@things-factory/shell 10.1.142 → 10.1.147

package/dist-server/introspection-for-signed-in.d.ts

@@ -0,0 +1,14 @@
+import type { ApolloServerPlugin } from '@apollo/server';
+import { type DocumentNode } from 'graphql';
+/**
+ * Schema reading (`__schema`, `__type`) is open to a signed-in user and refused to anyone else
+ * (ADR-0126). `__typename` stays open: client caches ask for it on every query.
+ *
+ * Apollo's `introspection` switch is global, so it stays on and this plugin decides per request.
+ * The development and the production server both use it, so the two follow one rule.
+ *
+ * The request context is the Koa context; a signed-in request carries `state.user`.
+ */
+export declare function introspectionForSignedIn(): ApolloServerPlugin<any>;
+/** Whether a document reads the schema anywhere — in a fragment as much as in the operation. */
+export declare function asksForSchema(document: DocumentNode): boolean;

package/dist-server/introspection-for-signed-in.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.introspectionForSignedIn = introspectionForSignedIn;
+exports.asksForSchema = asksForSchema;
+const graphql_1 = require("graphql");
+/**
+ * Schema reading (`__schema`, `__type`) is open to a signed-in user and refused to anyone else
+ * (ADR-0126). `__typename` stays open: client caches ask for it on every query.
+ *
+ * Apollo's `introspection` switch is global, so it stays on and this plugin decides per request.
+ * The development and the production server both use it, so the two follow one rule.
+ *
+ * The request context is the Koa context; a signed-in request carries `state.user`.
+ */
+function introspectionForSignedIn() {
+    return {
+        async requestDidStart() {
+            return {
+                async didResolveOperation({ contextValue, document }) {
+                    if (contextValue?.state?.user)
+                        return;
+                    if (!asksForSchema(document))
+                        return;
+                    throw new graphql_1.GraphQLError('Sign in to read the schema.', {
+                        extensions: { code: 'UNAUTHENTICATED', http: { status: 401 } }
+                    });
+                }
+            };
+        }
+    };
+}
+/** Whether a document reads the schema anywhere — in a fragment as much as in the operation. */
+function asksForSchema(document) {
+    let asks = false;
+    (0, graphql_1.visit)(document, {
+        Field(node) {
+            if (node.name.value === '__schema' || node.name.value === '__type')
+                asks = true;
+        }
+    });
+    return asks;
+}
+//# sourceMappingURL=introspection-for-signed-in.js.map

package/dist-server/introspection-for-signed-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection-for-signed-in.js","sourceRoot":"","sources":["../server/introspection-for-signed-in.ts"],"names":[],"mappings":";;AAYA,4DAeC;AAGD,sCAUC;AAvCD,qCAAgE;AAEhE;;;;;;;;GAQG;AACH,SAAgB,wBAAwB;IACtC,OAAO;QACL,KAAK,CAAC,eAAe;YACnB,OAAO;gBACL,KAAK,CAAC,mBAAmB,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE;oBAClD,IAAI,YAAY,EAAE,KAAK,EAAE,IAAI;wBAAE,OAAM;oBACrC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;wBAAE,OAAM;oBAEpC,MAAM,IAAI,sBAAY,CAAC,6BAA6B,EAAE;wBACpD,UAAU,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;qBAC/D,CAAC,CAAA;gBACJ,CAAC;aACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,gGAAgG;AAChG,SAAgB,aAAa,CAAC,QAAsB;IAClD,IAAI,IAAI,GAAG,KAAK,CAAA;IAEhB,IAAA,eAAK,EAAC,QAAQ,EAAE;QACd,KAAK,CAAC,IAAI;YACR,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,IAAI,GAAG,IAAI,CAAA;QACjF,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["import type { ApolloServerPlugin } from '@apollo/server'\nimport { GraphQLError, visit, type DocumentNode } from 'graphql'\n\n/**\n * Schema reading (`__schema`, `__type`) is open to a signed-in user and refused to anyone else\n * (ADR-0126). `__typename` stays open: client caches ask for it on every query.\n *\n * Apollo's `introspection` switch is global, so it stays on and this plugin decides per request.\n * The development and the production server both use it, so the two follow one rule.\n *\n * The request context is the Koa context; a signed-in request carries `state.user`.\n */\nexport function introspectionForSignedIn(): ApolloServerPlugin<any> {\n  return {\n    async requestDidStart() {\n      return {\n        async didResolveOperation({ contextValue, document }) {\n          if (contextValue?.state?.user) return\n          if (!asksForSchema(document)) return\n\n          throw new GraphQLError('Sign in to read the schema.', {\n            extensions: { code: 'UNAUTHENTICATED', http: { status: 401 } }\n          })\n        }\n      }\n    }\n  }\n}\n\n/** Whether a document reads the schema anywhere — in a fragment as much as in the operation. */\nexport function asksForSchema(document: DocumentNode): boolean {\n  let asks = false\n\n  visit(document, {\n    Field(node) {\n      if (node.name.value === '__schema' || node.name.value === '__type') asks = true\n    }\n  })\n\n  return asks\n}\n"]}

package/dist-server/server-dev.js

@@ -12,6 +12,7 @@ const server_1 = require("@apollo/server");
 const drainHttpServer_1 = require("@apollo/server/plugin/drainHttpServer");
 const default_1 = require("@apollo/server/plugin/landingPage/default");
 const koa_1 = require("@as-integrations/koa");
+const introspection_for_signed_in_js_1 = require("./introspection-for-signed-in.js");
 const args_1 = tslib_1.__importDefault(require("args"));
 const webpack_dev_middleware_1 = tslib_1.__importDefault(require("webpack-dev-middleware"));
 const bytes_1 = tslib_1.__importDefault(require("bytes"));
@@ -135,6 +136,7 @@ const bootstrap = async () => {
             env_1.logger.error(error);
             return error;
         },
+        /* The same rule as production (ADR-0126): the plugin below refuses schema reads without a user. */
         introspection: true,
         csrfPrevention: true,
         stopOnTerminationSignals: false, // ★ 자동 시그널 핸들러 비활성화
@@ -151,7 +153,7 @@ const bootstrap = async () => {
                     };
                 }
             },
-            // TODO make this landing page work
+            (0, introspection_for_signed_in_js_1.introspectionForSignedIn)(),
             (0, default_1.ApolloServerPluginLandingPageLocalDefault)({
                 footer: false,
                 embed: true,

package/dist-server/server-dev.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-dev.js","sourceRoot":"","sources":["../server/server-dev.ts"],"names":[],"mappings":";AAAA,4BAA4B;;;AAE5B,4DAA4D;AAC5D,oDAAmB;AACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,YAAE,CAAC,oBAAoB,EAAE,CAAC,CAAA;AAElE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;AAEjE,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAA;AACpC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;AAE1B,2CAA6C;AAC7C,2EAAyF;AACzF,uEAAqG;AAErG,8CAAoD;AAEpD,wDAAuB;AACvB,4FAAwC;AACxC,0DAA+B;AAC/B,qGAAiE;AACjE,8CAAiD;AACjD,+BAAmC;AACnC,sDAAqB;AACrB,4EAA0C;AAC1C,sEAAiC;AACjC,yFAAsE;AACtE,2BAAoC;AACpC,oDAAmB;AACnB,wDAAuB;AAEvB,6DAA4B;AAE5B,4DAA2B;AAE3B,6CAAgF;AAChF,qFAAoF;AAEpF,uEAA8D;AAC9D,4DAAgE;AAChE,6DAA+C;AAC/C,iDAM2B;AAC3B,2CAAoC;AAEpC,6EAAqE;AACrE,6DAA+D;AAE/D,IAAA,6CAAwB,GAAE,CAAA;AAE1B,cAAI,CAAC,MAAM,CAAC,MAAM,EAAE,2CAA2C,EAAE,YAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AAC1F,cAAI,CAAC,MAAM,CACT,SAAS,EACT;kGACgG,EAChG,YAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAC/B,CAAA;AACD,cAAI,CAAC,MAAM,CAAC,SAAS,EAAE,4BAA4B,EAAE,YAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;AAE3E,MAAM,KAAK,GAAG,cAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAEtC,8DAA6B;AAC7B,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,IAAI,+CAA+C,CAAA;AAC1F,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAE7F,MAAM,QAAQ,GAAG,IAAA,iBAAO,EAAC,aAAa,CAAC,CAAA;AAEvC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;AAE5C,MAAM,WAAW,GAAG,YAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAA;AAEnD,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAA;AACvC,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;CAC3C,CAAA;AAED,MAAM,UAAU,GAAG,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;AACjD,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,eAAW,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,eAAW,CAAC,KAAK,CAAC,MAAM,CAAC;IACnF,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;CACpC,CAAA;AAaD,IAAA,qCAAW,EAAC,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;AAErC,eAAe;AACf,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;IAC3B,MAAM,IAAA,iCAAmB,GAAE,CAAA;IAE3B,MAAM,GAAG,GAAG,IAAI,aAAG,EAA6C,CAAA;IAChE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAA;IAEhB,GAAG,CAAC,GAAG,CACL,IAAA,cAAI,EAAC;QACH,MAAM,EAAE,UAAU,GAAG;YACnB,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAA;QAC1C,CAAC;QACD,aAAa,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QAC3D,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,IAAI;QACjB,6DAA6D;QAC7D,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;KAC1D,CAAC,CACH,CAAA;IAED,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAE5C,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,YAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAEnD,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAA;QAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,UAAyC,CAAC;aACxE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAA;QAE7C,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,IAAI,sBAAsB,GAAG,EAAE,CAAA;IAC/B,IAAA,6BAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAEtE,MAAM,WAAW,GAAG,MAAM,IAAA,kBAAM,GAAE,CAAA;IAElC,MAAM,UAAU,GAAG,IAAA,mBAAY,EAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC/C,MAAM,eAAe,GAAG,IAAI,oBAAe,CAAC;QAC1C,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IAEF,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAA,cAAS,EAC7B;QACE,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAChC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAA;QACvB,CAAC;QACD,SAAS,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACrB,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAA;YACrC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;YAEvB,IAAI,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;gBACxE,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAA;gBACrF,IAAI,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;gBACtD,IAAI,WAAW,EAAE,CAAC;oBAChB,gBAAgB,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAA;gBAC5D,CAAC;YACH,CAAC;YAED,OAAO,CAAC,OAAO,GAAG;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAK,gBAAwB,CAAC;aAC9D,CAAA;YAED,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,cAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;YACnF,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;YAExB,6EAA6E;YAC7E,IAAI,WAAW,GAAG,CAAC,uCAAgB,EAAE,GAAG,sBAAsB,CAAC,CAAA;YAC/D,MAAM,EAAE,GAAG,YAAE,CAAC,IAAI,CAAC,IAAA,qBAAO,EAAC,WAAW,CAAC,CAAC,CAAA;YAExC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAA;YAEpB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,CAAA;QACtC,CAAC;QACD,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM;YAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM;YACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC;KACF,EACD,eAAe,CAChB,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,qBAAY,CAAC;QAC9B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,KAAK,CAAC,EAAE;YACnB,YAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;QACpB,wBAAwB,EAAE,KAAK,EAAE,oBAAoB;QACrD,OAAO,EAAE;YACP,uCAAuC;YACvC,IAAA,mDAAiC,EAAC,EAAE,UAAU,EAAE,CAAC;YACjD,4CAA4C;YAC5C;gBACE,KAAK,CAAC,eAAe;oBACnB,OAAO;wBACL,KAAK,CAAC,WAAW;4BACf,MAAM,aAAa,CAAC,OAAO,EAAE,CAAA;wBAC/B,CAAC;qBACF,CAAA;gBACH,CAAC;aACF;YACD,mCAAmC;YACnC,IAAA,mDAAyC,EAAC;gBACxC,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,IAAI;gBACX,cAAc,EAAE,IAAI;aACrB,CAAC;SACH;QACD,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IAEpB,4CAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAEzC,wBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAChC,MAAM,GAAG,GAAG,IAAA,YAAM,EAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACpD,MAAM,CAAC,GAAG,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,oBAAoB,IAAI,EAAE;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IAEF,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,EAAE;QACtD,IAAA,6BAAQ,EAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAA;QACxE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,aAAa;IACb,MAAM,cAAc,GAAG,EAAE,CAAA;IACzB,IAAA,6BAAQ,EAAC,kCAAkC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IAClE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAA;IAEnC,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAC3E,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAE3E,GAAG,CAAC,GAAG,CAAC,uCAAa,CAAC,CAAA,CAAC,gEAAgE;IAEvF,GAAG;SACA,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC;SACzC,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC,CAAA;IAE5C,oJAAoJ;IACpJ,GAAG,CAAC,GAAG,CAAC,IAAA,6BAAgB,EAAC,gBAAgB,CAAC,CAAC,CAAA;IAE3C,wBAAa,CAAC,IAAI,CAChB,UAAU,EACV,IAAA,mBAAa,EAAC,MAAM,EAAE;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG;KAChC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/B,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,cAAc,EAAE,CAAC,CAAA;IAEvC,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAAC,IAAA,sDAAkB,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,GAAG,CAAC,GAAG,CACL,gCAAG,CAAC,UAAU,CAAC,QAAQ,EAAE;QACvB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,UAAU;KAC5C,CAAC,CACH,CAAA;IAED,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;QACrC,YAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,UAAU,CAAC,CAAA;QAChE,YAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,UAAU,CAAC,CAAA;QAErE,IAAA,6BAAQ,EAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAN,YAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACxB,YAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAA;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA","sourcesContent":["// ts-import-sorter: disable\n\n/* following 7 lines should be located in top of the file */\nimport OS from 'os'\nprocess.env.UV_THREADPOOL_SIZE = String(OS.availableParallelism())\n\nconsole.log('UV_THREADPOOL_SIZE', process.env.UV_THREADPOOL_SIZE)\n\nprocess.env.NODE_ENV = 'development'\nprocess.setMaxListeners(0)\n\nimport { ApolloServer } from '@apollo/server'\nimport { ApolloServerPluginDrainHttpServer } from '@apollo/server/plugin/drainHttpServer'\nimport { ApolloServerPluginLandingPageLocalDefault } from '@apollo/server/plugin/landingPage/default'\n\nimport { koaMiddleware } from '@as-integrations/koa'\nimport { EntityManager } from 'typeorm'\nimport args from 'args'\nimport wdm from 'webpack-dev-middleware'\nimport bytesFormat from 'bytes'\nimport graphqlUploadKoa from 'graphql-upload/graphqlUploadKoa.js'\nimport { useServer } from 'graphql-ws/lib/use/ws'\nimport { createServer } from 'http'\nimport Koa from 'koa'\nimport koaBodyParser from 'koa-bodyparser'\nimport compose from 'koa-compose'\nimport { historyApiFallback } from 'koa2-connect-history-api-fallback'\nimport { WebSocketServer } from 'ws'\nimport co from 'co'\nimport http from 'http'\n\nimport cors from '@koa/cors'\n\nimport crypto from 'crypto'\n\nimport { config, loader, logger, orderedModuleNames } from '@things-factory/env'\nimport { initLicense, checkValidity } from '@things-factory/operato-license-checker'\n\nimport { GraphqlLocalClient } from './graphql-local-client.js'\nimport { databaseInitializer } from './initializers/database.js'\nimport { emitHook } from './bootstrap-hooks.js'\nimport {\n  domainPrivateRouter,\n  domainPublicRouter,\n  globalPrivateRouter,\n  globalPublicRouter,\n  graphqlRouter\n} from './routers/index.js'\nimport { schema } from './schema.js'\nimport { Domain } from './service/index.js'\nimport { domainMiddleware } from './middlewares/domain-middleware.js'\nimport { setupProcessExitHandlers } from './process-cleaner.js'\n\nsetupProcessExitHandlers()\n\nargs.option('port', 'The port on which the app will be running', config.get('port', 3000))\nargs.option(\n  'inspect',\n  `The address on which the inspection will be running. Used in development mode only.\n  This option is just to prevent termination for reasons of not recognizing the 'inspect' option.`,\n  config.get('inspect', ':9229')\n)\nargs.option('webpack', 'webpack configuration file', config.get('webpack'))\n\nconst flags = args.parse(process.argv)\n\nimport webpack from 'webpack'\nconst webpackConfigPath = flags.webpack || '@things-factory/builder/webpack.config.dev.js'\nconst webpackConfig = require(require.resolve(webpackConfigPath, { paths: [process.cwd()] }))\n\nconst compiler = webpack(webpackConfig)\n\nconst PORT = (process.env.PORT = flags.port)\n\nconst requestBody = config.get('requestBody') || {}\n\nprocess['PROXY_PASSTHROUGH_PATHS'] = []\nconst bodyParserOption = {\n  formLimit: requestBody.formLimit || '10mb',\n  jsonLimit: requestBody.jsonLimit || '10mb',\n  textLimit: requestBody.textLimit || '10mb'\n}\n\nconst fileUpload = config.get('fileUpload') || {}\nconst fileUploadOption = {\n  maxFileSize: bytesFormat.parse(fileUpload.maxFileSize) || bytesFormat.parse('10mb'),\n  maxFiles: fileUpload.maxFiles || 10\n}\n\ninterface ICustomAppState {\n  domain: Domain\n  user: any\n  tx: EntityManager\n}\n\ninterface ICustomAppContext {\n  t: any\n  ssoMiddlewares: any[]\n}\n\ninitLicense(config.get('licenseKey'))\n\n/* bootstrap */\nconst bootstrap = async () => {\n  await databaseInitializer()\n\n  const app = new Koa<ICustomAppState, ICustomAppContext>() as any\n  app.proxy = true\n\n  app.use(\n    cors({\n      origin: function (ctx) {\n        return ctx.request.headers.origin || '*'\n      },\n      exposeHeaders: ['WWW-Authenticate', 'Server-Authorization'],\n      maxAge: 5,\n      credentials: true,\n      /* allowMethods: ['GET', 'POST', 'DELETE'], -- use default */\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept']\n    })\n  )\n\n  app.use(async (ctx, next) => {\n    ctx.set('X-Content-Type-Options', 'nosniff')\n\n    const { directives = {} } = config.get('CSP') || {}\n\n    const nonce = crypto.randomBytes(16).toString('base64')\n    ctx.state.nonce = nonce\n\n    const cspHeader = Object.entries(directives as { [key: string]: string[] })\n      .map(([key, value]) => `${key} ${value.join(' ')}`)\n      .join('; ')\n\n    ctx.set('Content-Security-Policy', cspHeader)\n\n    await next()\n  })\n\n  var subscriptionMiddleware = []\n  emitHook('bootstrap-module-subscription', app, subscriptionMiddleware)\n\n  const builtSchema = await schema()\n\n  const httpServer = createServer(app.callback())\n  const websocketServer = new WebSocketServer({\n    server: httpServer,\n    path: '/graphql'\n  })\n\n  // Save the returned server's info so we can shut down this server later\n  const serverCleanup = useServer(\n    {\n      schema: builtSchema,\n      context: async (ctx, msg, args) => {\n        return ctx['context']\n      },\n      onConnect: async ctx => {\n        var { extra, connectionParams } = ctx\n        var { request } = extra\n\n        if (((connectionParams['headers'] as any) || connectionParams)?.referer) {\n          var url = new URL(((connectionParams['headers'] as any) || connectionParams).referer)\n          var accessToken = url.searchParams.get('access_token')\n          if (accessToken) {\n            connectionParams['headers']['authorization'] = accessToken\n          }\n        }\n\n        request.headers = {\n          ...request.headers,\n          ...(connectionParams['headers'] || (connectionParams as any))\n        }\n\n        var koacontext = await app.createContext(request, new http.ServerResponse(request))\n        koacontext['state'] = {}\n\n        /* in case connect error(like a authentication error) just throw exception */\n        var middlewares = [domainMiddleware, ...subscriptionMiddleware]\n        const fn = co.wrap(compose(middlewares))\n\n        await fn(koacontext)\n\n        return (ctx['context'] = koacontext)\n      },\n      onDisconnect(ctx, code, reason) {\n        console.log('Disconnected!')\n      },\n      onError(ctx, msg, errors) {\n        console.error(msg, errors)\n      }\n    },\n    websocketServer\n  )\n\n  const server = new ApolloServer({\n    schema: builtSchema,\n    formatError: error => {\n      logger.error(error)\n      return error\n    },\n    introspection: true,\n    csrfPrevention: true,\n    stopOnTerminationSignals: false, // ★ 자동 시그널 핸들러 비활성화\n    plugins: [\n      // Proper shutdown for the HTTP server.\n      ApolloServerPluginDrainHttpServer({ httpServer }),\n      // Proper shutdown for the WebSocket server.\n      {\n        async serverWillStart() {\n          return {\n            async drainServer() {\n              await serverCleanup.dispose()\n            }\n          }\n        }\n      },\n      // TODO make this landing page work\n      ApolloServerPluginLandingPageLocalDefault({\n        footer: false,\n        embed: true,\n        includeCookies: true\n      })\n    ],\n    cache: 'bounded'\n  })\n\n  await server.start()\n\n  GraphqlLocalClient.init(builtSchema, app)\n\n  orderedModuleNames.forEach(name => {\n    const mod = loader(name) || {}\n    mod.initMiddlewares && mod.initMiddlewares(app)\n  })\n\n  const render = require('@things-factory/ejs-remote')\n  render(app, {\n    root: '/views',\n    host: `http://127.0.0.1:${PORT}`,\n    layout: false,\n    viewExt: 'html',\n    cache: false,\n    debug: false\n  })\n\n  // only for development mode. triggered after webpack compilation is done.\n  compiler.hooks.done.tap({ name: 'server-dev' }, stats => {\n    emitHook('client-rebuilt', app, compiler.outputFileSystem)\n  })\n\n  // Skip body parser for proxy paths to allow raw body forwarding\n  app.use(async (ctx, next) => {\n    const PROXY_PASSTHROUGH_PATHS = process['PROXY_PASSTHROUGH_PATHS'] || []\n    if (PROXY_PASSTHROUGH_PATHS.some(path => ctx.path.startsWith(path))) {\n      return next()\n    }\n    return koaBodyParser(bodyParserOption)(ctx, next)\n  })\n\n  /* routers */\n  const ssoMiddlewares = []\n  emitHook('bootstrap-collect-sso-middleware', null, ssoMiddlewares)\n  app.ssoMiddlewares = ssoMiddlewares\n\n  emitHook('bootstrap-module-global-public-route', app, globalPublicRouter)\n  emitHook('bootstrap-module-global-private-route', app, globalPrivateRouter)\n  emitHook('bootstrap-module-domain-public-route', app, domainPublicRouter)\n  emitHook('bootstrap-module-domain-private-route', app, domainPrivateRouter)\n\n  app.use(checkValidity) /* Check the license after most of the context has been built */\n\n  app\n    .use(globalPublicRouter.routes())\n    .use(globalPublicRouter.allowedMethods())\n    .use(globalPrivateRouter.routes())\n    .use(globalPrivateRouter.allowedMethods())\n    .use(domainPublicRouter.routes())\n    .use(domainPublicRouter.allowedMethods())\n    .use(domainPrivateRouter.routes())\n    .use(domainPrivateRouter.allowedMethods())\n\n  /* Graphql Upload's multipart/form-data handling affects the restful file upload feature, so it should be placed after the routers configuration. */\n  app.use(graphqlUploadKoa(fileUploadOption))\n\n  graphqlRouter.post(\n    '/graphql',\n    koaMiddleware(server, {\n      context: async ({ ctx }) => ctx\n    })\n  )\n  app.use(graphqlRouter.routes())\n  app.use(graphqlRouter.allowedMethods())\n\n  /* should follow this order : history-fallback => webpack-middleware */\n  app.use(historyApiFallback({ whiteList: [] }))\n\n  app.use(\n    wdm.koaWrapper(compiler, {\n      publicPath: webpackConfig.output.publicPath\n    })\n  )\n\n  httpServer.listen({ port: PORT }, () => {\n    logger.info(`🚀 Server ready at http://0.0.0.0:${PORT}/graphql`)\n    logger.info(`🚀 Subscriptions ready at ws://0.0.0.0:${PORT}/graphql`)\n\n    emitHook('bootstrap-module-start', { app, config, builtSchema, httpServer })\n  })\n}\n\nbootstrap().catch(error => {\n  logger.error('Failed to bootstrap server', error)\n  process.exit(1)\n})\n"]}
+{"version":3,"file":"server-dev.js","sourceRoot":"","sources":["../server/server-dev.ts"],"names":[],"mappings":";AAAA,4BAA4B;;;AAE5B,4DAA4D;AAC5D,oDAAmB;AACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,YAAE,CAAC,oBAAoB,EAAE,CAAC,CAAA;AAElE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;AAEjE,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAA;AACpC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;AAE1B,2CAA6C;AAC7C,2EAAyF;AACzF,uEAAqG;AAErG,8CAAoD;AAEpD,qFAA2E;AAE3E,wDAAuB;AACvB,4FAAwC;AACxC,0DAA+B;AAC/B,qGAAiE;AACjE,8CAAiD;AACjD,+BAAmC;AACnC,sDAAqB;AACrB,4EAA0C;AAC1C,sEAAiC;AACjC,yFAAsE;AACtE,2BAAoC;AACpC,oDAAmB;AACnB,wDAAuB;AAEvB,6DAA4B;AAE5B,4DAA2B;AAE3B,6CAAgF;AAChF,qFAAoF;AAEpF,uEAA8D;AAC9D,4DAAgE;AAChE,6DAA+C;AAC/C,iDAM2B;AAC3B,2CAAoC;AAEpC,6EAAqE;AACrE,6DAA+D;AAE/D,IAAA,6CAAwB,GAAE,CAAA;AAE1B,cAAI,CAAC,MAAM,CAAC,MAAM,EAAE,2CAA2C,EAAE,YAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AAC1F,cAAI,CAAC,MAAM,CACT,SAAS,EACT;kGACgG,EAChG,YAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAC/B,CAAA;AACD,cAAI,CAAC,MAAM,CAAC,SAAS,EAAE,4BAA4B,EAAE,YAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;AAE3E,MAAM,KAAK,GAAG,cAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAEtC,8DAA6B;AAC7B,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,IAAI,+CAA+C,CAAA;AAC1F,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAE7F,MAAM,QAAQ,GAAG,IAAA,iBAAO,EAAC,aAAa,CAAC,CAAA;AAEvC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;AAE5C,MAAM,WAAW,GAAG,YAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAA;AAEnD,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAA;AACvC,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;CAC3C,CAAA;AAED,MAAM,UAAU,GAAG,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;AACjD,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,eAAW,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,eAAW,CAAC,KAAK,CAAC,MAAM,CAAC;IACnF,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;CACpC,CAAA;AAaD,IAAA,qCAAW,EAAC,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;AAErC,eAAe;AACf,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;IAC3B,MAAM,IAAA,iCAAmB,GAAE,CAAA;IAE3B,MAAM,GAAG,GAAG,IAAI,aAAG,EAA6C,CAAA;IAChE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAA;IAEhB,GAAG,CAAC,GAAG,CACL,IAAA,cAAI,EAAC;QACH,MAAM,EAAE,UAAU,GAAG;YACnB,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAA;QAC1C,CAAC;QACD,aAAa,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QAC3D,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,IAAI;QACjB,6DAA6D;QAC7D,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;KAC1D,CAAC,CACH,CAAA;IAED,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAE5C,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,YAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAEnD,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAA;QAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,UAAyC,CAAC;aACxE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAA;QAE7C,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,IAAI,sBAAsB,GAAG,EAAE,CAAA;IAC/B,IAAA,6BAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAEtE,MAAM,WAAW,GAAG,MAAM,IAAA,kBAAM,GAAE,CAAA;IAElC,MAAM,UAAU,GAAG,IAAA,mBAAY,EAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC/C,MAAM,eAAe,GAAG,IAAI,oBAAe,CAAC;QAC1C,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IAEF,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAA,cAAS,EAC7B;QACE,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAChC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAA;QACvB,CAAC;QACD,SAAS,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACrB,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAA;YACrC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;YAEvB,IAAI,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;gBACxE,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAA;gBACrF,IAAI,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;gBACtD,IAAI,WAAW,EAAE,CAAC;oBAChB,gBAAgB,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAA;gBAC5D,CAAC;YACH,CAAC;YAED,OAAO,CAAC,OAAO,GAAG;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAK,gBAAwB,CAAC;aAC9D,CAAA;YAED,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,cAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;YACnF,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;YAExB,6EAA6E;YAC7E,IAAI,WAAW,GAAG,CAAC,uCAAgB,EAAE,GAAG,sBAAsB,CAAC,CAAA;YAC/D,MAAM,EAAE,GAAG,YAAE,CAAC,IAAI,CAAC,IAAA,qBAAO,EAAC,WAAW,CAAC,CAAC,CAAA;YAExC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAA;YAEpB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,CAAA;QACtC,CAAC;QACD,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM;YAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM;YACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC;KACF,EACD,eAAe,CAChB,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,qBAAY,CAAC;QAC9B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,KAAK,CAAC,EAAE;YACnB,YAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,mGAAmG;QACnG,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;QACpB,wBAAwB,EAAE,KAAK,EAAE,oBAAoB;QACrD,OAAO,EAAE;YACP,uCAAuC;YACvC,IAAA,mDAAiC,EAAC,EAAE,UAAU,EAAE,CAAC;YACjD,4CAA4C;YAC5C;gBACE,KAAK,CAAC,eAAe;oBACnB,OAAO;wBACL,KAAK,CAAC,WAAW;4BACf,MAAM,aAAa,CAAC,OAAO,EAAE,CAAA;wBAC/B,CAAC;qBACF,CAAA;gBACH,CAAC;aACF;YACD,IAAA,yDAAwB,GAAE;YAC1B,IAAA,mDAAyC,EAAC;gBACxC,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,IAAI;gBACX,cAAc,EAAE,IAAI;aACrB,CAAC;SACH;QACD,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IAEpB,4CAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAEzC,wBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAChC,MAAM,GAAG,GAAG,IAAA,YAAM,EAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACpD,MAAM,CAAC,GAAG,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,oBAAoB,IAAI,EAAE;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IAEF,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,EAAE;QACtD,IAAA,6BAAQ,EAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAA;QACxE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,aAAa;IACb,MAAM,cAAc,GAAG,EAAE,CAAA;IACzB,IAAA,6BAAQ,EAAC,kCAAkC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IAClE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAA;IAEnC,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAC3E,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAE3E,GAAG,CAAC,GAAG,CAAC,uCAAa,CAAC,CAAA,CAAC,gEAAgE;IAEvF,GAAG;SACA,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC;SACzC,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC,CAAA;IAE5C,oJAAoJ;IACpJ,GAAG,CAAC,GAAG,CAAC,IAAA,6BAAgB,EAAC,gBAAgB,CAAC,CAAC,CAAA;IAE3C,wBAAa,CAAC,IAAI,CAChB,UAAU,EACV,IAAA,mBAAa,EAAC,MAAM,EAAE;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG;KAChC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/B,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,cAAc,EAAE,CAAC,CAAA;IAEvC,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAAC,IAAA,sDAAkB,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,GAAG,CAAC,GAAG,CACL,gCAAG,CAAC,UAAU,CAAC,QAAQ,EAAE;QACvB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,UAAU;KAC5C,CAAC,CACH,CAAA;IAED,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;QACrC,YAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,UAAU,CAAC,CAAA;QAChE,YAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,UAAU,CAAC,CAAA;QAErE,IAAA,6BAAQ,EAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAN,YAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACxB,YAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAA;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA","sourcesContent":["// ts-import-sorter: disable\n\n/* following 7 lines should be located in top of the file */\nimport OS from 'os'\nprocess.env.UV_THREADPOOL_SIZE = String(OS.availableParallelism())\n\nconsole.log('UV_THREADPOOL_SIZE', process.env.UV_THREADPOOL_SIZE)\n\nprocess.env.NODE_ENV = 'development'\nprocess.setMaxListeners(0)\n\nimport { ApolloServer } from '@apollo/server'\nimport { ApolloServerPluginDrainHttpServer } from '@apollo/server/plugin/drainHttpServer'\nimport { ApolloServerPluginLandingPageLocalDefault } from '@apollo/server/plugin/landingPage/default'\n\nimport { koaMiddleware } from '@as-integrations/koa'\n\nimport { introspectionForSignedIn } from './introspection-for-signed-in.js'\nimport { EntityManager } from 'typeorm'\nimport args from 'args'\nimport wdm from 'webpack-dev-middleware'\nimport bytesFormat from 'bytes'\nimport graphqlUploadKoa from 'graphql-upload/graphqlUploadKoa.js'\nimport { useServer } from 'graphql-ws/lib/use/ws'\nimport { createServer } from 'http'\nimport Koa from 'koa'\nimport koaBodyParser from 'koa-bodyparser'\nimport compose from 'koa-compose'\nimport { historyApiFallback } from 'koa2-connect-history-api-fallback'\nimport { WebSocketServer } from 'ws'\nimport co from 'co'\nimport http from 'http'\n\nimport cors from '@koa/cors'\n\nimport crypto from 'crypto'\n\nimport { config, loader, logger, orderedModuleNames } from '@things-factory/env'\nimport { initLicense, checkValidity } from '@things-factory/operato-license-checker'\n\nimport { GraphqlLocalClient } from './graphql-local-client.js'\nimport { databaseInitializer } from './initializers/database.js'\nimport { emitHook } from './bootstrap-hooks.js'\nimport {\n  domainPrivateRouter,\n  domainPublicRouter,\n  globalPrivateRouter,\n  globalPublicRouter,\n  graphqlRouter\n} from './routers/index.js'\nimport { schema } from './schema.js'\nimport { Domain } from './service/index.js'\nimport { domainMiddleware } from './middlewares/domain-middleware.js'\nimport { setupProcessExitHandlers } from './process-cleaner.js'\n\nsetupProcessExitHandlers()\n\nargs.option('port', 'The port on which the app will be running', config.get('port', 3000))\nargs.option(\n  'inspect',\n  `The address on which the inspection will be running. Used in development mode only.\n  This option is just to prevent termination for reasons of not recognizing the 'inspect' option.`,\n  config.get('inspect', ':9229')\n)\nargs.option('webpack', 'webpack configuration file', config.get('webpack'))\n\nconst flags = args.parse(process.argv)\n\nimport webpack from 'webpack'\nconst webpackConfigPath = flags.webpack || '@things-factory/builder/webpack.config.dev.js'\nconst webpackConfig = require(require.resolve(webpackConfigPath, { paths: [process.cwd()] }))\n\nconst compiler = webpack(webpackConfig)\n\nconst PORT = (process.env.PORT = flags.port)\n\nconst requestBody = config.get('requestBody') || {}\n\nprocess['PROXY_PASSTHROUGH_PATHS'] = []\nconst bodyParserOption = {\n  formLimit: requestBody.formLimit || '10mb',\n  jsonLimit: requestBody.jsonLimit || '10mb',\n  textLimit: requestBody.textLimit || '10mb'\n}\n\nconst fileUpload = config.get('fileUpload') || {}\nconst fileUploadOption = {\n  maxFileSize: bytesFormat.parse(fileUpload.maxFileSize) || bytesFormat.parse('10mb'),\n  maxFiles: fileUpload.maxFiles || 10\n}\n\ninterface ICustomAppState {\n  domain: Domain\n  user: any\n  tx: EntityManager\n}\n\ninterface ICustomAppContext {\n  t: any\n  ssoMiddlewares: any[]\n}\n\ninitLicense(config.get('licenseKey'))\n\n/* bootstrap */\nconst bootstrap = async () => {\n  await databaseInitializer()\n\n  const app = new Koa<ICustomAppState, ICustomAppContext>() as any\n  app.proxy = true\n\n  app.use(\n    cors({\n      origin: function (ctx) {\n        return ctx.request.headers.origin || '*'\n      },\n      exposeHeaders: ['WWW-Authenticate', 'Server-Authorization'],\n      maxAge: 5,\n      credentials: true,\n      /* allowMethods: ['GET', 'POST', 'DELETE'], -- use default */\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept']\n    })\n  )\n\n  app.use(async (ctx, next) => {\n    ctx.set('X-Content-Type-Options', 'nosniff')\n\n    const { directives = {} } = config.get('CSP') || {}\n\n    const nonce = crypto.randomBytes(16).toString('base64')\n    ctx.state.nonce = nonce\n\n    const cspHeader = Object.entries(directives as { [key: string]: string[] })\n      .map(([key, value]) => `${key} ${value.join(' ')}`)\n      .join('; ')\n\n    ctx.set('Content-Security-Policy', cspHeader)\n\n    await next()\n  })\n\n  var subscriptionMiddleware = []\n  emitHook('bootstrap-module-subscription', app, subscriptionMiddleware)\n\n  const builtSchema = await schema()\n\n  const httpServer = createServer(app.callback())\n  const websocketServer = new WebSocketServer({\n    server: httpServer,\n    path: '/graphql'\n  })\n\n  // Save the returned server's info so we can shut down this server later\n  const serverCleanup = useServer(\n    {\n      schema: builtSchema,\n      context: async (ctx, msg, args) => {\n        return ctx['context']\n      },\n      onConnect: async ctx => {\n        var { extra, connectionParams } = ctx\n        var { request } = extra\n\n        if (((connectionParams['headers'] as any) || connectionParams)?.referer) {\n          var url = new URL(((connectionParams['headers'] as any) || connectionParams).referer)\n          var accessToken = url.searchParams.get('access_token')\n          if (accessToken) {\n            connectionParams['headers']['authorization'] = accessToken\n          }\n        }\n\n        request.headers = {\n          ...request.headers,\n          ...(connectionParams['headers'] || (connectionParams as any))\n        }\n\n        var koacontext = await app.createContext(request, new http.ServerResponse(request))\n        koacontext['state'] = {}\n\n        /* in case connect error(like a authentication error) just throw exception */\n        var middlewares = [domainMiddleware, ...subscriptionMiddleware]\n        const fn = co.wrap(compose(middlewares))\n\n        await fn(koacontext)\n\n        return (ctx['context'] = koacontext)\n      },\n      onDisconnect(ctx, code, reason) {\n        console.log('Disconnected!')\n      },\n      onError(ctx, msg, errors) {\n        console.error(msg, errors)\n      }\n    },\n    websocketServer\n  )\n\n  const server = new ApolloServer({\n    schema: builtSchema,\n    formatError: error => {\n      logger.error(error)\n      return error\n    },\n    /* The same rule as production (ADR-0126): the plugin below refuses schema reads without a user. */\n    introspection: true,\n    csrfPrevention: true,\n    stopOnTerminationSignals: false, // ★ 자동 시그널 핸들러 비활성화\n    plugins: [\n      // Proper shutdown for the HTTP server.\n      ApolloServerPluginDrainHttpServer({ httpServer }),\n      // Proper shutdown for the WebSocket server.\n      {\n        async serverWillStart() {\n          return {\n            async drainServer() {\n              await serverCleanup.dispose()\n            }\n          }\n        }\n      },\n      introspectionForSignedIn(),\n      ApolloServerPluginLandingPageLocalDefault({\n        footer: false,\n        embed: true,\n        includeCookies: true\n      })\n    ],\n    cache: 'bounded'\n  })\n\n  await server.start()\n\n  GraphqlLocalClient.init(builtSchema, app)\n\n  orderedModuleNames.forEach(name => {\n    const mod = loader(name) || {}\n    mod.initMiddlewares && mod.initMiddlewares(app)\n  })\n\n  const render = require('@things-factory/ejs-remote')\n  render(app, {\n    root: '/views',\n    host: `http://127.0.0.1:${PORT}`,\n    layout: false,\n    viewExt: 'html',\n    cache: false,\n    debug: false\n  })\n\n  // only for development mode. triggered after webpack compilation is done.\n  compiler.hooks.done.tap({ name: 'server-dev' }, stats => {\n    emitHook('client-rebuilt', app, compiler.outputFileSystem)\n  })\n\n  // Skip body parser for proxy paths to allow raw body forwarding\n  app.use(async (ctx, next) => {\n    const PROXY_PASSTHROUGH_PATHS = process['PROXY_PASSTHROUGH_PATHS'] || []\n    if (PROXY_PASSTHROUGH_PATHS.some(path => ctx.path.startsWith(path))) {\n      return next()\n    }\n    return koaBodyParser(bodyParserOption)(ctx, next)\n  })\n\n  /* routers */\n  const ssoMiddlewares = []\n  emitHook('bootstrap-collect-sso-middleware', null, ssoMiddlewares)\n  app.ssoMiddlewares = ssoMiddlewares\n\n  emitHook('bootstrap-module-global-public-route', app, globalPublicRouter)\n  emitHook('bootstrap-module-global-private-route', app, globalPrivateRouter)\n  emitHook('bootstrap-module-domain-public-route', app, domainPublicRouter)\n  emitHook('bootstrap-module-domain-private-route', app, domainPrivateRouter)\n\n  app.use(checkValidity) /* Check the license after most of the context has been built */\n\n  app\n    .use(globalPublicRouter.routes())\n    .use(globalPublicRouter.allowedMethods())\n    .use(globalPrivateRouter.routes())\n    .use(globalPrivateRouter.allowedMethods())\n    .use(domainPublicRouter.routes())\n    .use(domainPublicRouter.allowedMethods())\n    .use(domainPrivateRouter.routes())\n    .use(domainPrivateRouter.allowedMethods())\n\n  /* Graphql Upload's multipart/form-data handling affects the restful file upload feature, so it should be placed after the routers configuration. */\n  app.use(graphqlUploadKoa(fileUploadOption))\n\n  graphqlRouter.post(\n    '/graphql',\n    koaMiddleware(server, {\n      context: async ({ ctx }) => ctx\n    })\n  )\n  app.use(graphqlRouter.routes())\n  app.use(graphqlRouter.allowedMethods())\n\n  /* should follow this order : history-fallback => webpack-middleware */\n  app.use(historyApiFallback({ whiteList: [] }))\n\n  app.use(\n    wdm.koaWrapper(compiler, {\n      publicPath: webpackConfig.output.publicPath\n    })\n  )\n\n  httpServer.listen({ port: PORT }, () => {\n    logger.info(`🚀 Server ready at http://0.0.0.0:${PORT}/graphql`)\n    logger.info(`🚀 Subscriptions ready at ws://0.0.0.0:${PORT}/graphql`)\n\n    emitHook('bootstrap-module-start', { app, config, builtSchema, httpServer })\n  })\n}\n\nbootstrap().catch(error => {\n  logger.error('Failed to bootstrap server', error)\n  process.exit(1)\n})\n"]}

package/dist-server/server.js

@@ -10,8 +10,8 @@ process.env.NODE_ENV = 'production';
 process.setMaxListeners(0);
 const server_1 = require("@apollo/server");
 const drainHttpServer_1 = require("@apollo/server/plugin/drainHttpServer");
-const default_1 = require("@apollo/server/plugin/landingPage/default");
 const koa_1 = require("@as-integrations/koa");
+const introspection_for_signed_in_js_1 = require("./introspection-for-signed-in.js");
 const bytes_1 = tslib_1.__importDefault(require("bytes"));
 const graphqlUploadKoa_js_1 = tslib_1.__importDefault(require("graphql-upload/graphqlUploadKoa.js"));
 const ws_1 = require("graphql-ws/lib/use/ws");
@@ -129,7 +129,8 @@ const bootstrap = async () => {
             env_1.logger.error(error);
             return error;
         },
-        introspection: false,
+        /* Open per request to a signed-in user only (ADR-0126); the plugin below decides. */
+        introspection: true,
         csrfPrevention: true,
         stopOnTerminationSignals: false, // ★ 자동 시그널 핸들러 비활성화
         plugins: [
@@ -145,11 +146,7 @@ const bootstrap = async () => {
                     };
                 }
             },
-            // TODO make this landing page work
-            (0, default_1.ApolloServerPluginLandingPageProductionDefault)({
-                graphRef: 'my-graph-id@my-graph-variant',
-                footer: false
-            })
+            (0, introspection_for_signed_in_js_1.introspectionForSignedIn)()
         ],
         cache: 'bounded'
     });

package/dist-server/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../server/server.ts"],"names":[],"mappings":";AAAA,4BAA4B;;;AAE5B,4DAA4D;AAC5D,oDAAmB;AACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,YAAE,CAAC,oBAAoB,EAAE,CAAC,CAAA;AAElE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;AAEjE,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAA;AACnC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;AAE1B,2CAA6C;AAC7C,2EAAyF;AACzF,uEAA0G;AAC1G,8CAAoD;AAEpD,0DAA+B;AAC/B,qGAAiE;AACjE,8CAAiD;AACjD,+BAAmC;AACnC,sDAAqB;AACrB,4EAA0C;AAC1C,oEAAkC;AAClC,sEAAiC;AACjC,yFAAsE;AACtE,2BAAoC;AACpC,oDAAmB;AACnB,wDAAuB;AACvB,wDAAuB;AACvB,wDAAuB;AAEvB,6DAA4B;AAC5B,4DAA2B;AAE3B,6CAAgF;AAChF,qFAAoF;AAEpF,uEAA8D;AAC9D,4DAAgE;AAChE,6DAA+C;AAC/C,iDAM2B;AAC3B,2CAAoC;AACpC,6EAAqE;AACrE,6DAA+D;AAE/D,IAAA,6CAAwB,GAAE,CAAA;AAE1B,cAAI,CAAC,MAAM,CAAC,MAAM,EAAE,2CAA2C,EAAE,YAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AAE1F,MAAM,KAAK,GAAG,cAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAEtC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;AAE5C,MAAM,WAAW,GAAG,YAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAA;AAEnD,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAA;AACvC,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;CAC3C,CAAA;AAED,MAAM,UAAU,GAAG,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;AACjD,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,eAAW,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,eAAW,CAAC,KAAK,CAAC,MAAM,CAAC;IACnF,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;CACpC,CAAA;AAED,IAAA,qCAAW,EAAC,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;AAErC,eAAe;AACf,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;IAC3B,MAAM,IAAA,iCAAmB,GAAE,CAAA;IAE3B,MAAM,GAAG,GAAG,IAAI,aAAG,EAAS,CAAA;IAC5B,GAAG,CAAC,KAAK,GAAG,IAAI,CAAA;IAEhB,GAAG,CAAC,GAAG,CACL,IAAA,cAAI,EAAC;QACH,MAAM,EAAE,UAAU,GAAG;YACnB,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAA;QAC1C,CAAC;QACD,aAAa,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QAC3D,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,IAAI;QACjB,6DAA6D;QAC7D,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;KAC1D,CAAC,CACH,CAAA;IAED,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAE5C,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,YAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAEnD,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAA;QAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,UAAyC,CAAC;aACxE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAA;QAE7C,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,IAAI,sBAAsB,GAAG,EAAE,CAAA;IAC/B,IAAA,6BAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAEtE,MAAM,WAAW,GAAG,MAAM,IAAA,kBAAM,GAAE,CAAA;IAElC,MAAM,UAAU,GAAG,IAAA,mBAAY,EAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC/C,MAAM,eAAe,GAAG,IAAI,oBAAe,CAAC;QAC1C,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IAEF,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAA,cAAS,EAC7B;QACE,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAChC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAA;QACvB,CAAC;QACD,SAAS,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACrB,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAA;YACrC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;YAEvB,IAAI,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;gBACxE,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAA;gBACrF,IAAI,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;gBACtD,IAAI,WAAW,EAAE,CAAC;oBAChB,gBAAgB,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAA;gBAC5D,CAAC;YACH,CAAC;YAED,OAAO,CAAC,OAAO,GAAG;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAK,gBAAwB,CAAC;aAC9D,CAAA;YAED,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,cAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;YACnF,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;YAExB,6EAA6E;YAC7E,IAAI,WAAW,GAAG,CAAC,uCAAgB,EAAE,GAAG,sBAAsB,CAAC,CAAA;YAC/D,MAAM,EAAE,GAAG,YAAE,CAAC,IAAI,CAAC,IAAA,qBAAO,EAAC,WAAW,CAAC,CAAC,CAAA;YAExC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAA;YAEpB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,CAAA;QACtC,CAAC;QACD,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM;YAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM;YACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC;KACF,EACD,eAAe,CAChB,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,qBAAY,CAAC;QAC9B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,KAAK,CAAC,EAAE;YACnB,YAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,IAAI;QACpB,wBAAwB,EAAE,KAAK,EAAE,oBAAoB;QACrD,OAAO,EAAE;YACP,uCAAuC;YACvC,IAAA,mDAAiC,EAAC,EAAE,UAAU,EAAE,CAAC;YACjD,4CAA4C;YAC5C;gBACE,KAAK,CAAC,eAAe;oBACnB,OAAO;wBACL,KAAK,CAAC,WAAW;4BACf,MAAM,aAAa,CAAC,OAAO,EAAE,CAAA;wBAC/B,CAAC;qBACF,CAAA;gBACH,CAAC;aACF;YACD,mCAAmC;YACnC,IAAA,wDAA8C,EAAC;gBAC7C,QAAQ,EAAE,8BAA8B;gBACxC,MAAM,EAAE,KAAK;aACd,CAAC;SACH;QACD,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IAEpB,4CAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAEzC,wBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAChC,MAAM,EAAE,eAAe,EAAE,GAAG,IAAA,YAAM,EAAC,IAAI,CAAC,CAAA;QACxC,eAAe,IAAI,eAAe,CAAC,GAAG,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACpD,MAAM,CAAC,GAAG,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,oBAAoB,IAAI,EAAE;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IAEF,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAA;QACxE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,aAAa;IACb,MAAM,cAAc,GAAG,EAAE,CAAA;IACzB,IAAA,6BAAQ,EAAC,kCAAkC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IAClE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAA;IACnC,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAC3E,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAE3E,GAAG,CAAC,GAAG,CAAC,uCAAa,CAAC,CAAA,CAAC,gEAAgE;IAEvF,GAAG;SACA,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC;SACzC,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC,CAAA;IAE5C,oJAAoJ;IACpJ,GAAG,CAAC,GAAG,CAAC,IAAA,6BAAgB,EAAC,gBAAgB,CAAC,CAAC,CAAA;IAE3C,wBAAa,CAAC,IAAI,CAChB,UAAU,EACV,IAAA,mBAAa,EAAC,MAAM,EAAE;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG;KAChC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/B,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,cAAc,EAAE,CAAC,CAAA;IAEvC,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAA,sDAAkB,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,GAAG,CAAC,GAAG,CACL,IAAA,oBAAS,EAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE;QAC9C,KAAK,EAAE,YAAY;KACpB,CAAC,CACH,CAAA;IAED,8EAA8E;IAC9E,mFAAmF;IACnF,2BAA2B;IAC3B,MAAM,gBAAgB,GAAG,YAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IAE9D,gFAAgF;IAChF,0FAA0F;IAC1F,mFAAmF;IACnF,kFAAkF;IAClF,gFAAgF;IAChF,gCAAgC;IAChC,UAAU,CAAC,gBAAgB,GAAG,gBAAgB,IAAI,KAAK,CAAA;IAEvD,2EAA2E;IAC3E,iFAAiF;IACjF,qFAAqF;IACrF,gFAAgF;IAChF,+EAA+E;IAC/E,4CAA4C;IAC5C,UAAU,CAAC,cAAc,GAAG,gBAAgB,GAAG,IAAI,CAAA;IAEnD,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;QACrC,YAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,UAAU,CAAC,CAAA;QAChE,YAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,UAAU,CAAC,CAAA;QACrE,IAAA,6BAAQ,EAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAN,YAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACxB,YAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAA;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA","sourcesContent":["// ts-import-sorter: disable\n\n/* following 5 lines should be located in top of the file */\nimport OS from 'os'\nprocess.env.UV_THREADPOOL_SIZE = String(OS.availableParallelism())\n\nconsole.log('UV_THREADPOOL_SIZE', process.env.UV_THREADPOOL_SIZE)\n\nprocess.env.NODE_ENV = 'production'\nprocess.setMaxListeners(0)\n\nimport { ApolloServer } from '@apollo/server'\nimport { ApolloServerPluginDrainHttpServer } from '@apollo/server/plugin/drainHttpServer'\nimport { ApolloServerPluginLandingPageProductionDefault } from '@apollo/server/plugin/landingPage/default'\nimport { koaMiddleware } from '@as-integrations/koa'\n\nimport bytesFormat from 'bytes'\nimport graphqlUploadKoa from 'graphql-upload/graphqlUploadKoa.js'\nimport { useServer } from 'graphql-ws/lib/use/ws'\nimport { createServer } from 'http'\nimport Koa from 'koa'\nimport koaBodyParser from 'koa-bodyparser'\nimport koaStatic from 'koa-static'\nimport compose from 'koa-compose'\nimport { historyApiFallback } from 'koa2-connect-history-api-fallback'\nimport { WebSocketServer } from 'ws'\nimport co from 'co'\nimport http from 'http'\nimport path from 'path'\nimport args from 'args'\n\nimport cors from '@koa/cors'\nimport crypto from 'crypto'\n\nimport { config, loader, logger, orderedModuleNames } from '@things-factory/env'\nimport { initLicense, checkValidity } from '@things-factory/operato-license-checker'\n\nimport { GraphqlLocalClient } from './graphql-local-client.js'\nimport { databaseInitializer } from './initializers/database.js'\nimport { emitHook } from './bootstrap-hooks.js'\nimport {\n  domainPrivateRouter,\n  domainPublicRouter,\n  globalPrivateRouter,\n  globalPublicRouter,\n  graphqlRouter\n} from './routers/index.js'\nimport { schema } from './schema.js'\nimport { domainMiddleware } from './middlewares/domain-middleware.js'\nimport { setupProcessExitHandlers } from './process-cleaner.js'\n\nsetupProcessExitHandlers()\n\nargs.option('port', 'The port on which the app will be running', config.get('port', 3000))\n\nconst flags = args.parse(process.argv)\n\nconst PORT = (process.env.PORT = flags.port)\n\nconst requestBody = config.get('requestBody') || {}\n\nprocess['PROXY_PASSTHROUGH_PATHS'] = []\nconst bodyParserOption = {\n  formLimit: requestBody.formLimit || '10mb',\n  jsonLimit: requestBody.jsonLimit || '10mb',\n  textLimit: requestBody.textLimit || '10mb'\n}\n\nconst fileUpload = config.get('fileUpload') || {}\nconst fileUploadOption = {\n  maxFileSize: bytesFormat.parse(fileUpload.maxFileSize) || bytesFormat.parse('10mb'),\n  maxFiles: fileUpload.maxFiles || 10\n}\n\ninitLicense(config.get('licenseKey'))\n\n/* bootstrap */\nconst bootstrap = async () => {\n  await databaseInitializer()\n\n  const app = new Koa() as any\n  app.proxy = true\n\n  app.use(\n    cors({\n      origin: function (ctx) {\n        return ctx.request.headers.origin || '*'\n      },\n      exposeHeaders: ['WWW-Authenticate', 'Server-Authorization'],\n      maxAge: 5,\n      credentials: true,\n      /* allowMethods: ['GET', 'POST', 'DELETE'], -- use default */\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept']\n    })\n  )\n\n  app.use(async (ctx, next) => {\n    ctx.set('X-Content-Type-Options', 'nosniff')\n\n    const { directives = {} } = config.get('CSP') || {}\n\n    const nonce = crypto.randomBytes(16).toString('base64')\n    ctx.state.nonce = nonce\n\n    const cspHeader = Object.entries(directives as { [key: string]: string[] })\n      .map(([key, value]) => `${key} ${value.join(' ')}`)\n      .join('; ')\n\n    ctx.set('Content-Security-Policy', cspHeader)\n\n    await next()\n  })\n\n  var subscriptionMiddleware = []\n  emitHook('bootstrap-module-subscription', app, subscriptionMiddleware)\n\n  const builtSchema = await schema()\n\n  const httpServer = createServer(app.callback())\n  const websocketServer = new WebSocketServer({\n    server: httpServer,\n    path: '/graphql'\n  })\n\n  // Save the returned server's info so we can shut down this server later\n  const serverCleanup = useServer(\n    {\n      schema: builtSchema,\n      context: async (ctx, msg, args) => {\n        return ctx['context']\n      },\n      onConnect: async ctx => {\n        var { extra, connectionParams } = ctx\n        var { request } = extra\n\n        if (((connectionParams['headers'] as any) || connectionParams)?.referer) {\n          var url = new URL(((connectionParams['headers'] as any) || connectionParams).referer)\n          var accessToken = url.searchParams.get('access_token')\n          if (accessToken) {\n            connectionParams['headers']['authorization'] = accessToken\n          }\n        }\n\n        request.headers = {\n          ...request.headers,\n          ...(connectionParams['headers'] || (connectionParams as any))\n        }\n\n        var koacontext = await app.createContext(request, new http.ServerResponse(request))\n        koacontext['state'] = {}\n\n        /* in case connect error(like a authentication error) just throw exception */\n        var middlewares = [domainMiddleware, ...subscriptionMiddleware]\n        const fn = co.wrap(compose(middlewares))\n\n        await fn(koacontext)\n\n        return (ctx['context'] = koacontext)\n      },\n      onDisconnect(ctx, code, reason) {\n        console.log('Disconnected!')\n      },\n      onError(ctx, msg, errors) {\n        console.error(msg, errors)\n      }\n    },\n    websocketServer\n  )\n\n  const server = new ApolloServer({\n    schema: builtSchema,\n    formatError: error => {\n      logger.error(error)\n      return error\n    },\n    introspection: false,\n    csrfPrevention: true,\n    stopOnTerminationSignals: false, // ★ 자동 시그널 핸들러 비활성화\n    plugins: [\n      // Proper shutdown for the HTTP server.\n      ApolloServerPluginDrainHttpServer({ httpServer }),\n      // Proper shutdown for the WebSocket server.\n      {\n        async serverWillStart() {\n          return {\n            async drainServer() {\n              await serverCleanup.dispose()\n            }\n          }\n        }\n      },\n      // TODO make this landing page work\n      ApolloServerPluginLandingPageProductionDefault({\n        graphRef: 'my-graph-id@my-graph-variant',\n        footer: false\n      })\n    ],\n    cache: 'bounded'\n  })\n\n  await server.start()\n\n  GraphqlLocalClient.init(builtSchema, app)\n\n  orderedModuleNames.forEach(name => {\n    const { initMiddlewares } = loader(name)\n    initMiddlewares && initMiddlewares(app)\n  })\n\n  const render = require('@things-factory/ejs-remote')\n  render(app, {\n    root: '/views',\n    host: `http://127.0.0.1:${PORT}`,\n    layout: false,\n    viewExt: 'html',\n    cache: true,\n    debug: false\n  })\n\n  // Skip body parser for proxy paths to allow raw body forwarding\n  app.use(async (ctx, next) => {\n    const PROXY_PASSTHROUGH_PATHS = process['PROXY_PASSTHROUGH_PATHS'] || []\n    if (PROXY_PASSTHROUGH_PATHS.some(path => ctx.path.startsWith(path))) {\n      return next()\n    }\n    return koaBodyParser(bodyParserOption)(ctx, next)\n  })\n\n  /* routers */\n  const ssoMiddlewares = []\n  emitHook('bootstrap-collect-sso-middleware', null, ssoMiddlewares)\n  app.ssoMiddlewares = ssoMiddlewares\n  emitHook('bootstrap-module-global-public-route', app, globalPublicRouter)\n  emitHook('bootstrap-module-global-private-route', app, globalPrivateRouter)\n  emitHook('bootstrap-module-domain-public-route', app, domainPublicRouter)\n  emitHook('bootstrap-module-domain-private-route', app, domainPrivateRouter)\n\n  app.use(checkValidity) /* Check the license after most of the context has been built */\n\n  app\n    .use(globalPublicRouter.routes())\n    .use(globalPublicRouter.allowedMethods())\n    .use(globalPrivateRouter.routes())\n    .use(globalPrivateRouter.allowedMethods())\n    .use(domainPublicRouter.routes())\n    .use(domainPublicRouter.allowedMethods())\n    .use(domainPrivateRouter.routes())\n    .use(domainPrivateRouter.allowedMethods())\n\n  /* Graphql Upload's multipart/form-data handling affects the restful file upload feature, so it should be placed after the routers configuration. */\n  app.use(graphqlUploadKoa(fileUploadOption))\n\n  graphqlRouter.post(\n    '/graphql',\n    koaMiddleware(server, {\n      context: async ({ ctx }) => ctx\n    })\n  )\n  app.use(graphqlRouter.routes())\n  app.use(graphqlRouter.allowedMethods())\n\n  /* should follow this order : history-fallback => koaStatic */\n  app.use(historyApiFallback({ whiteList: [] }))\n\n  app.use(\n    koaStatic(path.join(process.cwd(), 'dist-app'), {\n      index: 'index.html'\n    })\n  )\n\n  // Set keep-alive timeout from configuration or fallback to default (65000ms).\n  // The keepAliveTimeout determines how long the server will keep an idle connection\n  // alive before closing it.\n  const keepAliveTimeout = config.get('keepAliveTimeout', 65000)\n\n  // Apply the configured keep-alive timeout to the server. If no configuration is\n  // provided, default to 65000ms (65 seconds). In the context of an external load balancer,\n  // this timeout is critical for maintaining persistent connections between the load\n  // balancer and the server. Setting a sufficiently long keepAliveTimeout minimizes\n  // the need to constantly re-establish TCP connections, improving efficiency and\n  // reducing connection overhead.\n  httpServer.keepAliveTimeout = keepAliveTimeout || 65000\n\n  // Set headersTimeout to be 1000ms (1 second) longer than keepAliveTimeout.\n  // This ensures the server has sufficient time to receive headers from the client\n  // before closing the connection, preventing premature disconnections. In the context\n  // of a load balancer, this ensures that if the load balancer is sending headers\n  // slowly (due to network delays or other factors), the connection isn't closed\n  // before the headers are fully transmitted.\n  httpServer.headersTimeout = keepAliveTimeout + 1000\n\n  httpServer.listen({ port: PORT }, () => {\n    logger.info(`🚀 Server ready at http://0.0.0.0:${PORT}/graphql`)\n    logger.info(`🚀 Subscriptions ready at ws://0.0.0.0:${PORT}/graphql`)\n    emitHook('bootstrap-module-start', { app, config, builtSchema, httpServer })\n  })\n}\n\nbootstrap().catch(error => {\n  logger.error('Failed to bootstrap server', error)\n  process.exit(1)\n})\n"]}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../server/server.ts"],"names":[],"mappings":";AAAA,4BAA4B;;;AAE5B,4DAA4D;AAC5D,oDAAmB;AACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,YAAE,CAAC,oBAAoB,EAAE,CAAC,CAAA;AAElE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;AAEjE,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAA;AACnC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;AAE1B,2CAA6C;AAC7C,2EAAyF;AACzF,8CAAoD;AAEpD,qFAA2E;AAE3E,0DAA+B;AAC/B,qGAAiE;AACjE,8CAAiD;AACjD,+BAAmC;AACnC,sDAAqB;AACrB,4EAA0C;AAC1C,oEAAkC;AAClC,sEAAiC;AACjC,yFAAsE;AACtE,2BAAoC;AACpC,oDAAmB;AACnB,wDAAuB;AACvB,wDAAuB;AACvB,wDAAuB;AAEvB,6DAA4B;AAC5B,4DAA2B;AAE3B,6CAAgF;AAChF,qFAAoF;AAEpF,uEAA8D;AAC9D,4DAAgE;AAChE,6DAA+C;AAC/C,iDAM2B;AAC3B,2CAAoC;AACpC,6EAAqE;AACrE,6DAA+D;AAE/D,IAAA,6CAAwB,GAAE,CAAA;AAE1B,cAAI,CAAC,MAAM,CAAC,MAAM,EAAE,2CAA2C,EAAE,YAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AAE1F,MAAM,KAAK,GAAG,cAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAEtC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;AAE5C,MAAM,WAAW,GAAG,YAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAA;AAEnD,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAA;AACvC,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;IAC1C,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,MAAM;CAC3C,CAAA;AAED,MAAM,UAAU,GAAG,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;AACjD,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,eAAW,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,eAAW,CAAC,KAAK,CAAC,MAAM,CAAC;IACnF,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;CACpC,CAAA;AAED,IAAA,qCAAW,EAAC,YAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;AAErC,eAAe;AACf,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;IAC3B,MAAM,IAAA,iCAAmB,GAAE,CAAA;IAE3B,MAAM,GAAG,GAAG,IAAI,aAAG,EAAS,CAAA;IAC5B,GAAG,CAAC,KAAK,GAAG,IAAI,CAAA;IAEhB,GAAG,CAAC,GAAG,CACL,IAAA,cAAI,EAAC;QACH,MAAM,EAAE,UAAU,GAAG;YACnB,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAA;QAC1C,CAAC;QACD,aAAa,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QAC3D,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,IAAI;QACjB,6DAA6D;QAC7D,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;KAC1D,CAAC,CACH,CAAA;IAED,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAE5C,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,YAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAEnD,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAA;QAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,UAAyC,CAAC;aACxE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAA;QAE7C,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,IAAI,sBAAsB,GAAG,EAAE,CAAA;IAC/B,IAAA,6BAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAEtE,MAAM,WAAW,GAAG,MAAM,IAAA,kBAAM,GAAE,CAAA;IAElC,MAAM,UAAU,GAAG,IAAA,mBAAY,EAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC/C,MAAM,eAAe,GAAG,IAAI,oBAAe,CAAC;QAC1C,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IAEF,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAA,cAAS,EAC7B;QACE,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAChC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAA;QACvB,CAAC;QACD,SAAS,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACrB,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAA;YACrC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;YAEvB,IAAI,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;gBACxE,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,CAAE,gBAAgB,CAAC,SAAS,CAAS,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAA;gBACrF,IAAI,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;gBACtD,IAAI,WAAW,EAAE,CAAC;oBAChB,gBAAgB,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAA;gBAC5D,CAAC;YACH,CAAC;YAED,OAAO,CAAC,OAAO,GAAG;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAK,gBAAwB,CAAC;aAC9D,CAAA;YAED,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,cAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;YACnF,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;YAExB,6EAA6E;YAC7E,IAAI,WAAW,GAAG,CAAC,uCAAgB,EAAE,GAAG,sBAAsB,CAAC,CAAA;YAC/D,MAAM,EAAE,GAAG,YAAE,CAAC,IAAI,CAAC,IAAA,qBAAO,EAAC,WAAW,CAAC,CAAC,CAAA;YAExC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAA;YAEpB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,CAAA;QACtC,CAAC;QACD,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM;YAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM;YACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC;KACF,EACD,eAAe,CAChB,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,qBAAY,CAAC;QAC9B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,KAAK,CAAC,EAAE;YACnB,YAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,qFAAqF;QACrF,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;QACpB,wBAAwB,EAAE,KAAK,EAAE,oBAAoB;QACrD,OAAO,EAAE;YACP,uCAAuC;YACvC,IAAA,mDAAiC,EAAC,EAAE,UAAU,EAAE,CAAC;YACjD,4CAA4C;YAC5C;gBACE,KAAK,CAAC,eAAe;oBACnB,OAAO;wBACL,KAAK,CAAC,WAAW;4BACf,MAAM,aAAa,CAAC,OAAO,EAAE,CAAA;wBAC/B,CAAC;qBACF,CAAA;gBACH,CAAC;aACF;YACD,IAAA,yDAAwB,GAAE;SAC3B;QACD,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IAEpB,4CAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAEzC,wBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAChC,MAAM,EAAE,eAAe,EAAE,GAAG,IAAA,YAAM,EAAC,IAAI,CAAC,CAAA;QACxC,eAAe,IAAI,eAAe,CAAC,GAAG,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACpD,MAAM,CAAC,GAAG,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,oBAAoB,IAAI,EAAE;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IAEF,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAA;QACxE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,aAAa;IACb,MAAM,cAAc,GAAG,EAAE,CAAA;IACzB,IAAA,6BAAQ,EAAC,kCAAkC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IAClE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAA;IACnC,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAC3E,IAAA,6BAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE,6BAAkB,CAAC,CAAA;IACzE,IAAA,6BAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE,8BAAmB,CAAC,CAAA;IAE3E,GAAG,CAAC,GAAG,CAAC,uCAAa,CAAC,CAAA,CAAC,gEAAgE;IAEvF,GAAG;SACA,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC;SACzC,GAAG,CAAC,6BAAkB,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,6BAAkB,CAAC,cAAc,EAAE,CAAC;SACxC,GAAG,CAAC,8BAAmB,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,8BAAmB,CAAC,cAAc,EAAE,CAAC,CAAA;IAE5C,oJAAoJ;IACpJ,GAAG,CAAC,GAAG,CAAC,IAAA,6BAAgB,EAAC,gBAAgB,CAAC,CAAC,CAAA;IAE3C,wBAAa,CAAC,IAAI,CAChB,UAAU,EACV,IAAA,mBAAa,EAAC,MAAM,EAAE;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG;KAChC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/B,GAAG,CAAC,GAAG,CAAC,wBAAa,CAAC,cAAc,EAAE,CAAC,CAAA;IAEvC,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAA,sDAAkB,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,GAAG,CAAC,GAAG,CACL,IAAA,oBAAS,EAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE;QAC9C,KAAK,EAAE,YAAY;KACpB,CAAC,CACH,CAAA;IAED,8EAA8E;IAC9E,mFAAmF;IACnF,2BAA2B;IAC3B,MAAM,gBAAgB,GAAG,YAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IAE9D,gFAAgF;IAChF,0FAA0F;IAC1F,mFAAmF;IACnF,kFAAkF;IAClF,gFAAgF;IAChF,gCAAgC;IAChC,UAAU,CAAC,gBAAgB,GAAG,gBAAgB,IAAI,KAAK,CAAA;IAEvD,2EAA2E;IAC3E,iFAAiF;IACjF,qFAAqF;IACrF,gFAAgF;IAChF,+EAA+E;IAC/E,4CAA4C;IAC5C,UAAU,CAAC,cAAc,GAAG,gBAAgB,GAAG,IAAI,CAAA;IAEnD,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;QACrC,YAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,UAAU,CAAC,CAAA;QAChE,YAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,UAAU,CAAC,CAAA;QACrE,IAAA,6BAAQ,EAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAN,YAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACxB,YAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAA;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA","sourcesContent":["// ts-import-sorter: disable\n\n/* following 5 lines should be located in top of the file */\nimport OS from 'os'\nprocess.env.UV_THREADPOOL_SIZE = String(OS.availableParallelism())\n\nconsole.log('UV_THREADPOOL_SIZE', process.env.UV_THREADPOOL_SIZE)\n\nprocess.env.NODE_ENV = 'production'\nprocess.setMaxListeners(0)\n\nimport { ApolloServer } from '@apollo/server'\nimport { ApolloServerPluginDrainHttpServer } from '@apollo/server/plugin/drainHttpServer'\nimport { koaMiddleware } from '@as-integrations/koa'\n\nimport { introspectionForSignedIn } from './introspection-for-signed-in.js'\n\nimport bytesFormat from 'bytes'\nimport graphqlUploadKoa from 'graphql-upload/graphqlUploadKoa.js'\nimport { useServer } from 'graphql-ws/lib/use/ws'\nimport { createServer } from 'http'\nimport Koa from 'koa'\nimport koaBodyParser from 'koa-bodyparser'\nimport koaStatic from 'koa-static'\nimport compose from 'koa-compose'\nimport { historyApiFallback } from 'koa2-connect-history-api-fallback'\nimport { WebSocketServer } from 'ws'\nimport co from 'co'\nimport http from 'http'\nimport path from 'path'\nimport args from 'args'\n\nimport cors from '@koa/cors'\nimport crypto from 'crypto'\n\nimport { config, loader, logger, orderedModuleNames } from '@things-factory/env'\nimport { initLicense, checkValidity } from '@things-factory/operato-license-checker'\n\nimport { GraphqlLocalClient } from './graphql-local-client.js'\nimport { databaseInitializer } from './initializers/database.js'\nimport { emitHook } from './bootstrap-hooks.js'\nimport {\n  domainPrivateRouter,\n  domainPublicRouter,\n  globalPrivateRouter,\n  globalPublicRouter,\n  graphqlRouter\n} from './routers/index.js'\nimport { schema } from './schema.js'\nimport { domainMiddleware } from './middlewares/domain-middleware.js'\nimport { setupProcessExitHandlers } from './process-cleaner.js'\n\nsetupProcessExitHandlers()\n\nargs.option('port', 'The port on which the app will be running', config.get('port', 3000))\n\nconst flags = args.parse(process.argv)\n\nconst PORT = (process.env.PORT = flags.port)\n\nconst requestBody = config.get('requestBody') || {}\n\nprocess['PROXY_PASSTHROUGH_PATHS'] = []\nconst bodyParserOption = {\n  formLimit: requestBody.formLimit || '10mb',\n  jsonLimit: requestBody.jsonLimit || '10mb',\n  textLimit: requestBody.textLimit || '10mb'\n}\n\nconst fileUpload = config.get('fileUpload') || {}\nconst fileUploadOption = {\n  maxFileSize: bytesFormat.parse(fileUpload.maxFileSize) || bytesFormat.parse('10mb'),\n  maxFiles: fileUpload.maxFiles || 10\n}\n\ninitLicense(config.get('licenseKey'))\n\n/* bootstrap */\nconst bootstrap = async () => {\n  await databaseInitializer()\n\n  const app = new Koa() as any\n  app.proxy = true\n\n  app.use(\n    cors({\n      origin: function (ctx) {\n        return ctx.request.headers.origin || '*'\n      },\n      exposeHeaders: ['WWW-Authenticate', 'Server-Authorization'],\n      maxAge: 5,\n      credentials: true,\n      /* allowMethods: ['GET', 'POST', 'DELETE'], -- use default */\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept']\n    })\n  )\n\n  app.use(async (ctx, next) => {\n    ctx.set('X-Content-Type-Options', 'nosniff')\n\n    const { directives = {} } = config.get('CSP') || {}\n\n    const nonce = crypto.randomBytes(16).toString('base64')\n    ctx.state.nonce = nonce\n\n    const cspHeader = Object.entries(directives as { [key: string]: string[] })\n      .map(([key, value]) => `${key} ${value.join(' ')}`)\n      .join('; ')\n\n    ctx.set('Content-Security-Policy', cspHeader)\n\n    await next()\n  })\n\n  var subscriptionMiddleware = []\n  emitHook('bootstrap-module-subscription', app, subscriptionMiddleware)\n\n  const builtSchema = await schema()\n\n  const httpServer = createServer(app.callback())\n  const websocketServer = new WebSocketServer({\n    server: httpServer,\n    path: '/graphql'\n  })\n\n  // Save the returned server's info so we can shut down this server later\n  const serverCleanup = useServer(\n    {\n      schema: builtSchema,\n      context: async (ctx, msg, args) => {\n        return ctx['context']\n      },\n      onConnect: async ctx => {\n        var { extra, connectionParams } = ctx\n        var { request } = extra\n\n        if (((connectionParams['headers'] as any) || connectionParams)?.referer) {\n          var url = new URL(((connectionParams['headers'] as any) || connectionParams).referer)\n          var accessToken = url.searchParams.get('access_token')\n          if (accessToken) {\n            connectionParams['headers']['authorization'] = accessToken\n          }\n        }\n\n        request.headers = {\n          ...request.headers,\n          ...(connectionParams['headers'] || (connectionParams as any))\n        }\n\n        var koacontext = await app.createContext(request, new http.ServerResponse(request))\n        koacontext['state'] = {}\n\n        /* in case connect error(like a authentication error) just throw exception */\n        var middlewares = [domainMiddleware, ...subscriptionMiddleware]\n        const fn = co.wrap(compose(middlewares))\n\n        await fn(koacontext)\n\n        return (ctx['context'] = koacontext)\n      },\n      onDisconnect(ctx, code, reason) {\n        console.log('Disconnected!')\n      },\n      onError(ctx, msg, errors) {\n        console.error(msg, errors)\n      }\n    },\n    websocketServer\n  )\n\n  const server = new ApolloServer({\n    schema: builtSchema,\n    formatError: error => {\n      logger.error(error)\n      return error\n    },\n    /* Open per request to a signed-in user only (ADR-0126); the plugin below decides. */\n    introspection: true,\n    csrfPrevention: true,\n    stopOnTerminationSignals: false, // ★ 자동 시그널 핸들러 비활성화\n    plugins: [\n      // Proper shutdown for the HTTP server.\n      ApolloServerPluginDrainHttpServer({ httpServer }),\n      // Proper shutdown for the WebSocket server.\n      {\n        async serverWillStart() {\n          return {\n            async drainServer() {\n              await serverCleanup.dispose()\n            }\n          }\n        }\n      },\n      introspectionForSignedIn()\n    ],\n    cache: 'bounded'\n  })\n\n  await server.start()\n\n  GraphqlLocalClient.init(builtSchema, app)\n\n  orderedModuleNames.forEach(name => {\n    const { initMiddlewares } = loader(name)\n    initMiddlewares && initMiddlewares(app)\n  })\n\n  const render = require('@things-factory/ejs-remote')\n  render(app, {\n    root: '/views',\n    host: `http://127.0.0.1:${PORT}`,\n    layout: false,\n    viewExt: 'html',\n    cache: true,\n    debug: false\n  })\n\n  // Skip body parser for proxy paths to allow raw body forwarding\n  app.use(async (ctx, next) => {\n    const PROXY_PASSTHROUGH_PATHS = process['PROXY_PASSTHROUGH_PATHS'] || []\n    if (PROXY_PASSTHROUGH_PATHS.some(path => ctx.path.startsWith(path))) {\n      return next()\n    }\n    return koaBodyParser(bodyParserOption)(ctx, next)\n  })\n\n  /* routers */\n  const ssoMiddlewares = []\n  emitHook('bootstrap-collect-sso-middleware', null, ssoMiddlewares)\n  app.ssoMiddlewares = ssoMiddlewares\n  emitHook('bootstrap-module-global-public-route', app, globalPublicRouter)\n  emitHook('bootstrap-module-global-private-route', app, globalPrivateRouter)\n  emitHook('bootstrap-module-domain-public-route', app, domainPublicRouter)\n  emitHook('bootstrap-module-domain-private-route', app, domainPrivateRouter)\n\n  app.use(checkValidity) /* Check the license after most of the context has been built */\n\n  app\n    .use(globalPublicRouter.routes())\n    .use(globalPublicRouter.allowedMethods())\n    .use(globalPrivateRouter.routes())\n    .use(globalPrivateRouter.allowedMethods())\n    .use(domainPublicRouter.routes())\n    .use(domainPublicRouter.allowedMethods())\n    .use(domainPrivateRouter.routes())\n    .use(domainPrivateRouter.allowedMethods())\n\n  /* Graphql Upload's multipart/form-data handling affects the restful file upload feature, so it should be placed after the routers configuration. */\n  app.use(graphqlUploadKoa(fileUploadOption))\n\n  graphqlRouter.post(\n    '/graphql',\n    koaMiddleware(server, {\n      context: async ({ ctx }) => ctx\n    })\n  )\n  app.use(graphqlRouter.routes())\n  app.use(graphqlRouter.allowedMethods())\n\n  /* should follow this order : history-fallback => koaStatic */\n  app.use(historyApiFallback({ whiteList: [] }))\n\n  app.use(\n    koaStatic(path.join(process.cwd(), 'dist-app'), {\n      index: 'index.html'\n    })\n  )\n\n  // Set keep-alive timeout from configuration or fallback to default (65000ms).\n  // The keepAliveTimeout determines how long the server will keep an idle connection\n  // alive before closing it.\n  const keepAliveTimeout = config.get('keepAliveTimeout', 65000)\n\n  // Apply the configured keep-alive timeout to the server. If no configuration is\n  // provided, default to 65000ms (65 seconds). In the context of an external load balancer,\n  // this timeout is critical for maintaining persistent connections between the load\n  // balancer and the server. Setting a sufficiently long keepAliveTimeout minimizes\n  // the need to constantly re-establish TCP connections, improving efficiency and\n  // reducing connection overhead.\n  httpServer.keepAliveTimeout = keepAliveTimeout || 65000\n\n  // Set headersTimeout to be 1000ms (1 second) longer than keepAliveTimeout.\n  // This ensures the server has sufficient time to receive headers from the client\n  // before closing the connection, preventing premature disconnections. In the context\n  // of a load balancer, this ensures that if the load balancer is sending headers\n  // slowly (due to network delays or other factors), the connection isn't closed\n  // before the headers are fully transmitted.\n  httpServer.headersTimeout = keepAliveTimeout + 1000\n\n  httpServer.listen({ port: PORT }, () => {\n    logger.info(`🚀 Server ready at http://0.0.0.0:${PORT}/graphql`)\n    logger.info(`🚀 Subscriptions ready at ws://0.0.0.0:${PORT}/graphql`)\n    emitHook('bootstrap-module-start', { app, config, builtSchema, httpServer })\n  })\n}\n\nbootstrap().catch(error => {\n  logger.error('Failed to bootstrap server', error)\n  process.exit(1)\n})\n"]}