@jr200-labs/xstate-nats 0.9.21 → 0.9.23

package/dist/machines/credentials.js

@@ -0,0 +1,252 @@
+import { deadline } from '@nats-io/nats-core';
+import { assign, fromPromise, setup } from 'xstate';
+import { recordCredentialOperation, recordCredentialState, withSpan } from '../telemetry';
+function asError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+function operationTimeout(config) {
+    return config.operationTimeoutMs ?? 30_000;
+}
+function refreshBeforeExpiry(config) {
+    return config.refreshBeforeExpiryMs ?? 60_000;
+}
+function credentialDiagnostic(config, event, attributes) {
+    if (config.diagnostics)
+        console.debug('xstate-nats credentials', { event, ...attributes });
+}
+async function runCredentialOperation(config, operation, fn) {
+    const timeout = operationTimeout(config);
+    const startedAt = performance.now();
+    credentialDiagnostic(config, 'operation.start', { operation, timeout_ms: timeout });
+    let originalError;
+    try {
+        const result = await withSpan(`xstate.nats.credentials.${operation}`, 'xstate.nats.credentials.error', { 'credentials.operation': operation, 'credentials.timeout.ms': timeout }, async (span) => {
+            try {
+                const value = await deadline(Promise.resolve().then(fn), timeout);
+                span.setAttribute('credentials.outcome', 'success');
+                return value;
+            }
+            catch (error) {
+                originalError = error;
+                span.setAttribute('credentials.outcome', 'error');
+                // Keep provider error messages, stacks, tokens, and claims out of traces.
+                throw new Error(`NATS credential ${operation} failed`);
+            }
+        });
+        const durationMs = performance.now() - startedAt;
+        recordCredentialOperation(operation, 'success', durationMs);
+        credentialDiagnostic(config, 'operation.finish', {
+            operation,
+            outcome: 'success',
+            duration_ms: durationMs,
+        });
+        return result;
+    }
+    catch {
+        const durationMs = performance.now() - startedAt;
+        recordCredentialOperation(operation, 'error', durationMs);
+        credentialDiagnostic(config, 'operation.finish', {
+            operation,
+            outcome: 'error',
+            duration_ms: durationMs,
+        });
+        throw originalError ?? new Error(`NATS credential ${operation} failed`);
+    }
+}
+function credentialStateEntry(state) {
+    return ({ context }) => {
+        recordCredentialState(state);
+        credentialDiagnostic(context.config, 'state.enter', {
+            state,
+            pending_waiters: context.waiters.length,
+        });
+    };
+}
+function notify(waiter, result) {
+    try {
+        waiter(result);
+    }
+    catch (error) {
+        console.error('NATS credential waiter failed', error);
+    }
+}
+export const credentialMachine = setup({
+    types: {
+        context: {},
+        events: {},
+        input: {},
+    },
+    actors: {
+        load: fromPromise(({ input }) => runCredentialOperation(input, 'load', input.adapter.load)),
+        refresh: fromPromise(({ input }) => {
+            const refresh = input.config.adapter.refresh;
+            if (!refresh)
+                throw new Error('NATS credentials cannot be refreshed');
+            return runCredentialOperation(input.config, 'refresh', async () => {
+                const credentials = await refresh(input.current);
+                const expiresAt = credentials.expiresAt;
+                if (expiresAt !== undefined &&
+                    expiresAt - refreshBeforeExpiry(input.config) <= Date.now()) {
+                    throw new Error('Refreshed NATS credentials are already expired or too close to expiry');
+                }
+                return credentials;
+            });
+        }),
+    },
+    delays: {
+        credentialDeadline: ({ context }) => {
+            const expiresAt = context.current?.expiresAt;
+            if (expiresAt === undefined)
+                return 2_147_483_647;
+            const advance = context.config.adapter.refresh ? refreshBeforeExpiry(context.config) : 0;
+            return Math.max(0, expiresAt - advance - Date.now());
+        },
+    },
+    guards: {
+        canRefresh: ({ context }) => Boolean(context.current && context.config.adapter.refresh),
+        hasExpiry: ({ context }) => context.current?.expiresAt !== undefined,
+        shouldRefreshNow: ({ context }) => {
+            const expiresAt = context.current?.expiresAt;
+            return Boolean(context.config.adapter.refresh &&
+                expiresAt !== undefined &&
+                expiresAt - refreshBeforeExpiry(context.config) <= Date.now());
+        },
+        isExpired: ({ context }) => {
+            const expiresAt = context.current?.expiresAt;
+            return expiresAt !== undefined && expiresAt <= Date.now();
+        },
+        outputShouldRefresh: ({ context, event }) => {
+            if (!('output' in event) || !context.config.adapter.refresh)
+                return false;
+            const expiresAt = event.output.expiresAt;
+            return (expiresAt !== undefined && expiresAt - refreshBeforeExpiry(context.config) <= Date.now());
+        },
+        outputExpired: ({ event }) => {
+            if (!('output' in event))
+                return false;
+            const expiresAt = event.output.expiresAt;
+            return expiresAt !== undefined && expiresAt <= Date.now();
+        },
+    },
+    actions: {
+        queue: assign({
+            waiters: ({ context, event }) => event.type === 'CREDENTIALS.GET' ? [...context.waiters, event.reply] : context.waiters,
+        }),
+        replyReady: ({ context, event }) => {
+            if (event.type === 'CREDENTIALS.GET' && context.current) {
+                notify(event.reply, { ok: true, credentials: context.current });
+            }
+        },
+        acceptCredentials: assign(({ context, event }) => {
+            if (!('output' in event))
+                return {};
+            const credentials = event.output;
+            context.waiters.forEach((waiter) => notify(waiter, { ok: true, credentials }));
+            return { current: credentials, waiters: [], error: undefined };
+        }),
+        storeCredentials: assign(({ event }) => 'output' in event ? { current: event.output, error: undefined } : {}),
+        rejectWaiters: assign(({ context, event }) => {
+            const error = 'error' in event
+                ? asError(event.error)
+                : (context.error ?? new Error('NATS credentials are unavailable'));
+            context.waiters.forEach((waiter) => notify(waiter, { ok: false, error }));
+            return { waiters: [], error };
+        }),
+        markExpired: assign({
+            error: (_) => new Error('NATS credentials expired'),
+        }),
+        notifyUnavailable: ({ context }) => {
+            const error = context.error ?? new Error('NATS credentials are unavailable');
+            try {
+                context.config.onUnavailable?.(error);
+            }
+            catch (callbackError) {
+                console.error('NATS credential unavailable callback failed', callbackError);
+            }
+        },
+    },
+}).createMachine({
+    id: 'credentials',
+    initial: 'loading',
+    context: ({ input }) => ({ config: input, waiters: [] }),
+    states: {
+        loading: {
+            entry: credentialStateEntry('loading'),
+            on: {
+                'CREDENTIALS.GET': { actions: 'queue' },
+            },
+            invoke: {
+                src: 'load',
+                input: ({ context }) => context.config,
+                onDone: [
+                    { guard: 'outputShouldRefresh', target: 'refreshing', actions: 'storeCredentials' },
+                    { guard: 'outputExpired', target: 'expired', actions: 'storeCredentials' },
+                    { target: 'ready', actions: 'acceptCredentials' },
+                ],
+                onError: { target: 'failed', actions: 'rejectWaiters' },
+            },
+        },
+        ready: {
+            entry: credentialStateEntry('ready'),
+            after: {
+                credentialDeadline: [
+                    { guard: 'canRefresh', target: 'refreshing' },
+                    { guard: 'hasExpiry', target: 'expired' },
+                ],
+            },
+            on: {
+                'CREDENTIALS.GET': [
+                    { guard: 'shouldRefreshNow', target: 'refreshing', actions: 'queue' },
+                    { guard: 'isExpired', target: 'expired', actions: 'queue' },
+                    { actions: 'replyReady' },
+                ],
+                'CREDENTIALS.RELOAD': { target: 'loading' },
+            },
+        },
+        refreshing: {
+            entry: credentialStateEntry('refreshing'),
+            on: {
+                'CREDENTIALS.GET': { actions: 'queue' },
+            },
+            invoke: {
+                src: 'refresh',
+                input: ({ context }) => ({ config: context.config, current: context.current }),
+                onDone: { target: 'ready', actions: 'acceptCredentials' },
+                onError: { target: 'failed', actions: 'rejectWaiters' },
+            },
+        },
+        expired: {
+            entry: [credentialStateEntry('expired'), 'markExpired', 'rejectWaiters', 'notifyUnavailable'],
+            on: {
+                'CREDENTIALS.GET': {
+                    actions: ({ event }) => notify(event.reply, { ok: false, error: new Error('NATS credentials expired') }),
+                },
+                'CREDENTIALS.RELOAD': { target: 'loading' },
+            },
+        },
+        failed: {
+            entry: [credentialStateEntry('failed'), 'notifyUnavailable'],
+            on: {
+                'CREDENTIALS.GET': {
+                    actions: ({ context, event }) => notify(event.reply, {
+                        ok: false,
+                        error: context.error ?? new Error('NATS credentials are unavailable'),
+                    }),
+                },
+                'CREDENTIALS.RELOAD': { target: 'loading' },
+            },
+        },
+    },
+});
+export function getCredentials(actor) {
+    if (actor.getSnapshot().status === 'stopped') {
+        return Promise.reject(new Error('NATS credential actor is stopped'));
+    }
+    return new Promise((resolve, reject) => {
+        actor.send({
+            type: 'CREDENTIALS.GET',
+            reply: (result) => (result.ok ? resolve(result.credentials) : reject(result.error)),
+        });
+    });
+}
+//# sourceMappingURL=credentials.js.map

package/dist/machines/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/machines/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAW,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAgB,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAEjE,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAuCzF,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4B;IACpD,OAAO,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAA;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA4B;IACvD,OAAO,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAA;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA4B,EAC5B,KAAa,EACb,UAAqD;IAErD,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;AAC5F,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAA4B,EAC5B,SAA6B,EAC7B,EAAoB;IAEpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;IACnC,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IACnF,IAAI,aAAsB,CAAA;IAE1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,2BAA2B,SAAS,EAAE,EACtC,+BAA+B,EAC/B,EAAE,uBAAuB,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,EACzE,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;gBACjE,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAA;gBACnD,OAAO,KAAK,CAAA;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,aAAa,GAAG,KAAK,CAAA;gBACrB,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAA;gBACjD,0EAA0E;gBAC1E,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,SAAS,CAAC,CAAA;YACxD,CAAC;QACH,CAAC,CACF,CAAA;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QAChD,yBAAyB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;QAC3D,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE;YAC/C,SAAS;YACT,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QAChD,yBAAyB,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;QACzD,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE;YAC/C,SAAS;YACT,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAA;QACF,MAAM,aAAa,IAAI,IAAI,KAAK,CAAC,mBAAmB,SAAS,SAAS,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAkD;IAC9E,OAAO,CAAC,EAAE,OAAO,EAAkC,EAAE,EAAE;QACrD,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC5B,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE;YAClD,KAAK;YACL,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;SACxC,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,MAAwB;IACtD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;IACvD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;IACrC,KAAK,EAAE;QACL,OAAO,EAAE,EAAuB;QAChC,MAAM,EAAE,EAAY;QACpB,KAAK,EAAE,EAA0B;KAClC;IACD,MAAM,EAAE;QACN,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,KAAK,EAAmC,EAAE,EAAE,CAC/D,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAC1D;QACD,OAAO,EAAE,WAAW,CAClB,CAAC,EAAE,KAAK,EAAyE,EAAE,EAAE;YACnF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAA;YAC5C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACrE,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;gBAChE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAChD,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAA;gBACvC,IACE,SAAS,KAAK,SAAS;oBACvB,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAC3D,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;gBAC1F,CAAC;gBACD,OAAO,WAAW,CAAA;YACpB,CAAC,CAAC,CAAA;QACJ,CAAC,CACF;KACF;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAA;YAC5C,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,aAAa,CAAA;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACxF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACtD,CAAC;KACF;IACD,MAAM,EAAE;QACN,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACvF,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS;QACpE,gBAAgB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAA;YAC5C,OAAO,OAAO,CACZ,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;gBAC9B,SAAS,KAAK,SAAS;gBACvB,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAC9D,CAAA;QACH,CAAC;QACD,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YACzB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAA;YAC5C,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3D,CAAC;QACD,mBAAmB,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC1C,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAA;YACzE,MAAM,SAAS,GAAI,KAAK,CAAC,MAA0B,CAAC,SAAS,CAAA;YAC7D,OAAO,CACL,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CACzF,CAAA;QACH,CAAC;QACD,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;YACtC,MAAM,SAAS,GAAI,KAAK,CAAC,MAA0B,CAAC,SAAS,CAAA;YAC7D,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3D,CAAC;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;YACZ,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAC9B,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;SACzF,CAAC;QACF,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;QACD,iBAAiB,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC/C,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACnC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAyB,CAAA;YACnD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;YAC9E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QAChE,CAAC,CAAC;QACF,gBAAgB,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACrC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAyB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CACxF;QACD,aAAa,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3C,MAAM,KAAK,GACT,OAAO,IAAI,KAAK;gBACd,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;gBACtB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA;YACtE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YACzE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;QAC/B,CAAC,CAAC;QACF,WAAW,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC;SACpD,CAAC;QACF,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAC5E,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAA;YACvC,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAA;YAC7E,CAAC;QACH,CAAC;KACF;CACF,CAAC,CAAC,aAAa,CAAC;IACf,EAAE,EAAE,aAAa;IACjB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxD,MAAM,EAAE;QACN,OAAO,EAAE;YACP,KAAK,EAAE,oBAAoB,CAAC,SAAS,CAAC;YACtC,EAAE,EAAE;gBACF,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;aACxC;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM;gBACtC,MAAM,EAAE;oBACN,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE;oBACnF,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE;oBAC1E,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE;iBAClD;gBACD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;aACxD;SACF;QACD,KAAK,EAAE;YACL,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACL,kBAAkB,EAAE;oBAClB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;oBAC7C,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE;iBAC1C;aACF;YACD,EAAE,EAAE;gBACF,iBAAiB,EAAE;oBACjB,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE;oBACrE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;oBAC3D,EAAE,OAAO,EAAE,YAAY,EAAE;iBAC1B;gBACD,oBAAoB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;aAC5C;SACF;QACD,UAAU,EAAE;YACV,KAAK,EAAE,oBAAoB,CAAC,YAAY,CAAC;YACzC,EAAE,EAAE;gBACF,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;aACxC;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAQ,EAAE,CAAC;gBAC/E,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACzD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;aACxD;SACF;QACD,OAAO,EAAE;YACP,KAAK,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,mBAAmB,CAAC;YAC7F,EAAE,EAAE;gBACF,iBAAiB,EAAE;oBACjB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACrB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;iBACnF;gBACD,oBAAoB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;aAC5C;SACF;QACD,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;YAC5D,EAAE,EAAE;gBACF,iBAAiB,EAAE;oBACjB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;wBAClB,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,kCAAkC,CAAC;qBACtE,CAAC;iBACL;gBACD,oBAAoB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;aAC5C;SACF;KACF;CACF,CAAC,CAAA;AAIF,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACpF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/machines/root.d.ts

@@ -4,12 +4,14 @@ import { ExternalEvents as SubjectExternalEvents } from './subject';
 import { type AuthConfig } from '../actions/types';
 import { InternalStatusEvents as NatsStatusEvents } from '../actions/connection';
 import { NatsTrafficResetEvent } from '../traffic';
+import { CredentialActor, NatsCredentialConfig } from './credentials';
 export interface NatsDiagnosticsConfig {
     lifecycle?: boolean;
 }
 export interface NatsConnectionConfig {
     opts: ConnectionOptions;
     auth?: AuthConfig;
+    credentials?: NatsCredentialConfig;
     maxRetries: number;
     diagnostics?: NatsDiagnosticsConfig;
 }
@@ -22,6 +24,7 @@ export interface Context {
     kvManagerReady: boolean;
     configureAfterClose: boolean;
     connectAfterClose: boolean;
+    credentialActor?: CredentialActor;
 }
 export type ExternalEvents = {
     type: 'CONFIGURE';
@@ -32,6 +35,8 @@ export type ExternalEvents = {
     type: 'DISCONNECT';
 } | {
     type: 'RESET';
+} | {
+    type: 'CREDENTIALS.RELOAD';
 } | NatsTrafficResetEvent | SubjectExternalEvents | KvExternalEvents;
 export declare const natsMachine: import("xstate").StateMachine<Context, {
     type: 'METRICS.RESET_UPLOAD';
@@ -150,6 +155,7 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
     opts?: import("@nats-io/nats-core").RequestOptions;
     callback: (data: any) => void;
     onRequestResult?: (result: import("../actions/subject").RequestResult) => void;
+    requestHeaders?: () => Promise<import("@nats-io/nats-core").MsgHdrs | undefined>;
 } | {
     type: 'SUBJECT.SUBSCRIBE';
     config: import("../actions/subject").SubjectSubscriptionConfig;
@@ -170,6 +176,9 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
     type: 'RECONNECT';
 } | {
     type: 'CLOSE';
+} | {
+    type: 'CREDENTIALS.UNAVAILABLE';
+    error: Error;
 } | {
     type: 'CONFIGURE';
     config: NatsConnectionConfig;
@@ -179,14 +188,92 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
     type: 'DISCONNECT';
 } | {
     type: 'RESET';
+} | {
+    type: 'CREDENTIALS.RELOAD';
 }, {
     [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<void, {
         connection: NatsConnection | null;
     }, import("xstate").EventObject> | import("xstate").PromiseActorLogic<NatsConnection, {
         opts: ConnectionOptions;
         auth?: AuthConfig;
+        credentialActor?: CredentialActor;
         onStatus?: (event: NatsStatusEvents) => void;
-    }, import("xstate").EventObject>> | undefined;
+    }, import("xstate").EventObject> | import("xstate").StateMachine<import("./credentials").CredentialContext, {
+        type: 'CREDENTIALS.GET';
+        reply: (result: {
+            ok: true;
+            credentials: import("./credentials").NatsCredentials;
+        } | {
+            ok: false;
+            error: Error;
+        }) => void;
+    } | {
+        type: 'CREDENTIALS.RELOAD';
+    }, {
+        [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, NatsCredentialConfig, import("xstate").EventObject> | import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, {
+            config: NatsCredentialConfig;
+            current: import("./credentials").NatsCredentials;
+        }, import("xstate").EventObject>> | undefined;
+    }, {
+        src: "load";
+        logic: import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, NatsCredentialConfig, import("xstate").EventObject>;
+        id: string | undefined;
+    } | {
+        src: "refresh";
+        logic: import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, {
+            config: NatsCredentialConfig;
+            current: import("./credentials").NatsCredentials;
+        }, import("xstate").EventObject>;
+        id: string | undefined;
+    }, {
+        type: "acceptCredentials";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "markExpired";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "notifyUnavailable";
+        params: unknown;
+    } | {
+        type: "queue";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "rejectWaiters";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "replyReady";
+        params: unknown;
+    } | {
+        type: "storeCredentials";
+        params: import("xstate").NonReducibleUnknown;
+    }, {
+        type: "canRefresh";
+        params: unknown;
+    } | {
+        type: "hasExpiry";
+        params: unknown;
+    } | {
+        type: "isExpired";
+        params: unknown;
+    } | {
+        type: "outputExpired";
+        params: unknown;
+    } | {
+        type: "outputShouldRefresh";
+        params: unknown;
+    } | {
+        type: "shouldRefreshNow";
+        params: unknown;
+    }, "credentialDeadline", "expired" | "failed" | "loading" | "ready" | "refreshing", string, NatsCredentialConfig, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
+        id: "credentials";
+        states: {
+            readonly loading: {};
+            readonly ready: {};
+            readonly refreshing: {};
+            readonly expired: {};
+            readonly failed: {};
+        };
+    }>> | undefined;
     kv?: import("xstate").ActorRefFromLogic<import("xstate").StateMachine<import("./kv").Context, import("..").NatsTrafficRecordEvent | {
         type: 'METRICS.RESET_UPLOAD';
         source?: import("..").NatsTrafficMetricSource;
@@ -337,6 +424,7 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
         opts?: import("@nats-io/nats-core").RequestOptions;
         callback: (data: any) => void;
         onRequestResult?: (result: import("../actions/subject").RequestResult) => void;
+        requestHeaders?: () => Promise<import("@nats-io/nats-core").MsgHdrs | undefined>;
     } | {
         type: 'SUBJECT.SUBSCRIBE';
         config: import("../actions/subject").SubjectSubscriptionConfig;
@@ -345,7 +433,10 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
         subject: string;
     } | {
         type: 'SUBJECT.UNSUBSCRIBE_ALL';
-    }, {}, never, never, {
+    }, {}, never, {
+        type: "rejectUnavailableRequest";
+        params: unknown;
+    }, {
         type: "hasPendingSync";
         params: unknown;
     }, never, "subject_check_sync" | "subject_connected" | "subject_disconnecting" | "subject_error" | "subject_idle" | "subject_syncing", string, import("xstate").NonReducibleUnknown, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
@@ -363,9 +454,89 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
     logic: import("xstate").PromiseActorLogic<NatsConnection, {
         opts: ConnectionOptions;
         auth?: AuthConfig;
+        credentialActor?: CredentialActor;
         onStatus?: (event: NatsStatusEvents) => void;
     }, import("xstate").EventObject>;
     id: string | undefined;
+} | {
+    src: "credentials";
+    logic: import("xstate").StateMachine<import("./credentials").CredentialContext, {
+        type: 'CREDENTIALS.GET';
+        reply: (result: {
+            ok: true;
+            credentials: import("./credentials").NatsCredentials;
+        } | {
+            ok: false;
+            error: Error;
+        }) => void;
+    } | {
+        type: 'CREDENTIALS.RELOAD';
+    }, {
+        [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, NatsCredentialConfig, import("xstate").EventObject> | import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, {
+            config: NatsCredentialConfig;
+            current: import("./credentials").NatsCredentials;
+        }, import("xstate").EventObject>> | undefined;
+    }, {
+        src: "load";
+        logic: import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, NatsCredentialConfig, import("xstate").EventObject>;
+        id: string | undefined;
+    } | {
+        src: "refresh";
+        logic: import("xstate").PromiseActorLogic<import("./credentials").NatsCredentials, {
+            config: NatsCredentialConfig;
+            current: import("./credentials").NatsCredentials;
+        }, import("xstate").EventObject>;
+        id: string | undefined;
+    }, {
+        type: "acceptCredentials";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "markExpired";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "notifyUnavailable";
+        params: unknown;
+    } | {
+        type: "queue";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "rejectWaiters";
+        params: import("xstate").NonReducibleUnknown;
+    } | {
+        type: "replyReady";
+        params: unknown;
+    } | {
+        type: "storeCredentials";
+        params: import("xstate").NonReducibleUnknown;
+    }, {
+        type: "canRefresh";
+        params: unknown;
+    } | {
+        type: "hasExpiry";
+        params: unknown;
+    } | {
+        type: "isExpired";
+        params: unknown;
+    } | {
+        type: "outputExpired";
+        params: unknown;
+    } | {
+        type: "outputShouldRefresh";
+        params: unknown;
+    } | {
+        type: "shouldRefreshNow";
+        params: unknown;
+    }, "credentialDeadline", "expired" | "failed" | "loading" | "ready" | "refreshing", string, NatsCredentialConfig, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
+        id: "credentials";
+        states: {
+            readonly loading: {};
+            readonly ready: {};
+            readonly refreshing: {};
+            readonly expired: {};
+            readonly failed: {};
+        };
+    }>;
+    id: string | undefined;
 } | {
     src: "disconnectNats";
     logic: import("xstate").PromiseActorLogic<void, {
@@ -527,6 +698,7 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
         opts?: import("@nats-io/nats-core").RequestOptions;
         callback: (data: any) => void;
         onRequestResult?: (result: import("../actions/subject").RequestResult) => void;
+        requestHeaders?: () => Promise<import("@nats-io/nats-core").MsgHdrs | undefined>;
     } | {
         type: 'SUBJECT.SUBSCRIBE';
         config: import("../actions/subject").SubjectSubscriptionConfig;
@@ -535,7 +707,10 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
         subject: string;
     } | {
         type: 'SUBJECT.UNSUBSCRIBE_ALL';
-    }, {}, never, never, {
+    }, {}, never, {
+        type: "rejectUnavailableRequest";
+        params: unknown;
+    }, {
         type: "hasPendingSync";
         params: unknown;
     }, never, "subject_check_sync" | "subject_connected" | "subject_disconnecting" | "subject_error" | "subject_idle" | "subject_syncing", string, import("xstate").NonReducibleUnknown, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
@@ -564,6 +739,18 @@ export declare const natsMachine: import("xstate").StateMachine<Context, {
 } | {
     type: "reconnectAfterClose";
     params: import("xstate").NonReducibleUnknown;
+} | {
+    type: "recordCredentialError";
+    params: import("xstate").NonReducibleUnknown;
+} | {
+    type: "rejectUnavailableRequest";
+    params: unknown;
+} | {
+    type: "reloadCredentials";
+    params: unknown;
+} | {
+    type: "stopCredentialActor";
+    params: import("xstate").NonReducibleUnknown;
 }, {
     type: "allManagersReady";
     params: unknown;

package/dist/machines/root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/machines/root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEtE,OAAO,EAAkB,cAAc,IAAI,gBAAgB,EAAE,MAAM,MAAM,CAAA;AACzE,OAAO,EAAuB,cAAc,IAAI,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAExF,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAEhF,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAA;IACvB,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,qBAAqB,CAAA;CACpC;AAED,MAAM,WAAW,OAAO;IACtB,UAAU,EAAE,cAAc,GAAG,IAAI,CAAA;IACjC,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,mBAAmB,EAAE,OAAO,CAAA;IAC5B,cAAc,EAAE,OAAO,CAAA;IACvB,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAYD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,gBAAgB,CAAA;AAkDpB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAjEZ,WAAW;gBAAc,cAAc;;UACvC,cAAc;;UACd,MAAM;WAAS,KAAK;;UACpB,WAAW;;UACX,OAAO;;UAKP,WAAW;YAAU,oBAAoB;;UACzC,SAAS;;UACT,YAAY;;UACZ,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuejB,CAAA"}
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/machines/root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEtE,OAAO,EAAkB,cAAc,IAAI,gBAAgB,EAAE,MAAM,MAAM,CAAA;AACzE,OAAO,EAAuB,cAAc,IAAI,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAExF,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAEhF,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,OAAO,EACL,eAAe,EAGf,oBAAoB,EACrB,MAAM,eAAe,CAAA;AAEtB,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAA;IACvB,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,WAAW,CAAC,EAAE,oBAAoB,CAAA;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,qBAAqB,CAAA;CACpC;AAED,MAAM,WAAW,OAAO;IACtB,UAAU,EAAE,cAAc,GAAG,IAAI,CAAA;IACjC,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,mBAAmB,EAAE,OAAO,CAAA;IAC5B,cAAc,EAAE,OAAO,CAAA;IACvB,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAA;CAClC;AAaD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAC9B,qBAAqB,GACrB,qBAAqB,GACrB,gBAAgB,CAAA;AAoDpB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UArEZ,WAAW;gBAAc,cAAc;;UACvC,cAAc;;UACd,MAAM;WAAS,KAAK;;UACpB,WAAW;;UACX,OAAO;;UACP,yBAAyB;WAAS,KAAK;;UAKvC,WAAW;YAAU,oBAAoB;;UACzC,SAAS;;UACT,YAAY;;UACZ,OAAO;;UACP,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkkB9B,CAAA"}