@dregs/sdk 0.1.0

package/dist/index.js

@@ -0,0 +1,554 @@
+import { DregsTimeoutError, DregsConnectionError, DregsAPIError, RateLimitError, QuotaExceededError, errorForStatus } from './chunk-AIUWT3Z7.js';
+export { AuthenticationError, BadRequestError, DEFAULT_TOLERANCE_SECONDS, DregsAPIError, DregsConnectionError, DregsError, DregsTimeoutError, EVENT_HEADER, NotFoundError, PermissionDeniedError, QuotaExceededError, RateLimitError, SIGNATURE_HEADER, ServerError, TIMESTAMP_HEADER, WebhookVerificationError, computeWebhookSignature, errorForStatus, verifyWebhook, verifyWebhookSignature } from './chunk-AIUWT3Z7.js';
+
+// src/version.ts
+var VERSION = "0.1.0";
+
+// src/models.ts
+var CATEGORIES = [
+  "HUMANITY",
+  "AUTHENTICITY",
+  "UNIQUENESS",
+  "BEHAVIOR"
+];
+var Scores = class extends Array {
+  /**
+   * `map`, `filter`, and `slice` return plain arrays rather than trying to rebuild a `Scores`
+   * through a constructor whose shape they know nothing about.
+   */
+  static get [Symbol.species]() {
+    return Array;
+  }
+  constructor(items = []) {
+    super();
+    for (const item of items) {
+      this.push(item);
+    }
+  }
+  /** Returns the score for `category`, or `null` when it has not been scored. */
+  get(category) {
+    return this.find((score) => score.category === category) ?? null;
+  }
+  value(category) {
+    return this.get(category)?.value ?? null;
+  }
+  /** How likely it is that a person, rather than a script, is behind the account. */
+  get humanity() {
+    return this.value("HUMANITY");
+  }
+  /** How genuine the details on the account look. */
+  get authenticity() {
+    return this.value("AUTHENTICITY");
+  }
+  /** How distinct the account is from others in the same tenant. */
+  get uniqueness() {
+    return this.value("UNIQUENESS");
+  }
+  /** How ordinary the account's activity looks. */
+  get behavior() {
+    return this.value("BEHAVIOR");
+  }
+};
+function asPayload(value) {
+  return isPayload(value) ? value : {};
+}
+function isPayload(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asString(value) {
+  return typeof value === "string" ? value : null;
+}
+function asNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function asDate(value) {
+  if (typeof value !== "string" || !value) {
+    return null;
+  }
+  const parsed = new Date(value);
+  return Number.isNaN(parsed.getTime()) ? null : parsed;
+}
+function asCategory(value) {
+  return typeof value === "string" && CATEGORIES.includes(value) ? value : null;
+}
+function asArray(value) {
+  return Array.isArray(value) ? value.filter(isPayload) : [];
+}
+function parseTrackResult(payload) {
+  const body = asPayload(payload);
+  const id = asString(body.id);
+  return {
+    status: asString(body.status),
+    id,
+    fingerprint: asString(body.fingerprint),
+    accepted: id !== null,
+    raw: body
+  };
+}
+function parseBadge(payload) {
+  const body = asPayload(payload);
+  return {
+    slug: asString(body.slug),
+    name: asString(body.name),
+    type: asString(body.type),
+    explanation: asString(body.explanation),
+    metadata: asPayload(body.metadata),
+    raw: body
+  };
+}
+function parseObservation(payload) {
+  const body = asPayload(payload);
+  return {
+    category: asCategory(body.category),
+    id: asString(body.id),
+    label: asString(body.label),
+    explanation: asString(body.explanation),
+    value: asNumber(body.value),
+    confidence: asNumber(body.confidence),
+    weight: asNumber(body.weight),
+    metadata: asPayload(body.metadata),
+    raw: body
+  };
+}
+function parseScore(payload) {
+  const body = asPayload(payload);
+  return {
+    category: asCategory(body.category),
+    value: asNumber(body.value),
+    observations: asArray(body.observations).map(parseObservation),
+    raw: body
+  };
+}
+function parseScores(payload) {
+  return new Scores(asArray(payload).map(parseScore));
+}
+function parseIdentity(payload) {
+  const body = asPayload(payload);
+  const humanityScore = asNumber(body.humanityScore);
+  const authenticityScore = asNumber(body.authenticityScore);
+  const uniquenessScore = asNumber(body.uniquenessScore);
+  const behaviorScore = asNumber(body.behaviorScore);
+  const pairs = [
+    ["HUMANITY", humanityScore],
+    ["AUTHENTICITY", authenticityScore],
+    ["UNIQUENESS", uniquenessScore],
+    ["BEHAVIOR", behaviorScore]
+  ];
+  const scores = new Scores(
+    pairs.filter(([, value]) => value !== null).map(([category, value]) => ({ category, value, observations: [], raw: {} }))
+  );
+  return {
+    id: asString(body.id),
+    displayName: asString(body.displayName),
+    displayEmail: asString(body.displayEmail),
+    displayUsername: asString(body.displayUsername),
+    humanityScore,
+    authenticityScore,
+    uniquenessScore,
+    behaviorScore,
+    createdAt: asDate(body.createdAt),
+    updatedAt: asDate(body.updatedAt),
+    lastTrackedAt: asDate(body.lastTrackedAt),
+    lastScoredAt: asDate(body.lastScoredAt),
+    disregarded: body.disregarded === true,
+    badges: asArray(body.badges).map(parseBadge),
+    data: asPayload(body.data),
+    scores,
+    raw: body
+  };
+}
+function parseAnalysis(payload) {
+  const body = asPayload(payload);
+  const scores = parseScores(body.scores);
+  return {
+    id: asNumber(body.id),
+    identityId: asString(body.identityId),
+    scores,
+    observations: scores.flatMap((score) => [...score.observations]),
+    eventCount: asNumber(body.eventCount),
+    deviceCount: asNumber(body.deviceCount),
+    durationMillis: asNumber(body.durationMillis),
+    startedAt: asDate(body.startedAt),
+    finishedAt: asDate(body.finishedAt),
+    raw: body
+  };
+}
+
+// src/resources.ts
+function path(identityId, suffix = "") {
+  if (!identityId) {
+    throw new TypeError("An identity id is required.");
+  }
+  return `/identities/${encodeURIComponent(identityId)}${suffix}`;
+}
+var Identities = class {
+  #request;
+  /** @internal */
+  constructor(request) {
+    this.#request = request;
+  }
+  /**
+   * Returns the identity, with its current scores, badges, and attributes.
+   *
+   * @param identityId Your own id for the user, the one you pass to `track()`.
+   * @throws {NotFoundError} Dregs has never seen this identity.
+   */
+  async get(identityId) {
+    return parseIdentity(await this.#request("GET", path(identityId)));
+  }
+  /**
+   * Returns the current category scores.
+   *
+   * This is the cheap read and the one most integrations want. It reports the scores Dregs has
+   * already computed without triggering any work. For the observations behind them, use
+   * {@link Identities.analysis}.
+   *
+   * A category that has not been scored yet is absent, so a brand-new identity comes back empty.
+   *
+   * @throws {NotFoundError} Dregs has never seen this identity.
+   */
+  async scores(identityId) {
+    return parseScores(await this.#request("GET", path(identityId, "/scores")));
+  }
+  /**
+   * Returns the most recent analysis cycle, with the observations behind each score.
+   *
+   * Use this when you need to show or log *why* an identity scored the way it did.
+   *
+   * @throws {NotFoundError} The identity is unknown, or it has not been analyzed yet.
+   */
+  async analysis(identityId) {
+    return parseAnalysis(await this.#request("GET", path(identityId, "/analysis")));
+  }
+  /**
+   * Queues a re-analysis of the identity.
+   *
+   * Scoring is asynchronous: this resolves as soon as the job is queued, not when it has run.
+   * Poll {@link Identities.scores} or watch for a webhook rather than expecting fresh scores on
+   * the next line.
+   *
+   * @throws {NotFoundError} Dregs has never seen this identity.
+   */
+  async analyze(identityId) {
+    await this.#request("POST", path(identityId, "/actions/analyze"));
+  }
+};
+
+// src/client.ts
+var DEFAULT_BASE_URL = "https://dregs.com/api";
+var DEFAULT_TIMEOUT_MS = 1e4;
+var DEFAULT_MAX_RETRIES = 2;
+var SECRET_KEY_ENV = "DREGS_SECRET_KEY";
+var BASE_URL_ENV = "DREGS_BASE_URL";
+var DEFAULT_SOURCE = "node-sdk";
+var RETRY_STATUSES = /* @__PURE__ */ new Set([408, 429, 500, 502, 503, 504]);
+var STATUS_RATE_LIMITED = "rate_limited";
+var STATUS_QUOTA_EXCEEDED = "quota_exceeded";
+var MAX_BACKOFF_MS = 8e3;
+var MAX_RETRY_AFTER_MS = 6e4;
+var Dregs = class {
+  /** Read identities, their scores, and their analysis. */
+  identities;
+  #secretKey;
+  #baseUrl;
+  #timeout;
+  #maxRetries;
+  #fetch;
+  /**
+   * @param options Configuration. Every field has a default, so `new Dregs()` reads the
+   *   environment and is usually enough.
+   * @throws {TypeError} No secret key was found, the key given is a `pk_` public key, or
+   *   `maxRetries` is negative.
+   */
+  constructor(options = {}) {
+    const secretKey = options.secretKey ?? readEnv(SECRET_KEY_ENV);
+    if (!secretKey) {
+      throw new TypeError(
+        `No Dregs secret key. Pass { secretKey: '...' } or set the ${SECRET_KEY_ENV} environment variable. You will find your credential's secret key under Settings -> Credentials in the Dregs dashboard.`
+      );
+    }
+    if (secretKey.startsWith("pk_")) {
+      throw new TypeError(
+        "That is a public key. The public key is for the browser tracker and cannot read identities or scores; this SDK needs the secret key from the same credential, which starts with 'sk_'."
+      );
+    }
+    const maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;
+    if (maxRetries < 0 || !Number.isInteger(maxRetries)) {
+      throw new TypeError("maxRetries must be a non-negative integer.");
+    }
+    const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
+    if (timeout <= 0) {
+      throw new TypeError("timeout must be greater than zero.");
+    }
+    const resolvedFetch = options.fetch ?? globalThis.fetch;
+    if (!resolvedFetch) {
+      throw new TypeError(
+        "No global fetch. This SDK needs Node 20 or newer, or a fetch implementation passed as the fetch option."
+      );
+    }
+    this.#secretKey = secretKey;
+    this.#baseUrl = (options.baseUrl ?? readEnv(BASE_URL_ENV) ?? DEFAULT_BASE_URL).replace(
+      /\/+$/,
+      ""
+    );
+    this.#timeout = timeout;
+    this.#maxRetries = maxRetries;
+    this.#fetch = resolvedFetch;
+    const request = (method, path2, body) => this.request(method, path2, body);
+    this.identities = new Identities(request);
+  }
+  /** The API root every request is built against, with any trailing slash removed. */
+  get baseUrl() {
+    return this.#baseUrl;
+  }
+  /** How many times a failed request is retried before the error is thrown. */
+  get maxRetries() {
+    return this.#maxRetries;
+  }
+  /** Milliseconds before a request is abandoned. */
+  get timeout() {
+    return this.#timeout;
+  }
+  /**
+   * Records a backend event against an identity.
+   *
+   * ```ts
+   * await client.track('user.signup', {
+   *   identity: 'user_12345',
+   *   data: { plan: 'pro', referrer: 'partner-x' },
+   *   identityData: { email: 'ada@example.com', name: 'Ada Lovelace' },
+   * });
+   * ```
+   *
+   * @param type Your name for the event, such as `"user.signup"`. Map it to one of Dregs's
+   *   canonical types under **Settings → Mappings** so the analyzers know what it means.
+   * @param options The identity the event belongs to, and anything else worth sending.
+   * @returns The outcome. Check `.accepted` to confirm Dregs recorded the event.
+   * @throws {QuotaExceededError} The account is over its monthly event limit.
+   * @throws {RateLimitError} The credential is ingesting too fast.
+   * @throws {AuthenticationError} The secret key was not recognized.
+   * @throws {BadRequestError} The event was malformed.
+   * @throws {TypeError} The event type, identity, or event id was unusable. These are thrown
+   *   before anything is sent.
+   */
+  async track(type, options) {
+    return parseTrackResult(await this.request("POST", "/events", this.trackBody(type, options)));
+  }
+  /**
+   * Builds the `POST /api/events` body.
+   *
+   * An event id is always sent. When the caller has an id of their own it is used verbatim, so
+   * reposting the same event is a no-op on the Dregs side; otherwise one is generated, which is
+   * what makes this client's own retries safe to perform.
+   */
+  trackBody(type, options) {
+    if (!type) {
+      throw new TypeError("An event type is required.");
+    }
+    if (!options?.identity) {
+      throw new TypeError(
+        "An identity is required. A server-side event has no device signature, so the identity is the only thing tying the event to a user."
+      );
+    }
+    const eventId = options.eventId ?? randomEventId();
+    if (eventId.startsWith("dregs-")) {
+      throw new TypeError("Event ids starting with 'dregs-' are reserved for Dregs itself.");
+    }
+    if (eventId.length > 64) {
+      throw new TypeError("Event ids cannot be longer than 64 characters.");
+    }
+    const body = {
+      id: eventId,
+      type,
+      data: { ...options.data ?? {} },
+      identity: { id: options.identity, data: { ...options.identityData ?? {} } },
+      source: options.source ?? DEFAULT_SOURCE
+    };
+    if (options.timestamp !== void 0) {
+      body.timestamp = toIsoUtc(options.timestamp);
+    }
+    return body;
+  }
+  /**
+   * Sends one request, retrying what is worth retrying, and returns the parsed JSON body.
+   *
+   * The retry loop reuses the request body verbatim, which is what keeps a retried event
+   * idempotent: the generated id is built once, before the first attempt.
+   */
+  async request(method, path2, body) {
+    const url = `${this.#baseUrl}/${path2.replace(/^\/+/, "")}`;
+    const init = this.requestInit(method, body);
+    for (let attempt = 0; ; attempt += 1) {
+      let response;
+      let text;
+      try {
+        response = await this.#fetch(url, { ...init, signal: AbortSignal.timeout(this.#timeout) });
+        text = await response.text();
+      } catch (cause) {
+        if (!this.shouldRetry(attempt, null)) {
+          throw isTimeout(cause) ? new DregsTimeoutError(
+            `The request to ${url} did not answer within ${this.#timeout}ms.`,
+            { cause }
+          ) : new DregsConnectionError(`Could not reach Dregs at ${url}: ${describe(cause)}`, {
+            cause
+          });
+        }
+        await sleep(this.backoff(attempt, null));
+        continue;
+      }
+      try {
+        return processResponse(response, text);
+      } catch (error) {
+        if (error instanceof DregsAPIError && this.shouldRetry(attempt, error.statusCode)) {
+          await sleep(
+            this.backoff(attempt, error instanceof RateLimitError ? error.retryAfter : null)
+          );
+          continue;
+        }
+        throw error;
+      }
+    }
+  }
+  requestInit(method, body) {
+    const headers = {
+      Authorization: `Bearer ${this.#secretKey}`,
+      Accept: "application/json",
+      "User-Agent": userAgent()
+    };
+    if (body === void 0) {
+      return { method, headers };
+    }
+    headers["Content-Type"] = "application/json";
+    return { method, headers, body: JSON.stringify(body) };
+  }
+  shouldRetry(attempt, statusCode) {
+    if (attempt >= this.#maxRetries) {
+      return false;
+    }
+    return statusCode === null || RETRY_STATUSES.has(statusCode);
+  }
+  /**
+   * Milliseconds to wait before attempt `attempt + 1`.
+   *
+   * `Retry-After` wins when the server sent one. Otherwise this is exponential with full jitter,
+   * which keeps a fleet of workers that all hit the limit at once from retrying in lockstep.
+   *
+   * Protected rather than private so a test can stub the waiting out.
+   */
+  backoff(attempt, retryAfterSeconds) {
+    if (retryAfterSeconds !== null && retryAfterSeconds >= 0) {
+      return Math.min(retryAfterSeconds * 1e3, MAX_RETRY_AFTER_MS);
+    }
+    return Math.random() * Math.min(500 * 2 ** attempt, MAX_BACKOFF_MS);
+  }
+};
+function processResponse(response, text) {
+  const payload = parseJson(text);
+  if (response.status >= 400) {
+    throw apiError(response, payload);
+  }
+  if (isRecord(payload)) {
+    if (payload.status === STATUS_RATE_LIMITED) {
+      throw new RateLimitError("Ingestion rate limit exceeded for this credential.", {
+        body: payload,
+        requestId: requestId(response),
+        retryAfter: retryAfter(response)
+      });
+    }
+    if (payload.status === STATUS_QUOTA_EXCEEDED) {
+      throw new QuotaExceededError("The account is over its monthly event limit.", {
+        statusCode: 402,
+        body: payload,
+        requestId: requestId(response)
+      });
+    }
+  }
+  return payload;
+}
+function apiError(response, payload) {
+  const message = messageFrom(payload) ?? response.statusText ?? "Request failed";
+  const id = requestId(response);
+  if (response.status === 429) {
+    return new RateLimitError(message, {
+      body: payload,
+      requestId: id,
+      retryAfter: retryAfter(response)
+    });
+  }
+  const ErrorClass = errorForStatus(response.status);
+  return new ErrorClass(message, { statusCode: response.status, body: payload, requestId: id });
+}
+function messageFrom(payload) {
+  if (!isRecord(payload)) {
+    return null;
+  }
+  for (const key of ["message", "error", "status"]) {
+    const value = payload[key];
+    if (typeof value === "string" && value) {
+      return value;
+    }
+  }
+  return null;
+}
+function requestId(response) {
+  return response.headers.get("X-Request-Id");
+}
+function retryAfter(response) {
+  const raw = response.headers.get("Retry-After");
+  if (raw === null) {
+    return null;
+  }
+  const seconds = Number(raw);
+  return Number.isFinite(seconds) ? seconds : null;
+}
+function parseJson(text) {
+  if (!text) {
+    return null;
+  }
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isTimeout(cause) {
+  const names = [nameOf(cause), nameOf(cause?.cause)];
+  return names.includes("TimeoutError") || names.includes("AbortError");
+}
+function nameOf(value) {
+  if (typeof value !== "object" || value === null || !("name" in value)) {
+    return null;
+  }
+  const { name } = value;
+  return typeof name === "string" ? name : null;
+}
+function describe(cause) {
+  return cause instanceof Error ? cause.message : String(cause);
+}
+function sleep(ms) {
+  return ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
+}
+function readEnv(name) {
+  return typeof process === "undefined" ? void 0 : process.env[name];
+}
+function randomEventId() {
+  return globalThis.crypto.randomUUID().replace(/-/g, "");
+}
+function toIsoUtc(value) {
+  const moment = value instanceof Date ? value : new Date(value);
+  if (Number.isNaN(moment.getTime())) {
+    throw new TypeError(`The timestamp ${JSON.stringify(value)} is not a valid date.`);
+  }
+  return moment.toISOString().replace(/\.000Z$/, "Z");
+}
+function userAgent() {
+  const runtime = typeof process !== "undefined" && process.versions?.node ? `node ${process.versions.node}` : "unknown";
+  return `dregs-node/${VERSION} (${runtime})`;
+}
+
+export { BASE_URL_ENV, CATEGORIES, DEFAULT_BASE_URL, DEFAULT_MAX_RETRIES, DEFAULT_SOURCE, DEFAULT_TIMEOUT_MS, Dregs, Identities, SECRET_KEY_ENV, Scores, VERSION };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/version.ts","../src/models.ts","../src/resources.ts","../src/client.ts"],"names":["path"],"mappings":";;;;AAOO,IAAM,OAAA,GAAU;;;ACchB,IAAM,UAAA,GAAkC;AAAA,EAC7C,UAAA;AAAA,EACA,cAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF;AA0HO,IAAM,MAAA,GAAN,cAAqB,KAAA,CAAa;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,YAAqB,MAAA,CAAO,OAAO,CAAA,GAAsB;AACvD,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,WAAA,CAAY,KAAA,GAA0B,EAAC,EAAG;AACxC,IAAA,KAAA,EAAM;AAEN,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,QAAA,EAAkC;AACpC,IAAA,OAAO,KAAK,IAAA,CAAK,CAAC,UAAU,KAAA,CAAM,QAAA,KAAa,QAAQ,CAAA,IAAK,IAAA;AAAA,EAC9D;AAAA,EAEQ,MAAM,QAAA,EAAmC;AAC/C,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,QAAQ,CAAA,EAAG,KAAA,IAAS,IAAA;AAAA,EACtC;AAAA;AAAA,EAGA,IAAI,QAAA,GAA0B;AAC5B,IAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAAA,EAC9B;AAAA;AAAA,EAGA,IAAI,YAAA,GAA8B;AAChC,IAAA,OAAO,IAAA,CAAK,MAAM,cAAc,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,IAAI,UAAA,GAA4B;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAM,YAAY,CAAA;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,QAAA,GAA0B;AAC5B,IAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAAA,EAC9B;AACF;AAqGA,SAAS,UAAU,KAAA,EAA4B;AAC7C,EAAA,OAAO,SAAA,CAAU,KAAK,CAAA,GAAI,KAAA,GAAQ,EAAC;AACrC;AAEA,SAAS,UAAU,KAAA,EAAqC;AACtD,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,SAAS,KAAA,EAA+B;AAC/C,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C;AAEA,SAAS,SAAS,KAAA,EAA+B;AAC/C,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,QAAA,CAAS,KAAK,IAAI,KAAA,GAAQ,IAAA;AACvE;AAEA,SAAS,OAAO,KAAA,EAA6B;AAC3C,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,KAAA,EAAO;AACvC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,CAAK,KAAK,CAAA;AAE7B,EAAA,OAAO,OAAO,KAAA,CAAM,MAAA,CAAO,OAAA,EAAS,IAAI,IAAA,GAAO,MAAA;AACjD;AAEA,SAAS,WAAW,KAAA,EAAiC;AACnD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAa,WAAiC,QAAA,CAAS,KAAK,IAC/E,KAAA,GACD,IAAA;AACN;AAEA,SAAS,QAAQ,KAAA,EAA8B;AAC7C,EAAA,OAAO,KAAA,CAAM,QAAQ,KAAK,CAAA,GAAI,MAAM,MAAA,CAAO,SAAS,IAAI,EAAC;AAC3D;AAGO,SAAS,iBAAiB,OAAA,EAA+B;AAC9D,EAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAC9B,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,CAAK,EAAE,CAAA;AAE3B,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA;AAAA,IAC5B,EAAA;AAAA,IACA,WAAA,EAAa,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA;AAAA,IACtC,UAAU,EAAA,KAAO,IAAA;AAAA,IACjB,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,WAAW,OAAA,EAAyB;AAClD,EAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAE9B,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA;AAAA,IACxB,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA;AAAA,IACxB,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA;AAAA,IACxB,WAAA,EAAa,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA;AAAA,IACtC,QAAA,EAAU,SAAA,CAAU,IAAA,CAAK,QAAQ,CAAA;AAAA,IACjC,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,iBAAiB,OAAA,EAA+B;AAC9D,EAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAE9B,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,UAAA,CAAW,IAAA,CAAK,QAAQ,CAAA;AAAA,IAClC,EAAA,EAAI,QAAA,CAAS,IAAA,CAAK,EAAE,CAAA;AAAA,IACpB,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,IAC1B,WAAA,EAAa,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA;AAAA,IACtC,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,IAC1B,UAAA,EAAY,QAAA,CAAS,IAAA,CAAK,UAAU,CAAA;AAAA,IACpC,MAAA,EAAQ,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA;AAAA,IAC5B,QAAA,EAAU,SAAA,CAAU,IAAA,CAAK,QAAQ,CAAA;AAAA,IACjC,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,WAAW,OAAA,EAAyB;AAClD,EAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAE9B,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,UAAA,CAAW,IAAA,CAAK,QAAQ,CAAA;AAAA,IAClC,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,IAC1B,cAAc,OAAA,CAAQ,IAAA,CAAK,YAAY,CAAA,CAAE,IAAI,gBAAgB,CAAA;AAAA,IAC7D,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,YAAY,OAAA,EAA0B;AACpD,EAAA,OAAO,IAAI,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,GAAA,CAAI,UAAU,CAAC,CAAA;AACpD;AAGO,SAAS,cAAc,OAAA,EAA4B;AACxD,EAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAE9B,EAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,IAAA,CAAK,aAAa,CAAA;AACjD,EAAA,MAAM,iBAAA,GAAoB,QAAA,CAAS,IAAA,CAAK,iBAAiB,CAAA;AACzD,EAAA,MAAM,eAAA,GAAkB,QAAA,CAAS,IAAA,CAAK,eAAe,CAAA;AACrD,EAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,IAAA,CAAK,aAAa,CAAA;AAEjD,EAAA,MAAM,KAAA,GAAyD;AAAA,IAC7D,CAAC,YAAY,aAAa,CAAA;AAAA,IAC1B,CAAC,gBAAgB,iBAAiB,CAAA;AAAA,IAClC,CAAC,cAAc,eAAe,CAAA;AAAA,IAC9B,CAAC,YAAY,aAAa;AAAA,GAC5B;AAEA,EAAA,MAAM,SAAS,IAAI,MAAA;AAAA,IACjB,KAAA,CACG,MAAA,CAAO,CAAC,GAAG,KAAK,CAAA,KAAM,KAAA,KAAU,IAAI,CAAA,CACpC,GAAA,CAAI,CAAC,CAAC,QAAA,EAAU,KAAK,CAAA,MAAO,EAAE,QAAA,EAAU,KAAA,EAAO,YAAA,EAAc,EAAC,EAAG,GAAA,EAAK,EAAC,EAAE,CAAE;AAAA,GAChF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,QAAA,CAAS,IAAA,CAAK,EAAE,CAAA;AAAA,IACpB,WAAA,EAAa,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA;AAAA,IACtC,YAAA,EAAc,QAAA,CAAS,IAAA,CAAK,YAAY,CAAA;AAAA,IACxC,eAAA,EAAiB,QAAA,CAAS,IAAA,CAAK,eAAe,CAAA;AAAA,IAC9C,aAAA;AAAA,IACA,iBAAA;AAAA,IACA,eAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA;AAAA,IAChC,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA;AAAA,IAChC,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,aAAa,CAAA;AAAA,IACxC,YAAA,EAAc,MAAA,CAAO,IAAA,CAAK,YAAY,CAAA;AAAA,IACtC,WAAA,EAAa,KAAK,WAAA,KAAgB,IAAA;AAAA,IAClC,QAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,IAAI,UAAU,CAAA;AAAA,IAC3C,IAAA,EAAM,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,IACzB,MAAA;AAAA,IACA,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,cAAc,OAAA,EAA4B;AACxD,EAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAC9B,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,IAAA,CAAK,MAAM,CAAA;AAEtC,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,QAAA,CAAS,IAAA,CAAK,EAAE,CAAA;AAAA,IACpB,UAAA,EAAY,QAAA,CAAS,IAAA,CAAK,UAAU,CAAA;AAAA,IACpC,MAAA;AAAA,IACA,YAAA,EAAc,OAAO,OAAA,CAAQ,CAAC,UAAU,CAAC,GAAG,KAAA,CAAM,YAAY,CAAC,CAAA;AAAA,IAC/D,UAAA,EAAY,QAAA,CAAS,IAAA,CAAK,UAAU,CAAA;AAAA,IACpC,WAAA,EAAa,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA;AAAA,IACtC,cAAA,EAAgB,QAAA,CAAS,IAAA,CAAK,cAAc,CAAA;AAAA,IAC5C,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA;AAAA,IAChC,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,IAClC,GAAA,EAAK;AAAA,GACP;AACF;;;ACrbA,SAAS,IAAA,CAAK,UAAA,EAAoB,MAAA,GAAS,EAAA,EAAY;AACrD,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,UAAU,6BAA6B,CAAA;AAAA,EACnD;AAIA,EAAA,OAAO,CAAA,YAAA,EAAe,kBAAA,CAAmB,UAAU,CAAC,GAAG,MAAM,CAAA,CAAA;AAC/D;AAOO,IAAM,aAAN,MAAiB;AAAA,EACb,QAAA;AAAA;AAAA,EAGT,YAAY,OAAA,EAAoB;AAC9B,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAI,UAAA,EAAuC;AAC/C,IAAA,OAAO,aAAA,CAAc,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,IAAA,CAAK,UAAU,CAAC,CAAC,CAAA;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,OAAO,UAAA,EAAqC;AAChD,IAAA,OAAO,WAAA,CAAY,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,IAAA,CAAK,UAAA,EAAY,SAAS,CAAC,CAAC,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,SAAS,UAAA,EAAuC;AACpD,IAAA,OAAO,aAAA,CAAc,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,IAAA,CAAK,UAAA,EAAY,WAAW,CAAC,CAAC,CAAA;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,UAAA,EAAmC;AAC/C,IAAA,MAAM,KAAK,QAAA,CAAS,MAAA,EAAQ,IAAA,CAAK,UAAA,EAAY,kBAAkB,CAAC,CAAA;AAAA,EAClE;AACF;;;AC9DO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,kBAAA,GAAqB;AAG3B,IAAM,mBAAA,GAAsB;AAG5B,IAAM,cAAA,GAAiB;AAGvB,IAAM,YAAA,GAAe;AAGrB,IAAM,cAAA,GAAiB;AAM9B,IAAM,cAAA,mBAAsC,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,GAAA,EAAK,GAAA,EAAK,GAAA,EAAK,GAAG,CAAC,CAAA;AAGlF,IAAM,mBAAA,GAAsB,cAAA;AAC5B,IAAM,qBAAA,GAAwB,gBAAA;AAG9B,IAAM,cAAA,GAAiB,GAAA;AAGvB,IAAM,kBAAA,GAAqB,GAAA;AA0GpB,IAAM,QAAN,MAAY;AAAA;AAAA,EAER,UAAA;AAAA,EAEA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,WAAA,CAAY,OAAA,GAAwB,EAAC,EAAG;AACtC,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,cAAc,CAAA;AAE7D,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAM,IAAI,SAAA;AAAA,QACR,6DAA6D,cAAc,CAAA,uHAAA;AAAA,OAG7E;AAAA,IACF;AAEA,IAAA,IAAI,SAAA,CAAU,UAAA,CAAW,KAAK,CAAA,EAAG;AAC/B,MAAA,MAAM,IAAI,SAAA;AAAA,QACR;AAAA,OAGF;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,mBAAA;AAEzC,IAAA,IAAI,aAAa,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,UAAU,CAAA,EAAG;AACnD,MAAA,MAAM,IAAI,UAAU,4CAA4C,CAAA;AAAA,IAClE;AAEA,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,kBAAA;AAEnC,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,MAAM,IAAI,UAAU,oCAAoC,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,aAAA,GAAuC,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAEzE,IAAA,IAAI,CAAC,aAAA,EAAe;AAClB,MAAA,MAAM,IAAI,SAAA;AAAA,QACR;AAAA,OAEF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,UAAA,GAAa,SAAA;AAClB,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,OAAA,IAAW,OAAA,CAAQ,YAAY,KAAK,gBAAA,EAAkB,OAAA;AAAA,MAC7E,MAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAChB,IAAA,IAAA,CAAK,WAAA,GAAc,UAAA;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,aAAA;AAEd,IAAA,MAAM,OAAA,GAAqB,CAAC,MAAA,EAAQA,KAAAA,EAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQA,KAAAA,EAAM,IAAI,CAAA;AAElF,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,UAAA,CAAW,OAAO,CAAA;AAAA,EAC1C;AAAA;AAAA,EAGA,IAAI,OAAA,GAAkB;AACpB,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,UAAA,GAAqB;AACvB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,OAAA,GAAkB;AACpB,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,MAAM,KAAA,CAAM,IAAA,EAAc,OAAA,EAA6C;AACrE,IAAA,OAAO,gBAAA,CAAiB,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,SAAA,EAAW,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAC,CAAC,CAAA;AAAA,EAC9F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,SAAA,CAAU,MAAc,OAAA,EAAmC;AACjE,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,IAAI,UAAU,4BAA4B,CAAA;AAAA,IAClD;AAEA,IAAA,IAAI,CAAC,SAAS,QAAA,EAAU;AACtB,MAAA,MAAM,IAAI,SAAA;AAAA,QACR;AAAA,OAEF;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,IAAW,aAAA,EAAc;AAEjD,IAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,QAAQ,CAAA,EAAG;AAChC,MAAA,MAAM,IAAI,UAAU,iEAAiE,CAAA;AAAA,IACvF;AAEA,IAAA,IAAI,OAAA,CAAQ,SAAS,EAAA,EAAI;AACvB,MAAA,MAAM,IAAI,UAAU,gDAAgD,CAAA;AAAA,IACtE;AAEA,IAAA,MAAM,IAAA,GAAgC;AAAA,MACpC,EAAA,EAAI,OAAA;AAAA,MACJ,IAAA;AAAA,MACA,MAAM,EAAE,GAAI,OAAA,CAAQ,IAAA,IAAQ,EAAC,EAAG;AAAA,MAChC,QAAA,EAAU,EAAE,EAAA,EAAI,OAAA,CAAQ,QAAA,EAAU,IAAA,EAAM,EAAE,GAAI,OAAA,CAAQ,YAAA,IAAgB,EAAC,EAAG,EAAE;AAAA,MAC5E,MAAA,EAAQ,QAAQ,MAAA,IAAU;AAAA,KAC5B;AAEA,IAAA,IAAI,OAAA,CAAQ,cAAc,MAAA,EAAW;AACnC,MAAA,IAAA,CAAK,SAAA,GAAY,QAAA,CAAS,OAAA,CAAQ,SAAS,CAAA;AAAA,IAC7C;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,OAAA,CAAQ,MAAA,EAAgBA,KAAAA,EAAc,IAAA,EAAkC;AACpF,IAAA,MAAM,GAAA,GAAM,GAAG,IAAA,CAAK,QAAQ,IAAIA,KAAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,CAAA;AACxD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,MAAA,EAAQ,IAAI,CAAA;AAE1C,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,IAAK,OAAA,IAAW,CAAA,EAAG;AACpC,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI,IAAA;AAEJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,IAAA,CAAK,MAAA,CAAO,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,QAAQ,GAAG,CAAA;AACzF,QAAA,IAAA,GAAO,MAAM,SAAS,IAAA,EAAK;AAAA,MAC7B,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,OAAA,EAAS,IAAI,CAAA,EAAG;AACpC,UAAA,MAAM,SAAA,CAAU,KAAK,CAAA,GACjB,IAAI,iBAAA;AAAA,YACF,CAAA,eAAA,EAAkB,GAAG,CAAA,uBAAA,EAA0B,IAAA,CAAK,QAAQ,CAAA,GAAA,CAAA;AAAA,YAC5D,EAAE,KAAA;AAAM,WACV,GACA,IAAI,oBAAA,CAAqB,CAAA,yBAAA,EAA4B,GAAG,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA,EAAI;AAAA,YAC9E;AAAA,WACD,CAAA;AAAA,QACP;AAEA,QAAA,MAAM,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,IAAI,CAAC,CAAA;AAEvC,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,eAAA,CAAgB,UAAU,IAAI,CAAA;AAAA,MACvC,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,iBAAiB,aAAA,IAAiB,IAAA,CAAK,YAAY,OAAA,EAAS,KAAA,CAAM,UAAU,CAAA,EAAG;AACjF,UAAA,MAAM,KAAA;AAAA,YACJ,KAAK,OAAA,CAAQ,OAAA,EAAS,iBAAiB,cAAA,GAAiB,KAAA,CAAM,aAAa,IAAI;AAAA,WACjF;AAEA,UAAA;AAAA,QACF;AAEA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,WAAA,CAAY,QAAgB,IAAA,EAA4B;AAC9D,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,UAAU,CAAA,CAAA;AAAA,MACxC,MAAA,EAAQ,kBAAA;AAAA,MACR,cAAc,SAAA;AAAU,KAC1B;AAEA,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,OAAO,EAAE,QAAQ,OAAA,EAAQ;AAAA,IAC3B;AAEA,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAE1B,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,MAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAE;AAAA,EACvD;AAAA,EAEQ,WAAA,CAAY,SAAiB,UAAA,EAAoC;AACvE,IAAA,IAAI,OAAA,IAAW,KAAK,WAAA,EAAa;AAC/B,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,OAAO,UAAA,KAAe,IAAA,IAAQ,cAAA,CAAe,GAAA,CAAI,UAAU,CAAA;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUU,OAAA,CAAQ,SAAiB,iBAAA,EAA0C;AAC3E,IAAA,IAAI,iBAAA,KAAsB,IAAA,IAAQ,iBAAA,IAAqB,CAAA,EAAG;AACxD,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,iBAAA,GAAoB,GAAA,EAAM,kBAAkB,CAAA;AAAA,IAC9D;AAEA,IAAA,OAAO,IAAA,CAAK,QAAO,GAAI,IAAA,CAAK,IAAI,GAAA,GAAM,CAAA,IAAK,SAAS,cAAc,CAAA;AAAA,EACpE;AACF;AAGA,SAAS,eAAA,CAAgB,UAAoB,IAAA,EAAuB;AAClE,EAAA,MAAM,OAAA,GAAU,UAAU,IAAI,CAAA;AAE9B,EAAA,IAAI,QAAA,CAAS,UAAU,GAAA,EAAK;AAC1B,IAAA,MAAM,QAAA,CAAS,UAAU,OAAO,CAAA;AAAA,EAClC;AAIA,EAAA,IAAI,QAAA,CAAS,OAAO,CAAA,EAAG;AACrB,IAAA,IAAI,OAAA,CAAQ,WAAW,mBAAA,EAAqB;AAC1C,MAAA,MAAM,IAAI,eAAe,oDAAA,EAAsD;AAAA,QAC7E,IAAA,EAAM,OAAA;AAAA,QACN,SAAA,EAAW,UAAU,QAAQ,CAAA;AAAA,QAC7B,UAAA,EAAY,WAAW,QAAQ;AAAA,OAChC,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,OAAA,CAAQ,WAAW,qBAAA,EAAuB;AAC5C,MAAA,MAAM,IAAI,mBAAmB,8CAAA,EAAgD;AAAA,QAC3E,UAAA,EAAY,GAAA;AAAA,QACZ,IAAA,EAAM,OAAA;AAAA,QACN,SAAA,EAAW,UAAU,QAAQ;AAAA,OAC9B,CAAA;AAAA,IACH;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,QAAA,CAAS,UAAoB,OAAA,EAAiC;AACrE,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,OAAO,CAAA,IAAK,SAAS,UAAA,IAAc,gBAAA;AAC/D,EAAA,MAAM,EAAA,GAAK,UAAU,QAAQ,CAAA;AAE7B,EAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,IAAA,OAAO,IAAI,eAAe,OAAA,EAAS;AAAA,MACjC,IAAA,EAAM,OAAA;AAAA,MACN,SAAA,EAAW,EAAA;AAAA,MACX,UAAA,EAAY,WAAW,QAAQ;AAAA,KAChC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,UAAA,GAAa,cAAA,CAAe,QAAA,CAAS,MAAM,CAAA;AAEjD,EAAA,OAAO,IAAI,UAAA,CAAW,OAAA,EAAS,EAAE,UAAA,EAAY,QAAA,CAAS,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,SAAA,EAAW,EAAA,EAAI,CAAA;AAC9F;AAEA,SAAS,YAAY,OAAA,EAAiC;AACpD,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,CAAA,EAAG;AACtB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,KAAA,MAAW,GAAA,IAAO,CAAC,SAAA,EAAW,OAAA,EAAS,QAAQ,CAAA,EAAY;AACzD,IAAA,MAAM,KAAA,GAAQ,QAAQ,GAAG,CAAA;AAEzB,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,EAAO;AACtC,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,UAAU,QAAA,EAAmC;AACpD,EAAA,OAAO,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA;AAC5C;AAEA,SAAS,WAAW,QAAA,EAAmC;AACrD,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AAE9C,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAU,OAAO,GAAG,CAAA;AAI1B,EAAA,OAAO,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,GAAI,OAAA,GAAU,IAAA;AAC9C;AAEA,SAAS,UAAU,IAAA,EAAuB;AACxC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAQA,SAAS,UAAU,KAAA,EAAyB;AAC1C,EAAA,MAAM,KAAA,GAAQ,CAAC,MAAA,CAAO,KAAK,GAAG,MAAA,CAAQ,KAAA,EAAsC,KAAK,CAAC,CAAA;AAElF,EAAA,OAAO,MAAM,QAAA,CAAS,cAAc,CAAA,IAAK,KAAA,CAAM,SAAS,YAAY,CAAA;AACtE;AAEA,SAAS,OAAO,KAAA,EAA+B;AAC7C,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,UAAU,IAAA,IAAQ,EAAE,UAAU,KAAA,CAAA,EAAQ;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,EAAE,MAAK,GAAI,KAAA;AAEjB,EAAA,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,IAAA,GAAO,IAAA;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAwB;AACxC,EAAA,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAC9D;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,EAAA,GAAK,CAAA,GAAI,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA,GAAI,OAAA,CAAQ,OAAA,EAAQ;AACtF;AAEA,SAAS,QAAQ,IAAA,EAAkC;AACjD,EAAA,OAAO,OAAO,OAAA,KAAY,WAAA,GAAc,MAAA,GAAY,OAAA,CAAQ,IAAI,IAAI,CAAA;AACtE;AAGA,SAAS,aAAA,GAAwB;AAC/B,EAAA,OAAO,WAAW,MAAA,CAAO,UAAA,EAAW,CAAE,OAAA,CAAQ,MAAM,EAAE,CAAA;AACxD;AAQA,SAAS,SAAS,KAAA,EAA8B;AAC9C,EAAA,MAAM,SAAS,KAAA,YAAiB,IAAA,GAAO,KAAA,GAAQ,IAAI,KAAK,KAAK,CAAA;AAE7D,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,OAAA,EAAS,CAAA,EAAG;AAClC,IAAA,MAAM,IAAI,SAAA,CAAU,CAAA,cAAA,EAAiB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,qBAAA,CAAuB,CAAA;AAAA,EACnF;AAIA,EAAA,OAAO,MAAA,CAAO,WAAA,EAAY,CAAE,OAAA,CAAQ,WAAW,GAAG,CAAA;AACpD;AAEA,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,OAAA,GACJ,OAAO,OAAA,KAAY,WAAA,IAAe,OAAA,CAAQ,QAAA,EAAU,IAAA,GAChD,CAAA,KAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,CAAA,GAC7B,SAAA;AAEN,EAAA,OAAO,CAAA,WAAA,EAAc,OAAO,CAAA,EAAA,EAAK,OAAO,CAAA,CAAA,CAAA;AAC1C","file":"index.js","sourcesContent":["/**\n * The package version, used in the `User-Agent` header.\n *\n * Kept here rather than read from `package.json` at runtime, because the published package is\n * both ESM and CommonJS and neither can reach its own manifest portably. A test asserts this\n * stays in step with `package.json`, so the two cannot drift.\n */\nexport const VERSION = '0.1.0';\n","/**\n * Typed views over the Dregs API's responses.\n *\n * Every model keeps the response it was built from in `raw`, so a field Dregs adds after this\n * release is still reachable without waiting for an SDK upgrade. Parsing is deliberately lenient:\n * a missing field becomes `null` rather than an error, because an SDK that refuses to parse a\n * response it half-understands is worse than one that hands back what it got.\n *\n * @module\n */\n\n/**\n * The four categories Dregs scores an identity in.\n *\n * A plain string union rather than an enum, so `scores.get('HUMANITY')` type-checks and a\n * category from a future Dregs release still survives parsing (as a `null` category on a\n * {@link Score} whose `raw` still names it).\n */\nexport type Category = 'HUMANITY' | 'AUTHENTICITY' | 'UNIQUENESS' | 'BEHAVIOR';\n\n/** The four categories, in the order the dashboard shows them. */\nexport const CATEGORIES: readonly Category[] = [\n  'HUMANITY',\n  'AUTHENTICITY',\n  'UNIQUENESS',\n  'BEHAVIOR',\n];\n\n/** An unparsed JSON object, as received. */\nexport type RawPayload = Readonly<Record<string, unknown>>;\n\n/** The outcome of a {@link Dregs.track} call. */\nexport interface TrackResult {\n  /** The status Dregs reported, normally `\"success\"`. */\n  readonly status: string | null;\n\n  /**\n   * The event's identifier, either the one you supplied or one the SDK generated. It is `null`\n   * when the event was not recorded.\n   */\n  readonly id: string | null;\n\n  /**\n   * The device fingerprint Dregs resolved, for events that carried a device signature.\n   * Server-side events do not, so this is normally `null`.\n   */\n  readonly fingerprint: string | null;\n\n  /**\n   * Whether Dregs recorded the event.\n   *\n   * This is `false` in the uncommon case where Dregs accepts the request without recording an\n   * event. A server-side integration holding a valid secret key should not normally see it, so it\n   * is worth a log line if you do. Ingestion failures that are yours to act on (a bad request, an\n   * unknown key, an exhausted quota, a rate limit) throw instead of landing here.\n   */\n  readonly accepted: boolean;\n\n  /** The response body as received. */\n  readonly raw: RawPayload;\n}\n\n/** A label Dregs applied to an identity, from an analyzer or a badge rule. */\nexport interface Badge {\n  /** The badge's slug, such as `\"behavior.account-takeover-signal\"`. */\n  readonly slug: string | null;\n\n  /** The human-readable name, such as `\"Account Takeover Suspected\"`. */\n  readonly name: string | null;\n\n  /** Where the badge came from: an analyzer observation or a badge rule. */\n  readonly type: string | null;\n\n  /** A sentence describing why the badge was applied. */\n  readonly explanation: string | null;\n\n  /** The counts and details behind the badge. */\n  readonly metadata: RawPayload;\n\n  /** The response fragment this badge was built from. */\n  readonly raw: RawPayload;\n}\n\n/** One analyzer's finding, and the reasoning behind a slice of a score. */\nexport interface Observation {\n  /** The category the observation contributes to, or `null` for one this release predates. */\n  readonly category: Category | null;\n\n  /** The analyzer's identifier, such as `\"humanity.user-agent\"`. */\n  readonly id: string | null;\n\n  /** A human-readable name for the analyzer. */\n  readonly label: string | null;\n\n  /** A sentence describing what the analyzer found. This is the text to show or log. */\n  readonly explanation: string | null;\n\n  /** 0.0 for entirely suspicious, 1.0 for entirely legitimate. */\n  readonly value: number | null;\n\n  /** How sure the analyzer is, from 0.0 to 1.0. */\n  readonly confidence: number | null;\n\n  /** How heavily this observation counts toward the category score. */\n  readonly weight: number | null;\n\n  /** The counts and details behind the finding. */\n  readonly metadata: RawPayload;\n\n  /** The response fragment this observation was built from. */\n  readonly raw: RawPayload;\n}\n\n/** One category's score. */\nexport interface Score {\n  /** The category scored, or `null` for one this release predates. */\n  readonly category: Category | null;\n\n  /** An integer from 0 (worst) to 100 (best). */\n  readonly value: number | null;\n\n  /**\n   * The observations behind the score. Empty on the result of `identities.scores()`, which\n   * reports the scores alone; the observations come from `identities.analysis()`.\n   */\n  readonly observations: readonly Observation[];\n\n  /** The response fragment this score was built from. */\n  readonly raw: RawPayload;\n}\n\n/**\n * An identity's category scores.\n *\n * An array of {@link Score}, so it indexes, iterates, spreads, and maps like any other, and it\n * also offers the four categories by name:\n *\n * ```ts\n * const scores = await client.identities.scores('user_12345');\n *\n * if (scores.authenticity !== null && scores.authenticity < 40) {\n *   await holdForReview('user_12345');\n * }\n * ```\n *\n * A category Dregs has not scored yet is absent from the array, and its named accessor reads\n * `null`. A brand-new identity comes back empty.\n */\nexport class Scores extends Array<Score> {\n  /**\n   * `map`, `filter`, and `slice` return plain arrays rather than trying to rebuild a `Scores`\n   * through a constructor whose shape they know nothing about.\n   */\n  static override get [Symbol.species](): ArrayConstructor {\n    return Array;\n  }\n\n  constructor(items: readonly Score[] = []) {\n    super();\n\n    for (const item of items) {\n      this.push(item);\n    }\n  }\n\n  /** Returns the score for `category`, or `null` when it has not been scored. */\n  get(category: Category): Score | null {\n    return this.find((score) => score.category === category) ?? null;\n  }\n\n  private value(category: Category): number | null {\n    return this.get(category)?.value ?? null;\n  }\n\n  /** How likely it is that a person, rather than a script, is behind the account. */\n  get humanity(): number | null {\n    return this.value('HUMANITY');\n  }\n\n  /** How genuine the details on the account look. */\n  get authenticity(): number | null {\n    return this.value('AUTHENTICITY');\n  }\n\n  /** How distinct the account is from others in the same tenant. */\n  get uniqueness(): number | null {\n    return this.value('UNIQUENESS');\n  }\n\n  /** How ordinary the account's activity looks. */\n  get behavior(): number | null {\n    return this.value('BEHAVIOR');\n  }\n}\n\n/**\n * A user Dregs is tracking, and their current scores.\n *\n * `id` is your own identifier for the user, the one you pass to {@link Dregs.track} and to\n * `dregs.identify()` in the browser tracker, not an internal Dregs id.\n */\nexport interface Identity {\n  /** Your own id for the user. */\n  readonly id: string | null;\n\n  /** The name Dregs resolved from the identity attributes you have sent. */\n  readonly displayName: string | null;\n\n  /** The email address Dregs resolved from the identity attributes you have sent. */\n  readonly displayEmail: string | null;\n\n  /** The username Dregs resolved from the identity attributes you have sent. */\n  readonly displayUsername: string | null;\n\n  /** The current humanity score, 0 to 100, or `null` when the category is unscored. */\n  readonly humanityScore: number | null;\n\n  /** The current authenticity score, 0 to 100, or `null` when the category is unscored. */\n  readonly authenticityScore: number | null;\n\n  /** The current uniqueness score, 0 to 100, or `null` when the category is unscored. */\n  readonly uniquenessScore: number | null;\n\n  /** The current behavior score, 0 to 100, or `null` when the category is unscored. */\n  readonly behaviorScore: number | null;\n\n  /** When Dregs first saw this identity. */\n  readonly createdAt: Date | null;\n\n  /** When the identity record last changed. */\n  readonly updatedAt: Date | null;\n\n  /** When the most recent event for this identity arrived. */\n  readonly lastTrackedAt: Date | null;\n\n  /** When the most recent analysis cycle finished. */\n  readonly lastScoredAt: Date | null;\n\n  /**\n   * Whether the identity is excluded from fraud analysis, which is how an operator marks their\n   * own admin or load-test accounts.\n   */\n  readonly disregarded: boolean;\n\n  /** The badges currently applied to the identity. */\n  readonly badges: readonly Badge[];\n\n  /** Every identity attribute you have sent, merged. */\n  readonly data: RawPayload;\n\n  /**\n   * The four category scores, as a {@link Scores} for parity with `identities.scores()`.\n   *\n   * Built from the score fields on this response, so it costs no extra request.\n   */\n  readonly scores: Scores;\n\n  /** The response body this identity was built from. */\n  readonly raw: RawPayload;\n}\n\n/** One analysis cycle: the scores an identity was given, and why. */\nexport interface Analysis {\n  /** The cycle's identifier. */\n  readonly id: number | null;\n\n  /** The identity that was analyzed. */\n  readonly identityId: string | null;\n\n  /** The category scores, each carrying its observations. */\n  readonly scores: Scores;\n\n  /** Every observation from the cycle, flattened across all categories. */\n  readonly observations: readonly Observation[];\n\n  /** How many events the cycle considered. */\n  readonly eventCount: number | null;\n\n  /** How many devices the cycle considered. */\n  readonly deviceCount: number | null;\n\n  /** How long the cycle took, in milliseconds. */\n  readonly durationMillis: number | null;\n\n  /** When the cycle started. */\n  readonly startedAt: Date | null;\n\n  /** When the cycle finished. */\n  readonly finishedAt: Date | null;\n\n  /** The response body this analysis was built from. */\n  readonly raw: RawPayload;\n}\n\nfunction asPayload(value: unknown): RawPayload {\n  return isPayload(value) ? value : {};\n}\n\nfunction isPayload(value: unknown): value is RawPayload {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction asString(value: unknown): string | null {\n  return typeof value === 'string' ? value : null;\n}\n\nfunction asNumber(value: unknown): number | null {\n  return typeof value === 'number' && Number.isFinite(value) ? value : null;\n}\n\nfunction asDate(value: unknown): Date | null {\n  if (typeof value !== 'string' || !value) {\n    return null;\n  }\n\n  const parsed = new Date(value);\n\n  return Number.isNaN(parsed.getTime()) ? null : parsed;\n}\n\nfunction asCategory(value: unknown): Category | null {\n  return typeof value === 'string' && (CATEGORIES as readonly string[]).includes(value)\n    ? (value as Category)\n    : null;\n}\n\nfunction asArray(value: unknown): RawPayload[] {\n  return Array.isArray(value) ? value.filter(isPayload) : [];\n}\n\n/** Builds a {@link TrackResult} from a `POST /api/events` body. @internal */\nexport function parseTrackResult(payload: unknown): TrackResult {\n  const body = asPayload(payload);\n  const id = asString(body.id);\n\n  return {\n    status: asString(body.status),\n    id,\n    fingerprint: asString(body.fingerprint),\n    accepted: id !== null,\n    raw: body,\n  };\n}\n\n/** Builds a {@link Badge}. @internal */\nexport function parseBadge(payload: unknown): Badge {\n  const body = asPayload(payload);\n\n  return {\n    slug: asString(body.slug),\n    name: asString(body.name),\n    type: asString(body.type),\n    explanation: asString(body.explanation),\n    metadata: asPayload(body.metadata),\n    raw: body,\n  };\n}\n\n/** Builds an {@link Observation}. @internal */\nexport function parseObservation(payload: unknown): Observation {\n  const body = asPayload(payload);\n\n  return {\n    category: asCategory(body.category),\n    id: asString(body.id),\n    label: asString(body.label),\n    explanation: asString(body.explanation),\n    value: asNumber(body.value),\n    confidence: asNumber(body.confidence),\n    weight: asNumber(body.weight),\n    metadata: asPayload(body.metadata),\n    raw: body,\n  };\n}\n\n/** Builds a {@link Score}, with any observations it carries. @internal */\nexport function parseScore(payload: unknown): Score {\n  const body = asPayload(payload);\n\n  return {\n    category: asCategory(body.category),\n    value: asNumber(body.value),\n    observations: asArray(body.observations).map(parseObservation),\n    raw: body,\n  };\n}\n\n/** Builds a {@link Scores} from the `GET /scores` array. @internal */\nexport function parseScores(payload: unknown): Scores {\n  return new Scores(asArray(payload).map(parseScore));\n}\n\n/** Builds an {@link Identity}. @internal */\nexport function parseIdentity(payload: unknown): Identity {\n  const body = asPayload(payload);\n\n  const humanityScore = asNumber(body.humanityScore);\n  const authenticityScore = asNumber(body.authenticityScore);\n  const uniquenessScore = asNumber(body.uniquenessScore);\n  const behaviorScore = asNumber(body.behaviorScore);\n\n  const pairs: readonly (readonly [Category, number | null])[] = [\n    ['HUMANITY', humanityScore],\n    ['AUTHENTICITY', authenticityScore],\n    ['UNIQUENESS', uniquenessScore],\n    ['BEHAVIOR', behaviorScore],\n  ];\n\n  const scores = new Scores(\n    pairs\n      .filter(([, value]) => value !== null)\n      .map(([category, value]) => ({ category, value, observations: [], raw: {} })),\n  );\n\n  return {\n    id: asString(body.id),\n    displayName: asString(body.displayName),\n    displayEmail: asString(body.displayEmail),\n    displayUsername: asString(body.displayUsername),\n    humanityScore,\n    authenticityScore,\n    uniquenessScore,\n    behaviorScore,\n    createdAt: asDate(body.createdAt),\n    updatedAt: asDate(body.updatedAt),\n    lastTrackedAt: asDate(body.lastTrackedAt),\n    lastScoredAt: asDate(body.lastScoredAt),\n    disregarded: body.disregarded === true,\n    badges: asArray(body.badges).map(parseBadge),\n    data: asPayload(body.data),\n    scores,\n    raw: body,\n  };\n}\n\n/** Builds an {@link Analysis}. @internal */\nexport function parseAnalysis(payload: unknown): Analysis {\n  const body = asPayload(payload);\n  const scores = parseScores(body.scores);\n\n  return {\n    id: asNumber(body.id),\n    identityId: asString(body.identityId),\n    scores,\n    observations: scores.flatMap((score) => [...score.observations]),\n    eventCount: asNumber(body.eventCount),\n    deviceCount: asNumber(body.deviceCount),\n    durationMillis: asNumber(body.durationMillis),\n    startedAt: asDate(body.startedAt),\n    finishedAt: asDate(body.finishedAt),\n    raw: body,\n  };\n}\n","/**\n * The `client.identities` namespace.\n *\n * These are thin: they name the endpoint, then hand the response to a parser. The transport,\n * retries, and error mapping all live on the client.\n *\n * @module\n */\n\nimport type { Analysis, Identity, Scores } from './models.js';\nimport { parseAnalysis, parseIdentity, parseScores } from './models.js';\n\n/** How a resource reaches the client's transport. @internal */\nexport type RequestFn = (method: string, path: string, body?: unknown) => Promise<unknown>;\n\nfunction path(identityId: string, suffix = ''): string {\n  if (!identityId) {\n    throw new TypeError('An identity id is required.');\n  }\n\n  // Identity ids are the caller's own user ids and routinely contain characters that need\n  // escaping, an email address being the common one.\n  return `/identities/${encodeURIComponent(identityId)}${suffix}`;\n}\n\n/**\n * Read identities and their scores.\n *\n * Reached as `client.identities`; there is no reason to construct one yourself.\n */\nexport class Identities {\n  readonly #request: RequestFn;\n\n  /** @internal */\n  constructor(request: RequestFn) {\n    this.#request = request;\n  }\n\n  /**\n   * Returns the identity, with its current scores, badges, and attributes.\n   *\n   * @param identityId Your own id for the user, the one you pass to `track()`.\n   * @throws {NotFoundError} Dregs has never seen this identity.\n   */\n  async get(identityId: string): Promise<Identity> {\n    return parseIdentity(await this.#request('GET', path(identityId)));\n  }\n\n  /**\n   * Returns the current category scores.\n   *\n   * This is the cheap read and the one most integrations want. It reports the scores Dregs has\n   * already computed without triggering any work. For the observations behind them, use\n   * {@link Identities.analysis}.\n   *\n   * A category that has not been scored yet is absent, so a brand-new identity comes back empty.\n   *\n   * @throws {NotFoundError} Dregs has never seen this identity.\n   */\n  async scores(identityId: string): Promise<Scores> {\n    return parseScores(await this.#request('GET', path(identityId, '/scores')));\n  }\n\n  /**\n   * Returns the most recent analysis cycle, with the observations behind each score.\n   *\n   * Use this when you need to show or log *why* an identity scored the way it did.\n   *\n   * @throws {NotFoundError} The identity is unknown, or it has not been analyzed yet.\n   */\n  async analysis(identityId: string): Promise<Analysis> {\n    return parseAnalysis(await this.#request('GET', path(identityId, '/analysis')));\n  }\n\n  /**\n   * Queues a re-analysis of the identity.\n   *\n   * Scoring is asynchronous: this resolves as soon as the job is queued, not when it has run.\n   * Poll {@link Identities.scores} or watch for a webhook rather than expecting fresh scores on\n   * the next line.\n   *\n   * @throws {NotFoundError} Dregs has never seen this identity.\n   */\n  async analyze(identityId: string): Promise<void> {\n    await this.#request('POST', path(identityId, '/actions/analyze'));\n  }\n}\n","/**\n * The Dregs client.\n *\n * There is one client and every method returns a promise; JavaScript has no meaningful\n * sync/async split, so there is no async twin to pick between.\n *\n * @module\n */\n\nimport {\n  DregsAPIError,\n  DregsConnectionError,\n  DregsTimeoutError,\n  QuotaExceededError,\n  RateLimitError,\n  errorForStatus,\n} from './errors.js';\nimport type { RawPayload, TrackResult } from './models.js';\nimport { parseTrackResult } from './models.js';\nimport type { RequestFn } from './resources.js';\nimport { Identities } from './resources.js';\nimport { VERSION } from './version.js';\n\n/** The API root used when neither an option nor `DREGS_BASE_URL` names one. */\nexport const DEFAULT_BASE_URL = 'https://dregs.com/api';\n\n/** How long a request may take before it is abandoned, in milliseconds. */\nexport const DEFAULT_TIMEOUT_MS = 10_000;\n\n/** How many times a failed request is retried before the error is thrown. */\nexport const DEFAULT_MAX_RETRIES = 2;\n\n/** The environment variable the secret key is read from. */\nexport const SECRET_KEY_ENV = 'DREGS_SECRET_KEY';\n\n/** The environment variable the base URL is read from. */\nexport const BASE_URL_ENV = 'DREGS_BASE_URL';\n\n/** The `source` sent on events when the caller does not name one. */\nexport const DEFAULT_SOURCE = 'node-sdk';\n\n/**\n * Statuses worth another attempt. 429 and 5xx are transient by definition; 408 shows up in front\n * of some proxies.\n */\nconst RETRY_STATUSES: ReadonlySet<number> = new Set([408, 429, 500, 502, 503, 504]);\n\n/** Body-level statuses older API builds used on `POST /api/events`. */\nconst STATUS_RATE_LIMITED = 'rate_limited';\nconst STATUS_QUOTA_EXCEEDED = 'quota_exceeded';\n\n/** The longest a single backoff will ever be, in milliseconds. */\nconst MAX_BACKOFF_MS = 8_000;\n\n/** The longest a server-sent `Retry-After` will be honoured for, in milliseconds. */\nconst MAX_RETRY_AFTER_MS = 60_000;\n\n/** The `fetch` this client calls. Any implementation with the standard signature will do. */\nexport type FetchLike = (input: string, init: RequestInit) => Promise<Response>;\n\n/** Everything you can configure on a {@link Dregs} client. */\nexport interface DregsOptions {\n  /**\n   * Your credential's secret key, the one starting `sk_`. Found under **Settings → Credentials**\n   * in the dashboard. Defaults to `$DREGS_SECRET_KEY`.\n   */\n  secretKey?: string;\n\n  /**\n   * The API root every request is built against. Defaults to `$DREGS_BASE_URL`, then\n   * `https://dregs.com/api`. A trailing slash is harmless.\n   */\n  baseUrl?: string;\n\n  /**\n   * Milliseconds before a request is abandoned and retried. Defaults to 10 000.\n   *\n   * This covers the whole request, not just the connect, so raise it if you are behind a slow\n   * egress proxy rather than lowering `maxRetries` to compensate.\n   */\n  timeout?: number;\n\n  /**\n   * How many times to retry a failed request. Defaults to 2; pass 0 to handle it yourself.\n   *\n   * Retries cover connection failures, timeouts, 408, 429, and 5xx, with exponential backoff and\n   * full jitter. `Retry-After` wins when the server sends one. A retried event keeps its id, so\n   * a retry can never double-count.\n   */\n  maxRetries?: number;\n\n  /**\n   * A `fetch` to call instead of the runtime's own, for callers who need a proxy agent, custom\n   * TLS, or their own instrumentation. Anything with the standard signature works, including a\n   * stub in a test.\n   */\n  fetch?: FetchLike;\n}\n\n/** The arguments to {@link Dregs.track} beyond the event type. */\nexport interface TrackOptions {\n  /**\n   * Your own id for the user. This is the same id you pass to `dregs.identify()` in the browser\n   * tracker, and the one you look scores up by.\n   *\n   * It is required: a server-side event carries no device signature, so the identity is the only\n   * thing tying the event to a user.\n   */\n  identity: string;\n\n  /** Attributes of the event itself, such as the plan bought or the referrer that sent them. */\n  data?: Readonly<Record<string, unknown>>;\n\n  /**\n   * Attributes of the *user*, such as email, name, or username. Dregs merges these into the\n   * identity, and the analyzers lean on them heavily, so send them whenever you have them.\n   *\n   * Flat keys work best. Name them as your application already does and map them to Dregs's\n   * canonical fields under **Settings → Mappings**.\n   */\n  identityData?: Readonly<Record<string, unknown>>;\n\n  /**\n   * Your own id for the event, which makes ingestion idempotent: reposting the same id returns\n   * the original event instead of recording a second one.\n   *\n   * Pass the id your application already has — the row id of the record that triggered the\n   * event, say. When you omit it the SDK generates one, which is what makes its own retries\n   * safe. At most 64 characters, and it cannot start with `dregs-`.\n   */\n  eventId?: string;\n\n  /**\n   * When the event happened, if not now. A `Date`, or an ISO-8601 string. Sent as UTC.\n   */\n  timestamp?: Date | string;\n\n  /** A label for where the event came from. Defaults to `\"node-sdk\"`. */\n  source?: string;\n}\n\n/**\n * A Dregs client.\n *\n * The secret key comes from the `DREGS_SECRET_KEY` environment variable unless you pass one.\n * Find it under **Settings → Credentials** in the dashboard; it is the key starting `sk_`, not\n * the `pk_` public key the browser tracker uses.\n *\n * ```ts\n * import { Dregs } from '@dregs/sdk';\n *\n * const client = new Dregs();\n *\n * await client.track('user.signup', { identity: 'user_12345', data: { plan: 'pro' } });\n *\n * const scores = await client.identities.scores('user_12345');\n * ```\n *\n * Build one at startup and keep it. There is nothing to close: the client holds no state beyond\n * its configuration, and connection pooling belongs to the runtime's `fetch`.\n */\nexport class Dregs {\n  /** Read identities, their scores, and their analysis. */\n  readonly identities: Identities;\n\n  readonly #secretKey: string;\n  readonly #baseUrl: string;\n  readonly #timeout: number;\n  readonly #maxRetries: number;\n  readonly #fetch: FetchLike;\n\n  /**\n   * @param options Configuration. Every field has a default, so `new Dregs()` reads the\n   *   environment and is usually enough.\n   * @throws {TypeError} No secret key was found, the key given is a `pk_` public key, or\n   *   `maxRetries` is negative.\n   */\n  constructor(options: DregsOptions = {}) {\n    const secretKey = options.secretKey ?? readEnv(SECRET_KEY_ENV);\n\n    if (!secretKey) {\n      throw new TypeError(\n        `No Dregs secret key. Pass { secretKey: '...' } or set the ${SECRET_KEY_ENV} ` +\n          \"environment variable. You will find your credential's secret key under \" +\n          'Settings -> Credentials in the Dregs dashboard.',\n      );\n    }\n\n    if (secretKey.startsWith('pk_')) {\n      throw new TypeError(\n        'That is a public key. The public key is for the browser tracker and cannot read ' +\n          'identities or scores; this SDK needs the secret key from the same credential, ' +\n          \"which starts with 'sk_'.\",\n      );\n    }\n\n    const maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;\n\n    if (maxRetries < 0 || !Number.isInteger(maxRetries)) {\n      throw new TypeError('maxRetries must be a non-negative integer.');\n    }\n\n    const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n\n    if (timeout <= 0) {\n      throw new TypeError('timeout must be greater than zero.');\n    }\n\n    const resolvedFetch: FetchLike | undefined = options.fetch ?? globalThis.fetch;\n\n    if (!resolvedFetch) {\n      throw new TypeError(\n        'No global fetch. This SDK needs Node 20 or newer, or a fetch implementation passed ' +\n          'as the fetch option.',\n      );\n    }\n\n    this.#secretKey = secretKey;\n    this.#baseUrl = (options.baseUrl ?? readEnv(BASE_URL_ENV) ?? DEFAULT_BASE_URL).replace(\n      /\\/+$/,\n      '',\n    );\n    this.#timeout = timeout;\n    this.#maxRetries = maxRetries;\n    this.#fetch = resolvedFetch;\n\n    const request: RequestFn = (method, path, body) => this.request(method, path, body);\n\n    this.identities = new Identities(request);\n  }\n\n  /** The API root every request is built against, with any trailing slash removed. */\n  get baseUrl(): string {\n    return this.#baseUrl;\n  }\n\n  /** How many times a failed request is retried before the error is thrown. */\n  get maxRetries(): number {\n    return this.#maxRetries;\n  }\n\n  /** Milliseconds before a request is abandoned. */\n  get timeout(): number {\n    return this.#timeout;\n  }\n\n  /**\n   * Records a backend event against an identity.\n   *\n   * ```ts\n   * await client.track('user.signup', {\n   *   identity: 'user_12345',\n   *   data: { plan: 'pro', referrer: 'partner-x' },\n   *   identityData: { email: 'ada@example.com', name: 'Ada Lovelace' },\n   * });\n   * ```\n   *\n   * @param type Your name for the event, such as `\"user.signup\"`. Map it to one of Dregs's\n   *   canonical types under **Settings → Mappings** so the analyzers know what it means.\n   * @param options The identity the event belongs to, and anything else worth sending.\n   * @returns The outcome. Check `.accepted` to confirm Dregs recorded the event.\n   * @throws {QuotaExceededError} The account is over its monthly event limit.\n   * @throws {RateLimitError} The credential is ingesting too fast.\n   * @throws {AuthenticationError} The secret key was not recognized.\n   * @throws {BadRequestError} The event was malformed.\n   * @throws {TypeError} The event type, identity, or event id was unusable. These are thrown\n   *   before anything is sent.\n   */\n  async track(type: string, options: TrackOptions): Promise<TrackResult> {\n    return parseTrackResult(await this.request('POST', '/events', this.trackBody(type, options)));\n  }\n\n  /**\n   * Builds the `POST /api/events` body.\n   *\n   * An event id is always sent. When the caller has an id of their own it is used verbatim, so\n   * reposting the same event is a no-op on the Dregs side; otherwise one is generated, which is\n   * what makes this client's own retries safe to perform.\n   */\n  private trackBody(type: string, options: TrackOptions): RawPayload {\n    if (!type) {\n      throw new TypeError('An event type is required.');\n    }\n\n    if (!options?.identity) {\n      throw new TypeError(\n        'An identity is required. A server-side event has no device signature, so the ' +\n          'identity is the only thing tying the event to a user.',\n      );\n    }\n\n    const eventId = options.eventId ?? randomEventId();\n\n    if (eventId.startsWith('dregs-')) {\n      throw new TypeError(\"Event ids starting with 'dregs-' are reserved for Dregs itself.\");\n    }\n\n    if (eventId.length > 64) {\n      throw new TypeError('Event ids cannot be longer than 64 characters.');\n    }\n\n    const body: Record<string, unknown> = {\n      id: eventId,\n      type,\n      data: { ...(options.data ?? {}) },\n      identity: { id: options.identity, data: { ...(options.identityData ?? {}) } },\n      source: options.source ?? DEFAULT_SOURCE,\n    };\n\n    if (options.timestamp !== undefined) {\n      body.timestamp = toIsoUtc(options.timestamp);\n    }\n\n    return body;\n  }\n\n  /**\n   * Sends one request, retrying what is worth retrying, and returns the parsed JSON body.\n   *\n   * The retry loop reuses the request body verbatim, which is what keeps a retried event\n   * idempotent: the generated id is built once, before the first attempt.\n   */\n  private async request(method: string, path: string, body?: unknown): Promise<unknown> {\n    const url = `${this.#baseUrl}/${path.replace(/^\\/+/, '')}`;\n    const init = this.requestInit(method, body);\n\n    for (let attempt = 0; ; attempt += 1) {\n      let response: Response;\n      let text: string;\n\n      try {\n        response = await this.#fetch(url, { ...init, signal: AbortSignal.timeout(this.#timeout) });\n        text = await response.text();\n      } catch (cause) {\n        if (!this.shouldRetry(attempt, null)) {\n          throw isTimeout(cause)\n            ? new DregsTimeoutError(\n                `The request to ${url} did not answer within ${this.#timeout}ms.`,\n                { cause },\n              )\n            : new DregsConnectionError(`Could not reach Dregs at ${url}: ${describe(cause)}`, {\n                cause,\n              });\n        }\n\n        await sleep(this.backoff(attempt, null));\n\n        continue;\n      }\n\n      try {\n        return processResponse(response, text);\n      } catch (error) {\n        if (error instanceof DregsAPIError && this.shouldRetry(attempt, error.statusCode)) {\n          await sleep(\n            this.backoff(attempt, error instanceof RateLimitError ? error.retryAfter : null),\n          );\n\n          continue;\n        }\n\n        throw error;\n      }\n    }\n  }\n\n  private requestInit(method: string, body: unknown): RequestInit {\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${this.#secretKey}`,\n      Accept: 'application/json',\n      'User-Agent': userAgent(),\n    };\n\n    if (body === undefined) {\n      return { method, headers };\n    }\n\n    headers['Content-Type'] = 'application/json';\n\n    return { method, headers, body: JSON.stringify(body) };\n  }\n\n  private shouldRetry(attempt: number, statusCode: number | null): boolean {\n    if (attempt >= this.#maxRetries) {\n      return false;\n    }\n\n    return statusCode === null || RETRY_STATUSES.has(statusCode);\n  }\n\n  /**\n   * Milliseconds to wait before attempt `attempt + 1`.\n   *\n   * `Retry-After` wins when the server sent one. Otherwise this is exponential with full jitter,\n   * which keeps a fleet of workers that all hit the limit at once from retrying in lockstep.\n   *\n   * Protected rather than private so a test can stub the waiting out.\n   */\n  protected backoff(attempt: number, retryAfterSeconds: number | null): number {\n    if (retryAfterSeconds !== null && retryAfterSeconds >= 0) {\n      return Math.min(retryAfterSeconds * 1000, MAX_RETRY_AFTER_MS);\n    }\n\n    return Math.random() * Math.min(500 * 2 ** attempt, MAX_BACKOFF_MS);\n  }\n}\n\n/** Turns a response into parsed JSON, or throws the matching error. */\nfunction processResponse(response: Response, text: string): unknown {\n  const payload = parseJson(text);\n\n  if (response.status >= 400) {\n    throw apiError(response, payload);\n  }\n\n  // An older API build reported both of these as HTTP 200 with the outcome in the body. Reading\n  // the body as well as the status keeps this SDK correct against either.\n  if (isRecord(payload)) {\n    if (payload.status === STATUS_RATE_LIMITED) {\n      throw new RateLimitError('Ingestion rate limit exceeded for this credential.', {\n        body: payload,\n        requestId: requestId(response),\n        retryAfter: retryAfter(response),\n      });\n    }\n\n    if (payload.status === STATUS_QUOTA_EXCEEDED) {\n      throw new QuotaExceededError('The account is over its monthly event limit.', {\n        statusCode: 402,\n        body: payload,\n        requestId: requestId(response),\n      });\n    }\n  }\n\n  return payload;\n}\n\nfunction apiError(response: Response, payload: unknown): DregsAPIError {\n  const message = messageFrom(payload) ?? response.statusText ?? 'Request failed';\n  const id = requestId(response);\n\n  if (response.status === 429) {\n    return new RateLimitError(message, {\n      body: payload,\n      requestId: id,\n      retryAfter: retryAfter(response),\n    });\n  }\n\n  const ErrorClass = errorForStatus(response.status);\n\n  return new ErrorClass(message, { statusCode: response.status, body: payload, requestId: id });\n}\n\nfunction messageFrom(payload: unknown): string | null {\n  if (!isRecord(payload)) {\n    return null;\n  }\n\n  for (const key of ['message', 'error', 'status'] as const) {\n    const value = payload[key];\n\n    if (typeof value === 'string' && value) {\n      return value;\n    }\n  }\n\n  return null;\n}\n\nfunction requestId(response: Response): string | null {\n  return response.headers.get('X-Request-Id');\n}\n\nfunction retryAfter(response: Response): number | null {\n  const raw = response.headers.get('Retry-After');\n\n  if (raw === null) {\n    return null;\n  }\n\n  const seconds = Number(raw);\n\n  // The header also allows an HTTP date, which is rare enough here that falling back to the\n  // client's own backoff beats parsing one.\n  return Number.isFinite(seconds) ? seconds : null;\n}\n\nfunction parseJson(text: string): unknown {\n  if (!text) {\n    return null;\n  }\n\n  try {\n    return JSON.parse(text);\n  } catch {\n    return null;\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/**\n * Whether a thrown value is the request running out of time.\n *\n * `AbortSignal.timeout` aborts with a `TimeoutError`, but which layer surfaces it depends on the\n * runtime, so the cause is worth checking too.\n */\nfunction isTimeout(cause: unknown): boolean {\n  const names = [nameOf(cause), nameOf((cause as { cause?: unknown } | null)?.cause)];\n\n  return names.includes('TimeoutError') || names.includes('AbortError');\n}\n\nfunction nameOf(value: unknown): string | null {\n  if (typeof value !== 'object' || value === null || !('name' in value)) {\n    return null;\n  }\n\n  const { name } = value;\n\n  return typeof name === 'string' ? name : null;\n}\n\nfunction describe(cause: unknown): string {\n  return cause instanceof Error ? cause.message : String(cause);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();\n}\n\nfunction readEnv(name: string): string | undefined {\n  return typeof process === 'undefined' ? undefined : process.env[name];\n}\n\n/** A random event id with no `dregs-` prefix, which is reserved for server-generated ids. */\nfunction randomEventId(): string {\n  return globalThis.crypto.randomUUID().replace(/-/g, '');\n}\n\n/**\n * Formats a timestamp the way the API's `Instant` parser expects.\n *\n * A string is re-parsed rather than passed through, so an unusable one is rejected here instead\n * of coming back as a puzzling 400.\n */\nfunction toIsoUtc(value: Date | string): string {\n  const moment = value instanceof Date ? value : new Date(value);\n\n  if (Number.isNaN(moment.getTime())) {\n    throw new TypeError(`The timestamp ${JSON.stringify(value)} is not a valid date.`);\n  }\n\n  // Whole seconds lose the `.000`, which is the form the API's own examples use; anything\n  // finer keeps its milliseconds.\n  return moment.toISOString().replace(/\\.000Z$/, 'Z');\n}\n\nfunction userAgent(): string {\n  const runtime =\n    typeof process !== 'undefined' && process.versions?.node\n      ? `node ${process.versions.node}`\n      : 'unknown';\n\n  return `dregs-node/${VERSION} (${runtime})`;\n}\n"]}