@morojs/moro 1.8.0 → 1.8.2

package/README.md

@@ -22,9 +22,9 @@ Build high-performance APIs with intelligent routing that automatically orders m
 
 **Key Features:**
 
-- **Native C++ Engine** - Moro's own HTTP engine, faster than uWebSockets.js: 94k+ req/s real-world, ~500k pipelined, on a single thread
+- **Native C++ Engine** - ~102k req/s real-world through the full framework, 572k pipelined, on a single thread
 - **Intelligent Routing** - Automatic middleware ordering, no configuration needed
-- **Enterprise Auth** - Built-in Auth.js with OAuth & RBAC
+- **Enterprise Auth** - Built-in Better Auth with OAuth & RBAC
 - **Universal Validation** - Works with Zod, Joi, Yup, or Class Validator
 - **Message Queues** - Production-ready queues (Bull, RabbitMQ, SQS, Kafka)
 - **gRPC Support** - Native gRPC for high-performance microservices
@@ -34,21 +34,7 @@ Build high-performance APIs with intelligent routing that automatically orders m
 
 ## Performance
 
-The Moro rows run the **full framework** (routing, validation pipeline, middleware) — not a stripped-down stack:
-
-| Configuration                      | Req/sec                      | Latency (avg) | p99     |
-| ---------------------------------- | ---------------------------- | ------------- | ------- |
-| **Moro + Moro Engine** _(default)_ | **94,000+**                  | **1.1 ms**    | 2.4 ms  |
-| **Moro + uWebSockets.js**          | 91,000+                      | 1.1 ms        | 3.4 ms  |
-| **Moro (Node http)**               | 58,000+                      | 1.8 ms        | 6.4 ms  |
-| **Moro (Clustering)**              | scales across all CPU cores¹ | —             | —       |
-| Fastify                            | 56,625                       | 1.9 ms        | 4.5 ms  |
-| Koa                                | 48,238                       | 2.3 ms        | 11.5 ms |
-| Express                            | 39,552                       | 2.7 ms        | 7.9 ms  |
-
-Moro's own native engine is the default — and it outperforms uWebSockets.js in **both** profiles: real-world above, and pipelined ×10 (TechEmpower-style) at **495k req/s vs 470k**, single thread.
-
-> Methodology: `wrk`, 100 connections, no pipelining (how real HTTP clients behave), best of alternating rounds, Node 24, Apple M2 Ultra — same machine, same day, same tool for every row. ¹ Clustering multiplies throughput across cores; a single-machine loopback benchmark can't measure it honestly (the load generator competes with the workers for the same cores), so no misleading number is shown.
+MoroJS is the fastest Node.js framework we've measured (not just because its ours) — its native engine beats uWebSockets.js in both benchmark profiles while running the **full framework** (routing, validation, middleware): **~102k req/s real-world at 0.9 ms latency** and **572k req/s pipelined**, on a single thread. That's ~1.5× Fastify and ~2× Express out of the box. Full comparison tables, methodology, and saved results live in the **[MoroJS Benchmark repo](https://github.com/Moro-JS/benchmark)**.
 
 ## Quick Start
 
@@ -56,29 +42,33 @@ Moro's own native engine is the default — and it outperforms uWebSockets.js in
 
 ```bash
 npm install @morojs/moro
+npm install zod # peer dependency used by the `z` validation helper below
 ```
 
 ```typescript
 import { createApp, z } from '@morojs/moro';
 
-const app = createApp();
-
-// Intelligent routing - order doesn't matter!
-app
-  .post('/users')
-  .body(
-    z.object({
-      name: z.string().min(2),
-      email: z.string().email(),
-    })
-  )
-  .rateLimit({ requests: 10, window: 60000 })
-  .handler((req, res) => {
-    // req.body is fully typed and validated
-    return { success: true, data: req.body };
-  });
-
-app.listen(3000);
+// createApp() is async — await it inside an async context
+(async () => {
+  const app = await createApp();
+
+  // Intelligent routing - order doesn't matter!
+  app
+    .post('/users')
+    .body(
+      z.object({
+        name: z.string().min(2),
+        email: z.string().email(),
+      })
+    )
+    .rateLimit({ requests: 10, window: 60000 })
+    .handler((req, res) => {
+      // req.body is fully typed and validated
+      return { success: true, data: req.body };
+    });
+
+  app.listen(3000);
+})();
 ```
 
 ### Or Use the CLI
@@ -101,7 +91,8 @@ falling back to the Node.js http server wherever a prebuilt binary isn't
 available. Pick the backend with `server.engine`:
 
 ```typescript
-const app = createApp({
+// createApp() is async — top-level await (ESM) or wrap in an async function
+const app = await createApp({
   server: {
     engine: 'moro', // default - Moro's native engine (Node.js fallback if it can't load)
     // engine: 'node' - the Node.js http server (no native engine)
@@ -198,7 +189,7 @@ Check out [working examples](https://github.com/Moro-JS/examples) for:
 
 - REST APIs with validation
 - Real-time WebSocket apps
-- Auth.js integration
+- Better Auth integration
 - Multi-runtime deployment
 - Database integration
 - And more...
@@ -207,7 +198,7 @@ Check out [working examples](https://github.com/Moro-JS/examples) for:
 
 **vs Express** - Intelligent middleware ordering eliminates configuration complexity and race conditions
 
-**vs Fastify** - ~1.7x the throughput out of the box (Moro's native engine), plus multi-runtime deployment without adapters
+**vs Fastify** - ~1.5x the throughput out of the box (Moro's native engine), plus multi-runtime deployment without adapters
 
 **vs NestJS** - Functional architecture without decorators, with a fraction of the per-request overhead
 

package/dist/core/auth/morojs-adapter.js

@@ -6,6 +6,7 @@
  *
  * @see https://better-auth.com/
  */
+import { randomBytes } from 'crypto';
 import { createFrameworkLogger } from '../logger/index.js';
 import { resolveUserPackage } from '../utilities/package-utils.js';
 const logger = createFrameworkLogger('AuthAdapter');
@@ -67,62 +68,84 @@ function toWebRequest(req, basePath) {
     return new Request(url.toString(), {
         method: req.method || 'GET',
         headers,
-        body,
+        ...(body !== undefined ? { body } : {}),
     });
 }
+/**
+ * Parse a single Set-Cookie header value and apply it to the MoroJS response.
+ */
+function applySetCookie(moroResponse, cookie) {
+    const [nameValue, ...options] = cookie.split('; ');
+    if (nameValue === undefined)
+        return;
+    const eq = nameValue.indexOf('=');
+    if (eq <= 0)
+        return;
+    const name = nameValue.slice(0, eq);
+    const cookieValue = nameValue.slice(eq + 1);
+    const cookieOptions = {};
+    options.forEach(option => {
+        const optEq = option.indexOf('=');
+        const optKey = (optEq === -1 ? option : option.slice(0, optEq)).toLowerCase();
+        const optValue = optEq === -1 ? '' : option.slice(optEq + 1);
+        switch (optKey) {
+            case 'max-age':
+                cookieOptions.maxAge = parseInt(optValue, 10);
+                break;
+            case 'expires':
+                cookieOptions.expires = new Date(optValue);
+                break;
+            case 'httponly':
+                cookieOptions.httpOnly = true;
+                break;
+            case 'secure':
+                cookieOptions.secure = true;
+                break;
+            case 'samesite':
+                cookieOptions.sameSite = optValue;
+                break;
+            case 'path':
+                cookieOptions.path = optValue;
+                break;
+            case 'domain':
+                cookieOptions.domain = optValue;
+                break;
+        }
+    });
+    moroResponse.cookie(name, cookieValue, cookieOptions);
+}
 /**
  * Convert Auth.js Web API Response to MoroJS response
  */
 async function fromWebResponse(webResponse, moroResponse) {
     // Set status
     moroResponse.status(webResponse.status);
-    // Set headers
+    // Set-Cookie is multi-valued and MUST be read via getSetCookie(): the Fetch
+    // Headers.forEach() folds multiple Set-Cookie headers into a single
+    // comma-joined string, and splitting that on ', ' corrupts any cookie whose
+    // Expires attribute contains a comma ("Expires=Wed, 21 Oct 2025 ..."),
+    // silently dropping or garbling auth cookies.
+    const getSetCookie = webResponse.headers.getSetCookie;
+    const setCookies = typeof getSetCookie === 'function' ? getSetCookie.call(webResponse.headers) : [];
+    for (const cookie of setCookies) {
+        applySetCookie(moroResponse, cookie);
+    }
+    // Set remaining headers
     webResponse.headers.forEach((value, key) => {
-        if (key.toLowerCase() === 'set-cookie') {
-            // Handle cookies specially for MoroJS
-            const cookies = value.split(', ');
-            cookies.forEach(cookie => {
-                const [nameValue, ...options] = cookie.split('; ');
-                const [name, cookieValue] = nameValue.split('=');
-                // Parse cookie options
-                const cookieOptions = {};
-                options.forEach(option => {
-                    const [optKey, optValue] = option.split('=');
-                    switch (optKey.toLowerCase()) {
-                        case 'max-age':
-                            cookieOptions.maxAge = parseInt(optValue, 10);
-                            break;
-                        case 'expires':
-                            cookieOptions.expires = new Date(optValue);
-                            break;
-                        case 'httponly':
-                            cookieOptions.httpOnly = true;
-                            break;
-                        case 'secure':
-                            cookieOptions.secure = true;
-                            break;
-                        case 'samesite':
-                            cookieOptions.sameSite = optValue;
-                            break;
-                        case 'path':
-                            cookieOptions.path = optValue;
-                            break;
-                        case 'domain':
-                            cookieOptions.domain = optValue;
-                            break;
-                    }
-                });
-                moroResponse.cookie(name, cookieValue, cookieOptions);
-            });
+        const lower = key.toLowerCase();
+        if (lower === 'set-cookie') {
+            // Handled above via getSetCookie(). Fallback for legacy runtimes without
+            // it: apply the (best-effort) folded value as a single cookie.
+            if (setCookies.length === 0 && value)
+                applySetCookie(moroResponse, value);
+            return;
         }
-        else if (key.toLowerCase() === 'location') {
+        if (lower === 'location') {
             // Handle redirects
             moroResponse.redirect(value);
             return;
         }
-        else {
-            moroResponse.setHeader(key, value);
-        }
+        moroResponse.setHeader(key, value);
     });
     // Handle response body
     const contentType = webResponse.headers.get('content-type');
@@ -172,12 +195,39 @@ export async function MoroJSAuth(config) {
             };
         }
     }
+    // Resolve the auth secret. Never fall back to an empty string: an empty
+    // secret disables the signing/encryption Better Auth relies on. Fail fast in
+    // production, and warn-plus-generate elsewhere (matching the built-in auth
+    // middleware's behavior).
+    const secret = config.secret ||
+        process.env.AUTH_SECRET ||
+        (() => {
+            if (process.env.NODE_ENV === 'production') {
+                throw new Error('[MoroJS Security] No auth secret configured. Set config.secret or the AUTH_SECRET environment variable before starting in production.');
+            }
+            const generated = randomBytes(32).toString('hex');
+            logger.warn('[MoroJS Security] No auth secret configured. A random secret was generated — sessions will NOT survive restarts. Set config.secret or AUTH_SECRET for production use.', 'AuthAdapter');
+            return generated;
+        })();
+    const baseURL = config.baseURL || process.env.BASE_URL || process.env.AUTH_URL || 'http://localhost:3000';
+    // Default trustedOrigins to the app's own origin instead of a wildcard.
+    // trustedOrigins is Better Auth's origin/CSRF defense for state-changing auth
+    // routes and its callback/redirect-URL allowlist; ['*'] trusts every origin.
+    // Users can override or extend it via config.trustedOrigins.
+    let defaultOrigin;
+    try {
+        defaultOrigin = new URL(baseURL).origin;
+    }
+    catch {
+        defaultOrigin = baseURL;
+    }
+    const trustedOrigins = config.trustedOrigins ?? [defaultOrigin];
     // Initialize Better Auth
     const betterAuthInstance = betterAuth({
-        secret: config.secret || process.env.AUTH_SECRET || '',
-        baseURL: process.env.BASE_URL || process.env.AUTH_URL || 'http://localhost:3000',
+        secret,
+        baseURL,
         basePath,
-        trustedOrigins: ['*'],
+        trustedOrigins,
         session: {
             expiresIn: config.session?.maxAge || 30 * 24 * 60 * 60,
             updateAge: config.session?.updateAge || 24 * 60 * 60,

package/dist/core/auth/morojs-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"morojs-adapter.js","sourceRoot":"","sources":["../../../src/core/auth/morojs-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,MAAM,MAAM,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;AAEpD,8CAA8C;AAC9C,IAAI,gBAAgB,GAAQ,IAAI,CAAC;AAEjC;;;GAGG;AACH,KAAK,UAAU,cAAc;IAC3B,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACzD,gBAAgB,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,sDAAsD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AA8ED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAkB,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAE7D,qBAAqB;IACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,UAAU,EAAE,CAAC;oBACf,YAAY,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,GAAG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7D,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;QAC3B,OAAO;QACP,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,WAAqB,EAAE,YAA4B;IAChF,aAAa;IACb,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAExC,cAAc;IACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;YACvC,sCAAsC;YACtC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gBACvB,MAAM,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEjD,uBAAuB;gBACvB,MAAM,aAAa,GAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;oBACvB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC7C,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;wBAC7B,KAAK,SAAS;4BACZ,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;4BAC9C,MAAM;wBACR,KAAK,SAAS;4BACZ,aAAa,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;4BAC3C,MAAM;wBACR,KAAK,UAAU;4BACb,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;4BAC9B,MAAM;wBACR,KAAK,QAAQ;4BACX,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;4BAC5B,MAAM;wBACR,KAAK,UAAU;4BACb,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;4BAClC,MAAM;wBACR,KAAK,MAAM;4BACT,aAAa,CAAC,IAAI,GAAG,QAAQ,CAAC;4BAC9B,MAAM;wBACR,KAAK,QAAQ;4BACX,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC;4BAChC,MAAM;oBACV,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAC5C,mBAAmB;YACnB,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE5D,IAAI,WAAW,CAAC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1D,mCAAmC;QACnC,OAAO;IACT,CAAC;SAAM,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAwB;IAIvD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAEhD,wBAAwB;IACxB,MAAM,gBAAgB,GAAG,MAAM,cAAc,EAAE,CAAC;IAChD,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC;IAExC,0CAA0C;IAC1C,MAAM,eAAe,GAAwB,EAAE,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3E,eAAe,CAAC,MAAM,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAClF,eAAe,CAAC,MAAM,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACnF,eAAe,CAAC,OAAO,GAAG;gBACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,kBAAkB,GAAG,UAAU,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;QACtD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,uBAAuB;QAChF,QAAQ;QACR,cAAc,EAAE,CAAC,GAAG,CAAC;QACrB,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACtD,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;SACrD;QACD,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO;QACL;;WAEG;QACH,OAAO,EAAE,KAAK,EAAE,GAAkB,EAAE,GAAmB,EAAE,EAAE;YACzD,IAAI,CAAC;gBACH,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAE/C,wCAAwC;gBACxC,IAAI,kBAAkB,GAAG,UAAU,CAAC;gBACpC,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;oBACzC,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACtE,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;gBAE1E,yCAAyC;gBACzC,IAAI,aAAa,GAAG,YAAY,CAAC;gBACjC,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;oBAC1C,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACpE,CAAC;gBAED,8CAA8C;gBAC9C,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,aAAa,EAAE;oBACjD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,0DAA0D;gBAC1D,IAAI,OAAQ,GAAW,CAAC,MAAM,KAAK,UAAU,IAAI,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxF,GAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC5B,KAAK,EAAE,uBAAuB;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;qBAClF,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,6CAA6C;oBAC5C,GAAW,CAAC,UAAU,GAAG,GAAG,CAAC;oBAC7B,GAAW,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAC1D,GAAW,CAAC,GAAG,CACd,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,uBAAuB;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;qBAClF,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED;;WAEG;QACH,IAAI,EAAE,KAAK,EAAE,GAAkB,EAA2B,EAAE;YAC1D,IAAI,CAAC;gBACH,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAE/C,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;oBACtD,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;oBAClB,OAAO;wBACL,IAAI,EAAE;4BACJ,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;4BACnB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;4BAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;4BACjC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;yBAClC;wBACD,OAAO,EAAE,IAAI,IAAI,CACf,OAAO,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACpE,CAAC,WAAW,EAAE;qBAChB,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;oBACzB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,aAAa,EAAE;wBACzD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAwB;IAC3D,MAAM,CAAC,IAAI,CAAC,4DAA4D,EAAE,aAAa,CAAC,CAAC;IACzF,kDAAkD;IAClD,OAAO,KAAK,EAAE,GAAQ,EAAE,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,aAAa,EAAE;YACjD,OAAO,EAAE,OAAO,GAAG;YACnB,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI;SACrC,CAAC,CAAC;QAEH,iDAAiD;QACjD,MAAM,KAAK,GACR,GAAW,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,IAAK,GAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAEhG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,WAAW,CAAC;QAEtD,wBAAwB;QACxB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;YAC7C,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAE3E,IAAI,CAAC;gBACH,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAE7C,6BAA6B;gBAC7B,GAAG,CAAC,IAAI,GAAG;oBACT,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;oBAC3B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI;oBAEhC,iBAAiB;oBACjB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;oBAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI;oBAEpC,gDAAgD;oBAChD,MAAM,EAAE,CAAC,QAAiB,EAAE,OAAa,EAAE,EAAE;wBAC3C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;wBACrC,IAAI,QAAQ;4BAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;wBAC/C,IAAI,OAAO,EAAE,WAAW;4BAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;wBAEzE,MAAM,SAAS,GAAG,GAAG,QAAQ,UAAU,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GACnE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAChD,EAAE,CAAC;wBAEH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;oBAC5B,CAAC;oBAED,OAAO,EAAE,CAAC,OAAa,EAAE,EAAE;wBACzB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;wBACrC,IAAI,OAAO,EAAE,WAAW;4BAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;wBAEzE,MAAM,UAAU,GAAG,GAAG,QAAQ,WAC5B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAChD,EAAE,CAAC;wBAEH,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;oBAC7B,CAAC;iBACF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,aAAa,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,EAAE;oBAC1D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,aAAa,CAAC,CAAC;IAC/E,CAAC,CAAC;AACJ,CAAC;AAED,yDAAyD;AAEzD;;GAEG;AACH,eAAe,UAAU,CAAC"}
+{"version":3,"file":"morojs-adapter.js","sourceRoot":"","sources":["../../../src/core/auth/morojs-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,MAAM,MAAM,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;AAEpD,8CAA8C;AAC9C,IAAI,gBAAgB,GAAQ,IAAI,CAAC;AAEjC;;;GAGG;AACH,KAAK,UAAU,cAAc;IAC3B,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACzD,gBAAgB,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,sDAAsD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AA8ED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAkB,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAE7D,qBAAqB;IACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,UAAU,EAAE,CAAC;oBACf,YAAY,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,GAAG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7D,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;QAC3B,OAAO;QACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,YAA4B,EAAE,MAAc;IAClE,MAAM,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IACpC,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO;IACpB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE5C,MAAM,aAAa,GAAQ,EAAE,CAAC;IAC9B,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS;gBACZ,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,SAAS;gBACZ,aAAa,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3C,MAAM;YACR,KAAK,UAAU;gBACb,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC9B,MAAM;YACR,KAAK,QAAQ;gBACX,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAClC,MAAM;YACR,KAAK,MAAM;gBACT,aAAa,CAAC,IAAI,GAAG,QAAQ,CAAC;gBAC9B,MAAM;YACR,KAAK,QAAQ;gBACX,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAChC,MAAM;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,WAAqB,EAAE,YAA4B;IAChF,aAAa;IACb,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAExC,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,uEAAuE;IACvE,8CAA8C;IAC9C,MAAM,YAAY,GAAI,WAAW,CAAC,OAAe,CAAC,YAAY,CAAC;IAC/D,MAAM,UAAU,GACd,OAAO,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,wBAAwB;IACxB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,yEAAyE;YACzE,+DAA+D;YAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK;gBAAE,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,mBAAmB;YACnB,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE5D,IAAI,WAAW,CAAC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1D,mCAAmC;QACnC,OAAO;IACT,CAAC;SAAM,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAwB;IAIvD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAEhD,wBAAwB;IACxB,MAAM,gBAAgB,GAAG,MAAM,cAAc,EAAE,CAAC;IAChD,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC;IAExC,0CAA0C;IAC1C,MAAM,eAAe,GAAwB,EAAE,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3E,eAAe,CAAC,MAAM,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAClF,eAAe,CAAC,MAAM,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACnF,eAAe,CAAC,OAAO,GAAG;gBACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,0BAA0B;IAC1B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM;QACb,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,CAAC,GAAG,EAAE;YACJ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,uIAAuI,CACxI,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CACT,uKAAuK,EACvK,aAAa,CACd,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,uBAAuB,CAAC;IAE5F,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,6DAA6D;IAC7D,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,OAAO,CAAC;IAC1B,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,aAAa,CAAC,CAAC;IAEhE,yBAAyB;IACzB,MAAM,kBAAkB,GAAG,UAAU,CAAC;QACpC,MAAM;QACN,OAAO;QACP,QAAQ;QACR,cAAc;QACd,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACtD,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;SACrD;QACD,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO;QACL;;WAEG;QACH,OAAO,EAAE,KAAK,EAAE,GAAkB,EAAE,GAAmB,EAAE,EAAE;YACzD,IAAI,CAAC;gBACH,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAE/C,wCAAwC;gBACxC,IAAI,kBAAkB,GAAG,UAAU,CAAC;gBACpC,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;oBACzC,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACtE,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;gBAE1E,yCAAyC;gBACzC,IAAI,aAAa,GAAG,YAAY,CAAC;gBACjC,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;oBAC1C,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACpE,CAAC;gBAED,8CAA8C;gBAC9C,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,aAAa,EAAE;oBACjD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,0DAA0D;gBAC1D,IAAI,OAAQ,GAAW,CAAC,MAAM,KAAK,UAAU,IAAI,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxF,GAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC5B,KAAK,EAAE,uBAAuB;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;qBAClF,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,6CAA6C;oBAC5C,GAAW,CAAC,UAAU,GAAG,GAAG,CAAC;oBAC7B,GAAW,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAC1D,GAAW,CAAC,GAAG,CACd,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,uBAAuB;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;qBAClF,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED;;WAEG;QACH,IAAI,EAAE,KAAK,EAAE,GAAkB,EAA2B,EAAE;YAC1D,IAAI,CAAC;gBACH,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAE/C,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;oBACtD,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;oBAClB,OAAO;wBACL,IAAI,EAAE;4BACJ,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;4BACnB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;4BAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;4BACjC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;yBAClC;wBACD,OAAO,EAAE,IAAI,IAAI,CACf,OAAO,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACpE,CAAC,WAAW,EAAE;qBAChB,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;oBACzB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,aAAa,EAAE;wBACzD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAwB;IAC3D,MAAM,CAAC,IAAI,CAAC,4DAA4D,EAAE,aAAa,CAAC,CAAC;IACzF,kDAAkD;IAClD,OAAO,KAAK,EAAE,GAAQ,EAAE,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,aAAa,EAAE;YACjD,OAAO,EAAE,OAAO,GAAG;YACnB,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI;SACrC,CAAC,CAAC;QAEH,iDAAiD;QACjD,MAAM,KAAK,GACR,GAAW,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,IAAK,GAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAEhG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,WAAW,CAAC;QAEtD,wBAAwB;QACxB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;YAC7C,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAE3E,IAAI,CAAC;gBACH,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAE7C,6BAA6B;gBAC7B,GAAG,CAAC,IAAI,GAAG;oBACT,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;oBAC3B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI;oBAEhC,iBAAiB;oBACjB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;oBAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI;oBAEpC,gDAAgD;oBAChD,MAAM,EAAE,CAAC,QAAiB,EAAE,OAAa,EAAE,EAAE;wBAC3C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;wBACrC,IAAI,QAAQ;4BAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;wBAC/C,IAAI,OAAO,EAAE,WAAW;4BAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;wBAEzE,MAAM,SAAS,GAAG,GAAG,QAAQ,UAAU,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GACnE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAChD,EAAE,CAAC;wBAEH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;oBAC5B,CAAC;oBAED,OAAO,EAAE,CAAC,OAAa,EAAE,EAAE;wBACzB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;wBACrC,IAAI,OAAO,EAAE,WAAW;4BAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;wBAEzE,MAAM,UAAU,GAAG,GAAG,QAAQ,WAC5B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAChD,EAAE,CAAC;wBAEH,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;oBAC7B,CAAC;iBACF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,aAAa,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,EAAE;oBAC1D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,aAAa,CAAC,CAAC;IAC/E,CAAC,CAAC;AACJ,CAAC;AAED,yDAAyD;AAEzD;;GAEG;AACH,eAAe,UAAU,CAAC","sourcesContent":["/**\n * Better Auth Adapter for MoroJS\n *\n * This adapter allows Better Auth to work seamlessly with MoroJS framework.\n * Maintains compatibility with the original Auth.js API.\n *\n * @see https://better-auth.com/\n */\n\nimport { randomBytes } from 'crypto';\nimport { createFrameworkLogger } from '../logger/index.js';\nimport { resolveUserPackage } from '../utilities/package-utils.js';\n\nconst logger = createFrameworkLogger('AuthAdapter');\n\n// Lazy load Better Auth (optional dependency)\nlet betterAuthModule: any = null;\n\n/**\n * Dynamically load Better Auth from user's node_modules\n * This ensures it's only required when actually used\n */\nasync function loadBetterAuth() {\n  if (betterAuthModule) {\n    return betterAuthModule;\n  }\n\n  try {\n    const betterAuthPath = resolveUserPackage('better-auth');\n    betterAuthModule = await import(betterAuthPath);\n    return betterAuthModule;\n  } catch {\n    throw new Error(\n      'Better Auth package not found. Install it with: npm install better-auth\\n' +\n        'See: https://better-auth.com/ for setup instructions'\n    );\n  }\n}\n\n// Auth types (compatible with Auth.js)\nexport interface AuthConfig {\n  providers: any[];\n  secret?: string;\n  session?: any;\n  callbacks?: any;\n  events?: any;\n  pages?: any;\n  adapter?: any;\n  debug?: boolean;\n  basePath?: string;\n  [key: string]: any;\n}\n\nexport interface Session {\n  user: {\n    id: string;\n    name?: string | null;\n    email?: string | null;\n    image?: string | null;\n    [key: string]: any;\n  };\n  expires: string;\n  [key: string]: any;\n}\n\nexport type AuthAction = 'signin' | 'signout' | 'callback' | 'session' | 'providers' | 'csrf';\n\n// MoroJS-specific types\nexport interface MoroJSAuthConfig extends Omit<AuthConfig, 'raw'> {\n  /**\n   * Base path for auth routes in MoroJS\n   * @default \"/api/auth\"\n   */\n  basePath?: string;\n\n  /**\n   * MoroJS-specific options\n   */\n  morojs?: {\n    /**\n     * Enable MoroJS-specific logging\n     * @default false\n     */\n    debug?: boolean;\n\n    /**\n     * Custom request/response transformers\n     */\n    transformers?: {\n      request?: (req: any) => any;\n      response?: (res: any) => any;\n    };\n  };\n}\n\nexport interface MoroJSRequest {\n  url?: string;\n  method?: string;\n  headers?: Record<string, string>;\n  body?: any;\n  query?: Record<string, string>;\n  cookies?: Record<string, string>;\n}\n\nexport interface MoroJSResponse {\n  status(code: number): MoroJSResponse;\n  json(data: any): Promise<void>;\n  redirect(url: string): void;\n  setHeader(name: string, value: string): void;\n  cookie(name: string, value: string, options?: any): void;\n  send(data: any): void;\n  end(data?: any): void;\n  headersSent: boolean;\n}\n\n/**\n * Convert MoroJS request to Auth.js Web API Request\n */\nfunction toWebRequest(req: MoroJSRequest, basePath: string): Request {\n  const url = new URL(req.url || '/', 'http://localhost:3000');\n\n  // Handle auth routes\n  if (url.pathname.startsWith(basePath)) {\n    url.pathname = url.pathname.replace(basePath, '');\n  }\n\n  const headers = new Headers();\n  if (req.headers) {\n    Object.entries(req.headers).forEach(([key, value]) => {\n      headers.set(key, value);\n    });\n  }\n\n  // Add cookies to headers if not present - check first key instead of length\n  if (req.cookies) {\n    let hasCookies = false;\n    let cookieHeader = '';\n    for (const name in req.cookies) {\n      if (Object.prototype.hasOwnProperty.call(req.cookies, name)) {\n        if (hasCookies) {\n          cookieHeader += `; ${name}=${req.cookies[name]}`;\n        } else {\n          cookieHeader = `${name}=${req.cookies[name]}`;\n          hasCookies = true;\n        }\n      }\n    }\n\n    if (hasCookies && !headers.has('cookie')) {\n      headers.set('cookie', cookieHeader);\n    }\n  }\n\n  const body = req.body ? JSON.stringify(req.body) : undefined;\n\n  return new Request(url.toString(), {\n    method: req.method || 'GET',\n    headers,\n    ...(body !== undefined ? { body } : {}),\n  });\n}\n\n/**\n * Parse a single Set-Cookie header value and apply it to the MoroJS response.\n */\nfunction applySetCookie(moroResponse: MoroJSResponse, cookie: string): void {\n  const [nameValue, ...options] = cookie.split('; ');\n  if (nameValue === undefined) return;\n  const eq = nameValue.indexOf('=');\n  if (eq <= 0) return;\n  const name = nameValue.slice(0, eq);\n  const cookieValue = nameValue.slice(eq + 1);\n\n  const cookieOptions: any = {};\n  options.forEach(option => {\n    const optEq = option.indexOf('=');\n    const optKey = (optEq === -1 ? option : option.slice(0, optEq)).toLowerCase();\n    const optValue = optEq === -1 ? '' : option.slice(optEq + 1);\n    switch (optKey) {\n      case 'max-age':\n        cookieOptions.maxAge = parseInt(optValue, 10);\n        break;\n      case 'expires':\n        cookieOptions.expires = new Date(optValue);\n        break;\n      case 'httponly':\n        cookieOptions.httpOnly = true;\n        break;\n      case 'secure':\n        cookieOptions.secure = true;\n        break;\n      case 'samesite':\n        cookieOptions.sameSite = optValue;\n        break;\n      case 'path':\n        cookieOptions.path = optValue;\n        break;\n      case 'domain':\n        cookieOptions.domain = optValue;\n        break;\n    }\n  });\n\n  moroResponse.cookie(name, cookieValue, cookieOptions);\n}\n\n/**\n * Convert Auth.js Web API Response to MoroJS response\n */\nasync function fromWebResponse(webResponse: Response, moroResponse: MoroJSResponse): Promise<void> {\n  // Set status\n  moroResponse.status(webResponse.status);\n\n  // Set-Cookie is multi-valued and MUST be read via getSetCookie(): the Fetch\n  // Headers.forEach() folds multiple Set-Cookie headers into a single\n  // comma-joined string, and splitting that on ', ' corrupts any cookie whose\n  // Expires attribute contains a comma (\"Expires=Wed, 21 Oct 2025 ...\"),\n  // silently dropping or garbling auth cookies.\n  const getSetCookie = (webResponse.headers as any).getSetCookie;\n  const setCookies: string[] =\n    typeof getSetCookie === 'function' ? getSetCookie.call(webResponse.headers) : [];\n  for (const cookie of setCookies) {\n    applySetCookie(moroResponse, cookie);\n  }\n\n  // Set remaining headers\n  webResponse.headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (lower === 'set-cookie') {\n      // Handled above via getSetCookie(). Fallback for legacy runtimes without\n      // it: apply the (best-effort) folded value as a single cookie.\n      if (setCookies.length === 0 && value) applySetCookie(moroResponse, value);\n      return;\n    }\n    if (lower === 'location') {\n      // Handle redirects\n      moroResponse.redirect(value);\n      return;\n    }\n    moroResponse.setHeader(key, value);\n  });\n\n  // Handle response body\n  const contentType = webResponse.headers.get('content-type');\n\n  if (webResponse.status >= 300 && webResponse.status < 400) {\n    // Redirect - already handled above\n    return;\n  } else if (contentType?.includes('application/json')) {\n    const data = await webResponse.json();\n    await moroResponse.json(data);\n  } else {\n    const text = await webResponse.text();\n    moroResponse.send(text);\n  }\n}\n\n/**\n * Main MoroJS Better Auth handler\n *\n * This is the core function that integrates Better Auth with MoroJS\n * Maintains API compatibility with the original Auth.js implementation\n */\nexport async function MoroJSAuth(config: MoroJSAuthConfig): Promise<{\n  handler: (req: MoroJSRequest, res: MoroJSResponse) => Promise<void>;\n  auth: (req: MoroJSRequest) => Promise<Session | null>;\n}> {\n  const basePath = config.basePath || '/api/auth';\n\n  // Lazy load Better Auth\n  const betterAuthModule = await loadBetterAuth();\n  const { betterAuth } = betterAuthModule;\n\n  // Convert providers to Better Auth format\n  const socialProviders: Record<string, any> = {};\n  for (const provider of config.providers || []) {\n    if (provider.id === 'google' && provider.clientId && provider.clientSecret) {\n      socialProviders.google = {\n        clientId: provider.clientId,\n        clientSecret: provider.clientSecret,\n      };\n    } else if (provider.id === 'github' && provider.clientId && provider.clientSecret) {\n      socialProviders.github = {\n        clientId: provider.clientId,\n        clientSecret: provider.clientSecret,\n      };\n    } else if (provider.id === 'discord' && provider.clientId && provider.clientSecret) {\n      socialProviders.discord = {\n        clientId: provider.clientId,\n        clientSecret: provider.clientSecret,\n      };\n    }\n  }\n\n  // Resolve the auth secret. Never fall back to an empty string: an empty\n  // secret disables the signing/encryption Better Auth relies on. Fail fast in\n  // production, and warn-plus-generate elsewhere (matching the built-in auth\n  // middleware's behavior).\n  const secret =\n    config.secret ||\n    process.env.AUTH_SECRET ||\n    (() => {\n      if (process.env.NODE_ENV === 'production') {\n        throw new Error(\n          '[MoroJS Security] No auth secret configured. Set config.secret or the AUTH_SECRET environment variable before starting in production.'\n        );\n      }\n      const generated = randomBytes(32).toString('hex');\n      logger.warn(\n        '[MoroJS Security] No auth secret configured. A random secret was generated — sessions will NOT survive restarts. Set config.secret or AUTH_SECRET for production use.',\n        'AuthAdapter'\n      );\n      return generated;\n    })();\n\n  const baseURL =\n    config.baseURL || process.env.BASE_URL || process.env.AUTH_URL || 'http://localhost:3000';\n\n  // Default trustedOrigins to the app's own origin instead of a wildcard.\n  // trustedOrigins is Better Auth's origin/CSRF defense for state-changing auth\n  // routes and its callback/redirect-URL allowlist; ['*'] trusts every origin.\n  // Users can override or extend it via config.trustedOrigins.\n  let defaultOrigin: string;\n  try {\n    defaultOrigin = new URL(baseURL).origin;\n  } catch {\n    defaultOrigin = baseURL;\n  }\n  const trustedOrigins = config.trustedOrigins ?? [defaultOrigin];\n\n  // Initialize Better Auth\n  const betterAuthInstance = betterAuth({\n    secret,\n    baseURL,\n    basePath,\n    trustedOrigins,\n    session: {\n      expiresIn: config.session?.maxAge || 30 * 24 * 60 * 60,\n      updateAge: config.session?.updateAge || 24 * 60 * 60,\n    },\n    socialProviders,\n  });\n\n  return {\n    /**\n     * Main request handler for auth routes\n     */\n    handler: async (req: MoroJSRequest, res: MoroJSResponse) => {\n      try {\n        // Convert MoroJS request to Web API request\n        const webRequest = toWebRequest(req, basePath);\n\n        // Apply request transformer if provided\n        let transformedRequest = webRequest;\n        if (config.morojs?.transformers?.request) {\n          transformedRequest = config.morojs.transformers.request(webRequest);\n        }\n\n        // Call Better Auth handler\n        const authResponse = await betterAuthInstance.handler(transformedRequest);\n\n        // Apply response transformer if provided\n        let finalResponse = authResponse;\n        if (config.morojs?.transformers?.response) {\n          finalResponse = config.morojs.transformers.response(authResponse);\n        }\n\n        // Convert Web API response to MoroJS response\n        await fromWebResponse(finalResponse, res);\n      } catch (error) {\n        logger.error('[MoroJS Auth] Error', 'AuthAdapter', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n        // Robust error handling - check if response methods exist\n        if (typeof (res as any).status === 'function' && typeof (res as any).json === 'function') {\n          (res as any).status(500).json({\n            error: 'Internal server error',\n            message: config.morojs?.debug ? (error as Error).message : 'Authentication error',\n          });\n        } else {\n          // Fallback to basic Node.js response methods\n          (res as any).statusCode = 500;\n          (res as any).setHeader('Content-Type', 'application/json');\n          (res as any).end(\n            JSON.stringify({\n              error: 'Internal server error',\n              message: config.morojs?.debug ? (error as Error).message : 'Authentication error',\n            })\n          );\n        }\n      }\n    },\n\n    /**\n     * Get session for the current request\n     */\n    auth: async (req: MoroJSRequest): Promise<Session | null> => {\n      try {\n        // Convert MoroJS request to Web API request\n        const webRequest = toWebRequest(req, basePath);\n\n        // Get session from Better Auth\n        const session = await betterAuthInstance.api.getSession({\n          headers: webRequest.headers,\n        });\n\n        if (session?.user) {\n          return {\n            user: {\n              id: session.user.id,\n              name: session.user.name || null,\n              email: session.user.email || null,\n              image: session.user.image || null,\n            },\n            expires: new Date(\n              session.session?.expiresAt || Date.now() + 30 * 24 * 60 * 60 * 1000\n            ).toISOString(),\n          };\n        }\n\n        return null;\n      } catch (error) {\n        if (config.morojs?.debug) {\n          logger.error('[MoroJS Auth] Session error', 'AuthAdapter', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n        return null;\n      }\n    },\n  };\n}\n\n/**\n * MoroJS Auth middleware factory\n *\n * This creates a MoroJS-compatible middleware for authentication\n * Uses Better Auth internally while maintaining the same API\n */\nexport function createAuthMiddleware(config: MoroJSAuthConfig) {\n  logger.info('createAuthMiddleware called - creating middleware function', 'AuthAdapter');\n  // Return a function that MoroJS can call directly\n  return async (app: any) => {\n    logger.info('Installing Better Auth middleware...', 'AuthAdapter');\n    logger.debug('App object received', 'AuthAdapter', {\n      appType: typeof app,\n      appConstructor: app.constructor.name,\n    });\n\n    // Get the hooks from the app's middleware system\n    const hooks =\n      (app as any).coreFramework?.middlewareManager?.hooks || (app as any).middlewareManager?.hooks;\n\n    if (!hooks) {\n      logger.error('Could not access MoroJS hooks system', 'AuthAdapter');\n      return;\n    }\n\n    const options = {};\n    const mergedConfig = { ...config, ...options };\n    const authHandlers = await MoroJSAuth(mergedConfig);\n    const basePath = mergedConfig.basePath || '/api/auth';\n\n    // Register request hook\n    hooks.before('request', async (context: any) => {\n      logger.debug('Native adapter hook starting', 'AuthAdapter');\n      const req = context.request;\n      logger.debug('Request path', 'AuthAdapter', { path: req.path || req.url });\n\n      try {\n        // Get session from Better Auth\n        const session = await authHandlers.auth(req);\n\n        // Add auth object to request\n        req.auth = {\n          session: session,\n          user: session?.user || null,\n          isAuthenticated: !!session?.user,\n\n          // Helper methods\n          getSession: async () => session,\n          getUser: () => session?.user || null,\n\n          // Sign in/out helpers (redirect to auth routes)\n          signIn: (provider?: string, options?: any) => {\n            const params = new URLSearchParams();\n            if (provider) params.set('provider', provider);\n            if (options?.callbackUrl) params.set('callbackUrl', options.callbackUrl);\n\n            const signInUrl = `${basePath}/signin${provider ? `/${provider}` : ''}${\n              params.toString() ? `?${params.toString()}` : ''\n            }`;\n\n            return { url: signInUrl };\n          },\n\n          signOut: (options?: any) => {\n            const params = new URLSearchParams();\n            if (options?.callbackUrl) params.set('callbackUrl', options.callbackUrl);\n\n            const signOutUrl = `${basePath}/signout${\n              params.toString() ? `?${params.toString()}` : ''\n            }`;\n\n            return { url: signOutUrl };\n          },\n        };\n        logger.debug('Native adapter hook completed successfully', 'AuthAdapter');\n      } catch (error) {\n        logger.error('Error in native adapter hook', 'AuthAdapter', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n        throw error;\n      }\n    });\n\n    logger.info('Better Auth middleware installed successfully!', 'AuthAdapter');\n  };\n}\n\n// Types are already exported above, no need to re-export\n\n/**\n * Default export for convenience\n */\nexport default MoroJSAuth;\n"]}

package/dist/core/config/config-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../../src/core/config/config-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;AAEtD;;GAEG;AACH,IAAI,YAAY,GAA+B,IAAI,CAAC;AACpD,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,GAAG,IAAI,CAAC;IAEhB,MAAM,CAAC,IAAI,CACT,yCAAyC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACvG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,IAAI,YAAY,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAC/B,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACpC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4DAA4D;YAC1D,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,YAAY,GAAG,IAAI,CAAC;IACpB,QAAQ,GAAG,KAAK,CAAC;IACjB,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAI,GAAM;IAC3B,qBAAqB;IACrB,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAElD,yCAAyC;IACzC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAI,GAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAU,IAAY;IAClD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,GAAW,EAAE,EAAE;QACtD,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../../src/core/config/config-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;AAEtD;;GAEG;AACH,IAAI,YAAY,GAA+B,IAAI,CAAC;AACpD,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,GAAG,IAAI,CAAC;IAEhB,MAAM,CAAC,IAAI,CACT,yCAAyC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACvG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,IAAI,YAAY,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAC/B,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACpC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4DAA4D;YAC1D,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,YAAY,GAAG,IAAI,CAAC;IACpB,QAAQ,GAAG,KAAK,CAAC;IACjB,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAI,GAAM;IAC3B,qBAAqB;IACrB,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAElD,yCAAyC;IACzC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAI,GAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAU,IAAY;IAClD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,GAAW,EAAE,EAAE;QACtD,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC;AAC5C,CAAC","sourcesContent":["/**\n * Configuration Manager - Immutable Single Source of Truth\n *\n * This module provides centralized, immutable configuration state management.\n * Configuration is locked at createApp() initialization and cannot be changed afterward.\n *\n * Precedence: Environment Variables > createApp Options > Config File > Defaults\n */\n\nimport { AppConfig } from '../../types/config.js';\nimport { createFrameworkLogger } from '../logger/index.js';\n\nconst logger = createFrameworkLogger('ConfigManager');\n\n/**\n * Global configuration state - immutable after initialization\n */\nlet globalConfig: Readonly<AppConfig> | null = null;\nlet isLocked = false;\n\n/**\n * Initialize and lock global configuration state\n * This should only be called once during createApp() initialization\n */\nexport function initializeAndLockConfig(config: AppConfig): void {\n  if (isLocked) {\n    throw new Error(\n      'Configuration is already locked and cannot be changed. ' +\n        'Configuration can only be set once during createApp() initialization.'\n    );\n  }\n\n  // Deep freeze the configuration to make it truly immutable\n  globalConfig = deepFreeze(config);\n  isLocked = true;\n\n  logger.info(\n    `Configuration locked and initialized: ${process.env.NODE_ENV || 'development'}:${config.server.port}`\n  );\n}\n\n/**\n * Get the current global configuration\n * Throws if configuration hasn't been initialized\n */\nexport function getGlobalConfig(): Readonly<AppConfig> {\n  if (!globalConfig || !isLocked) {\n    throw new Error(\n      'Configuration not initialized. Call createApp() to initialize the configuration system.'\n    );\n  }\n  return globalConfig;\n}\n\n/**\n * Check if configuration has been initialized and locked\n */\nexport function isConfigLocked(): boolean {\n  return isLocked && globalConfig !== null;\n}\n\n/**\n * Reset configuration state (for testing only)\n * @internal - This should only be used in tests\n */\nexport function resetConfigForTesting(): void {\n  if (\n    process.env.NODE_ENV !== 'test' &&\n    !process.env.MORO_ALLOW_CONFIG_RESET &&\n    !process.env.JEST_WORKER_ID\n  ) {\n    throw new Error(\n      'Configuration reset is only allowed in test environments. ' +\n        'Set MORO_ALLOW_CONFIG_RESET=true to override this check.'\n    );\n  }\n\n  globalConfig = null;\n  isLocked = false;\n  logger.debug('Configuration state reset for testing');\n}\n\n/**\n * Deep freeze an object to make it truly immutable\n * This prevents any accidental mutations to the configuration\n */\nfunction deepFreeze<T>(obj: T): Readonly<T> {\n  // Get property names\n  const propNames = Object.getOwnPropertyNames(obj);\n\n  // Freeze properties before freezing self\n  for (const name of propNames) {\n    const value = (obj as any)[name];\n\n    if (value && typeof value === 'object') {\n      deepFreeze(value);\n    }\n  }\n\n  return Object.freeze(obj);\n}\n\n/**\n * Get a specific configuration value using dot notation\n * This provides a safe way to access nested config values\n *\n * @example\n * getConfigValue('server.port') // Returns the server port\n * getConfigValue('database.redis.url') // Returns the Redis URL\n */\nexport function getConfigValue<T = any>(path: string): T | undefined {\n  const config = getGlobalConfig();\n\n  return path.split('.').reduce((obj: any, key: string) => {\n    return obj && obj[key] !== undefined ? obj[key] : undefined;\n  }, config);\n}\n\n/**\n * Utility functions for common environment checks\n * These now read NODE_ENV directly for consistency with Node.js ecosystem\n */\nexport function isDevelopment(): boolean {\n  return process.env.NODE_ENV === 'development';\n}\n\nexport function isProduction(): boolean {\n  return process.env.NODE_ENV === 'production';\n}\n\nexport function isStaging(): boolean {\n  return process.env.NODE_ENV === 'staging';\n}\n"]}