@nebius/js-sdk 0.1.0

package/dist/cjs/runtime/token/renewable.d.ts

@@ -0,0 +1,59 @@
+import type { AuthorizationOptions } from '../authorization/provider';
+import { Bearer, Receiver, Token } from '../token';
+import { custom, customJson, Logger } from '../util/logging';
+export declare class RenewalError extends Error {
+    constructor(message: string);
+}
+export declare class RenewableBearer extends Bearer {
+    [custom]: () => string;
+    private readonly source;
+    readonly $type = "nebius.sdk.RenewableBearer";
+    private refreshTimer;
+    private stopped;
+    private inFlightRenewal;
+    private waiters;
+    private cacheToken;
+    private fresh;
+    private renewalRequested;
+    private renewAttempt;
+    private nextSyncOptions;
+    private readonly lifetimeSafeFraction;
+    private readonly initialRetryTimeoutMs;
+    private readonly maxRetryTimeoutMs;
+    private readonly retryTimeoutExponent;
+    private readonly refreshRequestTimeoutMs;
+    private readonly maxRetries;
+    private readonly jitterFraction;
+    private readonly logger?;
+    constructor(source: Bearer, opts?: {
+        maxRetries?: number;
+        lifetimeSafeFraction?: number;
+        initialRetryTimeoutMs?: number;
+        maxRetryTimeoutMs?: number;
+        retryTimeoutExponent?: number;
+        refreshRequestTimeoutMs?: number;
+        safetyMinRemainingMs?: number;
+        jitterFraction?: number;
+        logger?: Logger;
+    });
+    [customJson](): unknown;
+    get wrapped(): Bearer | undefined;
+    receiver(): Receiver;
+    /** Schedules next background renewal. Always de-dupes existing timer. */
+    private scheduleNext;
+    /** Compute when to renew next, based on token expiration. */
+    private computeNextTimeoutMs;
+    private addWaiter;
+    private drainWaitersWithToken;
+    private drainWaitersWithError;
+    private withJitter;
+    private needRenew;
+    private startRenewal;
+    fetch(timeoutMs?: number, options?: AuthorizationOptions): Promise<Token>;
+    isRenewalRequired(): boolean;
+    requestRenewal(): void;
+    /** Background runner: serialize renewals, backoff with jitter, reschedule next. */
+    private run;
+    close(graceMs?: number): Promise<void>;
+}
+//# sourceMappingURL=renewable.d.ts.map

package/dist/cjs/runtime/token/renewable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renewable.d.ts","sourceRoot":"","sources":["../../../../src/runtime/token/renewable.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE1E,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAmDD,qBAAa,eAAgB,SAAQ,MAAM;IAuDzC,CAAC,MAAM,CAAC,QAAI,MAAM;IAxBhB,OAAO,CAAC,QAAQ,CAAC,MAAM;IA9BzB,SAAgB,KAAK,gCAAgC;IACrD,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,OAAO,CAAS;IAExB,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,OAAO,CAAgB;IAE/B,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,gBAAgB,CAAS;IAEjC,OAAO,CAAC,YAAY,CAAK;IAGzB,OAAO,CAAC,eAAe,CAGP;IAGhB,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;gBAGd,MAAM,EAAE,MAAM,EAC/B,IAAI,CAAC,EAAE;QACL,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAgBH,CAAC,UAAU,CAAC,IAAI,OAAO;IAWvB,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,QAAQ,IAAI,QAAQ;IAIpB,yEAAyE;IACzE,OAAO,CAAC,YAAY;IAgBpB,6DAA6D;IAC7D,OAAO,CAAC,oBAAoB;IA8B5B,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,SAAS;YAqBH,YAAY;IA+CpB,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC;IAqG/E,iBAAiB,IAAI,OAAO;IAM5B,cAAc,IAAI,IAAI;IAWtB,mFAAmF;YACrE,GAAG;IAkCX,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAY7C"}

package/dist/cjs/runtime/token/renewable.js

@@ -0,0 +1,393 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RenewableBearer = exports.RenewalError = void 0;
+const util_1 = require("util");
+const token_1 = require("../token");
+const cancelable_1 = require("../util/cancelable");
+const logging_1 = require("../util/logging");
+class RenewalError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RenewalError';
+    }
+}
+exports.RenewalError = RenewalError;
+class RenewableReceiver extends token_1.Receiver {
+    parent;
+    defaultMaxRetries;
+    logger;
+    $type = 'nebius.sdk.RenewableReceiver';
+    trial = 0;
+    constructor(parent, defaultMaxRetries = 2, logger) {
+        super();
+        this.parent = parent;
+        this.defaultMaxRetries = defaultMaxRetries;
+        this.logger = logger;
+    }
+    [logging_1.custom]() {
+        return `${this.$type}(parent=${(0, util_1.inspect)(this.parent)}, trial=${this.trial})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: this.$type,
+            parent: (0, logging_1.inspectJson)(this.parent),
+            trial: this.trial,
+            defaultMaxRetries: this.defaultMaxRetries,
+        };
+    }
+    async _fetch(timeoutMs, options) {
+        this.trial += 1;
+        this.logger?.trace('_fetch', { trial: this.trial, timeoutMs, options });
+        return this.parent.fetch(timeoutMs, options);
+    }
+    canRetry(_err, options) {
+        const maxRetries = options?.maxRetries ?? this.defaultMaxRetries;
+        const synchronous = Boolean(options?.renewSynchronous);
+        if (this.trial >= maxRetries) {
+            this.logger?.debug('canRetry -> false (max retries reached)', {
+                trial: this.trial,
+                maxRetries,
+            });
+            return false;
+        }
+        // Non-blocking renewal request for async path
+        if (!synchronous)
+            this.parent.requestRenewal();
+        this.logger?.trace('canRetry -> true', { trial: this.trial, maxRetries, synchronous });
+        return true;
+    }
+}
+class RenewableBearer extends token_1.Bearer {
+    source;
+    $type = 'nebius.sdk.RenewableBearer';
+    refreshTimer = null;
+    stopped = false;
+    inFlightRenewal = null;
+    waiters = [];
+    cacheToken = null;
+    fresh = false; // true iff last renewal succeeded and nothing invalidated it
+    renewalRequested = false;
+    renewAttempt = 0;
+    // “sync” override for next renewal only
+    nextSyncOptions = null;
+    // tuning
+    lifetimeSafeFraction;
+    initialRetryTimeoutMs;
+    maxRetryTimeoutMs;
+    retryTimeoutExponent;
+    refreshRequestTimeoutMs;
+    maxRetries;
+    jitterFraction;
+    logger;
+    constructor(source, opts) {
+        super();
+        this.source = source;
+        this.lifetimeSafeFraction = opts?.lifetimeSafeFraction ?? 0.9;
+        this.initialRetryTimeoutMs = opts?.initialRetryTimeoutMs ?? 1_000;
+        this.maxRetryTimeoutMs = opts?.maxRetryTimeoutMs ?? 60_000;
+        this.retryTimeoutExponent = opts?.retryTimeoutExponent ?? 1.5;
+        this.refreshRequestTimeoutMs = opts?.refreshRequestTimeoutMs ?? 5_000;
+        this.maxRetries = opts?.maxRetries ?? 2;
+        this.jitterFraction = Math.min(Math.max(opts?.jitterFraction ?? 0.2, 0), 1);
+        this.logger = opts?.logger;
+        this.logger?.trace('ctor', { opts });
+    }
+    [logging_1.custom]() {
+        return `${this.$type}(source=${(0, util_1.inspect)(this.source)}, token=${(0, util_1.inspect)(this.cacheToken)})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: this.$type,
+            source: (0, logging_1.inspectJson)(this.source),
+            token: (0, logging_1.inspectJson)(this.cacheToken),
+            fresh: this.fresh,
+            renewalRequested: this.renewalRequested,
+            waiters: this.waiters.length,
+        };
+    }
+    get wrapped() {
+        return this.source;
+    }
+    receiver() {
+        return new RenewableReceiver(this, this.maxRetries, this.logger);
+    }
+    /** Schedules next background renewal. Always de-dupes existing timer. */
+    scheduleNext(ms) {
+        if (this.stopped) {
+            this.logger?.debug('scheduleNext skipped (stopped)');
+            return;
+        }
+        if (this.refreshTimer)
+            clearTimeout(this.refreshTimer);
+        const delay = Math.max(0, ms);
+        this.logger?.debug('scheduleNext', { delayMs: delay });
+        this.refreshTimer = setTimeout(() => void this.run(), delay);
+        // Don't keep Node process alive because of this timer
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        this.refreshTimer?.unref?.();
+    }
+    /** Compute when to renew next, based on token expiration. */
+    computeNextTimeoutMs(tok) {
+        if (!tok) {
+            this.logger?.trace('computeNextTimeoutMs: no token -> 0 (asap)');
+            return 0;
+        }
+        const exp = tok.expiration?.getTime();
+        if (!exp) {
+            // No expiry -> effectively “never”; keep a periodic health check just in case
+            const v = 10 * 24 * 60 * 60 * 1000; // 10 days
+            this.logger?.trace('computeNextTimeoutMs: no expiration ->', {
+                nextTimeoutMs: v,
+            });
+            return v;
+        }
+        const now = Date.now();
+        const remaining = exp - now;
+        if (remaining <= 0) {
+            this.logger?.trace('computeNextTimeoutMs: already expired -> 0 (asap)');
+            return 0;
+        }
+        // Renew at: remaining * (1 - (1 - lifetimeSafeFraction))
+        // i.e. remaining * lifetimeSafeFraction.
+        const targetFromNow = Math.floor(remaining * this.lifetimeSafeFraction);
+        this.logger?.trace('computeNextTimeoutMs', {
+            nextTimeoutMs: targetFromNow,
+        });
+        return targetFromNow;
+    }
+    addWaiter(resolve, reject) {
+        this.waiters.push({ resolve, reject });
+        this.logger?.trace('addWaiter', { waiters: this.waiters.length });
+    }
+    drainWaitersWithToken(tok) {
+        const ws = this.waiters.splice(0, this.waiters.length);
+        this.logger?.trace('drainWaitersWithToken', { count: ws.length, token: tok });
+        ws.forEach((w) => w.resolve(tok));
+    }
+    drainWaitersWithError(err) {
+        const ws = this.waiters.splice(0, this.waiters.length);
+        this.logger?.trace('drainWaitersWithError', { count: ws.length, err });
+        ws.forEach((w) => w.reject(err));
+    }
+    withJitter(ms) {
+        if (ms <= 0 || this.jitterFraction <= 0)
+            return ms;
+        const span = ms * this.jitterFraction;
+        const delta = (Math.random() * 2 - 1) * span;
+        return Math.max(0, Math.floor(ms + delta));
+    }
+    needRenew() {
+        if (!this.cacheToken) {
+            this.logger?.trace('needRenew -> true (no token)');
+            return true;
+        }
+        if (this.renewalRequested) {
+            this.logger?.trace('needRenew -> true (renewal requested)');
+            return true;
+        }
+        const exp = this.cacheToken.expiration?.getTime();
+        if (!exp) {
+            this.logger?.trace('needRenew -> false (no expiration)');
+            return false;
+        }
+        const res = this.cacheToken.isExpired();
+        this.logger?.trace('needRenew', {
+            isExpired: this.cacheToken.isExpired(),
+        });
+        return res;
+    }
+    async startRenewal() {
+        if (this.inFlightRenewal) {
+            this.logger?.debug('startRenewal: reuse inFlight promise');
+            return this.inFlightRenewal;
+        }
+        const useSyncOpts = this.nextSyncOptions;
+        this.nextSyncOptions = null;
+        const timeoutMs = useSyncOpts?.timeoutMs ?? this.refreshRequestTimeoutMs;
+        const options = useSyncOpts?.options ?? undefined;
+        this.logger?.debug('startRenewal: begin', {
+            timeoutMs,
+            hasSyncOverride: Boolean(useSyncOpts),
+            options,
+        });
+        const doRenew = async () => {
+            const recv = this.source.receiver();
+            this.logger?.trace('startRenewal: fetching from source', { receiver: recv });
+            const tok = await recv.fetch(timeoutMs, options);
+            this.cacheToken = tok;
+            this.fresh = true;
+            this.renewalRequested = false;
+            this.logger?.debug('startRenewal: success', { token: tok });
+            this.drainWaitersWithToken(tok);
+            return tok;
+        };
+        const p = doRenew()
+            .catch((e) => {
+            this.fresh = false;
+            this.logger?.debug('startRenewal: error', { err: e });
+            this.drainWaitersWithError(e);
+            throw e;
+        })
+            .finally(() => {
+            // Let new callers create a new in-flight promise if needed
+            this.inFlightRenewal = null;
+            this.logger?.debug('startRenewal: finished');
+        });
+        this.inFlightRenewal = p;
+        return p;
+    }
+    async fetch(timeoutMs, options) {
+        const renewRequired = Boolean(options?.renewRequired);
+        const renewSynchronous = Boolean(options?.renewSynchronous);
+        const reportError = Boolean(options?.reportError);
+        this.logger?.trace('fetch: enter', {
+            timeoutMs,
+            options,
+            renewRequired,
+            renewSynchronous,
+            reportError,
+            fresh: this.fresh,
+            hasToken: Boolean(this.cacheToken),
+        });
+        // Kick background loop on first use
+        if (!this.refreshTimer)
+            this.scheduleNext(0);
+        const mustRenew = renewRequired || this.needRenew();
+        if (mustRenew) {
+            if (renewSynchronous) {
+                // Ensure this attempt uses provided timeouts/options
+                this.nextSyncOptions = {
+                    timeoutMs: typeof options?.renewRequestTimeoutMs === 'number'
+                        ? options.renewRequestTimeoutMs
+                        : null,
+                    options: options ?? null,
+                };
+                this.logger?.debug('fetch: mustRenew (sync)', { nextSyncOptions: this.nextSyncOptions });
+            }
+            else {
+                // Non-blocking hint for the bg loop
+                this.requestRenewal();
+                this.logger?.debug('fetch: mustRenew (async) -> requested');
+            }
+            const renewalPromise = this.startRenewal();
+            // Synchronous callers or error-reporting callers await the result (with optional timeout)
+            if (renewSynchronous || reportError) {
+                if (!timeoutMs)
+                    return renewalPromise;
+                this.logger?.trace('fetch: awaiting renewal with timeout', { timeoutMs });
+                return await (0, cancelable_1.withTimeout)(renewalPromise, timeoutMs);
+            }
+            // Asynchronous callers: optionally wait up to timeout for freshness
+            if (timeoutMs) {
+                this.logger?.trace('fetch: async path waiting for freshness', { timeoutMs });
+                await new Promise((resolve, reject) => {
+                    let handle;
+                    const onResolve = (token) => {
+                        if (handle) {
+                            clearTimeout(handle);
+                            handle = undefined;
+                        }
+                        this.logger?.debug('fetch: async freshness satisfied', { token });
+                        resolve();
+                    };
+                    const onReject = (err) => {
+                        if (handle) {
+                            clearTimeout(handle);
+                            handle = undefined;
+                        }
+                        this.logger?.debug('fetch: async freshness error', { err });
+                        reject(err);
+                    };
+                    this.addWaiter(onResolve, onReject);
+                    handle = setTimeout(() => {
+                        handle = undefined;
+                        // If already fresh, resolve; otherwise remove our waiter and timeout
+                        if (this.fresh)
+                            resolve();
+                        else {
+                            // Remove our waiter (linear removal; list is small in practice)
+                            const idx = this.waiters.findIndex((w) => w.resolve === onResolve && w.reject === onReject);
+                            if (idx >= 0)
+                                this.waiters.splice(idx, 1);
+                            this.logger?.debug('fetch: async freshness timeout');
+                            reject(new RenewalError('Timeout waiting fresh token'));
+                        }
+                    }, timeoutMs);
+                    handle.unref();
+                });
+            }
+            else if (!this.cacheToken) {
+                // No token available yet: wait for current renewal to finish even in async mode
+                this.logger?.debug('fetch: async path, no token, awaiting renewal');
+                await renewalPromise;
+            }
+        }
+        if (!this.cacheToken || this.cacheToken.isExpired()) {
+            this.logger?.debug('fetch: no valid token -> throw');
+            throw new RenewalError('No valid token available');
+        }
+        this.logger?.debug('fetch: return cached token', { token: this.cacheToken });
+        return this.cacheToken;
+    }
+    isRenewalRequired() {
+        const v = this.needRenew();
+        this.logger?.trace('isRenewalRequired', { result: v });
+        return v;
+    }
+    requestRenewal() {
+        if (this.stopped) {
+            this.logger?.debug('requestRenewal ignored (stopped)');
+            return;
+        }
+        this.fresh = false;
+        this.renewalRequested = true;
+        this.logger?.debug('requestRenewal -> scheduled');
+        this.scheduleNext(0);
+    }
+    /** Background runner: serialize renewals, backoff with jitter, reschedule next. */
+    async run() {
+        if (this.stopped) {
+            this.logger?.debug('run: stopped');
+            return;
+        }
+        let nextDelayMs = 0;
+        try {
+            this.logger?.trace('run: starting renewal', { attempt: this.renewAttempt + 1 });
+            const tok = await this.startRenewal();
+            // Schedule next proactive renewal
+            nextDelayMs = this.computeNextTimeoutMs(tok);
+            this.renewAttempt = 0;
+            this.logger?.debug('run: renewed ok, next run upon expire', { nextDelayMs, token: tok });
+        }
+        catch (err) {
+            // Backoff on failure
+            this.renewAttempt += 1;
+            const attempt = this.renewAttempt;
+            if (attempt <= 1 || Math.abs(this.retryTimeoutExponent - 1) < 1e-9) {
+                nextDelayMs = this.initialRetryTimeoutMs;
+            }
+            else {
+                const mul = Math.pow(this.retryTimeoutExponent, attempt - 1);
+                nextDelayMs = Math.min(this.initialRetryTimeoutMs * mul, this.maxRetryTimeoutMs);
+            }
+            nextDelayMs = Math.max(nextDelayMs, this.initialRetryTimeoutMs);
+            nextDelayMs = this.withJitter(nextDelayMs);
+            this.logger?.debug('run: renewal failed, backoff', { attempt, nextDelayMs, err });
+        }
+        this.scheduleNext(nextDelayMs);
+    }
+    async close(graceMs) {
+        this.stopped = true;
+        if (this.refreshTimer) {
+            this.logger?.trace('close: clearing refresh timer');
+            clearTimeout(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+        // Reject any waiters
+        this.drainWaitersWithError(new RenewalError('Bearer closed'));
+        this.logger?.debug('close source', { graceMs });
+        await this.source.close(graceMs);
+    }
+}
+exports.RenewableBearer = RenewableBearer;
+//# sourceMappingURL=renewable.js.map

package/dist/cjs/runtime/token/renewable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renewable.js","sourceRoot":"","sources":["../../../../src/runtime/token/renewable.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAG/B,oCAAmD;AACnD,mDAAiD;AACjD,6CAA0E;AAE1E,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC;AAID,MAAM,iBAAkB,SAAQ,gBAAQ;IAInB;IACA;IACA;IALH,KAAK,GAAG,8BAA8B,CAAC;IAC/C,KAAK,GAAG,CAAC,CAAC;IAClB,YACmB,MAAuB,EACvB,oBAA4B,CAAC,EAC7B,MAAe;QAEhC,KAAK,EAAE,CAAC;QAJS,WAAM,GAAN,MAAM,CAAiB;QACvB,sBAAiB,GAAjB,iBAAiB,CAAY;QAC7B,WAAM,GAAN,MAAM,CAAS;IAGlC,CAAC;IAED,CAAC,gBAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,KAAK,WAAW,IAAA,cAAO,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,KAAK,GAAG,CAAC;IAC9E,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;IACJ,CAAC;IAES,KAAK,CAAC,MAAM,CAAC,SAAkB,EAAE,OAA8B;QACvE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,IAAa,EAAE,OAA8B;QACpD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC;QACjE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,yCAAyC,EAAE;gBAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU;aACX,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAa,eAAgB,SAAQ,cAAM;IA+BtB;IA9BH,KAAK,GAAG,4BAA4B,CAAC;IAC7C,YAAY,GAAyC,IAAI,CAAC;IAC1D,OAAO,GAAG,KAAK,CAAC;IAEhB,eAAe,GAA0B,IAAI,CAAC;IAC9C,OAAO,GAAa,EAAE,CAAC;IAEvB,UAAU,GAAiB,IAAI,CAAC;IAChC,KAAK,GAAG,KAAK,CAAC,CAAC,6DAA6D;IAC5E,gBAAgB,GAAG,KAAK,CAAC;IAEzB,YAAY,GAAG,CAAC,CAAC;IAEzB,wCAAwC;IAChC,eAAe,GAGZ,IAAI,CAAC;IAEhB,SAAS;IACQ,oBAAoB,CAAS;IAC7B,qBAAqB,CAAS;IAC9B,iBAAiB,CAAS;IAC1B,oBAAoB,CAAS;IAC7B,uBAAuB,CAAS;IAChC,UAAU,CAAS;IACnB,cAAc,CAAS;IACvB,MAAM,CAAU;IAEjC,YACmB,MAAc,EAC/B,IAUC;QAED,KAAK,EAAE,CAAC;QAbS,WAAM,GAAN,MAAM,CAAQ;QAc/B,IAAI,CAAC,oBAAoB,GAAG,IAAI,EAAE,oBAAoB,IAAI,GAAG,CAAC;QAC9D,IAAI,CAAC,qBAAqB,GAAG,IAAI,EAAE,qBAAqB,IAAI,KAAK,CAAC;QAClE,IAAI,CAAC,iBAAiB,GAAG,IAAI,EAAE,iBAAiB,IAAI,MAAM,CAAC;QAC3D,IAAI,CAAC,oBAAoB,GAAG,IAAI,EAAE,oBAAoB,IAAI,GAAG,CAAC;QAC9D,IAAI,CAAC,uBAAuB,GAAG,IAAI,EAAE,uBAAuB,IAAI,KAAK,CAAC;QACtE,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,CAAC,gBAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,KAAK,WAAW,IAAA,cAAO,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAA,cAAO,EAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC5F,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,yEAAyE;IACjE,YAAY,CAAC,EAAU;QAC7B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,YAAY;YAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAE7D,sDAAsD;QACtD,8DAA8D;QAC7D,IAAI,CAAC,YAAoB,EAAE,KAAK,EAAE,EAAE,CAAC;IACxC,CAAC;IAED,6DAA6D;IACrD,oBAAoB,CAAC,GAAiB;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,8EAA8E;YAC9E,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;YAC9C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,wCAAwC,EAAE;gBAC3D,aAAa,EAAE,CAAC;aACjB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,GAAG,GAAG,CAAC;QAC5B,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACxE,OAAO,CAAC,CAAC;QACX,CAAC;QAED,yDAAyD;QACzD,yCAAyC;QACzC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,EAAE;YACzC,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,SAAS,CAAC,OAA2B,EAAE,MAA4B;QACzE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAEO,qBAAqB,CAAC,GAAU;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,qBAAqB,CAAC,GAAY;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,UAAU,CAAC,EAAU;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;QACtC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE;YAC9B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;SACvC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAE5B,MAAM,SAAS,GAAG,WAAW,EAAE,SAAS,IAAI,IAAI,CAAC,uBAAuB,CAAC;QACzE,MAAM,OAAO,GAAG,WAAW,EAAE,OAAO,IAAI,SAAS,CAAC;QAElD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE;YACxC,SAAS;YACT,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC;YACrC,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,IAAoB,EAAE;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,oCAAoC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,CAAC,GAAG,OAAO,EAAE;aAChB,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACX,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,CAAC,CAAC;QACV,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,2DAA2D;YAC3D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAkB,EAAE,OAA8B;QAC5D,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtD,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAElD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE;YACjC,SAAS;YACT,OAAO;YACP,aAAa;YACb,gBAAgB;YAChB,WAAW;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;SACnC,CAAC,CAAC;QAEH,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE7C,MAAM,SAAS,GAAG,aAAa,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAEpD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,gBAAgB,EAAE,CAAC;gBACrB,qDAAqD;gBACrD,IAAI,CAAC,eAAe,GAAG;oBACrB,SAAS,EACP,OAAO,OAAO,EAAE,qBAAqB,KAAK,QAAQ;wBAChD,CAAC,CAAC,OAAQ,CAAC,qBAAsB;wBACjC,CAAC,CAAC,IAAI;oBACV,OAAO,EAAE,OAAO,IAAI,IAAI;iBACzB,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,yBAAyB,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YAC3F,CAAC;iBAAM,CAAC;gBACN,oCAAoC;gBACpC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAE3C,0FAA0F;YAC1F,IAAI,gBAAgB,IAAI,WAAW,EAAE,CAAC;gBACpC,IAAI,CAAC,SAAS;oBAAE,OAAO,cAAc,CAAC;gBAEtC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC1E,OAAO,MAAM,IAAA,wBAAW,EAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;YAED,oEAAoE;YACpE,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,yCAAyC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,IAAI,MAAkC,CAAC;oBACvC,MAAM,SAAS,GAAG,CAAC,KAAY,EAAE,EAAE;wBACjC,IAAI,MAAM,EAAE,CAAC;4BACX,YAAY,CAAC,MAAM,CAAC,CAAC;4BACrB,MAAM,GAAG,SAAS,CAAC;wBACrB,CAAC;wBACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;wBAClE,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC;oBACF,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAE,EAAE;wBAChC,IAAI,MAAM,EAAE,CAAC;4BACX,YAAY,CAAC,MAAM,CAAC,CAAC;4BACrB,MAAM,GAAG,SAAS,CAAC;wBACrB,CAAC;wBACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC5D,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC,CAAC;oBACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAEpC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;wBACvB,MAAM,GAAG,SAAS,CAAC;wBACnB,qEAAqE;wBACrE,IAAI,IAAI,CAAC,KAAK;4BAAE,OAAO,EAAE,CAAC;6BACrB,CAAC;4BACJ,gEAAgE;4BAChE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACxD,CAAC;4BACF,IAAI,GAAG,IAAI,CAAC;gCAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;4BAC1C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;4BACrD,MAAM,CAAC,IAAI,YAAY,CAAC,6BAA6B,CAAC,CAAC,CAAC;wBAC1D,CAAC;oBACH,CAAC,EAAE,SAAS,CAAC,CAAC;oBACd,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC5B,gFAAgF;gBAChF,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACpE,MAAM,cAAc,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACrD,MAAM,IAAI,YAAY,CAAC,0BAA0B,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,iBAAiB;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,GAAG;QACf,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,kCAAkC;YAClC,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uCAAuC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qBAAqB;YACrB,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;YAElC,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;gBACnE,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;gBAC7D,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,GAAG,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACnF,CAAC;YACD,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAChE,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACpD,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,qBAAqB;QACrB,IAAI,CAAC,qBAAqB,CAAC,IAAI,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;CACF;AA9XD,0CA8XC"}

package/dist/cjs/runtime/token/service_account.d.ts

@@ -0,0 +1,28 @@
+import type { SDKInterface } from '../../sdk';
+import type { Reader as ServiceAccountReader } from '../service_account/service_account';
+import { ServiceAccount } from '../service_account/service_account';
+import { Bearer, Receiver } from '../token';
+import { custom, customJson, Logger } from '../util/logging';
+export declare class ServiceAccountBearer extends Bearer {
+    [custom]: () => string;
+    readonly $type = "nebius.sdk.ServiceAccountBearer";
+    private _exchangeable;
+    private _source;
+    constructor(serviceAccount: ServiceAccountReader | ServiceAccount | string, opts?: {
+        sdk?: SDKInterface | Promise<SDKInterface> | null;
+        privateKeyPem?: string;
+        publicKeyId?: string;
+        maxRetries?: number;
+        lifetimeSafeFraction?: number;
+        initialRetryTimeoutMs?: number;
+        maxRetryTimeoutMs?: number;
+        retryTimeoutExponent?: number;
+        refreshRequestTimeoutMs?: number;
+        logger?: Logger;
+    });
+    [customJson](): unknown;
+    setSDK(sdk: SDKInterface | Promise<SDKInterface> | null): void;
+    get wrapped(): Bearer | undefined;
+    receiver(): Receiver;
+}
+//# sourceMappingURL=service_account.d.ts.map

package/dist/cjs/runtime/token/service_account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service_account.d.ts","sourceRoot":"","sources":["../../../../src/runtime/token/service_account.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,IAAI,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEpE,OAAO,EAAE,MAAM,EAAe,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAK1E,qBAAa,oBAAqB,SAAQ,MAAM;IAyF9C,CAAC,MAAM,CAAC,QAAI,MAAM;IAxFlB,SAAgB,KAAK,qCAAqC;IAC1D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,OAAO,CAAc;gBAG3B,cAAc,EAAE,oBAAoB,GAAG,cAAc,GAAG,MAAM,EAC9D,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAClD,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IA0EH,CAAC,UAAU,CAAC,IAAI,OAAO;IAOvB,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,GAAG,IAAI;IAI9D,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,QAAQ,IAAI,QAAQ;CAGrB"}

package/dist/cjs/runtime/token/service_account.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceAccountBearer = void 0;
+const util_1 = require("util");
+const service_account_1 = require("../service_account/service_account");
+const static_1 = require("../service_account/static");
+const token_1 = require("../token");
+const logging_1 = require("../util/logging");
+const exchangeable_1 = require("./exchangeable");
+const renewable_1 = require("./renewable");
+class ServiceAccountBearer extends token_1.Bearer {
+    $type = 'nebius.sdk.ServiceAccountBearer';
+    _exchangeable;
+    _source;
+    constructor(serviceAccount, opts) {
+        super();
+        let reader = null;
+        if (isServiceAccountReader(serviceAccount)) {
+            opts?.logger?.trace('using provided ServiceAccountReader, will name after first read');
+            reader = serviceAccount;
+            serviceAccount = serviceAccount.read();
+            opts?.logger?.trace('read ServiceAccount from ServiceAccountReader', {
+                serviceAccountId: serviceAccount.serviceAccountId,
+                publicKeyId: serviceAccount.publicKeyId,
+            });
+        }
+        if (typeof serviceAccount === 'string') {
+            opts?.logger?.trace('creating ServiceAccount from string');
+            if (typeof opts?.privateKeyPem !== 'string' || opts.privateKeyPem.trim() === '') {
+                throw new TypeError('Private key (PEM) must be provided when serviceAccount is a string');
+            }
+            if (typeof opts?.publicKeyId !== 'string' || opts.publicKeyId.trim() === '') {
+                throw new TypeError('Public key ID must be provided when serviceAccount is a string');
+            }
+            serviceAccount = new service_account_1.ServiceAccount(opts.privateKeyPem, opts.publicKeyId, serviceAccount);
+            opts?.logger?.trace('created ServiceAccount from string', {
+                serviceAccountId: serviceAccount.serviceAccountId,
+                publicKeyId: serviceAccount.publicKeyId,
+            });
+        }
+        else {
+            if (opts?.privateKeyPem !== undefined || opts?.publicKeyId !== undefined) {
+                throw new TypeError('privateKeyPem and publicKeyId must not be provided when serviceAccount is ServiceAccount or ServiceAccountReader');
+            }
+        }
+        if (!(serviceAccount instanceof service_account_1.ServiceAccount)) {
+            throw new TypeError(`serviceAccount must be ServiceAccountReader, ServiceAccount or string, got ${typeof serviceAccount}`);
+        }
+        if (!reader) {
+            opts?.logger?.trace('using ServiceAccount directly');
+            reader = new static_1.StaticReader(serviceAccount);
+        }
+        const saId = serviceAccount.serviceAccountId;
+        const publicKeyId = serviceAccount.publicKeyId;
+        const maxRetries = opts?.maxRetries ?? 2;
+        this._exchangeable = new exchangeable_1.ExchangeableBearer(reader, opts?.sdk ?? null, maxRetries, opts?.logger?.child('exchangeable'));
+        const renewable = new renewable_1.RenewableBearer(this._exchangeable, {
+            maxRetries,
+            lifetimeSafeFraction: opts?.lifetimeSafeFraction,
+            initialRetryTimeoutMs: opts?.initialRetryTimeoutMs,
+            maxRetryTimeoutMs: opts?.maxRetryTimeoutMs,
+            retryTimeoutExponent: opts?.retryTimeoutExponent,
+            refreshRequestTimeoutMs: opts?.refreshRequestTimeoutMs,
+            logger: opts?.logger?.child('renewable'),
+        });
+        this._source = new token_1.NamedBearer(renewable, `service-account/${saId}/${publicKeyId}`);
+    }
+    [logging_1.custom]() {
+        return `${this.$type}(${(0, util_1.inspect)(this._source)})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: this.$type,
+            source: (0, logging_1.inspectJson)(this._source),
+        };
+    }
+    setSDK(sdk) {
+        this._exchangeable.setSDK(sdk);
+    }
+    get wrapped() {
+        return this._source;
+    }
+    receiver() {
+        return this._source.receiver();
+    }
+}
+exports.ServiceAccountBearer = ServiceAccountBearer;
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function isServiceAccountReader(x) {
+    return (x &&
+        typeof x === 'object' &&
+        typeof x.read === 'function' &&
+        typeof x.getExchangeTokenRequest === 'function');
+}
+//# sourceMappingURL=service_account.js.map

package/dist/cjs/runtime/token/service_account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service_account.js","sourceRoot":"","sources":["../../../../src/runtime/token/service_account.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAI/B,wEAAoE;AACpE,sDAAyD;AACzD,oCAAyD;AACzD,6CAA0E;AAE1E,iDAAoD;AACpD,2CAA8C;AAE9C,MAAa,oBAAqB,SAAQ,cAAM;IAC9B,KAAK,GAAG,iCAAiC,CAAC;IAClD,aAAa,CAAqB;IAClC,OAAO,CAAc;IAE7B,YACE,cAA8D,EAC9D,IAWC;QAED,KAAK,EAAE,CAAC;QAER,IAAI,MAAM,GAAgC,IAAI,CAAC;QAC/C,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACvF,MAAM,GAAG,cAAc,CAAC;YACxB,cAAc,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,+CAA+C,EAAE;gBACnE,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;gBACjD,WAAW,EAAE,cAAc,CAAC,WAAW;aACxC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAChF,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5E,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;YACxF,CAAC;YACD,cAAc,GAAG,IAAI,gCAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YAC1F,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,oCAAoC,EAAE;gBACxD,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;gBACjD,WAAW,EAAE,cAAc,CAAC,WAAW;aACxC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;gBACzE,MAAM,IAAI,SAAS,CACjB,kHAAkH,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,cAAc,YAAY,gCAAc,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,SAAS,CACjB,8EAA8E,OAAO,cAAc,EAAE,CACtG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACrD,MAAM,GAAG,IAAI,qBAAY,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC;QAC7C,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;QAE/C,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAkB,CACzC,MAAM,EACN,IAAI,EAAE,GAAG,IAAI,IAAI,EACjB,UAAU,EACV,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CACpC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,2BAAe,CAAC,IAAI,CAAC,aAAa,EAAE;YACxD,UAAU;YACV,oBAAoB,EAAE,IAAI,EAAE,oBAAoB;YAChD,qBAAqB,EAAE,IAAI,EAAE,qBAAqB;YAClD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB;YAC1C,oBAAoB,EAAE,IAAI,EAAE,oBAAoB;YAChD,uBAAuB,EAAE,IAAI,EAAE,uBAAuB;YACtD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;SACzC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAW,CAAC,SAAS,EAAE,mBAAmB,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,CAAC,gBAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACnD,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,OAAO,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAgD;QACrD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF;AA9GD,oDA8GC;AAED,8DAA8D;AAC9D,SAAS,sBAAsB,CAAC,CAAM;IACpC,OAAO,CACL,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU;QAC5B,OAAO,CAAC,CAAC,uBAAuB,KAAK,UAAU,CAChD,CAAC;AACJ,CAAC"}

package/dist/cjs/runtime/token/static.d.ts

@@ -0,0 +1,17 @@
+import { Bearer, Receiver, Token } from '../token';
+import { custom, customJson } from '../util/logging';
+export declare class NoTokenInEnvError extends Error {
+}
+export declare class StaticBearer extends Bearer {
+    [custom]: () => string;
+    readonly $type: string;
+    private _tok;
+    constructor(token: Token | string);
+    [customJson](): unknown;
+    receiver(): Receiver;
+}
+export declare class EnvBearer extends StaticBearer {
+    readonly $type = "nebius.sdk.EnvBearer";
+    constructor(envVarName?: string);
+}
+//# sourceMappingURL=static.d.ts.map

package/dist/cjs/runtime/token/static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../../../../src/runtime/token/static.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAe,MAAM,iBAAiB,CAAC;AAElE,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAgC/C,qBAAa,YAAa,SAAQ,MAAM;IAQtC,CAAC,MAAM,CAAC,QAAI,MAAM;IAPlB,SAAgB,KAAK,EAAE,MAAM,CAA6B;IAC1D,OAAO,CAAC,IAAI,CAAQ;gBACR,KAAK,EAAE,KAAK,GAAG,MAAM;IAQjC,CAAC,UAAU,CAAC,IAAI,OAAO;IAOvB,QAAQ,IAAI,QAAQ;CAGrB;AAED,qBAAa,SAAU,SAAQ,YAAY;IACzC,SAAgB,KAAK,0BAA0B;gBACnC,UAAU,GAAE,MAAuB;CAKhD"}