@outfoxx/sunday 2.0.0-beta.1 → 2.0.0-beta.11

package/README.md

@@ -37,3 +37,97 @@ Package Name:
     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     See the License for the specific language governing permissions and
     limitations under the License.
+
+## Profiled credentials
+
+Generated request specifications select `SecurityBinding` entries. Register application providers with
+one shared `TokenManager` and pass it as `new FetchTransport(baseUrl, {tokenManager})`. Client secrets,
+authorization codes, token storage, and interactive login remain application bindings.
+
+`FetchOAuthTokenProvider` exchanges `clientCredentials` and application-authorized `authorizationCode`
+grants and rotates refresh tokens. Configure `identity`, `clientId`, and explicit client authentication
+(`client_secret_basic`, `client_secret_post`, or public-client `none`). An interactive application supplies
+a fresh `grantIdentity` and an `authorization(request, signal)` callback returning
+`{code, redirectUri, codeVerifier}` after its S256 PKCE browser flow has verified state, issuer, and redirect
+URI. Codes are consumed once even when exchange fails or is canceled. Discovery requires a separately
+configured `issuer`; acquisition endpoint overrides cannot change it. Public authorization-code/PKCE
+clients using `authentication: 'none'` accept discovery that omits `none`, including an absent or empty
+authentication-method list. Supplied lists must contain only strings. Confidential clients still
+require their configured method; an absent list defaults to `client_secret_basic`. Discovery and
+endpoint trust are checked again on refresh. Other authentication methods use
+an application `TokenProvider`. Token endpoints require HTTPS except for loopback development URLs.
+
+External and static providers implement `configure` and `acquire`, optionally `refresh`. A `TokenSet`
+contains `accessToken`, optional `expiresAt` in Unix milliseconds, and optional `refreshToken`. A returned
+refresh token replaces the previous one; omission retains it. Expired interactive sessions without refresh
+capability and invalid interactive refresh grants require fresh application authorization.
+
+Cache keys include provider/client identity, grant identity, profile, flow, resolved endpoints, scopes,
+audience, and resource. Change provider identity with credential configuration and grant identity with
+session/grant inputs. The manager defaults to 30 seconds of expiry skew, coalesces concurrent renewal,
+and accepts application-owned `TokenStore` storage. Canceling one waiter preserves others; canceling the
+last signals acquisition cancellation. Once persistence starts, saving a rotated token finishes even if
+callers cancel. A provider result arriving after cancellation cannot start persistence; if an identity
+server already consumed that refresh token despite cancellation, interactive clients must authorize again.
+
+The transport attaches complete AND credential sets and checks them on every execution. Bodyless
+GET/HEAD/OPTIONS requests may recover one explicit bearer `invalid_token` challenge; POST, streamed bodies,
+and 403 responses are never automatically replayed. Managed credential requests use manual redirect
+handling, and query credentials are redacted from response diagnostics. Providers never receive secrets
+from generated metadata, and provider failures use safe runtime diagnostics.
+
+Credentials are isolated by logical security scheme as well as provider and acquisition inputs.
+Discovery metadata is fetched and verified on each acquisition or renewal. Temporary provider outages
+allow event connections to reconnect; a rejected refresh grant triggers fresh client credentials only
+for the client-credentials flow. Interactive sessions require fresh application authorization.
+Built-in OAuth providers retain at most 1,024 consumed authorization-code hashes per provider instance.
+After this limit, create a provider for a newly authorized application session; old hashes are never
+evicted to allow code reuse. Refresh exchanges do not consume this history.
+
+### Typed request parameters
+
+`parameterValidation` is an optional callback on the request specification. The transport invokes it
+before encoding on every request build, including bodyless requests and event streams. Generated
+callbacks validate captured typed parameters in request mode; reusing an operation checks mutable
+values again. Custom transports must invoke the callback at the same boundary before transmission.
+
+Parameter failures throw `RequestValidationError` with the native validation error as `cause`.
+Event sources close on this error, and event stream iterators reject instead of reconnecting.
+
+## URI template variables
+
+`URLTemplate.complete` preserves the distinction between an empty string and a missing,
+`undefined`, or `null` value. For `/items{/id}`, `id: ''` produces `/items/`, while an
+undefined `id` produces `/items`. An empty collection is undefined; a list containing
+an empty string has a defined member. Per-call values override stored template parameters,
+including explicit null or undefined values that remove a stored value for that expansion.
+
+## Application-owned token persistence
+
+```typescript
+const settings = ClientSettings.resolve(baseUrl, alternatives, credentials, {}, {},
+  providers => new TokenManager(providers, {
+    store: applicationStore, expirySkewMs: 30_000, now: applicationClock,
+  }));
+```
+
+The same optional `TokenManagerFactory` is the fourth constructor argument. The last two resolver
+arguments before it are scheme selections and alternative-index selections. Clock values and expiry
+skew are milliseconds. The native manager has no close/reset method: cancel application requests with
+their abort signals, await completion, and discard the manager at session end. The factory does not
+change cancellation behavior or take ownership of application resources.
+
+The hook is invoked once with the resolved provider map, after security validation, and is skipped
+when no providers are selected. It must only construct a manager: do not acquire tokens or read
+storage in the hook. Omitting it keeps the existing in-memory default. Settings retain the returned
+manager, not the factory. All operations on those settings share it; generated aggregate children
+therefore retain the same cache and single-flight renewal. Independently created managers do not
+coordinate concurrent refreshes, even if their stores are the same. Reuse a client/aggregate within
+an active session; use successive managers to reopen saved sessions.
+
+The application owns persistence, encryption, store access and session boundaries. Provider/client,
+grant, profile and endpoint identities must distinguish environments and users; the API base URL
+alone is not an implicit store namespace. Use a new grant identity for a fresh authorization session.
+For logout, stop requests and wait for pending refresh/persistence to finish before removing the
+session's store entries, then construct fresh settings. `invalidate` expires an access token for
+renewal; it is not logout and deliberately retains refresh state. No disk storage is enabled automatically.

package/build/client-settings.d.ts

@@ -0,0 +1,23 @@
+import { Credentials } from './credentials.js';
+import { SecurityBinding } from './security-binding.js';
+import { TokenManager } from './token-manager.js';
+import { TokenManagerFactory } from './token-manager-factory.js';
+/** Resolved, transport-independent inputs supplied to an application's transport factory. */
+export declare class ClientSettings {
+    #private;
+    readonly baseUrl: string;
+    /** Prepared manager shared by this configuration's operations; construction never acquires tokens. */
+    readonly tokenManager: TokenManager | undefined;
+    readonly bindings: Readonly<Record<string, readonly SecurityBinding[]>>;
+    /** Snapshots operation bindings and credentials without acquiring tokens or making requests. */
+    constructor(baseUrl: string, bindings?: Readonly<Record<string, readonly SecurityBinding[]>>, credentials?: Readonly<Record<string, Credentials>>, tokenManagerFactory?: TokenManagerFactory);
+    /** Expands server variables once and resolves relative servers against their document location. */
+    static serverUrl(template: string, variables: Readonly<Record<string, string>>, documentBaseUrl?: string): string;
+    /**
+     * Chooses one complete alternative per operation using credentials and optional explicit scheme sets.
+     * `alternativeSelection` selects a zero-based candidate index, including its scopes and endpoint metadata.
+     */
+    static resolve(baseUrl: string, alternatives: Readonly<Record<string, readonly (readonly SecurityBinding[])[]>>, credentials: Readonly<Record<string, Credentials>>, selection?: Readonly<Record<string, readonly string[]>>, alternativeSelection?: Readonly<Record<string, number>>, tokenManagerFactory?: TokenManagerFactory): ClientSettings;
+    private prepareTokenManager;
+    private prepareProvider;
+}

package/build/client-settings.js

@@ -0,0 +1,150 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { validateCredentials } from './credentials.js';
+import { TokenManager } from './token-manager.js';
+/** Resolved, transport-independent inputs supplied to an application's transport factory. */
+export class ClientSettings {
+    baseUrl;
+    /** Prepared manager shared by this configuration's operations; construction never acquires tokens. */
+    tokenManager;
+    bindings;
+    #credentials;
+    /** Snapshots operation bindings and credentials without acquiring tokens or making requests. */
+    constructor(baseUrl, bindings = {}, credentials = {}, tokenManagerFactory) {
+        const url = new URL(baseUrl);
+        if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password || url.href.includes('?') || url.href.includes('#'))
+            throw new TypeError('Client endpoint must be HTTP or HTTPS');
+        this.baseUrl = url.href;
+        this.bindings = Object.freeze(Object.fromEntries(Object.entries(bindings).map(([operation, values]) => [operation, Object.freeze(values.map(value => Object.freeze({
+                ...value,
+                ...Object.fromEntries(['discoveryUrl', 'authorizationUrl', 'tokenUrl', 'refreshUrl'].flatMap(key => {
+                    const endpoint = value[key];
+                    if (typeof endpoint !== 'string')
+                        return [];
+                    if (/[{}]/.test(endpoint))
+                        throw new TypeError('Security endpoint URLs do not support server variables');
+                    return [[key, new URL(endpoint, baseUrl).href]];
+                })),
+                scopes: Object.freeze([...value.scopes]), transport: Object.freeze({ ...value.transport }),
+            })))])));
+        this.#credentials = new Map(Object.entries(credentials).map(([scheme, value]) => [scheme, Object.freeze({ ...value, ...(value.kind === 'oauth' && value.endpoints
+                    ? { endpoints: Object.freeze(Object.fromEntries(Object.entries(value.endpoints).map(([key, endpoint]) => {
+                            if (endpoint === undefined)
+                                return [key, undefined];
+                            if (/[{}]/.test(endpoint))
+                                throw new TypeError('Security endpoint URLs do not support server variables');
+                            return [key, new URL(endpoint, baseUrl).href];
+                        }))) } : {}) })]));
+        for (const binding of Object.values(this.bindings).flat()) {
+            const credential = this.#credentials.get(binding.scheme);
+            if (!credential)
+                throw new TypeError(`Missing credentials for scheme '${binding.scheme}'`);
+            validateCredentials(credential, binding);
+        }
+        this.tokenManager = this.prepareTokenManager(tokenManagerFactory);
+        Object.freeze(this);
+    }
+    /** Expands server variables once and resolves relative servers against their document location. */
+    static serverUrl(template, variables, documentBaseUrl) {
+        const expanded = template.replace(/\{([^{}]+)\}/g, (_match, name) => {
+            if (!Object.hasOwn(variables, name))
+                throw new TypeError(`Missing server variable '${name}'`);
+            return variables[name];
+        });
+        const url = new URL(expanded, documentBaseUrl);
+        if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
+            throw new TypeError('Invalid HTTP server endpoint');
+        }
+        return url.href;
+    }
+    /**
+     * Chooses one complete alternative per operation using credentials and optional explicit scheme sets.
+     * `alternativeSelection` selects a zero-based candidate index, including its scopes and endpoint metadata.
+     */
+    static resolve(baseUrl, alternatives, credentials, selection = {}, alternativeSelection = {}, tokenManagerFactory) {
+        if ([...Object.keys(selection), ...Object.keys(alternativeSelection)].some(operation => !Object.hasOwn(alternatives, operation))) {
+            throw new TypeError('Unknown operation selection');
+        }
+        const bindings = Object.create(null);
+        for (const [operation, candidates] of Object.entries(alternatives)) {
+            const selected = Object.hasOwn(selection, operation) ? selection[operation] : undefined;
+            const selectedIndex = Object.hasOwn(alternativeSelection, operation) ? alternativeSelection[operation] : undefined;
+            const usable = candidates.filter((candidate, index) => {
+                if (selectedIndex !== undefined && selectedIndex !== index)
+                    return false;
+                if (selected && (selected.length !== candidate.length || candidate.some(binding => !selected.includes(binding.scheme))))
+                    return false;
+                return candidate.every(binding => {
+                    const credential = Object.hasOwn(credentials, binding.scheme) ? credentials[binding.scheme] : undefined;
+                    if (!credential)
+                        return false;
+                    try {
+                        validateCredentials(credential, binding);
+                        return true;
+                    }
+                    catch {
+                        return false;
+                    }
+                });
+            });
+            if (usable.length !== 1)
+                throw new TypeError(`Operation '${operation}' requires one complete security alternative`);
+            bindings[operation] = usable[0];
+        }
+        return new ClientSettings(baseUrl, bindings, credentials, tokenManagerFactory);
+    }
+    prepareTokenManager(factory) {
+        const providers = new Map();
+        const owners = new Map();
+        for (const binding of Object.values(this.bindings).flat()) {
+            const previous = owners.get(binding.provider);
+            if (previous !== undefined && previous !== binding.scheme) {
+                throw new TypeError('Distinct credential schemes require distinct provider bindings');
+            }
+            if (previous !== undefined)
+                continue;
+            owners.set(binding.provider, binding.scheme);
+            providers.set(binding.provider, this.prepareProvider(this.#credentials.get(binding.scheme)));
+        }
+        if (!providers.size)
+            return undefined;
+        const resolved = Object.freeze(Object.fromEntries(providers));
+        return factory ? factory(resolved) : new TokenManager(resolved);
+    }
+    prepareProvider(credentials) {
+        if (credentials.kind === 'provider')
+            return credentials.provider;
+        if (credentials.kind === 'oauth')
+            return credentials.providerFactory(credentials);
+        const identity = crypto.randomUUID();
+        let token;
+        switch (credentials.kind) {
+            case 'bearer':
+                token = credentials.token;
+                break;
+            case 'apiKey':
+                token = credentials.key;
+                break;
+            case 'basic':
+                token = btoa(Array.from(new TextEncoder().encode(`${credentials.username}:${credentials.password}`), byte => String.fromCodePoint(byte)).join(''));
+                break;
+        }
+        return {
+            identity,
+            configure: () => ({ clientIdentity: identity }),
+            acquire: () => Promise.resolve({ accessToken: token }),
+        };
+    }
+}
+//# sourceMappingURL=client-settings.js.map

package/build/client-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-settings.js","sourceRoot":"","sources":["../src/client-settings.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAe,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,6FAA6F;AAC7F,MAAM,OAAO,cAAc;IAChB,OAAO,CAAS;IACzB,sGAAsG;IAC7F,YAAY,CAA2B;IACvC,QAAQ,CAAuD;IAC/D,YAAY,CAAmC;IAExD,gGAAgG;IAChG,YAAY,OAAe,EAAE,WAAiE,EAAE,EAC9F,cAAqD,EAAE,EAAE,mBAAyC;QAClG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAClM,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CACpG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC1D,GAAG,KAAK;gBACR,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;oBACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,GAA4B,CAAC,CAAC;oBACrD,IAAI,OAAO,QAAQ,KAAK,QAAQ;wBAAE,OAAO,EAAE,CAAC;oBAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;oBACzG,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;aAC3F,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACX,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAC9E,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS;oBAC9E,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE;4BACtG,IAAI,QAAQ,KAAK,SAAS;gCAAE,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;4BACpD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;gCAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;4BACzG,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;wBAChD,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3F,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,SAAS,CAAC,QAAgB,EAAE,SAA2C,EAAE,eAAwB;QACtG,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;YAC1E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1G,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,OAAe,EAAE,YAA+E,EAC7G,WAAkD,EAAE,YAAyD,EAAE,EAC/G,uBAAyD,EAAE,EAAE,mBAAyC;QACtG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACjI,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,QAAQ,GAA+C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;gBACpD,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,KAAK;oBAAE,OAAO,KAAK,CAAC;gBACzE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtI,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;oBAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACxG,IAAI,CAAC,UAAU;wBAAE,OAAO,KAAK,CAAC;oBAC9B,IAAI,CAAC;wBAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;wBAAC,OAAO,IAAI,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,OAAO,KAAK,CAAC;oBAAC,CAAC;gBACxF,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,cAAc,SAAS,8CAA8C,CAAC,CAAC;YACpH,QAAQ,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACjF,CAAC;IAEO,mBAAmB,CAAC,OAA6B;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC1D,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAEO,eAAe,CAAC,WAAwB;QAC9C,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,WAAW,CAAC,QAAQ,CAAC;QACjE,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,KAAa,CAAC;QAClB,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,QAAQ;gBAAE,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;gBAAC,MAAM;YAChD,KAAK,QAAQ;gBAAE,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;gBAAC,MAAM;YAC9C,KAAK,OAAO;gBACV,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,EACjG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChD,MAAM;QACV,CAAC;QACD,OAAO;YACL,QAAQ;YACR,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;YAC/C,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC;CAEF"}

package/build/credentials.d.ts

@@ -0,0 +1,58 @@
+import type { SecurityBinding, SecurityEndpoints } from './security-binding.js';
+import type { TokenProvider, TokenRequest } from './token-provider.js';
+/** Fresh application-authorized PKCE result; interactive authorization remains application-owned. */
+export interface AuthorizationGrant {
+    readonly code: string;
+    readonly redirectUri: string;
+    readonly codeVerifier: string;
+}
+/** Transport-independent OAuth client configuration. */
+export interface OAuthCredentialOptions {
+    readonly identity: string;
+    readonly clientId: string;
+    readonly clientSecret?: string;
+    readonly authentication?: 'none' | 'client_secret_basic' | 'client_secret_post';
+    readonly grantIdentity?: string;
+    readonly authorization?: (request: TokenRequest, signal: AbortSignal) => Promise<AuthorizationGrant>;
+    readonly endpoints?: SecurityEndpoints;
+    readonly issuer?: string;
+}
+/** Application-supplied bearer token, without its wire prefix. */
+export interface BearerCredentials {
+    readonly kind: 'bearer';
+    readonly token: string;
+}
+/** Application-supplied API key; the contract determines its wire location. */
+export interface ApiKeyCredentials {
+    readonly kind: 'apiKey';
+    readonly key: string;
+}
+/** Basic authentication inputs; the runtime supplies the wire encoding. */
+export interface BasicCredentials {
+    readonly kind: 'basic';
+    readonly username: string;
+    readonly password: string;
+}
+/** OAuth inputs narrowed to the selected acquisition flow. */
+export type OAuthCredentials = {
+    /** Builds the installed module's provider without acquiring tokens. */
+    readonly providerFactory: (credentials: OAuthCredentials) => TokenProvider;
+} & ((OAuthCredentialOptions & {
+    readonly kind: 'oauth';
+    readonly flow: 'clientCredentials';
+}) | (OAuthCredentialOptions & {
+    readonly kind: 'oauth';
+    readonly flow: 'authorizationCode';
+    readonly grantIdentity: string;
+    readonly authorization: NonNullable<OAuthCredentialOptions['authorization']>;
+}));
+/** Escape hatch for application-owned acquisition and unsupported OAuth flows. */
+export interface ProviderCredentials {
+    readonly kind: 'provider';
+    readonly provider: TokenProvider;
+    readonly flow?: SecurityBinding['flow'];
+}
+/** Shared credential family; generated code narrows this union for each declared scheme. */
+export type Credentials = BearerCredentials | ApiKeyCredentials | BasicCredentials | OAuthCredentials | ProviderCredentials;
+/** Reject incompatible inputs before constructing a transport or acquiring a token. */
+export declare function validateCredentials(credentials: Credentials, binding: SecurityBinding): void;

package/build/credentials.js

@@ -0,0 +1,51 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+/** Reject incompatible inputs before constructing a transport or acquiring a token. */
+export function validateCredentials(credentials, binding) {
+    if (credentials.kind === 'provider') {
+        if (credentials.flow !== undefined && credentials.flow !== binding.flow)
+            throw new TypeError('Provider flow does not match');
+        return;
+    }
+    const prefix = binding.transport.prefix?.toLowerCase();
+    if (credentials.kind === 'oauth') {
+        validateOAuthCredentials(credentials, binding);
+        return;
+    }
+    if (binding.flow !== 'static' && binding.flow !== 'external') {
+        throw new TypeError('Static credentials cannot satisfy an OAuth acquisition binding');
+    }
+    if (credentials.kind === 'bearer' && (prefix !== 'bearer' || !credentials.token)) {
+        throw new TypeError('Bearer credentials do not match the selected security binding');
+    }
+    if (credentials.kind === 'apiKey' && (prefix !== undefined || !credentials.key)) {
+        throw new TypeError('API key credentials do not match the selected security binding');
+    }
+    if (credentials.kind === 'basic' && (prefix !== 'basic' || credentials.username.includes(':'))) {
+        throw new TypeError('Basic credentials do not match the selected security binding');
+    }
+}
+function validateOAuthCredentials(credentials, binding) {
+    const prefix = binding.transport.prefix?.toLowerCase();
+    if (prefix !== 'bearer' || credentials.flow !== binding.flow || !credentials.identity.trim() || !credentials.clientId.trim()) {
+        throw new TypeError('OAuth credentials do not match the selected security binding');
+    }
+    const authentication = credentials.authentication ?? 'none';
+    if (!['none', 'client_secret_basic', 'client_secret_post'].includes(authentication) || (authentication === 'none') !== (credentials.clientSecret === undefined) || credentials.clientSecret === '' ||
+        (credentials.flow === 'clientCredentials' && authentication === 'none') ||
+        (credentials.flow === 'authorizationCode' && (!credentials.grantIdentity.trim() || !credentials.authorization))) {
+        throw new TypeError('Invalid OAuth credential configuration');
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/build/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAiEjC,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,WAAwB,EAAE,OAAwB;IACpF,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpC,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC7H,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IACvD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,wBAAwB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAGD,SAAS,wBAAwB,CAAC,WAA6B,EAAE,OAAwB;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IACvD,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7H,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,IAAI,MAAM,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,WAAW,CAAC,YAAY,KAAK,EAAE;QAChM,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAmB,IAAI,cAAc,KAAK,MAAM,CAAC;QACvE,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/build/event-parser.d.ts

@@ -3,6 +3,8 @@ export interface EventInfo {
     event?: string;
     data?: string;
     retry?: string;
+    keepalive?: string;
+    'retry-max'?: string;
 }
 export declare class EventParser {
     private readonly decoder;

package/build/event-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../src/event-parser.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AASjC,MAAM,OAAO,WAAW;IACL,OAAO,GAAgB,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IACzD,iBAAiB,CAAe;IAExC,OAAO,CACL,MAAmB,EACnB,UAA0C;QAE1C,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;QAEzE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,WAAW,CAAC,sBAAsB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAEO,oBAAoB,CAAC,MAAmB;QAC9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAEnC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;aAAM,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,iBAAiB,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CACjD,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEpE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IAEO,6BAA6B,CAAC,MAAmB;QACvD,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,qEAAqE;YACrE,MAAM,cAAc,GAAG,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,wBAAwB;gBACxB,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;gBAChC,MAAM;YACR,CAAC;YAED,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,cAAc,CAAC;YAEnE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;YAC1D,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;gBACnD,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAC/B,MAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAErC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YAExB,QAAQ,IAAI,EAAE,CAAC;gBACb,YAAY;gBACZ,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,0BAA0B;oBAC1B,6BAA6B;oBAC7B,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxB,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,kBAAkB;gBAClB,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,0BAA0B;oBAC1B,6BAA6B;oBAC7B,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxB,CAAC;oBAED,oCAAoC;oBACpC,iCAAiC;oBACjC,IACE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG;wBACrB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG;wBACrB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,EACrB,CAAC;wBACD,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxB,CAAC;oBAED,MAAM;gBACR,CAAC;gBAED,QAAQ;YACV,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,sBAAsB,CACnC,YAAsB,EACtB,UAA0C;QAE1C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAExD,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,WAAmB;QAC3C,MAAM,KAAK,GAAc,EAAE,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1D,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAE/C,IAAI,GAAW,CAAC;YAChB,IAAI,KAAa,CAAC;YAClB,IAAI,oBAAoB,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC/B,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBAC1C,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,IAAI,CAAC;gBACX,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;YAED,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,OAAO;oBACV,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;oBAChD,MAAM;gBAER,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,GAAG,GAAG,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC7D,MAAM;gBACR,CAAC;gBAED,KAAK,EAAE;oBACL,qBAAqB;oBACrB,MAAM;gBAER,OAAO,CAAC,CAAC,CAAC;oBACP,KAAgC,CAAC,GAAG,CAAC;wBACpC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,cAAc,CAAC,KAAa;QACzC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,YAAY,CAAC"}
+{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../src/event-parser.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAWjC,MAAM,OAAO,WAAW;IACL,OAAO,GAAgB,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IACzD,iBAAiB,CAAe;IAExC,OAAO,CACL,MAAmB,EACnB,UAA0C;QAE1C,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;QAEzE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,WAAW,CAAC,sBAAsB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAEO,oBAAoB,CAAC,MAAmB;QAC9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAEnC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;aAAM,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,iBAAiB,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CACjD,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEpE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IAEO,6BAA6B,CAAC,MAAmB;QACvD,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,qEAAqE;YACrE,MAAM,cAAc,GAAG,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,wBAAwB;gBACxB,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;gBAChC,MAAM;YACR,CAAC;YAED,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,cAAc,CAAC;YAEnE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;YAC1D,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;gBACnD,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAC/B,MAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAErC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YAExB,QAAQ,IAAI,EAAE,CAAC;gBACb,YAAY;gBACZ,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,0BAA0B;oBAC1B,6BAA6B;oBAC7B,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxB,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,kBAAkB;gBAClB,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,0BAA0B;oBAC1B,6BAA6B;oBAC7B,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxB,CAAC;oBAED,oCAAoC;oBACpC,iCAAiC;oBACjC,IACE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG;wBACrB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG;wBACrB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,EACrB,CAAC;wBACD,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxB,CAAC;oBAED,MAAM;gBACR,CAAC;gBAED,QAAQ;YACV,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,sBAAsB,CACnC,YAAsB,EACtB,UAA0C;QAE1C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAExD,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,WAAmB;QAC3C,MAAM,KAAK,GAAc,EAAE,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1D,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAE/C,IAAI,GAAW,CAAC;YAChB,IAAI,KAAa,CAAC;YAClB,IAAI,oBAAoB,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC/B,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBAC1C,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,IAAI,CAAC;gBACX,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;YAED,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,OAAO;oBACV,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;oBAChD,MAAM;gBAER,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,GAAG,GAAG,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC7D,MAAM;gBACR,CAAC;gBAED,KAAK,EAAE;oBACL,qBAAqB;oBACrB,MAAM;gBAER,OAAO,CAAC,CAAC,CAAC;oBACP,KAAgC,CAAC,GAAG,CAAC;wBACpC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,cAAc,CAAC,KAAa;QACzC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,YAAY,CAAC"}

package/build/fetch-event-source.d.ts

@@ -6,9 +6,10 @@ export interface FetchEventSource {
 }
 export declare class FetchEventSource extends EventTarget implements ExtEventSource {
     private static readonly LAST_EVENT_ID_HEADER;
-    private static readonly MAX_RETRY_TIME_MULTIPLIER;
-    private static readonly RETRY_EXPONENT;
-    private static readonly EVENT_TIMEOUT_DEFAULT;
+    private static readonly RETRY_TIME_DEFAULT;
+    private static readonly RETRY_MAX_MULTIPLIER_DEFAULT;
+    private static readonly KEEPALIVE_TIMEOUT_MULTIPLIER;
+    private static readonly KEEPALIVE_TIMEOUT_MINIMUM;
     private static readonly EVENT_TIMEOUT_CHECK_INTERVAL_DEFAULT;
     readonly CONNECTING = 0;
     readonly OPEN = 1;
@@ -21,25 +22,29 @@ export declare class FetchEventSource extends EventTarget implements ExtEventSou
     onopen: ((this: EventSource, ev: Event) => unknown) | null;
     get retryTime(): number;
     private readonly adapter;
+    private readonly fetchRequest;
     private readonly signal?;
     private connectionAbortController?;
     private connectionReader?;
     private externalAbortSignal?;
     private externalAbortHandler?;
     private internalRetryTime;
+    private internalRetryMax?;
     private retryAttempt;
-    private connectionAttemptTime;
     private connectionOrigin?;
     private reconnectTimeoutHandle?;
     private lastEventId?;
     private readonly logger?;
-    private readonly eventTimeout?;
+    private eventTimeout?;
+    private readonly eventTimeoutConfigured;
     private readonly eventTimeoutCheckInterval;
     private eventTimeoutCheckHandle?;
     private lastEventReceivedTime;
     private readonly eventParser;
     constructor(url: string, eventSourceInit?: EventSourceInit & {
         adapter?: (url: string, requestInit: RequestInit) => Promise<Request>;
+        /** Executes one connection using a subscription-owned authentication recovery budget. */
+        fetch?: (request: Request, signal: AbortSignal) => Promise<Response>;
         signal?: AbortSignal;
         eventTimeout?: number;
         eventTimeoutCheckInterval?: number;
@@ -56,11 +61,15 @@ export declare class FetchEventSource extends EventTarget implements ExtEventSou
     private receivedHeaders;
     private receivedData;
     private receivedError;
+    private receivedFatalError;
     private receivedComplete;
     private scheduleReconnect;
     private static calculateRetryTime;
     private clearReconnect;
     private readonly dispatchParsedEvent;
+    private static parseMilliseconds;
     fireErrorEvent(error: unknown): void;
     private abortConnection;
+    private startExternalAbortListener;
+    private stopExternalAbortListener;
 }