@pipeline-builder/api-core 4.1.2 → 4.1.4

package/lib/services/env-redis.js

@@ -4,91 +4,233 @@ import { createRequire } from 'module';
 import { createLogger } from '../utils/logger.js';
 const logger = createLogger('env-redis');
 /**
- * Parse `REDIS_SENTINELS` (comma-separated `host:port` list) into the ioredis
- * `{ host, port }[]` sentinel array. Blank/garbage entries are skipped; a
- * missing port defaults to the Sentinel default 26379. Returns an empty array
- * when the env is unset/empty (→ non-sentinel mode).
+ * The ONE place Redis connection settings are read from the environment.
+ *
+ * Two shapes, exactly one of which may be set:
+ *
+ * - **Standalone** — `REDIS_URL` (`redis://host:6379[/db]`, or `rediss://` for
+ *   TLS). Credentials may sit in the URL or in `REDIS_PASSWORD`.
+ * - **HA (Sentinel)** — `REDIS_SENTINELS` (comma-separated `host:port`) plus
+ *   `REDIS_SENTINEL_MASTER` (default `mymaster`) and optional
+ *   `REDIS_SENTINEL_PASSWORD`. `REDIS_PASSWORD` authenticates to the data nodes.
+ *   ioredis follows the master across a failover.
+ *
+ * Neither set → Redis is off, and each caller degrades to its documented
+ * no-Redis behavior.
+ *
+ * `REDIS_HOST` / `REDIS_PORT` are not read. `REDIS_HOST` is refused outright so a
+ * stale config fails at startup instead of silently running without Redis.
+ * `REDIS_PORT` can't be refused: Kubernetes injects `REDIS_PORT=tcp://<ip>:6379`
+ * into every pod in a namespace with a Service named `redis`, which is exactly
+ * why a host/port pair was unsafe to parse.
+ *
+ * Misconfiguration throws {@link RedisConfigError}. Writers and readers of the
+ * same keys (revocation, step-up, leader locks) must resolve Redis identically;
+ * a config that quietly resolved to "no Redis" on one side is how revocation
+ * once did nothing at all.
+ */
+/** Thrown for a Redis environment that can't be used as written. */
+export class RedisConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RedisConfigError';
+    }
+}
+/**
+ * Parse `REDIS_SENTINELS` into `{ host, port }[]`. Blank entries are skipped and
+ * a missing port means the Sentinel default 26379; a port that isn't a valid
+ * TCP port is a configuration error.
  */
 export function parseSentinels(raw) {
     if (!raw)
         return [];
     return raw.split(',').map((s) => s.trim()).filter(Boolean).map((entry) => {
-        const [host, port] = entry.split(':');
-        return { host, port: parseInt(port ?? '26379', 10) || 26379 };
-    }).filter((s) => !!s.host);
+        const idx = entry.lastIndexOf(':');
+        const host = idx === -1 ? entry : entry.slice(0, idx);
+        const portText = idx === -1 ? '' : entry.slice(idx + 1);
+        const port = portText === '' ? 26379 : Number(portText);
+        if (!host || !Number.isInteger(port) || port < 1 || port > 65535) {
+            throw new RedisConfigError(`REDIS_SENTINELS entry "${entry}" is not host:port`);
+        }
+        return { host, port };
+    });
+}
+/**
+ * Resolve the Redis connection from `env`, or `null` when Redis isn't
+ * configured. Throws {@link RedisConfigError} for an unusable configuration.
+ */
+export function resolveRedisConnection(env = process.env) {
+    if (env.REDIS_HOST) {
+        throw new RedisConfigError('REDIS_HOST is not supported. Set REDIS_URL=redis://<host>:<port> (or REDIS_SENTINELS for HA) and remove REDIS_HOST/REDIS_PORT.');
+    }
+    const sentinels = parseSentinels(env.REDIS_SENTINELS);
+    const url = env.REDIS_URL?.trim();
+    const password = env.REDIS_PASSWORD || undefined;
+    if (sentinels.length > 0 && url) {
+        throw new RedisConfigError('Set REDIS_URL or REDIS_SENTINELS, not both.');
+    }
+    if (sentinels.length > 0) {
+        return {
+            mode: 'sentinel',
+            sentinels,
+            masterName: env.REDIS_SENTINEL_MASTER || 'mymaster',
+            password,
+            sentinelPassword: env.REDIS_SENTINEL_PASSWORD || undefined,
+        };
+    }
+    if (url) {
+        let parsed;
+        try {
+            parsed = new URL(url);
+        }
+        catch {
+            throw new RedisConfigError('REDIS_URL is not a valid URL (expected redis://<host>:<port>).');
+        }
+        if (parsed.protocol !== 'redis:' && parsed.protocol !== 'rediss:') {
+            throw new RedisConfigError(`REDIS_URL must use redis:// or rediss://, got ${parsed.protocol}//`);
+        }
+        if (!parsed.hostname)
+            throw new RedisConfigError('REDIS_URL has no host.');
+        return { mode: 'url', url, password };
+    }
+    return null;
+}
+/** A log-safe description of a connection (never includes credentials). */
+export function describeRedisConnection(conn) {
+    if (conn.mode === 'sentinel') {
+        return { mode: 'sentinel', master: conn.masterName, sentinels: conn.sentinels.length };
+    }
+    const u = new URL(conn.url);
+    return { mode: 'url', host: u.hostname, port: u.port || '6379', tls: u.protocol === 'rediss:' };
+}
+function loadIoredis() {
+    const req = createRequire(import.meta.url);
+    const mod = req('ioredis');
+    return (mod.Redis ?? mod.default ?? mod);
 }
 /**
- * Construct an ioredis client from the standard `REDIS_URL` or
- * `REDIS_HOST`/`REDIS_PORT` env — OR, for HA, from Redis Sentinel via
- * `REDIS_SENTINELS` + `REDIS_SENTINEL_MASTER`. The shared construction was
- * previously duplicated across the leader-lock, audit-spool, and
- * token-revocation env factories.
+ * Construct an ioredis client for a resolved connection. `options` are merged
+ * into the client options (e.g. `{ db, maxRetriesPerRequest: null }` for BullMQ).
+ * An `error` listener is always attached so a dropped connection is logged
+ * rather than surfacing as an unhandled `'error'` event that crashes Node.
+ */
+export function createRedisClient(conn, label, options = {}) {
+    const Ctor = loadIoredis();
+    const auth = conn.password ? { password: conn.password } : {};
+    const inst = conn.mode === 'sentinel'
+        ? new Ctor({
+            sentinels: conn.sentinels,
+            name: conn.masterName,
+            ...(conn.sentinelPassword ? { sentinelPassword: conn.sentinelPassword } : {}),
+            ...auth,
+            ...options,
+        })
+        : new Ctor(conn.url, { ...auth, ...options });
+    inst
+        .on('error', (e) => logger.warn(`Redis ${label} client error`, { error: e instanceof Error ? e.message : String(e) }));
+    return inst;
+}
+/**
+ * The shared application Redis client: `null` when Redis isn't configured, so
+ * the caller degrades to its no-Redis behavior.
  *
- * Connection modes (first that matches wins):
- * 1. SENTINEL — `REDIS_SENTINELS` set (comma-separated `host:port`): ioredis
- *    resolves the current master from the sentinels (`name` = `REDIS_SENTINEL_MASTER`,
- *    default `mymaster`) and transparently reconnects to the new master after a
- *    failover. This is how the app gets HA against a single-node Redis loss —
- *    also the shape a managed ElastiCache (cluster-mode-disabled) speaks.
- * 2. URL — `REDIS_URL`.
- * 3. HOST/PORT — `REDIS_HOST`(+`REDIS_PORT`).
+ * Commands fail fast (`maxRetriesPerRequest: 1`, no offline queue) because the
+ * request-path callers are best-effort or fail closed on their own terms — a
+ * request must not hang behind a Redis outage. That includes the moments before
+ * the first connection completes: a background caller that runs at startup must
+ * either tolerate a rejected command or wait with {@link whenRedisReady}.
  *
- * Semantics every caller relies on (kept identical across the consolidation):
- * - Returns `null` when NONE of sentinels/url/host is set, so a caller degrades
- *   to its no-Redis fallback (run-on-every-pod / best-effort / fail-open).
- * - FAIL-SAFE: any ioredis load or construction error is swallowed and returns
- *   `null` — Redis being unavailable must never crash the importing service.
- * - `ioredis` is a runtime-only optional dep loaded via `createRequire`, so this
- *   module stays importable in CJS bundles and where Redis isn't installed.
- * - `maxRetriesPerRequest: 1` + `enableOfflineQueue: false`: commands fail fast
- *   rather than queueing during an outage (callers are fail-open/best-effort).
- * - An `error` listener is attached (ioredis auto-reconnects) so a dropped
- *   connection can't surface as an unhandled `'error'` event that crashes Node.
+ * Throws {@link RedisConfigError} for a bad configuration, and if Redis is
+ * configured but `ioredis` can't be loaded — both are deployment errors that
+ * must not quietly turn Redis-backed guarantees off.
+ */
+export function createEnvRedisClient(label) {
+    const conn = resolveRedisConnection();
+    if (!conn)
+        return null;
+    const inst = createRedisClient(conn, label, { maxRetriesPerRequest: 1, enableOfflineQueue: false });
+    logger.info(`Redis ${label} client created`, describeRedisConnection(conn));
+    return inst;
+}
+/**
+ * Resolve once `client` is connected and ready for commands, or reject after
+ * `timeoutMs`. For startup work (creating a consumer group, subscribing) that
+ * otherwise races the first connection. A client without ioredis' `status`
+ * (e.g. a test double) counts as ready.
+ */
+export function whenRedisReady(client, timeoutMs = 30_000) {
+    if (client.status === undefined || client.status === 'ready' || !client.once)
+        return Promise.resolve();
+    return new Promise((resolve, reject) => {
+        const onReady = () => { clearTimeout(timer); resolve(); };
+        const timer = setTimeout(() => {
+            client.off?.('ready', onReady);
+            reject(new Error(`Redis not ready after ${timeoutMs}ms`));
+        }, timeoutMs);
+        timer.unref?.();
+        client.once('ready', onReady);
+    });
+}
+/** Default bound for {@link createRedisReadyGate}: short enough for a request path. */
+export const REQUEST_PATH_REDIS_READY_TIMEOUT_MS = 2_000;
+/**
+ * A request-path readiness gate for a lazily built env Redis client.
  *
- * Optional auth: `REDIS_PASSWORD` (data-node AUTH) and `REDIS_SENTINEL_PASSWORD`
- * (sentinel AUTH, sentinel mode only) are threaded through when set.
+ * The env client has no offline queue, so a command issued before the first
+ * connection completes is rejected outright — the first request after a lazy
+ * construction would otherwise hit that rejection (e.g. the first step-up per
+ * pod failing, or the first impersonation check reading "unavailable").
  *
- * @param label short human name for this client, used in the two warn logs.
+ * The returned function resolves once the client is ready, or after
+ * `timeoutMs` — it NEVER rejects: the caller then runs its command and keeps its
+ * own fail-open / fail-closed semantics. Concurrent callers share one wait. After
+ * a wait times out (Redis genuinely down) later calls stop waiting until the
+ * client reports `ready` again, so an outage costs one bounded wait instead of
+ * adding `timeoutMs` to every request.
  */
-export function createEnvRedisClient(label) {
-    try {
-        const sentinels = parseSentinels(process.env.REDIS_SENTINELS);
-        const url = process.env.REDIS_URL;
-        const host = process.env.REDIS_HOST;
-        if (sentinels.length === 0 && !url && !host)
-            return null;
-        const req = createRequire(import.meta.url);
-        const mod = req('ioredis');
-        const RedisCtor = (mod.Redis ?? mod.default ?? mod);
-        const redisOpts = { maxRetriesPerRequest: 1, enableOfflineQueue: false };
-        if (process.env.REDIS_PASSWORD)
-            redisOpts.password = process.env.REDIS_PASSWORD;
-        let inst;
-        if (sentinels.length > 0) {
-            // Sentinel mode: ioredis tracks the master via the sentinels + auto-fails-over.
-            const sentinelOpts = {
-                sentinels,
-                name: process.env.REDIS_SENTINEL_MASTER || 'mymaster',
-                ...redisOpts,
-            };
-            if (process.env.REDIS_SENTINEL_PASSWORD)
-                sentinelOpts.sentinelPassword = process.env.REDIS_SENTINEL_PASSWORD;
-            inst = new RedisCtor(sentinelOpts);
-            logger.info(`Redis ${label}: Sentinel mode`, { master: sentinelOpts.name, sentinels: sentinels.length });
-        }
-        else if (url) {
-            inst = new RedisCtor(url, redisOpts);
+export function createRedisReadyGate(client, timeoutMs = REQUEST_PATH_REDIS_READY_TIMEOUT_MS) {
+    let inflight = null;
+    let gaveUp = false;
+    return () => {
+        if (client.status === undefined || client.status === 'ready' || !client.once) {
+            gaveUp = false;
+            return Promise.resolve();
         }
-        else {
-            inst = new RedisCtor({ host, port: parseInt(process.env.REDIS_PORT ?? '6379', 10), ...redisOpts });
+        if (gaveUp)
+            return Promise.resolve();
+        if (!inflight) {
+            inflight = whenRedisReady(client, timeoutMs)
+                .catch(() => {
+                gaveUp = true;
+                // Re-arm the wait once the connection comes back.
+                client.once('ready', () => { gaveUp = false; });
+            })
+                .finally(() => { inflight = null; });
         }
-        inst
-            .on('error', (e) => logger.warn(`Redis ${label} client error`, { error: e instanceof Error ? e.message : String(e) }));
-        return inst;
-    }
-    catch (err) {
-        logger.warn(`Redis unavailable for ${label}`, { error: err instanceof Error ? err.message : String(err) });
-        return null;
-    }
+        return inflight;
+    };
+}
+/**
+ * INCR a fixed-window counter and make sure it carries a TTL, atomically.
+ *
+ * A separate `INCR` then `EXPIRE` is not atomic: if the EXPIRE is lost (a
+ * connection drop, a failover between the two commands) the key never expires
+ * and the counter stays over its limit forever. The script also heals a key
+ * that somehow lacks a TTL (`PTTL` = -1) rather than only setting it on the
+ * first hit.
+ */
+const INCR_WINDOW_SCRIPT = `
+local n = redis.call('INCR', KEYS[1])
+if n == 1 or redis.call('PTTL', KEYS[1]) < 0 then
+  redis.call('PEXPIRE', KEYS[1], ARGV[1])
+end
+return n`;
+/**
+ * Increment `key` within a window of `windowMs` and return the new count.
+ * Throws when Redis errors — callers choose their own failure policy.
+ */
+export async function incrWindow(redis, key, windowMs) {
+    const n = await redis.eval(INCR_WINDOW_SCRIPT, 1, key, Math.max(1, Math.ceil(windowMs)));
+    return Number(n);
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW52LXJlZGlzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3NlcnZpY2VzL2Vudi1yZWRpcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSwrQ0FBK0M7QUFDL0Msc0NBQXNDO0FBRXRDLE9BQU8sRUFBRSxhQUFhLEVBQUUsTUFBTSxRQUFRLENBQUM7QUFFdkMsT0FBTyxFQUFFLFlBQVksRUFBRSxNQUFNLG9CQUFvQixDQUFDO0FBRWxELE1BQU0sTUFBTSxHQUFHLFlBQVksQ0FBQyxXQUFXLENBQUMsQ0FBQztBQUV6Qzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztHQXlCRztBQUVILG9FQUFvRTtBQUNwRSxNQUFNLE9BQU8sZ0JBQWlCLFNBQVEsS0FBSztJQUN6QyxZQUFZLE9BQWU7UUFDekIsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQ2YsSUFBSSxDQUFDLElBQUksR0FBRyxrQkFBa0IsQ0FBQztJQUNqQyxDQUFDO0NBQ0Y7QUFpQkQ7Ozs7R0FJRztBQUNILE1BQU0sVUFBVSxjQUFjLENBQUMsR0FBdUI7SUFDcEQsSUFBSSxDQUFDLEdBQUc7UUFBRSxPQUFPLEVBQUUsQ0FBQztJQUNwQixPQUFPLEdBQUcsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUMsQ0FBQyxNQUFNLENBQUMsT0FBTyxDQUFDLENBQUMsR0FBRyxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUU7UUFDdkUsTUFBTSxHQUFHLEdBQUcsS0FBSyxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUNuQyxNQUFNLElBQUksR0FBRyxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsR0FBRyxDQUFDLENBQUM7UUFDdEQsTUFBTSxRQUFRLEdBQUcsR0FBRyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxLQUFLLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDO1FBQ3hELE1BQU0sSUFBSSxHQUFHLFFBQVEsS0FBSyxFQUFFLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQ3hELElBQUksQ0FBQyxJQUFJLElBQUksQ0FBQyxNQUFNLENBQUMsU0FBUyxDQUFDLElBQUksQ0FBQyxJQUFJLElBQUksR0FBRyxDQUFDLElBQUksSUFBSSxHQUFHLEtBQUssRUFBRSxDQUFDO1lBQ2pFLE1BQU0sSUFBSSxnQkFBZ0IsQ0FBQywwQkFBMEIsS0FBSyxvQkFBb0IsQ0FBQyxDQUFDO1FBQ2xGLENBQUM7UUFDRCxPQUFPLEVBQUUsSUFBSSxFQUFFLElBQUksRUFBRSxDQUFDO0lBQ3hCLENBQUMsQ0FBQyxDQUFDO0FBQ0wsQ0FBQztBQUVEOzs7R0FHRztBQUNILE1BQU0sVUFBVSxzQkFBc0IsQ0FBQyxHQUFHLEdBQXNCLE9BQU8sQ0FBQyxHQUFHO0lBQ3pFLElBQUksR0FBRyxDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ25CLE1BQU0sSUFBSSxnQkFBZ0IsQ0FDeEIsZ0lBQWdJLENBQ2pJLENBQUM7SUFDSixDQUFDO0lBRUQsTUFBTSxTQUFTLEdBQUcsY0FBYyxDQUFDLEdBQUcsQ0FBQyxlQUFlLENBQUMsQ0FBQztJQUN0RCxNQUFNLEdBQUcsR0FBRyxHQUFHLENBQUMsU0FBUyxFQUFFLElBQUksRUFBRSxDQUFDO0lBQ2xDLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFjLElBQUksU0FBUyxDQUFDO0lBRWpELElBQUksU0FBUyxDQUFDLE1BQU0sR0FBRyxDQUFDLElBQUksR0FBRyxFQUFFLENBQUM7UUFDaEMsTUFBTSxJQUFJLGdCQUFnQixDQUFDLDZDQUE2QyxDQUFDLENBQUM7SUFDNUUsQ0FBQztJQUVELElBQUksU0FBUyxDQUFDLE1BQU0sR0FBRyxDQUFDLEVBQUUsQ0FBQztRQUN6QixPQUFPO1lBQ0wsSUFBSSxFQUFFLFVBQVU7WUFDaEIsU0FBUztZQUNULFVBQVUsRUFBRSxHQUFHLENBQUMscUJBQXFCLElBQUksVUFBVTtZQUNuRCxRQUFRO1lBQ1IsZ0JBQWdCLEVBQUUsR0FBRyxDQUFDLHVCQUF1QixJQUFJLFNBQVM7U0FDM0QsQ0FBQztJQUNKLENBQUM7SUFFRCxJQUFJLEdBQUcsRUFBRSxDQUFDO1FBQ1IsSUFBSSxNQUFXLENBQUM7UUFDaEIsSUFBSSxDQUFDO1lBQ0gsTUFBTSxHQUFHLElBQUksR0FBRyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQ3hCLENBQUM7UUFBQyxNQUFNLENBQUM7WUFDUCxNQUFNLElBQUksZ0JBQWdCLENBQUMsZ0VBQWdFLENBQUMsQ0FBQztRQUMvRixDQUFDO1FBQ0QsSUFBSSxNQUFNLENBQUMsUUFBUSxLQUFLLFFBQVEsSUFBSSxNQUFNLENBQUMsUUFBUSxLQUFLLFNBQVMsRUFBRSxDQUFDO1lBQ2xFLE1BQU0sSUFBSSxnQkFBZ0IsQ0FBQyxpREFBaUQsTUFBTSxDQUFDLFFBQVEsSUFBSSxDQUFDLENBQUM7UUFDbkcsQ0FBQztRQUNELElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUTtZQUFFLE1BQU0sSUFBSSxnQkFBZ0IsQ0FBQyx3QkFBd0IsQ0FBQyxDQUFDO1FBQzNFLE9BQU8sRUFBRSxJQUFJLEVBQUUsS0FBSyxFQUFFLEdBQUcsRUFBRSxRQUFRLEVBQUUsQ0FBQztJQUN4QyxDQUFDO0lBRUQsT0FBTyxJQUFJLENBQUM7QUFDZCxDQUFDO0FBRUQsMkVBQTJFO0FBQzNFLE1BQU0sVUFBVSx1QkFBdUIsQ0FBQyxJQUFxQjtJQUMzRCxJQUFJLElBQUksQ0FBQyxJQUFJLEtBQUssVUFBVSxFQUFFLENBQUM7UUFDN0IsT0FBTyxFQUFFLElBQUksRUFBRSxVQUFVLEVBQUUsTUFBTSxFQUFFLElBQUksQ0FBQyxVQUFVLEVBQUUsU0FBUyxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsTUFBTSxFQUFFLENBQUM7SUFDekYsQ0FBQztJQUNELE1BQU0sQ0FBQyxHQUFHLElBQUksR0FBRyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUM1QixPQUFPLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLFFBQVEsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLElBQUksSUFBSSxNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQyxRQUFRLEtBQUssU0FBUyxFQUFFLENBQUM7QUFDbEcsQ0FBQztBQUlELFNBQVMsV0FBVztJQUNsQixNQUFNLEdBQUcsR0FBRyxhQUFhLENBQUMsT0FBTyxJQUFJLENBQUMsR0FBRyxDQUFDLENBQUM7SUFDM0MsTUFBTSxHQUFHLEdBQUcsR0FBRyxDQUFDLFNBQVMsQ0FBcUQsQ0FBQztJQUMvRSxPQUFPLENBQUMsR0FBRyxDQUFDLEtBQUssSUFBSSxHQUFHLENBQUMsT0FBTyxJQUFJLEdBQUcsQ0FBaUIsQ0FBQztBQUMzRCxDQUFDO0FBRUQ7Ozs7O0dBS0c7QUFDSCxNQUFNLFVBQVUsaUJBQWlCLENBQy9CLElBQXFCLEVBQ3JCLEtBQWEsRUFDYixPQUFPLEdBQTRCLEVBQUU7SUFFckMsTUFBTSxJQUFJLEdBQUcsV0FBVyxFQUFLLENBQUM7SUFDOUIsTUFBTSxJQUFJLEdBQUcsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsRUFBRSxRQUFRLEVBQUUsSUFBSSxDQUFDLFFBQVEsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7SUFDOUQsTUFBTSxJQUFJLEdBQUcsSUFBSSxDQUFDLElBQUksS0FBSyxVQUFVO1FBQ25DLENBQUMsQ0FBQyxJQUFJLElBQUksQ0FBQztZQUNULFNBQVMsRUFBRSxJQUFJLENBQUMsU0FBUztZQUN6QixJQUFJLEVBQUUsSUFBSSxDQUFDLFVBQVU7WUFDckIsR0FBRyxDQUFDLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxDQUFDLENBQUMsRUFBRSxnQkFBZ0IsRUFBRSxJQUFJLENBQUMsZ0JBQWdCLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1lBQzdFLEdBQUcsSUFBSTtZQUNQLEdBQUcsT0FBTztTQUNYLENBQUM7UUFDRixDQUFDLENBQUMsSUFBSSxJQUFJLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxFQUFFLEdBQUcsSUFBSSxFQUFFLEdBQUcsT0FBTyxFQUFFLENBQUMsQ0FBQztJQUMvQyxJQUEyRTtTQUN6RSxFQUFFLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLFNBQVMsS0FBSyxlQUFlLEVBQUUsRUFBRSxLQUFLLEVBQUUsQ0FBQyxZQUFZLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO0lBQ3pILE9BQU8sSUFBSSxDQUFDO0FBQ2QsQ0FBQztBQUVEOzs7Ozs7Ozs7Ozs7O0dBYUc7QUFDSCxNQUFNLFVBQVUsb0JBQW9CLENBQWMsS0FBYTtJQUM3RCxNQUFNLElBQUksR0FBRyxzQkFBc0IsRUFBRSxDQUFDO0lBQ3RDLElBQUksQ0FBQyxJQUFJO1FBQUUsT0FBTyxJQUFJLENBQUM7SUFDdkIsTUFBTSxJQUFJLEdBQUcsaUJBQWlCLENBQUksSUFBSSxFQUFFLEtBQUssRUFBRSxFQUFFLG9CQUFvQixFQUFFLENBQUMsRUFBRSxrQkFBa0IsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO0lBQ3ZHLE1BQU0sQ0FBQyxJQUFJLENBQUMsU0FBUyxLQUFLLGlCQUFpQixFQUFFLHVCQUF1QixDQUFDLElBQUksQ0FBQyxDQUFDLENBQUM7SUFDNUUsT0FBTyxJQUFJLENBQUM7QUFDZCxDQUFDO0FBU0Q7Ozs7O0dBS0c7QUFDSCxNQUFNLFVBQVUsY0FBYyxDQUFDLE1BQXVCLEVBQUUsU0FBUyxHQUFHLE1BQU07SUFDeEUsSUFBSSxNQUFNLENBQUMsTUFBTSxLQUFLLFNBQVMsSUFBSSxNQUFNLENBQUMsTUFBTSxLQUFLLE9BQU8sSUFBSSxDQUFDLE1BQU0sQ0FBQyxJQUFJO1FBQUUsT0FBTyxPQUFPLENBQUMsT0FBTyxFQUFFLENBQUM7SUFDdkcsT0FBTyxJQUFJLE9BQU8sQ0FBQyxDQUFDLE9BQU8sRUFBRSxNQUFNLEVBQUUsRUFBRTtRQUNyQyxNQUFNLE9BQU8sR0FBRyxHQUFHLEVBQUUsR0FBRyxZQUFZLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUMxRCxNQUFNLEtBQUssR0FBRyxVQUFVLENBQUMsR0FBRyxFQUFFO1lBQzVCLE1BQU0sQ0FBQyxHQUFHLEVBQUUsQ0FBQyxPQUFPLEVBQUUsT0FBTyxDQUFDLENBQUM7WUFDL0IsTUFBTSxDQUFDLElBQUksS0FBSyxDQUFDLHlCQUF5QixTQUFTLElBQUksQ0FBQyxDQUFDLENBQUM7UUFDNUQsQ0FBQyxFQUFFLFNBQVMsQ0FBQyxDQUFDO1FBQ2QsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLENBQUM7UUFDaEIsTUFBTSxDQUFDLElBQUssQ0FBQyxPQUFPLEVBQUUsT0FBTyxDQUFDLENBQUM7SUFDakMsQ0FBQyxDQUFDLENBQUM7QUFDTCxDQUFDO0FBRUQsdUZBQXVGO0FBQ3ZGLE1BQU0sQ0FBQyxNQUFNLG1DQUFtQyxHQUFHLEtBQUssQ0FBQztBQUV6RDs7Ozs7Ozs7Ozs7Ozs7R0FjRztBQUNILE1BQU0sVUFBVSxvQkFBb0IsQ0FDbEMsTUFBdUIsRUFDdkIsU0FBUyxHQUFHLG1DQUFtQztJQUUvQyxJQUFJLFFBQVEsR0FBeUIsSUFBSSxDQUFDO0lBQzFDLElBQUksTUFBTSxHQUFHLEtBQUssQ0FBQztJQUNuQixPQUFPLEdBQUcsRUFBRTtRQUNWLElBQUksTUFBTSxDQUFDLE1BQU0sS0FBSyxTQUFTLElBQUksTUFBTSxDQUFDLE1BQU0sS0FBSyxPQUFPLElBQUksQ0FBQyxNQUFNLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDN0UsTUFBTSxHQUFHLEtBQUssQ0FBQztZQUNmLE9BQU8sT0FBTyxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQzNCLENBQUM7UUFDRCxJQUFJLE1BQU07WUFBRSxPQUFPLE9BQU8sQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUNyQyxJQUFJLENBQUMsUUFBUSxFQUFFLENBQUM7WUFDZCxRQUFRLEdBQUcsY0FBYyxDQUFDLE1BQU0sRUFBRSxTQUFTLENBQUM7aUJBQ3pDLEtBQUssQ0FBQyxHQUFHLEVBQUU7Z0JBQ1YsTUFBTSxHQUFHLElBQUksQ0FBQztnQkFDZCxrREFBa0Q7Z0JBQ2xELE1BQU0sQ0FBQyxJQUFLLENBQUMsT0FBTyxFQUFFLEdBQUcsRUFBRSxHQUFHLE1BQU0sR0FBRyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQztZQUNuRCxDQUFDLENBQUM7aUJBQ0QsT0FBTyxDQUFDLEdBQUcsRUFBRSxHQUFHLFFBQVEsR0FBRyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUN6QyxDQUFDO1FBQ0QsT0FBTyxRQUFRLENBQUM7SUFDbEIsQ0FBQyxDQUFDO0FBQ0osQ0FBQztBQU9EOzs7Ozs7OztHQVFHO0FBQ0gsTUFBTSxrQkFBa0IsR0FBRzs7Ozs7U0FLbEIsQ0FBQztBQUVWOzs7R0FHRztBQUNILE1BQU0sQ0FBQyxLQUFLLFVBQVUsVUFBVSxDQUFDLEtBQXNCLEVBQUUsR0FBVyxFQUFFLFFBQWdCO0lBQ3BGLE1BQU0sQ0FBQyxHQUFHLE1BQU0sS0FBSyxDQUFDLElBQUksQ0FBQyxrQkFBa0IsRUFBRSxDQUFDLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQyxFQUFFLElBQUksQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxDQUFDO0lBQ3pGLE9BQU8sTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQ25CLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvLyBDb3B5cmlnaHQgMjAyNiBQaXBlbGluZSBCdWlsZGVyIENvbnRyaWJ1dG9yc1xuLy8gU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjBcblxuaW1wb3J0IHsgY3JlYXRlUmVxdWlyZSB9IGZyb20gJ21vZHVsZSc7XG5cbmltcG9ydCB7IGNyZWF0ZUxvZ2dlciB9IGZyb20gJy4uL3V0aWxzL2xvZ2dlci5qcyc7XG5cbmNvbnN0IGxvZ2dlciA9IGNyZWF0ZUxvZ2dlcignZW52LXJlZGlzJyk7XG5cbi8qKlxuICogVGhlIE9ORSBwbGFjZSBSZWRpcyBjb25uZWN0aW9uIHNldHRpbmdzIGFyZSByZWFkIGZyb20gdGhlIGVudmlyb25tZW50LlxuICpcbiAqIFR3byBzaGFwZXMsIGV4YWN0bHkgb25lIG9mIHdoaWNoIG1heSBiZSBzZXQ6XG4gKlxuICogLSAqKlN0YW5kYWxvbmUqKiDigJQgYFJFRElTX1VSTGAgKGByZWRpczovL2hvc3Q6NjM3OVsvZGJdYCwgb3IgYHJlZGlzczovL2AgZm9yXG4gKiAgIFRMUykuIENyZWRlbnRpYWxzIG1heSBzaXQgaW4gdGhlIFVSTCBvciBpbiBgUkVESVNfUEFTU1dPUkRgLlxuICogLSAqKkhBIChTZW50aW5lbCkqKiDigJQgYFJFRElTX1NFTlRJTkVMU2AgKGNvbW1hLXNlcGFyYXRlZCBgaG9zdDpwb3J0YCkgcGx1c1xuICogICBgUkVESVNfU0VOVElORUxfTUFTVEVSYCAoZGVmYXVsdCBgbXltYXN0ZXJgKSBhbmQgb3B0aW9uYWxcbiAqICAgYFJFRElTX1NFTlRJTkVMX1BBU1NXT1JEYC4gYFJFRElTX1BBU1NXT1JEYCBhdXRoZW50aWNhdGVzIHRvIHRoZSBkYXRhIG5vZGVzLlxuICogICBpb3JlZGlzIGZvbGxvd3MgdGhlIG1hc3RlciBhY3Jvc3MgYSBmYWlsb3Zlci5cbiAqXG4gKiBOZWl0aGVyIHNldCDihpIgUmVkaXMgaXMgb2ZmLCBhbmQgZWFjaCBjYWxsZXIgZGVncmFkZXMgdG8gaXRzIGRvY3VtZW50ZWRcbiAqIG5vLVJlZGlzIGJlaGF2aW9yLlxuICpcbiAqIGBSRURJU19IT1NUYCAvIGBSRURJU19QT1JUYCBhcmUgbm90IHJlYWQuIGBSRURJU19IT1NUYCBpcyByZWZ1c2VkIG91dHJpZ2h0IHNvIGFcbiAqIHN0YWxlIGNvbmZpZyBmYWlscyBhdCBzdGFydHVwIGluc3RlYWQgb2Ygc2lsZW50bHkgcnVubmluZyB3aXRob3V0IFJlZGlzLlxuICogYFJFRElTX1BPUlRgIGNhbid0IGJlIHJlZnVzZWQ6IEt1YmVybmV0ZXMgaW5qZWN0cyBgUkVESVNfUE9SVD10Y3A6Ly88aXA+OjYzNzlgXG4gKiBpbnRvIGV2ZXJ5IHBvZCBpbiBhIG5hbWVzcGFjZSB3aXRoIGEgU2VydmljZSBuYW1lZCBgcmVkaXNgLCB3aGljaCBpcyBleGFjdGx5XG4gKiB3aHkgYSBob3N0L3BvcnQgcGFpciB3YXMgdW5zYWZlIHRvIHBhcnNlLlxuICpcbiAqIE1pc2NvbmZpZ3VyYXRpb24gdGhyb3dzIHtAbGluayBSZWRpc0NvbmZpZ0Vycm9yfS4gV3JpdGVycyBhbmQgcmVhZGVycyBvZiB0aGVcbiAqIHNhbWUga2V5cyAocmV2b2NhdGlvbiwgc3RlcC11cCwgbGVhZGVyIGxvY2tzKSBtdXN0IHJlc29sdmUgUmVkaXMgaWRlbnRpY2FsbHk7XG4gKiBhIGNvbmZpZyB0aGF0IHF1aWV0bHkgcmVzb2x2ZWQgdG8gXCJubyBSZWRpc1wiIG9uIG9uZSBzaWRlIGlzIGhvdyByZXZvY2F0aW9uXG4gKiBvbmNlIGRpZCBub3RoaW5nIGF0IGFsbC5cbiAqL1xuXG4vKiogVGhyb3duIGZvciBhIFJlZGlzIGVudmlyb25tZW50IHRoYXQgY2FuJ3QgYmUgdXNlZCBhcyB3cml0dGVuLiAqL1xuZXhwb3J0IGNsYXNzIFJlZGlzQ29uZmlnRXJyb3IgZXh0ZW5kcyBFcnJvciB7XG4gIGNvbnN0cnVjdG9yKG1lc3NhZ2U6IHN0cmluZykge1xuICAgIHN1cGVyKG1lc3NhZ2UpO1xuICAgIHRoaXMubmFtZSA9ICdSZWRpc0NvbmZpZ0Vycm9yJztcbiAgfVxufVxuXG4vKiogUmVzb2x2ZWQgY29ubmVjdGlvbiwgaW5kZXBlbmRlbnQgb2YgYW55IGNsaWVudCBsaWJyYXJ5LiAqL1xuZXhwb3J0IHR5cGUgUmVkaXNDb25uZWN0aW9uID1cbiAgfCB7XG4gICAgbW9kZTogJ3NlbnRpbmVsJztcbiAgICBzZW50aW5lbHM6IEFycmF5PHsgaG9zdDogc3RyaW5nOyBwb3J0OiBudW1iZXIgfT47XG4gICAgbWFzdGVyTmFtZTogc3RyaW5nO1xuICAgIHBhc3N3b3JkPzogc3RyaW5nO1xuICAgIHNlbnRpbmVsUGFzc3dvcmQ/OiBzdHJpbmc7XG4gIH1cbiAgfCB7XG4gICAgbW9kZTogJ3VybCc7XG4gICAgdXJsOiBzdHJpbmc7XG4gICAgcGFzc3dvcmQ/OiBzdHJpbmc7XG4gIH07XG5cbi8qKlxuICogUGFyc2UgYFJFRElTX1NFTlRJTkVMU2AgaW50byBgeyBob3N0LCBwb3J0IH1bXWAuIEJsYW5rIGVudHJpZXMgYXJlIHNraXBwZWQgYW5kXG4gKiBhIG1pc3NpbmcgcG9ydCBtZWFucyB0aGUgU2VudGluZWwgZGVmYXVsdCAyNjM3OTsgYSBwb3J0IHRoYXQgaXNuJ3QgYSB2YWxpZFxuICogVENQIHBvcnQgaXMgYSBjb25maWd1cmF0aW9uIGVycm9yLlxuICovXG5leHBvcnQgZnVuY3Rpb24gcGFyc2VTZW50aW5lbHMocmF3OiBzdHJpbmcgfCB1bmRlZmluZWQpOiBBcnJheTx7IGhvc3Q6IHN0cmluZzsgcG9ydDogbnVtYmVyIH0+IHtcbiAgaWYgKCFyYXcpIHJldHVybiBbXTtcbiAgcmV0dXJuIHJhdy5zcGxpdCgnLCcpLm1hcCgocykgPT4gcy50cmltKCkpLmZpbHRlcihCb29sZWFuKS5tYXAoKGVudHJ5KSA9PiB7XG4gICAgY29uc3QgaWR4ID0gZW50cnkubGFzdEluZGV4T2YoJzonKTtcbiAgICBjb25zdCBob3N0ID0gaWR4ID09PSAtMSA/IGVudHJ5IDogZW50cnkuc2xpY2UoMCwgaWR4KTtcbiAgICBjb25zdCBwb3J0VGV4dCA9IGlkeCA9PT0gLTEgPyAnJyA6IGVudHJ5LnNsaWNlKGlkeCArIDEpO1xuICAgIGNvbnN0IHBvcnQgPSBwb3J0VGV4dCA9PT0gJycgPyAyNjM3OSA6IE51bWJlcihwb3J0VGV4dCk7XG4gICAgaWYgKCFob3N0IHx8ICFOdW1iZXIuaXNJbnRlZ2VyKHBvcnQpIHx8IHBvcnQgPCAxIHx8IHBvcnQgPiA2NTUzNSkge1xuICAgICAgdGhyb3cgbmV3IFJlZGlzQ29uZmlnRXJyb3IoYFJFRElTX1NFTlRJTkVMUyBlbnRyeSBcIiR7ZW50cnl9XCIgaXMgbm90IGhvc3Q6cG9ydGApO1xuICAgIH1cbiAgICByZXR1cm4geyBob3N0LCBwb3J0IH07XG4gIH0pO1xufVxuXG4vKipcbiAqIFJlc29sdmUgdGhlIFJlZGlzIGNvbm5lY3Rpb24gZnJvbSBgZW52YCwgb3IgYG51bGxgIHdoZW4gUmVkaXMgaXNuJ3RcbiAqIGNvbmZpZ3VyZWQuIFRocm93cyB7QGxpbmsgUmVkaXNDb25maWdFcnJvcn0gZm9yIGFuIHVudXNhYmxlIGNvbmZpZ3VyYXRpb24uXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiByZXNvbHZlUmVkaXNDb25uZWN0aW9uKGVudjogTm9kZUpTLlByb2Nlc3NFbnYgPSBwcm9jZXNzLmVudik6IFJlZGlzQ29ubmVjdGlvbiB8IG51bGwge1xuICBpZiAoZW52LlJFRElTX0hPU1QpIHtcbiAgICB0aHJvdyBuZXcgUmVkaXNDb25maWdFcnJvcihcbiAgICAgICdSRURJU19IT1NUIGlzIG5vdCBzdXBwb3J0ZWQuIFNldCBSRURJU19VUkw9cmVkaXM6Ly88aG9zdD46PHBvcnQ+IChvciBSRURJU19TRU5USU5FTFMgZm9yIEhBKSBhbmQgcmVtb3ZlIFJFRElTX0hPU1QvUkVESVNfUE9SVC4nLFxuICAgICk7XG4gIH1cblxuICBjb25zdCBzZW50aW5lbHMgPSBwYXJzZVNlbnRpbmVscyhlbnYuUkVESVNfU0VOVElORUxTKTtcbiAgY29uc3QgdXJsID0gZW52LlJFRElTX1VSTD8udHJpbSgpO1xuICBjb25zdCBwYXNzd29yZCA9IGVudi5SRURJU19QQVNTV09SRCB8fCB1bmRlZmluZWQ7XG5cbiAgaWYgKHNlbnRpbmVscy5sZW5ndGggPiAwICYmIHVybCkge1xuICAgIHRocm93IG5ldyBSZWRpc0NvbmZpZ0Vycm9yKCdTZXQgUkVESVNfVVJMIG9yIFJFRElTX1NFTlRJTkVMUywgbm90IGJvdGguJyk7XG4gIH1cblxuICBpZiAoc2VudGluZWxzLmxlbmd0aCA+IDApIHtcbiAgICByZXR1cm4ge1xuICAgICAgbW9kZTogJ3NlbnRpbmVsJyxcbiAgICAgIHNlbnRpbmVscyxcbiAgICAgIG1hc3Rlck5hbWU6IGVudi5SRURJU19TRU5USU5FTF9NQVNURVIgfHwgJ215bWFzdGVyJyxcbiAgICAgIHBhc3N3b3JkLFxuICAgICAgc2VudGluZWxQYXNzd29yZDogZW52LlJFRElTX1NFTlRJTkVMX1BBU1NXT1JEIHx8IHVuZGVmaW5lZCxcbiAgICB9O1xuICB9XG5cbiAgaWYgKHVybCkge1xuICAgIGxldCBwYXJzZWQ6IFVSTDtcbiAgICB0cnkge1xuICAgICAgcGFyc2VkID0gbmV3IFVSTCh1cmwpO1xuICAgIH0gY2F0Y2gge1xuICAgICAgdGhyb3cgbmV3IFJlZGlzQ29uZmlnRXJyb3IoJ1JFRElTX1VSTCBpcyBub3QgYSB2YWxpZCBVUkwgKGV4cGVjdGVkIHJlZGlzOi8vPGhvc3Q+Ojxwb3J0PikuJyk7XG4gICAgfVxuICAgIGlmIChwYXJzZWQucHJvdG9jb2wgIT09ICdyZWRpczonICYmIHBhcnNlZC5wcm90b2NvbCAhPT0gJ3JlZGlzczonKSB7XG4gICAgICB0aHJvdyBuZXcgUmVkaXNDb25maWdFcnJvcihgUkVESVNfVVJMIG11c3QgdXNlIHJlZGlzOi8vIG9yIHJlZGlzczovLywgZ290ICR7cGFyc2VkLnByb3RvY29sfS8vYCk7XG4gICAgfVxuICAgIGlmICghcGFyc2VkLmhvc3RuYW1lKSB0aHJvdyBuZXcgUmVkaXNDb25maWdFcnJvcignUkVESVNfVVJMIGhhcyBubyBob3N0LicpO1xuICAgIHJldHVybiB7IG1vZGU6ICd1cmwnLCB1cmwsIHBhc3N3b3JkIH07XG4gIH1cblxuICByZXR1cm4gbnVsbDtcbn1cblxuLyoqIEEgbG9nLXNhZmUgZGVzY3JpcHRpb24gb2YgYSBjb25uZWN0aW9uIChuZXZlciBpbmNsdWRlcyBjcmVkZW50aWFscykuICovXG5leHBvcnQgZnVuY3Rpb24gZGVzY3JpYmVSZWRpc0Nvbm5lY3Rpb24oY29ubjogUmVkaXNDb25uZWN0aW9uKTogUmVjb3JkPHN0cmluZywgdW5rbm93bj4ge1xuICBpZiAoY29ubi5tb2RlID09PSAnc2VudGluZWwnKSB7XG4gICAgcmV0dXJuIHsgbW9kZTogJ3NlbnRpbmVsJywgbWFzdGVyOiBjb25uLm1hc3Rlck5hbWUsIHNlbnRpbmVsczogY29ubi5zZW50aW5lbHMubGVuZ3RoIH07XG4gIH1cbiAgY29uc3QgdSA9IG5ldyBVUkwoY29ubi51cmwpO1xuICByZXR1cm4geyBtb2RlOiAndXJsJywgaG9zdDogdS5ob3N0bmFtZSwgcG9ydDogdS5wb3J0IHx8ICc2Mzc5JywgdGxzOiB1LnByb3RvY29sID09PSAncmVkaXNzOicgfTtcbn1cblxudHlwZSBSZWRpc0N0b3I8VD4gPSBuZXcgKC4uLmFyZ3M6IHVua25vd25bXSkgPT4gVDtcblxuZnVuY3Rpb24gbG9hZElvcmVkaXM8VD4oKTogUmVkaXNDdG9yPFQ+IHtcbiAgY29uc3QgcmVxID0gY3JlYXRlUmVxdWlyZShpbXBvcnQubWV0YS51cmwpO1xuICBjb25zdCBtb2QgPSByZXEoJ2lvcmVkaXMnKSBhcyB7IFJlZGlzPzogUmVkaXNDdG9yPFQ+OyBkZWZhdWx0PzogUmVkaXNDdG9yPFQ+IH07XG4gIHJldHVybiAobW9kLlJlZGlzID8/IG1vZC5kZWZhdWx0ID8/IG1vZCkgYXMgUmVkaXNDdG9yPFQ+O1xufVxuXG4vKipcbiAqIENvbnN0cnVjdCBhbiBpb3JlZGlzIGNsaWVudCBmb3IgYSByZXNvbHZlZCBjb25uZWN0aW9uLiBgb3B0aW9uc2AgYXJlIG1lcmdlZFxuICogaW50byB0aGUgY2xpZW50IG9wdGlvbnMgKGUuZy4gYHsgZGIsIG1heFJldHJpZXNQZXJSZXF1ZXN0OiBudWxsIH1gIGZvciBCdWxsTVEpLlxuICogQW4gYGVycm9yYCBsaXN0ZW5lciBpcyBhbHdheXMgYXR0YWNoZWQgc28gYSBkcm9wcGVkIGNvbm5lY3Rpb24gaXMgbG9nZ2VkXG4gKiByYXRoZXIgdGhhbiBzdXJmYWNpbmcgYXMgYW4gdW5oYW5kbGVkIGAnZXJyb3InYCBldmVudCB0aGF0IGNyYXNoZXMgTm9kZS5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGNyZWF0ZVJlZGlzQ2xpZW50PFQgPSB1bmtub3duPihcbiAgY29ubjogUmVkaXNDb25uZWN0aW9uLFxuICBsYWJlbDogc3RyaW5nLFxuICBvcHRpb25zOiBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPiA9IHt9LFxuKTogVCB7XG4gIGNvbnN0IEN0b3IgPSBsb2FkSW9yZWRpczxUPigpO1xuICBjb25zdCBhdXRoID0gY29ubi5wYXNzd29yZCA/IHsgcGFzc3dvcmQ6IGNvbm4ucGFzc3dvcmQgfSA6IHt9O1xuICBjb25zdCBpbnN0ID0gY29ubi5tb2RlID09PSAnc2VudGluZWwnXG4gICAgPyBuZXcgQ3Rvcih7XG4gICAgICBzZW50aW5lbHM6IGNvbm4uc2VudGluZWxzLFxuICAgICAgbmFtZTogY29ubi5tYXN0ZXJOYW1lLFxuICAgICAgLi4uKGNvbm4uc2VudGluZWxQYXNzd29yZCA/IHsgc2VudGluZWxQYXNzd29yZDogY29ubi5zZW50aW5lbFBhc3N3b3JkIH0gOiB7fSksXG4gICAgICAuLi5hdXRoLFxuICAgICAgLi4ub3B0aW9ucyxcbiAgICB9KVxuICAgIDogbmV3IEN0b3IoY29ubi51cmwsIHsgLi4uYXV0aCwgLi4ub3B0aW9ucyB9KTtcbiAgKGluc3QgYXMgdW5rbm93biBhcyB7IG9uOiAoZXZ0OiBzdHJpbmcsIGNiOiAoZTogdW5rbm93bikgPT4gdm9pZCkgPT4gdm9pZCB9KVxuICAgIC5vbignZXJyb3InLCAoZSkgPT4gbG9nZ2VyLndhcm4oYFJlZGlzICR7bGFiZWx9IGNsaWVudCBlcnJvcmAsIHsgZXJyb3I6IGUgaW5zdGFuY2VvZiBFcnJvciA/IGUubWVzc2FnZSA6IFN0cmluZyhlKSB9KSk7XG4gIHJldHVybiBpbnN0O1xufVxuXG4vKipcbiAqIFRoZSBzaGFyZWQgYXBwbGljYXRpb24gUmVkaXMgY2xpZW50OiBgbnVsbGAgd2hlbiBSZWRpcyBpc24ndCBjb25maWd1cmVkLCBzb1xuICogdGhlIGNhbGxlciBkZWdyYWRlcyB0byBpdHMgbm8tUmVkaXMgYmVoYXZpb3IuXG4gKlxuICogQ29tbWFuZHMgZmFpbCBmYXN0IChgbWF4UmV0cmllc1BlclJlcXVlc3Q6IDFgLCBubyBvZmZsaW5lIHF1ZXVlKSBiZWNhdXNlIHRoZVxuICogcmVxdWVzdC1wYXRoIGNhbGxlcnMgYXJlIGJlc3QtZWZmb3J0IG9yIGZhaWwgY2xvc2VkIG9uIHRoZWlyIG93biB0ZXJtcyDigJQgYVxuICogcmVxdWVzdCBtdXN0IG5vdCBoYW5nIGJlaGluZCBhIFJlZGlzIG91dGFnZS4gVGhhdCBpbmNsdWRlcyB0aGUgbW9tZW50cyBiZWZvcmVcbiAqIHRoZSBmaXJzdCBjb25uZWN0aW9uIGNvbXBsZXRlczogYSBiYWNrZ3JvdW5kIGNhbGxlciB0aGF0IHJ1bnMgYXQgc3RhcnR1cCBtdXN0XG4gKiBlaXRoZXIgdG9sZXJhdGUgYSByZWplY3RlZCBjb21tYW5kIG9yIHdhaXQgd2l0aCB7QGxpbmsgd2hlblJlZGlzUmVhZHl9LlxuICpcbiAqIFRocm93cyB7QGxpbmsgUmVkaXNDb25maWdFcnJvcn0gZm9yIGEgYmFkIGNvbmZpZ3VyYXRpb24sIGFuZCBpZiBSZWRpcyBpc1xuICogY29uZmlndXJlZCBidXQgYGlvcmVkaXNgIGNhbid0IGJlIGxvYWRlZCDigJQgYm90aCBhcmUgZGVwbG95bWVudCBlcnJvcnMgdGhhdFxuICogbXVzdCBub3QgcXVpZXRseSB0dXJuIFJlZGlzLWJhY2tlZCBndWFyYW50ZWVzIG9mZi5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGNyZWF0ZUVudlJlZGlzQ2xpZW50PFQgPSB1bmtub3duPihsYWJlbDogc3RyaW5nKTogVCB8IG51bGwge1xuICBjb25zdCBjb25uID0gcmVzb2x2ZVJlZGlzQ29ubmVjdGlvbigpO1xuICBpZiAoIWNvbm4pIHJldHVybiBudWxsO1xuICBjb25zdCBpbnN0ID0gY3JlYXRlUmVkaXNDbGllbnQ8VD4oY29ubiwgbGFiZWwsIHsgbWF4UmV0cmllc1BlclJlcXVlc3Q6IDEsIGVuYWJsZU9mZmxpbmVRdWV1ZTogZmFsc2UgfSk7XG4gIGxvZ2dlci5pbmZvKGBSZWRpcyAke2xhYmVsfSBjbGllbnQgY3JlYXRlZGAsIGRlc2NyaWJlUmVkaXNDb25uZWN0aW9uKGNvbm4pKTtcbiAgcmV0dXJuIGluc3Q7XG59XG5cbi8qKiBUaGUgc3Vic2V0IG9mIGlvcmVkaXMgbmVlZGVkIHRvIHdhaXQgZm9yIGEgY29ubmVjdGlvbi4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgUmVhZHlBd2FyZVJlZGlzIHtcbiAgc3RhdHVzPzogc3RyaW5nO1xuICBvbmNlPyhldmVudDogc3RyaW5nLCBjYjogKC4uLmFyZ3M6IHVua25vd25bXSkgPT4gdm9pZCk6IHVua25vd247XG4gIG9mZj8oZXZlbnQ6IHN0cmluZywgY2I6ICguLi5hcmdzOiB1bmtub3duW10pID0+IHZvaWQpOiB1bmtub3duO1xufVxuXG4vKipcbiAqIFJlc29sdmUgb25jZSBgY2xpZW50YCBpcyBjb25uZWN0ZWQgYW5kIHJlYWR5IGZvciBjb21tYW5kcywgb3IgcmVqZWN0IGFmdGVyXG4gKiBgdGltZW91dE1zYC4gRm9yIHN0YXJ0dXAgd29yayAoY3JlYXRpbmcgYSBjb25zdW1lciBncm91cCwgc3Vic2NyaWJpbmcpIHRoYXRcbiAqIG90aGVyd2lzZSByYWNlcyB0aGUgZmlyc3QgY29ubmVjdGlvbi4gQSBjbGllbnQgd2l0aG91dCBpb3JlZGlzJyBgc3RhdHVzYFxuICogKGUuZy4gYSB0ZXN0IGRvdWJsZSkgY291bnRzIGFzIHJlYWR5LlxuICovXG5leHBvcnQgZnVuY3Rpb24gd2hlblJlZGlzUmVhZHkoY2xpZW50OiBSZWFkeUF3YXJlUmVkaXMsIHRpbWVvdXRNcyA9IDMwXzAwMCk6IFByb21pc2U8dm9pZD4ge1xuICBpZiAoY2xpZW50LnN0YXR1cyA9PT0gdW5kZWZpbmVkIHx8IGNsaWVudC5zdGF0dXMgPT09ICdyZWFkeScgfHwgIWNsaWVudC5vbmNlKSByZXR1cm4gUHJvbWlzZS5yZXNvbHZlKCk7XG4gIHJldHVybiBuZXcgUHJvbWlzZSgocmVzb2x2ZSwgcmVqZWN0KSA9PiB7XG4gICAgY29uc3Qgb25SZWFkeSA9ICgpID0+IHsgY2xlYXJUaW1lb3V0KHRpbWVyKTsgcmVzb2x2ZSgpOyB9O1xuICAgIGNvbnN0IHRpbWVyID0gc2V0VGltZW91dCgoKSA9PiB7XG4gICAgICBjbGllbnQub2ZmPy4oJ3JlYWR5Jywgb25SZWFkeSk7XG4gICAgICByZWplY3QobmV3IEVycm9yKGBSZWRpcyBub3QgcmVhZHkgYWZ0ZXIgJHt0aW1lb3V0TXN9bXNgKSk7XG4gICAgfSwgdGltZW91dE1zKTtcbiAgICB0aW1lci51bnJlZj8uKCk7XG4gICAgY2xpZW50Lm9uY2UhKCdyZWFkeScsIG9uUmVhZHkpO1xuICB9KTtcbn1cblxuLyoqIERlZmF1bHQgYm91bmQgZm9yIHtAbGluayBjcmVhdGVSZWRpc1JlYWR5R2F0ZX06IHNob3J0IGVub3VnaCBmb3IgYSByZXF1ZXN0IHBhdGguICovXG5leHBvcnQgY29uc3QgUkVRVUVTVF9QQVRIX1JFRElTX1JFQURZX1RJTUVPVVRfTVMgPSAyXzAwMDtcblxuLyoqXG4gKiBBIHJlcXVlc3QtcGF0aCByZWFkaW5lc3MgZ2F0ZSBmb3IgYSBsYXppbHkgYnVpbHQgZW52IFJlZGlzIGNsaWVudC5cbiAqXG4gKiBUaGUgZW52IGNsaWVudCBoYXMgbm8gb2ZmbGluZSBxdWV1ZSwgc28gYSBjb21tYW5kIGlzc3VlZCBiZWZvcmUgdGhlIGZpcnN0XG4gKiBjb25uZWN0aW9uIGNvbXBsZXRlcyBpcyByZWplY3RlZCBvdXRyaWdodCDigJQgdGhlIGZpcnN0IHJlcXVlc3QgYWZ0ZXIgYSBsYXp5XG4gKiBjb25zdHJ1Y3Rpb24gd291bGQgb3RoZXJ3aXNlIGhpdCB0aGF0IHJlamVjdGlvbiAoZS5nLiB0aGUgZmlyc3Qgc3RlcC11cCBwZXJcbiAqIHBvZCBmYWlsaW5nLCBvciB0aGUgZmlyc3QgaW1wZXJzb25hdGlvbiBjaGVjayByZWFkaW5nIFwidW5hdmFpbGFibGVcIikuXG4gKlxuICogVGhlIHJldHVybmVkIGZ1bmN0aW9uIHJlc29sdmVzIG9uY2UgdGhlIGNsaWVudCBpcyByZWFkeSwgb3IgYWZ0ZXJcbiAqIGB0aW1lb3V0TXNgIOKAlCBpdCBORVZFUiByZWplY3RzOiB0aGUgY2FsbGVyIHRoZW4gcnVucyBpdHMgY29tbWFuZCBhbmQga2VlcHMgaXRzXG4gKiBvd24gZmFpbC1vcGVuIC8gZmFpbC1jbG9zZWQgc2VtYW50aWNzLiBDb25jdXJyZW50IGNhbGxlcnMgc2hhcmUgb25lIHdhaXQuIEFmdGVyXG4gKiBhIHdhaXQgdGltZXMgb3V0IChSZWRpcyBnZW51aW5lbHkgZG93bikgbGF0ZXIgY2FsbHMgc3RvcCB3YWl0aW5nIHVudGlsIHRoZVxuICogY2xpZW50IHJlcG9ydHMgYHJlYWR5YCBhZ2Fpbiwgc28gYW4gb3V0YWdlIGNvc3RzIG9uZSBib3VuZGVkIHdhaXQgaW5zdGVhZCBvZlxuICogYWRkaW5nIGB0aW1lb3V0TXNgIHRvIGV2ZXJ5IHJlcXVlc3QuXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiBjcmVhdGVSZWRpc1JlYWR5R2F0ZShcbiAgY2xpZW50OiBSZWFkeUF3YXJlUmVkaXMsXG4gIHRpbWVvdXRNcyA9IFJFUVVFU1RfUEFUSF9SRURJU19SRUFEWV9USU1FT1VUX01TLFxuKTogKCkgPT4gUHJvbWlzZTx2b2lkPiB7XG4gIGxldCBpbmZsaWdodDogUHJvbWlzZTx2b2lkPiB8IG51bGwgPSBudWxsO1xuICBsZXQgZ2F2ZVVwID0gZmFsc2U7XG4gIHJldHVybiAoKSA9PiB7XG4gICAgaWYgKGNsaWVudC5zdGF0dXMgPT09IHVuZGVmaW5lZCB8fCBjbGllbnQuc3RhdHVzID09PSAncmVhZHknIHx8ICFjbGllbnQub25jZSkge1xuICAgICAgZ2F2ZVVwID0gZmFsc2U7XG4gICAgICByZXR1cm4gUHJvbWlzZS5yZXNvbHZlKCk7XG4gICAgfVxuICAgIGlmIChnYXZlVXApIHJldHVybiBQcm9taXNlLnJlc29sdmUoKTtcbiAgICBpZiAoIWluZmxpZ2h0KSB7XG4gICAgICBpbmZsaWdodCA9IHdoZW5SZWRpc1JlYWR5KGNsaWVudCwgdGltZW91dE1zKVxuICAgICAgICAuY2F0Y2goKCkgPT4ge1xuICAgICAgICAgIGdhdmVVcCA9IHRydWU7XG4gICAgICAgICAgLy8gUmUtYXJtIHRoZSB3YWl0IG9uY2UgdGhlIGNvbm5lY3Rpb24gY29tZXMgYmFjay5cbiAgICAgICAgICBjbGllbnQub25jZSEoJ3JlYWR5JywgKCkgPT4geyBnYXZlVXAgPSBmYWxzZTsgfSk7XG4gICAgICAgIH0pXG4gICAgICAgIC5maW5hbGx5KCgpID0+IHsgaW5mbGlnaHQgPSBudWxsOyB9KTtcbiAgICB9XG4gICAgcmV0dXJuIGluZmxpZ2h0O1xuICB9O1xufVxuXG4vKiogVGhlIHN1YnNldCBvZiBpb3JlZGlzIG5lZWRlZCBieSB7QGxpbmsgaW5jcldpbmRvd30uICovXG5leHBvcnQgaW50ZXJmYWNlIFJlZGlzRXZhbENsaWVudCB7XG4gIGV2YWwoc2NyaXB0OiBzdHJpbmcsIG51bUtleXM6IG51bWJlciwgLi4uYXJnczogKHN0cmluZyB8IG51bWJlcilbXSk6IFByb21pc2U8dW5rbm93bj47XG59XG5cbi8qKlxuICogSU5DUiBhIGZpeGVkLXdpbmRvdyBjb3VudGVyIGFuZCBtYWtlIHN1cmUgaXQgY2FycmllcyBhIFRUTCwgYXRvbWljYWxseS5cbiAqXG4gKiBBIHNlcGFyYXRlIGBJTkNSYCB0aGVuIGBFWFBJUkVgIGlzIG5vdCBhdG9taWM6IGlmIHRoZSBFWFBJUkUgaXMgbG9zdCAoYVxuICogY29ubmVjdGlvbiBkcm9wLCBhIGZhaWxvdmVyIGJldHdlZW4gdGhlIHR3byBjb21tYW5kcykgdGhlIGtleSBuZXZlciBleHBpcmVzXG4gKiBhbmQgdGhlIGNvdW50ZXIgc3RheXMgb3ZlciBpdHMgbGltaXQgZm9yZXZlci4gVGhlIHNjcmlwdCBhbHNvIGhlYWxzIGEga2V5XG4gKiB0aGF0IHNvbWVob3cgbGFja3MgYSBUVEwgKGBQVFRMYCA9IC0xKSByYXRoZXIgdGhhbiBvbmx5IHNldHRpbmcgaXQgb24gdGhlXG4gKiBmaXJzdCBoaXQuXG4gKi9cbmNvbnN0IElOQ1JfV0lORE9XX1NDUklQVCA9IGBcbmxvY2FsIG4gPSByZWRpcy5jYWxsKCdJTkNSJywgS0VZU1sxXSlcbmlmIG4gPT0gMSBvciByZWRpcy5jYWxsKCdQVFRMJywgS0VZU1sxXSkgPCAwIHRoZW5cbiAgcmVkaXMuY2FsbCgnUEVYUElSRScsIEtFWVNbMV0sIEFSR1ZbMV0pXG5lbmRcbnJldHVybiBuYDtcblxuLyoqXG4gKiBJbmNyZW1lbnQgYGtleWAgd2l0aGluIGEgd2luZG93IG9mIGB3aW5kb3dNc2AgYW5kIHJldHVybiB0aGUgbmV3IGNvdW50LlxuICogVGhyb3dzIHdoZW4gUmVkaXMgZXJyb3JzIOKAlCBjYWxsZXJzIGNob29zZSB0aGVpciBvd24gZmFpbHVyZSBwb2xpY3kuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBpbmNyV2luZG93KHJlZGlzOiBSZWRpc0V2YWxDbGllbnQsIGtleTogc3RyaW5nLCB3aW5kb3dNczogbnVtYmVyKTogUHJvbWlzZTxudW1iZXI+IHtcbiAgY29uc3QgbiA9IGF3YWl0IHJlZGlzLmV2YWwoSU5DUl9XSU5ET1dfU0NSSVBULCAxLCBrZXksIE1hdGgubWF4KDEsIE1hdGguY2VpbCh3aW5kb3dNcykpKTtcbiAgcmV0dXJuIE51bWJlcihuKTtcbn1cbiJdfQ==

package/lib/services/http-client.d.ts

@@ -55,32 +55,29 @@ export interface HttpClientResponse<T = unknown> {
  */
 export interface HttpClientOptions {
     /**
-     * A shared `http.Agent` to reuse across clients (pools sockets to the same
-     * host). When supplied, the client does NOT own it — {@link InternalHttpClient.destroy}
-     * leaves a borrowed agent untouched so other clients keep working.
+     * A caller-owned `http.Agent` to use instead of the process-wide shared one.
+     * The client never destroys it.
      */
     agent?: http.Agent;
-    /** Cap on concurrent keep-alive sockets when minting an agent (default 64). */
+    /** Cap on concurrent keep-alive sockets for the shared agent (default 64). */
     maxSockets?: number;
 }
+/**
+ * Close every shared keep-alive agent (idle sockets are released; in-flight
+ * requests finish). For process shutdown and tests — a later request simply
+ * builds a fresh agent.
+ */
+export declare function destroySharedHttpAgents(): void;
 export declare class InternalHttpClient {
     private config;
     private agent;
-    /** True only when this client MINTED its agent (so destroy() may tear it down). */
-    private readonly ownsAgent;
     /**
      * Create a new HTTP client instance.
      *
      * @param config - Service configuration
-     * @param options - Optional connection-pool controls (shared agent / socket cap)
+     * @param options - Optional connection-pool controls (own agent / socket cap)
      */
     constructor(config: ServiceConfig, options?: HttpClientOptions);
-    /**
-     * Release the keep-alive socket pool. Idempotent and safe to call on shutdown.
-     * A borrowed (caller-supplied) agent is left intact — only an agent this client
-     * created is destroyed, so tearing down one client can't sever another's pool.
-     */
-    destroy(): void;
     /**
      * Make a GET request.
      */
@@ -121,8 +118,6 @@ export declare class InternalHttpClient {
  * @returns Client wrapper with safe methods
  */
 export declare function createSafeClient(config: ServiceConfig, options?: HttpClientOptions): {
-    /** Release the underlying keep-alive socket pool (no-op on a borrowed agent). */
-    destroy(): void;
     /**
      * Safe GET request - returns null on error.
      */