@venizia/ignis-kernel 0.2.0-0

package/dist/esm/base/applications/rest.js

@@ -0,0 +1,225 @@
+import { BindingNamespaces, CoreBindings } from '../../common/bindings.js';
+import { BindingKeys, BindingScopes } from '../../helpers/inversion/index.js';
+import { RestComponent } from '../components/controller/rest/rest.component.js';
+import { ControllerTransports } from '../controllers/common/constants.js';
+import { OpenAPIHono } from '@hono/zod-openapi';
+import { executeWithPerformanceMeasure, RequestIdGenerator } from '@venizia/ignis-helpers/core';
+import { showRoutes as showApplicationRoutes } from 'hono/dev';
+import { requestId } from 'hono/request-id';
+import { BaseAppErrorMiddleware } from '../middlewares/app-error/app-error.middleware.js';
+import { notFoundHandler } from '../middlewares/not-found/not-found.middleware.js';
+import { AbstractApplication } from './abstract.js';
+/** Adds the `OpenAPIHono` router surface on top of `AbstractApplication` - no listening server, so this is the layer a browser Worker or gRPC-only host can extend without pulling in `Bun.serve` / `@hono/node-server`. */
+export class RestApplication extends AbstractApplication {
+    constructor(opts) {
+        super(opts);
+        this.registeredBindings = {};
+        this.requestIdGenerator = new RequestIdGenerator({ scope: opts.scope });
+        const honoServer = new OpenAPIHono({
+            strict: this.configs.strictPath ?? true,
+        });
+        this.rootRouter = new OpenAPIHono({
+            strict: this.configs.strictPath ?? true,
+        });
+        this.server = { hono: honoServer };
+    }
+    getRootRouter() {
+        return this.rootRouter;
+    }
+    getServer() {
+        return this.server.hono;
+    }
+    registerCoreBindings() {
+        super.registerCoreBindings();
+        this.bind({
+            key: CoreBindings.APPLICATION_SERVER,
+        }).toProvider(_ => this.server);
+        this.bind({
+            key: CoreBindings.APPLICATION_ROOT_ROUTER,
+        }).toProvider(_ => this.rootRouter);
+    }
+    /** The correlation id every host stamps - see {@link RequestIdGenerator} for why `crypto.randomUUID` is refused. */
+    generateRequestId() {
+        return this.requestIdGenerator.nextId();
+    }
+    /** The error handler the default stack installs. `@venizia/ignis` overrides it to swap in the `ErrorPrettier`-backed formatter, which reaches `node:util` and so cannot live here. */
+    buildErrorMiddleware() {
+        const environment = this.configs.error?.environment;
+        return new BaseAppErrorMiddleware({
+            logger: this.logger,
+            rootKey: this.configs.error?.rootKey ?? undefined,
+            // Spread, not `environment: () => environment`: the option's PRESENCE is what claims this host
+            // has an ambient environment at all, so an unset config must leave it absent.
+            ...(environment === undefined ? {} : { environment: () => environment }),
+        });
+    }
+    /**
+     * The three registrations every host needs, in one place, so a server and a browser Worker cannot
+     * drift: a request id, the framework's error envelope, and a JSON 404.
+     *
+     * None is optional. Hono's own defaults answer a thrown `ApplicationError` with a generic 500 and
+     * an unrouted path with `text/plain` - a caller doing `response.json()` on that 404 gets a
+     * `SyntaxError` instead of an error envelope. And without `requestId()`, `context.get(REQUEST_ID_KEY)`
+     * is `undefined`, so `context.json` drops the one field that ties a response to a log line.
+     *
+     * Registered before `initialize()`, so an application installing its own handlers still wins.
+     */
+    registerDefaultMiddlewares() {
+        const server = this.getServer();
+        server.use(requestId({ generator: () => this.generateRequestId() }));
+        server.onError(this.buildErrorMiddleware().value());
+        server.notFound(notFoundHandler({ logger: this.logger }));
+    }
+    /**
+     * The artifact ordering, stated ONCE: datasources before repositories can auto-resolve them, and
+     * components before controllers because a component may contribute either.
+     *
+     * A browser Worker application inherits this and writes none of it. `BaseApplication` in
+     * `@venizia/ignis` is the one deliberate override - it interleaves phases only a server has
+     * (start-up banner, env validation, secret hydration and rotation) between these steps.
+     */
+    async initialize() {
+        this.staticConfigure();
+        await this.preConfigure();
+        await this.registerDataSources();
+        await this.registerComponents();
+        await this.registerControllers();
+        await this.postConfigure();
+    }
+    inspectRoutes() {
+        const t = performance.now();
+        const shouldShowRoutes = this.configs?.debug?.shouldShowRoutes ?? false;
+        if (!shouldShowRoutes) {
+            return;
+        }
+        this.logger.for(this.inspectRoutes.name).info('START | Inspect all application route(s)');
+        showApplicationRoutes(this.getServer());
+        this.logger
+            .for(this.inspectRoutes.name)
+            .info('DONE | Inspect all application route(s) | Took: %s (ms)', performance.now() - t);
+    }
+    async registerDynamicBindings(opts) {
+        const logger = this.logger.for(this.registerDynamicBindings.name);
+        const { namespace, onBeforeConfigure, onAfterConfigure } = opts;
+        if (!this.registeredBindings[namespace]) {
+            this.registeredBindings[namespace] = new Set();
+        }
+        const configured = this.registeredBindings[namespace];
+        // A whole batch is drained before re-scanning: the re-scan exists only to pick up bindings a
+        // `configure()` added, and asking after every single item makes boot N+1 full scans of the
+        // binding map - 3.5ms at 200 controllers, against 0.04ms for this shape.
+        let bindings = this.findByTag({ tag: namespace, exclude: configured });
+        while (bindings.length > 0) {
+            for (const binding of bindings) {
+                // Within a batch a nested `configure()` may already have taken this one.
+                if (configured.has(binding.key)) {
+                    continue;
+                }
+                if (onBeforeConfigure) {
+                    await onBeforeConfigure({ binding });
+                }
+                const instance = this.get({ key: binding.key, isOptional: false });
+                if (!instance) {
+                    logger.debug('No binding instance | namespace: %s | key: %s', namespace, binding.key);
+                    configured.add(binding.key);
+                    continue;
+                }
+                await instance.configure();
+                configured.add(binding.key);
+                if (onAfterConfigure) {
+                    await onAfterConfigure({ binding, instance });
+                }
+            }
+            // Re-fetch excluding already configured - picks up dynamically added bindings
+            bindings = this.findByTag({ tag: namespace, exclude: configured });
+        }
+    }
+    component(ctor, opts) {
+        return this.bind({
+            key: BindingKeys.build(opts?.binding ?? { namespace: BindingNamespaces.COMPONENT, key: ctor.name }),
+        })
+            .toClass(ctor)
+            .setScope(BindingScopes.SINGLETON);
+    }
+    async registerComponents() {
+        await executeWithPerformanceMeasure({
+            logger: this.logger,
+            scope: this.registerComponents.name,
+            description: 'Register application components',
+            task: async () => {
+                await this.registerDynamicBindings({
+                    namespace: BindingNamespaces.COMPONENT,
+                    onAfterConfigure: async () => {
+                        // Register any datasources dynamically added by this component
+                        await this.registerDynamicBindings({ namespace: BindingNamespaces.DATASOURCE });
+                    },
+                });
+            },
+        });
+    }
+    /**
+     * Handles the REST branch only - the kernel has no notion of gRPC (it reaches `node:module` via
+     * `AbstractGrpcController`, core-only). `BaseApplication` extends this with the gRPC branch, the
+     * unsupported-transport error and the orphaned-gRPC-controller warning.
+     */
+    async registerControllers() {
+        await executeWithPerformanceMeasure({
+            logger: this.logger,
+            description: 'Register application REST controllers',
+            scope: this.registerControllers.name,
+            task: async () => {
+                const transports = this.configs.transports ?? [ControllerTransports.REST];
+                if (!transports.includes(ControllerTransports.REST)) {
+                    return;
+                }
+                const restComponent = new RestComponent(this);
+                await restComponent.configure();
+            },
+        });
+    }
+    controller(ctor, opts) {
+        return this.bind({
+            key: BindingKeys.build(opts?.binding ?? {
+                namespace: BindingNamespaces.CONTROLLER,
+                key: ctor.name,
+            }),
+        }).toClass(ctor);
+    }
+    service(ctor, opts) {
+        return this.bind({
+            key: BindingKeys.build(opts?.binding ?? {
+                namespace: BindingNamespaces.SERVICE,
+                key: ctor.name,
+            }),
+        }).toClass(ctor);
+    }
+    repository(ctor, opts) {
+        return this.bind({
+            key: BindingKeys.build(opts?.binding ?? {
+                namespace: BindingNamespaces.REPOSITORY,
+                key: ctor.name,
+            }),
+        }).toClass(ctor);
+    }
+    dataSource(ctor, opts) {
+        return this.bind({
+            key: BindingKeys.build(opts?.binding ?? {
+                namespace: BindingNamespaces.DATASOURCE,
+                key: ctor.name,
+            }),
+        })
+            .toClass(ctor)
+            .setScope(BindingScopes.SINGLETON);
+    }
+    async registerDataSources() {
+        await executeWithPerformanceMeasure({
+            logger: this.logger,
+            scope: this.registerDataSources.name,
+            description: 'Register application data sources',
+            task: async () => {
+                await this.registerDynamicBindings({ namespace: BindingNamespaces.DATASOURCE });
+            },
+        });
+    }
+}
+//# sourceMappingURL=rest.js.map

package/dist/esm/base/applications/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../../../src/base/applications/rest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAKvE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOhD,OAAO,EAAE,6BAA6B,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEhG,OAAO,EAAE,UAAU,IAAI,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAUjD,4NAA4N;AAC5N,MAAM,OAAgB,eAIpB,SAAQ,mBAAmB;IAS3B,YAAY,IAAoD;QAC9D,KAAK,CAAC,IAAI,CAAC,CAAC;QATN,uBAAkB,GAAgC,EAAE,CAAC;QAW3D,IAAI,CAAC,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAExE,MAAM,UAAU,GAAG,IAAI,WAAW,CAA8B;YAC9D,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,WAAW,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACrC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAEkB,oBAAoB;QACrC,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAqB;YAC5B,GAAG,EAAE,YAAY,CAAC,kBAAkB;SACrC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAyB;YAChC,GAAG,EAAE,YAAY,CAAC,uBAAuB;SAC1C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,oHAAoH;IAC1G,iBAAiB;QACzB,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,sLAAsL;IAC5K,oBAAoB;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC;QAEpD,OAAO,IAAI,sBAAsB,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS;YACjD,+FAA+F;YAC/F,8EAA8E;YAC9E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACO,0BAA0B;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAEjC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAES,aAAa;QACrB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,IAAI,KAAK,CAAC;QAExE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC1F,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;aAC5B,IAAI,CAAC,yDAAyD,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IAES,KAAK,CAAC,uBAAuB,CACrC,IAAwC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;QAEhE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,IAAI,GAAG,EAAU,CAAC;QACzD,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAEtD,6FAA6F;QAC7F,2FAA2F;QAC3F,yEAAyE;QACzE,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,yEAAyE;gBACzE,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,SAAS;gBACX,CAAC;gBAED,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvC,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;oBACtF,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC3B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE5B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,8EAA8E;YAC9E,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,SAAS,CACP,IAAkB,EAClB,IAAuB;QAEvB,OAAO,IAAI,CAAC,IAAI,CAAO;YACrB,GAAG,EAAE,WAAW,CAAC,KAAK,CACpB,IAAI,EAAE,OAAO,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAC5E;SACF,CAAC;aACC,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI;YACnC,WAAW,EAAE,iCAAiC;YAC9C,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,IAAI,CAAC,uBAAuB,CAAC;oBACjC,SAAS,EAAE,iBAAiB,CAAC,SAAS;oBACtC,gBAAgB,EAAE,KAAK,IAAI,EAAE;wBAC3B,+DAA+D;wBAC/D,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;oBAClF,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,uCAAuC;YACpD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAC1E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,OAAO;gBACT,CAAC;gBAED,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC9C,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;YAClC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CACR,IAAkB,EAClB,IAAuB;QAEvB,OAAO,IAAI,CAAC,IAAI,CAAO;YACrB,GAAG,EAAE,WAAW,CAAC,KAAK,CACpB,IAAI,EAAE,OAAO,IAAI;gBACf,SAAS,EAAE,iBAAiB,CAAC,UAAU;gBACvC,GAAG,EAAE,IAAI,CAAC,IAAI;aACf,CACF;SACF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,CACL,IAAkB,EAClB,IAAuB;QAEvB,OAAO,IAAI,CAAC,IAAI,CAAO;YACrB,GAAG,EAAE,WAAW,CAAC,KAAK,CACpB,IAAI,EAAE,OAAO,IAAI;gBACf,SAAS,EAAE,iBAAiB,CAAC,OAAO;gBACpC,GAAG,EAAE,IAAI,CAAC,IAAI;aACf,CACF;SACF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,UAAU,CACR,IAAkB,EAClB,IAAuB;QAEvB,OAAO,IAAI,CAAC,IAAI,CAAO;YACrB,GAAG,EAAE,WAAW,CAAC,KAAK,CACpB,IAAI,EAAE,OAAO,IAAI;gBACf,SAAS,EAAE,iBAAiB,CAAC,UAAU;gBACvC,GAAG,EAAE,IAAI,CAAC,IAAI;aACf,CACF;SACF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,UAAU,CACR,IAAkB,EAClB,IAAuB;QAEvB,OAAO,IAAI,CAAC,IAAI,CAAO;YACrB,GAAG,EAAE,WAAW,CAAC,KAAK,CACpB,IAAI,EAAE,OAAO,IAAI;gBACf,SAAS,EAAE,iBAAiB,CAAC,UAAU;gBACvC,GAAG,EAAE,IAAI,CAAC,IAAI;aACf,CACF;SACF,CAAC;aACC,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,WAAW,EAAE,mCAAmC;YAChD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;YAClF,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/esm/base/applications/types.d.ts

@@ -0,0 +1,111 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import type { ValueOrPromise } from '@venizia/ignis-helpers/common';
+import type { Context, Env, Schema } from 'hono';
+import type { IPRestrictionRules as IIPRestrictionRules } from 'hono/ip-restriction';
+import type { TControllerTransport } from '../controllers/common/constants.js';
+import type { IComponentMixin, IControllerMixin, IRepositoryMixin, IServiceMixin, IStaticServeMixin } from '../mixins/types.js';
+export interface IBaseMiddlewareOptions {
+    enable: boolean;
+    path?: string;
+    [extra: string | symbol]: any;
+}
+export interface ICompressOptions extends IBaseMiddlewareOptions {
+    encoding: 'gzip' | 'deflate';
+    threshold?: number;
+}
+export type TOrigin = string | string[] | ((origin: string, c: Context) => Promise<string | undefined | null> | string | undefined | null);
+export interface ICORSOptions extends IBaseMiddlewareOptions {
+    origin: TOrigin;
+    allowMethods?: string[] | ((origin: string, c: Context) => Promise<string[]> | string[]);
+    allowHeaders?: string[];
+    maxAge?: number;
+    credentials?: boolean;
+    exposeHeaders?: string[];
+}
+export type TIsAllowedOriginHandler = (origin: string, context: Context) => boolean;
+export declare const SecFetchSiteValues: readonly ["same-origin", "same-site", "none", "cross-site"];
+export type TSecFetchSite = (typeof SecFetchSiteValues)[number];
+export type TIsAllowedSecFetchSiteHandler = (secFetchSite: TSecFetchSite, context: Context) => boolean;
+export interface ICSRFOptions extends IBaseMiddlewareOptions {
+    origin?: string | string[] | TIsAllowedOriginHandler;
+    secFetchSite?: TSecFetchSite | TSecFetchSite[] | TIsAllowedSecFetchSiteHandler;
+}
+export interface IBodyLimitOptions extends IBaseMiddlewareOptions {
+    maxSize: number;
+    onError?: (c: Context) => Response | Promise<Response>;
+}
+export interface IRequestIdOptions extends IBaseMiddlewareOptions {
+}
+export interface IMiddlewareConfigs {
+    requestId?: IRequestIdOptions;
+    compress?: ICompressOptions;
+    cors?: ICORSOptions;
+    csrf?: ICSRFOptions;
+    bodyLimit?: IBodyLimitOptions;
+    ipRestriction?: IBaseMiddlewareOptions & IIPRestrictionRules;
+    [extra: string | symbol]: any;
+}
+/**
+ * Structural mirror of `@venizia/ignis-boot`'s `IBootOptions` - kernel does not depend on boot
+ * (boot sits beside kernel in the Makefile chain, `{boot, kernel} -> core`; importing boot's type
+ * here would invert that). Both shapes are the same artifact-glob bag keyed by artifact type, so a
+ * real `IBootOptions` value is structurally assignable to this without a cast.
+ */
+export interface IApplicationArtifactOptions {
+    dirs?: string[];
+    extensions?: string[];
+    isNested?: boolean;
+    glob?: string;
+}
+export interface IApplicationBootOptions {
+    [artifactType: string]: IApplicationArtifactOptions | undefined;
+}
+/** No `host`/`port`: a browser Worker has neither, and carrying them here made one silently configured with `localhost:3000`. `@venizia/ignis` widens this shape with both - see its `IServerApplicationConfigs`. */
+export interface IApplicationConfigs {
+    path: {
+        base: string;
+        isStrict: boolean;
+    };
+    requestId?: {
+        isStrict: boolean;
+    };
+    favicon?: string;
+    /** `environment` is the host's ambient environment name. Set it where there is none to read - a browser Worker - so the error middleware can tell "no ambient environment" from "misconfigured". Absent on a server, which reads `process.env.NODE_ENV`. */
+    error?: {
+        rootKey?: string;
+        environment?: string;
+    };
+    asyncContext?: {
+        enable: boolean;
+    };
+    bootOptions?: IApplicationBootOptions;
+    debug?: {
+        shouldShowRoutes?: boolean;
+    };
+    /** Controller transports to enable. Defaults to ['rest']. */
+    transports?: TControllerTransport[];
+    [key: string]: any;
+}
+export interface IApplicationInfo {
+    name: string;
+    version: string;
+    description: string;
+    author?: {
+        name: string;
+        email: string;
+        url?: string;
+    };
+    [extra: string | symbol]: any;
+}
+/** Exactly what EVERY host implements. `getServerHost`/`getServerPort`/`getServerAddress`/`start`/`stop` are not here on purpose - a browser Worker can implement none of them; they live on `@venizia/ignis`'s `IServerApplication`. */
+export interface IApplication<AppEnv extends Env = Env, AppSchema extends Schema = Schema, BasePath extends string = '/'> {
+    getProjectRoot(): string;
+    getProjectConfigs(): IApplicationConfigs;
+    getServer(): OpenAPIHono<AppEnv, AppSchema, BasePath>;
+    getRootRouter(): OpenAPIHono<AppEnv, AppSchema, BasePath>;
+    setupMiddlewares(): ValueOrPromise<void>;
+    initialize(): ValueOrPromise<void>;
+}
+export interface IRestApplication extends IApplication, IComponentMixin, IControllerMixin, IRepositoryMixin, IServiceMixin, IStaticServeMixin {
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/base/applications/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,IAAI,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;IAC9D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GACf,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CACC,MAAM,EAAE,MAAM,EACd,CAAC,EAAE,OAAO,KACP,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;AACzE,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IACzF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;AACpF,eAAO,MAAM,kBAAkB,6DAA8D,CAAC;AAC9F,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,6BAA6B,GAAG,CAC1C,YAAY,EAAE,aAAa,EAC3B,OAAO,EAAE,OAAO,KACb,OAAO,CAAC;AAEb,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,uBAAuB,CAAC;IACrD,YAAY,CAAC,EAAE,aAAa,GAAG,aAAa,EAAE,GAAG,6BAA6B,CAAC;CAChF;AAED,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;CAAG;AAEpE,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,aAAa,CAAC,EAAE,sBAAsB,GAAG,mBAAmB,CAAC;IAC7D,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,CAAC,YAAY,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS,CAAC;CACjE;AAED,qNAAqN;AACrN,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4PAA4P;IAC5P,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,KAAK,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,yOAAyO;AACzO,MAAM,WAAW,YAAY,CAC3B,MAAM,SAAS,GAAG,GAAG,GAAG,EACxB,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,QAAQ,SAAS,MAAM,GAAG,GAAG;IAE7B,cAAc,IAAI,MAAM,CAAC;IACzB,iBAAiB,IAAI,mBAAmB,CAAC;IACzC,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE1D,gBAAgB,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAEzC,UAAU,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBACf,SACE,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB;CAAG"}

package/dist/esm/base/applications/types.js

@@ -0,0 +1,2 @@
+export const SecFetchSiteValues = ['same-origin', 'same-site', 'none', 'cross-site'];
+//# sourceMappingURL=types.js.map

package/dist/esm/base/applications/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/base/applications/types.ts"],"names":[],"mappings":"AAyCA,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC"}

package/dist/esm/base/auth/authenticate/common/codecs.d.ts

@@ -0,0 +1,11 @@
+import type { IJWTTokenPayload, IPayloadFieldCodec } from './types.js';
+export declare class AuthenticationFieldCodecs {
+    static readonly ROLES_CODEC: IPayloadFieldCodec<IJWTTokenPayload['roles']>;
+    /** Builds a single payload field codec. */
+    static build<T = unknown>(opts: {
+        key: string;
+        serialize: IPayloadFieldCodec<T>['serialize'];
+        deserialize: IPayloadFieldCodec<T>['deserialize'];
+    }): IPayloadFieldCodec<T>;
+}
+//# sourceMappingURL=codecs.d.ts.map

package/dist/esm/base/auth/authenticate/common/codecs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecs.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/codecs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAEpE,qBAAa,yBAAyB;IACpC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAWxE;IAEF,2CAA2C;IAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE;QAC9B,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC9C,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;KACnD,GAAG,kBAAkB,CAAC,CAAC,CAAC;CAO1B"}

package/dist/esm/base/auth/authenticate/common/codecs.js

@@ -0,0 +1,24 @@
+import { int } from '@venizia/ignis-helpers/core';
+export class AuthenticationFieldCodecs {
+    static { this.ROLES_CODEC = {
+        key: 'roles',
+        serialize(opts) {
+            return JSON.stringify(opts.value.map(el => `${el.id}|${el.identifier}|${el.priority}`));
+        },
+        deserialize(opts) {
+            return JSON.parse(opts.raw).map(el => {
+                const [id, identifier, priority] = el.split('|');
+                return { id, identifier, priority: int(priority) };
+            });
+        },
+    }; }
+    /** Builds a single payload field codec. */
+    static build(opts) {
+        return {
+            key: opts.key,
+            serialize: opts.serialize,
+            deserialize: opts.deserialize,
+        };
+    }
+}
+//# sourceMappingURL=codecs.js.map

package/dist/esm/base/auth/authenticate/common/codecs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecs.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/codecs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,6BAA6B,CAAC;AAGlD,MAAM,OAAO,yBAAyB;aACpB,gBAAW,GAAkD;QAC3E,GAAG,EAAE,OAAO;QACZ,SAAS,CAAC,IAAI;YACZ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,WAAW,CAAC,IAAI;YACd,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBACjD,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjD,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,2CAA2C;IAC3C,MAAM,CAAC,KAAK,CAAc,IAIzB;QACC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;IACJ,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants.d.ts

@@ -0,0 +1,59 @@
+import type { TConstValue } from '@venizia/ignis-helpers/common';
+export declare class AuthenticateStrategy {
+    static readonly BASIC = "basic";
+    static readonly JWT = "jwt";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TAuthStrategy = TConstValue<typeof AuthenticateStrategy>;
+export declare class JOSEStandards {
+    static readonly JWS = "JWS";
+    static readonly JWKS = "JWKS";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJOSEStandard = TConstValue<typeof JOSEStandards>;
+export declare class Authentication {
+    static readonly STRATEGY_BASIC = "basic";
+    static readonly STRATEGY_JWT = "jwt";
+    static readonly TYPE_BASIC = "Basic";
+    static readonly TYPE_BEARER = "Bearer";
+    static readonly AUTHENTICATION_STRATEGY = "authentication.strategy";
+    static readonly SKIP_AUTHENTICATION = "authentication.skip";
+    static readonly CURRENT_USER = "auth.current.user";
+    static readonly AUDIT_USER_ID = "audit.user.id";
+}
+export declare class AuthenticationTokenTypes {
+    static readonly TYPE_AUTHORIZATION_CODE = "000_AUTHORIZATION_CODE";
+    static readonly TYPE_ACCESS_TOKEN = "100_ACCESS_TOKEN";
+    static readonly TYPE_REFRESH_TOKEN = "200_REFRESH_TOKEN";
+}
+export declare class AuthenticationModes {
+    static readonly ANY = "any";
+    static readonly ALL = "all";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TAuthMode = TConstValue<typeof AuthenticationModes>;
+export declare class JWKSModes {
+    static readonly ISSUER = "issuer";
+    static readonly VERIFIER = "verifier";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJWKSMode = TConstValue<typeof JWKSModes>;
+export declare class JWKSKeyDrivers {
+    static readonly TEXT = "text";
+    static readonly FILE = "file";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJWKSKeyDriver = TConstValue<typeof JWKSKeyDrivers>;
+export declare class JWKSKeyFormats {
+    static readonly PEM = "pem";
+    static readonly JWK = "jwk";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJWKSKeyFormat = TConstValue<typeof JWKSKeyFormats>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/esm/base/auth/authenticate/common/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAE9D,qBAAa,cAAc;IAEzB,MAAM,CAAC,QAAQ,CAAC,cAAc,WAA8B;IAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,SAA4B;IAGxD,MAAM,CAAC,QAAQ,CAAC,UAAU,WAAW;IACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,YAAY;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,6BAA6B;IACpE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,yBAAyB;IAE5D,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,aAAa,mBAAmB;CACjD;AAED,qBAAa,wBAAwB;IACnC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,4BAA4B;IACnE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,sBAAsB;IACvD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAuB;CAC1D;AAED,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qBAAa,SAAS;IACpB,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;IAEtC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAyC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC;AAEtD,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants.js

@@ -0,0 +1,66 @@
+export class AuthenticateStrategy {
+    static { this.BASIC = 'basic'; }
+    static { this.JWT = 'jwt'; }
+    static { this.SCHEME_SET = new Set([this.BASIC, this.JWT]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JOSEStandards {
+    static { this.JWS = 'JWS'; }
+    static { this.JWKS = 'JWKS'; }
+    static { this.SCHEME_SET = new Set([this.JWS, this.JWKS]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class Authentication {
+    // Strategy
+    static { this.STRATEGY_BASIC = AuthenticateStrategy.BASIC; }
+    static { this.STRATEGY_JWT = AuthenticateStrategy.JWT; }
+    // Token type
+    static { this.TYPE_BASIC = 'Basic'; }
+    static { this.TYPE_BEARER = 'Bearer'; }
+    static { this.AUTHENTICATION_STRATEGY = 'authentication.strategy'; }
+    static { this.SKIP_AUTHENTICATION = 'authentication.skip'; }
+    static { this.CURRENT_USER = 'auth.current.user'; }
+    static { this.AUDIT_USER_ID = 'audit.user.id'; }
+}
+export class AuthenticationTokenTypes {
+    static { this.TYPE_AUTHORIZATION_CODE = '000_AUTHORIZATION_CODE'; }
+    static { this.TYPE_ACCESS_TOKEN = '100_ACCESS_TOKEN'; }
+    static { this.TYPE_REFRESH_TOKEN = '200_REFRESH_TOKEN'; }
+}
+export class AuthenticationModes {
+    static { this.ANY = 'any'; }
+    static { this.ALL = 'all'; }
+    static { this.SCHEME_SET = new Set([this.ANY, this.ALL]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JWKSModes {
+    static { this.ISSUER = 'issuer'; }
+    static { this.VERIFIER = 'verifier'; }
+    static { this.SCHEME_SET = new Set([this.ISSUER, this.VERIFIER]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JWKSKeyDrivers {
+    static { this.TEXT = 'text'; }
+    static { this.FILE = 'file'; }
+    static { this.SCHEME_SET = new Set([this.TEXT, this.FILE]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JWKSKeyFormats {
+    static { this.PEM = 'pem'; }
+    static { this.JWK = 'jwk'; }
+    static { this.SCHEME_SET = new Set([this.PEM, this.JWK]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+//# sourceMappingURL=constants.js.map

package/dist/esm/base/auth/authenticate/common/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/constants.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,oBAAoB;aACf,UAAK,GAAG,OAAO,CAAC;aAChB,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAIH,MAAM,OAAO,aAAa;aACR,QAAG,GAAG,KAAK,CAAC;aACZ,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,cAAc;IACzB,WAAW;aACK,mBAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC;aAC5C,iBAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC;IAExD,aAAa;aACG,eAAU,GAAG,OAAO,CAAC;aACrB,gBAAW,GAAG,QAAQ,CAAC;aAEvB,4BAAuB,GAAG,yBAAyB,CAAC;aACpD,wBAAmB,GAAG,qBAAqB,CAAC;aAE5C,iBAAY,GAAG,mBAAmB,CAAC;aACnC,kBAAa,GAAG,eAAe,CAAC;;AAGlD,MAAM,OAAO,wBAAwB;aACnB,4BAAuB,GAAG,wBAAwB,CAAC;aACnD,sBAAiB,GAAG,kBAAkB,CAAC;aACvC,uBAAkB,GAAG,mBAAmB,CAAC;;AAG3D,MAAM,OAAO,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,SAAS;aACJ,WAAM,GAAG,QAAQ,CAAC;aAClB,aAAQ,GAAG,UAAU,CAAC;aAEtB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,cAAc;aACT,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,cAAc;aACT,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC"}

package/dist/esm/base/auth/authenticate/common/errors.d.ts

@@ -0,0 +1,91 @@
+import type { TRegisterErrors } from '@venizia/ignis-helpers/core';
+/** Codes a client branches on for a failed authentication. A throw site may override `message` for detail; the code and status come from here. */
+export declare const AuthenticationErrors: {
+    readonly HEADER_MISSING: {
+        readonly message: {
+            readonly text: "Missing authorization header";
+            readonly code: "core.authentication.header_missing";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly SCHEME_INVALID: {
+        readonly message: {
+            readonly text: "Unsupported authorization scheme";
+            readonly code: "core.authentication.scheme_invalid";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly HEADER_MALFORMED: {
+        readonly message: {
+            readonly text: "Malformed authorization header";
+            readonly code: "core.authentication.header_malformed";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly TOKEN_MISSING: {
+        readonly message: {
+            readonly text: "Missing request token";
+            readonly code: "core.authentication.token_missing";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    /** Covers expiry, a bad signature and a malformed token alike - the reason rides in `cause`, never in the code a client sees. */
+    readonly TOKEN_INVALID: {
+        readonly message: {
+            readonly text: "Invalid or expired token";
+            readonly code: "core.authentication.token_invalid";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly TOKEN_PAYLOAD_INVALID: {
+        readonly message: {
+            readonly text: "Invalid token payload";
+            readonly code: "core.authentication.token_payload_invalid";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly CREDENTIALS_MALFORMED: {
+        readonly message: {
+            readonly text: "Malformed credentials";
+            readonly code: "core.authentication.credentials_malformed";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly CREDENTIALS_INVALID: {
+        readonly message: {
+            readonly text: "Invalid username or password";
+            readonly code: "core.authentication.credentials_invalid";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly FAILED: {
+        readonly message: {
+            readonly text: "Authentication failed";
+            readonly code: "core.authentication.failed";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+    readonly USER_UNRESOLVED: {
+        readonly message: {
+            readonly text: "Failed to identify authenticated user";
+            readonly code: "core.authentication.user_unresolved";
+        };
+        readonly statusCode: 401;
+        readonly category: "auth";
+    };
+};
+/** Registers these codes with the shared key registry so a consumer gets autocomplete on `messageCode`. Augments the `/core` subpath, not the root barrel - kernel never imports the bare package, so nothing else in this program would make the root specifier resolvable for the merge. */
+declare module '@venizia/ignis-helpers/core' {
+    interface IErrorKeyRegistry extends TRegisterErrors<typeof AuthenticationErrors> {
+    }
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/base/auth/authenticate/common/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAIrF,kJAAkJ;AAClJ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA8B/B,iIAAiI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9E,CAAC;AAEtD,8RAA8R;AAC9R,OAAO,QAAQ,6BAA6B,CAAC;IAC3C,UAAU,iBAAkB,SAAQ,eAAe,CAAC,OAAO,oBAAoB,CAAC;KAAG;CACpF"}