@venizia/ignis 0.4.3 → 0.4.5

package/LICENSE.md

@@ -4,7 +4,7 @@ Ignis is a TypeScript Server Infrastructure framework built on [Hono](https://ho
 
 ## MIT License
 
-Copyright (c) 2025 VENIZIA Ltd. Co.
+Copyright (c) 2025 Venizia Co., Ltd.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -87,12 +87,9 @@ Ignis uses the following open-source libraries. We are grateful to the authors a
 
 ## Acknowledgments
 
-Ignis Framework is inspired by and built upon the work of many open-source projects:
+Ignis Framework is built on the work of open-source projects:
 
 - **[Hono](https://hono.dev/)** by Yusuke Wada - The ultrafast web framework that powers Ignis
-- **[LoopBack 4](https://loopback.io/)** by IBM/StrongLoop - Inspiration for the enterprise architecture patterns
-- **[NestJS](https://nestjs.com/)** by Kamil Mysliwiec - Inspiration for decorator-based controllers
-- **[InversifyJS](https://inversify.io/)** - Inspiration for the IoC container design
 
 We thank all the maintainers and contributors of these projects for their excellent work.
 

package/README.md

@@ -1,11 +1,11 @@
 # @venizia/ignis
 
-The IGNIS server framework for Bun and Node.js. Install this package to build a REST API: it brings
-the application class, controllers, repositories, the built-in components, and the Bun or Node server
+The IGNIS server framework for Bun (>= 1.4). Install this package to build a REST API: it brings
+the application class, controllers, repositories, the built-in components, and the Bun server
 that runs them.
 
-IGNIS takes its application model from LoopBack 4 - an IoC container with binding keys, components,
-and the controller, service, repository, datasource layering - and runs it on Hono. Drizzle ORM builds
+IGNIS gives a Hono server an application model: an IoC container with binding keys, components,
+and the controller, service, repository, datasource layering. Drizzle ORM builds
 the SQL. Zod schemas, through `@hono/zod-openapi`, validate each request and generate the OpenAPI
 document.
 
@@ -17,8 +17,7 @@ bun add @scalar/hono-api-reference   # the API explorer UI in the example
 ```
 
 The first line is the package and its required peers. Every other peer is optional - install the
-one a component or a database driver needs (see [Entry points](#entry-points)). On Node.js, add
-`@hono/node-server`.
+one a component or a database driver needs (see [Entry points](#entry-points)).
 
 In your `tsconfig.json`, set these two flags directly in `compilerOptions`:
 
@@ -101,7 +100,7 @@ Three things to notice:
   first component that injects the application fails the boot.
 - `preConfigure()` is where you register components, controllers, services, repositories and
   datasources by hand. The `ignis-artifacts` generator in `@venizia/ignis-boot` can write that list
-  for you at build time.
+  for you at build time, and on Bun `@venizia/ignis-boot/auto` builds it at start.
 
 ## Built-in components
 
@@ -173,3 +172,16 @@ Top of the chain. Depends on `@venizia/ignis-kernel`, `@venizia/ignis-connectors
 IGNIS is 0.x: a minor version can break. Pin exact versions and read the changelog before upgrading.
 
 MIT licensed - see [LICENSE.md](https://github.com/VENIZIA-AI/ignis/blob/main/packages/core-server/LICENSE.md).
+
+---
+
+<p align="center">
+  <a href="https://venizia.ai">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://venizia.ai/assets/logo-white.svg">
+      <img src="https://venizia.ai/assets/logo.svg" alt="VENIZIA" height="28">
+    </picture>
+  </a>
+  <br>
+  <sub>IGNIS is built and maintained by <a href="https://venizia.ai">VENIZIA</a>.</sub>
+</p>

package/dist/esm/base/applications/base.d.ts

@@ -0,0 +1,62 @@
+import type { ILogger } from '@venizia/ignis-helpers/core';
+import type { ValueOrPromise } from '@venizia/ignis-helpers/common';
+import type { ISecretHydrateEntry, ISecretsHelper, ISecretsRegistration } from '@venizia/ignis-helpers';
+import { AppErrorMiddleware } from '../middlewares/index.js';
+import { ServerApplication } from './server.js';
+import type { IRestApplication } from '@venizia/ignis-kernel';
+import type { IBootSequenceStep } from '@venizia/ignis-kernel';
+export declare abstract class BaseApplication extends ServerApplication implements IRestApplication {
+    protected secretsProvider?: ISecretsHelper;
+    protected secretsRegistration?: ISecretsRegistration;
+    protected normalizePath(...segments: string[]): string;
+    /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */
+    registerControllers(): Promise<void>;
+    registerSecrets(): ValueOrPromise<ISecretsRegistration>;
+    hydrateSecrets(): Promise<void>;
+    /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */
+    protected hydrateSecretEntries(opts: {
+        provider: ISecretsHelper;
+        registration: ISecretsRegistration;
+        emptyHydrations: string[];
+        logger: ILogger;
+    }): Promise<void>;
+    protected mergeSecretsIntoEnv(opts: {
+        bundle: Record<string, string>;
+        entry: ISecretHydrateEntry;
+    }): Record<string, string>;
+    /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */
+    protected hydrateEntryDeclaresExpectation(opts: {
+        entry: ISecretHydrateEntry;
+    }): boolean;
+    wireSecretRotatables(): Promise<void>;
+    static(opts: {
+        restPath?: string;
+        folderPath: string;
+    }): this;
+    /**
+     * Every value is read HERE, not destructured at module load: an application that loads its
+     * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot
+     * would print the defaults for a host that configured everything correctly.
+     */
+    protected printStartUpInfo(opts: {
+        scope: string;
+    }): void;
+    /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */
+    protected buildErrorMiddleware(): AppErrorMiddleware;
+    /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */
+    protected registerDefaultMiddlewares(): Promise<void>;
+    /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */
+    protected validateEnvs(): void;
+    /**
+     * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without
+     * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.
+     */
+    initialize(): Promise<void>;
+    protected getBootSequence(): IBootSequenceStep[];
+    /**
+     * Refuses to start when a model's `settings.access` cannot take effect. Both failures are
+     * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.
+     */
+    protected validateScopeFilterSupport(): void;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/esm/base/applications/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/base.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EACV,mBAAmB,EAEnB,cAAc,EACd,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAYhC,OAAO,EAAE,kBAAkB,EAAgB,MAAM,gBAAgB,CAAC;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAgC/D,8BAAsB,eAAgB,SAAQ,iBAAkB,YAAW,gBAAgB;IACzF,SAAS,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC;IAC3C,SAAS,CAAC,mBAAmB,CAAC,EAAE,oBAAoB,CAAC;IAErD,SAAS,CAAC,aAAa,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM;IAKtD,6IAA6I;IAC9H,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAuDnD,eAAe,IAAI,cAAc,CAAC,oBAAoB,CAAC;IAIjD,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAwErC,4KAA4K;cAC5J,oBAAoB,CAAC,IAAI,EAAE;QACzC,QAAQ,EAAE,cAAc,CAAC;QACzB,YAAY,EAAE,oBAAoB,CAAC;QACnC,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBjB,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,KAAK,EAAE,mBAAmB,CAAC;KAC5B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAY1B,gMAAgM;IAChM,SAAS,CAAC,+BAA+B,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO;IAQlF,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB3C,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAiBtD;;;;OAIG;IACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAgClD,kGAAkG;cAC/E,oBAAoB,IAAI,kBAAkB;IAO7D,gKAAgK;cACvI,0BAA0B;IA4BnD,8MAA8M;IAC9M,SAAS,CAAC,YAAY;IAmDtB;;;OAGG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAIvB,eAAe,IAAI,iBAAiB,EAAE;IAyCzD;;;OAGG;IACH,SAAS,CAAC,0BAA0B,IAAI,IAAI;CAG7C"}

package/dist/esm/base/applications/base.js

@@ -0,0 +1,340 @@
+import { assertScopeFilterSupported } from '@venizia/ignis-connectors';
+import { ControllerTransports } from '@venizia/ignis-kernel';
+import { BindingNamespaces, CoreBindings } from '@venizia/ignis-kernel';
+import { EnvironmentKeys } from '../../common/environments.js';
+import { RequestTrackerComponent } from '../../components/index.js';
+import { GrpcComponent } from '../../components/controller/grpc/index.js';
+import { BindingScopes, BindingValueTypes, BootSequence, MetadataRegistry, RequestContextRegistry, } from '@venizia/ignis-kernel';
+import { blankToUndefined, getError } from '@venizia/ignis-helpers/core';
+import { HTTP, isEmpty } from '@venizia/ignis-helpers/common';
+import { applicationEnvironment, createSecretsHelper, Environment, executeWithPerformanceMeasure, SecretProviders, toBoolean, } from '@venizia/ignis-helpers';
+import { contextStorage, tryGetContext } from 'hono/context-storage';
+import { AppErrorMiddleware, emojiFavicon } from '../middlewares/index.js';
+import { serveStatic } from 'hono/bun';
+import { ServerBootSteps } from './boot-steps.js';
+import { ServerApplication } from './server.js';
+/** Maps a secret bundle to env names: the explicit `keys` mapping when present, otherwise every bundle key under `prefix`. */
+const selectSecretEnvKeys = (opts) => {
+    const { bundle, entry } = opts;
+    const merged = {};
+    if (!entry.keys) {
+        const bundleEntries = Object.entries(bundle);
+        for (const [rawKey, value] of bundleEntries) {
+            merged[`${entry.prefix ?? ''}${rawKey}`] = value;
+        }
+        return merged;
+    }
+    const entryKeysEntries = Object.entries(entry.keys);
+    for (const [rawKey, envKey] of entryKeysEntries) {
+        const value = bundle[rawKey];
+        if (value === undefined) {
+            continue;
+        }
+        merged[envKey] = value;
+    }
+    return merged;
+};
+export class BaseApplication extends ServerApplication {
+    normalizePath(...segments) {
+        const joined = segments.join('/').replace(/\/+/g, '/').replace(/\/$/, '');
+        return joined || '/';
+    }
+    /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */
+    async registerControllers() {
+        await super.registerControllers();
+        await executeWithPerformanceMeasure({
+            logger: this.logger,
+            description: 'Register application gRPC controllers',
+            scope: this.registerControllers.name,
+            task: async () => {
+                const transports = this.configs.transports ?? [ControllerTransports.REST];
+                for (const transport of transports) {
+                    if (transport === ControllerTransports.REST) {
+                        continue;
+                    }
+                    if (transport !== ControllerTransports.GRPC) {
+                        throw getError({
+                            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,
+                            message: `[registerControllers] Unsupported transport: '${transport}'`,
+                        });
+                    }
+                    const grpcComponent = new GrpcComponent(this);
+                    await grpcComponent.configure();
+                }
+                // Warn if gRPC controllers exist but gRPC transport is not enabled
+                if (transports.includes(ControllerTransports.GRPC)) {
+                    return;
+                }
+                const allBindings = this.findByTag({ tag: BindingNamespaces.CONTROLLER });
+                for (const binding of allBindings) {
+                    const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });
+                    if (!target) {
+                        continue;
+                    }
+                    const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });
+                    if (metadata?.transport !== ControllerTransports.GRPC) {
+                        continue;
+                    }
+                    this.logger
+                        .for(this.registerControllers.name)
+                        .error('gRPC controller "%s" discovered but gRPC transport is not enabled. Add "%s" to transports config.', binding.key, ControllerTransports.GRPC);
+                }
+            },
+        });
+    }
+    registerSecrets() {
+        return { provider: SecretProviders.SYSTEM_ENVS };
+    }
+    async hydrateSecrets() {
+        const logger = this.logger.for(this.hydrateSecrets.name);
+        const registration = await this.registerSecrets();
+        let provider;
+        const emptyHydrations = [];
+        try {
+            provider = await createSecretsHelper({ ...registration, identifier: 'app' });
+            await provider.configure();
+            await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });
+            const registrationLease = registration.lease ?? [];
+            for (const entry of registrationLease) {
+                await provider.lease({ path: entry.path, key: entry.key });
+            }
+        }
+        catch (error) {
+            const env = Environment.current;
+            if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {
+                throw getError({
+                    message: `[hydrateSecrets] Secret provider failed in non-development environment | env: ${env}`,
+                });
+            }
+            logger.warn('Secret provider failed; falling back to system-envs | env: %s | error: %s', env, error);
+            if (provider) {
+                await provider
+                    .shutdown()
+                    .catch((shutdownError) => logger.error('Failed to shut down partially-built provider during fallback | error: %s', shutdownError));
+            }
+            provider = await createSecretsHelper({
+                provider: SecretProviders.SYSTEM_ENVS,
+                identifier: 'app',
+            });
+        }
+        if (!provider) {
+            throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });
+        }
+        if (emptyHydrations.length > 0) {
+            const env = Environment.current;
+            if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {
+                throw getError({
+                    message: `[hydrateSecrets] Hydrate entries resolved to an empty secret bundle in non-development environment | env: ${env} | paths: ${emptyHydrations.join(', ')}`,
+                });
+            }
+            logger.warn('Hydrate entries resolved to an empty secret bundle; continuing in development | env: %s | paths: %s', env, emptyHydrations.join(', '));
+        }
+        this.bind({ key: CoreBindings.APPLICATION_CONFIG })
+            .toProvider(() => provider)
+            .setScope(BindingScopes.SINGLETON);
+        this.registerPostStopHook({ identifier: 'secrets.shutdown', hook: () => provider.shutdown() });
+        this.secretsProvider = provider;
+        this.secretsRegistration = registration;
+    }
+    /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */
+    async hydrateSecretEntries(opts) {
+        const { provider, registration, emptyHydrations, logger } = opts;
+        const registrationHydrate = registration.hydrate ?? [];
+        for (const entry of registrationHydrate) {
+            const bundle = await provider.getBundle({ path: entry.path });
+            const merged = this.mergeSecretsIntoEnv({ bundle, entry });
+            if (Object.keys(merged).length > 0) {
+                continue;
+            }
+            if (this.hydrateEntryDeclaresExpectation({ entry })) {
+                emptyHydrations.push(entry.path);
+                continue;
+            }
+            logger.warn('Hydrate entry resolved to an empty bundle and declares no expected keys | path: %s', entry.path);
+        }
+    }
+    mergeSecretsIntoEnv(opts) {
+        const { bundle, entry } = opts;
+        const merged = selectSecretEnvKeys({ bundle, entry });
+        const mergedEntries = Object.entries(merged);
+        for (const [key, value] of mergedEntries) {
+            process.env[key] = value;
+        }
+        applicationEnvironment.merge({ envs: merged });
+        return merged;
+    }
+    /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */
+    hydrateEntryDeclaresExpectation(opts) {
+        const { entry } = opts;
+        if (entry.keys && Object.keys(entry.keys).length > 0) {
+            return true;
+        }
+        return typeof entry.prefix === 'string' && entry.prefix.length > 0;
+    }
+    async wireSecretRotatables() {
+        const logger = this.logger.for(this.wireSecretRotatables.name);
+        const provider = this.secretsProvider;
+        const registration = this.secretsRegistration;
+        if (!provider || !registration?.lease?.length) {
+            return;
+        }
+        for (const entry of registration.lease) {
+            const instance = this.get({ key: entry.key, isOptional: true });
+            if (instance && typeof instance.onSecretRotated === 'function') {
+                provider.registerRotatable({ key: entry.key, target: instance });
+                logger.info('Wired rotatable | key: %s', entry.key);
+                continue;
+            }
+            logger.debug('Lease key has no rotatable consumer | key: %s', entry.key);
+        }
+    }
+    static(opts) {
+        const { restPath = '*', folderPath } = opts;
+        const server = this.getServer();
+        server.use(restPath, serveStatic({ root: folderPath }));
+        this.logger
+            .for(this.static.name)
+            .debug('Registered static files | runtime: %s | path: %s | folder: %s', this.runtime, restPath, folderPath);
+        return this;
+    }
+    /**
+     * Every value is read HERE, not destructured at module load: an application that loads its
+     * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot
+     * would print the defaults for a host that configured everything correctly.
+     */
+    printStartUpInfo(opts) {
+        const { scope } = opts;
+        const read = (key, fallback) => blankToUndefined(process.env[key]) ?? fallback;
+        const divider = '------------------------------------------------------------------------';
+        this.logger.for(scope).info(divider);
+        this.logger
+            .for(scope)
+            .info('Starting application... | Name: %s | Env: %s | Runtime: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_NAME, 'PNT'), Environment.ambient, this.runtime);
+        this.logger
+            .for(scope)
+            .info('AllowEmptyEnv: %s | Prefix: %s', read('ALLOW_EMPTY_ENV_VALUE', 'true'), read('APPLICATION_ENV_PREFIX', 'APP_ENV'));
+        this.logger.for(scope).info('RunMode: %s', process.env.RUN_MODE);
+        this.logger
+            .for(scope)
+            .info('Timezone: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_TIMEZONE, 'Asia/Ho_Chi_Minh'));
+        this.logger
+            .for(scope)
+            .info('LogPath: %s', read(EnvironmentKeys.APP_ENV_LOGGER_FOLDER_PATH, './'));
+        this.logger.for(scope).info(divider);
+    }
+    /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */
+    buildErrorMiddleware() {
+        return new AppErrorMiddleware({
+            logger: this.logger,
+            rootKey: this.configs.error?.rootKey ?? undefined,
+        });
+    }
+    /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */
+    async registerDefaultMiddlewares() {
+        await executeWithPerformanceMeasure({
+            logger: this.logger,
+            scope: this.registerDefaultMiddlewares.name,
+            description: 'Register default application server handler',
+            task: async () => {
+                const server = this.getServer();
+                await super.registerDefaultMiddlewares();
+                // Always installed, not only under `asyncContext.enable`: `tryGetContext()` answers "no context"
+                // without a store, and a `contextStorage()` the application registered itself stays visible to
+                // the enrichers. Inside a method body because every package declares `sideEffects: false`.
+                RequestContextRegistry.setResolver({ resolver: () => tryGetContext() });
+                if (this.configs.asyncContext?.enable) {
+                    server.use(contextStorage());
+                }
+                // Request-body parsing and the access log; the request id it reads is already installed
+                // above (also works around the Bun + Hono body-parsing bug: https://github.com/honojs/middleware/issues/81).
+                this.component(RequestTrackerComponent);
+                server.use(emojiFavicon({ icon: this.configs.favicon ?? '🔥' }));
+            },
+        });
+    }
+    /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */
+    validateEnvs() {
+        const t = performance.now();
+        const envKeys = applicationEnvironment.keys();
+        // Permissive by DEFAULT: a name a host leaves empty is the host's business, and an empty value
+        // already falls back to `defaultValue` at read time, so refusing to boot over one fights the
+        // reader rather than helping it. Set ALLOW_EMPTY_ENV_VALUE to `false` or `0` to turn the check
+        // on. Read once rather than per key, and a blank value reads as unset - the same rule every
+        // other env read follows.
+        const configured = blankToUndefined(process.env.ALLOW_EMPTY_ENV_VALUE);
+        const allowsEmpty = configured === undefined || toBoolean(configured);
+        this.logger
+            .for(this.initialize.name)
+            .info('Envs: %s | START Validating application environments | Empty values: %s', envKeys.length, allowsEmpty ? 'ALLOWED (default)' : 'REJECTED');
+        if (allowsEmpty) {
+            this.logger
+                .for(this.validateEnvs.name)
+                .info('Envs: %s | SKIPPED - set ALLOW_EMPTY_ENV_VALUE=false to reject empty values', envKeys.length);
+            return;
+        }
+        for (const argKey of envKeys) {
+            const argValue = applicationEnvironment.get(argKey);
+            if (!isEmpty({ value: argValue })) {
+                continue;
+            }
+            throw getError({
+                message: `[validateEnvs] Invalid Application Environment! Key: ${argKey} | Value: ${argValue}`,
+            });
+        }
+        this.logger
+            .for(this.validateEnvs.name)
+            .info('Envs: %s | DONE Validating application environments | Took: %s (ms)', envKeys.length, performance.now() - t);
+    }
+    /**
+     * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without
+     * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.
+     */
+    async initialize() {
+        await this.runBootSequence({ steps: this.getBootSequence() });
+    }
+    getBootSequence() {
+        const steps = [
+            {
+                name: ServerBootSteps.PRINT_START_UP_INFO,
+                run: () => this.printStartUpInfo({ scope: this.initialize.name }),
+            },
+            { name: ServerBootSteps.VALIDATE_ENVS, run: () => this.validateEnvs() },
+            {
+                name: ServerBootSteps.REGISTER_DEFAULT_MIDDLEWARES,
+                run: () => this.registerDefaultMiddlewares(),
+            },
+            ...super.getBootSequence(),
+        ];
+        const withHydrate = BootSequence.insertAfter({
+            steps,
+            target: ServerBootSteps.PRE_CONFIGURE,
+            step: { name: ServerBootSteps.HYDRATE_SECRETS, run: () => this.hydrateSecrets() },
+        });
+        // Components can contribute datasources, so wire rotatables only after the contributed sweep -
+        // a lease key pointing at a component-contributed datasource would otherwise resolve to nothing.
+        const withRotatables = BootSequence.insertAfter({
+            steps: withHydrate,
+            target: ServerBootSteps.REGISTER_CONTRIBUTED_DATA_SOURCES,
+            step: {
+                name: ServerBootSteps.WIRE_SECRET_ROTATABLES,
+                run: () => this.wireSecretRotatables(),
+            },
+        });
+        return [
+            ...withRotatables,
+            // Last, so a model registered by a component is covered too.
+            {
+                name: ServerBootSteps.VALIDATE_SCOPE_FILTER_SUPPORT,
+                run: () => this.validateScopeFilterSupport(),
+            },
+        ];
+    }
+    /**
+     * Refuses to start when a model's `settings.access` cannot take effect. Both failures are
+     * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.
+     */
+    validateScopeFilterSupport() {
+        assertScopeFilterSupported({ asyncContextEnabled: this.configs.asyncContext?.enable ?? false });
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/esm/base/applications/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/base/applications/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAS/B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACX,6BAA6B,EAC7B,eAAe,EACf,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAI7C,8HAA8H;AAC9H,MAAM,mBAAmB,GAAG,CAAC,IAG5B,EAA0B,EAAE;IAC3B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,OAAgB,eAAgB,SAAQ,iBAAiB;IAInD,aAAa,CAAC,GAAG,QAAkB;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,6IAA6I;IACpI,KAAK,CAAC,mBAAmB;QAChC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAElC,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,uCAAuC;YACpD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,SAAS;oBACX,CAAC;oBAED,IAAI,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,MAAM,QAAQ,CAAC;4BACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;4BACrD,OAAO,EAAE,iDAAiD,SAAS,GAAG;yBACvE,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClC,CAAC;gBAED,mEAAmE;gBACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,SAAS;oBACX,CAAC;oBAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClF,IAAI,QAAQ,EAAE,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBACtD,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;yBAClC,KAAK,CACJ,mGAAmG,EACnG,OAAO,CAAC,GAAG,EACX,oBAAoB,CAAC,IAAI,CAC1B,CAAC;gBACN,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,eAAe;QACb,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,IAAI,QAAoC,CAAC;QACzC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAErF,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,iFAAiF,GAAG,EAAE;iBAChG,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E,GAAG,EACH,KAAK,CACN,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ;qBACX,QAAQ,EAAE;qBACV,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE,CACvB,MAAM,CAAC,KAAK,CACV,0EAA0E,EAC1E,aAAa,CACd,CACF,CAAC;YACN,CAAC;YACD,QAAQ,GAAG,MAAM,mBAAmB,CAAC;gBACnC,QAAQ,EAAE,eAAe,CAAC,WAAW;gBACrC,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,6GAA6G,GAAG,aAAa,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnK,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,qGAAqG,EACrG,GAAG,EACH,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAiB,EAAE,GAAG,EAAE,YAAY,CAAC,kBAAkB,EAAE,CAAC;aAChE,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;aAC1B,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;IAC1C,CAAC;IAED,4KAA4K;IAClK,KAAK,CAAC,oBAAoB,CAAC,IAKpC;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEjE,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CACT,oFAAoF,EACpF,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAES,mBAAmB,CAAC,IAG7B;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,sBAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gMAAgM;IACtL,+BAA+B,CAAC,IAAoC;QAC5E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAA+C;QACpD,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;aACrB,KAAK,CACJ,+DAA+D,EAC/D,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,UAAU,CACX,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACO,gBAAgB,CAAC,IAAuB;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE,CACrD,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;QACjD,MAAM,OAAO,GAAG,0EAA0E,CAAC;QAE3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,4DAA4D,EAC5D,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,KAAK,CAAC,EACrD,WAAW,CAAC,OAAO,EACnB,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,gCAAgC,EAChC,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAC1C,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,kGAAkG;IAC/E,oBAAoB;QACrC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAED,gKAAgK;IAC7I,KAAK,CAAC,0BAA0B;QACjD,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI;YAC3C,WAAW,EAAE,6CAA6C;YAC1D,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAEhC,MAAM,KAAK,CAAC,0BAA0B,EAAE,CAAC;gBAEzC,iGAAiG;gBACjG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,sBAAsB,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBAExE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBAED,wFAAwF;gBACxF,6GAA6G;gBAC7G,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;gBAExC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,8MAA8M;IACpM,YAAY;QACpB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,CAAC;QAE9C,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,0BAA0B;QAC1B,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,yEAAyE,EACzE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAC/C,CAAC;QAEJ,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;iBAC3B,IAAI,CACH,6EAA6E,EAC7E,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAkB,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,wDAAwD,MAAM,aAAa,QAAQ,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;aAC3B,IAAI,CACH,qEAAqE,EACrE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CACtB,CAAC;IACN,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAEkB,eAAe;QAChC,MAAM,KAAK,GAAwB;YACjC;gBACE,IAAI,EAAE,eAAe,CAAC,mBAAmB;gBACzC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aAClE;YACD,EAAE,IAAI,EAAE,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE;YACvE;gBACE,IAAI,EAAE,eAAe,CAAC,4BAA4B;gBAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;YACD,GAAG,KAAK,CAAC,eAAe,EAAE;SAC3B,CAAC;QAEF,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;YAC3C,KAAK;YACL,MAAM,EAAE,eAAe,CAAC,aAAa;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE;SAClF,CAAC,CAAC;QAEH,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC;YAC9C,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,eAAe,CAAC,iCAAiC;YACzD,IAAI,EAAE;gBACJ,IAAI,EAAE,eAAe,CAAC,sBAAsB;gBAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,6DAA6D;YAC7D;gBACE,IAAI,EAAE,eAAe,CAAC,6BAA6B;gBACnD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,0BAA0B;QAClC,0BAA0B,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;CACF","sourcesContent":["import { assertScopeFilterSupported } from '@venizia/ignis-connectors';\nimport { ControllerTransports } from '@venizia/ignis-kernel';\nimport { BindingNamespaces, CoreBindings } from '@venizia/ignis-kernel';\nimport { EnvironmentKeys } from '@/common/environments';\nimport { RequestTrackerComponent } from '@/components';\nimport { GrpcComponent } from '@/components/controller/grpc';\nimport {\n  BindingScopes,\n  BindingValueTypes,\n  BootSequence,\n  MetadataRegistry,\n  RequestContextRegistry,\n} from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type {\n  ISecretHydrateEntry,\n  ISecretRotatable,\n  ISecretsHelper,\n  ISecretsRegistration,\n} from '@venizia/ignis-helpers';\nimport { blankToUndefined, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, isEmpty } from '@venizia/ignis-helpers/common';\nimport {\n  applicationEnvironment,\n  createSecretsHelper,\n  Environment,\n  executeWithPerformanceMeasure,\n  SecretProviders,\n  toBoolean,\n} from '@venizia/ignis-helpers';\nimport { contextStorage, tryGetContext } from 'hono/context-storage';\nimport { AppErrorMiddleware, emojiFavicon } from '../middlewares';\nimport { serveStatic } from 'hono/bun';\nimport { ServerBootSteps } from './boot-steps';\nimport { ServerApplication } from './server';\nimport type { IRestApplication } from '@venizia/ignis-kernel';\nimport type { IBootSequenceStep } from '@venizia/ignis-kernel';\n\n/** Maps a secret bundle to env names: the explicit `keys` mapping when present, otherwise every bundle key under `prefix`. */\nconst selectSecretEnvKeys = (opts: {\n  bundle: Record<string, string>;\n  entry: ISecretHydrateEntry;\n}): Record<string, string> => {\n  const { bundle, entry } = opts;\n  const merged: Record<string, string> = {};\n\n  if (!entry.keys) {\n    const bundleEntries = Object.entries(bundle);\n    for (const [rawKey, value] of bundleEntries) {\n      merged[`${entry.prefix ?? ''}${rawKey}`] = value;\n    }\n\n    return merged;\n  }\n\n  const entryKeysEntries = Object.entries(entry.keys);\n  for (const [rawKey, envKey] of entryKeysEntries) {\n    const value = bundle[rawKey];\n    if (value === undefined) {\n      continue;\n    }\n\n    merged[envKey] = value;\n  }\n\n  return merged;\n};\n\nexport abstract class BaseApplication extends ServerApplication implements IRestApplication {\n  protected secretsProvider?: ISecretsHelper;\n  protected secretsRegistration?: ISecretsRegistration;\n\n  protected normalizePath(...segments: string[]): string {\n    const joined = segments.join('/').replace(/\\/+/g, '/').replace(/\\/$/, '');\n    return joined || '/';\n  }\n\n  /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */\n  override async registerControllers(): Promise<void> {\n    await super.registerControllers();\n\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      description: 'Register application gRPC controllers',\n      scope: this.registerControllers.name,\n      task: async () => {\n        const transports = this.configs.transports ?? [ControllerTransports.REST];\n\n        for (const transport of transports) {\n          if (transport === ControllerTransports.REST) {\n            continue;\n          }\n\n          if (transport !== ControllerTransports.GRPC) {\n            throw getError({\n              statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n              message: `[registerControllers] Unsupported transport: '${transport}'`,\n            });\n          }\n\n          const grpcComponent = new GrpcComponent(this);\n          await grpcComponent.configure();\n        }\n\n        // Warn if gRPC controllers exist but gRPC transport is not enabled\n        if (transports.includes(ControllerTransports.GRPC)) {\n          return;\n        }\n\n        const allBindings = this.findByTag({ tag: BindingNamespaces.CONTROLLER });\n        for (const binding of allBindings) {\n          const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n          if (!target) {\n            continue;\n          }\n\n          const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n          if (metadata?.transport !== ControllerTransports.GRPC) {\n            continue;\n          }\n\n          this.logger\n            .for(this.registerControllers.name)\n            .error(\n              'gRPC controller \"%s\" discovered but gRPC transport is not enabled. Add \"%s\" to transports config.',\n              binding.key,\n              ControllerTransports.GRPC,\n            );\n        }\n      },\n    });\n  }\n\n  registerSecrets(): ValueOrPromise<ISecretsRegistration> {\n    return { provider: SecretProviders.SYSTEM_ENVS };\n  }\n\n  async hydrateSecrets(): Promise<void> {\n    const logger = this.logger.for(this.hydrateSecrets.name);\n    const registration = await this.registerSecrets();\n\n    let provider: ISecretsHelper | undefined;\n    const emptyHydrations: string[] = [];\n    try {\n      provider = await createSecretsHelper({ ...registration, identifier: 'app' });\n      await provider.configure();\n\n      await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });\n\n      const registrationLease = registration.lease ?? [];\n      for (const entry of registrationLease) {\n        await provider.lease({ path: entry.path, key: entry.key });\n      }\n    } catch (error) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Secret provider failed in non-development environment | env: ${env}`,\n        });\n      }\n      logger.warn(\n        'Secret provider failed; falling back to system-envs | env: %s | error: %s',\n        env,\n        error,\n      );\n\n      if (provider) {\n        await provider\n          .shutdown()\n          .catch((shutdownError) =>\n            logger.error(\n              'Failed to shut down partially-built provider during fallback | error: %s',\n              shutdownError,\n            ),\n          );\n      }\n      provider = await createSecretsHelper({\n        provider: SecretProviders.SYSTEM_ENVS,\n        identifier: 'app',\n      });\n    }\n\n    if (!provider) {\n      throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });\n    }\n\n    if (emptyHydrations.length > 0) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Hydrate entries resolved to an empty secret bundle in non-development environment | env: ${env} | paths: ${emptyHydrations.join(', ')}`,\n        });\n      }\n      logger.warn(\n        'Hydrate entries resolved to an empty secret bundle; continuing in development | env: %s | paths: %s',\n        env,\n        emptyHydrations.join(', '),\n      );\n    }\n\n    this.bind<ISecretsHelper>({ key: CoreBindings.APPLICATION_CONFIG })\n      .toProvider(() => provider)\n      .setScope(BindingScopes.SINGLETON);\n\n    this.registerPostStopHook({ identifier: 'secrets.shutdown', hook: () => provider.shutdown() });\n    this.secretsProvider = provider;\n    this.secretsRegistration = registration;\n  }\n\n  /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */\n  protected async hydrateSecretEntries(opts: {\n    provider: ISecretsHelper;\n    registration: ISecretsRegistration;\n    emptyHydrations: string[];\n    logger: ILogger;\n  }): Promise<void> {\n    const { provider, registration, emptyHydrations, logger } = opts;\n\n    const registrationHydrate = registration.hydrate ?? [];\n    for (const entry of registrationHydrate) {\n      const bundle = await provider.getBundle({ path: entry.path });\n      const merged = this.mergeSecretsIntoEnv({ bundle, entry });\n      if (Object.keys(merged).length > 0) {\n        continue;\n      }\n\n      if (this.hydrateEntryDeclaresExpectation({ entry })) {\n        emptyHydrations.push(entry.path);\n        continue;\n      }\n\n      logger.warn(\n        'Hydrate entry resolved to an empty bundle and declares no expected keys | path: %s',\n        entry.path,\n      );\n    }\n  }\n\n  protected mergeSecretsIntoEnv(opts: {\n    bundle: Record<string, string>;\n    entry: ISecretHydrateEntry;\n  }): Record<string, string> {\n    const { bundle, entry } = opts;\n    const merged = selectSecretEnvKeys({ bundle, entry });\n\n    const mergedEntries = Object.entries(merged);\n    for (const [key, value] of mergedEntries) {\n      process.env[key] = value;\n    }\n    applicationEnvironment.merge({ envs: merged });\n    return merged;\n  }\n\n  /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */\n  protected hydrateEntryDeclaresExpectation(opts: { entry: ISecretHydrateEntry }): boolean {\n    const { entry } = opts;\n    if (entry.keys && Object.keys(entry.keys).length > 0) {\n      return true;\n    }\n    return typeof entry.prefix === 'string' && entry.prefix.length > 0;\n  }\n\n  async wireSecretRotatables(): Promise<void> {\n    const logger = this.logger.for(this.wireSecretRotatables.name);\n    const provider = this.secretsProvider;\n    const registration = this.secretsRegistration;\n    if (!provider || !registration?.lease?.length) {\n      return;\n    }\n    for (const entry of registration.lease) {\n      const instance = this.get<ISecretRotatable>({ key: entry.key, isOptional: true });\n      if (instance && typeof instance.onSecretRotated === 'function') {\n        provider.registerRotatable({ key: entry.key, target: instance });\n        logger.info('Wired rotatable | key: %s', entry.key);\n        continue;\n      }\n      logger.debug('Lease key has no rotatable consumer | key: %s', entry.key);\n    }\n  }\n\n  static(opts: { restPath?: string; folderPath: string }) {\n    const { restPath = '*', folderPath } = opts;\n    const server = this.getServer();\n\n    server.use(restPath, serveStatic({ root: folderPath }));\n\n    this.logger\n      .for(this.static.name)\n      .debug(\n        'Registered static files | runtime: %s | path: %s | folder: %s',\n        this.runtime,\n        restPath,\n        folderPath,\n      );\n    return this;\n  }\n\n  /**\n   * Every value is read HERE, not destructured at module load: an application that loads its\n   * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot\n   * would print the defaults for a host that configured everything correctly.\n   */\n  protected printStartUpInfo(opts: { scope: string }) {\n    const { scope } = opts;\n    const read = (key: string, fallback: string): string =>\n      blankToUndefined(process.env[key]) ?? fallback;\n    const divider = '------------------------------------------------------------------------';\n\n    this.logger.for(scope).info(divider);\n    this.logger\n      .for(scope)\n      .info(\n        'Starting application... | Name: %s | Env: %s | Runtime: %s',\n        read(EnvironmentKeys.APP_ENV_APPLICATION_NAME, 'PNT'),\n        Environment.ambient,\n        this.runtime,\n      );\n    this.logger\n      .for(scope)\n      .info(\n        'AllowEmptyEnv: %s | Prefix: %s',\n        read('ALLOW_EMPTY_ENV_VALUE', 'true'),\n        read('APPLICATION_ENV_PREFIX', 'APP_ENV'),\n      );\n    this.logger.for(scope).info('RunMode: %s', process.env.RUN_MODE);\n    this.logger\n      .for(scope)\n      .info('Timezone: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_TIMEZONE, 'Asia/Ho_Chi_Minh'));\n    this.logger\n      .for(scope)\n      .info('LogPath: %s', read(EnvironmentKeys.APP_ENV_LOGGER_FOLDER_PATH, './'));\n    this.logger.for(scope).info(divider);\n  }\n\n  /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */\n  protected override buildErrorMiddleware(): AppErrorMiddleware {\n    return new AppErrorMiddleware({\n      logger: this.logger,\n      rootKey: this.configs.error?.rootKey ?? undefined,\n    });\n  }\n\n  /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */\n  protected override async registerDefaultMiddlewares() {\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      scope: this.registerDefaultMiddlewares.name,\n      description: 'Register default application server handler',\n      task: async () => {\n        const server = this.getServer();\n\n        await super.registerDefaultMiddlewares();\n\n        // Always installed, not only under `asyncContext.enable`: `tryGetContext()` answers \"no context\"\n        // without a store, and a `contextStorage()` the application registered itself stays visible to\n        // the enrichers. Inside a method body because every package declares `sideEffects: false`.\n        RequestContextRegistry.setResolver({ resolver: () => tryGetContext() });\n\n        if (this.configs.asyncContext?.enable) {\n          server.use(contextStorage());\n        }\n\n        // Request-body parsing and the access log; the request id it reads is already installed\n        // above (also works around the Bun + Hono body-parsing bug: https://github.com/honojs/middleware/issues/81).\n        this.component(RequestTrackerComponent);\n\n        server.use(emojiFavicon({ icon: this.configs.favicon ?? '🔥' }));\n      },\n    });\n  }\n\n  /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */\n  protected validateEnvs() {\n    const t = performance.now();\n    const envKeys = applicationEnvironment.keys();\n\n    // Permissive by DEFAULT: a name a host leaves empty is the host's business, and an empty value\n    // already falls back to `defaultValue` at read time, so refusing to boot over one fights the\n    // reader rather than helping it. Set ALLOW_EMPTY_ENV_VALUE to `false` or `0` to turn the check\n    // on. Read once rather than per key, and a blank value reads as unset - the same rule every\n    // other env read follows.\n    const configured = blankToUndefined(process.env.ALLOW_EMPTY_ENV_VALUE);\n    const allowsEmpty = configured === undefined || toBoolean(configured);\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'Envs: %s | START Validating application environments | Empty values: %s',\n        envKeys.length,\n        allowsEmpty ? 'ALLOWED (default)' : 'REJECTED',\n      );\n\n    if (allowsEmpty) {\n      this.logger\n        .for(this.validateEnvs.name)\n        .info(\n          'Envs: %s | SKIPPED - set ALLOW_EMPTY_ENV_VALUE=false to reject empty values',\n          envKeys.length,\n        );\n      return;\n    }\n\n    for (const argKey of envKeys) {\n      const argValue = applicationEnvironment.get<string | number>(argKey);\n\n      if (!isEmpty({ value: argValue })) {\n        continue;\n      }\n\n      throw getError({\n        message: `[validateEnvs] Invalid Application Environment! Key: ${argKey} | Value: ${argValue}`,\n      });\n    }\n\n    this.logger\n      .for(this.validateEnvs.name)\n      .info(\n        'Envs: %s | DONE Validating application environments | Took: %s (ms)',\n        envKeys.length,\n        performance.now() - t,\n      );\n  }\n\n  /**\n   * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without\n   * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.\n   */\n  override async initialize(): Promise<void> {\n    await this.runBootSequence({ steps: this.getBootSequence() });\n  }\n\n  protected override getBootSequence(): IBootSequenceStep[] {\n    const steps: IBootSequenceStep[] = [\n      {\n        name: ServerBootSteps.PRINT_START_UP_INFO,\n        run: () => this.printStartUpInfo({ scope: this.initialize.name }),\n      },\n      { name: ServerBootSteps.VALIDATE_ENVS, run: () => this.validateEnvs() },\n      {\n        name: ServerBootSteps.REGISTER_DEFAULT_MIDDLEWARES,\n        run: () => this.registerDefaultMiddlewares(),\n      },\n      ...super.getBootSequence(),\n    ];\n\n    const withHydrate = BootSequence.insertAfter({\n      steps,\n      target: ServerBootSteps.PRE_CONFIGURE,\n      step: { name: ServerBootSteps.HYDRATE_SECRETS, run: () => this.hydrateSecrets() },\n    });\n\n    // Components can contribute datasources, so wire rotatables only after the contributed sweep -\n    // a lease key pointing at a component-contributed datasource would otherwise resolve to nothing.\n    const withRotatables = BootSequence.insertAfter({\n      steps: withHydrate,\n      target: ServerBootSteps.REGISTER_CONTRIBUTED_DATA_SOURCES,\n      step: {\n        name: ServerBootSteps.WIRE_SECRET_ROTATABLES,\n        run: () => this.wireSecretRotatables(),\n      },\n    });\n\n    return [\n      ...withRotatables,\n      // Last, so a model registered by a component is covered too.\n      {\n        name: ServerBootSteps.VALIDATE_SCOPE_FILTER_SUPPORT,\n        run: () => this.validateScopeFilterSupport(),\n      },\n    ];\n  }\n\n  /**\n   * Refuses to start when a model's `settings.access` cannot take effect. Both failures are\n   * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.\n   */\n  protected validateScopeFilterSupport(): void {\n    assertScopeFilterSupported({ asyncContextEnabled: this.configs.asyncContext?.enable ?? false });\n  }\n}\n"]}

package/dist/esm/base/applications/boot-steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-steps.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/boot-steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,mKAAmK;AACnK,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,MAAM,CAAC,QAAQ,CAAC,mBAAmB,sBAAsB;IACzD,MAAM,CAAC,QAAQ,CAAC,aAAa,kBAAkB;IAC/C,MAAM,CAAC,QAAQ,CAAC,eAAe,oBAAoB;IACnD,MAAM,CAAC,QAAQ,CAAC,sBAAsB,0BAA0B;IAChE,MAAM,CAAC,QAAQ,CAAC,6BAA6B,gCAAgC;IAG7E,gBAAyB,UAAU,cAOhC;CACJ;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/esm/base/applications/boot-steps.js

@@ -0,0 +1,19 @@
+import { BootSteps } from '@venizia/ignis-kernel';
+/** The kernel's step names plus the ones only a server runs - the full vocabulary `BaseApplication.getBootSequence()` publishes for `BootSequence.insertAfter`. */
+export class ServerBootSteps extends BootSteps {
+    static { this.PRINT_START_UP_INFO = 'printStartUpInfo'; }
+    static { this.VALIDATE_ENVS = 'validateEnvs'; }
+    static { this.HYDRATE_SECRETS = 'hydrateSecrets'; }
+    static { this.WIRE_SECRET_ROTATABLES = 'wireSecretRotatables'; }
+    static { this.VALIDATE_SCOPE_FILTER_SUPPORT = 'validateScopeFilterSupport'; }
+    // The kernel's names plus these; `isValid` is inherited and reads this set through `this`.
+    static { this.SCHEME_SET = new Set([
+        ...BootSteps.SCHEME_SET,
+        this.PRINT_START_UP_INFO,
+        this.VALIDATE_ENVS,
+        this.HYDRATE_SECRETS,
+        this.WIRE_SECRET_ROTATABLES,
+        this.VALIDATE_SCOPE_FILTER_SUPPORT,
+    ]); }
+}
+//# sourceMappingURL=boot-steps.js.map

package/dist/esm/base/applications/boot-steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-steps.js","sourceRoot":"","sources":["../../../../src/base/applications/boot-steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,mKAAmK;AACnK,MAAM,OAAO,eAAgB,SAAQ,SAAS;aAC5B,wBAAmB,GAAG,kBAAkB,CAAC;aACzC,kBAAa,GAAG,cAAc,CAAC;aAC/B,oBAAe,GAAG,gBAAgB,CAAC;aACnC,2BAAsB,GAAG,sBAAsB,CAAC;aAChD,kCAA6B,GAAG,4BAA4B,CAAC;IAE7E,2FAA2F;aAClE,eAAU,GAAG,IAAI,GAAG,CAAS;QACpD,GAAG,SAAS,CAAC,UAAU;QACvB,IAAI,CAAC,mBAAmB;QACxB,IAAI,CAAC,aAAa;QAClB,IAAI,CAAC,eAAe;QACpB,IAAI,CAAC,sBAAsB;QAC3B,IAAI,CAAC,6BAA6B;KACnC,CAAC,CAAC","sourcesContent":["import { BootSteps } from '@venizia/ignis-kernel';\nimport type { TConstValue } from '@venizia/ignis-helpers/common';\n\n/** The kernel's step names plus the ones only a server runs - the full vocabulary `BaseApplication.getBootSequence()` publishes for `BootSequence.insertAfter`. */\nexport class ServerBootSteps extends BootSteps {\n  static readonly PRINT_START_UP_INFO = 'printStartUpInfo';\n  static readonly VALIDATE_ENVS = 'validateEnvs';\n  static readonly HYDRATE_SECRETS = 'hydrateSecrets';\n  static readonly WIRE_SECRET_ROTATABLES = 'wireSecretRotatables';\n  static readonly VALIDATE_SCOPE_FILTER_SUPPORT = 'validateScopeFilterSupport';\n\n  // The kernel's names plus these; `isValid` is inherited and reads this set through `this`.\n  static override readonly SCHEME_SET = new Set<string>([\n    ...BootSteps.SCHEME_SET,\n    this.PRINT_START_UP_INFO,\n    this.VALIDATE_ENVS,\n    this.HYDRATE_SECRETS,\n    this.WIRE_SECRET_ROTATABLES,\n    this.VALIDATE_SCOPE_FILTER_SUPPORT,\n  ]);\n}\n\nexport type TServerBootStep = TConstValue<typeof ServerBootSteps>;\n"]}

package/dist/esm/base/applications/common/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/applications/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/base/applications/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}

package/dist/esm/base/applications/common/index.js

@@ -0,0 +1,2 @@
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/applications/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/base/applications/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC","sourcesContent":["export * from './types';\n"]}