@outfoxx/sunday 2.0.0-beta.19 → 2.0.0-beta.21

package/build/header-token-adapters.js

@@ -0,0 +1,121 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { TokenManager } from './token-manager.js';
+import { TokenProviderError } from './token-provider.js';
+import { copyRequest } from './fetch-copy.js';
+import { hasInvalidBearerChallenge } from './request-security.js';
+export class HeaderTokenAuthorizingAdapter {
+    header = 'Authorization';
+    tokenHeaderType = 'Bearer';
+    applyToken(request, accessToken) {
+        const headers = new Headers(request.headers);
+        headers.set(this.header, `${this.tokenHeaderType} ${accessToken}`);
+        return copyRequest(request, { headers });
+    }
+}
+export class StaticHeaderTokenAuthorizingAdapter extends HeaderTokenAuthorizingAdapter {
+    accessToken;
+    constructor(accessToken) {
+        super();
+        this.accessToken = accessToken;
+    }
+    async adapt(request) {
+        return this.applyToken(request, this.accessToken);
+    }
+}
+/** Optional caching authorization adapter; install its response capability explicitly for feedback. */
+export class RefreshingHeaderTokenAuthorizingAdapter extends HeaderTokenAuthorizingAdapter {
+    manager;
+    tokens;
+    lease;
+    constructor(refresh) {
+        super();
+        this.manager = new TokenManager({
+            identity: 'header-token-adapter',
+            configure: () => ({ clientIdentity: 'header-token-adapter' }),
+            acquire: async (_request, signal) => {
+                try {
+                    const authorization = await refresh(signal);
+                    return {
+                        accessToken: authorization.token,
+                        expiresAt: authorization.expires.getTime(),
+                    };
+                }
+                catch (error) {
+                    throw new RefreshFailure(error);
+                }
+            },
+        }, {
+            expirySkewMs: 0,
+            // One store slot, owned exclusively by this manager; no parallel adapter cache.
+            store: {
+                load: async () => this.tokens,
+                save: async (_key, tokens) => {
+                    this.tokens = tokens;
+                },
+                remove: async () => {
+                    this.tokens = undefined;
+                },
+            },
+        });
+    }
+    /** Reports the manager's current expiry state without starting a refresh. */
+    shouldRefresh() {
+        return !this.tokens || this.tokens.expiresAt <= Date.now();
+    }
+    async adapt(value, request) {
+        if (request) {
+            const response = value;
+            const lease = this.lease;
+            if (lease &&
+                response.status === 401 &&
+                hasInvalidBearerChallenge(response.headers.get('WWW-Authenticate') ?? '') &&
+                request.headers.get(this.header) ===
+                    `${this.tokenHeaderType} ${lease.tokens.accessToken}`) {
+                await lease.invalidate?.();
+            }
+            return response;
+        }
+        request = value;
+        try {
+            const lease = await this.manager.credentials({
+                scheme: 'header-token',
+                provider: 'header-token',
+                flow: 'external',
+                scopes: [],
+                transport: {
+                    location: 'header',
+                    name: this.header,
+                    prefix: this.tokenHeaderType,
+                },
+            }, request.signal);
+            request.signal.throwIfAborted();
+            this.lease = lease;
+            return this.applyToken(request, lease.tokens.accessToken);
+        }
+        catch (error) {
+            if (error instanceof RefreshFailure)
+                throw error.cause;
+            throw error;
+        }
+    }
+}
+// TokenManager sanitizes provider errors; this adapter retains its application-error contract.
+class RefreshFailure extends TokenProviderError {
+    constructor(cause) {
+        super();
+        this.cause = cause;
+    }
+}
+//# sourceMappingURL=header-token-adapters.js.map

package/build/header-token-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"header-token-adapters.js","sourceRoot":"","sources":["../src/header-token-adapters.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,YAAY,EAAc,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAY,MAAM,qBAAqB,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,MAAM,OAAgB,6BAA6B;IACjD,MAAM,GAAG,eAAe,CAAC;IACzB,eAAe,GAAG,QAAQ,CAAC;IAE3B,UAAU,CAAC,OAAgB,EAAE,WAAmB;QAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,IAAI,WAAW,EAAE,CAAC,CAAC;QACnE,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;CAGF;AAED,MAAM,OAAO,mCAAoC,SAAQ,6BAA6B;IACvD;IAA7B,YAA6B,WAAmB;QAC9C,KAAK,EAAE,CAAC;QADmB,gBAAW,GAAX,WAAW,CAAQ;IAEhD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;CACF;AAOD,uGAAuG;AACvG,MAAM,OAAO,uCACX,SAAQ,6BAA6B;IAGpB,OAAO,CAAe;IAC/B,MAAM,CAAY;IAClB,KAAK,CAAc;IAE3B,YAAY,OAA6D;QACvE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAC7B;YACE,QAAQ,EAAE,sBAAsB;YAChC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,sBAAsB,EAAE,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAClC,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC5C,OAAO;wBACL,WAAW,EAAE,aAAa,CAAC,KAAK;wBAChC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE;qBAC3C,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;SACF,EACD;YACE,YAAY,EAAE,CAAC;YACf,gFAAgF;YAChF,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM;gBAC7B,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;oBAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACvB,CAAC;gBACD,MAAM,EAAE,KAAK,IAAI,EAAE;oBACjB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC1B,CAAC;aACF;SACF,CACF,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,aAAa;QACX,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9D,CAAC;IAID,KAAK,CAAC,KAAK,CACT,KAAyB,EACzB,OAAiB;QAEjB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,KAAiB,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IACE,KAAK;gBACL,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,yBAAyB,CACvB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAC/C;gBACD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,GAAG,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EACvD,CAAC;gBACD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,KAAgB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAC1C;gBACE,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,cAAc;gBACxB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE;oBACT,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,IAAI,CAAC,MAAM;oBACjB,MAAM,EAAE,IAAI,CAAC,eAAe;iBAC7B;aACF,EACD,OAAO,CAAC,MAAM,CACf,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc;gBAAE,MAAM,KAAK,CAAC,KAAK,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,cAAe,SAAQ,kBAAkB;IAC7C,YAAY,KAAc;QACxB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/build/index.d.ts

@@ -26,8 +26,9 @@ export * from './date-time-types.js';
 export * from './streaming-body.js';
 export * from './operation-response.js';
 export * from './operation.js';
-export { HeaderTokenAuthorizingAdapter, StaticHeaderTokenAuthorizingAdapter, RefreshingHeaderTokenAuthorizingAdapter, RequestAdapters, chainRequestAdapters, } from './request-adapters.js';
-export type { TokenAuthorization } from './request-adapters.js';
+export { HeaderTokenAuthorizingAdapter, StaticHeaderTokenAuthorizingAdapter, RefreshingHeaderTokenAuthorizingAdapter, } from './header-token-adapters.js';
+export { RequestAdapters, chainRequestAdapters } from './request-adapters.js';
+export type { TokenAuthorization } from './header-token-adapters.js';
 export * from './util/errors.js';
 export * from './util/nullify.js';
 export * from './security-binding.js';
@@ -42,3 +43,8 @@ export * from './response-adapters.js';
 export * from './request-cancellation-error.js';
 export * from './fetch-copy.js';
 export * from './request-body.js';
+export { requestSecurityBindings } from './request-security-bindings.js';
+export { AuthenticationAdapter, authenticationAdapters, } from './authentication-adapter.js';
+export { requestContext } from './request-context.js';
+export { BearerTokenRejectionAdapter } from './bearer-token-rejection-adapter.js';
+export { StandardAuthenticationAdapter, standardTransportFromSettings, } from './standard-authentication-adapter.js';

package/build/index.js

@@ -39,7 +39,8 @@ export * from './date-time-types.js';
 export * from './streaming-body.js';
 export * from './operation-response.js';
 export * from './operation.js';
-export { HeaderTokenAuthorizingAdapter, StaticHeaderTokenAuthorizingAdapter, RefreshingHeaderTokenAuthorizingAdapter, RequestAdapters, chainRequestAdapters, } from './request-adapters.js';
+export { HeaderTokenAuthorizingAdapter, StaticHeaderTokenAuthorizingAdapter, RefreshingHeaderTokenAuthorizingAdapter, } from './header-token-adapters.js';
+export { RequestAdapters, chainRequestAdapters } from './request-adapters.js';
 // Select exports from util
 export * from './util/errors.js';
 export * from './util/nullify.js';
@@ -55,4 +56,9 @@ export * from './response-adapters.js';
 export * from './request-cancellation-error.js';
 export * from './fetch-copy.js';
 export * from './request-body.js';
+export { requestSecurityBindings } from './request-security-bindings.js';
+export { AuthenticationAdapter, authenticationAdapters, } from './authentication-adapter.js';
+export { requestContext } from './request-context.js';
+export { BearerTokenRejectionAdapter } from './bearer-token-rejection-adapter.js';
+export { StandardAuthenticationAdapter, standardTransportFromSettings, } from './standard-authentication-adapter.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,mCAAmC,EACnC,uCAAuC,EACvC,eAAe,EACf,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAG/B,2BAA2B;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAElC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,iCAAiC,CAAC;AAEhD,cAAc,+BAA+B,CAAC;AAE9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAErC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,iBAAiB,CAAC;AAEhC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,mCAAmC,EACnC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAG9E,2BAA2B;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAElC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,iCAAiC,CAAC;AAEhD,cAAc,+BAA+B,CAAC;AAE9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAErC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,iBAAiB,CAAC;AAEhC,cAAc,mBAAmB,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC"}

package/build/request-adapters-compat.d.ts

@@ -0,0 +1,6 @@
+/** Compatibility entry point for the original public request-adapters subpath.
+ * Internal transports import the token-independent chain module directly.
+ */
+export * from './request-adapters.js';
+export { HeaderTokenAuthorizingAdapter, StaticHeaderTokenAuthorizingAdapter, RefreshingHeaderTokenAuthorizingAdapter, } from './header-token-adapters.js';
+export type { TokenAuthorization } from './header-token-adapters.js';

package/build/request-adapters-compat.js

@@ -0,0 +1,19 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+/** Compatibility entry point for the original public request-adapters subpath.
+ * Internal transports import the token-independent chain module directly.
+ */
+export * from './request-adapters.js';
+export { HeaderTokenAuthorizingAdapter, StaticHeaderTokenAuthorizingAdapter, RefreshingHeaderTokenAuthorizingAdapter, } from './header-token-adapters.js';
+//# sourceMappingURL=request-adapters-compat.js.map

package/build/request-adapters-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-adapters-compat.js","sourceRoot":"","sources":["../src/request-adapters-compat.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC;;GAEG;AACH,cAAc,uBAAuB,CAAC;AACtC,OAAO,EACL,6BAA6B,EAC7B,mCAAmC,EACnC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC"}

package/build/request-adapters.d.ts

@@ -1,31 +1,4 @@
 import { RequestAdapter } from './request-adapter.js';
-import { ResponseAdapter } from './response-adapter.js';
-export declare abstract class HeaderTokenAuthorizingAdapter implements RequestAdapter {
-    header: string;
-    tokenHeaderType: string;
-    applyToken(request: Request, accessToken: string): Request;
-    abstract adapt(request: Request): Promise<Request>;
-}
-export declare class StaticHeaderTokenAuthorizingAdapter extends HeaderTokenAuthorizingAdapter {
-    private readonly accessToken;
-    constructor(accessToken: string);
-    adapt(request: Request): Promise<Request>;
-}
-export interface TokenAuthorization {
-    token: string;
-    expires: Date;
-}
-/** Optional caching authorization adapter; install its response capability explicitly for feedback. */
-export declare class RefreshingHeaderTokenAuthorizingAdapter extends HeaderTokenAuthorizingAdapter implements ResponseAdapter {
-    private readonly manager;
-    private tokens?;
-    private lease?;
-    constructor(refresh: (signal: AbortSignal) => Promise<TokenAuthorization>);
-    /** Reports the manager's current expiry state without starting a refresh. */
-    shouldRefresh(): boolean;
-    adapt(request: Request): Promise<Request>;
-    adapt(response: Response, request: Request): Promise<Response>;
-}
 /** Flat, ordered composition; adapters may be ordinary objects with an adapt method. */
 export declare class RequestAdapters implements RequestAdapter {
     readonly adapters: readonly RequestAdapter[];

package/build/request-adapters.js

@@ -11,115 +11,10 @@
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
+import { inheritRequestContext } from './request-context.js';
 import { bodyReads } from './util/owned-body.js';
-import { TokenManager } from './token-manager.js';
-import { TokenProviderError } from './token-provider.js';
 import { copyRequest } from './fetch-copy.js';
-import { hasInvalidBearerChallenge } from './request-security.js';
 import { withAbort, discardBody } from './util/abort.js';
-export class HeaderTokenAuthorizingAdapter {
-    header = 'Authorization';
-    tokenHeaderType = 'Bearer';
-    applyToken(request, accessToken) {
-        const headers = new Headers(request.headers);
-        headers.set(this.header, `${this.tokenHeaderType} ${accessToken}`);
-        return copyRequest(request, { headers });
-    }
-}
-export class StaticHeaderTokenAuthorizingAdapter extends HeaderTokenAuthorizingAdapter {
-    accessToken;
-    constructor(accessToken) {
-        super();
-        this.accessToken = accessToken;
-    }
-    async adapt(request) {
-        return this.applyToken(request, this.accessToken);
-    }
-}
-/** Optional caching authorization adapter; install its response capability explicitly for feedback. */
-export class RefreshingHeaderTokenAuthorizingAdapter extends HeaderTokenAuthorizingAdapter {
-    manager;
-    tokens;
-    lease;
-    constructor(refresh) {
-        super();
-        this.manager = new TokenManager({
-            identity: 'header-token-adapter',
-            configure: () => ({ clientIdentity: 'header-token-adapter' }),
-            acquire: async (_request, signal) => {
-                try {
-                    const authorization = await refresh(signal);
-                    return {
-                        accessToken: authorization.token,
-                        expiresAt: authorization.expires.getTime(),
-                    };
-                }
-                catch (error) {
-                    throw new RefreshFailure(error);
-                }
-            },
-        }, {
-            expirySkewMs: 0,
-            // One store slot, owned exclusively by this manager; no parallel adapter cache.
-            store: {
-                load: async () => this.tokens,
-                save: async (_key, tokens) => {
-                    this.tokens = tokens;
-                },
-                remove: async () => {
-                    this.tokens = undefined;
-                },
-            },
-        });
-    }
-    /** Reports the manager's current expiry state without starting a refresh. */
-    shouldRefresh() {
-        return !this.tokens || this.tokens.expiresAt <= Date.now();
-    }
-    async adapt(value, request) {
-        if (request) {
-            const response = value;
-            const lease = this.lease;
-            if (lease &&
-                response.status === 401 &&
-                hasInvalidBearerChallenge(response.headers.get('WWW-Authenticate') ?? '') &&
-                request.headers.get(this.header) ===
-                    `${this.tokenHeaderType} ${lease.tokens.accessToken}`) {
-                await lease.invalidate?.();
-            }
-            return response;
-        }
-        request = value;
-        try {
-            const lease = await this.manager.credentials({
-                scheme: 'header-token',
-                provider: 'header-token',
-                flow: 'external',
-                scopes: [],
-                transport: {
-                    location: 'header',
-                    name: this.header,
-                    prefix: this.tokenHeaderType,
-                },
-            }, request.signal);
-            request.signal.throwIfAborted();
-            this.lease = lease;
-            return this.applyToken(request, lease.tokens.accessToken);
-        }
-        catch (error) {
-            if (error instanceof RefreshFailure)
-                throw error.cause;
-            throw error;
-        }
-    }
-}
-// TokenManager sanitizes provider errors; this adapter retains its application-error contract.
-class RefreshFailure extends TokenProviderError {
-    constructor(cause) {
-        super();
-        this.cause = cause;
-    }
-}
 /** Flat, ordered composition; adapters may be ordinary objects with an adapt method. */
 export class RequestAdapters {
     adapters;
@@ -140,7 +35,9 @@ export async function adaptRequest(adapters, request, observeSignal = () => { })
     try {
         bodyReads(request);
         for (const adapter of adapters) {
+            const original = request;
             request = await withAbort(() => adapter.adapt(request), signal, discardBody);
+            inheritRequestContext(original, request);
             if (request.signal !== signal)
                 request = copyRequest(request, {
                     signal: AbortSignal.any([signal, request.signal]),

package/build/request-adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-adapters.js","sourceRoot":"","sources":["../src/request-adapters.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAc,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAY,MAAM,qBAAqB,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,OAAgB,6BAA6B;IACjD,MAAM,GAAG,eAAe,CAAC;IACzB,eAAe,GAAG,QAAQ,CAAC;IAE3B,UAAU,CAAC,OAAgB,EAAE,WAAmB;QAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,IAAI,WAAW,EAAE,CAAC,CAAC;QACnE,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;CAGF;AAED,MAAM,OAAO,mCAAoC,SAAQ,6BAA6B;IACvD;IAA7B,YAA6B,WAAmB;QAC9C,KAAK,EAAE,CAAC;QADmB,gBAAW,GAAX,WAAW,CAAQ;IAEhD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;CACF;AAOD,uGAAuG;AACvG,MAAM,OAAO,uCACX,SAAQ,6BAA6B;IAGpB,OAAO,CAAe;IAC/B,MAAM,CAAY;IAClB,KAAK,CAAc;IAE3B,YAAY,OAA6D;QACvE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAC7B;YACE,QAAQ,EAAE,sBAAsB;YAChC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,sBAAsB,EAAE,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAClC,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC5C,OAAO;wBACL,WAAW,EAAE,aAAa,CAAC,KAAK;wBAChC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE;qBAC3C,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;SACF,EACD;YACE,YAAY,EAAE,CAAC;YACf,gFAAgF;YAChF,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM;gBAC7B,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;oBAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACvB,CAAC;gBACD,MAAM,EAAE,KAAK,IAAI,EAAE;oBACjB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC1B,CAAC;aACF;SACF,CACF,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,aAAa;QACX,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9D,CAAC;IAID,KAAK,CAAC,KAAK,CACT,KAAyB,EACzB,OAAiB;QAEjB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,KAAiB,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IACE,KAAK;gBACL,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,yBAAyB,CACvB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAC/C;gBACD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,GAAG,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EACvD,CAAC;gBACD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,KAAgB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAC1C;gBACE,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,cAAc;gBACxB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE;oBACT,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,IAAI,CAAC,MAAM;oBACjB,MAAM,EAAE,IAAI,CAAC,eAAe;iBAC7B;aACF,EACD,OAAO,CAAC,MAAM,CACf,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc;gBAAE,MAAM,KAAK,CAAC,KAAK,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,cAAe,SAAQ,kBAAkB;IAC7C,YAAY,KAAc;QACxB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,OAAO,eAAe;IACjB,QAAQ,CAA4B;IAE7C,YAAY,GAAG,QAAmC;QAChD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC3B,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3B,OAAO,YAAY,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAClE,CACF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,OAAO,CAAC,GAAG,IAA+B;QACxC,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAmC,EACnC,OAAgB,EAChB,gBAA+C,GAAG,EAAE,GAAE,CAAC;IAEvD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,GAAG,MAAM,SAAS,CACvB,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAC5B,MAAM,EACN,WAAW,CACZ,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAC3B,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE;oBAC7B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;iBAClD,CAAC,CAAC;YACL,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAClC,GAAG,QAAmC;IAEtC,OAAO,IAAI,eAAe,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"request-adapters.js","sourceRoot":"","sources":["../src/request-adapters.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEzD,wFAAwF;AACxF,MAAM,OAAO,eAAe;IACjB,QAAQ,CAA4B;IAE7C,YAAY,GAAG,QAAmC;QAChD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC3B,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3B,OAAO,YAAY,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAClE,CACF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,OAAO,CAAC,GAAG,IAA+B;QACxC,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAmC,EACnC,OAAgB,EAChB,gBAA+C,GAAG,EAAE,GAAE,CAAC;IAEvD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC;YACzB,OAAO,GAAG,MAAM,SAAS,CACvB,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAC5B,MAAM,EACN,WAAW,CACZ,CAAC;YACF,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAC3B,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE;oBAC7B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;iBAClD,CAAC,CAAC;YACL,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAClC,GAAG,QAAmC;IAEtC,OAAO,IAAI,eAAe,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC1C,CAAC"}

package/build/request-context.d.ts

@@ -0,0 +1,4 @@
+/** Application-owned metadata retained across Sunday request copies and adapter replacements. */
+export declare function requestContext(request: Request): Map<symbol, unknown>;
+/** @internal Preserve metadata while allowing an adapter to replace its own entries. */
+export declare function inheritRequestContext(source: Request, target: Request): Request;

package/build/request-context.js

@@ -0,0 +1,29 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+const contexts = new WeakMap();
+/** Application-owned metadata retained across Sunday request copies and adapter replacements. */
+export function requestContext(request) {
+    let context = contexts.get(request);
+    if (!context) {
+        context = new Map();
+        contexts.set(request, context);
+    }
+    return context;
+}
+/** @internal Preserve metadata while allowing an adapter to replace its own entries. */
+export function inheritRequestContext(source, target) {
+    contexts.set(target, new Map([...requestContext(source), ...requestContext(target)]));
+    return target;
+}
+//# sourceMappingURL=request-context.js.map

package/build/request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../src/request-context.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAiC,CAAC;AAE9D,iGAAiG;AACjG,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACpB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CACnC,MAAe,EACf,MAAe;IAEf,QAAQ,CAAC,GAAG,CACV,MAAM,EACN,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAChE,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/request-execution.d.ts

@@ -1,18 +1,13 @@
 import { RequestAdapter } from './request-adapter.js';
 import { ResponseAdapter } from './response-adapter.js';
 import { SecurityBinding } from './security-binding.js';
-import { TokenProvider } from './token-provider.js';
 /** @internal Shared configuration; receipts, cancellation, and retry state belong to each invocation. */
 export declare class RequestExecution {
-    private readonly providers;
-    private readonly maxBufferedRequestBytes?;
     private readonly requests;
     private readonly responses;
-    constructor(providers: Readonly<Record<string, TokenProvider>>, requestAdapter?: RequestAdapter, responseAdapter?: ResponseAdapter, maxBufferedRequestBytes?: number | undefined);
+    constructor(requestAdapter?: RequestAdapter, responseAdapter?: ResponseAdapter);
     /** Materializes once; the consumer owns the resulting native request and its execution. */
     export(request: Request, bindings: readonly SecurityBinding[]): Promise<Request>;
     /** Executes one logical operation, including the caller's body consumption when provided. */
-    execute<T>(prepared: Request, bindings: readonly SecurityBinding[], budget: {
-        recovered: boolean;
-    }, consume: (response: Response, request: Request) => T | Promise<T>, observeSignal?: (signal: AbortSignal) => void): Promise<T>;
+    execute<T>(prepared: Request, bindings: readonly SecurityBinding[], consume: (response: Response, request: Request) => T | Promise<T>, observeSignal?: (signal: AbortSignal) => void): Promise<T>;
 }

package/build/request-execution.js

@@ -15,27 +15,22 @@ import { nativeFetch } from './util/native-fetch.js';
 import { copyRequest } from './fetch-copy.js';
 import { RequestAdapters, adaptRequest } from './request-adapters.js';
 import { ResponseAdapters, adaptResponse } from './response-adapters.js';
+import { setRequestSecurityBindings } from './request-security-bindings.js';
 import { requestFailure } from './request-cancellation-error.js';
-import { authorizeRequest, canRecoverAuthentication, isBodylessRequest, rejectCredentials, redactSecurityResponse, } from './request-security.js';
 import { discardBody, withAbort } from './util/abort.js';
 /** @internal Shared configuration; receipts, cancellation, and retry state belong to each invocation. */
 export class RequestExecution {
-    providers;
-    maxBufferedRequestBytes;
     requests;
     responses;
-    constructor(providers, requestAdapter, responseAdapter, maxBufferedRequestBytes) {
-        this.providers = providers;
-        this.maxBufferedRequestBytes = maxBufferedRequestBytes;
+    constructor(requestAdapter, responseAdapter) {
         this.requests = new RequestAdapters(...(requestAdapter ? [requestAdapter] : []));
         this.responses = new ResponseAdapters(...(responseAdapter ? [responseAdapter] : []));
     }
     /** Materializes once; the consumer owns the resulting native request and its execution. */
     async export(request, bindings) {
         try {
-            if (bindings.length)
-                request = (await withAbort(() => authorizeRequest(request, bindings, this.providers, this.maxBufferedRequestBytes), request.signal, (value, reason) => discardBody(value.request, reason))).request;
-            return await this.requests.adapt(request);
+            setRequestSecurityBindings(request, bindings);
+            return setRequestSecurityBindings(await this.requests.adapt(request), []);
         }
         catch (error) {
             discardBody(request, error);
@@ -43,57 +38,34 @@ export class RequestExecution {
         }
     }
     /** Executes one logical operation, including the caller's body consumption when provided. */
-    async execute(prepared, bindings, budget, consume, observeSignal = () => { }) {
+    async execute(prepared, bindings, consume, observeSignal = () => { }) {
         const controller = new AbortController();
         let signal = prepared.signal;
         observeSignal(signal);
         let sent = prepared;
         let response;
         try {
-            while (true) {
-                signal.throwIfAborted();
-                sent = copyRequest(prepared, { signal });
-                let authorized;
-                if (bindings.length) {
-                    const request = sent;
-                    authorized = await withAbort(() => authorizeRequest(request, bindings, this.providers, this.maxBufferedRequestBytes), signal, (value, reason) => discardBody(value.request, reason));
-                    sent = authorized.request;
-                }
-                sent = await adaptRequest(this.requests.adapters, sent, (effective) => {
-                    signal = effective;
-                    observeSignal(signal);
-                });
-                // Fetch does not expose intermediate redirect responses in browsers. Credentialed calls
-                // must return the redirect instead of forwarding credentials beyond their selected origin.
-                if (bindings.length ||
-                    sent.headers.has('Authorization') ||
-                    sent.headers.has('Cookie')) {
-                    sent = copyRequest(sent, { redirect: 'manual', credentials: 'omit' });
-                }
-                const request = sent;
-                response = await withAbort(
-                // Keep cleanup cancellation separate from caller/adapter cancellation so an ordinary
-                // network failure remains eligible for the event source's reconnect policy.
-                () => nativeFetch(request, AbortSignal.any([request.signal, controller.signal])), request.signal, discardBody);
-                if (authorized) {
-                    authorized = { ...authorized, request };
-                    const original = response;
-                    const receipts = authorized;
-                    await withAbort(() => rejectCredentials(receipts, original), request.signal);
-                    response = redactSecurityResponse(response, bindings);
-                }
-                response = await adaptResponse(this.responses.adapters, response, request, true);
-                if (!budget.recovered &&
-                    isBodylessRequest(prepared) &&
-                    canRecoverAuthentication(request, response)) {
-                    budget.recovered = true;
-                    discardBody(response);
-                    response = undefined;
-                    continue;
-                }
-                const accepted = response;
-                return await withAbort(() => consume(accepted, request), request.signal);
+            signal.throwIfAborted();
+            sent = setRequestSecurityBindings(copyRequest(prepared, { signal }), bindings);
+            sent = await adaptRequest(this.requests.adapters, sent, (effective) => {
+                signal = effective;
+                observeSignal(signal);
+            });
+            // Fetch does not expose intermediate redirect responses in browsers. Credentialed calls
+            // must return the redirect instead of forwarding credentials beyond their selected origin.
+            if (bindings.length ||
+                sent.headers.has('Authorization') ||
+                sent.headers.has('Cookie')) {
+                sent = copyRequest(sent, { redirect: 'manual', credentials: 'omit' });
             }
+            const request = sent;
+            response = await withAbort(
+            // Keep cleanup cancellation separate from caller/adapter cancellation so an ordinary
+            // network failure remains eligible for the event source's reconnect policy.
+            () => nativeFetch(request, AbortSignal.any([request.signal, controller.signal])), request.signal, discardBody);
+            response = await adaptResponse(this.responses.adapters, response, request, true);
+            const accepted = response;
+            return await withAbort(() => consume(accepted, request), request.signal);
         }
         catch (error) {
             const failure = requestFailure(error, signal);

package/build/request-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-execution.js","sourceRoot":"","sources":["../src/request-execution.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EACL,gBAAgB,EAEhB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEzD,yGAAyG;AACzG,MAAM,OAAO,gBAAgB;IAKR;IAGA;IAPF,QAAQ,CAAkB;IAC1B,SAAS,CAAmB;IAE7C,YACmB,SAAkD,EACnE,cAA+B,EAC/B,eAAiC,EAChB,uBAAgC;QAHhC,cAAS,GAAT,SAAS,CAAyC;QAGlD,4BAAuB,GAAvB,uBAAuB,CAAS;QAEjD,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CACjC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,MAAM,CACV,OAAgB,EAChB,QAAoC;QAEpC,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM;gBACjB,OAAO,GAAG,CACR,MAAM,SAAS,CACb,GAAG,EAAE,CACH,gBAAgB,CACd,OAAO,EACP,QAAQ,EACR,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,uBAAuB,CAC7B,EACH,OAAO,CAAC,MAAM,EACd,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CACtD,CACF,CAAC,OAAO,CAAC;YACZ,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,OAAO,CACX,QAAiB,EACjB,QAAoC,EACpC,MAA8B,EAC9B,OAAiE,EACjE,gBAA+C,GAAG,EAAE,GAAE,CAAC;QAEvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7B,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,IAAI,GAAG,QAAQ,CAAC;QACpB,IAAI,QAA8B,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzC,IAAI,UAAyC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,OAAO,GAAG,IAAI,CAAC;oBACrB,UAAU,GAAG,MAAM,SAAS,CAC1B,GAAG,EAAE,CACH,gBAAgB,CACd,OAAO,EACP,QAAQ,EACR,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,uBAAuB,CAC7B,EACH,MAAM,EACN,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CACtD,CAAC;oBACF,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;gBAC5B,CAAC;gBACD,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;oBACpE,MAAM,GAAG,SAAS,CAAC;oBACnB,aAAa,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC,CAAC,CAAC;gBACH,wFAAwF;gBACxF,2FAA2F;gBAC3F,IACE,QAAQ,CAAC,MAAM;oBACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;oBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC1B,CAAC;oBACD,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC;gBACrB,QAAQ,GAAG,MAAM,SAAS;gBACxB,qFAAqF;gBACrF,4EAA4E;gBAC5E,GAAG,EAAE,CACH,WAAW,CACT,OAAO,EACP,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CACrD,EACH,OAAO,CAAC,MAAM,EACd,WAAW,CACZ,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,UAAU,GAAG,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC;oBACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC;oBAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC;oBAC5B,MAAM,SAAS,CACb,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC3C,OAAO,CAAC,MAAM,CACf,CAAC;oBACF,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACxD,CAAC;gBACD,QAAQ,GAAG,MAAM,aAAa,CAC5B,IAAI,CAAC,SAAS,CAAC,QAAQ,EACvB,QAAQ,EACR,OAAO,EACP,IAAI,CACL,CAAC;gBACF,IACE,CAAC,MAAM,CAAC,SAAS;oBACjB,iBAAiB,CAAC,QAAQ,CAAC;oBAC3B,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC3C,CAAC;oBACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;oBACxB,WAAW,CAAC,QAAQ,CAAC,CAAC;oBACtB,QAAQ,GAAG,SAAS,CAAC;oBACrB,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,QAAQ,CAAC;gBAC1B,OAAO,MAAM,SAAS,CACpB,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,QAAQ;gBAAE,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7C,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3B,MAAM,OAAO,CAAC;QAChB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"request-execution.js","sourceRoot":"","sources":["../src/request-execution.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEzD,yGAAyG;AACzG,MAAM,OAAO,gBAAgB;IACV,QAAQ,CAAkB;IAC1B,SAAS,CAAmB;IAE7C,YACE,cAA+B,EAC/B,eAAiC;QAEjC,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CACjC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,MAAM,CACV,OAAgB,EAChB,QAAoC;QAEpC,IAAI,CAAC;YACH,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9C,OAAO,0BAA0B,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,OAAO,CACX,QAAiB,EACjB,QAAoC,EACpC,OAAiE,EACjE,gBAA+C,GAAG,EAAE,GAAE,CAAC;QAEvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7B,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,IAAI,GAAG,QAAQ,CAAC;QACpB,IAAI,QAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,GAAG,0BAA0B,CAC/B,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EACjC,QAAQ,CACT,CAAC;YACF,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;gBACpE,MAAM,GAAG,SAAS,CAAC;gBACnB,aAAa,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,wFAAwF;YACxF,2FAA2F;YAC3F,IACE,QAAQ,CAAC,MAAM;gBACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC1B,CAAC;gBACD,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC;YACrB,QAAQ,GAAG,MAAM,SAAS;YACxB,qFAAqF;YACrF,4EAA4E;YAC5E,GAAG,EAAE,CACH,WAAW,CACT,OAAO,EACP,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CACrD,EACH,OAAO,CAAC,MAAM,EACd,WAAW,CACZ,CAAC;YACF,QAAQ,GAAG,MAAM,aAAa,CAC5B,IAAI,CAAC,SAAS,CAAC,QAAQ,EACvB,QAAQ,EACR,OAAO,EACP,IAAI,CACL,CAAC;YACF,MAAM,QAAQ,GAAG,QAAQ,CAAC;YAC1B,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,QAAQ;gBAAE,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7C,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3B,MAAM,OAAO,CAAC;QAChB,CAAC;IACH,CAAC;CACF"}

package/build/request-security-bindings.d.ts

@@ -0,0 +1,5 @@
+import type { SecurityBinding } from './security-binding.js';
+/** Returns operation security metadata for application-owned HTTP adapters, without token state. */
+export declare function requestSecurityBindings(request: Request): readonly SecurityBinding[];
+/** @internal Snapshots metadata without adding wire headers or credential receipts. */
+export declare function setRequestSecurityBindings(request: Request, values: readonly SecurityBinding[]): Request;

package/build/request-security-bindings.js

@@ -0,0 +1,30 @@
+// Copyright 2020 Outfox, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { requestContext } from './request-context.js';
+const bindings = Symbol('operationSecurityBindings');
+const empty = Object.freeze([]);
+/** Returns operation security metadata for application-owned HTTP adapters, without token state. */
+export function requestSecurityBindings(request) {
+    return (requestContext(request).get(bindings) ?? empty);
+}
+/** @internal Snapshots metadata without adding wire headers or credential receipts. */
+export function setRequestSecurityBindings(request, values) {
+    requestContext(request).set(bindings, Object.freeze(values.map((value) => Object.freeze({
+        ...value,
+        scopes: Object.freeze([...value.scopes]),
+        transport: Object.freeze({ ...value.transport }),
+    }))));
+    return request;
+}
+//# sourceMappingURL=request-security-bindings.js.map

package/build/request-security-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-security-bindings.js","sourceRoot":"","sources":["../src/request-security-bindings.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AAIjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,QAAQ,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AACrD,MAAM,KAAK,GAA+B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE5D,oGAAoG;AACpG,MAAM,UAAU,uBAAuB,CACrC,OAAgB;IAEhB,OAAO,CACJ,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAEvB,IAAI,KAAK,CACxB,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CACxC,OAAgB,EAChB,MAAkC;IAElC,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CACzB,QAAQ,EACR,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,MAAM,CAAC;QACZ,GAAG,KAAK;QACR,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;KACjD,CAAC,CACH,CACF,CACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}