@authup/server-core 1.0.0-beta.60 → 1.0.0-beta.62

package/dist/app/modules/database/repositories/identity-provider-account/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["applyQuery","redactFieldConditions","IdentityProviderAccountEntity","isDatabaseTypeRowLockable","IdentityProviderAccountRepositoryAdapter","dataSource","repository","getRepository","findMany","query","options","qb","createQueryBuilder","pagination","existing","Set","expressionMap","selects","map","select","selection","selections","column","filter","has","length","addSelect","userId","andWhere","ownerUserId","realmId","ownerRealmId","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","removeGuarded","entity","userHasOtherLogin","type","count","countBy","remove","transaction","manager","rows","where","setLock","getMany","findOneByProviderIdentity","identity","findOne","providerUserId","providerId","provider","relations","user","save"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider-account/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n    DataSource, \n    DeepPartial, \n    Repository,\n} from 'typeorm';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { isDatabaseTypeRowLockable } from '../../../../../adapters/database/helpers/index.ts';\nimport type {\n    IIdentityProviderAccountRepository,\n    IdentityProviderAccountFindManyOptions,\n    IdentityProviderIdentity,\n} from '../../../../../core/index.ts';\n\nexport class IdentityProviderAccountRepositoryAdapter implements IIdentityProviderAccountRepository {\n    protected dataSource: DataSource;\n\n    protected repository: Repository<IdentityProviderAccountEntity>;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n        this.repository = dataSource.getRepository(IdentityProviderAccountEntity);\n    }\n\n    async findMany(\n        query: IQuery,\n        options: IdentityProviderAccountFindManyOptions = {},\n    ): Promise<EntityRepositoryFindManyResult<IdentityProviderAccount>> {\n        const qb = this.repository.createQueryBuilder('identityProviderAccount');\n\n        const { pagination } = applyQuery(qb, query);\n\n        // plan-039 force-select: the per-row gate reads userId (ownership)\n        // and userRealmId (realm reach). The shared applyRealmScopeSelect\n        // pins a `realmId` column this entity does not have, so dedupe and\n        // add the two columns the same way it would.\n        const existing = new Set(qb.expressionMap.selects.map((select) => select.selection));\n        const selections = ['userId', 'userRealmId']\n            .map((column) => `identityProviderAccount.${column}`)\n            .filter((selection) => !existing.has(selection));\n        if (selections.length > 0) {\n            qb.addSelect(selections);\n        }\n\n        if (options.userId) {\n            // mandatory constraint — not overridable by a rapiq filter\n            qb.andWhere('identityProviderAccount.userId = :ownerUserId', { ownerUserId: options.userId });\n        }\n\n        if (options.realmId) {\n            // nested `/realms/:realmId/identity-provider-accounts` mount —\n            // mandatory constraint, not overridable by a rapiq filter\n            qb.andWhere('identityProviderAccount.userRealmId = :ownerRealmId', { ownerRealmId: options.realmId });\n        }\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<IdentityProviderAccount | null> {\n        return this.repository.findOneBy({ id });\n    }\n\n    async removeGuarded(entity: IdentityProviderAccount, userHasOtherLogin: boolean): Promise<boolean> {\n        if (!isDatabaseTypeRowLockable(this.dataSource.options.type)) {\n            // better-sqlite3: a single synchronous writer, so the\n            // count/delete race cannot manifest and no transaction is\n            // needed. Deliberately NOT wrapped in one — a held write\n            // transaction would contend the database lock (single-file\n            // driver) without buying any atomicity here. Plain\n            // count-then-remove, exactly as the un-guarded path did.\n            const count = await this.repository.countBy({ userId: entity.userId });\n            if (count <= 1 && !userHasOtherLogin) {\n                return false;\n            }\n\n            await this.repository.remove(entity as IdentityProviderAccountEntity);\n            return true;\n        }\n\n        // mysql / postgres: real concurrency. Lock the user's account rows,\n        // count, and delete in one transaction so two concurrent unlinks for\n        // the same user cannot both read > 1 and both delete.\n        return this.dataSource.transaction(async (manager) => {\n            const repository = manager.getRepository(IdentityProviderAccountEntity);\n\n            const rows = await repository.createQueryBuilder('identityProviderAccount')\n                .select(['identityProviderAccount.id'])\n                .where('identityProviderAccount.userId = :userId', { userId: entity.userId })\n                .setLock('pessimistic_write')\n                .getMany();\n\n            if (rows.length <= 1 && !userHasOtherLogin) {\n                return false;\n            }\n\n            await repository.remove(entity as IdentityProviderAccountEntity);\n            return true;\n        });\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        return this.repository.findOne({\n            where: {\n                providerUserId: identity.id,\n                providerId: identity.provider.id,\n            },\n            relations: { user: true },\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: IdentityProviderAccount): Promise<void> {\n        await this.repository.remove(entity as IdentityProviderAccountEntity);\n    }\n}\n"],"mappings":";;;;;;;;;AAwBA,IAAaI,2CAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYD,YAAwB;EAChC,KAAKA,aAAaA;EAClB,KAAKC,aAAaD,WAAWE,cAAcL,6BAAAA;CAC/C;CAEA,MAAMM,SACFC,OACAC,UAAkD,CAAC,GACa;EAChE,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,yBAAA;EAE9C,MAAM,EAAEC,eAAeb,WAAWW,IAAIF,KAAAA;EAMtC,MAAMK,WAAW,IAAIC,IAAIJ,GAAGK,cAAcC,QAAQC,KAAKC,WAAWA,OAAOC,SAAS,CAAA;EAClF,MAAMC,aAAa,CAAC,UAAU,aAAc,CAAA,CACvCH,KAAKI,WAAW,2BAA2BA,QAAQ,CAAA,CACnDC,QAAQH,cAAc,CAACN,SAASU,IAAIJ,SAAAA,CAAAA;EACzC,IAAIC,WAAWI,SAAS,GACpBd,GAAGe,UAAUL,UAAAA;EAGjB,IAAIX,QAAQiB,QAERhB,GAAGiB,SAAS,iDAAiD,EAAEC,aAAanB,QAAQiB,OAAO,CAAA;EAG/F,IAAIjB,QAAQoB,SAGRnB,GAAGiB,SAAS,uDAAuD,EAAEG,cAAcrB,QAAQoB,QAAQ,CAAA;EAGvG,MAAM,CAACE,UAAUC,SAAS,MAAMtB,GAAGuB,gBAAe;EAElD,OAAO;GACHC,MAAMlC,sBAAsBQ,OAAOuB,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGpB;GACP;EACJ;CACJ;CAEA,MAAMwB,YAAYC,IAAqD;EACnE,OAAO,KAAKhC,WAAWiC,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,cAAcC,QAAiCC,mBAA8C;EAC/F,IAAI,CAACvC,0BAA0B,KAAKE,WAAWK,QAAQiC,IAAI,GAAG;GAQ1D,IAAIC,MADgB,KAAKtC,WAAWuC,QAAQ,EAAElB,QAAQc,OAAOd,OAAO,CAAA,KACvD,KAAK,CAACe,mBACf,OAAO;GAGX,MAAM,KAAKpC,WAAWwC,OAAOL,MAAAA;GAC7B,OAAO;EACX;EAKA,OAAO,KAAKpC,WAAW0C,YAAY,OAAOC,YAAAA;GACtC,MAAM1C,aAAa0C,QAAQzC,cAAcL,6BAAAA;GAQzC,KAAI+C,MANe3C,WAAWM,mBAAmB,yBAAA,CAAA,CAC5CO,OAAO,CAAC,4BAA6B,CAAA,CAAA,CACrC+B,MAAM,4CAA4C,EAAEvB,QAAQc,OAAOd,OAAO,CAAA,CAAA,CAC1EwB,QAAQ,mBAAA,CAAA,CACRC,QAAO,EAAA,CAEH3B,UAAU,KAAK,CAACiB,mBACrB,OAAO;GAGX,MAAMpC,WAAWwC,OAAOL,MAAAA;GACxB,OAAO;EACX,CAAA;CACJ;CAEA,MAAMY,0BAA0BC,UAA6E;EACzG,OAAO,KAAKhD,WAAWiD,QAAQ;GAC3BL,OAAO;IACHM,gBAAgBF,SAAShB;IACzBmB,YAAYH,SAASI,SAASpB;GAClC;GACAqB,WAAW,EAAEC,MAAM,KAAK;EAC5B,CAAA;CACJ;CAEA,MAAMC,KAAKpB,QAAgF;EACvF,OAAO,KAAKnC,WAAWuD,KAAKpB,MAAAA;CAChC;CAEA,MAAMK,OAAOL,QAAgD;EACzD,MAAM,KAAKnC,WAAWwC,OAAOL,MAAAA;CACjC;AACJ"}
+{"version":3,"file":"repository.mjs","names":["EntityConflictError","applyQuery","redactFieldConditions","IdentityProviderAccountEntity","isUniqueConstraintDatabaseError","isDatabaseTypeRowLockable","IdentityProviderAccountRepositoryAdapter","dataSource","repository","getRepository","findMany","query","options","qb","createQueryBuilder","pagination","existing","Set","expressionMap","selects","map","select","selection","selections","column","filter","has","length","addSelect","userId","andWhere","ownerUserId","realmId","ownerRealmId","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","removeGuarded","entity","userHasOtherLogin","type","count","countBy","remove","transaction","manager","rows","where","setLock","getMany","findOneByProviderIdentity","identity","findOne","providerUserId","providerId","provider","relations","user","save","e"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider-account/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderAccount } from '@authup/core-kit';\nimport { EntityConflictError } from '@authup/errors';\nimport type { IQuery } from '@rapiq/core';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n    DataSource, \n    DeepPartial, \n    Repository,\n} from 'typeorm';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport { IdentityProviderAccountEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { isUniqueConstraintDatabaseError } from '../../../../../adapters/database/errors/index.ts';\nimport { isDatabaseTypeRowLockable } from '../../../../../adapters/database/helpers/index.ts';\nimport type {\n    IIdentityProviderAccountRepository,\n    IdentityProviderAccountFindManyOptions,\n    IdentityProviderIdentity,\n} from '../../../../../core/index.ts';\n\nexport class IdentityProviderAccountRepositoryAdapter implements IIdentityProviderAccountRepository {\n    protected dataSource: DataSource;\n\n    protected repository: Repository<IdentityProviderAccountEntity>;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n        this.repository = dataSource.getRepository(IdentityProviderAccountEntity);\n    }\n\n    async findMany(\n        query: IQuery,\n        options: IdentityProviderAccountFindManyOptions = {},\n    ): Promise<EntityRepositoryFindManyResult<IdentityProviderAccount>> {\n        const qb = this.repository.createQueryBuilder('identityProviderAccount');\n\n        const { pagination } = applyQuery(qb, query);\n\n        // plan-039 force-select: the per-row gate reads userId (ownership)\n        // and userRealmId (realm reach). The shared applyRealmScopeSelect\n        // pins a `realmId` column this entity does not have, so dedupe and\n        // add the two columns the same way it would.\n        const existing = new Set(qb.expressionMap.selects.map((select) => select.selection));\n        const selections = ['userId', 'userRealmId']\n            .map((column) => `identityProviderAccount.${column}`)\n            .filter((selection) => !existing.has(selection));\n        if (selections.length > 0) {\n            qb.addSelect(selections);\n        }\n\n        if (options.userId) {\n            // mandatory constraint — not overridable by a rapiq filter\n            qb.andWhere('identityProviderAccount.userId = :ownerUserId', { ownerUserId: options.userId });\n        }\n\n        if (options.realmId) {\n            // nested `/realms/:realmId/identity-provider-accounts` mount —\n            // mandatory constraint, not overridable by a rapiq filter\n            qb.andWhere('identityProviderAccount.userRealmId = :ownerRealmId', { ownerRealmId: options.realmId });\n        }\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<IdentityProviderAccount | null> {\n        return this.repository.findOneBy({ id });\n    }\n\n    async removeGuarded(entity: IdentityProviderAccount, userHasOtherLogin: boolean): Promise<boolean> {\n        if (!isDatabaseTypeRowLockable(this.dataSource.options.type)) {\n            // better-sqlite3: a single synchronous writer, so the\n            // count/delete race cannot manifest and no transaction is\n            // needed. Deliberately NOT wrapped in one — a held write\n            // transaction would contend the database lock (single-file\n            // driver) without buying any atomicity here. Plain\n            // count-then-remove, exactly as the un-guarded path did.\n            const count = await this.repository.countBy({ userId: entity.userId });\n            if (count <= 1 && !userHasOtherLogin) {\n                return false;\n            }\n\n            await this.repository.remove(entity as IdentityProviderAccountEntity);\n            return true;\n        }\n\n        // mysql / postgres: real concurrency. Lock the user's account rows,\n        // count, and delete in one transaction so two concurrent unlinks for\n        // the same user cannot both read > 1 and both delete.\n        return this.dataSource.transaction(async (manager) => {\n            const repository = manager.getRepository(IdentityProviderAccountEntity);\n\n            const rows = await repository.createQueryBuilder('identityProviderAccount')\n                .select(['identityProviderAccount.id'])\n                .where('identityProviderAccount.userId = :userId', { userId: entity.userId })\n                .setLock('pessimistic_write')\n                .getMany();\n\n            if (rows.length <= 1 && !userHasOtherLogin) {\n                return false;\n            }\n\n            await repository.remove(entity as IdentityProviderAccountEntity);\n            return true;\n        });\n    }\n\n    async findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null> {\n        return this.repository.findOne({\n            where: {\n                providerUserId: identity.id,\n                providerId: identity.provider.id,\n            },\n            relations: { user: true },\n        });\n    }\n\n    async save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount> {\n        try {\n            return await this.repository.save(entity);\n        } catch (e) {\n            // one of the two unique indexes rejected the row: the identity\n            // is already linked (issue #3442) or the user already holds a link\n            // at this provider. The driver does not say which, so the manager\n            // classifies after a re-read; here only the driver error is kept\n            // from escaping as a 500.\n            if (isUniqueConstraintDatabaseError(e)) {\n                throw new EntityConflictError({ entity: 'identity provider account' });\n            }\n\n            throw e;\n        }\n    }\n\n    async remove(entity: IdentityProviderAccount): Promise<void> {\n        await this.repository.remove(entity as IdentityProviderAccountEntity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;AA0BA,IAAaM,2CAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYD,YAAwB;EAChC,KAAKA,aAAaA;EAClB,KAAKC,aAAaD,WAAWE,cAAcN,6BAAAA;CAC/C;CAEA,MAAMO,SACFC,OACAC,UAAkD,CAAC,GACa;EAChE,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,yBAAA;EAE9C,MAAM,EAAEC,eAAed,WAAWY,IAAIF,KAAAA;EAMtC,MAAMK,WAAW,IAAIC,IAAIJ,GAAGK,cAAcC,QAAQC,KAAKC,WAAWA,OAAOC,SAAS,CAAA;EAClF,MAAMC,aAAa,CAAC,UAAU,aAAc,CAAA,CACvCH,KAAKI,WAAW,2BAA2BA,QAAQ,CAAA,CACnDC,QAAQH,cAAc,CAACN,SAASU,IAAIJ,SAAAA,CAAAA;EACzC,IAAIC,WAAWI,SAAS,GACpBd,GAAGe,UAAUL,UAAAA;EAGjB,IAAIX,QAAQiB,QAERhB,GAAGiB,SAAS,iDAAiD,EAAEC,aAAanB,QAAQiB,OAAO,CAAA;EAG/F,IAAIjB,QAAQoB,SAGRnB,GAAGiB,SAAS,uDAAuD,EAAEG,cAAcrB,QAAQoB,QAAQ,CAAA;EAGvG,MAAM,CAACE,UAAUC,SAAS,MAAMtB,GAAGuB,gBAAe;EAElD,OAAO;GACHC,MAAMnC,sBAAsBS,OAAOuB,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGpB;GACP;EACJ;CACJ;CAEA,MAAMwB,YAAYC,IAAqD;EACnE,OAAO,KAAKhC,WAAWiC,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,cAAcC,QAAiCC,mBAA8C;EAC/F,IAAI,CAACvC,0BAA0B,KAAKE,WAAWK,QAAQiC,IAAI,GAAG;GAQ1D,IAAIC,MADgB,KAAKtC,WAAWuC,QAAQ,EAAElB,QAAQc,OAAOd,OAAO,CAAA,KACvD,KAAK,CAACe,mBACf,OAAO;GAGX,MAAM,KAAKpC,WAAWwC,OAAOL,MAAAA;GAC7B,OAAO;EACX;EAKA,OAAO,KAAKpC,WAAW0C,YAAY,OAAOC,YAAAA;GACtC,MAAM1C,aAAa0C,QAAQzC,cAAcN,6BAAAA;GAQzC,KAAIgD,MANe3C,WAAWM,mBAAmB,yBAAA,CAAA,CAC5CO,OAAO,CAAC,4BAA6B,CAAA,CAAA,CACrC+B,MAAM,4CAA4C,EAAEvB,QAAQc,OAAOd,OAAO,CAAA,CAAA,CAC1EwB,QAAQ,mBAAA,CAAA,CACRC,QAAO,EAAA,CAEH3B,UAAU,KAAK,CAACiB,mBACrB,OAAO;GAGX,MAAMpC,WAAWwC,OAAOL,MAAAA;GACxB,OAAO;EACX,CAAA;CACJ;CAEA,MAAMY,0BAA0BC,UAA6E;EACzG,OAAO,KAAKhD,WAAWiD,QAAQ;GAC3BL,OAAO;IACHM,gBAAgBF,SAAShB;IACzBmB,YAAYH,SAASI,SAASpB;GAClC;GACAqB,WAAW,EAAEC,MAAM,KAAK;EAC5B,CAAA;CACJ;CAEA,MAAMC,KAAKpB,QAAgF;EACvF,IAAI;GACA,OAAO,MAAM,KAAKnC,WAAWuD,KAAKpB,MAAAA;EACtC,SAASqB,GAAG;GAMR,IAAI5D,gCAAgC4D,CAAAA,GAChC,MAAM,IAAIhE,oBAAoB,EAAE2C,QAAQ,4BAA4B,CAAA;GAGxE,MAAMqB;EACV;CACJ;CAEA,MAAMhB,OAAOL,QAAgD;EACzD,MAAM,KAAKnC,WAAWwC,OAAOL,MAAAA;CACjC;AACJ"}

package/dist/app/modules/http/modules/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAoElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,iCAAiC,EACjC,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EACrB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAOd,2BAA2B,EAG3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EAWnB,wBAAwB,EAGxB,WAAW,EACd,MAAM,2BAA2B,CAAC;AAKnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA4E9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAmFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAY7C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IASxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,4BAA4B,CAAC,SAAS,EAAE,UAAU;IAOlD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,uCAAuC,CAAC,SAAS,EAAE,UAAU;IAe7D,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAuD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,iBAAiB,CAAC,SAAS,EAAE,UAAU;IAgBvC,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAI1C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAiD9C"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAoElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,iCAAiC,EACjC,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EACrB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAOd,2BAA2B,EAI3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EAWnB,wBAAwB,EAGxB,WAAW,EACd,MAAM,2BAA2B,CAAC;AAKnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA4E9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAmFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAY7C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IASxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAoD5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,4BAA4B,CAAC,SAAS,EAAE,UAAU;IAOlD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,uCAAuC,CAAC,SAAS,EAAE,UAAU;IAe7D,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAuD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,iBAAiB,CAAC,SAAS,EAAE,UAAU;IAgBvC,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAI1C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAiD9C"}

package/dist/app/modules/http/modules/controller.mjs

@@ -58,6 +58,7 @@ import { IdentityProviderRoleMappingService } from "../../../../core/entities/id
 import { OAuth2AccessPolicyEvaluator } from "../../../../core/oauth2/access-policy/module.mjs";
 import { OAuth2ClientAuthenticator } from "../../../../core/oauth2/client/authenticator.mjs";
 import { OAuth2EndSessionService } from "../../../../core/oauth2/end-session/service.mjs";
+import { OAuth2FederatedLoginService } from "../../../../core/oauth2/federated-login/module.mjs";
 import { OAuth2MfaLoginService } from "../../../../core/oauth2/mfa-login/module.mjs";
 import { PasswordRecoveryService } from "../../../../core/identity/password-recovery/service.mjs";
 import { PermissionCheckerService } from "../../../../core/identity/permission/checker/service.mjs";
@@ -438,6 +439,7 @@ var HTTPControllerModule = class {
 		const config = container.resolve(ConfigInjectionKey);
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
 		const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);
+		const linkStore = container.resolve(IdentityInjectionKey.ProviderAccountLinkStore);
 		const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);
 		const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);
 		const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);
@@ -446,18 +448,28 @@ var HTTPControllerModule = class {
 			repository: new IdentityProviderRepository(dataSource),
 			realmRepository
 		});
+		const logger = container.resolve(LoggerInjectionKey);
+		const eventService = container.resolve(DatabaseInjectionKey.EventService);
+		const loginService = new OAuth2FederatedLoginService({
+			options: { baseURL: config.publicUrl },
+			accountManager,
+			realmRepository: new RealmRepositoryAdapter(realmRepository),
+			codeRequestVerifier,
+			codeIssuer,
+			accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),
+			eventService,
+			logger
+		});
 		return new IdentityProviderController({
 			options: { baseURL: config.publicUrl },
 			repository,
-			realmRepository: new RealmRepositoryAdapter(realmRepository),
-			clientRepository: container.resolve(OAuth2InjectionToken.ClientRepository),
 			accountManager,
-			codeIssuer,
+			linkStore,
 			codeRequestVerifier,
 			stateManager,
-			accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),
-			eventService: container.resolve(DatabaseInjectionKey.EventService),
-			logger: container.resolve(LoggerInjectionKey)
+			loginService,
+			eventService,
+			logger
 		});
 	}
 	createClientController(container) {

package/dist/app/modules/http/modules/controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserAuthenticatorEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderAccountRepositoryAdapter","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","TrustAnchorRepositoryAdapter","UserAttributeRepositoryAdapter","UserAuthenticatorRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","ConsentController","EventController","IdentityProviderAccountController","IdentityProviderController","IdentityProviderRoleMappingController","KeyController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","SessionTokenController","TrustAnchorController","UserAttributeController","UserAuthenticatorController","UserController","UserPermissionController","UserRoleController","useRequestEventContext","AccountController","ActivateController","AuthenticatorChallengeController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","UserInfoController","ClientCertificateValidator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","ConsentService","CredentialsAuthenticator","IdentityProviderAccountService","IdentityProviderRoleMappingService","KeyProvisioner","KeyService","LoginThrottleService","OAuth2AccessPolicyEvaluator","OAuth2ClientAuthenticator","OAuth2EndSessionService","OAuth2MfaLoginService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmCipher","RealmService","RegistrationService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","SessionTokenService","SystemClientProvisioner","TrustAnchorService","UserAttributeService","UserAuthenticator","UserAuthenticatorService","UserPermissionService","UserRoleService","UserService","AuthenticationInjectionKey","OAuth2InjectionToken","LazyWildcardRealmProvisioner","IdentityInjectionKey","UserIdentityRepository","ConfigInjectionKey","getAppOrigins","CacheInjectionKey","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","MetricsInjectionKey","HTTPControllerModule","mount","router","container","eventController","createEventController","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","keyController","createKeyController","trustAnchorController","createTrustAnchorController","sessionController","createSessionController","sessionTokenController","createSessionTokenController","consentController","createConsentController","identityProviderAccountController","createIdentityProviderAccountController","userController","createUserController","userAttributeController","createUserAttributeController","userAuthenticatorController","createUserAuthenticatorController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createAuthenticatorChallengeController","createUserInfoController","createAccountController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","eventService","EventService","metrics","options","baseURL","publicUrl","features","buildUIFeatures","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","resolveUserAuthenticatorService","accessPolicyEvaluator","resolveAccessPolicyEvaluator","consentService","createConsentService","logger","dataSource","DataSource","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyStore","KeyStore","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","userAuthenticator","oauth2ClientAuthenticator","certificateValidator","trustAnchorRepository","loginThrottleService","repository","EventRepository","enabled","loginAttemptThrottleEnabled","threshold","loginAttemptThreshold","windowSeconds","loginAttemptWindow","userAuthenticatorService","mfaLoginService","resolveMfaLoginService","tokenRefreshGracePeriod","certificateSource","realmRepository","service","createRegistrationService","createPasswordRecoveryService","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","trustedOrigins","registration","registrationEnabled","passwordRecovery","emailVerification","accountConsole","accountConsoleEnabled","accountManager","ProviderAccountManager","stateManager","AuthorizationStateManager","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","requestContext","SessionRepository","ConsentRepository","userRepository","userPermissionRepository","userRoleRepository","policyProvider","issuer","webauthn","url","URL","hostname","rpId","rpName","origin","undefined","cache","cipher","mfaEnabled","required","mfaRequired","ticketIssuer","MfaTokenIssuer","createUserService","getRepository","systemClientProvisioner","scopeRepository","clientScopeRepository","appOrigins","keyProvisioner","realmProvisioners","keyRepository","mtlsBaseURL","mtlsPublicUrl","clientCertificatesEnabled"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserAuthenticator as UserAuthenticatorModel,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserAuthenticatorEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderAccountRepositoryAdapter,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    TrustAnchorRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserAuthenticatorRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    ConsentController,\n    EventController,\n    IdentityProviderAccountController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    KeyController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    SessionTokenController,\n    TrustAnchorController,\n    UserAttributeController,\n    UserAuthenticatorController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n    useRequestEventContext,\n} from '../../../../adapters/http/index.ts';\nimport {\n    AccountController,\n    ActivateController,\n    AuthenticatorChallengeController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n    UserInfoController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCertificateValidator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    ConsentService,\n    CredentialsAuthenticator,\n    IdentityProviderAccountService,\n    IdentityProviderRoleMappingService,\n    KeyProvisioner,\n    KeyService,\n    LoginThrottleService,\n    OAuth2AccessPolicyEvaluator,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    OAuth2MfaLoginService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmCipher,\n    RealmService,\n    RegistrationService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    SessionTokenService,\n    SystemClientProvisioner,\n    TrustAnchorService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserAuthenticatorService,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { LazyWildcardRealmProvisioner } from '../../provisioning/lazy-wildcard.ts';\nimport { IdentityInjectionKey, UserIdentityRepository } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { CacheInjectionKey } from '../../cache/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\nimport { MetricsInjectionKey } from '../../metrics/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const eventController = this.createEventController(container);\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const keyController = this.createKeyController(container);\n        const trustAnchorController = this.createTrustAnchorController(container);\n        const sessionController = this.createSessionController(container);\n        const sessionTokenController = this.createSessionTokenController(container);\n        const consentController = this.createConsentController(container);\n        const identityProviderAccountController = this.createIdentityProviderAccountController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userAuthenticatorController = this.createUserAuthenticatorController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n                this.createAuthenticatorChallengeController(container),\n                this.createUserInfoController(container),\n                this.createAccountController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                consentController,\n                eventController,\n                identityProviderAccountController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                keyController,\n                trustAnchorController,\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                sessionTokenController,\n                userController,\n                userAttributeController,\n                userAuthenticatorController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n                mfaFreshnessMaxAge: config.mfaFreshnessMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n\n            eventService,\n            metrics,\n\n            mfaChallengeProvider: this.resolveUserAuthenticatorService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            consentService: this.createConsentService(container),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyStore = container.resolve(OAuth2InjectionToken.KeyStore);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator({\n            identityResolver,\n            certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) }),\n        });\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        const loginThrottleService = new LoginThrottleService({\n            repository: container.resolve(DatabaseInjectionKey.EventRepository),\n            options: {\n                enabled: config.loginAttemptThrottleEnabled,\n                threshold: config.loginAttemptThreshold,\n                windowSeconds: config.loginAttemptWindow,\n            },\n        });\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyStore,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            eventService,\n            metrics,\n            loginThrottleService,\n            userAuthenticatorService: this.resolveUserAuthenticatorService(container),\n            mfaLoginService: this.resolveMfaLoginService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n            certificateSource: config.certificateSource,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { baseURL: config.publicUrl },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    createAccountController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new AccountController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                trustedOrigins: getAppOrigins(config),\n            },\n        });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n            accountConsole: config.accountConsoleEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            clientRepository: container.resolve(OAuth2InjectionToken.ClientRepository),\n\n            accountManager,\n\n            codeIssuer,\n            codeRequestVerifier,\n            stateManager,\n\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createKeyController(container: IContainer) {\n        // the DI singleton carries the optional KEK cipher — never construct\n        // a fresh adapter here.\n        const service = new KeyService({\n            repository: container.resolve(OAuth2InjectionToken.KeyStore),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new KeyController({ service });\n    }\n\n    createTrustAnchorController(container: IContainer) {\n        const repository = new TrustAnchorRepositoryAdapter(\n            container.resolve(DatabaseInjectionKey.DataSource),\n        );\n        const service = new TrustAnchorService({\n            repository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new TrustAnchorController({ service });\n    }\n\n    createSessionTokenController(container: IContainer) {\n        const repository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const service = new SessionTokenService({ repository, tokenRepository });\n        return new SessionTokenController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({ repository });\n        return new SessionController({ service });\n    }\n\n    protected createConsentService(container: IContainer) : ConsentService {\n        const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);\n        return new ConsentService({ repository });\n    }\n\n    createConsentController(container: IContainer) {\n        return new ConsentController({ service: this.createConsentService(container) });\n    }\n\n    createIdentityProviderAccountController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const service = new IdentityProviderAccountService({\n            repository: new IdentityProviderAccountRepositoryAdapter(dataSource),\n            userRepository: new UserIdentityRepository({\n                repository: new UserRepository(dataSource),\n                userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n                userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n            }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new IdentityProviderAccountController({ service });\n    }\n\n    private accessPolicyEvaluator? : OAuth2AccessPolicyEvaluator;\n\n    protected resolveAccessPolicyEvaluator(container: IContainer) : OAuth2AccessPolicyEvaluator {\n        if (this.accessPolicyEvaluator) {\n            return this.accessPolicyEvaluator;\n        }\n\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        this.accessPolicyEvaluator = new OAuth2AccessPolicyEvaluator({\n            policyProvider: new PolicyRepository(dataSource),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        return this.accessPolicyEvaluator;\n    }\n\n    private userAuthenticatorService? : UserAuthenticatorService;\n\n    protected resolveUserAuthenticatorService(container: IContainer) : UserAuthenticatorService {\n        if (this.userAuthenticatorService) {\n            return this.userAuthenticatorService;\n        }\n\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const repository = new UserAuthenticatorRepositoryAdapter(\n            container.resolve<Repository<UserAuthenticatorModel>>(UserAuthenticatorEntity),\n        );\n        const userRepository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n\n        let issuer : string | undefined;\n        let webauthn : {\n            rpId: string, \n            rpName: string, \n            origin: string \n        } | undefined;\n        try {\n            const url = new URL(config.publicUrl);\n            issuer = url.hostname;\n            webauthn = {\n                rpId: url.hostname,\n                rpName: issuer,\n                origin: url.origin,\n            };\n        } catch {\n            issuer = undefined;\n            webauthn = undefined;\n        }\n\n        this.userAuthenticatorService = new UserAuthenticatorService({\n            repository,\n            userRepository,\n            cache: container.resolve(CacheInjectionKey),\n            cipher: new RealmCipher({ keyStore: container.resolve(OAuth2InjectionToken.KeyStore) }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n            mailClient: container.resolve(MailInjectionKey),\n            mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),\n            options: {\n                enabled: config.mfaEnabled,\n                required: config.mfaRequired,\n                issuer,\n                webauthn,\n            },\n        });\n\n        return this.userAuthenticatorService;\n    }\n\n    createUserAuthenticatorController(container: IContainer) {\n        return new UserAuthenticatorController({ service: this.resolveUserAuthenticatorService(container) });\n    }\n\n    private mfaLoginService? : OAuth2MfaLoginService;\n\n    protected resolveMfaLoginService(container: IContainer) : OAuth2MfaLoginService {\n        if (this.mfaLoginService) {\n            return this.mfaLoginService;\n        }\n\n        this.mfaLoginService = new OAuth2MfaLoginService({\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            ticketIssuer: container.resolve(OAuth2InjectionToken.MfaTokenIssuer),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n            tokenRepository: container.resolve(OAuth2InjectionToken.TokenRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            metrics: container.resolve(MetricsInjectionKey),\n        });\n\n        return this.mfaLoginService;\n    }\n\n    createAuthenticatorChallengeController(container: IContainer) {\n        return new AuthenticatorChallengeController({\n            service: this.resolveUserAuthenticatorService(container),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            mfaLoginService: this.resolveMfaLoginService(container),\n        });\n    }\n\n    createEventController(container: IContainer) {\n        const service = container.resolve(DatabaseInjectionKey.EventService);\n        return new EventController({ service });\n    }\n\n    createUserService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        return new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n    }\n\n    createUserController(container: IContainer) {\n        return new UserController({ service: this.createUserService(container) });\n    }\n\n    createUserInfoController(container: IContainer) {\n        return new UserInfoController({ service: this.createUserService(container) });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const systemClientProvisioner = new SystemClientProvisioner({\n            clientRepository,\n            scopeRepository: new ScopeRepositoryAdapter({\n                repository: container.resolve<Repository<Scope>>(ScopeEntity),\n                realmRepository,\n            }),\n            clientScopeRepository: new ClientScopeRepositoryAdapter(\n                container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n            ),\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n        const keyProvisioner = new KeyProvisioner({\n            keyStore: container.resolve(OAuth2InjectionToken.KeyStore),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            realmProvisioners: [\n                systemClientProvisioner,\n                keyProvisioner,\n                new LazyWildcardRealmProvisioner(container),\n            ],\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: {\n                baseURL: config.publicUrl,\n                mtlsBaseURL: config.mtlsPublicUrl,\n                clientCertificatesEnabled: config.certificateSource !== 'disabled',\n            },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6KA,IAAawI,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,kBAAkB,KAAKC,sBAAsBJ,SAAAA;EACnD,MAAMK,iBAAiB,KAAKC,qBAAqBN,SAAAA;EACjD,MAAMO,uBAAuB,MAAM,KAAKC,2BAA2BR,SAAAA;EACnE,MAAMS,6BAA6B,KAAKC,iCAAiCV,SAAAA;EACzE,MAAMW,mBAAmB,KAAKC,uBAAuBZ,SAAAA;EACrD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,0BAA0B,KAAKC,8BAA8BpB,SAAAA;EACnE,MAAMqB,2BAA2B,KAAKC,+BAA+BtB,SAAAA;EACrE,MAAMuB,kBAAkB,KAAKC,sBAAsBxB,SAAAA;EACnD,MAAMyB,gBAAgB,KAAKC,oBAAoB1B,SAAAA;EAC/C,MAAM2B,wBAAwB,KAAKC,4BAA4B5B,SAAAA;EAC/D,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,yBAAyB,KAAKC,6BAA6BhC,SAAAA;EACjE,MAAMiC,oBAAoB,KAAKC,wBAAwBlC,SAAAA;EACvD,MAAMmC,oCAAoC,KAAKC,wCAAwCpC,SAAAA;EACvF,MAAMqC,iBAAiB,KAAKC,qBAAqBtC,SAAAA;EACjD,MAAMuC,0BAA0B,KAAKC,8BAA8BxC,SAAAA;EACnE,MAAMyC,8BAA8B,KAAKC,kCAAkC1C,SAAAA;EAC3E,MAAM2C,2BAA2B,KAAKC,+BAA+B5C,SAAAA;EACrE,MAAM6C,qBAAqB,KAAKC,yBAAyB9C,SAAAA;EACzD,MAAM+C,mBAAmB,KAAKC,uBAAuBhD,SAAAA;EACrD,MAAMiD,iCAAiC,KAAKC,qCAAqClD,SAAAA;EAEjFD,OAAOoD,IAAI9L,WAAW,EAClB+L,aAAa;GACT,KAAKC,gBAAgBrD,SAAAA;GACrB,KAAKsD,YAAYtD,SAAAA;GACjB,KAAKuD,oBAAoBvD,SAAAA;GACzB,KAAKwD,uBAAuBxD,SAAAA;GAC5B,KAAKyD,yBAAyBzD,SAAAA;GAC9B,KAAK0D,+BAA+B1D,SAAAA;GACpC,KAAK2D,8BAA8B3D,SAAAA;GACnC,KAAK4D,yBAAyB5D,SAAAA;GAC9B,KAAK6D,uBAAuB7D,SAAAA;GAC5B,KAAK8D,uCAAuC9D,SAAAA;GAC5C,KAAK+D,yBAAyB/D,SAAAA;GAC9B,KAAKgE,wBAAwBhE,SAAAA;GAE7B,KAAKiE,uBAAuBjE,SAAAA;GAE5BW;GACAE;GACAE;GACAE;GACAgB;GACAhC;GACAkC;GACAc;GACA,KAAKiB,uBAAuBlE,SAAAA;GAC5ByB;GACAE;GACApB;GACAE;GACAsC;GACA5C;GACAE;GACAc;GACAE;GACAE;GACAM;GACAE;GACAM;GACAE;GACAE;GACAE;GACAE;EACH,EACL,CAAA,CAAA;CACJ;CAIAQ,gBAAgBrD,WAAuB;EACnC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,MAAM+E,aAAarE,UAAUoE,QAAQlF,qBAAqBoF,uBAAuB;EACjF,MAAMC,sBAAsBvE,UAAUoE,QAAQlF,qBAAqBsF,gCAAgC;EAEnG,MAAMC,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAElF,MAAMC,eAAe3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;EACxE,MAAMC,UAAU7E,UAAUoE,QAAQxE,mBAAAA;EAElC,OAAO,IAAI5D,oBAAoB;GAC3B8I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;IAC/BgB,mBAAmBhB,OAAOgB;IAC1BC,oBAAoBjB,OAAOiB;GAC/B;GAEAf;GACAE;GAEAE;GAEAE;GACAE;GAEAQ,sBAAsB,KAAKC,gCAAgCtF,SAAAA;GAC3DuF,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GAEzDyF,gBAAgB,KAAKC,qBAAqB1F,SAAAA;GAC1C2F,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;CACJ;CAEA6D,YAAYtD,WAAuB;EAC/B,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMqG,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMmG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EAEpE,MAAMpB,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAElF,MAAMoB,eAAe9F,UAAUoE,QAAQlF,qBAAqB6G,yBAAyB;EAErF,MAAMC,oBAAoBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;EAClF,MAAMC,qBAAqBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;EACpF,MAAMC,oBAAoBpG,UAAUoE,QAAQlF,qBAAqBmH,iBAAiB;EAClF,MAAMC,WAAWtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;EAEhE,MAAMC,eAAexG,UAAUoE,QAAQlF,qBAAqBuH,YAAY;EACxE,MAAMC,gBAAgB1G,UAAUoE,QAAQlF,qBAAqByH,aAAa;EAC1E,MAAMC,kBAAkB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;EAC9E,MAAMC,yBAAyB9G,UAAUoE,QAAQlF,qBAAqB6H,sBAAsB;EAE5F,MAAMC,mBAAmBhH,UAAUoE,QAAQhF,qBAAqB6H,QAAQ;EACxE,MAAMC,8CAA8ClH,UAAUoE,QAAQhF,qBAAqB+H,mCAAmC;EAE9H,MAAMC,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAE5F,MAAMC,oBAAoB,IAAItK,yBAAyB,CACnDkK,6CACA,IAAItI,kBAAkBoI,gBAAAA,CACzB,CAAA;EAED,MAAMO,4BAA4B,IAAIhK,0BAA0B;GAC5DyJ;GACAQ,sBAAsB,IAAI9K,2BAA2B,EAAE+K,uBAAuB,IAAI7N,6BAA6BgM,UAAAA,EAAY,CAAA;EAC/H,CAAA;EAEA,MAAMjB,eAAe3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;EACxE,MAAMC,UAAU7E,UAAUoE,QAAQxE,mBAAAA;EAElC,MAAM8H,uBAAuB,IAAIrK,qBAAqB;GAClDsK,YAAY3H,UAAUoE,QAAQrL,qBAAqB6O,eAAe;GAClE9C,SAAS;IACL+C,SAAS1D,OAAO2D;IAChBC,WAAW5D,OAAO6D;IAClBC,eAAe9D,OAAO+D;GAC1B;EACJ,CAAA;EAEA,OAAO,IAAI1L,gBAAgB;GACvBsJ;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAnC;GACAE;GACA6C;GACAS,0BAA0B,KAAK7C,gCAAgCtF,SAAAA;GAC/DoI,iBAAiB,KAAKC,uBAAuBrI,SAAAA;GAC7CuF,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GAEzDsI,yBAAyBnE,OAAOmE;GAChC3C;GAEAqB;GACAI;GAEAE;GAEAC;GACAgB,mBAAmBpE,OAAOoE;GAE1BC,iBAAiB,IAAIjP,uBAAuByG,UAAUoE,QAA2BpM,WAAAA,CAAAA;GAEjFyM;EACJ,CAAA;CACJ;CAEAjB,uBAAuBxD,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAInD,iBAAiB,EAAE4I,SAASZ,OAAOa,UAAU,CAAA;CAC5D;CAEAvB,yBAAyBzD,WAAuB;EAC5C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIxD,mBAAmB;GAC1BgJ,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0B1I,SAAAA;EAC5C,CAAA;CACJ;CAEA0D,+BAA+B1D,WAAuB;EAClD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIlD,yBAAyB;GAChC0I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8B3I,SAAAA;EAChD,CAAA;CACJ;CAEA2D,8BAA8B3D,WAAuB;EACjD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIjD,wBAAwB;GAC/ByI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8B3I,SAAAA;EAChD,CAAA;CACJ;CAEA2I,8BAA8B3I,WAAuB;EACjD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAI3N,sBAAsB;GACzC2N,YAAY,IAAIlP,eAAemN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAa5I,UAAUoE,QAAQ1E,gBAAAA;EACrC,MAAMmJ,uBAAuB7I,UAAUoE,QAAQzE,gCAAAA;EAE/C,OAAO,IAAIjC,wBAAwB;GAC/BkL;GACAC;GACAlB;GACAa,iBAAiB,IAAIjP,uBAAuBiP,eAAAA;GAC5C7D,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEE,SAAS;IACLgE,yBAAyB3E,OAAO2E;IAChCC,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEApF,yBAAyB5D,WAAuB;EAC5C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIhD,mBAAmB;GAC1BwI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0B1I,SAAAA;EAC5C,CAAA;CACJ;CAEA6D,uBAAuB7D,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMoH,gBAAgB1G,UAAUoE,QAAQlF,qBAAqByH,aAAa;EAC1E,MAAMlC,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAClF,MAAMuE,mBAAmBjJ,UAAUoE,QAAQlF,qBAAqBgK,gBAAgB;EAChF,MAAMV,kBAAkB,IAAIjP,uBAAuByG,UAAUoE,QAA2BpM,WAAAA,CAAAA;EAExF,MAAMmR,oBAAoB,IAAI3L,wBAAwB;GAClDkJ;GACAjC;GACAwE;GACAT;GACA7D,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEwE,iBAAiBjF,OAAOkF;EAC5B,CAAA;EAEA,OAAO,IAAInN,iBAAiB;GACxB4I,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GACrCmE;EACJ,CAAA;CACJ;CAEAlF,uBAAuBjE,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAI/C,iBAAiB,EAAEuI,SAAS,EAAEG,UAAU,KAAKC,gBAAgBf,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAH,wBAAwBhE,WAAuB;EAC3C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIzD,kBAAkB,EACzBiJ,SAAS;GACLC,SAASZ,OAAOa;GAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GAC/BmF,gBAAgB/J,cAAc4E,MAAAA;EAClC,EACJ,CAAA;CACJ;CAEAe,gBAAgBf,QAAyC;EACrD,OAAO;GACHoF,cAAcpF,OAAOqF;GACrBC,kBAAkBtF,OAAO2E;GACzBY,mBAAmBvF,OAAO4E;GAC1BY,gBAAgBxF,OAAOyF;EAC3B;CACJ;CAEAlB,0BAA0B1I,WAAuB;EAC7C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAI3N,sBAAsB;GACzC2N,YAAY,IAAIlP,eAAemN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAa5I,UAAUoE,QAAQ1E,gBAAAA;EACrC,MAAMmJ,uBAAuB7I,UAAUoE,QAAQzE,gCAAAA;EAE/C,OAAO,IAAIzB,oBAAoB;GAC3B0K;GACAC;GACAlB;GACAa,iBAAiB,IAAIjP,uBAAuBiP,eAAAA;GAC5C7D,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEE,SAAS;IACL0E,qBAAqBrF,OAAOqF;IAC5BT,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEA9E,uBAAuBlE,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EAEpE,MAAMgE,iBAAiB7J,UAAUoE,QAAQhF,qBAAqB0K,sBAAsB;EAEpF,MAAMzF,aAAarE,UAAUoE,QAAQlF,qBAAqBoF,uBAAuB;EAEjF,MAAMC,sBAAsBvE,UAAUoE,QAAQlF,qBAAqBsF,gCAAgC;EAEnG,MAAMuF,eAAe/J,UAAUoE,QAAQlF,qBAAqB8K,yBAAyB;EAErF,MAAMxB,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAE7D,MAAM2P,aAAa,IAAI1O,kCAAkC;GACrD0O,YAAY,IAAIjQ,2BAA2BkO,UAAAA;GAC3C4C;EACJ,CAAA;EAEA,OAAO,IAAI/N,2BAA2B;GAClCqK,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC2C;GACAa,iBAAiB,IAAIjP,uBAAuBiP,eAAAA;GAC5CS,kBAAkBjJ,UAAUoE,QAAQlF,qBAAqBgK,gBAAgB;GAEzEW;GAEAxF;GACAE;GACAwF;GAEAxE,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GACzD2E,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEe,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;CACJ;CAEAmB,uBAAuBZ,WAAuB;EAC1C,MAAMwI,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAI/O,wBAAwB;GAC3C+O,YAAY3H,UAAUoE,QAA4B9M,YAAAA;GAClDkR;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAI1Q,uBAAuBiP,eAAAA;EAC1D,MAAMC,UAAU,IAAI3L,cAAc;GAC9B6K;GACAa,iBAAiByB;EACrB,CAAA;EACA,OAAO,IAAI/P,iBAAiB;GACxBuO;GACAd;EACJ,CAAA;CACJ;CAEQuC,2BAA2BlK,WAAoD;EACnF,OAAO,IAAI3G,4BAA4B;GACnCsO,YAAY3H,UAAUoE,QAAgCvM,gBAAAA;GACtD2Q,iBAAiBxI,UAAUoE,QAA2BpM,WAAAA;EAC1D,CAAA;CACJ;CAEQmS,qBAAqBnK,WAA8C;EACvE,OAAO,IAAItG,sBAAsB;GAC7BiO,YAAY3H,UAAUoE,QAA0BlM,UAAAA;GAChDsQ,iBAAiBxI,UAAUoE,QAA2BpM,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAMwI,2BAA2BR,WAAuB;EACpD,MAAM4F,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAItO,4BAA4B;GAC/CsO,YAAY3H,UAAUoE,QAAgCvM,gBAAAA;GACtD2Q;EACJ,CAAA;EAEA,MAAMyB,yBAAyB,IAAI1Q,uBAAuBiP,eAAAA;EAC1D,MAAM4B,iBAAiB,IAAI1Q,sBAAsB;GAC7CiO,YAAY3H,UAAUoE,QAA0BlM,UAAAA;GAChDsQ;EACJ,CAAA;EACA,MAAM6B,2BAA2B,IAAI5Q,gCACjCuG,UAAUoE,QAAoCjM,oBAAAA,CAAAA;EAElD,MAAMmS,mBAAmB,IAAIhR,wBAAwB;GACjDqO,YAAY,IAAI5P,iBAAiB6N,UAAAA;GACjC4C;EACJ,CAAA;EAEA,MAAM+B,6BAA6B,IAAInR,kCACnC4G,UAAUoE,QAAsCtM,sBAAAA,CAAAA;EAGpD,MAAM2Q,UAAU,IAAI5K,kBAAkB;GAClC8J;GACAa,iBAAiByB;GACjBG;GACAC;GACAC;GACAC;EACJ,CAAA;EAEA,MAAMnD,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMmD,qBAAqB,IAAIrR,2BAA2ByM,UAAAA;EAE1D,MAAM6E,iBAAiB,IAAI9M,yBAAyB;GAChDgK;GACAa,iBAAiByB;GACjBO;GACApD;EACJ,CAAA;EAEA,OAAO,IAAIxM,qBAAqB;GAC5B6N;GACAgC;EACJ,CAAA;CACJ;CAEAnK,qBAAqBN,WAAuB;EACxC,MAAMwI,kBAAkB,IAAIjP,uBACxByG,UAAUoE,QAA2BpM,WAAAA,CAAAA;EAEzC,MAAM2P,aAAa,IAAIjO,sBAAsB;GACzCiO,YAAY3H,UAAUoE,QAA0BlM,UAAAA;GAChDsQ,iBAAiBxI,UAAUoE,QAA2BpM,WAAAA;EAC1D,CAAA;EACA,MAAMyQ,UAAU,IAAIpK,YAAY;GAC5BsJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAIvN,eAAe,EAAEwN,QAAQ,CAAA;CACxC;CAEA3H,iCAAiCd,WAAuB;EACpD,MAAM2H,aAAa,IAAIhP,kCACnBqH,UAAUoE,QAAsC7M,sBAAAA,CAAAA;EAEpD,MAAMmT,uBAAuB,KAAKR,2BAA2BlK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI9L,wBAAwB;GACxCgL;GACA+C;GACAtD;EACJ,CAAA;EACA,OAAO,IAAIjN,2BAA2B,EAAEsO,QAAQ,CAAA;CACpD;CAEAzH,2BAA2BhB,WAAuB;EAC9C,MAAM2H,aAAa,IAAI9O,4BACnBmH,UAAUoE,QAAgC5M,gBAAAA,CAAAA;EAE9C,MAAM4P,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI7L,kBAAkB;GAAE+K;GAAYP;EAA2B,CAAA;EAC/E,OAAO,IAAIhN,qBAAqB,EAAEqO,QAAQ,CAAA;CAC9C;CAEAvH,4BAA4BlB,WAAuB;EAC/C,MAAM2H,aAAa,IAAI7O,6BACnBkH,UAAUoE,QAAiC3M,iBAAAA,CAAAA;EAE/C,MAAMgR,UAAU,IAAI5L,mBAAmB,EAAE8K,WAAW,CAAA;EACpD,OAAO,IAAItN,sBAAsB,EAAEoO,QAAQ,CAAA;CAC/C;CAEArH,8BAA8BpB,WAAuB;EACjD,MAAM4F,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM8B,aAAa,IAAInO,+BACnBwG,UAAUoE,QAAmCnM,mBAAAA,CAAAA;EAEjD,MAAM0S,gBAAgB,IAAIC,IACtBhF,WAAWiF,YAAY3S,UAAAA,CAAAA,CAAY4S,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMxC,UAAU,IAAItK,qBAAqB;GAAEwJ;GAAYgD;EAAc,CAAA;EACrE,OAAO,IAAI3P,wBAAwB,EAAEyN,QAAQ,CAAA;CACjD;CAEAnH,+BAA+BtB,WAAuB;EAClD,MAAM2H,aAAa,IAAIlO,gCACnBuG,UAAUoE,QAAoCjM,oBAAAA,CAAAA;EAElD,MAAMuS,uBAAuB,KAAKR,2BAA2BlK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIrK,sBAAsB;GACtCuJ;GACA+C;GACAtD;EACJ,CAAA;EACA,OAAO,IAAIlM,yBAAyB,EAAEuN,QAAQ,CAAA;CAClD;CAEA/H,iCAAiCV,WAAuB;EACpD,MAAM2H,aAAa,IAAIvO,kCACnB4G,UAAUoE,QAAsCtM,sBAAAA,CAAAA;EAEpD,MAAM2Q,UAAU,IAAI7K,wBAAwB,EAAE+J,WAAW,CAAA;EACzD,OAAO,IAAI9M,2BAA2B,EAAE4N,QAAQ,CAAA;CACpD;CAEAjH,sBAAsBxB,WAAuB;EACzC,MAAMwI,kBAAkB,IAAIjP,uBACxByG,UAAUoE,QAA2BpM,WAAAA,CAAAA;EAEzC,MAAM2P,aAAa,IAAIhO,uBAAuB;GAC1CgO,YAAY3H,UAAUoE,QAA2BhM,WAAAA;GACjDoQ,iBAAiBxI,UAAUoE,QAA2BpM,WAAAA;EAC1D,CAAA;EACA,MAAMyQ,UAAU,IAAInK,aAAa;GAC7BqJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAIrN,gBAAgB,EAAEsN,QAAQ,CAAA;CACzC;CAEA/G,oBAAoB1B,WAAuB;EAGvC,MAAMyI,UAAU,IAAIrL,WAAW;GAC3BuK,YAAY3H,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;GAC3D5B,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEsG,gBAAgBtP;EACpB,CAAA;EACA,OAAO,IAAIjB,cAAc,EAAE8N,QAAQ,CAAA;CACvC;CAEA7G,4BAA4B5B,WAAuB;EAC/C,MAAM2H,aAAa,IAAI/N,6BACnBoG,UAAUoE,QAAQrL,qBAAqB8M,UAAU,CAAA;EAErD,MAAM4C,UAAU,IAAI/J,mBAAmB;GACnCiJ;GACAhD,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEsG,gBAAgBtP;EACpB,CAAA;EACA,OAAO,IAAIN,sBAAsB,EAAEmN,QAAQ,CAAA;CAC/C;CAEAzG,6BAA6BhC,WAAuB;EAChD,MAAM2H,aAAa3H,UAAUoE,QAAQlF,qBAAqB6H,sBAAsB;EAChF,MAAMH,kBAAkB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;EAC9E,MAAM4B,UAAU,IAAIjK,oBAAoB;GAAEmJ;GAAYf;EAAgB,CAAA;EACtE,OAAO,IAAIvL,uBAAuB,EAAEoN,QAAQ,CAAA;CAChD;CAEA3G,wBAAwB9B,WAAuB;EAC3C,MAAM2H,aAAa3H,UAAUoE,QAAQnF,2BAA2BkM,iBAAiB;EACjF,MAAM1C,UAAU,IAAIlK,eAAe,EAAEoJ,WAAW,CAAA;EAChD,OAAO,IAAIvM,kBAAkB,EAAEqN,QAAQ,CAAA;CAC3C;CAEU/C,qBAAqB1F,WAAwC;EACnE,MAAM2H,aAAa3H,UAAUoE,QAAQlF,qBAAqBkM,iBAAiB;EAC3E,OAAO,IAAIrO,eAAe,EAAE4K,WAAW,CAAA;CAC3C;CAEAzF,wBAAwBlC,WAAuB;EAC3C,OAAO,IAAI1F,kBAAkB,EAAEmO,SAAS,KAAK/C,qBAAqB1F,SAAAA,EAAW,CAAA;CACjF;CAEAoC,wCAAwCpC,WAAuB;EAC3D,MAAM4F,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM4C,UAAU,IAAIxL,+BAA+B;GAC/C0K,YAAY,IAAI3O,yCAAyC4M,UAAAA;GACzDyF,gBAAgB,IAAIhM,uBAAuB;IACvCsI,YAAY,IAAIlP,eAAemN,UAAAA;IAC/B0F,0BAA0BtL,UAAUoE,QAAoC5L,oBAAAA;IACxE+S,oBAAoBvL,UAAUoE,QAA8B1L,cAAAA;GAChE,CAAA;GACAiM,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEsG,gBAAgBtP;EACpB,CAAA;EACA,OAAO,IAAIpB,kCAAkC,EAAEiO,QAAQ,CAAA;CAC3D;CAEQlD;CAEEC,6BAA6BxF,WAAqD;EACxF,IAAI,KAAKuF,uBACL,OAAO,KAAKA;EAGhB,MAAMK,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EAEpE,KAAKN,wBAAwB,IAAIjI,4BAA4B;GACzDkO,gBAAgB,IAAIzT,iBAAiB6N,UAAAA;GACrCwB,4BAA4BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;GACrF1B,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;EAEA,OAAO,KAAK8F;CAChB;CAEQ4C;CAEE7C,gCAAgCtF,WAAkD;EACxF,IAAI,KAAKmI,0BACL,OAAO,KAAKA;EAGhB,MAAMhE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EAEpE,MAAM8B,aAAa,IAAI7N,mCACnBkG,UAAUoE,QAA4C9L,uBAAAA,CAAAA;EAE1D,MAAM+S,iBAAiB,IAAIrR,sBAAsB;GAC7C2N,YAAY,IAAIlP,eAAemN,UAAAA;GAC/B4C,iBAAiBxI,UAAUoE,QAA2BpM,WAAAA;EAC1D,CAAA;EAEA,IAAIyT;EACJ,IAAIC;EAKJ,IAAI;GACA,MAAMC,MAAM,IAAIC,IAAIzH,OAAOa,SAAS;GACpCyG,SAASE,IAAIE;GACbH,WAAW;IACPI,MAAMH,IAAIE;IACVE,QAAQN;IACRO,QAAQL,IAAIK;GAChB;EACJ,QAAQ;GACJP,SAASQ,KAAAA;GACTP,WAAWO,KAAAA;EACf;EAEA,KAAK9D,2BAA2B,IAAItJ,yBAAyB;GACzD8I;GACA0D;GACAa,OAAOlM,UAAUoE,QAAQ5E,iBAAAA;GACzB2M,QAAQ,IAAInO,YAAY,EAAEsI,UAAUtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ,EAAE,CAAA;GACrF5B,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEsG,gBAAgBtP;GAChBgN,YAAY5I,UAAUoE,QAAQ1E,gBAAAA;GAC9BmJ,sBAAsB7I,UAAUoE,QAAQzE,gCAAAA;GACxCmF,SAAS;IACL+C,SAAS1D,OAAOiI;IAChBC,UAAUlI,OAAOmI;IACjBb;IACAC;GACJ;EACJ,CAAA;EAEA,OAAO,KAAKvD;CAChB;CAEAzF,kCAAkC1C,WAAuB;EACrD,OAAO,IAAIxE,4BAA4B,EAAEiN,SAAS,KAAKnD,gCAAgCtF,SAAAA,EAAW,CAAA;CACtG;CAEQoI;CAEEC,uBAAuBrI,WAA+C;EAC5E,IAAI,KAAKoI,iBACL,OAAO,KAAKA;EAGhB,KAAKA,kBAAkB,IAAI3K,sBAAsB;GAC7CgH,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3E6H,cAAcvM,UAAUoE,QAAQlF,qBAAqBsN,cAAc;GACnExG,mBAAmBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;GAC3EC,oBAAoBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;GAC7ES,iBAAiB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;GACvElC,cAAc3E,UAAUoE,QAAQrL,qBAAqB6L,YAAY;GACjEC,SAAS7E,UAAUoE,QAAQxE,mBAAAA;EAC/B,CAAA;EAEA,OAAO,KAAKwI;CAChB;CAEAtE,uCAAuC9D,WAAuB;EAC1D,OAAO,IAAIjE,iCAAiC;GACxC0M,SAAS,KAAKnD,gCAAgCtF,SAAAA;GAC9CyE,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3E0D,iBAAiB,KAAKC,uBAAuBrI,SAAAA;EACjD,CAAA;CACJ;CAEAE,sBAAsBF,WAAuB;EACzC,MAAMyI,UAAUzI,UAAUoE,QAAQrL,qBAAqB6L,YAAY;EACnE,OAAO,IAAIrK,gBAAgB,EAAEkO,QAAQ,CAAA;CACzC;CAEAgE,kBAAkBzM,WAAuB;EACrC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAI3N,sBAAsB;GACzC2N,YAAY,IAAIlP,eAAemN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAI1Q,uBAAuBiP,eAAAA;EAC1D,OAAO,IAAIxJ,YAAY;GACnB2I;GACAa,iBAAiByB;GACjBjB,mBAAmB7E,OAAO6E;EAC9B,CAAA;CACJ;CAEA1G,qBAAqBtC,WAAuB;EACxC,OAAO,IAAIvE,eAAe,EAAEgN,SAAS,KAAKgE,kBAAkBzM,SAAAA,EAAW,CAAA;CAC3E;CAEA+D,yBAAyB/D,WAAuB;EAC5C,OAAO,IAAIvD,mBAAmB,EAAEgM,SAAS,KAAKgE,kBAAkBzM,SAAAA,EAAW,CAAA;CAC/E;CAEAwC,8BAA8BxC,WAAuB;EACjD,MAAM4F,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM8B,aAAa,IAAI9N,+BACnBmG,UAAUoE,QAAmC/L,mBAAAA,CAAAA;EAEjD,MAAMsS,gBAAgB,IAAIC,IACtBhF,WAAWiF,YAAYtS,UAAAA,CAAAA,CAAYuS,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMxC,UAAU,IAAI9J,qBAAqB;GAAEgJ;GAAYgD;EAAc,CAAA;EACrE,OAAO,IAAIpP,wBAAwB,EAAEkN,QAAQ,CAAA;CACjD;CAEA7F,+BAA+B5C,WAAuB;EAClD,MAAM2H,aAAa,IAAI5N,gCACnBiG,UAAUoE,QAAoC5L,oBAAAA,CAAAA;EAElD,MAAMkS,uBAAuB,KAAKR,2BAA2BlK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI3J,sBAAsB;GACtC6I;GACA+C;GACAtD;EACJ,CAAA;EACA,OAAO,IAAI1L,yBAAyB,EAAE+M,QAAQ,CAAA;CAClD;CAEA3F,yBAAyB9C,WAAuB;EAC5C,MAAM2H,aAAa,IAAI1N,0BACnB+F,UAAUoE,QAA8B1L,cAAAA,CAAAA;EAE5C,MAAM0O,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI1J,gBAAgB;GAAE4I;GAAYP;EAA2B,CAAA;EAC7E,OAAO,IAAIzL,mBAAmB,EAAE8M,QAAQ,CAAA;CAC5C;CAEAzF,uBAAuBhD,WAAuB;EAC1C,MAAM4F,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAIrO,wBAAwB;GAC3CqO,YAAY,IAAI5P,iBAAiB6N,UAAAA;GACjC4C;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAI1Q,uBAAuBiP,eAAAA;EAC1D,MAAMC,UAAU,IAAI1K,cAAc;GAC9B4J;GACAa,iBAAiByB;EACrB,CAAA;EACA,MAAM7C,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoD,iBAAiB,IAAI3M,qBAAqB;GAC5C6J;GACAa,iBAAiByB;GACjB7C;EACJ,CAAA;EAEA,OAAO,IAAItM,iBAAiB;GACxB2N;GACAgC;EACJ,CAAA;CACJ;CAEAvH,qCAAqClD,WAAuB;EACxD,MAAM2H,aAAa,IAAIzO,6CACnB8G,UAAUoE,QAAyBzM,iCAAAA,CAAAA;EAEvC,MAAMyS,iBAAiB,KAAKD,qBAAqBnK,SAAAA;EACjD,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIvL,mCAAmC;GACnDyK;GACAyC;GACAhD;EACJ,CAAA;EACA,OAAO,IAAI1M,sCAAsC,EAAE+N,QAAQ,CAAA;CAC/D;CAEAlF,oBAAoBvD,WAAuB;EAEvC,MAAM2H,aADa3H,UAAUoE,QAAQrL,qBAAqB8M,UACvCD,CAAAA,CAAW8G,cAAc9U,SAAAA;EAC5C,OAAO,IAAIqE,cAAc,EAAE0L,WAAW,CAAA;CAC1C;CAEAvH,sBAAsBJ,WAAuB;EACzC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQrL,qBAAqB8M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BpM,WAAAA;EAC7D,MAAM2P,aAAa,IAAIpO,uBAAuBiP,eAAAA;EAE9C,MAAMS,mBAAmB,IAAIrQ,wBAAwB;GACjD+O,YAAY3H,UAAUoE,QAA4B9M,YAAAA;GAClDkR;EACJ,CAAA;EACA,MAAM7C,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMkN,0BAA0B,IAAIlO,wBAAwB;GACxDwK;GACA2D,iBAAiB,IAAIjT,uBAAuB;IACxCgO,YAAY3H,UAAUoE,QAA2BhM,WAAAA;IACjDoQ;GACJ,CAAA;GACAqE,uBAAuB,IAAI/T,6BACvBkH,UAAUoE,QAAiC3M,iBAAAA,CAAAA;GAE/CqV,YAAYvN,cAAc4E,MAAAA;GAC1BwB;EACJ,CAAA;EACA,MAAMoH,iBAAiB,IAAI5P,eAAe;GACtCmJ,UAAUtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;GACzDZ;EACJ,CAAA;EAEA,MAAM8C,UAAU,IAAIxK,aAAa;GAC7B0J;GACAqF,mBAAmB;IACfL;IACAI;IACA,IAAI5N,6BAA6Ba,SAAAA;GACpC;GACD2F;EACJ,CAAA;EACA,MAAMsH,gBAAgBrH,WAAW8G,cAAc9U,SAAAA;EAE/C,OAAO,IAAImD,gBAAgB;GACvB+J,SAAS;IACLC,SAASZ,OAAOa;IAChBkI,aAAa/I,OAAOgJ;IACpBC,2BAA2BjJ,OAAOoE,sBAAsB;GAC5D;GACAE;GACAwE;EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserAuthenticatorEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderAccountRepositoryAdapter","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","TrustAnchorRepositoryAdapter","UserAttributeRepositoryAdapter","UserAuthenticatorRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","ConsentController","EventController","IdentityProviderAccountController","IdentityProviderController","IdentityProviderRoleMappingController","KeyController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","SessionTokenController","TrustAnchorController","UserAttributeController","UserAuthenticatorController","UserController","UserPermissionController","UserRoleController","useRequestEventContext","AccountController","ActivateController","AuthenticatorChallengeController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","UserInfoController","ClientCertificateValidator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","ConsentService","CredentialsAuthenticator","IdentityProviderAccountService","IdentityProviderRoleMappingService","KeyProvisioner","KeyService","LoginThrottleService","OAuth2AccessPolicyEvaluator","OAuth2ClientAuthenticator","OAuth2EndSessionService","OAuth2FederatedLoginService","OAuth2MfaLoginService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmCipher","RealmService","RegistrationService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","SessionTokenService","SystemClientProvisioner","TrustAnchorService","UserAttributeService","UserAuthenticator","UserAuthenticatorService","UserPermissionService","UserRoleService","UserService","AuthenticationInjectionKey","OAuth2InjectionToken","LazyWildcardRealmProvisioner","IdentityInjectionKey","UserIdentityRepository","ConfigInjectionKey","getAppOrigins","CacheInjectionKey","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","MetricsInjectionKey","HTTPControllerModule","mount","router","container","eventController","createEventController","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","keyController","createKeyController","trustAnchorController","createTrustAnchorController","sessionController","createSessionController","sessionTokenController","createSessionTokenController","consentController","createConsentController","identityProviderAccountController","createIdentityProviderAccountController","userController","createUserController","userAttributeController","createUserAttributeController","userAuthenticatorController","createUserAuthenticatorController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createAuthenticatorChallengeController","createUserInfoController","createAccountController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","eventService","EventService","metrics","options","baseURL","publicUrl","features","buildUIFeatures","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","resolveUserAuthenticatorService","accessPolicyEvaluator","resolveAccessPolicyEvaluator","consentService","createConsentService","logger","dataSource","DataSource","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyStore","KeyStore","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","userAuthenticator","oauth2ClientAuthenticator","certificateValidator","trustAnchorRepository","loginThrottleService","repository","EventRepository","enabled","loginAttemptThrottleEnabled","threshold","loginAttemptThreshold","windowSeconds","loginAttemptWindow","userAuthenticatorService","mfaLoginService","resolveMfaLoginService","tokenRefreshGracePeriod","certificateSource","realmRepository","service","createRegistrationService","createPasswordRecoveryService","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","trustedOrigins","registration","registrationEnabled","passwordRecovery","emailVerification","accountConsole","accountConsoleEnabled","accountManager","ProviderAccountManager","linkStore","ProviderAccountLinkStore","stateManager","AuthorizationStateManager","loginService","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","requestContext","SessionRepository","ConsentRepository","userRepository","userPermissionRepository","userRoleRepository","policyProvider","issuer","webauthn","url","URL","hostname","rpId","rpName","origin","undefined","cache","cipher","mfaEnabled","required","mfaRequired","ticketIssuer","MfaTokenIssuer","createUserService","getRepository","systemClientProvisioner","scopeRepository","clientScopeRepository","appOrigins","keyProvisioner","realmProvisioners","keyRepository","mtlsBaseURL","mtlsPublicUrl","clientCertificatesEnabled"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserAuthenticator as UserAuthenticatorModel,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserAuthenticatorEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderAccountRepositoryAdapter,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    TrustAnchorRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserAuthenticatorRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    ConsentController,\n    EventController,\n    IdentityProviderAccountController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    KeyController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    SessionTokenController,\n    TrustAnchorController,\n    UserAttributeController,\n    UserAuthenticatorController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n    useRequestEventContext,\n} from '../../../../adapters/http/index.ts';\nimport {\n    AccountController,\n    ActivateController,\n    AuthenticatorChallengeController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n    UserInfoController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCertificateValidator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    ConsentService,\n    CredentialsAuthenticator,\n    IdentityProviderAccountService,\n    IdentityProviderRoleMappingService,\n    KeyProvisioner,\n    KeyService,\n    LoginThrottleService,\n    OAuth2AccessPolicyEvaluator,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    OAuth2FederatedLoginService,\n    OAuth2MfaLoginService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmCipher,\n    RealmService,\n    RegistrationService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    SessionTokenService,\n    SystemClientProvisioner,\n    TrustAnchorService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserAuthenticatorService,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { LazyWildcardRealmProvisioner } from '../../provisioning/lazy-wildcard.ts';\nimport { IdentityInjectionKey, UserIdentityRepository } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { CacheInjectionKey } from '../../cache/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\nimport { MetricsInjectionKey } from '../../metrics/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const eventController = this.createEventController(container);\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const keyController = this.createKeyController(container);\n        const trustAnchorController = this.createTrustAnchorController(container);\n        const sessionController = this.createSessionController(container);\n        const sessionTokenController = this.createSessionTokenController(container);\n        const consentController = this.createConsentController(container);\n        const identityProviderAccountController = this.createIdentityProviderAccountController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userAuthenticatorController = this.createUserAuthenticatorController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n                this.createAuthenticatorChallengeController(container),\n                this.createUserInfoController(container),\n                this.createAccountController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                consentController,\n                eventController,\n                identityProviderAccountController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                keyController,\n                trustAnchorController,\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                sessionTokenController,\n                userController,\n                userAttributeController,\n                userAuthenticatorController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n                mfaFreshnessMaxAge: config.mfaFreshnessMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n\n            eventService,\n            metrics,\n\n            mfaChallengeProvider: this.resolveUserAuthenticatorService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            consentService: this.createConsentService(container),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyStore = container.resolve(OAuth2InjectionToken.KeyStore);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator({\n            identityResolver,\n            certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) }),\n        });\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        const loginThrottleService = new LoginThrottleService({\n            repository: container.resolve(DatabaseInjectionKey.EventRepository),\n            options: {\n                enabled: config.loginAttemptThrottleEnabled,\n                threshold: config.loginAttemptThreshold,\n                windowSeconds: config.loginAttemptWindow,\n            },\n        });\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyStore,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            eventService,\n            metrics,\n            loginThrottleService,\n            userAuthenticatorService: this.resolveUserAuthenticatorService(container),\n            mfaLoginService: this.resolveMfaLoginService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n            certificateSource: config.certificateSource,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { baseURL: config.publicUrl },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    createAccountController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new AccountController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                trustedOrigins: getAppOrigins(config),\n            },\n        });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n            accountConsole: config.accountConsoleEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n        const linkStore = container.resolve(IdentityInjectionKey.ProviderAccountLinkStore);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        const logger = container.resolve(LoggerInjectionKey);\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n\n        const loginService = new OAuth2FederatedLoginService({\n            options: { baseURL: config.publicUrl },\n\n            accountManager,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            codeRequestVerifier,\n            codeIssuer,\n\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n            eventService,\n            logger,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            accountManager,\n            linkStore,\n\n            codeRequestVerifier,\n            stateManager,\n            loginService,\n\n            eventService,\n            logger,\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createKeyController(container: IContainer) {\n        // the DI singleton carries the optional KEK cipher — never construct\n        // a fresh adapter here.\n        const service = new KeyService({\n            repository: container.resolve(OAuth2InjectionToken.KeyStore),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new KeyController({ service });\n    }\n\n    createTrustAnchorController(container: IContainer) {\n        const repository = new TrustAnchorRepositoryAdapter(\n            container.resolve(DatabaseInjectionKey.DataSource),\n        );\n        const service = new TrustAnchorService({\n            repository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new TrustAnchorController({ service });\n    }\n\n    createSessionTokenController(container: IContainer) {\n        const repository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const service = new SessionTokenService({ repository, tokenRepository });\n        return new SessionTokenController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({ repository });\n        return new SessionController({ service });\n    }\n\n    protected createConsentService(container: IContainer) : ConsentService {\n        const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);\n        return new ConsentService({ repository });\n    }\n\n    createConsentController(container: IContainer) {\n        return new ConsentController({ service: this.createConsentService(container) });\n    }\n\n    createIdentityProviderAccountController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const service = new IdentityProviderAccountService({\n            repository: new IdentityProviderAccountRepositoryAdapter(dataSource),\n            userRepository: new UserIdentityRepository({\n                repository: new UserRepository(dataSource),\n                userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n                userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n            }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new IdentityProviderAccountController({ service });\n    }\n\n    private accessPolicyEvaluator? : OAuth2AccessPolicyEvaluator;\n\n    protected resolveAccessPolicyEvaluator(container: IContainer) : OAuth2AccessPolicyEvaluator {\n        if (this.accessPolicyEvaluator) {\n            return this.accessPolicyEvaluator;\n        }\n\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        this.accessPolicyEvaluator = new OAuth2AccessPolicyEvaluator({\n            policyProvider: new PolicyRepository(dataSource),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        return this.accessPolicyEvaluator;\n    }\n\n    private userAuthenticatorService? : UserAuthenticatorService;\n\n    protected resolveUserAuthenticatorService(container: IContainer) : UserAuthenticatorService {\n        if (this.userAuthenticatorService) {\n            return this.userAuthenticatorService;\n        }\n\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const repository = new UserAuthenticatorRepositoryAdapter(\n            container.resolve<Repository<UserAuthenticatorModel>>(UserAuthenticatorEntity),\n        );\n        const userRepository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n\n        let issuer : string | undefined;\n        let webauthn : {\n            rpId: string, \n            rpName: string, \n            origin: string \n        } | undefined;\n        try {\n            const url = new URL(config.publicUrl);\n            issuer = url.hostname;\n            webauthn = {\n                rpId: url.hostname,\n                rpName: issuer,\n                origin: url.origin,\n            };\n        } catch {\n            issuer = undefined;\n            webauthn = undefined;\n        }\n\n        this.userAuthenticatorService = new UserAuthenticatorService({\n            repository,\n            userRepository,\n            cache: container.resolve(CacheInjectionKey),\n            cipher: new RealmCipher({ keyStore: container.resolve(OAuth2InjectionToken.KeyStore) }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n            mailClient: container.resolve(MailInjectionKey),\n            mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),\n            options: {\n                enabled: config.mfaEnabled,\n                required: config.mfaRequired,\n                issuer,\n                webauthn,\n            },\n        });\n\n        return this.userAuthenticatorService;\n    }\n\n    createUserAuthenticatorController(container: IContainer) {\n        return new UserAuthenticatorController({ service: this.resolveUserAuthenticatorService(container) });\n    }\n\n    private mfaLoginService? : OAuth2MfaLoginService;\n\n    protected resolveMfaLoginService(container: IContainer) : OAuth2MfaLoginService {\n        if (this.mfaLoginService) {\n            return this.mfaLoginService;\n        }\n\n        this.mfaLoginService = new OAuth2MfaLoginService({\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            ticketIssuer: container.resolve(OAuth2InjectionToken.MfaTokenIssuer),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n            tokenRepository: container.resolve(OAuth2InjectionToken.TokenRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            metrics: container.resolve(MetricsInjectionKey),\n        });\n\n        return this.mfaLoginService;\n    }\n\n    createAuthenticatorChallengeController(container: IContainer) {\n        return new AuthenticatorChallengeController({\n            service: this.resolveUserAuthenticatorService(container),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            mfaLoginService: this.resolveMfaLoginService(container),\n        });\n    }\n\n    createEventController(container: IContainer) {\n        const service = container.resolve(DatabaseInjectionKey.EventService);\n        return new EventController({ service });\n    }\n\n    createUserService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        return new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n    }\n\n    createUserController(container: IContainer) {\n        return new UserController({ service: this.createUserService(container) });\n    }\n\n    createUserInfoController(container: IContainer) {\n        return new UserInfoController({ service: this.createUserService(container) });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const systemClientProvisioner = new SystemClientProvisioner({\n            clientRepository,\n            scopeRepository: new ScopeRepositoryAdapter({\n                repository: container.resolve<Repository<Scope>>(ScopeEntity),\n                realmRepository,\n            }),\n            clientScopeRepository: new ClientScopeRepositoryAdapter(\n                container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n            ),\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n        const keyProvisioner = new KeyProvisioner({\n            keyStore: container.resolve(OAuth2InjectionToken.KeyStore),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            realmProvisioners: [\n                systemClientProvisioner,\n                keyProvisioner,\n                new LazyWildcardRealmProvisioner(container),\n            ],\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: {\n                baseURL: config.publicUrl,\n                mtlsBaseURL: config.mtlsPublicUrl,\n                clientCertificatesEnabled: config.certificateSource !== 'disabled',\n            },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8KA,IAAayI,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,kBAAkB,KAAKC,sBAAsBJ,SAAAA;EACnD,MAAMK,iBAAiB,KAAKC,qBAAqBN,SAAAA;EACjD,MAAMO,uBAAuB,MAAM,KAAKC,2BAA2BR,SAAAA;EACnE,MAAMS,6BAA6B,KAAKC,iCAAiCV,SAAAA;EACzE,MAAMW,mBAAmB,KAAKC,uBAAuBZ,SAAAA;EACrD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,0BAA0B,KAAKC,8BAA8BpB,SAAAA;EACnE,MAAMqB,2BAA2B,KAAKC,+BAA+BtB,SAAAA;EACrE,MAAMuB,kBAAkB,KAAKC,sBAAsBxB,SAAAA;EACnD,MAAMyB,gBAAgB,KAAKC,oBAAoB1B,SAAAA;EAC/C,MAAM2B,wBAAwB,KAAKC,4BAA4B5B,SAAAA;EAC/D,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,yBAAyB,KAAKC,6BAA6BhC,SAAAA;EACjE,MAAMiC,oBAAoB,KAAKC,wBAAwBlC,SAAAA;EACvD,MAAMmC,oCAAoC,KAAKC,wCAAwCpC,SAAAA;EACvF,MAAMqC,iBAAiB,KAAKC,qBAAqBtC,SAAAA;EACjD,MAAMuC,0BAA0B,KAAKC,8BAA8BxC,SAAAA;EACnE,MAAMyC,8BAA8B,KAAKC,kCAAkC1C,SAAAA;EAC3E,MAAM2C,2BAA2B,KAAKC,+BAA+B5C,SAAAA;EACrE,MAAM6C,qBAAqB,KAAKC,yBAAyB9C,SAAAA;EACzD,MAAM+C,mBAAmB,KAAKC,uBAAuBhD,SAAAA;EACrD,MAAMiD,iCAAiC,KAAKC,qCAAqClD,SAAAA;EAEjFD,OAAOoD,IAAI/L,WAAW,EAClBgM,aAAa;GACT,KAAKC,gBAAgBrD,SAAAA;GACrB,KAAKsD,YAAYtD,SAAAA;GACjB,KAAKuD,oBAAoBvD,SAAAA;GACzB,KAAKwD,uBAAuBxD,SAAAA;GAC5B,KAAKyD,yBAAyBzD,SAAAA;GAC9B,KAAK0D,+BAA+B1D,SAAAA;GACpC,KAAK2D,8BAA8B3D,SAAAA;GACnC,KAAK4D,yBAAyB5D,SAAAA;GAC9B,KAAK6D,uBAAuB7D,SAAAA;GAC5B,KAAK8D,uCAAuC9D,SAAAA;GAC5C,KAAK+D,yBAAyB/D,SAAAA;GAC9B,KAAKgE,wBAAwBhE,SAAAA;GAE7B,KAAKiE,uBAAuBjE,SAAAA;GAE5BW;GACAE;GACAE;GACAE;GACAgB;GACAhC;GACAkC;GACAc;GACA,KAAKiB,uBAAuBlE,SAAAA;GAC5ByB;GACAE;GACApB;GACAE;GACAsC;GACA5C;GACAE;GACAc;GACAE;GACAE;GACAM;GACAE;GACAM;GACAE;GACAE;GACAE;GACAE;EACH,EACL,CAAA,CAAA;CACJ;CAIAQ,gBAAgBrD,WAAuB;EACnC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,MAAM+E,aAAarE,UAAUoE,QAAQlF,qBAAqBoF,uBAAuB;EACjF,MAAMC,sBAAsBvE,UAAUoE,QAAQlF,qBAAqBsF,gCAAgC;EAEnG,MAAMC,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAElF,MAAMC,eAAe3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EACxE,MAAMC,UAAU7E,UAAUoE,QAAQxE,mBAAAA;EAElC,OAAO,IAAI7D,oBAAoB;GAC3B+I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;IAC/BgB,mBAAmBhB,OAAOgB;IAC1BC,oBAAoBjB,OAAOiB;GAC/B;GAEAf;GACAE;GAEAE;GAEAE;GACAE;GAEAQ,sBAAsB,KAAKC,gCAAgCtF,SAAAA;GAC3DuF,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GAEzDyF,gBAAgB,KAAKC,qBAAqB1F,SAAAA;GAC1C2F,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;CACJ;CAEA6D,YAAYtD,WAAuB;EAC/B,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMqG,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMmG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,MAAMpB,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAElF,MAAMoB,eAAe9F,UAAUoE,QAAQlF,qBAAqB6G,yBAAyB;EAErF,MAAMC,oBAAoBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;EAClF,MAAMC,qBAAqBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;EACpF,MAAMC,oBAAoBpG,UAAUoE,QAAQlF,qBAAqBmH,iBAAiB;EAClF,MAAMC,WAAWtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;EAEhE,MAAMC,eAAexG,UAAUoE,QAAQlF,qBAAqBuH,YAAY;EACxE,MAAMC,gBAAgB1G,UAAUoE,QAAQlF,qBAAqByH,aAAa;EAC1E,MAAMC,kBAAkB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;EAC9E,MAAMC,yBAAyB9G,UAAUoE,QAAQlF,qBAAqB6H,sBAAsB;EAE5F,MAAMC,mBAAmBhH,UAAUoE,QAAQhF,qBAAqB6H,QAAQ;EACxE,MAAMC,8CAA8ClH,UAAUoE,QAAQhF,qBAAqB+H,mCAAmC;EAE9H,MAAMC,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAE5F,MAAMC,oBAAoB,IAAIvK,yBAAyB,CACnDmK,6CACA,IAAItI,kBAAkBoI,gBAAAA,CACzB,CAAA;EAED,MAAMO,4BAA4B,IAAIjK,0BAA0B;GAC5D0J;GACAQ,sBAAsB,IAAI/K,2BAA2B,EAAEgL,uBAAuB,IAAI9N,6BAA6BiM,UAAAA,EAAY,CAAA;EAC/H,CAAA;EAEA,MAAMjB,eAAe3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EACxE,MAAMC,UAAU7E,UAAUoE,QAAQxE,mBAAAA;EAElC,MAAM8H,uBAAuB,IAAItK,qBAAqB;GAClDuK,YAAY3H,UAAUoE,QAAQtL,qBAAqB8O,eAAe;GAClE9C,SAAS;IACL+C,SAAS1D,OAAO2D;IAChBC,WAAW5D,OAAO6D;IAClBC,eAAe9D,OAAO+D;GAC1B;EACJ,CAAA;EAEA,OAAO,IAAI3L,gBAAgB;GACvBuJ;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAnC;GACAE;GACA6C;GACAS,0BAA0B,KAAK7C,gCAAgCtF,SAAAA;GAC/DoI,iBAAiB,KAAKC,uBAAuBrI,SAAAA;GAC7CuF,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GAEzDsI,yBAAyBnE,OAAOmE;GAChC3C;GAEAqB;GACAI;GAEAE;GAEAC;GACAgB,mBAAmBpE,OAAOoE;GAE1BC,iBAAiB,IAAIlP,uBAAuB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;GAEjF0M;EACJ,CAAA;CACJ;CAEAjB,uBAAuBxD,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIpD,iBAAiB,EAAE6I,SAASZ,OAAOa,UAAU,CAAA;CAC5D;CAEAvB,yBAAyBzD,WAAuB;EAC5C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIzD,mBAAmB;GAC1BiJ,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0B1I,SAAAA;EAC5C,CAAA;CACJ;CAEA0D,+BAA+B1D,WAAuB;EAClD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAInD,yBAAyB;GAChC2I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8B3I,SAAAA;EAChD,CAAA;CACJ;CAEA2D,8BAA8B3D,WAAuB;EACjD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIlD,wBAAwB;GAC/B0I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8B3I,SAAAA;EAChD,CAAA;CACJ;CAEA2I,8BAA8B3I,WAAuB;EACjD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAI5N,sBAAsB;GACzC4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAa5I,UAAUoE,QAAQ1E,gBAAAA;EACrC,MAAMmJ,uBAAuB7I,UAAUoE,QAAQzE,gCAAAA;EAE/C,OAAO,IAAIjC,wBAAwB;GAC/BkL;GACAC;GACAlB;GACAa,iBAAiB,IAAIlP,uBAAuBkP,eAAAA;GAC5C7D,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEE,SAAS;IACLgE,yBAAyB3E,OAAO2E;IAChCC,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEApF,yBAAyB5D,WAAuB;EAC5C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIjD,mBAAmB;GAC1ByI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0B1I,SAAAA;EAC5C,CAAA;CACJ;CAEA6D,uBAAuB7D,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMoH,gBAAgB1G,UAAUoE,QAAQlF,qBAAqByH,aAAa;EAC1E,MAAMlC,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAClF,MAAMuE,mBAAmBjJ,UAAUoE,QAAQlF,qBAAqBgK,gBAAgB;EAChF,MAAMV,kBAAkB,IAAIlP,uBAAuB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;EAExF,MAAMoR,oBAAoB,IAAI5L,wBAAwB;GAClDmJ;GACAjC;GACAwE;GACAT;GACA7D,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEwE,iBAAiBjF,OAAOkF;EAC5B,CAAA;EAEA,OAAO,IAAIpN,iBAAiB;GACxB6I,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GACrCmE;EACJ,CAAA;CACJ;CAEAlF,uBAAuBjE,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIhD,iBAAiB,EAAEwI,SAAS,EAAEG,UAAU,KAAKC,gBAAgBf,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAH,wBAAwBhE,WAAuB;EAC3C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAI1D,kBAAkB,EACzBkJ,SAAS;GACLC,SAASZ,OAAOa;GAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GAC/BmF,gBAAgB/J,cAAc4E,MAAAA;EAClC,EACJ,CAAA;CACJ;CAEAe,gBAAgBf,QAAyC;EACrD,OAAO;GACHoF,cAAcpF,OAAOqF;GACrBC,kBAAkBtF,OAAO2E;GACzBY,mBAAmBvF,OAAO4E;GAC1BY,gBAAgBxF,OAAOyF;EAC3B;CACJ;CAEAlB,0BAA0B1I,WAAuB;EAC7C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAI5N,sBAAsB;GACzC4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAa5I,UAAUoE,QAAQ1E,gBAAAA;EACrC,MAAMmJ,uBAAuB7I,UAAUoE,QAAQzE,gCAAAA;EAE/C,OAAO,IAAIzB,oBAAoB;GAC3B0K;GACAC;GACAlB;GACAa,iBAAiB,IAAIlP,uBAAuBkP,eAAAA;GAC5C7D,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEE,SAAS;IACL0E,qBAAqBrF,OAAOqF;IAC5BT,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEA9E,uBAAuBlE,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,MAAMgE,iBAAiB7J,UAAUoE,QAAQhF,qBAAqB0K,sBAAsB;EACpF,MAAMC,YAAY/J,UAAUoE,QAAQhF,qBAAqB4K,wBAAwB;EAEjF,MAAM3F,aAAarE,UAAUoE,QAAQlF,qBAAqBoF,uBAAuB;EAEjF,MAAMC,sBAAsBvE,UAAUoE,QAAQlF,qBAAqBsF,gCAAgC;EAEnG,MAAMyF,eAAejK,UAAUoE,QAAQlF,qBAAqBgL,yBAAyB;EAErF,MAAM1B,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAE7D,MAAM4P,aAAa,IAAI3O,kCAAkC;GACrD2O,YAAY,IAAIlQ,2BAA2BmO,UAAAA;GAC3C4C;EACJ,CAAA;EAEA,MAAM7C,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMkF,eAAe3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EAExE,MAAMuF,eAAe,IAAI3M,4BAA4B;GACjDsH,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC6E;GACArB,iBAAiB,IAAIlP,uBAAuBkP,eAAAA;GAC5CjE;GACAF;GAEAkB,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GACzD2E;GACAgB;EACJ,CAAA;EAEA,OAAO,IAAInL,2BAA2B;GAClCsK,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC2C;GACAkC;GACAE;GAEAxF;GACA0F;GACAE;GAEAxF;GACAgB;EACJ,CAAA;CACJ;CAEA/E,uBAAuBZ,WAAuB;EAC1C,MAAMwI,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAIhP,wBAAwB;GAC3CgP,YAAY3H,UAAUoE,QAA4B/M,YAAAA;GAClDmR;EACJ,CAAA;EACA,MAAM4B,yBAAyB,IAAI9Q,uBAAuBkP,eAAAA;EAC1D,MAAMC,UAAU,IAAI5L,cAAc;GAC9B8K;GACAa,iBAAiB4B;EACrB,CAAA;EACA,OAAO,IAAInQ,iBAAiB;GACxBwO;GACAd;EACJ,CAAA;CACJ;CAEQ0C,2BAA2BrK,WAAoD;EACnF,OAAO,IAAI5G,4BAA4B;GACnCuO,YAAY3H,UAAUoE,QAAgCxM,gBAAAA;GACtD4Q,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;CACJ;CAEQuS,qBAAqBtK,WAA8C;EACvE,OAAO,IAAIvG,sBAAsB;GAC7BkO,YAAY3H,UAAUoE,QAA0BnM,UAAAA;GAChDuQ,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAMyI,2BAA2BR,WAAuB;EACpD,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAIvO,4BAA4B;GAC/CuO,YAAY3H,UAAUoE,QAAgCxM,gBAAAA;GACtD4Q;EACJ,CAAA;EAEA,MAAM4B,yBAAyB,IAAI9Q,uBAAuBkP,eAAAA;EAC1D,MAAM+B,iBAAiB,IAAI9Q,sBAAsB;GAC7CkO,YAAY3H,UAAUoE,QAA0BnM,UAAAA;GAChDuQ;EACJ,CAAA;EACA,MAAMgC,2BAA2B,IAAIhR,gCACjCwG,UAAUoE,QAAoClM,oBAAAA,CAAAA;EAElD,MAAMuS,mBAAmB,IAAIpR,wBAAwB;GACjDsO,YAAY,IAAI7P,iBAAiB8N,UAAAA;GACjC4C;EACJ,CAAA;EAEA,MAAMkC,6BAA6B,IAAIvR,kCACnC6G,UAAUoE,QAAsCvM,sBAAAA,CAAAA;EAGpD,MAAM4Q,UAAU,IAAI5K,kBAAkB;GAClC8J;GACAa,iBAAiB4B;GACjBG;GACAC;GACAC;GACAC;EACJ,CAAA;EAEA,MAAMtD,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMsD,qBAAqB,IAAIzR,2BAA2B0M,UAAAA;EAE1D,MAAMgF,iBAAiB,IAAIjN,yBAAyB;GAChDgK;GACAa,iBAAiB4B;GACjBO;GACAvD;EACJ,CAAA;EAEA,OAAO,IAAIzM,qBAAqB;GAC5B8N;GACAmC;EACJ,CAAA;CACJ;CAEAtK,qBAAqBN,WAAuB;EACxC,MAAMwI,kBAAkB,IAAIlP,uBACxB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;EAEzC,MAAM4P,aAAa,IAAIlO,sBAAsB;GACzCkO,YAAY3H,UAAUoE,QAA0BnM,UAAAA;GAChDuQ,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;EACA,MAAM0Q,UAAU,IAAIpK,YAAY;GAC5BsJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAIxN,eAAe,EAAEyN,QAAQ,CAAA;CACxC;CAEA3H,iCAAiCd,WAAuB;EACpD,MAAM2H,aAAa,IAAIjP,kCACnBsH,UAAUoE,QAAsC9M,sBAAAA,CAAAA;EAEpD,MAAMuT,uBAAuB,KAAKR,2BAA2BrK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI/L,wBAAwB;GACxCiL;GACAkD;GACAzD;EACJ,CAAA;EACA,OAAO,IAAIlN,2BAA2B,EAAEuO,QAAQ,CAAA;CACpD;CAEAzH,2BAA2BhB,WAAuB;EAC9C,MAAM2H,aAAa,IAAI/O,4BACnBoH,UAAUoE,QAAgC7M,gBAAAA,CAAAA;EAE9C,MAAM6P,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI9L,kBAAkB;GAAEgL;GAAYP;EAA2B,CAAA;EAC/E,OAAO,IAAIjN,qBAAqB,EAAEsO,QAAQ,CAAA;CAC9C;CAEAvH,4BAA4BlB,WAAuB;EAC/C,MAAM2H,aAAa,IAAI9O,6BACnBmH,UAAUoE,QAAiC5M,iBAAAA,CAAAA;EAE/C,MAAMiR,UAAU,IAAI7L,mBAAmB,EAAE+K,WAAW,CAAA;EACpD,OAAO,IAAIvN,sBAAsB,EAAEqO,QAAQ,CAAA;CAC/C;CAEArH,8BAA8BpB,WAAuB;EACjD,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM8B,aAAa,IAAIpO,+BACnByG,UAAUoE,QAAmCpM,mBAAAA,CAAAA;EAEjD,MAAM8S,gBAAgB,IAAIC,IACtBnF,WAAWoF,YAAY/S,UAAAA,CAAAA,CAAYgT,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAM3C,UAAU,IAAItK,qBAAqB;GAAEwJ;GAAYmD;EAAc,CAAA;EACrE,OAAO,IAAI/P,wBAAwB,EAAE0N,QAAQ,CAAA;CACjD;CAEAnH,+BAA+BtB,WAAuB;EAClD,MAAM2H,aAAa,IAAInO,gCACnBwG,UAAUoE,QAAoClM,oBAAAA,CAAAA;EAElD,MAAM2S,uBAAuB,KAAKR,2BAA2BrK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIrK,sBAAsB;GACtCuJ;GACAkD;GACAzD;EACJ,CAAA;EACA,OAAO,IAAInM,yBAAyB,EAAEwN,QAAQ,CAAA;CAClD;CAEA/H,iCAAiCV,WAAuB;EACpD,MAAM2H,aAAa,IAAIxO,kCACnB6G,UAAUoE,QAAsCvM,sBAAAA,CAAAA;EAEpD,MAAM4Q,UAAU,IAAI7K,wBAAwB,EAAE+J,WAAW,CAAA;EACzD,OAAO,IAAI/M,2BAA2B,EAAE6N,QAAQ,CAAA;CACpD;CAEAjH,sBAAsBxB,WAAuB;EACzC,MAAMwI,kBAAkB,IAAIlP,uBACxB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;EAEzC,MAAM4P,aAAa,IAAIjO,uBAAuB;GAC1CiO,YAAY3H,UAAUoE,QAA2BjM,WAAAA;GACjDqQ,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;EACA,MAAM0Q,UAAU,IAAInK,aAAa;GAC7BqJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAItN,gBAAgB,EAAEuN,QAAQ,CAAA;CACzC;CAEA/G,oBAAoB1B,WAAuB;EAGvC,MAAMyI,UAAU,IAAItL,WAAW;GAC3BwK,YAAY3H,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;GAC3D5B,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEyG,gBAAgB1P;EACpB,CAAA;EACA,OAAO,IAAIjB,cAAc,EAAE+N,QAAQ,CAAA;CACvC;CAEA7G,4BAA4B5B,WAAuB;EAC/C,MAAM2H,aAAa,IAAIhO,6BACnBqG,UAAUoE,QAAQtL,qBAAqB+M,UAAU,CAAA;EAErD,MAAM4C,UAAU,IAAI/J,mBAAmB;GACnCiJ;GACAhD,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEyG,gBAAgB1P;EACpB,CAAA;EACA,OAAO,IAAIN,sBAAsB,EAAEoN,QAAQ,CAAA;CAC/C;CAEAzG,6BAA6BhC,WAAuB;EAChD,MAAM2H,aAAa3H,UAAUoE,QAAQlF,qBAAqB6H,sBAAsB;EAChF,MAAMH,kBAAkB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;EAC9E,MAAM4B,UAAU,IAAIjK,oBAAoB;GAAEmJ;GAAYf;EAAgB,CAAA;EACtE,OAAO,IAAIxL,uBAAuB,EAAEqN,QAAQ,CAAA;CAChD;CAEA3G,wBAAwB9B,WAAuB;EAC3C,MAAM2H,aAAa3H,UAAUoE,QAAQnF,2BAA2BqM,iBAAiB;EACjF,MAAM7C,UAAU,IAAIlK,eAAe,EAAEoJ,WAAW,CAAA;EAChD,OAAO,IAAIxM,kBAAkB,EAAEsN,QAAQ,CAAA;CAC3C;CAEU/C,qBAAqB1F,WAAwC;EACnE,MAAM2H,aAAa3H,UAAUoE,QAAQlF,qBAAqBqM,iBAAiB;EAC3E,OAAO,IAAIzO,eAAe,EAAE6K,WAAW,CAAA;CAC3C;CAEAzF,wBAAwBlC,WAAuB;EAC3C,OAAO,IAAI3F,kBAAkB,EAAEoO,SAAS,KAAK/C,qBAAqB1F,SAAAA,EAAW,CAAA;CACjF;CAEAoC,wCAAwCpC,WAAuB;EAC3D,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM4C,UAAU,IAAIzL,+BAA+B;GAC/C2K,YAAY,IAAI5O,yCAAyC6M,UAAAA;GACzD4F,gBAAgB,IAAInM,uBAAuB;IACvCsI,YAAY,IAAInP,eAAeoN,UAAAA;IAC/B6F,0BAA0BzL,UAAUoE,QAAoC7L,oBAAAA;IACxEmT,oBAAoB1L,UAAUoE,QAA8B3L,cAAAA;GAChE,CAAA;GACAkM,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEyG,gBAAgB1P;EACpB,CAAA;EACA,OAAO,IAAIpB,kCAAkC,EAAEkO,QAAQ,CAAA;CAC3D;CAEQlD;CAEEC,6BAA6BxF,WAAqD;EACxF,IAAI,KAAKuF,uBACL,OAAO,KAAKA;EAGhB,MAAMK,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,KAAKN,wBAAwB,IAAIlI,4BAA4B;GACzDsO,gBAAgB,IAAI7T,iBAAiB8N,UAAAA;GACrCwB,4BAA4BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;GACrF1B,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;EAEA,OAAO,KAAK8F;CAChB;CAEQ4C;CAEE7C,gCAAgCtF,WAAkD;EACxF,IAAI,KAAKmI,0BACL,OAAO,KAAKA;EAGhB,MAAMhE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,MAAM8B,aAAa,IAAI9N,mCACnBmG,UAAUoE,QAA4C/L,uBAAAA,CAAAA;EAE1D,MAAMmT,iBAAiB,IAAIzR,sBAAsB;GAC7C4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;EAEA,IAAI6T;EACJ,IAAIC;EAKJ,IAAI;GACA,MAAMC,MAAM,IAAIC,IAAI5H,OAAOa,SAAS;GACpC4G,SAASE,IAAIE;GACbH,WAAW;IACPI,MAAMH,IAAIE;IACVE,QAAQN;IACRO,QAAQL,IAAIK;GAChB;EACJ,QAAQ;GACJP,SAASQ,KAAAA;GACTP,WAAWO,KAAAA;EACf;EAEA,KAAKjE,2BAA2B,IAAItJ,yBAAyB;GACzD8I;GACA6D;GACAa,OAAOrM,UAAUoE,QAAQ5E,iBAAAA;GACzB8M,QAAQ,IAAItO,YAAY,EAAEsI,UAAUtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ,EAAE,CAAA;GACrF5B,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEyG,gBAAgB1P;GAChBiN,YAAY5I,UAAUoE,QAAQ1E,gBAAAA;GAC9BmJ,sBAAsB7I,UAAUoE,QAAQzE,gCAAAA;GACxCmF,SAAS;IACL+C,SAAS1D,OAAOoI;IAChBC,UAAUrI,OAAOsI;IACjBb;IACAC;GACJ;EACJ,CAAA;EAEA,OAAO,KAAK1D;CAChB;CAEAzF,kCAAkC1C,WAAuB;EACrD,OAAO,IAAIzE,4BAA4B,EAAEkN,SAAS,KAAKnD,gCAAgCtF,SAAAA,EAAW,CAAA;CACtG;CAEQoI;CAEEC,uBAAuBrI,WAA+C;EAC5E,IAAI,KAAKoI,iBACL,OAAO,KAAKA;EAGhB,KAAKA,kBAAkB,IAAI3K,sBAAsB;GAC7CgH,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3EgI,cAAc1M,UAAUoE,QAAQlF,qBAAqByN,cAAc;GACnE3G,mBAAmBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;GAC3EC,oBAAoBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;GAC7ES,iBAAiB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;GACvElC,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEC,SAAS7E,UAAUoE,QAAQxE,mBAAAA;EAC/B,CAAA;EAEA,OAAO,KAAKwI;CAChB;CAEAtE,uCAAuC9D,WAAuB;EAC1D,OAAO,IAAIlE,iCAAiC;GACxC2M,SAAS,KAAKnD,gCAAgCtF,SAAAA;GAC9CyE,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3E0D,iBAAiB,KAAKC,uBAAuBrI,SAAAA;EACjD,CAAA;CACJ;CAEAE,sBAAsBF,WAAuB;EACzC,MAAMyI,UAAUzI,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EACnE,OAAO,IAAItK,gBAAgB,EAAEmO,QAAQ,CAAA;CACzC;CAEAmE,kBAAkB5M,WAAuB;EACrC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAI5N,sBAAsB;GACzC4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAM4B,yBAAyB,IAAI9Q,uBAAuBkP,eAAAA;EAC1D,OAAO,IAAIxJ,YAAY;GACnB2I;GACAa,iBAAiB4B;GACjBpB,mBAAmB7E,OAAO6E;EAC9B,CAAA;CACJ;CAEA1G,qBAAqBtC,WAAuB;EACxC,OAAO,IAAIxE,eAAe,EAAEiN,SAAS,KAAKmE,kBAAkB5M,SAAAA,EAAW,CAAA;CAC3E;CAEA+D,yBAAyB/D,WAAuB;EAC5C,OAAO,IAAIxD,mBAAmB,EAAEiM,SAAS,KAAKmE,kBAAkB5M,SAAAA,EAAW,CAAA;CAC/E;CAEAwC,8BAA8BxC,WAAuB;EACjD,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM8B,aAAa,IAAI/N,+BACnBoG,UAAUoE,QAAmChM,mBAAAA,CAAAA;EAEjD,MAAM0S,gBAAgB,IAAIC,IACtBnF,WAAWoF,YAAY1S,UAAAA,CAAAA,CAAY2S,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAM3C,UAAU,IAAI9J,qBAAqB;GAAEgJ;GAAYmD;EAAc,CAAA;EACrE,OAAO,IAAIxP,wBAAwB,EAAEmN,QAAQ,CAAA;CACjD;CAEA7F,+BAA+B5C,WAAuB;EAClD,MAAM2H,aAAa,IAAI7N,gCACnBkG,UAAUoE,QAAoC7L,oBAAAA,CAAAA;EAElD,MAAMsS,uBAAuB,KAAKR,2BAA2BrK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI3J,sBAAsB;GACtC6I;GACAkD;GACAzD;EACJ,CAAA;EACA,OAAO,IAAI3L,yBAAyB,EAAEgN,QAAQ,CAAA;CAClD;CAEA3F,yBAAyB9C,WAAuB;EAC5C,MAAM2H,aAAa,IAAI3N,0BACnBgG,UAAUoE,QAA8B3L,cAAAA,CAAAA;EAE5C,MAAM2O,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI1J,gBAAgB;GAAE4I;GAAYP;EAA2B,CAAA;EAC7E,OAAO,IAAI1L,mBAAmB,EAAE+M,QAAQ,CAAA;CAC5C;CAEAzF,uBAAuBhD,WAAuB;EAC1C,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAItO,wBAAwB;GAC3CsO,YAAY,IAAI7P,iBAAiB8N,UAAAA;GACjC4C;EACJ,CAAA;EACA,MAAM4B,yBAAyB,IAAI9Q,uBAAuBkP,eAAAA;EAC1D,MAAMC,UAAU,IAAI1K,cAAc;GAC9B4J;GACAa,iBAAiB4B;EACrB,CAAA;EACA,MAAMhD,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMuD,iBAAiB,IAAI9M,qBAAqB;GAC5C6J;GACAa,iBAAiB4B;GACjBhD;EACJ,CAAA;EAEA,OAAO,IAAIvM,iBAAiB;GACxB4N;GACAmC;EACJ,CAAA;CACJ;CAEA1H,qCAAqClD,WAAuB;EACxD,MAAM2H,aAAa,IAAI1O,6CACnB+G,UAAUoE,QAAyB1M,iCAAAA,CAAAA;EAEvC,MAAM6S,iBAAiB,KAAKD,qBAAqBtK,SAAAA;EACjD,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIxL,mCAAmC;GACnD0K;GACA4C;GACAnD;EACJ,CAAA;EACA,OAAO,IAAI3M,sCAAsC,EAAEgO,QAAQ,CAAA;CAC/D;CAEAlF,oBAAoBvD,WAAuB;EAEvC,MAAM2H,aADa3H,UAAUoE,QAAQtL,qBAAqB+M,UACvCD,CAAAA,CAAWiH,cAAclV,SAAAA;EAC5C,OAAO,IAAIqE,cAAc,EAAE2L,WAAW,CAAA;CAC1C;CAEAvH,sBAAsBJ,WAAuB;EACzC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAIrO,uBAAuBkP,eAAAA;EAE9C,MAAMS,mBAAmB,IAAItQ,wBAAwB;GACjDgP,YAAY3H,UAAUoE,QAA4B/M,YAAAA;GAClDmR;EACJ,CAAA;EACA,MAAM7C,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMqN,0BAA0B,IAAIrO,wBAAwB;GACxDwK;GACA8D,iBAAiB,IAAIrT,uBAAuB;IACxCiO,YAAY3H,UAAUoE,QAA2BjM,WAAAA;IACjDqQ;GACJ,CAAA;GACAwE,uBAAuB,IAAInU,6BACvBmH,UAAUoE,QAAiC5M,iBAAAA,CAAAA;GAE/CyV,YAAY1N,cAAc4E,MAAAA;GAC1BwB;EACJ,CAAA;EACA,MAAMuH,iBAAiB,IAAIhQ,eAAe;GACtCoJ,UAAUtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;GACzDZ;EACJ,CAAA;EAEA,MAAM8C,UAAU,IAAIxK,aAAa;GAC7B0J;GACAwF,mBAAmB;IACfL;IACAI;IACA,IAAI/N,6BAA6Ba,SAAAA;GACpC;GACD2F;EACJ,CAAA;EACA,MAAMyH,gBAAgBxH,WAAWiH,cAAclV,SAAAA;EAE/C,OAAO,IAAImD,gBAAgB;GACvBgK,SAAS;IACLC,SAASZ,OAAOa;IAChBqI,aAAalJ,OAAOmJ;IACpBC,2BAA2BpJ,OAAOoE,sBAAsB;GAC5D;GACAE;GACA2E;EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/identity/constants.d.ts

@@ -1,10 +1,11 @@
 import { TypedToken } from 'eldin';
-import type { IIdentityPermissionProvider, IIdentityProviderAccountManager, IIdentityResolver, IIdentityRoleProvider, IdentityProviderLdapCollectionAuthenticator } from '../../../core/index.ts';
+import type { IIdentityPermissionProvider, IIdentityProviderAccountLinkStore, IIdentityProviderAccountManager, IIdentityResolver, IIdentityRoleProvider, IdentityProviderLdapCollectionAuthenticator } from '../../../core/index.ts';
 export declare const IdentityInjectionKey: {
     readonly Resolver: TypedToken<IIdentityResolver>;
     readonly PermissionProvider: TypedToken<IIdentityPermissionProvider>;
     readonly RoleProvider: TypedToken<IIdentityRoleProvider>;
     readonly ProviderAccountManager: TypedToken<IIdentityProviderAccountManager>;
+    readonly ProviderAccountLinkStore: TypedToken<IIdentityProviderAccountLinkStore>;
     readonly ProviderLdapCollectionAuthenticator: TypedToken<IdentityProviderLdapCollectionAuthenticator>;
 };
 //# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/identity/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,2BAA2B,EAC3B,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,2CAA2C,EAC9C,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;CAMvB,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,2CAA2C,EAC9C,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;CAOvB,CAAC"}

package/dist/app/modules/identity/constants.mjs

@@ -8,6 +8,7 @@ const IdentityInjectionKey = {
 	PermissionProvider: new TypedToken("IdentityPermissionProvider"),
 	RoleProvider: new TypedToken("IdentityRoleProvider"),
 	ProviderAccountManager: new TypedToken("AccountManager"),
+	ProviderAccountLinkStore: new TypedToken("ProviderAccountLinkStore"),
 	ProviderLdapCollectionAuthenticator: new TypedToken("ProviderLdapCollectionAuthenticator")
 };
 //#endregion

package/dist/app/modules/identity/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","names":["TypedToken","IdentityInjectionKey","Resolver","PermissionProvider","RoleProvider","ProviderAccountManager","ProviderLdapCollectionAuthenticator"],"sources":["../../../../src/app/modules/identity/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IIdentityPermissionProvider,\n    IIdentityProviderAccountManager,\n    IIdentityResolver,\n    IIdentityRoleProvider,\n    IdentityProviderLdapCollectionAuthenticator,\n} from '../../../core/index.ts';\n\nexport const IdentityInjectionKey = {\n    Resolver: new TypedToken<IIdentityResolver>('Resolver'),\n    PermissionProvider: new TypedToken<IIdentityPermissionProvider>('IdentityPermissionProvider'),\n    RoleProvider: new TypedToken<IIdentityRoleProvider>('IdentityRoleProvider'),\n    ProviderAccountManager: new TypedToken<IIdentityProviderAccountManager>('AccountManager'),\n    ProviderLdapCollectionAuthenticator: new TypedToken<IdentityProviderLdapCollectionAuthenticator>('ProviderLdapCollectionAuthenticator'),\n} as const;\n"],"mappings":";;;;;AAgBA,MAAaC,uBAAuB;CAChCC,UAAU,IAAIF,WAA8B,UAAA;CAC5CG,oBAAoB,IAAIH,WAAwC,4BAAA;CAChEI,cAAc,IAAIJ,WAAkC,sBAAA;CACpDK,wBAAwB,IAAIL,WAA4C,gBAAA;CACxEM,qCAAqC,IAAIN,WAAwD,qCAAA;AACrG"}
+{"version":3,"file":"constants.mjs","names":["TypedToken","IdentityInjectionKey","Resolver","PermissionProvider","RoleProvider","ProviderAccountManager","ProviderAccountLinkStore","ProviderLdapCollectionAuthenticator"],"sources":["../../../../src/app/modules/identity/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IIdentityPermissionProvider,\n    IIdentityProviderAccountLinkStore,\n    IIdentityProviderAccountManager,\n    IIdentityResolver,\n    IIdentityRoleProvider,\n    IdentityProviderLdapCollectionAuthenticator,\n} from '../../../core/index.ts';\n\nexport const IdentityInjectionKey = {\n    Resolver: new TypedToken<IIdentityResolver>('Resolver'),\n    PermissionProvider: new TypedToken<IIdentityPermissionProvider>('IdentityPermissionProvider'),\n    RoleProvider: new TypedToken<IIdentityRoleProvider>('IdentityRoleProvider'),\n    ProviderAccountManager: new TypedToken<IIdentityProviderAccountManager>('AccountManager'),\n    ProviderAccountLinkStore: new TypedToken<IIdentityProviderAccountLinkStore>('ProviderAccountLinkStore'),\n    ProviderLdapCollectionAuthenticator: new TypedToken<IdentityProviderLdapCollectionAuthenticator>('ProviderLdapCollectionAuthenticator'),\n} as const;\n"],"mappings":";;;;;AAiBA,MAAaC,uBAAuB;CAChCC,UAAU,IAAIF,WAA8B,UAAA;CAC5CG,oBAAoB,IAAIH,WAAwC,4BAAA;CAChEI,cAAc,IAAIJ,WAAkC,sBAAA;CACpDK,wBAAwB,IAAIL,WAA4C,gBAAA;CACxEM,0BAA0B,IAAIN,WAA8C,0BAAA;CAC5EO,qCAAqC,IAAIP,WAAwD,qCAAA;AACrG"}

package/dist/app/modules/identity/index.mjs

@@ -5,8 +5,10 @@ import { IdentityInjectionKey } from "./constants.mjs";
 import { IdentityProviderAttributeMappingRepository } from "./repositories/provider/mapper/attribute.mjs";
 import { IdentityProviderPermissionMappingRepository } from "./repositories/provider/mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./repositories/provider/mapper/role.mjs";
+import { CacheIdentityPrefix } from "./repositories/constants.mjs";
+import { IdentityProviderAccountLinkStore } from "./repositories/provider/link.mjs";
 import { ClientIdentityRepository } from "./repositories/client.mjs";
 import { UserIdentityRepository } from "./repositories/user.mjs";
 import "./repositories/index.mjs";
 import { IdentityModule } from "./module.mjs";
-export { ClientIdentityRepository, IdentityInjectionKey, IdentityModule, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, UserIdentityRepository };
+export { CacheIdentityPrefix, ClientIdentityRepository, IdentityInjectionKey, IdentityModule, IdentityProviderAccountLinkStore, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, UserIdentityRepository };

package/dist/app/modules/identity/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/module.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAaxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAwFpD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/module.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAexC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAmGpD"}

package/dist/app/modules/identity/module.mjs

@@ -9,16 +9,18 @@ import { IdentityProviderRepository } from "../../../adapters/database/domains/i
 import { UserPermissionEntity } from "../../../adapters/database/domains/user-permission/entity.mjs";
 import { UserRoleEntity } from "../../../adapters/database/domains/user-role/entity.mjs";
 import "../../../adapters/database/domains/index.mjs";
+import { IdentityProviderLdapCollectionAuthenticator } from "../../../core/identity/provider/authentication/protocols/ldap/collection.mjs";
 import { IdentityPermissionProvider } from "../../../core/identity/permission/module.mjs";
 import { IdentityProviderAttributeMapper } from "../../../core/identity/provider/mapper/attributes/module.mjs";
 import { IdentityProviderRoleMapper } from "../../../core/identity/provider/mapper/role/module.mjs";
 import { IdentityProviderPermissionMapper } from "../../../core/identity/provider/mapper/permission/module.mjs";
 import { IdentityProviderAccountManager } from "../../../core/identity/provider/account/module.mjs";
-import { IdentityProviderLdapCollectionAuthenticator } from "../../../core/identity/provider/authentication/protocols/ldap/collection.mjs";
 import { IdentityResolver } from "../../../core/identity/resolver/module.mjs";
 import { IdentityRoleProvider } from "../../../core/identity/role/module.mjs";
 import "../../../core/index.mjs";
+import { CacheInjectionKey } from "../cache/constants.mjs";
 import { ModuleName } from "../constants.mjs";
+import "../cache/index.mjs";
 import { ClientRepositoryAdapter } from "../database/repositories/client/repository.mjs";
 import { IdentityProviderRepositoryAdapter } from "../database/repositories/identity-provider/repository.mjs";
 import { IdentityProviderAccountRepositoryAdapter } from "../database/repositories/identity-provider-account/repository.mjs";
@@ -26,11 +28,14 @@ import { RoleRepositoryAdapter } from "../database/repositories/role/repository.
 import { UserRepositoryAdapter } from "../database/repositories/user/repository.mjs";
 import "../database/repositories/index.mjs";
 import { DatabaseInjectionKey } from "../database/constants.mjs";
+import { LoggerInjectionKey } from "../logger/constants.mjs";
+import "../logger/index.mjs";
 import "../database/index.mjs";
 import { IdentityInjectionKey } from "./constants.mjs";
 import { IdentityProviderAttributeMappingRepository } from "./repositories/provider/mapper/attribute.mjs";
 import { IdentityProviderPermissionMappingRepository } from "./repositories/provider/mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./repositories/provider/mapper/role.mjs";
+import { IdentityProviderAccountLinkStore } from "./repositories/provider/link.mjs";
 import { ClientIdentityRepository } from "./repositories/client.mjs";
 import { UserIdentityRepository } from "./repositories/user.mjs";
 import "./repositories/index.mjs";
@@ -86,13 +91,18 @@ var IdentityModule = class {
 		const permissionMapperRepository = new IdentityProviderPermissionMappingRepository(dataSource);
 		const permissionMapper = new IdentityProviderPermissionMapper(permissionMapperRepository);
 		const providerAccountRepository = new IdentityProviderAccountRepositoryAdapter(dataSource);
-		container.register(IdentityInjectionKey.ProviderAccountManager, { useFactory: () => new IdentityProviderAccountManager({
+		container.register(IdentityInjectionKey.ProviderAccountManager, { useFactory: (c) => new IdentityProviderAccountManager({
 			repository: providerAccountRepository,
 			userRepository,
 			attributeMapper,
 			roleMapper,
-			permissionMapper
+			permissionMapper,
+			logger: c.resolve(LoggerInjectionKey)
 		}) });
+		container.register(IdentityInjectionKey.ProviderAccountLinkStore, { useFactory: (c) => {
+			const cache = c.resolve(CacheInjectionKey);
+			return new IdentityProviderAccountLinkStore(cache);
+		} });
 		const identityProviderRepository = new IdentityProviderRepositoryAdapter({
 			repository: new IdentityProviderRepository(dataSource),
 			realmRepository: container.resolve(RealmEntity)