAAA;EAElD,MAAMkR,uBAAuB,KAAKR,2BAA2B1J,SAAAA;EAC7D,MAAM+G,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIrJ,sBAAsB;GACtCuI;GACA4C;GACAnD;EACJ,CAAA;EACA,OAAO,IAAIhL,yBAAyB,EAAEqM,QAAQ,CAAA;CAClD;CAEA1F,yBAAyB1C,WAAuB;EAC5C,MAAMsH,aAAa,IAAI9M,0BACnBwF,UAAU+D,QAA8B7K,cAAAA,CAAAA;EAE5C,MAAM6N,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIpJ,gBAAgB;GAAEsI;GAAYP;EAA2B,CAAA;EAC7E,OAAO,IAAI/K,mBAAmB,EAAEoM,QAAQ,CAAA;CAC5C;CAEAxF,uBAAuB5C,WAAuB;EAC1C,MAAMuF,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM2C,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAIzN,wBAAwB;GAC3CyN,YAAY,IAAI/O,iBAAiBgN,UAAAA;GACjC4C;EACJ,CAAA;EACA,MAAMsB,yBAAyB,IAAI3P,uBAAuBqO,eAAAA;EAC1D,MAAMC,UAAU,IAAIlK,cAAc;GAC9BoJ;GACAa,iBAAiBsB;EACrB,CAAA;EACA,MAAM1C,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMiD,iBAAiB,IAAIhM,qBAAqB;GAC5CqJ;GACAa,iBAAiBsB;GACjB1C;EACJ,CAAA;EAEA,OAAO,IAAI3L,iBAAiB;GACxBgN;GACA6B;EACJ,CAAA;CACJ;CAEAnH,qCAAqC9C,WAAuB;EACxD,MAAMsH,aAAa,IAAI7N,6CACnBuG,UAAU+D,QAAyB5L,iCAAAA,CAAAA;EAEvC,MAAMyR,iBAAiB,KAAKD,qBAAqB3J,SAAAA;EACjD,MAAM+G,6BAA6B/G,UAAU+D,QAAQ1E,qBAAqB2H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI/K,mCAAmC;GACnDiK;GACAsC;GACA7C;EACJ,CAAA;EACA,OAAO,IAAI/L,sCAAsC,EAAEoN,QAAQ,CAAA;CAC/D;CAEAjF,oBAAoBnD,WAAuB;EAEvC,MAAMsH,aADatH,UAAU+D,QAAQxK,qBAAqBiM,UACvCD,CAAAA,CAAWyG,cAAc5T,SAAAA;EAC5C,OAAO,IAAIiE,cAAc,EAAEiL,WAAW,CAAA;CAC1C;CAEAlH,sBAAsBJ,WAAuB;EACzC,MAAM8D,SAAS9D,UAAU+D,QAAQzE,kBAAAA;EACjC,MAAMiG,aAAavF,UAAU+D,QAAQxK,qBAAqBiM,UAAU;EACpE,MAAM2C,kBAAkBnI,UAAU+D,QAA2BvL,WAAAA;EAC7D,MAAM8O,aAAa,IAAIxN,uBAAuBqO,eAAAA;EAE9C,MAAMS,mBAAmB,IAAIxP,wBAAwB;GACjDkO,YAAYtH,UAAU+D,QAA4BjM,YAAAA;GAClDqQ;EACJ,CAAA;EACA,MAAM7C,SAAStF,UAAU+D,QAAQtE,kBAAAA;EACjC,MAAMwM,uBAAuB,IAAI/M,qBAAqB;GAClD0J;GACAsD,iBAAiB,IAAIhS,uBAAuB;IACxCoN,YAAYtH,UAAU+D,QAA2BnL,WAAAA;IACjDuP;GACJ,CAAA;GACAgE,uBAAuB,IAAI7S,6BACvB0G,UAAU+D,QAAiC9L,iBAAAA,CAAAA;GAE/CmU,YAAY7M,cAAcuE,MAAAA;GAC1BwB;EACJ,CAAA;EACA,MAAM+G,iBAAiB,IAAI/O,eAAe;GACtC2I,UAAUjG,UAAU+D,QAAQ3E,qBAAqB8G,QAAQ;GACzDZ;EACJ,CAAA;EAEA,MAAM8C,UAAU,IAAIhK,aAAa;GAC7BkJ;GACA2E;GACAI;GACA/G;EACJ,CAAA;EACA,MAAMgH,gBAAgB/G,WAAWyG,cAAc5T,SAAAA;EAE/C,OAAO,IAAIiD,gBAAgB;GACvBoJ,SAAS;IACLC,SAASZ,OAAOa;IAChB4H,aAAazI,OAAO0I;IACpBC,2BAA2B3I,OAAOoE,sBAAsB;GAC5D;GACAE;GACAkE;EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserAuthenticatorEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","TrustAnchorRepositoryAdapter","UserAttributeRepositoryAdapter","UserAuthenticatorRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","ConsentController","EventController","IdentityProviderController","IdentityProviderRoleMappingController","KeyController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","TrustAnchorController","UserAttributeController","UserAuthenticatorController","UserController","UserPermissionController","UserRoleController","useRequestEventContext","AccountController","ActivateController","AuthenticatorChallengeController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","UserInfoController","ClientCertificateValidator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","ConsentService","CredentialsAuthenticator","IdentityProviderRoleMappingService","KeyProvisioner","KeyService","LoginThrottleService","OAuth2AccessPolicyEvaluator","OAuth2ClientAuthenticator","OAuth2EndSessionService","OAuth2MfaLoginService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmCipher","RealmService","RegistrationService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","SystemClientProvisioner","TrustAnchorService","UserAttributeService","UserAuthenticator","UserAuthenticatorService","UserPermissionService","UserRoleService","UserService","AuthenticationInjectionKey","OAuth2InjectionToken","LazyWildcardRealmProvisioner","IdentityInjectionKey","ConfigInjectionKey","getAppOrigins","CacheInjectionKey","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","MetricsInjectionKey","HTTPControllerModule","mount","router","container","eventController","createEventController","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","keyController","createKeyController","trustAnchorController","createTrustAnchorController","sessionController","createSessionController","consentController","createConsentController","userController","createUserController","userAttributeController","createUserAttributeController","userAuthenticatorController","createUserAuthenticatorController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createAuthenticatorChallengeController","createUserInfoController","createAccountController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","eventService","EventService","metrics","options","baseURL","publicUrl","features","buildUIFeatures","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","resolveUserAuthenticatorService","accessPolicyEvaluator","resolveAccessPolicyEvaluator","consentService","createConsentService","logger","dataSource","DataSource","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyStore","KeyStore","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","userAuthenticator","oauth2ClientAuthenticator","certificateValidator","trustAnchorRepository","loginThrottleService","repository","EventRepository","enabled","loginAttemptThrottleEnabled","threshold","loginAttemptThreshold","windowSeconds","loginAttemptWindow","userAuthenticatorService","mfaLoginService","resolveMfaLoginService","tokenRefreshGracePeriod","certificateSource","realmRepository","service","createRegistrationService","createPasswordRecoveryService","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","trustedOrigins","registration","registrationEnabled","passwordRecovery","emailVerification","accountConsole","accountConsoleEnabled","accountManager","ProviderAccountManager","stateManager","AuthorizationStateManager","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","requestContext","SessionRepository","ConsentRepository","policyProvider","userRepository","issuer","webauthn","url","URL","hostname","rpId","rpName","origin","undefined","cache","cipher","mfaEnabled","required","mfaRequired","ticketIssuer","MfaTokenIssuer","createUserService","getRepository","systemClientProvisioner","scopeRepository","clientScopeRepository","appOrigins","keyProvisioner","realmProvisioners","keyRepository","mtlsBaseURL","mtlsPublicUrl","clientCertificatesEnabled"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserAuthenticator as UserAuthenticatorModel,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserAuthenticatorEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    TrustAnchorRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserAuthenticatorRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    ConsentController,\n    EventController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    KeyController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    TrustAnchorController,\n    UserAttributeController,\n    UserAuthenticatorController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n    useRequestEventContext,\n} from '../../../../adapters/http/index.ts';\nimport {\n    AccountController,\n    ActivateController,\n    AuthenticatorChallengeController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n    UserInfoController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCertificateValidator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    ConsentService,\n    CredentialsAuthenticator,\n    IdentityProviderRoleMappingService,\n    KeyProvisioner,\n    KeyService,\n    LoginThrottleService,\n    OAuth2AccessPolicyEvaluator,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    OAuth2MfaLoginService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmCipher,\n    RealmService,\n    RegistrationService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    SystemClientProvisioner,\n    TrustAnchorService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserAuthenticatorService,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { LazyWildcardRealmProvisioner } from '../../provisioning/lazy-wildcard.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { CacheInjectionKey } from '../../cache/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\nimport { MetricsInjectionKey } from '../../metrics/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const eventController = this.createEventController(container);\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const keyController = this.createKeyController(container);\n        const trustAnchorController = this.createTrustAnchorController(container);\n        const sessionController = this.createSessionController(container);\n        const consentController = this.createConsentController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userAuthenticatorController = this.createUserAuthenticatorController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n                this.createAuthenticatorChallengeController(container),\n                this.createUserInfoController(container),\n                this.createAccountController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                consentController,\n                eventController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                keyController,\n                trustAnchorController,\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                userController,\n                userAttributeController,\n                userAuthenticatorController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n                mfaFreshnessMaxAge: config.mfaFreshnessMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n\n            eventService,\n            metrics,\n\n            mfaChallengeProvider: this.resolveUserAuthenticatorService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            consentService: this.createConsentService(container),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyStore = container.resolve(OAuth2InjectionToken.KeyStore);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator({\n            identityResolver,\n            certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) }),\n        });\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        const loginThrottleService = new LoginThrottleService({\n            repository: container.resolve(DatabaseInjectionKey.EventRepository),\n            options: {\n                enabled: config.loginAttemptThrottleEnabled,\n                threshold: config.loginAttemptThreshold,\n                windowSeconds: config.loginAttemptWindow,\n            },\n        });\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyStore,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            eventService,\n            metrics,\n            loginThrottleService,\n            userAuthenticatorService: this.resolveUserAuthenticatorService(container),\n            mfaLoginService: this.resolveMfaLoginService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n            certificateSource: config.certificateSource,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { baseURL: config.publicUrl },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    createAccountController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new AccountController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                trustedOrigins: getAppOrigins(config),\n            },\n        });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n            accountConsole: config.accountConsoleEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            clientRepository: container.resolve(OAuth2InjectionToken.ClientRepository),\n\n            accountManager,\n\n            codeIssuer,\n            codeRequestVerifier,\n            stateManager,\n\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createKeyController(container: IContainer) {\n        // the DI singleton carries the optional KEK cipher — never construct\n        // a fresh adapter here.\n        const service = new KeyService({\n            repository: container.resolve(OAuth2InjectionToken.KeyStore),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new KeyController({ service });\n    }\n\n    createTrustAnchorController(container: IContainer) {\n        const repository = new TrustAnchorRepositoryAdapter(\n            container.resolve(DatabaseInjectionKey.DataSource),\n        );\n        const service = new TrustAnchorService({\n            repository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new TrustAnchorController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({ repository });\n        return new SessionController({ service });\n    }\n\n    protected createConsentService(container: IContainer) : ConsentService {\n        const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);\n        return new ConsentService({ repository });\n    }\n\n    createConsentController(container: IContainer) {\n        return new ConsentController({ service: this.createConsentService(container) });\n    }\n\n    private accessPolicyEvaluator? : OAuth2AccessPolicyEvaluator;\n\n    protected resolveAccessPolicyEvaluator(container: IContainer) : OAuth2AccessPolicyEvaluator {\n        if (this.accessPolicyEvaluator) {\n            return this.accessPolicyEvaluator;\n        }\n\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        this.accessPolicyEvaluator = new OAuth2AccessPolicyEvaluator({\n            policyProvider: new PolicyRepository(dataSource),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        return this.accessPolicyEvaluator;\n    }\n\n    private userAuthenticatorService? : UserAuthenticatorService;\n\n    protected resolveUserAuthenticatorService(container: IContainer) : UserAuthenticatorService {\n        if (this.userAuthenticatorService) {\n            return this.userAuthenticatorService;\n        }\n\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const repository = new UserAuthenticatorRepositoryAdapter(\n            container.resolve<Repository<UserAuthenticatorModel>>(UserAuthenticatorEntity),\n        );\n        const userRepository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n\n        let issuer : string | undefined;\n        let webauthn : {\n            rpId: string, \n            rpName: string, \n            origin: string \n        } | undefined;\n        try {\n            const url = new URL(config.publicUrl);\n            issuer = url.hostname;\n            webauthn = {\n                rpId: url.hostname,\n                rpName: issuer,\n                origin: url.origin,\n            };\n        } catch {\n            issuer = undefined;\n            webauthn = undefined;\n        }\n\n        this.userAuthenticatorService = new UserAuthenticatorService({\n            repository,\n            userRepository,\n            cache: container.resolve(CacheInjectionKey),\n            cipher: new RealmCipher({ keyStore: container.resolve(OAuth2InjectionToken.KeyStore) }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            mailClient: container.resolve(MailInjectionKey),\n            mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),\n            options: {\n                enabled: config.mfaEnabled,\n                required: config.mfaRequired,\n                issuer,\n                webauthn,\n            },\n        });\n\n        return this.userAuthenticatorService;\n    }\n\n    createUserAuthenticatorController(container: IContainer) {\n        return new UserAuthenticatorController({ service: this.resolveUserAuthenticatorService(container) });\n    }\n\n    private mfaLoginService? : OAuth2MfaLoginService;\n\n    protected resolveMfaLoginService(container: IContainer) : OAuth2MfaLoginService {\n        if (this.mfaLoginService) {\n            return this.mfaLoginService;\n        }\n\n        this.mfaLoginService = new OAuth2MfaLoginService({\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            ticketIssuer: container.resolve(OAuth2InjectionToken.MfaTokenIssuer),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n            tokenRepository: container.resolve(OAuth2InjectionToken.TokenRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            metrics: container.resolve(MetricsInjectionKey),\n        });\n\n        return this.mfaLoginService;\n    }\n\n    createAuthenticatorChallengeController(container: IContainer) {\n        return new AuthenticatorChallengeController({\n            service: this.resolveUserAuthenticatorService(container),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            mfaLoginService: this.resolveMfaLoginService(container),\n        });\n    }\n\n    createEventController(container: IContainer) {\n        const service = container.resolve(DatabaseInjectionKey.EventService);\n        return new EventController({ service });\n    }\n\n    createUserService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        return new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n    }\n\n    createUserController(container: IContainer) {\n        return new UserController({ service: this.createUserService(container) });\n    }\n\n    createUserInfoController(container: IContainer) {\n        return new UserInfoController({ service: this.createUserService(container) });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const systemClientProvisioner = new SystemClientProvisioner({\n            clientRepository,\n            scopeRepository: new ScopeRepositoryAdapter({\n                repository: container.resolve<Repository<Scope>>(ScopeEntity),\n                realmRepository,\n            }),\n            clientScopeRepository: new ClientScopeRepositoryAdapter(\n                container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n            ),\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n        const keyProvisioner = new KeyProvisioner({\n            keyStore: container.resolve(OAuth2InjectionToken.KeyStore),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            realmProvisioners: [\n                systemClientProvisioner,\n                keyProvisioner,\n                new LazyWildcardRealmProvisioner(container),\n            ],\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: {\n                baseURL: config.publicUrl,\n                mtlsBaseURL: config.mtlsPublicUrl,\n                clientCertificatesEnabled: config.certificateSource !== 'disabled',\n            },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwKA,IAAakI,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,kBAAkB,KAAKC,sBAAsBJ,SAAAA;EACnD,MAAMK,iBAAiB,KAAKC,qBAAqBN,SAAAA;EACjD,MAAMO,uBAAuB,MAAM,KAAKC,2BAA2BR,SAAAA;EACnE,MAAMS,6BAA6B,KAAKC,iCAAiCV,SAAAA;EACzE,MAAMW,mBAAmB,KAAKC,uBAAuBZ,SAAAA;EACrD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,0BAA0B,KAAKC,8BAA8BpB,SAAAA;EACnE,MAAMqB,2BAA2B,KAAKC,+BAA+BtB,SAAAA;EACrE,MAAMuB,kBAAkB,KAAKC,sBAAsBxB,SAAAA;EACnD,MAAMyB,gBAAgB,KAAKC,oBAAoB1B,SAAAA;EAC/C,MAAM2B,wBAAwB,KAAKC,4BAA4B5B,SAAAA;EAC/D,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,oBAAoB,KAAKC,wBAAwBhC,SAAAA;EACvD,MAAMiC,iBAAiB,KAAKC,qBAAqBlC,SAAAA;EACjD,MAAMmC,0BAA0B,KAAKC,8BAA8BpC,SAAAA;EACnE,MAAMqC,8BAA8B,KAAKC,kCAAkCtC,SAAAA;EAC3E,MAAMuC,2BAA2B,KAAKC,+BAA+BxC,SAAAA;EACrE,MAAMyC,qBAAqB,KAAKC,yBAAyB1C,SAAAA;EACzD,MAAM2C,mBAAmB,KAAKC,uBAAuB5C,SAAAA;EACrD,MAAM6C,iCAAiC,KAAKC,qCAAqC9C,SAAAA;EAEjFD,OAAOgD,IAAIpL,WAAW,EAClBqL,aAAa;GACT,KAAKC,gBAAgBjD,SAAAA;GACrB,KAAKkD,YAAYlD,SAAAA;GACjB,KAAKmD,oBAAoBnD,SAAAA;GACzB,KAAKoD,uBAAuBpD,SAAAA;GAC5B,KAAKqD,yBAAyBrD,SAAAA;GAC9B,KAAKsD,+BAA+BtD,SAAAA;GACpC,KAAKuD,8BAA8BvD,SAAAA;GACnC,KAAKwD,yBAAyBxD,SAAAA;GAC9B,KAAKyD,uBAAuBzD,SAAAA;GAC5B,KAAK0D,uCAAuC1D,SAAAA;GAC5C,KAAK2D,yBAAyB3D,SAAAA;GAC9B,KAAK4D,wBAAwB5D,SAAAA;GAE7B,KAAK6D,uBAAuB7D,SAAAA;GAE5BW;GACAE;GACAE;GACAE;GACAc;GACA9B;GACA4C;GACA,KAAKiB,uBAAuB9D,SAAAA;GAC5ByB;GACAE;GACApB;GACAE;GACAkC;GACAxC;GACAE;GACAc;GACAE;GACAE;GACAM;GACAI;GACAE;GACAE;GACAE;GACAE;EACH,EACL,CAAA,CAAA;CACJ;CAIAQ,gBAAgBjD,WAAuB;EACnC,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,MAAM2E,aAAajE,UAAUgE,QAAQ7E,qBAAqB+E,uBAAuB;EACjF,MAAMC,sBAAsBnE,UAAUgE,QAAQ7E,qBAAqBiF,gCAAgC;EAEnG,MAAMC,iBAAiBrE,UAAUgE,QAAQ9E,2BAA2BoF,cAAc;EAElF,MAAMC,eAAevE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;EACxE,MAAMC,UAAUzE,UAAUgE,QAAQpE,mBAAAA;EAElC,OAAO,IAAIzD,oBAAoB;GAC3BuI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;IAC/BgB,mBAAmBhB,OAAOgB;IAC1BC,oBAAoBjB,OAAOiB;GAC/B;GAEAf;GACAE;GAEAE;GAEAE;GACAE;GAEAQ,sBAAsB,KAAKC,gCAAgClF,SAAAA;GAC3DmF,uBAAuB,KAAKC,6BAA6BpF,SAAAA;GAEzDqF,gBAAgB,KAAKC,qBAAqBtF,SAAAA;GAC1CuF,QAAQvF,UAAUgE,QAAQvE,kBAAAA;EAC9B,CAAA;CACJ;CAEAyD,YAAYlD,WAAuB;EAC/B,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMiG,SAASvF,UAAUgE,QAAQvE,kBAAAA;EACjC,MAAM+F,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EAEpE,MAAMpB,iBAAiBrE,UAAUgE,QAAQ9E,2BAA2BoF,cAAc;EAElF,MAAMoB,eAAe1F,UAAUgE,QAAQ7E,qBAAqBwG,yBAAyB;EAErF,MAAMC,oBAAoB5F,UAAUgE,QAAQ7E,qBAAqB0G,iBAAiB;EAClF,MAAMC,qBAAqB9F,UAAUgE,QAAQ7E,qBAAqB4G,kBAAkB;EACpF,MAAMC,oBAAoBhG,UAAUgE,QAAQ7E,qBAAqB8G,iBAAiB;EAClF,MAAMC,WAAWlG,UAAUgE,QAAQ7E,qBAAqBgH,QAAQ;EAEhE,MAAMC,eAAepG,UAAUgE,QAAQ7E,qBAAqBkH,YAAY;EACxE,MAAMC,gBAAgBtG,UAAUgE,QAAQ7E,qBAAqBoH,aAAa;EAC1E,MAAMC,kBAAkBxG,UAAUgE,QAAQ7E,qBAAqBsH,eAAe;EAC9E,MAAMC,yBAAyB1G,UAAUgE,QAAQ7E,qBAAqBwH,sBAAsB;EAE5F,MAAMC,mBAAmB5G,UAAUgE,QAAQ3E,qBAAqBwH,QAAQ;EACxE,MAAMC,8CAA8C9G,UAAUgE,QAAQ3E,qBAAqB0H,mCAAmC;EAE9H,MAAMC,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAE5F,MAAMC,oBAAoB,IAAI/J,yBAAyB,CACnD2J,6CACA,IAAIjI,kBAAkB+H,gBAAAA,CACzB,CAAA;EAED,MAAMO,4BAA4B,IAAI1J,0BAA0B;GAC5DmJ;GACAQ,sBAAsB,IAAIvK,2BAA2B,EAAEwK,uBAAuB,IAAIpN,6BAA6BuL,UAAAA,EAAY,CAAA;EAC/H,CAAA;EAEA,MAAMjB,eAAevE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;EACxE,MAAMC,UAAUzE,UAAUgE,QAAQpE,mBAAAA;EAElC,MAAM0H,uBAAuB,IAAI/J,qBAAqB;GAClDgK,YAAYvH,UAAUgE,QAAQ3K,qBAAqBmO,eAAe;GAClE9C,SAAS;IACL+C,SAAS1D,OAAO2D;IAChBC,WAAW5D,OAAO6D;IAClBC,eAAe9D,OAAO+D;GAC1B;EACJ,CAAA;EAEA,OAAO,IAAInL,gBAAgB;GACvB+I;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAnC;GACAE;GACA6C;GACAS,0BAA0B,KAAK7C,gCAAgClF,SAAAA;GAC/DgI,iBAAiB,KAAKC,uBAAuBjI,SAAAA;GAC7CmF,uBAAuB,KAAKC,6BAA6BpF,SAAAA;GAEzDkI,yBAAyBnE,OAAOmE;GAChC3C;GAEAqB;GACAI;GAEAE;GAEAC;GACAgB,mBAAmBpE,OAAOoE;GAE1BC,iBAAiB,IAAIxO,uBAAuBoG,UAAUgE,QAA2B1L,WAAAA,CAAAA;GAEjF+L;EACJ,CAAA;CACJ;CAEAjB,uBAAuBpD,WAAuB;EAC1C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAIhD,iBAAiB,EAAEqI,SAASZ,OAAOa,UAAU,CAAA;CAC5D;CAEAvB,yBAAyBrD,WAAuB;EAC5C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAIrD,mBAAmB;GAC1ByI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0BtI,SAAAA;EAC5C,CAAA;CACJ;CAEAsD,+BAA+BtD,WAAuB;EAClD,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAI/C,yBAAyB;GAChCmI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8BvI,SAAAA;EAChD,CAAA;CACJ;CAEAuD,8BAA8BvD,WAAuB;EACjD,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAI9C,wBAAwB;GAC/BkI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8BvI,SAAAA;EAChD,CAAA;CACJ;CAEAuI,8BAA8BvI,WAAuB;EACjD,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMkG,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM2C,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAIlN,sBAAsB;GACzCkN,YAAY,IAAIxO,eAAeyM,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAaxI,UAAUgE,QAAQtE,gBAAAA;EACrC,MAAM+I,uBAAuBzI,UAAUgE,QAAQrE,gCAAAA;EAE/C,OAAO,IAAI/B,wBAAwB;GAC/B4K;GACAC;GACAlB;GACAa,iBAAiB,IAAIxO,uBAAuBwO,eAAAA;GAC5C7D,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEE,SAAS;IACLgE,yBAAyB3E,OAAO2E;IAChCC,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEApF,yBAAyBxD,WAAuB;EAC5C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAI7C,mBAAmB;GAC1BiI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0BtI,SAAAA;EAC5C,CAAA;CACJ;CAEAyD,uBAAuBzD,WAAuB;EAC1C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMgH,gBAAgBtG,UAAUgE,QAAQ7E,qBAAqBoH,aAAa;EAC1E,MAAMlC,iBAAiBrE,UAAUgE,QAAQ9E,2BAA2BoF,cAAc;EAClF,MAAMuE,mBAAmB7I,UAAUgE,QAAQ7E,qBAAqB2J,gBAAgB;EAChF,MAAMV,kBAAkB,IAAIxO,uBAAuBoG,UAAUgE,QAA2B1L,WAAAA,CAAAA;EAExF,MAAMyQ,oBAAoB,IAAIrL,wBAAwB;GAClD4I;GACAjC;GACAwE;GACAT;GACA7D,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEwE,iBAAiBjF,OAAOkF;EAC5B,CAAA;EAEA,OAAO,IAAI5M,iBAAiB;GACxBqI,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GACrCmE;EACJ,CAAA;CACJ;CAEAlF,uBAAuB7D,WAAuB;EAC1C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAI5C,iBAAiB,EAAEgI,SAAS,EAAEG,UAAU,KAAKC,gBAAgBf,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAH,wBAAwB5D,WAAuB;EAC3C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EAEjC,OAAO,IAAItD,kBAAkB,EACzB0I,SAAS;GACLC,SAASZ,OAAOa;GAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GAC/BmF,gBAAgB3J,cAAcwE,MAAAA;EAClC,EACJ,CAAA;CACJ;CAEAe,gBAAgBf,QAAyC;EACrD,OAAO;GACHoF,cAAcpF,OAAOqF;GACrBC,kBAAkBtF,OAAO2E;GACzBY,mBAAmBvF,OAAO4E;GAC1BY,gBAAgBxF,OAAOyF;EAC3B;CACJ;CAEAlB,0BAA0BtI,WAAuB;EAC7C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMkG,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM2C,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAIlN,sBAAsB;GACzCkN,YAAY,IAAIxO,eAAeyM,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAaxI,UAAUgE,QAAQtE,gBAAAA;EACrC,MAAM+I,uBAAuBzI,UAAUgE,QAAQrE,gCAAAA;EAE/C,OAAO,IAAIvB,oBAAoB;GAC3BoK;GACAC;GACAlB;GACAa,iBAAiB,IAAIxO,uBAAuBwO,eAAAA;GAC5C7D,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEE,SAAS;IACL0E,qBAAqBrF,OAAOqF;IAC5BT,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEA9E,uBAAuB9D,WAAuB;EAC1C,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMkG,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EAEpE,MAAMgE,iBAAiBzJ,UAAUgE,QAAQ3E,qBAAqBqK,sBAAsB;EAEpF,MAAMzF,aAAajE,UAAUgE,QAAQ7E,qBAAqB+E,uBAAuB;EAEjF,MAAMC,sBAAsBnE,UAAUgE,QAAQ7E,qBAAqBiF,gCAAgC;EAEnG,MAAMuF,eAAe3J,UAAUgE,QAAQ7E,qBAAqByK,yBAAyB;EAErF,MAAMxB,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAE7D,MAAMiP,aAAa,IAAIjO,kCAAkC;GACrDiO,YAAY,IAAIvP,2BAA2BwN,UAAAA;GAC3C4C;EACJ,CAAA;EAEA,OAAO,IAAIvN,2BAA2B;GAClC6J,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC2C;GACAa,iBAAiB,IAAIxO,uBAAuBwO,eAAAA;GAC5CS,kBAAkB7I,UAAUgE,QAAQ7E,qBAAqB2J,gBAAgB;GAEzEW;GAEAxF;GACAE;GACAwF;GAEAxE,uBAAuB,KAAKC,6BAA6BpF,SAAAA;EAC7D,CAAA;CACJ;CAEAY,uBAAuBZ,WAAuB;EAC1C,MAAMoI,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAIrO,wBAAwB;GAC3CqO,YAAYvH,UAAUgE,QAA4BpM,YAAAA;GAClDwQ;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAIjQ,uBAAuBwO,eAAAA;EAC1D,MAAMC,UAAU,IAAIpL,cAAc;GAC9BsK;GACAa,iBAAiByB;EACrB,CAAA;EACA,OAAO,IAAItP,iBAAiB;GACxB8N;GACAd;EACJ,CAAA;CACJ;CAEQuC,2BAA2B9J,WAAoD;EACnF,OAAO,IAAItG,4BAA4B;GACnC6N,YAAYvH,UAAUgE,QAAgC7L,gBAAAA;GACtDiQ,iBAAiBpI,UAAUgE,QAA2B1L,WAAAA;EAC1D,CAAA;CACJ;CAEQyR,qBAAqB/J,WAA8C;EACvE,OAAO,IAAIjG,sBAAsB;GAC7BwN,YAAYvH,UAAUgE,QAA0BxL,UAAAA;GAChD4P,iBAAiBpI,UAAUgE,QAA2B1L,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAMkI,2BAA2BR,WAAuB;EACpD,MAAMwF,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM2C,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAI7N,4BAA4B;GAC/C6N,YAAYvH,UAAUgE,QAAgC7L,gBAAAA;GACtDiQ;EACJ,CAAA;EAEA,MAAMyB,yBAAyB,IAAIjQ,uBAAuBwO,eAAAA;EAC1D,MAAM4B,iBAAiB,IAAIjQ,sBAAsB;GAC7CwN,YAAYvH,UAAUgE,QAA0BxL,UAAAA;GAChD4P;EACJ,CAAA;EACA,MAAM6B,2BAA2B,IAAInQ,gCACjCkG,UAAUgE,QAAoCvL,oBAAAA,CAAAA;EAElD,MAAMyR,mBAAmB,IAAIvQ,wBAAwB;GACjD4N,YAAY,IAAIlP,iBAAiBmN,UAAAA;GACjC4C;EACJ,CAAA;EAEA,MAAM+B,6BAA6B,IAAI1Q,kCACnCuG,UAAUgE,QAAsC5L,sBAAAA,CAAAA;EAGpD,MAAMiQ,UAAU,IAAItK,kBAAkB;GAClCwJ;GACAa,iBAAiByB;GACjBG;GACAC;GACAC;GACAC;EACJ,CAAA;EAEA,MAAMnD,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMmD,qBAAqB,IAAI5Q,2BAA2BgM,UAAAA;EAE1D,MAAM6E,iBAAiB,IAAIxM,yBAAyB;GAChD0J;GACAa,iBAAiByB;GACjBO;GACApD;EACJ,CAAA;EAEA,OAAO,IAAIhM,qBAAqB;GAC5BqN;GACAgC;EACJ,CAAA;CACJ;CAEA/J,qBAAqBN,WAAuB;EACxC,MAAMoI,kBAAkB,IAAIxO,uBACxBoG,UAAUgE,QAA2B1L,WAAAA,CAAAA;EAEzC,MAAMiP,aAAa,IAAIxN,sBAAsB;GACzCwN,YAAYvH,UAAUgE,QAA0BxL,UAAAA;GAChD4P,iBAAiBpI,UAAUgE,QAA2B1L,WAAAA;EAC1D,CAAA;EACA,MAAM+P,UAAU,IAAI9J,YAAY;GAC5BgJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAI/M,eAAe,EAAEgN,QAAQ,CAAA;CACxC;CAEAvH,iCAAiCd,WAAuB;EACpD,MAAMuH,aAAa,IAAItO,kCACnB+G,UAAUgE,QAAsCnM,sBAAAA,CAAAA;EAEpD,MAAMyS,uBAAuB,KAAKR,2BAA2B9J,SAAAA;EAC7D,MAAMgH,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIvL,wBAAwB;GACxCyK;GACA+C;GACAtD;EACJ,CAAA;EACA,OAAO,IAAIxM,2BAA2B,EAAE6N,QAAQ,CAAA;CACpD;CAEArH,2BAA2BhB,WAAuB;EAC9C,MAAMuH,aAAa,IAAIpO,4BACnB6G,UAAUgE,QAAgClM,gBAAAA,CAAAA;EAE9C,MAAMkP,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAItL,kBAAkB;GAAEwK;GAAYP;EAA2B,CAAA;EAC/E,OAAO,IAAIvM,qBAAqB,EAAE4N,QAAQ,CAAA;CAC9C;CAEAnH,4BAA4BlB,WAAuB;EAC/C,MAAMuH,aAAa,IAAInO,6BACnB4G,UAAUgE,QAAiCjM,iBAAAA,CAAAA;EAE/C,MAAMsQ,UAAU,IAAIrL,mBAAmB,EAAEuK,WAAW,CAAA;EACpD,OAAO,IAAI7M,sBAAsB,EAAE2N,QAAQ,CAAA;CAC/C;CAEAjH,8BAA8BpB,WAAuB;EACjD,MAAMwF,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM8B,aAAa,IAAI1N,+BACnBmG,UAAUgE,QAAmCzL,mBAAAA,CAAAA;EAEjD,MAAMgS,gBAAgB,IAAIC,IACtBhF,WAAWiF,YAAYjS,UAAAA,CAAAA,CAAYkS,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMxC,UAAU,IAAIhK,qBAAqB;GAAEkJ;GAAYgD;EAAc,CAAA;EACrE,OAAO,IAAInP,wBAAwB,EAAEiN,QAAQ,CAAA;CACjD;CAEA/G,+BAA+BtB,WAAuB;EAClD,MAAMuH,aAAa,IAAIzN,gCACnBkG,UAAUgE,QAAoCvL,oBAAAA,CAAAA;EAElD,MAAM6R,uBAAuB,KAAKR,2BAA2B9J,SAAAA;EAC7D,MAAMgH,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI/J,sBAAsB;GACtCiJ;GACA+C;GACAtD;EACJ,CAAA;EACA,OAAO,IAAI1L,yBAAyB,EAAE+M,QAAQ,CAAA;CAClD;CAEA3H,iCAAiCV,WAAuB;EACpD,MAAMuH,aAAa,IAAI9N,kCACnBuG,UAAUgE,QAAsC5L,sBAAAA,CAAAA;EAEpD,MAAMiQ,UAAU,IAAIvK,wBAAwB,EAAEyJ,WAAW,CAAA;EACzD,OAAO,IAAItM,2BAA2B,EAAEoN,QAAQ,CAAA;CACpD;CAEA7G,sBAAsBxB,WAAuB;EACzC,MAAMoI,kBAAkB,IAAIxO,uBACxBoG,UAAUgE,QAA2B1L,WAAAA,CAAAA;EAEzC,MAAMiP,aAAa,IAAIvN,uBAAuB;GAC1CuN,YAAYvH,UAAUgE,QAA2BtL,WAAAA;GACjD0P,iBAAiBpI,UAAUgE,QAA2B1L,WAAAA;EAC1D,CAAA;EACA,MAAM+P,UAAU,IAAI7J,aAAa;GAC7B+I;GACAa;EACJ,CAAA;EACA,OAAO,IAAI7M,gBAAgB,EAAE8M,QAAQ,CAAA;CACzC;CAEA3G,oBAAoB1B,WAAuB;EAGvC,MAAMqI,UAAU,IAAI/K,WAAW;GAC3BiK,YAAYvH,UAAUgE,QAAQ7E,qBAAqBgH,QAAQ;GAC3D5B,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEsG,gBAAgB/O;EACpB,CAAA;EACA,OAAO,IAAIhB,cAAc,EAAEsN,QAAQ,CAAA;CACvC;CAEAzG,4BAA4B5B,WAAuB;EAC/C,MAAMuH,aAAa,IAAItN,6BACnB+F,UAAUgE,QAAQ3K,qBAAqBoM,UAAU,CAAA;EAErD,MAAM4C,UAAU,IAAI1J,mBAAmB;GACnC4I;GACAhD,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEsG,gBAAgB/O;EACpB,CAAA;EACA,OAAO,IAAIN,sBAAsB,EAAE4M,QAAQ,CAAA;CAC/C;CAEAvG,wBAAwB9B,WAAuB;EAC3C,MAAMuH,aAAavH,UAAUgE,QAAQ9E,2BAA2B6L,iBAAiB;EACjF,MAAM1C,UAAU,IAAI5J,eAAe,EAAE8I,WAAW,CAAA;EAChD,OAAO,IAAI/L,kBAAkB,EAAE6M,QAAQ,CAAA;CAC3C;CAEU/C,qBAAqBtF,WAAwC;EACnE,MAAMuH,aAAavH,UAAUgE,QAAQ7E,qBAAqB6L,iBAAiB;EAC3E,OAAO,IAAI9N,eAAe,EAAEqK,WAAW,CAAA;CAC3C;CAEAvF,wBAAwBhC,WAAuB;EAC3C,OAAO,IAAIrF,kBAAkB,EAAE0N,SAAS,KAAK/C,qBAAqBtF,SAAAA,EAAW,CAAA;CACjF;CAEQmF;CAEEC,6BAA6BpF,WAAqD;EACxF,IAAI,KAAKmF,uBACL,OAAO,KAAKA;EAGhB,MAAMK,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EAEpE,KAAKN,wBAAwB,IAAI3H,4BAA4B;GACzDyN,gBAAgB,IAAI5S,iBAAiBmN,UAAAA;GACrCwB,4BAA4BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;GACrF1B,QAAQvF,UAAUgE,QAAQvE,kBAAAA;EAC9B,CAAA;EAEA,OAAO,KAAK0F;CAChB;CAEQ4C;CAEE7C,gCAAgClF,WAAkD;EACxF,IAAI,KAAK+H,0BACL,OAAO,KAAKA;EAGhB,MAAMhE,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMkG,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EAEpE,MAAM8B,aAAa,IAAIpN,mCACnB6F,UAAUgE,QAA4CpL,uBAAAA,CAAAA;EAE1D,MAAMsS,iBAAiB,IAAI7Q,sBAAsB;GAC7CkN,YAAY,IAAIxO,eAAeyM,UAAAA;GAC/B4C,iBAAiBpI,UAAUgE,QAA2B1L,WAAAA;EAC1D,CAAA;EAEA,IAAI6S;EACJ,IAAIC;EAKJ,IAAI;GACA,MAAMC,MAAM,IAAIC,IAAIvH,OAAOa,SAAS;GACpCuG,SAASE,IAAIE;GACbH,WAAW;IACPI,MAAMH,IAAIE;IACVE,QAAQN;IACRO,QAAQL,IAAIK;GAChB;EACJ,QAAQ;GACJP,SAASQ,KAAAA;GACTP,WAAWO,KAAAA;EACf;EAEA,KAAK5D,2BAA2B,IAAIjJ,yBAAyB;GACzDyI;GACA2D;GACAU,OAAO5L,UAAUgE,QAAQxE,iBAAAA;GACzBqM,QAAQ,IAAI3N,YAAY,EAAEgI,UAAUlG,UAAUgE,QAAQ7E,qBAAqBgH,QAAQ,EAAE,CAAA;GACrF5B,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEgE,YAAYxI,UAAUgE,QAAQtE,gBAAAA;GAC9B+I,sBAAsBzI,UAAUgE,QAAQrE,gCAAAA;GACxC+E,SAAS;IACL+C,SAAS1D,OAAO+H;IAChBC,UAAUhI,OAAOiI;IACjBb;IACAC;GACJ;EACJ,CAAA;EAEA,OAAO,KAAKrD;CAChB;CAEAzF,kCAAkCtC,WAAuB;EACrD,OAAO,IAAIrE,4BAA4B,EAAE0M,SAAS,KAAKnD,gCAAgClF,SAAAA,EAAW,CAAA;CACtG;CAEQgI;CAEEC,uBAAuBjI,WAA+C;EAC5E,IAAI,KAAKgI,iBACL,OAAO,KAAKA;EAGhB,KAAKA,kBAAkB,IAAIrK,sBAAsB;GAC7C0G,gBAAgBrE,UAAUgE,QAAQ9E,2BAA2BoF,cAAc;GAC3E2H,cAAcjM,UAAUgE,QAAQ7E,qBAAqB+M,cAAc;GACnEtG,mBAAmB5F,UAAUgE,QAAQ7E,qBAAqB0G,iBAAiB;GAC3EC,oBAAoB9F,UAAUgE,QAAQ7E,qBAAqB4G,kBAAkB;GAC7ES,iBAAiBxG,UAAUgE,QAAQ7E,qBAAqBsH,eAAe;GACvElC,cAAcvE,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;GACjEC,SAASzE,UAAUgE,QAAQpE,mBAAAA;EAC/B,CAAA;EAEA,OAAO,KAAKoI;CAChB;CAEAtE,uCAAuC1D,WAAuB;EAC1D,OAAO,IAAI9D,iCAAiC;GACxCmM,SAAS,KAAKnD,gCAAgClF,SAAAA;GAC9CqE,gBAAgBrE,UAAUgE,QAAQ9E,2BAA2BoF,cAAc;GAC3E0D,iBAAiB,KAAKC,uBAAuBjI,SAAAA;EACjD,CAAA;CACJ;CAEAE,sBAAsBF,WAAuB;EACzC,MAAMqI,UAAUrI,UAAUgE,QAAQ3K,qBAAqBmL,YAAY;EACnE,OAAO,IAAI5J,gBAAgB,EAAEyN,QAAQ,CAAA;CACzC;CAEA8D,kBAAkBnM,WAAuB;EACrC,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMkG,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM2C,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAIlN,sBAAsB;GACzCkN,YAAY,IAAIxO,eAAeyM,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAIjQ,uBAAuBwO,eAAAA;EAC1D,OAAO,IAAInJ,YAAY;GACnBsI;GACAa,iBAAiByB;GACjBjB,mBAAmB7E,OAAO6E;EAC9B,CAAA;CACJ;CAEA1G,qBAAqBlC,WAAuB;EACxC,OAAO,IAAIpE,eAAe,EAAEyM,SAAS,KAAK8D,kBAAkBnM,SAAAA,EAAW,CAAA;CAC3E;CAEA2D,yBAAyB3D,WAAuB;EAC5C,OAAO,IAAIpD,mBAAmB,EAAEyL,SAAS,KAAK8D,kBAAkBnM,SAAAA,EAAW,CAAA;CAC/E;CAEAoC,8BAA8BpC,WAAuB;EACjD,MAAMwF,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM8B,aAAa,IAAIrN,+BACnB8F,UAAUgE,QAAmCrL,mBAAAA,CAAAA;EAEjD,MAAM4R,gBAAgB,IAAIC,IACtBhF,WAAWiF,YAAY5R,UAAAA,CAAAA,CAAY6R,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMxC,UAAU,IAAIzJ,qBAAqB;GAAE2I;GAAYgD;EAAc,CAAA;EACrE,OAAO,IAAI7O,wBAAwB,EAAE2M,QAAQ,CAAA;CACjD;CAEA7F,+BAA+BxC,WAAuB;EAClD,MAAMuH,aAAa,IAAInN,gCACnB4F,UAAUgE,QAAoClL,oBAAAA,CAAAA;EAElD,MAAMwR,uBAAuB,KAAKR,2BAA2B9J,SAAAA;EAC7D,MAAMgH,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAItJ,sBAAsB;GACtCwI;GACA+C;GACAtD;EACJ,CAAA;EACA,OAAO,IAAInL,yBAAyB,EAAEwM,QAAQ,CAAA;CAClD;CAEA3F,yBAAyB1C,WAAuB;EAC5C,MAAMuH,aAAa,IAAIjN,0BACnB0F,UAAUgE,QAA8BhL,cAAAA,CAAAA;EAE5C,MAAMgO,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIrJ,gBAAgB;GAAEuI;GAAYP;EAA2B,CAAA;EAC7E,OAAO,IAAIlL,mBAAmB,EAAEuM,QAAQ,CAAA;CAC5C;CAEAzF,uBAAuB5C,WAAuB;EAC1C,MAAMwF,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM2C,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAI5N,wBAAwB;GAC3C4N,YAAY,IAAIlP,iBAAiBmN,UAAAA;GACjC4C;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAIjQ,uBAAuBwO,eAAAA;EAC1D,MAAMC,UAAU,IAAIpK,cAAc;GAC9BsJ;GACAa,iBAAiByB;EACrB,CAAA;EACA,MAAM7C,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoD,iBAAiB,IAAIrM,qBAAqB;GAC5CuJ;GACAa,iBAAiByB;GACjB7C;EACJ,CAAA;EAEA,OAAO,IAAI9L,iBAAiB;GACxBmN;GACAgC;EACJ,CAAA;CACJ;CAEAvH,qCAAqC9C,WAAuB;EACxD,MAAMuH,aAAa,IAAIhO,6CACnByG,UAAUgE,QAAyB/L,iCAAAA,CAAAA;EAEvC,MAAM+R,iBAAiB,KAAKD,qBAAqB/J,SAAAA;EACjD,MAAMgH,6BAA6BhH,UAAUgE,QAAQ3E,qBAAqB4H,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIjL,mCAAmC;GACnDmK;GACAyC;GACAhD;EACJ,CAAA;EACA,OAAO,IAAIlM,sCAAsC,EAAEuN,QAAQ,CAAA;CAC/D;CAEAlF,oBAAoBnD,WAAuB;EAEvC,MAAMuH,aADavH,UAAUgE,QAAQ3K,qBAAqBoM,UACvCD,CAAAA,CAAW4G,cAAclU,SAAAA;EAC5C,OAAO,IAAIkE,cAAc,EAAEmL,WAAW,CAAA;CAC1C;CAEAnH,sBAAsBJ,WAAuB;EACzC,MAAM+D,SAAS/D,UAAUgE,QAAQ1E,kBAAAA;EACjC,MAAMkG,aAAaxF,UAAUgE,QAAQ3K,qBAAqBoM,UAAU;EACpE,MAAM2C,kBAAkBpI,UAAUgE,QAA2B1L,WAAAA;EAC7D,MAAMiP,aAAa,IAAI3N,uBAAuBwO,eAAAA;EAE9C,MAAMS,mBAAmB,IAAI3P,wBAAwB;GACjDqO,YAAYvH,UAAUgE,QAA4BpM,YAAAA;GAClDwQ;EACJ,CAAA;EACA,MAAM7C,SAASvF,UAAUgE,QAAQvE,kBAAAA;EACjC,MAAM4M,0BAA0B,IAAI3N,wBAAwB;GACxDmK;GACAyD,iBAAiB,IAAItS,uBAAuB;IACxCuN,YAAYvH,UAAUgE,QAA2BtL,WAAAA;IACjD0P;GACJ,CAAA;GACAmE,uBAAuB,IAAInT,6BACvB4G,UAAUgE,QAAiCjM,iBAAAA,CAAAA;GAE/CyU,YAAYjN,cAAcwE,MAAAA;GAC1BwB;EACJ,CAAA;EACA,MAAMkH,iBAAiB,IAAIpP,eAAe;GACtC6I,UAAUlG,UAAUgE,QAAQ7E,qBAAqBgH,QAAQ;GACzDZ;EACJ,CAAA;EAEA,MAAM8C,UAAU,IAAIlK,aAAa;GAC7BoJ;GACAmF,mBAAmB;IACfL;IACAI;IACA,IAAIrN,6BAA6BY,SAAAA;GACpC;GACDuF;EACJ,CAAA;EACA,MAAMoH,gBAAgBnH,WAAW4G,cAAclU,SAAAA;EAE/C,OAAO,IAAIiD,gBAAgB;GACvBuJ,SAAS;IACLC,SAASZ,OAAOa;IAChBgI,aAAa7I,OAAO8I;IACpBC,2BAA2B/I,OAAOoE,sBAAsB;GAC5D;GACAE;GACAsE;EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/http/modules/middleware.d.ts

@@ -1,11 +1,19 @@
 import type { App } from 'routup';
 import type { IContainer } from 'eldin';
+import type { ViteDevServer } from 'vite';
 export declare class HTTPMiddlewareModule {
+    protected viteServer: ViteDevServer | undefined;
     mountBefore(router: App, container: IContainer): Promise<void>;
     mountAfter(router: App, container: IContainer): Promise<void>;
     mountCors(router: App, container: IContainer): Promise<void>;
     mountLogger(router: App, container: IContainer): Promise<void>;
-    mountAssets(router: App): Promise<void>;
+    mountAssets(router: App, container: IContainer): Promise<void>;
+    /**
+     * Release what the mounted middlewares own beyond the http listener. Only
+     * the JIT vite dev server qualifies: it keeps a file watcher and an HMR
+     * websocket alive, which would survive every setup/teardown cycle.
+     */
+    teardown(): Promise<void>;
     mountUIHttpClient(router: App, container: IContainer): Promise<void>;
     mountBasic(router: App): Promise<void>;
     mountPrometheus(router: App, container: IContainer): Promise<void>;

package/dist/app/modules/http/modules/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AA+BxC,qBAAa,oBAAoB;IACvB,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9D,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY5D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU9D,WAAW,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjE,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/D,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BrE,wBAAwB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,SAAS;CAGpB"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AA+B1C,qBAAa,oBAAoB;IAC7B,SAAS,CAAC,UAAU,EAAG,aAAa,GAAG,SAAS,CAAC;IAE3C,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9D,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY5D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU9D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IASzB,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjE,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/D,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BrE,wBAAwB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,SAAS;CAGpB"}

package/dist/app/modules/http/modules/middleware.mjs

@@ -36,11 +36,12 @@ import "../../oauth2/index.mjs";
 import path from "node:path";
 //#region src/app/modules/http/modules/middleware.ts
 var HTTPMiddlewareModule = class {
+	viteServer;
 	async mountBefore(router, container) {
 		await this.mountPrometheus(router, container);
 		await this.mountLogger(router, container);
 		await this.mountCors(router, container);
-		await this.mountAssets(router);
+		await this.mountAssets(router, container);
 		await this.mountUIHttpClient(router, container);
 		await this.mountBasic(router);
 		await this.mountRateLimit(router, container);
@@ -66,8 +67,22 @@ var HTTPMiddlewareModule = class {
 		});
 		router.use(middleware);
 	}
-	async mountAssets(router) {
-		await registerAssetsMiddleware(router);
+	async mountAssets(router, container) {
+		const config = container.resolve(ConfigInjectionKey);
+		this.viteServer = await registerAssetsMiddleware(router, {
+			themeDirectoryPath: config.themeDirectoryPath,
+			themeFragmentsEnabled: config.themeFragmentsEnabled,
+			logger: container.resolve(LoggerInjectionKey)
+		});
+	}
+	/**
+	* Release what the mounted middlewares own beyond the http listener. Only
+	* the JIT vite dev server qualifies: it keeps a file watcher and an HMR
+	* websocket alive, which would survive every setup/teardown cycle.
+	*/ async teardown() {
+		if (!this.viteServer) return;
+		await this.viteServer.close();
+		this.viteServer = void 0;
 	}
 	async mountUIHttpClient(router, container) {
 		if (!container.has(HTTPInjectionKey.UIHttpClient)) return;