@venizia/ignis 0.4.0 → 0.4.1

package/dist/base/applications/base.js

@@ -112,7 +112,7 @@ class BaseApplication extends server_1.ServerApplication {
             if (provider) {
                 await provider
                     .shutdown()
-                    .catch(shutdownError => logger.error('Failed to shut down partially-built provider during fallback | error: %s', shutdownError));
+                    .catch((shutdownError) => logger.error('Failed to shut down partially-built provider during fallback | error: %s', shutdownError));
             }
             provider = await (0, ignis_helpers_1.createSecretsHelper)({
                 provider: ignis_helpers_1.SecretProviders.SYSTEM_ENVS,

package/dist/base/applications/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/base/applications/base.ts"],"names":[],"mappings":";;;AAAA,gEAAuE;AACvE,wDAA6D;AAC7D,wDAAwE;AACxE,wDAAwD;AACxD,6CAAuD;AACvD,uDAA6D;AAC7D,wDAM+B;AAS/B,sDAAyE;AACzE,0DAA8E;AAC9E,0DAOgC;AAChC,0DAAqE;AACrE,gDAAkE;AAClE,6CAA+C;AAC/C,qCAA6C;AAI7C,8HAA8H;AAC9H,MAAM,mBAAmB,GAAG,CAAC,IAG5B,EAA0B,EAAE;IAC3B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAsB,eAAgB,SAAQ,0BAAiB;IAInD,aAAa,CAAC,GAAG,QAAkB;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,6IAA6I;IACpI,KAAK,CAAC,mBAAmB;QAChC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAElC,MAAM,IAAA,6CAA6B,EAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,uCAAuC;YACpD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,mCAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,SAAS,KAAK,mCAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,SAAS;oBACX,CAAC;oBAED,IAAI,SAAS,KAAK,mCAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,MAAM,IAAA,eAAQ,EAAC;4BACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;4BACrD,OAAO,EAAE,iDAAiD,SAAS,GAAG;yBACvE,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,oBAAa,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClC,CAAC;gBAED,mEAAmE;gBACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,mCAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,gCAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,SAAS;oBACX,CAAC;oBAED,MAAM,QAAQ,GAAG,+BAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClF,IAAI,QAAQ,EAAE,SAAS,KAAK,mCAAoB,CAAC,IAAI,EAAE,CAAC;wBACtD,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;yBAClC,KAAK,CACJ,mGAAmG,EACnG,OAAO,CAAC,GAAG,EACX,mCAAoB,CAAC,IAAI,CAC1B,CAAC;gBACN,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,eAAe;QACb,OAAO,EAAE,QAAQ,EAAE,+BAAe,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,IAAI,QAAoC,CAAC;QACzC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,mCAAmB,EAAC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAErF,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,2BAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,2BAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,iFAAiF,GAAG,EAAE;iBAChG,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E,GAAG,EACH,KAAK,CACN,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ;qBACX,QAAQ,EAAE;qBACV,KAAK,CAAC,aAAa,CAAC,EAAE,CACrB,MAAM,CAAC,KAAK,CACV,0EAA0E,EAC1E,aAAa,CACd,CACF,CAAC;YACN,CAAC;YACD,QAAQ,GAAG,MAAM,IAAA,mCAAmB,EAAC;gBACnC,QAAQ,EAAE,+BAAe,CAAC,WAAW;gBACrC,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,eAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,2BAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,2BAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,6GAA6G,GAAG,aAAa,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnK,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,qGAAqG,EACrG,GAAG,EACH,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAiB,EAAE,GAAG,EAAE,2BAAY,CAAC,kBAAkB,EAAE,CAAC;aAChE,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;aAC1B,QAAQ,CAAC,4BAAa,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;IAC1C,CAAC;IAED,4KAA4K;IAClK,KAAK,CAAC,oBAAoB,CAAC,IAKpC;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEjE,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CACT,oFAAoF,EACpF,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAES,mBAAmB,CAAC,IAG7B;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,sCAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gMAAgM;IACtL,+BAA+B,CAAC,IAAoC;QAC5E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAA+C;QACpD,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,uBAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;YACD,KAAK,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;oBAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;oBAC1F,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,gGAAgG;qBAC1G,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,0DAA0D;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;aACrB,KAAK,CACJ,+DAA+D,EAC/D,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,UAAU,CACX,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACO,gBAAgB,CAAC,IAAuB;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE,CACrD,IAAA,uBAAgB,EAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;QACjD,MAAM,OAAO,GAAG,0EAA0E,CAAC;QAE3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,4DAA4D,EAC5D,IAAI,CAAC,8BAAe,CAAC,wBAAwB,EAAE,KAAK,CAAC,EACrD,2BAAW,CAAC,OAAO,EACnB,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,gCAAgC,EAChC,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAC1C,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,8BAAe,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,8BAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,kGAAkG;IAC/E,oBAAoB;QACrC,OAAO,IAAI,gCAAkB,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAED,gKAAgK;IAC7I,KAAK,CAAC,0BAA0B;QACjD,MAAM,IAAA,6CAA6B,EAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI;YAC3C,WAAW,EAAE,6CAA6C;YAC1D,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAEhC,MAAM,KAAK,CAAC,0BAA0B,EAAE,CAAC;gBAEzC,iGAAiG;gBACjG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,qCAAsB,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAA,+BAAa,GAAE,EAAE,CAAC,CAAC;gBAExE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,IAAA,gCAAc,GAAE,CAAC,CAAC;gBAC/B,CAAC;gBAED,wFAAwF;gBACxF,6GAA6G;gBAC7G,IAAI,CAAC,SAAS,CAAC,oCAAuB,CAAC,CAAC;gBAExC,MAAM,CAAC,GAAG,CAAC,IAAA,0BAAY,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,8MAA8M;IACpM,YAAY;QACpB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,sCAAsB,CAAC,IAAI,EAAE,CAAC;QAE9C,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,UAAU,KAAK,SAAS,IAAI,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,yEAAyE,EACzE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAC/C,CAAC;QAEJ,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;iBAC3B,IAAI,CACH,6EAA6E,EAC7E,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,sCAAsB,CAAC,GAAG,CAAkB,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,IAAA,gBAAO,EAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,wDAAwD,MAAM,aAAa,QAAQ,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;aAC3B,IAAI,CACH,qEAAqE,EACrE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CACtB,CAAC;IACN,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAEkB,eAAe;QAChC,MAAM,KAAK,GAAwB;YACjC;gBACE,IAAI,EAAE,4BAAe,CAAC,mBAAmB;gBACzC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aAClE;YACD,EAAE,IAAI,EAAE,4BAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE;YACvE;gBACE,IAAI,EAAE,4BAAe,CAAC,4BAA4B;gBAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;YACD,GAAG,KAAK,CAAC,eAAe,EAAE;SAC3B,CAAC;QAEF,MAAM,WAAW,GAAG,2BAAY,CAAC,WAAW,CAAC;YAC3C,KAAK;YACL,MAAM,EAAE,4BAAe,CAAC,aAAa;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,4BAAe,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE;SAClF,CAAC,CAAC;QAEH,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,cAAc,GAAG,2BAAY,CAAC,WAAW,CAAC;YAC9C,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,4BAAe,CAAC,iCAAiC;YACzD,IAAI,EAAE;gBACJ,IAAI,EAAE,4BAAe,CAAC,sBAAsB;gBAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,6DAA6D;YAC7D;gBACE,IAAI,EAAE,4BAAe,CAAC,6BAA6B;gBACnD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,0BAA0B;QAClC,IAAA,6CAA0B,EAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;CACF;AAlbD,0CAkbC","sourcesContent":["import { assertScopeFilterSupported } from '@venizia/ignis-connectors';\nimport { ControllerTransports } from '@venizia/ignis-kernel';\nimport { BindingNamespaces, CoreBindings } from '@venizia/ignis-kernel';\nimport { EnvironmentKeys } from '@/common/environments';\nimport { RequestTrackerComponent } from '@/components';\nimport { GrpcComponent } from '@/components/controller/grpc';\nimport {\n  BindingScopes,\n  BindingValueTypes,\n  BootSequence,\n  MetadataRegistry,\n  RequestContextRegistry,\n} from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type {\n  ISecretHydrateEntry,\n  ISecretRotatable,\n  ISecretsHelper,\n  ISecretsRegistration,\n} from '@venizia/ignis-helpers';\nimport { blankToUndefined, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, RuntimeModules, isEmpty } from '@venizia/ignis-helpers/common';\nimport {\n  applicationEnvironment,\n  createSecretsHelper,\n  Environment,\n  executeWithPerformanceMeasure,\n  SecretProviders,\n  toBoolean,\n} from '@venizia/ignis-helpers';\nimport { contextStorage, tryGetContext } from 'hono/context-storage';\nimport { AppErrorMiddleware, emojiFavicon } from '../middlewares';\nimport { ServerBootSteps } from './boot-steps';\nimport { ServerApplication } from './server';\nimport type { IRestApplication } from '@venizia/ignis-kernel';\nimport type { IBootSequenceStep } from '@venizia/ignis-kernel';\n\n/** Maps a secret bundle to env names: the explicit `keys` mapping when present, otherwise every bundle key under `prefix`. */\nconst selectSecretEnvKeys = (opts: {\n  bundle: Record<string, string>;\n  entry: ISecretHydrateEntry;\n}): Record<string, string> => {\n  const { bundle, entry } = opts;\n  const merged: Record<string, string> = {};\n\n  if (!entry.keys) {\n    const bundleEntries = Object.entries(bundle);\n    for (const [rawKey, value] of bundleEntries) {\n      merged[`${entry.prefix ?? ''}${rawKey}`] = value;\n    }\n\n    return merged;\n  }\n\n  const entryKeysEntries = Object.entries(entry.keys);\n  for (const [rawKey, envKey] of entryKeysEntries) {\n    const value = bundle[rawKey];\n    if (value === undefined) {\n      continue;\n    }\n\n    merged[envKey] = value;\n  }\n\n  return merged;\n};\n\nexport abstract class BaseApplication extends ServerApplication implements IRestApplication {\n  protected secretsProvider?: ISecretsHelper;\n  protected secretsRegistration?: ISecretsRegistration;\n\n  protected normalizePath(...segments: string[]): string {\n    const joined = segments.join('/').replace(/\\/+/g, '/').replace(/\\/$/, '');\n    return joined || '/';\n  }\n\n  /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */\n  override async registerControllers(): Promise<void> {\n    await super.registerControllers();\n\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      description: 'Register application gRPC controllers',\n      scope: this.registerControllers.name,\n      task: async () => {\n        const transports = this.configs.transports ?? [ControllerTransports.REST];\n\n        for (const transport of transports) {\n          if (transport === ControllerTransports.REST) {\n            continue;\n          }\n\n          if (transport !== ControllerTransports.GRPC) {\n            throw getError({\n              statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n              message: `[registerControllers] Unsupported transport: '${transport}'`,\n            });\n          }\n\n          const grpcComponent = new GrpcComponent(this);\n          await grpcComponent.configure();\n        }\n\n        // Warn if gRPC controllers exist but gRPC transport is not enabled\n        if (transports.includes(ControllerTransports.GRPC)) {\n          return;\n        }\n\n        const allBindings = this.findByTag({ tag: BindingNamespaces.CONTROLLER });\n        for (const binding of allBindings) {\n          const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n          if (!target) {\n            continue;\n          }\n\n          const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n          if (metadata?.transport !== ControllerTransports.GRPC) {\n            continue;\n          }\n\n          this.logger\n            .for(this.registerControllers.name)\n            .error(\n              'gRPC controller \"%s\" discovered but gRPC transport is not enabled. Add \"%s\" to transports config.',\n              binding.key,\n              ControllerTransports.GRPC,\n            );\n        }\n      },\n    });\n  }\n\n  registerSecrets(): ValueOrPromise<ISecretsRegistration> {\n    return { provider: SecretProviders.SYSTEM_ENVS };\n  }\n\n  async hydrateSecrets(): Promise<void> {\n    const logger = this.logger.for(this.hydrateSecrets.name);\n    const registration = await this.registerSecrets();\n\n    let provider: ISecretsHelper | undefined;\n    const emptyHydrations: string[] = [];\n    try {\n      provider = await createSecretsHelper({ ...registration, identifier: 'app' });\n      await provider.configure();\n\n      await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });\n\n      const registrationLease = registration.lease ?? [];\n      for (const entry of registrationLease) {\n        await provider.lease({ path: entry.path, key: entry.key });\n      }\n    } catch (error) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Secret provider failed in non-development environment | env: ${env}`,\n        });\n      }\n      logger.warn(\n        'Secret provider failed; falling back to system-envs | env: %s | error: %s',\n        env,\n        error,\n      );\n\n      if (provider) {\n        await provider\n          .shutdown()\n          .catch(shutdownError =>\n            logger.error(\n              'Failed to shut down partially-built provider during fallback | error: %s',\n              shutdownError,\n            ),\n          );\n      }\n      provider = await createSecretsHelper({\n        provider: SecretProviders.SYSTEM_ENVS,\n        identifier: 'app',\n      });\n    }\n\n    if (!provider) {\n      throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });\n    }\n\n    if (emptyHydrations.length > 0) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Hydrate entries resolved to an empty secret bundle in non-development environment | env: ${env} | paths: ${emptyHydrations.join(', ')}`,\n        });\n      }\n      logger.warn(\n        'Hydrate entries resolved to an empty secret bundle; continuing in development | env: %s | paths: %s',\n        env,\n        emptyHydrations.join(', '),\n      );\n    }\n\n    this.bind<ISecretsHelper>({ key: CoreBindings.APPLICATION_CONFIG })\n      .toProvider(() => provider)\n      .setScope(BindingScopes.SINGLETON);\n\n    this.registerPostStopHook({ identifier: 'secrets.shutdown', hook: () => provider.shutdown() });\n    this.secretsProvider = provider;\n    this.secretsRegistration = registration;\n  }\n\n  /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */\n  protected async hydrateSecretEntries(opts: {\n    provider: ISecretsHelper;\n    registration: ISecretsRegistration;\n    emptyHydrations: string[];\n    logger: ILogger;\n  }): Promise<void> {\n    const { provider, registration, emptyHydrations, logger } = opts;\n\n    const registrationHydrate = registration.hydrate ?? [];\n    for (const entry of registrationHydrate) {\n      const bundle = await provider.getBundle({ path: entry.path });\n      const merged = this.mergeSecretsIntoEnv({ bundle, entry });\n      if (Object.keys(merged).length > 0) {\n        continue;\n      }\n\n      if (this.hydrateEntryDeclaresExpectation({ entry })) {\n        emptyHydrations.push(entry.path);\n        continue;\n      }\n\n      logger.warn(\n        'Hydrate entry resolved to an empty bundle and declares no expected keys | path: %s',\n        entry.path,\n      );\n    }\n  }\n\n  protected mergeSecretsIntoEnv(opts: {\n    bundle: Record<string, string>;\n    entry: ISecretHydrateEntry;\n  }): Record<string, string> {\n    const { bundle, entry } = opts;\n    const merged = selectSecretEnvKeys({ bundle, entry });\n\n    const mergedEntries = Object.entries(merged);\n    for (const [key, value] of mergedEntries) {\n      process.env[key] = value;\n    }\n    applicationEnvironment.merge({ envs: merged });\n    return merged;\n  }\n\n  /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */\n  protected hydrateEntryDeclaresExpectation(opts: { entry: ISecretHydrateEntry }): boolean {\n    const { entry } = opts;\n    if (entry.keys && Object.keys(entry.keys).length > 0) {\n      return true;\n    }\n    return typeof entry.prefix === 'string' && entry.prefix.length > 0;\n  }\n\n  async wireSecretRotatables(): Promise<void> {\n    const logger = this.logger.for(this.wireSecretRotatables.name);\n    const provider = this.secretsProvider;\n    const registration = this.secretsRegistration;\n    if (!provider || !registration?.lease?.length) {\n      return;\n    }\n    for (const entry of registration.lease) {\n      const instance = this.get<ISecretRotatable>({ key: entry.key, isOptional: true });\n      if (instance && typeof instance.onSecretRotated === 'function') {\n        provider.registerRotatable({ key: entry.key, target: instance });\n        logger.info('Wired rotatable | key: %s', entry.key);\n        continue;\n      }\n      logger.debug('Lease key has no rotatable consumer | key: %s', entry.key);\n    }\n  }\n\n  static(opts: { restPath?: string; folderPath: string }) {\n    const { restPath = '*', folderPath } = opts;\n    const server = this.getServer();\n\n    switch (this.runtime) {\n      case RuntimeModules.BUN: {\n        const { serveStatic } = require('hono/bun');\n        server.use(restPath, serveStatic({ root: folderPath }));\n        break;\n      }\n      case RuntimeModules.NODE: {\n        try {\n          const { serveStatic } = require('@hono/node-server/serve-static');\n          server.use(restPath, serveStatic({ root: folderPath }));\n        } catch (error) {\n          this.logger.for(this.static.name).error('Failed to serve static file | Error: %s', error);\n          throw getError({\n            message: `[static] @hono/node-server is required for Node.js runtime. Please install '@hono/node-server'`,\n          });\n        }\n        break;\n      }\n      default: {\n        throw getError({\n          message: '[static] Invalid server runtime to config static loader!',\n        });\n      }\n    }\n\n    this.logger\n      .for(this.static.name)\n      .debug(\n        'Registered static files | runtime: %s | path: %s | folder: %s',\n        this.runtime,\n        restPath,\n        folderPath,\n      );\n    return this;\n  }\n\n  /**\n   * Every value is read HERE, not destructured at module load: an application that loads its\n   * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot\n   * would print the defaults for a host that configured everything correctly.\n   */\n  protected printStartUpInfo(opts: { scope: string }) {\n    const { scope } = opts;\n    const read = (key: string, fallback: string): string =>\n      blankToUndefined(process.env[key]) ?? fallback;\n    const divider = '------------------------------------------------------------------------';\n\n    this.logger.for(scope).info(divider);\n    this.logger\n      .for(scope)\n      .info(\n        'Starting application... | Name: %s | Env: %s | Runtime: %s',\n        read(EnvironmentKeys.APP_ENV_APPLICATION_NAME, 'PNT'),\n        Environment.ambient,\n        this.runtime,\n      );\n    this.logger\n      .for(scope)\n      .info(\n        'AllowEmptyEnv: %s | Prefix: %s',\n        read('ALLOW_EMPTY_ENV_VALUE', 'true'),\n        read('APPLICATION_ENV_PREFIX', 'APP_ENV'),\n      );\n    this.logger.for(scope).info('RunMode: %s', process.env.RUN_MODE);\n    this.logger\n      .for(scope)\n      .info('Timezone: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_TIMEZONE, 'Asia/Ho_Chi_Minh'));\n    this.logger\n      .for(scope)\n      .info('LogPath: %s', read(EnvironmentKeys.APP_ENV_LOGGER_FOLDER_PATH, './'));\n    this.logger.for(scope).info(divider);\n  }\n\n  /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */\n  protected override buildErrorMiddleware(): AppErrorMiddleware {\n    return new AppErrorMiddleware({\n      logger: this.logger,\n      rootKey: this.configs.error?.rootKey ?? undefined,\n    });\n  }\n\n  /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */\n  protected override async registerDefaultMiddlewares() {\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      scope: this.registerDefaultMiddlewares.name,\n      description: 'Register default application server handler',\n      task: async () => {\n        const server = this.getServer();\n\n        await super.registerDefaultMiddlewares();\n\n        // Always installed, not only under `asyncContext.enable`: `tryGetContext()` answers \"no context\"\n        // without a store, and a `contextStorage()` the application registered itself stays visible to\n        // the enrichers. Inside a method body because every package declares `sideEffects: false`.\n        RequestContextRegistry.setResolver({ resolver: () => tryGetContext() });\n\n        if (this.configs.asyncContext?.enable) {\n          server.use(contextStorage());\n        }\n\n        // Request-body parsing and the access log; the request id it reads is already installed\n        // above (also works around the Bun + Hono body-parsing bug: https://github.com/honojs/middleware/issues/81).\n        this.component(RequestTrackerComponent);\n\n        server.use(emojiFavicon({ icon: this.configs.favicon ?? '🔥' }));\n      },\n    });\n  }\n\n  /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */\n  protected validateEnvs() {\n    const t = performance.now();\n    const envKeys = applicationEnvironment.keys();\n\n    // Permissive by DEFAULT: a name a host leaves empty is the host's business, and an empty value\n    // already falls back to `defaultValue` at read time, so refusing to boot over one fights the\n    // reader rather than helping it. Set ALLOW_EMPTY_ENV_VALUE to `false` or `0` to turn the check\n    // on. Read once rather than per key, and a blank value reads as unset - the same rule every\n    // other env read follows.\n    const configured = blankToUndefined(process.env.ALLOW_EMPTY_ENV_VALUE);\n    const allowsEmpty = configured === undefined || toBoolean(configured);\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'Envs: %s | START Validating application environments | Empty values: %s',\n        envKeys.length,\n        allowsEmpty ? 'ALLOWED (default)' : 'REJECTED',\n      );\n\n    if (allowsEmpty) {\n      this.logger\n        .for(this.validateEnvs.name)\n        .info(\n          'Envs: %s | SKIPPED - set ALLOW_EMPTY_ENV_VALUE=false to reject empty values',\n          envKeys.length,\n        );\n      return;\n    }\n\n    for (const argKey of envKeys) {\n      const argValue = applicationEnvironment.get<string | number>(argKey);\n\n      if (!isEmpty({ value: argValue })) {\n        continue;\n      }\n\n      throw getError({\n        message: `[validateEnvs] Invalid Application Environment! Key: ${argKey} | Value: ${argValue}`,\n      });\n    }\n\n    this.logger\n      .for(this.validateEnvs.name)\n      .info(\n        'Envs: %s | DONE Validating application environments | Took: %s (ms)',\n        envKeys.length,\n        performance.now() - t,\n      );\n  }\n\n  /**\n   * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without\n   * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.\n   */\n  override async initialize(): Promise<void> {\n    await this.runBootSequence({ steps: this.getBootSequence() });\n  }\n\n  protected override getBootSequence(): IBootSequenceStep[] {\n    const steps: IBootSequenceStep[] = [\n      {\n        name: ServerBootSteps.PRINT_START_UP_INFO,\n        run: () => this.printStartUpInfo({ scope: this.initialize.name }),\n      },\n      { name: ServerBootSteps.VALIDATE_ENVS, run: () => this.validateEnvs() },\n      {\n        name: ServerBootSteps.REGISTER_DEFAULT_MIDDLEWARES,\n        run: () => this.registerDefaultMiddlewares(),\n      },\n      ...super.getBootSequence(),\n    ];\n\n    const withHydrate = BootSequence.insertAfter({\n      steps,\n      target: ServerBootSteps.PRE_CONFIGURE,\n      step: { name: ServerBootSteps.HYDRATE_SECRETS, run: () => this.hydrateSecrets() },\n    });\n\n    // Components can contribute datasources, so wire rotatables only after the contributed sweep -\n    // a lease key pointing at a component-contributed datasource would otherwise resolve to nothing.\n    const withRotatables = BootSequence.insertAfter({\n      steps: withHydrate,\n      target: ServerBootSteps.REGISTER_CONTRIBUTED_DATA_SOURCES,\n      step: {\n        name: ServerBootSteps.WIRE_SECRET_ROTATABLES,\n        run: () => this.wireSecretRotatables(),\n      },\n    });\n\n    return [\n      ...withRotatables,\n      // Last, so a model registered by a component is covered too.\n      {\n        name: ServerBootSteps.VALIDATE_SCOPE_FILTER_SUPPORT,\n        run: () => this.validateScopeFilterSupport(),\n      },\n    ];\n  }\n\n  /**\n   * Refuses to start when a model's `settings.scopeFilter` cannot take effect. Both failures are\n   * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.\n   */\n  protected validateScopeFilterSupport(): void {\n    assertScopeFilterSupported({ asyncContextEnabled: this.configs.asyncContext?.enable ?? false });\n  }\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/base/applications/base.ts"],"names":[],"mappings":";;;AAAA,gEAAuE;AACvE,wDAA6D;AAC7D,wDAAwE;AACxE,wDAAwD;AACxD,6CAAuD;AACvD,uDAA6D;AAC7D,wDAM+B;AAS/B,sDAAyE;AACzE,0DAA8E;AAC9E,0DAOgC;AAChC,0DAAqE;AACrE,gDAAkE;AAClE,6CAA+C;AAC/C,qCAA6C;AAI7C,8HAA8H;AAC9H,MAAM,mBAAmB,GAAG,CAAC,IAG5B,EAA0B,EAAE;IAC3B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAsB,eAAgB,SAAQ,0BAAiB;IAInD,aAAa,CAAC,GAAG,QAAkB;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,6IAA6I;IACpI,KAAK,CAAC,mBAAmB;QAChC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAElC,MAAM,IAAA,6CAA6B,EAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,uCAAuC;YACpD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,mCAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,SAAS,KAAK,mCAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,SAAS;oBACX,CAAC;oBAED,IAAI,SAAS,KAAK,mCAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,MAAM,IAAA,eAAQ,EAAC;4BACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;4BACrD,OAAO,EAAE,iDAAiD,SAAS,GAAG;yBACvE,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,oBAAa,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClC,CAAC;gBAED,mEAAmE;gBACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,mCAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,gCAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,SAAS;oBACX,CAAC;oBAED,MAAM,QAAQ,GAAG,+BAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClF,IAAI,QAAQ,EAAE,SAAS,KAAK,mCAAoB,CAAC,IAAI,EAAE,CAAC;wBACtD,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;yBAClC,KAAK,CACJ,mGAAmG,EACnG,OAAO,CAAC,GAAG,EACX,mCAAoB,CAAC,IAAI,CAC1B,CAAC;gBACN,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,eAAe;QACb,OAAO,EAAE,QAAQ,EAAE,+BAAe,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,IAAI,QAAoC,CAAC;QACzC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,mCAAmB,EAAC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAErF,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,2BAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,2BAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,iFAAiF,GAAG,EAAE;iBAChG,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E,GAAG,EACH,KAAK,CACN,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ;qBACX,QAAQ,EAAE;qBACV,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE,CACvB,MAAM,CAAC,KAAK,CACV,0EAA0E,EAC1E,aAAa,CACd,CACF,CAAC;YACN,CAAC;YACD,QAAQ,GAAG,MAAM,IAAA,mCAAmB,EAAC;gBACnC,QAAQ,EAAE,+BAAe,CAAC,WAAW;gBACrC,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,eAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,2BAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,2BAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,6GAA6G,GAAG,aAAa,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnK,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,qGAAqG,EACrG,GAAG,EACH,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAiB,EAAE,GAAG,EAAE,2BAAY,CAAC,kBAAkB,EAAE,CAAC;aAChE,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;aAC1B,QAAQ,CAAC,4BAAa,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;IAC1C,CAAC;IAED,4KAA4K;IAClK,KAAK,CAAC,oBAAoB,CAAC,IAKpC;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEjE,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CACT,oFAAoF,EACpF,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAES,mBAAmB,CAAC,IAG7B;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,sCAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gMAAgM;IACtL,+BAA+B,CAAC,IAAoC;QAC5E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAA+C;QACpD,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,uBAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;YACD,KAAK,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;oBAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;oBAC1F,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,gGAAgG;qBAC1G,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,0DAA0D;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;aACrB,KAAK,CACJ,+DAA+D,EAC/D,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,UAAU,CACX,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACO,gBAAgB,CAAC,IAAuB;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE,CACrD,IAAA,uBAAgB,EAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;QACjD,MAAM,OAAO,GAAG,0EAA0E,CAAC;QAE3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,4DAA4D,EAC5D,IAAI,CAAC,8BAAe,CAAC,wBAAwB,EAAE,KAAK,CAAC,EACrD,2BAAW,CAAC,OAAO,EACnB,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,gCAAgC,EAChC,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAC1C,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,8BAAe,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,8BAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,kGAAkG;IAC/E,oBAAoB;QACrC,OAAO,IAAI,gCAAkB,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAED,gKAAgK;IAC7I,KAAK,CAAC,0BAA0B;QACjD,MAAM,IAAA,6CAA6B,EAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI;YAC3C,WAAW,EAAE,6CAA6C;YAC1D,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAEhC,MAAM,KAAK,CAAC,0BAA0B,EAAE,CAAC;gBAEzC,iGAAiG;gBACjG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,qCAAsB,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAA,+BAAa,GAAE,EAAE,CAAC,CAAC;gBAExE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,IAAA,gCAAc,GAAE,CAAC,CAAC;gBAC/B,CAAC;gBAED,wFAAwF;gBACxF,6GAA6G;gBAC7G,IAAI,CAAC,SAAS,CAAC,oCAAuB,CAAC,CAAC;gBAExC,MAAM,CAAC,GAAG,CAAC,IAAA,0BAAY,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,8MAA8M;IACpM,YAAY;QACpB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,sCAAsB,CAAC,IAAI,EAAE,CAAC;QAE9C,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,UAAU,KAAK,SAAS,IAAI,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,yEAAyE,EACzE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAC/C,CAAC;QAEJ,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;iBAC3B,IAAI,CACH,6EAA6E,EAC7E,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,sCAAsB,CAAC,GAAG,CAAkB,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,IAAA,gBAAO,EAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,wDAAwD,MAAM,aAAa,QAAQ,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;aAC3B,IAAI,CACH,qEAAqE,EACrE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CACtB,CAAC;IACN,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAEkB,eAAe;QAChC,MAAM,KAAK,GAAwB;YACjC;gBACE,IAAI,EAAE,4BAAe,CAAC,mBAAmB;gBACzC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aAClE;YACD,EAAE,IAAI,EAAE,4BAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE;YACvE;gBACE,IAAI,EAAE,4BAAe,CAAC,4BAA4B;gBAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;YACD,GAAG,KAAK,CAAC,eAAe,EAAE;SAC3B,CAAC;QAEF,MAAM,WAAW,GAAG,2BAAY,CAAC,WAAW,CAAC;YAC3C,KAAK;YACL,MAAM,EAAE,4BAAe,CAAC,aAAa;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,4BAAe,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE;SAClF,CAAC,CAAC;QAEH,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,cAAc,GAAG,2BAAY,CAAC,WAAW,CAAC;YAC9C,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,4BAAe,CAAC,iCAAiC;YACzD,IAAI,EAAE;gBACJ,IAAI,EAAE,4BAAe,CAAC,sBAAsB;gBAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,6DAA6D;YAC7D;gBACE,IAAI,EAAE,4BAAe,CAAC,6BAA6B;gBACnD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,0BAA0B;QAClC,IAAA,6CAA0B,EAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;CACF;AAlbD,0CAkbC","sourcesContent":["import { assertScopeFilterSupported } from '@venizia/ignis-connectors';\nimport { ControllerTransports } from '@venizia/ignis-kernel';\nimport { BindingNamespaces, CoreBindings } from '@venizia/ignis-kernel';\nimport { EnvironmentKeys } from '@/common/environments';\nimport { RequestTrackerComponent } from '@/components';\nimport { GrpcComponent } from '@/components/controller/grpc';\nimport {\n  BindingScopes,\n  BindingValueTypes,\n  BootSequence,\n  MetadataRegistry,\n  RequestContextRegistry,\n} from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type {\n  ISecretHydrateEntry,\n  ISecretRotatable,\n  ISecretsHelper,\n  ISecretsRegistration,\n} from '@venizia/ignis-helpers';\nimport { blankToUndefined, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, RuntimeModules, isEmpty } from '@venizia/ignis-helpers/common';\nimport {\n  applicationEnvironment,\n  createSecretsHelper,\n  Environment,\n  executeWithPerformanceMeasure,\n  SecretProviders,\n  toBoolean,\n} from '@venizia/ignis-helpers';\nimport { contextStorage, tryGetContext } from 'hono/context-storage';\nimport { AppErrorMiddleware, emojiFavicon } from '../middlewares';\nimport { ServerBootSteps } from './boot-steps';\nimport { ServerApplication } from './server';\nimport type { IRestApplication } from '@venizia/ignis-kernel';\nimport type { IBootSequenceStep } from '@venizia/ignis-kernel';\n\n/** Maps a secret bundle to env names: the explicit `keys` mapping when present, otherwise every bundle key under `prefix`. */\nconst selectSecretEnvKeys = (opts: {\n  bundle: Record<string, string>;\n  entry: ISecretHydrateEntry;\n}): Record<string, string> => {\n  const { bundle, entry } = opts;\n  const merged: Record<string, string> = {};\n\n  if (!entry.keys) {\n    const bundleEntries = Object.entries(bundle);\n    for (const [rawKey, value] of bundleEntries) {\n      merged[`${entry.prefix ?? ''}${rawKey}`] = value;\n    }\n\n    return merged;\n  }\n\n  const entryKeysEntries = Object.entries(entry.keys);\n  for (const [rawKey, envKey] of entryKeysEntries) {\n    const value = bundle[rawKey];\n    if (value === undefined) {\n      continue;\n    }\n\n    merged[envKey] = value;\n  }\n\n  return merged;\n};\n\nexport abstract class BaseApplication extends ServerApplication implements IRestApplication {\n  protected secretsProvider?: ISecretsHelper;\n  protected secretsRegistration?: ISecretsRegistration;\n\n  protected normalizePath(...segments: string[]): string {\n    const joined = segments.join('/').replace(/\\/+/g, '/').replace(/\\/$/, '');\n    return joined || '/';\n  }\n\n  /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */\n  override async registerControllers(): Promise<void> {\n    await super.registerControllers();\n\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      description: 'Register application gRPC controllers',\n      scope: this.registerControllers.name,\n      task: async () => {\n        const transports = this.configs.transports ?? [ControllerTransports.REST];\n\n        for (const transport of transports) {\n          if (transport === ControllerTransports.REST) {\n            continue;\n          }\n\n          if (transport !== ControllerTransports.GRPC) {\n            throw getError({\n              statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n              message: `[registerControllers] Unsupported transport: '${transport}'`,\n            });\n          }\n\n          const grpcComponent = new GrpcComponent(this);\n          await grpcComponent.configure();\n        }\n\n        // Warn if gRPC controllers exist but gRPC transport is not enabled\n        if (transports.includes(ControllerTransports.GRPC)) {\n          return;\n        }\n\n        const allBindings = this.findByTag({ tag: BindingNamespaces.CONTROLLER });\n        for (const binding of allBindings) {\n          const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n          if (!target) {\n            continue;\n          }\n\n          const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n          if (metadata?.transport !== ControllerTransports.GRPC) {\n            continue;\n          }\n\n          this.logger\n            .for(this.registerControllers.name)\n            .error(\n              'gRPC controller \"%s\" discovered but gRPC transport is not enabled. Add \"%s\" to transports config.',\n              binding.key,\n              ControllerTransports.GRPC,\n            );\n        }\n      },\n    });\n  }\n\n  registerSecrets(): ValueOrPromise<ISecretsRegistration> {\n    return { provider: SecretProviders.SYSTEM_ENVS };\n  }\n\n  async hydrateSecrets(): Promise<void> {\n    const logger = this.logger.for(this.hydrateSecrets.name);\n    const registration = await this.registerSecrets();\n\n    let provider: ISecretsHelper | undefined;\n    const emptyHydrations: string[] = [];\n    try {\n      provider = await createSecretsHelper({ ...registration, identifier: 'app' });\n      await provider.configure();\n\n      await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });\n\n      const registrationLease = registration.lease ?? [];\n      for (const entry of registrationLease) {\n        await provider.lease({ path: entry.path, key: entry.key });\n      }\n    } catch (error) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Secret provider failed in non-development environment | env: ${env}`,\n        });\n      }\n      logger.warn(\n        'Secret provider failed; falling back to system-envs | env: %s | error: %s',\n        env,\n        error,\n      );\n\n      if (provider) {\n        await provider\n          .shutdown()\n          .catch((shutdownError) =>\n            logger.error(\n              'Failed to shut down partially-built provider during fallback | error: %s',\n              shutdownError,\n            ),\n          );\n      }\n      provider = await createSecretsHelper({\n        provider: SecretProviders.SYSTEM_ENVS,\n        identifier: 'app',\n      });\n    }\n\n    if (!provider) {\n      throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });\n    }\n\n    if (emptyHydrations.length > 0) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Hydrate entries resolved to an empty secret bundle in non-development environment | env: ${env} | paths: ${emptyHydrations.join(', ')}`,\n        });\n      }\n      logger.warn(\n        'Hydrate entries resolved to an empty secret bundle; continuing in development | env: %s | paths: %s',\n        env,\n        emptyHydrations.join(', '),\n      );\n    }\n\n    this.bind<ISecretsHelper>({ key: CoreBindings.APPLICATION_CONFIG })\n      .toProvider(() => provider)\n      .setScope(BindingScopes.SINGLETON);\n\n    this.registerPostStopHook({ identifier: 'secrets.shutdown', hook: () => provider.shutdown() });\n    this.secretsProvider = provider;\n    this.secretsRegistration = registration;\n  }\n\n  /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */\n  protected async hydrateSecretEntries(opts: {\n    provider: ISecretsHelper;\n    registration: ISecretsRegistration;\n    emptyHydrations: string[];\n    logger: ILogger;\n  }): Promise<void> {\n    const { provider, registration, emptyHydrations, logger } = opts;\n\n    const registrationHydrate = registration.hydrate ?? [];\n    for (const entry of registrationHydrate) {\n      const bundle = await provider.getBundle({ path: entry.path });\n      const merged = this.mergeSecretsIntoEnv({ bundle, entry });\n      if (Object.keys(merged).length > 0) {\n        continue;\n      }\n\n      if (this.hydrateEntryDeclaresExpectation({ entry })) {\n        emptyHydrations.push(entry.path);\n        continue;\n      }\n\n      logger.warn(\n        'Hydrate entry resolved to an empty bundle and declares no expected keys | path: %s',\n        entry.path,\n      );\n    }\n  }\n\n  protected mergeSecretsIntoEnv(opts: {\n    bundle: Record<string, string>;\n    entry: ISecretHydrateEntry;\n  }): Record<string, string> {\n    const { bundle, entry } = opts;\n    const merged = selectSecretEnvKeys({ bundle, entry });\n\n    const mergedEntries = Object.entries(merged);\n    for (const [key, value] of mergedEntries) {\n      process.env[key] = value;\n    }\n    applicationEnvironment.merge({ envs: merged });\n    return merged;\n  }\n\n  /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */\n  protected hydrateEntryDeclaresExpectation(opts: { entry: ISecretHydrateEntry }): boolean {\n    const { entry } = opts;\n    if (entry.keys && Object.keys(entry.keys).length > 0) {\n      return true;\n    }\n    return typeof entry.prefix === 'string' && entry.prefix.length > 0;\n  }\n\n  async wireSecretRotatables(): Promise<void> {\n    const logger = this.logger.for(this.wireSecretRotatables.name);\n    const provider = this.secretsProvider;\n    const registration = this.secretsRegistration;\n    if (!provider || !registration?.lease?.length) {\n      return;\n    }\n    for (const entry of registration.lease) {\n      const instance = this.get<ISecretRotatable>({ key: entry.key, isOptional: true });\n      if (instance && typeof instance.onSecretRotated === 'function') {\n        provider.registerRotatable({ key: entry.key, target: instance });\n        logger.info('Wired rotatable | key: %s', entry.key);\n        continue;\n      }\n      logger.debug('Lease key has no rotatable consumer | key: %s', entry.key);\n    }\n  }\n\n  static(opts: { restPath?: string; folderPath: string }) {\n    const { restPath = '*', folderPath } = opts;\n    const server = this.getServer();\n\n    switch (this.runtime) {\n      case RuntimeModules.BUN: {\n        const { serveStatic } = require('hono/bun');\n        server.use(restPath, serveStatic({ root: folderPath }));\n        break;\n      }\n      case RuntimeModules.NODE: {\n        try {\n          const { serveStatic } = require('@hono/node-server/serve-static');\n          server.use(restPath, serveStatic({ root: folderPath }));\n        } catch (error) {\n          this.logger.for(this.static.name).error('Failed to serve static file | Error: %s', error);\n          throw getError({\n            message: `[static] @hono/node-server is required for Node.js runtime. Please install '@hono/node-server'`,\n          });\n        }\n        break;\n      }\n      default: {\n        throw getError({\n          message: '[static] Invalid server runtime to config static loader!',\n        });\n      }\n    }\n\n    this.logger\n      .for(this.static.name)\n      .debug(\n        'Registered static files | runtime: %s | path: %s | folder: %s',\n        this.runtime,\n        restPath,\n        folderPath,\n      );\n    return this;\n  }\n\n  /**\n   * Every value is read HERE, not destructured at module load: an application that loads its\n   * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot\n   * would print the defaults for a host that configured everything correctly.\n   */\n  protected printStartUpInfo(opts: { scope: string }) {\n    const { scope } = opts;\n    const read = (key: string, fallback: string): string =>\n      blankToUndefined(process.env[key]) ?? fallback;\n    const divider = '------------------------------------------------------------------------';\n\n    this.logger.for(scope).info(divider);\n    this.logger\n      .for(scope)\n      .info(\n        'Starting application... | Name: %s | Env: %s | Runtime: %s',\n        read(EnvironmentKeys.APP_ENV_APPLICATION_NAME, 'PNT'),\n        Environment.ambient,\n        this.runtime,\n      );\n    this.logger\n      .for(scope)\n      .info(\n        'AllowEmptyEnv: %s | Prefix: %s',\n        read('ALLOW_EMPTY_ENV_VALUE', 'true'),\n        read('APPLICATION_ENV_PREFIX', 'APP_ENV'),\n      );\n    this.logger.for(scope).info('RunMode: %s', process.env.RUN_MODE);\n    this.logger\n      .for(scope)\n      .info('Timezone: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_TIMEZONE, 'Asia/Ho_Chi_Minh'));\n    this.logger\n      .for(scope)\n      .info('LogPath: %s', read(EnvironmentKeys.APP_ENV_LOGGER_FOLDER_PATH, './'));\n    this.logger.for(scope).info(divider);\n  }\n\n  /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */\n  protected override buildErrorMiddleware(): AppErrorMiddleware {\n    return new AppErrorMiddleware({\n      logger: this.logger,\n      rootKey: this.configs.error?.rootKey ?? undefined,\n    });\n  }\n\n  /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */\n  protected override async registerDefaultMiddlewares() {\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      scope: this.registerDefaultMiddlewares.name,\n      description: 'Register default application server handler',\n      task: async () => {\n        const server = this.getServer();\n\n        await super.registerDefaultMiddlewares();\n\n        // Always installed, not only under `asyncContext.enable`: `tryGetContext()` answers \"no context\"\n        // without a store, and a `contextStorage()` the application registered itself stays visible to\n        // the enrichers. Inside a method body because every package declares `sideEffects: false`.\n        RequestContextRegistry.setResolver({ resolver: () => tryGetContext() });\n\n        if (this.configs.asyncContext?.enable) {\n          server.use(contextStorage());\n        }\n\n        // Request-body parsing and the access log; the request id it reads is already installed\n        // above (also works around the Bun + Hono body-parsing bug: https://github.com/honojs/middleware/issues/81).\n        this.component(RequestTrackerComponent);\n\n        server.use(emojiFavicon({ icon: this.configs.favicon ?? '🔥' }));\n      },\n    });\n  }\n\n  /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */\n  protected validateEnvs() {\n    const t = performance.now();\n    const envKeys = applicationEnvironment.keys();\n\n    // Permissive by DEFAULT: a name a host leaves empty is the host's business, and an empty value\n    // already falls back to `defaultValue` at read time, so refusing to boot over one fights the\n    // reader rather than helping it. Set ALLOW_EMPTY_ENV_VALUE to `false` or `0` to turn the check\n    // on. Read once rather than per key, and a blank value reads as unset - the same rule every\n    // other env read follows.\n    const configured = blankToUndefined(process.env.ALLOW_EMPTY_ENV_VALUE);\n    const allowsEmpty = configured === undefined || toBoolean(configured);\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'Envs: %s | START Validating application environments | Empty values: %s',\n        envKeys.length,\n        allowsEmpty ? 'ALLOWED (default)' : 'REJECTED',\n      );\n\n    if (allowsEmpty) {\n      this.logger\n        .for(this.validateEnvs.name)\n        .info(\n          'Envs: %s | SKIPPED - set ALLOW_EMPTY_ENV_VALUE=false to reject empty values',\n          envKeys.length,\n        );\n      return;\n    }\n\n    for (const argKey of envKeys) {\n      const argValue = applicationEnvironment.get<string | number>(argKey);\n\n      if (!isEmpty({ value: argValue })) {\n        continue;\n      }\n\n      throw getError({\n        message: `[validateEnvs] Invalid Application Environment! Key: ${argKey} | Value: ${argValue}`,\n      });\n    }\n\n    this.logger\n      .for(this.validateEnvs.name)\n      .info(\n        'Envs: %s | DONE Validating application environments | Took: %s (ms)',\n        envKeys.length,\n        performance.now() - t,\n      );\n  }\n\n  /**\n   * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without\n   * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.\n   */\n  override async initialize(): Promise<void> {\n    await this.runBootSequence({ steps: this.getBootSequence() });\n  }\n\n  protected override getBootSequence(): IBootSequenceStep[] {\n    const steps: IBootSequenceStep[] = [\n      {\n        name: ServerBootSteps.PRINT_START_UP_INFO,\n        run: () => this.printStartUpInfo({ scope: this.initialize.name }),\n      },\n      { name: ServerBootSteps.VALIDATE_ENVS, run: () => this.validateEnvs() },\n      {\n        name: ServerBootSteps.REGISTER_DEFAULT_MIDDLEWARES,\n        run: () => this.registerDefaultMiddlewares(),\n      },\n      ...super.getBootSequence(),\n    ];\n\n    const withHydrate = BootSequence.insertAfter({\n      steps,\n      target: ServerBootSteps.PRE_CONFIGURE,\n      step: { name: ServerBootSteps.HYDRATE_SECRETS, run: () => this.hydrateSecrets() },\n    });\n\n    // Components can contribute datasources, so wire rotatables only after the contributed sweep -\n    // a lease key pointing at a component-contributed datasource would otherwise resolve to nothing.\n    const withRotatables = BootSequence.insertAfter({\n      steps: withHydrate,\n      target: ServerBootSteps.REGISTER_CONTRIBUTED_DATA_SOURCES,\n      step: {\n        name: ServerBootSteps.WIRE_SECRET_ROTATABLES,\n        run: () => this.wireSecretRotatables(),\n      },\n    });\n\n    return [\n      ...withRotatables,\n      // Last, so a model registered by a component is covered too.\n      {\n        name: ServerBootSteps.VALIDATE_SCOPE_FILTER_SUPPORT,\n        run: () => this.validateScopeFilterSupport(),\n      },\n    ];\n  }\n\n  /**\n   * Refuses to start when a model's `settings.scopeFilter` cannot take effect. Both failures are\n   * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.\n   */\n  protected validateScopeFilterSupport(): void {\n    assertScopeFilterSupported({ asyncContextEnabled: this.configs.asyncContext?.enable ?? false });\n  }\n}\n"]}

package/dist/base/applications/server.js

@@ -106,7 +106,7 @@ class ServerApplication extends ignis_kernel_1.RestApplication {
                 fetch: server.fetch,
                 ...this.getServerRuntimeOptions(),
             }))
-                .then(rs => {
+                .then((rs) => {
                 this.serverInstance = rs;
                 this.configs.port = rs.port;
                 this.inspectRoutes();
@@ -138,10 +138,10 @@ class ServerApplication extends ignis_kernel_1.RestApplication {
                     .warn('configs.server is Bun-only | ignored on node: %s', ignored.join(', '));
             }
             import('@hono/node-server')
-                .then(module => {
+                .then((module) => {
                 const { serve } = module;
                 // Resolve from the listening callback, not serve()'s synchronous return - only then is the socket bound and the OS-assigned port (config port `0`) known.
-                const rs = serve({ fetch: server.fetch, port, hostname: host }, info => {
+                const rs = serve({ fetch: server.fetch, port, hostname: host }, (info) => {
                     this.configs.port = info.port;
                     this.inspectRoutes();
                     this.logger
@@ -154,7 +154,7 @@ class ServerApplication extends ignis_kernel_1.RestApplication {
                     resolve(rs);
                 });
             })
-                .catch(error => {
+                .catch((error) => {
                 this.logger
                     .for(this.start.name)
                     .error('Failed to import @hono/node-server | Error: %s', error);

package/dist/base/applications/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/base/applications/server.ts"],"names":[],"mappings":";;;;;;AAAA,wDAAsE;AACtE,0DAAuD;AACvD,sDAAuD;AACvD,0DAA+D;AAE/D,qCAAqC;AACrC,0DAA6B;AAW7B,MAAM,mBAAmB,GAAG,WAAW,CAAC;AACxC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,IAAwD,EAAU,EAAE;IAC7F,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAClD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,eAAe,EAAE,CAAC;YACxE,SAAS;QACX,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF,sMAAsM;AACtM,MAAsB,iBAKpB,SAAQ,8BAA4C;IAUpD;;;;OAIG;IACH,YAAY,IAA0D;QACpE,KAAK,CAAC,IAAI,CAAC,CAAC;QAbd,mMAAmM;QACzL,YAAO,GAAG,uBAAc,CAAC,MAAM,EAAE,CAAC;QAc1C,IAAI,CAAC,OAAO,CAAC,IAAI;YACf,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBACnF,mBAAmB,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC;YACpC,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;SAClF,CAAC,CAAC;IACL,CAAC;IAED,0IAA0I;IACvH,6BAA6B;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yPAAyP;IAChP,cAAc;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAA,oBAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,IAAI,CACH,8FAA8F,EAC9F,WAAW,CACZ,CAAC;QACN,CAAC;QACD,IAAI,CAAC,IAAI,CAAS,EAAE,GAAG,EAAE,2BAAY,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvF,6BAAa,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC;IAC5B,CAAC;IAED,gBAAgB;QACd,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,wHAAwH;IAC9G,uBAAuB;QAC/B,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACtE,OAAO;YACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAED,iBAAiB;QAGf,OAAO,IAAI,CAAC,cAA+B,CAAC;IAC9C,CAAC;IAES,cAAc;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,OAAO,KAAK,uBAAc,CAAC,GAAG,EAAE,CAAC;gBACxC,OAAO,MAAM,CACX,IAAA,eAAQ,EAAC;oBACP,OAAO,EAAE,+DAA+D,IAAI,CAAC,OAAO,gBAAgB,uBAAc,CAAC,GAAG,EAAE;iBACzH,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAEhC,OAAO,CAAC,OAAO,CACb,GAAG,CAAC,KAAK,CAAC;gBACR,IAAI;gBACJ,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,IAAI,CAAC,uBAAuB,EAAE;aAClC,CAAC,CACH;iBACE,IAAI,CAAC,EAAE,CAAC,EAAE;gBACT,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;gBAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;gBAErB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;qBACpB,IAAI,CAAC,8BAA8B,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;qBACpB,IAAI,CACH,gBAAgB,EAChB,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CACtE,CAAC;gBAEJ,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC,CAAC;iBACD,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAES,eAAe;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,OAAO,KAAK,uBAAc,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,MAAM,CACX,IAAA,eAAQ,EAAC;oBACP,OAAO,EAAE,gEAAgE,IAAI,CAAC,OAAO,gBAAgB,uBAAc,CAAC,IAAI,EAAE;iBAC3H,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;qBAC9B,IAAI,CAAC,kDAAkD,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,CAAC,mBAAmB,CAAC;iBACxB,IAAI,CAAC,MAAM,CAAC,EAAE;gBACb,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBAEzB,0JAA0J;gBAC1J,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE;oBACrE,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;oBAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;yBACpB,IAAI,CAAC,yCAAyC,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;oBAClF,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;yBACpB,IAAI,CACH,gBAAgB,EAChB,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CACtE,CAAC;oBAEJ,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;oBACzB,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,KAAK,CAAC,EAAE;gBACb,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;qBACpB,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;gBAClE,MAAM,CACJ,IAAA,eAAQ,EAAC;oBACP,OAAO,EAAE,+FAA+F;iBACzG,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEtD,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,uBAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,KAAK,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,yDAAyD;iBACnE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACrC,CAAC;IAED,mJAAmJ;IACnJ,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAES,KAAK,CAAC,UAAU;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,uBAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,MAAM;YACR,CAAC;YACD,KAAK,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,yJAAyJ;gBACzJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;wBAC/B,IAAI,KAAK,EAAE,CAAC;4BACV,MAAM,CAAC,KAAK,CAAC,CAAC;4BACd,OAAO;wBACT,CAAC;wBAED,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,uDAAuD;iBACjE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzD,CAAC;CACF;AA1PD,8CA0PC","sourcesContent":["import { CoreBindings, RestApplication } from '@venizia/ignis-kernel';\nimport { ModuleUtility } from '@venizia/ignis-helpers';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { RuntimeModules } from '@venizia/ignis-helpers/common';\nimport type { Env, Schema } from 'hono';\nimport { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport type {\n  IServerApplication,\n  IServerApplicationConfigs,\n  IServerRuntimeConfigs,\n  TNodeServerInstance,\n} from './common';\n\n/** Lives here, not in the kernel: `Bun.serve` resolves only through `@types/bun`, and emitting `Bun` into the kernel's published `.d.ts` would force that dependency on every browser consumer of `@venizia/ignis-kernel`. This package legitimately has Bun types - it is the layer that calls `Bun.serve`. */\nexport type TBunServerInstance = ReturnType<typeof Bun.serve>;\n\nconst DEFAULT_SERVER_HOST = 'localhost';\nconst DEFAULT_SERVER_PORT = 3000;\nconst MAX_SERVER_PORT = 65535;\n\n/**\n * The first candidate USABLE as a port. Rejection is on validity, never falsiness: `0` legitimately\n * asks the OS for an ephemeral port, and taking the first TRUTHY value instead let an unusable\n * `PORT` shadow a usable `APP_ENV_SERVER_PORT` - `PORT=abc APP_ENV_SERVER_PORT=8080` bound 3000, as\n * did Docker's legacy container-link form `PORT=tcp://172.17.0.5:8080`.\n */\nconst resolveServerPort = (opts: { candidates: Array<number | string | undefined> }): number => {\n  for (const candidate of opts.candidates) {\n    if (candidate === undefined || candidate === null) {\n      continue;\n    }\n\n    const normalized = typeof candidate === 'string' ? candidate.trim() : candidate;\n    if (normalized === '') {\n      continue;\n    }\n\n    const parsed = Number(normalized);\n    if (!Number.isInteger(parsed) || parsed < 0 || parsed > MAX_SERVER_PORT) {\n      continue;\n    }\n\n    return parsed;\n  }\n\n  return DEFAULT_SERVER_PORT;\n};\n\n/** Adds the listening server (`Bun.serve` / `@hono/node-server`) on top of `RestApplication` - the only layer that touches a socket, so it is the layer that stays out of the browser-pure kernel. */\nexport abstract class ServerApplication<\n  AppEnv extends Env = Env,\n  AppSchema extends Schema = {},\n  BasePath extends string = '/',\n>\n  extends RestApplication<AppEnv, AppSchema, BasePath>\n  implements IServerApplication<AppEnv, AppSchema, BasePath>\n{\n  /** Which runtime is underneath, and the socket once one is bound. Both live here, not on `RestApplication`: a browser Worker has neither, and `RuntimeModules.detect()` answers `'node'` there. */\n  protected runtime = RuntimeModules.detect();\n  protected serverInstance?: TBunServerInstance | TNodeServerInstance;\n\n  /** Widened by this layer, which is the only one that binds a socket. Assigned by the base constructor - `declare` so no field initializer runs here and overwrites it with `undefined`. */\n  declare protected configs: IServerApplicationConfigs;\n\n  /**\n   * The address resolution the kernel deliberately does not do: `host` and `port` mean nothing to a\n   * host with no socket, and resolving them there silently configured every browser Worker with\n   * `localhost:3000`. Env is the fallback, explicit config always wins.\n   */\n  constructor(opts: { scope: string; config: IServerApplicationConfigs }) {\n    super(opts);\n\n    this.configs.host =\n      [opts.config.host, process.env.HOST, process.env.APP_ENV_SERVER_HOST].find(Boolean) ??\n      DEFAULT_SERVER_HOST;\n    this.configs.port = resolveServerPort({\n      candidates: [opts.config.port, process.env.PORT, process.env.APP_ENV_SERVER_PORT],\n    });\n  }\n\n  /** Restores the pre-split default: a server-capable application installs `hono/context-storage` unless the caller opts out explicitly. */\n  protected override getDefaultAsyncContextEnabled(): boolean {\n    return true;\n  }\n\n  /** `configs.projectRoot` wins, else the process cwd. The value is bound AND handed to `ModuleUtility`, so every peer lookup (optional modules, the gRPC adapter) resolves under it - a compiled binary sets it to where its `node_modules` really is. */\n  override getProjectRoot(): string {\n    const projectRoot = this.configs.projectRoot ?? process.cwd();\n    if (this.configs.projectRoot && !existsSync(path.join(projectRoot, 'node_modules'))) {\n      this.logger\n        .for(this.getProjectRoot.name)\n        .warn(\n          'configs.projectRoot has no node_modules | root: %s | optional peers will not resolve from it',\n          projectRoot,\n        );\n    }\n    this.bind<string>({ key: CoreBindings.APPLICATION_PROJECT_ROOT }).toValue(projectRoot);\n    ModuleUtility.setProjectRoot({ projectRoot });\n    return projectRoot;\n  }\n\n  getServerHost(): string {\n    return this.configs.host!;\n  }\n\n  getServerPort(): number {\n    return this.configs.port!;\n  }\n\n  getServerAddress() {\n    return `${this.getServerHost()}:${this.getServerPort()}`;\n  }\n\n  /** `configs.server` with unset keys dropped, so a missing option keeps Bun's default instead of passing `undefined`. */\n  protected getServerRuntimeOptions(): IServerRuntimeConfigs {\n    const { idleTimeout, maxRequestBodySize } = this.configs.server ?? {};\n    return {\n      ...(idleTimeout === undefined ? {} : { idleTimeout }),\n      ...(maxRequestBodySize === undefined ? {} : { maxRequestBodySize }),\n    };\n  }\n\n  getServerInstance<\n    T extends TBunServerInstance | TNodeServerInstance = TBunServerInstance | TNodeServerInstance,\n  >(): T | undefined {\n    return this.serverInstance as T | undefined;\n  }\n\n  protected startBunModule() {\n    return new Promise((resolve, reject) => {\n      if (this.runtime !== RuntimeModules.BUN) {\n        return reject(\n          getError({\n            message: `[startBunModule] Invalid runtime to start server | runtime: ${this.runtime} | required: ${RuntimeModules.BUN}`,\n          }),\n        );\n      }\n\n      const port = this.getServerPort();\n      const host = this.getServerHost();\n      const server = this.getServer();\n\n      Promise.resolve(\n        Bun.serve({\n          port,\n          hostname: host,\n          fetch: server.fetch,\n          ...this.getServerRuntimeOptions(),\n        }),\n      )\n        .then(rs => {\n          this.serverInstance = rs;\n          this.configs.port = rs.port;\n          this.inspectRoutes();\n\n          this.logger\n            .for(this.start.name)\n            .info('Server STARTED | Address: %s', this.getServerAddress());\n          this.logger\n            .for(this.start.name)\n            .info(\n              'Log folder: %s',\n              path.resolve(process.env.APP_ENV_LOGGER_FOLDER_PATH ?? '').toString(),\n            );\n\n          resolve(rs);\n        })\n        .catch(reject);\n    });\n  }\n\n  protected startNodeModule() {\n    return new Promise((resolve, reject) => {\n      if (this.runtime !== RuntimeModules.NODE) {\n        return reject(\n          getError({\n            message: `[startNodeModule] Invalid runtime to start server | runtime: ${this.runtime} | required: ${RuntimeModules.NODE}`,\n          }),\n        );\n      }\n\n      const port = this.getServerPort();\n      const host = this.getServerHost();\n      const server = this.getServer();\n      const ignored = Object.keys(this.getServerRuntimeOptions());\n      if (ignored.length > 0) {\n        this.logger\n          .for(this.startNodeModule.name)\n          .warn('configs.server is Bun-only | ignored on node: %s', ignored.join(', '));\n      }\n\n      import('@hono/node-server')\n        .then(module => {\n          const { serve } = module;\n\n          // Resolve from the listening callback, not serve()'s synchronous return - only then is the socket bound and the OS-assigned port (config port `0`) known.\n          const rs = serve({ fetch: server.fetch, port, hostname: host }, info => {\n            this.configs.port = info.port;\n            this.inspectRoutes();\n            this.logger\n              .for(this.start.name)\n              .info('Server STARTED | Address: %s | Info: %j', this.getServerAddress(), info);\n            this.logger\n              .for(this.start.name)\n              .info(\n                'Log folder: %s',\n                path.resolve(process.env.APP_ENV_LOGGER_FOLDER_PATH ?? '').toString(),\n              );\n\n            this.serverInstance = rs;\n            resolve(rs);\n          });\n        })\n        .catch(error => {\n          this.logger\n            .for(this.start.name)\n            .error('Failed to import @hono/node-server | Error: %s', error);\n          reject(\n            getError({\n              message: `[start] @hono/node-server is required for Node.js runtime. Please install '@hono/node-server'`,\n            }),\n          );\n        });\n    });\n  }\n\n  async start() {\n    await this.initialize();\n    await this.setupMiddlewares();\n\n    const server = this.getServer();\n    server.route(this.configs.path.base, this.rootRouter);\n\n    switch (this.runtime) {\n      case RuntimeModules.BUN: {\n        await this.startBunModule();\n        break;\n      }\n      case RuntimeModules.NODE: {\n        await this.startNodeModule();\n        break;\n      }\n      default: {\n        throw getError({\n          message: '[start] Invalid runtimeModule to start server instance!',\n        });\n      }\n    }\n\n    await this.executePostStartHooks();\n  }\n\n  /** Post-stop hooks, then the server, then the datasources - closed even when the server fails to, so a stopped application holds no connection. */\n  async stop() {\n    await this.executePostStopHooks();\n\n    try {\n      await this.stopServer();\n    } finally {\n      await this.closeDataSources();\n    }\n  }\n\n  protected async stopServer(): Promise<void> {\n    const instance = this.serverInstance;\n    if (!instance) {\n      this.logger.for(this.stop.name).info('Server was not started | Nothing to stop');\n      return;\n    }\n\n    switch (this.runtime) {\n      case RuntimeModules.BUN: {\n        await instance.stop();\n        break;\n      }\n      case RuntimeModules.NODE: {\n        // `close()` is callback-based: without this bridge stop() resolves while the socket is still bound, so an immediate restart races the previous listener.\n        await new Promise<void>((resolve, reject) => {\n          instance.close((error?: Error) => {\n            if (error) {\n              reject(error);\n              return;\n            }\n\n            resolve();\n          });\n        });\n        break;\n      }\n      default: {\n        throw getError({\n          message: '[stop] Invalid runtimeModule to stop server instance!',\n        });\n      }\n    }\n\n    this.serverInstance = undefined;\n    this.logger.for(this.stop.name).info('Server STOPPED');\n  }\n}\n"]}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/base/applications/server.ts"],"names":[],"mappings":";;;;;;AAAA,wDAAsE;AACtE,0DAAuD;AACvD,sDAAuD;AACvD,0DAA+D;AAE/D,qCAAqC;AACrC,0DAA6B;AAW7B,MAAM,mBAAmB,GAAG,WAAW,CAAC;AACxC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,IAAwD,EAAU,EAAE;IAC7F,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAClD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,eAAe,EAAE,CAAC;YACxE,SAAS;QACX,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF,sMAAsM;AACtM,MAAsB,iBAKpB,SAAQ,8BAA4C;IAUpD;;;;OAIG;IACH,YAAY,IAA0D;QACpE,KAAK,CAAC,IAAI,CAAC,CAAC;QAbd,mMAAmM;QACzL,YAAO,GAAG,uBAAc,CAAC,MAAM,EAAE,CAAC;QAc1C,IAAI,CAAC,OAAO,CAAC,IAAI;YACf,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBACnF,mBAAmB,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC;YACpC,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;SAClF,CAAC,CAAC;IACL,CAAC;IAED,0IAA0I;IACvH,6BAA6B;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yPAAyP;IAChP,cAAc;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAA,oBAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,IAAI,CACH,8FAA8F,EAC9F,WAAW,CACZ,CAAC;QACN,CAAC;QACD,IAAI,CAAC,IAAI,CAAS,EAAE,GAAG,EAAE,2BAAY,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvF,6BAAa,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC;IAC5B,CAAC;IAED,gBAAgB;QACd,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,wHAAwH;IAC9G,uBAAuB;QAC/B,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACtE,OAAO;YACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAED,iBAAiB;QAGf,OAAO,IAAI,CAAC,cAA+B,CAAC;IAC9C,CAAC;IAES,cAAc;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,OAAO,KAAK,uBAAc,CAAC,GAAG,EAAE,CAAC;gBACxC,OAAO,MAAM,CACX,IAAA,eAAQ,EAAC;oBACP,OAAO,EAAE,+DAA+D,IAAI,CAAC,OAAO,gBAAgB,uBAAc,CAAC,GAAG,EAAE;iBACzH,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAEhC,OAAO,CAAC,OAAO,CACb,GAAG,CAAC,KAAK,CAAC;gBACR,IAAI;gBACJ,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,IAAI,CAAC,uBAAuB,EAAE;aAClC,CAAC,CACH;iBACE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;gBACX,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;gBAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;gBAErB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;qBACpB,IAAI,CAAC,8BAA8B,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;qBACpB,IAAI,CACH,gBAAgB,EAChB,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CACtE,CAAC;gBAEJ,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC,CAAC;iBACD,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAES,eAAe;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,OAAO,KAAK,uBAAc,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,MAAM,CACX,IAAA,eAAQ,EAAC;oBACP,OAAO,EAAE,gEAAgE,IAAI,CAAC,OAAO,gBAAgB,uBAAc,CAAC,IAAI,EAAE;iBAC3H,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;qBAC9B,IAAI,CAAC,kDAAkD,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,CAAC,mBAAmB,CAAC;iBACxB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBAEzB,0JAA0J;gBAC1J,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;oBACvE,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;oBAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;yBACpB,IAAI,CAAC,yCAAyC,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;oBAClF,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;yBACpB,IAAI,CACH,gBAAgB,EAChB,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CACtE,CAAC;oBAEJ,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;oBACzB,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;qBACpB,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;gBAClE,MAAM,CACJ,IAAA,eAAQ,EAAC;oBACP,OAAO,EAAE,+FAA+F;iBACzG,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEtD,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,uBAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,KAAK,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,yDAAyD;iBACnE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACrC,CAAC;IAED,mJAAmJ;IACnJ,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAES,KAAK,CAAC,UAAU;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,uBAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,MAAM;YACR,CAAC;YACD,KAAK,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,yJAAyJ;gBACzJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;wBAC/B,IAAI,KAAK,EAAE,CAAC;4BACV,MAAM,CAAC,KAAK,CAAC,CAAC;4BACd,OAAO;wBACT,CAAC;wBAED,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,uDAAuD;iBACjE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzD,CAAC;CACF;AA1PD,8CA0PC","sourcesContent":["import { CoreBindings, RestApplication } from '@venizia/ignis-kernel';\nimport { ModuleUtility } from '@venizia/ignis-helpers';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { RuntimeModules } from '@venizia/ignis-helpers/common';\nimport type { Env, Schema } from 'hono';\nimport { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport type {\n  IServerApplication,\n  IServerApplicationConfigs,\n  IServerRuntimeConfigs,\n  TNodeServerInstance,\n} from './common';\n\n/** Lives here, not in the kernel: `Bun.serve` resolves only through `@types/bun`, and emitting `Bun` into the kernel's published `.d.ts` would force that dependency on every browser consumer of `@venizia/ignis-kernel`. This package legitimately has Bun types - it is the layer that calls `Bun.serve`. */\nexport type TBunServerInstance = ReturnType<typeof Bun.serve>;\n\nconst DEFAULT_SERVER_HOST = 'localhost';\nconst DEFAULT_SERVER_PORT = 3000;\nconst MAX_SERVER_PORT = 65535;\n\n/**\n * The first candidate USABLE as a port. Rejection is on validity, never falsiness: `0` legitimately\n * asks the OS for an ephemeral port, and taking the first TRUTHY value instead let an unusable\n * `PORT` shadow a usable `APP_ENV_SERVER_PORT` - `PORT=abc APP_ENV_SERVER_PORT=8080` bound 3000, as\n * did Docker's legacy container-link form `PORT=tcp://172.17.0.5:8080`.\n */\nconst resolveServerPort = (opts: { candidates: Array<number | string | undefined> }): number => {\n  for (const candidate of opts.candidates) {\n    if (candidate === undefined || candidate === null) {\n      continue;\n    }\n\n    const normalized = typeof candidate === 'string' ? candidate.trim() : candidate;\n    if (normalized === '') {\n      continue;\n    }\n\n    const parsed = Number(normalized);\n    if (!Number.isInteger(parsed) || parsed < 0 || parsed > MAX_SERVER_PORT) {\n      continue;\n    }\n\n    return parsed;\n  }\n\n  return DEFAULT_SERVER_PORT;\n};\n\n/** Adds the listening server (`Bun.serve` / `@hono/node-server`) on top of `RestApplication` - the only layer that touches a socket, so it is the layer that stays out of the browser-pure kernel. */\nexport abstract class ServerApplication<\n  AppEnv extends Env = Env,\n  AppSchema extends Schema = {},\n  BasePath extends string = '/',\n>\n  extends RestApplication<AppEnv, AppSchema, BasePath>\n  implements IServerApplication<AppEnv, AppSchema, BasePath>\n{\n  /** Which runtime is underneath, and the socket once one is bound. Both live here, not on `RestApplication`: a browser Worker has neither, and `RuntimeModules.detect()` answers `'node'` there. */\n  protected runtime = RuntimeModules.detect();\n  protected serverInstance?: TBunServerInstance | TNodeServerInstance;\n\n  /** Widened by this layer, which is the only one that binds a socket. Assigned by the base constructor - `declare` so no field initializer runs here and overwrites it with `undefined`. */\n  declare protected configs: IServerApplicationConfigs;\n\n  /**\n   * The address resolution the kernel deliberately does not do: `host` and `port` mean nothing to a\n   * host with no socket, and resolving them there silently configured every browser Worker with\n   * `localhost:3000`. Env is the fallback, explicit config always wins.\n   */\n  constructor(opts: { scope: string; config: IServerApplicationConfigs }) {\n    super(opts);\n\n    this.configs.host =\n      [opts.config.host, process.env.HOST, process.env.APP_ENV_SERVER_HOST].find(Boolean) ??\n      DEFAULT_SERVER_HOST;\n    this.configs.port = resolveServerPort({\n      candidates: [opts.config.port, process.env.PORT, process.env.APP_ENV_SERVER_PORT],\n    });\n  }\n\n  /** Restores the pre-split default: a server-capable application installs `hono/context-storage` unless the caller opts out explicitly. */\n  protected override getDefaultAsyncContextEnabled(): boolean {\n    return true;\n  }\n\n  /** `configs.projectRoot` wins, else the process cwd. The value is bound AND handed to `ModuleUtility`, so every peer lookup (optional modules, the gRPC adapter) resolves under it - a compiled binary sets it to where its `node_modules` really is. */\n  override getProjectRoot(): string {\n    const projectRoot = this.configs.projectRoot ?? process.cwd();\n    if (this.configs.projectRoot && !existsSync(path.join(projectRoot, 'node_modules'))) {\n      this.logger\n        .for(this.getProjectRoot.name)\n        .warn(\n          'configs.projectRoot has no node_modules | root: %s | optional peers will not resolve from it',\n          projectRoot,\n        );\n    }\n    this.bind<string>({ key: CoreBindings.APPLICATION_PROJECT_ROOT }).toValue(projectRoot);\n    ModuleUtility.setProjectRoot({ projectRoot });\n    return projectRoot;\n  }\n\n  getServerHost(): string {\n    return this.configs.host!;\n  }\n\n  getServerPort(): number {\n    return this.configs.port!;\n  }\n\n  getServerAddress() {\n    return `${this.getServerHost()}:${this.getServerPort()}`;\n  }\n\n  /** `configs.server` with unset keys dropped, so a missing option keeps Bun's default instead of passing `undefined`. */\n  protected getServerRuntimeOptions(): IServerRuntimeConfigs {\n    const { idleTimeout, maxRequestBodySize } = this.configs.server ?? {};\n    return {\n      ...(idleTimeout === undefined ? {} : { idleTimeout }),\n      ...(maxRequestBodySize === undefined ? {} : { maxRequestBodySize }),\n    };\n  }\n\n  getServerInstance<\n    T extends TBunServerInstance | TNodeServerInstance = TBunServerInstance | TNodeServerInstance,\n  >(): T | undefined {\n    return this.serverInstance as T | undefined;\n  }\n\n  protected startBunModule() {\n    return new Promise((resolve, reject) => {\n      if (this.runtime !== RuntimeModules.BUN) {\n        return reject(\n          getError({\n            message: `[startBunModule] Invalid runtime to start server | runtime: ${this.runtime} | required: ${RuntimeModules.BUN}`,\n          }),\n        );\n      }\n\n      const port = this.getServerPort();\n      const host = this.getServerHost();\n      const server = this.getServer();\n\n      Promise.resolve(\n        Bun.serve({\n          port,\n          hostname: host,\n          fetch: server.fetch,\n          ...this.getServerRuntimeOptions(),\n        }),\n      )\n        .then((rs) => {\n          this.serverInstance = rs;\n          this.configs.port = rs.port;\n          this.inspectRoutes();\n\n          this.logger\n            .for(this.start.name)\n            .info('Server STARTED | Address: %s', this.getServerAddress());\n          this.logger\n            .for(this.start.name)\n            .info(\n              'Log folder: %s',\n              path.resolve(process.env.APP_ENV_LOGGER_FOLDER_PATH ?? '').toString(),\n            );\n\n          resolve(rs);\n        })\n        .catch(reject);\n    });\n  }\n\n  protected startNodeModule() {\n    return new Promise((resolve, reject) => {\n      if (this.runtime !== RuntimeModules.NODE) {\n        return reject(\n          getError({\n            message: `[startNodeModule] Invalid runtime to start server | runtime: ${this.runtime} | required: ${RuntimeModules.NODE}`,\n          }),\n        );\n      }\n\n      const port = this.getServerPort();\n      const host = this.getServerHost();\n      const server = this.getServer();\n      const ignored = Object.keys(this.getServerRuntimeOptions());\n      if (ignored.length > 0) {\n        this.logger\n          .for(this.startNodeModule.name)\n          .warn('configs.server is Bun-only | ignored on node: %s', ignored.join(', '));\n      }\n\n      import('@hono/node-server')\n        .then((module) => {\n          const { serve } = module;\n\n          // Resolve from the listening callback, not serve()'s synchronous return - only then is the socket bound and the OS-assigned port (config port `0`) known.\n          const rs = serve({ fetch: server.fetch, port, hostname: host }, (info) => {\n            this.configs.port = info.port;\n            this.inspectRoutes();\n            this.logger\n              .for(this.start.name)\n              .info('Server STARTED | Address: %s | Info: %j', this.getServerAddress(), info);\n            this.logger\n              .for(this.start.name)\n              .info(\n                'Log folder: %s',\n                path.resolve(process.env.APP_ENV_LOGGER_FOLDER_PATH ?? '').toString(),\n              );\n\n            this.serverInstance = rs;\n            resolve(rs);\n          });\n        })\n        .catch((error) => {\n          this.logger\n            .for(this.start.name)\n            .error('Failed to import @hono/node-server | Error: %s', error);\n          reject(\n            getError({\n              message: `[start] @hono/node-server is required for Node.js runtime. Please install '@hono/node-server'`,\n            }),\n          );\n        });\n    });\n  }\n\n  async start() {\n    await this.initialize();\n    await this.setupMiddlewares();\n\n    const server = this.getServer();\n    server.route(this.configs.path.base, this.rootRouter);\n\n    switch (this.runtime) {\n      case RuntimeModules.BUN: {\n        await this.startBunModule();\n        break;\n      }\n      case RuntimeModules.NODE: {\n        await this.startNodeModule();\n        break;\n      }\n      default: {\n        throw getError({\n          message: '[start] Invalid runtimeModule to start server instance!',\n        });\n      }\n    }\n\n    await this.executePostStartHooks();\n  }\n\n  /** Post-stop hooks, then the server, then the datasources - closed even when the server fails to, so a stopped application holds no connection. */\n  async stop() {\n    await this.executePostStopHooks();\n\n    try {\n      await this.stopServer();\n    } finally {\n      await this.closeDataSources();\n    }\n  }\n\n  protected async stopServer(): Promise<void> {\n    const instance = this.serverInstance;\n    if (!instance) {\n      this.logger.for(this.stop.name).info('Server was not started | Nothing to stop');\n      return;\n    }\n\n    switch (this.runtime) {\n      case RuntimeModules.BUN: {\n        await instance.stop();\n        break;\n      }\n      case RuntimeModules.NODE: {\n        // `close()` is callback-based: without this bridge stop() resolves while the socket is still bound, so an immediate restart races the previous listener.\n        await new Promise<void>((resolve, reject) => {\n          instance.close((error?: Error) => {\n            if (error) {\n              reject(error);\n              return;\n            }\n\n            resolve();\n          });\n        });\n        break;\n      }\n      default: {\n        throw getError({\n          message: '[stop] Invalid runtimeModule to stop server instance!',\n        });\n      }\n    }\n\n    this.serverInstance = undefined;\n    this.logger.for(this.stop.name).info('Server STOPPED');\n  }\n}\n"]}

package/dist/base/middlewares/app-error/app-error.middleware.js

@@ -19,7 +19,7 @@ class AppErrorMiddleware extends ignis_kernel_1.BaseAppErrorMiddleware {
             // Present, so an unresolved name here is a real misconfiguration and keeps its error line - a
             // node host always HAS an ambient environment, even when it is not set.
             environment: opts?.environment ?? (() => ignis_helpers_1.Environment.ambient),
-            formatError: opts?.formatError ?? (formatOpts => ignis_helpers_1.ErrorPrettier.format(formatOpts)),
+            formatError: opts?.formatError ?? ((formatOpts) => ignis_helpers_1.ErrorPrettier.format(formatOpts)),
         });
     }
 }

package/dist/base/middlewares/app-error/app-error.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-error.middleware.js","sourceRoot":"","sources":["../../../../src/base/middlewares/app-error/app-error.middleware.ts"],"names":[],"mappings":";;;AAAA,0DAAoE;AACpE,wDAA+D;AAI/D;;;;;;;;GAQG;AACH,MAAa,kBAAmB,SAAQ,qCAAsB;IAC5D,YAAY,IAOX;QACC,KAAK,CAAC;YACJ,GAAG,IAAI;YACP,8FAA8F;YAC9F,wEAAwE;YACxE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,2BAAW,CAAC,OAAO,CAAC;YAC7D,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,6BAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;CACF;AAjBD,gDAiBC","sourcesContent":["import { Environment, ErrorPrettier } from '@venizia/ignis-helpers';\nimport { BaseAppErrorMiddleware } from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { TErrorLogFormatter } from '@venizia/ignis-kernel';\n\n/**\n * The server-side error handler: everything it does lives on {@link BaseAppErrorMiddleware}, which\n * is browser-pure. This supplies the two host reads as OPTIONS - the ambient `NODE_ENV` through\n * `Environment.ambient` (a read `bun build` cannot fold into a literal), and `ErrorPrettier`, which\n * reaches `node:util` and so cannot sit in the kernel.\n *\n * A class only so the name `AppErrorMiddleware` keeps resolving for existing consumers; it overrides\n * nothing. New code can pass the same two options to `BaseAppErrorMiddleware` directly.\n */\nexport class AppErrorMiddleware extends BaseAppErrorMiddleware {\n  constructor(opts?: {\n    logger?: ILogger;\n    rootKey?: string;\n    intentionalStackFrames?: number;\n    unexpectedStackFrames?: number;\n    environment?: () => string | undefined;\n    formatError?: TErrorLogFormatter;\n  }) {\n    super({\n      ...opts,\n      // Present, so an unresolved name here is a real misconfiguration and keeps its error line - a\n      // node host always HAS an ambient environment, even when it is not set.\n      environment: opts?.environment ?? (() => Environment.ambient),\n      formatError: opts?.formatError ?? (formatOpts => ErrorPrettier.format(formatOpts)),\n    });\n  }\n}\n"]}
+{"version":3,"file":"app-error.middleware.js","sourceRoot":"","sources":["../../../../src/base/middlewares/app-error/app-error.middleware.ts"],"names":[],"mappings":";;;AAAA,0DAAoE;AACpE,wDAA+D;AAI/D;;;;;;;;GAQG;AACH,MAAa,kBAAmB,SAAQ,qCAAsB;IAC5D,YAAY,IAOX;QACC,KAAK,CAAC;YACJ,GAAG,IAAI;YACP,8FAA8F;YAC9F,wEAAwE;YACxE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,2BAAW,CAAC,OAAO,CAAC;YAC7D,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,6BAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;CACF;AAjBD,gDAiBC","sourcesContent":["import { Environment, ErrorPrettier } from '@venizia/ignis-helpers';\nimport { BaseAppErrorMiddleware } from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { TErrorLogFormatter } from '@venizia/ignis-kernel';\n\n/**\n * The server-side error handler: everything it does lives on {@link BaseAppErrorMiddleware}, which\n * is browser-pure. This supplies the two host reads as OPTIONS - the ambient `NODE_ENV` through\n * `Environment.ambient` (a read `bun build` cannot fold into a literal), and `ErrorPrettier`, which\n * reaches `node:util` and so cannot sit in the kernel.\n *\n * A class only so the name `AppErrorMiddleware` keeps resolving for existing consumers; it overrides\n * nothing. New code can pass the same two options to `BaseAppErrorMiddleware` directly.\n */\nexport class AppErrorMiddleware extends BaseAppErrorMiddleware {\n  constructor(opts?: {\n    logger?: ILogger;\n    rootKey?: string;\n    intentionalStackFrames?: number;\n    unexpectedStackFrames?: number;\n    environment?: () => string | undefined;\n    formatError?: TErrorLogFormatter;\n  }) {\n    super({\n      ...opts,\n      // Present, so an unresolved name here is a real misconfiguration and keeps its error line - a\n      // node host always HAS an ambient environment, even when it is not set.\n      environment: opts?.environment ?? (() => Environment.ambient),\n      formatError: opts?.formatError ?? ((formatOpts) => ErrorPrettier.format(formatOpts)),\n    });\n  }\n}\n"]}

package/dist/components/auth/authenticate/controllers/factory.js

@@ -155,7 +155,7 @@ const defineAuthController = (opts) => {
                         query: zod_openapi_1.z.object({
                             withUserInformation: zod_openapi_1.z
                                 .enum(['true', 'false', '1', '0'])
-                                .transform(value => value === 'true' || value === '1')
+                                .transform((value) => value === 'true' || value === '1')
                                 .optional()
                                 .openapi({
                                 description: 'Whether to attach user information to currentUser',

package/dist/components/auth/authenticate/controllers/factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wDAA+C;AAC/C,wDAAmD;AACnD,wDAAkE;AAClE,2CAAgD;AAChD,wDAAwD;AACxD,mDAAsC;AACtC,sDAAuD;AACvD,0DAA0E;AAC1E,wDAI+B;AAC/B,wDAI+B;AAElB,QAAA,qBAAqB,GAAG,eAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,eAAC,CAAC,MAAM,EAAE,CAAC;IACjC,KAAK,EAAE,eAAC,CAAC,KAAK,CACZ,eAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,eAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,UAAU,EAAE,eAAC,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC3B,CAAC,CACH;IACD,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,eAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEI,MAAM,oBAAoB,GAAG,CAAC,IAA+B,EAAE,EAAE;;IACtE,MAAM,EAAE,QAAQ,GAAG,OAAO,EAAE,UAAU,EAAE,0BAA0B,GAAG,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAElG,IACM,cAAc,sBADpB,MACM,cAAe,SAAQ,iCAAkB;QAG7C,YAAY,WAAyB;YACnC,KAAK,CAAC;gBACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;gBAC1B,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EACL,8FAA8F;iBACjG,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC7B,CAAC;QAEQ,OAAO;YACd,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,sBAAsB;4BACnC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,kCAAmB;yBAChE,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAC5D,WAAW,EAAE,kBAAkB;qBAChC,CAAC;iBACH;gBACD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,YAAY,EAAE;wBACZ,UAAU,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAAc,CAAC,YAAY,CAAC;qBAC7E;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,sBAAsB;4BACnC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,kCAAmB;yBAChE,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAC5D,WAAW,EAAE,kBAAkB;qBAChC,CAAC;iBACH;gBACD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,iBAAiB;oBAC9B,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,8BAA8B;4BAC3C,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,IAAI,0CAA2B;yBAChF,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBACpE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,0KAA0K;YAC1K,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,sBAAsB;oBACnC,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAClE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;wBAC/B,OAAO,IAAA,6BAAiB,EAAC;4BACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;4BAC1B,OAAO,EAAE,cAAc;4BACvB,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,GAAG;oBACxB,OAAO,EAAE;wBACP,KAAK,EAAE,eAAC,CAAC,MAAM,CAAC;4BACd,mBAAmB,EAAE,eAAC;iCACnB,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;iCACjC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;iCACrD,QAAQ,EAAE;iCACV,OAAO,CAAC;gCACP,WAAW,EAAE,mDAAmD;6BACjE,CAAC;yBACL,CAAC;qBACH;oBACD,SAAS,EAAE;wBACT,CAAC,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAA,0BAAW,EAAC;4BACtC,WAAW,EAAE,kBAAkB;4BAC/B,MAAM,EAAE,6BAAqB,CAAC,MAAM,CAAC;gCACnC,eAAe,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe,CAAC;qCAChF,QAAQ,EAAE;qCACV,OAAO,CAAC;oCACP,WAAW,EAAE,6CAA6C;iCAC3D,CAAC;6BACL,CAAC;yBACH,CAAC;qBACH;oBACD,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBACvB,MAAM,EAAE,mBAAmB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAEtD,OAAO,CAAC,CAAC;oBAEZ,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAc,CAAC,YAAY,CAAC,CAAC;oBAC7D,IAAI,EAAE,GAAG,WAAW,CAAC;oBAErB,IAAI,mBAAmB,EAAE,CAAC;wBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;4BACrC,OAAO,IAAA,6BAAiB,EAAC;gCACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;gCAC1B,OAAO,EAAE,oBAAoB;gCAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;6BACpB,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAC3E,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;oBAC3D,CAAC;oBAED,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,8BAA8B;oBAC3C,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,GAAG;oBACxB,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBACxE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;wBACrC,OAAO,IAAA,6BAAiB,EAAC;4BACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;4BAC1B,OAAO,EAAE,oBAAoB;4BAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAA;IA1MK,cAAc;QADnB,IAAA,yBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;;OACzB,cAAc,CA0MnB;IAED,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAE1D,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAnNW,QAAA,oBAAoB,wBAmN/B","sourcesContent":["import { BaseRestController } from '@venizia/ignis-kernel';\nimport { inject } from '@venizia/ignis-kernel';\nimport { controller } from '@venizia/ignis-kernel';\nimport { jsonContent, jsonResponse } from '@venizia/ignis-kernel';\nimport { throwNotSupported } from '@/utilities';\nimport { AnyObjectSchema } from '@venizia/ignis-kernel';\nimport { z } from '@hono/zod-openapi';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport {\n  ChangePasswordRequestSchema,\n  SignInRequestSchema,\n  SignUpRequestSchema,\n} from '@venizia/ignis-kernel';\nimport {\n  Authentication,\n  type IAuthService,\n  type TDefineAuthControllerOpts,\n} from '@venizia/ignis-kernel';\n\nexport const JWTTokenPayloadSchema = z.object({\n  userId: z.string().or(z.number()),\n  roles: z.array(\n    z.object({\n      id: z.string().or(z.number()),\n      identifier: z.string(),\n      priority: z.number().int(),\n    }),\n  ),\n  clientId: z.string().optional(),\n  provider: z.string().optional(),\n  email: z.email().optional(),\n});\n\nexport const defineAuthController = (opts: TDefineAuthControllerOpts) => {\n  const { restPath = '/auth', serviceKey, requireAuthenticatedSignUp = false, payload = {} } = opts;\n\n  @controller({ path: restPath })\n  class AuthController extends BaseRestController {\n    service: IAuthService;\n\n    constructor(authService: IAuthService) {\n      super({\n        scope: AuthController.name,\n        path: restPath,\n        isStrict: true,\n      });\n\n      if (!authService) {\n        throw getError({\n          message:\n            '[AuthController] Failed to init auth controller | Invalid injectable authentication service!',\n        });\n      }\n\n      this.service = authService;\n    }\n\n    override binding(): ValueOrPromise<void> {\n      this.defineRoute({\n        configs: {\n          description: 'Sign In',\n          path: '/sign-in',\n          method: HTTP.Methods.POST,\n          request: {\n            body: jsonContent({\n              description: 'Sign-in request body',\n              required: true,\n              schema: payload?.signIn?.request?.schema ?? SignInRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.signIn?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n        },\n        handler: async context => {\n          const body = await context.req.json();\n          const rs = await this.service.signIn(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Sign Up',\n          path: '/sign-up',\n          method: HTTP.Methods.POST,\n          authenticate: {\n            strategies: !requireAuthenticatedSignUp ? [] : [Authentication.STRATEGY_JWT],\n          },\n          request: {\n            body: jsonContent({\n              description: 'Sign-up request body',\n              required: true,\n              schema: payload?.signUp?.request?.schema ?? SignUpRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.signUp?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n        },\n        handler: async context => {\n          const body = await context.req.json();\n          const rs = await this.service.signUp(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Change password',\n          path: '/change-password',\n          method: HTTP.Methods.POST,\n          request: {\n            body: jsonContent({\n              description: 'Change password request body',\n              required: true,\n              schema: payload?.changePassword?.request?.schema ?? ChangePasswordRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.changePassword?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async context => {\n          const body = await context.req.json();\n          const rs = await this.service.changePassword(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      // Re-issues an access token using the caller's currently valid JWT — no separate refresh token. Implementers must enforce their own rotation/revocation policy if needed.\n      this.defineRoute({\n        configs: {\n          description: 'Refresh access token',\n          path: '/token/refresh',\n          method: HTTP.Methods.POST,\n          responses: jsonResponse({\n            schema: payload?.refreshToken?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async context => {\n          if (!this.service.refreshToken) {\n            return throwNotSupported({\n              scope: AuthController.name,\n              feature: 'refreshToken',\n              logger: this.logger,\n            });\n          }\n\n          const rs = await this.service.refreshToken(context);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          path: '/who-am-i',\n          method: HTTP.Methods.GET,\n          request: {\n            query: z.object({\n              withUserInformation: z\n                .enum(['true', 'false', '1', '0'])\n                .transform(value => value === 'true' || value === '1')\n                .optional()\n                .openapi({\n                  description: 'Whether to attach user information to currentUser',\n                }),\n            }),\n          },\n          responses: {\n            [HTTP.ResultCodes.RS_2.Ok]: jsonContent({\n              description: 'Success Response',\n              schema: JWTTokenPayloadSchema.extend({\n                userInformation: (payload?.getUserInformation?.response?.schema ?? AnyObjectSchema)\n                  .optional()\n                  .openapi({\n                    description: 'Attached when withUserInformation is truthy',\n                  }),\n              }),\n            }),\n          },\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async context => {\n          const { withUserInformation = false } = context.req.valid<{\n            withUserInformation?: boolean;\n          }>('query');\n\n          const currentUser = context.get(Authentication.CURRENT_USER);\n          let rs = currentUser;\n\n          if (withUserInformation) {\n            if (!this.service.getUserInformation) {\n              return throwNotSupported({\n                scope: AuthController.name,\n                feature: 'getUserInformation',\n                logger: this.logger,\n              });\n            }\n\n            const userInformation = await this.service.getUserInformation(context, {});\n            rs = Object.assign({}, currentUser, { userInformation });\n          }\n\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Get current user information',\n          path: '/me',\n          method: HTTP.Methods.GET,\n          responses: jsonResponse({\n            schema: payload?.getUserInformation?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async context => {\n          if (!this.service.getUserInformation) {\n            return throwNotSupported({\n              scope: AuthController.name,\n              feature: 'getUserInformation',\n              logger: this.logger,\n            });\n          }\n\n          const rs = await this.service.getUserInformation(context, {});\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n    }\n  }\n\n  inject({ key: serviceKey })(AuthController, undefined, 0);\n\n  return AuthController;\n};\n"]}
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wDAA+C;AAC/C,wDAAmD;AACnD,wDAAkE;AAClE,2CAAgD;AAChD,wDAAwD;AACxD,mDAAsC;AACtC,sDAAuD;AACvD,0DAA0E;AAC1E,wDAI+B;AAC/B,wDAI+B;AAElB,QAAA,qBAAqB,GAAG,eAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,eAAC,CAAC,MAAM,EAAE,CAAC;IACjC,KAAK,EAAE,eAAC,CAAC,KAAK,CACZ,eAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,eAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,UAAU,EAAE,eAAC,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC3B,CAAC,CACH;IACD,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,eAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEI,MAAM,oBAAoB,GAAG,CAAC,IAA+B,EAAE,EAAE;;IACtE,MAAM,EAAE,QAAQ,GAAG,OAAO,EAAE,UAAU,EAAE,0BAA0B,GAAG,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAElG,IACM,cAAc,sBADpB,MACM,cAAe,SAAQ,iCAAkB;QAG7C,YAAY,WAAyB;YACnC,KAAK,CAAC;gBACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;gBAC1B,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EACL,8FAA8F;iBACjG,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC7B,CAAC;QAEQ,OAAO;YACd,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,sBAAsB;4BACnC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,kCAAmB;yBAChE,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAC5D,WAAW,EAAE,kBAAkB;qBAChC,CAAC;iBACH;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,YAAY,EAAE;wBACZ,UAAU,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAAc,CAAC,YAAY,CAAC;qBAC7E;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,sBAAsB;4BACnC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,kCAAmB;yBAChE,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAC5D,WAAW,EAAE,kBAAkB;qBAChC,CAAC;iBACH;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,iBAAiB;oBAC9B,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,8BAA8B;4BAC3C,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,IAAI,0CAA2B;yBAChF,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBACpE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,0KAA0K;YAC1K,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,sBAAsB;oBACnC,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAClE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;wBAC/B,OAAO,IAAA,6BAAiB,EAAC;4BACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;4BAC1B,OAAO,EAAE,cAAc;4BACvB,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,GAAG;oBACxB,OAAO,EAAE;wBACP,KAAK,EAAE,eAAC,CAAC,MAAM,CAAC;4BACd,mBAAmB,EAAE,eAAC;iCACnB,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;iCACjC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;iCACvD,QAAQ,EAAE;iCACV,OAAO,CAAC;gCACP,WAAW,EAAE,mDAAmD;6BACjE,CAAC;yBACL,CAAC;qBACH;oBACD,SAAS,EAAE;wBACT,CAAC,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAA,0BAAW,EAAC;4BACtC,WAAW,EAAE,kBAAkB;4BAC/B,MAAM,EAAE,6BAAqB,CAAC,MAAM,CAAC;gCACnC,eAAe,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe,CAAC;qCAChF,QAAQ,EAAE;qCACV,OAAO,CAAC;oCACP,WAAW,EAAE,6CAA6C;iCAC3D,CAAC;6BACL,CAAC;yBACH,CAAC;qBACH;oBACD,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,EAAE,mBAAmB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAEtD,OAAO,CAAC,CAAC;oBAEZ,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAc,CAAC,YAAY,CAAC,CAAC;oBAC7D,IAAI,EAAE,GAAG,WAAW,CAAC;oBAErB,IAAI,mBAAmB,EAAE,CAAC;wBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;4BACrC,OAAO,IAAA,6BAAiB,EAAC;gCACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;gCAC1B,OAAO,EAAE,oBAAoB;gCAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;6BACpB,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAC3E,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;oBAC3D,CAAC;oBAED,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,8BAA8B;oBAC3C,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,GAAG;oBACxB,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBACxE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;wBACrC,OAAO,IAAA,6BAAiB,EAAC;4BACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;4BAC1B,OAAO,EAAE,oBAAoB;4BAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAA;IA1MK,cAAc;QADnB,IAAA,yBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;;OACzB,cAAc,CA0MnB;IAED,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAE1D,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAnNW,QAAA,oBAAoB,wBAmN/B","sourcesContent":["import { BaseRestController } from '@venizia/ignis-kernel';\nimport { inject } from '@venizia/ignis-kernel';\nimport { controller } from '@venizia/ignis-kernel';\nimport { jsonContent, jsonResponse } from '@venizia/ignis-kernel';\nimport { throwNotSupported } from '@/utilities';\nimport { AnyObjectSchema } from '@venizia/ignis-kernel';\nimport { z } from '@hono/zod-openapi';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport {\n  ChangePasswordRequestSchema,\n  SignInRequestSchema,\n  SignUpRequestSchema,\n} from '@venizia/ignis-kernel';\nimport {\n  Authentication,\n  type IAuthService,\n  type TDefineAuthControllerOpts,\n} from '@venizia/ignis-kernel';\n\nexport const JWTTokenPayloadSchema = z.object({\n  userId: z.string().or(z.number()),\n  roles: z.array(\n    z.object({\n      id: z.string().or(z.number()),\n      identifier: z.string(),\n      priority: z.number().int(),\n    }),\n  ),\n  clientId: z.string().optional(),\n  provider: z.string().optional(),\n  email: z.email().optional(),\n});\n\nexport const defineAuthController = (opts: TDefineAuthControllerOpts) => {\n  const { restPath = '/auth', serviceKey, requireAuthenticatedSignUp = false, payload = {} } = opts;\n\n  @controller({ path: restPath })\n  class AuthController extends BaseRestController {\n    service: IAuthService;\n\n    constructor(authService: IAuthService) {\n      super({\n        scope: AuthController.name,\n        path: restPath,\n        isStrict: true,\n      });\n\n      if (!authService) {\n        throw getError({\n          message:\n            '[AuthController] Failed to init auth controller | Invalid injectable authentication service!',\n        });\n      }\n\n      this.service = authService;\n    }\n\n    override binding(): ValueOrPromise<void> {\n      this.defineRoute({\n        configs: {\n          description: 'Sign In',\n          path: '/sign-in',\n          method: HTTP.Methods.POST,\n          request: {\n            body: jsonContent({\n              description: 'Sign-in request body',\n              required: true,\n              schema: payload?.signIn?.request?.schema ?? SignInRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.signIn?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n        },\n        handler: async (context) => {\n          const body = await context.req.json();\n          const rs = await this.service.signIn(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Sign Up',\n          path: '/sign-up',\n          method: HTTP.Methods.POST,\n          authenticate: {\n            strategies: !requireAuthenticatedSignUp ? [] : [Authentication.STRATEGY_JWT],\n          },\n          request: {\n            body: jsonContent({\n              description: 'Sign-up request body',\n              required: true,\n              schema: payload?.signUp?.request?.schema ?? SignUpRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.signUp?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n        },\n        handler: async (context) => {\n          const body = await context.req.json();\n          const rs = await this.service.signUp(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Change password',\n          path: '/change-password',\n          method: HTTP.Methods.POST,\n          request: {\n            body: jsonContent({\n              description: 'Change password request body',\n              required: true,\n              schema: payload?.changePassword?.request?.schema ?? ChangePasswordRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.changePassword?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          const body = await context.req.json();\n          const rs = await this.service.changePassword(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      // Re-issues an access token using the caller's currently valid JWT — no separate refresh token. Implementers must enforce their own rotation/revocation policy if needed.\n      this.defineRoute({\n        configs: {\n          description: 'Refresh access token',\n          path: '/token/refresh',\n          method: HTTP.Methods.POST,\n          responses: jsonResponse({\n            schema: payload?.refreshToken?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          if (!this.service.refreshToken) {\n            return throwNotSupported({\n              scope: AuthController.name,\n              feature: 'refreshToken',\n              logger: this.logger,\n            });\n          }\n\n          const rs = await this.service.refreshToken(context);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          path: '/who-am-i',\n          method: HTTP.Methods.GET,\n          request: {\n            query: z.object({\n              withUserInformation: z\n                .enum(['true', 'false', '1', '0'])\n                .transform((value) => value === 'true' || value === '1')\n                .optional()\n                .openapi({\n                  description: 'Whether to attach user information to currentUser',\n                }),\n            }),\n          },\n          responses: {\n            [HTTP.ResultCodes.RS_2.Ok]: jsonContent({\n              description: 'Success Response',\n              schema: JWTTokenPayloadSchema.extend({\n                userInformation: (payload?.getUserInformation?.response?.schema ?? AnyObjectSchema)\n                  .optional()\n                  .openapi({\n                    description: 'Attached when withUserInformation is truthy',\n                  }),\n              }),\n            }),\n          },\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          const { withUserInformation = false } = context.req.valid<{\n            withUserInformation?: boolean;\n          }>('query');\n\n          const currentUser = context.get(Authentication.CURRENT_USER);\n          let rs = currentUser;\n\n          if (withUserInformation) {\n            if (!this.service.getUserInformation) {\n              return throwNotSupported({\n                scope: AuthController.name,\n                feature: 'getUserInformation',\n                logger: this.logger,\n              });\n            }\n\n            const userInformation = await this.service.getUserInformation(context, {});\n            rs = Object.assign({}, currentUser, { userInformation });\n          }\n\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Get current user information',\n          path: '/me',\n          method: HTTP.Methods.GET,\n          responses: jsonResponse({\n            schema: payload?.getUserInformation?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          if (!this.service.getUserInformation) {\n            return throwNotSupported({\n              scope: AuthController.name,\n              feature: 'getUserInformation',\n              logger: this.logger,\n            });\n          }\n\n          const rs = await this.service.getUserInformation(context, {});\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n    }\n  }\n\n  inject({ key: serviceKey })(AuthController, undefined, 0);\n\n  return AuthController;\n};\n"]}

package/dist/components/auth/authenticate/controllers/jwks/controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wDAA+C;AAC/C,wDAA0D;AAC1D,0DAA0E;AAC1E,8DAAuD;AACvD,6CAAwD;AACxD,+CAA6C;AAE7C,IAAa,cAAc,sBAA3B,MAAa,cAAe,SAAQ,iCAAkB;IACpD,YAOU,WAAmC;QAE3C,KAAK,CAAC;YACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;YAC1B,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QANK,gBAAW,GAAX,WAAW,CAAwB;IAO7C,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,0BAAY,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;gBACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;gBACtF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAEtB,WAAA,IAAA,qBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,gCAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,iCAAsB,CAAC,IAAI;SACjC,CAAC;KACH,CAAC,CAAA;qCACmB,iCAAsB;GARlC,cAAc,CA2B1B","sourcesContent":["import { BaseRestController } from '@venizia/ignis-kernel';\nimport { inject } from '@venizia/ignis-kernel';\nimport { BindingNamespaces } from '@venizia/ignis-kernel';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BindingKeys } from '@venizia/ignis-inversion';\nimport { JWKSIssuerTokenService } from '../../services';\nimport { RouteConfigs } from './definitions';\n\nexport class JWKSController extends BaseRestController {\n  constructor(\n    @inject({\n      key: BindingKeys.build({\n        namespace: BindingNamespaces.SERVICE,\n        key: JWKSIssuerTokenService.name,\n      }),\n    })\n    private jwksService: JWKSIssuerTokenService,\n  ) {\n    super({\n      scope: JWKSController.name,\n      path: '/certs',\n      isStrict: true,\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    this.defineRoute({\n      configs: RouteConfigs.GET_JWKS_CERTS,\n      handler: async context => {\n        const jwks = await this.jwksService.getJWKSAsync();\n        context.header('Cache-Control', 'public, max-age=3600, stale-while-revalidate=86400');\n        return context.json(jwks, HTTP.ResultCodes.RS_2.Ok);\n      },\n    });\n  }\n}\n"]}
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wDAA+C;AAC/C,wDAA0D;AAC1D,0DAA0E;AAC1E,8DAAuD;AACvD,6CAAwD;AACxD,+CAA6C;AAE7C,IAAa,cAAc,sBAA3B,MAAa,cAAe,SAAQ,iCAAkB;IACpD,YAOU,WAAmC;QAE3C,KAAK,CAAC;YACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;YAC1B,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QANK,gBAAW,GAAX,WAAW,CAAwB;IAO7C,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,0BAAY,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;gBACtF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAEtB,WAAA,IAAA,qBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,gCAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,iCAAsB,CAAC,IAAI;SACjC,CAAC;KACH,CAAC,CAAA;qCACmB,iCAAsB;GARlC,cAAc,CA2B1B","sourcesContent":["import { BaseRestController } from '@venizia/ignis-kernel';\nimport { inject } from '@venizia/ignis-kernel';\nimport { BindingNamespaces } from '@venizia/ignis-kernel';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BindingKeys } from '@venizia/ignis-inversion';\nimport { JWKSIssuerTokenService } from '../../services';\nimport { RouteConfigs } from './definitions';\n\nexport class JWKSController extends BaseRestController {\n  constructor(\n    @inject({\n      key: BindingKeys.build({\n        namespace: BindingNamespaces.SERVICE,\n        key: JWKSIssuerTokenService.name,\n      }),\n    })\n    private jwksService: JWKSIssuerTokenService,\n  ) {\n    super({\n      scope: JWKSController.name,\n      path: '/certs',\n      isStrict: true,\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    this.defineRoute({\n      configs: RouteConfigs.GET_JWKS_CERTS,\n      handler: async (context) => {\n        const jwks = await this.jwksService.getJWKSAsync();\n        context.header('Cache-Control', 'public, max-age=3600, stale-while-revalidate=86400');\n        return context.json(jwks, HTTP.ResultCodes.RS_2.Ok);\n      },\n    });\n  }\n}\n"]}

package/dist/components/auth/authenticate/controllers/service-certs/controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAK+B;AAC/B,0DAA0E;AAC1E,8DAAuD;AACvD,0EAAsF;AACtF,+CAAyD;AAEzD,4GAA4G;AAC5G,IAAa,sBAAsB,8BAAnC,MAAa,sBAAuB,SAAQ,iCAAkB;IAC5D,YAOmB,MAAqC,EAEtD,IAAY;QAEZ,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAJnD,WAAM,GAAN,MAAM,CAA+B;IAKxD,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,sCAAwB,CAAC,iBAAiB;YACnD,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;gBACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;gBACrF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAzBY,wDAAsB;iCAAtB,sBAAsB;IAE9B,WAAA,IAAA,qBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,gCAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,8CAA6B,CAAC,IAAI;SACxC,CAAC;KACH,CAAC,CAAA;IAED,WAAA,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,sCAAuB,CAAC,kBAAkB,EAAE,CAAC,CAAA;qCADnC,8CAA6B;GAR7C,sBAAsB,CAyBlC","sourcesContent":["import {\n  AuthenticateBindingKeys,\n  BaseRestController,\n  BindingNamespaces,\n  inject,\n} from '@venizia/ignis-kernel';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BindingKeys } from '@venizia/ignis-inversion';\nimport { ServiceAssertionSignerService } from '../../services/service/signer.service';\nimport { ServiceCertsRouteConfigs } from './definitions';\n\n/** Publishes this service's assertion-signing public key. Mounted only when signing keys are configured. */\nexport class ServiceCertsController extends BaseRestController {\n  constructor(\n    @inject({\n      key: BindingKeys.build({\n        namespace: BindingNamespaces.SERVICE,\n        key: ServiceAssertionSignerService.name,\n      }),\n    })\n    private readonly signer: ServiceAssertionSignerService,\n    @inject({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n    path: string,\n  ) {\n    super({ scope: ServiceCertsController.name, path, isStrict: true });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    this.defineRoute({\n      configs: ServiceCertsRouteConfigs.GET_SERVICE_CERTS,\n      handler: async context => {\n        const jwks = await this.signer.getPublicJWKS();\n        context.header('Cache-Control', 'public, max-age=600, stale-while-revalidate=86400');\n        return context.json(jwks, HTTP.ResultCodes.RS_2.Ok);\n      },\n    });\n  }\n}\n"]}
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAK+B;AAC/B,0DAA0E;AAC1E,8DAAuD;AACvD,0EAAsF;AACtF,+CAAyD;AAEzD,4GAA4G;AAC5G,IAAa,sBAAsB,8BAAnC,MAAa,sBAAuB,SAAQ,iCAAkB;IAC5D,YAOmB,MAAqC,EAEtD,IAAY;QAEZ,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAJnD,WAAM,GAAN,MAAM,CAA+B;IAKxD,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,sCAAwB,CAAC,iBAAiB;YACnD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;gBACrF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAzBY,wDAAsB;iCAAtB,sBAAsB;IAE9B,WAAA,IAAA,qBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,gCAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,8CAA6B,CAAC,IAAI;SACxC,CAAC;KACH,CAAC,CAAA;IAED,WAAA,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,sCAAuB,CAAC,kBAAkB,EAAE,CAAC,CAAA;qCADnC,8CAA6B;GAR7C,sBAAsB,CAyBlC","sourcesContent":["import {\n  AuthenticateBindingKeys,\n  BaseRestController,\n  BindingNamespaces,\n  inject,\n} from '@venizia/ignis-kernel';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BindingKeys } from '@venizia/ignis-inversion';\nimport { ServiceAssertionSignerService } from '../../services/service/signer.service';\nimport { ServiceCertsRouteConfigs } from './definitions';\n\n/** Publishes this service's assertion-signing public key. Mounted only when signing keys are configured. */\nexport class ServiceCertsController extends BaseRestController {\n  constructor(\n    @inject({\n      key: BindingKeys.build({\n        namespace: BindingNamespaces.SERVICE,\n        key: ServiceAssertionSignerService.name,\n      }),\n    })\n    private readonly signer: ServiceAssertionSignerService,\n    @inject({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n    path: string,\n  ) {\n    super({ scope: ServiceCertsController.name, path, isStrict: true });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    this.defineRoute({\n      configs: ServiceCertsRouteConfigs.GET_SERVICE_CERTS,\n      handler: async (context) => {\n        const jwks = await this.signer.getPublicJWKS();\n        context.header('Cache-Control', 'public, max-age=600, stale-while-revalidate=86400');\n        return context.json(jwks, HTTP.ResultCodes.RS_2.Ok);\n      },\n    });\n  }\n}\n"]}

package/dist/components/auth/authenticate/services/bearer/jwks/abstract.service.js

@@ -13,7 +13,7 @@ class AbstractJWKSTokenService extends abstract_service_1.AbstractBearerTokenSer
         if (this.initialized) {
             return;
         }
-        this.initPromise ??= this.initialize().catch(error => {
+        this.initPromise ??= this.initialize().catch((error) => {
             this.initPromise = null;
             throw error;
         });

package/dist/components/auth/authenticate/services/bearer/jwks/abstract.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"abstract.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/jwks/abstract.service.ts"],"names":[],"mappings":";;;AACA,0DAAiE;AAEjE,iLAAiL;AACjL,MAAsB,wBAEpB,SAAQ,6CAA6B;IAFvC;;QAGY,gBAAW,GAAG,KAAK,CAAC;QACpB,gBAAW,GAAyB,IAAI,CAAC;IAgBrD,CAAC;IAdW,KAAK,CAAC,iBAAiB;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;CAGF;AApBD,4DAoBC","sourcesContent":["import type { Env } from 'hono';\nimport { AbstractBearerTokenService } from '../abstract.service';\n\n/** Base for JWKS token services (Issuer + Verifier): lazy init where a rejected `initialize()` resets `initPromise`, so the next call retries instead of caching the failure. */\nexport abstract class AbstractJWKSTokenService<\n  E extends Env = Env,\n> extends AbstractBearerTokenService<E> {\n  protected initialized = false;\n  protected initPromise: Promise<void> | null = null;\n\n  protected async ensureInitialized(): Promise<void> {\n    if (this.initialized) {\n      return;\n    }\n\n    this.initPromise ??= this.initialize().catch(error => {\n      this.initPromise = null;\n      throw error;\n    });\n\n    await this.initPromise;\n  }\n\n  protected abstract initialize(): Promise<void>;\n}\n"]}
+{"version":3,"file":"abstract.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/jwks/abstract.service.ts"],"names":[],"mappings":";;;AACA,0DAAiE;AAEjE,iLAAiL;AACjL,MAAsB,wBAEpB,SAAQ,6CAA6B;IAFvC;;QAGY,gBAAW,GAAG,KAAK,CAAC;QACpB,gBAAW,GAAyB,IAAI,CAAC;IAgBrD,CAAC;IAdW,KAAK,CAAC,iBAAiB;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;CAGF;AApBD,4DAoBC","sourcesContent":["import type { Env } from 'hono';\nimport { AbstractBearerTokenService } from '../abstract.service';\n\n/** Base for JWKS token services (Issuer + Verifier): lazy init where a rejected `initialize()` resets `initPromise`, so the next call retries instead of caching the failure. */\nexport abstract class AbstractJWKSTokenService<\n  E extends Env = Env,\n> extends AbstractBearerTokenService<E> {\n  protected initialized = false;\n  protected initPromise: Promise<void> | null = null;\n\n  protected async ensureInitialized(): Promise<void> {\n    if (this.initialized) {\n      return;\n    }\n\n    this.initPromise ??= this.initialize().catch((error) => {\n      this.initPromise = null;\n      throw error;\n    });\n\n    await this.initPromise;\n  }\n\n  protected abstract initialize(): Promise<void>;\n}\n"]}

package/dist/components/auth/authenticate/services/bearer/jwks/issuer.service.js

@@ -95,7 +95,7 @@ let JWKSIssuerTokenService = JWKSIssuerTokenService_1 = class JWKSIssuerTokenSer
      */
     assertPublicJWK(opts) {
         const PRIVATE_MEMBERS = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'k'];
-        const present = PRIVATE_MEMBERS.filter(member => opts.jwk[member] !== undefined);
+        const present = PRIVATE_MEMBERS.filter((member) => opts.jwk[member] !== undefined);
         if (present.length === 0) {
             return;
         }

package/dist/components/auth/authenticate/services/bearer/jwks/issuer.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"issuer.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/jwks/issuer.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAA0F;AAC1F,sDAAuD;AACvD,wDAS+B;AAG/B,+CAA4C;AAC5C,mDAA+C;AAC/C,yDAA8D;AAE9D,IAAa,sBAAsB,8BAAnC,MAAa,sBAA4C,SAAQ,2CAA2B;IAK1F,YAEE,OAAqC;QAErC,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;QAFpC,YAAO,GAAP,OAAO,CAAoB;QAN7B,eAAU,GAAsC,IAAI,CAAC;QACrD,cAAS,GAAsC,IAAI,CAAC;QACpD,SAAI,GAA2B,IAAI,CAAC;QAQ5C,IAAI,CAAC,0BAA0B,CAAC;YAC9B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAEkB,KAAK,CAAC,UAAU;QACjC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;QAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC;QAEnD,8FAA8F;QAC9F,+FAA+F;QAC/F,uEAAuE;QACvE,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAEzC,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACjC,SAAS,CAAC,GAAG,GAAG,SAAS,CAAC;QAC1B,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC;QAEtB,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAElC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,6DAA6D,EAC7D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,GAAG,CACjB,CAAC;IACN,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,IAA0C;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,6BAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACpC,IAAA,mBAAQ,EAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;oBAC/B,IAAA,mBAAQ,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC/B,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,KAAK,6BAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,OAAO;oBAClB,GAAG,EAAE,IAAI,CAAC,MAAM;iBACjB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;oBACrD,OAAO,EAAE,gDAAgD,IAAI,CAAC,MAAM,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,eAAe,CAAC,IAAkB;QAC1C,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAU,CAAC;QAExE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC;QACjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAA,eAAQ,EAAC;YACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;YACrD,OAAO,EAAE,6EAA6E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,4FAA4F;SACrM,CAAC,CAAC;IACL,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAIhC;QACC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAA,eAAQ,EAAC;gBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,IAAA,eAAQ,EAAC;gBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAEvE,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,6BAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACpD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACjD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,KAAK,6BAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG;wBACb,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAQ;wBACjC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAQ;qBAChC,CAAC;oBAEF,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;oBAE1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBACrD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACnD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;yBAC/B,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;oBACxD,MAAM,IAAA,eAAQ,EAAC;wBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,mDAAmD;qBAC7D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;oBACrD,OAAO,EAAE,gDAAgD,IAAI,CAAC,MAAM,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC7C,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAmB,KAAK,EAAE,IAAI,CAAC,SAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAIxB;QACC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;aAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;aAC1E,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,GAAG,SAAS,CAAC;aAClC,YAAY,CAAC,GAAG,CAAC,CAAC;QAErB,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IAEkB,aAAa;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAA,eAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEkB,wBAAwB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxC,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAA,eAAQ,EAAC;gBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAK,CAAC;IACpB,CAAC;CACF,CAAA;AAhOY,wDAAsB;iCAAtB,sBAAsB;IAM9B,WAAA,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,sCAAuB,CAAC,YAAY,EAAE,CAAC,CAAA;;GAN7C,sBAAsB,CAgOlC","sourcesContent":["import { HTTP, type TNullable, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport {\n  AuthenticateBindingKeys,\n  type IJWKSIssuerOptions,\n  type IJWTIssueClaims,\n  type IJWTTokenPayload,\n  inject,\n  JWKSKeyDrivers,\n  JWKSKeyFormats,\n  type TGetTokenExpiresFn,\n} from '@venizia/ignis-kernel';\nimport { type Env } from 'hono';\nimport type { CryptoKey, JWK } from 'jose';\nimport { readFile } from 'node:fs/promises';\nimport { JoseLoader } from '../../jose-loader';\nimport { AbstractJWKSTokenService } from './abstract.service';\n\nexport class JWKSIssuerTokenService<E extends Env = Env> extends AbstractJWKSTokenService<E> {\n  protected privateKey: TNullable<CryptoKey | Uint8Array> = null;\n  protected publicKey: TNullable<CryptoKey | Uint8Array> = null;\n  protected jwks: { keys: JWK[] } | null = null;\n\n  constructor(\n    @inject({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n    protected options: IJWKSIssuerOptions,\n  ) {\n    super({ scope: JWKSIssuerTokenService.name });\n\n    this.configurePayloadEncryption({\n      aesAlgorithm: this.options.aesAlgorithm,\n      applicationSecret: this.options.applicationSecret,\n      fieldCodecs: this.options.fieldCodecs,\n      cipher: this.options.cipher,\n      sign: this.options.sign,\n    });\n  }\n\n  protected override async initialize(): Promise<void> {\n    const { keys, algorithm } = this.options;\n\n    const raw = await this.resolveKeyContent({ keys });\n    const built = await this.parseKeyMaterial({ raw, algorithm, keys });\n\n    this.privateKey = built.priv;\n    this.publicKey = built.pub;\n\n    const { exportJWK } = await JoseLoader.load();\n    const publicJWK = await exportJWK(this.publicKey!);\n\n    // Belt and braces. `assertPublicJWK` already refused a private JWK on the way IN, but this is\n    // the exact object an unauthenticated `/certs` serves - the last place to notice a signing key\n    // about to be published, whatever route the material took to get here.\n    this.assertPublicJWK({ jwk: publicJWK });\n\n    publicJWK.kid = this.options.kid;\n    publicJWK.alg = algorithm;\n    publicJWK.use = 'sig';\n\n    this.jwks = { keys: [publicJWK] };\n\n    this.initialized = true;\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'JWKS issuer initialized | driver: %s | format: %s | kid: %s',\n        keys.driver,\n        keys.format,\n        this.options.kid,\n      );\n  }\n\n  protected async resolveKeyContent(opts: { keys: IJWKSIssuerOptions['keys'] }) {\n    const { keys } = opts;\n\n    switch (keys.driver) {\n      case JWKSKeyDrivers.FILE: {\n        const [priv, pub] = await Promise.all([\n          readFile(keys.private, 'utf-8'),\n          readFile(keys.public, 'utf-8'),\n        ]);\n        return { priv, pub };\n      }\n      case JWKSKeyDrivers.TEXT: {\n        return {\n          priv: keys.private,\n          pub: keys.public,\n        };\n      }\n      default: {\n        throw getError({\n          statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n          message: `[JWKSIssuerTokenService] Unknown key driver: ${keys.driver}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Refuses a JWK carrying private material where a PUBLIC key is expected.\n   *\n   * The `pem` format cannot reach this state - `importSPKI` rejects a private PEM outright. The\n   * `jwk` format can: `importJWK` imports whatever it is handed, and a private JWK marked\n   * `\"ext\": true` yields an EXTRACTABLE key, so `exportJWK` then carries `d` straight into the\n   * document `/certs` serves without authentication. Measured on jose 6.2.3: with `ext: true` the\n   * round trip returns `d`; without it, export throws. So the only thing standing between a\n   * mis-pasted key and a published signing key was an optional flag on attacker-irrelevant input.\n   *\n   * Named members, not a blanket scan: `d` covers EC/OKP and RSA's private exponent, and the CRT\n   * members are the rest of an RSA private key.\n   */\n  protected assertPublicJWK(opts: { jwk: JWK }): void {\n    const PRIVATE_MEMBERS = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'k'] as const;\n\n    const present = PRIVATE_MEMBERS.filter(member => opts.jwk[member] !== undefined);\n    if (present.length === 0) {\n      return;\n    }\n\n    throw getError({\n      statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n      message: `[JWKSIssuerTokenService] The public key material carries PRIVATE members (${present.join(', ')}) | this key would be published at the JWKS endpoint | pass the public half in keys.public`,\n    });\n  }\n\n  protected async parseKeyMaterial(opts: {\n    raw: { priv: string; pub: string };\n    algorithm: IJWKSIssuerOptions['algorithm'];\n    keys: IJWKSIssuerOptions['keys'];\n  }) {\n    const { raw, algorithm, keys } = opts;\n\n    if (!raw.priv) {\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[JWKSIssuerTokenService] Invalid raw.priv key!',\n      });\n    }\n\n    if (!raw.pub) {\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[JWKSIssuerTokenService] Invalid raw.pub key!',\n      });\n    }\n\n    const { importJWK, importPKCS8, importSPKI } = await JoseLoader.load();\n\n    switch (keys.format) {\n      case JWKSKeyFormats.PEM: {\n        const priv = await importPKCS8(raw.priv, algorithm);\n        const pub = await importSPKI(raw.pub, algorithm);\n        return { priv, pub };\n      }\n      case JWKSKeyFormats.JWK: {\n        try {\n          const parsed = {\n            priv: JSON.parse(raw.priv) as JWK,\n            pub: JSON.parse(raw.pub) as JWK,\n          };\n\n          this.assertPublicJWK({ jwk: parsed.pub });\n\n          const priv = await importJWK(parsed.priv, algorithm);\n          const pub = await importJWK(parsed.pub, algorithm);\n          return { priv, pub };\n        } catch (error) {\n          this.logger\n            .for(this.parseKeyMaterial.name)\n            .error('Invalid JWK key material | Error: %s', error);\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: '[JWKSIssuerTokenService] Invalid JWK key material',\n          });\n        }\n      }\n      default: {\n        throw getError({\n          statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n          message: `[JWKSIssuerTokenService] Unknown key format: ${keys.format}`,\n        });\n      }\n    }\n  }\n\n  protected override async doVerify(token: string): Promise<IJWTTokenPayload> {\n    await this.ensureInitialized();\n    const { jwtVerify } = await JoseLoader.load();\n    const result = await jwtVerify<IJWTTokenPayload>(token, this.publicKey!, this.options.verify);\n    return this.decryptPayload({ result });\n  }\n\n  override async getSigner(opts: {\n    payload: IJWTTokenPayload;\n    getTokenExpiresFn: TGetTokenExpiresFn;\n    claims?: IJWTIssueClaims;\n  }) {\n    await this.ensureInitialized();\n    const { SignJWT } = await JoseLoader.load();\n\n    const now = Math.floor(Date.now() / 1000);\n    const expiresIn = await opts.getTokenExpiresFn();\n\n    const encryptedPayload = this.encryptPayload(opts.payload);\n\n    const signer = new SignJWT({ ...encryptedPayload })\n      .setProtectedHeader({ alg: this.options.algorithm, kid: this.options.kid })\n      .setIssuedAt()\n      .setExpirationTime(now + expiresIn)\n      .setNotBefore(now);\n\n    return this.applySignClaims({ signer, payload: encryptedPayload, claims: opts.claims });\n  }\n\n  protected override getSigningKey(): ValueOrPromise<Uint8Array | CryptoKey> {\n    if (!this.privateKey) {\n      throw getError({ message: '[getSigningKey] Invalid privateKey!' });\n    }\n\n    return this.privateKey;\n  }\n\n  protected override getDefaultTokenExpiresFn(): TGetTokenExpiresFn {\n    return this.options.getTokenExpiresFn;\n  }\n\n  getJWKS(): { keys: JWK[] } {\n    if (!this.jwks) {\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[JWKSIssuerTokenService] JWKS not initialized yet. Call getJWKSAsync() instead.',\n      });\n    }\n\n    return this.jwks;\n  }\n\n  async getJWKSAsync(): Promise<{ keys: JWK[] }> {\n    await this.ensureInitialized();\n    return this.jwks!;\n  }\n}\n"]}
+{"version":3,"file":"issuer.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/jwks/issuer.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAA0F;AAC1F,sDAAuD;AACvD,wDAS+B;AAG/B,+CAA4C;AAC5C,mDAA+C;AAC/C,yDAA8D;AAE9D,IAAa,sBAAsB,8BAAnC,MAAa,sBAA4C,SAAQ,2CAA2B;IAK1F,YAEE,OAAqC;QAErC,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;QAFpC,YAAO,GAAP,OAAO,CAAoB;QAN7B,eAAU,GAAsC,IAAI,CAAC;QACrD,cAAS,GAAsC,IAAI,CAAC;QACpD,SAAI,GAA2B,IAAI,CAAC;QAQ5C,IAAI,CAAC,0BAA0B,CAAC;YAC9B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAEkB,KAAK,CAAC,UAAU;QACjC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;QAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC;QAEnD,8FAA8F;QAC9F,+FAA+F;QAC/F,uEAAuE;QACvE,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAEzC,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACjC,SAAS,CAAC,GAAG,GAAG,SAAS,CAAC;QAC1B,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC;QAEtB,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAElC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,6DAA6D,EAC7D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,GAAG,CACjB,CAAC;IACN,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,IAA0C;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,6BAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACpC,IAAA,mBAAQ,EAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;oBAC/B,IAAA,mBAAQ,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC/B,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,KAAK,6BAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,OAAO;oBAClB,GAAG,EAAE,IAAI,CAAC,MAAM;iBACjB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;oBACrD,OAAO,EAAE,gDAAgD,IAAI,CAAC,MAAM,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,eAAe,CAAC,IAAkB;QAC1C,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAU,CAAC;QAExE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAA,eAAQ,EAAC;YACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;YACrD,OAAO,EAAE,6EAA6E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,4FAA4F;SACrM,CAAC,CAAC;IACL,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAIhC;QACC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAA,eAAQ,EAAC;gBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,IAAA,eAAQ,EAAC;gBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAEvE,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,6BAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACpD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACjD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,KAAK,6BAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG;wBACb,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAQ;wBACjC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAQ;qBAChC,CAAC;oBAEF,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;oBAE1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBACrD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACnD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;yBAC/B,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;oBACxD,MAAM,IAAA,eAAQ,EAAC;wBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,mDAAmD;qBAC7D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,eAAQ,EAAC;oBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;oBACrD,OAAO,EAAE,gDAAgD,IAAI,CAAC,MAAM,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC7C,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAmB,KAAK,EAAE,IAAI,CAAC,SAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAIxB;QACC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;aAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;aAC1E,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,GAAG,SAAS,CAAC;aAClC,YAAY,CAAC,GAAG,CAAC,CAAC;QAErB,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IAEkB,aAAa;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAA,eAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEkB,wBAAwB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxC,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAA,eAAQ,EAAC;gBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAK,CAAC;IACpB,CAAC;CACF,CAAA;AAhOY,wDAAsB;iCAAtB,sBAAsB;IAM9B,WAAA,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,sCAAuB,CAAC,YAAY,EAAE,CAAC,CAAA;;GAN7C,sBAAsB,CAgOlC","sourcesContent":["import { HTTP, type TNullable, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport {\n  AuthenticateBindingKeys,\n  type IJWKSIssuerOptions,\n  type IJWTIssueClaims,\n  type IJWTTokenPayload,\n  inject,\n  JWKSKeyDrivers,\n  JWKSKeyFormats,\n  type TGetTokenExpiresFn,\n} from '@venizia/ignis-kernel';\nimport { type Env } from 'hono';\nimport type { CryptoKey, JWK } from 'jose';\nimport { readFile } from 'node:fs/promises';\nimport { JoseLoader } from '../../jose-loader';\nimport { AbstractJWKSTokenService } from './abstract.service';\n\nexport class JWKSIssuerTokenService<E extends Env = Env> extends AbstractJWKSTokenService<E> {\n  protected privateKey: TNullable<CryptoKey | Uint8Array> = null;\n  protected publicKey: TNullable<CryptoKey | Uint8Array> = null;\n  protected jwks: { keys: JWK[] } | null = null;\n\n  constructor(\n    @inject({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n    protected options: IJWKSIssuerOptions,\n  ) {\n    super({ scope: JWKSIssuerTokenService.name });\n\n    this.configurePayloadEncryption({\n      aesAlgorithm: this.options.aesAlgorithm,\n      applicationSecret: this.options.applicationSecret,\n      fieldCodecs: this.options.fieldCodecs,\n      cipher: this.options.cipher,\n      sign: this.options.sign,\n    });\n  }\n\n  protected override async initialize(): Promise<void> {\n    const { keys, algorithm } = this.options;\n\n    const raw = await this.resolveKeyContent({ keys });\n    const built = await this.parseKeyMaterial({ raw, algorithm, keys });\n\n    this.privateKey = built.priv;\n    this.publicKey = built.pub;\n\n    const { exportJWK } = await JoseLoader.load();\n    const publicJWK = await exportJWK(this.publicKey!);\n\n    // Belt and braces. `assertPublicJWK` already refused a private JWK on the way IN, but this is\n    // the exact object an unauthenticated `/certs` serves - the last place to notice a signing key\n    // about to be published, whatever route the material took to get here.\n    this.assertPublicJWK({ jwk: publicJWK });\n\n    publicJWK.kid = this.options.kid;\n    publicJWK.alg = algorithm;\n    publicJWK.use = 'sig';\n\n    this.jwks = { keys: [publicJWK] };\n\n    this.initialized = true;\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'JWKS issuer initialized | driver: %s | format: %s | kid: %s',\n        keys.driver,\n        keys.format,\n        this.options.kid,\n      );\n  }\n\n  protected async resolveKeyContent(opts: { keys: IJWKSIssuerOptions['keys'] }) {\n    const { keys } = opts;\n\n    switch (keys.driver) {\n      case JWKSKeyDrivers.FILE: {\n        const [priv, pub] = await Promise.all([\n          readFile(keys.private, 'utf-8'),\n          readFile(keys.public, 'utf-8'),\n        ]);\n        return { priv, pub };\n      }\n      case JWKSKeyDrivers.TEXT: {\n        return {\n          priv: keys.private,\n          pub: keys.public,\n        };\n      }\n      default: {\n        throw getError({\n          statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n          message: `[JWKSIssuerTokenService] Unknown key driver: ${keys.driver}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Refuses a JWK carrying private material where a PUBLIC key is expected.\n   *\n   * The `pem` format cannot reach this state - `importSPKI` rejects a private PEM outright. The\n   * `jwk` format can: `importJWK` imports whatever it is handed, and a private JWK marked\n   * `\"ext\": true` yields an EXTRACTABLE key, so `exportJWK` then carries `d` straight into the\n   * document `/certs` serves without authentication. Measured on jose 6.2.3: with `ext: true` the\n   * round trip returns `d`; without it, export throws. So the only thing standing between a\n   * mis-pasted key and a published signing key was an optional flag on attacker-irrelevant input.\n   *\n   * Named members, not a blanket scan: `d` covers EC/OKP and RSA's private exponent, and the CRT\n   * members are the rest of an RSA private key.\n   */\n  protected assertPublicJWK(opts: { jwk: JWK }): void {\n    const PRIVATE_MEMBERS = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'k'] as const;\n\n    const present = PRIVATE_MEMBERS.filter((member) => opts.jwk[member] !== undefined);\n    if (present.length === 0) {\n      return;\n    }\n\n    throw getError({\n      statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n      message: `[JWKSIssuerTokenService] The public key material carries PRIVATE members (${present.join(', ')}) | this key would be published at the JWKS endpoint | pass the public half in keys.public`,\n    });\n  }\n\n  protected async parseKeyMaterial(opts: {\n    raw: { priv: string; pub: string };\n    algorithm: IJWKSIssuerOptions['algorithm'];\n    keys: IJWKSIssuerOptions['keys'];\n  }) {\n    const { raw, algorithm, keys } = opts;\n\n    if (!raw.priv) {\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[JWKSIssuerTokenService] Invalid raw.priv key!',\n      });\n    }\n\n    if (!raw.pub) {\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[JWKSIssuerTokenService] Invalid raw.pub key!',\n      });\n    }\n\n    const { importJWK, importPKCS8, importSPKI } = await JoseLoader.load();\n\n    switch (keys.format) {\n      case JWKSKeyFormats.PEM: {\n        const priv = await importPKCS8(raw.priv, algorithm);\n        const pub = await importSPKI(raw.pub, algorithm);\n        return { priv, pub };\n      }\n      case JWKSKeyFormats.JWK: {\n        try {\n          const parsed = {\n            priv: JSON.parse(raw.priv) as JWK,\n            pub: JSON.parse(raw.pub) as JWK,\n          };\n\n          this.assertPublicJWK({ jwk: parsed.pub });\n\n          const priv = await importJWK(parsed.priv, algorithm);\n          const pub = await importJWK(parsed.pub, algorithm);\n          return { priv, pub };\n        } catch (error) {\n          this.logger\n            .for(this.parseKeyMaterial.name)\n            .error('Invalid JWK key material | Error: %s', error);\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: '[JWKSIssuerTokenService] Invalid JWK key material',\n          });\n        }\n      }\n      default: {\n        throw getError({\n          statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n          message: `[JWKSIssuerTokenService] Unknown key format: ${keys.format}`,\n        });\n      }\n    }\n  }\n\n  protected override async doVerify(token: string): Promise<IJWTTokenPayload> {\n    await this.ensureInitialized();\n    const { jwtVerify } = await JoseLoader.load();\n    const result = await jwtVerify<IJWTTokenPayload>(token, this.publicKey!, this.options.verify);\n    return this.decryptPayload({ result });\n  }\n\n  override async getSigner(opts: {\n    payload: IJWTTokenPayload;\n    getTokenExpiresFn: TGetTokenExpiresFn;\n    claims?: IJWTIssueClaims;\n  }) {\n    await this.ensureInitialized();\n    const { SignJWT } = await JoseLoader.load();\n\n    const now = Math.floor(Date.now() / 1000);\n    const expiresIn = await opts.getTokenExpiresFn();\n\n    const encryptedPayload = this.encryptPayload(opts.payload);\n\n    const signer = new SignJWT({ ...encryptedPayload })\n      .setProtectedHeader({ alg: this.options.algorithm, kid: this.options.kid })\n      .setIssuedAt()\n      .setExpirationTime(now + expiresIn)\n      .setNotBefore(now);\n\n    return this.applySignClaims({ signer, payload: encryptedPayload, claims: opts.claims });\n  }\n\n  protected override getSigningKey(): ValueOrPromise<Uint8Array | CryptoKey> {\n    if (!this.privateKey) {\n      throw getError({ message: '[getSigningKey] Invalid privateKey!' });\n    }\n\n    return this.privateKey;\n  }\n\n  protected override getDefaultTokenExpiresFn(): TGetTokenExpiresFn {\n    return this.options.getTokenExpiresFn;\n  }\n\n  getJWKS(): { keys: JWK[] } {\n    if (!this.jwks) {\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[JWKSIssuerTokenService] JWKS not initialized yet. Call getJWKSAsync() instead.',\n      });\n    }\n\n    return this.jwks;\n  }\n\n  async getJWKSAsync(): Promise<{ keys: JWK[] }> {\n    await this.ensureInitialized();\n    return this.jwks!;\n  }\n}\n"]}

package/dist/components/auth/authorize/adapters/custom-grant-expander.js

@@ -43,7 +43,7 @@ class CustomGrantExpander extends core_1.BaseHelper {
         }
         const seen = new Set();
         const pairs = [];
-        const candidates = opts.customRows.flatMap(row => row.ops.map(op => ({ subject: row.objectSubject, method: op })));
+        const candidates = opts.customRows.flatMap((row) => row.ops.map((op) => ({ subject: row.objectSubject, method: op })));
         for (const candidate of candidates) {
             const key = `${candidate.subject}.${candidate.method}`;
             if (seen.has(key)) {
@@ -53,7 +53,7 @@ class CustomGrantExpander extends core_1.BaseHelper {
             pairs.push(candidate);
         }
         const catalog = await this.queryOperationCatalog({ pairs });
-        const byKey = new Map(catalog.map(entry => [`${entry.subject}.${entry.method}`, entry]));
+        const byKey = new Map(catalog.map((entry) => [`${entry.subject}.${entry.method}`, entry]));
         const lines = [];
         const rejections = [];
         for (const row of opts.customRows) {
@@ -99,7 +99,7 @@ class CustomGrantExpander extends core_1.BaseHelper {
         const result = await connector.execute((0, drizzle_orm_1.sql) `
       SELECT permission.subject, permission.method, permission.code, permission.action
       FROM ${permissionTable} permission
-      WHERE (permission.subject, permission.method) IN (${drizzle_orm_1.sql.join(opts.pairs.map(pair => (0, drizzle_orm_1.sql) `(${pair.subject}, ${pair.method})`), (0, drizzle_orm_1.sql) `, `)})
+      WHERE (permission.subject, permission.method) IN (${drizzle_orm_1.sql.join(opts.pairs.map((pair) => (0, drizzle_orm_1.sql) `(${pair.subject}, ${pair.method})`), (0, drizzle_orm_1.sql) `, `)})
         AND permission.method <> ${ignis_kernel_1.AuthorizationPermissionBuilder.RESOURCE_NODE_METHOD}${this.softDeleteClause({ alias: 'permission' })}
     `);
         return (0, utilities_1.readResultRows)({