@venizia/ignis 0.4.6 → 0.4.7-0

package/dist/esm/base/applications/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/base.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EACV,mBAAmB,EAEnB,cAAc,EACd,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAYhC,OAAO,EAAE,kBAAkB,EAAgB,MAAM,gBAAgB,CAAC;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAgC/D,8BAAsB,eAAgB,SAAQ,iBAAkB,YAAW,gBAAgB;IACzF,SAAS,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC;IAC3C,SAAS,CAAC,mBAAmB,CAAC,EAAE,oBAAoB,CAAC;IAErD,SAAS,CAAC,aAAa,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM;IAKtD,6IAA6I;IAC9H,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAuDnD,eAAe,IAAI,cAAc,CAAC,oBAAoB,CAAC;IAIjD,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAwErC,4KAA4K;cAC5J,oBAAoB,CAAC,IAAI,EAAE;QACzC,QAAQ,EAAE,cAAc,CAAC;QACzB,YAAY,EAAE,oBAAoB,CAAC;QACnC,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBjB,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,KAAK,EAAE,mBAAmB,CAAC;KAC5B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAY1B,gMAAgM;IAChM,SAAS,CAAC,+BAA+B,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO;IAQlF,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB3C,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAiBtD;;;;OAIG;IACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAgClD,kGAAkG;cAC/E,oBAAoB,IAAI,kBAAkB;IAO7D,gKAAgK;cACvI,0BAA0B;IA4BnD,8MAA8M;IAC9M,SAAS,CAAC,YAAY;IAmDtB;;;OAGG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAIvB,eAAe,IAAI,iBAAiB,EAAE;IAyCzD;;;OAGG;IACH,SAAS,CAAC,0BAA0B,IAAI,IAAI;CAG7C"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/base.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EACV,mBAAmB,EAEnB,cAAc,EACd,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAYhC,OAAO,EAAE,kBAAkB,EAAgB,MAAM,gBAAgB,CAAC;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAgC/D,8BAAsB,eAAgB,SAAQ,iBAAkB,YAAW,gBAAgB;IACzF,SAAS,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC;IAC3C,SAAS,CAAC,mBAAmB,CAAC,EAAE,oBAAoB,CAAC;IAErD,SAAS,CAAC,aAAa,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM;IAKtD,6IAA6I;IAC9H,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAuDnD,eAAe,IAAI,cAAc,CAAC,oBAAoB,CAAC;IAIjD,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IA0ErC,4KAA4K;cAC5J,oBAAoB,CAAC,IAAI,EAAE;QACzC,QAAQ,EAAE,cAAc,CAAC;QACzB,YAAY,EAAE,oBAAoB,CAAC;QACnC,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBjB,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,KAAK,EAAE,mBAAmB,CAAC;KAC5B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAY1B,gMAAgM;IAChM,SAAS,CAAC,+BAA+B,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO;IAQlF,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB3C,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAiBtD;;;;OAIG;IACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAgClD,kGAAkG;cAC/E,oBAAoB,IAAI,kBAAkB;IAO7D,gKAAgK;cACvI,0BAA0B;IA4BnD,8MAA8M;IAC9M,SAAS,CAAC,YAAY;IAmDtB;;;OAGG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAIvB,eAAe,IAAI,iBAAiB,EAAE;IAyCzD;;;OAGG;IACH,SAAS,CAAC,0BAA0B,IAAI,IAAI;CAG7C"}

package/dist/esm/base/applications/base.js

@@ -91,7 +91,8 @@ export class BaseApplication extends ServerApplication {
         let provider;
         const emptyHydrations = [];
         try {
-            provider = await createSecretsHelper({ ...registration, identifier: 'app' });
+            const result = await createSecretsHelper({ ...registration, identifier: 'app' });
+            provider = result;
             await provider.configure();
             await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });
             const registrationLease = registration.lease ?? [];
@@ -112,10 +113,11 @@ export class BaseApplication extends ServerApplication {
                     .shutdown()
                     .catch((shutdownError) => logger.error('Failed to shut down partially-built provider during fallback | error: %s', shutdownError));
             }
-            provider = await createSecretsHelper({
+            const result2 = await createSecretsHelper({
                 provider: SecretProviders.SYSTEM_ENVS,
                 identifier: 'app',
             });
+            provider = result2;
         }
         if (!provider) {
             throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });

package/dist/esm/base/applications/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/base/applications/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAS/B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACX,6BAA6B,EAC7B,eAAe,EACf,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAI7C,8HAA8H;AAC9H,MAAM,mBAAmB,GAAG,CAAC,IAG5B,EAA0B,EAAE;IAC3B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,OAAgB,eAAgB,SAAQ,iBAAiB;IAInD,aAAa,CAAC,GAAG,QAAkB;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,6IAA6I;IACpI,KAAK,CAAC,mBAAmB;QAChC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAElC,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,uCAAuC;YACpD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,SAAS;oBACX,CAAC;oBAED,IAAI,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,MAAM,QAAQ,CAAC;4BACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;4BACrD,OAAO,EAAE,iDAAiD,SAAS,GAAG;yBACvE,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClC,CAAC;gBAED,mEAAmE;gBACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,SAAS;oBACX,CAAC;oBAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClF,IAAI,QAAQ,EAAE,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBACtD,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;yBAClC,KAAK,CACJ,mGAAmG,EACnG,OAAO,CAAC,GAAG,EACX,oBAAoB,CAAC,IAAI,CAC1B,CAAC;gBACN,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,eAAe;QACb,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,IAAI,QAAoC,CAAC;QACzC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAErF,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,iFAAiF,GAAG,EAAE;iBAChG,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E,GAAG,EACH,KAAK,CACN,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ;qBACX,QAAQ,EAAE;qBACV,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE,CACvB,MAAM,CAAC,KAAK,CACV,0EAA0E,EAC1E,aAAa,CACd,CACF,CAAC;YACN,CAAC;YACD,QAAQ,GAAG,MAAM,mBAAmB,CAAC;gBACnC,QAAQ,EAAE,eAAe,CAAC,WAAW;gBACrC,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,6GAA6G,GAAG,aAAa,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnK,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,qGAAqG,EACrG,GAAG,EACH,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAiB,EAAE,GAAG,EAAE,YAAY,CAAC,kBAAkB,EAAE,CAAC;aAChE,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;aAC1B,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;IAC1C,CAAC;IAED,4KAA4K;IAClK,KAAK,CAAC,oBAAoB,CAAC,IAKpC;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEjE,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CACT,oFAAoF,EACpF,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAES,mBAAmB,CAAC,IAG7B;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,sBAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gMAAgM;IACtL,+BAA+B,CAAC,IAAoC;QAC5E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAA+C;QACpD,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;aACrB,KAAK,CACJ,+DAA+D,EAC/D,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,UAAU,CACX,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACO,gBAAgB,CAAC,IAAuB;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE,CACrD,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;QACjD,MAAM,OAAO,GAAG,0EAA0E,CAAC;QAE3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,4DAA4D,EAC5D,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,KAAK,CAAC,EACrD,WAAW,CAAC,OAAO,EACnB,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,gCAAgC,EAChC,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAC1C,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,kGAAkG;IAC/E,oBAAoB;QACrC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAED,gKAAgK;IAC7I,KAAK,CAAC,0BAA0B;QACjD,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI;YAC3C,WAAW,EAAE,6CAA6C;YAC1D,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAEhC,MAAM,KAAK,CAAC,0BAA0B,EAAE,CAAC;gBAEzC,iGAAiG;gBACjG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,sBAAsB,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBAExE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBAED,wFAAwF;gBACxF,6GAA6G;gBAC7G,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;gBAExC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,8MAA8M;IACpM,YAAY;QACpB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,CAAC;QAE9C,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,0BAA0B;QAC1B,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,yEAAyE,EACzE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAC/C,CAAC;QAEJ,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;iBAC3B,IAAI,CACH,6EAA6E,EAC7E,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAkB,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,wDAAwD,MAAM,aAAa,QAAQ,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;aAC3B,IAAI,CACH,qEAAqE,EACrE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CACtB,CAAC;IACN,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAEkB,eAAe;QAChC,MAAM,KAAK,GAAwB;YACjC;gBACE,IAAI,EAAE,eAAe,CAAC,mBAAmB;gBACzC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aAClE;YACD,EAAE,IAAI,EAAE,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE;YACvE;gBACE,IAAI,EAAE,eAAe,CAAC,4BAA4B;gBAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;YACD,GAAG,KAAK,CAAC,eAAe,EAAE;SAC3B,CAAC;QAEF,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;YAC3C,KAAK;YACL,MAAM,EAAE,eAAe,CAAC,aAAa;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE;SAClF,CAAC,CAAC;QAEH,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC;YAC9C,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,eAAe,CAAC,iCAAiC;YACzD,IAAI,EAAE;gBACJ,IAAI,EAAE,eAAe,CAAC,sBAAsB;gBAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,6DAA6D;YAC7D;gBACE,IAAI,EAAE,eAAe,CAAC,6BAA6B;gBACnD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,0BAA0B;QAClC,0BAA0B,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;CACF","sourcesContent":["import { assertScopeFilterSupported } from '@venizia/ignis-connectors';\nimport { ControllerTransports } from '@venizia/ignis-kernel';\nimport { BindingNamespaces, CoreBindings } from '@venizia/ignis-kernel';\nimport { EnvironmentKeys } from '@/common/environments';\nimport { RequestTrackerComponent } from '@/components';\nimport { GrpcComponent } from '@/components/controller/grpc';\nimport {\n  BindingScopes,\n  BindingValueTypes,\n  BootSequence,\n  MetadataRegistry,\n  RequestContextRegistry,\n} from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type {\n  ISecretHydrateEntry,\n  ISecretRotatable,\n  ISecretsHelper,\n  ISecretsRegistration,\n} from '@venizia/ignis-helpers';\nimport { blankToUndefined, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, isEmpty } from '@venizia/ignis-helpers/common';\nimport {\n  applicationEnvironment,\n  createSecretsHelper,\n  Environment,\n  executeWithPerformanceMeasure,\n  SecretProviders,\n  toBoolean,\n} from '@venizia/ignis-helpers';\nimport { contextStorage, tryGetContext } from 'hono/context-storage';\nimport { AppErrorMiddleware, emojiFavicon } from '../middlewares';\nimport { serveStatic } from 'hono/bun';\nimport { ServerBootSteps } from './boot-steps';\nimport { ServerApplication } from './server';\nimport type { IRestApplication } from '@venizia/ignis-kernel';\nimport type { IBootSequenceStep } from '@venizia/ignis-kernel';\n\n/** Maps a secret bundle to env names: the explicit `keys` mapping when present, otherwise every bundle key under `prefix`. */\nconst selectSecretEnvKeys = (opts: {\n  bundle: Record<string, string>;\n  entry: ISecretHydrateEntry;\n}): Record<string, string> => {\n  const { bundle, entry } = opts;\n  const merged: Record<string, string> = {};\n\n  if (!entry.keys) {\n    const bundleEntries = Object.entries(bundle);\n    for (const [rawKey, value] of bundleEntries) {\n      merged[`${entry.prefix ?? ''}${rawKey}`] = value;\n    }\n\n    return merged;\n  }\n\n  const entryKeysEntries = Object.entries(entry.keys);\n  for (const [rawKey, envKey] of entryKeysEntries) {\n    const value = bundle[rawKey];\n    if (value === undefined) {\n      continue;\n    }\n\n    merged[envKey] = value;\n  }\n\n  return merged;\n};\n\nexport abstract class BaseApplication extends ServerApplication implements IRestApplication {\n  protected secretsProvider?: ISecretsHelper;\n  protected secretsRegistration?: ISecretsRegistration;\n\n  protected normalizePath(...segments: string[]): string {\n    const joined = segments.join('/').replace(/\\/+/g, '/').replace(/\\/$/, '');\n    return joined || '/';\n  }\n\n  /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */\n  override async registerControllers(): Promise<void> {\n    await super.registerControllers();\n\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      description: 'Register application gRPC controllers',\n      scope: this.registerControllers.name,\n      task: async () => {\n        const transports = this.configs.transports ?? [ControllerTransports.REST];\n\n        for (const transport of transports) {\n          if (transport === ControllerTransports.REST) {\n            continue;\n          }\n\n          if (transport !== ControllerTransports.GRPC) {\n            throw getError({\n              statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n              message: `[registerControllers] Unsupported transport: '${transport}'`,\n            });\n          }\n\n          const grpcComponent = new GrpcComponent(this);\n          await grpcComponent.configure();\n        }\n\n        // Warn if gRPC controllers exist but gRPC transport is not enabled\n        if (transports.includes(ControllerTransports.GRPC)) {\n          return;\n        }\n\n        const allBindings = this.findByTag({ tag: BindingNamespaces.CONTROLLER });\n        for (const binding of allBindings) {\n          const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n          if (!target) {\n            continue;\n          }\n\n          const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n          if (metadata?.transport !== ControllerTransports.GRPC) {\n            continue;\n          }\n\n          this.logger\n            .for(this.registerControllers.name)\n            .error(\n              'gRPC controller \"%s\" discovered but gRPC transport is not enabled. Add \"%s\" to transports config.',\n              binding.key,\n              ControllerTransports.GRPC,\n            );\n        }\n      },\n    });\n  }\n\n  registerSecrets(): ValueOrPromise<ISecretsRegistration> {\n    return { provider: SecretProviders.SYSTEM_ENVS };\n  }\n\n  async hydrateSecrets(): Promise<void> {\n    const logger = this.logger.for(this.hydrateSecrets.name);\n    const registration = await this.registerSecrets();\n\n    let provider: ISecretsHelper | undefined;\n    const emptyHydrations: string[] = [];\n    try {\n      provider = await createSecretsHelper({ ...registration, identifier: 'app' });\n      await provider.configure();\n\n      await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });\n\n      const registrationLease = registration.lease ?? [];\n      for (const entry of registrationLease) {\n        await provider.lease({ path: entry.path, key: entry.key });\n      }\n    } catch (error) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Secret provider failed in non-development environment | env: ${env}`,\n        });\n      }\n      logger.warn(\n        'Secret provider failed; falling back to system-envs | env: %s | error: %s',\n        env,\n        error,\n      );\n\n      if (provider) {\n        await provider\n          .shutdown()\n          .catch((shutdownError) =>\n            logger.error(\n              'Failed to shut down partially-built provider during fallback | error: %s',\n              shutdownError,\n            ),\n          );\n      }\n      provider = await createSecretsHelper({\n        provider: SecretProviders.SYSTEM_ENVS,\n        identifier: 'app',\n      });\n    }\n\n    if (!provider) {\n      throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });\n    }\n\n    if (emptyHydrations.length > 0) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Hydrate entries resolved to an empty secret bundle in non-development environment | env: ${env} | paths: ${emptyHydrations.join(', ')}`,\n        });\n      }\n      logger.warn(\n        'Hydrate entries resolved to an empty secret bundle; continuing in development | env: %s | paths: %s',\n        env,\n        emptyHydrations.join(', '),\n      );\n    }\n\n    this.bind<ISecretsHelper>({ key: CoreBindings.APPLICATION_CONFIG })\n      .toProvider(() => provider)\n      .setScope(BindingScopes.SINGLETON);\n\n    this.registerPostStopHook({ identifier: 'secrets.shutdown', hook: () => provider.shutdown() });\n    this.secretsProvider = provider;\n    this.secretsRegistration = registration;\n  }\n\n  /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */\n  protected async hydrateSecretEntries(opts: {\n    provider: ISecretsHelper;\n    registration: ISecretsRegistration;\n    emptyHydrations: string[];\n    logger: ILogger;\n  }): Promise<void> {\n    const { provider, registration, emptyHydrations, logger } = opts;\n\n    const registrationHydrate = registration.hydrate ?? [];\n    for (const entry of registrationHydrate) {\n      const bundle = await provider.getBundle({ path: entry.path });\n      const merged = this.mergeSecretsIntoEnv({ bundle, entry });\n      if (Object.keys(merged).length > 0) {\n        continue;\n      }\n\n      if (this.hydrateEntryDeclaresExpectation({ entry })) {\n        emptyHydrations.push(entry.path);\n        continue;\n      }\n\n      logger.warn(\n        'Hydrate entry resolved to an empty bundle and declares no expected keys | path: %s',\n        entry.path,\n      );\n    }\n  }\n\n  protected mergeSecretsIntoEnv(opts: {\n    bundle: Record<string, string>;\n    entry: ISecretHydrateEntry;\n  }): Record<string, string> {\n    const { bundle, entry } = opts;\n    const merged = selectSecretEnvKeys({ bundle, entry });\n\n    const mergedEntries = Object.entries(merged);\n    for (const [key, value] of mergedEntries) {\n      process.env[key] = value;\n    }\n    applicationEnvironment.merge({ envs: merged });\n    return merged;\n  }\n\n  /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */\n  protected hydrateEntryDeclaresExpectation(opts: { entry: ISecretHydrateEntry }): boolean {\n    const { entry } = opts;\n    if (entry.keys && Object.keys(entry.keys).length > 0) {\n      return true;\n    }\n    return typeof entry.prefix === 'string' && entry.prefix.length > 0;\n  }\n\n  async wireSecretRotatables(): Promise<void> {\n    const logger = this.logger.for(this.wireSecretRotatables.name);\n    const provider = this.secretsProvider;\n    const registration = this.secretsRegistration;\n    if (!provider || !registration?.lease?.length) {\n      return;\n    }\n    for (const entry of registration.lease) {\n      const instance = this.get<ISecretRotatable>({ key: entry.key, isOptional: true });\n      if (instance && typeof instance.onSecretRotated === 'function') {\n        provider.registerRotatable({ key: entry.key, target: instance });\n        logger.info('Wired rotatable | key: %s', entry.key);\n        continue;\n      }\n      logger.debug('Lease key has no rotatable consumer | key: %s', entry.key);\n    }\n  }\n\n  static(opts: { restPath?: string; folderPath: string }) {\n    const { restPath = '*', folderPath } = opts;\n    const server = this.getServer();\n\n    server.use(restPath, serveStatic({ root: folderPath }));\n\n    this.logger\n      .for(this.static.name)\n      .debug(\n        'Registered static files | runtime: %s | path: %s | folder: %s',\n        this.runtime,\n        restPath,\n        folderPath,\n      );\n    return this;\n  }\n\n  /**\n   * Every value is read HERE, not destructured at module load: an application that loads its\n   * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot\n   * would print the defaults for a host that configured everything correctly.\n   */\n  protected printStartUpInfo(opts: { scope: string }) {\n    const { scope } = opts;\n    const read = (key: string, fallback: string): string =>\n      blankToUndefined(process.env[key]) ?? fallback;\n    const divider = '------------------------------------------------------------------------';\n\n    this.logger.for(scope).info(divider);\n    this.logger\n      .for(scope)\n      .info(\n        'Starting application... | Name: %s | Env: %s | Runtime: %s',\n        read(EnvironmentKeys.APP_ENV_APPLICATION_NAME, 'PNT'),\n        Environment.ambient,\n        this.runtime,\n      );\n    this.logger\n      .for(scope)\n      .info(\n        'AllowEmptyEnv: %s | Prefix: %s',\n        read('ALLOW_EMPTY_ENV_VALUE', 'true'),\n        read('APPLICATION_ENV_PREFIX', 'APP_ENV'),\n      );\n    this.logger.for(scope).info('RunMode: %s', process.env.RUN_MODE);\n    this.logger\n      .for(scope)\n      .info('Timezone: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_TIMEZONE, 'Asia/Ho_Chi_Minh'));\n    this.logger\n      .for(scope)\n      .info('LogPath: %s', read(EnvironmentKeys.APP_ENV_LOGGER_FOLDER_PATH, './'));\n    this.logger.for(scope).info(divider);\n  }\n\n  /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */\n  protected override buildErrorMiddleware(): AppErrorMiddleware {\n    return new AppErrorMiddleware({\n      logger: this.logger,\n      rootKey: this.configs.error?.rootKey ?? undefined,\n    });\n  }\n\n  /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */\n  protected override async registerDefaultMiddlewares() {\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      scope: this.registerDefaultMiddlewares.name,\n      description: 'Register default application server handler',\n      task: async () => {\n        const server = this.getServer();\n\n        await super.registerDefaultMiddlewares();\n\n        // Always installed, not only under `asyncContext.enable`: `tryGetContext()` answers \"no context\"\n        // without a store, and a `contextStorage()` the application registered itself stays visible to\n        // the enrichers. Inside a method body because every package declares `sideEffects: false`.\n        RequestContextRegistry.setResolver({ resolver: () => tryGetContext() });\n\n        if (this.configs.asyncContext?.enable) {\n          server.use(contextStorage());\n        }\n\n        // Request-body parsing and the access log; the request id it reads is already installed\n        // above (also works around the Bun + Hono body-parsing bug: https://github.com/honojs/middleware/issues/81).\n        this.component(RequestTrackerComponent);\n\n        server.use(emojiFavicon({ icon: this.configs.favicon ?? '🔥' }));\n      },\n    });\n  }\n\n  /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */\n  protected validateEnvs() {\n    const t = performance.now();\n    const envKeys = applicationEnvironment.keys();\n\n    // Permissive by DEFAULT: a name a host leaves empty is the host's business, and an empty value\n    // already falls back to `defaultValue` at read time, so refusing to boot over one fights the\n    // reader rather than helping it. Set ALLOW_EMPTY_ENV_VALUE to `false` or `0` to turn the check\n    // on. Read once rather than per key, and a blank value reads as unset - the same rule every\n    // other env read follows.\n    const configured = blankToUndefined(process.env.ALLOW_EMPTY_ENV_VALUE);\n    const allowsEmpty = configured === undefined || toBoolean(configured);\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'Envs: %s | START Validating application environments | Empty values: %s',\n        envKeys.length,\n        allowsEmpty ? 'ALLOWED (default)' : 'REJECTED',\n      );\n\n    if (allowsEmpty) {\n      this.logger\n        .for(this.validateEnvs.name)\n        .info(\n          'Envs: %s | SKIPPED - set ALLOW_EMPTY_ENV_VALUE=false to reject empty values',\n          envKeys.length,\n        );\n      return;\n    }\n\n    for (const argKey of envKeys) {\n      const argValue = applicationEnvironment.get<string | number>(argKey);\n\n      if (!isEmpty({ value: argValue })) {\n        continue;\n      }\n\n      throw getError({\n        message: `[validateEnvs] Invalid Application Environment! Key: ${argKey} | Value: ${argValue}`,\n      });\n    }\n\n    this.logger\n      .for(this.validateEnvs.name)\n      .info(\n        'Envs: %s | DONE Validating application environments | Took: %s (ms)',\n        envKeys.length,\n        performance.now() - t,\n      );\n  }\n\n  /**\n   * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without\n   * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.\n   */\n  override async initialize(): Promise<void> {\n    await this.runBootSequence({ steps: this.getBootSequence() });\n  }\n\n  protected override getBootSequence(): IBootSequenceStep[] {\n    const steps: IBootSequenceStep[] = [\n      {\n        name: ServerBootSteps.PRINT_START_UP_INFO,\n        run: () => this.printStartUpInfo({ scope: this.initialize.name }),\n      },\n      { name: ServerBootSteps.VALIDATE_ENVS, run: () => this.validateEnvs() },\n      {\n        name: ServerBootSteps.REGISTER_DEFAULT_MIDDLEWARES,\n        run: () => this.registerDefaultMiddlewares(),\n      },\n      ...super.getBootSequence(),\n    ];\n\n    const withHydrate = BootSequence.insertAfter({\n      steps,\n      target: ServerBootSteps.PRE_CONFIGURE,\n      step: { name: ServerBootSteps.HYDRATE_SECRETS, run: () => this.hydrateSecrets() },\n    });\n\n    // Components can contribute datasources, so wire rotatables only after the contributed sweep -\n    // a lease key pointing at a component-contributed datasource would otherwise resolve to nothing.\n    const withRotatables = BootSequence.insertAfter({\n      steps: withHydrate,\n      target: ServerBootSteps.REGISTER_CONTRIBUTED_DATA_SOURCES,\n      step: {\n        name: ServerBootSteps.WIRE_SECRET_ROTATABLES,\n        run: () => this.wireSecretRotatables(),\n      },\n    });\n\n    return [\n      ...withRotatables,\n      // Last, so a model registered by a component is covered too.\n      {\n        name: ServerBootSteps.VALIDATE_SCOPE_FILTER_SUPPORT,\n        run: () => this.validateScopeFilterSupport(),\n      },\n    ];\n  }\n\n  /**\n   * Refuses to start when a model's `settings.access` cannot take effect. Both failures are\n   * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.\n   */\n  protected validateScopeFilterSupport(): void {\n    assertScopeFilterSupported({ asyncContextEnabled: this.configs.asyncContext?.enable ?? false });\n  }\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/base/applications/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAS/B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACX,6BAA6B,EAC7B,eAAe,EACf,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAI7C,8HAA8H;AAC9H,MAAM,mBAAmB,GAAG,CAAC,IAG5B,EAA0B,EAAE;IAC3B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,OAAgB,eAAgB,SAAQ,iBAAiB;IAInD,aAAa,CAAC,GAAG,QAAkB;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,6IAA6I;IACpI,KAAK,CAAC,mBAAmB;QAChC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAElC,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,uCAAuC;YACpD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACpC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,SAAS;oBACX,CAAC;oBAED,IAAI,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBAC5C,MAAM,QAAQ,CAAC;4BACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;4BACrD,OAAO,EAAE,iDAAiD,SAAS,GAAG;yBACvE,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClC,CAAC;gBAED,mEAAmE;gBACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,SAAS;oBACX,CAAC;oBAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClF,IAAI,QAAQ,EAAE,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;wBACtD,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,MAAM;yBACR,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;yBAClC,KAAK,CACJ,mGAAmG,EACnG,OAAO,CAAC,GAAG,EACX,oBAAoB,CAAC,IAAI,CAC1B,CAAC;gBACN,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,eAAe;QACb,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,IAAI,QAAoC,CAAC;QACzC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,QAAQ,GAAG,MAAM,CAAC;YAClB,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAErF,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,iFAAiF,GAAG,EAAE;iBAChG,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E,GAAG,EACH,KAAK,CACN,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ;qBACX,QAAQ,EAAE;qBACV,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE,CACvB,MAAM,CAAC,KAAK,CACV,0EAA0E,EAC1E,aAAa,CACd,CACF,CAAC;YACN,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;gBACxC,QAAQ,EAAE,eAAe,CAAC,WAAW;gBACrC,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;YACH,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,6GAA6G,GAAG,aAAa,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnK,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CACT,qGAAqG,EACrG,GAAG,EACH,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAiB,EAAE,GAAG,EAAE,YAAY,CAAC,kBAAkB,EAAE,CAAC;aAChE,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;aAC1B,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;IAC1C,CAAC;IAED,4KAA4K;IAClK,KAAK,CAAC,oBAAoB,CAAC,IAKpC;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEjE,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CACT,oFAAoF,EACpF,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAES,mBAAmB,CAAC,IAG7B;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,sBAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gMAAgM;IACtL,+BAA+B,CAAC,IAAoC;QAC5E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAA+C;QACpD,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;aACrB,KAAK,CACJ,+DAA+D,EAC/D,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,UAAU,CACX,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACO,gBAAgB,CAAC,IAAuB;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE,CACrD,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;QACjD,MAAM,OAAO,GAAG,0EAA0E,CAAC;QAE3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,4DAA4D,EAC5D,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,KAAK,CAAC,EACrD,WAAW,CAAC,OAAO,EACnB,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CACH,gCAAgC,EAChC,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAC1C,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,kGAAkG;IAC/E,oBAAoB;QACrC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAED,gKAAgK;IAC7I,KAAK,CAAC,0BAA0B;QACjD,MAAM,6BAA6B,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI;YAC3C,WAAW,EAAE,6CAA6C;YAC1D,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAEhC,MAAM,KAAK,CAAC,0BAA0B,EAAE,CAAC;gBAEzC,iGAAiG;gBACjG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,sBAAsB,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBAExE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBAED,wFAAwF;gBACxF,6GAA6G;gBAC7G,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;gBAExC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,8MAA8M;IACpM,YAAY;QACpB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,CAAC;QAE9C,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,0BAA0B;QAC1B,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CACH,yEAAyE,EACzE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAC/C,CAAC;QAEJ,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;iBAC3B,IAAI,CACH,6EAA6E,EAC7E,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAkB,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,wDAAwD,MAAM,aAAa,QAAQ,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;aAC3B,IAAI,CACH,qEAAqE,EACrE,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CACtB,CAAC;IACN,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAEkB,eAAe;QAChC,MAAM,KAAK,GAAwB;YACjC;gBACE,IAAI,EAAE,eAAe,CAAC,mBAAmB;gBACzC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aAClE;YACD,EAAE,IAAI,EAAE,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE;YACvE;gBACE,IAAI,EAAE,eAAe,CAAC,4BAA4B;gBAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;YACD,GAAG,KAAK,CAAC,eAAe,EAAE;SAC3B,CAAC;QAEF,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;YAC3C,KAAK;YACL,MAAM,EAAE,eAAe,CAAC,aAAa;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE;SAClF,CAAC,CAAC;QAEH,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC;YAC9C,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,eAAe,CAAC,iCAAiC;YACzD,IAAI,EAAE;gBACJ,IAAI,EAAE,eAAe,CAAC,sBAAsB;gBAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,6DAA6D;YAC7D;gBACE,IAAI,EAAE,eAAe,CAAC,6BAA6B;gBACnD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;aAC7C;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,0BAA0B;QAClC,0BAA0B,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;CACF","sourcesContent":["import { assertScopeFilterSupported } from '@venizia/ignis-connectors';\nimport { ControllerTransports } from '@venizia/ignis-kernel';\nimport { BindingNamespaces, CoreBindings } from '@venizia/ignis-kernel';\nimport { EnvironmentKeys } from '@/common/environments';\nimport { RequestTrackerComponent } from '@/components';\nimport { GrpcComponent } from '@/components/controller/grpc';\nimport {\n  BindingScopes,\n  BindingValueTypes,\n  BootSequence,\n  MetadataRegistry,\n  RequestContextRegistry,\n} from '@venizia/ignis-kernel';\nimport type { ILogger } from '@venizia/ignis-helpers/core';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type {\n  ISecretHydrateEntry,\n  ISecretRotatable,\n  ISecretsHelper,\n  ISecretsRegistration,\n} from '@venizia/ignis-helpers';\nimport { blankToUndefined, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, isEmpty } from '@venizia/ignis-helpers/common';\nimport {\n  applicationEnvironment,\n  createSecretsHelper,\n  Environment,\n  executeWithPerformanceMeasure,\n  SecretProviders,\n  toBoolean,\n} from '@venizia/ignis-helpers';\nimport { contextStorage, tryGetContext } from 'hono/context-storage';\nimport { AppErrorMiddleware, emojiFavicon } from '../middlewares';\nimport { serveStatic } from 'hono/bun';\nimport { ServerBootSteps } from './boot-steps';\nimport { ServerApplication } from './server';\nimport type { IRestApplication } from '@venizia/ignis-kernel';\nimport type { IBootSequenceStep } from '@venizia/ignis-kernel';\n\n/** Maps a secret bundle to env names: the explicit `keys` mapping when present, otherwise every bundle key under `prefix`. */\nconst selectSecretEnvKeys = (opts: {\n  bundle: Record<string, string>;\n  entry: ISecretHydrateEntry;\n}): Record<string, string> => {\n  const { bundle, entry } = opts;\n  const merged: Record<string, string> = {};\n\n  if (!entry.keys) {\n    const bundleEntries = Object.entries(bundle);\n    for (const [rawKey, value] of bundleEntries) {\n      merged[`${entry.prefix ?? ''}${rawKey}`] = value;\n    }\n\n    return merged;\n  }\n\n  const entryKeysEntries = Object.entries(entry.keys);\n  for (const [rawKey, envKey] of entryKeysEntries) {\n    const value = bundle[rawKey];\n    if (value === undefined) {\n      continue;\n    }\n\n    merged[envKey] = value;\n  }\n\n  return merged;\n};\n\nexport abstract class BaseApplication extends ServerApplication implements IRestApplication {\n  protected secretsProvider?: ISecretsHelper;\n  protected secretsRegistration?: ISecretsRegistration;\n\n  protected normalizePath(...segments: string[]): string {\n    const joined = segments.join('/').replace(/\\/+/g, '/').replace(/\\/$/, '');\n    return joined || '/';\n  }\n\n  /** Adds the gRPC branch the kernel cannot own: `GrpcComponent` needs `AbstractGrpcController`, core-only code that reaches `node:module`. */\n  override async registerControllers(): Promise<void> {\n    await super.registerControllers();\n\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      description: 'Register application gRPC controllers',\n      scope: this.registerControllers.name,\n      task: async () => {\n        const transports = this.configs.transports ?? [ControllerTransports.REST];\n\n        for (const transport of transports) {\n          if (transport === ControllerTransports.REST) {\n            continue;\n          }\n\n          if (transport !== ControllerTransports.GRPC) {\n            throw getError({\n              statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n              message: `[registerControllers] Unsupported transport: '${transport}'`,\n            });\n          }\n\n          const grpcComponent = new GrpcComponent(this);\n          await grpcComponent.configure();\n        }\n\n        // Warn if gRPC controllers exist but gRPC transport is not enabled\n        if (transports.includes(ControllerTransports.GRPC)) {\n          return;\n        }\n\n        const allBindings = this.findByTag({ tag: BindingNamespaces.CONTROLLER });\n        for (const binding of allBindings) {\n          const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n          if (!target) {\n            continue;\n          }\n\n          const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n          if (metadata?.transport !== ControllerTransports.GRPC) {\n            continue;\n          }\n\n          this.logger\n            .for(this.registerControllers.name)\n            .error(\n              'gRPC controller \"%s\" discovered but gRPC transport is not enabled. Add \"%s\" to transports config.',\n              binding.key,\n              ControllerTransports.GRPC,\n            );\n        }\n      },\n    });\n  }\n\n  registerSecrets(): ValueOrPromise<ISecretsRegistration> {\n    return { provider: SecretProviders.SYSTEM_ENVS };\n  }\n\n  async hydrateSecrets(): Promise<void> {\n    const logger = this.logger.for(this.hydrateSecrets.name);\n    const registration = await this.registerSecrets();\n\n    let provider: ISecretsHelper | undefined;\n    const emptyHydrations: string[] = [];\n    try {\n      const result = await createSecretsHelper({ ...registration, identifier: 'app' });\n      provider = result;\n      await provider.configure();\n\n      await this.hydrateSecretEntries({ provider, registration, emptyHydrations, logger });\n\n      const registrationLease = registration.lease ?? [];\n      for (const entry of registrationLease) {\n        await provider.lease({ path: entry.path, key: entry.key });\n      }\n    } catch (error) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Secret provider failed in non-development environment | env: ${env}`,\n        });\n      }\n      logger.warn(\n        'Secret provider failed; falling back to system-envs | env: %s | error: %s',\n        env,\n        error,\n      );\n\n      if (provider) {\n        await provider\n          .shutdown()\n          .catch((shutdownError) =>\n            logger.error(\n              'Failed to shut down partially-built provider during fallback | error: %s',\n              shutdownError,\n            ),\n          );\n      }\n      const result2 = await createSecretsHelper({\n        provider: SecretProviders.SYSTEM_ENVS,\n        identifier: 'app',\n      });\n      provider = result2;\n    }\n\n    if (!provider) {\n      throw getError({ message: '[hydrateSecrets] No secrets provider resolved' });\n    }\n\n    if (emptyHydrations.length > 0) {\n      const env = Environment.current;\n      if (!Environment.DEVELOPMENT_ENVS.has(env.toLowerCase())) {\n        throw getError({\n          message: `[hydrateSecrets] Hydrate entries resolved to an empty secret bundle in non-development environment | env: ${env} | paths: ${emptyHydrations.join(', ')}`,\n        });\n      }\n      logger.warn(\n        'Hydrate entries resolved to an empty secret bundle; continuing in development | env: %s | paths: %s',\n        env,\n        emptyHydrations.join(', '),\n      );\n    }\n\n    this.bind<ISecretsHelper>({ key: CoreBindings.APPLICATION_CONFIG })\n      .toProvider(() => provider)\n      .setScope(BindingScopes.SINGLETON);\n\n    this.registerPostStopHook({ identifier: 'secrets.shutdown', hook: () => provider.shutdown() });\n    this.secretsProvider = provider;\n    this.secretsRegistration = registration;\n  }\n\n  /** Applies each hydrate entry in declaration order; paths that resolve empty while declaring an expectation are collected in `emptyHydrations` rather than failing here. */\n  protected async hydrateSecretEntries(opts: {\n    provider: ISecretsHelper;\n    registration: ISecretsRegistration;\n    emptyHydrations: string[];\n    logger: ILogger;\n  }): Promise<void> {\n    const { provider, registration, emptyHydrations, logger } = opts;\n\n    const registrationHydrate = registration.hydrate ?? [];\n    for (const entry of registrationHydrate) {\n      const bundle = await provider.getBundle({ path: entry.path });\n      const merged = this.mergeSecretsIntoEnv({ bundle, entry });\n      if (Object.keys(merged).length > 0) {\n        continue;\n      }\n\n      if (this.hydrateEntryDeclaresExpectation({ entry })) {\n        emptyHydrations.push(entry.path);\n        continue;\n      }\n\n      logger.warn(\n        'Hydrate entry resolved to an empty bundle and declares no expected keys | path: %s',\n        entry.path,\n      );\n    }\n  }\n\n  protected mergeSecretsIntoEnv(opts: {\n    bundle: Record<string, string>;\n    entry: ISecretHydrateEntry;\n  }): Record<string, string> {\n    const { bundle, entry } = opts;\n    const merged = selectSecretEnvKeys({ bundle, entry });\n\n    const mergedEntries = Object.entries(merged);\n    for (const [key, value] of mergedEntries) {\n      process.env[key] = value;\n    }\n    applicationEnvironment.merge({ envs: merged });\n    return merged;\n  }\n\n  /** A hydrate entry declares an expectation only via explicit `keys` or a non-empty `prefix`; such an entry resolving to zero env values is a misconfiguration boot must not silently absorb. */\n  protected hydrateEntryDeclaresExpectation(opts: { entry: ISecretHydrateEntry }): boolean {\n    const { entry } = opts;\n    if (entry.keys && Object.keys(entry.keys).length > 0) {\n      return true;\n    }\n    return typeof entry.prefix === 'string' && entry.prefix.length > 0;\n  }\n\n  async wireSecretRotatables(): Promise<void> {\n    const logger = this.logger.for(this.wireSecretRotatables.name);\n    const provider = this.secretsProvider;\n    const registration = this.secretsRegistration;\n    if (!provider || !registration?.lease?.length) {\n      return;\n    }\n    for (const entry of registration.lease) {\n      const instance = this.get<ISecretRotatable>({ key: entry.key, isOptional: true });\n      if (instance && typeof instance.onSecretRotated === 'function') {\n        provider.registerRotatable({ key: entry.key, target: instance });\n        logger.info('Wired rotatable | key: %s', entry.key);\n        continue;\n      }\n      logger.debug('Lease key has no rotatable consumer | key: %s', entry.key);\n    }\n  }\n\n  static(opts: { restPath?: string; folderPath: string }) {\n    const { restPath = '*', folderPath } = opts;\n    const server = this.getServer();\n\n    server.use(restPath, serveStatic({ root: folderPath }));\n\n    this.logger\n      .for(this.static.name)\n      .debug(\n        'Registered static files | runtime: %s | path: %s | folder: %s',\n        this.runtime,\n        restPath,\n        folderPath,\n      );\n    return this;\n  }\n\n  /**\n   * Every value is read HERE, not destructured at module load: an application that loads its\n   * `.env` in its own entrypoint does so after this module is imported, and a module-load snapshot\n   * would print the defaults for a host that configured everything correctly.\n   */\n  protected printStartUpInfo(opts: { scope: string }) {\n    const { scope } = opts;\n    const read = (key: string, fallback: string): string =>\n      blankToUndefined(process.env[key]) ?? fallback;\n    const divider = '------------------------------------------------------------------------';\n\n    this.logger.for(scope).info(divider);\n    this.logger\n      .for(scope)\n      .info(\n        'Starting application... | Name: %s | Env: %s | Runtime: %s',\n        read(EnvironmentKeys.APP_ENV_APPLICATION_NAME, 'PNT'),\n        Environment.ambient,\n        this.runtime,\n      );\n    this.logger\n      .for(scope)\n      .info(\n        'AllowEmptyEnv: %s | Prefix: %s',\n        read('ALLOW_EMPTY_ENV_VALUE', 'true'),\n        read('APPLICATION_ENV_PREFIX', 'APP_ENV'),\n      );\n    this.logger.for(scope).info('RunMode: %s', process.env.RUN_MODE);\n    this.logger\n      .for(scope)\n      .info('Timezone: %s', read(EnvironmentKeys.APP_ENV_APPLICATION_TIMEZONE, 'Asia/Ho_Chi_Minh'));\n    this.logger\n      .for(scope)\n      .info('LogPath: %s', read(EnvironmentKeys.APP_ENV_LOGGER_FOLDER_PATH, './'));\n    this.logger.for(scope).info(divider);\n  }\n\n  /** Swaps in the `ErrorPrettier`-backed formatter - `node:util`, so the kernel cannot build it. */\n  protected override buildErrorMiddleware(): AppErrorMiddleware {\n    return new AppErrorMiddleware({\n      logger: this.logger,\n      rootKey: this.configs.error?.rootKey ?? undefined,\n    });\n  }\n\n  /** Adds what only a listening server has, on top of the kernel's three - which stay in `RestApplication` so a browser Worker answers with the same envelope. */\n  protected override async registerDefaultMiddlewares() {\n    await executeWithPerformanceMeasure({\n      logger: this.logger,\n      scope: this.registerDefaultMiddlewares.name,\n      description: 'Register default application server handler',\n      task: async () => {\n        const server = this.getServer();\n\n        await super.registerDefaultMiddlewares();\n\n        // Always installed, not only under `asyncContext.enable`: `tryGetContext()` answers \"no context\"\n        // without a store, and a `contextStorage()` the application registered itself stays visible to\n        // the enrichers. Inside a method body because every package declares `sideEffects: false`.\n        RequestContextRegistry.setResolver({ resolver: () => tryGetContext() });\n\n        if (this.configs.asyncContext?.enable) {\n          server.use(contextStorage());\n        }\n\n        // Request-body parsing and the access log; the request id it reads is already installed\n        // above (also works around the Bun + Hono body-parsing bug: https://github.com/honojs/middleware/issues/81).\n        this.component(RequestTrackerComponent);\n\n        server.use(emojiFavicon({ icon: this.configs.favicon ?? '🔥' }));\n      },\n    });\n  }\n\n  /** Lives here rather than on `AbstractApplication` - `applicationEnvironment` reads `process.env` at module load, so a kernel-pure ancestor cannot carry it; this is the layer that already depends on it. */\n  protected validateEnvs() {\n    const t = performance.now();\n    const envKeys = applicationEnvironment.keys();\n\n    // Permissive by DEFAULT: a name a host leaves empty is the host's business, and an empty value\n    // already falls back to `defaultValue` at read time, so refusing to boot over one fights the\n    // reader rather than helping it. Set ALLOW_EMPTY_ENV_VALUE to `false` or `0` to turn the check\n    // on. Read once rather than per key, and a blank value reads as unset - the same rule every\n    // other env read follows.\n    const configured = blankToUndefined(process.env.ALLOW_EMPTY_ENV_VALUE);\n    const allowsEmpty = configured === undefined || toBoolean(configured);\n\n    this.logger\n      .for(this.initialize.name)\n      .info(\n        'Envs: %s | START Validating application environments | Empty values: %s',\n        envKeys.length,\n        allowsEmpty ? 'ALLOWED (default)' : 'REJECTED',\n      );\n\n    if (allowsEmpty) {\n      this.logger\n        .for(this.validateEnvs.name)\n        .info(\n          'Envs: %s | SKIPPED - set ALLOW_EMPTY_ENV_VALUE=false to reject empty values',\n          envKeys.length,\n        );\n      return;\n    }\n\n    for (const argKey of envKeys) {\n      const argValue = applicationEnvironment.get<string | number>(argKey);\n\n      if (!isEmpty({ value: argValue })) {\n        continue;\n      }\n\n      throw getError({\n        message: `[validateEnvs] Invalid Application Environment! Key: ${argKey} | Value: ${argValue}`,\n      });\n    }\n\n    this.logger\n      .for(this.validateEnvs.name)\n      .info(\n        'Envs: %s | DONE Validating application environments | Took: %s (ms)',\n        envKeys.length,\n        performance.now() - t,\n      );\n  }\n\n  /**\n   * Version tripwire, body identical to `RestApplication.initialize()`: a stale kernel without\n   * `getBootSequence()`/`runBootSequence()` throws here before any socket binds.\n   */\n  override async initialize(): Promise<void> {\n    await this.runBootSequence({ steps: this.getBootSequence() });\n  }\n\n  protected override getBootSequence(): IBootSequenceStep[] {\n    const steps: IBootSequenceStep[] = [\n      {\n        name: ServerBootSteps.PRINT_START_UP_INFO,\n        run: () => this.printStartUpInfo({ scope: this.initialize.name }),\n      },\n      { name: ServerBootSteps.VALIDATE_ENVS, run: () => this.validateEnvs() },\n      {\n        name: ServerBootSteps.REGISTER_DEFAULT_MIDDLEWARES,\n        run: () => this.registerDefaultMiddlewares(),\n      },\n      ...super.getBootSequence(),\n    ];\n\n    const withHydrate = BootSequence.insertAfter({\n      steps,\n      target: ServerBootSteps.PRE_CONFIGURE,\n      step: { name: ServerBootSteps.HYDRATE_SECRETS, run: () => this.hydrateSecrets() },\n    });\n\n    // Components can contribute datasources, so wire rotatables only after the contributed sweep -\n    // a lease key pointing at a component-contributed datasource would otherwise resolve to nothing.\n    const withRotatables = BootSequence.insertAfter({\n      steps: withHydrate,\n      target: ServerBootSteps.REGISTER_CONTRIBUTED_DATA_SOURCES,\n      step: {\n        name: ServerBootSteps.WIRE_SECRET_ROTATABLES,\n        run: () => this.wireSecretRotatables(),\n      },\n    });\n\n    return [\n      ...withRotatables,\n      // Last, so a model registered by a component is covered too.\n      {\n        name: ServerBootSteps.VALIDATE_SCOPE_FILTER_SUPPORT,\n        run: () => this.validateScopeFilterSupport(),\n      },\n    ];\n  }\n\n  /**\n   * Refuses to start when a model's `settings.access` cannot take effect. Both failures are\n   * silent at runtime and opposite: a search-backed model returns too many rows, a context-less one none.\n   */\n  protected validateScopeFilterSupport(): void {\n    assertScopeFilterSupported({ asyncContextEnabled: this.configs.asyncContext?.enable ?? false });\n  }\n}\n"]}

package/dist/esm/base/controllers/grpc/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../../src/base/controllers/grpc/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAOzE,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAGnE,OAAO,KAAK,EAAE,GAAG,EAA4B,MAAM,EAAE,MAAM,MAAM,CAAC;AAGlE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAoB,MAAM,gBAAgB,CAAC;AAUjG,ySAAyS;AACzS,qBAAa,kBAAkB,CAC7B,QAAQ,SAAS,GAAG,GAAG,GAAG,EAC1B,WAAW,SAAS,MAAM,GAAG,EAAE,EAC/B,QAAQ,SAAS,MAAM,GAAG,GAAG,EAC7B,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACrD,mBAAmB,SAAS,MAAM,GAAG,EAAE,CACvC,SAAQ,UAAU;IAClB,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,QAAQ,CAGd;IAEF,OAAO,CAAC,UAAU,CAMhB;IACF,OAAO,CAAC,YAAY,CAAC,CAAY;IAEjC,OAAO;IAmBP;;;OAGG;mBACkB,UAAU;IAW/B,gGAAgG;IAChG,OAAO,CAAC,oBAAoB;IA8B5B,yHAAyH;IACzH,OAAO,CAAC,eAAe;IAQvB,oFAAoF;IACpF,OAAO,CAAC,eAAe;IA8DvB,4EAA4E;WAC/D,KAAK,CAChB,QAAQ,SAAS,GAAG,GAAG,GAAG,EAC1B,WAAW,SAAS,MAAM,GAAG,EAAE,EAC/B,QAAQ,SAAS,MAAM,GAAG,GAAG,EAC7B,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACrD,mBAAmB,SAAS,MAAM,GAAG,EAAE,EACvC,IAAI,EAAE;QACN,UAAU,EAAE,sBAAsB,CAChC,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,WAAW,EACX,mBAAmB,CACpB,CAAC;QACF,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,EAAE,iBAAiB,CAAC;KAC5B,GAAG,OAAO,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;CAmDvD"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../../src/base/controllers/grpc/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAOzE,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAGnE,OAAO,KAAK,EAAE,GAAG,EAA4B,MAAM,EAAE,MAAM,MAAM,CAAC;AAGlE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAoB,MAAM,gBAAgB,CAAC;AAUjG,ySAAyS;AACzS,qBAAa,kBAAkB,CAC7B,QAAQ,SAAS,GAAG,GAAG,GAAG,EAC1B,WAAW,SAAS,MAAM,GAAG,EAAE,EAC/B,QAAQ,SAAS,MAAM,GAAG,GAAG,EAC7B,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACrD,mBAAmB,SAAS,MAAM,GAAG,EAAE,CACvC,SAAQ,UAAU;IAClB,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,QAAQ,CAGd;IAEF,OAAO,CAAC,UAAU,CAMhB;IACF,OAAO,CAAC,YAAY,CAAC,CAAY;IAEjC,OAAO;IAmBP;;;OAGG;mBACkB,UAAU;IAW/B,gGAAgG;IAChG,OAAO,CAAC,oBAAoB;IA8B5B,yHAAyH;IACzH,OAAO,CAAC,eAAe;IAQvB,oFAAoF;IACpF,OAAO,CAAC,eAAe;IA8DvB,4EAA4E;WAC/D,KAAK,CAChB,QAAQ,SAAS,GAAG,GAAG,GAAG,EAC1B,WAAW,SAAS,MAAM,GAAG,EAAE,EAC/B,QAAQ,SAAS,MAAM,GAAG,GAAG,EAC7B,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACrD,mBAAmB,SAAS,MAAM,GAAG,EAAE,EACvC,IAAI,EAAE;QACN,UAAU,EAAE,sBAAsB,CAChC,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,WAAW,EACX,mBAAmB,CACpB,CAAC;QACF,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,EAAE,iBAAiB,CAAC;KAC5B,GAAG,OAAO,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;CAuDvD"}

package/dist/esm/base/controllers/grpc/adapter.js

@@ -104,7 +104,11 @@ export class GrpcRequestAdapter extends BaseHelper {
     }
     /** Validates peer deps, creates adapter, and returns paths + middleware. */
     static async build(opts) {
-        const module = opts.module ?? (await GrpcRequestAdapter.loadModule());
+        let module = opts.module;
+        if (!module) {
+            const loaded = await GrpcRequestAdapter.loadModule();
+            module = loaded;
+        }
         const adapter = new GrpcRequestAdapter({ ...opts, module });
         const routerOpts = {};
         if (adapter.interceptors?.length) {

package/dist/esm/base/controllers/grpc/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../../../src/base/controllers/grpc/adapter.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKrD,MAAM,mBAAmB,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpD,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAOnE,ySAAyS;AACzS,MAAM,OAAO,kBAMX,SAAQ,UAAU;IAgBlB,YAAoB,IAUnB;QACC,KAAK,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,UAAU;QAC7B,aAAa,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,aAAa,CAAC,IAAI,CAA+B,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,aAAa,CAAC,IAAI,CAAgC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;SAC3F,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gGAAgG;IACxF,oBAAoB,CAAC,IAG5B;QACC,MAAM,QAAQ,GAAoC,EAAE,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAExD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,OAAgB,EAAE,eAA+B,EAAE,EAAE;gBAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,sDAAsD,IAAI,GAAG;qBACvE,CAAC,CAAC;gBACL,CAAC;gBAED,uFAAuF;gBACvF,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAED,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yHAAyH;IACjH,eAAe,CAAC,IAGvB;QACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,CAAC,OAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,IAIvB;QACC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACrD,MAAM,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE1F,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAEhC,8JAA8J;YAC9J,IAAI,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,oLAAoL;YACpL,OAAO,OAAO,CAAC,GAAG,CAAC,OAAkC,EAAE,KAAK,IAAI,EAAE;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC7C,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;wBAChD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;wBAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;wBAChC,IAAI,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC7C,CAAC,CAAC;oBAEH,MAAM,IAAI,GAAG,+BAA+B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;oBACjC,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;oBAE/E,yFAAyF;oBACzF,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,MAAM,IAAI,KAAK;wBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAEhC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;wBACrD,MAAM,EACJ,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBAC/C,OAAO,EAAE;4BACP,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB;4BAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;4BACxC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC;yBACzD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,KAAK,CAAC,KAAK,CAMhB,IAUD;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAMpC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvB,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YACjC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAE9D,wFAAwF;QACxF,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAA2B,CAAC;QAEjE,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,eAAe,CAAC;gBACtB,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC;oBACrC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;oBAC3C,OAAO;iBACR,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QAED,OAAO;YACL,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC;gBAClC,UAAU;gBACV,cAAc,EAAE;oBACd,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,UAAU,CAAC,IAAI;iBACxB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACV,OAAO;aACR,CAAC;SACH,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { ConnectRouter, HandlerContext } from '@connectrpc/connect';\nimport type {\n  UniversalHandler,\n  UniversalServerRequest,\n  UniversalServerResponse,\n} from '@connectrpc/connect/protocol';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { GRPC, HTTP } from '@venizia/ignis-helpers/common';\nimport { ModuleUtility } from '@venizia/ignis-helpers';\nimport type { Env, Input, MiddlewareHandler, Schema } from 'hono';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport type { TRouteContext } from '@venizia/ignis-kernel';\nimport type { AbstractGrpcController } from './abstract';\nimport type { IConnectAdapterResult, IConnectRpcModule, IRpcRegistration } from './common/types';\n\nconst CONNECT_RPC_MODULES = ['@connectrpc/connect'];\nconst CONNECT_RPC_PROTOCOL_MODULE = '@connectrpc/connect/protocol';\n\ntype TConnectHandler<RequestType = unknown, ResponseType = unknown> = (\n  request: RequestType,\n  context: HandlerContext,\n) => ValueOrPromise<ResponseType>;\n\n/** Bridges IGNIS gRPC controllers with ConnectRPC: loads the peer deps with `ModuleUtility.load` (the ES module copy an application's own import gets), wraps handlers into ConnectRPC's signature, dispatches through a Hono middleware, and isolates request-scoped context with AsyncLocalStorage. */\nexport class GrpcRequestAdapter<\n  RouteEnv extends Env = Env,\n  RouteSchema extends Schema = {},\n  BasePath extends string = '/',\n  ServiceType = Parameters<ConnectRouter['service']>[0],\n  ConfigurableOptions extends object = {},\n> extends BaseHelper {\n  private createConnectRouter: (opts?: Record<string, unknown>) => ConnectRouter;\n  private protocol: {\n    universalServerRequestFromFetch: (req: Request, ctx: object) => UniversalServerRequest;\n    universalServerResponseToFetch: (res: UniversalServerResponse) => Response;\n  };\n\n  private controller: AbstractGrpcController<\n    RouteEnv,\n    RouteSchema,\n    BasePath,\n    ServiceType,\n    ConfigurableOptions\n  >;\n  private interceptors?: unknown[];\n\n  private constructor(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module: IConnectRpcModule;\n  }) {\n    super({ scope: GrpcRequestAdapter.name });\n\n    this.controller = opts.controller;\n    this.interceptors = opts.interceptors;\n    this.createConnectRouter = opts.module.connect.createConnectRouter;\n    this.protocol = opts.module.protocol;\n  }\n\n  /**\n   * The ConnectRPC peers, loaded as ES modules from the project root (or taken from `ModuleUtility.register`,\n   * which is what a compiled binary has). A missing peer rejects with the error that names what to install.\n   */\n  private static async loadModule(): Promise<IConnectRpcModule> {\n    ModuleUtility.assertInstalled({ modules: CONNECT_RPC_MODULES, allowRegistered: true });\n\n    const [connect, protocol] = await Promise.all([\n      ModuleUtility.load<IConnectRpcModule['connect']>({ module: CONNECT_RPC_MODULES[0] }),\n      ModuleUtility.load<IConnectRpcModule['protocol']>({ module: CONNECT_RPC_PROTOCOL_MODULE }),\n    ]);\n\n    return { connect, protocol };\n  }\n\n  /** Wraps IGNIS RPC registrations into ConnectRPC's (request, context) => response signature. */\n  private buildConnectHandlers(opts: {\n    definitions: Record<string, IRpcRegistration<RouteEnv>>;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): Record<string, TConnectHandler> {\n    const handlers: Record<string, TConnectHandler> = {};\n\n    for (const name in opts.definitions) {\n      const { handler, middlewares } = opts.definitions[name];\n\n      handlers[name] = async (request: unknown, _connectContext: HandlerContext) => {\n        const context = opts.storage.getStore();\n        if (!context) {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `[GrpcRequestAdapter] Missing Hono context for RPC \"${name}\"`,\n          });\n        }\n\n        // Run pre-built auth middlewares (built by AbstractGrpcController.buildRpcMiddlewares)\n        for (const mw of middlewares) {\n          await mw(context, async () => {});\n        }\n\n        return handler({ request, context });\n      };\n    }\n\n    return handlers;\n  }\n\n  /** Loose signature on purpose - the IGNIS `ServiceType` is opaque (`unknown`) while ConnectRPC expects `DescService`. */\n  private registerService(opts: {\n    router: ConnectRouter;\n    handlers: Record<string, TConnectHandler>;\n  }) {\n    const { router, handlers } = opts;\n    (router.service as Function)(this.controller.service, handlers);\n  }\n\n  /** Creates the Hono middleware that dispatches to ConnectRPC universal handlers. */\n  private buildMiddleware(opts: {\n    handlerMap: Map<string, UniversalHandler>;\n    controllerPath: string;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): MiddlewareHandler<RouteEnv, BasePath, Input> {\n    const { handlerMap, controllerPath, storage } = opts;\n    const { universalServerRequestFromFetch, universalServerResponseToFetch } = this.protocol;\n\n    return async (context, next) => {\n      let pathname = context.req.path;\n\n      // context.req.path is the full original URL path, so strip the basePath + controllerPath prefix to get the ConnectRPC handler path (/package.Service/Method).\n      if (controllerPath && pathname.startsWith(controllerPath)) {\n        pathname = pathname.slice(controllerPath.length) || '/';\n      }\n\n      const handler = handlerMap.get(pathname);\n      if (!handler) {\n        return next();\n      }\n\n      // `context` is Hono's real Context<RouteEnv>; TRouteContext is a lightweight custom shape (different `json`/`req.valid` signatures) built on it, not a subtype - hence this bridge.\n      return storage.run(context as TRouteContext<RouteEnv>, async () => {\n        try {\n          const body = await context.req.arrayBuffer();\n          const freshRequest = new Request(context.req.url, {\n            method: context.req.method,\n            headers: context.req.raw.headers,\n            body: body.byteLength > 0 ? body : undefined,\n          });\n\n          const uReq = universalServerRequestFromFetch(freshRequest, {});\n          const uRes = await handler(uReq);\n          return universalServerResponseToFetch(uRes);\n        } catch (error) {\n          const message = error instanceof Error ? error.message : 'Internal gRPC error';\n\n          // Preserve gRPC status code from ConnectError (duck-type check avoids peer dep coupling)\n          const code =\n            typeof error === 'object' &&\n            error !== null &&\n            'code' in error &&\n            typeof error.code === 'number'\n              ? error.code\n              : GRPC.ResultCodes.INTERNAL;\n\n          return new Response(JSON.stringify({ message, code }), {\n            status:\n              code === GRPC.ResultCodes.OK\n                ? HTTP.ResultCodes.RS_2.Ok\n                : HTTP.ResultCodes.RS_5.InternalServerError,\n            headers: {\n              [HTTP.Headers.CONTENT_TYPE]: HTTP.HeaderValues.APPLICATION_JSON,\n              [GRPC.Headers.GRPC_STATUS]: String(code),\n              [GRPC.Headers.GRPC_MESSAGE]: encodeURIComponent(message),\n            },\n          });\n        }\n      });\n    };\n  }\n\n  /** Validates peer deps, creates adapter, and returns paths + middleware. */\n  static async build<\n    RouteEnv extends Env = Env,\n    RouteSchema extends Schema = {},\n    BasePath extends string = '/',\n    ServiceType = Parameters<ConnectRouter['service']>[0],\n    ConfigurableOptions extends object = {},\n  >(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module?: IConnectRpcModule;\n  }): Promise<IConnectAdapterResult<RouteEnv, BasePath>> {\n    const module = opts.module ?? (await GrpcRequestAdapter.loadModule());\n\n    const adapter = new GrpcRequestAdapter<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >({ ...opts, module });\n\n    const routerOpts: Record<string, unknown> = {};\n    if (adapter.interceptors?.length) {\n      routerOpts.interceptors = adapter.interceptors;\n    }\n\n    const connectRouter = adapter.createConnectRouter(routerOpts);\n\n    // Per-controller async storage - each concurrent request gets its own isolated context.\n    const storage = new AsyncLocalStorage<TRouteContext<RouteEnv>>();\n\n    if (adapter.controller.service) {\n      adapter.registerService({\n        router: connectRouter,\n        handlers: adapter.buildConnectHandlers({\n          definitions: adapter.controller.definitions,\n          storage,\n        }),\n      });\n    }\n\n    const handlerMap = new Map<string, UniversalHandler>();\n    const paths: string[] = [];\n\n    for (const handler of connectRouter.handlers) {\n      handlerMap.set(handler.requestPath, handler);\n      paths.push(handler.requestPath);\n    }\n\n    return {\n      paths,\n      middleware: adapter.buildMiddleware({\n        handlerMap,\n        controllerPath: [\n          adapter.controller.basePath.replace(/\\/$/, ''),\n          adapter.controller.path,\n        ].join(''),\n        storage,\n      }),\n    };\n  }\n}\n"]}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../../../src/base/controllers/grpc/adapter.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKrD,MAAM,mBAAmB,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpD,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAOnE,ySAAyS;AACzS,MAAM,OAAO,kBAMX,SAAQ,UAAU;IAgBlB,YAAoB,IAUnB;QACC,KAAK,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,UAAU;QAC7B,aAAa,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,aAAa,CAAC,IAAI,CAA+B,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,aAAa,CAAC,IAAI,CAAgC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;SAC3F,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gGAAgG;IACxF,oBAAoB,CAAC,IAG5B;QACC,MAAM,QAAQ,GAAoC,EAAE,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAExD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,OAAgB,EAAE,eAA+B,EAAE,EAAE;gBAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,sDAAsD,IAAI,GAAG;qBACvE,CAAC,CAAC;gBACL,CAAC;gBAED,uFAAuF;gBACvF,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAED,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yHAAyH;IACjH,eAAe,CAAC,IAGvB;QACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,CAAC,OAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,IAIvB;QACC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACrD,MAAM,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE1F,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAEhC,8JAA8J;YAC9J,IAAI,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,oLAAoL;YACpL,OAAO,OAAO,CAAC,GAAG,CAAC,OAAkC,EAAE,KAAK,IAAI,EAAE;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC7C,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;wBAChD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;wBAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;wBAChC,IAAI,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC7C,CAAC,CAAC;oBAEH,MAAM,IAAI,GAAG,+BAA+B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;oBACjC,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;oBAE/E,yFAAyF;oBACzF,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,MAAM,IAAI,KAAK;wBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAEhC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;wBACrD,MAAM,EACJ,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBAC/C,OAAO,EAAE;4BACP,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB;4BAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;4BACxC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC;yBACzD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,KAAK,CAAC,KAAK,CAMhB,IAUD;QACC,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC;YACrD,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAMpC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvB,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YACjC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAE9D,wFAAwF;QACxF,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAA2B,CAAC;QAEjE,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,eAAe,CAAC;gBACtB,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC;oBACrC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;oBAC3C,OAAO;iBACR,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QAED,OAAO;YACL,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC;gBAClC,UAAU;gBACV,cAAc,EAAE;oBACd,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,UAAU,CAAC,IAAI;iBACxB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACV,OAAO;aACR,CAAC;SACH,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { ConnectRouter, HandlerContext } from '@connectrpc/connect';\nimport type {\n  UniversalHandler,\n  UniversalServerRequest,\n  UniversalServerResponse,\n} from '@connectrpc/connect/protocol';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { GRPC, HTTP } from '@venizia/ignis-helpers/common';\nimport { ModuleUtility } from '@venizia/ignis-helpers';\nimport type { Env, Input, MiddlewareHandler, Schema } from 'hono';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport type { TRouteContext } from '@venizia/ignis-kernel';\nimport type { AbstractGrpcController } from './abstract';\nimport type { IConnectAdapterResult, IConnectRpcModule, IRpcRegistration } from './common/types';\n\nconst CONNECT_RPC_MODULES = ['@connectrpc/connect'];\nconst CONNECT_RPC_PROTOCOL_MODULE = '@connectrpc/connect/protocol';\n\ntype TConnectHandler<RequestType = unknown, ResponseType = unknown> = (\n  request: RequestType,\n  context: HandlerContext,\n) => ValueOrPromise<ResponseType>;\n\n/** Bridges IGNIS gRPC controllers with ConnectRPC: loads the peer deps with `ModuleUtility.load` (the ES module copy an application's own import gets), wraps handlers into ConnectRPC's signature, dispatches through a Hono middleware, and isolates request-scoped context with AsyncLocalStorage. */\nexport class GrpcRequestAdapter<\n  RouteEnv extends Env = Env,\n  RouteSchema extends Schema = {},\n  BasePath extends string = '/',\n  ServiceType = Parameters<ConnectRouter['service']>[0],\n  ConfigurableOptions extends object = {},\n> extends BaseHelper {\n  private createConnectRouter: (opts?: Record<string, unknown>) => ConnectRouter;\n  private protocol: {\n    universalServerRequestFromFetch: (req: Request, ctx: object) => UniversalServerRequest;\n    universalServerResponseToFetch: (res: UniversalServerResponse) => Response;\n  };\n\n  private controller: AbstractGrpcController<\n    RouteEnv,\n    RouteSchema,\n    BasePath,\n    ServiceType,\n    ConfigurableOptions\n  >;\n  private interceptors?: unknown[];\n\n  private constructor(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module: IConnectRpcModule;\n  }) {\n    super({ scope: GrpcRequestAdapter.name });\n\n    this.controller = opts.controller;\n    this.interceptors = opts.interceptors;\n    this.createConnectRouter = opts.module.connect.createConnectRouter;\n    this.protocol = opts.module.protocol;\n  }\n\n  /**\n   * The ConnectRPC peers, loaded as ES modules from the project root (or taken from `ModuleUtility.register`,\n   * which is what a compiled binary has). A missing peer rejects with the error that names what to install.\n   */\n  private static async loadModule(): Promise<IConnectRpcModule> {\n    ModuleUtility.assertInstalled({ modules: CONNECT_RPC_MODULES, allowRegistered: true });\n\n    const [connect, protocol] = await Promise.all([\n      ModuleUtility.load<IConnectRpcModule['connect']>({ module: CONNECT_RPC_MODULES[0] }),\n      ModuleUtility.load<IConnectRpcModule['protocol']>({ module: CONNECT_RPC_PROTOCOL_MODULE }),\n    ]);\n\n    return { connect, protocol };\n  }\n\n  /** Wraps IGNIS RPC registrations into ConnectRPC's (request, context) => response signature. */\n  private buildConnectHandlers(opts: {\n    definitions: Record<string, IRpcRegistration<RouteEnv>>;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): Record<string, TConnectHandler> {\n    const handlers: Record<string, TConnectHandler> = {};\n\n    for (const name in opts.definitions) {\n      const { handler, middlewares } = opts.definitions[name];\n\n      handlers[name] = async (request: unknown, _connectContext: HandlerContext) => {\n        const context = opts.storage.getStore();\n        if (!context) {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `[GrpcRequestAdapter] Missing Hono context for RPC \"${name}\"`,\n          });\n        }\n\n        // Run pre-built auth middlewares (built by AbstractGrpcController.buildRpcMiddlewares)\n        for (const mw of middlewares) {\n          await mw(context, async () => {});\n        }\n\n        return handler({ request, context });\n      };\n    }\n\n    return handlers;\n  }\n\n  /** Loose signature on purpose - the IGNIS `ServiceType` is opaque (`unknown`) while ConnectRPC expects `DescService`. */\n  private registerService(opts: {\n    router: ConnectRouter;\n    handlers: Record<string, TConnectHandler>;\n  }) {\n    const { router, handlers } = opts;\n    (router.service as Function)(this.controller.service, handlers);\n  }\n\n  /** Creates the Hono middleware that dispatches to ConnectRPC universal handlers. */\n  private buildMiddleware(opts: {\n    handlerMap: Map<string, UniversalHandler>;\n    controllerPath: string;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): MiddlewareHandler<RouteEnv, BasePath, Input> {\n    const { handlerMap, controllerPath, storage } = opts;\n    const { universalServerRequestFromFetch, universalServerResponseToFetch } = this.protocol;\n\n    return async (context, next) => {\n      let pathname = context.req.path;\n\n      // context.req.path is the full original URL path, so strip the basePath + controllerPath prefix to get the ConnectRPC handler path (/package.Service/Method).\n      if (controllerPath && pathname.startsWith(controllerPath)) {\n        pathname = pathname.slice(controllerPath.length) || '/';\n      }\n\n      const handler = handlerMap.get(pathname);\n      if (!handler) {\n        return next();\n      }\n\n      // `context` is Hono's real Context<RouteEnv>; TRouteContext is a lightweight custom shape (different `json`/`req.valid` signatures) built on it, not a subtype - hence this bridge.\n      return storage.run(context as TRouteContext<RouteEnv>, async () => {\n        try {\n          const body = await context.req.arrayBuffer();\n          const freshRequest = new Request(context.req.url, {\n            method: context.req.method,\n            headers: context.req.raw.headers,\n            body: body.byteLength > 0 ? body : undefined,\n          });\n\n          const uReq = universalServerRequestFromFetch(freshRequest, {});\n          const uRes = await handler(uReq);\n          return universalServerResponseToFetch(uRes);\n        } catch (error) {\n          const message = error instanceof Error ? error.message : 'Internal gRPC error';\n\n          // Preserve gRPC status code from ConnectError (duck-type check avoids peer dep coupling)\n          const code =\n            typeof error === 'object' &&\n            error !== null &&\n            'code' in error &&\n            typeof error.code === 'number'\n              ? error.code\n              : GRPC.ResultCodes.INTERNAL;\n\n          return new Response(JSON.stringify({ message, code }), {\n            status:\n              code === GRPC.ResultCodes.OK\n                ? HTTP.ResultCodes.RS_2.Ok\n                : HTTP.ResultCodes.RS_5.InternalServerError,\n            headers: {\n              [HTTP.Headers.CONTENT_TYPE]: HTTP.HeaderValues.APPLICATION_JSON,\n              [GRPC.Headers.GRPC_STATUS]: String(code),\n              [GRPC.Headers.GRPC_MESSAGE]: encodeURIComponent(message),\n            },\n          });\n        }\n      });\n    };\n  }\n\n  /** Validates peer deps, creates adapter, and returns paths + middleware. */\n  static async build<\n    RouteEnv extends Env = Env,\n    RouteSchema extends Schema = {},\n    BasePath extends string = '/',\n    ServiceType = Parameters<ConnectRouter['service']>[0],\n    ConfigurableOptions extends object = {},\n  >(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module?: IConnectRpcModule;\n  }): Promise<IConnectAdapterResult<RouteEnv, BasePath>> {\n    let module = opts.module;\n    if (!module) {\n      const loaded = await GrpcRequestAdapter.loadModule();\n      module = loaded;\n    }\n\n    const adapter = new GrpcRequestAdapter<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >({ ...opts, module });\n\n    const routerOpts: Record<string, unknown> = {};\n    if (adapter.interceptors?.length) {\n      routerOpts.interceptors = adapter.interceptors;\n    }\n\n    const connectRouter = adapter.createConnectRouter(routerOpts);\n\n    // Per-controller async storage - each concurrent request gets its own isolated context.\n    const storage = new AsyncLocalStorage<TRouteContext<RouteEnv>>();\n\n    if (adapter.controller.service) {\n      adapter.registerService({\n        router: connectRouter,\n        handlers: adapter.buildConnectHandlers({\n          definitions: adapter.controller.definitions,\n          storage,\n        }),\n      });\n    }\n\n    const handlerMap = new Map<string, UniversalHandler>();\n    const paths: string[] = [];\n\n    for (const handler of connectRouter.handlers) {\n      handlerMap.set(handler.requestPath, handler);\n      paths.push(handler.requestPath);\n    }\n\n    return {\n      paths,\n      middleware: adapter.buildMiddleware({\n        handlerMap,\n        controllerPath: [\n          adapter.controller.basePath.replace(/\\/$/, ''),\n          adapter.controller.path,\n        ].join(''),\n        storage,\n      }),\n    };\n  }\n}\n"]}

package/dist/esm/base/middlewares/request-spy/request-spy.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-spy.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAA8B,MAAM,6BAA6B,CAAC;AAErF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAiC,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAIrF,mPAAmP;AACnP,qBAAa,oBAAqB,SAAQ,UAAW,YAAW,SAAS,CAAC,iBAAiB,CAAC;IAC1F,MAAM,CAAC,QAAQ,CAAC,cAAc,eAAkB;IAEhD,OAAO,CAAC,WAAW,CAAU;IAE7B;;;;;;;;;OASG;;IAOH,8PAA8P;IACxP,SAAS,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAiDjE,wEAAwE;IACxE,KAAK;CAyDN"}
+{"version":3,"file":"request-spy.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAA8B,MAAM,6BAA6B,CAAC;AAErF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAiC,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAIrF,mPAAmP;AACnP,qBAAa,oBAAqB,SAAQ,UAAW,YAAW,SAAS,CAAC,iBAAiB,CAAC;IAC1F,MAAM,CAAC,QAAQ,CAAC,cAAc,eAAkB;IAEhD,OAAO,CAAC,WAAW,CAAU;IAE7B;;;;;;;;;OASG;;IAOH,8PAA8P;IACxP,SAAS,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAsDjE,wEAAwE;IACxE,KAAK;CAyDN"}

package/dist/esm/base/middlewares/request-spy/request-spy.middleware.js

@@ -50,9 +50,15 @@ export class RequestSpyMiddleware extends BaseHelper {
             // Anything else is read, if at all, from a clone: a handler may stream `req.raw.body` on (an upload proxy), and reading the request itself would drain it and mangle binary bytes.
             // A body an earlier middleware read cannot be cloned; Hono's cache serves it instead.
             if (contentType.startsWith(TEXT_CONTENT_TYPE_PREFIX)) {
-                const rs = opts.req.raw.bodyUsed
-                    ? await opts.req.text()
-                    : await opts.req.raw.clone().text();
+                let rs;
+                if (opts.req.raw.bodyUsed) {
+                    const cached = await opts.req.text();
+                    rs = cached;
+                }
+                else {
+                    const cloned = await opts.req.raw.clone().text();
+                    rs = cloned;
+                }
                 return rs;
             }
             return `<${contentLength ?? 'unknown'} bytes, ${contentType}>`;

package/dist/esm/base/middlewares/request-spy/request-spy.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-spy.middleware.js","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAC;AAErF,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,mPAAmP;AACnP,MAAM,OAAO,oBAAqB,SAAQ,UAAU;aAClC,mBAAc,GAAG,cAAc,CAAC;IAIhD;;;;;;;;;OASG;IACH;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,8PAA8P;IAC9P,KAAK,CAAC,SAAS,CAAC,IAA8B;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yMAAyM;QACzM,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnE,IAAI,aAAa,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IACE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBAC3D,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,EACnE,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3B,CAAC;YAED,mLAAmL;YACnL,sFAAsF;YACtF,IAAI,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ;oBAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;oBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,IAAI,aAAa,IAAI,SAAS,WAAW,WAAW,GAAG,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,aAAa,CAAC,cAAc;gBACnC,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK;QACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;YAErF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;YAE7B,kMAAkM;YAClM,MAAM,QAAQ,GAAG,UAAU,IAAI,WAAW,IAAI,SAAS,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2CAA2C,EAC3C,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,EACL,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,4FAA4F;gBAC5F,yFAAyF;gBACzF,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACxF,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChC,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gCAAgC,EAChC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,CACN,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;YAEb,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,EACpC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,QAAQ,CACT,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC","sourcesContent":["import { NetworkUtility } from '@/utilities/network.utility';\nimport { Environment } from '@venizia/ignis-helpers';\nimport { BaseHelper, EnvironmentNames, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport { createMiddleware } from 'hono/factory';\nimport type { MiddlewareHandler } from 'hono/types';\nimport { REQUEST_ID_KEY, RequestErrors, type TContext } from '@venizia/ignis-kernel';\n\nconst TEXT_CONTENT_TYPE_PREFIX = 'text/';\n\n/** Logs incoming/outgoing request details. The BODY is parsed and logged only in a recognised development environment - see the constructor for why that test is fail-closed; elsewhere only a JSON body is parsed, for its malformed-body 400. */\nexport class RequestSpyMiddleware extends BaseHelper implements IProvider<MiddlewareHandler> {\n  static readonly REQUEST_ID_KEY = REQUEST_ID_KEY;\n\n  private isDebugMode: boolean;\n\n  /**\n   * Fail-CLOSED, matching {@link BaseAppErrorMiddleware.isProduction}: only an environment this\n   * framework recognises as a development one enables body logging.\n   *\n   * The previous test was `env !== 'production'`, which enabled it for an unset `NODE_ENV` and for\n   * every pre-production name that carries real user data - `staging`, `uat`, `alpha`, `beta`, and\n   * the abbreviation `prod`. `development-envs.test.ts` pins those as NOT development for exactly\n   * that reason. Redaction is no defence here: it masks secret-SHAPED keys, so `nationalId`,\n   * `cardNumber` and `ssn` were written verbatim.\n   */\n  constructor() {\n    super({ scope: 'SpyMW' });\n    const env = Environment.ambient?.toLowerCase();\n    this.isDebugMode = !!env && EnvironmentNames.DEVELOPMENT_ENVS.has(env);\n  }\n\n  /** Parses the body by Content-Type without draining it for the handler: JSON and form bodies go through the request cache, `text/*` is read from a clone (from the cache once something read it), and any other type is described by its size, never read. */\n  async parseBody(opts: { req: TContext['req'] }): Promise<unknown> {\n    const contentType = opts.req.header(HTTP.Headers.CONTENT_TYPE);\n\n    if (!contentType) {\n      return null;\n    }\n\n    // Only an explicit zero short-circuits: a CHUNKED request carries no Content-Length, so gating on the header's presence would skip every streamed body and let a malformed one detonate deeper as a 500.\n    const contentLength = opts.req.header(HTTP.Headers.CONTENT_LENGTH);\n    if (contentLength === '0' || !opts.req.raw.body) {\n      return null;\n    }\n\n    try {\n      if (contentType.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n        const rs = await opts.req.json();\n        return rs;\n      }\n\n      if (\n        contentType.includes(HTTP.HeaderValues.MULTIPART_FORM_DATA) ||\n        contentType.includes(HTTP.HeaderValues.APPLICATION_FORM_URLENCODED)\n      ) {\n        const rs = await opts.req.parseBody();\n        return rs;\n      }\n\n      if (contentType === HTTP.HeaderValues.APPLICATION_OCTET_STREAM) {\n        return opts.req.raw.body;\n      }\n\n      // Anything else is read, if at all, from a clone: a handler may stream `req.raw.body` on (an upload proxy), and reading the request itself would drain it and mangle binary bytes.\n      // A body an earlier middleware read cannot be cloned; Hono's cache serves it instead.\n      if (contentType.startsWith(TEXT_CONTENT_TYPE_PREFIX)) {\n        const rs = opts.req.raw.bodyUsed\n          ? await opts.req.text()\n          : await opts.req.raw.clone().text();\n        return rs;\n      }\n\n      return `<${contentLength ?? 'unknown'} bytes, ${contentType}>`;\n    } catch {\n      throw getError({\n        error: RequestErrors.BODY_MALFORMED,\n        message: 'Malformed Body Payload',\n      });\n    }\n  }\n\n  /** Returns a Hono middleware that logs request details and duration. */\n  value() {\n    return createMiddleware(async (context, next) => {\n      const t = performance.now();\n      const { req } = context;\n\n      const requestId = context.get(RequestSpyMiddleware.REQUEST_ID_KEY);\n      const incomingIp = NetworkUtility.getIncomingIp(context);\n      const forwardedIp = req.header('x-real-ip') ?? req.header('x-forwarded-for') ?? null;\n\n      const method = req.method;\n      const path = req.path ?? '/';\n\n      // Best-effort, never fatal: a unix socket, some proxies and any in-process call yield no connection info - refusing to serve because the client IP is unknown turns a logging gap into an outage.\n      const clientIp = incomingIp ?? forwardedIp ?? 'unknown';\n      const query = req.query() ?? {};\n\n      if (this.isDebugMode) {\n        const body = await this.parseBody({ req });\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j | body: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n          body,\n        );\n      } else {\n        // Only JSON is parsed here: its clean 400 on a malformed body is a contract. Any other body\n        // would be read for a log line that never prints it, before the route's own size checks.\n        if (req.header(HTTP.Headers.CONTENT_TYPE)?.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n          await this.parseBody({ req });\n        }\n\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n        );\n      }\n\n      await next();\n\n      const duration = (performance.now() - t).toFixed(2);\n      this.logger.info(\n        '[%s][%s][<=] %s %s | Took: %s (ms)',\n        requestId,\n        clientIp,\n        method.padEnd(8, ' '),\n        path,\n        duration,\n      );\n    });\n  }\n}\n"]}
+{"version":3,"file":"request-spy.middleware.js","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAC;AAErF,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,mPAAmP;AACnP,MAAM,OAAO,oBAAqB,SAAQ,UAAU;aAClC,mBAAc,GAAG,cAAc,CAAC;IAIhD;;;;;;;;;OASG;IACH;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,8PAA8P;IAC9P,KAAK,CAAC,SAAS,CAAC,IAA8B;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yMAAyM;QACzM,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnE,IAAI,aAAa,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IACE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBAC3D,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,EACnE,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3B,CAAC;YAED,mLAAmL;YACnL,sFAAsF;YACtF,IAAI,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACrD,IAAI,EAAU,CAAC;gBACf,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACrC,EAAE,GAAG,MAAM,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;oBACjD,EAAE,GAAG,MAAM,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,IAAI,aAAa,IAAI,SAAS,WAAW,WAAW,GAAG,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,aAAa,CAAC,cAAc;gBACnC,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK;QACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;YAErF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;YAE7B,kMAAkM;YAClM,MAAM,QAAQ,GAAG,UAAU,IAAI,WAAW,IAAI,SAAS,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2CAA2C,EAC3C,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,EACL,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,4FAA4F;gBAC5F,yFAAyF;gBACzF,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACxF,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChC,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gCAAgC,EAChC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,CACN,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;YAEb,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,EACpC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,QAAQ,CACT,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC","sourcesContent":["import { NetworkUtility } from '@/utilities/network.utility';\nimport { Environment } from '@venizia/ignis-helpers';\nimport { BaseHelper, EnvironmentNames, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport { createMiddleware } from 'hono/factory';\nimport type { MiddlewareHandler } from 'hono/types';\nimport { REQUEST_ID_KEY, RequestErrors, type TContext } from '@venizia/ignis-kernel';\n\nconst TEXT_CONTENT_TYPE_PREFIX = 'text/';\n\n/** Logs incoming/outgoing request details. The BODY is parsed and logged only in a recognised development environment - see the constructor for why that test is fail-closed; elsewhere only a JSON body is parsed, for its malformed-body 400. */\nexport class RequestSpyMiddleware extends BaseHelper implements IProvider<MiddlewareHandler> {\n  static readonly REQUEST_ID_KEY = REQUEST_ID_KEY;\n\n  private isDebugMode: boolean;\n\n  /**\n   * Fail-CLOSED, matching {@link BaseAppErrorMiddleware.isProduction}: only an environment this\n   * framework recognises as a development one enables body logging.\n   *\n   * The previous test was `env !== 'production'`, which enabled it for an unset `NODE_ENV` and for\n   * every pre-production name that carries real user data - `staging`, `uat`, `alpha`, `beta`, and\n   * the abbreviation `prod`. `development-envs.test.ts` pins those as NOT development for exactly\n   * that reason. Redaction is no defence here: it masks secret-SHAPED keys, so `nationalId`,\n   * `cardNumber` and `ssn` were written verbatim.\n   */\n  constructor() {\n    super({ scope: 'SpyMW' });\n    const env = Environment.ambient?.toLowerCase();\n    this.isDebugMode = !!env && EnvironmentNames.DEVELOPMENT_ENVS.has(env);\n  }\n\n  /** Parses the body by Content-Type without draining it for the handler: JSON and form bodies go through the request cache, `text/*` is read from a clone (from the cache once something read it), and any other type is described by its size, never read. */\n  async parseBody(opts: { req: TContext['req'] }): Promise<unknown> {\n    const contentType = opts.req.header(HTTP.Headers.CONTENT_TYPE);\n\n    if (!contentType) {\n      return null;\n    }\n\n    // Only an explicit zero short-circuits: a CHUNKED request carries no Content-Length, so gating on the header's presence would skip every streamed body and let a malformed one detonate deeper as a 500.\n    const contentLength = opts.req.header(HTTP.Headers.CONTENT_LENGTH);\n    if (contentLength === '0' || !opts.req.raw.body) {\n      return null;\n    }\n\n    try {\n      if (contentType.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n        const rs = await opts.req.json();\n        return rs;\n      }\n\n      if (\n        contentType.includes(HTTP.HeaderValues.MULTIPART_FORM_DATA) ||\n        contentType.includes(HTTP.HeaderValues.APPLICATION_FORM_URLENCODED)\n      ) {\n        const rs = await opts.req.parseBody();\n        return rs;\n      }\n\n      if (contentType === HTTP.HeaderValues.APPLICATION_OCTET_STREAM) {\n        return opts.req.raw.body;\n      }\n\n      // Anything else is read, if at all, from a clone: a handler may stream `req.raw.body` on (an upload proxy), and reading the request itself would drain it and mangle binary bytes.\n      // A body an earlier middleware read cannot be cloned; Hono's cache serves it instead.\n      if (contentType.startsWith(TEXT_CONTENT_TYPE_PREFIX)) {\n        let rs: string;\n        if (opts.req.raw.bodyUsed) {\n          const cached = await opts.req.text();\n          rs = cached;\n        } else {\n          const cloned = await opts.req.raw.clone().text();\n          rs = cloned;\n        }\n        return rs;\n      }\n\n      return `<${contentLength ?? 'unknown'} bytes, ${contentType}>`;\n    } catch {\n      throw getError({\n        error: RequestErrors.BODY_MALFORMED,\n        message: 'Malformed Body Payload',\n      });\n    }\n  }\n\n  /** Returns a Hono middleware that logs request details and duration. */\n  value() {\n    return createMiddleware(async (context, next) => {\n      const t = performance.now();\n      const { req } = context;\n\n      const requestId = context.get(RequestSpyMiddleware.REQUEST_ID_KEY);\n      const incomingIp = NetworkUtility.getIncomingIp(context);\n      const forwardedIp = req.header('x-real-ip') ?? req.header('x-forwarded-for') ?? null;\n\n      const method = req.method;\n      const path = req.path ?? '/';\n\n      // Best-effort, never fatal: a unix socket, some proxies and any in-process call yield no connection info - refusing to serve because the client IP is unknown turns a logging gap into an outage.\n      const clientIp = incomingIp ?? forwardedIp ?? 'unknown';\n      const query = req.query() ?? {};\n\n      if (this.isDebugMode) {\n        const body = await this.parseBody({ req });\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j | body: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n          body,\n        );\n      } else {\n        // Only JSON is parsed here: its clean 400 on a malformed body is a contract. Any other body\n        // would be read for a log line that never prints it, before the route's own size checks.\n        if (req.header(HTTP.Headers.CONTENT_TYPE)?.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n          await this.parseBody({ req });\n        }\n\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n        );\n      }\n\n      await next();\n\n      const duration = (performance.now() - t).toFixed(2);\n      this.logger.info(\n        '[%s][%s][<=] %s %s | Took: %s (ms)',\n        requestId,\n        clientIp,\n        method.padEnd(8, ' '),\n        path,\n        duration,\n      );\n    });\n  }\n}\n"]}

package/dist/esm/components/api-reference/ui/scalar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scalar.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,gBAAiB,SAAQ,UAAW,YAAW,WAAW;;IAK/D,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAoBxF"}
+{"version":3,"file":"scalar.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,gBAAiB,SAAQ,UAAW,YAAW,WAAW;;IAK/D,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAqBxF"}

package/dist/esm/components/api-reference/ui/scalar.js

@@ -6,7 +6,8 @@ export class ScalarUIProvider extends BaseHelper {
     async render(context, config, next) {
         let scalarModule;
         try {
-            scalarModule = await import('@scalar/hono-api-reference');
+            const result = await import('@scalar/hono-api-reference');
+            scalarModule = result;
         }
         catch (error) {
             this.logger

package/dist/esm/components/api-reference/ui/scalar.js.map

@@ -1 +1 @@
-{"version":3,"file":"scalar.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,YAAyD,CAAC;QAE9D,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;YAE3E,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,gHAAgH;aACnH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;QAChC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class ScalarUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: ScalarUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let scalarModule: typeof import('@scalar/hono-api-reference');\n\n    try {\n      scalarModule = await import('@scalar/hono-api-reference');\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@scalar/hono-api-reference' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[ScalarUIProvider][render] '@scalar/hono-api-reference' is required to render the Scalar UI. Please install it\",\n      });\n    }\n\n    const { Scalar } = scalarModule;\n    const { title, url, ...customConfig } = config;\n    return Scalar({ url, pageTitle: title, ...customConfig })(context, next);\n  }\n}\n"]}
+{"version":3,"file":"scalar.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,YAAyD,CAAC;QAE9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;YAC1D,YAAY,GAAG,MAAM,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;YAE3E,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,gHAAgH;aACnH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;QAChC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class ScalarUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: ScalarUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let scalarModule: typeof import('@scalar/hono-api-reference');\n\n    try {\n      const result = await import('@scalar/hono-api-reference');\n      scalarModule = result;\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@scalar/hono-api-reference' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[ScalarUIProvider][render] '@scalar/hono-api-reference' is required to render the Scalar UI. Please install it\",\n      });\n    }\n\n    const { Scalar } = scalarModule;\n    const { title, url, ...customConfig } = config;\n    return Scalar({ url, pageTitle: title, ...customConfig })(context, next);\n  }\n}\n"]}

package/dist/esm/components/api-reference/ui/swagger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"swagger.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,iBAAkB,SAAQ,UAAW,YAAW,WAAW;;IAKhE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAoBxF"}
+{"version":3,"file":"swagger.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,iBAAkB,SAAQ,UAAW,YAAW,WAAW;;IAKhE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAqBxF"}

package/dist/esm/components/api-reference/ui/swagger.js

@@ -6,7 +6,8 @@ export class SwaggerUIProvider extends BaseHelper {
     async render(context, config, next) {
         let swaggerModule;
         try {
-            swaggerModule = await import('@hono/swagger-ui');
+            const result = await import('@hono/swagger-ui');
+            swaggerModule = result;
         }
         catch (error) {
             this.logger

package/dist/esm/components/api-reference/ui/swagger.js.map

@@ -1 +1 @@
-{"version":3,"file":"swagger.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAC/C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,aAAgD,CAAC;QAErD,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;YAEjE,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;QACpC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class SwaggerUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: SwaggerUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let swaggerModule: typeof import('@hono/swagger-ui');\n\n    try {\n      swaggerModule = await import('@hono/swagger-ui');\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@hono/swagger-ui' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[SwaggerUIProvider][render] '@hono/swagger-ui' is required to render the Swagger UI. Please install it\",\n      });\n    }\n\n    const { swaggerUI } = swaggerModule;\n    const { title, url, ...customConfig } = config;\n    return swaggerUI({ title, url, ...customConfig })(context, next);\n  }\n}\n"]}
+{"version":3,"file":"swagger.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAC/C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,aAAgD,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAChD,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;YAEjE,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;QACpC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class SwaggerUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: SwaggerUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let swaggerModule: typeof import('@hono/swagger-ui');\n\n    try {\n      const result = await import('@hono/swagger-ui');\n      swaggerModule = result;\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@hono/swagger-ui' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[SwaggerUIProvider][render] '@hono/swagger-ui' is required to render the Swagger UI. Please install it\",\n      });\n    }\n\n    const { swaggerUI } = swaggerModule;\n    const { title, url, ...customConfig } = config;\n    return swaggerUI({ title, url, ...customConfig })(context, next);\n  }\n}\n"]}

package/dist/esm/components/auth/authenticate/services/bearer/abstract.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abstract.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/abstract.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGpE,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAwC,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEjE,gGAAgG;AAChG,8BAAsB,0BAA0B,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAE,SAAQ,WAAW;IACvF,oDAAoD;IACpD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,wBAQ9B;IAEH,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAQ;IAC5C,SAAS,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAClD,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAa;IAEnE,iFAAiF;IACjF,SAAS,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI,CAAQ;IAErD,mIAAmI;IACnI,SAAS,CAAC,0BAA0B,CAAC,IAAI,EAAE;QACzC,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACnC,4KAA4K;QAC5K,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,IAAI,CAAC,EAAE,eAAe,CAAC;KACxB,GAAG,IAAI;IAmBR,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA8B3E,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuBxE,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;QACvC,gGAAgG;QAChG,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBnB,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,GAAG,MAAM;IAWnE,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAqC9D,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAW/D;;;;;;;;;;OAUG;IACH,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GAAG,OAAO;IAwCX,cAAc,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAA;KAAE,GAAG,gBAAgB;IAiCrF,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAErE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE;QACvB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,EAAE,kBAAkB,CAAC;QACtC,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GAAG,OAAO,CAAC,OAAO,CAAC;IAEpB,SAAS,CAAC,QAAQ,CAAC,aAAa,IAAI,cAAc,CAAC,UAAU,GAAG,SAAS,CAAC;IAE1E,SAAS,CAAC,QAAQ,CAAC,wBAAwB,IAAI,kBAAkB;CAClE"}
+{"version":3,"file":"abstract.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/abstract.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGpE,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAwC,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEjE,gGAAgG;AAChG,8BAAsB,0BAA0B,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAE,SAAQ,WAAW;IACvF,oDAAoD;IACpD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,wBAQ9B;IAEH,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAQ;IAC5C,SAAS,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAClD,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAa;IAEnE,iFAAiF;IACjF,SAAS,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI,CAAQ;IAErD,mIAAmI;IACnI,SAAS,CAAC,0BAA0B,CAAC,IAAI,EAAE;QACzC,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACnC,4KAA4K;QAC5K,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,IAAI,CAAC,EAAE,eAAe,CAAC;KACxB,GAAG,IAAI;IAmBR,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA8B3E,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwBxE,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;QACvC,gGAAgG;QAChG,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBnB,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,GAAG,MAAM;IAWnE,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAqC9D,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAW/D;;;;;;;;;;OAUG;IACH,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GAAG,OAAO;IAwCX,cAAc,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAA;KAAE,GAAG,gBAAgB;IAiCrF,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAErE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE;QACvB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,EAAE,kBAAkB,CAAC;QACtC,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GAAG,OAAO,CAAC,OAAO,CAAC;IAEpB,SAAS,CAAC,QAAQ,CAAC,aAAa,IAAI,cAAc,CAAC,UAAU,GAAG,SAAS,CAAC;IAE1E,SAAS,CAAC,QAAQ,CAAC,wBAAwB,IAAI,kBAAkB;CAClE"}

package/dist/esm/components/auth/authenticate/services/bearer/abstract.service.js

@@ -72,7 +72,8 @@ export class AbstractBearerTokenService extends BaseService {
             });
         }
         try {
-            return await this.doVerify(token);
+            const result = await this.doVerify(token);
+            return result;
         }
         catch (error) {
             // No log here - `cause` carries the reason (JWTExpired, signature mismatch) to the error handler, which logs the request once. An expired token is the caller's problem, hence `warn`.
@@ -94,7 +95,8 @@ export class AbstractBearerTokenService extends BaseService {
         }
         const signer = await this.getSigner({ payload, getTokenExpiresFn, claims });
         try {
-            const rs = await signer.sign(await this.getSigningKey());
+            const result = await this.getSigningKey();
+            const rs = await signer.sign(result);
             return rs;
         }
         catch (error) {

package/dist/esm/components/auth/authenticate/services/bearer/abstract.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"abstract.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/abstract.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAE7C,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AASvD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAI1F,gGAAgG;AAChG,MAAM,OAAgB,0BAAgD,SAAQ,WAAW;IAAzF;;QAYY,QAAG,GAA0B,IAAI,CAAC;QAClC,sBAAiB,GAAkB,IAAI,CAAC;QACxC,gBAAW,GAAoC,IAAI,GAAG,EAAE,CAAC;QAEnE,iFAAiF;QACvE,gBAAW,GAA2B,IAAI,CAAC;IA6QvD,CAAC;IA7RC,oDAAoD;aACpC,sBAAiB,GAAG,IAAI,GAAG,CAAmB;QAC5D,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;KACN,CAAC,AAR+B,CAQ9B;IASH,mIAAmI;IACzH,0BAA0B,CAAC,IAOpC;QACC,MAAM,EAAE,YAAY,GAAG,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAE5F,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC;QAEhC,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;IAED,kBAAkB,CAAC,OAA4B;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,cAAc;gBAC1C,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,cAAc;gBAC1C,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,gBAAgB;gBAC5C,OAAO,EAAE,kIAAkI;aAC5I,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAqC;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACjF,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,aAAa;gBACzC,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uLAAuL;YACvL,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,aAAa;gBACzC,OAAO,EAAE,mCAAmC;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAKd;QACC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,EAAE,EAAE,GAAG,IAAI,CAAC;QAEtF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,qBAAqB;gBACjD,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,QAAQ,CAAC;gBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAES,cAAc,CAAC,IAAiC;QACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,OAAyB;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,EAAE,GAA2B,EAAE,CAAC;QAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAE3B,IAAI,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAEvD,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAClC,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAES,gBAAgB,CAAC,IAAoC;QAC7D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;OAUG;IACO,eAAe,CAAC,IAIzB;QACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAEpC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,UAAU,EAAE,QAAQ,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,gFAAgF,EAChF,OAAO,CAAC,GAAG,EACX,MAAM,CACP,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,IAAmD;QAChE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAEjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,OAAO,OAA2B,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,sCAAsC,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,EAAE,GAAQ,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACtC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YAEH,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC","sourcesContent":["import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers';\nimport { AES } from '@venizia/ignis-helpers';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport type {\n  IJWTIssueClaims,\n  IJWTSignOptions,\n  IJWTTokenPayload,\n  IPayloadFieldCodec,\n  TContext,\n  TGetTokenExpiresFn,\n} from '@venizia/ignis-kernel';\nimport { Authentication, AuthenticationErrors, BaseService } from '@venizia/ignis-kernel';\nimport type { Env } from 'hono';\nimport type { JWTPayload, JWTVerifyResult, SignJWT } from 'jose';\n\n/** Abstract base for Bearer-token services (JWS, JWKS) with optional AES payload encryption. */\nexport abstract class AbstractBearerTokenService<E extends Env = Env> extends BaseService {\n  /** Standard JWT fields that are never encrypted. */\n  static readonly JWT_COMMON_FIELDS = new Set<keyof JWTPayload>([\n    'iss',\n    'sub',\n    'aud',\n    'jti',\n    'nbf',\n    'exp',\n    'iat',\n  ]);\n\n  protected aes: IPayloadCipher | null = null;\n  protected applicationSecret: string | null = null;\n  protected fieldCodecs: Map<string, IPayloadFieldCodec> = new Map();\n\n  /** Configured `iss` / `aud`. Authoritative over anything the payload carries. */\n  protected signOptions: IJWTSignOptions | null = null;\n\n  /** Configures AES payload encryption and field codecs. Both aesAlgorithm and applicationSecret required to activate encryption. */\n  protected configurePayloadEncryption(opts: {\n    aesAlgorithm?: AESAlgorithmType;\n    applicationSecret?: string;\n    fieldCodecs?: IPayloadFieldCodec[];\n    /** Overrides the cipher. Pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope; `aesAlgorithm` is then the cipher's own concern and is ignored here. */\n    cipher?: IPayloadCipher;\n    sign?: IJWTSignOptions;\n  }): void {\n    const { aesAlgorithm = 'aes-256-cbc', applicationSecret, fieldCodecs, cipher, sign } = opts;\n\n    this.signOptions = sign ?? null;\n\n    if (fieldCodecs) {\n      for (const codec of fieldCodecs) {\n        this.fieldCodecs.set(codec.key, codec);\n      }\n    }\n\n    if (!applicationSecret) {\n      return;\n    }\n\n    this.aes = cipher ?? AES.withAlgorithm(aesAlgorithm);\n    this.applicationSecret = applicationSecret;\n  }\n\n  extractCredentials(context: TContext<E, string>): { type: string; token: string } {\n    const request = context.req;\n\n    const authHeaderValue = request.header('Authorization');\n    if (!authHeaderValue) {\n      throw getError({\n        error: AuthenticationErrors.HEADER_MISSING,\n        message: 'Unauthorized user! Missing authorization header',\n      });\n    }\n\n    if (!authHeaderValue.startsWith(Authentication.TYPE_BEARER)) {\n      throw getError({\n        error: AuthenticationErrors.SCHEME_INVALID,\n        message: 'Unauthorized user! Invalid schema of request token!',\n      });\n    }\n\n    const parts = authHeaderValue.split(' ');\n    if (parts.length !== 2) {\n      throw getError({\n        error: AuthenticationErrors.HEADER_MALFORMED,\n        message: `Authorization header value is invalid format. It must follow the pattern: 'Bearer xx.yy.zz' where xx.yy.zz is a valid JWT token.`,\n      });\n    }\n\n    const [tokenType, tokenValue] = parts;\n    return { type: tokenType, token: tokenValue };\n  }\n\n  async verify(opts: { type: string; token: string }): Promise<IJWTTokenPayload> {\n    const { token } = opts;\n    if (!token) {\n      this.logger.for(this.verify.name).error('Missing token for validating request!');\n      throw getError({\n        error: AuthenticationErrors.TOKEN_MISSING,\n        message: '[verify] Invalid request token!',\n      });\n    }\n\n    try {\n      return await this.doVerify(token);\n    } catch (error) {\n      // No log here - `cause` carries the reason (JWTExpired, signature mismatch) to the error handler, which logs the request once. An expired token is the caller's problem, hence `warn`.\n      throw getError({\n        error: AuthenticationErrors.TOKEN_INVALID,\n        message: '[verify] Invalid or expired token',\n        logLevel: 'warn',\n        cause: error,\n      });\n    }\n  }\n\n  async generate(opts: {\n    payload: IJWTTokenPayload;\n    getTokenExpiresFn?: TGetTokenExpiresFn;\n    /** Per-token registered claims. The supported way to vary `aud` / `sub`; the payload is not. */\n    claims?: IJWTIssueClaims;\n  }): Promise<string> {\n    const { payload, claims, getTokenExpiresFn = this.getDefaultTokenExpiresFn() } = opts;\n\n    if (!payload) {\n      throw getError({\n        error: AuthenticationErrors.TOKEN_PAYLOAD_INVALID,\n        message: '[generate] Invalid token payload!',\n      });\n    }\n\n    const signer = await this.getSigner({ payload, getTokenExpiresFn, claims });\n\n    try {\n      const rs = await signer.sign(await this.getSigningKey());\n      return rs;\n    } catch (error) {\n      this.logger.for(this.generate.name).error('Failed to generate token | Error: %s', error);\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[generate] Failed to generate token',\n      });\n    }\n  }\n\n  protected serializeField(opts: { key: string; value: any }): string {\n    const { key, value } = opts;\n    const codec = this.fieldCodecs.get(key);\n\n    if (codec) {\n      return codec.serialize({ value });\n    }\n\n    return JSON.stringify(value);\n  }\n\n  encryptPayload(payload: IJWTTokenPayload): Record<string, any> {\n    if (!this.aes || !this.applicationSecret) {\n      return payload;\n    }\n\n    const rs: Record<string, string> = {};\n\n    const keys = Object.keys(payload);\n    for (const key of keys) {\n      const value = payload[key];\n\n      if (AbstractBearerTokenService.JWT_COMMON_FIELDS.has(key)) {\n        rs[key] = value;\n        continue;\n      }\n\n      // NOTE: Skip undefined or null values because they cannot be encrypted\n      if (value === undefined || value === null) {\n        continue;\n      }\n\n      const encryptedKey = this.aes.encrypt({\n        message: key,\n        secret: this.applicationSecret,\n      });\n\n      const serialized = this.serializeField({ key, value });\n\n      rs[encryptedKey] = this.aes.encrypt({\n        message: serialized,\n        secret: this.applicationSecret,\n      });\n    }\n\n    return rs;\n  }\n\n  protected deserializeField(opts: { key: string; value: string }) {\n    const { key, value } = opts;\n    const codec = this.fieldCodecs.get(key);\n\n    if (codec) {\n      return codec.deserialize({ raw: value });\n    }\n\n    return JSON.parse(value);\n  }\n\n  /**\n   * Stamps the configured `iss` / `aud` onto a signer, plus any per-token claims the caller passed.\n   *\n   * The configured value is AUTHORITATIVE. `iss` and `aud` are in `JWT_COMMON_FIELDS`, so they ride\n   * through the AES envelope in the clear and an application-shaped payload can carry them - an\n   * issuer identity any payload could overwrite would not be an identity. A conflicting payload\n   * claim is overwritten and reported.\n   *\n   * Per-token audience is an explicit argument rather than a smuggled payload key, so the caller\n   * that legitimately needs one says so.\n   */\n  protected applySignClaims(opts: {\n    signer: SignJWT;\n    payload: Record<string, any>;\n    claims?: IJWTIssueClaims;\n  }): SignJWT {\n    const { signer, payload, claims } = opts;\n    const configured = this.signOptions;\n\n    const issuer = claims?.issuer ?? configured?.issuer;\n    const audience = claims?.audience ?? configured?.audience;\n\n    const logger = this.logger.for(this.applySignClaims.name);\n\n    if (issuer !== undefined) {\n      if (payload.iss !== undefined && payload.iss !== issuer) {\n        logger.warn(\n          'Payload iss overridden by the configured issuer | payload: %s | configured: %s',\n          payload.iss,\n          issuer,\n        );\n      }\n\n      signer.setIssuer(issuer);\n    }\n\n    if (audience !== undefined) {\n      if (payload.aud !== undefined) {\n        logger.warn('Payload aud overridden | payload: %j | applied: %j', payload.aud, audience);\n      }\n\n      signer.setAudience(audience);\n    }\n\n    if (claims?.subject !== undefined) {\n      signer.setSubject(claims.subject);\n    }\n\n    if (claims?.jwtId !== undefined) {\n      signer.setJti(claims.jwtId);\n    }\n\n    return signer;\n  }\n\n  decryptPayload(opts: { result: JWTVerifyResult<IJWTTokenPayload> }): IJWTTokenPayload {\n    const { payload, protectedHeader } = opts.result;\n\n    if (!this.aes || !this.applicationSecret) {\n      return payload as IJWTTokenPayload;\n    }\n\n    this.logger\n      .for(this.decryptPayload.name)\n      .debug('JWT Token | payload: %j | header: %j', payload, protectedHeader);\n\n    const rs: any = {};\n    for (const key in payload) {\n      if (AbstractBearerTokenService.JWT_COMMON_FIELDS.has(key)) {\n        rs[key] = payload[key];\n        continue;\n      }\n\n      const decryptedKey = this.aes.decrypt({\n        message: key,\n        secret: this.applicationSecret,\n      });\n      const decryptedValue = this.aes.decrypt({\n        message: payload[key],\n        secret: this.applicationSecret,\n      });\n\n      rs[decryptedKey] = this.deserializeField({ key: decryptedKey, value: decryptedValue });\n    }\n\n    return rs;\n  }\n\n  protected abstract doVerify(token: string): Promise<IJWTTokenPayload>;\n\n  abstract getSigner(opts: {\n    payload: IJWTTokenPayload;\n    getTokenExpiresFn: TGetTokenExpiresFn;\n    claims?: IJWTIssueClaims;\n  }): Promise<SignJWT>;\n\n  protected abstract getSigningKey(): ValueOrPromise<Uint8Array | CryptoKey>;\n\n  protected abstract getDefaultTokenExpiresFn(): TGetTokenExpiresFn;\n}\n"]}
+{"version":3,"file":"abstract.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/abstract.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAE7C,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AASvD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAI1F,gGAAgG;AAChG,MAAM,OAAgB,0BAAgD,SAAQ,WAAW;IAAzF;;QAYY,QAAG,GAA0B,IAAI,CAAC;QAClC,sBAAiB,GAAkB,IAAI,CAAC;QACxC,gBAAW,GAAoC,IAAI,GAAG,EAAE,CAAC;QAEnE,iFAAiF;QACvE,gBAAW,GAA2B,IAAI,CAAC;IA+QvD,CAAC;IA/RC,oDAAoD;aACpC,sBAAiB,GAAG,IAAI,GAAG,CAAmB;QAC5D,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;KACN,CAAC,AAR+B,CAQ9B;IASH,mIAAmI;IACzH,0BAA0B,CAAC,IAOpC;QACC,MAAM,EAAE,YAAY,GAAG,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAE5F,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC;QAEhC,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;IAED,kBAAkB,CAAC,OAA4B;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,cAAc;gBAC1C,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,cAAc;gBAC1C,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,gBAAgB;gBAC5C,OAAO,EAAE,kIAAkI;aAC5I,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAqC;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACjF,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,aAAa;gBACzC,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uLAAuL;YACvL,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,aAAa;gBACzC,OAAO,EAAE,mCAAmC;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAKd;QACC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,EAAE,EAAE,GAAG,IAAI,CAAC;QAEtF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,qBAAqB;gBACjD,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,QAAQ,CAAC;gBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAES,cAAc,CAAC,IAAiC;QACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,OAAyB;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,EAAE,GAA2B,EAAE,CAAC;QAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAE3B,IAAI,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAEvD,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAClC,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAES,gBAAgB,CAAC,IAAoC;QAC7D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;OAUG;IACO,eAAe,CAAC,IAIzB;QACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAEpC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,UAAU,EAAE,QAAQ,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,gFAAgF,EAChF,OAAO,CAAC,GAAG,EACX,MAAM,CACP,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,IAAmD;QAChE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAEjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,OAAO,OAA2B,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,sCAAsC,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,EAAE,GAAQ,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACtC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YAEH,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC","sourcesContent":["import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers';\nimport { AES } from '@venizia/ignis-helpers';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport type {\n  IJWTIssueClaims,\n  IJWTSignOptions,\n  IJWTTokenPayload,\n  IPayloadFieldCodec,\n  TContext,\n  TGetTokenExpiresFn,\n} from '@venizia/ignis-kernel';\nimport { Authentication, AuthenticationErrors, BaseService } from '@venizia/ignis-kernel';\nimport type { Env } from 'hono';\nimport type { JWTPayload, JWTVerifyResult, SignJWT } from 'jose';\n\n/** Abstract base for Bearer-token services (JWS, JWKS) with optional AES payload encryption. */\nexport abstract class AbstractBearerTokenService<E extends Env = Env> extends BaseService {\n  /** Standard JWT fields that are never encrypted. */\n  static readonly JWT_COMMON_FIELDS = new Set<keyof JWTPayload>([\n    'iss',\n    'sub',\n    'aud',\n    'jti',\n    'nbf',\n    'exp',\n    'iat',\n  ]);\n\n  protected aes: IPayloadCipher | null = null;\n  protected applicationSecret: string | null = null;\n  protected fieldCodecs: Map<string, IPayloadFieldCodec> = new Map();\n\n  /** Configured `iss` / `aud`. Authoritative over anything the payload carries. */\n  protected signOptions: IJWTSignOptions | null = null;\n\n  /** Configures AES payload encryption and field codecs. Both aesAlgorithm and applicationSecret required to activate encryption. */\n  protected configurePayloadEncryption(opts: {\n    aesAlgorithm?: AESAlgorithmType;\n    applicationSecret?: string;\n    fieldCodecs?: IPayloadFieldCodec[];\n    /** Overrides the cipher. Pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope; `aesAlgorithm` is then the cipher's own concern and is ignored here. */\n    cipher?: IPayloadCipher;\n    sign?: IJWTSignOptions;\n  }): void {\n    const { aesAlgorithm = 'aes-256-cbc', applicationSecret, fieldCodecs, cipher, sign } = opts;\n\n    this.signOptions = sign ?? null;\n\n    if (fieldCodecs) {\n      for (const codec of fieldCodecs) {\n        this.fieldCodecs.set(codec.key, codec);\n      }\n    }\n\n    if (!applicationSecret) {\n      return;\n    }\n\n    this.aes = cipher ?? AES.withAlgorithm(aesAlgorithm);\n    this.applicationSecret = applicationSecret;\n  }\n\n  extractCredentials(context: TContext<E, string>): { type: string; token: string } {\n    const request = context.req;\n\n    const authHeaderValue = request.header('Authorization');\n    if (!authHeaderValue) {\n      throw getError({\n        error: AuthenticationErrors.HEADER_MISSING,\n        message: 'Unauthorized user! Missing authorization header',\n      });\n    }\n\n    if (!authHeaderValue.startsWith(Authentication.TYPE_BEARER)) {\n      throw getError({\n        error: AuthenticationErrors.SCHEME_INVALID,\n        message: 'Unauthorized user! Invalid schema of request token!',\n      });\n    }\n\n    const parts = authHeaderValue.split(' ');\n    if (parts.length !== 2) {\n      throw getError({\n        error: AuthenticationErrors.HEADER_MALFORMED,\n        message: `Authorization header value is invalid format. It must follow the pattern: 'Bearer xx.yy.zz' where xx.yy.zz is a valid JWT token.`,\n      });\n    }\n\n    const [tokenType, tokenValue] = parts;\n    return { type: tokenType, token: tokenValue };\n  }\n\n  async verify(opts: { type: string; token: string }): Promise<IJWTTokenPayload> {\n    const { token } = opts;\n    if (!token) {\n      this.logger.for(this.verify.name).error('Missing token for validating request!');\n      throw getError({\n        error: AuthenticationErrors.TOKEN_MISSING,\n        message: '[verify] Invalid request token!',\n      });\n    }\n\n    try {\n      const result = await this.doVerify(token);\n      return result;\n    } catch (error) {\n      // No log here - `cause` carries the reason (JWTExpired, signature mismatch) to the error handler, which logs the request once. An expired token is the caller's problem, hence `warn`.\n      throw getError({\n        error: AuthenticationErrors.TOKEN_INVALID,\n        message: '[verify] Invalid or expired token',\n        logLevel: 'warn',\n        cause: error,\n      });\n    }\n  }\n\n  async generate(opts: {\n    payload: IJWTTokenPayload;\n    getTokenExpiresFn?: TGetTokenExpiresFn;\n    /** Per-token registered claims. The supported way to vary `aud` / `sub`; the payload is not. */\n    claims?: IJWTIssueClaims;\n  }): Promise<string> {\n    const { payload, claims, getTokenExpiresFn = this.getDefaultTokenExpiresFn() } = opts;\n\n    if (!payload) {\n      throw getError({\n        error: AuthenticationErrors.TOKEN_PAYLOAD_INVALID,\n        message: '[generate] Invalid token payload!',\n      });\n    }\n\n    const signer = await this.getSigner({ payload, getTokenExpiresFn, claims });\n\n    try {\n      const result = await this.getSigningKey();\n      const rs = await signer.sign(result);\n      return rs;\n    } catch (error) {\n      this.logger.for(this.generate.name).error('Failed to generate token | Error: %s', error);\n      throw getError({\n        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n        message: '[generate] Failed to generate token',\n      });\n    }\n  }\n\n  protected serializeField(opts: { key: string; value: any }): string {\n    const { key, value } = opts;\n    const codec = this.fieldCodecs.get(key);\n\n    if (codec) {\n      return codec.serialize({ value });\n    }\n\n    return JSON.stringify(value);\n  }\n\n  encryptPayload(payload: IJWTTokenPayload): Record<string, any> {\n    if (!this.aes || !this.applicationSecret) {\n      return payload;\n    }\n\n    const rs: Record<string, string> = {};\n\n    const keys = Object.keys(payload);\n    for (const key of keys) {\n      const value = payload[key];\n\n      if (AbstractBearerTokenService.JWT_COMMON_FIELDS.has(key)) {\n        rs[key] = value;\n        continue;\n      }\n\n      // NOTE: Skip undefined or null values because they cannot be encrypted\n      if (value === undefined || value === null) {\n        continue;\n      }\n\n      const encryptedKey = this.aes.encrypt({\n        message: key,\n        secret: this.applicationSecret,\n      });\n\n      const serialized = this.serializeField({ key, value });\n\n      rs[encryptedKey] = this.aes.encrypt({\n        message: serialized,\n        secret: this.applicationSecret,\n      });\n    }\n\n    return rs;\n  }\n\n  protected deserializeField(opts: { key: string; value: string }) {\n    const { key, value } = opts;\n    const codec = this.fieldCodecs.get(key);\n\n    if (codec) {\n      return codec.deserialize({ raw: value });\n    }\n\n    return JSON.parse(value);\n  }\n\n  /**\n   * Stamps the configured `iss` / `aud` onto a signer, plus any per-token claims the caller passed.\n   *\n   * The configured value is AUTHORITATIVE. `iss` and `aud` are in `JWT_COMMON_FIELDS`, so they ride\n   * through the AES envelope in the clear and an application-shaped payload can carry them - an\n   * issuer identity any payload could overwrite would not be an identity. A conflicting payload\n   * claim is overwritten and reported.\n   *\n   * Per-token audience is an explicit argument rather than a smuggled payload key, so the caller\n   * that legitimately needs one says so.\n   */\n  protected applySignClaims(opts: {\n    signer: SignJWT;\n    payload: Record<string, any>;\n    claims?: IJWTIssueClaims;\n  }): SignJWT {\n    const { signer, payload, claims } = opts;\n    const configured = this.signOptions;\n\n    const issuer = claims?.issuer ?? configured?.issuer;\n    const audience = claims?.audience ?? configured?.audience;\n\n    const logger = this.logger.for(this.applySignClaims.name);\n\n    if (issuer !== undefined) {\n      if (payload.iss !== undefined && payload.iss !== issuer) {\n        logger.warn(\n          'Payload iss overridden by the configured issuer | payload: %s | configured: %s',\n          payload.iss,\n          issuer,\n        );\n      }\n\n      signer.setIssuer(issuer);\n    }\n\n    if (audience !== undefined) {\n      if (payload.aud !== undefined) {\n        logger.warn('Payload aud overridden | payload: %j | applied: %j', payload.aud, audience);\n      }\n\n      signer.setAudience(audience);\n    }\n\n    if (claims?.subject !== undefined) {\n      signer.setSubject(claims.subject);\n    }\n\n    if (claims?.jwtId !== undefined) {\n      signer.setJti(claims.jwtId);\n    }\n\n    return signer;\n  }\n\n  decryptPayload(opts: { result: JWTVerifyResult<IJWTTokenPayload> }): IJWTTokenPayload {\n    const { payload, protectedHeader } = opts.result;\n\n    if (!this.aes || !this.applicationSecret) {\n      return payload as IJWTTokenPayload;\n    }\n\n    this.logger\n      .for(this.decryptPayload.name)\n      .debug('JWT Token | payload: %j | header: %j', payload, protectedHeader);\n\n    const rs: any = {};\n    for (const key in payload) {\n      if (AbstractBearerTokenService.JWT_COMMON_FIELDS.has(key)) {\n        rs[key] = payload[key];\n        continue;\n      }\n\n      const decryptedKey = this.aes.decrypt({\n        message: key,\n        secret: this.applicationSecret,\n      });\n      const decryptedValue = this.aes.decrypt({\n        message: payload[key],\n        secret: this.applicationSecret,\n      });\n\n      rs[decryptedKey] = this.deserializeField({ key: decryptedKey, value: decryptedValue });\n    }\n\n    return rs;\n  }\n\n  protected abstract doVerify(token: string): Promise<IJWTTokenPayload>;\n\n  abstract getSigner(opts: {\n    payload: IJWTTokenPayload;\n    getTokenExpiresFn: TGetTokenExpiresFn;\n    claims?: IJWTIssueClaims;\n  }): Promise<SignJWT>;\n\n  protected abstract getSigningKey(): ValueOrPromise<Uint8Array | CryptoKey>;\n\n  protected abstract getDefaultTokenExpiresFn(): TGetTokenExpiresFn;\n}\n"]}

package/dist/esm/components/auth/authenticate/services/service/signer.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/service/signer.service.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,WAAW,EAAoB,MAAM,uBAAuB,CAAC;AAC/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGjE,OAAO,KAAK,EAAa,GAAG,EAAE,MAAM,MAAM,CAAC;AAK3C;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAU1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAEhC;IAEH,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAkB;gBAIZ,OAAO,EAAE,mBAAmB;IAK/C,SAAS,IAAI,OAAO;IAIpB,wGAAwG;IACxG,QAAQ,IAAI,MAAM;IAKlB;;;;;;OAMG;IACG,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBrF;;;;;;;OAOG;IACG,aAAa,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC;YA0BjC,iBAAiB;YAWjB,OAAO;IAiBrB,OAAO,CAAC,aAAa;CAUtB"}
+{"version":3,"file":"signer.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/service/signer.service.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,WAAW,EAAoB,MAAM,uBAAuB,CAAC;AAC/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGjE,OAAO,KAAK,EAAa,GAAG,EAAE,MAAM,MAAM,CAAC;AAK3C;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAU1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAEhC;IAEH,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAkB;gBAIZ,OAAO,EAAE,mBAAmB;IAK/C,SAAS,IAAI,OAAO;IAIpB,wGAAwG;IACxG,QAAQ,IAAI,MAAM;IAKlB;;;;;;OAMG;IACG,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA2BrF;;;;;;;OAOG;IACG,aAAa,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC;YA0BjC,iBAAiB;YAYjB,OAAO;IAiBrB,OAAO,CAAC,aAAa;CAUtB"}

package/dist/esm/components/auth/authenticate/services/service/signer.service.js

@@ -53,7 +53,7 @@ let ServiceAssertionSignerService = ServiceAssertionSignerService_1 = class Serv
         const { SignJWT } = await JoseLoader.load();
         const now = Math.floor(Date.now() / 1000);
         const lifetime = this.options.signLifetimeSeconds ?? ServiceAssertion.DEFAULT_SIGN_LIFETIME_SECONDS;
-        return new SignJWT({ htm: method.toUpperCase(), htu: path })
+        const assertion = new SignJWT({ htm: method.toUpperCase(), htu: path })
             .setProtectedHeader({
             alg: ServiceAssertion.ALGORITHM,
             kid: this.getKeyId(),
@@ -64,8 +64,9 @@ let ServiceAssertionSignerService = ServiceAssertionSignerService_1 = class Serv
             .setAudience(audience)
             .setJti(this.requestIdGenerator.nextId())
             .setIssuedAt(now)
-            .setExpirationTime(now + lifetime)
-            .sign(await this.resolvePrivateKey());
+            .setExpirationTime(now + lifetime);
+        const privateKey = await this.resolvePrivateKey();
+        return assertion.sign(privateKey);
     }
     /**
      * The document `/svc-certs` serves, built from the PUBLIC key only.
@@ -101,7 +102,8 @@ let ServiceAssertionSignerService = ServiceAssertionSignerService_1 = class Serv
         }
         const { importPKCS8 } = await JoseLoader.load();
         const raw = await this.readKey({ source: this.options.keys.private });
-        this.privateKey = await importPKCS8(raw, ServiceAssertion.ALGORITHM);
+        const result = await importPKCS8(raw, ServiceAssertion.ALGORITHM);
+        this.privateKey = result;
         return this.privateKey;
     }
     async readKey(opts) {