@ontemper/sdk 0.7.1-postgresql.5 → 0.8.0

package/dist/ExpiringMap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ExpiringMap.js","sourceRoot":"","sources":["../src/ExpiringMap.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAS9G,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IAKH,UAAU;IACV,eAAe;IALjB,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,WAAW,GAAG,CAAC,CAAC;IAExB,YACmB,UAAkB,EAClB,eAAe,GAAG,yBAAyB;0BAD3C,UAAU;+BACV,eAAe;IAC/B,CAAC;IAEJ,GAAG,CAAC,GAAW,EAAE,GAAW;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,SAAS,CAAC;QAC7C,4GAA4G;QAC5G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,+GAA+G;IAC/G,IAAI,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IACtC,CAAC;IAED,oHAAoH;IACpH,MAAM,CAAC,GAAW,EAAE,KAAa,EAAE,GAAW;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO;QACzE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,6GAA6G;IAC7G,GAAG,CAAC,GAAW,EAAE,KAAQ,EAAE,SAAiB,EAAE,GAAW,EAAE,SAAS,GAAG,SAAS;QAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,kFAAkF;IAC1E,iBAAiB,CAAC,GAAW;QACnC,IAAI,kBAAsC,CAAC;QAC3C,IAAI,KAAyB,CAAC;QAC9B,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC7C,KAAK,KAAK,SAAS,CAAC;YACpB,IAAI,kBAAkB,KAAK,SAAS,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS;gBAAE,kBAAkB,GAAG,SAAS,CAAC;QAChG,CAAC;QACD,OAAO,kBAAkB,IAAI,KAAK,CAAC;IACrC,CAAC;CACF"}

package/dist/Kafka.d.ts

@@ -1,89 +0,0 @@
-import type { KafkaResource } from './ResourceRecords.js';
-export declare class OptionalKafkaDependencyError extends Error {
-    constructor(packageName: string);
-}
-export declare class UnsupportedKafkaAuthError extends Error {
-    constructor(field: string);
-}
-type MskToken = {
-    token: string;
-    expiryTime: number;
-};
-type MskSigner = {
-    generateAuthToken(options: {
-        region: string;
-    }): Promise<MskToken>;
-    generateAuthTokenFromCredentialsProvider(options: {
-        region: string;
-        awsCredentialsProvider: () => Promise<{
-            accessKeyId: string;
-            secretAccessKey: string;
-            sessionToken?: string;
-        }>;
-    }): Promise<MskToken>;
-};
-type AwsCredentialsProvider = () => Promise<{
-    accessKeyId: string;
-    secretAccessKey: string;
-    sessionToken?: string;
-    expiration?: Date;
-}>;
-type CredentialProviders = {
-    fromTemporaryCredentials(options: {
-        params: {
-            RoleArn: string;
-            RoleSessionName: string;
-            ExternalId?: string;
-        };
-        clientConfig?: {
-            region: string;
-        };
-    }): AwsCredentialsProvider;
-};
-export interface KafkaConfigOptions {
-    readonly fetch?: typeof fetch;
-    readonly now?: () => number;
-    readonly loadMskSigner?: () => Promise<MskSigner>;
-    readonly loadCredentialProviders?: () => Promise<CredentialProviders>;
-}
-/** TLS options for `ssl`; structurally a subset of Node `tls.ConnectionOptions`. */
-export interface KafkaClientTlsOptions {
-    ca?: string;
-    cert?: string;
-    key?: string;
-    passphrase?: string;
-    servername?: string;
-}
-/** SASL options for `sasl`; each variant is assignable to the matching KafkaJS `SASLOptions` variant. */
-export type KafkaClientSasl = {
-    mechanism: 'plain';
-    username: string;
-    password: string;
-} | {
-    mechanism: 'scram-sha-256';
-    username: string;
-    password: string;
-} | {
-    mechanism: 'scram-sha-512';
-    username: string;
-    password: string;
-} | {
-    mechanism: 'oauthbearer';
-    oauthBearerProvider: () => Promise<{
-        value: string;
-    }>;
-};
-/**
- * The options `kafkaConfig` returns, assignable to KafkaJS `KafkaConfig`.
- * SDK-owned, so the published declarations do not import `kafkajs` for consumers that do not install it.
- */
-export interface KafkaClientConfig {
-    brokers: string[];
-    clientId?: string;
-    ssl?: boolean | KafkaClientTlsOptions;
-    sasl?: KafkaClientSasl;
-}
-/** Maps a resolved Kafka record to the options accepted by `new Kafka(...)`. */
-export declare function kafkaConfig(resource: KafkaResource, options?: KafkaConfigOptions): KafkaClientConfig;
-export {};
-//# sourceMappingURL=Kafka.d.ts.map

package/dist/Kafka.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Kafka.d.ts","sourceRoot":"","sources":["../src/Kafka.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,WAAW,EAAE,MAAM,EAG9B;CACF;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,KAAK,EAAE,MAAM,EAGxB;CACF;AAGD,KAAK,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AACtD,KAAK,SAAS,GAAG;IACf,iBAAiB,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,wCAAwC,CAAC,OAAO,EAAE;QAChD,MAAM,EAAE,MAAM,CAAC;QACf,sBAAsB,EAAE,MAAM,OAAO,CAAC;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAChH,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvB,CAAC;AACF,KAAK,sBAAsB,GAAG,MAAM,OAAO,CAAC;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB,CAAC,CAAC;AACH,KAAK,mBAAmB,GAAG;IACzB,wBAAwB,CAAC,OAAO,EAAE;QAChC,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1E,YAAY,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;KACnC,GAAG,sBAAsB,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACvE;AAED,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yGAAyG;AACzG,MAAM,MAAM,eAAe,GACvB;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,SAAS,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,SAAS,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,SAAS,EAAE,aAAa,CAAC;IAAC,mBAAmB,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAExF;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,GAAG,qBAAqB,CAAC;IACtC,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AA4PD,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,GAAE,kBAAuB,GAAG,iBAAiB,CAwCxG"}

package/dist/Kafka.js

@@ -1,297 +0,0 @@
-import { constants, createPrivateKey, createSign, randomUUID } from 'node:crypto';
-import { Option, Redacted, Schema } from 'effect';
-export class OptionalKafkaDependencyError extends Error {
-    constructor(packageName) {
-        super(`Kafka authentication requires the optional package ${packageName}.`);
-        this.name = 'OptionalKafkaDependencyError';
-    }
-}
-export class UnsupportedKafkaAuthError extends Error {
-    constructor(field) {
-        super(`Kafka record uses an unsupported ${field}. Upgrade @ontemper/sdk to support it.`);
-        this.name = 'UnsupportedKafkaAuthError';
-    }
-}
-// STS credentials are reused until this long before they expire.
-const ASSUMED_ROLE_REFRESH_MARGIN_MS = 60_000;
-const OAUTH_TOKEN_REQUEST_TIMEOUT_MS = 15_000;
-const base64Url = (value) => Buffer.from(value).toString('base64url');
-const formEncode = (value) => encodeURIComponent(value).replace(/%20/g, '+');
-function privateKeyAssertion(tokenRequest, now) {
-    const clientAuthentication = tokenRequest.clientAuthentication;
-    if (clientAuthentication.type !== 'private_key_jwt') {
-        throw new UnsupportedKafkaAuthError('auth.tokenRequest.clientAuthentication');
-    }
-    const header = {
-        alg: clientAuthentication.algorithm,
-        typ: 'JWT',
-    };
-    if (clientAuthentication.keyId !== undefined) {
-        header.kid = clientAuthentication.keyId;
-    }
-    const issuedAt = Math.floor(now / 1000);
-    const claims = {
-        iss: tokenRequest.clientId,
-        sub: tokenRequest.clientId,
-        aud: tokenRequest.tokenUrl,
-        exp: issuedAt + 60,
-        iat: issuedAt,
-        jti: randomUUID(),
-    };
-    const signed = `${base64Url(JSON.stringify(header))}.${base64Url(JSON.stringify(claims))}`;
-    const signature = createSign('SHA256');
-    signature.update(signed);
-    signature.end();
-    const value = clientAuthentication.algorithm === 'ES256'
-        ? signature.sign({ key: Redacted.value(clientAuthentication.privateKey), dsaEncoding: 'ieee-p1363' })
-        : clientAuthentication.algorithm === 'PS256'
-            ? signature.sign({
-                key: Redacted.value(clientAuthentication.privateKey),
-                padding: constants.RSA_PKCS1_PSS_PADDING,
-                saltLength: constants.RSA_PSS_SALTLEN_DIGEST,
-            })
-            : signature.sign(Redacted.value(clientAuthentication.privateKey));
-    return `${signed}.${base64Url(value)}`;
-}
-function oauthBearerProvider(tokenRequest, options) {
-    const fetchImpl = options.fetch ?? globalThis.fetch;
-    const now = options.now ?? Date.now;
-    let cached;
-    // Concurrent broker authentications share one in-flight token request.
-    let pendingFetch = null;
-    const fetchToken = async () => {
-        const clientAuthentication = tokenRequest.clientAuthentication;
-        if (!['none', 'basic', 'body', 'query', 'private_key_jwt'].includes(clientAuthentication.type)) {
-            throw new UnsupportedKafkaAuthError('auth.tokenRequest.clientAuthentication');
-        }
-        const parameters = new URLSearchParams({ ...tokenRequest.extraParams, grant_type: 'client_credentials' });
-        if (tokenRequest.scope !== undefined)
-            parameters.set('scope', tokenRequest.scope);
-        if (tokenRequest.audience !== undefined)
-            parameters.set('audience', tokenRequest.audience);
-        const headers = {};
-        const tokenUrl = new URL(tokenRequest.tokenUrl);
-        switch (clientAuthentication.type) {
-            case 'none':
-                parameters.set('client_id', tokenRequest.clientId);
-                break;
-            case 'basic':
-                headers.Authorization = `Basic ${Buffer.from(`${formEncode(tokenRequest.clientId)}:${formEncode(Redacted.value(clientAuthentication.clientSecret))}`).toString('base64')}`;
-                break;
-            case 'body':
-                parameters.set('client_id', tokenRequest.clientId);
-                parameters.set('client_secret', Redacted.value(clientAuthentication.clientSecret));
-                break;
-            case 'query':
-                tokenUrl.searchParams.set('client_id', tokenRequest.clientId);
-                tokenUrl.searchParams.set('client_secret', Redacted.value(clientAuthentication.clientSecret));
-                break;
-            case 'private_key_jwt':
-                parameters.set('client_id', tokenRequest.clientId);
-                parameters.set('client_assertion_type', 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer');
-                parameters.set('client_assertion', privateKeyAssertion(tokenRequest, now()));
-                break;
-        }
-        const isJson = tokenRequest.tokenRequestFormat === 'json';
-        headers['Content-Type'] = isJson ? 'application/json' : 'application/x-www-form-urlencoded';
-        const response = await fetchImpl(tokenUrl, {
-            method: 'POST',
-            headers,
-            body: isJson ? JSON.stringify(Object.fromEntries(parameters)) : parameters,
-            redirect: 'error',
-            signal: AbortSignal.timeout(OAUTH_TOKEN_REQUEST_TIMEOUT_MS),
-        });
-        if (!response.ok)
-            throw new Error(`OAuth token request failed with status ${response.status}.`);
-        const body = await response.json();
-        const parsed = decodeTokenResponse(body);
-        if (Option.isNone(parsed))
-            throw new Error('OAuth token response did not include an access token.');
-        const accessToken = parsed.value.access_token;
-        const expiresIn = Option.getOrUndefined(decodeExpiresIn(parsed.value.expires_in));
-        // Without a stated lifetime the token's expiry is unknown, so each authentication requests a fresh one.
-        cached =
-            expiresIn === undefined
-                ? undefined
-                : { value: accessToken, expiresAt: now() + Math.max(0, expiresIn - 30) * 1000 };
-        return { value: accessToken };
-    };
-    return () => {
-        if (cached !== undefined && cached.expiresAt > now())
-            return Promise.resolve({ value: cached.value });
-        if (pendingFetch !== null)
-            return pendingFetch;
-        const request = (async () => {
-            try {
-                return await fetchToken();
-            }
-            finally {
-                pendingFetch = null;
-            }
-        })();
-        pendingFetch = request;
-        return request;
-    };
-}
-const decodeTokenResponse = Schema.decodeUnknownOption(Schema.Struct({
-    access_token: Schema.String.check(Schema.isMinLength(1)),
-    expires_in: Schema.optionalKey(Schema.Unknown),
-}));
-// A missing, non-numeric, or non-positive expires_in reads as absent, so the token is not cached.
-const decodeExpiresIn = Schema.decodeUnknownOption(Schema.Finite.check(Schema.isGreaterThan(0)));
-function mskOAuthBearerProvider(resource, options) {
-    const auth = resource.auth;
-    if (auth.type !== 'aws_msk_iam')
-        throw new UnsupportedKafkaAuthError('auth.type');
-    const loadMskSigner = options.loadMskSigner ??
-        (async () => {
-            // The optional peer is absent in workflows that do not use MSK IAM, so loading it must remain lazy.
-            try {
-                return await import('aws-msk-iam-sasl-signer-js');
-            }
-            catch (error) {
-                if (error instanceof Error && 'code' in error && error.code === 'ERR_MODULE_NOT_FOUND') {
-                    throw new OptionalKafkaDependencyError('aws-msk-iam-sasl-signer-js');
-                }
-                throw error;
-            }
-        });
-    const loadCredentialProviders = options.loadCredentialProviders ??
-        (async () => {
-            // The optional peer is loaded only when a record asks the client to assume an AWS role.
-            try {
-                return await import('@aws-sdk/credential-providers');
-            }
-            catch (error) {
-                if (error instanceof Error && 'code' in error && error.code === 'ERR_MODULE_NOT_FOUND') {
-                    throw new OptionalKafkaDependencyError('@aws-sdk/credential-providers');
-                }
-                throw error;
-            }
-        });
-    const now = options.now ?? Date.now;
-    // One STS provider per config, and its credentials reused until shortly before expiry, so each broker
-    // authentication does not send its own AssumeRole call.
-    let assumeRoleProvider;
-    let assumedCredentials;
-    const loadAssumeRoleProvider = async (params) => {
-        try {
-            return (await loadCredentialProviders()).fromTemporaryCredentials({
-                params,
-                clientConfig: { region: auth.region },
-            });
-        }
-        catch (error) {
-            // A failed load is retried on the next authentication instead of caching the rejection.
-            assumeRoleProvider = undefined;
-            throw error;
-        }
-    };
-    const assumedRoleCredentials = async (params) => {
-        if (assumedCredentials !== undefined && assumedCredentials.refreshAt > now())
-            return assumedCredentials.credentials;
-        assumeRoleProvider ??= loadAssumeRoleProvider(params);
-        const { expiration, ...credentials } = await (await assumeRoleProvider)();
-        assumedCredentials =
-            expiration === undefined
-                ? undefined
-                : { credentials, refreshAt: expiration.getTime() - ASSUMED_ROLE_REFRESH_MARGIN_MS };
-        return credentials;
-    };
-    return async () => {
-        const signer = await loadMskSigner();
-        const awsAuth = auth.awsAuth;
-        if (!['access_key', 'assume_role', 'ambient'].includes(awsAuth.type)) {
-            throw new UnsupportedKafkaAuthError('auth.awsAuth');
-        }
-        const token = awsAuth.type === 'access_key'
-            ? await signer.generateAuthTokenFromCredentialsProvider({
-                region: auth.region,
-                awsCredentialsProvider: async () => {
-                    const creds = {
-                        accessKeyId: awsAuth.accessKeyId,
-                        secretAccessKey: Redacted.value(awsAuth.secretAccessKey),
-                    };
-                    if (awsAuth.sessionToken !== undefined)
-                        creds.sessionToken = Redacted.value(awsAuth.sessionToken);
-                    return creds;
-                },
-            })
-            : awsAuth.type === 'assume_role'
-                ? await signer.generateAuthTokenFromCredentialsProvider({
-                    region: auth.region,
-                    awsCredentialsProvider: () => {
-                        const params = { RoleArn: awsAuth.roleArn, RoleSessionName: 'temper-kafka' };
-                        if (awsAuth.externalId !== undefined)
-                            params.ExternalId = awsAuth.externalId;
-                        return assumedRoleCredentials(params);
-                    },
-                })
-                : await signer.generateAuthToken({ region: auth.region });
-        return { value: token.token };
-    };
-}
-// A bad endpoint or key would otherwise surface only at the first broker authentication, deep inside KafkaJS.
-function assertTokenRequestUsable(tokenRequest) {
-    const tokenUrl = URL.canParse(tokenRequest.tokenUrl) ? new URL(tokenRequest.tokenUrl) : undefined;
-    if (tokenUrl?.protocol !== 'https:') {
-        throw new Error('Kafka OAuth auth.tokenRequest.tokenUrl must be an https URL.');
-    }
-    const clientAuthentication = tokenRequest.clientAuthentication;
-    if (clientAuthentication.type !== 'private_key_jwt')
-        return;
-    try {
-        createPrivateKey(Redacted.value(clientAuthentication.privateKey));
-    }
-    catch {
-        throw new Error('Kafka OAuth auth.tokenRequest.clientAuthentication.privateKey is not a valid PEM private key.');
-    }
-}
-/** Maps a resolved Kafka record to the options accepted by `new Kafka(...)`. */
-export function kafkaConfig(resource, options = {}) {
-    if (resource.brokers.some((broker) => broker.startsWith('['))) {
-        throw new Error('KafkaJS does not support bracketed IPv6 bootstrap broker addresses; configure a hostname or IPv4 address.');
-    }
-    let ssl;
-    if (resource.tls !== undefined) {
-        const tlsOptions = {};
-        if (resource.tls.caCertificate !== undefined)
-            tlsOptions.ca = resource.tls.caCertificate;
-        if (resource.tls.clientCertificate !== undefined)
-            tlsOptions.cert = resource.tls.clientCertificate;
-        if (resource.tls.clientKey !== undefined)
-            tlsOptions.key = Redacted.value(resource.tls.clientKey);
-        if (resource.tls.clientKeyPassphrase !== undefined) {
-            tlsOptions.passphrase = Redacted.value(resource.tls.clientKeyPassphrase);
-        }
-        if (resource.tls.serverName !== undefined)
-            tlsOptions.servername = resource.tls.serverName;
-        ssl = Object.keys(tlsOptions).length === 0 ? true : tlsOptions;
-    }
-    const auth = resource.auth;
-    if (!['none', 'sasl_plain', 'sasl_scram', 'oauthbearer', 'aws_msk_iam'].includes(auth.type)) {
-        throw new UnsupportedKafkaAuthError('auth.type');
-    }
-    if (auth.type === 'oauthbearer')
-        assertTokenRequestUsable(auth.tokenRequest);
-    const sasl = auth.type === 'none'
-        ? undefined
-        : auth.type === 'sasl_plain'
-            ? { mechanism: 'plain', username: auth.username, password: Redacted.value(auth.password) }
-            : auth.type === 'sasl_scram'
-                ? auth.mechanism === 'SCRAM-SHA-256'
-                    ? { mechanism: 'scram-sha-256', username: auth.username, password: Redacted.value(auth.password) }
-                    : { mechanism: 'scram-sha-512', username: auth.username, password: Redacted.value(auth.password) }
-                : auth.type === 'oauthbearer'
-                    ? { mechanism: 'oauthbearer', oauthBearerProvider: oauthBearerProvider(auth.tokenRequest, options) }
-                    : { mechanism: 'oauthbearer', oauthBearerProvider: mskOAuthBearerProvider(resource, options) };
-    const config = { brokers: [...resource.brokers] };
-    if (resource.clientId !== undefined)
-        config.clientId = resource.clientId;
-    if (ssl !== undefined)
-        config.ssl = ssl;
-    if (sasl !== undefined)
-        config.sasl = sasl;
-    return config;
-}
-//# sourceMappingURL=Kafka.js.map

package/dist/Kafka.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Kafka.js","sourceRoot":"","sources":["../src/Kafka.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGlD,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,WAAmB;QAC7B,KAAK,CAAC,sDAAsD,WAAW,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,KAAa;QACvB,KAAK,CAAC,oCAAoC,KAAK,wCAAwC,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AA2DD,iEAAiE;AACjE,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAC9C,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAiB9C,MAAM,SAAS,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACvF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAErF,SAAS,mBAAmB,CAAC,YAA0B,EAAE,GAAW;IAClE,MAAM,oBAAoB,GAAG,YAAY,CAAC,oBAAoB,CAAC;IAC/D,IAAI,oBAAoB,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpD,MAAM,IAAI,yBAAyB,CAAC,wCAAwC,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAc;QACxB,GAAG,EAAE,oBAAoB,CAAC,SAAS;QACnC,GAAG,EAAE,KAAK;KACX,CAAC;IACF,IAAI,oBAAoB,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC;IAC1C,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,YAAY,CAAC,QAAQ;QAC1B,GAAG,EAAE,YAAY,CAAC,QAAQ;QAC1B,GAAG,EAAE,YAAY,CAAC,QAAQ;QAC1B,GAAG,EAAE,QAAQ,GAAG,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,UAAU,EAAE;KAClB,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,SAAS,CAAC,GAAG,EAAE,CAAC;IAChB,MAAM,KAAK,GACT,oBAAoB,CAAC,SAAS,KAAK,OAAO;QACxC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QACrG,CAAC,CAAC,oBAAoB,CAAC,SAAS,KAAK,OAAO;YAC1C,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC;gBACpD,OAAO,EAAE,SAAS,CAAC,qBAAqB;gBACxC,UAAU,EAAE,SAAS,CAAC,sBAAsB;aAC7C,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,YAA0B,EAAE,OAA2B;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,IAAI,MAAwD,CAAC;IAC7D,uEAAuE;IACvE,IAAI,YAAY,GAAsC,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,KAAK,IAAgC,EAAE;QACxD,MAAM,oBAAoB,GAAG,YAAY,CAAC,oBAAoB,CAAC;QAC/D,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,yBAAyB,CAAC,wCAAwC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC1G,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAClF,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3F,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,QAAQ,oBAAoB,CAAC,IAAI,EAAE,CAAC;YAClC,KAAK,MAAM;gBACT,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACnD,MAAM;YACR,KAAK,OAAO;gBACV,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAC1C,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,EAAE,CACxG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvB,MAAM;YACR,KAAK,MAAM;gBACT,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACnD,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnF,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC9D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC9F,MAAM;YACR,KAAK,iBAAiB;gBACpB,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACnD,UAAU,CAAC,GAAG,CAAC,uBAAuB,EAAE,wDAAwD,CAAC,CAAC;gBAClG,UAAU,CAAC,GAAG,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7E,MAAM;QACV,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,KAAK,MAAM,CAAC;QAC1D,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mCAAmC,CAAC;QAC5F,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,8BAA8B,CAAC;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAChG,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACpG,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAClF,wGAAwG;QACxG,MAAM;YACJ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;QACpF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,OAAO,GAAG,EAAE;QACV,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACtG,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,OAAO,MAAM,UAAU,EAAE,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,YAAY,GAAG,OAAO,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CACpD,MAAM,CAAC,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;CAC/C,CAAC,CACH,CAAC;AACF,kGAAkG;AAClG,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjG,SAAS,sBAAsB,CAAC,QAAuB,EAAE,OAA2B;IAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAClF,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa;QACrB,CAAC,KAAK,IAAI,EAAE;YACV,oGAAoG;YACpG,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACvF,MAAM,IAAI,4BAA4B,CAAC,4BAA4B,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,MAAM,uBAAuB,GAC3B,OAAO,CAAC,uBAAuB;QAC/B,CAAC,KAAK,IAAI,EAAE;YACV,wFAAwF;YACxF,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACvF,MAAM,IAAI,4BAA4B,CAAC,+BAA+B,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,sGAAsG;IACtG,wDAAwD;IACxD,IAAI,kBAA+D,CAAC;IACpE,IAAI,kBAAkF,CAAC;IACvF,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAqB,EAAmC,EAAE;QAC9F,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAC,wBAAwB,CAAC;gBAChE,MAAM;gBACN,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wFAAwF;YACxF,kBAAkB,GAAG,SAAS,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAqB,EAA2B,EAAE;QACtF,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,SAAS,GAAG,GAAG,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,CAAC;QACpH,kBAAkB,KAAK,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,MAAM,kBAAkB,CAAC,EAAE,CAAC;QAC1E,kBAAkB;YAChB,UAAU,KAAK,SAAS;gBACtB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,8BAA8B,EAAE,CAAC;QACxF,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,GACT,OAAO,CAAC,IAAI,KAAK,YAAY;YAC3B,CAAC,CAAC,MAAM,MAAM,CAAC,wCAAwC,CAAC;gBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,sBAAsB,EAAE,KAAK,IAAI,EAAE;oBACjC,MAAM,KAAK,GAAmB;wBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;qBACzD,CAAC;oBACF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;wBAAE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBAClG,OAAO,KAAK,CAAC;gBACf,CAAC;aACF,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;gBAC9B,CAAC,CAAC,MAAM,MAAM,CAAC,wCAAwC,CAAC;oBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,sBAAsB,EAAE,GAAG,EAAE;wBAC3B,MAAM,MAAM,GAAkB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;wBAC5F,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;4BAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;wBAC7E,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;oBACxC,CAAC;iBACF,CAAC;gBACJ,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC;AACJ,CAAC;AAED,8GAA8G;AAC9G,SAAS,wBAAwB,CAAC,YAA0B;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,oBAAoB,GAAG,YAAY,CAAC,oBAAoB,CAAC;IAC/D,IAAI,oBAAoB,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO;IAC5D,IAAI,CAAC;QACH,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,QAAuB,EAAE,OAAO,GAAuB,EAAE;IACnF,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,GAA6B,CAAC;IAClC,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,UAAU,GAA0B,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS;YAAE,UAAU,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;QACzF,IAAI,QAAQ,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACnG,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClG,IAAI,QAAQ,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACnD,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3F,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,KAAK,MAAM;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC1F,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY;gBAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,eAAe;oBAClC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAClG,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACpG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;oBAC3B,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE;oBACpG,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;IACzG,MAAM,MAAM,GAAsB,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACrE,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACzE,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/PostgreSql.d.ts

@@ -1,24 +0,0 @@
-/**
- * PostgreSQL Resource pools, exported from `@temper/workflow/resources`. A pool needs the `pg` package, and a
- * builder's tunnel to a Temper-managed database needs `ws`; both load only when a pool is built.
- */
-import { Effect, type Scope } from 'effect';
-import type pg from 'pg';
-import type { InvalidResourceError } from './ResourcesErrors.js';
-import { type ReadError } from './RuntimeResources.js';
-export { PostgresqlResource } from './PostgreSqlPool.js';
-/** What opening a pool can fail with; a rejected tunnel fails each connection instead, never the open. */
-export type PostgresqlPoolError = ReadError | InvalidResourceError;
-/**
- * The pool for the PostgreSQL Resource `key`, ended when the scope closes; a client still checked out after 15 s
- * is left open and logged. Native TCP, except in a builder (`TEMPER_DATABASE_TUNNEL=websocket`) for a
- * Temper-managed database, which goes through the Resources tunnel.
- */
-export declare const makePostgresqlPool: (key: string) => Effect.Effect<pg.Pool, PostgresqlPoolError, Scope.Scope>;
-/**
- * Resolves a PostgreSQL Resource and selects its runtime transport without opening a connection; the caller ends
- * the pool. Rejects with the SDK's Resource errors: `ResourceNotFoundError` only when no record answers the key,
- * and `InvalidResourceError` for a found record that cannot serve, such as one whose password Variable is missing.
- */
-export declare function createPostgresqlPool(key: string): Promise<pg.Pool>;
-//# sourceMappingURL=PostgreSql.d.ts.map

package/dist/PostgreSql.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostgreSql.d.ts","sourceRoot":"","sources":["../src/PostgreSql.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAA2C,MAAM,EAAuB,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE1G,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAIzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,0GAA0G;AAC1G,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAqCnE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAS,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAC7C,CAAC;AAS5D;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAIxE"}

package/dist/PostgreSql.js

@@ -1,55 +0,0 @@
-/**
- * PostgreSQL Resource pools, exported from `@temper/workflow/resources`. A pool needs the `pg` package, and a
- * builder's tunnel to a Temper-managed database needs `ws`; both load only when a pool is built.
- */
-import { Cause, Config, ConfigProvider, Duration, Effect, Exit, Layer, Option } from 'effect';
-import { FetchHttpClient, HttpClient } from 'effect/http';
-import { databaseTunnelUrl } from './DatabaseTunnelAuthorization.js';
-import { loggerLayer, writeStdoutLine } from './Logger.js';
-import { endPool, makeResourcePool, tunnelEnabled } from './PostgreSqlPool.js';
-import { makeRuntimeResourceClient } from './RuntimeResources.js';
-export { PostgresqlResource } from './PostgreSqlPool.js';
-// A token in its refresh window waits for the provider's next publish. pg's connect timeout is 10 s, so the wait
-// ends with the connection attempt instead of holding the process open.
-const TUNNEL_AUTHORIZATION_TIMEOUT = Duration.seconds(10);
-const open = (rawKey) => Effect.gen(function* () {
-    const key = rawKey.trim();
-    // A workflow's own HttpClient when there is one; resolver calls disable its tracing either way.
-    const httpClient = yield* Effect.serviceOption(HttpClient.HttpClient);
-    const client = yield* makeRuntimeResourceClient.pipe(Option.isSome(httpClient)
-        ? Effect.provideService(HttpClient.HttpClient, httpClient.value)
-        : Effect.provide(FetchHttpClient.layer));
-    const tunnel = tunnelEnabled(yield* Config.option(Config.String('TEMPER_DATABASE_TUNNEL')).pipe(Effect.orElseSucceed(() => Option.none())));
-    const context = yield* Effect.context();
-    return yield* makeResourcePool(key, {
-        resolve: client.resolve,
-        inspect: client.inspect,
-        authorizeTunnel: tunnel
-            ? (tunnelKey) => Effect.runPromiseWith(context)(Effect.all({ url: databaseTunnelUrl(tunnelKey), token: client.tunnelToken }).pipe(Effect.timeoutOrElse({
-                duration: TUNNEL_AUTHORIZATION_TIMEOUT,
-                orElse: () => Effect.fail(new Error('No runtime token for the database tunnel within 10 s.')),
-            })))
-            : undefined,
-    });
-});
-/**
- * The pool for the PostgreSQL Resource `key`, ended when the scope closes; a client still checked out after 15 s
- * is left open and logged. Native TCP, except in a builder (`TEMPER_DATABASE_TUNNEL=websocket`) for a
- * Temper-managed database, which goes through the Resources tunnel.
- */
-export const makePostgresqlPool = (key) => Effect.acquireRelease(open(key), (pool) => endPool(pool));
-// Outside a workflow the pool logs through the SDK line logger on stdout and reads the live environment, as
-// `workflow()` does; Effect's default provider keeps a copy taken on first use.
-const standalone = loggerLayer(writeStdoutLine).pipe(Layer.orDie, Layer.provideMerge(ConfigProvider.layer(ConfigProvider.fromEnvRecord(process.env, { preserveEmptyStrings: true }))));
-/**
- * Resolves a PostgreSQL Resource and selects its runtime transport without opening a connection; the caller ends
- * the pool. Rejects with the SDK's Resource errors: `ResourceNotFoundError` only when no record answers the key,
- * and `InvalidResourceError` for a found record that cannot serve, such as one whose password Variable is missing.
- */
-export async function createPostgresqlPool(key) {
-    const exit = await Effect.runPromiseExit(open(key).pipe(Effect.provide(standalone)));
-    if (Exit.isSuccess(exit))
-        return exit.value;
-    throw Cause.squash(exit.cause);
-}
-//# sourceMappingURL=PostgreSql.js.map

package/dist/PostgreSql.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostgreSql.js","sourceRoot":"","sources":["../src/PostgreSql.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE/E,OAAO,EAAE,yBAAyB,EAAkB,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAKzD,iHAAiH;AACjH,wEAAwE;AACxE,MAAM,4BAA4B,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAE1D,MAAM,IAAI,GAAG,CAAC,MAAc,EAA+C,EAAE,CAC3E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1B,gGAAgG;IAChG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAC1C,CAAC;IACF,MAAM,MAAM,GAAG,aAAa,CAC1B,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAC9G,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAS,CAAC;IAC/C,OAAO,KAAK,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE;QAClC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,eAAe,EAAE,MAAM;YACrB,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CACZ,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAC5B,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,aAAa,CAAC;gBACnB,QAAQ,EAAE,4BAA4B;gBACtC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;aAC9F,CAAC,CACH,CACF;YACL,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAA4D,EAAE,CAC1G,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAE5D,4GAA4G;AAC5G,gFAAgF;AAChF,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,IAAI,CAClD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CACpH,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW;IACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAC5C,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/dist/PostgreSqlPool.d.ts

@@ -1,32 +0,0 @@
-import { type Duration, Effect, Option, Schema } from 'effect';
-import type pg from 'pg';
-import { InvalidResourceError } from './ResourcesErrors.js';
-import type { InspectedResource, ReadError } from './RuntimeResources.js';
-export { PostgresqlResource } from './ResourceRecords.js';
-/** Where a pool reads its Resource: the runtime API in a workflow, fixed answers in tests. */
-export interface ResourceSource {
-    readonly resolve: (key: string) => Effect.Effect<Schema.Json, ReadError | InvalidResourceError>;
-    /** The only read whose 404 means that no record answers the key. */
-    readonly inspect: (key: string) => Effect.Effect<Pick<InspectedResource, 'metadata'>, ReadError>;
-    /** Set only in builders (`TEMPER_DATABASE_TUNNEL=websocket`); never cache what it returns. */
-    readonly authorizeTunnel?: ((key: string) => Promise<{
-        readonly url: string;
-        readonly token: string;
-    }>) | undefined;
-}
-/**
- * Inspects, then resolves the Resource and builds an unconnected pool. `ResourceNotFoundError` means only that no
- * record answers the key. Warnings go through the caller's logger and secret masks, as do the password's masks.
- */
-export declare const makeResourcePool: (key: string, source: ResourceSource) => Effect.Effect<pg.Pool, ReadError | InvalidResourceError>;
-export declare const tunnelEnabled: (value: Option.Option<string>) => boolean;
-/** Outlasts the pool's 10 s statement timeout, so a query in flight when the scope closes can still finish. */
-export declare const POOL_END_TIMEOUT: Duration.Input;
-/**
- * Ends the pool, waiting at most `timeout`. pg-pool's `end()` waits for every checked-out client, so a leaked
- * `pool.connect()` would otherwise hold its scope open; past the bound the release logs a warning and returns.
- */
-export declare const endPool: (pool: {
-    readonly end: () => Promise<void>;
-}, timeout?: Duration.Input) => Effect.Effect<void>;
-//# sourceMappingURL=PostgreSqlPool.d.ts.map

package/dist/PostgreSqlPool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostgreSqlPool.d.ts","sourceRoot":"","sources":["../src/PostgreSqlPool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAuB,MAAM,EAAE,MAAM,QAAQ,CAAC;AACpF,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAIzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,oBAAoB,CAAC,CAAC;IAChG,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;IACjG,8FAA8F;IAC9F,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,GAAG,SAAS,CAAC;CACrH;AAgFD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QACtB,MAAM,UACH,cAAc,KACrB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,GAAG,oBAAoB,CAwCtD,CAAC;AAEL,eAAO,MAAM,aAAa,UAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAwC,CAAC;AAEnG,+GAA+G;AAC/G,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,KAAoB,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,OAAO,SACZ;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,YAClC,QAAQ,CAAC,KAAK,KACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAUlB,CAAC"}