@authup/server-core 1.0.0-beta.63 → 1.0.0-beta.64

package/dist/app/modules/http/modules/controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserAuthenticatorEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderAccountRepositoryAdapter","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","TrustAnchorRepositoryAdapter","UserAttributeRepositoryAdapter","UserAuthenticatorRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","ConsentController","EventController","IdentityProviderAccountController","IdentityProviderController","IdentityProviderRoleMappingController","KeyController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","SessionTokenController","TrustAnchorController","UserAttributeController","UserAuthenticatorController","UserController","UserPermissionController","UserRoleController","useRequestEventContext","AccountController","ActivateController","AuthenticatorChallengeController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","UserInfoController","ClientCertificateValidator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","ConsentService","CredentialsAuthenticator","IdentityProviderAccountService","IdentityProviderRoleMappingService","KeyProvisioner","KeyService","LoginThrottleService","OAuth2AccessPolicyEvaluator","OAuth2ClientAuthenticator","OAuth2EndSessionService","OAuth2FederatedLoginService","OAuth2MfaLoginService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmCipher","RealmService","RegistrationService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","SessionTokenService","SystemClientProvisioner","TrustAnchorService","UserAttributeService","UserAuthenticator","UserAuthenticatorService","UserPermissionService","UserRoleService","UserService","AuthenticationInjectionKey","OAuth2InjectionToken","LazyWildcardRealmProvisioner","IdentityInjectionKey","UserIdentityRepository","ConfigInjectionKey","getAppOrigins","CacheInjectionKey","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","MetricsInjectionKey","HTTPControllerModule","mount","router","container","eventController","createEventController","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","keyController","createKeyController","trustAnchorController","createTrustAnchorController","sessionController","createSessionController","sessionTokenController","createSessionTokenController","consentController","createConsentController","identityProviderAccountController","createIdentityProviderAccountController","userController","createUserController","userAttributeController","createUserAttributeController","userAuthenticatorController","createUserAuthenticatorController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createAuthenticatorChallengeController","createUserInfoController","createAccountController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","eventService","EventService","metrics","options","baseURL","publicUrl","features","buildUIFeatures","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","resolveUserAuthenticatorService","accessPolicyEvaluator","resolveAccessPolicyEvaluator","consentService","createConsentService","logger","dataSource","DataSource","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyStore","KeyStore","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","userAuthenticator","oauth2ClientAuthenticator","certificateValidator","trustAnchorRepository","loginThrottleService","repository","EventRepository","enabled","loginAttemptThrottleEnabled","threshold","loginAttemptThreshold","windowSeconds","loginAttemptWindow","userAuthenticatorService","mfaLoginService","resolveMfaLoginService","tokenRefreshGracePeriod","certificateSource","realmRepository","service","createRegistrationService","createPasswordRecoveryService","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","trustedOrigins","registration","registrationEnabled","passwordRecovery","emailVerification","accountConsole","accountConsoleEnabled","accountManager","ProviderAccountManager","linkStore","ProviderAccountLinkStore","stateManager","AuthorizationStateManager","loginService","pendingLoginStore","FederatedLoginStore","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","requestContext","SessionRepository","ConsentRepository","userRepository","userPermissionRepository","userRoleRepository","policyProvider","issuer","webauthn","url","URL","hostname","rpId","rpName","origin","undefined","cache","cipher","mfaEnabled","required","mfaRequired","ticketIssuer","MfaTokenIssuer","createUserService","getRepository","systemClientProvisioner","scopeRepository","clientScopeRepository","appOrigins","keyProvisioner","realmProvisioners","keyRepository","mtlsBaseURL","mtlsPublicUrl","clientCertificatesEnabled"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserAuthenticator as UserAuthenticatorModel,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserAuthenticatorEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderAccountRepositoryAdapter,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    TrustAnchorRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserAuthenticatorRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    ConsentController,\n    EventController,\n    IdentityProviderAccountController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    KeyController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    SessionTokenController,\n    TrustAnchorController,\n    UserAttributeController,\n    UserAuthenticatorController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n    useRequestEventContext,\n} from '../../../../adapters/http/index.ts';\nimport {\n    AccountController,\n    ActivateController,\n    AuthenticatorChallengeController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n    UserInfoController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCertificateValidator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    ConsentService,\n    CredentialsAuthenticator,\n    IdentityProviderAccountService,\n    IdentityProviderRoleMappingService,\n    KeyProvisioner,\n    KeyService,\n    LoginThrottleService,\n    OAuth2AccessPolicyEvaluator,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    OAuth2FederatedLoginService,\n    OAuth2MfaLoginService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmCipher,\n    RealmService,\n    RegistrationService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    SessionTokenService,\n    SystemClientProvisioner,\n    TrustAnchorService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserAuthenticatorService,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { LazyWildcardRealmProvisioner } from '../../provisioning/lazy-wildcard.ts';\nimport { IdentityInjectionKey, UserIdentityRepository } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { CacheInjectionKey } from '../../cache/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\nimport { MetricsInjectionKey } from '../../metrics/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const eventController = this.createEventController(container);\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const keyController = this.createKeyController(container);\n        const trustAnchorController = this.createTrustAnchorController(container);\n        const sessionController = this.createSessionController(container);\n        const sessionTokenController = this.createSessionTokenController(container);\n        const consentController = this.createConsentController(container);\n        const identityProviderAccountController = this.createIdentityProviderAccountController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userAuthenticatorController = this.createUserAuthenticatorController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n                this.createAuthenticatorChallengeController(container),\n                this.createUserInfoController(container),\n                this.createAccountController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                consentController,\n                eventController,\n                identityProviderAccountController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                keyController,\n                trustAnchorController,\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                sessionTokenController,\n                userController,\n                userAttributeController,\n                userAuthenticatorController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n                mfaFreshnessMaxAge: config.mfaFreshnessMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n\n            eventService,\n            metrics,\n\n            mfaChallengeProvider: this.resolveUserAuthenticatorService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            consentService: this.createConsentService(container),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyStore = container.resolve(OAuth2InjectionToken.KeyStore);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator({\n            identityResolver,\n            certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) }),\n        });\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        const loginThrottleService = new LoginThrottleService({\n            repository: container.resolve(DatabaseInjectionKey.EventRepository),\n            options: {\n                enabled: config.loginAttemptThrottleEnabled,\n                threshold: config.loginAttemptThreshold,\n                windowSeconds: config.loginAttemptWindow,\n            },\n        });\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyStore,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            eventService,\n            metrics,\n            loginThrottleService,\n            userAuthenticatorService: this.resolveUserAuthenticatorService(container),\n            mfaLoginService: this.resolveMfaLoginService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n            certificateSource: config.certificateSource,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { baseURL: config.publicUrl },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    createAccountController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new AccountController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                trustedOrigins: getAppOrigins(config),\n            },\n        });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n            accountConsole: config.accountConsoleEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n        const linkStore = container.resolve(IdentityInjectionKey.ProviderAccountLinkStore);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        const logger = container.resolve(LoggerInjectionKey);\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n\n        const loginService = new OAuth2FederatedLoginService({\n            options: { baseURL: config.publicUrl },\n\n            accountManager,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            codeRequestVerifier,\n\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            pendingLoginStore: container.resolve(OAuth2InjectionToken.FederatedLoginStore),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n            eventService,\n            metrics: container.resolve(MetricsInjectionKey),\n            logger,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            accountManager,\n            linkStore,\n\n            codeRequestVerifier,\n            stateManager,\n            loginService,\n\n            eventService,\n            logger,\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createKeyController(container: IContainer) {\n        // the DI singleton carries the optional KEK cipher — never construct\n        // a fresh adapter here.\n        const service = new KeyService({\n            repository: container.resolve(OAuth2InjectionToken.KeyStore),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new KeyController({ service });\n    }\n\n    createTrustAnchorController(container: IContainer) {\n        const repository = new TrustAnchorRepositoryAdapter(\n            container.resolve(DatabaseInjectionKey.DataSource),\n        );\n        const service = new TrustAnchorService({\n            repository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new TrustAnchorController({ service });\n    }\n\n    createSessionTokenController(container: IContainer) {\n        const repository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const service = new SessionTokenService({ repository, tokenRepository });\n        return new SessionTokenController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({ repository });\n        return new SessionController({ service });\n    }\n\n    protected createConsentService(container: IContainer) : ConsentService {\n        const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);\n        return new ConsentService({ repository });\n    }\n\n    createConsentController(container: IContainer) {\n        return new ConsentController({ service: this.createConsentService(container) });\n    }\n\n    createIdentityProviderAccountController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const service = new IdentityProviderAccountService({\n            repository: new IdentityProviderAccountRepositoryAdapter(dataSource),\n            userRepository: new UserIdentityRepository({\n                repository: new UserRepository(dataSource),\n                userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n                userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n            }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new IdentityProviderAccountController({ service });\n    }\n\n    private accessPolicyEvaluator? : OAuth2AccessPolicyEvaluator;\n\n    protected resolveAccessPolicyEvaluator(container: IContainer) : OAuth2AccessPolicyEvaluator {\n        if (this.accessPolicyEvaluator) {\n            return this.accessPolicyEvaluator;\n        }\n\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        this.accessPolicyEvaluator = new OAuth2AccessPolicyEvaluator({\n            policyProvider: new PolicyRepository(dataSource),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        return this.accessPolicyEvaluator;\n    }\n\n    private userAuthenticatorService? : UserAuthenticatorService;\n\n    protected resolveUserAuthenticatorService(container: IContainer) : UserAuthenticatorService {\n        if (this.userAuthenticatorService) {\n            return this.userAuthenticatorService;\n        }\n\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const repository = new UserAuthenticatorRepositoryAdapter(\n            container.resolve<Repository<UserAuthenticatorModel>>(UserAuthenticatorEntity),\n        );\n        const userRepository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n\n        let issuer : string | undefined;\n        let webauthn : {\n            rpId: string, \n            rpName: string, \n            origin: string \n        } | undefined;\n        try {\n            const url = new URL(config.publicUrl);\n            issuer = url.hostname;\n            webauthn = {\n                rpId: url.hostname,\n                rpName: issuer,\n                origin: url.origin,\n            };\n        } catch {\n            issuer = undefined;\n            webauthn = undefined;\n        }\n\n        this.userAuthenticatorService = new UserAuthenticatorService({\n            repository,\n            userRepository,\n            cache: container.resolve(CacheInjectionKey),\n            cipher: new RealmCipher({ keyStore: container.resolve(OAuth2InjectionToken.KeyStore) }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n            mailClient: container.resolve(MailInjectionKey),\n            mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),\n            options: {\n                enabled: config.mfaEnabled,\n                required: config.mfaRequired,\n                issuer,\n                webauthn,\n            },\n        });\n\n        return this.userAuthenticatorService;\n    }\n\n    createUserAuthenticatorController(container: IContainer) {\n        return new UserAuthenticatorController({ service: this.resolveUserAuthenticatorService(container) });\n    }\n\n    private mfaLoginService? : OAuth2MfaLoginService;\n\n    protected resolveMfaLoginService(container: IContainer) : OAuth2MfaLoginService {\n        if (this.mfaLoginService) {\n            return this.mfaLoginService;\n        }\n\n        this.mfaLoginService = new OAuth2MfaLoginService({\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            ticketIssuer: container.resolve(OAuth2InjectionToken.MfaTokenIssuer),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n            tokenRepository: container.resolve(OAuth2InjectionToken.TokenRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            metrics: container.resolve(MetricsInjectionKey),\n        });\n\n        return this.mfaLoginService;\n    }\n\n    createAuthenticatorChallengeController(container: IContainer) {\n        return new AuthenticatorChallengeController({\n            service: this.resolveUserAuthenticatorService(container),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            mfaLoginService: this.resolveMfaLoginService(container),\n        });\n    }\n\n    createEventController(container: IContainer) {\n        const service = container.resolve(DatabaseInjectionKey.EventService);\n        return new EventController({ service });\n    }\n\n    createUserService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        return new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n    }\n\n    createUserController(container: IContainer) {\n        return new UserController({ service: this.createUserService(container) });\n    }\n\n    createUserInfoController(container: IContainer) {\n        return new UserInfoController({ service: this.createUserService(container) });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const systemClientProvisioner = new SystemClientProvisioner({\n            clientRepository,\n            scopeRepository: new ScopeRepositoryAdapter({\n                repository: container.resolve<Repository<Scope>>(ScopeEntity),\n                realmRepository,\n            }),\n            clientScopeRepository: new ClientScopeRepositoryAdapter(\n                container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n            ),\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n        const keyProvisioner = new KeyProvisioner({\n            keyStore: container.resolve(OAuth2InjectionToken.KeyStore),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            realmProvisioners: [\n                systemClientProvisioner,\n                keyProvisioner,\n                new LazyWildcardRealmProvisioner(container),\n            ],\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: {\n                baseURL: config.publicUrl,\n                mtlsBaseURL: config.mtlsPublicUrl,\n                clientCertificatesEnabled: config.certificateSource !== 'disabled',\n            },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8KA,IAAayI,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,kBAAkB,KAAKC,sBAAsBJ,SAAAA;EACnD,MAAMK,iBAAiB,KAAKC,qBAAqBN,SAAAA;EACjD,MAAMO,uBAAuB,MAAM,KAAKC,2BAA2BR,SAAAA;EACnE,MAAMS,6BAA6B,KAAKC,iCAAiCV,SAAAA;EACzE,MAAMW,mBAAmB,KAAKC,uBAAuBZ,SAAAA;EACrD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,0BAA0B,KAAKC,8BAA8BpB,SAAAA;EACnE,MAAMqB,2BAA2B,KAAKC,+BAA+BtB,SAAAA;EACrE,MAAMuB,kBAAkB,KAAKC,sBAAsBxB,SAAAA;EACnD,MAAMyB,gBAAgB,KAAKC,oBAAoB1B,SAAAA;EAC/C,MAAM2B,wBAAwB,KAAKC,4BAA4B5B,SAAAA;EAC/D,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,yBAAyB,KAAKC,6BAA6BhC,SAAAA;EACjE,MAAMiC,oBAAoB,KAAKC,wBAAwBlC,SAAAA;EACvD,MAAMmC,oCAAoC,KAAKC,wCAAwCpC,SAAAA;EACvF,MAAMqC,iBAAiB,KAAKC,qBAAqBtC,SAAAA;EACjD,MAAMuC,0BAA0B,KAAKC,8BAA8BxC,SAAAA;EACnE,MAAMyC,8BAA8B,KAAKC,kCAAkC1C,SAAAA;EAC3E,MAAM2C,2BAA2B,KAAKC,+BAA+B5C,SAAAA;EACrE,MAAM6C,qBAAqB,KAAKC,yBAAyB9C,SAAAA;EACzD,MAAM+C,mBAAmB,KAAKC,uBAAuBhD,SAAAA;EACrD,MAAMiD,iCAAiC,KAAKC,qCAAqClD,SAAAA;EAEjFD,OAAOoD,IAAI/L,WAAW,EAClBgM,aAAa;GACT,KAAKC,gBAAgBrD,SAAAA;GACrB,KAAKsD,YAAYtD,SAAAA;GACjB,KAAKuD,oBAAoBvD,SAAAA;GACzB,KAAKwD,uBAAuBxD,SAAAA;GAC5B,KAAKyD,yBAAyBzD,SAAAA;GAC9B,KAAK0D,+BAA+B1D,SAAAA;GACpC,KAAK2D,8BAA8B3D,SAAAA;GACnC,KAAK4D,yBAAyB5D,SAAAA;GAC9B,KAAK6D,uBAAuB7D,SAAAA;GAC5B,KAAK8D,uCAAuC9D,SAAAA;GAC5C,KAAK+D,yBAAyB/D,SAAAA;GAC9B,KAAKgE,wBAAwBhE,SAAAA;GAE7B,KAAKiE,uBAAuBjE,SAAAA;GAE5BW;GACAE;GACAE;GACAE;GACAgB;GACAhC;GACAkC;GACAc;GACA,KAAKiB,uBAAuBlE,SAAAA;GAC5ByB;GACAE;GACApB;GACAE;GACAsC;GACA5C;GACAE;GACAc;GACAE;GACAE;GACAM;GACAE;GACAM;GACAE;GACAE;GACAE;GACAE;EACH,EACL,CAAA,CAAA;CACJ;CAIAQ,gBAAgBrD,WAAuB;EACnC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,MAAM+E,aAAarE,UAAUoE,QAAQlF,qBAAqBoF,uBAAuB;EACjF,MAAMC,sBAAsBvE,UAAUoE,QAAQlF,qBAAqBsF,gCAAgC;EAEnG,MAAMC,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAElF,MAAMC,eAAe3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EACxE,MAAMC,UAAU7E,UAAUoE,QAAQxE,mBAAAA;EAElC,OAAO,IAAI7D,oBAAoB;GAC3B+I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;IAC/BgB,mBAAmBhB,OAAOgB;IAC1BC,oBAAoBjB,OAAOiB;GAC/B;GAEAf;GACAE;GAEAE;GAEAE;GACAE;GAEAQ,sBAAsB,KAAKC,gCAAgCtF,SAAAA;GAC3DuF,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GAEzDyF,gBAAgB,KAAKC,qBAAqB1F,SAAAA;GAC1C2F,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;CACJ;CAEA6D,YAAYtD,WAAuB;EAC/B,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMqG,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMmG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,MAAMpB,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAElF,MAAMoB,eAAe9F,UAAUoE,QAAQlF,qBAAqB6G,yBAAyB;EAErF,MAAMC,oBAAoBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;EAClF,MAAMC,qBAAqBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;EACpF,MAAMC,oBAAoBpG,UAAUoE,QAAQlF,qBAAqBmH,iBAAiB;EAClF,MAAMC,WAAWtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;EAEhE,MAAMC,eAAexG,UAAUoE,QAAQlF,qBAAqBuH,YAAY;EACxE,MAAMC,gBAAgB1G,UAAUoE,QAAQlF,qBAAqByH,aAAa;EAC1E,MAAMC,kBAAkB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;EAC9E,MAAMC,yBAAyB9G,UAAUoE,QAAQlF,qBAAqB6H,sBAAsB;EAE5F,MAAMC,mBAAmBhH,UAAUoE,QAAQhF,qBAAqB6H,QAAQ;EACxE,MAAMC,8CAA8ClH,UAAUoE,QAAQhF,qBAAqB+H,mCAAmC;EAE9H,MAAMC,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAE5F,MAAMC,oBAAoB,IAAIvK,yBAAyB,CACnDmK,6CACA,IAAItI,kBAAkBoI,gBAAAA,CACzB,CAAA;EAED,MAAMO,4BAA4B,IAAIjK,0BAA0B;GAC5D0J;GACAQ,sBAAsB,IAAI/K,2BAA2B,EAAEgL,uBAAuB,IAAI9N,6BAA6BiM,UAAAA,EAAY,CAAA;EAC/H,CAAA;EAEA,MAAMjB,eAAe3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EACxE,MAAMC,UAAU7E,UAAUoE,QAAQxE,mBAAAA;EAElC,MAAM8H,uBAAuB,IAAItK,qBAAqB;GAClDuK,YAAY3H,UAAUoE,QAAQtL,qBAAqB8O,eAAe;GAClE9C,SAAS;IACL+C,SAAS1D,OAAO2D;IAChBC,WAAW5D,OAAO6D;IAClBC,eAAe9D,OAAO+D;GAC1B;EACJ,CAAA;EAEA,OAAO,IAAI3L,gBAAgB;GACvBuJ;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAnC;GACAE;GACA6C;GACAS,0BAA0B,KAAK7C,gCAAgCtF,SAAAA;GAC/DoI,iBAAiB,KAAKC,uBAAuBrI,SAAAA;GAC7CuF,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GAEzDsI,yBAAyBnE,OAAOmE;GAChC3C;GAEAqB;GACAI;GAEAE;GAEAC;GACAgB,mBAAmBpE,OAAOoE;GAE1BC,iBAAiB,IAAIlP,uBAAuB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;GAEjF0M;EACJ,CAAA;CACJ;CAEAjB,uBAAuBxD,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIpD,iBAAiB,EAAE6I,SAASZ,OAAOa,UAAU,CAAA;CAC5D;CAEAvB,yBAAyBzD,WAAuB;EAC5C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIzD,mBAAmB;GAC1BiJ,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0B1I,SAAAA;EAC5C,CAAA;CACJ;CAEA0D,+BAA+B1D,WAAuB;EAClD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAInD,yBAAyB;GAChC2I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8B3I,SAAAA;EAChD,CAAA;CACJ;CAEA2D,8BAA8B3D,WAAuB;EACjD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIlD,wBAAwB;GAC/B0I,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKE,8BAA8B3I,SAAAA;EAChD,CAAA;CACJ;CAEA2I,8BAA8B3I,WAAuB;EACjD,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAI5N,sBAAsB;GACzC4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAa5I,UAAUoE,QAAQ1E,gBAAAA;EACrC,MAAMmJ,uBAAuB7I,UAAUoE,QAAQzE,gCAAAA;EAE/C,OAAO,IAAIjC,wBAAwB;GAC/BkL;GACAC;GACAlB;GACAa,iBAAiB,IAAIlP,uBAAuBkP,eAAAA;GAC5C7D,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEE,SAAS;IACLgE,yBAAyB3E,OAAO2E;IAChCC,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEApF,yBAAyB5D,WAAuB;EAC5C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIjD,mBAAmB;GAC1ByI,SAAS;IACLC,SAASZ,OAAOa;IAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GACnC;GACAsE,SAAS,KAAKC,0BAA0B1I,SAAAA;EAC5C,CAAA;CACJ;CAEA6D,uBAAuB7D,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMoH,gBAAgB1G,UAAUoE,QAAQlF,qBAAqByH,aAAa;EAC1E,MAAMlC,iBAAiBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;EAClF,MAAMuE,mBAAmBjJ,UAAUoE,QAAQlF,qBAAqBgK,gBAAgB;EAChF,MAAMV,kBAAkB,IAAIlP,uBAAuB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;EAExF,MAAMoR,oBAAoB,IAAI5L,wBAAwB;GAClDmJ;GACAjC;GACAwE;GACAT;GACA7D,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEwE,iBAAiBjF,OAAOkF;EAC5B,CAAA;EAEA,OAAO,IAAIpN,iBAAiB;GACxB6I,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GACrCmE;EACJ,CAAA;CACJ;CAEAlF,uBAAuBjE,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAIhD,iBAAiB,EAAEwI,SAAS,EAAEG,UAAU,KAAKC,gBAAgBf,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAH,wBAAwBhE,WAAuB;EAC3C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EAEjC,OAAO,IAAI1D,kBAAkB,EACzBkJ,SAAS;GACLC,SAASZ,OAAOa;GAChBC,UAAU,KAAKC,gBAAgBf,MAAAA;GAC/BmF,gBAAgB/J,cAAc4E,MAAAA;EAClC,EACJ,CAAA;CACJ;CAEAe,gBAAgBf,QAAyC;EACrD,OAAO;GACHoF,cAAcpF,OAAOqF;GACrBC,kBAAkBtF,OAAO2E;GACzBY,mBAAmBvF,OAAO4E;GAC1BY,gBAAgBxF,OAAOyF;EAC3B;CACJ;CAEAlB,0BAA0B1I,WAAuB;EAC7C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAI5N,sBAAsB;GACzC4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAa5I,UAAUoE,QAAQ1E,gBAAAA;EACrC,MAAMmJ,uBAAuB7I,UAAUoE,QAAQzE,gCAAAA;EAE/C,OAAO,IAAIzB,oBAAoB;GAC3B0K;GACAC;GACAlB;GACAa,iBAAiB,IAAIlP,uBAAuBkP,eAAAA;GAC5C7D,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEE,SAAS;IACL0E,qBAAqBrF,OAAOqF;IAC5BT,0BAA0B5E,OAAO4E;IACjC/D,WAAWb,OAAOa;IAClBgE,mBAAmB7E,OAAO6E;GAC9B;EACJ,CAAA;CACJ;CAEA9E,uBAAuBlE,WAAuB;EAC1C,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,MAAMgE,iBAAiB7J,UAAUoE,QAAQhF,qBAAqB0K,sBAAsB;EACpF,MAAMC,YAAY/J,UAAUoE,QAAQhF,qBAAqB4K,wBAAwB;EAEjF,MAAMzF,sBAAsBvE,UAAUoE,QAAQlF,qBAAqBsF,gCAAgC;EAEnG,MAAMyF,eAAejK,UAAUoE,QAAQlF,qBAAqBgL,yBAAyB;EAErF,MAAM1B,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAE7D,MAAM4P,aAAa,IAAI3O,kCAAkC;GACrD2O,YAAY,IAAIlQ,2BAA2BmO,UAAAA;GAC3C4C;EACJ,CAAA;EAEA,MAAM7C,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMkF,eAAe3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EAExE,MAAMuF,eAAe,IAAI3M,4BAA4B;GACjDsH,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC6E;GACArB,iBAAiB,IAAIlP,uBAAuBkP,eAAAA;GAC5CjE;GAEAE,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3E0F,mBAAmBpK,UAAUoE,QAAQlF,qBAAqBmL,mBAAmB;GAC7ErE,mBAAmBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;GAC3EC,oBAAoBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;GAE7EZ,uBAAuB,KAAKC,6BAA6BxF,SAAAA;GACzD2E;GACAE,SAAS7E,UAAUoE,QAAQxE,mBAAAA;GAC3B+F;EACJ,CAAA;EAEA,OAAO,IAAInL,2BAA2B;GAClCsK,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErC2C;GACAkC;GACAE;GAEAxF;GACA0F;GACAE;GAEAxF;GACAgB;EACJ,CAAA;CACJ;CAEA/E,uBAAuBZ,WAAuB;EAC1C,MAAMwI,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAIhP,wBAAwB;GAC3CgP,YAAY3H,UAAUoE,QAA4B/M,YAAAA;GAClDmR;EACJ,CAAA;EACA,MAAM8B,yBAAyB,IAAIhR,uBAAuBkP,eAAAA;EAC1D,MAAMC,UAAU,IAAI5L,cAAc;GAC9B8K;GACAa,iBAAiB8B;EACrB,CAAA;EACA,OAAO,IAAIrQ,iBAAiB;GACxBwO;GACAd;EACJ,CAAA;CACJ;CAEQ4C,2BAA2BvK,WAAoD;EACnF,OAAO,IAAI5G,4BAA4B;GACnCuO,YAAY3H,UAAUoE,QAAgCxM,gBAAAA;GACtD4Q,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;CACJ;CAEQyS,qBAAqBxK,WAA8C;EACvE,OAAO,IAAIvG,sBAAsB;GAC7BkO,YAAY3H,UAAUoE,QAA0BnM,UAAAA;GAChDuQ,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAMyI,2BAA2BR,WAAuB;EACpD,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAIvO,4BAA4B;GAC/CuO,YAAY3H,UAAUoE,QAAgCxM,gBAAAA;GACtD4Q;EACJ,CAAA;EAEA,MAAM8B,yBAAyB,IAAIhR,uBAAuBkP,eAAAA;EAC1D,MAAMiC,iBAAiB,IAAIhR,sBAAsB;GAC7CkO,YAAY3H,UAAUoE,QAA0BnM,UAAAA;GAChDuQ;EACJ,CAAA;EACA,MAAMkC,2BAA2B,IAAIlR,gCACjCwG,UAAUoE,QAAoClM,oBAAAA,CAAAA;EAElD,MAAMyS,mBAAmB,IAAItR,wBAAwB;GACjDsO,YAAY,IAAI7P,iBAAiB8N,UAAAA;GACjC4C;EACJ,CAAA;EAEA,MAAMoC,6BAA6B,IAAIzR,kCACnC6G,UAAUoE,QAAsCvM,sBAAAA,CAAAA;EAGpD,MAAM4Q,UAAU,IAAI5K,kBAAkB;GAClC8J;GACAa,iBAAiB8B;GACjBG;GACAC;GACAC;GACAC;EACJ,CAAA;EAEA,MAAMxD,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMwD,qBAAqB,IAAI3R,2BAA2B0M,UAAAA;EAE1D,MAAMkF,iBAAiB,IAAInN,yBAAyB;GAChDgK;GACAa,iBAAiB8B;GACjBO;GACAzD;EACJ,CAAA;EAEA,OAAO,IAAIzM,qBAAqB;GAC5B8N;GACAqC;EACJ,CAAA;CACJ;CAEAxK,qBAAqBN,WAAuB;EACxC,MAAMwI,kBAAkB,IAAIlP,uBACxB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;EAEzC,MAAM4P,aAAa,IAAIlO,sBAAsB;GACzCkO,YAAY3H,UAAUoE,QAA0BnM,UAAAA;GAChDuQ,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;EACA,MAAM0Q,UAAU,IAAIpK,YAAY;GAC5BsJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAIxN,eAAe,EAAEyN,QAAQ,CAAA;CACxC;CAEA3H,iCAAiCd,WAAuB;EACpD,MAAM2H,aAAa,IAAIjP,kCACnBsH,UAAUoE,QAAsC9M,sBAAAA,CAAAA;EAEpD,MAAMyT,uBAAuB,KAAKR,2BAA2BvK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI/L,wBAAwB;GACxCiL;GACAoD;GACA3D;EACJ,CAAA;EACA,OAAO,IAAIlN,2BAA2B,EAAEuO,QAAQ,CAAA;CACpD;CAEAzH,2BAA2BhB,WAAuB;EAC9C,MAAM2H,aAAa,IAAI/O,4BACnBoH,UAAUoE,QAAgC7M,gBAAAA,CAAAA;EAE9C,MAAM6P,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI9L,kBAAkB;GAAEgL;GAAYP;EAA2B,CAAA;EAC/E,OAAO,IAAIjN,qBAAqB,EAAEsO,QAAQ,CAAA;CAC9C;CAEAvH,4BAA4BlB,WAAuB;EAC/C,MAAM2H,aAAa,IAAI9O,6BACnBmH,UAAUoE,QAAiC5M,iBAAAA,CAAAA;EAE/C,MAAMiR,UAAU,IAAI7L,mBAAmB,EAAE+K,WAAW,CAAA;EACpD,OAAO,IAAIvN,sBAAsB,EAAEqO,QAAQ,CAAA;CAC/C;CAEArH,8BAA8BpB,WAAuB;EACjD,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM8B,aAAa,IAAIpO,+BACnByG,UAAUoE,QAAmCpM,mBAAAA,CAAAA;EAEjD,MAAMgT,gBAAgB,IAAIC,IACtBrF,WAAWsF,YAAYjT,UAAAA,CAAAA,CAAYkT,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAM7C,UAAU,IAAItK,qBAAqB;GAAEwJ;GAAYqD;EAAc,CAAA;EACrE,OAAO,IAAIjQ,wBAAwB,EAAE0N,QAAQ,CAAA;CACjD;CAEAnH,+BAA+BtB,WAAuB;EAClD,MAAM2H,aAAa,IAAInO,gCACnBwG,UAAUoE,QAAoClM,oBAAAA,CAAAA;EAElD,MAAM6S,uBAAuB,KAAKR,2BAA2BvK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIrK,sBAAsB;GACtCuJ;GACAoD;GACA3D;EACJ,CAAA;EACA,OAAO,IAAInM,yBAAyB,EAAEwN,QAAQ,CAAA;CAClD;CAEA/H,iCAAiCV,WAAuB;EACpD,MAAM2H,aAAa,IAAIxO,kCACnB6G,UAAUoE,QAAsCvM,sBAAAA,CAAAA;EAEpD,MAAM4Q,UAAU,IAAI7K,wBAAwB,EAAE+J,WAAW,CAAA;EACzD,OAAO,IAAI/M,2BAA2B,EAAE6N,QAAQ,CAAA;CACpD;CAEAjH,sBAAsBxB,WAAuB;EACzC,MAAMwI,kBAAkB,IAAIlP,uBACxB0G,UAAUoE,QAA2BrM,WAAAA,CAAAA;EAEzC,MAAM4P,aAAa,IAAIjO,uBAAuB;GAC1CiO,YAAY3H,UAAUoE,QAA2BjM,WAAAA;GACjDqQ,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;EACA,MAAM0Q,UAAU,IAAInK,aAAa;GAC7BqJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAItN,gBAAgB,EAAEuN,QAAQ,CAAA;CACzC;CAEA/G,oBAAoB1B,WAAuB;EAGvC,MAAMyI,UAAU,IAAItL,WAAW;GAC3BwK,YAAY3H,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;GAC3D5B,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjE2G,gBAAgB5P;EACpB,CAAA;EACA,OAAO,IAAIjB,cAAc,EAAE+N,QAAQ,CAAA;CACvC;CAEA7G,4BAA4B5B,WAAuB;EAC/C,MAAM2H,aAAa,IAAIhO,6BACnBqG,UAAUoE,QAAQtL,qBAAqB+M,UAAU,CAAA;EAErD,MAAM4C,UAAU,IAAI/J,mBAAmB;GACnCiJ;GACAhD,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjE2G,gBAAgB5P;EACpB,CAAA;EACA,OAAO,IAAIN,sBAAsB,EAAEoN,QAAQ,CAAA;CAC/C;CAEAzG,6BAA6BhC,WAAuB;EAChD,MAAM2H,aAAa3H,UAAUoE,QAAQlF,qBAAqB6H,sBAAsB;EAChF,MAAMH,kBAAkB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;EAC9E,MAAM4B,UAAU,IAAIjK,oBAAoB;GAAEmJ;GAAYf;EAAgB,CAAA;EACtE,OAAO,IAAIxL,uBAAuB,EAAEqN,QAAQ,CAAA;CAChD;CAEA3G,wBAAwB9B,WAAuB;EAC3C,MAAM2H,aAAa3H,UAAUoE,QAAQnF,2BAA2BuM,iBAAiB;EACjF,MAAM/C,UAAU,IAAIlK,eAAe,EAAEoJ,WAAW,CAAA;EAChD,OAAO,IAAIxM,kBAAkB,EAAEsN,QAAQ,CAAA;CAC3C;CAEU/C,qBAAqB1F,WAAwC;EACnE,MAAM2H,aAAa3H,UAAUoE,QAAQlF,qBAAqBuM,iBAAiB;EAC3E,OAAO,IAAI3O,eAAe,EAAE6K,WAAW,CAAA;CAC3C;CAEAzF,wBAAwBlC,WAAuB;EAC3C,OAAO,IAAI3F,kBAAkB,EAAEoO,SAAS,KAAK/C,qBAAqB1F,SAAAA,EAAW,CAAA;CACjF;CAEAoC,wCAAwCpC,WAAuB;EAC3D,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM4C,UAAU,IAAIzL,+BAA+B;GAC/C2K,YAAY,IAAI5O,yCAAyC6M,UAAAA;GACzD8F,gBAAgB,IAAIrM,uBAAuB;IACvCsI,YAAY,IAAInP,eAAeoN,UAAAA;IAC/B+F,0BAA0B3L,UAAUoE,QAAoC7L,oBAAAA;IACxEqT,oBAAoB5L,UAAUoE,QAA8B3L,cAAAA;GAChE,CAAA;GACAkM,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjE2G,gBAAgB5P;EACpB,CAAA;EACA,OAAO,IAAIpB,kCAAkC,EAAEkO,QAAQ,CAAA;CAC3D;CAEQlD;CAEEC,6BAA6BxF,WAAqD;EACxF,IAAI,KAAKuF,uBACL,OAAO,KAAKA;EAGhB,MAAMK,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,KAAKN,wBAAwB,IAAIlI,4BAA4B;GACzDwO,gBAAgB,IAAI/T,iBAAiB8N,UAAAA;GACrCwB,4BAA4BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;GACrF1B,QAAQ3F,UAAUoE,QAAQ3E,kBAAAA;EAC9B,CAAA;EAEA,OAAO,KAAK8F;CAChB;CAEQ4C;CAEE7C,gCAAgCtF,WAAkD;EACxF,IAAI,KAAKmI,0BACL,OAAO,KAAKA;EAGhB,MAAMhE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EAEpE,MAAM8B,aAAa,IAAI9N,mCACnBmG,UAAUoE,QAA4C/L,uBAAAA,CAAAA;EAE1D,MAAMqT,iBAAiB,IAAI3R,sBAAsB;GAC7C4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C,iBAAiBxI,UAAUoE,QAA2BrM,WAAAA;EAC1D,CAAA;EAEA,IAAI+T;EACJ,IAAIC;EAKJ,IAAI;GACA,MAAMC,MAAM,IAAIC,IAAI9H,OAAOa,SAAS;GACpC8G,SAASE,IAAIE;GACbH,WAAW;IACPI,MAAMH,IAAIE;IACVE,QAAQN;IACRO,QAAQL,IAAIK;GAChB;EACJ,QAAQ;GACJP,SAASQ,KAAAA;GACTP,WAAWO,KAAAA;EACf;EAEA,KAAKnE,2BAA2B,IAAItJ,yBAAyB;GACzD8I;GACA+D;GACAa,OAAOvM,UAAUoE,QAAQ5E,iBAAAA;GACzBgN,QAAQ,IAAIxO,YAAY,EAAEsI,UAAUtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ,EAAE,CAAA;GACrF5B,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjE2G,gBAAgB5P;GAChBiN,YAAY5I,UAAUoE,QAAQ1E,gBAAAA;GAC9BmJ,sBAAsB7I,UAAUoE,QAAQzE,gCAAAA;GACxCmF,SAAS;IACL+C,SAAS1D,OAAOsI;IAChBC,UAAUvI,OAAOwI;IACjBb;IACAC;GACJ;EACJ,CAAA;EAEA,OAAO,KAAK5D;CAChB;CAEAzF,kCAAkC1C,WAAuB;EACrD,OAAO,IAAIzE,4BAA4B,EAAEkN,SAAS,KAAKnD,gCAAgCtF,SAAAA,EAAW,CAAA;CACtG;CAEQoI;CAEEC,uBAAuBrI,WAA+C;EAC5E,IAAI,KAAKoI,iBACL,OAAO,KAAKA;EAGhB,KAAKA,kBAAkB,IAAI3K,sBAAsB;GAC7CgH,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3EkI,cAAc5M,UAAUoE,QAAQlF,qBAAqB2N,cAAc;GACnE7G,mBAAmBhG,UAAUoE,QAAQlF,qBAAqB+G,iBAAiB;GAC3EC,oBAAoBlG,UAAUoE,QAAQlF,qBAAqBiH,kBAAkB;GAC7ES,iBAAiB5G,UAAUoE,QAAQlF,qBAAqB2H,eAAe;GACvElC,cAAc3E,UAAUoE,QAAQtL,qBAAqB8L,YAAY;GACjEC,SAAS7E,UAAUoE,QAAQxE,mBAAAA;EAC/B,CAAA;EAEA,OAAO,KAAKwI;CAChB;CAEAtE,uCAAuC9D,WAAuB;EAC1D,OAAO,IAAIlE,iCAAiC;GACxC2M,SAAS,KAAKnD,gCAAgCtF,SAAAA;GAC9CyE,gBAAgBzE,UAAUoE,QAAQnF,2BAA2ByF,cAAc;GAC3E0D,iBAAiB,KAAKC,uBAAuBrI,SAAAA;EACjD,CAAA;CACJ;CAEAE,sBAAsBF,WAAuB;EACzC,MAAMyI,UAAUzI,UAAUoE,QAAQtL,qBAAqB8L,YAAY;EACnE,OAAO,IAAItK,gBAAgB,EAAEmO,QAAQ,CAAA;CACzC;CAEAqE,kBAAkB9M,WAAuB;EACrC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAI5N,sBAAsB;GACzC4N,YAAY,IAAInP,eAAeoN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAM8B,yBAAyB,IAAIhR,uBAAuBkP,eAAAA;EAC1D,OAAO,IAAIxJ,YAAY;GACnB2I;GACAa,iBAAiB8B;GACjBtB,mBAAmB7E,OAAO6E;EAC9B,CAAA;CACJ;CAEA1G,qBAAqBtC,WAAuB;EACxC,OAAO,IAAIxE,eAAe,EAAEiN,SAAS,KAAKqE,kBAAkB9M,SAAAA,EAAW,CAAA;CAC3E;CAEA+D,yBAAyB/D,WAAuB;EAC5C,OAAO,IAAIxD,mBAAmB,EAAEiM,SAAS,KAAKqE,kBAAkB9M,SAAAA,EAAW,CAAA;CAC/E;CAEAwC,8BAA8BxC,WAAuB;EACjD,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM8B,aAAa,IAAI/N,+BACnBoG,UAAUoE,QAAmChM,mBAAAA,CAAAA;EAEjD,MAAM4S,gBAAgB,IAAIC,IACtBrF,WAAWsF,YAAY5S,UAAAA,CAAAA,CAAY6S,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAM7C,UAAU,IAAI9J,qBAAqB;GAAEgJ;GAAYqD;EAAc,CAAA;EACrE,OAAO,IAAI1P,wBAAwB,EAAEmN,QAAQ,CAAA;CACjD;CAEA7F,+BAA+B5C,WAAuB;EAClD,MAAM2H,aAAa,IAAI7N,gCACnBkG,UAAUoE,QAAoC7L,oBAAAA,CAAAA;EAElD,MAAMwS,uBAAuB,KAAKR,2BAA2BvK,SAAAA;EAC7D,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI3J,sBAAsB;GACtC6I;GACAoD;GACA3D;EACJ,CAAA;EACA,OAAO,IAAI3L,yBAAyB,EAAEgN,QAAQ,CAAA;CAClD;CAEA3F,yBAAyB9C,WAAuB;EAC5C,MAAM2H,aAAa,IAAI3N,0BACnBgG,UAAUoE,QAA8B3L,cAAAA,CAAAA;EAE5C,MAAM2O,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI1J,gBAAgB;GAAE4I;GAAYP;EAA2B,CAAA;EAC7E,OAAO,IAAI1L,mBAAmB,EAAE+M,QAAQ,CAAA;CAC5C;CAEAzF,uBAAuBhD,WAAuB;EAC1C,MAAM4F,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAItO,wBAAwB;GAC3CsO,YAAY,IAAI7P,iBAAiB8N,UAAAA;GACjC4C;EACJ,CAAA;EACA,MAAM8B,yBAAyB,IAAIhR,uBAAuBkP,eAAAA;EAC1D,MAAMC,UAAU,IAAI1K,cAAc;GAC9B4J;GACAa,iBAAiB8B;EACrB,CAAA;EACA,MAAMlD,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMyD,iBAAiB,IAAIhN,qBAAqB;GAC5C6J;GACAa,iBAAiB8B;GACjBlD;EACJ,CAAA;EAEA,OAAO,IAAIvM,iBAAiB;GACxB4N;GACAqC;EACJ,CAAA;CACJ;CAEA5H,qCAAqClD,WAAuB;EACxD,MAAM2H,aAAa,IAAI1O,6CACnB+G,UAAUoE,QAAyB1M,iCAAAA,CAAAA;EAEvC,MAAM+S,iBAAiB,KAAKD,qBAAqBxK,SAAAA;EACjD,MAAMoH,6BAA6BpH,UAAUoE,QAAQhF,qBAAqBiI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIxL,mCAAmC;GACnD0K;GACA8C;GACArD;EACJ,CAAA;EACA,OAAO,IAAI3M,sCAAsC,EAAEgO,QAAQ,CAAA;CAC/D;CAEAlF,oBAAoBvD,WAAuB;EAEvC,MAAM2H,aADa3H,UAAUoE,QAAQtL,qBAAqB+M,UACvCD,CAAAA,CAAWmH,cAAcpV,SAAAA;EAC5C,OAAO,IAAIqE,cAAc,EAAE2L,WAAW,CAAA;CAC1C;CAEAvH,sBAAsBJ,WAAuB;EACzC,MAAMmE,SAASnE,UAAUoE,QAAQ9E,kBAAAA;EACjC,MAAMsG,aAAa5F,UAAUoE,QAAQtL,qBAAqB+M,UAAU;EACpE,MAAM2C,kBAAkBxI,UAAUoE,QAA2BrM,WAAAA;EAC7D,MAAM4P,aAAa,IAAIrO,uBAAuBkP,eAAAA;EAE9C,MAAMS,mBAAmB,IAAItQ,wBAAwB;GACjDgP,YAAY3H,UAAUoE,QAA4B/M,YAAAA;GAClDmR;EACJ,CAAA;EACA,MAAM7C,SAAS3F,UAAUoE,QAAQ3E,kBAAAA;EACjC,MAAMuN,0BAA0B,IAAIvO,wBAAwB;GACxDwK;GACAgE,iBAAiB,IAAIvT,uBAAuB;IACxCiO,YAAY3H,UAAUoE,QAA2BjM,WAAAA;IACjDqQ;GACJ,CAAA;GACA0E,uBAAuB,IAAIrU,6BACvBmH,UAAUoE,QAAiC5M,iBAAAA,CAAAA;GAE/C2V,YAAY5N,cAAc4E,MAAAA;GAC1BwB;EACJ,CAAA;EACA,MAAMyH,iBAAiB,IAAIlQ,eAAe;GACtCoJ,UAAUtG,UAAUoE,QAAQlF,qBAAqBqH,QAAQ;GACzDZ;EACJ,CAAA;EAEA,MAAM8C,UAAU,IAAIxK,aAAa;GAC7B0J;GACA0F,mBAAmB;IACfL;IACAI;IACA,IAAIjO,6BAA6Ba,SAAAA;GACpC;GACD2F;EACJ,CAAA;EACA,MAAM2H,gBAAgB1H,WAAWmH,cAAcpV,SAAAA;EAE/C,OAAO,IAAImD,gBAAgB;GACvBgK,SAAS;IACLC,SAASZ,OAAOa;IAChBuI,aAAapJ,OAAOqJ;IACpBC,2BAA2BtJ,OAAOoE,sBAAsB;GAC5D;GACAE;GACA6E;EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserAuthenticatorEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderAccountRepositoryAdapter","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","TrustAnchorRepositoryAdapter","UserAttributeRepositoryAdapter","UserAuthenticatorRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","ConsentController","EventController","IdentityProviderAccountController","IdentityProviderController","IdentityProviderRoleMappingController","KeyController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","SessionTokenController","TrustAnchorController","UserAttributeController","UserAuthenticatorController","UserController","UserPermissionController","UserRoleController","useRequestEventContext","AccountController","ActivateController","AdminController","AuthenticatorChallengeController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","UserInfoController","ClientCertificateValidator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","ConsentService","CredentialsAuthenticator","IdentityProviderAccountService","IdentityProviderRoleMappingService","KeyProvisioner","KeyService","LoginThrottleService","OAuth2AccessPolicyEvaluator","OAuth2ClientAuthenticator","OAuth2EndSessionService","OAuth2FederatedLoginService","OAuth2MfaLoginService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmCipher","RealmService","RegistrationService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","SessionTokenService","SystemClientProvisioner","TrustAnchorService","UserAttributeService","UserAuthenticator","UserAuthenticatorService","UserPermissionService","UserRoleService","UserService","AuthenticationInjectionKey","OAuth2InjectionToken","LazyWildcardRealmProvisioner","IdentityInjectionKey","UserIdentityRepository","ConfigInjectionKey","getAppOrigins","CacheInjectionKey","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","MetricsInjectionKey","HTTPControllerModule","mount","router","container","eventController","createEventController","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","keyController","createKeyController","trustAnchorController","createTrustAnchorController","sessionController","createSessionController","sessionTokenController","createSessionTokenController","consentController","createConsentController","identityProviderAccountController","createIdentityProviderAccountController","userController","createUserController","userAttributeController","createUserAttributeController","userAuthenticatorController","createUserAuthenticatorController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createAuthenticatorChallengeController","createUserInfoController","createAccountController","createAdminController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","eventService","EventService","metrics","options","baseURL","publicUrl","authConsoleUrl","authConsole","url","features","buildUIFeatures","promptLoginMaxAge","mfaFreshnessMaxAge","mfaChallengeProvider","resolveUserAuthenticatorService","accessPolicyEvaluator","resolveAccessPolicyEvaluator","consentService","createConsentService","logger","dataSource","DataSource","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyStore","KeyStore","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","userAuthenticator","oauth2ClientAuthenticator","certificateValidator","trustAnchorRepository","loginThrottleService","repository","EventRepository","enabled","loginAttemptThrottleEnabled","threshold","loginAttemptThreshold","windowSeconds","loginAttemptWindow","userAuthenticatorService","mfaLoginService","resolveMfaLoginService","tokenRefreshGracePeriod","certificateSource","realmRepository","service","createRegistrationService","createPasswordRecoveryService","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","consoleUrl","adminConsole","loginStore","ConsoleLoginStore","sessionRepository","SessionRepository","accountConsole","registration","registrationEnabled","passwordRecovery","emailVerification","accountManager","ProviderAccountManager","linkStore","ProviderAccountLinkStore","stateManager","AuthorizationStateManager","loginService","pendingLoginStore","FederatedLoginStore","accountConsoleUrl","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","requestContext","ConsentRepository","userRepository","userPermissionRepository","userRoleRepository","policyProvider","issuer","webauthn","URL","hostname","rpId","rpName","origin","undefined","cache","cipher","mfaEnabled","required","mfaRequired","ticketIssuer","MfaTokenIssuer","createUserService","getRepository","systemClientProvisioner","scopeRepository","clientScopeRepository","appOrigins","keyProvisioner","realmProvisioners","keyRepository","mtlsBaseURL","mtlsPublicUrl","clientCertificatesEnabled"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IApp } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserAuthenticator as UserAuthenticatorModel,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserAuthenticatorEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderAccountRepositoryAdapter,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    TrustAnchorRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserAuthenticatorRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    ConsentController,\n    EventController,\n    IdentityProviderAccountController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    KeyController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    SessionTokenController,\n    TrustAnchorController,\n    UserAttributeController,\n    UserAuthenticatorController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n    useRequestEventContext,\n} from '../../../../adapters/http/index.ts';\nimport {\n    AccountController,\n    ActivateController,\n    AdminController,\n    AuthenticatorChallengeController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n    UserInfoController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCertificateValidator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    ConsentService,\n    CredentialsAuthenticator,\n    IdentityProviderAccountService,\n    IdentityProviderRoleMappingService,\n    KeyProvisioner,\n    KeyService,\n    LoginThrottleService,\n    OAuth2AccessPolicyEvaluator,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    OAuth2FederatedLoginService,\n    OAuth2MfaLoginService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmCipher,\n    RealmService,\n    RegistrationService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    SessionTokenService,\n    SystemClientProvisioner,\n    TrustAnchorService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserAuthenticatorService,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { LazyWildcardRealmProvisioner } from '../../provisioning/lazy-wildcard.ts';\nimport { IdentityInjectionKey, UserIdentityRepository } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { CacheInjectionKey } from '../../cache/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\nimport { MetricsInjectionKey } from '../../metrics/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: IApp, container: IContainer): Promise<void> {\n        const eventController = this.createEventController(container);\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const keyController = this.createKeyController(container);\n        const trustAnchorController = this.createTrustAnchorController(container);\n        const sessionController = this.createSessionController(container);\n        const sessionTokenController = this.createSessionTokenController(container);\n        const consentController = this.createConsentController(container);\n        const identityProviderAccountController = this.createIdentityProviderAccountController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userAuthenticatorController = this.createUserAuthenticatorController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n                this.createAuthenticatorChallengeController(container),\n                this.createUserInfoController(container),\n                this.createAccountController(container),\n                this.createAdminController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                consentController,\n                eventController,\n                identityProviderAccountController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                keyController,\n                trustAnchorController,\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                sessionTokenController,\n                userController,\n                userAttributeController,\n                userAuthenticatorController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                authConsoleUrl: config.authConsole.url,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n                mfaFreshnessMaxAge: config.mfaFreshnessMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n\n            eventService,\n            metrics,\n\n            mfaChallengeProvider: this.resolveUserAuthenticatorService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            consentService: this.createConsentService(container),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyStore = container.resolve(OAuth2InjectionToken.KeyStore);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator({\n            identityResolver,\n            certificateValidator: new ClientCertificateValidator({ trustAnchorRepository: new TrustAnchorRepositoryAdapter(dataSource) }),\n        });\n\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n        const metrics = container.resolve(MetricsInjectionKey);\n\n        const loginThrottleService = new LoginThrottleService({\n            repository: container.resolve(DatabaseInjectionKey.EventRepository),\n            options: {\n                enabled: config.loginAttemptThrottleEnabled,\n                threshold: config.loginAttemptThreshold,\n                windowSeconds: config.loginAttemptWindow,\n            },\n        });\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyStore,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            eventService,\n            metrics,\n            loginThrottleService,\n            userAuthenticatorService: this.resolveUserAuthenticatorService(container),\n            mfaLoginService: this.resolveMfaLoginService(container),\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n            certificateSource: config.certificateSource,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: { authConsoleUrl: config.authConsole.url },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: { authConsoleUrl: config.authConsole.url },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: { authConsoleUrl: config.authConsole.url },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: { authConsoleUrl: config.authConsole.url },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { authConsoleUrl: config.authConsole.url },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    createAdminController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new AdminController({\n            options: {\n                baseURL: config.publicUrl,\n                consoleUrl: config.adminConsole.url,\n                enabled: config.adminConsole.enabled,\n            },\n            loginStore: container.resolve(OAuth2InjectionToken.ConsoleLoginStore),\n            sessionRepository: container.resolve(AuthenticationInjectionKey.SessionRepository),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            tokenVerifier: container.resolve(OAuth2InjectionToken.TokenVerifier),\n            tokenRevoker: container.resolve(OAuth2InjectionToken.TokenRevoker),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    createAccountController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new AccountController({\n            options: {\n                baseURL: config.publicUrl,\n                consoleUrl: config.accountConsole.url,\n                enabled: config.accountConsole.enabled,\n            },\n            loginStore: container.resolve(OAuth2InjectionToken.ConsoleLoginStore),\n            sessionRepository: container.resolve(AuthenticationInjectionKey.SessionRepository),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            tokenVerifier: container.resolve(OAuth2InjectionToken.TokenVerifier),\n            tokenRevoker: container.resolve(OAuth2InjectionToken.TokenRevoker),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n            accountConsole: config.accountConsole.enabled,\n            adminConsole: config.adminConsole.enabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n        const linkStore = container.resolve(IdentityInjectionKey.ProviderAccountLinkStore);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        const logger = container.resolve(LoggerInjectionKey);\n        const eventService = container.resolve(DatabaseInjectionKey.EventService);\n\n        const loginService = new OAuth2FederatedLoginService({\n            options: { baseURL: config.publicUrl },\n\n            accountManager,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            codeRequestVerifier,\n\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            pendingLoginStore: container.resolve(OAuth2InjectionToken.FederatedLoginStore),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n\n            accessPolicyEvaluator: this.resolveAccessPolicyEvaluator(container),\n            eventService,\n            metrics: container.resolve(MetricsInjectionKey),\n            logger,\n        });\n\n        return new IdentityProviderController({\n            options: {\n                baseURL: config.publicUrl,\n                accountConsoleUrl: config.accountConsole.url,\n            },\n\n            repository,\n            accountManager,\n            linkStore,\n\n            codeRequestVerifier,\n            stateManager,\n            loginService,\n\n            eventService,\n            logger,\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createKeyController(container: IContainer) {\n        // the DI singleton carries the optional KEK cipher — never construct\n        // a fresh adapter here.\n        const service = new KeyService({\n            repository: container.resolve(OAuth2InjectionToken.KeyStore),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new KeyController({ service });\n    }\n\n    createTrustAnchorController(container: IContainer) {\n        const repository = new TrustAnchorRepositoryAdapter(\n            container.resolve(DatabaseInjectionKey.DataSource),\n        );\n        const service = new TrustAnchorService({\n            repository,\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new TrustAnchorController({ service });\n    }\n\n    createSessionTokenController(container: IContainer) {\n        const repository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const service = new SessionTokenService({ repository, tokenRepository });\n        return new SessionTokenController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({\n            repository,\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n        });\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new SessionController({\n            service,\n            // Only `GET /sessions/@me/introspect` and the cookie-clearing half\n            // of the `@me` delete use these (plan 088). Optional, so a minimal\n            // graph still constructs the entity routes.\n            baseURL: config.publicUrl,\n            identityResolver: container.resolve(IdentityInjectionKey.Resolver),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            sessionRepository: repository,\n        });\n    }\n\n    protected createConsentService(container: IContainer) : ConsentService {\n        const repository = container.resolve(OAuth2InjectionToken.ConsentRepository);\n        return new ConsentService({ repository });\n    }\n\n    createConsentController(container: IContainer) {\n        return new ConsentController({ service: this.createConsentService(container) });\n    }\n\n    createIdentityProviderAccountController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const service = new IdentityProviderAccountService({\n            repository: new IdentityProviderAccountRepositoryAdapter(dataSource),\n            userRepository: new UserIdentityRepository({\n                repository: new UserRepository(dataSource),\n                userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n                userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n            }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n        });\n        return new IdentityProviderAccountController({ service });\n    }\n\n    private accessPolicyEvaluator? : OAuth2AccessPolicyEvaluator;\n\n    protected resolveAccessPolicyEvaluator(container: IContainer) : OAuth2AccessPolicyEvaluator {\n        if (this.accessPolicyEvaluator) {\n            return this.accessPolicyEvaluator;\n        }\n\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        this.accessPolicyEvaluator = new OAuth2AccessPolicyEvaluator({\n            policyProvider: new PolicyRepository(dataSource),\n            identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        return this.accessPolicyEvaluator;\n    }\n\n    private userAuthenticatorService? : UserAuthenticatorService;\n\n    protected resolveUserAuthenticatorService(container: IContainer) : UserAuthenticatorService {\n        if (this.userAuthenticatorService) {\n            return this.userAuthenticatorService;\n        }\n\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const repository = new UserAuthenticatorRepositoryAdapter(\n            container.resolve<Repository<UserAuthenticatorModel>>(UserAuthenticatorEntity),\n        );\n        const userRepository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n\n        let issuer : string | undefined;\n        let webauthn : {\n            rpId: string,\n            rpName: string,\n            origin: string\n        } | undefined;\n        try {\n            const url = new URL(config.publicUrl);\n            issuer = url.hostname;\n            webauthn = {\n                rpId: url.hostname,\n                rpName: issuer,\n                origin: url.origin,\n            };\n        } catch {\n            issuer = undefined;\n            webauthn = undefined;\n        }\n\n        this.userAuthenticatorService = new UserAuthenticatorService({\n            repository,\n            userRepository,\n            cache: container.resolve(CacheInjectionKey),\n            cipher: new RealmCipher({ keyStore: container.resolve(OAuth2InjectionToken.KeyStore) }),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            requestContext: useRequestEventContext,\n            mailClient: container.resolve(MailInjectionKey),\n            mailTemplateRenderer: container.resolve(MailTemplateRendererInjectionKey),\n            options: {\n                enabled: config.mfaEnabled,\n                required: config.mfaRequired,\n                issuer,\n                webauthn,\n            },\n        });\n\n        return this.userAuthenticatorService;\n    }\n\n    createUserAuthenticatorController(container: IContainer) {\n        return new UserAuthenticatorController({ service: this.resolveUserAuthenticatorService(container) });\n    }\n\n    private mfaLoginService? : OAuth2MfaLoginService;\n\n    protected resolveMfaLoginService(container: IContainer) : OAuth2MfaLoginService {\n        if (this.mfaLoginService) {\n            return this.mfaLoginService;\n        }\n\n        this.mfaLoginService = new OAuth2MfaLoginService({\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            ticketIssuer: container.resolve(OAuth2InjectionToken.MfaTokenIssuer),\n            accessTokenIssuer: container.resolve(OAuth2InjectionToken.AccessTokenIssuer),\n            refreshTokenIssuer: container.resolve(OAuth2InjectionToken.RefreshTokenIssuer),\n            tokenRepository: container.resolve(OAuth2InjectionToken.TokenRepository),\n            eventService: container.resolve(DatabaseInjectionKey.EventService),\n            metrics: container.resolve(MetricsInjectionKey),\n        });\n\n        return this.mfaLoginService;\n    }\n\n    createAuthenticatorChallengeController(container: IContainer) {\n        return new AuthenticatorChallengeController({\n            service: this.resolveUserAuthenticatorService(container),\n            sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),\n            mfaLoginService: this.resolveMfaLoginService(container),\n        });\n    }\n\n    createEventController(container: IContainer) {\n        const service = container.resolve(DatabaseInjectionKey.EventService);\n        return new EventController({ service });\n    }\n\n    createUserService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        return new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n    }\n\n    createUserController(container: IContainer) {\n        return new UserController({ service: this.createUserService(container) });\n    }\n\n    createUserInfoController(container: IContainer) {\n        return new UserInfoController({ service: this.createUserService(container) });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const systemClientProvisioner = new SystemClientProvisioner({\n            clientRepository,\n            scopeRepository: new ScopeRepositoryAdapter({\n                repository: container.resolve<Repository<Scope>>(ScopeEntity),\n                realmRepository,\n            }),\n            clientScopeRepository: new ClientScopeRepositoryAdapter(\n                container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n            ),\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n        const keyProvisioner = new KeyProvisioner({\n            keyStore: container.resolve(OAuth2InjectionToken.KeyStore),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            realmProvisioners: [\n                systemClientProvisioner,\n                keyProvisioner,\n                new LazyWildcardRealmProvisioner(container),\n            ],\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: {\n                baseURL: config.publicUrl,\n                mtlsBaseURL: config.mtlsPublicUrl,\n                clientCertificatesEnabled: config.certificateSource !== 'disabled',\n            },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+KA,IAAa0I,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAcC,WAAsC;EAC5D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,kBAAkB,KAAKC,sBAAsBJ,SAAAA;EACnD,MAAMK,iBAAiB,KAAKC,qBAAqBN,SAAAA;EACjD,MAAMO,uBAAuB,MAAM,KAAKC,2BAA2BR,SAAAA;EACnE,MAAMS,6BAA6B,KAAKC,iCAAiCV,SAAAA;EACzE,MAAMW,mBAAmB,KAAKC,uBAAuBZ,SAAAA;EACrD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,0BAA0B,KAAKC,8BAA8BpB,SAAAA;EACnE,MAAMqB,2BAA2B,KAAKC,+BAA+BtB,SAAAA;EACrE,MAAMuB,kBAAkB,KAAKC,sBAAsBxB,SAAAA;EACnD,MAAMyB,gBAAgB,KAAKC,oBAAoB1B,SAAAA;EAC/C,MAAM2B,wBAAwB,KAAKC,4BAA4B5B,SAAAA;EAC/D,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,yBAAyB,KAAKC,6BAA6BhC,SAAAA;EACjE,MAAMiC,oBAAoB,KAAKC,wBAAwBlC,SAAAA;EACvD,MAAMmC,oCAAoC,KAAKC,wCAAwCpC,SAAAA;EACvF,MAAMqC,iBAAiB,KAAKC,qBAAqBtC,SAAAA;EACjD,MAAMuC,0BAA0B,KAAKC,8BAA8BxC,SAAAA;EACnE,MAAMyC,8BAA8B,KAAKC,kCAAkC1C,SAAAA;EAC3E,MAAM2C,2BAA2B,KAAKC,+BAA+B5C,SAAAA;EACrE,MAAM6C,qBAAqB,KAAKC,yBAAyB9C,SAAAA;EACzD,MAAM+C,mBAAmB,KAAKC,uBAAuBhD,SAAAA;EACrD,MAAMiD,iCAAiC,KAAKC,qCAAqClD,SAAAA;EAEjFD,OAAOoD,IAAIhM,WAAW,EAClBiM,aAAa;GACT,KAAKC,gBAAgBrD,SAAAA;GACrB,KAAKsD,YAAYtD,SAAAA;GACjB,KAAKuD,oBAAoBvD,SAAAA;GACzB,KAAKwD,uBAAuBxD,SAAAA;GAC5B,KAAKyD,yBAAyBzD,SAAAA;GAC9B,KAAK0D,+BAA+B1D,SAAAA;GACpC,KAAK2D,8BAA8B3D,SAAAA;GACnC,KAAK4D,yBAAyB5D,SAAAA;GAC9B,KAAK6D,uBAAuB7D,SAAAA;GAC5B,KAAK8D,uCAAuC9D,SAAAA;GAC5C,KAAK+D,yBAAyB/D,SAAAA;GAC9B,KAAKgE,wBAAwBhE,SAAAA;GAC7B,KAAKiE,sBAAsBjE,SAAAA;GAE3B,KAAKkE,uBAAuBlE,SAAAA;GAE5BW;GACAE;GACAE;GACAE;GACAgB;GACAhC;GACAkC;GACAc;GACA,KAAKkB,uBAAuBnE,SAAAA;GAC5ByB;GACAE;GACApB;GACAE;GACAsC;GACA5C;GACAE;GACAc;GACAE;GACAE;GACAM;GACAE;GACAM;GACAE;GACAE;GACAE;GACAE;EACH,EACL,CAAA,CAAA;CACJ;CAIAQ,gBAAgBrD,WAAuB;EACnC,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,MAAMgF,aAAatE,UAAUqE,QAAQnF,qBAAqBqF,uBAAuB;EACjF,MAAMC,sBAAsBxE,UAAUqE,QAAQnF,qBAAqBuF,gCAAgC;EAEnG,MAAMC,iBAAiB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;EAElF,MAAMC,eAAe5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;EACxE,MAAMC,UAAU9E,UAAUqE,QAAQzE,mBAAAA;EAElC,OAAO,IAAI7D,oBAAoB;GAC3BgJ,SAAS;IACLC,SAASZ,OAAOa;IAChBC,gBAAgBd,OAAOe,YAAYC;IACnCC,UAAU,KAAKC,gBAAgBlB,MAAAA;IAC/BmB,mBAAmBnB,OAAOmB;IAC1BC,oBAAoBpB,OAAOoB;GAC/B;GAEAlB;GACAE;GAEAE;GAEAE;GACAE;GAEAW,sBAAsB,KAAKC,gCAAgC1F,SAAAA;GAC3D2F,uBAAuB,KAAKC,6BAA6B5F,SAAAA;GAEzD6F,gBAAgB,KAAKC,qBAAqB9F,SAAAA;GAC1C+F,QAAQ/F,UAAUqE,QAAQ5E,kBAAAA;EAC9B,CAAA;CACJ;CAEA6D,YAAYtD,WAAuB;EAC/B,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAMyG,SAAS/F,UAAUqE,QAAQ5E,kBAAAA;EACjC,MAAMuG,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EAEpE,MAAMvB,iBAAiB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;EAElF,MAAMuB,eAAelG,UAAUqE,QAAQnF,qBAAqBiH,yBAAyB;EAErF,MAAMC,oBAAoBpG,UAAUqE,QAAQnF,qBAAqBmH,iBAAiB;EAClF,MAAMC,qBAAqBtG,UAAUqE,QAAQnF,qBAAqBqH,kBAAkB;EACpF,MAAMC,oBAAoBxG,UAAUqE,QAAQnF,qBAAqBuH,iBAAiB;EAClF,MAAMC,WAAW1G,UAAUqE,QAAQnF,qBAAqByH,QAAQ;EAEhE,MAAMC,eAAe5G,UAAUqE,QAAQnF,qBAAqB2H,YAAY;EACxE,MAAMC,gBAAgB9G,UAAUqE,QAAQnF,qBAAqB6H,aAAa;EAC1E,MAAMC,kBAAkBhH,UAAUqE,QAAQnF,qBAAqB+H,eAAe;EAC9E,MAAMC,yBAAyBlH,UAAUqE,QAAQnF,qBAAqBiI,sBAAsB;EAE5F,MAAMC,mBAAmBpH,UAAUqE,QAAQjF,qBAAqBiI,QAAQ;EACxE,MAAMC,8CAA8CtH,UAAUqE,QAAQjF,qBAAqBmI,mCAAmC;EAE9H,MAAMC,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAE5F,MAAMC,oBAAoB,IAAI3K,yBAAyB,CACnDuK,6CACA,IAAI1I,kBAAkBwI,gBAAAA,CACzB,CAAA;EAED,MAAMO,4BAA4B,IAAIrK,0BAA0B;GAC5D8J;GACAQ,sBAAsB,IAAInL,2BAA2B,EAAEoL,uBAAuB,IAAInO,6BAA6BsM,UAAAA,EAAY,CAAA;EAC/H,CAAA;EAEA,MAAMpB,eAAe5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;EACxE,MAAMC,UAAU9E,UAAUqE,QAAQzE,mBAAAA;EAElC,MAAMkI,uBAAuB,IAAI1K,qBAAqB;GAClD2K,YAAY/H,UAAUqE,QAAQxL,qBAAqBmP,eAAe;GAClEjD,SAAS;IACLkD,SAAS7D,OAAO8D;IAChBC,WAAW/D,OAAOgE;IAClBC,eAAejE,OAAOkE;GAC1B;EACJ,CAAA;EAEA,OAAO,IAAI/L,gBAAgB;GACvB2J;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAtC;GACAE;GACAgD;GACAS,0BAA0B,KAAK7C,gCAAgC1F,SAAAA;GAC/DwI,iBAAiB,KAAKC,uBAAuBzI,SAAAA;GAC7C2F,uBAAuB,KAAKC,6BAA6B5F,SAAAA;GAEzD0I,yBAAyBtE,OAAOsE;GAChC3C;GAEAqB;GACAI;GAEAE;GAEAC;GACAgB,mBAAmBvE,OAAOuE;GAE1BC,iBAAiB,IAAIvP,uBAAuB2G,UAAUqE,QAA2BvM,WAAAA,CAAAA;GAEjF4M;EACJ,CAAA;CACJ;CAEAlB,uBAAuBxD,WAAuB;EAC1C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAIpD,iBAAiB,EAAE8I,SAASZ,OAAOa,UAAU,CAAA;CAC5D;CAEAxB,yBAAyBzD,WAAuB;EAC5C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAI1D,mBAAmB;GAC1BmJ,SAAS,EAAEG,gBAAgBd,OAAOe,YAAYC,IAAI;GAClDyD,SAAS,KAAKC,0BAA0B9I,SAAAA;EAC5C,CAAA;CACJ;CAEA0D,+BAA+B1D,WAAuB;EAClD,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAInD,yBAAyB;GAChC4I,SAAS,EAAEG,gBAAgBd,OAAOe,YAAYC,IAAI;GAClDyD,SAAS,KAAKE,8BAA8B/I,SAAAA;EAChD,CAAA;CACJ;CAEA2D,8BAA8B3D,WAAuB;EACjD,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAIlD,wBAAwB;GAC/B2I,SAAS,EAAEG,gBAAgBd,OAAOe,YAAYC,IAAI;GAClDyD,SAAS,KAAKE,8BAA8B/I,SAAAA;EAChD,CAAA;CACJ;CAEA+I,8BAA8B/I,WAAuB;EACjD,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAM0G,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM2C,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAIjO,sBAAsB;GACzCiO,YAAY,IAAIxP,eAAeyN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAahJ,UAAUqE,QAAQ3E,gBAAAA;EACrC,MAAMuJ,uBAAuBjJ,UAAUqE,QAAQ1E,gCAAAA;EAE/C,OAAO,IAAIjC,wBAAwB;GAC/BsL;GACAC;GACAlB;GACAa,iBAAiB,IAAIvP,uBAAuBuP,eAAAA;GAC5ChE,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEE,SAAS;IACLmE,yBAAyB9E,OAAO8E;IAChCC,0BAA0B/E,OAAO+E;IACjClE,WAAWb,OAAOa;IAClBmE,mBAAmBhF,OAAOgF;GAC9B;EACJ,CAAA;CACJ;CAEAxF,yBAAyB5D,WAAuB;EAC5C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAIjD,mBAAmB;GAC1B0I,SAAS,EAAEG,gBAAgBd,OAAOe,YAAYC,IAAI;GAClDyD,SAAS,KAAKC,0BAA0B9I,SAAAA;EAC5C,CAAA;CACJ;CAEA6D,uBAAuB7D,WAAuB;EAC1C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAMwH,gBAAgB9G,UAAUqE,QAAQnF,qBAAqB6H,aAAa;EAC1E,MAAMrC,iBAAiB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;EAClF,MAAM0E,mBAAmBrJ,UAAUqE,QAAQnF,qBAAqBoK,gBAAgB;EAChF,MAAMV,kBAAkB,IAAIvP,uBAAuB2G,UAAUqE,QAA2BvM,WAAAA,CAAAA;EAExF,MAAMyR,oBAAoB,IAAIhM,wBAAwB;GAClDuJ;GACApC;GACA2E;GACAT;GACAhE,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjE2E,iBAAiBpF,OAAOqF;EAC5B,CAAA;EAEA,OAAO,IAAIxN,iBAAiB;GACxB8I,SAAS,EAAEG,gBAAgBd,OAAOe,YAAYC,IAAI;GAClDmE;EACJ,CAAA;CACJ;CAEArF,uBAAuBlE,WAAuB;EAC1C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAIhD,iBAAiB,EAAEyI,SAAS,EAAEM,UAAU,KAAKC,gBAAgBlB,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAH,sBAAsBjE,WAAuB;EACzC,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAIzD,gBAAgB;GACvBkJ,SAAS;IACLC,SAASZ,OAAOa;IAChByE,YAAYtF,OAAOuF,aAAavE;IAChC6C,SAAS7D,OAAOuF,aAAa1B;GACjC;GACA2B,YAAY5J,UAAUqE,QAAQnF,qBAAqB2K,iBAAiB;GACpEC,mBAAmB9J,UAAUqE,QAAQpF,2BAA2B8K,iBAAiB;GACjFrF,gBAAgB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;GAC3EmC,eAAe9G,UAAUqE,QAAQnF,qBAAqB6H,aAAa;GACnEH,cAAc5G,UAAUqE,QAAQnF,qBAAqB2H,YAAY;GACjEd,QAAQ/F,UAAUqE,QAAQ5E,kBAAAA;EAC9B,CAAA;CACJ;CAEAuE,wBAAwBhE,WAAuB;EAC3C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAI3D,kBAAkB;GACzBoJ,SAAS;IACLC,SAASZ,OAAOa;IAChByE,YAAYtF,OAAO4F,eAAe5E;IAClC6C,SAAS7D,OAAO4F,eAAe/B;GACnC;GACA2B,YAAY5J,UAAUqE,QAAQnF,qBAAqB2K,iBAAiB;GACpEC,mBAAmB9J,UAAUqE,QAAQpF,2BAA2B8K,iBAAiB;GACjFrF,gBAAgB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;GAC3EmC,eAAe9G,UAAUqE,QAAQnF,qBAAqB6H,aAAa;GACnEH,cAAc5G,UAAUqE,QAAQnF,qBAAqB2H,YAAY;GACjEd,QAAQ/F,UAAUqE,QAAQ5E,kBAAAA;EAC9B,CAAA;CACJ;CAGA6F,gBAAgBlB,QAAyC;EACrD,OAAO;GACH6F,cAAc7F,OAAO8F;GACrBC,kBAAkB/F,OAAO8E;GACzBkB,mBAAmBhG,OAAO+E;GAC1Ba,gBAAgB5F,OAAO4F,eAAe/B;GACtC0B,cAAcvF,OAAOuF,aAAa1B;EACtC;CACJ;CAEAa,0BAA0B9I,WAAuB;EAC7C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAM0G,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM2C,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAIjO,sBAAsB;GACzCiO,YAAY,IAAIxP,eAAeyN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMI,aAAahJ,UAAUqE,QAAQ3E,gBAAAA;EACrC,MAAMuJ,uBAAuBjJ,UAAUqE,QAAQ1E,gCAAAA;EAE/C,OAAO,IAAIzB,oBAAoB;GAC3B8K;GACAC;GACAlB;GACAa,iBAAiB,IAAIvP,uBAAuBuP,eAAAA;GAC5ChE,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEE,SAAS;IACLmF,qBAAqB9F,OAAO8F;IAC5Bf,0BAA0B/E,OAAO+E;IACjClE,WAAWb,OAAOa;IAClBmE,mBAAmBhF,OAAOgF;GAC9B;EACJ,CAAA;CACJ;CAEAjF,uBAAuBnE,WAAuB;EAC1C,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAM0G,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EAEpE,MAAMoE,iBAAiBrK,UAAUqE,QAAQjF,qBAAqBkL,sBAAsB;EACpF,MAAMC,YAAYvK,UAAUqE,QAAQjF,qBAAqBoL,wBAAwB;EAEjF,MAAMhG,sBAAsBxE,UAAUqE,QAAQnF,qBAAqBuF,gCAAgC;EAEnG,MAAMgG,eAAezK,UAAUqE,QAAQnF,qBAAqBwL,yBAAyB;EAErF,MAAM9B,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAE7D,MAAMiQ,aAAa,IAAIhP,kCAAkC;GACrDgP,YAAY,IAAIvQ,2BAA2BwO,UAAAA;GAC3C4C;EACJ,CAAA;EAEA,MAAM7C,SAAS/F,UAAUqE,QAAQ5E,kBAAAA;EACjC,MAAMmF,eAAe5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;EAExE,MAAM8F,eAAe,IAAInN,4BAA4B;GACjDuH,SAAS,EAAEC,SAASZ,OAAOa,UAAU;GAErCoF;GACAzB,iBAAiB,IAAIvP,uBAAuBuP,eAAAA;GAC5CpE;GAEAE,gBAAgB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;GAC3EiG,mBAAmB5K,UAAUqE,QAAQnF,qBAAqB2L,mBAAmB;GAC7EzE,mBAAmBpG,UAAUqE,QAAQnF,qBAAqBmH,iBAAiB;GAC3EC,oBAAoBtG,UAAUqE,QAAQnF,qBAAqBqH,kBAAkB;GAE7EZ,uBAAuB,KAAKC,6BAA6B5F,SAAAA;GACzD4E;GACAE,SAAS9E,UAAUqE,QAAQzE,mBAAAA;GAC3BmG;EACJ,CAAA;EAEA,OAAO,IAAIxL,2BAA2B;GAClCwK,SAAS;IACLC,SAASZ,OAAOa;IAChB6F,mBAAmB1G,OAAO4F,eAAe5E;GAC7C;GAEA2C;GACAsC;GACAE;GAEA/F;GACAiG;GACAE;GAEA/F;GACAmB;EACJ,CAAA;CACJ;CAEAnF,uBAAuBZ,WAAuB;EAC1C,MAAM4I,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAIrP,wBAAwB;GAC3CqP,YAAY/H,UAAUqE,QAA4BjN,YAAAA;GAClDwR;EACJ,CAAA;EACA,MAAMmC,yBAAyB,IAAI1R,uBAAuBuP,eAAAA;EAC1D,MAAMC,UAAU,IAAIhM,cAAc;GAC9BkL;GACAa,iBAAiBmC;EACrB,CAAA;EACA,OAAO,IAAI/Q,iBAAiB;GACxB6O;GACAd;EACJ,CAAA;CACJ;CAEQiD,2BAA2BhL,WAAoD;EACnF,OAAO,IAAI7G,4BAA4B;GACnC4O,YAAY/H,UAAUqE,QAAgC1M,gBAAAA;GACtDiR,iBAAiB5I,UAAUqE,QAA2BvM,WAAAA;EAC1D,CAAA;CACJ;CAEQmT,qBAAqBjL,WAA8C;EACvE,OAAO,IAAIxG,sBAAsB;GAC7BuO,YAAY/H,UAAUqE,QAA0BrM,UAAAA;GAChD4Q,iBAAiB5I,UAAUqE,QAA2BvM,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAM0I,2BAA2BR,WAAuB;EACpD,MAAMgG,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM2C,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAI5O,4BAA4B;GAC/C4O,YAAY/H,UAAUqE,QAAgC1M,gBAAAA;GACtDiR;EACJ,CAAA;EAEA,MAAMmC,yBAAyB,IAAI1R,uBAAuBuP,eAAAA;EAC1D,MAAMsC,iBAAiB,IAAI1R,sBAAsB;GAC7CuO,YAAY/H,UAAUqE,QAA0BrM,UAAAA;GAChD4Q;EACJ,CAAA;EACA,MAAMuC,2BAA2B,IAAI5R,gCACjCyG,UAAUqE,QAAoCpM,oBAAAA,CAAAA;EAElD,MAAMmT,mBAAmB,IAAIhS,wBAAwB;GACjD2O,YAAY,IAAIlQ,iBAAiBmO,UAAAA;GACjC4C;EACJ,CAAA;EAEA,MAAMyC,6BAA6B,IAAInS,kCACnC8G,UAAUqE,QAAsCzM,sBAAAA,CAAAA;EAGpD,MAAMiR,UAAU,IAAIhL,kBAAkB;GAClCkK;GACAa,iBAAiBmC;GACjBG;GACAC;GACAC;GACAC;EACJ,CAAA;EAEA,MAAM7D,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAM6D,qBAAqB,IAAIrS,2BAA2B+M,UAAAA;EAE1D,MAAMuF,iBAAiB,IAAI5N,yBAAyB;GAChDoK;GACAa,iBAAiBmC;GACjBO;GACA9D;EACJ,CAAA;EAEA,OAAO,IAAI9M,qBAAqB;GAC5BmO;GACA0C;EACJ,CAAA;CACJ;CAEAjL,qBAAqBN,WAAuB;EACxC,MAAM4I,kBAAkB,IAAIvP,uBACxB2G,UAAUqE,QAA2BvM,WAAAA,CAAAA;EAEzC,MAAMiQ,aAAa,IAAIvO,sBAAsB;GACzCuO,YAAY/H,UAAUqE,QAA0BrM,UAAAA;GAChD4Q,iBAAiB5I,UAAUqE,QAA2BvM,WAAAA;EAC1D,CAAA;EACA,MAAM+Q,UAAU,IAAIxK,YAAY;GAC5B0J;GACAa;EACJ,CAAA;EACA,OAAO,IAAI7N,eAAe,EAAE8N,QAAQ,CAAA;CACxC;CAEA/H,iCAAiCd,WAAuB;EACpD,MAAM+H,aAAa,IAAItP,kCACnBuH,UAAUqE,QAAsChN,sBAAAA,CAAAA;EAEpD,MAAMmU,uBAAuB,KAAKR,2BAA2BhL,SAAAA;EAC7D,MAAMwH,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAInM,wBAAwB;GACxCqL;GACAyD;GACAhE;EACJ,CAAA;EACA,OAAO,IAAIvN,2BAA2B,EAAE4O,QAAQ,CAAA;CACpD;CAEA7H,2BAA2BhB,WAAuB;EAC9C,MAAM+H,aAAa,IAAIpP,4BACnBqH,UAAUqE,QAAgC/M,gBAAAA,CAAAA;EAE9C,MAAMkQ,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIlM,kBAAkB;GAAEoL;GAAYP;EAA2B,CAAA;EAC/E,OAAO,IAAItN,qBAAqB,EAAE2O,QAAQ,CAAA;CAC9C;CAEA3H,4BAA4BlB,WAAuB;EAC/C,MAAM+H,aAAa,IAAInP,6BACnBoH,UAAUqE,QAAiC9M,iBAAAA,CAAAA;EAE/C,MAAMsR,UAAU,IAAIjM,mBAAmB,EAAEmL,WAAW,CAAA;EACpD,OAAO,IAAI5N,sBAAsB,EAAE0O,QAAQ,CAAA;CAC/C;CAEAzH,8BAA8BpB,WAAuB;EACjD,MAAMgG,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM8B,aAAa,IAAIzO,+BACnB0G,UAAUqE,QAAmCtM,mBAAAA,CAAAA;EAEjD,MAAM0T,gBAAgB,IAAIC,IACtB1F,WAAW2F,YAAY3T,UAAAA,CAAAA,CAAY4T,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMlD,UAAU,IAAI1K,qBAAqB;GAAE4J;GAAY0D;EAAc,CAAA;EACrE,OAAO,IAAI3Q,wBAAwB,EAAE+N,QAAQ,CAAA;CACjD;CAEAvH,+BAA+BtB,WAAuB;EAClD,MAAM+H,aAAa,IAAIxO,gCACnByG,UAAUqE,QAAoCpM,oBAAAA,CAAAA;EAElD,MAAMuT,uBAAuB,KAAKR,2BAA2BhL,SAAAA;EAC7D,MAAMwH,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAIzK,sBAAsB;GACtC2J;GACAyD;GACAhE;EACJ,CAAA;EACA,OAAO,IAAIxM,yBAAyB,EAAE6N,QAAQ,CAAA;CAClD;CAEAnI,iCAAiCV,WAAuB;EACpD,MAAM+H,aAAa,IAAI7O,kCACnB8G,UAAUqE,QAAsCzM,sBAAAA,CAAAA;EAEpD,MAAMiR,UAAU,IAAIjL,wBAAwB,EAAEmK,WAAW,CAAA;EACzD,OAAO,IAAIpN,2BAA2B,EAAEkO,QAAQ,CAAA;CACpD;CAEArH,sBAAsBxB,WAAuB;EACzC,MAAM4I,kBAAkB,IAAIvP,uBACxB2G,UAAUqE,QAA2BvM,WAAAA,CAAAA;EAEzC,MAAMiQ,aAAa,IAAItO,uBAAuB;GAC1CsO,YAAY/H,UAAUqE,QAA2BnM,WAAAA;GACjD0Q,iBAAiB5I,UAAUqE,QAA2BvM,WAAAA;EAC1D,CAAA;EACA,MAAM+Q,UAAU,IAAIvK,aAAa;GAC7ByJ;GACAa;EACJ,CAAA;EACA,OAAO,IAAI3N,gBAAgB,EAAE4N,QAAQ,CAAA;CACzC;CAEAnH,oBAAoB1B,WAAuB;EAGvC,MAAM6I,UAAU,IAAI1L,WAAW;GAC3B4K,YAAY/H,UAAUqE,QAAQnF,qBAAqByH,QAAQ;GAC3D/B,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEmH,gBAAgBtQ;EACpB,CAAA;EACA,OAAO,IAAIjB,cAAc,EAAEoO,QAAQ,CAAA;CACvC;CAEAjH,4BAA4B5B,WAAuB;EAC/C,MAAM+H,aAAa,IAAIrO,6BACnBsG,UAAUqE,QAAQxL,qBAAqBoN,UAAU,CAAA;EAErD,MAAM4C,UAAU,IAAInK,mBAAmB;GACnCqJ;GACAnD,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEmH,gBAAgBtQ;EACpB,CAAA;EACA,OAAO,IAAIN,sBAAsB,EAAEyN,QAAQ,CAAA;CAC/C;CAEA7G,6BAA6BhC,WAAuB;EAChD,MAAM+H,aAAa/H,UAAUqE,QAAQnF,qBAAqBiI,sBAAsB;EAChF,MAAMH,kBAAkBhH,UAAUqE,QAAQnF,qBAAqB+H,eAAe;EAC9E,MAAM4B,UAAU,IAAIrK,oBAAoB;GAAEuJ;GAAYf;EAAgB,CAAA;EACtE,OAAO,IAAI7L,uBAAuB,EAAE0N,QAAQ,CAAA;CAChD;CAEA/G,wBAAwB9B,WAAuB;EAC3C,MAAM+H,aAAa/H,UAAUqE,QAAQpF,2BAA2B8K,iBAAiB;EACjF,MAAMlB,UAAU,IAAItK,eAAe;GAC/BwJ;GACArD,gBAAgB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;EAC/E,CAAA;EACA,MAAMP,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EAEjC,OAAO,IAAIpE,kBAAkB;GACzB2N;GAIA7D,SAASZ,OAAOa;GAChBmC,kBAAkBpH,UAAUqE,QAAQjF,qBAAqBiI,QAAQ;GACjEG,4BAA4BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;GACrFqC,mBAAmB/B;EACvB,CAAA;CACJ;CAEUjC,qBAAqB9F,WAAwC;EACnE,MAAM+H,aAAa/H,UAAUqE,QAAQnF,qBAAqB+M,iBAAiB;EAC3E,OAAO,IAAInP,eAAe,EAAEiL,WAAW,CAAA;CAC3C;CAEA7F,wBAAwBlC,WAAuB;EAC3C,OAAO,IAAI5F,kBAAkB,EAAEyO,SAAS,KAAK/C,qBAAqB9F,SAAAA,EAAW,CAAA;CACjF;CAEAoC,wCAAwCpC,WAAuB;EAC3D,MAAMgG,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM4C,UAAU,IAAI7L,+BAA+B;GAC/C+K,YAAY,IAAIjP,yCAAyCkN,UAAAA;GACzDkG,gBAAgB,IAAI7M,uBAAuB;IACvC0I,YAAY,IAAIxP,eAAeyN,UAAAA;IAC/BmG,0BAA0BnM,UAAUqE,QAAoC/L,oBAAAA;IACxE8T,oBAAoBpM,UAAUqE,QAA8B7L,cAAAA;GAChE,CAAA;GACAoM,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEmH,gBAAgBtQ;EACpB,CAAA;EACA,OAAO,IAAIpB,kCAAkC,EAAEuO,QAAQ,CAAA;CAC3D;CAEQlD;CAEEC,6BAA6B5F,WAAqD;EACxF,IAAI,KAAK2F,uBACL,OAAO,KAAKA;EAGhB,MAAMK,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EAEpE,KAAKN,wBAAwB,IAAItI,4BAA4B;GACzDgP,gBAAgB,IAAIxU,iBAAiBmO,UAAAA;GACrCwB,4BAA4BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;GACrF1B,QAAQ/F,UAAUqE,QAAQ5E,kBAAAA;EAC9B,CAAA;EAEA,OAAO,KAAKkG;CAChB;CAEQ4C;CAEE7C,gCAAgC1F,WAAkD;EACxF,IAAI,KAAKuI,0BACL,OAAO,KAAKA;EAGhB,MAAMnE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAM0G,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EAEpE,MAAM8B,aAAa,IAAInO,mCACnBoG,UAAUqE,QAA4CjM,uBAAAA,CAAAA;EAE1D,MAAM8T,iBAAiB,IAAIpS,sBAAsB;GAC7CiO,YAAY,IAAIxP,eAAeyN,UAAAA;GAC/B4C,iBAAiB5I,UAAUqE,QAA2BvM,WAAAA;EAC1D,CAAA;EAEA,IAAIwU;EACJ,IAAIC;EAKJ,IAAI;GACA,MAAMnH,MAAM,IAAIoH,IAAIpI,OAAOa,SAAS;GACpCqH,SAASlH,IAAIqH;GACbF,WAAW;IACPG,MAAMtH,IAAIqH;IACVE,QAAQL;IACRM,QAAQxH,IAAIwH;GAChB;EACJ,QAAQ;GACJN,SAASO,KAAAA;GACTN,WAAWM,KAAAA;EACf;EAEA,KAAKtE,2BAA2B,IAAI1J,yBAAyB;GACzDkJ;GACAmE;GACAY,OAAO9M,UAAUqE,QAAQ7E,iBAAAA;GACzBuN,QAAQ,IAAI/O,YAAY,EAAE0I,UAAU1G,UAAUqE,QAAQnF,qBAAqByH,QAAQ,EAAE,CAAA;GACrF/B,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEmH,gBAAgBtQ;GAChBsN,YAAYhJ,UAAUqE,QAAQ3E,gBAAAA;GAC9BuJ,sBAAsBjJ,UAAUqE,QAAQ1E,gCAAAA;GACxCoF,SAAS;IACLkD,SAAS7D,OAAO4I;IAChBC,UAAU7I,OAAO8I;IACjBZ;IACAC;GACJ;EACJ,CAAA;EAEA,OAAO,KAAKhE;CAChB;CAEA7F,kCAAkC1C,WAAuB;EACrD,OAAO,IAAI1E,4BAA4B,EAAEuN,SAAS,KAAKnD,gCAAgC1F,SAAAA,EAAW,CAAA;CACtG;CAEQwI;CAEEC,uBAAuBzI,WAA+C;EAC5E,IAAI,KAAKwI,iBACL,OAAO,KAAKA;EAGhB,KAAKA,kBAAkB,IAAI/K,sBAAsB;GAC7CiH,gBAAgB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;GAC3EwI,cAAcnN,UAAUqE,QAAQnF,qBAAqBkO,cAAc;GACnEhH,mBAAmBpG,UAAUqE,QAAQnF,qBAAqBmH,iBAAiB;GAC3EC,oBAAoBtG,UAAUqE,QAAQnF,qBAAqBqH,kBAAkB;GAC7ES,iBAAiBhH,UAAUqE,QAAQnF,qBAAqB+H,eAAe;GACvErC,cAAc5E,UAAUqE,QAAQxL,qBAAqBgM,YAAY;GACjEC,SAAS9E,UAAUqE,QAAQzE,mBAAAA;EAC/B,CAAA;EAEA,OAAO,KAAK4I;CAChB;CAEA1E,uCAAuC9D,WAAuB;EAC1D,OAAO,IAAIlE,iCAAiC;GACxC+M,SAAS,KAAKnD,gCAAgC1F,SAAAA;GAC9C0E,gBAAgB1E,UAAUqE,QAAQpF,2BAA2B0F,cAAc;GAC3E6D,iBAAiB,KAAKC,uBAAuBzI,SAAAA;EACjD,CAAA;CACJ;CAEAE,sBAAsBF,WAAuB;EACzC,MAAM6I,UAAU7I,UAAUqE,QAAQxL,qBAAqBgM,YAAY;EACnE,OAAO,IAAIxK,gBAAgB,EAAEwO,QAAQ,CAAA;CACzC;CAEAwE,kBAAkBrN,WAAuB;EACrC,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAM0G,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM2C,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAIjO,sBAAsB;GACzCiO,YAAY,IAAIxP,eAAeyN,UAAAA;GAC/B4C;EACJ,CAAA;EACA,MAAMmC,yBAAyB,IAAI1R,uBAAuBuP,eAAAA;EAC1D,OAAO,IAAI5J,YAAY;GACnB+I;GACAa,iBAAiBmC;GACjB3B,mBAAmBhF,OAAOgF;EAC9B,CAAA;CACJ;CAEA9G,qBAAqBtC,WAAuB;EACxC,OAAO,IAAIzE,eAAe,EAAEsN,SAAS,KAAKwE,kBAAkBrN,SAAAA,EAAW,CAAA;CAC3E;CAEA+D,yBAAyB/D,WAAuB;EAC5C,OAAO,IAAIxD,mBAAmB,EAAEqM,SAAS,KAAKwE,kBAAkBrN,SAAAA,EAAW,CAAA;CAC/E;CAEAwC,8BAA8BxC,WAAuB;EACjD,MAAMgG,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM8B,aAAa,IAAIpO,+BACnBqG,UAAUqE,QAAmClM,mBAAAA,CAAAA;EAEjD,MAAMsT,gBAAgB,IAAIC,IACtB1F,WAAW2F,YAAYtT,UAAAA,CAAAA,CAAYuT,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAAA;EAExE,MAAMlD,UAAU,IAAIlK,qBAAqB;GAAEoJ;GAAY0D;EAAc,CAAA;EACrE,OAAO,IAAIpQ,wBAAwB,EAAEwN,QAAQ,CAAA;CACjD;CAEAjG,+BAA+B5C,WAAuB;EAClD,MAAM+H,aAAa,IAAIlO,gCACnBmG,UAAUqE,QAAoC/L,oBAAAA,CAAAA;EAElD,MAAMkT,uBAAuB,KAAKR,2BAA2BhL,SAAAA;EAC7D,MAAMwH,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI/J,sBAAsB;GACtCiJ;GACAyD;GACAhE;EACJ,CAAA;EACA,OAAO,IAAIhM,yBAAyB,EAAEqN,QAAQ,CAAA;CAClD;CAEA/F,yBAAyB9C,WAAuB;EAC5C,MAAM+H,aAAa,IAAIhO,0BACnBiG,UAAUqE,QAA8B7L,cAAAA,CAAAA;EAE5C,MAAMgP,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI9J,gBAAgB;GAAEgJ;GAAYP;EAA2B,CAAA;EAC7E,OAAO,IAAI/L,mBAAmB,EAAEoN,QAAQ,CAAA;CAC5C;CAEA7F,uBAAuBhD,WAAuB;EAC1C,MAAMgG,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM2C,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAI3O,wBAAwB;GAC3C2O,YAAY,IAAIlQ,iBAAiBmO,UAAAA;GACjC4C;EACJ,CAAA;EACA,MAAMmC,yBAAyB,IAAI1R,uBAAuBuP,eAAAA;EAC1D,MAAMC,UAAU,IAAI9K,cAAc;GAC9BgK;GACAa,iBAAiBmC;EACrB,CAAA;EACA,MAAMvD,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAM8D,iBAAiB,IAAIzN,qBAAqB;GAC5CiK;GACAa,iBAAiBmC;GACjBvD;EACJ,CAAA;EAEA,OAAO,IAAI5M,iBAAiB;GACxBiO;GACA0C;EACJ,CAAA;CACJ;CAEArI,qCAAqClD,WAAuB;EACxD,MAAM+H,aAAa,IAAI/O,6CACnBgH,UAAUqE,QAAyB5M,iCAAAA,CAAAA;EAEvC,MAAMyT,iBAAiB,KAAKD,qBAAqBjL,SAAAA;EACjD,MAAMwH,6BAA6BxH,UAAUqE,QAAQjF,qBAAqBqI,kBAAkB;EAC5F,MAAMoB,UAAU,IAAI5L,mCAAmC;GACnD8K;GACAmD;GACA1D;EACJ,CAAA;EACA,OAAO,IAAIhN,sCAAsC,EAAEqO,QAAQ,CAAA;CAC/D;CAEAtF,oBAAoBvD,WAAuB;EAEvC,MAAM+H,aADa/H,UAAUqE,QAAQxL,qBAAqBoN,UACvCD,CAAAA,CAAWsH,cAAc5V,SAAAA;EAC5C,OAAO,IAAIsE,cAAc,EAAE+L,WAAW,CAAA;CAC1C;CAEA3H,sBAAsBJ,WAAuB;EACzC,MAAMoE,SAASpE,UAAUqE,QAAQ/E,kBAAAA;EACjC,MAAM0G,aAAahG,UAAUqE,QAAQxL,qBAAqBoN,UAAU;EACpE,MAAM2C,kBAAkB5I,UAAUqE,QAA2BvM,WAAAA;EAC7D,MAAMiQ,aAAa,IAAI1O,uBAAuBuP,eAAAA;EAE9C,MAAMS,mBAAmB,IAAI3Q,wBAAwB;GACjDqP,YAAY/H,UAAUqE,QAA4BjN,YAAAA;GAClDwR;EACJ,CAAA;EACA,MAAM7C,SAAS/F,UAAUqE,QAAQ5E,kBAAAA;EACjC,MAAM8N,0BAA0B,IAAI9O,wBAAwB;GACxD4K;GACAmE,iBAAiB,IAAI/T,uBAAuB;IACxCsO,YAAY/H,UAAUqE,QAA2BnM,WAAAA;IACjD0Q;GACJ,CAAA;GACA6E,uBAAuB,IAAI7U,6BACvBoH,UAAUqE,QAAiC9M,iBAAAA,CAAAA;GAE/CmW,YAAYnO,cAAc6E,MAAAA;GAC1B2B;EACJ,CAAA;EACA,MAAM4H,iBAAiB,IAAIzQ,eAAe;GACtCwJ,UAAU1G,UAAUqE,QAAQnF,qBAAqByH,QAAQ;GACzDZ;EACJ,CAAA;EAEA,MAAM8C,UAAU,IAAI5K,aAAa;GAC7B8J;GACA6F,mBAAmB;IACfL;IACAI;IACA,IAAIxO,6BAA6Ba,SAAAA;GACpC;GACD+F;EACJ,CAAA;EACA,MAAM8H,gBAAgB7H,WAAWsH,cAAc5V,SAAAA;EAE/C,OAAO,IAAImD,gBAAgB;GACvBkK,SAAS;IACLC,SAASZ,OAAOa;IAChB6I,aAAa1J,OAAO2J;IACpBC,2BAA2B5J,OAAOuE,sBAAsB;GAC5D;GACAE;GACAgF;EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/http/modules/middleware.d.ts

@@ -1,27 +1,18 @@
-import type { App } from 'routup';
+import type { IApp } from 'routup';
 import type { IContainer } from 'eldin';
-import type { ViteDevServer } from 'vite';
 export declare class HTTPMiddlewareModule {
-    protected viteServer: ViteDevServer | undefined;
-    mountBefore(router: App, container: IContainer): Promise<void>;
-    mountAfter(router: App, container: IContainer): Promise<void>;
-    mountCors(router: App, container: IContainer): Promise<void>;
-    mountLogger(router: App, container: IContainer): Promise<void>;
-    mountAssets(router: App, container: IContainer): Promise<void>;
-    /**
-     * Release what the mounted middlewares own beyond the http listener. Only
-     * the JIT vite dev server qualifies: it keeps a file watcher and an HMR
-     * websocket alive, which would survive every setup/teardown cycle.
-     */
-    teardown(): Promise<void>;
-    mountUIHttpClient(router: App, container: IContainer): Promise<void>;
-    mountBasic(router: App): Promise<void>;
-    mountPrometheus(router: App, container: IContainer): Promise<void>;
-    mountRateLimit(router: App, container: IContainer): Promise<void>;
-    mountSwagger(router: App, container: IContainer): Promise<void>;
-    mountRealmResolver(router: App, container: IContainer): Promise<void>;
-    mountAuthorization(router: App, container: IContainer): Promise<void>;
-    mountRequestEventContext(router: App): Promise<void>;
+    mountBefore(router: IApp, container: IContainer): Promise<void>;
+    mountAfter(router: IApp, container: IContainer): Promise<void>;
+    mountCors(router: IApp, container: IContainer): Promise<void>;
+    mountLogger(router: IApp, container: IContainer): Promise<void>;
+    mountInternalHttpClient(router: IApp, container: IContainer): Promise<void>;
+    mountBasic(router: IApp): Promise<void>;
+    mountPrometheus(router: IApp, container: IContainer): Promise<void>;
+    mountRateLimit(router: IApp, container: IContainer): Promise<void>;
+    mountSwagger(router: IApp, container: IContainer): Promise<void>;
+    mountRealmResolver(router: IApp, container: IContainer): Promise<void>;
+    mountAuthorization(router: IApp, container: IContainer): Promise<void>;
+    mountRequestEventContext(router: IApp): Promise<void>;
     private transformBoolToEmptyObject;
     private isEnabled;
 }

package/dist/app/modules/http/modules/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AA+B1C,qBAAa,oBAAoB;IAC7B,SAAS,CAAC,UAAU,EAAG,aAAa,GAAG,SAAS,CAAC;IAE3C,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9D,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY5D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU9D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IASzB,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjE,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/D,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BrE,wBAAwB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,SAAS;CAGpB"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AA8BxC,qBAAa,oBAAoB;IACvB,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB/D,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9D,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7D,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/D,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3E,UAAU,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAchE,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYtE,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtE,wBAAwB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,SAAS;CAGpB"}

package/dist/app/modules/http/modules/middleware.mjs

@@ -5,21 +5,24 @@ import { AuthenticationInjectionKey } from "../../authentication/constants.mjs";
 import { RealmEntity } from "../../../../adapters/database/domains/realm/entity.mjs";
 import "../../../../adapters/database/domains/index.mjs";
 import { ConfigInjectionKey } from "../../config/constants.mjs";
-import { createRequestEventContextMiddleware } from "../../../../adapters/http/request/event-context.mjs";
 import "../../config/index.mjs";
-import "../../authentication/index.mjs";
+import { LoggerInjectionKey } from "../../logger/constants.mjs";
+import "../../logger/index.mjs";
+import { OAuth2InjectionToken } from "../../oauth2/constants.mjs";
+import { DIST_PATH } from "../../../../path.mjs";
 import { RealmRepositoryAdapter } from "../../database/repositories/realm/repository.mjs";
 import { PermissionDatabaseProvider } from "../../database/repositories/permission-provider/module.mjs";
 import "../../database/repositories/index.mjs";
+import { IdentityInjectionKey } from "../../identity/constants.mjs";
 import { DatabaseInjectionKey } from "../../database/constants.mjs";
-import { LoggerInjectionKey } from "../../logger/constants.mjs";
-import "../../logger/index.mjs";
+import { createRequestEventContextMiddleware } from "../../../../adapters/http/request/event-context.mjs";
 import "../../database/index.mjs";
+import "../../identity/index.mjs";
+import "../../oauth2/index.mjs";
+import "../../authentication/index.mjs";
 import { HTTPInjectionKey } from "../constants.mjs";
-import { DIST_PATH } from "../../../../path.mjs";
 import { createAuthorizationMiddleware } from "../../../../adapters/http/middleware/built-in/authorization/factory.mjs";
 import { createRealmResolverMiddleware } from "../../../../adapters/http/middleware/built-in/realm-resolver/factory.mjs";
-import { registerAssetsMiddleware } from "../../../../adapters/http/middleware/built-in/assets.mjs";
 import { registerBasicMiddleware } from "../../../../adapters/http/middleware/built-in/basic.mjs";
 import { registerCorsMiddleware } from "../../../../adapters/http/middleware/built-in/cors.mjs";
 import { registerErrorMiddleware } from "../../../../adapters/http/middleware/built-in/error.mjs";
@@ -27,22 +30,16 @@ import { createLoggerMiddleware } from "../../../../adapters/http/middleware/bui
 import { registerPrometheusMiddleware } from "../../../../adapters/http/middleware/built-in/prometheus.mjs";
 import { registerRateLimitMiddleware } from "../../../../adapters/http/middleware/built-in/rate-limit.mjs";
 import { createSwaggerMiddleware } from "../../../../adapters/http/middleware/built-in/swagger.mjs";
-import { registerUIHttpClientMiddleware } from "../../../../adapters/http/middleware/built-in/ui-http-client.mjs";
+import { registerInternalHttpClientMiddleware } from "../../../../adapters/http/middleware/built-in/internal-http-client.mjs";
 import "../../../../adapters/http/index.mjs";
-import { OAuth2InjectionToken } from "../../oauth2/constants.mjs";
-import { IdentityInjectionKey } from "../../identity/constants.mjs";
-import "../../identity/index.mjs";
-import "../../oauth2/index.mjs";
 import path from "node:path";
 //#region src/app/modules/http/modules/middleware.ts
 var HTTPMiddlewareModule = class {
-	viteServer;
 	async mountBefore(router, container) {
 		await this.mountPrometheus(router, container);
 		await this.mountLogger(router, container);
 		await this.mountCors(router, container);
-		await this.mountAssets(router, container);
-		await this.mountUIHttpClient(router, container);
+		await this.mountInternalHttpClient(router, container);
 		await this.mountBasic(router);
 		await this.mountRateLimit(router, container);
 		await this.mountSwagger(router, container);
@@ -57,7 +54,7 @@ var HTTPMiddlewareModule = class {
 		const config = container.resolve(ConfigInjectionKey);
 		if (!this.isEnabled(config.middlewareCors)) return;
 		const options = this.transformBoolToEmptyObject(config.middlewareCors) ?? {};
-		registerCorsMiddleware(router, options);
+		registerCorsMiddleware(router, options, { baseURL: config.publicUrl });
 	}
 	async mountLogger(router, container) {
 		const config = container.resolve(ConfigInjectionKey);
@@ -67,26 +64,9 @@ var HTTPMiddlewareModule = class {
 		});
 		router.use(middleware);
 	}
-	async mountAssets(router, container) {
-		const config = container.resolve(ConfigInjectionKey);
-		this.viteServer = await registerAssetsMiddleware(router, {
-			themeDirectoryPath: config.themeDirectoryPath,
-			themeFragmentsEnabled: config.themeFragmentsEnabled,
-			logger: container.resolve(LoggerInjectionKey)
-		});
-	}
-	/**
-	* Release what the mounted middlewares own beyond the http listener. Only
-	* the JIT vite dev server qualifies: it keeps a file watcher and an HMR
-	* websocket alive, which would survive every setup/teardown cycle.
-	*/ async teardown() {
-		if (!this.viteServer) return;
-		await this.viteServer.close();
-		this.viteServer = void 0;
-	}
-	async mountUIHttpClient(router, container) {
-		if (!container.has(HTTPInjectionKey.UIHttpClient)) return;
-		registerUIHttpClientMiddleware(router, () => container.resolve(HTTPInjectionKey.UIHttpClient));
+	async mountInternalHttpClient(router, container) {
+		if (!container.has(HTTPInjectionKey.InternalHttpClient)) return;
+		registerInternalHttpClientMiddleware(router, () => container.resolve(HTTPInjectionKey.InternalHttpClient));
 	}
 	async mountBasic(router) {
 		registerBasicMiddleware(router);
@@ -120,6 +100,7 @@ var HTTPMiddlewareModule = class {
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
 		const identityResolver = container.resolve(IdentityInjectionKey.Resolver);
 		const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);
+		const sessionRepository = container.resolve(AuthenticationInjectionKey.SessionRepository);
 		const oauth2TokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);
 		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
 		const permissionProvider = new PermissionDatabaseProvider(dataSource);
@@ -129,10 +110,13 @@ var HTTPMiddlewareModule = class {
 			permissionProvider,
 			oauth2TokenVerifier,
 			sessionManager,
+			sessionRepository,
+			logger: container.resolve(LoggerInjectionKey),
 			options: {
 				clientAuthBasic: config.clientAuthBasic,
 				userAuthBasic: config.userAuthBasic,
-				certificateSource: config.certificateSource
+				certificateSource: config.certificateSource,
+				baseURL: config.publicUrl
 			}
 		});
 		router.use(middleware);

package/dist/app/modules/http/modules/middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.mjs","names":["path","createAuthorizationMiddleware","createLoggerMiddleware","createRealmResolverMiddleware","createRequestEventContextMiddleware","createSwaggerMiddleware","registerAssetsMiddleware","registerBasicMiddleware","registerCorsMiddleware","registerErrorMiddleware","registerPrometheusMiddleware","registerRateLimitMiddleware","registerUIHttpClientMiddleware","HTTPInjectionKey","DIST_PATH","AuthenticationInjectionKey","ConfigInjectionKey","LoggerInjectionKey","IdentityInjectionKey","OAuth2InjectionToken","RealmEntity","RealmRepositoryAdapter","DatabaseInjectionKey","PermissionDatabaseProvider","HTTPMiddlewareModule","viteServer","mountBefore","router","container","mountPrometheus","mountLogger","mountCors","mountAssets","mountUIHttpClient","mountBasic","mountRateLimit","mountSwagger","mountAuthorization","mountRequestEventContext","mountRealmResolver","mountAfter","logger","resolve","config","isEnabled","middlewareCors","options","transformBoolToEmptyObject","middleware","env","use","themeDirectoryPath","themeFragmentsEnabled","teardown","close","undefined","has","UIHttpClient","middlewarePrometheus","middlewareRateLimit","middlewareSwagger","documentPath","join","baseURL","publicUrl","realmRepository","dataSource","DataSource","identityResolver","Resolver","sessionManager","SessionManager","oauth2TokenVerifier","TokenVerifier","identityPermissionProvider","PermissionProvider","permissionProvider","clientAuthBasic","userAuthBasic","certificateSource","input"],"sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport path from 'node:path';\nimport type { IContainer } from 'eldin';\nimport type { ViteDevServer } from 'vite';\nimport type { Repository } from 'typeorm';\nimport type { Realm } from '@authup/core-kit';\nimport {\n    createAuthorizationMiddleware,\n    createLoggerMiddleware,\n    createRealmResolverMiddleware,\n    createRequestEventContextMiddleware,\n    createSwaggerMiddleware,\n    registerAssetsMiddleware,\n    registerBasicMiddleware,\n    registerCorsMiddleware,\n    registerErrorMiddleware,\n    registerPrometheusMiddleware,\n    registerRateLimitMiddleware,\n    registerUIHttpClientMiddleware,\n} from '../../../../adapters/http/index.ts';\nimport { HTTPInjectionKey } from '../constants.ts';\nimport { DIST_PATH } from '../../../../path.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { ConfigInjectionKey } from '../../config/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { RealmEntity } from '../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../../database/repositories/index.ts';\nimport {\n    DatabaseInjectionKey,\n    PermissionDatabaseProvider,\n} from '../../database/index.ts';\n\nexport class HTTPMiddlewareModule {\n    protected viteServer : ViteDevServer | undefined;\n\n    async mountBefore(router: App, container: IContainer): Promise<void> {\n        // @routup/prometheus must be installed before any other plugin or\n        // route so that its onion middleware can observe the full request\n        // lifecycle (the v3 README is explicit on this).\n        await this.mountPrometheus(router, container);\n        await this.mountLogger(router, container);\n        await this.mountCors(router, container);\n        await this.mountAssets(router, container);\n        await this.mountUIHttpClient(router, container);\n        await this.mountBasic(router);\n        await this.mountRateLimit(router, container);\n\n        await this.mountSwagger(router, container);\n        await this.mountAuthorization(router, container);\n        await this.mountRequestEventContext(router);\n        await this.mountRealmResolver(router, container);\n    }\n\n\n    async mountAfter(router: App, container: IContainer): Promise<void> {\n        registerErrorMiddleware(router, { logger: container.resolve(LoggerInjectionKey) });\n    }\n\n    // ----------------------------------------------------\n    async mountCors(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewareCors)) {\n            return;\n        }\n\n        const options = this.transformBoolToEmptyObject(config.middlewareCors) ?? {};\n\n        registerCorsMiddleware(router, options);\n    }\n\n    async mountLogger(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const middleware = createLoggerMiddleware({\n            env: config.env,\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        router.use(middleware);\n    }\n\n    async mountAssets(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        // Config is resolved HERE, in the app-module layer, and the value is\n        // passed down: adapters/http/ui/** must not read config itself.\n        this.viteServer = await registerAssetsMiddleware(router, {\n            themeDirectoryPath: config.themeDirectoryPath,\n            themeFragmentsEnabled: config.themeFragmentsEnabled,\n            logger: container.resolve(LoggerInjectionKey),\n        });\n    }\n\n    /**\n     * Release what the mounted middlewares own beyond the http listener. Only\n     * the JIT vite dev server qualifies: it keeps a file watcher and an HMR\n     * websocket alive, which would survive every setup/teardown cycle.\n     */\n    async teardown(): Promise<void> {\n        if (!this.viteServer) {\n            return;\n        }\n\n        await this.viteServer.close();\n        this.viteServer = undefined;\n    }\n\n    async mountUIHttpClient(router: App, container: IContainer): Promise<void> {\n        if (!container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        registerUIHttpClientMiddleware(router, () => container.resolve(HTTPInjectionKey.UIHttpClient));\n    }\n\n    async mountBasic(router: App): Promise<void> {\n        registerBasicMiddleware(router);\n    }\n\n    async mountPrometheus(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewarePrometheus)) {\n            return;\n        }\n\n        registerPrometheusMiddleware(router, this.transformBoolToEmptyObject(config.middlewarePrometheus));\n    }\n\n    async mountRateLimit(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewareRateLimit)) {\n            return;\n        }\n\n        registerRateLimitMiddleware(router, this.transformBoolToEmptyObject(config.middlewareRateLimit));\n    }\n\n    async mountSwagger(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        if (!this.isEnabled(config.middlewareSwagger)) {\n            return;\n        }\n\n        const middleware = createSwaggerMiddleware({\n            documentPath: path.join(DIST_PATH, 'swagger.json'),\n            baseURL: config.publicUrl,\n        });\n\n        router.use('/docs', middleware);\n    }\n\n    async mountRealmResolver(router: App, container: IContainer): Promise<void> {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const middleware = createRealmResolverMiddleware({ realmRepository: new RealmRepositoryAdapter(realmRepository) });\n\n        // Mounted at /realms/:realmId/:nested so the middleware only fires on\n        // nested-resource URLs (e.g. /realms/master/users/...). Bare\n        // /realms/:id routes belong to RealmController (CRUD, openid-config,\n        // jwks) and would otherwise 404 on PUT upserts where the realm\n        // doesn't exist yet.\n        router.use('/realms/:realmId/:nested', middleware);\n    }\n\n    async mountAuthorization(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const oauth2TokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const middleware = createAuthorizationMiddleware({\n            identityResolver,\n            identityPermissionProvider,\n            permissionProvider,\n            oauth2TokenVerifier,\n            sessionManager,\n            options: {\n                clientAuthBasic: config.clientAuthBasic,\n                userAuthBasic: config.userAuthBasic,\n                certificateSource: config.certificateSource,\n            },\n        });\n\n        router.use(middleware);\n    }\n\n    async mountRequestEventContext(router: App): Promise<void> {\n        // mounted immediately AFTER the authorization middleware — the\n        // identity must already be resolved for actor attribution.\n        router.use(createRequestEventContextMiddleware());\n    }\n\n    // ----------------------------------------------------\n\n    private transformBoolToEmptyObject<T extends Record<string, any>>(\n        input?: T | boolean,\n    ) : T | undefined {\n        if (typeof input === 'boolean') {\n            return {} as T;\n        }\n\n        return input || {} as T;\n    }\n\n    private isEnabled<T>(input: T | boolean) {\n        return typeof input !== 'boolean' || input === true;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAawB,uBAAb,MAAaA;CACCC;CAEV,MAAMC,YAAYC,QAAaC,WAAsC;EAIjE,MAAM,KAAKC,gBAAgBF,QAAQC,SAAAA;EACnC,MAAM,KAAKE,YAAYH,QAAQC,SAAAA;EAC/B,MAAM,KAAKG,UAAUJ,QAAQC,SAAAA;EAC7B,MAAM,KAAKI,YAAYL,QAAQC,SAAAA;EAC/B,MAAM,KAAKK,kBAAkBN,QAAQC,SAAAA;EACrC,MAAM,KAAKM,WAAWP,MAAAA;EACtB,MAAM,KAAKQ,eAAeR,QAAQC,SAAAA;EAElC,MAAM,KAAKQ,aAAaT,QAAQC,SAAAA;EAChC,MAAM,KAAKS,mBAAmBV,QAAQC,SAAAA;EACtC,MAAM,KAAKU,yBAAyBX,MAAAA;EACpC,MAAM,KAAKY,mBAAmBZ,QAAQC,SAAAA;CAC1C;CAGA,MAAMY,WAAWb,QAAaC,WAAsC;EAChEnB,wBAAwBkB,QAAQ,EAAEc,QAAQb,UAAUc,QAAQzB,kBAAAA,EAAoB,CAAA;CACpF;CAGA,MAAMc,UAAUJ,QAAaC,WAAsC;EAC/D,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EAEjC,IAAI,CAAC,KAAK4B,UAAUD,OAAOE,cAAc,GACrC;EAGJ,MAAMC,UAAU,KAAKC,2BAA2BJ,OAAOE,cAAc,KAAK,CAAC;EAE3ErC,uBAAuBmB,QAAQmB,OAAAA;CACnC;CAEA,MAAMhB,YAAYH,QAAaC,WAAsC;EACjE,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EACjC,MAAMgC,aAAa9C,uBAAuB;GACtC+C,KAAKN,OAAOM;GACZR,QAAQb,UAAUc,QAAQzB,kBAAAA;EAC9B,CAAA;EAEAU,OAAOuB,IAAIF,UAAAA;CACf;CAEA,MAAMhB,YAAYL,QAAaC,WAAsC;EACjE,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EAIjC,KAAKS,aAAa,MAAMnB,yBAAyBqB,QAAQ;GACrDwB,oBAAoBR,OAAOQ;GAC3BC,uBAAuBT,OAAOS;GAC9BX,QAAQb,UAAUc,QAAQzB,kBAAAA;EAC9B,CAAA;CACJ;;;;;IAOA,MAAMoC,WAA0B;EAC5B,IAAI,CAAC,KAAK5B,YACN;EAGJ,MAAM,KAAKA,WAAW6B,MAAK;EAC3B,KAAK7B,aAAa8B,KAAAA;CACtB;CAEA,MAAMtB,kBAAkBN,QAAaC,WAAsC;EACvE,IAAI,CAACA,UAAU4B,IAAI3C,iBAAiB4C,YAAY,GAC5C;EAGJ7C,+BAA+Be,cAAcC,UAAUc,QAAQ7B,iBAAiB4C,YAAY,CAAA;CAChG;CAEA,MAAMvB,WAAWP,QAA4B;EACzCpB,wBAAwBoB,MAAAA;CAC5B;CAEA,MAAME,gBAAgBF,QAAaC,WAAsC;EACrE,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EAEjC,IAAI,CAAC,KAAK4B,UAAUD,OAAOe,oBAAoB,GAC3C;EAGJhD,6BAA6BiB,QAAQ,KAAKoB,2BAA2BJ,OAAOe,oBAAoB,CAAA;CACpG;CAEA,MAAMvB,eAAeR,QAAaC,WAAsC;EACpE,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EAEjC,IAAI,CAAC,KAAK4B,UAAUD,OAAOgB,mBAAmB,GAC1C;EAGJhD,4BAA4BgB,QAAQ,KAAKoB,2BAA2BJ,OAAOgB,mBAAmB,CAAA;CAClG;CAEA,MAAMvB,aAAaT,QAAaC,WAAsC;EAClE,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EACjC,IAAI,CAAC,KAAK4B,UAAUD,OAAOiB,iBAAiB,GACxC;EAGJ,MAAMZ,aAAa3C,wBAAwB;GACvCwD,cAAc7D,KAAK8D,KAAKhD,WAAW,cAAA;GACnCiD,SAASpB,OAAOqB;EACpB,CAAA;EAEArC,OAAOuB,IAAI,SAASF,UAAAA;CACxB;CAEA,MAAMT,mBAAmBZ,QAAaC,WAAsC;EACxE,MAAMqC,kBAAkBrC,UAAUc,QAA2BtB,WAAAA;EAC7D,MAAM4B,aAAa7C,8BAA8B,EAAE8D,iBAAiB,IAAI5C,uBAAuB4C,eAAAA,EAAiB,CAAA;EAOhHtC,OAAOuB,IAAI,4BAA4BF,UAAAA;CAC3C;CAEA,MAAMX,mBAAmBV,QAAaC,WAAsC;EACxE,MAAMe,SAASf,UAAUc,QAAQ1B,kBAAAA;EACjC,MAAMkD,aAAatC,UAAUc,QAAQpB,qBAAqB6C,UAAU;EAEpE,MAAMC,mBAAmBxC,UAAUc,QAAQxB,qBAAqBmD,QAAQ;EACxE,MAAMC,iBAAiB1C,UAAUc,QAAQ3B,2BAA2BwD,cAAc;EAClF,MAAMC,sBAAsB5C,UAAUc,QAAQvB,qBAAqBsD,aAAa;EAChF,MAAMC,6BAA6B9C,UAAUc,QAAQxB,qBAAqByD,kBAAkB;EAE5F,MAAMC,qBAAqB,IAAIrD,2BAA2B2C,UAAAA;EAE1D,MAAMlB,aAAa/C,8BAA8B;GAC7CmE;GACAM;GACAE;GACAJ;GACAF;GACAxB,SAAS;IACL+B,iBAAiBlC,OAAOkC;IACxBC,eAAenC,OAAOmC;IACtBC,mBAAmBpC,OAAOoC;GAC9B;EACJ,CAAA;EAEApD,OAAOuB,IAAIF,UAAAA;CACf;CAEA,MAAMV,yBAAyBX,QAA4B;EAGvDA,OAAOuB,IAAI9C,oCAAAA,CAAAA;CACf;CAIQ2C,2BACJiC,OACc;EACd,IAAI,OAAOA,UAAU,WACjB,OAAO,CAAC;EAGZ,OAAOA,SAAS,CAAC;CACrB;CAEQpC,UAAaoC,OAAoB;EACrC,OAAO,OAAOA,UAAU,aAAaA,UAAU;CACnD;AACJ"}
+{"version":3,"file":"middleware.mjs","names":["path","createAuthorizationMiddleware","createLoggerMiddleware","createRealmResolverMiddleware","createRequestEventContextMiddleware","createSwaggerMiddleware","registerBasicMiddleware","registerCorsMiddleware","registerErrorMiddleware","registerInternalHttpClientMiddleware","registerPrometheusMiddleware","registerRateLimitMiddleware","HTTPInjectionKey","DIST_PATH","AuthenticationInjectionKey","ConfigInjectionKey","LoggerInjectionKey","IdentityInjectionKey","OAuth2InjectionToken","RealmEntity","RealmRepositoryAdapter","DatabaseInjectionKey","PermissionDatabaseProvider","HTTPMiddlewareModule","mountBefore","router","container","mountPrometheus","mountLogger","mountCors","mountInternalHttpClient","mountBasic","mountRateLimit","mountSwagger","mountAuthorization","mountRequestEventContext","mountRealmResolver","mountAfter","logger","resolve","config","isEnabled","middlewareCors","options","transformBoolToEmptyObject","baseURL","publicUrl","middleware","env","use","has","InternalHttpClient","middlewarePrometheus","middlewareRateLimit","middlewareSwagger","documentPath","join","realmRepository","dataSource","DataSource","identityResolver","Resolver","sessionManager","SessionManager","sessionRepository","SessionRepository","oauth2TokenVerifier","TokenVerifier","identityPermissionProvider","PermissionProvider","permissionProvider","clientAuthBasic","userAuthBasic","certificateSource","input"],"sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IApp } from 'routup';\nimport path from 'node:path';\nimport type { IContainer } from 'eldin';\nimport type { Repository } from 'typeorm';\nimport type { Realm } from '@authup/core-kit';\nimport {\n    createAuthorizationMiddleware,\n    createLoggerMiddleware,\n    createRealmResolverMiddleware,\n    createRequestEventContextMiddleware,\n    createSwaggerMiddleware,\n    registerBasicMiddleware,\n    registerCorsMiddleware,\n    registerErrorMiddleware,\n    registerInternalHttpClientMiddleware,\n    registerPrometheusMiddleware,\n    registerRateLimitMiddleware,\n} from '../../../../adapters/http/index.ts';\nimport { HTTPInjectionKey } from '../constants.ts';\nimport { DIST_PATH } from '../../../../path.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { ConfigInjectionKey } from '../../config/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { RealmEntity } from '../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../../database/repositories/index.ts';\nimport {\n    DatabaseInjectionKey,\n    PermissionDatabaseProvider,\n} from '../../database/index.ts';\n\nexport class HTTPMiddlewareModule {\n    async mountBefore(router: IApp, container: IContainer): Promise<void> {\n        // @routup/prometheus must be installed before any other plugin or\n        // route so that its onion middleware can observe the full request\n        // lifecycle (the v3 README is explicit on this).\n        await this.mountPrometheus(router, container);\n        await this.mountLogger(router, container);\n        await this.mountCors(router, container);\n        await this.mountInternalHttpClient(router, container);\n        await this.mountBasic(router);\n        await this.mountRateLimit(router, container);\n\n        await this.mountSwagger(router, container);\n        await this.mountAuthorization(router, container);\n        await this.mountRequestEventContext(router);\n        await this.mountRealmResolver(router, container);\n    }\n\n\n    async mountAfter(router: IApp, container: IContainer): Promise<void> {\n        registerErrorMiddleware(router, { logger: container.resolve(LoggerInjectionKey) });\n    }\n\n    // ----------------------------------------------------\n    async mountCors(router: IApp, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewareCors)) {\n            return;\n        }\n\n        const options = this.transformBoolToEmptyObject(config.middlewareCors) ?? {};\n\n        registerCorsMiddleware(router, options, { baseURL: config.publicUrl });\n    }\n\n    async mountLogger(router: IApp, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const middleware = createLoggerMiddleware({\n            env: config.env,\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        router.use(middleware);\n    }\n\n    async mountInternalHttpClient(router: IApp, container: IContainer): Promise<void> {\n        if (!container.has(HTTPInjectionKey.InternalHttpClient)) {\n            return;\n        }\n\n        registerInternalHttpClientMiddleware(router, () => container.resolve(HTTPInjectionKey.InternalHttpClient));\n    }\n\n    async mountBasic(router: IApp): Promise<void> {\n        registerBasicMiddleware(router);\n    }\n\n    async mountPrometheus(router: IApp, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewarePrometheus)) {\n            return;\n        }\n\n        registerPrometheusMiddleware(router, this.transformBoolToEmptyObject(config.middlewarePrometheus));\n    }\n\n    async mountRateLimit(router: IApp, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewareRateLimit)) {\n            return;\n        }\n\n        registerRateLimitMiddleware(router, this.transformBoolToEmptyObject(config.middlewareRateLimit));\n    }\n\n    async mountSwagger(router: IApp, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        if (!this.isEnabled(config.middlewareSwagger)) {\n            return;\n        }\n\n        const middleware = createSwaggerMiddleware({\n            documentPath: path.join(DIST_PATH, 'swagger.json'),\n            baseURL: config.publicUrl,\n        });\n\n        router.use('/docs', middleware);\n    }\n\n    async mountRealmResolver(router: IApp, container: IContainer): Promise<void> {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const middleware = createRealmResolverMiddleware({ realmRepository: new RealmRepositoryAdapter(realmRepository) });\n\n        // Mounted at /realms/:realmId/:nested so the middleware only fires on\n        // nested-resource URLs (e.g. /realms/master/users/...). Bare\n        // /realms/:id routes belong to RealmController (CRUD, openid-config,\n        // jwks) and would otherwise 404 on PUT upserts where the realm\n        // doesn't exist yet.\n        router.use('/realms/:realmId/:nested', middleware);\n    }\n\n    async mountAuthorization(router: IApp, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const sessionRepository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const oauth2TokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const middleware = createAuthorizationMiddleware({\n            identityResolver,\n            identityPermissionProvider,\n            permissionProvider,\n            oauth2TokenVerifier,\n            sessionManager,\n            sessionRepository,\n            logger: container.resolve(LoggerInjectionKey),\n            options: {\n                clientAuthBasic: config.clientAuthBasic,\n                userAuthBasic: config.userAuthBasic,\n                certificateSource: config.certificateSource,\n                baseURL: config.publicUrl,\n            },\n        });\n\n        router.use(middleware);\n    }\n\n    async mountRequestEventContext(router: IApp): Promise<void> {\n        // mounted immediately AFTER the authorization middleware — the\n        // identity must already be resolved for actor attribution.\n        router.use(createRequestEventContextMiddleware());\n    }\n\n    // ----------------------------------------------------\n\n    private transformBoolToEmptyObject<T extends Record<string, any>>(\n        input?: T | boolean,\n    ) : T | undefined {\n        if (typeof input === 'boolean') {\n            return {} as T;\n        }\n\n        return input || {} as T;\n    }\n\n    private isEnabled<T>(input: T | boolean) {\n        return typeof input !== 'boolean' || input === true;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAauB,uBAAb,MAAaA;CACT,MAAMC,YAAYC,QAAcC,WAAsC;EAIlE,MAAM,KAAKC,gBAAgBF,QAAQC,SAAAA;EACnC,MAAM,KAAKE,YAAYH,QAAQC,SAAAA;EAC/B,MAAM,KAAKG,UAAUJ,QAAQC,SAAAA;EAC7B,MAAM,KAAKI,wBAAwBL,QAAQC,SAAAA;EAC3C,MAAM,KAAKK,WAAWN,MAAAA;EACtB,MAAM,KAAKO,eAAeP,QAAQC,SAAAA;EAElC,MAAM,KAAKO,aAAaR,QAAQC,SAAAA;EAChC,MAAM,KAAKQ,mBAAmBT,QAAQC,SAAAA;EACtC,MAAM,KAAKS,yBAAyBV,MAAAA;EACpC,MAAM,KAAKW,mBAAmBX,QAAQC,SAAAA;CAC1C;CAGA,MAAMW,WAAWZ,QAAcC,WAAsC;EACjElB,wBAAwBiB,QAAQ,EAAEa,QAAQZ,UAAUa,QAAQvB,kBAAAA,EAAoB,CAAA;CACpF;CAGA,MAAMa,UAAUJ,QAAcC,WAAsC;EAChE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EAEjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOE,cAAc,GACrC;EAGJ,MAAMC,UAAU,KAAKC,2BAA2BJ,OAAOE,cAAc,KAAK,CAAC;EAE3EnC,uBAAuBkB,QAAQkB,SAAS,EAAEE,SAASL,OAAOM,UAAU,CAAA;CACxE;CAEA,MAAMlB,YAAYH,QAAcC,WAAsC;EAClE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EACjC,MAAMgC,aAAa7C,uBAAuB;GACtC8C,KAAKR,OAAOQ;GACZV,QAAQZ,UAAUa,QAAQvB,kBAAAA;EAC9B,CAAA;EAEAS,OAAOwB,IAAIF,UAAAA;CACf;CAEA,MAAMjB,wBAAwBL,QAAcC,WAAsC;EAC9E,IAAI,CAACA,UAAUwB,IAAItC,iBAAiBuC,kBAAkB,GAClD;EAGJ1C,qCAAqCgB,cAAcC,UAAUa,QAAQ3B,iBAAiBuC,kBAAkB,CAAA;CAC5G;CAEA,MAAMpB,WAAWN,QAA6B;EAC1CnB,wBAAwBmB,MAAAA;CAC5B;CAEA,MAAME,gBAAgBF,QAAcC,WAAsC;EACtE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EAEjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOY,oBAAoB,GAC3C;EAGJ1C,6BAA6Be,QAAQ,KAAKmB,2BAA2BJ,OAAOY,oBAAoB,CAAA;CACpG;CAEA,MAAMpB,eAAeP,QAAcC,WAAsC;EACrE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EAEjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOa,mBAAmB,GAC1C;EAGJ1C,4BAA4Bc,QAAQ,KAAKmB,2BAA2BJ,OAAOa,mBAAmB,CAAA;CAClG;CAEA,MAAMpB,aAAaR,QAAcC,WAAsC;EACnE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EACjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOc,iBAAiB,GACxC;EAGJ,MAAMP,aAAa1C,wBAAwB;GACvCkD,cAAcvD,KAAKwD,KAAK3C,WAAW,cAAA;GACnCgC,SAASL,OAAOM;EACpB,CAAA;EAEArB,OAAOwB,IAAI,SAASF,UAAAA;CACxB;CAEA,MAAMX,mBAAmBX,QAAcC,WAAsC;EACzE,MAAM+B,kBAAkB/B,UAAUa,QAA2BpB,WAAAA;EAC7D,MAAM4B,aAAa5C,8BAA8B,EAAEsD,iBAAiB,IAAIrC,uBAAuBqC,eAAAA,EAAiB,CAAA;EAOhHhC,OAAOwB,IAAI,4BAA4BF,UAAAA;CAC3C;CAEA,MAAMb,mBAAmBT,QAAcC,WAAsC;EACzE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EACjC,MAAM2C,aAAahC,UAAUa,QAAQlB,qBAAqBsC,UAAU;EAEpE,MAAMC,mBAAmBlC,UAAUa,QAAQtB,qBAAqB4C,QAAQ;EACxE,MAAMC,iBAAiBpC,UAAUa,QAAQzB,2BAA2BiD,cAAc;EAClF,MAAMC,oBAAoBtC,UAAUa,QAAQzB,2BAA2BmD,iBAAiB;EACxF,MAAMC,sBAAsBxC,UAAUa,QAAQrB,qBAAqBiD,aAAa;EAChF,MAAMC,6BAA6B1C,UAAUa,QAAQtB,qBAAqBoD,kBAAkB;EAE5F,MAAMC,qBAAqB,IAAIhD,2BAA2BoC,UAAAA;EAE1D,MAAMX,aAAa9C,8BAA8B;GAC7C2D;GACAQ;GACAE;GACAJ;GACAJ;GACAE;GACA1B,QAAQZ,UAAUa,QAAQvB,kBAAAA;GAC1B2B,SAAS;IACL4B,iBAAiB/B,OAAO+B;IACxBC,eAAehC,OAAOgC;IACtBC,mBAAmBjC,OAAOiC;IAC1B5B,SAASL,OAAOM;GACpB;EACJ,CAAA;EAEArB,OAAOwB,IAAIF,UAAAA;CACf;CAEA,MAAMZ,yBAAyBV,QAA6B;EAGxDA,OAAOwB,IAAI7C,oCAAAA,CAAAA;CACf;CAIQwC,2BACJ8B,OACc;EACd,IAAI,OAAOA,UAAU,WACjB,OAAO,CAAC;EAGZ,OAAOA,SAAS,CAAC;CACrB;CAEQjC,UAAaiC,OAAoB;EACrC,OAAO,OAAOA,UAAU,aAAaA,UAAU;CACnD;AACJ"}