node-server-engine 1.4.2 → 1.4.4

package/dist/entities/Server/Server.d.ts

@@ -49,8 +49,8 @@ export declare class Server {
     private attachWebSocket;
     /** Call shutdown if signal gets sent to the process */
     private handleSignal;
-    /** Load TLS Config */
-    private loadTls;
+    /** Watch the TLS certificate change event */
+    private watchTlsCaFileChange;
     /** Executes a recurring job */
     private runCronJob;
     /** Run a shutdown/init callback */

package/dist/entities/Server/Server.js

@@ -8,6 +8,8 @@ exports.Server = void 0;
 var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
 var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
+var _fs = _interopRequireDefault(require("fs"));
+var _path = _interopRequireDefault(require("path"));
 var _promises = require("timers/promises");
 var _express = _interopRequireDefault(require("express"));
 var _cors = _interopRequireDefault(require("cors"));
@@ -94,29 +96,11 @@ let Server = exports.Server = /*#__PURE__*/function () {
 
     // Create the primary express core that serves the business logic
     this.app = (0, _express.default)();
-
-    // small request logger + memory snapshot on response finish
-    this.app.use((req, res, next) => {
-      const start = Date.now();
-      console.log(`[REQ START] ${req.method} ${req.originalUrl} ip=${req.ip} nodeEnv=${process.env.NODE_ENV}`);
-      res.on('finish', () => {
-        const time = Date.now() - start;
-        const mem = process.memoryUsage();
-        console.log(`[REQ END] ${req.method} ${req.originalUrl} status=${res.statusCode} timeMs=${time} rss=${mem.rss} heapUsed=${mem.heapUsed}`);
-      });
-      next();
-    });
     this.app.use((0, _cors.default)({
       origin: process.env.CORS_ORIGIN ?? '*',
       methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
       allowedHeaders: ['Content-Type', 'Authorization']
     }));
-    this.app.get('/test1', (req, res) => {
-      console.log('Test endpoint hit');
-      res.status(200).json({
-        status: 'ok'
-      });
-    });
     this.registerMiddleware(this.app);
     this.httpServer = (0, _utils.createHttpServer)(this.app);
 
@@ -210,8 +194,8 @@ let Server = exports.Server = /*#__PURE__*/function () {
       });
       this.handleSignal();
 
-      // Load TSL config files
-      this.loadTls();
+      // Watch TSL config files changing
+      this.watchTlsCaFileChange();
     }
 
     /** Graceful shutdown */
@@ -352,18 +336,19 @@ let Server = exports.Server = /*#__PURE__*/function () {
       }));
     }
 
-    /** Load TLS Config */
+    /** Watch the TLS certificate change event */
   }, {
-    key: "loadTls",
-    value: function loadTls() {
-      try {
-        (0, _report.reportInfo)('Loading TLS config');
-        (0, _tlsConfig.loadTlsConfig)();
-        this.httpServer.setSecureContext(_tlsConfig.tlsConfig);
-        (0, _report.reportInfo)('TLS config loaded successfully');
-      } catch (err) {
-        (0, _report.reportError)(`TLS load failed: ${err}`);
-      }
+    key: "watchTlsCaFileChange",
+    value: function watchTlsCaFileChange() {
+      ['TLS_REQUEST_KEY', 'TLS_REQUEST_KEY_PASSPHRASE', 'TLS_REQUEST_CERT', 'TLS_REQUEST_CA', 'TLS_SERVER_KEY', 'TLS_SERVER_KEY_PASSPHRASE', 'TLS_SERVER_CERT', 'TLS_CA'].forEach(key => {
+        const file = process.env[key];
+        if (file) _fs.default.watch(_path.default.resolve(file), event => {
+          if (event !== 'change') return;
+          (0, _report.reportInfo)(`Reloading TLS config [${file} changed]`);
+          (0, _tlsConfig.loadTlsConfig)();
+          this.httpServer.setSecureContext(_tlsConfig.tlsConfig);
+        });
+      });
     }
 
     /** Executes a recurring job */

package/dist/entities/Server/Server.js.map

@@ -1 +1 @@
-{"version":3,"file":"Server.js","names":["_promises","require","_express","_interopRequireDefault","_cors","_ws","_SocketClient","_Server2","_Endpoint","_EngineError","_LifecycleController","_PubSub","_utils","_jwt","_report","_tlsConfig","namespace","Server","exports","config","_classCallCheck2","default","_defineProperty2","AbortController","validate","reportDebug","message","endpoints","globalMiddleware","errorMiddleware","initCallbacks","shutdownCallbacks","syncCallbacks","cron","auth","noFetch","checkEnvironment","process","env","RUN_MIGRATION","UNDO_MIGRATION","SQL_HOST","envAssert","isHost","SQL_USER","isString","SQL_PASSWORD","SQL_DB","NODE_ENV","PORT","isPort","SECONDARY_PORT","app","express","use","req","res","next","start","Date","now","console","log","method","originalUrl","ip","on","time","mem","memoryUsage","statusCode","rss","heapUsed","cors","origin","CORS_ORIGIN","methods","allowedHeaders","get","status","json","registerMiddleware","httpServer","createHttpServer","secondaryApp","secondaryMiddleware","defaultErrorMiddleware","forEach","middleware","secondaryHttpServer","disable","server","headersTimeout","keepAliveTimeout","webSocket","attachWebSocket","_createClass2","key","value","setupGlobalErrorLogging","err","error","stack","reason","Error","code","init","initKeySets","callback","runCallback","Promise","all","map","PubSub","job","runCronJob","resolve","listen","reportInfo","data","port","secondaryPort","nodeEnv","handleSignal","loadTls","shutdown","listening","address","reportError","exit","close","wss","clients","socket","socketKillTimeout","WEBSOCKET_CLOSE_TIMEOUT","parseInt","setTimeout","readyState","CLOSING","OPEN","terminate","LifecycleController","shutdownRunningInstances","abortController","abort","shutdownKeySets","shutdownSignals","signal","removeAllListeners","getApp","getSecondaryApp","defaultMiddleware","path","endpoint","register","options","WebSocketServer","request","SocketClient","client","catch","loadTlsConfig","setSecureContext","tlsConfig","handler","name","interval","setTimeoutPromise","undefined","function","apply","parameters","some","Endpoint","EngineError","Object","values","validator","Array"],"sources":["../../../src/entities/Server/Server.ts"],"sourcesContent":["import http from 'http';\nimport https from 'https';\nimport { AddressInfo } from 'net';\nimport { setTimeout as setTimeoutPromise } from 'timers/promises';\nimport { ValidatorSpec } from 'envalid';\nimport express, { Application } from 'express';\nimport cors from 'cors';\nimport { Server as WebSocketServer } from 'ws';\nimport { SocketClient } from '../SocketClient';\nimport {\n  defaultMiddleware,\n  defaultErrorMiddleware,\n  secondaryMiddleware,\n  shutdownSignals\n} from './Server.const';\nimport {\n  ServerOptions,\n  ServerCronJon,\n  ServerAuthConfig,\n  ServerWebSocketConfig,\n  ServerGlobalMiddleware,\n  ServerErrorMiddleWare,\n  ServerCallback\n} from './Server.types';\nimport { Endpoint } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { LifecycleController } from 'entities/LifecycleController';\nimport { PubSub } from 'entities/PubSub';\nimport { checkEnvironment, envAssert, createHttpServer } from 'utils';\nimport { initKeySets, shutdownKeySets } from 'utils/jwt';\nimport { reportInfo, reportError, reportDebug } from 'utils/report';\nimport { tlsConfig, loadTlsConfig, TlsConfig } from 'utils/tlsConfig';\n\nconst namespace = 'engine:Server';\n\n/** Main server class */\nexport class Server {\n  /** The express application powering the main endpoints */\n  private app: Application;\n  /** The node HTTP(S) server, serving the main express application */\n  private httpServer: http.Server | https.Server;\n  /** The express application powering the support endpoints */\n  private secondaryApp: Application;\n  /** The node HTTP(S) server, serving the secondary express application */\n  private secondaryHttpServer: http.Server | https.Server;\n  /** List of endpoint instances that the server should handle */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  private endpoints: Array<Endpoint<any>>;\n  /** Mapping of env variable name with functions that should run to check their validity */\n  private checkEnvironment: Record<string, ValidatorSpec<unknown>>;\n  /** Middleware that should run on every request before the endpoint specific logic */\n  private globalMiddleware: Array<ServerGlobalMiddleware>;\n  /** Error middleware that should run on every request after the endpoint specific logic, but before the generic global middleware */\n  private errorMiddleware: Array<\n    ServerGlobalMiddleware | ServerErrorMiddleWare\n  >;\n  /** Functions that should be called on server startup */\n  private initCallbacks: Array<ServerCallback>;\n  /** Functions that should be called on server shutdown */\n  private shutdownCallbacks: Array<ServerCallback>;\n  /** When set to true, this indicates that init callbacks should run synchronously in the order they are declared. By default they all run in parallel */\n  private syncCallbacks: boolean;\n  /** Config to set regularly running jobs on the server */\n  private cron?: Array<ServerCronJon>;\n  /** Global auth related configuration */\n  private auth: ServerAuthConfig;\n  /** WebSocket server instance, if configured */\n  private wss?: WebSocketServer;\n  /** Abort controller that handles signals for the server */\n  private abortController = new AbortController();\n\n  /** Create a server */\n  public constructor(config: ServerOptions) {\n    this.validate(config);\n\n    reportDebug({\n      namespace,\n      message: `Creating server`\n    });\n\n    this.endpoints = config.endpoints;\n    this.globalMiddleware = config.globalMiddleware ?? [];\n    this.errorMiddleware = config.errorMiddleware ?? [];\n    this.initCallbacks = config.initCallbacks ?? [];\n    this.shutdownCallbacks = config.shutdownCallbacks ?? [];\n    this.syncCallbacks = config.syncCallbacks ?? false;\n    this.cron = config.cron;\n    this.auth = { noFetch: false, ...config.auth };\n\n    // The minimal environment check is different between the migration modes of execution and the regular server execution mode\n    // When running in migration mode, we only check that we have SQL related environment variables\n    this.checkEnvironment =\n      process.env.RUN_MIGRATION === 'true' ||\n      process.env.UNDO_MIGRATION === 'true'\n        ? {\n            SQL_HOST: envAssert.isHost(),\n            SQL_USER: envAssert.isString(),\n            SQL_PASSWORD: envAssert.isString(),\n            SQL_DB: envAssert.isString()\n          }\n        : {\n            NODE_ENV: envAssert.isString(),\n            PORT: envAssert.isPort(),\n            SECONDARY_PORT: envAssert.isPort(),\n            ...config.checkEnvironment\n          };\n\n    checkEnvironment(this.checkEnvironment);\n\n    // Create the primary express core that serves the business logic\n    this.app = express();\n\n    // small request logger + memory snapshot on response finish\n    this.app.use((req, res, next) => {\n      const start = Date.now();\n      console.log(\n        `[REQ START] ${req.method} ${req.originalUrl} ip=${req.ip} nodeEnv=${process.env.NODE_ENV}`\n      );\n      res.on('finish', () => {\n        const time = Date.now() - start;\n        const mem = process.memoryUsage();\n        console.log(\n          `[REQ END] ${req.method} ${req.originalUrl} status=${res.statusCode} timeMs=${time} rss=${mem.rss} heapUsed=${mem.heapUsed}`\n        );\n      });\n      next();\n    });\n\n    this.app.use(\n      cors({\n        origin: process.env.CORS_ORIGIN ?? '*',\n        methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],\n        allowedHeaders: ['Content-Type', 'Authorization']\n      })\n    );\n\n    this.app.get('/test1', (req, res) => {\n      console.log('Test endpoint hit');\n      res.status(200).json({ status: 'ok' });\n    });\n\n    this.registerMiddleware(this.app);\n    this.httpServer = createHttpServer(this.app);\n\n    // Create a secondary express core that servers metrics and analytics\n    // This will be served on a different port, allowing to specify different firewall rules for these routes\n    this.secondaryApp = express();\n    [...secondaryMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (middleware) this.secondaryApp.use(middleware);\n      }\n    );\n    this.secondaryHttpServer = createHttpServer(this.secondaryApp);\n\n    // Remove the express headers\n    this.app.disable('x-powered-by');\n    this.secondaryApp.disable('x-powered-by');\n\n    // We remove all node timeout on connections and requests\n    // This responsibility is delegated to the front-facing load balancer\n    [this.httpServer, this.secondaryHttpServer].forEach((server) => {\n      server.headersTimeout = 0;\n      server.keepAliveTimeout = 0;\n    });\n\n    if (config.webSocket) {\n      this.attachWebSocket(config.webSocket);\n    }\n  }\n\n  private setupGlobalErrorLogging(): void {\n    process.on('uncaughtException', (err) => {\n      console.error(\n        '💥 uncaughtException:',\n        err && err.stack ? err.stack : err\n      );\n    });\n    process.on('unhandledRejection', (reason: unknown) => {\n      if (reason instanceof Error) {\n        console.error('💥 unhandledRejection:', reason.stack || reason.message);\n      } else {\n        console.error('💥 unhandledRejection:', reason);\n      }\n    });\n    process.on('beforeExit', (code) =>\n      console.error('process.beforeExit', code)\n    );\n    process.on('exit', (code) => console.error('process.exit', code));\n    process.on('SIGKILL', () => console.error('SIGKILL received')); // usually cannot catch SIGKILL\n    process.on('SIGTERM', () => console.error('SIGTERM received'));\n  }\n\n  /** Start the server */\n  public async init(): Promise<void> {\n    this.setupGlobalErrorLogging();\n    reportDebug({ namespace, message: `Starting Server` });\n    // Fetch the keys for JWT authentication\n    // Ignore in test environment as we do symmetrical token signing\n    if (process.env.NODE_ENV !== 'test' && !this.auth.noFetch)\n      await initKeySets();\n    // Run all the init callbacks\n    // We can either run them all 1/1 synchronously or run them all in parallel (default)\n    // Callback can either be direct function or an object with function and parameters attributes\n\n    if (this.syncCallbacks) {\n      for (const callback of this.initCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.initCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Initialize the Pub/Sub module\n    await PubSub.init();\n    // Run all the cronjob\n    if (this.cron) {\n      this.cron.forEach((job) => {\n        this.runCronJob(job);\n      });\n    }\n\n    // Start listening to requests\n    await Promise.all([\n      new Promise<void>((resolve) =>\n        this.httpServer.listen(process.env.PORT, () => {\n          resolve();\n        })\n      ),\n      new Promise<void>((resolve) =>\n        this.secondaryHttpServer.listen(process.env.SECONDARY_PORT, () => {\n          resolve();\n        })\n      )\n    ]);\n    reportInfo({\n      message: 'SERVER_RUNNING',\n      data: {\n        port: process.env.PORT,\n        secondaryPort: process.env.SECONDARY_PORT,\n        nodeEnv: process.env.NODE_ENV\n      }\n    });\n\n    this.handleSignal();\n\n    // Load TSL config files\n    this.loadTls();\n  }\n\n  /** Graceful shutdown */\n  public async shutdown(): Promise<void> {\n    reportDebug({ namespace, message: `Shutting down Server` });\n\n    // Stop listening to HTTP requests\n    await Promise.all(\n      [this.httpServer, this.secondaryHttpServer].map((server) => {\n        // Ignore if the server was already stopped\n        // We have observed cases where SIGTERM was thrown multiple times\n        if (!server.listening) return;\n        const { port } = server.address() as AddressInfo;\n        server.on('close', (error: unknown) => {\n          if (error) {\n            reportError(error);\n            process.exit(1);\n          } else {\n            reportInfo({\n              message: `Stopped listening to requests on port ${port}`\n            });\n          }\n        });\n        server.close();\n      })\n    );\n\n    // Close all socket connections\n    if (this.wss) {\n      // First ask then to close gracefully\n      this.wss.clients.forEach((socket) => {\n        socket.close();\n      });\n      // Hard terminate all connections still open after a defined time\n      const socketKillTimeout = process.env.WEBSOCKET_CLOSE_TIMEOUT\n        ? parseInt(process.env.WEBSOCKET_CLOSE_TIMEOUT)\n        : 5000;\n      await new Promise<void>((resolve) => {\n        setTimeout(() => {\n          (this.wss as WebSocketServer).clients.forEach((socket) => {\n            if (\n              socket.readyState === socket.CLOSING ||\n              socket.readyState === socket.OPEN\n            ) {\n              socket.terminate();\n            }\n          });\n          resolve();\n        }, socketKillTimeout);\n      });\n    }\n\n    // Run all the shutdown callback\n    if (this.syncCallbacks) {\n      for (const callback of this.shutdownCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.shutdownCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Shutdown all the running entities\n    await LifecycleController.shutdownRunningInstances();\n\n    // Abort all the cronjob\n    if (this.abortController) this.abortController.abort();\n\n    // Stop the keyset timers\n    shutdownKeySets();\n\n    shutdownSignals.forEach((signal) => process.removeAllListeners(signal));\n  }\n\n  /** Get the express app instance of the server */\n  public getApp(): Application {\n    return this.app;\n  }\n\n  /** Get the express app instance of the server */\n  public getSecondaryApp(): Application {\n    return this.secondaryApp;\n  }\n\n  /** Registers all the middleware with the express app */\n  private registerMiddleware(app: Application): void {\n    // Global middleware can specify a path to which they apply\n    [...defaultMiddleware, ...this.globalMiddleware].forEach((middleware) => {\n      if (typeof middleware === 'function') {\n        app.use(middleware);\n      } else {\n        app.use(middleware.path, middleware.middleware);\n      }\n    });\n    // Call the register method of each endpoint\n    this.endpoints.forEach((endpoint) => {\n      endpoint.register(app);\n    });\n    // Add error middleware\n    [...this.errorMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (typeof middleware === 'function') {\n          app.use(middleware);\n        } else {\n          app.use(middleware.path, middleware.middleware);\n        }\n      }\n    );\n  }\n\n  /** Add a handler for WebSocket connections */\n  private attachWebSocket(options: ServerWebSocketConfig): void {\n    this.wss = new WebSocketServer({\n      ...options.server,\n      server: this.httpServer\n    })\n      .on('connection', (webSocket, request) => {\n        new SocketClient(webSocket, request, options.client);\n      })\n      .on('error', (error) => {\n        reportError(error);\n      });\n  }\n\n  /** Call shutdown if signal gets sent to the process */\n  private handleSignal(): void {\n    shutdownSignals.forEach((signal) =>\n      process.on(signal, () => {\n        (async (): Promise<void> => {\n          reportInfo(`Received shutdown signal [${signal}]`);\n          await this.shutdown();\n        })().catch((error) => {\n          reportError(error);\n        });\n      })\n    );\n  }\n\n  /** Load TLS Config */\n  private loadTls(): void {\n    try {\n      reportInfo('Loading TLS config');\n      loadTlsConfig();\n      (this.httpServer as https.Server).setSecureContext(\n        tlsConfig as TlsConfig\n      );\n      reportInfo('TLS config loaded successfully');\n    } catch (err) {\n      reportError(`TLS load failed: ${err}`);\n    }\n  }\n\n  /** Executes a recurring job */\n  private runCronJob(job: ServerCronJon): void {\n    (async (): Promise<void> => {\n      reportInfo({ message: `Starting scheduled job \"${job.handler.name}\"` });\n      try {\n        await job.handler();\n        reportInfo({\n          message: `Job \"${job.handler.name}\" finished, starting again in ${job.interval} seconds`\n        });\n        await setTimeoutPromise(job.interval * 1000, undefined, {\n          signal: this.abortController.signal\n        });\n        this.runCronJob(job);\n      } catch (error) {\n        if (error instanceof Error && error.name === 'AbortError') {\n          reportDebug({\n            namespace,\n            message: `Scheduled job \"${job.handler?.name}\" has been aborted`\n          });\n        } else {\n          throw error;\n        }\n      }\n    })().catch((error) => {\n      reportError(error);\n    });\n  }\n\n  /** Run a shutdown/init callback */\n  private runCallback(callback: ServerCallback): unknown {\n    return typeof callback === 'function'\n      ? callback()\n      : callback.function.apply(null, callback.parameters ?? []);\n  }\n\n  /**\n   * Validate the Server constructor configuration\n   */\n  private validate(config: ServerOptions): void {\n    if (\n      !config.endpoints ||\n      config.endpoints.some((endpoint) => !(endpoint instanceof Endpoint))\n    )\n      throw new EngineError(\n        'Server endpoints should be declared and all be Endpoint instances'\n      );\n\n    if (\n      config.checkEnvironment &&\n      Object.values(config.checkEnvironment).some(\n        (validator) => typeof validator !== 'function'\n      )\n    )\n      throw new EngineError(\n        'Some of the environment checks are not valid functions'\n      );\n\n    if (\n      config.initCallbacks &&\n      (!(config.initCallbacks instanceof Array) ||\n        config.initCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Init callbacks is not a list of functions');\n\n    if (\n      config.shutdownCallbacks &&\n      (!(config.shutdownCallbacks instanceof Array) ||\n        config.shutdownCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Shutdown callbacks is not a list of functions');\n  }\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAAA,SAAA,GAAAC,OAAA;AAEA,IAAAC,QAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,KAAA,GAAAD,sBAAA,CAAAF,OAAA;AACA,IAAAI,GAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAeA,IAAAO,SAAA,GAAAP,OAAA;AACA,IAAAQ,YAAA,GAAAR,OAAA;AACA,IAAAS,oBAAA,GAAAT,OAAA;AACA,IAAAU,OAAA,GAAAV,OAAA;AACA,IAAAW,MAAA,GAAAX,OAAA;AACA,IAAAY,IAAA,GAAAZ,OAAA;AACA,IAAAa,OAAA,GAAAb,OAAA;AACA,IAAAc,UAAA,GAAAd,OAAA;AAEA,MAAMe,SAAS,GAAG,eAAe;;AAEjC;AAAA,IACaC,MAAM,GAAAC,OAAA,CAAAD,MAAA;EAmCjB;EACA,SAAAA,OAAmBE,MAAqB,EAAE;IAAA,IAAAC,gBAAA,CAAAC,OAAA,QAAAJ,MAAA;IAnC1C;IAAA,IAAAK,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IACA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAIA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA,2BAC0B,IAAIE,eAAe,CAAC,CAAC;IAI7C,IAAI,CAACC,QAAQ,CAACL,MAAM,CAAC;IAErB,IAAAM,mBAAW,EAAC;MACVT,SAAS;MACTU,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,IAAI,CAACC,SAAS,GAAGR,MAAM,CAACQ,SAAS;IACjC,IAAI,CAACC,gBAAgB,GAAGT,MAAM,CAACS,gBAAgB,IAAI,EAAE;IACrD,IAAI,CAACC,eAAe,GAAGV,MAAM,CAACU,eAAe,IAAI,EAAE;IACnD,IAAI,CAACC,aAAa,GAAGX,MAAM,CAACW,aAAa,IAAI,EAAE;IAC/C,IAAI,CAACC,iBAAiB,GAAGZ,MAAM,CAACY,iBAAiB,IAAI,EAAE;IACvD,IAAI,CAACC,aAAa,GAAGb,MAAM,CAACa,aAAa,IAAI,KAAK;IAClD,IAAI,CAACC,IAAI,GAAGd,MAAM,CAACc,IAAI;IACvB,IAAI,CAACC,IAAI,GAAG;MAAEC,OAAO,EAAE,KAAK;MAAE,GAAGhB,MAAM,CAACe;IAAK,CAAC;;IAE9C;IACA;IACA,IAAI,CAACE,gBAAgB,GACnBC,OAAO,CAACC,GAAG,CAACC,aAAa,KAAK,MAAM,IACpCF,OAAO,CAACC,GAAG,CAACE,cAAc,KAAK,MAAM,GACjC;MACEC,QAAQ,EAAEC,gBAAS,CAACC,MAAM,CAAC,CAAC;MAC5BC,QAAQ,EAAEF,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BC,YAAY,EAAEJ,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAClCE,MAAM,EAAEL,gBAAS,CAACG,QAAQ,CAAC;IAC7B,CAAC,GACD;MACEG,QAAQ,EAAEN,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BI,IAAI,EAAEP,gBAAS,CAACQ,MAAM,CAAC,CAAC;MACxBC,cAAc,EAAET,gBAAS,CAACQ,MAAM,CAAC,CAAC;MAClC,GAAG/B,MAAM,CAACiB;IACZ,CAAC;IAEP,IAAAA,uBAAgB,EAAC,IAAI,CAACA,gBAAgB,CAAC;;IAEvC;IACA,IAAI,CAACgB,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;;IAEpB;IACA,IAAI,CAACD,GAAG,CAACE,GAAG,CAAC,CAACC,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;MAC/B,MAAMC,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;MACxBC,OAAO,CAACC,GAAG,CACT,eAAeP,GAAG,CAACQ,MAAM,IAAIR,GAAG,CAACS,WAAW,OAAOT,GAAG,CAACU,EAAE,YAAY5B,OAAO,CAACC,GAAG,CAACU,QAAQ,EAC3F,CAAC;MACDQ,GAAG,CAACU,EAAE,CAAC,QAAQ,EAAE,MAAM;QACrB,MAAMC,IAAI,GAAGR,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGF,KAAK;QAC/B,MAAMU,GAAG,GAAG/B,OAAO,CAACgC,WAAW,CAAC,CAAC;QACjCR,OAAO,CAACC,GAAG,CACT,aAAaP,GAAG,CAACQ,MAAM,IAAIR,GAAG,CAACS,WAAW,WAAWR,GAAG,CAACc,UAAU,WAAWH,IAAI,QAAQC,GAAG,CAACG,GAAG,aAAaH,GAAG,CAACI,QAAQ,EAC5H,CAAC;MACH,CAAC,CAAC;MACFf,IAAI,CAAC,CAAC;IACR,CAAC,CAAC;IAEF,IAAI,CAACL,GAAG,CAACE,GAAG,CACV,IAAAmB,aAAI,EAAC;MACHC,MAAM,EAAErC,OAAO,CAACC,GAAG,CAACqC,WAAW,IAAI,GAAG;MACtCC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;MACpDC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe;IAClD,CAAC,CACH,CAAC;IAED,IAAI,CAACzB,GAAG,CAAC0B,GAAG,CAAC,QAAQ,EAAE,CAACvB,GAAG,EAAEC,GAAG,KAAK;MACnCK,OAAO,CAACC,GAAG,CAAC,mBAAmB,CAAC;MAChCN,GAAG,CAACuB,MAAM,CAAC,GAAG,CAAC,CAACC,IAAI,CAAC;QAAED,MAAM,EAAE;MAAK,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,CAACE,kBAAkB,CAAC,IAAI,CAAC7B,GAAG,CAAC;IACjC,IAAI,CAAC8B,UAAU,GAAG,IAAAC,uBAAgB,EAAC,IAAI,CAAC/B,GAAG,CAAC;;IAE5C;IACA;IACA,IAAI,CAACgC,YAAY,GAAG,IAAA/B,gBAAO,EAAC,CAAC;IAC7B,CAAC,GAAGgC,4BAAmB,EAAE,GAAGC,+BAAsB,CAAC,CAACC,OAAO,CACxDC,UAAU,IAAK;MACd,IAAIA,UAAU,EAAE,IAAI,CAACJ,YAAY,CAAC9B,GAAG,CAACkC,UAAU,CAAC;IACnD,CACF,CAAC;IACD,IAAI,CAACC,mBAAmB,GAAG,IAAAN,uBAAgB,EAAC,IAAI,CAACC,YAAY,CAAC;;IAE9D;IACA,IAAI,CAAChC,GAAG,CAACsC,OAAO,CAAC,cAAc,CAAC;IAChC,IAAI,CAACN,YAAY,CAACM,OAAO,CAAC,cAAc,CAAC;;IAEzC;IACA;IACA,CAAC,IAAI,CAACR,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACF,OAAO,CAAEI,MAAM,IAAK;MAC9DA,MAAM,CAACC,cAAc,GAAG,CAAC;MACzBD,MAAM,CAACE,gBAAgB,GAAG,CAAC;IAC7B,CAAC,CAAC;IAEF,IAAI1E,MAAM,CAAC2E,SAAS,EAAE;MACpB,IAAI,CAACC,eAAe,CAAC5E,MAAM,CAAC2E,SAAS,CAAC;IACxC;EACF;EAAC,WAAAE,aAAA,CAAA3E,OAAA,EAAAJ,MAAA;IAAAgF,GAAA;IAAAC,KAAA,EAED,SAAQC,uBAAuBA,CAAA,EAAS;MACtC9D,OAAO,CAAC6B,EAAE,CAAC,mBAAmB,EAAGkC,GAAG,IAAK;QACvCvC,OAAO,CAACwC,KAAK,CACX,uBAAuB,EACvBD,GAAG,IAAIA,GAAG,CAACE,KAAK,GAAGF,GAAG,CAACE,KAAK,GAAGF,GACjC,CAAC;MACH,CAAC,CAAC;MACF/D,OAAO,CAAC6B,EAAE,CAAC,oBAAoB,EAAGqC,MAAe,IAAK;QACpD,IAAIA,MAAM,YAAYC,KAAK,EAAE;UAC3B3C,OAAO,CAACwC,KAAK,CAAC,wBAAwB,EAAEE,MAAM,CAACD,KAAK,IAAIC,MAAM,CAAC7E,OAAO,CAAC;QACzE,CAAC,MAAM;UACLmC,OAAO,CAACwC,KAAK,CAAC,wBAAwB,EAAEE,MAAM,CAAC;QACjD;MACF,CAAC,CAAC;MACFlE,OAAO,CAAC6B,EAAE,CAAC,YAAY,EAAGuC,IAAI,IAC5B5C,OAAO,CAACwC,KAAK,CAAC,oBAAoB,EAAEI,IAAI,CAC1C,CAAC;MACDpE,OAAO,CAAC6B,EAAE,CAAC,MAAM,EAAGuC,IAAI,IAAK5C,OAAO,CAACwC,KAAK,CAAC,cAAc,EAAEI,IAAI,CAAC,CAAC;MACjEpE,OAAO,CAAC6B,EAAE,CAAC,SAAS,EAAE,MAAML,OAAO,CAACwC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;MAChEhE,OAAO,CAAC6B,EAAE,CAAC,SAAS,EAAE,MAAML,OAAO,CAACwC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAChE;;IAEA;EAAA;IAAAJ,GAAA;IAAAC,KAAA,EACA,eAAaQ,IAAIA,CAAA,EAAkB;MACjC,IAAI,CAACP,uBAAuB,CAAC,CAAC;MAC9B,IAAA1E,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAkB,CAAC,CAAC;MACtD;MACA;MACA,IAAIW,OAAO,CAACC,GAAG,CAACU,QAAQ,KAAK,MAAM,IAAI,CAAC,IAAI,CAACd,IAAI,CAACC,OAAO,EACvD,MAAM,IAAAwE,gBAAW,EAAC,CAAC;MACrB;MACA;MACA;;MAEA,IAAI,IAAI,CAAC3E,aAAa,EAAE;QACtB,KAAK,MAAM4E,QAAQ,IAAI,IAAI,CAAC9E,aAAa,EAAE;UACzC,MAAM,IAAI,CAAC+E,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACjF,aAAa,CAACkF,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACjE,CAAC;MACH;;MAEA;MACA,MAAMK,cAAM,CAACP,IAAI,CAAC,CAAC;MACnB;MACA,IAAI,IAAI,CAACzE,IAAI,EAAE;QACb,IAAI,CAACA,IAAI,CAACsD,OAAO,CAAE2B,GAAG,IAAK;UACzB,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC;MACJ;;MAEA;MACA,MAAMJ,OAAO,CAACC,GAAG,CAAC,CAChB,IAAID,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAClC,UAAU,CAACmC,MAAM,CAAChF,OAAO,CAACC,GAAG,CAACW,IAAI,EAAE,MAAM;QAC7CmE,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,EACD,IAAIN,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAC3B,mBAAmB,CAAC4B,MAAM,CAAChF,OAAO,CAACC,GAAG,CAACa,cAAc,EAAE,MAAM;QAChEiE,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,CACF,CAAC;MACF,IAAAE,kBAAU,EAAC;QACT5F,OAAO,EAAE,gBAAgB;QACzB6F,IAAI,EAAE;UACJC,IAAI,EAAEnF,OAAO,CAACC,GAAG,CAACW,IAAI;UACtBwE,aAAa,EAAEpF,OAAO,CAACC,GAAG,CAACa,cAAc;UACzCuE,OAAO,EAAErF,OAAO,CAACC,GAAG,CAACU;QACvB;MACF,CAAC,CAAC;MAEF,IAAI,CAAC2E,YAAY,CAAC,CAAC;;MAEnB;MACA,IAAI,CAACC,OAAO,CAAC,CAAC;IAChB;;IAEA;EAAA;IAAA3B,GAAA;IAAAC,KAAA,EACA,eAAa2B,QAAQA,CAAA,EAAkB;MACrC,IAAApG,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAuB,CAAC,CAAC;;MAE3D;MACA,MAAMoF,OAAO,CAACC,GAAG,CACf,CAAC,IAAI,CAAC7B,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACuB,GAAG,CAAErB,MAAM,IAAK;QAC1D;QACA;QACA,IAAI,CAACA,MAAM,CAACmC,SAAS,EAAE;QACvB,MAAM;UAAEN;QAAK,CAAC,GAAG7B,MAAM,CAACoC,OAAO,CAAC,CAAgB;QAChDpC,MAAM,CAACzB,EAAE,CAAC,OAAO,EAAGmC,KAAc,IAAK;UACrC,IAAIA,KAAK,EAAE;YACT,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;YAClBhE,OAAO,CAAC4F,IAAI,CAAC,CAAC,CAAC;UACjB,CAAC,MAAM;YACL,IAAAX,kBAAU,EAAC;cACT5F,OAAO,EAAE,yCAAyC8F,IAAI;YACxD,CAAC,CAAC;UACJ;QACF,CAAC,CAAC;QACF7B,MAAM,CAACuC,KAAK,CAAC,CAAC;MAChB,CAAC,CACH,CAAC;;MAED;MACA,IAAI,IAAI,CAACC,GAAG,EAAE;QACZ;QACA,IAAI,CAACA,GAAG,CAACC,OAAO,CAAC7C,OAAO,CAAE8C,MAAM,IAAK;UACnCA,MAAM,CAACH,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF;QACA,MAAMI,iBAAiB,GAAGjG,OAAO,CAACC,GAAG,CAACiG,uBAAuB,GACzDC,QAAQ,CAACnG,OAAO,CAACC,GAAG,CAACiG,uBAAuB,CAAC,GAC7C,IAAI;QACR,MAAM,IAAIzB,OAAO,CAAQM,OAAO,IAAK;UACnCqB,UAAU,CAAC,MAAM;YACd,IAAI,CAACN,GAAG,CAAqBC,OAAO,CAAC7C,OAAO,CAAE8C,MAAM,IAAK;cACxD,IACEA,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACM,OAAO,IACpCN,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACO,IAAI,EACjC;gBACAP,MAAM,CAACQ,SAAS,CAAC,CAAC;cACpB;YACF,CAAC,CAAC;YACFzB,OAAO,CAAC,CAAC;UACX,CAAC,EAAEkB,iBAAiB,CAAC;QACvB,CAAC,CAAC;MACJ;;MAEA;MACA,IAAI,IAAI,CAACtG,aAAa,EAAE;QACtB,KAAK,MAAM4E,QAAQ,IAAI,IAAI,CAAC7E,iBAAiB,EAAE;UAC7C,MAAM,IAAI,CAAC8E,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAAChF,iBAAiB,CAACiF,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACrE,CAAC;MACH;;MAEA;MACA,MAAMkC,wCAAmB,CAACC,wBAAwB,CAAC,CAAC;;MAEpD;MACA,IAAI,IAAI,CAACC,eAAe,EAAE,IAAI,CAACA,eAAe,CAACC,KAAK,CAAC,CAAC;;MAEtD;MACA,IAAAC,oBAAe,EAAC,CAAC;MAEjBC,wBAAe,CAAC5D,OAAO,CAAE6D,MAAM,IAAK/G,OAAO,CAACgH,kBAAkB,CAACD,MAAM,CAAC,CAAC;IACzE;;IAEA;EAAA;IAAAnD,GAAA;IAAAC,KAAA,EACA,SAAOoD,MAAMA,CAAA,EAAgB;MAC3B,OAAO,IAAI,CAAClG,GAAG;IACjB;;IAEA;EAAA;IAAA6C,GAAA;IAAAC,KAAA,EACA,SAAOqD,eAAeA,CAAA,EAAgB;MACpC,OAAO,IAAI,CAACnE,YAAY;IAC1B;;IAEA;EAAA;IAAAa,GAAA;IAAAC,KAAA,EACA,SAAQjB,kBAAkBA,CAAC7B,GAAgB,EAAQ;MACjD;MACA,CAAC,GAAGoG,0BAAiB,EAAE,GAAG,IAAI,CAAC5H,gBAAgB,CAAC,CAAC2D,OAAO,CAAEC,UAAU,IAAK;QACvE,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCpC,GAAG,CAACE,GAAG,CAACkC,UAAU,CAAC;QACrB,CAAC,MAAM;UACLpC,GAAG,CAACE,GAAG,CAACkC,UAAU,CAACiE,IAAI,EAAEjE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CAAC,CAAC;MACF;MACA,IAAI,CAAC7D,SAAS,CAAC4D,OAAO,CAAEmE,QAAQ,IAAK;QACnCA,QAAQ,CAACC,QAAQ,CAACvG,GAAG,CAAC;MACxB,CAAC,CAAC;MACF;MACA,CAAC,GAAG,IAAI,CAACvB,eAAe,EAAE,GAAGyD,+BAAsB,CAAC,CAACC,OAAO,CACzDC,UAAU,IAAK;QACd,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCpC,GAAG,CAACE,GAAG,CAACkC,UAAU,CAAC;QACrB,CAAC,MAAM;UACLpC,GAAG,CAACE,GAAG,CAACkC,UAAU,CAACiE,IAAI,EAAEjE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CACF,CAAC;IACH;;IAEA;EAAA;IAAAS,GAAA;IAAAC,KAAA,EACA,SAAQH,eAAeA,CAAC6D,OAA8B,EAAQ;MAC5D,IAAI,CAACzB,GAAG,GAAG,IAAI0B,UAAe,CAAC;QAC7B,GAAGD,OAAO,CAACjE,MAAM;QACjBA,MAAM,EAAE,IAAI,CAACT;MACf,CAAC,CAAC,CACChB,EAAE,CAAC,YAAY,EAAE,CAAC4B,SAAS,EAAEgE,OAAO,KAAK;QACxC,IAAIC,0BAAY,CAACjE,SAAS,EAAEgE,OAAO,EAAEF,OAAO,CAACI,MAAM,CAAC;MACtD,CAAC,CAAC,CACD9F,EAAE,CAAC,OAAO,EAAGmC,KAAK,IAAK;QACtB,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;MACpB,CAAC,CAAC;IACN;;IAEA;EAAA;IAAAJ,GAAA;IAAAC,KAAA,EACA,SAAQyB,YAAYA,CAAA,EAAS;MAC3BwB,wBAAe,CAAC5D,OAAO,CAAE6D,MAAM,IAC7B/G,OAAO,CAAC6B,EAAE,CAACkF,MAAM,EAAE,MAAM;QACvB,CAAC,YAA2B;UAC1B,IAAA9B,kBAAU,EAAC,6BAA6B8B,MAAM,GAAG,CAAC;UAClD,MAAM,IAAI,CAACvB,QAAQ,CAAC,CAAC;QACvB,CAAC,EAAE,CAAC,CAACoC,KAAK,CAAE5D,KAAK,IAAK;UACpB,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;QACpB,CAAC,CAAC;MACJ,CAAC,CACH,CAAC;IACH;;IAEA;EAAA;IAAAJ,GAAA;IAAAC,KAAA,EACA,SAAQ0B,OAAOA,CAAA,EAAS;MACtB,IAAI;QACF,IAAAN,kBAAU,EAAC,oBAAoB,CAAC;QAChC,IAAA4C,wBAAa,EAAC,CAAC;QACd,IAAI,CAAChF,UAAU,CAAkBiF,gBAAgB,CAChDC,oBACF,CAAC;QACD,IAAA9C,kBAAU,EAAC,gCAAgC,CAAC;MAC9C,CAAC,CAAC,OAAOlB,GAAG,EAAE;QACZ,IAAA4B,mBAAW,EAAC,oBAAoB5B,GAAG,EAAE,CAAC;MACxC;IACF;;IAEA;EAAA;IAAAH,GAAA;IAAAC,KAAA,EACA,SAAQiB,UAAUA,CAACD,GAAkB,EAAQ;MAC3C,CAAC,YAA2B;QAC1B,IAAAI,kBAAU,EAAC;UAAE5F,OAAO,EAAE,2BAA2BwF,GAAG,CAACmD,OAAO,CAACC,IAAI;QAAI,CAAC,CAAC;QACvE,IAAI;UACF,MAAMpD,GAAG,CAACmD,OAAO,CAAC,CAAC;UACnB,IAAA/C,kBAAU,EAAC;YACT5F,OAAO,EAAE,QAAQwF,GAAG,CAACmD,OAAO,CAACC,IAAI,iCAAiCpD,GAAG,CAACqD,QAAQ;UAChF,CAAC,CAAC;UACF,MAAM,IAAAC,oBAAiB,EAACtD,GAAG,CAACqD,QAAQ,GAAG,IAAI,EAAEE,SAAS,EAAE;YACtDrB,MAAM,EAAE,IAAI,CAACJ,eAAe,CAACI;UAC/B,CAAC,CAAC;UACF,IAAI,CAACjC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC,OAAOb,KAAK,EAAE;UACd,IAAIA,KAAK,YAAYG,KAAK,IAAIH,KAAK,CAACiE,IAAI,KAAK,YAAY,EAAE;YACzD,IAAA7I,mBAAW,EAAC;cACVT,SAAS;cACTU,OAAO,EAAE,kBAAkBwF,GAAG,CAACmD,OAAO,EAAEC,IAAI;YAC9C,CAAC,CAAC;UACJ,CAAC,MAAM;YACL,MAAMjE,KAAK;UACb;QACF;MACF,CAAC,EAAE,CAAC,CAAC4D,KAAK,CAAE5D,KAAK,IAAK;QACpB,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;MACpB,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAJ,GAAA;IAAAC,KAAA,EACA,SAAQW,WAAWA,CAACD,QAAwB,EAAW;MACrD,OAAO,OAAOA,QAAQ,KAAK,UAAU,GACjCA,QAAQ,CAAC,CAAC,GACVA,QAAQ,CAAC8D,QAAQ,CAACC,KAAK,CAAC,IAAI,EAAE/D,QAAQ,CAACgE,UAAU,IAAI,EAAE,CAAC;IAC9D;;IAEA;AACF;AACA;EAFE;IAAA3E,GAAA;IAAAC,KAAA,EAGA,SAAQ1E,QAAQA,CAACL,MAAqB,EAAQ;MAC5C,IACE,CAACA,MAAM,CAACQ,SAAS,IACjBR,MAAM,CAACQ,SAAS,CAACkJ,IAAI,CAAEnB,QAAQ,IAAK,EAAEA,QAAQ,YAAYoB,kBAAQ,CAAC,CAAC,EAEpE,MAAM,IAAIC,wBAAW,CACnB,mEACF,CAAC;MAEH,IACE5J,MAAM,CAACiB,gBAAgB,IACvB4I,MAAM,CAACC,MAAM,CAAC9J,MAAM,CAACiB,gBAAgB,CAAC,CAACyI,IAAI,CACxCK,SAAS,IAAK,OAAOA,SAAS,KAAK,UACtC,CAAC,EAED,MAAM,IAAIH,wBAAW,CACnB,wDACF,CAAC;MAEH,IACE5J,MAAM,CAACW,aAAa,KACnB,EAAEX,MAAM,CAACW,aAAa,YAAYqJ,KAAK,CAAC,IACvChK,MAAM,CAACW,aAAa,CAAC+I,IAAI,CACtBjE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAE8D,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,2CAA2C,CAAC;MAEpE,IACE5J,MAAM,CAACY,iBAAiB,KACvB,EAAEZ,MAAM,CAACY,iBAAiB,YAAYoJ,KAAK,CAAC,IAC3ChK,MAAM,CAACY,iBAAiB,CAAC8I,IAAI,CAC1BjE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAE8D,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,+CAA+C,CAAC;IAC1E;EAAC;AAAA","ignoreList":[]}
+{"version":3,"file":"Server.js","names":["_fs","_interopRequireDefault","require","_path","_promises","_express","_cors","_ws","_SocketClient","_Server2","_Endpoint","_EngineError","_LifecycleController","_PubSub","_utils","_jwt","_report","_tlsConfig","namespace","Server","exports","config","_classCallCheck2","default","_defineProperty2","AbortController","validate","reportDebug","message","endpoints","globalMiddleware","errorMiddleware","initCallbacks","shutdownCallbacks","syncCallbacks","cron","auth","noFetch","checkEnvironment","process","env","RUN_MIGRATION","UNDO_MIGRATION","SQL_HOST","envAssert","isHost","SQL_USER","isString","SQL_PASSWORD","SQL_DB","NODE_ENV","PORT","isPort","SECONDARY_PORT","app","express","use","cors","origin","CORS_ORIGIN","methods","allowedHeaders","registerMiddleware","httpServer","createHttpServer","secondaryApp","secondaryMiddleware","defaultErrorMiddleware","forEach","middleware","secondaryHttpServer","disable","server","headersTimeout","keepAliveTimeout","webSocket","attachWebSocket","_createClass2","key","value","setupGlobalErrorLogging","on","err","console","error","stack","reason","Error","code","init","initKeySets","callback","runCallback","Promise","all","map","PubSub","job","runCronJob","resolve","listen","reportInfo","data","port","secondaryPort","nodeEnv","handleSignal","watchTlsCaFileChange","shutdown","listening","address","reportError","exit","close","wss","clients","socket","socketKillTimeout","WEBSOCKET_CLOSE_TIMEOUT","parseInt","setTimeout","readyState","CLOSING","OPEN","terminate","LifecycleController","shutdownRunningInstances","abortController","abort","shutdownKeySets","shutdownSignals","signal","removeAllListeners","getApp","getSecondaryApp","defaultMiddleware","path","endpoint","register","options","WebSocketServer","request","SocketClient","client","catch","file","fs","watch","event","loadTlsConfig","setSecureContext","tlsConfig","handler","name","interval","setTimeoutPromise","undefined","function","apply","parameters","some","Endpoint","EngineError","Object","values","validator","Array"],"sources":["../../../src/entities/Server/Server.ts"],"sourcesContent":["import fs from 'fs';\nimport http from 'http';\nimport https from 'https';\nimport { AddressInfo } from 'net';\nimport path from 'path';\nimport { setTimeout as setTimeoutPromise } from 'timers/promises';\nimport { ValidatorSpec } from 'envalid';\nimport express, { Application } from 'express';\nimport cors from 'cors';\nimport { Server as WebSocketServer } from 'ws';\nimport { SocketClient } from '../SocketClient';\nimport {\n  defaultMiddleware,\n  defaultErrorMiddleware,\n  secondaryMiddleware,\n  shutdownSignals\n} from './Server.const';\nimport {\n  ServerOptions,\n  ServerCronJon,\n  ServerAuthConfig,\n  ServerWebSocketConfig,\n  ServerGlobalMiddleware,\n  ServerErrorMiddleWare,\n  ServerCallback\n} from './Server.types';\nimport { Endpoint } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { LifecycleController } from 'entities/LifecycleController';\nimport { PubSub } from 'entities/PubSub';\nimport { checkEnvironment, envAssert, createHttpServer } from 'utils';\nimport { initKeySets, shutdownKeySets } from 'utils/jwt';\nimport { reportInfo, reportError, reportDebug } from 'utils/report';\nimport { tlsConfig, loadTlsConfig, TlsConfig } from 'utils/tlsConfig';\n\nconst namespace = 'engine:Server';\n\n/** Main server class */\nexport class Server {\n  /** The express application powering the main endpoints */\n  private app: Application;\n  /** The node HTTP(S) server, serving the main express application */\n  private httpServer: http.Server | https.Server;\n  /** The express application powering the support endpoints */\n  private secondaryApp: Application;\n  /** The node HTTP(S) server, serving the secondary express application */\n  private secondaryHttpServer: http.Server | https.Server;\n  /** List of endpoint instances that the server should handle */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  private endpoints: Array<Endpoint<any>>;\n  /** Mapping of env variable name with functions that should run to check their validity */\n  private checkEnvironment: Record<string, ValidatorSpec<unknown>>;\n  /** Middleware that should run on every request before the endpoint specific logic */\n  private globalMiddleware: Array<ServerGlobalMiddleware>;\n  /** Error middleware that should run on every request after the endpoint specific logic, but before the generic global middleware */\n  private errorMiddleware: Array<\n    ServerGlobalMiddleware | ServerErrorMiddleWare\n  >;\n  /** Functions that should be called on server startup */\n  private initCallbacks: Array<ServerCallback>;\n  /** Functions that should be called on server shutdown */\n  private shutdownCallbacks: Array<ServerCallback>;\n  /** When set to true, this indicates that init callbacks should run synchronously in the order they are declared. By default they all run in parallel */\n  private syncCallbacks: boolean;\n  /** Config to set regularly running jobs on the server */\n  private cron?: Array<ServerCronJon>;\n  /** Global auth related configuration */\n  private auth: ServerAuthConfig;\n  /** WebSocket server instance, if configured */\n  private wss?: WebSocketServer;\n  /** Abort controller that handles signals for the server */\n  private abortController = new AbortController();\n\n  /** Create a server */\n  public constructor(config: ServerOptions) {\n    this.validate(config);\n\n    reportDebug({\n      namespace,\n      message: `Creating server`\n    });\n\n    this.endpoints = config.endpoints;\n    this.globalMiddleware = config.globalMiddleware ?? [];\n    this.errorMiddleware = config.errorMiddleware ?? [];\n    this.initCallbacks = config.initCallbacks ?? [];\n    this.shutdownCallbacks = config.shutdownCallbacks ?? [];\n    this.syncCallbacks = config.syncCallbacks ?? false;\n    this.cron = config.cron;\n    this.auth = { noFetch: false, ...config.auth };\n\n    // The minimal environment check is different between the migration modes of execution and the regular server execution mode\n    // When running in migration mode, we only check that we have SQL related environment variables\n    this.checkEnvironment =\n      process.env.RUN_MIGRATION === 'true' ||\n      process.env.UNDO_MIGRATION === 'true'\n        ? {\n            SQL_HOST: envAssert.isHost(),\n            SQL_USER: envAssert.isString(),\n            SQL_PASSWORD: envAssert.isString(),\n            SQL_DB: envAssert.isString()\n          }\n        : {\n            NODE_ENV: envAssert.isString(),\n            PORT: envAssert.isPort(),\n            SECONDARY_PORT: envAssert.isPort(),\n            ...config.checkEnvironment\n          };\n\n    checkEnvironment(this.checkEnvironment);\n\n    // Create the primary express core that serves the business logic\n    this.app = express();\n    this.app.use(\n      cors({\n        origin: process.env.CORS_ORIGIN ?? '*',\n        methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],\n        allowedHeaders: ['Content-Type', 'Authorization']\n      })\n    );\n    this.registerMiddleware(this.app);\n    this.httpServer = createHttpServer(this.app);\n\n    // Create a secondary express core that servers metrics and analytics\n    // This will be served on a different port, allowing to specify different firewall rules for these routes\n    this.secondaryApp = express();\n    [...secondaryMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (middleware) this.secondaryApp.use(middleware);\n      }\n    );\n    this.secondaryHttpServer = createHttpServer(this.secondaryApp);\n\n    // Remove the express headers\n    this.app.disable('x-powered-by');\n    this.secondaryApp.disable('x-powered-by');\n\n    // We remove all node timeout on connections and requests\n    // This responsibility is delegated to the front-facing load balancer\n    [this.httpServer, this.secondaryHttpServer].forEach((server) => {\n      server.headersTimeout = 0;\n      server.keepAliveTimeout = 0;\n    });\n\n    if (config.webSocket) {\n      this.attachWebSocket(config.webSocket);\n    }\n  }\n\n  private setupGlobalErrorLogging(): void {\n    process.on('uncaughtException', (err) => {\n      console.error(\n        '💥 uncaughtException:',\n        err && err.stack ? err.stack : err\n      );\n    });\n    process.on('unhandledRejection', (reason: unknown) => {\n      if (reason instanceof Error) {\n        console.error('💥 unhandledRejection:', reason.stack || reason.message);\n      } else {\n        console.error('💥 unhandledRejection:', reason);\n      }\n    });\n    process.on('beforeExit', (code) =>\n      console.error('process.beforeExit', code)\n    );\n    process.on('exit', (code) => console.error('process.exit', code));\n    process.on('SIGKILL', () => console.error('SIGKILL received')); // usually cannot catch SIGKILL\n    process.on('SIGTERM', () => console.error('SIGTERM received'));\n  }\n\n  /** Start the server */\n  public async init(): Promise<void> {\n    this.setupGlobalErrorLogging();\n    reportDebug({ namespace, message: `Starting Server` });\n    // Fetch the keys for JWT authentication\n    // Ignore in test environment as we do symmetrical token signing\n    if (process.env.NODE_ENV !== 'test' && !this.auth.noFetch)\n      await initKeySets();\n    // Run all the init callbacks\n    // We can either run them all 1/1 synchronously or run them all in parallel (default)\n    // Callback can either be direct function or an object with function and parameters attributes\n\n    if (this.syncCallbacks) {\n      for (const callback of this.initCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.initCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Initialize the Pub/Sub module\n    await PubSub.init();\n    // Run all the cronjob\n    if (this.cron) {\n      this.cron.forEach((job) => {\n        this.runCronJob(job);\n      });\n    }\n\n    // Start listening to requests\n    await Promise.all([\n      new Promise<void>((resolve) =>\n        this.httpServer.listen(process.env.PORT, () => {\n          resolve();\n        })\n      ),\n      new Promise<void>((resolve) =>\n        this.secondaryHttpServer.listen(process.env.SECONDARY_PORT, () => {\n          resolve();\n        })\n      )\n    ]);\n    reportInfo({\n      message: 'SERVER_RUNNING',\n      data: {\n        port: process.env.PORT,\n        secondaryPort: process.env.SECONDARY_PORT,\n        nodeEnv: process.env.NODE_ENV\n      }\n    });\n\n    this.handleSignal();\n\n    // Watch TSL config files changing\n    this.watchTlsCaFileChange();\n  }\n\n  /** Graceful shutdown */\n  public async shutdown(): Promise<void> {\n    reportDebug({ namespace, message: `Shutting down Server` });\n\n    // Stop listening to HTTP requests\n    await Promise.all(\n      [this.httpServer, this.secondaryHttpServer].map((server) => {\n        // Ignore if the server was already stopped\n        // We have observed cases where SIGTERM was thrown multiple times\n        if (!server.listening) return;\n        const { port } = server.address() as AddressInfo;\n        server.on('close', (error: unknown) => {\n          if (error) {\n            reportError(error);\n            process.exit(1);\n          } else {\n            reportInfo({\n              message: `Stopped listening to requests on port ${port}`\n            });\n          }\n        });\n        server.close();\n      })\n    );\n\n    // Close all socket connections\n    if (this.wss) {\n      // First ask then to close gracefully\n      this.wss.clients.forEach((socket) => {\n        socket.close();\n      });\n      // Hard terminate all connections still open after a defined time\n      const socketKillTimeout = process.env.WEBSOCKET_CLOSE_TIMEOUT\n        ? parseInt(process.env.WEBSOCKET_CLOSE_TIMEOUT)\n        : 5000;\n      await new Promise<void>((resolve) => {\n        setTimeout(() => {\n          (this.wss as WebSocketServer).clients.forEach((socket) => {\n            if (\n              socket.readyState === socket.CLOSING ||\n              socket.readyState === socket.OPEN\n            ) {\n              socket.terminate();\n            }\n          });\n          resolve();\n        }, socketKillTimeout);\n      });\n    }\n\n    // Run all the shutdown callback\n    if (this.syncCallbacks) {\n      for (const callback of this.shutdownCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.shutdownCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Shutdown all the running entities\n    await LifecycleController.shutdownRunningInstances();\n\n    // Abort all the cronjob\n    if (this.abortController) this.abortController.abort();\n\n    // Stop the keyset timers\n    shutdownKeySets();\n\n    shutdownSignals.forEach((signal) => process.removeAllListeners(signal));\n  }\n\n  /** Get the express app instance of the server */\n  public getApp(): Application {\n    return this.app;\n  }\n\n  /** Get the express app instance of the server */\n  public getSecondaryApp(): Application {\n    return this.secondaryApp;\n  }\n\n  /** Registers all the middleware with the express app */\n  private registerMiddleware(app: Application): void {\n    // Global middleware can specify a path to which they apply\n    [...defaultMiddleware, ...this.globalMiddleware].forEach((middleware) => {\n      if (typeof middleware === 'function') {\n        app.use(middleware);\n      } else {\n        app.use(middleware.path, middleware.middleware);\n      }\n    });\n    // Call the register method of each endpoint\n    this.endpoints.forEach((endpoint) => {\n      endpoint.register(app);\n    });\n    // Add error middleware\n    [...this.errorMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (typeof middleware === 'function') {\n          app.use(middleware);\n        } else {\n          app.use(middleware.path, middleware.middleware);\n        }\n      }\n    );\n  }\n\n  /** Add a handler for WebSocket connections */\n  private attachWebSocket(options: ServerWebSocketConfig): void {\n    this.wss = new WebSocketServer({\n      ...options.server,\n      server: this.httpServer\n    })\n      .on('connection', (webSocket, request) => {\n        new SocketClient(webSocket, request, options.client);\n      })\n      .on('error', (error) => {\n        reportError(error);\n      });\n  }\n\n  /** Call shutdown if signal gets sent to the process */\n  private handleSignal(): void {\n    shutdownSignals.forEach((signal) =>\n      process.on(signal, () => {\n        (async (): Promise<void> => {\n          reportInfo(`Received shutdown signal [${signal}]`);\n          await this.shutdown();\n        })().catch((error) => {\n          reportError(error);\n        });\n      })\n    );\n  }\n\n  /** Watch the TLS certificate change event */\n  private watchTlsCaFileChange(): void {\n    [\n      'TLS_REQUEST_KEY',\n      'TLS_REQUEST_KEY_PASSPHRASE',\n      'TLS_REQUEST_CERT',\n      'TLS_REQUEST_CA',\n      'TLS_SERVER_KEY',\n      'TLS_SERVER_KEY_PASSPHRASE',\n      'TLS_SERVER_CERT',\n      'TLS_CA'\n    ].forEach((key) => {\n      const file = process.env[key];\n      if (file)\n        fs.watch(path.resolve(file), (event) => {\n          if (event !== 'change') return;\n          reportInfo(`Reloading TLS config [${file} changed]`);\n          loadTlsConfig();\n          (this.httpServer as https.Server).setSecureContext(\n            tlsConfig as TlsConfig\n          );\n        });\n    });\n  }\n\n  /** Executes a recurring job */\n  private runCronJob(job: ServerCronJon): void {\n    (async (): Promise<void> => {\n      reportInfo({ message: `Starting scheduled job \"${job.handler.name}\"` });\n      try {\n        await job.handler();\n        reportInfo({\n          message: `Job \"${job.handler.name}\" finished, starting again in ${job.interval} seconds`\n        });\n        await setTimeoutPromise(job.interval * 1000, undefined, {\n          signal: this.abortController.signal\n        });\n        this.runCronJob(job);\n      } catch (error) {\n        if (error instanceof Error && error.name === 'AbortError') {\n          reportDebug({\n            namespace,\n            message: `Scheduled job \"${job.handler?.name}\" has been aborted`\n          });\n        } else {\n          throw error;\n        }\n      }\n    })().catch((error) => {\n      reportError(error);\n    });\n  }\n\n  /** Run a shutdown/init callback */\n  private runCallback(callback: ServerCallback): unknown {\n    return typeof callback === 'function'\n      ? callback()\n      : callback.function.apply(null, callback.parameters ?? []);\n  }\n\n  /**\n   * Validate the Server constructor configuration\n   */\n  private validate(config: ServerOptions): void {\n    if (\n      !config.endpoints ||\n      config.endpoints.some((endpoint) => !(endpoint instanceof Endpoint))\n    )\n      throw new EngineError(\n        'Server endpoints should be declared and all be Endpoint instances'\n      );\n\n    if (\n      config.checkEnvironment &&\n      Object.values(config.checkEnvironment).some(\n        (validator) => typeof validator !== 'function'\n      )\n    )\n      throw new EngineError(\n        'Some of the environment checks are not valid functions'\n      );\n\n    if (\n      config.initCallbacks &&\n      (!(config.initCallbacks instanceof Array) ||\n        config.initCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Init callbacks is not a list of functions');\n\n    if (\n      config.shutdownCallbacks &&\n      (!(config.shutdownCallbacks instanceof Array) ||\n        config.shutdownCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Shutdown callbacks is not a list of functions');\n  }\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,KAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,GAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AAeA,IAAAQ,SAAA,GAAAR,OAAA;AACA,IAAAS,YAAA,GAAAT,OAAA;AACA,IAAAU,oBAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,MAAA,GAAAZ,OAAA;AACA,IAAAa,IAAA,GAAAb,OAAA;AACA,IAAAc,OAAA,GAAAd,OAAA;AACA,IAAAe,UAAA,GAAAf,OAAA;AAEA,MAAMgB,SAAS,GAAG,eAAe;;AAEjC;AAAA,IACaC,MAAM,GAAAC,OAAA,CAAAD,MAAA;EAmCjB;EACA,SAAAA,OAAmBE,MAAqB,EAAE;IAAA,IAAAC,gBAAA,CAAAC,OAAA,QAAAJ,MAAA;IAnC1C;IAAA,IAAAK,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IACA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAIA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA,2BAC0B,IAAIE,eAAe,CAAC,CAAC;IAI7C,IAAI,CAACC,QAAQ,CAACL,MAAM,CAAC;IAErB,IAAAM,mBAAW,EAAC;MACVT,SAAS;MACTU,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,IAAI,CAACC,SAAS,GAAGR,MAAM,CAACQ,SAAS;IACjC,IAAI,CAACC,gBAAgB,GAAGT,MAAM,CAACS,gBAAgB,IAAI,EAAE;IACrD,IAAI,CAACC,eAAe,GAAGV,MAAM,CAACU,eAAe,IAAI,EAAE;IACnD,IAAI,CAACC,aAAa,GAAGX,MAAM,CAACW,aAAa,IAAI,EAAE;IAC/C,IAAI,CAACC,iBAAiB,GAAGZ,MAAM,CAACY,iBAAiB,IAAI,EAAE;IACvD,IAAI,CAACC,aAAa,GAAGb,MAAM,CAACa,aAAa,IAAI,KAAK;IAClD,IAAI,CAACC,IAAI,GAAGd,MAAM,CAACc,IAAI;IACvB,IAAI,CAACC,IAAI,GAAG;MAAEC,OAAO,EAAE,KAAK;MAAE,GAAGhB,MAAM,CAACe;IAAK,CAAC;;IAE9C;IACA;IACA,IAAI,CAACE,gBAAgB,GACnBC,OAAO,CAACC,GAAG,CAACC,aAAa,KAAK,MAAM,IACpCF,OAAO,CAACC,GAAG,CAACE,cAAc,KAAK,MAAM,GACjC;MACEC,QAAQ,EAAEC,gBAAS,CAACC,MAAM,CAAC,CAAC;MAC5BC,QAAQ,EAAEF,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BC,YAAY,EAAEJ,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAClCE,MAAM,EAAEL,gBAAS,CAACG,QAAQ,CAAC;IAC7B,CAAC,GACD;MACEG,QAAQ,EAAEN,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BI,IAAI,EAAEP,gBAAS,CAACQ,MAAM,CAAC,CAAC;MACxBC,cAAc,EAAET,gBAAS,CAACQ,MAAM,CAAC,CAAC;MAClC,GAAG/B,MAAM,CAACiB;IACZ,CAAC;IAEP,IAAAA,uBAAgB,EAAC,IAAI,CAACA,gBAAgB,CAAC;;IAEvC;IACA,IAAI,CAACgB,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;IACpB,IAAI,CAACD,GAAG,CAACE,GAAG,CACV,IAAAC,aAAI,EAAC;MACHC,MAAM,EAAEnB,OAAO,CAACC,GAAG,CAACmB,WAAW,IAAI,GAAG;MACtCC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;MACpDC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe;IAClD,CAAC,CACH,CAAC;IACD,IAAI,CAACC,kBAAkB,CAAC,IAAI,CAACR,GAAG,CAAC;IACjC,IAAI,CAACS,UAAU,GAAG,IAAAC,uBAAgB,EAAC,IAAI,CAACV,GAAG,CAAC;;IAE5C;IACA;IACA,IAAI,CAACW,YAAY,GAAG,IAAAV,gBAAO,EAAC,CAAC;IAC7B,CAAC,GAAGW,4BAAmB,EAAE,GAAGC,+BAAsB,CAAC,CAACC,OAAO,CACxDC,UAAU,IAAK;MACd,IAAIA,UAAU,EAAE,IAAI,CAACJ,YAAY,CAACT,GAAG,CAACa,UAAU,CAAC;IACnD,CACF,CAAC;IACD,IAAI,CAACC,mBAAmB,GAAG,IAAAN,uBAAgB,EAAC,IAAI,CAACC,YAAY,CAAC;;IAE9D;IACA,IAAI,CAACX,GAAG,CAACiB,OAAO,CAAC,cAAc,CAAC;IAChC,IAAI,CAACN,YAAY,CAACM,OAAO,CAAC,cAAc,CAAC;;IAEzC;IACA;IACA,CAAC,IAAI,CAACR,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACF,OAAO,CAAEI,MAAM,IAAK;MAC9DA,MAAM,CAACC,cAAc,GAAG,CAAC;MACzBD,MAAM,CAACE,gBAAgB,GAAG,CAAC;IAC7B,CAAC,CAAC;IAEF,IAAIrD,MAAM,CAACsD,SAAS,EAAE;MACpB,IAAI,CAACC,eAAe,CAACvD,MAAM,CAACsD,SAAS,CAAC;IACxC;EACF;EAAC,WAAAE,aAAA,CAAAtD,OAAA,EAAAJ,MAAA;IAAA2D,GAAA;IAAAC,KAAA,EAED,SAAQC,uBAAuBA,CAAA,EAAS;MACtCzC,OAAO,CAAC0C,EAAE,CAAC,mBAAmB,EAAGC,GAAG,IAAK;QACvCC,OAAO,CAACC,KAAK,CACX,uBAAuB,EACvBF,GAAG,IAAIA,GAAG,CAACG,KAAK,GAAGH,GAAG,CAACG,KAAK,GAAGH,GACjC,CAAC;MACH,CAAC,CAAC;MACF3C,OAAO,CAAC0C,EAAE,CAAC,oBAAoB,EAAGK,MAAe,IAAK;QACpD,IAAIA,MAAM,YAAYC,KAAK,EAAE;UAC3BJ,OAAO,CAACC,KAAK,CAAC,wBAAwB,EAAEE,MAAM,CAACD,KAAK,IAAIC,MAAM,CAAC1D,OAAO,CAAC;QACzE,CAAC,MAAM;UACLuD,OAAO,CAACC,KAAK,CAAC,wBAAwB,EAAEE,MAAM,CAAC;QACjD;MACF,CAAC,CAAC;MACF/C,OAAO,CAAC0C,EAAE,CAAC,YAAY,EAAGO,IAAI,IAC5BL,OAAO,CAACC,KAAK,CAAC,oBAAoB,EAAEI,IAAI,CAC1C,CAAC;MACDjD,OAAO,CAAC0C,EAAE,CAAC,MAAM,EAAGO,IAAI,IAAKL,OAAO,CAACC,KAAK,CAAC,cAAc,EAAEI,IAAI,CAAC,CAAC;MACjEjD,OAAO,CAAC0C,EAAE,CAAC,SAAS,EAAE,MAAME,OAAO,CAACC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;MAChE7C,OAAO,CAAC0C,EAAE,CAAC,SAAS,EAAE,MAAME,OAAO,CAACC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAChE;;IAEA;EAAA;IAAAN,GAAA;IAAAC,KAAA,EACA,eAAaU,IAAIA,CAAA,EAAkB;MACjC,IAAI,CAACT,uBAAuB,CAAC,CAAC;MAC9B,IAAArD,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAkB,CAAC,CAAC;MACtD;MACA;MACA,IAAIW,OAAO,CAACC,GAAG,CAACU,QAAQ,KAAK,MAAM,IAAI,CAAC,IAAI,CAACd,IAAI,CAACC,OAAO,EACvD,MAAM,IAAAqD,gBAAW,EAAC,CAAC;MACrB;MACA;MACA;;MAEA,IAAI,IAAI,CAACxD,aAAa,EAAE;QACtB,KAAK,MAAMyD,QAAQ,IAAI,IAAI,CAAC3D,aAAa,EAAE;UACzC,MAAM,IAAI,CAAC4D,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAAC9D,aAAa,CAAC+D,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACjE,CAAC;MACH;;MAEA;MACA,MAAMK,cAAM,CAACP,IAAI,CAAC,CAAC;MACnB;MACA,IAAI,IAAI,CAACtD,IAAI,EAAE;QACb,IAAI,CAACA,IAAI,CAACiC,OAAO,CAAE6B,GAAG,IAAK;UACzB,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC;MACJ;;MAEA;MACA,MAAMJ,OAAO,CAACC,GAAG,CAAC,CAChB,IAAID,OAAO,CAAQM,OAAO,IACxB,IAAI,CAACpC,UAAU,CAACqC,MAAM,CAAC7D,OAAO,CAACC,GAAG,CAACW,IAAI,EAAE,MAAM;QAC7CgD,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,EACD,IAAIN,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAC7B,mBAAmB,CAAC8B,MAAM,CAAC7D,OAAO,CAACC,GAAG,CAACa,cAAc,EAAE,MAAM;QAChE8C,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,CACF,CAAC;MACF,IAAAE,kBAAU,EAAC;QACTzE,OAAO,EAAE,gBAAgB;QACzB0E,IAAI,EAAE;UACJC,IAAI,EAAEhE,OAAO,CAACC,GAAG,CAACW,IAAI;UACtBqD,aAAa,EAAEjE,OAAO,CAACC,GAAG,CAACa,cAAc;UACzCoD,OAAO,EAAElE,OAAO,CAACC,GAAG,CAACU;QACvB;MACF,CAAC,CAAC;MAEF,IAAI,CAACwD,YAAY,CAAC,CAAC;;MAEnB;MACA,IAAI,CAACC,oBAAoB,CAAC,CAAC;IAC7B;;IAEA;EAAA;IAAA7B,GAAA;IAAAC,KAAA,EACA,eAAa6B,QAAQA,CAAA,EAAkB;MACrC,IAAAjF,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAuB,CAAC,CAAC;;MAE3D;MACA,MAAMiE,OAAO,CAACC,GAAG,CACf,CAAC,IAAI,CAAC/B,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACyB,GAAG,CAAEvB,MAAM,IAAK;QAC1D;QACA;QACA,IAAI,CAACA,MAAM,CAACqC,SAAS,EAAE;QACvB,MAAM;UAAEN;QAAK,CAAC,GAAG/B,MAAM,CAACsC,OAAO,CAAC,CAAgB;QAChDtC,MAAM,CAACS,EAAE,CAAC,OAAO,EAAGG,KAAc,IAAK;UACrC,IAAIA,KAAK,EAAE;YACT,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;YAClB7C,OAAO,CAACyE,IAAI,CAAC,CAAC,CAAC;UACjB,CAAC,MAAM;YACL,IAAAX,kBAAU,EAAC;cACTzE,OAAO,EAAE,yCAAyC2E,IAAI;YACxD,CAAC,CAAC;UACJ;QACF,CAAC,CAAC;QACF/B,MAAM,CAACyC,KAAK,CAAC,CAAC;MAChB,CAAC,CACH,CAAC;;MAED;MACA,IAAI,IAAI,CAACC,GAAG,EAAE;QACZ;QACA,IAAI,CAACA,GAAG,CAACC,OAAO,CAAC/C,OAAO,CAAEgD,MAAM,IAAK;UACnCA,MAAM,CAACH,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF;QACA,MAAMI,iBAAiB,GAAG9E,OAAO,CAACC,GAAG,CAAC8E,uBAAuB,GACzDC,QAAQ,CAAChF,OAAO,CAACC,GAAG,CAAC8E,uBAAuB,CAAC,GAC7C,IAAI;QACR,MAAM,IAAIzB,OAAO,CAAQM,OAAO,IAAK;UACnCqB,UAAU,CAAC,MAAM;YACd,IAAI,CAACN,GAAG,CAAqBC,OAAO,CAAC/C,OAAO,CAAEgD,MAAM,IAAK;cACxD,IACEA,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACM,OAAO,IACpCN,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACO,IAAI,EACjC;gBACAP,MAAM,CAACQ,SAAS,CAAC,CAAC;cACpB;YACF,CAAC,CAAC;YACFzB,OAAO,CAAC,CAAC;UACX,CAAC,EAAEkB,iBAAiB,CAAC;QACvB,CAAC,CAAC;MACJ;;MAEA;MACA,IAAI,IAAI,CAACnF,aAAa,EAAE;QACtB,KAAK,MAAMyD,QAAQ,IAAI,IAAI,CAAC1D,iBAAiB,EAAE;UAC7C,MAAM,IAAI,CAAC2D,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAAC7D,iBAAiB,CAAC8D,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACrE,CAAC;MACH;;MAEA;MACA,MAAMkC,wCAAmB,CAACC,wBAAwB,CAAC,CAAC;;MAEpD;MACA,IAAI,IAAI,CAACC,eAAe,EAAE,IAAI,CAACA,eAAe,CAACC,KAAK,CAAC,CAAC;;MAEtD;MACA,IAAAC,oBAAe,EAAC,CAAC;MAEjBC,wBAAe,CAAC9D,OAAO,CAAE+D,MAAM,IAAK5F,OAAO,CAAC6F,kBAAkB,CAACD,MAAM,CAAC,CAAC;IACzE;;IAEA;EAAA;IAAArD,GAAA;IAAAC,KAAA,EACA,SAAOsD,MAAMA,CAAA,EAAgB;MAC3B,OAAO,IAAI,CAAC/E,GAAG;IACjB;;IAEA;EAAA;IAAAwB,GAAA;IAAAC,KAAA,EACA,SAAOuD,eAAeA,CAAA,EAAgB;MACpC,OAAO,IAAI,CAACrE,YAAY;IAC1B;;IAEA;EAAA;IAAAa,GAAA;IAAAC,KAAA,EACA,SAAQjB,kBAAkBA,CAACR,GAAgB,EAAQ;MACjD;MACA,CAAC,GAAGiF,0BAAiB,EAAE,GAAG,IAAI,CAACzG,gBAAgB,CAAC,CAACsC,OAAO,CAAEC,UAAU,IAAK;QACvE,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAACmE,IAAI,EAAEnE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CAAC,CAAC;MACF;MACA,IAAI,CAACxC,SAAS,CAACuC,OAAO,CAAEqE,QAAQ,IAAK;QACnCA,QAAQ,CAACC,QAAQ,CAACpF,GAAG,CAAC;MACxB,CAAC,CAAC;MACF;MACA,CAAC,GAAG,IAAI,CAACvB,eAAe,EAAE,GAAGoC,+BAAsB,CAAC,CAACC,OAAO,CACzDC,UAAU,IAAK;QACd,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAACmE,IAAI,EAAEnE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CACF,CAAC;IACH;;IAEA;EAAA;IAAAS,GAAA;IAAAC,KAAA,EACA,SAAQH,eAAeA,CAAC+D,OAA8B,EAAQ;MAC5D,IAAI,CAACzB,GAAG,GAAG,IAAI0B,UAAe,CAAC;QAC7B,GAAGD,OAAO,CAACnE,MAAM;QACjBA,MAAM,EAAE,IAAI,CAACT;MACf,CAAC,CAAC,CACCkB,EAAE,CAAC,YAAY,EAAE,CAACN,SAAS,EAAEkE,OAAO,KAAK;QACxC,IAAIC,0BAAY,CAACnE,SAAS,EAAEkE,OAAO,EAAEF,OAAO,CAACI,MAAM,CAAC;MACtD,CAAC,CAAC,CACD9D,EAAE,CAAC,OAAO,EAAGG,KAAK,IAAK;QACtB,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;MACpB,CAAC,CAAC;IACN;;IAEA;EAAA;IAAAN,GAAA;IAAAC,KAAA,EACA,SAAQ2B,YAAYA,CAAA,EAAS;MAC3BwB,wBAAe,CAAC9D,OAAO,CAAE+D,MAAM,IAC7B5F,OAAO,CAAC0C,EAAE,CAACkD,MAAM,EAAE,MAAM;QACvB,CAAC,YAA2B;UAC1B,IAAA9B,kBAAU,EAAC,6BAA6B8B,MAAM,GAAG,CAAC;UAClD,MAAM,IAAI,CAACvB,QAAQ,CAAC,CAAC;QACvB,CAAC,EAAE,CAAC,CAACoC,KAAK,CAAE5D,KAAK,IAAK;UACpB,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;QACpB,CAAC,CAAC;MACJ,CAAC,CACH,CAAC;IACH;;IAEA;EAAA;IAAAN,GAAA;IAAAC,KAAA,EACA,SAAQ4B,oBAAoBA,CAAA,EAAS;MACnC,CACE,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,iBAAiB,EACjB,QAAQ,CACT,CAACvC,OAAO,CAAEU,GAAG,IAAK;QACjB,MAAMmE,IAAI,GAAG1G,OAAO,CAACC,GAAG,CAACsC,GAAG,CAAC;QAC7B,IAAImE,IAAI,EACNC,WAAE,CAACC,KAAK,CAACX,aAAI,CAACrC,OAAO,CAAC8C,IAAI,CAAC,EAAGG,KAAK,IAAK;UACtC,IAAIA,KAAK,KAAK,QAAQ,EAAE;UACxB,IAAA/C,kBAAU,EAAC,yBAAyB4C,IAAI,WAAW,CAAC;UACpD,IAAAI,wBAAa,EAAC,CAAC;UACd,IAAI,CAACtF,UAAU,CAAkBuF,gBAAgB,CAChDC,oBACF,CAAC;QACH,CAAC,CAAC;MACN,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAzE,GAAA;IAAAC,KAAA,EACA,SAAQmB,UAAUA,CAACD,GAAkB,EAAQ;MAC3C,CAAC,YAA2B;QAC1B,IAAAI,kBAAU,EAAC;UAAEzE,OAAO,EAAE,2BAA2BqE,GAAG,CAACuD,OAAO,CAACC,IAAI;QAAI,CAAC,CAAC;QACvE,IAAI;UACF,MAAMxD,GAAG,CAACuD,OAAO,CAAC,CAAC;UACnB,IAAAnD,kBAAU,EAAC;YACTzE,OAAO,EAAE,QAAQqE,GAAG,CAACuD,OAAO,CAACC,IAAI,iCAAiCxD,GAAG,CAACyD,QAAQ;UAChF,CAAC,CAAC;UACF,MAAM,IAAAC,oBAAiB,EAAC1D,GAAG,CAACyD,QAAQ,GAAG,IAAI,EAAEE,SAAS,EAAE;YACtDzB,MAAM,EAAE,IAAI,CAACJ,eAAe,CAACI;UAC/B,CAAC,CAAC;UACF,IAAI,CAACjC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC,OAAOb,KAAK,EAAE;UACd,IAAIA,KAAK,YAAYG,KAAK,IAAIH,KAAK,CAACqE,IAAI,KAAK,YAAY,EAAE;YACzD,IAAA9H,mBAAW,EAAC;cACVT,SAAS;cACTU,OAAO,EAAE,kBAAkBqE,GAAG,CAACuD,OAAO,EAAEC,IAAI;YAC9C,CAAC,CAAC;UACJ,CAAC,MAAM;YACL,MAAMrE,KAAK;UACb;QACF;MACF,CAAC,EAAE,CAAC,CAAC4D,KAAK,CAAE5D,KAAK,IAAK;QACpB,IAAA2B,mBAAW,EAAC3B,KAAK,CAAC;MACpB,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAN,GAAA;IAAAC,KAAA,EACA,SAAQa,WAAWA,CAACD,QAAwB,EAAW;MACrD,OAAO,OAAOA,QAAQ,KAAK,UAAU,GACjCA,QAAQ,CAAC,CAAC,GACVA,QAAQ,CAACkE,QAAQ,CAACC,KAAK,CAAC,IAAI,EAAEnE,QAAQ,CAACoE,UAAU,IAAI,EAAE,CAAC;IAC9D;;IAEA;AACF;AACA;EAFE;IAAAjF,GAAA;IAAAC,KAAA,EAGA,SAAQrD,QAAQA,CAACL,MAAqB,EAAQ;MAC5C,IACE,CAACA,MAAM,CAACQ,SAAS,IACjBR,MAAM,CAACQ,SAAS,CAACmI,IAAI,CAAEvB,QAAQ,IAAK,EAAEA,QAAQ,YAAYwB,kBAAQ,CAAC,CAAC,EAEpE,MAAM,IAAIC,wBAAW,CACnB,mEACF,CAAC;MAEH,IACE7I,MAAM,CAACiB,gBAAgB,IACvB6H,MAAM,CAACC,MAAM,CAAC/I,MAAM,CAACiB,gBAAgB,CAAC,CAAC0H,IAAI,CACxCK,SAAS,IAAK,OAAOA,SAAS,KAAK,UACtC,CAAC,EAED,MAAM,IAAIH,wBAAW,CACnB,wDACF,CAAC;MAEH,IACE7I,MAAM,CAACW,aAAa,KACnB,EAAEX,MAAM,CAACW,aAAa,YAAYsI,KAAK,CAAC,IACvCjJ,MAAM,CAACW,aAAa,CAACgI,IAAI,CACtBrE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEkE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,2CAA2C,CAAC;MAEpE,IACE7I,MAAM,CAACY,iBAAiB,KACvB,EAAEZ,MAAM,CAACY,iBAAiB,YAAYqI,KAAK,CAAC,IAC3CjJ,MAAM,CAACY,iBAAiB,CAAC+H,IAAI,CAC1BrE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEkE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,+CAA+C,CAAC;IAC1E;EAAC;AAAA","ignoreList":[]}

package/dist/utils/createHttpServer/createHttpServer.d.ts

@@ -1,8 +1,5 @@
 import { RequestListener, Server } from 'http';
 import { Server as SecureServer } from 'https';
 import { Application } from 'express';
-/**
- * Create and configure an HTTP/HTTPS server.
- * Always uses HTTP in Cloud Run (TLS is terminated by the platform).
- */
-export declare const createHttpServer: (handler?: Application | RequestListener) => Server | SecureServer;
+/** Create and configure an http/https server */
+export declare function createHttpServer(handler?: Application | RequestListener): Server | SecureServer;

package/dist/utils/createHttpServer/createHttpServer.js

@@ -1,41 +1,30 @@
 "use strict";
 
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.createHttpServer = void 0;
+exports.createHttpServer = createHttpServer;
+var _fs = _interopRequireDefault(require("fs"));
 var _http = require("http");
 var _https = require("https");
 var _createHttpServer = require("./createHttpServer.validate");
-var _ = require("./..");
-/**
- * Create and configure an HTTP/HTTPS server.
- * Always uses HTTP in Cloud Run (TLS is terminated by the platform).
- */
-const createHttpServer = handler => {
+/** Create and configure an http/https server */
+function createHttpServer(handler) {
+  // Validate the environment variables
   (0, _createHttpServer.validateHttpEnvironment)();
-
-  // Cloud Run and similar managed environments handle TLS externally.
-  // Detect Cloud Run by K_SERVICE or K_REVISION.
-  const runningInCloudRun = !!process.env.K_SERVICE || !!process.env.K_REVISION;
-  if (!runningInCloudRun && process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {
-    const key = (0, _.getSecretOrFile)('TLS_SERVER_KEY');
-    const cert = (0, _.getSecretOrFile)('TLS_SERVER_CERT');
-    const ca = process.env.TLS_CA ? (0, _.getSecretOrFile)('TLS_CA') : undefined;
-    const passphrase = process.env.TLS_SERVER_KEY_PASSPHRASE;
-    console.log('[createHttpServer] Starting HTTPS server (local mode)');
+  // Create a https server if env var are specified
+  if (process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {
     return (0, _https.createServer)({
-      key,
-      cert,
-      ca,
-      passphrase,
+      key: _fs.default.readFileSync(process.env.TLS_SERVER_KEY),
+      passphrase: process.env.TLS_SERVER_KEY_PASSPHRASE,
+      cert: _fs.default.readFileSync(process.env.TLS_SERVER_CERT),
+      ca: process.env.TLS_CA ? _fs.default.readFileSync(process.env.TLS_CA) : undefined,
       requestCert: true,
       rejectUnauthorized: false
     }, handler);
   } else {
-    console.log('[createHttpServer] Starting HTTP server (Cloud Run or no TLS)');
     return (0, _http.createServer)(handler);
   }
-};
-exports.createHttpServer = createHttpServer;
+}
 //# sourceMappingURL=createHttpServer.js.map

package/dist/utils/createHttpServer/createHttpServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"createHttpServer.js","names":["_http","require","_https","_createHttpServer","_","createHttpServer","handler","validateHttpEnvironment","runningInCloudRun","process","env","K_SERVICE","K_REVISION","TLS_SERVER_KEY","TLS_SERVER_CERT","key","getSecretOrFile","cert","ca","TLS_CA","undefined","passphrase","TLS_SERVER_KEY_PASSPHRASE","console","log","createSecureServer","requestCert","rejectUnauthorized","createServer","exports"],"sources":["../../../src/utils/createHttpServer/createHttpServer.ts"],"sourcesContent":["import { createServer, RequestListener, Server } from 'http';\nimport {\n  createServer as createSecureServer,\n  Server as SecureServer\n} from 'https';\nimport { Application } from 'express';\nimport { validateHttpEnvironment } from './createHttpServer.validate';\nimport { getSecretOrFile } from 'utils';\n\n/**\n * Create and configure an HTTP/HTTPS server.\n * Always uses HTTP in Cloud Run (TLS is terminated by the platform).\n */\nexport const createHttpServer = (\n  handler?: Application | RequestListener\n): Server | SecureServer => {\n  validateHttpEnvironment();\n\n  // Cloud Run and similar managed environments handle TLS externally.\n  // Detect Cloud Run by K_SERVICE or K_REVISION.\n  const runningInCloudRun = !!process.env.K_SERVICE || !!process.env.K_REVISION;\n\n  if (\n    !runningInCloudRun &&\n    process.env.TLS_SERVER_KEY &&\n    process.env.TLS_SERVER_CERT\n  ) {\n    const key = getSecretOrFile('TLS_SERVER_KEY');\n    const cert = getSecretOrFile('TLS_SERVER_CERT');\n    const ca = process.env.TLS_CA ? getSecretOrFile('TLS_CA') : undefined;\n    const passphrase = process.env.TLS_SERVER_KEY_PASSPHRASE;\n\n    console.log('[createHttpServer] Starting HTTPS server (local mode)');\n    return createSecureServer(\n      {\n        key,\n        cert,\n        ca,\n        passphrase,\n        requestCert: true,\n        rejectUnauthorized: false\n      },\n      handler\n    );\n  } else {\n    console.log(\n      '[createHttpServer] Starting HTTP server (Cloud Run or no TLS)'\n    );\n    return createServer(handler);\n  }\n};\n"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAKA,IAAAE,iBAAA,GAAAF,OAAA;AACA,IAAAG,CAAA,GAAAH,OAAA;AAEA;AACA;AACA;AACA;AACO,MAAMI,gBAAgB,GAC3BC,OAAuC,IACb;EAC1B,IAAAC,yCAAuB,EAAC,CAAC;;EAEzB;EACA;EACA,MAAMC,iBAAiB,GAAG,CAAC,CAACC,OAAO,CAACC,GAAG,CAACC,SAAS,IAAI,CAAC,CAACF,OAAO,CAACC,GAAG,CAACE,UAAU;EAE7E,IACE,CAACJ,iBAAiB,IAClBC,OAAO,CAACC,GAAG,CAACG,cAAc,IAC1BJ,OAAO,CAACC,GAAG,CAACI,eAAe,EAC3B;IACA,MAAMC,GAAG,GAAG,IAAAC,iBAAe,EAAC,gBAAgB,CAAC;IAC7C,MAAMC,IAAI,GAAG,IAAAD,iBAAe,EAAC,iBAAiB,CAAC;IAC/C,MAAME,EAAE,GAAGT,OAAO,CAACC,GAAG,CAACS,MAAM,GAAG,IAAAH,iBAAe,EAAC,QAAQ,CAAC,GAAGI,SAAS;IACrE,MAAMC,UAAU,GAAGZ,OAAO,CAACC,GAAG,CAACY,yBAAyB;IAExDC,OAAO,CAACC,GAAG,CAAC,uDAAuD,CAAC;IACpE,OAAO,IAAAC,mBAAkB,EACvB;MACEV,GAAG;MACHE,IAAI;MACJC,EAAE;MACFG,UAAU;MACVK,WAAW,EAAE,IAAI;MACjBC,kBAAkB,EAAE;IACtB,CAAC,EACDrB,OACF,CAAC;EACH,CAAC,MAAM;IACLiB,OAAO,CAACC,GAAG,CACT,+DACF,CAAC;IACD,OAAO,IAAAI,kBAAY,EAACtB,OAAO,CAAC;EAC9B;AACF,CAAC;AAACuB,OAAA,CAAAxB,gBAAA,GAAAA,gBAAA","ignoreList":[]}
+{"version":3,"file":"createHttpServer.js","names":["_fs","_interopRequireDefault","require","_http","_https","_createHttpServer","createHttpServer","handler","validateHttpEnvironment","process","env","TLS_SERVER_KEY","TLS_SERVER_CERT","createSecureServer","key","fs","readFileSync","passphrase","TLS_SERVER_KEY_PASSPHRASE","cert","ca","TLS_CA","undefined","requestCert","rejectUnauthorized","createServer"],"sources":["../../../src/utils/createHttpServer/createHttpServer.ts"],"sourcesContent":["import fs from 'fs';\nimport { createServer, RequestListener, Server } from 'http';\nimport {\n  createServer as createSecureServer,\n  Server as SecureServer\n} from 'https';\nimport { Application } from 'express';\nimport { validateHttpEnvironment } from './createHttpServer.validate';\n\n/** Create and configure an http/https server */\nexport function createHttpServer(\n  handler?: Application | RequestListener\n): Server | SecureServer {\n  // Validate the environment variables\n  validateHttpEnvironment();\n  // Create a https server if env var are specified\n  if (process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {\n    return createSecureServer(\n      {\n        key: fs.readFileSync(process.env.TLS_SERVER_KEY),\n        passphrase: process.env.TLS_SERVER_KEY_PASSPHRASE,\n        cert: fs.readFileSync(process.env.TLS_SERVER_CERT),\n        ca: process.env.TLS_CA\n          ? fs.readFileSync(process.env.TLS_CA)\n          : undefined,\n        requestCert: true,\n        rejectUnauthorized: false\n      },\n      handler\n    );\n  } else {\n    return createServer(handler);\n  }\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AAKA,IAAAG,iBAAA,GAAAH,OAAA;AAEA;AACO,SAASI,gBAAgBA,CAC9BC,OAAuC,EAChB;EACvB;EACA,IAAAC,yCAAuB,EAAC,CAAC;EACzB;EACA,IAAIC,OAAO,CAACC,GAAG,CAACC,cAAc,IAAIF,OAAO,CAACC,GAAG,CAACE,eAAe,EAAE;IAC7D,OAAO,IAAAC,mBAAkB,EACvB;MACEC,GAAG,EAAEC,WAAE,CAACC,YAAY,CAACP,OAAO,CAACC,GAAG,CAACC,cAAc,CAAC;MAChDM,UAAU,EAAER,OAAO,CAACC,GAAG,CAACQ,yBAAyB;MACjDC,IAAI,EAAEJ,WAAE,CAACC,YAAY,CAACP,OAAO,CAACC,GAAG,CAACE,eAAe,CAAC;MAClDQ,EAAE,EAAEX,OAAO,CAACC,GAAG,CAACW,MAAM,GAClBN,WAAE,CAACC,YAAY,CAACP,OAAO,CAACC,GAAG,CAACW,MAAM,CAAC,GACnCC,SAAS;MACbC,WAAW,EAAE,IAAI;MACjBC,kBAAkB,EAAE;IACtB,CAAC,EACDjB,OACF,CAAC;EACH,CAAC,MAAM;IACL,OAAO,IAAAkB,kBAAY,EAAClB,OAAO,CAAC;EAC9B;AACF","ignoreList":[]}

package/dist/utils/tlsConfig/index.d.ts

@@ -1,3 +1,2 @@
 export * from './tlsConfig';
 export * from './tlsConfig.types';
-export * from './httpsAgent';

package/dist/utils/tlsConfig/index.js

@@ -25,15 +25,4 @@ Object.keys(_tlsConfig2).forEach(function (key) {
     }
   });
 });
-var _httpsAgent = require("./httpsAgent");
-Object.keys(_httpsAgent).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _httpsAgent[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _httpsAgent[key];
-    }
-  });
-});
 //# sourceMappingURL=index.js.map

package/dist/utils/tlsConfig/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_tlsConfig","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_tlsConfig2","_httpsAgent"],"sources":["../../../src/utils/tlsConfig/index.ts"],"sourcesContent":["export * from './tlsConfig';\nexport * from './tlsConfig.types';\nexport * from './httpsAgent';\n"],"mappings":";;;;;AAAA,IAAAA,UAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,UAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,UAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,UAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,WAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,WAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,WAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,WAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,WAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,WAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,WAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,WAAA,CAAAN,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_tlsConfig","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_tlsConfig2"],"sources":["../../../src/utils/tlsConfig/index.ts"],"sourcesContent":["export * from './tlsConfig';\nexport * from './tlsConfig.types';\n"],"mappings":";;;;;AAAA,IAAAA,UAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,UAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,UAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,UAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,WAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,WAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,WAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,WAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/utils/tlsConfig/tlsConfig.d.ts

@@ -3,6 +3,6 @@ import { TlsConfig } from './tlsConfig.types';
 export declare let tlsConfig: undefined | TlsConfig;
 export declare let httpsAgent: undefined | Agent;
 /**
- * Load TLS config by its environment setting (local files or GCP secrets)
+ * Load TLS config by its Environment setting.
  */
 export declare function loadTlsConfig(): void;

package/dist/utils/tlsConfig/tlsConfig.js

@@ -7,37 +7,26 @@ Object.defineProperty(exports, "__esModule", {
 exports.httpsAgent = void 0;
 exports.loadTlsConfig = loadTlsConfig;
 exports.tlsConfig = void 0;
+var _fs = _interopRequireDefault(require("fs"));
 var _https = _interopRequireDefault(require("https"));
 var _tlsConfig = require("./tlsConfig.validate");
 var _EngineError = require("../../entities/EngineError");
-var _ = require("./..");
 let tlsConfig = exports.tlsConfig = void 0;
 let httpsAgent = exports.httpsAgent = void 0;
 
 /**
- * Load TLS config by its environment setting (local files or GCP secrets)
+ * Load TLS config by its Environment setting.
  */
 function loadTlsConfig() {
+  // Check that environment variables are correctly set
   (0, _tlsConfig.validateTlsConfig)();
   exports.tlsConfig = tlsConfig = undefined;
-  const runningInCloudRun = !!process.env.K_SERVICE || !!process.env.K_REVISION;
-  if (runningInCloudRun) {
-    console.log('[loadTlsConfig] Skipping TLS config load (Cloud Run)');
-    return;
-  }
   if (process.env.TLS_REQUEST_KEY || process.env.TLS_SERVER_KEY) {
-    // Fetch TLS secrets using unified utility
-    const key = (0, _.getSecretOrFile)('TLS_SERVER_KEY');
-    const cert = (0, _.getSecretOrFile)('TLS_SERVER_CERT');
-    const ca = (0, _.getSecretOrFile)('TLS_CA');
-
-    // Passphrase is read directly from env variables
-    const passphrase = process.env.TLS_REQUEST_KEY_PASSPHRASE ?? process.env.TLS_SERVER_KEY_PASSPHRASE;
     exports.tlsConfig = tlsConfig = {
-      key,
-      cert,
-      ca,
-      passphrase
+      key: _fs.default.readFileSync(process.env.TLS_REQUEST_KEY ?? process.env.TLS_SERVER_KEY, 'utf-8'),
+      cert: _fs.default.readFileSync(process.env.TLS_REQUEST_CERT ?? process.env.TLS_SERVER_CERT, 'utf-8'),
+      ca: _fs.default.readFileSync(process.env.TLS_REQUEST_CA ?? process.env.TLS_CA, 'utf-8'),
+      passphrase: process.env.TLS_REQUEST_KEY_PASSPHRASE ?? process.env.TLS_SERVER_KEY_PASSPHRASE
     };
     exports.httpsAgent = httpsAgent = new _https.default.Agent({
       key: tlsConfig.key,
@@ -46,7 +35,7 @@ function loadTlsConfig() {
       passphrase: tlsConfig.passphrase
     });
   }
-  if (!tlsConfig || !(tlsConfig.key && tlsConfig.cert && tlsConfig.ca)) {
+  if (!tlsConfig || !(tlsConfig.ca && tlsConfig.cert && tlsConfig.key)) {
     throw new _EngineError.EngineError({
       message: 'TLS environment variables are not set correctly'
     });

package/dist/utils/tlsConfig/tlsConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"tlsConfig.js","names":["_https","_interopRequireDefault","require","_tlsConfig","_EngineError","_","tlsConfig","exports","httpsAgent","loadTlsConfig","validateTlsConfig","undefined","runningInCloudRun","process","env","K_SERVICE","K_REVISION","console","log","TLS_REQUEST_KEY","TLS_SERVER_KEY","key","getSecretOrFile","cert","ca","passphrase","TLS_REQUEST_KEY_PASSPHRASE","TLS_SERVER_KEY_PASSPHRASE","https","Agent","EngineError","message"],"sources":["../../../src/utils/tlsConfig/tlsConfig.ts"],"sourcesContent":["import https, { Agent } from 'https';\nimport { TlsConfig } from './tlsConfig.types';\nimport { validateTlsConfig } from './tlsConfig.validate';\nimport { EngineError } from 'entities/EngineError';\nimport { getSecretOrFile } from 'utils';\n\nexport let tlsConfig: undefined | TlsConfig;\nexport let httpsAgent: undefined | Agent;\n\n/**\n * Load TLS config by its environment setting (local files or GCP secrets)\n */\nexport function loadTlsConfig(): void {\n  validateTlsConfig();\n  tlsConfig = undefined;\n\n  const runningInCloudRun = !!process.env.K_SERVICE || !!process.env.K_REVISION;\n  if (runningInCloudRun) {\n    console.log('[loadTlsConfig] Skipping TLS config load (Cloud Run)');\n    return;\n  }\n\n  if (process.env.TLS_REQUEST_KEY || process.env.TLS_SERVER_KEY) {\n    // Fetch TLS secrets using unified utility\n    const key = getSecretOrFile('TLS_SERVER_KEY');\n    const cert = getSecretOrFile('TLS_SERVER_CERT');\n    const ca = getSecretOrFile('TLS_CA');\n\n    // Passphrase is read directly from env variables\n    const passphrase =\n      process.env.TLS_REQUEST_KEY_PASSPHRASE ??\n      process.env.TLS_SERVER_KEY_PASSPHRASE;\n\n    tlsConfig = { key, cert, ca, passphrase } as TlsConfig;\n\n    httpsAgent = new https.Agent({\n      key: tlsConfig.key,\n      cert: tlsConfig.cert,\n      ca: tlsConfig.ca,\n      passphrase: tlsConfig.passphrase\n    });\n  }\n\n  if (!tlsConfig || !(tlsConfig.key && tlsConfig.cert && tlsConfig.ca)) {\n    throw new EngineError({\n      message: 'TLS environment variables are not set correctly'\n    });\n  }\n}\n"],"mappings":";;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,YAAA,GAAAF,OAAA;AACA,IAAAG,CAAA,GAAAH,OAAA;AAEO,IAAII,SAAgC,GAAAC,OAAA,CAAAD,SAAA;AACpC,IAAIE,UAA6B,GAAAD,OAAA,CAAAC,UAAA;;AAExC;AACA;AACA;AACO,SAASC,aAAaA,CAAA,EAAS;EACpC,IAAAC,4BAAiB,EAAC,CAAC;EACnBH,OAAA,CAAAD,SAAA,GAAAA,SAAS,GAAGK,SAAS;EAErB,MAAMC,iBAAiB,GAAG,CAAC,CAACC,OAAO,CAACC,GAAG,CAACC,SAAS,IAAI,CAAC,CAACF,OAAO,CAACC,GAAG,CAACE,UAAU;EAC7E,IAAIJ,iBAAiB,EAAE;IACrBK,OAAO,CAACC,GAAG,CAAC,sDAAsD,CAAC;IACnE;EACF;EAEA,IAAIL,OAAO,CAACC,GAAG,CAACK,eAAe,IAAIN,OAAO,CAACC,GAAG,CAACM,cAAc,EAAE;IAC7D;IACA,MAAMC,GAAG,GAAG,IAAAC,iBAAe,EAAC,gBAAgB,CAAC;IAC7C,MAAMC,IAAI,GAAG,IAAAD,iBAAe,EAAC,iBAAiB,CAAC;IAC/C,MAAME,EAAE,GAAG,IAAAF,iBAAe,EAAC,QAAQ,CAAC;;IAEpC;IACA,MAAMG,UAAU,GACdZ,OAAO,CAACC,GAAG,CAACY,0BAA0B,IACtCb,OAAO,CAACC,GAAG,CAACa,yBAAyB;IAEvCpB,OAAA,CAAAD,SAAA,GAAAA,SAAS,GAAG;MAAEe,GAAG;MAAEE,IAAI;MAAEC,EAAE;MAAEC;IAAW,CAAc;IAEtDlB,OAAA,CAAAC,UAAA,GAAAA,UAAU,GAAG,IAAIoB,cAAK,CAACC,KAAK,CAAC;MAC3BR,GAAG,EAAEf,SAAS,CAACe,GAAG;MAClBE,IAAI,EAAEjB,SAAS,CAACiB,IAAI;MACpBC,EAAE,EAAElB,SAAS,CAACkB,EAAE;MAChBC,UAAU,EAAEnB,SAAS,CAACmB;IACxB,CAAC,CAAC;EACJ;EAEA,IAAI,CAACnB,SAAS,IAAI,EAAEA,SAAS,CAACe,GAAG,IAAIf,SAAS,CAACiB,IAAI,IAAIjB,SAAS,CAACkB,EAAE,CAAC,EAAE;IACpE,MAAM,IAAIM,wBAAW,CAAC;MACpBC,OAAO,EAAE;IACX,CAAC,CAAC;EACJ;AACF","ignoreList":[]}
+{"version":3,"file":"tlsConfig.js","names":["_fs","_interopRequireDefault","require","_https","_tlsConfig","_EngineError","tlsConfig","exports","httpsAgent","loadTlsConfig","validateTlsConfig","undefined","process","env","TLS_REQUEST_KEY","TLS_SERVER_KEY","key","fs","readFileSync","cert","TLS_REQUEST_CERT","TLS_SERVER_CERT","ca","TLS_REQUEST_CA","TLS_CA","passphrase","TLS_REQUEST_KEY_PASSPHRASE","TLS_SERVER_KEY_PASSPHRASE","https","Agent","EngineError","message"],"sources":["../../../src/utils/tlsConfig/tlsConfig.ts"],"sourcesContent":["import fs from 'fs';\nimport https, { Agent } from 'https';\nimport { TlsConfig } from './tlsConfig.types';\nimport { validateTlsConfig } from './tlsConfig.validate';\nimport { EngineError } from 'entities/EngineError';\n\nexport let tlsConfig: undefined | TlsConfig;\nexport let httpsAgent: undefined | Agent;\n\n/**\n * Load TLS config by its Environment setting.\n */\nexport function loadTlsConfig(): void {\n  // Check that environment variables are correctly set\n  validateTlsConfig();\n  tlsConfig = undefined;\n\n  if (process.env.TLS_REQUEST_KEY || process.env.TLS_SERVER_KEY) {\n    tlsConfig = {\n      key: fs.readFileSync(\n        (process.env.TLS_REQUEST_KEY ?? process.env.TLS_SERVER_KEY) as string,\n        'utf-8'\n      ),\n      cert: fs.readFileSync(\n        (process.env.TLS_REQUEST_CERT ?? process.env.TLS_SERVER_CERT) as string,\n        'utf-8'\n      ),\n      ca: fs.readFileSync(\n        (process.env.TLS_REQUEST_CA ?? process.env.TLS_CA) as string,\n        'utf-8'\n      ),\n      passphrase: (process.env.TLS_REQUEST_KEY_PASSPHRASE ??\n        process.env.TLS_SERVER_KEY_PASSPHRASE) as string\n    } as TlsConfig;\n    httpsAgent = new https.Agent({\n      key: tlsConfig.key,\n      cert: tlsConfig.cert,\n      ca: tlsConfig.ca,\n      passphrase: tlsConfig.passphrase\n    });\n  }\n  if (!tlsConfig || !(tlsConfig.ca && tlsConfig.cert && tlsConfig.key)) {\n    throw new EngineError({\n      message: 'TLS environment variables are not set correctly'\n    });\n  }\n}\n"],"mappings":";;;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,YAAA,GAAAH,OAAA;AAEO,IAAII,SAAgC,GAAAC,OAAA,CAAAD,SAAA;AACpC,IAAIE,UAA6B,GAAAD,OAAA,CAAAC,UAAA;;AAExC;AACA;AACA;AACO,SAASC,aAAaA,CAAA,EAAS;EACpC;EACA,IAAAC,4BAAiB,EAAC,CAAC;EACnBH,OAAA,CAAAD,SAAA,GAAAA,SAAS,GAAGK,SAAS;EAErB,IAAIC,OAAO,CAACC,GAAG,CAACC,eAAe,IAAIF,OAAO,CAACC,GAAG,CAACE,cAAc,EAAE;IAC7DR,OAAA,CAAAD,SAAA,GAAAA,SAAS,GAAG;MACVU,GAAG,EAAEC,WAAE,CAACC,YAAY,CACjBN,OAAO,CAACC,GAAG,CAACC,eAAe,IAAIF,OAAO,CAACC,GAAG,CAACE,cAAc,EAC1D,OACF,CAAC;MACDI,IAAI,EAAEF,WAAE,CAACC,YAAY,CAClBN,OAAO,CAACC,GAAG,CAACO,gBAAgB,IAAIR,OAAO,CAACC,GAAG,CAACQ,eAAe,EAC5D,OACF,CAAC;MACDC,EAAE,EAAEL,WAAE,CAACC,YAAY,CAChBN,OAAO,CAACC,GAAG,CAACU,cAAc,IAAIX,OAAO,CAACC,GAAG,CAACW,MAAM,EACjD,OACF,CAAC;MACDC,UAAU,EAAGb,OAAO,CAACC,GAAG,CAACa,0BAA0B,IACjDd,OAAO,CAACC,GAAG,CAACc;IAChB,CAAc;IACdpB,OAAA,CAAAC,UAAA,GAAAA,UAAU,GAAG,IAAIoB,cAAK,CAACC,KAAK,CAAC;MAC3Bb,GAAG,EAAEV,SAAS,CAACU,GAAG;MAClBG,IAAI,EAAEb,SAAS,CAACa,IAAI;MACpBG,EAAE,EAAEhB,SAAS,CAACgB,EAAE;MAChBG,UAAU,EAAEnB,SAAS,CAACmB;IACxB,CAAC,CAAC;EACJ;EACA,IAAI,CAACnB,SAAS,IAAI,EAAEA,SAAS,CAACgB,EAAE,IAAIhB,SAAS,CAACa,IAAI,IAAIb,SAAS,CAACU,GAAG,CAAC,EAAE;IACpE,MAAM,IAAIc,wBAAW,CAAC;MACpBC,OAAO,EAAE;IACX,CAAC,CAAC;EACJ;AACF","ignoreList":[]}

package/dist/utils/tlsRequest/tlsRequest.d.ts

@@ -1,3 +1,3 @@
 import { AxiosRequestConfig, AxiosResponse } from 'axios';
 /** Make a network request using TLS, this exposes the server client certificates to the destination */
-export declare const tlsRequest: <T = unknown>(options: AxiosRequestConfig) => Promise<AxiosResponse<T>>;
+export declare function tlsRequest<T = unknown>(options: AxiosRequestConfig): Promise<AxiosResponse<T>>;

package/dist/utils/tlsRequest/tlsRequest.js

@@ -3,15 +3,16 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.tlsRequest = void 0;
+exports.tlsRequest = tlsRequest;
 var _request = require("../request");
-var _httpsAgent = require("../tlsConfig/httpsAgent");
+var _tlsConfig = require("../tlsConfig");
 /** Make a network request using TLS, this exposes the server client certificates to the destination */
-const tlsRequest = async options => {
+async function tlsRequest(options) {
+  // if the config is not initial, will do that.
+  if (!_tlsConfig.httpsAgent) (0, _tlsConfig.loadTlsConfig)();
   return (0, _request.request)({
-    httpsAgent: (0, _httpsAgent.getHttpsAgent)(),
+    httpsAgent: _tlsConfig.httpsAgent,
     ...options
   });
-};
-exports.tlsRequest = tlsRequest;
+}
 //# sourceMappingURL=tlsRequest.js.map

package/dist/utils/tlsRequest/tlsRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"tlsRequest.js","names":["_request","require","_httpsAgent","tlsRequest","options","request","httpsAgent","getHttpsAgent","exports"],"sources":["../../../src/utils/tlsRequest/tlsRequest.ts"],"sourcesContent":["import { AxiosRequestConfig, AxiosResponse } from 'axios';\nimport { request } from 'utils/request';\nimport { getHttpsAgent } from 'utils/tlsConfig/httpsAgent';\n/** Make a network request using TLS, this exposes the server client certificates to the destination */\nexport const tlsRequest = async <T = unknown>(\n  options: AxiosRequestConfig\n): Promise<AxiosResponse<T>> => {\n  return request<T>({\n    httpsAgent: getHttpsAgent(),\n    ...options\n  });\n};\n"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AACA;AACO,MAAME,UAAU,GAAG,MACxBC,OAA2B,IACG;EAC9B,OAAO,IAAAC,gBAAO,EAAI;IAChBC,UAAU,EAAE,IAAAC,yBAAa,EAAC,CAAC;IAC3B,GAAGH;EACL,CAAC,CAAC;AACJ,CAAC;AAACI,OAAA,CAAAL,UAAA,GAAAA,UAAA","ignoreList":[]}
+{"version":3,"file":"tlsRequest.js","names":["_request","require","_tlsConfig","tlsRequest","options","httpsAgent","loadTlsConfig","request"],"sources":["../../../src/utils/tlsRequest/tlsRequest.ts"],"sourcesContent":["import { AxiosRequestConfig, AxiosResponse } from 'axios';\nimport { request } from 'utils/request';\nimport { httpsAgent, loadTlsConfig } from 'utils/tlsConfig';\n\n/** Make a network request using TLS, this exposes the server client certificates to the destination */\nexport async function tlsRequest<T = unknown>(\n  options: AxiosRequestConfig\n): Promise<AxiosResponse<T>> {\n  // if the config is not initial, will do that.\n  if (!httpsAgent) loadTlsConfig();\n  return request<T>({ httpsAgent, ...options });\n}\n"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAEA;AACO,eAAeE,UAAUA,CAC9BC,OAA2B,EACA;EAC3B;EACA,IAAI,CAACC,qBAAU,EAAE,IAAAC,wBAAa,EAAC,CAAC;EAChC,OAAO,IAAAC,gBAAO,EAAI;IAAEF,UAAU,EAAVA,qBAAU;IAAE,GAAGD;EAAQ,CAAC,CAAC;AAC/C","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-server-engine",
-  "version": "1.4.2",
+  "version": "1.4.4",
   "description": "Framework used to develop backend services. This package ships with a lot of features to standardize the creation of services, letting you focus on the business logic.",
   "main": "dist/index.js",
   "scripts": {

package/src/entities/Server/Server.ts

@@ -1,6 +1,8 @@
+import fs from 'fs';
 import http from 'http';
 import https from 'https';
 import { AddressInfo } from 'net';
+import path from 'path';
 import { setTimeout as setTimeoutPromise } from 'timers/promises';
 import { ValidatorSpec } from 'envalid';
 import express, { Application } from 'express';
@@ -109,23 +111,6 @@ export class Server {
 
     // Create the primary express core that serves the business logic
     this.app = express();
-
-    // small request logger + memory snapshot on response finish
-    this.app.use((req, res, next) => {
-      const start = Date.now();
-      console.log(
-        `[REQ START] ${req.method} ${req.originalUrl} ip=${req.ip} nodeEnv=${process.env.NODE_ENV}`
-      );
-      res.on('finish', () => {
-        const time = Date.now() - start;
-        const mem = process.memoryUsage();
-        console.log(
-          `[REQ END] ${req.method} ${req.originalUrl} status=${res.statusCode} timeMs=${time} rss=${mem.rss} heapUsed=${mem.heapUsed}`
-        );
-      });
-      next();
-    });
-
     this.app.use(
       cors({
         origin: process.env.CORS_ORIGIN ?? '*',
@@ -133,12 +118,6 @@ export class Server {
         allowedHeaders: ['Content-Type', 'Authorization']
       })
     );
-
-    this.app.get('/test1', (req, res) => {
-      console.log('Test endpoint hit');
-      res.status(200).json({ status: 'ok' });
-    });
-
     this.registerMiddleware(this.app);
     this.httpServer = createHttpServer(this.app);
 
@@ -245,8 +224,8 @@ export class Server {
 
     this.handleSignal();
 
-    // Load TSL config files
-    this.loadTls();
+    // Watch TSL config files changing
+    this.watchTlsCaFileChange();
   }
 
   /** Graceful shutdown */
@@ -386,18 +365,29 @@ export class Server {
     );
   }
 
-  /** Load TLS Config */
-  private loadTls(): void {
-    try {
-      reportInfo('Loading TLS config');
-      loadTlsConfig();
-      (this.httpServer as https.Server).setSecureContext(
-        tlsConfig as TlsConfig
-      );
-      reportInfo('TLS config loaded successfully');
-    } catch (err) {
-      reportError(`TLS load failed: ${err}`);
-    }
+  /** Watch the TLS certificate change event */
+  private watchTlsCaFileChange(): void {
+    [
+      'TLS_REQUEST_KEY',
+      'TLS_REQUEST_KEY_PASSPHRASE',
+      'TLS_REQUEST_CERT',
+      'TLS_REQUEST_CA',
+      'TLS_SERVER_KEY',
+      'TLS_SERVER_KEY_PASSPHRASE',
+      'TLS_SERVER_CERT',
+      'TLS_CA'
+    ].forEach((key) => {
+      const file = process.env[key];
+      if (file)
+        fs.watch(path.resolve(file), (event) => {
+          if (event !== 'change') return;
+          reportInfo(`Reloading TLS config [${file} changed]`);
+          loadTlsConfig();
+          (this.httpServer as https.Server).setSecureContext(
+            tlsConfig as TlsConfig
+          );
+        });
+    });
   }
 
   /** Executes a recurring job */

package/src/utils/createHttpServer/createHttpServer.ts

@@ -1,3 +1,4 @@
+import fs from 'fs';
 import { createServer, RequestListener, Server } from 'http';
 import {
   createServer as createSecureServer,
@@ -5,47 +6,29 @@ import {
 } from 'https';
 import { Application } from 'express';
 import { validateHttpEnvironment } from './createHttpServer.validate';
-import { getSecretOrFile } from 'utils';
 
-/**
- * Create and configure an HTTP/HTTPS server.
- * Always uses HTTP in Cloud Run (TLS is terminated by the platform).
- */
-export const createHttpServer = (
+/** Create and configure an http/https server */
+export function createHttpServer(
   handler?: Application | RequestListener
-): Server | SecureServer => {
+): Server | SecureServer {
+  // Validate the environment variables
   validateHttpEnvironment();
-
-  // Cloud Run and similar managed environments handle TLS externally.
-  // Detect Cloud Run by K_SERVICE or K_REVISION.
-  const runningInCloudRun = !!process.env.K_SERVICE || !!process.env.K_REVISION;
-
-  if (
-    !runningInCloudRun &&
-    process.env.TLS_SERVER_KEY &&
-    process.env.TLS_SERVER_CERT
-  ) {
-    const key = getSecretOrFile('TLS_SERVER_KEY');
-    const cert = getSecretOrFile('TLS_SERVER_CERT');
-    const ca = process.env.TLS_CA ? getSecretOrFile('TLS_CA') : undefined;
-    const passphrase = process.env.TLS_SERVER_KEY_PASSPHRASE;
-
-    console.log('[createHttpServer] Starting HTTPS server (local mode)');
+  // Create a https server if env var are specified
+  if (process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {
     return createSecureServer(
       {
-        key,
-        cert,
-        ca,
-        passphrase,
+        key: fs.readFileSync(process.env.TLS_SERVER_KEY),
+        passphrase: process.env.TLS_SERVER_KEY_PASSPHRASE,
+        cert: fs.readFileSync(process.env.TLS_SERVER_CERT),
+        ca: process.env.TLS_CA
+          ? fs.readFileSync(process.env.TLS_CA)
+          : undefined,
         requestCert: true,
         rejectUnauthorized: false
       },
       handler
     );
   } else {
-    console.log(
-      '[createHttpServer] Starting HTTP server (Cloud Run or no TLS)'
-    );
     return createServer(handler);
   }
-};
+}

package/src/utils/tlsConfig/index.ts

@@ -1,3 +1,2 @@
 export * from './tlsConfig';
 export * from './tlsConfig.types';
-export * from './httpsAgent';

package/src/utils/tlsConfig/tlsConfig.ts

@@ -1,38 +1,37 @@
+import fs from 'fs';
 import https, { Agent } from 'https';
 import { TlsConfig } from './tlsConfig.types';
 import { validateTlsConfig } from './tlsConfig.validate';
 import { EngineError } from 'entities/EngineError';
-import { getSecretOrFile } from 'utils';
 
 export let tlsConfig: undefined | TlsConfig;
 export let httpsAgent: undefined | Agent;
 
 /**
- * Load TLS config by its environment setting (local files or GCP secrets)
+ * Load TLS config by its Environment setting.
  */
 export function loadTlsConfig(): void {
+  // Check that environment variables are correctly set
   validateTlsConfig();
   tlsConfig = undefined;
 
-  const runningInCloudRun = !!process.env.K_SERVICE || !!process.env.K_REVISION;
-  if (runningInCloudRun) {
-    console.log('[loadTlsConfig] Skipping TLS config load (Cloud Run)');
-    return;
-  }
-
   if (process.env.TLS_REQUEST_KEY || process.env.TLS_SERVER_KEY) {
-    // Fetch TLS secrets using unified utility
-    const key = getSecretOrFile('TLS_SERVER_KEY');
-    const cert = getSecretOrFile('TLS_SERVER_CERT');
-    const ca = getSecretOrFile('TLS_CA');
-
-    // Passphrase is read directly from env variables
-    const passphrase =
-      process.env.TLS_REQUEST_KEY_PASSPHRASE ??
-      process.env.TLS_SERVER_KEY_PASSPHRASE;
-
-    tlsConfig = { key, cert, ca, passphrase } as TlsConfig;
-
+    tlsConfig = {
+      key: fs.readFileSync(
+        (process.env.TLS_REQUEST_KEY ?? process.env.TLS_SERVER_KEY) as string,
+        'utf-8'
+      ),
+      cert: fs.readFileSync(
+        (process.env.TLS_REQUEST_CERT ?? process.env.TLS_SERVER_CERT) as string,
+        'utf-8'
+      ),
+      ca: fs.readFileSync(
+        (process.env.TLS_REQUEST_CA ?? process.env.TLS_CA) as string,
+        'utf-8'
+      ),
+      passphrase: (process.env.TLS_REQUEST_KEY_PASSPHRASE ??
+        process.env.TLS_SERVER_KEY_PASSPHRASE) as string
+    } as TlsConfig;
     httpsAgent = new https.Agent({
       key: tlsConfig.key,
       cert: tlsConfig.cert,
@@ -40,8 +39,7 @@ export function loadTlsConfig(): void {
       passphrase: tlsConfig.passphrase
     });
   }
-
-  if (!tlsConfig || !(tlsConfig.key && tlsConfig.cert && tlsConfig.ca)) {
+  if (!tlsConfig || !(tlsConfig.ca && tlsConfig.cert && tlsConfig.key)) {
     throw new EngineError({
       message: 'TLS environment variables are not set correctly'
     });

package/src/utils/tlsRequest/tlsRequest.ts

@@ -1,12 +1,12 @@
 import { AxiosRequestConfig, AxiosResponse } from 'axios';
 import { request } from 'utils/request';
-import { getHttpsAgent } from 'utils/tlsConfig/httpsAgent';
+import { httpsAgent, loadTlsConfig } from 'utils/tlsConfig';
+
 /** Make a network request using TLS, this exposes the server client certificates to the destination */
-export const tlsRequest = async <T = unknown>(
+export async function tlsRequest<T = unknown>(
   options: AxiosRequestConfig
-): Promise<AxiosResponse<T>> => {
-  return request<T>({
-    httpsAgent: getHttpsAgent(),
-    ...options
-  });
-};
+): Promise<AxiosResponse<T>> {
+  // if the config is not initial, will do that.
+  if (!httpsAgent) loadTlsConfig();
+  return request<T>({ httpsAgent, ...options });
+}

package/test/env.ts

@@ -48,5 +48,6 @@ process.env = {
   SQL_TYPE: 'mysql',
   DEFAULT_MESSAGE_AUDIENCE: audience,
   GOOGLE_AI_KEY: 'AIKEY',
+  ACCESS_TOKEN_EXPIRATION_TIME: '2000',
   ...process.env
 };

package/dist/utils/tlsConfig/httpsAgent.d.ts

@@ -1,2 +0,0 @@
-import { Agent } from 'https';
-export declare function getHttpsAgent(): Agent;

package/dist/utils/tlsConfig/httpsAgent.js

@@ -1,37 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.getHttpsAgent = getHttpsAgent;
-var _https = _interopRequireDefault(require("https"));
-var _tlsConfig = require("./tlsConfig.validate");
-var _EngineError = require("../../entities/EngineError");
-var _ = require("./..");
-let httpsAgent;
-function getHttpsAgent() {
-  if (httpsAgent) return httpsAgent;
-  (0, _tlsConfig.validateTlsConfig)();
-
-  // Always pass env var *names*, not their values
-  const key = (0, _.getSecretOrFile)(process.env.TLS_REQUEST_KEY ? 'TLS_REQUEST_KEY' : 'TLS_SERVER_KEY');
-  const cert = (0, _.getSecretOrFile)(process.env.TLS_REQUEST_CERT ? 'TLS_REQUEST_CERT' : 'TLS_SERVER_CERT');
-
-  // CA is optional → only load if env var is set
-  const ca = process.env.TLS_REQUEST_CA ? (0, _.getSecretOrFile)('TLS_REQUEST_CA') : process.env.TLS_CA ? (0, _.getSecretOrFile)('TLS_CA') : undefined;
-  const passphrase = process.env.TLS_REQUEST_KEY_PASSPHRASE ?? process.env.TLS_SERVER_KEY_PASSPHRASE;
-  if (!key || !cert || !ca || !passphrase) {
-    throw new _EngineError.EngineError({
-      message: 'TLS environment variables are not set correctly'
-    });
-  }
-  httpsAgent = new _https.default.Agent({
-    key,
-    cert,
-    ca,
-    passphrase
-  });
-  return httpsAgent;
-}
-//# sourceMappingURL=httpsAgent.js.map

package/dist/utils/tlsConfig/httpsAgent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"httpsAgent.js","names":["_https","_interopRequireDefault","require","_tlsConfig","_EngineError","_","httpsAgent","getHttpsAgent","validateTlsConfig","key","getSecretOrFile","process","env","TLS_REQUEST_KEY","cert","TLS_REQUEST_CERT","ca","TLS_REQUEST_CA","TLS_CA","undefined","passphrase","TLS_REQUEST_KEY_PASSPHRASE","TLS_SERVER_KEY_PASSPHRASE","EngineError","message","https","Agent"],"sources":["../../../src/utils/tlsConfig/httpsAgent.ts"],"sourcesContent":["import https, { Agent } from 'https';\nimport { validateTlsConfig } from './tlsConfig.validate';\nimport { EngineError } from 'entities/EngineError';\nimport { getSecretOrFile } from 'utils';\n\nlet httpsAgent: Agent | undefined;\nexport function getHttpsAgent(): Agent {\n  if (httpsAgent) return httpsAgent;\n\n  validateTlsConfig();\n\n  // Always pass env var *names*, not their values\n  const key = getSecretOrFile(\n    process.env.TLS_REQUEST_KEY ? 'TLS_REQUEST_KEY' : 'TLS_SERVER_KEY'\n  );\n\n  const cert = getSecretOrFile(\n    process.env.TLS_REQUEST_CERT ? 'TLS_REQUEST_CERT' : 'TLS_SERVER_CERT'\n  );\n\n  // CA is optional → only load if env var is set\n  const ca = process.env.TLS_REQUEST_CA\n    ? getSecretOrFile('TLS_REQUEST_CA')\n    : process.env.TLS_CA\n      ? getSecretOrFile('TLS_CA')\n      : undefined;\n\n  const passphrase =\n    process.env.TLS_REQUEST_KEY_PASSPHRASE ??\n    process.env.TLS_SERVER_KEY_PASSPHRASE;\n\n  if (!key || !cert || !ca || !passphrase) {\n    throw new EngineError({\n      message: 'TLS environment variables are not set correctly'\n    });\n  }\n\n  httpsAgent = new https.Agent({\n    key,\n    cert,\n    ca,\n    passphrase\n  });\n\n  return httpsAgent;\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,YAAA,GAAAF,OAAA;AACA,IAAAG,CAAA,GAAAH,OAAA;AAEA,IAAII,UAA6B;AAC1B,SAASC,aAAaA,CAAA,EAAU;EACrC,IAAID,UAAU,EAAE,OAAOA,UAAU;EAEjC,IAAAE,4BAAiB,EAAC,CAAC;;EAEnB;EACA,MAAMC,GAAG,GAAG,IAAAC,iBAAe,EACzBC,OAAO,CAACC,GAAG,CAACC,eAAe,GAAG,iBAAiB,GAAG,gBACpD,CAAC;EAED,MAAMC,IAAI,GAAG,IAAAJ,iBAAe,EAC1BC,OAAO,CAACC,GAAG,CAACG,gBAAgB,GAAG,kBAAkB,GAAG,iBACtD,CAAC;;EAED;EACA,MAAMC,EAAE,GAAGL,OAAO,CAACC,GAAG,CAACK,cAAc,GACjC,IAAAP,iBAAe,EAAC,gBAAgB,CAAC,GACjCC,OAAO,CAACC,GAAG,CAACM,MAAM,GAChB,IAAAR,iBAAe,EAAC,QAAQ,CAAC,GACzBS,SAAS;EAEf,MAAMC,UAAU,GACdT,OAAO,CAACC,GAAG,CAACS,0BAA0B,IACtCV,OAAO,CAACC,GAAG,CAACU,yBAAyB;EAEvC,IAAI,CAACb,GAAG,IAAI,CAACK,IAAI,IAAI,CAACE,EAAE,IAAI,CAACI,UAAU,EAAE;IACvC,MAAM,IAAIG,wBAAW,CAAC;MACpBC,OAAO,EAAE;IACX,CAAC,CAAC;EACJ;EAEAlB,UAAU,GAAG,IAAImB,cAAK,CAACC,KAAK,CAAC;IAC3BjB,GAAG;IACHK,IAAI;IACJE,EAAE;IACFI;EACF,CAAC,CAAC;EAEF,OAAOd,UAAU;AACnB","ignoreList":[]}

package/src/utils/tlsConfig/httpsAgent.ts

@@ -1,46 +0,0 @@
-import https, { Agent } from 'https';
-import { validateTlsConfig } from './tlsConfig.validate';
-import { EngineError } from 'entities/EngineError';
-import { getSecretOrFile } from 'utils';
-
-let httpsAgent: Agent | undefined;
-export function getHttpsAgent(): Agent {
-  if (httpsAgent) return httpsAgent;
-
-  validateTlsConfig();
-
-  // Always pass env var *names*, not their values
-  const key = getSecretOrFile(
-    process.env.TLS_REQUEST_KEY ? 'TLS_REQUEST_KEY' : 'TLS_SERVER_KEY'
-  );
-
-  const cert = getSecretOrFile(
-    process.env.TLS_REQUEST_CERT ? 'TLS_REQUEST_CERT' : 'TLS_SERVER_CERT'
-  );
-
-  // CA is optional → only load if env var is set
-  const ca = process.env.TLS_REQUEST_CA
-    ? getSecretOrFile('TLS_REQUEST_CA')
-    : process.env.TLS_CA
-      ? getSecretOrFile('TLS_CA')
-      : undefined;
-
-  const passphrase =
-    process.env.TLS_REQUEST_KEY_PASSPHRASE ??
-    process.env.TLS_SERVER_KEY_PASSPHRASE;
-
-  if (!key || !cert || !ca || !passphrase) {
-    throw new EngineError({
-      message: 'TLS environment variables are not set correctly'
-    });
-  }
-
-  httpsAgent = new https.Agent({
-    key,
-    cert,
-    ca,
-    passphrase
-  });
-
-  return httpsAgent;
-}