@clipboard-health/playwright-toolkit 1.0.0

package/src/lib/adminAuthToken.js

@@ -0,0 +1,369 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOrCreateAdminAuthToken = getOrCreateAdminAuthToken;
+exports.generateAdminAuthToken = generateAdminAuthToken;
+exports.isRetryableAdminAuthTokenGenerationError = isRetryableAdminAuthTokenGenerationError;
+exports.isAdminAuthTokenExpired = isAdminAuthTokenExpired;
+const tslib_1 = require("tslib");
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = tslib_1.__importDefault(require("node:path"));
+const util_ts_1 = require("@clipboard-health/util-ts");
+const retry_1 = require("./retry");
+// cspell:ignore defineauthchallenge getparameters maketesttoken
+const DEFAULT_CACHE_DIRECTORY_NAME = "clipboard-health-playwright-admin-auth";
+const DEFAULT_LOCK_STALE_AFTER_MS = 5 * 60 * 1000;
+const DEFAULT_LOCK_WAIT_TIMEOUT_MS = 6 * 60 * 1000;
+const DEFAULT_LOCK_RETRY_DELAY_MS = 250;
+const DEFAULT_LOCK_RETRY_JITTER_MS = 250;
+const BEARER_TOKEN_PREFIX = "Bearer ";
+const DEFAULT_COMMAND_TIMEOUT_MS = 30_000;
+const DEFAULT_GENERATION_MAX_ATTEMPTS = 4;
+const DEFAULT_GENERATION_RETRY_DELAY_MS = 2000;
+const DEFAULT_GENERATION_RETRY_JITTER_MS = 1000;
+const REDACTED_USER_LABEL = "[redacted-user]";
+/**
+ * Returns a valid cached admin token or creates one while holding an atomic
+ * filesystem lock shared by Playwright workers, shards, and local processes.
+ */
+async function getOrCreateAdminAuthToken(params) {
+    validateParams(params);
+    const cachePaths = getCachePaths(params);
+    const nowImplementation = params.nowImplementation ?? Date.now;
+    await (0, promises_1.mkdir)(cachePaths.cacheDirectoryPath, { recursive: true });
+    const cachedEntry = await readCachedEntry({
+        cacheFilePath: cachePaths.cacheFilePath,
+        nowImplementation,
+    });
+    if (cachedEntry !== undefined) {
+        return cachedEntry;
+    }
+    return await getOrCreateWithLock({
+        ...params,
+        cachePaths,
+        nowImplementation,
+    });
+}
+/**
+ * Generates an admin token with classified CLI retries, redacted errors, and
+ * the lock-serialized cross-process cache.
+ */
+async function generateAdminAuthToken(params) {
+    return await getOrCreateAdminAuthToken({
+        ...params,
+        createToken: async () => {
+            const result = await (0, retry_1.runWithRetry)({
+                operationName: "generate admin auth token",
+                operation: async () => {
+                    try {
+                        const commandResult = await (params.commandRunner ?? runAdminAuthTokenCommand)({
+                            executable: params.commandExecutable ?? "cbh",
+                            arguments: getTokenCommandArguments(params),
+                            timeoutMs: params.commandTimeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS,
+                        });
+                        const rawToken = commandResult.stdout.split("\n")[0]?.trim();
+                        if (rawToken === undefined || rawToken.length === 0) {
+                            throw new Error("Token generation returned an empty token");
+                        }
+                        return `${BEARER_TOKEN_PREFIX}${rawToken}`;
+                    }
+                    catch (error) {
+                        throw createSafeAdminAuthTokenError({
+                            adminEmail: params.adminEmail,
+                            commandTimeoutMs: params.commandTimeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS,
+                            error,
+                        });
+                    }
+                },
+                mode: {
+                    kind: "classified",
+                    maxAttempts: params.generationMaxAttempts ?? DEFAULT_GENERATION_MAX_ATTEMPTS,
+                    delayMs: ({ attemptNumber }) => (params.generationRetryDelayMs ?? DEFAULT_GENERATION_RETRY_DELAY_MS) * attemptNumber +
+                        Math.floor((params.randomImplementation?.() ?? Math.random()) *
+                            (params.retryJitterMs ?? DEFAULT_GENERATION_RETRY_JITTER_MS)),
+                    isTransient: ({ error }) => isRetryableAdminAuthTokenGenerationError({ error }),
+                },
+                sleepImplementation: params.sleepImplementation,
+                nowImplementation: params.nowImplementation,
+            });
+            return result.value;
+        },
+    });
+}
+function isRetryableAdminAuthTokenGenerationError(params) {
+    if (!(params.error instanceof Error)) {
+        return false;
+    }
+    const normalizedMessage = params.error.message.toLowerCase();
+    if (normalizedMessage.includes("timed out after")) {
+        return true;
+    }
+    if (normalizedMessage.includes("too many requests")) {
+        return true;
+    }
+    if (normalizedMessage.includes("defineauthchallenge failed") &&
+        normalizedMessage.includes("ssm:getparameters") &&
+        normalizedMessage.includes("s2s-external-client/zendesk-auto-login/client_id")) {
+        return true;
+    }
+    return ((normalizedMessage.includes("maketesttoken") ||
+        normalizedMessage.includes("make_test_token")) &&
+        normalizedMessage.includes("incorrect username or password"));
+}
+function isAdminAuthTokenExpired(params) {
+    return (params.nowMs ?? Date.now()) >= params.cacheEntry.expiresAtMs;
+}
+async function getOrCreateWithLock(params) {
+    const waitStartedAtMs = params.nowImplementation();
+    const lockWaitTimeoutMs = params.lockWaitTimeoutMs ?? DEFAULT_LOCK_WAIT_TIMEOUT_MS;
+    const sleepImplementation = params.sleepImplementation ?? sleep;
+    /* eslint-disable no-await-in-loop -- Lock acquisition and ownership checks are sequential. */
+    while (params.nowImplementation() - waitStartedAtMs < lockWaitTimeoutMs) {
+        const lock = await tryAcquireLock({
+            lockFilePath: params.cachePaths.lockFilePath,
+            nowImplementation: params.nowImplementation,
+        });
+        if (lock !== undefined) {
+            try {
+                const cachedEntry = await readCachedEntry({
+                    cacheFilePath: params.cachePaths.cacheFilePath,
+                    nowImplementation: params.nowImplementation,
+                });
+                if (cachedEntry !== undefined) {
+                    return cachedEntry;
+                }
+                const authToken = await params.createToken();
+                if (!isValidBearerToken(authToken)) {
+                    throw new Error("Generated admin auth token is malformed");
+                }
+                const storedEntry = {
+                    authToken,
+                    expiresAtMs: params.nowImplementation() + params.cacheDurationMs,
+                };
+                await writeCachedEntry({
+                    cacheFilePath: params.cachePaths.cacheFilePath,
+                    storedEntry,
+                });
+                return storedEntry;
+            }
+            finally {
+                await releaseLock({
+                    lockFilePath: params.cachePaths.lockFilePath,
+                    ownerId: lock.ownerId,
+                });
+            }
+        }
+        await removeStaleLock({
+            lockFilePath: params.cachePaths.lockFilePath,
+            lockStaleAfterMs: params.lockStaleAfterMs ?? DEFAULT_LOCK_STALE_AFTER_MS,
+            nowImplementation: params.nowImplementation,
+        });
+        const retryDelayMs = (params.lockRetryDelayMs ?? DEFAULT_LOCK_RETRY_DELAY_MS) +
+            Math.floor((params.randomImplementation?.() ?? Math.random()) *
+                (params.lockRetryJitterMs ?? DEFAULT_LOCK_RETRY_JITTER_MS));
+        await sleepImplementation({ durationMs: retryDelayMs });
+    }
+    /* eslint-enable no-await-in-loop */
+    throw new Error(`Timed out waiting for admin auth token cache lock: ${params.cachePaths.lockFilePath}`);
+}
+function validateParams(params) {
+    if (params.adminEmail.trim().length === 0) {
+        throw new Error("adminEmail must not be empty");
+    }
+    if (params.apiEnvironmentName.trim().length === 0) {
+        throw new Error("apiEnvironmentName must not be empty");
+    }
+    if (!Number.isFinite(params.cacheDurationMs) || params.cacheDurationMs <= 0) {
+        throw new Error("cacheDurationMs must be positive");
+    }
+}
+function getCachePaths(params) {
+    const cacheDirectoryPath = params.cacheDirectory ?? node_path_1.default.join((0, node_os_1.tmpdir)(), DEFAULT_CACHE_DIRECTORY_NAME);
+    const environmentSegment = params.apiEnvironmentName.replaceAll(/[^a-zA-Z0-9._-]/g, "_");
+    const cacheKeyHash = (0, util_ts_1.createDeterministicHash)(`${params.apiEnvironmentName}\0${params.adminEmail}`).slice(0, 16);
+    const cacheFileName = `admin-auth-token-${environmentSegment}-${cacheKeyHash}.json`;
+    return {
+        cacheDirectoryPath,
+        cacheFilePath: node_path_1.default.join(cacheDirectoryPath, cacheFileName),
+        lockFilePath: node_path_1.default.join(cacheDirectoryPath, `${cacheFileName}.lock`),
+    };
+}
+async function readCachedEntry(params) {
+    try {
+        const contents = await (0, promises_1.readFile)(params.cacheFilePath, "utf8");
+        const parsed = JSON.parse(contents);
+        if (!isStoredCacheEntry(parsed)) {
+            return undefined;
+        }
+        if (params.nowImplementation() >= parsed.expiresAtMs) {
+            return undefined;
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (isNodeErrorWithCode({ error, code: "ENOENT" }) || error instanceof SyntaxError) {
+            return undefined;
+        }
+        throw error;
+    }
+}
+function isStoredCacheEntry(value) {
+    return ((0, util_ts_1.isRecord)(value) &&
+        typeof value["authToken"] === "string" &&
+        isValidBearerToken(value["authToken"]) &&
+        typeof value["expiresAtMs"] === "number" &&
+        Number.isFinite(value["expiresAtMs"]));
+}
+async function writeCachedEntry(params) {
+    const temporaryFilePath = `${params.cacheFilePath}.${process.pid}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+    try {
+        await (0, promises_1.writeFile)(temporaryFilePath, JSON.stringify(params.storedEntry), {
+            encoding: "utf8",
+            mode: 0o600,
+        });
+        await (0, promises_1.rename)(temporaryFilePath, params.cacheFilePath);
+    }
+    finally {
+        await (0, promises_1.rm)(temporaryFilePath, { force: true });
+    }
+}
+async function tryAcquireLock(params) {
+    const lock = {
+        ownerId: `${process.pid}-${(0, node_crypto_1.randomUUID)()}`,
+        createdAtMs: params.nowImplementation(),
+        pid: process.pid,
+    };
+    try {
+        await (0, promises_1.writeFile)(params.lockFilePath, JSON.stringify(lock), {
+            encoding: "utf8",
+            flag: "wx",
+            mode: 0o600,
+        });
+        return lock;
+    }
+    catch (error) {
+        if (isNodeErrorWithCode({ error, code: "EEXIST" })) {
+            return undefined;
+        }
+        throw error;
+    }
+}
+async function removeStaleLock(params) {
+    try {
+        const lock = await readLock(params.lockFilePath);
+        const lockFileStats = await (0, promises_1.stat)(params.lockFilePath);
+        const lockCreatedAtMs = lock?.createdAtMs ?? lockFileStats.mtimeMs;
+        if (params.nowImplementation() - lockCreatedAtMs < params.lockStaleAfterMs) {
+            return;
+        }
+        if (lock === undefined) {
+            await (0, promises_1.rm)(params.lockFilePath, { force: true });
+            return;
+        }
+        await releaseLock({
+            lockFilePath: params.lockFilePath,
+            ownerId: lock.ownerId,
+        });
+    }
+    catch (error) {
+        if (!isNodeErrorWithCode({ error, code: "ENOENT" })) {
+            throw error;
+        }
+    }
+}
+async function releaseLock(params) {
+    const currentLock = await readLock(params.lockFilePath);
+    if (currentLock?.ownerId === params.ownerId) {
+        await (0, promises_1.rm)(params.lockFilePath, { force: true });
+    }
+}
+async function readLock(lockFilePath) {
+    try {
+        const contents = await (0, promises_1.readFile)(lockFilePath, "utf8");
+        const parsed = JSON.parse(contents);
+        return isAdminAuthTokenLock(parsed) ? parsed : undefined;
+    }
+    catch (error) {
+        if (isNodeErrorWithCode({ error, code: "ENOENT" }) || error instanceof SyntaxError) {
+            return undefined;
+        }
+        throw error;
+    }
+}
+function isAdminAuthTokenLock(value) {
+    return ((0, util_ts_1.isRecord)(value) &&
+        typeof value["ownerId"] === "string" &&
+        typeof value["createdAtMs"] === "number" &&
+        Number.isFinite(value["createdAtMs"]) &&
+        typeof value["pid"] === "number" &&
+        Number.isFinite(value["pid"]));
+}
+function isValidBearerToken(authToken) {
+    return (authToken === authToken.trim() &&
+        authToken.startsWith(BEARER_TOKEN_PREFIX) &&
+        authToken.length > BEARER_TOKEN_PREFIX.length);
+}
+function isNodeErrorWithCode(params) {
+    return (0, util_ts_1.isRecord)(params.error) && params.error["code"] === params.code;
+}
+async function sleep(params) {
+    await new Promise((resolve) => {
+        setTimeout(resolve, params.durationMs);
+    });
+}
+function getTokenCommandArguments(params) {
+    const argumentsList = [
+        "auth",
+        "gentoken",
+        "user",
+        params.apiEnvironmentName,
+        params.adminEmail,
+        "--quiet",
+    ];
+    if (params.clientName !== undefined) {
+        argumentsList.push("-n", params.clientName);
+    }
+    return argumentsList;
+}
+async function runAdminAuthTokenCommand(params) {
+    return await new Promise((resolve, reject) => {
+        (0, node_child_process_1.execFile)(params.executable, [...params.arguments], {
+            encoding: "utf8",
+            // oxlint-disable-next-line node/no-process-env -- The CLI needs inherited AWS credentials and config.
+            env: { ...process.env, DOTENV_CONFIG_QUIET: "true" },
+            timeout: params.timeoutMs,
+        }, (error, stdout, stderr) => {
+            if (error !== null) {
+                reject(new Error(error.message, { cause: error }));
+                return;
+            }
+            resolve({ stdout, stderr });
+        });
+    });
+}
+function createSafeAdminAuthTokenError(params) {
+    const sourceMessage = params.error instanceof Error ? params.error.message : String(params.error);
+    const redactedMessage = sourceMessage.split(params.adminEmail).join(REDACTED_USER_LABEL);
+    const timeoutSuffix = isCommandTimeoutError({ error: params.error })
+        ? `\nTimed out after ${params.commandTimeoutMs}ms`
+        : "";
+    return new Error(`${redactedMessage}${timeoutSuffix}`);
+}
+function isCommandTimeoutError(params) {
+    const inspectedErrors = new Set();
+    let error = params.error;
+    while ((0, util_ts_1.isRecord)(error) && !inspectedErrors.has(error)) {
+        inspectedErrors.add(error);
+        if (error["killed"] === true &&
+            (error["code"] === "ETIMEDOUT" ||
+                error["signal"] === "SIGTERM" ||
+                error["signal"] === "SIGKILL")) {
+            return true;
+        }
+        error = error["cause"];
+    }
+    return false;
+}
+//# sourceMappingURL=adminAuthToken.js.map

package/src/lib/adminAuthToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminAuthToken.js","sourceRoot":"","sources":["../../../../../packages/playwright-toolkit/src/lib/adminAuthToken.ts"],"names":[],"mappings":";;;;;;;AAAA,2DAA8C;AAC9C,6CAAyC;AACzC,+CAAgF;AAChF,qCAAiC;AACjC,kEAA6B;AAE7B,uDAA8E;AAE9E,mCAAuC;AAEvC,gEAAgE;AAChE,MAAM,4BAA4B,GAAG,wCAAwC,CAAC;AAC9E,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,2BAA2B,GAAG,GAAG,CAAC;AACxC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AACtC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,iCAAiC,GAAG,IAAI,CAAC;AAC/C,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAChD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAmE9C;;;GAGG;AACI,KAAK,oCACV,MAAuC;IAEvC,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC;IAE/D,MAAM,IAAA,gBAAK,EAAC,UAAU,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC;QACxC,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,mBAAmB,CAAC;QAC/B,GAAG,MAAM;QACT,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACI,KAAK,iCACV,MAAoC;IAEpC,OAAO,MAAM,yBAAyB,CAAC;QACrC,GAAG,MAAM;QACT,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAY,EAAC;gBAChC,aAAa,EAAE,2BAA2B;gBAC1C,SAAS,EAAE,KAAK,IAAI,EAAE;oBACpB,IAAI,CAAC;wBACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;4BAC7E,UAAU,EAAE,MAAM,CAAC,iBAAiB,IAAI,KAAK;4BAC7C,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC;4BAC3C,SAAS,EAAE,MAAM,CAAC,gBAAgB,IAAI,0BAA0B;yBACjE,CAAC,CAAC;wBACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;wBAE7D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACpD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;wBAC9D,CAAC;wBAED,OAAO,GAAG,mBAAmB,GAAG,QAAQ,EAAE,CAAC;oBAC7C,CAAC;oBAAC,OAAO,KAAc,EAAE,CAAC;wBACxB,MAAM,6BAA6B,CAAC;4BAClC,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,0BAA0B;4BACvE,KAAK;yBACN,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,YAAY;oBAClB,WAAW,EAAE,MAAM,CAAC,qBAAqB,IAAI,+BAA+B;oBAC5E,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAC7B,CAAC,MAAM,CAAC,sBAAsB,IAAI,iCAAiC,CAAC,GAAG,aAAa;wBACpF,IAAI,CAAC,KAAK,CACR,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;4BAChD,CAAC,MAAM,CAAC,aAAa,IAAI,kCAAkC,CAAC,CAC/D;oBACH,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,wCAAwC,CAAC,EAAE,KAAK,EAAE,CAAC;iBAChF;gBACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,kDAAyD,MAA0B;IACjF,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAE7D,IAAI,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,iBAAiB,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,iBAAiB,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC/C,iBAAiB,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,CAAC,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC1C,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAChD,iBAAiB,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,iCAAwC,MAGvC;IACC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAGC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;IACnF,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,IAAI,KAAK,CAAC;IAEhE,8FAA8F;IAC9F,OAAO,MAAM,CAAC,iBAAiB,EAAE,GAAG,eAAe,GAAG,iBAAiB,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC;YAChC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;YAC5C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QAEH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC;oBACxC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa;oBAC9C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;iBAC5C,CAAC,CAAC;gBACH,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,WAAW,CAAC;gBACrB,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC7C,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC7D,CAAC;gBAED,MAAM,WAAW,GAAG;oBAClB,SAAS;oBACT,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE,GAAG,MAAM,CAAC,eAAe;iBACjE,CAAC;gBACF,MAAM,gBAAgB,CAAC;oBACrB,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa;oBAC9C,WAAW;iBACZ,CAAC,CAAC;gBAEH,OAAO,WAAW,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC;oBAChB,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;oBAC5C,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,eAAe,CAAC;YACpB,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;YAC5C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,2BAA2B;YACxE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QACH,MAAM,YAAY,GAChB,CAAC,MAAM,CAAC,gBAAgB,IAAI,2BAA2B,CAAC;YACxD,IAAI,CAAC,KAAK,CACR,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChD,CAAC,MAAM,CAAC,iBAAiB,IAAI,4BAA4B,CAAC,CAC7D,CAAC;QACJ,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,oCAAoC;IAEpC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,CACvF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAuC;IAC7D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAuC;IAC5D,MAAM,kBAAkB,GACtB,MAAM,CAAC,cAAc,IAAI,mBAAI,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,EAAE,4BAA4B,CAAC,CAAC;IAC7E,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,IAAA,iCAAuB,EAC1C,GAAG,MAAM,CAAC,kBAAkB,KAAK,MAAM,CAAC,UAAU,EAAE,CACrD,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,MAAM,aAAa,GAAG,oBAAoB,kBAAkB,IAAI,YAAY,OAAO,CAAC;IAEpF,OAAO;QACL,kBAAkB;QAClB,aAAa,EAAE,mBAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC;QAC3D,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,aAAa,OAAO,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAG9B;IACC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAQ,EAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACnF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,IAAA,kBAAQ,EAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;QACtC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,QAAQ;QACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAG/B;IACC,MAAM,iBAAiB,GAAG,GAAG,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC;IAEvF,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;YACrE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,MAAM,IAAA,iBAAM,EAAC,iBAAiB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,aAAE,EAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAG7B;IACC,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,EAAE;QACzC,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE;QACvC,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACzD,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAI9B;IACC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,IAAA,eAAI,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,IAAI,EAAE,WAAW,IAAI,aAAa,CAAC,OAAO,CAAC;QAEnE,IAAI,MAAM,CAAC,iBAAiB,EAAE,GAAG,eAAe,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAA,aAAE,EAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,WAAW,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAiD;IAC1E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAExD,IAAI,WAAW,EAAE,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAA,aAAE,EAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,YAAoB;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAQ,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE7C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACnF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,CACL,IAAA,kBAAQ,EAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,QAAQ;QACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,CACL,SAAS,KAAK,SAAS,CAAC,IAAI,EAAE;QAC9B,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC;QACzC,SAAS,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAwC;IACnE,OAAO,IAAA,kBAAQ,EAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,MAA8B;IACjD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAoC;IACpE,MAAM,aAAa,GAAG;QACpB,MAAM;QACN,UAAU;QACV,MAAM;QACN,MAAM,CAAC,kBAAkB;QACzB,MAAM,CAAC,UAAU;QACjB,SAAS;KACV,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAyC;IAEzC,OAAO,MAAM,IAAI,OAAO,CAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxE,IAAA,6BAAQ,EACN,MAAM,CAAC,UAAU,EACjB,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,EACrB;YACE,QAAQ,EAAE,MAAM;YAChB,sGAAsG;YACtG,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE;YACpD,OAAO,EAAE,MAAM,CAAC,SAAS;SAC1B,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,MAItC;IACC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClG,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAClE,CAAC,CAAC,qBAAqB,MAAM,CAAC,gBAAgB,IAAI;QAClD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,IAAI,KAAK,CAAC,GAAG,eAAe,GAAG,aAAa,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B;IACvD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAW,CAAC;IAC3C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAEzB,OAAO,IAAA,kBAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE3B,IACE,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI;YACxB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,WAAW;gBAC5B,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAC7B,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/src/lib/cognitoDiagnostics.d.ts

@@ -0,0 +1,41 @@
+import type { Page, TestInfo } from "@playwright/test";
+type ExpectedUrl = Parameters<Page["waitForURL"]>[0];
+export interface CognitoRequestLike {
+    headers(): Record<string, string>;
+    method(): string;
+    postDataJSON(): unknown;
+    url(): string;
+}
+export interface CognitoRequestSummary {
+    action: string;
+    challengeName: string;
+    method: string;
+    target: string;
+    url: string;
+}
+export interface FillOtpAndWaitForCognitoRedirectParams {
+    expectedUrl: ExpectedUrl;
+    otp: string;
+    page: Page;
+    testInfo?: TestInfo | undefined;
+    expectedUrlTimeoutMs?: number | undefined;
+    inputLabel?: string | RegExp | undefined;
+}
+/**
+ * Fills an OTP and waits for the login redirect. On failure it reports the
+ * observed Cognito challenge, sanitized response/page text, current URL, and
+ * an optional redacted screenshot attachment.
+ */
+export declare function fillOtpAndWaitForCognitoRedirect(params: FillOtpAndWaitForCognitoRedirectParams): Promise<{
+    redirectUrl: string;
+}>;
+export declare function isCognitoOtpChallengeRequest(params: {
+    request: CognitoRequestLike;
+}): boolean;
+export declare function summarizeCognitoAuthRequest(params: {
+    request: CognitoRequestLike;
+}): CognitoRequestSummary;
+export declare function sanitizeCognitoDiagnosticText(params: {
+    text: string;
+}): string;
+export {};