@venizia/ignis 0.4.6 → 0.4.7-1

package/dist/esm/base/controllers/grpc/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../../../src/base/controllers/grpc/adapter.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKrD,MAAM,mBAAmB,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpD,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAOnE,ySAAyS;AACzS,MAAM,OAAO,kBAMX,SAAQ,UAAU;IAgBlB,YAAoB,IAUnB;QACC,KAAK,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,UAAU;QAC7B,aAAa,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,aAAa,CAAC,IAAI,CAA+B,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,aAAa,CAAC,IAAI,CAAgC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;SAC3F,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gGAAgG;IACxF,oBAAoB,CAAC,IAG5B;QACC,MAAM,QAAQ,GAAoC,EAAE,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAExD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,OAAgB,EAAE,eAA+B,EAAE,EAAE;gBAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,sDAAsD,IAAI,GAAG;qBACvE,CAAC,CAAC;gBACL,CAAC;gBAED,uFAAuF;gBACvF,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAED,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yHAAyH;IACjH,eAAe,CAAC,IAGvB;QACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,CAAC,OAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,IAIvB;QACC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACrD,MAAM,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE1F,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAEhC,8JAA8J;YAC9J,IAAI,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,oLAAoL;YACpL,OAAO,OAAO,CAAC,GAAG,CAAC,OAAkC,EAAE,KAAK,IAAI,EAAE;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC7C,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;wBAChD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;wBAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;wBAChC,IAAI,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC7C,CAAC,CAAC;oBAEH,MAAM,IAAI,GAAG,+BAA+B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;oBACjC,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;oBAE/E,yFAAyF;oBACzF,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,MAAM,IAAI,KAAK;wBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAEhC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;wBACrD,MAAM,EACJ,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBAC/C,OAAO,EAAE;4BACP,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB;4BAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;4BACxC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC;yBACzD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,KAAK,CAAC,KAAK,CAMhB,IAUD;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAMpC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvB,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YACjC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAE9D,wFAAwF;QACxF,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAA2B,CAAC;QAEjE,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,eAAe,CAAC;gBACtB,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC;oBACrC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;oBAC3C,OAAO;iBACR,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QAED,OAAO;YACL,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC;gBAClC,UAAU;gBACV,cAAc,EAAE;oBACd,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,UAAU,CAAC,IAAI;iBACxB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACV,OAAO;aACR,CAAC;SACH,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { ConnectRouter, HandlerContext } from '@connectrpc/connect';\nimport type {\n  UniversalHandler,\n  UniversalServerRequest,\n  UniversalServerResponse,\n} from '@connectrpc/connect/protocol';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { GRPC, HTTP } from '@venizia/ignis-helpers/common';\nimport { ModuleUtility } from '@venizia/ignis-helpers';\nimport type { Env, Input, MiddlewareHandler, Schema } from 'hono';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport type { TRouteContext } from '@venizia/ignis-kernel';\nimport type { AbstractGrpcController } from './abstract';\nimport type { IConnectAdapterResult, IConnectRpcModule, IRpcRegistration } from './common/types';\n\nconst CONNECT_RPC_MODULES = ['@connectrpc/connect'];\nconst CONNECT_RPC_PROTOCOL_MODULE = '@connectrpc/connect/protocol';\n\ntype TConnectHandler<RequestType = unknown, ResponseType = unknown> = (\n  request: RequestType,\n  context: HandlerContext,\n) => ValueOrPromise<ResponseType>;\n\n/** Bridges IGNIS gRPC controllers with ConnectRPC: loads the peer deps with `ModuleUtility.load` (the ES module copy an application's own import gets), wraps handlers into ConnectRPC's signature, dispatches through a Hono middleware, and isolates request-scoped context with AsyncLocalStorage. */\nexport class GrpcRequestAdapter<\n  RouteEnv extends Env = Env,\n  RouteSchema extends Schema = {},\n  BasePath extends string = '/',\n  ServiceType = Parameters<ConnectRouter['service']>[0],\n  ConfigurableOptions extends object = {},\n> extends BaseHelper {\n  private createConnectRouter: (opts?: Record<string, unknown>) => ConnectRouter;\n  private protocol: {\n    universalServerRequestFromFetch: (req: Request, ctx: object) => UniversalServerRequest;\n    universalServerResponseToFetch: (res: UniversalServerResponse) => Response;\n  };\n\n  private controller: AbstractGrpcController<\n    RouteEnv,\n    RouteSchema,\n    BasePath,\n    ServiceType,\n    ConfigurableOptions\n  >;\n  private interceptors?: unknown[];\n\n  private constructor(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module: IConnectRpcModule;\n  }) {\n    super({ scope: GrpcRequestAdapter.name });\n\n    this.controller = opts.controller;\n    this.interceptors = opts.interceptors;\n    this.createConnectRouter = opts.module.connect.createConnectRouter;\n    this.protocol = opts.module.protocol;\n  }\n\n  /**\n   * The ConnectRPC peers, loaded as ES modules from the project root (or taken from `ModuleUtility.register`,\n   * which is what a compiled binary has). A missing peer rejects with the error that names what to install.\n   */\n  private static async loadModule(): Promise<IConnectRpcModule> {\n    ModuleUtility.assertInstalled({ modules: CONNECT_RPC_MODULES, allowRegistered: true });\n\n    const [connect, protocol] = await Promise.all([\n      ModuleUtility.load<IConnectRpcModule['connect']>({ module: CONNECT_RPC_MODULES[0] }),\n      ModuleUtility.load<IConnectRpcModule['protocol']>({ module: CONNECT_RPC_PROTOCOL_MODULE }),\n    ]);\n\n    return { connect, protocol };\n  }\n\n  /** Wraps IGNIS RPC registrations into ConnectRPC's (request, context) => response signature. */\n  private buildConnectHandlers(opts: {\n    definitions: Record<string, IRpcRegistration<RouteEnv>>;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): Record<string, TConnectHandler> {\n    const handlers: Record<string, TConnectHandler> = {};\n\n    for (const name in opts.definitions) {\n      const { handler, middlewares } = opts.definitions[name];\n\n      handlers[name] = async (request: unknown, _connectContext: HandlerContext) => {\n        const context = opts.storage.getStore();\n        if (!context) {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `[GrpcRequestAdapter] Missing Hono context for RPC \"${name}\"`,\n          });\n        }\n\n        // Run pre-built auth middlewares (built by AbstractGrpcController.buildRpcMiddlewares)\n        for (const mw of middlewares) {\n          await mw(context, async () => {});\n        }\n\n        return handler({ request, context });\n      };\n    }\n\n    return handlers;\n  }\n\n  /** Loose signature on purpose - the IGNIS `ServiceType` is opaque (`unknown`) while ConnectRPC expects `DescService`. */\n  private registerService(opts: {\n    router: ConnectRouter;\n    handlers: Record<string, TConnectHandler>;\n  }) {\n    const { router, handlers } = opts;\n    (router.service as Function)(this.controller.service, handlers);\n  }\n\n  /** Creates the Hono middleware that dispatches to ConnectRPC universal handlers. */\n  private buildMiddleware(opts: {\n    handlerMap: Map<string, UniversalHandler>;\n    controllerPath: string;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): MiddlewareHandler<RouteEnv, BasePath, Input> {\n    const { handlerMap, controllerPath, storage } = opts;\n    const { universalServerRequestFromFetch, universalServerResponseToFetch } = this.protocol;\n\n    return async (context, next) => {\n      let pathname = context.req.path;\n\n      // context.req.path is the full original URL path, so strip the basePath + controllerPath prefix to get the ConnectRPC handler path (/package.Service/Method).\n      if (controllerPath && pathname.startsWith(controllerPath)) {\n        pathname = pathname.slice(controllerPath.length) || '/';\n      }\n\n      const handler = handlerMap.get(pathname);\n      if (!handler) {\n        return next();\n      }\n\n      // `context` is Hono's real Context<RouteEnv>; TRouteContext is a lightweight custom shape (different `json`/`req.valid` signatures) built on it, not a subtype - hence this bridge.\n      return storage.run(context as TRouteContext<RouteEnv>, async () => {\n        try {\n          const body = await context.req.arrayBuffer();\n          const freshRequest = new Request(context.req.url, {\n            method: context.req.method,\n            headers: context.req.raw.headers,\n            body: body.byteLength > 0 ? body : undefined,\n          });\n\n          const uReq = universalServerRequestFromFetch(freshRequest, {});\n          const uRes = await handler(uReq);\n          return universalServerResponseToFetch(uRes);\n        } catch (error) {\n          const message = error instanceof Error ? error.message : 'Internal gRPC error';\n\n          // Preserve gRPC status code from ConnectError (duck-type check avoids peer dep coupling)\n          const code =\n            typeof error === 'object' &&\n            error !== null &&\n            'code' in error &&\n            typeof error.code === 'number'\n              ? error.code\n              : GRPC.ResultCodes.INTERNAL;\n\n          return new Response(JSON.stringify({ message, code }), {\n            status:\n              code === GRPC.ResultCodes.OK\n                ? HTTP.ResultCodes.RS_2.Ok\n                : HTTP.ResultCodes.RS_5.InternalServerError,\n            headers: {\n              [HTTP.Headers.CONTENT_TYPE]: HTTP.HeaderValues.APPLICATION_JSON,\n              [GRPC.Headers.GRPC_STATUS]: String(code),\n              [GRPC.Headers.GRPC_MESSAGE]: encodeURIComponent(message),\n            },\n          });\n        }\n      });\n    };\n  }\n\n  /** Validates peer deps, creates adapter, and returns paths + middleware. */\n  static async build<\n    RouteEnv extends Env = Env,\n    RouteSchema extends Schema = {},\n    BasePath extends string = '/',\n    ServiceType = Parameters<ConnectRouter['service']>[0],\n    ConfigurableOptions extends object = {},\n  >(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module?: IConnectRpcModule;\n  }): Promise<IConnectAdapterResult<RouteEnv, BasePath>> {\n    const module = opts.module ?? (await GrpcRequestAdapter.loadModule());\n\n    const adapter = new GrpcRequestAdapter<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >({ ...opts, module });\n\n    const routerOpts: Record<string, unknown> = {};\n    if (adapter.interceptors?.length) {\n      routerOpts.interceptors = adapter.interceptors;\n    }\n\n    const connectRouter = adapter.createConnectRouter(routerOpts);\n\n    // Per-controller async storage - each concurrent request gets its own isolated context.\n    const storage = new AsyncLocalStorage<TRouteContext<RouteEnv>>();\n\n    if (adapter.controller.service) {\n      adapter.registerService({\n        router: connectRouter,\n        handlers: adapter.buildConnectHandlers({\n          definitions: adapter.controller.definitions,\n          storage,\n        }),\n      });\n    }\n\n    const handlerMap = new Map<string, UniversalHandler>();\n    const paths: string[] = [];\n\n    for (const handler of connectRouter.handlers) {\n      handlerMap.set(handler.requestPath, handler);\n      paths.push(handler.requestPath);\n    }\n\n    return {\n      paths,\n      middleware: adapter.buildMiddleware({\n        handlerMap,\n        controllerPath: [\n          adapter.controller.basePath.replace(/\\/$/, ''),\n          adapter.controller.path,\n        ].join(''),\n        storage,\n      }),\n    };\n  }\n}\n"]}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../../../src/base/controllers/grpc/adapter.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKrD,MAAM,mBAAmB,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpD,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAOnE,ySAAyS;AACzS,MAAM,OAAO,kBAMX,SAAQ,UAAU;IAgBlB,YAAoB,IAUnB;QACC,KAAK,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,UAAU;QAC7B,aAAa,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,aAAa,CAAC,IAAI,CAA+B,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,aAAa,CAAC,IAAI,CAAgC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;SAC3F,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gGAAgG;IACxF,oBAAoB,CAAC,IAG5B;QACC,MAAM,QAAQ,GAAoC,EAAE,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAExD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,OAAgB,EAAE,eAA+B,EAAE,EAAE;gBAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,sDAAsD,IAAI,GAAG;qBACvE,CAAC,CAAC;gBACL,CAAC;gBAED,uFAAuF;gBACvF,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAED,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yHAAyH;IACjH,eAAe,CAAC,IAGvB;QACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,CAAC,OAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,IAIvB;QACC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACrD,MAAM,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE1F,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAEhC,8JAA8J;YAC9J,IAAI,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,oLAAoL;YACpL,OAAO,OAAO,CAAC,GAAG,CAAC,OAAkC,EAAE,KAAK,IAAI,EAAE;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC7C,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;wBAChD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;wBAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;wBAChC,IAAI,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC7C,CAAC,CAAC;oBAEH,MAAM,IAAI,GAAG,+BAA+B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;oBACjC,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;oBAE/E,yFAAyF;oBACzF,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,MAAM,IAAI,KAAK;wBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAEhC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;wBACrD,MAAM,EACJ,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;4BAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBAC/C,OAAO,EAAE;4BACP,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB;4BAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;4BACxC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC;yBACzD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,KAAK,CAAC,KAAK,CAMhB,IAUD;QACC,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC;YACrD,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAMpC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvB,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YACjC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAE9D,wFAAwF;QACxF,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAA2B,CAAC;QAEjE,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,eAAe,CAAC;gBACtB,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC;oBACrC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;oBAC3C,OAAO;iBACR,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QAED,OAAO;YACL,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC;gBAClC,UAAU;gBACV,cAAc,EAAE;oBACd,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,UAAU,CAAC,IAAI;iBACxB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACV,OAAO;aACR,CAAC;SACH,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { ConnectRouter, HandlerContext } from '@connectrpc/connect';\nimport type {\n  UniversalHandler,\n  UniversalServerRequest,\n  UniversalServerResponse,\n} from '@connectrpc/connect/protocol';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { GRPC, HTTP } from '@venizia/ignis-helpers/common';\nimport { ModuleUtility } from '@venizia/ignis-helpers';\nimport type { Env, Input, MiddlewareHandler, Schema } from 'hono';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport type { TRouteContext } from '@venizia/ignis-kernel';\nimport type { AbstractGrpcController } from './abstract';\nimport type { IConnectAdapterResult, IConnectRpcModule, IRpcRegistration } from './common/types';\n\nconst CONNECT_RPC_MODULES = ['@connectrpc/connect'];\nconst CONNECT_RPC_PROTOCOL_MODULE = '@connectrpc/connect/protocol';\n\ntype TConnectHandler<RequestType = unknown, ResponseType = unknown> = (\n  request: RequestType,\n  context: HandlerContext,\n) => ValueOrPromise<ResponseType>;\n\n/** Bridges IGNIS gRPC controllers with ConnectRPC: loads the peer deps with `ModuleUtility.load` (the ES module copy an application's own import gets), wraps handlers into ConnectRPC's signature, dispatches through a Hono middleware, and isolates request-scoped context with AsyncLocalStorage. */\nexport class GrpcRequestAdapter<\n  RouteEnv extends Env = Env,\n  RouteSchema extends Schema = {},\n  BasePath extends string = '/',\n  ServiceType = Parameters<ConnectRouter['service']>[0],\n  ConfigurableOptions extends object = {},\n> extends BaseHelper {\n  private createConnectRouter: (opts?: Record<string, unknown>) => ConnectRouter;\n  private protocol: {\n    universalServerRequestFromFetch: (req: Request, ctx: object) => UniversalServerRequest;\n    universalServerResponseToFetch: (res: UniversalServerResponse) => Response;\n  };\n\n  private controller: AbstractGrpcController<\n    RouteEnv,\n    RouteSchema,\n    BasePath,\n    ServiceType,\n    ConfigurableOptions\n  >;\n  private interceptors?: unknown[];\n\n  private constructor(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module: IConnectRpcModule;\n  }) {\n    super({ scope: GrpcRequestAdapter.name });\n\n    this.controller = opts.controller;\n    this.interceptors = opts.interceptors;\n    this.createConnectRouter = opts.module.connect.createConnectRouter;\n    this.protocol = opts.module.protocol;\n  }\n\n  /**\n   * The ConnectRPC peers, loaded as ES modules from the project root (or taken from `ModuleUtility.register`,\n   * which is what a compiled binary has). A missing peer rejects with the error that names what to install.\n   */\n  private static async loadModule(): Promise<IConnectRpcModule> {\n    ModuleUtility.assertInstalled({ modules: CONNECT_RPC_MODULES, allowRegistered: true });\n\n    const [connect, protocol] = await Promise.all([\n      ModuleUtility.load<IConnectRpcModule['connect']>({ module: CONNECT_RPC_MODULES[0] }),\n      ModuleUtility.load<IConnectRpcModule['protocol']>({ module: CONNECT_RPC_PROTOCOL_MODULE }),\n    ]);\n\n    return { connect, protocol };\n  }\n\n  /** Wraps IGNIS RPC registrations into ConnectRPC's (request, context) => response signature. */\n  private buildConnectHandlers(opts: {\n    definitions: Record<string, IRpcRegistration<RouteEnv>>;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): Record<string, TConnectHandler> {\n    const handlers: Record<string, TConnectHandler> = {};\n\n    for (const name in opts.definitions) {\n      const { handler, middlewares } = opts.definitions[name];\n\n      handlers[name] = async (request: unknown, _connectContext: HandlerContext) => {\n        const context = opts.storage.getStore();\n        if (!context) {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `[GrpcRequestAdapter] Missing Hono context for RPC \"${name}\"`,\n          });\n        }\n\n        // Run pre-built auth middlewares (built by AbstractGrpcController.buildRpcMiddlewares)\n        for (const mw of middlewares) {\n          await mw(context, async () => {});\n        }\n\n        return handler({ request, context });\n      };\n    }\n\n    return handlers;\n  }\n\n  /** Loose signature on purpose - the IGNIS `ServiceType` is opaque (`unknown`) while ConnectRPC expects `DescService`. */\n  private registerService(opts: {\n    router: ConnectRouter;\n    handlers: Record<string, TConnectHandler>;\n  }) {\n    const { router, handlers } = opts;\n    (router.service as Function)(this.controller.service, handlers);\n  }\n\n  /** Creates the Hono middleware that dispatches to ConnectRPC universal handlers. */\n  private buildMiddleware(opts: {\n    handlerMap: Map<string, UniversalHandler>;\n    controllerPath: string;\n    storage: AsyncLocalStorage<TRouteContext<RouteEnv>>;\n  }): MiddlewareHandler<RouteEnv, BasePath, Input> {\n    const { handlerMap, controllerPath, storage } = opts;\n    const { universalServerRequestFromFetch, universalServerResponseToFetch } = this.protocol;\n\n    return async (context, next) => {\n      let pathname = context.req.path;\n\n      // context.req.path is the full original URL path, so strip the basePath + controllerPath prefix to get the ConnectRPC handler path (/package.Service/Method).\n      if (controllerPath && pathname.startsWith(controllerPath)) {\n        pathname = pathname.slice(controllerPath.length) || '/';\n      }\n\n      const handler = handlerMap.get(pathname);\n      if (!handler) {\n        return next();\n      }\n\n      // `context` is Hono's real Context<RouteEnv>; TRouteContext is a lightweight custom shape (different `json`/`req.valid` signatures) built on it, not a subtype - hence this bridge.\n      return storage.run(context as TRouteContext<RouteEnv>, async () => {\n        try {\n          const body = await context.req.arrayBuffer();\n          const freshRequest = new Request(context.req.url, {\n            method: context.req.method,\n            headers: context.req.raw.headers,\n            body: body.byteLength > 0 ? body : undefined,\n          });\n\n          const uReq = universalServerRequestFromFetch(freshRequest, {});\n          const uRes = await handler(uReq);\n          return universalServerResponseToFetch(uRes);\n        } catch (error) {\n          const message = error instanceof Error ? error.message : 'Internal gRPC error';\n\n          // Preserve gRPC status code from ConnectError (duck-type check avoids peer dep coupling)\n          const code =\n            typeof error === 'object' &&\n            error !== null &&\n            'code' in error &&\n            typeof error.code === 'number'\n              ? error.code\n              : GRPC.ResultCodes.INTERNAL;\n\n          return new Response(JSON.stringify({ message, code }), {\n            status:\n              code === GRPC.ResultCodes.OK\n                ? HTTP.ResultCodes.RS_2.Ok\n                : HTTP.ResultCodes.RS_5.InternalServerError,\n            headers: {\n              [HTTP.Headers.CONTENT_TYPE]: HTTP.HeaderValues.APPLICATION_JSON,\n              [GRPC.Headers.GRPC_STATUS]: String(code),\n              [GRPC.Headers.GRPC_MESSAGE]: encodeURIComponent(message),\n            },\n          });\n        }\n      });\n    };\n  }\n\n  /** Validates peer deps, creates adapter, and returns paths + middleware. */\n  static async build<\n    RouteEnv extends Env = Env,\n    RouteSchema extends Schema = {},\n    BasePath extends string = '/',\n    ServiceType = Parameters<ConnectRouter['service']>[0],\n    ConfigurableOptions extends object = {},\n  >(opts: {\n    controller: AbstractGrpcController<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >;\n    interceptors?: unknown[];\n    module?: IConnectRpcModule;\n  }): Promise<IConnectAdapterResult<RouteEnv, BasePath>> {\n    let module = opts.module;\n    if (!module) {\n      const loaded = await GrpcRequestAdapter.loadModule();\n      module = loaded;\n    }\n\n    const adapter = new GrpcRequestAdapter<\n      RouteEnv,\n      RouteSchema,\n      BasePath,\n      ServiceType,\n      ConfigurableOptions\n    >({ ...opts, module });\n\n    const routerOpts: Record<string, unknown> = {};\n    if (adapter.interceptors?.length) {\n      routerOpts.interceptors = adapter.interceptors;\n    }\n\n    const connectRouter = adapter.createConnectRouter(routerOpts);\n\n    // Per-controller async storage - each concurrent request gets its own isolated context.\n    const storage = new AsyncLocalStorage<TRouteContext<RouteEnv>>();\n\n    if (adapter.controller.service) {\n      adapter.registerService({\n        router: connectRouter,\n        handlers: adapter.buildConnectHandlers({\n          definitions: adapter.controller.definitions,\n          storage,\n        }),\n      });\n    }\n\n    const handlerMap = new Map<string, UniversalHandler>();\n    const paths: string[] = [];\n\n    for (const handler of connectRouter.handlers) {\n      handlerMap.set(handler.requestPath, handler);\n      paths.push(handler.requestPath);\n    }\n\n    return {\n      paths,\n      middleware: adapter.buildMiddleware({\n        handlerMap,\n        controllerPath: [\n          adapter.controller.basePath.replace(/\\/$/, ''),\n          adapter.controller.path,\n        ].join(''),\n        storage,\n      }),\n    };\n  }\n}\n"]}

package/dist/esm/base/middlewares/request-spy/request-spy.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-spy.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAA8B,MAAM,6BAA6B,CAAC;AAErF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAiC,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAIrF,mPAAmP;AACnP,qBAAa,oBAAqB,SAAQ,UAAW,YAAW,SAAS,CAAC,iBAAiB,CAAC;IAC1F,MAAM,CAAC,QAAQ,CAAC,cAAc,eAAkB;IAEhD,OAAO,CAAC,WAAW,CAAU;IAE7B;;;;;;;;;OASG;;IAOH,8PAA8P;IACxP,SAAS,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAiDjE,wEAAwE;IACxE,KAAK;CAyDN"}
+{"version":3,"file":"request-spy.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAA8B,MAAM,6BAA6B,CAAC;AAErF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAiC,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAIrF,mPAAmP;AACnP,qBAAa,oBAAqB,SAAQ,UAAW,YAAW,SAAS,CAAC,iBAAiB,CAAC;IAC1F,MAAM,CAAC,QAAQ,CAAC,cAAc,eAAkB;IAEhD,OAAO,CAAC,WAAW,CAAU;IAE7B;;;;;;;;;OASG;;IAOH,8PAA8P;IACxP,SAAS,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAsDjE,wEAAwE;IACxE,KAAK;CAyDN"}

package/dist/esm/base/middlewares/request-spy/request-spy.middleware.js

@@ -50,9 +50,15 @@ export class RequestSpyMiddleware extends BaseHelper {
             // Anything else is read, if at all, from a clone: a handler may stream `req.raw.body` on (an upload proxy), and reading the request itself would drain it and mangle binary bytes.
             // A body an earlier middleware read cannot be cloned; Hono's cache serves it instead.
             if (contentType.startsWith(TEXT_CONTENT_TYPE_PREFIX)) {
-                const rs = opts.req.raw.bodyUsed
-                    ? await opts.req.text()
-                    : await opts.req.raw.clone().text();
+                let rs;
+                if (opts.req.raw.bodyUsed) {
+                    const cached = await opts.req.text();
+                    rs = cached;
+                }
+                else {
+                    const cloned = await opts.req.raw.clone().text();
+                    rs = cloned;
+                }
                 return rs;
             }
             return `<${contentLength ?? 'unknown'} bytes, ${contentType}>`;

package/dist/esm/base/middlewares/request-spy/request-spy.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-spy.middleware.js","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAC;AAErF,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,mPAAmP;AACnP,MAAM,OAAO,oBAAqB,SAAQ,UAAU;aAClC,mBAAc,GAAG,cAAc,CAAC;IAIhD;;;;;;;;;OASG;IACH;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,8PAA8P;IAC9P,KAAK,CAAC,SAAS,CAAC,IAA8B;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yMAAyM;QACzM,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnE,IAAI,aAAa,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IACE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBAC3D,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,EACnE,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3B,CAAC;YAED,mLAAmL;YACnL,sFAAsF;YACtF,IAAI,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ;oBAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;oBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,IAAI,aAAa,IAAI,SAAS,WAAW,WAAW,GAAG,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,aAAa,CAAC,cAAc;gBACnC,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK;QACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;YAErF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;YAE7B,kMAAkM;YAClM,MAAM,QAAQ,GAAG,UAAU,IAAI,WAAW,IAAI,SAAS,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2CAA2C,EAC3C,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,EACL,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,4FAA4F;gBAC5F,yFAAyF;gBACzF,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACxF,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChC,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gCAAgC,EAChC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,CACN,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;YAEb,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,EACpC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,QAAQ,CACT,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC","sourcesContent":["import { NetworkUtility } from '@/utilities/network.utility';\nimport { Environment } from '@venizia/ignis-helpers';\nimport { BaseHelper, EnvironmentNames, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport { createMiddleware } from 'hono/factory';\nimport type { MiddlewareHandler } from 'hono/types';\nimport { REQUEST_ID_KEY, RequestErrors, type TContext } from '@venizia/ignis-kernel';\n\nconst TEXT_CONTENT_TYPE_PREFIX = 'text/';\n\n/** Logs incoming/outgoing request details. The BODY is parsed and logged only in a recognised development environment - see the constructor for why that test is fail-closed; elsewhere only a JSON body is parsed, for its malformed-body 400. */\nexport class RequestSpyMiddleware extends BaseHelper implements IProvider<MiddlewareHandler> {\n  static readonly REQUEST_ID_KEY = REQUEST_ID_KEY;\n\n  private isDebugMode: boolean;\n\n  /**\n   * Fail-CLOSED, matching {@link BaseAppErrorMiddleware.isProduction}: only an environment this\n   * framework recognises as a development one enables body logging.\n   *\n   * The previous test was `env !== 'production'`, which enabled it for an unset `NODE_ENV` and for\n   * every pre-production name that carries real user data - `staging`, `uat`, `alpha`, `beta`, and\n   * the abbreviation `prod`. `development-envs.test.ts` pins those as NOT development for exactly\n   * that reason. Redaction is no defence here: it masks secret-SHAPED keys, so `nationalId`,\n   * `cardNumber` and `ssn` were written verbatim.\n   */\n  constructor() {\n    super({ scope: 'SpyMW' });\n    const env = Environment.ambient?.toLowerCase();\n    this.isDebugMode = !!env && EnvironmentNames.DEVELOPMENT_ENVS.has(env);\n  }\n\n  /** Parses the body by Content-Type without draining it for the handler: JSON and form bodies go through the request cache, `text/*` is read from a clone (from the cache once something read it), and any other type is described by its size, never read. */\n  async parseBody(opts: { req: TContext['req'] }): Promise<unknown> {\n    const contentType = opts.req.header(HTTP.Headers.CONTENT_TYPE);\n\n    if (!contentType) {\n      return null;\n    }\n\n    // Only an explicit zero short-circuits: a CHUNKED request carries no Content-Length, so gating on the header's presence would skip every streamed body and let a malformed one detonate deeper as a 500.\n    const contentLength = opts.req.header(HTTP.Headers.CONTENT_LENGTH);\n    if (contentLength === '0' || !opts.req.raw.body) {\n      return null;\n    }\n\n    try {\n      if (contentType.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n        const rs = await opts.req.json();\n        return rs;\n      }\n\n      if (\n        contentType.includes(HTTP.HeaderValues.MULTIPART_FORM_DATA) ||\n        contentType.includes(HTTP.HeaderValues.APPLICATION_FORM_URLENCODED)\n      ) {\n        const rs = await opts.req.parseBody();\n        return rs;\n      }\n\n      if (contentType === HTTP.HeaderValues.APPLICATION_OCTET_STREAM) {\n        return opts.req.raw.body;\n      }\n\n      // Anything else is read, if at all, from a clone: a handler may stream `req.raw.body` on (an upload proxy), and reading the request itself would drain it and mangle binary bytes.\n      // A body an earlier middleware read cannot be cloned; Hono's cache serves it instead.\n      if (contentType.startsWith(TEXT_CONTENT_TYPE_PREFIX)) {\n        const rs = opts.req.raw.bodyUsed\n          ? await opts.req.text()\n          : await opts.req.raw.clone().text();\n        return rs;\n      }\n\n      return `<${contentLength ?? 'unknown'} bytes, ${contentType}>`;\n    } catch {\n      throw getError({\n        error: RequestErrors.BODY_MALFORMED,\n        message: 'Malformed Body Payload',\n      });\n    }\n  }\n\n  /** Returns a Hono middleware that logs request details and duration. */\n  value() {\n    return createMiddleware(async (context, next) => {\n      const t = performance.now();\n      const { req } = context;\n\n      const requestId = context.get(RequestSpyMiddleware.REQUEST_ID_KEY);\n      const incomingIp = NetworkUtility.getIncomingIp(context);\n      const forwardedIp = req.header('x-real-ip') ?? req.header('x-forwarded-for') ?? null;\n\n      const method = req.method;\n      const path = req.path ?? '/';\n\n      // Best-effort, never fatal: a unix socket, some proxies and any in-process call yield no connection info - refusing to serve because the client IP is unknown turns a logging gap into an outage.\n      const clientIp = incomingIp ?? forwardedIp ?? 'unknown';\n      const query = req.query() ?? {};\n\n      if (this.isDebugMode) {\n        const body = await this.parseBody({ req });\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j | body: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n          body,\n        );\n      } else {\n        // Only JSON is parsed here: its clean 400 on a malformed body is a contract. Any other body\n        // would be read for a log line that never prints it, before the route's own size checks.\n        if (req.header(HTTP.Headers.CONTENT_TYPE)?.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n          await this.parseBody({ req });\n        }\n\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n        );\n      }\n\n      await next();\n\n      const duration = (performance.now() - t).toFixed(2);\n      this.logger.info(\n        '[%s][%s][<=] %s %s | Took: %s (ms)',\n        requestId,\n        clientIp,\n        method.padEnd(8, ' '),\n        path,\n        duration,\n      );\n    });\n  }\n}\n"]}
+{"version":3,"file":"request-spy.middleware.js","sourceRoot":"","sources":["../../../../../src/base/middlewares/request-spy/request-spy.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAC;AAErF,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,mPAAmP;AACnP,MAAM,OAAO,oBAAqB,SAAQ,UAAU;aAClC,mBAAc,GAAG,cAAc,CAAC;IAIhD;;;;;;;;;OASG;IACH;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,8PAA8P;IAC9P,KAAK,CAAC,SAAS,CAAC,IAA8B;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yMAAyM;QACzM,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnE,IAAI,aAAa,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IACE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBAC3D,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,EACnE,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3B,CAAC;YAED,mLAAmL;YACnL,sFAAsF;YACtF,IAAI,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACrD,IAAI,EAAU,CAAC;gBACf,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACrC,EAAE,GAAG,MAAM,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;oBACjD,EAAE,GAAG,MAAM,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,IAAI,aAAa,IAAI,SAAS,WAAW,WAAW,GAAG,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,aAAa,CAAC,cAAc;gBACnC,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK;QACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;YAErF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;YAE7B,kMAAkM;YAClM,MAAM,QAAQ,GAAG,UAAU,IAAI,WAAW,IAAI,SAAS,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2CAA2C,EAC3C,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,EACL,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,4FAA4F;gBAC5F,yFAAyF;gBACzF,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACxF,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChC,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gCAAgC,EAChC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,KAAK,CACN,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;YAEb,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,EACpC,SAAS,EACT,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EACrB,IAAI,EACJ,QAAQ,CACT,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC","sourcesContent":["import { NetworkUtility } from '@/utilities/network.utility';\nimport { Environment } from '@venizia/ignis-helpers';\nimport { BaseHelper, EnvironmentNames, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport { createMiddleware } from 'hono/factory';\nimport type { MiddlewareHandler } from 'hono/types';\nimport { REQUEST_ID_KEY, RequestErrors, type TContext } from '@venizia/ignis-kernel';\n\nconst TEXT_CONTENT_TYPE_PREFIX = 'text/';\n\n/** Logs incoming/outgoing request details. The BODY is parsed and logged only in a recognised development environment - see the constructor for why that test is fail-closed; elsewhere only a JSON body is parsed, for its malformed-body 400. */\nexport class RequestSpyMiddleware extends BaseHelper implements IProvider<MiddlewareHandler> {\n  static readonly REQUEST_ID_KEY = REQUEST_ID_KEY;\n\n  private isDebugMode: boolean;\n\n  /**\n   * Fail-CLOSED, matching {@link BaseAppErrorMiddleware.isProduction}: only an environment this\n   * framework recognises as a development one enables body logging.\n   *\n   * The previous test was `env !== 'production'`, which enabled it for an unset `NODE_ENV` and for\n   * every pre-production name that carries real user data - `staging`, `uat`, `alpha`, `beta`, and\n   * the abbreviation `prod`. `development-envs.test.ts` pins those as NOT development for exactly\n   * that reason. Redaction is no defence here: it masks secret-SHAPED keys, so `nationalId`,\n   * `cardNumber` and `ssn` were written verbatim.\n   */\n  constructor() {\n    super({ scope: 'SpyMW' });\n    const env = Environment.ambient?.toLowerCase();\n    this.isDebugMode = !!env && EnvironmentNames.DEVELOPMENT_ENVS.has(env);\n  }\n\n  /** Parses the body by Content-Type without draining it for the handler: JSON and form bodies go through the request cache, `text/*` is read from a clone (from the cache once something read it), and any other type is described by its size, never read. */\n  async parseBody(opts: { req: TContext['req'] }): Promise<unknown> {\n    const contentType = opts.req.header(HTTP.Headers.CONTENT_TYPE);\n\n    if (!contentType) {\n      return null;\n    }\n\n    // Only an explicit zero short-circuits: a CHUNKED request carries no Content-Length, so gating on the header's presence would skip every streamed body and let a malformed one detonate deeper as a 500.\n    const contentLength = opts.req.header(HTTP.Headers.CONTENT_LENGTH);\n    if (contentLength === '0' || !opts.req.raw.body) {\n      return null;\n    }\n\n    try {\n      if (contentType.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n        const rs = await opts.req.json();\n        return rs;\n      }\n\n      if (\n        contentType.includes(HTTP.HeaderValues.MULTIPART_FORM_DATA) ||\n        contentType.includes(HTTP.HeaderValues.APPLICATION_FORM_URLENCODED)\n      ) {\n        const rs = await opts.req.parseBody();\n        return rs;\n      }\n\n      if (contentType === HTTP.HeaderValues.APPLICATION_OCTET_STREAM) {\n        return opts.req.raw.body;\n      }\n\n      // Anything else is read, if at all, from a clone: a handler may stream `req.raw.body` on (an upload proxy), and reading the request itself would drain it and mangle binary bytes.\n      // A body an earlier middleware read cannot be cloned; Hono's cache serves it instead.\n      if (contentType.startsWith(TEXT_CONTENT_TYPE_PREFIX)) {\n        let rs: string;\n        if (opts.req.raw.bodyUsed) {\n          const cached = await opts.req.text();\n          rs = cached;\n        } else {\n          const cloned = await opts.req.raw.clone().text();\n          rs = cloned;\n        }\n        return rs;\n      }\n\n      return `<${contentLength ?? 'unknown'} bytes, ${contentType}>`;\n    } catch {\n      throw getError({\n        error: RequestErrors.BODY_MALFORMED,\n        message: 'Malformed Body Payload',\n      });\n    }\n  }\n\n  /** Returns a Hono middleware that logs request details and duration. */\n  value() {\n    return createMiddleware(async (context, next) => {\n      const t = performance.now();\n      const { req } = context;\n\n      const requestId = context.get(RequestSpyMiddleware.REQUEST_ID_KEY);\n      const incomingIp = NetworkUtility.getIncomingIp(context);\n      const forwardedIp = req.header('x-real-ip') ?? req.header('x-forwarded-for') ?? null;\n\n      const method = req.method;\n      const path = req.path ?? '/';\n\n      // Best-effort, never fatal: a unix socket, some proxies and any in-process call yield no connection info - refusing to serve because the client IP is unknown turns a logging gap into an outage.\n      const clientIp = incomingIp ?? forwardedIp ?? 'unknown';\n      const query = req.query() ?? {};\n\n      if (this.isDebugMode) {\n        const body = await this.parseBody({ req });\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j | body: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n          body,\n        );\n      } else {\n        // Only JSON is parsed here: its clean 400 on a malformed body is a contract. Any other body\n        // would be read for a log line that never prints it, before the route's own size checks.\n        if (req.header(HTTP.Headers.CONTENT_TYPE)?.includes(HTTP.HeaderValues.APPLICATION_JSON)) {\n          await this.parseBody({ req });\n        }\n\n        this.logger.info(\n          '[%s][%s][=>] %s %s | query: %j',\n          requestId,\n          clientIp,\n          method.padEnd(8, ' '),\n          path,\n          query,\n        );\n      }\n\n      await next();\n\n      const duration = (performance.now() - t).toFixed(2);\n      this.logger.info(\n        '[%s][%s][<=] %s %s | Took: %s (ms)',\n        requestId,\n        clientIp,\n        method.padEnd(8, ' '),\n        path,\n        duration,\n      );\n    });\n  }\n}\n"]}

package/dist/esm/common/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/common/constants.ts"],"names":[],"mappings":"AAEA,kCAAkC;AAClC,qBAAa,GAAG;IACd,MAAM,CAAC,QAAQ,CAAC,gBAAgB,SACkC;IAElE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,MAAM;IACzC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,KAAK;IAEzC,MAAM,CAAC,QAAQ,CAAC,WAAW,gBAAgB;IAC3C,MAAM,CAAC,QAAQ,CAAC,SAAS,YAAY;IACrC,MAAM,CAAC,QAAQ,CAAC,QAAQ,WAAW;CACpC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/common/constants.ts"],"names":[],"mappings":"AAEA,kCAAkC;AAClC,qBAAa,GAAG;IACd,MAAM,CAAC,QAAQ,CAAC,gBAAgB,SAC0D;IAE1F,MAAM,CAAC,QAAQ,CAAC,mBAAmB,MAAM;IACzC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,KAAK;IAEzC,MAAM,CAAC,QAAQ,CAAC,WAAW,gBAAgB;IAC3C,MAAM,CAAC,QAAQ,CAAC,SAAS,YAAY;IACrC,MAAM,CAAC,QAAQ,CAAC,QAAQ,WAAW;CACpC"}

package/dist/esm/common/constants.js

@@ -1,7 +1,7 @@
-import { blankToUndefined } from '@venizia/ignis-helpers/core';
+import { ParseUtility } from '@venizia/ignis-helpers/core';
 /** Application-wide constants. */
 export class App {
-    static { this.APPLICATION_NAME = blankToUndefined(process.env.APP_ENV_APPLICATION_NAME) ?? 'APP'; }
+    static { this.APPLICATION_NAME = ParseUtility.blankToUndefined({ input: process.env.APP_ENV_APPLICATION_NAME }) ?? 'APP'; }
     static { this.DEFAULT_QUERY_LIMIT = 50; }
     static { this.DEFAULT_QUERY_OFFSET = 0; }
     static { this.DS_POSTGRES = 'postgresql'; }

package/dist/esm/common/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,kCAAkC;AAClC,MAAM,OAAO,GAAG;aACE,qBAAgB,GAC9B,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,KAAK,CAAC;aAElD,wBAAmB,GAAG,EAAE,CAAC;aACzB,yBAAoB,GAAG,CAAC,CAAC;aAEzB,gBAAW,GAAG,YAAY,CAAC;aAC3B,cAAS,GAAG,QAAQ,CAAC;aACrB,aAAQ,GAAG,OAAO,CAAC","sourcesContent":["import { blankToUndefined } from '@venizia/ignis-helpers/core';\n\n/** Application-wide constants. */\nexport class App {\n  static readonly APPLICATION_NAME =\n    blankToUndefined(process.env.APP_ENV_APPLICATION_NAME) ?? 'APP';\n\n  static readonly DEFAULT_QUERY_LIMIT = 50;\n  static readonly DEFAULT_QUERY_OFFSET = 0;\n\n  static readonly DS_POSTGRES = 'postgresql';\n  static readonly DS_MEMORY = 'memory';\n  static readonly DS_REDIS = 'redis';\n}\n"]}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,kCAAkC;AAClC,MAAM,OAAO,GAAG;aACE,qBAAgB,GAC9B,YAAY,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC;aAE1E,wBAAmB,GAAG,EAAE,CAAC;aACzB,yBAAoB,GAAG,CAAC,CAAC;aAEzB,gBAAW,GAAG,YAAY,CAAC;aAC3B,cAAS,GAAG,QAAQ,CAAC;aACrB,aAAQ,GAAG,OAAO,CAAC","sourcesContent":["import { ParseUtility } from '@venizia/ignis-helpers/core';\n\n/** Application-wide constants. */\nexport class App {\n  static readonly APPLICATION_NAME =\n    ParseUtility.blankToUndefined({ input: process.env.APP_ENV_APPLICATION_NAME }) ?? 'APP';\n\n  static readonly DEFAULT_QUERY_LIMIT = 50;\n  static readonly DEFAULT_QUERY_OFFSET = 0;\n\n  static readonly DS_POSTGRES = 'postgresql';\n  static readonly DS_MEMORY = 'memory';\n  static readonly DS_REDIS = 'redis';\n}\n"]}

package/dist/esm/components/api-reference/ui/scalar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scalar.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,gBAAiB,SAAQ,UAAW,YAAW,WAAW;;IAK/D,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAoBxF"}
+{"version":3,"file":"scalar.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,gBAAiB,SAAQ,UAAW,YAAW,WAAW;;IAK/D,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAqBxF"}

package/dist/esm/components/api-reference/ui/scalar.js

@@ -6,7 +6,8 @@ export class ScalarUIProvider extends BaseHelper {
     async render(context, config, next) {
         let scalarModule;
         try {
-            scalarModule = await import('@scalar/hono-api-reference');
+            const result = await import('@scalar/hono-api-reference');
+            scalarModule = result;
         }
         catch (error) {
             this.logger

package/dist/esm/components/api-reference/ui/scalar.js.map

@@ -1 +1 @@
-{"version":3,"file":"scalar.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,YAAyD,CAAC;QAE9D,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;YAE3E,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,gHAAgH;aACnH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;QAChC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class ScalarUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: ScalarUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let scalarModule: typeof import('@scalar/hono-api-reference');\n\n    try {\n      scalarModule = await import('@scalar/hono-api-reference');\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@scalar/hono-api-reference' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[ScalarUIProvider][render] '@scalar/hono-api-reference' is required to render the Scalar UI. Please install it\",\n      });\n    }\n\n    const { Scalar } = scalarModule;\n    const { title, url, ...customConfig } = config;\n    return Scalar({ url, pageTitle: title, ...customConfig })(context, next);\n  }\n}\n"]}
+{"version":3,"file":"scalar.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/scalar.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,YAAyD,CAAC;QAE9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;YAC1D,YAAY,GAAG,MAAM,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;YAE3E,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,gHAAgH;aACnH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;QAChC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class ScalarUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: ScalarUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let scalarModule: typeof import('@scalar/hono-api-reference');\n\n    try {\n      const result = await import('@scalar/hono-api-reference');\n      scalarModule = result;\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@scalar/hono-api-reference' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[ScalarUIProvider][render] '@scalar/hono-api-reference' is required to render the Scalar UI. Please install it\",\n      });\n    }\n\n    const { Scalar } = scalarModule;\n    const { title, url, ...customConfig } = config;\n    return Scalar({ url, pageTitle: title, ...customConfig })(context, next);\n  }\n}\n"]}

package/dist/esm/components/api-reference/ui/swagger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"swagger.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,iBAAkB,SAAQ,UAAW,YAAW,WAAW;;IAKhE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAoBxF"}
+{"version":3,"file":"swagger.d.ts","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,qBAAa,iBAAkB,SAAQ,UAAW,YAAW,WAAW;;IAKhE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAqBxF"}

package/dist/esm/components/api-reference/ui/swagger.js

@@ -6,7 +6,8 @@ export class SwaggerUIProvider extends BaseHelper {
     async render(context, config, next) {
         let swaggerModule;
         try {
-            swaggerModule = await import('@hono/swagger-ui');
+            const result = await import('@hono/swagger-ui');
+            swaggerModule = result;
         }
         catch (error) {
             this.logger

package/dist/esm/components/api-reference/ui/swagger.js.map

@@ -1 +1 @@
-{"version":3,"file":"swagger.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAC/C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,aAAgD,CAAC;QAErD,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;YAEjE,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;QACpC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class SwaggerUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: SwaggerUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let swaggerModule: typeof import('@hono/swagger-ui');\n\n    try {\n      swaggerModule = await import('@hono/swagger-ui');\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@hono/swagger-ui' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[SwaggerUIProvider][render] '@hono/swagger-ui' is required to render the Swagger UI. Please install it\",\n      });\n    }\n\n    const { swaggerUI } = swaggerModule;\n    const { title, url, ...customConfig } = config;\n    return swaggerUI({ title, url, ...customConfig })(context, next);\n  }\n}\n"]}
+{"version":3,"file":"swagger.js","sourceRoot":"","sources":["../../../../../src/components/api-reference/ui/swagger.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAC/C;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,MAAiB,EAAE,IAAU;QAC1D,IAAI,aAAgD,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAChD,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;YAEjE,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;QACpC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;CACF","sourcesContent":["import type { Context, Next } from 'hono';\nimport type { IUIConfig, IUIProvider } from '../common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport class SwaggerUIProvider extends BaseHelper implements IUIProvider {\n  constructor() {\n    super({ scope: SwaggerUIProvider.name });\n  }\n\n  async render(context: Context, config: IUIConfig, next: Next): Promise<Response | void> {\n    let swaggerModule: typeof import('@hono/swagger-ui');\n\n    try {\n      const result = await import('@hono/swagger-ui');\n      swaggerModule = result;\n    } catch (error) {\n      this.logger\n        .for(this.render.name)\n        .error(\"Failed to load '@hono/swagger-ui' | Error: %s\", error);\n\n      throw getError({\n        message:\n          \"[SwaggerUIProvider][render] '@hono/swagger-ui' is required to render the Swagger UI. Please install it\",\n      });\n    }\n\n    const { swaggerUI } = swaggerModule;\n    const { title, url, ...customConfig } = config;\n    return swaggerUI({ title, url, ...customConfig })(context, next);\n  }\n}\n"]}

package/dist/esm/components/auth/authenticate/component.js

@@ -14,7 +14,7 @@ var AuthenticateComponent_1;
 import { getError } from '@venizia/ignis-helpers/core';
 import { Binding } from '@venizia/ignis-inversion';
 import { AuthenticateBindingKeys, Authentication, AuthenticationStrategyRegistry, BaseComponent, controller, CoreBindings, inject, JOSEStandards, JWKSKeyFormats, JWKSModes, ServiceAssertion, } from '@venizia/ignis-kernel';
-import { defineAuthController, JWKSController } from './controllers/index.js';
+import { AuthControllerFactory, JWKSController } from './controllers/index.js';
 import { ServiceCertsController } from './controllers/service-certs/index.js';
 import { BasicTokenService, JWKSIssuerTokenService, JWKSVerifierTokenService, JWSTokenService, } from './services/index.js';
 import { JoseLoader } from './services/jose-loader.js';
@@ -255,7 +255,7 @@ let AuthenticateComponent = AuthenticateComponent_1 = class AuthenticateComponen
                 message: '[defineControllers] Auth controller requires jwtOptions to be configured',
             });
         }
-        const AuthController = defineAuthController(restOptions.controllerOpts);
+        const AuthController = AuthControllerFactory.define(restOptions.controllerOpts);
         this.application.controller(AuthController);
         this.logger.for(this.defineControllers.name).info('Auth controller registered');
     }

package/dist/esm/components/auth/authenticate/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,8BAA8B,EAC9B,aAAa,EACb,UAAU,EACV,YAAY,EAKZ,MAAM,EAEN,aAAa,EACb,cAAc,EACd,SAAS,EACT,gBAAgB,GAKjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAE9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,aAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,uBAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAEQ,OAAO;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;YAC/D,GAAG,EAAE,uBAAuB,CAAC,WAAW;YACxC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;YACnE,GAAG,EAAE,uBAAuB,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;YACnE,GAAG,EAAE,uBAAuB,CAAC,YAAY;YACzC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAsB;YAC/D,GAAG,EAAE,uBAAuB,CAAC,eAAe;YAC5C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,qGAAqG;aACxG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAEhG,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,kDAAmD,UAAkB,CAAC,QAAQ,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAuC;QAC/D,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;YAE1F,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,qHAAqH,MAAM,EAAE;gBACtI,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAA0C;QAC9D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAErC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEpD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAEO,cAAc,CAAC,IAA2C;QAChE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAEtC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,WAAW,CAAC;gBAE/B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC1D,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,4EAA4E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;oBACpB,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAClC,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAqB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACvE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAEjD,wGAAwG;gBACxG,OAAO,CAAC,QAAQ,CACd,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,EAC1D,cAAc,CACf,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,MAAM,YAAY,GAAG,WAAW,CAAC;gBAEjC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAuB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACzE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,wFAAwF;gBACxF,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,uCAAwC,WAAkC,CAAC,IAAI,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,IAA8C;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;iBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wIAAwI;aAC3I,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAE1D,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,gBAAgB,CAAC,iBAAiB,CAAC;YACjF,IAAI,CAAC,WAAW;iBACb,IAAI,CAAS,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;iBACjE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAErB,iFAAiF;YACjF,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,cAAc,CAAC,gBAAgB,EAAE,QAAQ,EAAE,6BAA6B,EAAE;aACnF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAChC,IAAI,CACH,wEAAwE,EACxE,cAAc,CAAC,IAAI,EACnB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAC/D,CAAC;IACN,CAAC;IAEO,eAAe,CAAC,IAAkD;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AA/SY,qBAAqB;IAE7B,WAAA,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAF1C,qBAAqB,CA+SjC","sourcesContent":["import type { BaseApplication } from '@/base/applications/base';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { Binding } from '@venizia/ignis-inversion';\nimport {\n  AuthenticateBindingKeys,\n  Authentication,\n  AuthenticationStrategyRegistry,\n  BaseComponent,\n  controller,\n  CoreBindings,\n  type IAuthenticateOptions,\n  type IJWKSIssuerOptions,\n  type IJWKSVerifierOptions,\n  type IJWSTokenServiceOptions,\n  inject,\n  type IServiceAuthOptions,\n  JOSEStandards,\n  JWKSKeyFormats,\n  JWKSModes,\n  ServiceAssertion,\n  type TAuthenticationRestOptions,\n  type TBasicTokenServiceOptions,\n  type TJWKSTokenServiceOptions,\n  type TJWTTokenServiceOptions,\n} from '@venizia/ignis-kernel';\nimport { defineAuthController, JWKSController } from './controllers';\nimport { ServiceCertsController } from './controllers/service-certs';\nimport {\n  BasicTokenService,\n  JWKSIssuerTokenService,\n  JWKSVerifierTokenService,\n  JWSTokenService,\n} from './services';\nimport { JoseLoader } from './services/jose-loader';\nimport { ServiceAssertionSignerService } from './services/service/signer.service';\nimport { ServiceAssertionVerifierService } from './services/service/verifier.service';\nimport { ServiceAuthenticationStrategy } from './strategies/service.strategy';\n\nconst DEFAULT_SECRET = 'unknown_secret';\n\nexport class AuthenticateComponent extends BaseComponent {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: AuthenticateComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [AuthenticateBindingKeys.REST_OPTIONS]: Binding.bind<TAuthenticationRestOptions>({\n          key: AuthenticateBindingKeys.REST_OPTIONS,\n        }).toValue({ useAuthController: false }),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    const jwtOptions = this.application.get<TJWTTokenServiceOptions>({\n      key: AuthenticateBindingKeys.JWT_OPTIONS,\n      isOptional: true,\n    });\n    const basicOptions = this.application.get<TBasicTokenServiceOptions>({\n      key: AuthenticateBindingKeys.BASIC_OPTIONS,\n      isOptional: true,\n    });\n    const restOptions = this.application.get<TAuthenticationRestOptions>({\n      key: AuthenticateBindingKeys.REST_OPTIONS,\n      isOptional: true,\n    });\n    const serviceOptions = this.application.get<IServiceAuthOptions>({\n      key: AuthenticateBindingKeys.SERVICE_OPTIONS,\n      isOptional: true,\n    });\n\n    // A service that only VERIFIES assertions needs neither jwt nor basic - and that application,\n    // an IGNIS app consuming no user tokens at all, is exactly what the service strategy is for.\n    if (!jwtOptions && !basicOptions && !serviceOptions) {\n      throw getError({\n        message:\n          '[AuthenticateComponent] At least one of jwtOptions, basicOptions or serviceOptions must be provided',\n      });\n    }\n\n    const options: IAuthenticateOptions = { restOptions, jwtOptions, basicOptions, serviceOptions };\n\n    if (jwtOptions) {\n      switch (jwtOptions.standard) {\n        case JOSEStandards.JWS: {\n          this.defineJWSAuth({ options: jwtOptions.options });\n          break;\n        }\n        case JOSEStandards.JWKS: {\n          this.defineJWKSAuth({ options: jwtOptions.options });\n          break;\n        }\n        default: {\n          throw getError({\n            message: `[AuthenticateComponent] Unknown JOSE standard: ${(jwtOptions as any).standard}`,\n          });\n        }\n      }\n    }\n\n    this.defineBasicAuth({ basicOptions });\n    this.defineServiceAuth({ serviceOptions });\n\n    this.defineControllers({ options });\n\n    this.defineOAuth2();\n\n    return this.preloadJose({ options });\n  }\n\n  /**\n   * Loads `jose` at boot when a configured service signs or verifies with it, so a missing or broken\n   * install fails the boot instead of answering every token check with a 401.\n   */\n  private async preloadJose(opts: { options: IAuthenticateOptions }): Promise<void> {\n    const { jwtOptions, serviceOptions } = opts.options;\n    if (!jwtOptions && !serviceOptions) {\n      return;\n    }\n\n    try {\n      await JoseLoader.load();\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      this.logger.for(this.preloadJose.name).error(\"Failed to load 'jose' | Error: %s\", reason);\n\n      throw getError({\n        message: `[AuthenticateComponent] Cannot load 'jose', which JWT and service authentication need. Please install it | Error: ${reason}`,\n        cause: error,\n      });\n    }\n  }\n\n  private defineJWSAuth(opts: { options: IJWSTokenServiceOptions }): void {\n    const { options: jwsOptions } = opts;\n\n    const { jwtSecret, getTokenExpiresFn } = jwsOptions;\n\n    if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {\n      throw getError({\n        message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,\n      });\n    }\n\n    if (!getTokenExpiresFn) {\n      throw getError({\n        message: '[defineJWSAuth] getTokenExpiresFn is required',\n      });\n    }\n\n    this.application\n      .bind<IJWSTokenServiceOptions>({ key: AuthenticateBindingKeys.JWT_OPTIONS })\n      .toValue(jwsOptions);\n    this.application.service(JWSTokenService);\n\n    this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');\n  }\n\n  private defineJWKSAuth(opts: { options: TJWKSTokenServiceOptions }): void {\n    const { options: jwksOptions } = opts;\n\n    switch (jwksOptions.mode) {\n      case JWKSModes.ISSUER: {\n        const issuerOpts = jwksOptions;\n\n        if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {\n          throw getError({\n            message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',\n          });\n        }\n\n        if (!issuerOpts.keys?.format || !JWKSKeyFormats.isValid(issuerOpts.keys.format)) {\n          throw getError({\n            message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...JWKSKeyFormats.SCHEME_SET].join(', ')}`,\n          });\n        }\n\n        if (!issuerOpts.kid) {\n          throw getError({ message: '[defineJWKSAuth] kid is required for issuer mode' });\n        }\n\n        if (!issuerOpts.getTokenExpiresFn) {\n          throw getError({\n            message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',\n          });\n        }\n\n        this.application\n          .bind<IJWKSIssuerOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(issuerOpts);\n        this.application.service(JWKSIssuerTokenService);\n\n        // Path depends on a runtime option, so @controller can't be applied statically — decorate here instead.\n        Reflect.decorate(\n          [controller({ path: issuerOpts?.rest?.path ?? '/certs' })],\n          JWKSController,\n        );\n        this.application.controller(JWKSController);\n\n        this.logger\n          .for(this.defineJWKSAuth.name)\n          .info('JWKS issuer configured with /certs endpoint');\n        break;\n      }\n\n      case JWKSModes.VERIFIER: {\n        const verifierOpts = jwksOptions;\n\n        if (!verifierOpts.jwksUrl) {\n          throw getError({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });\n        }\n\n        this.application\n          .bind<IJWKSVerifierOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(verifierOpts);\n        this.application.service(JWKSVerifierTokenService);\n\n        this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');\n        break;\n      }\n\n      default: {\n        // Same exhaustive-switch-narrows-to-never situation as the JOSE standard default above.\n        throw getError({\n          message: `[defineJWKSAuth] Invalid JWKS mode: ${(jwksOptions as { mode?: unknown }).mode}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Service-to-service authentication. Absent options mean no strategy is registered and no route is\n   * mounted, so an application that never sets them is byte-identical to today.\n   *\n   * The certs route is mounted only when SIGNING keys are present. Most services are called and\n   * never call; publishing a key set for a service that signs nothing advertises a capability it\n   * does not have.\n   */\n  private defineServiceAuth(opts: { serviceOptions?: IServiceAuthOptions }): void {\n    const { serviceOptions } = opts;\n\n    if (!serviceOptions) {\n      this.logger\n        .for(this.defineServiceAuth.name)\n        .debug('serviceOptions not provided, skipping service authentication');\n      return;\n    }\n\n    if (!serviceOptions.name) {\n      throw getError({\n        message:\n          '[defineServiceAuth] name is required | it is the issuer this service stamps and the audience it demands',\n      });\n    }\n\n    if (!serviceOptions.resolvePrincipal) {\n      throw getError({\n        message:\n          '[defineServiceAuth] resolvePrincipal is required | the framework proves WHICH SERVICE called, the application decides who that acts as',\n      });\n    }\n\n    this.application.service(ServiceAssertionVerifierService);\n\n    if (serviceOptions.keys) {\n      this.application.service(ServiceAssertionSignerService);\n\n      const restPath = serviceOptions.rest?.path ?? ServiceAssertion.DEFAULT_REST_PATH;\n      this.application\n        .bind<string>({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n        .toValue(restPath);\n\n      // Path depends on a runtime option, so @controller cannot be applied statically.\n      Reflect.decorate([controller({ path: restPath })], ServiceCertsController);\n      this.application.controller(ServiceCertsController);\n    }\n\n    AuthenticationStrategyRegistry.getInstance().register({\n      container: this.application,\n      strategies: [\n        { name: Authentication.STRATEGY_SERVICE, strategy: ServiceAuthenticationStrategy },\n      ],\n    });\n\n    this.logger\n      .for(this.defineServiceAuth.name)\n      .info(\n        'Service authentication configured | name: %s | signs: %s | callers: %s',\n        serviceOptions.name,\n        Boolean(serviceOptions.keys),\n        Object.keys(serviceOptions.callers ?? {}).join(', ') || 'none',\n      );\n  }\n\n  private defineBasicAuth(opts: { basicOptions?: TBasicTokenServiceOptions }): void {\n    const { basicOptions } = opts;\n\n    if (!basicOptions) {\n      this.logger\n        .for(this.defineBasicAuth.name)\n        .debug('basicOptions not provided, skipping Basic configuration');\n      return;\n    }\n\n    if (!basicOptions.verifyCredentials) {\n      throw getError({\n        message: '[defineBasicAuth] verifyCredentials function is required',\n      });\n    }\n\n    this.application\n      .bind<TBasicTokenServiceOptions>({ key: AuthenticateBindingKeys.BASIC_OPTIONS })\n      .toValue(basicOptions);\n    this.application.service(BasicTokenService);\n\n    this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');\n  }\n\n  private defineControllers(opts: { options: IAuthenticateOptions }): void {\n    const { restOptions, jwtOptions } = opts.options;\n\n    if (!restOptions?.useAuthController) {\n      this.logger.for(this.defineControllers.name).debug('Auth controller disabled');\n      return;\n    }\n\n    if (!jwtOptions) {\n      throw getError({\n        message: '[defineControllers] Auth controller requires jwtOptions to be configured',\n      });\n    }\n\n    const AuthController = defineAuthController(restOptions.controllerOpts);\n    this.application.controller(AuthController);\n\n    this.logger.for(this.defineControllers.name).info('Auth controller registered');\n  }\n\n  defineOAuth2() {\n    // TODO Implement OAuth2\n  }\n}\n"]}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,8BAA8B,EAC9B,aAAa,EACb,UAAU,EACV,YAAY,EAKZ,MAAM,EAEN,aAAa,EACb,cAAc,EACd,SAAS,EACT,gBAAgB,GAKjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAE9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,aAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,uBAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAEQ,OAAO;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;YAC/D,GAAG,EAAE,uBAAuB,CAAC,WAAW;YACxC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;YACnE,GAAG,EAAE,uBAAuB,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;YACnE,GAAG,EAAE,uBAAuB,CAAC,YAAY;YACzC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAsB;YAC/D,GAAG,EAAE,uBAAuB,CAAC,eAAe;YAC5C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,qGAAqG;aACxG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAEhG,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,kDAAmD,UAAkB,CAAC,QAAQ,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAuC;QAC/D,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;YAE1F,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,qHAAqH,MAAM,EAAE;gBACtI,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAA0C;QAC9D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAErC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEpD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAEO,cAAc,CAAC,IAA2C;QAChE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAEtC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,WAAW,CAAC;gBAE/B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC1D,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,4EAA4E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;oBACpB,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAClC,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAqB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACvE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAEjD,wGAAwG;gBACxG,OAAO,CAAC,QAAQ,CACd,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,EAC1D,cAAc,CACf,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,MAAM,YAAY,GAAG,WAAW,CAAC;gBAEjC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAuB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACzE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,wFAAwF;gBACxF,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,uCAAwC,WAAkC,CAAC,IAAI,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,IAA8C;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;iBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wIAAwI;aAC3I,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAE1D,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,gBAAgB,CAAC,iBAAiB,CAAC;YACjF,IAAI,CAAC,WAAW;iBACb,IAAI,CAAS,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;iBACjE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAErB,iFAAiF;YACjF,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,cAAc,CAAC,gBAAgB,EAAE,QAAQ,EAAE,6BAA6B,EAAE;aACnF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAChC,IAAI,CACH,wEAAwE,EACxE,cAAc,CAAC,IAAI,EACnB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAC/D,CAAC;IACN,CAAC;IAEO,eAAe,CAAC,IAAkD;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AA/SY,qBAAqB;IAE7B,WAAA,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAF1C,qBAAqB,CA+SjC","sourcesContent":["import type { BaseApplication } from '@/base/applications/base';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { Binding } from '@venizia/ignis-inversion';\nimport {\n  AuthenticateBindingKeys,\n  Authentication,\n  AuthenticationStrategyRegistry,\n  BaseComponent,\n  controller,\n  CoreBindings,\n  type IAuthenticateOptions,\n  type IJWKSIssuerOptions,\n  type IJWKSVerifierOptions,\n  type IJWSTokenServiceOptions,\n  inject,\n  type IServiceAuthOptions,\n  JOSEStandards,\n  JWKSKeyFormats,\n  JWKSModes,\n  ServiceAssertion,\n  type TAuthenticationRestOptions,\n  type TBasicTokenServiceOptions,\n  type TJWKSTokenServiceOptions,\n  type TJWTTokenServiceOptions,\n} from '@venizia/ignis-kernel';\nimport { AuthControllerFactory, JWKSController } from './controllers';\nimport { ServiceCertsController } from './controllers/service-certs';\nimport {\n  BasicTokenService,\n  JWKSIssuerTokenService,\n  JWKSVerifierTokenService,\n  JWSTokenService,\n} from './services';\nimport { JoseLoader } from './services/jose-loader';\nimport { ServiceAssertionSignerService } from './services/service/signer.service';\nimport { ServiceAssertionVerifierService } from './services/service/verifier.service';\nimport { ServiceAuthenticationStrategy } from './strategies/service.strategy';\n\nconst DEFAULT_SECRET = 'unknown_secret';\n\nexport class AuthenticateComponent extends BaseComponent {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: AuthenticateComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [AuthenticateBindingKeys.REST_OPTIONS]: Binding.bind<TAuthenticationRestOptions>({\n          key: AuthenticateBindingKeys.REST_OPTIONS,\n        }).toValue({ useAuthController: false }),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    const jwtOptions = this.application.get<TJWTTokenServiceOptions>({\n      key: AuthenticateBindingKeys.JWT_OPTIONS,\n      isOptional: true,\n    });\n    const basicOptions = this.application.get<TBasicTokenServiceOptions>({\n      key: AuthenticateBindingKeys.BASIC_OPTIONS,\n      isOptional: true,\n    });\n    const restOptions = this.application.get<TAuthenticationRestOptions>({\n      key: AuthenticateBindingKeys.REST_OPTIONS,\n      isOptional: true,\n    });\n    const serviceOptions = this.application.get<IServiceAuthOptions>({\n      key: AuthenticateBindingKeys.SERVICE_OPTIONS,\n      isOptional: true,\n    });\n\n    // A service that only VERIFIES assertions needs neither jwt nor basic - and that application,\n    // an IGNIS app consuming no user tokens at all, is exactly what the service strategy is for.\n    if (!jwtOptions && !basicOptions && !serviceOptions) {\n      throw getError({\n        message:\n          '[AuthenticateComponent] At least one of jwtOptions, basicOptions or serviceOptions must be provided',\n      });\n    }\n\n    const options: IAuthenticateOptions = { restOptions, jwtOptions, basicOptions, serviceOptions };\n\n    if (jwtOptions) {\n      switch (jwtOptions.standard) {\n        case JOSEStandards.JWS: {\n          this.defineJWSAuth({ options: jwtOptions.options });\n          break;\n        }\n        case JOSEStandards.JWKS: {\n          this.defineJWKSAuth({ options: jwtOptions.options });\n          break;\n        }\n        default: {\n          throw getError({\n            message: `[AuthenticateComponent] Unknown JOSE standard: ${(jwtOptions as any).standard}`,\n          });\n        }\n      }\n    }\n\n    this.defineBasicAuth({ basicOptions });\n    this.defineServiceAuth({ serviceOptions });\n\n    this.defineControllers({ options });\n\n    this.defineOAuth2();\n\n    return this.preloadJose({ options });\n  }\n\n  /**\n   * Loads `jose` at boot when a configured service signs or verifies with it, so a missing or broken\n   * install fails the boot instead of answering every token check with a 401.\n   */\n  private async preloadJose(opts: { options: IAuthenticateOptions }): Promise<void> {\n    const { jwtOptions, serviceOptions } = opts.options;\n    if (!jwtOptions && !serviceOptions) {\n      return;\n    }\n\n    try {\n      await JoseLoader.load();\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      this.logger.for(this.preloadJose.name).error(\"Failed to load 'jose' | Error: %s\", reason);\n\n      throw getError({\n        message: `[AuthenticateComponent] Cannot load 'jose', which JWT and service authentication need. Please install it | Error: ${reason}`,\n        cause: error,\n      });\n    }\n  }\n\n  private defineJWSAuth(opts: { options: IJWSTokenServiceOptions }): void {\n    const { options: jwsOptions } = opts;\n\n    const { jwtSecret, getTokenExpiresFn } = jwsOptions;\n\n    if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {\n      throw getError({\n        message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,\n      });\n    }\n\n    if (!getTokenExpiresFn) {\n      throw getError({\n        message: '[defineJWSAuth] getTokenExpiresFn is required',\n      });\n    }\n\n    this.application\n      .bind<IJWSTokenServiceOptions>({ key: AuthenticateBindingKeys.JWT_OPTIONS })\n      .toValue(jwsOptions);\n    this.application.service(JWSTokenService);\n\n    this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');\n  }\n\n  private defineJWKSAuth(opts: { options: TJWKSTokenServiceOptions }): void {\n    const { options: jwksOptions } = opts;\n\n    switch (jwksOptions.mode) {\n      case JWKSModes.ISSUER: {\n        const issuerOpts = jwksOptions;\n\n        if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {\n          throw getError({\n            message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',\n          });\n        }\n\n        if (!issuerOpts.keys?.format || !JWKSKeyFormats.isValid(issuerOpts.keys.format)) {\n          throw getError({\n            message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...JWKSKeyFormats.SCHEME_SET].join(', ')}`,\n          });\n        }\n\n        if (!issuerOpts.kid) {\n          throw getError({ message: '[defineJWKSAuth] kid is required for issuer mode' });\n        }\n\n        if (!issuerOpts.getTokenExpiresFn) {\n          throw getError({\n            message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',\n          });\n        }\n\n        this.application\n          .bind<IJWKSIssuerOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(issuerOpts);\n        this.application.service(JWKSIssuerTokenService);\n\n        // Path depends on a runtime option, so @controller can't be applied statically — decorate here instead.\n        Reflect.decorate(\n          [controller({ path: issuerOpts?.rest?.path ?? '/certs' })],\n          JWKSController,\n        );\n        this.application.controller(JWKSController);\n\n        this.logger\n          .for(this.defineJWKSAuth.name)\n          .info('JWKS issuer configured with /certs endpoint');\n        break;\n      }\n\n      case JWKSModes.VERIFIER: {\n        const verifierOpts = jwksOptions;\n\n        if (!verifierOpts.jwksUrl) {\n          throw getError({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });\n        }\n\n        this.application\n          .bind<IJWKSVerifierOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(verifierOpts);\n        this.application.service(JWKSVerifierTokenService);\n\n        this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');\n        break;\n      }\n\n      default: {\n        // Same exhaustive-switch-narrows-to-never situation as the JOSE standard default above.\n        throw getError({\n          message: `[defineJWKSAuth] Invalid JWKS mode: ${(jwksOptions as { mode?: unknown }).mode}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Service-to-service authentication. Absent options mean no strategy is registered and no route is\n   * mounted, so an application that never sets them is byte-identical to today.\n   *\n   * The certs route is mounted only when SIGNING keys are present. Most services are called and\n   * never call; publishing a key set for a service that signs nothing advertises a capability it\n   * does not have.\n   */\n  private defineServiceAuth(opts: { serviceOptions?: IServiceAuthOptions }): void {\n    const { serviceOptions } = opts;\n\n    if (!serviceOptions) {\n      this.logger\n        .for(this.defineServiceAuth.name)\n        .debug('serviceOptions not provided, skipping service authentication');\n      return;\n    }\n\n    if (!serviceOptions.name) {\n      throw getError({\n        message:\n          '[defineServiceAuth] name is required | it is the issuer this service stamps and the audience it demands',\n      });\n    }\n\n    if (!serviceOptions.resolvePrincipal) {\n      throw getError({\n        message:\n          '[defineServiceAuth] resolvePrincipal is required | the framework proves WHICH SERVICE called, the application decides who that acts as',\n      });\n    }\n\n    this.application.service(ServiceAssertionVerifierService);\n\n    if (serviceOptions.keys) {\n      this.application.service(ServiceAssertionSignerService);\n\n      const restPath = serviceOptions.rest?.path ?? ServiceAssertion.DEFAULT_REST_PATH;\n      this.application\n        .bind<string>({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n        .toValue(restPath);\n\n      // Path depends on a runtime option, so @controller cannot be applied statically.\n      Reflect.decorate([controller({ path: restPath })], ServiceCertsController);\n      this.application.controller(ServiceCertsController);\n    }\n\n    AuthenticationStrategyRegistry.getInstance().register({\n      container: this.application,\n      strategies: [\n        { name: Authentication.STRATEGY_SERVICE, strategy: ServiceAuthenticationStrategy },\n      ],\n    });\n\n    this.logger\n      .for(this.defineServiceAuth.name)\n      .info(\n        'Service authentication configured | name: %s | signs: %s | callers: %s',\n        serviceOptions.name,\n        Boolean(serviceOptions.keys),\n        Object.keys(serviceOptions.callers ?? {}).join(', ') || 'none',\n      );\n  }\n\n  private defineBasicAuth(opts: { basicOptions?: TBasicTokenServiceOptions }): void {\n    const { basicOptions } = opts;\n\n    if (!basicOptions) {\n      this.logger\n        .for(this.defineBasicAuth.name)\n        .debug('basicOptions not provided, skipping Basic configuration');\n      return;\n    }\n\n    if (!basicOptions.verifyCredentials) {\n      throw getError({\n        message: '[defineBasicAuth] verifyCredentials function is required',\n      });\n    }\n\n    this.application\n      .bind<TBasicTokenServiceOptions>({ key: AuthenticateBindingKeys.BASIC_OPTIONS })\n      .toValue(basicOptions);\n    this.application.service(BasicTokenService);\n\n    this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');\n  }\n\n  private defineControllers(opts: { options: IAuthenticateOptions }): void {\n    const { restOptions, jwtOptions } = opts.options;\n\n    if (!restOptions?.useAuthController) {\n      this.logger.for(this.defineControllers.name).debug('Auth controller disabled');\n      return;\n    }\n\n    if (!jwtOptions) {\n      throw getError({\n        message: '[defineControllers] Auth controller requires jwtOptions to be configured',\n      });\n    }\n\n    const AuthController = AuthControllerFactory.define(restOptions.controllerOpts);\n    this.application.controller(AuthController);\n\n    this.logger.for(this.defineControllers.name).info('Auth controller registered');\n  }\n\n  defineOAuth2() {\n    // TODO Implement OAuth2\n  }\n}\n"]}