@geekmidas/constructs 0.0.22 → 0.2.0

package/dist/{EndpointFactory-B5fOINuc.d.cts → EndpointFactory-DaFR9LQG.d.mts}

@@ -1,13 +1,13 @@
-import { Authorizer } from "./Authorizer-BTmly8ps.cjs";
-import { ActorExtractor, AuthorizeFn, SessionFn } from "./Endpoint-D2Imgihs.cjs";
-import { EndpointBuilder } from "./EndpointBuilder-TApJQhtG.cjs";
+import { Authorizer, BuiltInSecuritySchemeId, SecurityScheme } from "./Authorizer-Cpx59w_q.mjs";
+import { ActorExtractor, AuthorizeFn, RlsConfig, SessionFn } from "./Endpoint-C5djXyae.mjs";
+import { EndpointBuilder } from "./EndpointBuilder-CD8LkBda.mjs";
+import { Service } from "@geekmidas/services";
 import { AuditStorage, AuditableAction, ExtractStorageAuditAction } from "@geekmidas/audit";
 import { EventPublisher, MappedEvent } from "@geekmidas/events";
 import { Logger } from "@geekmidas/logger";
-import { Service } from "@geekmidas/services";
 
 //#region src/endpoints/EndpointFactory.d.ts
-declare class EndpointFactory<TServices extends Service[] = [], TBasePath extends string = '', TLogger extends Logger = Logger, TSession = unknown, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TAuthorizers extends readonly string[] = readonly string[], TAuditStorage extends AuditStorage<any> | undefined = undefined, TAuditStorageServiceName extends string = string, TAuditAction extends AuditableAction<string, unknown> = ExtractStorageAuditAction<NonNullable<TAuditStorage>>, TDatabase = undefined, TDatabaseServiceName extends string = string> {
+declare class EndpointFactory<TServices extends Service[] = [], TBasePath extends string = '', TLogger extends Logger = Logger, TSession = unknown, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TAuthorizers extends readonly string[] = readonly string[], TAuditStorage extends AuditStorage<any> | undefined = undefined, TAuditStorageServiceName extends string = string, TAuditAction extends AuditableAction<string, unknown> = ExtractStorageAuditAction<NonNullable<TAuditStorage>>, TDatabase = undefined, TDatabaseServiceName extends string = string, TSecuritySchemes extends Record<string, SecurityScheme> = Record<string, SecurityScheme>, TRlsConfig extends RlsConfig<TServices, TSession, TLogger> | undefined = undefined> {
   private defaultServices;
   private basePath;
   private defaultAuthorizeFn?;
@@ -19,6 +19,8 @@ declare class EndpointFactory<TServices extends Service[] = [], TBasePath extend
   private defaultAuditorStorage;
   private defaultDatabaseService;
   private defaultActorExtractor?;
+  private customSecuritySchemes;
+  private defaultRlsConfig?;
   constructor({
     basePath,
     defaultAuthorizeFn,
@@ -30,38 +32,81 @@ declare class EndpointFactory<TServices extends Service[] = [], TBasePath extend
     defaultAuthorizerName,
     defaultAuditorStorage,
     defaultDatabaseService,
-    defaultActorExtractor
-  }?: EndpointFactoryOptions<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TDatabase, TDatabaseServiceName>);
+    defaultActorExtractor,
+    customSecuritySchemes,
+    defaultRlsConfig
+  }?: EndpointFactoryOptions<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TDatabase, TDatabaseServiceName, TSecuritySchemes, TRlsConfig>);
   static joinPaths<TBasePath extends string, P extends string>(path: P, basePath?: TBasePath): JoinPaths<TBasePath, P>;
-  authorizers<const T extends readonly string[]>(authorizers: T): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, T, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
+  authorizers<const T extends readonly string[]>(authorizers: T): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, T, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  /**
+   * Define custom security schemes for this factory.
+   * These extend the built-in schemes (jwt, bearer, apiKey, oauth2, oidc).
+   *
+   * @example
+   * ```typescript
+   * const router = e.securitySchemes({
+   *   awsIamSigV4: {
+   *     type: 'apiKey',
+   *     in: 'header',
+   *     name: 'Authorization',
+   *     'x-amazon-apigateway-authtype': 'awsSigv4',
+   *   },
+   * });
+   * ```
+   */
+  securitySchemes<T extends Record<string, SecurityScheme>>(schemes: T): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes & T>;
   /**
    * Set the default authorizer for all endpoints created from this factory.
    * Individual endpoints can override this by calling `.authorizer()` on the builder.
    * Use `'none'` to explicitly disable authorization for all endpoints.
+   *
+   * Accepts:
+   * - Built-in security scheme names: 'jwt', 'bearer', 'apiKey', 'oauth2', 'oidc'
+   * - Custom security scheme names defined via `.securitySchemes()`
+   * - 'none' to disable authorization
    */
-  authorizer(name: TAuthorizers[number] | 'none'): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
-  route<TPath extends string>(path: TPath): EndpointFactory<TServices, JoinPaths<TBasePath, TPath>, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
-  authorize(fn: AuthorizeFn<TServices, TLogger, TSession>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
-  services<S extends Service[]>(services: S): EndpointFactory<[...S, ...TServices], TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
-  logger<L extends Logger>(logger: L): EndpointFactory<TServices, TBasePath, L, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
-  publisher<T extends EventPublisher<any>, TServiceName extends string = string>(publisher: Service<TServiceName, T>): EndpointFactory<TServices, TBasePath, TLogger, TSession, T, TServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
-  session<T>(session: SessionFn<TServices, TLogger, T, TDatabase>): EndpointFactory<TServices, TBasePath, TLogger, T, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
+  authorizer(name: BuiltInSecuritySchemeId | keyof TSecuritySchemes | TAuthorizers[number] | 'none'): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  route<TPath extends string>(path: TPath): EndpointFactory<TServices, JoinPaths<TBasePath, TPath>, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  authorize(fn: AuthorizeFn<TServices, TLogger, TSession>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  services<S extends Service[]>(services: S): EndpointFactory<[...S, ...TServices], TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  logger<L extends Logger>(logger: L): EndpointFactory<TServices, TBasePath, L, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  publisher<T extends EventPublisher<any>, TServiceName extends string = string>(publisher: Service<TServiceName, T>): EndpointFactory<TServices, TBasePath, TLogger, TSession, T, TServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  session<T>(session: SessionFn<TServices, TLogger, T, TDatabase>): EndpointFactory<TServices, TBasePath, TLogger, T, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
   /**
    * Set the database service for endpoints created from this factory.
    * The database will be available in handler context as `db`.
    */
-  database<T, TName extends string>(service: Service<TName, T>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, T, TName>;
+  database<T, TName extends string>(service: Service<TName, T>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, T, TName, TSecuritySchemes>;
   /**
    * Set the auditor storage service for endpoints created from this factory.
    * This enables audit functionality and makes `auditor` available in handler context.
    * The audit action type is automatically inferred from the storage's generic parameter.
    */
-  auditor<T extends AuditStorage<any>, TName extends string>(storage: Service<TName, T>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, T, TName, ExtractStorageAuditAction<T>, TDatabase, TDatabaseServiceName>;
+  auditor<T extends AuditStorage<any>, TName extends string>(storage: Service<TName, T>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, T, TName, ExtractStorageAuditAction<T>, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
   /**
    * Set the actor extractor function for endpoints created from this factory.
    * The actor is extracted from the request context and attached to all audits.
    */
-  actor(extractor: ActorExtractor<TServices, TSession, TLogger>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
+  actor(extractor: ActorExtractor<TServices, TSession, TLogger>): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes>;
+  /**
+   * Set the RLS (Row-Level Security) configuration for endpoints created from this factory.
+   * This enables automatic PostgreSQL session variable setting for RLS policies.
+   *
+   * @example
+   * ```typescript
+   * const api = new EndpointFactory()
+   *   .database(databaseService)
+   *   .session(extractSession)
+   *   .rls({
+   *     extractor: ({ session }) => ({
+   *       user_id: session.userId,
+   *       tenant_id: session.tenantId,
+   *     }),
+   *     prefix: 'app',
+   *   });
+   * ```
+   */
+  rls<TConfig extends RlsConfig<TServices, TSession, TLogger>>(config: TConfig): EndpointFactory<TServices, TBasePath, TLogger, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName, TSecuritySchemes, TConfig>;
   private createBuilder;
   post<TPath extends string>(path: TPath): EndpointBuilder<RemoveTrailingSlash<TBasePath extends "" ? TPath : TPath extends "" ? TBasePath : TBasePath extends "/" ? TPath extends `/${string}` ? TPath : `/${TPath}` : TBasePath extends `${infer Base}/` ? TPath extends `/${infer Rest}` ? `${Base}/${Rest}` : `${Base}/${TPath}` : TPath extends `/${infer Rest_1}` ? `${TBasePath}/${Rest_1}` : `${TBasePath}/${TPath}`>, "POST", {}, TServices, TLogger, undefined, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
   get<TPath extends string>(path: TPath): EndpointBuilder<RemoveTrailingSlash<TBasePath extends "" ? TPath : TPath extends "" ? TBasePath : TBasePath extends "/" ? TPath extends `/${string}` ? TPath : `/${TPath}` : TBasePath extends `${infer Base}/` ? TPath extends `/${infer Rest}` ? `${Base}/${Rest}` : `${Base}/${TPath}` : TPath extends `/${infer Rest_1}` ? `${TBasePath}/${Rest_1}` : `${TBasePath}/${TPath}`>, "GET", {}, TServices, TLogger, undefined, TSession, TEventPublisher, TEventPublisherServiceName, TAuthorizers, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>;
@@ -72,7 +117,7 @@ declare class EndpointFactory<TServices extends Service[] = [], TBasePath extend
 }
 type RemoveTrailingSlash<T extends string> = T extends `${infer Rest}/` ? Rest extends '' ? T : Rest : T;
 type JoinPaths<TBasePath extends string, TPath extends string> = RemoveTrailingSlash<TBasePath extends '' ? TPath : TPath extends '' ? TBasePath : TBasePath extends '/' ? TPath extends `/${string}` ? TPath : `/${TPath}` : TBasePath extends `${infer Base}/` ? TPath extends `/${infer Rest}` ? `${Base}/${Rest}` : `${Base}/${TPath}` : TPath extends `/${infer Rest}` ? `${TBasePath}/${Rest}` : `${TBasePath}/${TPath}`>;
-interface EndpointFactoryOptions<TServices extends Service[] = [], TBasePath extends string = '', TLogger extends Logger = Logger, TSession = unknown, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TAuthorizers extends readonly string[] = readonly string[], TAuditStorage extends AuditStorage | undefined = undefined, TAuditStorageServiceName extends string = string, TDatabase = undefined, TDatabaseServiceName extends string = string> {
+interface EndpointFactoryOptions<TServices extends Service[] = [], TBasePath extends string = '', TLogger extends Logger = Logger, TSession = unknown, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TAuthorizers extends readonly string[] = readonly string[], TAuditStorage extends AuditStorage | undefined = undefined, TAuditStorageServiceName extends string = string, TDatabase = undefined, TDatabaseServiceName extends string = string, TSecuritySchemes extends Record<string, SecurityScheme> = Record<string, SecurityScheme>, TRlsConfig extends RlsConfig<TServices, TSession, TLogger> | undefined = undefined> {
   defaultServices?: TServices;
   basePath?: TBasePath;
   defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;
@@ -85,8 +130,10 @@ interface EndpointFactoryOptions<TServices extends Service[] = [], TBasePath ext
   defaultAuditorStorage?: Service<TAuditStorageServiceName, TAuditStorage>;
   defaultDatabaseService?: Service<TDatabaseServiceName, TDatabase>;
   defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;
+  customSecuritySchemes?: TSecuritySchemes;
+  defaultRlsConfig?: TRlsConfig;
 }
-declare const e: EndpointFactory<[], "", Logger, unknown, undefined, string, readonly string[], undefined, string, never, undefined, string>;
+declare const e: EndpointFactory<[], "", Logger, unknown, undefined, string, readonly string[], undefined, string, never, undefined, string, Record<string, SecurityScheme>, undefined>;
 //#endregion
 export { EndpointFactory, EndpointFactoryOptions, JoinPaths, RemoveTrailingSlash, e };
-//# sourceMappingURL=EndpointFactory-B5fOINuc.d.cts.map
+//# sourceMappingURL=EndpointFactory-DaFR9LQG.d.mts.map

package/dist/{EndpointFactory-D5lFZXqY.cjs → EndpointFactory-DcT_g9M_.cjs}

@@ -1,5 +1,5 @@
 const require_chunk = require('./chunk-CUT6urMc.cjs');
-const require_EndpointBuilder = require('./EndpointBuilder-CYkeYpsL.cjs');
+const require_EndpointBuilder = require('./EndpointBuilder-DeswNQdG.cjs');
 const __geekmidas_logger_console = require_chunk.__toESM(require("@geekmidas/logger/console"));
 const lodash_uniqby = require_chunk.__toESM(require("lodash.uniqby"));
 
@@ -17,7 +17,9 @@ var EndpointFactory = class EndpointFactory {
 	defaultAuditorStorage;
 	defaultDatabaseService;
 	defaultActorExtractor;
-	constructor({ basePath, defaultAuthorizeFn, defaultLogger, defaultSessionExtractor, defaultServices = [], defaultEventPublisher, availableAuthorizers = [], defaultAuthorizerName, defaultAuditorStorage, defaultDatabaseService, defaultActorExtractor } = {}) {
+	customSecuritySchemes = {};
+	defaultRlsConfig;
+	constructor({ basePath, defaultAuthorizeFn, defaultLogger, defaultSessionExtractor, defaultServices = [], defaultEventPublisher, availableAuthorizers = [], defaultAuthorizerName, defaultAuditorStorage, defaultDatabaseService, defaultActorExtractor, customSecuritySchemes = {}, defaultRlsConfig } = {}) {
 		this.defaultServices = (0, lodash_uniqby.default)(defaultServices, (s) => s.serviceName);
 		this.basePath = basePath || "";
 		this.defaultAuthorizeFn = defaultAuthorizeFn;
@@ -29,6 +31,8 @@ var EndpointFactory = class EndpointFactory {
 		this.defaultAuditorStorage = defaultAuditorStorage;
 		this.defaultDatabaseService = defaultDatabaseService;
 		this.defaultActorExtractor = defaultActorExtractor;
+		this.customSecuritySchemes = customSecuritySchemes;
+		this.defaultRlsConfig = defaultRlsConfig;
 	}
 	static joinPaths(path, basePath = "") {
 		if (!basePath && !path) return "/";
@@ -55,13 +59,55 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
+		});
+	}
+	/**
+	* Define custom security schemes for this factory.
+	* These extend the built-in schemes (jwt, bearer, apiKey, oauth2, oidc).
+	*
+	* @example
+	* ```typescript
+	* const router = e.securitySchemes({
+	*   awsIamSigV4: {
+	*     type: 'apiKey',
+	*     in: 'header',
+	*     name: 'Authorization',
+	*     'x-amazon-apigateway-authtype': 'awsSigv4',
+	*   },
+	* });
+	* ```
+	*/
+	securitySchemes(schemes) {
+		return new EndpointFactory({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: {
+				...this.customSecuritySchemes,
+				...schemes
+			}
 		});
 	}
 	/**
 	* Set the default authorizer for all endpoints created from this factory.
 	* Individual endpoints can override this by calling `.authorizer()` on the builder.
 	* Use `'none'` to explicitly disable authorization for all endpoints.
+	*
+	* Accepts:
+	* - Built-in security scheme names: 'jwt', 'bearer', 'apiKey', 'oauth2', 'oidc'
+	* - Custom security scheme names defined via `.securitySchemes()`
+	* - 'none' to disable authorization
 	*/
 	authorizer(name) {
 		if (name !== "none" && this.availableAuthorizers.length > 0) {
@@ -82,7 +128,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: name === "none" ? void 0 : name,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	route(path) {
@@ -98,7 +146,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	authorize(fn) {
@@ -113,7 +163,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	services(services) {
@@ -128,7 +180,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	logger(logger) {
@@ -143,7 +197,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	publisher(publisher) {
@@ -158,7 +214,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	session(session) {
@@ -173,7 +231,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	/**
@@ -191,7 +251,9 @@ var EndpointFactory = class EndpointFactory {
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
-			defaultDatabaseService: service
+			defaultDatabaseService: service,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	/**
@@ -211,7 +273,9 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: storage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
 		});
 	}
 	/**
@@ -230,7 +294,44 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
 			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: extractor
+			defaultActorExtractor: extractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig
+		});
+	}
+	/**
+	* Set the RLS (Row-Level Security) configuration for endpoints created from this factory.
+	* This enables automatic PostgreSQL session variable setting for RLS policies.
+	*
+	* @example
+	* ```typescript
+	* const api = new EndpointFactory()
+	*   .database(databaseService)
+	*   .session(extractSession)
+	*   .rls({
+	*     extractor: ({ session }) => ({
+	*       user_id: session.userId,
+	*       tenant_id: session.tenantId,
+	*     }),
+	*     prefix: 'app',
+	*   });
+	* ```
+	*/
+	rls(config) {
+		return new EndpointFactory({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: config
 		});
 	}
 	createBuilder(method, path) {
@@ -246,6 +347,8 @@ var EndpointFactory = class EndpointFactory {
 		if (this.defaultAuditorStorage) builder._setAuditorStorage(this.defaultAuditorStorage);
 		if (this.defaultDatabaseService) builder._setDatabaseService(this.defaultDatabaseService);
 		if (this.defaultActorExtractor) builder._actorExtractor = this.defaultActorExtractor;
+		builder._customSecuritySchemes = this.customSecuritySchemes;
+		if (this.defaultRlsConfig) builder._rlsConfig = this.defaultRlsConfig;
 		return builder;
 	}
 	post(path) {
@@ -282,4 +385,4 @@ Object.defineProperty(exports, 'e', {
     return e;
   }
 });
-//# sourceMappingURL=EndpointFactory-D5lFZXqY.cjs.map
+//# sourceMappingURL=EndpointFactory-DcT_g9M_.cjs.map

package/dist/EndpointFactory-DcT_g9M_.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EndpointFactory-DcT_g9M_.cjs","names":["ConsoleLogger","path: P","basePath: TBasePath","authorizers: T","schemes: T","name:\n      | BuiltInSecuritySchemeId\n      | keyof TSecuritySchemes\n      | TAuthorizers[number]\n      | 'none'","path: TPath","fn: AuthorizeFn<TServices, TLogger, TSession>","services: S","logger: L","publisher: Service<TServiceName, T>","session: SessionFn<TServices, TLogger, T, TDatabase>","service: Service<TName, T>","storage: Service<TName, T>","extractor: ActorExtractor<TServices, TSession, TLogger>","config: TConfig","method: TMethod","EndpointBuilder"],"sources":["../src/endpoints/EndpointFactory.ts"],"sourcesContent":["import type {\n  AuditStorage,\n  AuditableAction,\n  ExtractStorageAuditAction,\n} from '@geekmidas/audit';\nimport type { EventPublisher, MappedEvent } from '@geekmidas/events';\nimport type { Logger } from '@geekmidas/logger';\nimport { ConsoleLogger } from '@geekmidas/logger/console';\nimport type { Service } from '@geekmidas/services';\nimport uniqBy from 'lodash.uniqby';\nimport type { HttpMethod } from '../types';\nimport type {\n  Authorizer,\n  BuiltInSecuritySchemeId,\n  SecurityScheme,\n} from './Authorizer';\nimport type { AuthorizeFn, SessionFn } from './Endpoint';\nimport { EndpointBuilder } from './EndpointBuilder';\nimport type { ActorExtractor } from './audit';\nimport type { RlsConfig } from './rls';\n\nconst DEFAULT_LOGGER = new ConsoleLogger() as any;\n\nexport class EndpointFactory<\n  TServices extends Service[] = [],\n  TBasePath extends string = '',\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TEventPublisher extends EventPublisher<any> | undefined = undefined,\n  TEventPublisherServiceName extends string = string,\n  TAuthorizers extends readonly string[] = readonly string[],\n  TAuditStorage extends AuditStorage<any> | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<\n    string,\n    unknown\n  > = ExtractStorageAuditAction<NonNullable<TAuditStorage>>,\n  TDatabase = undefined,\n  TDatabaseServiceName extends string = string,\n  TSecuritySchemes extends Record<string, SecurityScheme> = Record<\n    string,\n    SecurityScheme\n  >,\n  TRlsConfig extends\n    | RlsConfig<TServices, TSession, TLogger>\n    | undefined = undefined,\n> {\n  // @ts-ignore\n  private defaultServices: TServices;\n  private basePath: TBasePath = '' as TBasePath;\n  private defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;\n  private defaultEventPublisher:\n    | Service<TEventPublisherServiceName, TEventPublisher>\n    | undefined;\n  private defaultSessionExtractor?: SessionFn<\n    TServices,\n    TLogger,\n    TSession,\n    TDatabase\n  >;\n  private defaultLogger: TLogger = DEFAULT_LOGGER;\n  private availableAuthorizers: Authorizer[] = [];\n  private defaultAuthorizerName?: TAuthorizers[number];\n  private defaultAuditorStorage:\n    | Service<TAuditStorageServiceName, TAuditStorage>\n    | undefined;\n  private defaultDatabaseService:\n    | Service<TDatabaseServiceName, TDatabase>\n    | undefined;\n  private defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;\n  private customSecuritySchemes: TSecuritySchemes = {} as TSecuritySchemes;\n  private defaultRlsConfig?: TRlsConfig;\n\n  constructor({\n    basePath,\n    defaultAuthorizeFn,\n    defaultLogger,\n    defaultSessionExtractor,\n    // @ts-ignore\n    defaultServices = [] as TServices,\n    defaultEventPublisher,\n    availableAuthorizers = [],\n    defaultAuthorizerName,\n    defaultAuditorStorage,\n    defaultDatabaseService,\n    defaultActorExtractor,\n    customSecuritySchemes = {} as TSecuritySchemes,\n    defaultRlsConfig,\n  }: EndpointFactoryOptions<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes,\n    TRlsConfig\n  > = {}) {\n    // Initialize default services\n    this.defaultServices = uniqBy(\n      defaultServices,\n      (s) => s.serviceName,\n    ) as TServices;\n\n    this.basePath = basePath || ('' as TBasePath);\n    this.defaultAuthorizeFn = defaultAuthorizeFn;\n    this.defaultLogger = defaultLogger || (DEFAULT_LOGGER as TLogger);\n    this.defaultSessionExtractor = defaultSessionExtractor;\n    this.defaultEventPublisher = defaultEventPublisher;\n    this.availableAuthorizers = availableAuthorizers;\n    this.defaultAuthorizerName = defaultAuthorizerName;\n    this.defaultAuditorStorage = defaultAuditorStorage;\n    this.defaultDatabaseService = defaultDatabaseService;\n    this.defaultActorExtractor = defaultActorExtractor;\n    this.customSecuritySchemes = customSecuritySchemes;\n    this.defaultRlsConfig = defaultRlsConfig;\n  }\n\n  static joinPaths<TBasePath extends string, P extends string>(\n    path: P,\n    basePath: TBasePath = '' as TBasePath,\n  ): JoinPaths<TBasePath, P> {\n    // Handle empty cases\n    if (!basePath && !path) return '/' as JoinPaths<TBasePath, P>;\n    if (!basePath)\n      return (path.startsWith('/') ? path : '/' + path) as JoinPaths<\n        TBasePath,\n        P\n      >;\n    if (!path)\n      return (\n        basePath.startsWith('/') ? basePath : '/' + basePath\n      ) as JoinPaths<TBasePath, P>;\n\n    const base = basePath.endsWith('/') ? basePath.slice(0, -1) : basePath;\n    const segment = path.startsWith('/') ? path : '/' + path;\n\n    let result = base + segment;\n\n    // Ensure leading slash\n    if (!result.startsWith('/')) {\n      result = '/' + result;\n    }\n\n    // Normalize multiple slashes (except in the middle of the path where they might be intentional)\n    result = result.replace(/^\\/+/g, '/');\n\n    // Remove trailing slash unless it's the root path \"/\"\n    if (result.length > 1 && result.endsWith('/')) {\n      result = result.slice(0, -1);\n    }\n\n    return result as JoinPaths<TBasePath, P>;\n  }\n\n  // Configure available authorizers\n  authorizers<const T extends readonly string[]>(\n    authorizers: T,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    T,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    const authorizerConfigs = authorizers.map((name) => ({\n      name,\n    }));\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      T,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: authorizerConfigs,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  /**\n   * Define custom security schemes for this factory.\n   * These extend the built-in schemes (jwt, bearer, apiKey, oauth2, oidc).\n   *\n   * @example\n   * ```typescript\n   * const router = e.securitySchemes({\n   *   awsIamSigV4: {\n   *     type: 'apiKey',\n   *     in: 'header',\n   *     name: 'Authorization',\n   *     'x-amazon-apigateway-authtype': 'awsSigv4',\n   *   },\n   * });\n   * ```\n   */\n  securitySchemes<T extends Record<string, SecurityScheme>>(\n    schemes: T,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes & T\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes & T\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: {\n        ...this.customSecuritySchemes,\n        ...schemes,\n      } as TSecuritySchemes & T,\n    });\n  }\n\n  /**\n   * Set the default authorizer for all endpoints created from this factory.\n   * Individual endpoints can override this by calling `.authorizer()` on the builder.\n   * Use `'none'` to explicitly disable authorization for all endpoints.\n   *\n   * Accepts:\n   * - Built-in security scheme names: 'jwt', 'bearer', 'apiKey', 'oauth2', 'oidc'\n   * - Custom security scheme names defined via `.securitySchemes()`\n   * - 'none' to disable authorization\n   */\n  authorizer(\n    name:\n      | BuiltInSecuritySchemeId\n      | keyof TSecuritySchemes\n      | TAuthorizers[number]\n      | 'none',\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    // Validate that the authorizer exists in available authorizers (if authorizers() was called)\n    if (name !== 'none' && this.availableAuthorizers.length > 0) {\n      const authorizerExists = this.availableAuthorizers.some(\n        (a) => a.name === name,\n      );\n      if (!authorizerExists) {\n        const available = this.availableAuthorizers\n          .map((a) => a.name)\n          .join(', ');\n        throw new Error(\n          `Authorizer \"${name as string}\" not found in available authorizers: ${available}`,\n        );\n      }\n    }\n\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName:\n        name === 'none' ? undefined : (name as TAuthorizers[number]),\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  // Create a sub-router with a path prefix\n  route<TPath extends string>(\n    path: TPath,\n  ): EndpointFactory<\n    TServices,\n    JoinPaths<TBasePath, TPath>,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    const newBasePath = EndpointFactory.joinPaths(path, this.basePath);\n    return new EndpointFactory<\n      TServices,\n      JoinPaths<TBasePath, TPath>,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: newBasePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  // Create a new factory with authorization\n  authorize(\n    fn: AuthorizeFn<TServices, TLogger, TSession>,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: fn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  // Create a new factory with services\n  services<S extends Service[]>(\n    services: S,\n  ): EndpointFactory<\n    [...S, ...TServices],\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      [...S, ...TServices],\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: [...services, ...this.defaultServices],\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  logger<L extends Logger>(\n    logger: L,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    L,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      L,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<\n        TServices,\n        L,\n        TSession\n      >,\n      defaultLogger: logger,\n      defaultSessionExtractor: this\n        .defaultSessionExtractor as unknown as SessionFn<\n        TServices,\n        L,\n        TSession\n      >,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this\n        .defaultActorExtractor as unknown as ActorExtractor<\n        TServices,\n        TSession,\n        L\n      >,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  publisher<\n    T extends EventPublisher<any>,\n    TServiceName extends string = string,\n  >(\n    publisher: Service<TServiceName, T>,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    T,\n    TServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      T,\n      TServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: publisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  session<T>(\n    session: SessionFn<TServices, TLogger, T, TDatabase>,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    T,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      T,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<\n        TServices,\n        TLogger,\n        T\n      >,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: session,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this\n        .defaultActorExtractor as unknown as ActorExtractor<\n        TServices,\n        T,\n        TLogger\n      >,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  /**\n   * Set the database service for endpoints created from this factory.\n   * The database will be available in handler context as `db`.\n   */\n  database<T, TName extends string>(\n    service: Service<TName, T>,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    T,\n    TName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      T,\n      TName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      // Reset session extractor when database changes - user should call .session() after .database()\n      // to get proper type inference for the new database type\n      defaultSessionExtractor: this.defaultSessionExtractor as unknown as\n        | SessionFn<TServices, TLogger, TSession, T>\n        | undefined,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: service,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  /**\n   * Set the auditor storage service for endpoints created from this factory.\n   * This enables audit functionality and makes `auditor` available in handler context.\n   * The audit action type is automatically inferred from the storage's generic parameter.\n   */\n  auditor<T extends AuditStorage<any>, TName extends string>(\n    storage: Service<TName, T>,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    T,\n    TName,\n    ExtractStorageAuditAction<T>,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      T,\n      TName,\n      ExtractStorageAuditAction<T>,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: storage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this\n        .defaultActorExtractor as unknown as ActorExtractor<\n        TServices,\n        TSession,\n        TLogger\n      >,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  /**\n   * Set the actor extractor function for endpoints created from this factory.\n   * The actor is extracted from the request context and attached to all audits.\n   */\n  actor(\n    extractor: ActorExtractor<TServices, TSession, TLogger>,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TRlsConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: extractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: this.defaultRlsConfig,\n    });\n  }\n\n  /**\n   * Set the RLS (Row-Level Security) configuration for endpoints created from this factory.\n   * This enables automatic PostgreSQL session variable setting for RLS policies.\n   *\n   * @example\n   * ```typescript\n   * const api = new EndpointFactory()\n   *   .database(databaseService)\n   *   .session(extractSession)\n   *   .rls({\n   *     extractor: ({ session }) => ({\n   *       user_id: session.userId,\n   *       tenant_id: session.tenantId,\n   *     }),\n   *     prefix: 'app',\n   *   });\n   * ```\n   */\n  rls<TConfig extends RlsConfig<TServices, TSession, TLogger>>(\n    config: TConfig,\n  ): EndpointFactory<\n    TServices,\n    TBasePath,\n    TLogger,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName,\n    TSecuritySchemes,\n    TConfig\n  > {\n    return new EndpointFactory<\n      TServices,\n      TBasePath,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName,\n      TSecuritySchemes,\n      TConfig\n    >({\n      defaultServices: this.defaultServices,\n      basePath: this.basePath,\n      defaultAuthorizeFn: this.defaultAuthorizeFn,\n      defaultLogger: this.defaultLogger,\n      defaultSessionExtractor: this.defaultSessionExtractor,\n      defaultEventPublisher: this.defaultEventPublisher,\n      availableAuthorizers: this.availableAuthorizers,\n      defaultAuthorizerName: this.defaultAuthorizerName,\n      defaultAuditorStorage: this.defaultAuditorStorage,\n      defaultDatabaseService: this.defaultDatabaseService,\n      defaultActorExtractor: this.defaultActorExtractor,\n      customSecuritySchemes: this.customSecuritySchemes,\n      defaultRlsConfig: config,\n    });\n  }\n\n  private createBuilder<TMethod extends HttpMethod, TPath extends string>(\n    method: TMethod,\n    path: TPath,\n  ): EndpointBuilder<\n    JoinPaths<TBasePath, TPath>,\n    TMethod,\n    {},\n    TServices,\n    TLogger,\n    undefined,\n    TSession,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuthorizers,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName\n  > {\n    const fullPath = EndpointFactory.joinPaths(path, this.basePath);\n    const builder = new EndpointBuilder<\n      JoinPaths<TBasePath, TPath>,\n      TMethod,\n      {},\n      TServices,\n      TLogger,\n      undefined,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuthorizers,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction,\n      TDatabase,\n      TDatabaseServiceName\n    >(fullPath, method);\n\n    if (this.defaultAuthorizeFn) {\n      // @ts-ignore\n      builder._authorize = this.defaultAuthorizeFn;\n    }\n    if (this.defaultServices.length) {\n      // Create a copy to avoid sharing references between builders\n      builder._services = [...this.defaultServices] as TServices;\n    }\n\n    if (this.defaultLogger) {\n      builder._logger = this.defaultLogger as TLogger;\n    }\n\n    if (this.defaultSessionExtractor) {\n      builder._getSession = this.defaultSessionExtractor as SessionFn<\n        TServices,\n        TLogger,\n        TSession\n      >;\n    }\n\n    if (this.defaultEventPublisher) {\n      builder._setPublisher(this.defaultEventPublisher);\n    }\n\n    // Set available authorizers and default\n    builder._availableAuthorizers = this.availableAuthorizers;\n    if (this.defaultAuthorizerName) {\n      builder._authorizerName = this.defaultAuthorizerName;\n    }\n\n    // Set auditor storage if configured\n    if (this.defaultAuditorStorage) {\n      builder._setAuditorStorage(this.defaultAuditorStorage as any);\n    }\n\n    // Set database service if configured\n    if (this.defaultDatabaseService) {\n      builder._setDatabaseService(this.defaultDatabaseService as any);\n    }\n\n    // Set actor extractor if configured\n    if (this.defaultActorExtractor) {\n      builder._actorExtractor = this.defaultActorExtractor;\n    }\n\n    // Set custom security schemes\n    builder._customSecuritySchemes = this.customSecuritySchemes;\n\n    // Set RLS config if configured\n    if (this.defaultRlsConfig) {\n      builder._rlsConfig = this.defaultRlsConfig as any;\n    }\n\n    return builder;\n  }\n\n  post<TPath extends string>(path: TPath) {\n    return this.createBuilder('POST', path);\n  }\n\n  get<TPath extends string>(path: TPath) {\n    return this.createBuilder('GET', path);\n  }\n\n  put<TPath extends string>(path: TPath) {\n    return this.createBuilder('PUT', path);\n  }\n\n  delete<TPath extends string>(path: TPath) {\n    return this.createBuilder('DELETE', path);\n  }\n\n  patch<TPath extends string>(path: TPath) {\n    return this.createBuilder('PATCH', path);\n  }\n\n  options<TPath extends string>(path: TPath) {\n    return this.createBuilder('OPTIONS', path);\n  }\n}\n\nexport type RemoveTrailingSlash<T extends string> = T extends `${infer Rest}/`\n  ? Rest extends ''\n    ? T // Keep \"/\" as is\n    : Rest\n  : T;\n\nexport type JoinPaths<\n  TBasePath extends string,\n  TPath extends string,\n> = RemoveTrailingSlash<\n  TBasePath extends ''\n    ? TPath\n    : TPath extends ''\n      ? TBasePath\n      : TBasePath extends '/'\n        ? TPath extends `/${string}`\n          ? TPath\n          : `/${TPath}`\n        : TBasePath extends `${infer Base}/`\n          ? TPath extends `/${infer Rest}`\n            ? `${Base}/${Rest}`\n            : `${Base}/${TPath}`\n          : TPath extends `/${infer Rest}`\n            ? `${TBasePath}/${Rest}`\n            : `${TBasePath}/${TPath}`\n>;\n\nexport interface EndpointFactoryOptions<\n  TServices extends Service[] = [],\n  TBasePath extends string = '',\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TEventPublisher extends EventPublisher<any> | undefined = undefined,\n  TEventPublisherServiceName extends string = string,\n  TAuthorizers extends readonly string[] = readonly string[],\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TDatabase = undefined,\n  TDatabaseServiceName extends string = string,\n  TSecuritySchemes extends Record<string, SecurityScheme> = Record<\n    string,\n    SecurityScheme\n  >,\n  TRlsConfig extends\n    | RlsConfig<TServices, TSession, TLogger>\n    | undefined = undefined,\n> {\n  defaultServices?: TServices;\n  basePath?: TBasePath;\n  defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;\n  defaultLogger?: TLogger;\n  defaultSessionExtractor?: SessionFn<TServices, TLogger, TSession, TDatabase>;\n  defaultEventPublisher?: Service<TEventPublisherServiceName, TEventPublisher>;\n  defaultEvents?: MappedEvent<TEventPublisher, undefined>[];\n  availableAuthorizers?: Authorizer[];\n  defaultAuthorizerName?: TAuthorizers[number];\n  defaultAuditorStorage?: Service<TAuditStorageServiceName, TAuditStorage>;\n  defaultDatabaseService?: Service<TDatabaseServiceName, TDatabase>;\n  defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;\n  customSecuritySchemes?: TSecuritySchemes;\n  defaultRlsConfig?: TRlsConfig;\n}\n\nexport const e = new EndpointFactory();\n"],"mappings":";;;;;;AAqBA,MAAM,iBAAiB,IAAIA;AAE3B,IAAa,kBAAb,MAAa,gBAuBX;CAEA,AAAQ;CACR,AAAQ,WAAsB;CAC9B,AAAQ;CACR,AAAQ;CAGR,AAAQ;CAMR,AAAQ,gBAAyB;CACjC,AAAQ,uBAAqC,CAAE;CAC/C,AAAQ;CACR,AAAQ;CAGR,AAAQ;CAGR,AAAQ;CACR,AAAQ,wBAA0C,CAAE;CACpD,AAAQ;CAER,YAAY,EACV,UACA,oBACA,eACA,yBAEA,kBAAkB,CAAE,GACpB,uBACA,uBAAuB,CAAE,GACzB,uBACA,uBACA,wBACA,uBACA,wBAAwB,CAAE,GAC1B,kBAeD,GAAG,CAAE,GAAE;AAEN,OAAK,kBAAkB,2BACrB,iBACA,CAAC,MAAM,EAAE,YACV;AAED,OAAK,WAAW,YAAa;AAC7B,OAAK,qBAAqB;AAC1B,OAAK,gBAAgB,iBAAkB;AACvC,OAAK,0BAA0B;AAC/B,OAAK,wBAAwB;AAC7B,OAAK,uBAAuB;AAC5B,OAAK,wBAAwB;AAC7B,OAAK,wBAAwB;AAC7B,OAAK,yBAAyB;AAC9B,OAAK,wBAAwB;AAC7B,OAAK,wBAAwB;AAC7B,OAAK,mBAAmB;CACzB;CAED,OAAO,UACLC,MACAC,WAAsB,IACG;AAEzB,OAAK,aAAa,KAAM,QAAO;AAC/B,OAAK,SACH,QAAQ,KAAK,WAAW,IAAI,GAAG,OAAO,MAAM;AAI9C,OAAK,KACH,QACE,SAAS,WAAW,IAAI,GAAG,WAAW,MAAM;EAGhD,MAAM,OAAO,SAAS,SAAS,IAAI,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG;EAC9D,MAAM,UAAU,KAAK,WAAW,IAAI,GAAG,OAAO,MAAM;EAEpD,IAAI,SAAS,OAAO;AAGpB,OAAK,OAAO,WAAW,IAAI,CACzB,UAAS,MAAM;AAIjB,WAAS,OAAO,QAAQ,SAAS,IAAI;AAGrC,MAAI,OAAO,SAAS,KAAK,OAAO,SAAS,IAAI,CAC3C,UAAS,OAAO,MAAM,GAAG,GAAG;AAG9B,SAAO;CACR;CAGD,YACEC,aAeA;EACA,MAAM,oBAAoB,YAAY,IAAI,CAAC,UAAU,EACnD,KACD,GAAE;AACH,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB;GACtB,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;;;;;;;;;;;;;;;;;CAkBD,gBACEC,SAeA;AACA,SAAO,IAAI,gBAcT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB;IACrB,GAAG,KAAK;IACR,GAAG;GACJ;EACF;CACF;;;;;;;;;;;CAYD,WACEC,MAmBA;AAEA,MAAI,SAAS,UAAU,KAAK,qBAAqB,SAAS,GAAG;GAC3D,MAAM,mBAAmB,KAAK,qBAAqB,KACjD,CAAC,MAAM,EAAE,SAAS,KACnB;AACD,QAAK,kBAAkB;IACrB,MAAM,YAAY,KAAK,qBACpB,IAAI,CAAC,MAAM,EAAE,KAAK,CAClB,KAAK,KAAK;AACb,UAAM,IAAI,OACP,cAAc,KAAe,wCAAwC,UAAU;GAEnF;EACF;AAED,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBACE,SAAS,kBAAsB;GACjC,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;CAGD,MACEC,MAeA;EACA,MAAM,cAAc,gBAAgB,UAAU,MAAM,KAAK,SAAS;AAClE,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU;GACV,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;CAGD,UACEC,IAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB;GACpB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;CAGD,SACEC,UAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,CAAC,GAAG,UAAU,GAAG,KAAK,eAAgB;GACvD,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;CAED,OACEC,QAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GAKzB,eAAe;GACf,yBAAyB,KACtB;GAKH,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KACpB;GAKH,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;CAED,UAIEC,WAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB;GACvB,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;CAED,QACEC,SAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GAKzB,eAAe,KAAK;GACpB,yBAAyB;GACzB,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KACpB;GAKH,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;;;;;CAMD,SACEC,SAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GAGpB,yBAAyB,KAAK;GAG9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB;GACxB,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;;;;;;CAOD,QACEC,SAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB;GACvB,wBAAwB,KAAK;GAC7B,uBAAuB,KACpB;GAKH,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;;;;;CAMD,MACEC,WAeA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB;GACvB,uBAAuB,KAAK;GAC5B,kBAAkB,KAAK;EACxB;CACF;;;;;;;;;;;;;;;;;;;CAoBD,IACEC,QAgBA;AACA,SAAO,IAAI,gBAeT;GACA,iBAAiB,KAAK;GACtB,UAAU,KAAK;GACf,oBAAoB,KAAK;GACzB,eAAe,KAAK;GACpB,yBAAyB,KAAK;GAC9B,uBAAuB,KAAK;GAC5B,sBAAsB,KAAK;GAC3B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,wBAAwB,KAAK;GAC7B,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,kBAAkB;EACnB;CACF;CAED,AAAQ,cACNC,QACAV,MAiBA;EACA,MAAM,WAAW,gBAAgB,UAAU,MAAM,KAAK,SAAS;EAC/D,MAAM,UAAU,IAAIW,wCAgBlB,UAAU;AAEZ,MAAI,KAAK,mBAEP,SAAQ,aAAa,KAAK;AAE5B,MAAI,KAAK,gBAAgB,OAEvB,SAAQ,YAAY,CAAC,GAAG,KAAK,eAAgB;AAG/C,MAAI,KAAK,cACP,SAAQ,UAAU,KAAK;AAGzB,MAAI,KAAK,wBACP,SAAQ,cAAc,KAAK;AAO7B,MAAI,KAAK,sBACP,SAAQ,cAAc,KAAK,sBAAsB;AAInD,UAAQ,wBAAwB,KAAK;AACrC,MAAI,KAAK,sBACP,SAAQ,kBAAkB,KAAK;AAIjC,MAAI,KAAK,sBACP,SAAQ,mBAAmB,KAAK,sBAA6B;AAI/D,MAAI,KAAK,uBACP,SAAQ,oBAAoB,KAAK,uBAA8B;AAIjE,MAAI,KAAK,sBACP,SAAQ,kBAAkB,KAAK;AAIjC,UAAQ,yBAAyB,KAAK;AAGtC,MAAI,KAAK,iBACP,SAAQ,aAAa,KAAK;AAG5B,SAAO;CACR;CAED,KAA2BX,MAAa;AACtC,SAAO,KAAK,cAAc,QAAQ,KAAK;CACxC;CAED,IAA0BA,MAAa;AACrC,SAAO,KAAK,cAAc,OAAO,KAAK;CACvC;CAED,IAA0BA,MAAa;AACrC,SAAO,KAAK,cAAc,OAAO,KAAK;CACvC;CAED,OAA6BA,MAAa;AACxC,SAAO,KAAK,cAAc,UAAU,KAAK;CAC1C;CAED,MAA4BA,MAAa;AACvC,SAAO,KAAK,cAAc,SAAS,KAAK;CACzC;CAED,QAA8BA,MAAa;AACzC,SAAO,KAAK,cAAc,WAAW,KAAK;CAC3C;AACF;AAiED,MAAa,IAAI,IAAI"}