@outfoxx/sunday 2.0.0-beta.18 → 2.0.0-beta.19

package/build/token-manager.js

@@ -11,12 +11,17 @@
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
+import { withAbort } from './util/abort.js';
+import { isRequestStopped } from './request-cancellation-error.js';
 import { AuthorizationRequiredError, TokenProviderError, } from './token-provider.js';
 /**
  * Shared token lifecycle with one renewal per cache key. Canceling one caller leaves other waiters
- * running; canceling the last waiter signals the provider. A failed renewal is never cached.
+ * running; canceling the last waiter stops waiting for the provider without abandoning storage commits.
+ * A failed or cancelled acquisition is never cached.
  */
 export class TokenManager {
+    identity;
+    provider;
     providers;
     store;
     renewals = new Map();
@@ -25,28 +30,50 @@ export class TokenManager {
     now;
     skew;
     constructor(providers, options = {}) {
-        this.providers = new Map(Object.entries(providers));
+        this.provider =
+            typeof providers.acquire === 'function'
+                ? providers
+                : undefined;
+        this.providers = new Map(this.provider
+            ? []
+            : Object.entries(providers));
+        this.identity = this.provider?.identity ?? crypto.randomUUID();
         this.store = options.store ?? new MemoryTokenStore();
         this.now = options.now ?? Date.now;
         this.skew = options.expirySkewMs ?? 30_000;
         if (!Number.isFinite(this.skew) || this.skew < 0)
             throw new RangeError('Invalid token expiry skew');
     }
+    /** Forwards application configuration to the explicitly managed provider. */
+    configure(binding) {
+        const provider = this.provider ?? this.providers.get(binding.provider);
+        if (!provider)
+            throw new TokenProviderError();
+        return provider.configure(binding);
+    }
+    /** Obtains managed credentials; receipt acquisition preserves rejection context. */
+    async acquire(request, signal) {
+        return (await this.credentials(request, signal)).tokens;
+    }
     /** Acquires current credentials without invoking authorization twice for an expired interactive session. */
     async credentials(binding, signal) {
         signal?.throwIfAborted();
-        const provider = this.providers.get(binding.provider);
+        const provider = this.provider ?? this.providers.get(binding.provider);
         if (!provider)
             throw new TokenProviderError();
         let configuration;
         try {
             configuration = provider.configure(binding);
         }
-        catch {
+        catch (error) {
+            if (isRequestStopped(error))
+                throw error;
             throw new TokenProviderError();
         }
-        if (!provider.identity.trim() || !configuration.clientIdentity.trim() ||
-            (binding.flow === 'authorizationCode' && !configuration.grantIdentity?.trim()))
+        if (!provider.identity.trim() ||
+            !configuration.clientIdentity.trim() ||
+            (binding.flow === 'authorizationCode' &&
+                !configuration.grantIdentity?.trim()))
             throw new TokenProviderError();
         const request = Object.freeze({
             ...binding,
@@ -60,26 +87,49 @@ export class TokenManager {
             transport: Object.freeze({ ...binding.transport }),
         });
         const key = JSON.stringify([
-            request.scheme, binding.provider, provider.identity, request.clientIdentity, request.grantIdentity,
-            request.profile, request.flow, request.discoveryUrl, request.authorizationUrl, request.tokenUrl,
-            request.refreshUrl, request.scopes, request.audience, request.resource,
+            request.scheme,
+            binding.provider,
+            provider.identity,
+            request.clientIdentity,
+            request.grantIdentity,
+            request.profile,
+            request.flow,
+            request.discoveryUrl,
+            request.authorizationUrl,
+            request.tokenUrl,
+            request.refreshUrl,
+            request.scopes,
+            request.audience,
+            request.resource,
         ]);
         let renewal = this.renewals.get(key);
         if (!renewal || renewal.controller.signal.aborted) {
             const controller = new AbortController();
             const created = {
-                controller, waiters: 0, settled: false, committing: false,
+                controller,
+                waiters: 0,
+                settled: false,
+                committing: false,
                 promise: this.exclusive(key, () => this.renew(key, provider, request, controller.signal)),
             };
             this.renewals.set(key, created);
-            void created.promise.finally(() => {
+            void created.promise
+                .finally(() => {
                 created.settled = true;
                 if (this.renewals.get(key) === created)
                     this.renewals.delete(key);
-            }).catch(() => undefined);
+            })
+                .catch(() => undefined);
             renewal = created;
         }
-        return this.join(renewal, signal);
+        const lease = await this.join(renewal, signal);
+        return {
+            ...lease,
+            invalidate: async () => {
+                await this.invalidate(lease);
+                return true;
+            },
+        };
     }
     /** Invalidates only the credential that failed, preserving a token already renewed by another caller. */
     async invalidate(lease) {
@@ -91,7 +141,9 @@ export class TokenManager {
                 }
             });
         }
-        catch {
+        catch (error) {
+            if (isRequestStopped(error))
+                throw error;
             throw new TokenProviderError();
         }
     }
@@ -99,10 +151,12 @@ export class TokenManager {
         const prior = this.locks.get(key) ?? Promise.resolve();
         const next = prior.catch(() => undefined).then(action);
         this.locks.set(key, next);
-        void next.finally(() => {
+        void next
+            .finally(() => {
             if (this.locks.get(key) === next)
                 this.locks.delete(key);
-        }).catch(() => undefined);
+        })
+            .catch(() => undefined);
         return next;
     }
     async renew(key, provider, request, signal) {
@@ -110,12 +164,16 @@ export class TokenManager {
             signal.throwIfAborted();
             const stored = await this.store.load(key);
             signal.throwIfAborted();
-            if (stored && (stored.expiresAt === undefined || stored.expiresAt > this.now() + this.skew)) {
+            if (stored &&
+                (stored.expiresAt === undefined ||
+                    stored.expiresAt > this.now() + this.skew)) {
                 return { key, tokens: Object.freeze({ ...stored }) };
             }
             const tokens = await this.acquireOrRefresh(key, stored, provider, request, signal);
-            if (!tokens.accessToken || (tokens.expiresAt !== undefined &&
-                (!Number.isFinite(tokens.expiresAt) || tokens.expiresAt <= this.now())))
+            if (!tokens.accessToken ||
+                (tokens.expiresAt !== undefined &&
+                    (!Number.isFinite(tokens.expiresAt) ||
+                        tokens.expiresAt <= this.now())))
                 throw new TokenProviderError();
             const snapshot = Object.freeze({ ...tokens });
             signal.throwIfAborted();
@@ -130,33 +188,44 @@ export class TokenManager {
         catch (error) {
             if (signal.aborted)
                 throw signal.reason;
-            if (error instanceof AuthorizationRequiredError || error instanceof TokenProviderError)
+            if (isRequestStopped(error))
+                throw error;
+            if (error instanceof AuthorizationRequiredError ||
+                error instanceof TokenProviderError)
                 throw error;
             throw new TokenProviderError();
         }
     }
     async acquireOrRefresh(key, stored, provider, request, signal) {
-        if (stored?.refreshToken && provider.refresh) {
+        const refreshToken = stored?.refreshToken;
+        if (refreshToken && provider.refresh) {
             try {
-                const refreshed = await provider.refresh(request, stored.refreshToken, signal);
-                return { ...refreshed, refreshToken: refreshed.refreshToken ?? stored.refreshToken };
+                const refreshed = await withAbort(() => provider.refresh(request, refreshToken, signal), signal);
+                return {
+                    ...refreshed,
+                    refreshToken: refreshed.refreshToken ?? refreshToken,
+                };
             }
             catch (error) {
-                if (!(error instanceof TokenProviderError) || error.reason !== 'invalidGrant' || request.flow !== 'clientCredentials')
+                if (!(error instanceof TokenProviderError) ||
+                    error.reason !== 'invalidGrant' ||
+                    request.flow !== 'clientCredentials')
                     throw error;
                 signal.throwIfAborted();
                 await this.store.remove(key);
-                return provider.acquire(request, signal);
             }
         }
-        else if (request.flow === 'authorizationCode' && (stored || this.authorizationAttempts.has(key))) {
+        else if (request.flow === 'authorizationCode' &&
+            (stored || this.authorizationAttempts.has(key))) {
             throw new AuthorizationRequiredError();
         }
-        else {
+        // Only provider work is cancellable: storage mutations must finish before releasing the
+        // key's lock. Late provider completion is observed by withAbort but cannot reach persistence.
+        return withAbort(() => {
             if (request.flow === 'authorizationCode')
                 this.authorizationAttempts.add(key);
             return provider.acquire(request, signal);
-        }
+        }, signal);
     }
     join(renewal, signal) {
         renewal.waiters++;
@@ -169,7 +238,7 @@ export class TokenManager {
                 signal?.removeEventListener('abort', abort);
                 renewal.waiters--;
                 if (renewal.waiters === 0 && !renewal.settled && !renewal.committing)
-                    renewal.controller.abort();
+                    renewal.controller.abort(error);
                 if (value)
                     resolve(value);
                 else
@@ -179,15 +248,23 @@ export class TokenManager {
             signal?.addEventListener('abort', abort, { once: true });
             if (signal?.aborted)
                 abort();
-            renewal.promise.then(value => finish(value), error => finish(undefined, error));
+            renewal.promise.then((value) => finish(value), (error) => finish(undefined, error));
         });
     }
 }
 class MemoryTokenStore {
     tokens = new Map();
-    load(key) { return Promise.resolve(this.tokens.get(key)); }
-    save(key, tokens) { this.tokens.set(key, tokens); return Promise.resolve(); }
-    remove(key) { this.tokens.delete(key); return Promise.resolve(); }
+    load(key) {
+        return Promise.resolve(this.tokens.get(key));
+    }
+    save(key, tokens) {
+        this.tokens.set(key, tokens);
+        return Promise.resolve();
+    }
+    remove(key) {
+        this.tokens.delete(key);
+        return Promise.resolve();
+    }
 }
 function compareScopes(left, right) {
     if (left < right)

package/build/token-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-manager.js","sourceRoot":"","sources":["../src/token-manager.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAGjC,OAAO,EACL,0BAA0B,EAAqC,kBAAkB,GAElF,MAAM,qBAAqB,CAAC;AAgB7B;;;GAGG;AACH,MAAM,OAAO,YAAY;IACN,SAAS,CAAqC;IAC9C,KAAK,CAAa;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,GAAG,CAAe;IAClB,IAAI,CAAS;IAE9B,YACE,SAAkD,EAClD,UAA6E,EAAE;QAE/E,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACtG,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,WAAW,CAAC,OAAwB,EAAE,MAAoB;QAC9D,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC9C,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC;YACH,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC;YACL,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE;YACnE,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjH,MAAM,OAAO,GAAiB,MAAM,CAAC,MAAM,CAAC;YAC1C,GAAG,OAAO;YACV,YAAY,EAAE,aAAa,CAAC,SAAS,EAAE,YAAY,IAAI,OAAO,CAAC,YAAY;YAC3E,gBAAgB,EAAE,aAAa,CAAC,SAAS,EAAE,gBAAgB,IAAI,OAAO,CAAC,gBAAgB;YACvF,QAAQ,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ;YAC/D,UAAU,EAAE,aAAa,CAAC,SAAS,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU;YACrE,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,aAAa,EAAE,aAAa,CAAC,aAAa;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACvE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa;YAClG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAC/F,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SACvE,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAY;gBACvB,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK;gBACzD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;aAC1F,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;gBAChC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,UAAU,CAAC,KAAiB;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;gBACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,OAAO,EAAE,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBACtD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC;YACL,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,SAAS,CAAI,GAAW,EAAE,MAAwB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,QAAuB,EAAE,OAAqB,EAAE,MAAmB;QAClG,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5F,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBACxD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;YACnG,kFAAkF;YAClF,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;YACxC,IAAI,KAAK,YAAY,0BAA0B,IAAI,KAAK,YAAY,kBAAkB;gBAAE,MAAM,KAAK,CAAC;YACpG,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EAAE,MAA4B,EAAE,QAAuB,EAAE,OAAqB,EAAE,MAAmB;QAE9G,IAAI,MAAM,EAAE,YAAY,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAC/E,OAAO,EAAE,GAAG,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACvF,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;oBAAE,MAAM,KAAK,CAAC;gBACnI,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7B,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aACI,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,0BAA0B,EAAE,CAAC;QACzC,CAAC;aACI,CAAC;YACJ,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;gBAAE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9E,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,OAAgB,EAAE,MAAoB;QACjD,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAE,KAAe,EAAE,EAAE;gBACrD,IAAI,SAAS;oBAAE,OAAO;gBACtB,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU;oBAAE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACjG,IAAI,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;;oBAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,gBAAgB;IACH,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtD,IAAI,CAAC,GAAW,IAAmC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,GAAW,EAAE,MAAgB,IAAmB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9G,MAAM,CAAC,GAAW,IAAmB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;CAC1F;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"token-manager.js","sourceRoot":"","sources":["../src/token-manager.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,OAAO,EACL,0BAA0B,EAG1B,kBAAkB,GAInB,MAAM,qBAAqB,CAAC;AAkB7B;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACd,QAAQ,CAAS;IACT,QAAQ,CAAiB;IACzB,SAAS,CAAqC;IAC9C,KAAK,CAAa;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,GAAG,CAAe;IAClB,IAAI,CAAS;IAE9B,YACE,SAAkE,EAClE,UAII,EAAE;QAEN,IAAI,CAAC,QAAQ;YACX,OAAO,SAAS,CAAC,OAAO,KAAK,UAAU;gBACrC,CAAC,CAAE,SAA2B;gBAC9B,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CACtB,IAAI,CAAC,QAAQ;YACX,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAoD,CAAC,CACzE,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAC9C,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACtD,CAAC;IAED,6EAA6E;IAC7E,SAAS,CAAC,OAAwB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,MAAmB;QACtD,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,WAAW,CACf,OAAwB,EACxB,MAAoB;QAEpB,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC9C,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC;YACH,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QACD,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YACzB,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE;YACpC,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB;gBACnC,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;YAEvC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,MAAM,OAAO,GAAiB,MAAM,CAAC,MAAM,CAAC;YAC1C,GAAG,OAAO;YACV,YAAY,EACV,aAAa,CAAC,SAAS,EAAE,YAAY,IAAI,OAAO,CAAC,YAAY;YAC/D,gBAAgB,EACd,aAAa,CAAC,SAAS,EAAE,gBAAgB,IAAI,OAAO,CAAC,gBAAgB;YACvE,QAAQ,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ;YAC/D,UAAU,EAAE,aAAa,CAAC,SAAS,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU;YACrE,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,aAAa,EAAE,aAAa,CAAC,aAAa;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACvE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,QAAQ;YAChB,QAAQ,CAAC,QAAQ;YACjB,OAAO,CAAC,cAAc;YACtB,OAAO,CAAC,aAAa;YACrB,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,YAAY;YACpB,OAAO,CAAC,gBAAgB;YACxB,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,QAAQ;SACjB,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAY;gBACvB,UAAU;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAChC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CACtD;aACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,KAAK,OAAO,CAAC,OAAO;iBACjB,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpE,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO;YACL,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,UAAU,CAAC,KAAiB;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;gBACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,OAAO,EAAE,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBACtD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACnB,KAAK,CAAC,GAAG,EACT,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAC5C,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,SAAS,CAAI,GAAW,EAAE,MAAwB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,IAAI;aACN,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,GAAW,EACX,QAAuB,EACvB,OAAqB,EACrB,MAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IACE,MAAM;gBACN,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;oBAC7B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAC5C,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACxC,GAAG,EACH,MAAM,EACN,QAAQ,EACR,OAAO,EACP,MAAM,CACP,CAAC;YACF,IACE,CAAC,MAAM,CAAC,WAAW;gBACnB,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;oBAC7B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;wBACjC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAEpC,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,MAAM;gBACvC,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;YAC1D,kFAAkF;YAClF,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;YACxC,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,IACE,KAAK,YAAY,0BAA0B;gBAC3C,KAAK,YAAY,kBAAkB;gBAEnC,MAAM,KAAK,CAAC;YACd,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EACX,MAA4B,EAC5B,QAAuB,EACvB,OAAqB,EACrB,MAAmB;QAEnB,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,CAAC;QAC1C,IAAI,YAAY,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EACtD,MAAM,CACP,CAAC;gBACF,OAAO;oBACL,GAAG,SAAS;oBACZ,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,YAAY;iBACrD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;oBACtC,KAAK,CAAC,MAAM,KAAK,cAAc;oBAC/B,OAAO,CAAC,IAAI,KAAK,mBAAmB;oBAEpC,MAAM,KAAK,CAAC;gBACd,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;aAAM,IACL,OAAO,CAAC,IAAI,KAAK,mBAAmB;YACpC,CAAC,MAAM,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,0BAA0B,EAAE,CAAC;QACzC,CAAC;QACD,wFAAwF;QACxF,8FAA8F;QAC9F,OAAO,SAAS,CAAC,GAAG,EAAE;YACpB,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;gBACtC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAEO,IAAI,CAAC,OAAgB,EAAE,MAAoB;QACjD,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAE,KAAe,EAAE,EAAE;gBACrD,IAAI,SAAS;oBAAE,OAAO;gBACtB,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU;oBAClE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;;oBACrB,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,OAAO,CAAC,IAAI,CAClB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EACxB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CACpC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,gBAAgB;IACH,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtD,IAAI,CAAC,GAAW;QACd,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,GAAW,EAAE,MAAgB;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC"}

package/build/token-provider.d.ts

@@ -1,4 +1,5 @@
 import { SecurityBinding, SecurityEndpoints } from './security-binding.js';
+import type { TokenLease } from './token-manager.js';
 /** Credentials returned by an application provider; values are never included in runtime diagnostics. */
 export interface TokenSet {
     readonly accessToken: string;
@@ -18,12 +19,16 @@ export interface TokenRequest extends SecurityBinding {
 }
 /**
  * Application credential binding. OAuth providers exchange fresh authorization and refresh tokens;
- * the shared manager owns caching, rotation, renewal coalescing, and cancellation.
+ * providers own their lifecycle; TokenManager adds caching only when explicitly supplied.
  */
 export interface TokenProvider {
     readonly identity: string;
     configure(binding: SecurityBinding): TokenConfiguration;
     acquire(request: TokenRequest, signal: AbortSignal): Promise<TokenSet>;
+    /** Optional receipt acquisition, used by caching decorators to retain their original cache identity. */
+    credentials?(binding: SecurityBinding, signal?: AbortSignal): Promise<TokenLease>;
+    /** Rejects only this token in its original session. False leaves recovery to the caller. */
+    reject?(request: TokenRequest, rejectedToken: string): Promise<boolean>;
     refresh?(request: TokenRequest, refreshToken: string, signal: AbortSignal): Promise<TokenSet>;
 }
 /** Application-owned storage. Implementations must serialize writes and keep credentials private. */
@@ -42,3 +47,5 @@ export declare class TokenProviderError extends Error {
     /** Safe recovery classification; provider messages and credentials are never retained. */
     constructor(reason?: 'unavailable' | 'temporary' | 'invalidGrant');
 }
+/** Acquires once from an application provider without adding storage or refresh policy. */
+export declare function providerCredentials(provider: TokenProvider, binding: SecurityBinding, signal: AbortSignal): Promise<TokenLease>;

package/build/token-provider.js

@@ -11,6 +11,7 @@
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
+import { isRequestStopped } from './request-cancellation-error.js';
 /** Signals that an interactive application must supply a fresh authorization session. */
 export class AuthorizationRequiredError extends Error {
     constructor() {
@@ -28,4 +29,74 @@ export class TokenProviderError extends Error {
         this.name = 'TokenProviderError';
     }
 }
+/** Acquires once from an application provider without adding storage or refresh policy. */
+export async function providerCredentials(provider, binding, signal) {
+    signal.throwIfAborted();
+    try {
+        if (provider.credentials) {
+            const lease = await provider.credentials(binding, signal);
+            signal.throwIfAborted();
+            return {
+                ...lease,
+                invalidate: lease.invalidate
+                    ? async () => {
+                        try {
+                            return await lease.invalidate();
+                        }
+                        catch (error) {
+                            throw safeProviderError(error);
+                        }
+                    }
+                    : undefined,
+            };
+        }
+        const configuration = provider.configure(binding);
+        if (!provider.identity.trim() || !configuration.clientIdentity.trim())
+            throw new TokenProviderError();
+        const request = Object.freeze({
+            ...binding,
+            ...Object.fromEntries(Object.entries(configuration.endpoints ?? {}).filter(([, value]) => value !== undefined)),
+            clientIdentity: configuration.clientIdentity,
+            grantIdentity: configuration.grantIdentity,
+            scopes: Object.freeze([...new Set(binding.scopes)].sort((left, right) => {
+                // Credential scope order must not depend on the host locale.
+                if (left === right)
+                    return 0;
+                return left < right ? -1 : 1;
+            })),
+            transport: Object.freeze({ ...binding.transport }),
+        });
+        const tokens = Object.freeze({
+            ...(await provider.acquire(request, signal)),
+        });
+        signal.throwIfAborted();
+        if (!tokens.accessToken ||
+            (tokens.expiresAt !== undefined &&
+                (!Number.isFinite(tokens.expiresAt) || tokens.expiresAt <= Date.now())))
+            throw new TokenProviderError();
+        return {
+            key: '',
+            tokens,
+            invalidate: async () => {
+                try {
+                    return ((await provider.reject?.(request, tokens.accessToken)) ?? false);
+                }
+                catch (error) {
+                    throw safeProviderError(error);
+                }
+            },
+        };
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        throw safeProviderError(error);
+    }
+}
+function safeProviderError(error) {
+    return isRequestStopped(error) ||
+        error instanceof AuthorizationRequiredError ||
+        error instanceof TokenProviderError
+        ? error
+        : new TokenProviderError();
+}
 //# sourceMappingURL=token-provider.js.map

package/build/token-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-provider.js","sourceRoot":"","sources":["../src/token-provider.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AA0CjC,yFAAyF;AACzF,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD;QACE,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEtB;IADrB,0FAA0F;IAC1F,YAAqB,SAAuD,aAAa;QACvF,KAAK,CAAC,6DAA6D,CAAC,CAAC;QADlD,WAAM,GAAN,MAAM,CAA8D;QAEvF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}
+{"version":3,"file":"token-provider.js","sourceRoot":"","sources":["../src/token-provider.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAqDnE,yFAAyF;AACzF,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD;QACE,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGhC;IAFX,0FAA0F;IAC1F,YACW,SAGY,aAAa;QAElC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAL5D,WAAM,GAAN,MAAM,CAGmB;QAGlC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAuB,EACvB,OAAwB,EACxB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;gBACL,GAAG,KAAK;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC1B,CAAC,CAAC,KAAK,IAAI,EAAE;wBACT,IAAI,CAAC;4BACH,OAAO,MAAM,KAAK,CAAC,UAAW,EAAE,CAAC;wBACnC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;wBACjC,CAAC;oBACH,CAAC;oBACH,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE;YACnE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,MAAM,OAAO,GAAiB,MAAM,CAAC,MAAM,CAAC;YAC1C,GAAG,OAAO;YACV,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CACnC,CACF;YACD,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,aAAa,EAAE,aAAa,CAAC,aAAa;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,CACnB,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAChD,6DAA6D;gBAC7D,IAAI,IAAI,KAAK,KAAK;oBAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC,CACH;YACD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IACE,CAAC,MAAM,CAAC,WAAW;YACnB,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAEzE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,OAAO;YACL,GAAG,EAAE,EAAE;YACP,MAAM;YACN,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,IAAI,CAAC;oBACH,OAAO,CACL,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAChE,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,gBAAgB,CAAC,KAAK,CAAC;QAC5B,KAAK,YAAY,0BAA0B;QAC3C,KAAK,YAAY,kBAAkB;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC;AAC/B,CAAC"}

package/build/transport.d.ts

@@ -21,6 +21,8 @@ export interface Transport<NativeRequest = Request> {
 }
 export interface ExtEventSource extends EventSource {
     connect(): void;
+    /** Stops the subscription and forwards an optional failure to upstream cleanup. */
+    close(reason?: unknown): void;
 }
 export type RequestMethod = 'GET' | 'PUT' | 'POST' | 'PATCH' | 'DELETE' | 'HEAD' | 'OPTIONS';
 export interface RequestSpec<B> {
@@ -41,6 +43,4 @@ export interface RequestSpec<B> {
     /** Complete, explicitly selected credential bindings for this operation. */
     security?: readonly SecurityBinding[];
 }
-export interface RequestAdapter {
-    adapt(transport: Transport, request: Request): Promise<Request>;
-}
+export type { RequestAdapter } from './request-adapter.js';

package/build/util/abort.d.ts

@@ -0,0 +1,3 @@
+export { discardBody } from './owned-body.js';
+/** Waits cooperatively without leaving abort listeners or late resource results behind. */
+export declare function withAbort<T>(action: () => T | PromiseLike<T>, signal: AbortSignal, discard?: (value: T, reason: unknown) => void): Promise<T>;

package/build/util/abort.js

@@ -0,0 +1,42 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+export { discardBody } from './owned-body.js';
+/** Waits cooperatively without leaving abort listeners or late resource results behind. */
+export function withAbort(action, signal, discard) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        let aborted = false;
+        const onAbort = () => {
+            aborted = true;
+            reject(signal.reason);
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+        Promise.resolve()
+            .then(() => {
+            signal.throwIfAborted();
+            return action();
+        })
+            .then((value) => {
+            signal.removeEventListener('abort', onAbort);
+            if (aborted)
+                discard?.(value, signal.reason);
+            else
+                resolve(value);
+        }, (error) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(error);
+        });
+    });
+}
+//# sourceMappingURL=abort.js.map

package/build/util/abort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../src/util/abort.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CACvB,MAAgC,EAChC,MAAmB,EACnB,OAA6C;IAE7C,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,OAAO,EAAE;aACd,IAAI,CAAC,GAAG,EAAE;YACT,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC;aACD,IAAI,CACH,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,OAAO;gBAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;;gBACxC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/util/native-fetch.d.ts

@@ -0,0 +1,2 @@
+/** @internal Repairs native Fetch failures only; source ownership takes precedence over native causes. */
+export declare function nativeFetch(request: Request, signal: AbortSignal): Promise<Response>;

package/build/util/native-fetch.js

@@ -0,0 +1,39 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { isRequestStopped } from '../request-cancellation-error.js';
+import { nativeBodyOperation } from './owned-body.js';
+/** @internal Repairs native Fetch failures only; source ownership takes precedence over native causes. */
+export function nativeFetch(request, signal) {
+    return nativeBodyOperation(request.body, async () => {
+        try {
+            return await fetch(request, { signal });
+        }
+        catch (error) {
+            if (signal.aborted)
+                throw signal.reason;
+            // Node may carry an unmanaged upload's stop error in Fetch's cause chain. This walk must
+            // never surround adapters, credential providers, decoders, or custom Fetch callbacks.
+            const seen = new Set();
+            let cause = error;
+            while (typeof cause === 'object' && cause !== null && !seen.has(cause)) {
+                if (isRequestStopped(cause))
+                    throw cause;
+                seen.add(cause);
+                cause = 'cause' in cause ? cause.cause : undefined;
+            }
+            throw error;
+        }
+    });
+}
+//# sourceMappingURL=native-fetch.js.map

package/build/util/native-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-fetch.js","sourceRoot":"","sources":["../../src/util/native-fetch.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CACzB,OAAgB,EAChB,MAAmB;IAEnB,OAAO,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAClD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;YACxC,yFAAyF;YACzF,sFAAsF;YACtF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;YAChC,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvE,IAAI,gBAAgB,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChB,KAAK,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACrD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/util/owned-body.d.ts

@@ -0,0 +1,12 @@
+/** @internal Owns only application streams, preserving byte-stream capability and backpressure. */
+export declare function ownBody(source: ReadableStream<Uint8Array>, signal?: AbortSignal): ReadableStream<Uint8Array>;
+/** @internal Transfers body metadata and retires unused native branches without consuming the active body. */
+export declare function inheritBody(source: ReadableStream<Uint8Array> | null | undefined, target: Request | Response, previousBody?: ReadableStream<Uint8Array> | null): void;
+/** @internal Recognizes constructor-transferred bodies even when a runtime creates a new stream handle. */
+export declare function sameBody(left: ReadableStream<Uint8Array> | null, right: ReadableStream<Uint8Array> | null): boolean;
+/** @internal Restores errors only at a native read/fetch boundary, never around application callbacks. */
+export declare function nativeBodyOperation<T>(body: ReadableStream<Uint8Array> | null | undefined, action: () => Promise<T>): Promise<T>;
+/** @internal Gives native bulk reads exact source errors and request reads cooperative cancellation. */
+export declare function bodyReads(value: Request | Response): void;
+/** @internal Disposes transferred bodies without waiting for user cleanup or replacing the original error. */
+export declare function discardBody(value: Request | Response, reason?: unknown): void;