@portaidentity/sdk 1.7.3 → 1.9.0

package/dist/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6BH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,KAAK,CAAC,IAAY,EAAE,IAA2B,EAAE,WAAmB,EAAE,QAAQ,GAAG,IAAI,EAAE,UAAqB;IACnH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AACvE,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACnF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9E,uBAAuB;AACvB,MAAM,WAAW,GAAoB;IACnC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACrC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;IAC7B,OAAO,CAAC,OAAO,EAAE,uBAAuB,CAAC;CAC1C,CAAC;AAEF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,gBAAgB,GAAqB;IACzC,gBAAgB;IAChB,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,oCAAoC,EAAE,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAC3J,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,mCAAmC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE;IAChM,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,2BAA2B,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;IAC1J,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;IAC3O,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACnJ,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACrJ,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACnJ,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,oCAAoC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE;IAEvK,eAAe;IACf,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE;IACxI,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,kCAAkC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5L,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE;IACtJ,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,uBAAuB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,wBAAwB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE;IAEtN,UAAU;IACV,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE;IACzH,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE;IACvK,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxL,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,oCAAoC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAErM,QAAQ;IACR,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,+BAA+B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE;IACtK,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7K,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC1H,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACtH,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,8CAA8C,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE;IAC3K,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAChJ,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,uCAAuC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACzK,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,uCAAuC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC1K,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,uCAAuC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC1K,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAClJ,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,uBAAuB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACtJ,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,2CAA2C,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACjL,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,+BAA+B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACnK,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,6BAA6B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE;IAC1K,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,2CAA2C,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAGpL,QAAQ;IACR,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,+BAA+B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE;IACrK,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC7I,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,qCAAqC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;IACpL,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAErJ,cAAc;IACd,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,qCAAqC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACvL,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE;IAE7K,aAAa;IACb,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,kCAAkC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACnL,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IACrL,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,2BAA2B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAEvL,gBAAgB;IAChB,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,2CAA2C,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACnM,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,2BAA2B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAE9L,SAAS;IACT,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,uCAAuC,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;IACvH,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE;IAC/H,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE;IAE/J,OAAO;IACP,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;IAChG,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,4BAA4B,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;IAC3G,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;IAElG,QAAQ;IACR,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAExW,QAAQ;IACR,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,sCAAsC,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACrH,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,2CAA2C,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE;IAGnK,WAAW;IACX,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IACxN,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC1H,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,gCAAgC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAE7J,OAAO;IACP,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,sCAAsC,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE;IACpM,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,8BAA8B,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,+DAA+D,CAAC,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE;IAErM,aAAa;IACb,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,2BAA2B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAC5K,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC5J,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,4CAA4C,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC9K,EAAE,IAAI,EAAE,mCAAmC,EAAE,WAAW,EAAE,sCAAsC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACnN,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACtJ,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,iEAAiE,CAAC,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACvO,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,oCAAoC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE;IAG9J,UAAU;IACV,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,qCAAqC,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;CAC5J,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmB,EACnB,QAAgB,EAChB,IAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,QAAQ,kCAAkC,EAAE,CAAC;QACrG,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAI,MAA8D,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,cAAc,MAAM,EAAE,EAAE,CAAC;QACpF,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,QAAQ,EAAE,EAAE,CAAC;QAChF,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA2CH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,KAAK,CACZ,IAAY,EACZ,IAA2B,EAC3B,WAAmB,EACnB,QAAQ,GAAG,IAAI,EACf,UAAqB;IAErB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AACvE,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACnF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE/E,8FAA8F;AAC9F,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAEjD,uBAAuB;AACvB,MAAM,WAAW,GAAoB;IACnC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACrC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;IAC7B,OAAO,CAAC,OAAO,EAAE,uBAAuB,CAAC;CAC1C,CAAC;AAEF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,gBAAgB,GAAqB;IACzC,gBAAgB;IAChB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,oCAAoC;QACjD,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC;QAC5B,OAAO,EAAE,iCAAiC;KAC3C;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mCAAmC;QAChD,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACvD,OAAO,EAAE,6CAA6C;KACvD;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,2BAA2B;QACxC,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACrD,OAAO,EAAE,cAAc;KACxB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE;YACV,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC;YACzC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC;YACvC,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC;SACxC;QACD,OAAO,EAAE,cAAc;KACxB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,yBAAyB;QACtC,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,uDAAuD;QACpE,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM;KAChB;IAED,eAAe;IACf;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mBAAmB;QAChC,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC;QAC5B,OAAO,EAAE,gCAAgC;KAC1C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,kCAAkC;QAC/C,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;QACtD,OAAO,EAAE,4CAA4C;KACtD;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QACpD,OAAO,EAAE,aAAa;KACvB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,uBAAuB;QACpC,UAAU,EAAE;YACV,EAAE,CAAC,UAAU,EAAE,wBAAwB,CAAC;YACxC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC;YACtC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;SACxB;QACD,OAAO,EAAE,aAAa;KACvB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,oDAAoD;QACjE,UAAU,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,0CAA0C;QACvD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM;KAChB;IAED,UAAU;IACV;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,cAAc;QAC3B,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC;QAC5B,OAAO,EAAE,2BAA2B;KACrC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;QACzD,OAAO,EAAE,uCAAuC;KACjD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,qBAAqB;QAClC,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAC/C,OAAO,EAAE,QAAQ;KAClB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE;YACV,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;YAC/B,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC;YACjC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;SACxB;QACD,OAAO,EAAE,QAAQ;KAClB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,iDAAiD;QAC9D,UAAU,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnC,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,oCAAoC;QACjD,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAClF,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,sCAAsC;QACnD,UAAU,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtE,OAAO,EAAE,MAAM;KAChB;IAED,QAAQ;IACR;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,+BAA+B;QAC5C,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACjF,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,kBAAkB;QAC/B,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,qCAAqC;KAC/C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,mBAAmB;QAChC,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7C,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,eAAe;QAC5B,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7C,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,8CAA8C;QAC3D,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7C,OAAO,EAAE,qBAAqB;KAC/B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,uCAAuC;QACpD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,qCAAqC;QAClD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,+BAA+B;QAC5C,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,6BAA6B;QAC1C,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,gBAAgB;KAC1B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,mDAAmD;QAChE,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,yBAAyB;QACtC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,eAAe;KACzB;IAED,QAAQ;IACR;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,+BAA+B;QAC5C,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC3C,OAAO,EAAE,QAAQ;KAClB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,kBAAkB;QAC/B,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,qCAAqC;QAClD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpE,OAAO,EAAE,cAAc;KACxB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,eAAe;QAC5B,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC5E,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,2BAA2B;QACxC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpE,OAAO,EAAE,uCAAuC;KACjD;IAED,cAAc;IACd;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,qCAAqC;QAClD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACvF,OAAO,EAAE,cAAc;KACxB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,qBAAqB;QAClC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAClF,OAAO,EAAE,YAAY;KACtB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,4BAA4B;QACzC,UAAU,EAAE;YACV,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;YAC7B,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YACnC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC;SACtC;QACD,OAAO,EAAE,YAAY;KACtB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,iCAAiC;QAC9C,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAChF,OAAO,EAAE,uCAAuC;KACjD;IAED,aAAa;IACb;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,+BAA+B;QAC5C,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,QAAQ;KAClB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE;YACV,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAC9B,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvB,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC;SAClC;QACD,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE;YACV,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAC9B,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvB,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC;SAClC;QACD,OAAO,EAAE,uCAAuC;KACjD;IAED,gBAAgB;IAChB;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,WAAW,CAAC;QAC3D,OAAO,EAAE,oCAAoC;KAC9C;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2BAA2B;QACxC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACvF,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,uCAAuC;QACpD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM;KAChB;IAED,SAAS;IACT;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,uCAAuC;QACpD,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,eAAe;KACzB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC5C,OAAO,EAAE,aAAa;KACvB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE;YACV,EAAE,CAAC,KAAK,EAAE,2BAA2B,CAAC;YACtC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,kDAAkD,CAAC;SACpF;QACD,OAAO,EAAE,oBAAoB;KAC9B;IAED,OAAO;IACP,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;IAChG;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,4BAA4B;QACzC,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,YAAY;KACtB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,qBAAqB;QAClC,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,YAAY;KACtB;IAED,QAAQ;IACR;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE;YACV,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC;YACrD,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC;YACxC,OAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC;YAC3C,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC;YACpC,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC;SACtD;QACD,OAAO,EAAE,uCAAuC;KACjD;IAED,QAAQ;IACR;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sCAAsC;QACnD,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,gBAAgB;KAC1B;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC5C,OAAO,EAAE,UAAU;KACpB;IAED,WAAW;IACX;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,sBAAsB;QACnC,UAAU,EAAE;YACV,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;YACvB,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC;YAChC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SACpC;QACD,OAAO,EAAE,iCAAiC;KAC3C;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,kBAAkB;QAC/B,UAAU,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,gCAAgC;QAC7C,UAAU,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,0BAA0B;KACpC;IAED,OAAO;IACP;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,sCAAsC;QACnD,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;QAC1E,OAAO,EAAE,qBAAqB;KAC/B;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,8BAA8B;QAC3C,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,sDAAsD,CAAC,CAAC;QAClF,OAAO,EAAE,qBAAqB;KAC/B;IAED,aAAa;IACb;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2BAA2B;QACxC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,4CAA4C;QACzD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM;KAChB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,sCAAsC;QACnD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,+BAA+B;KACzC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC5C,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE;YACV,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAC9B,EAAE,CAAC,QAAQ,EAAE,iEAAiE,CAAC;SAChF;QACD,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,oCAAoC;QACjD,UAAU,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC5C,OAAO,EAAE,kBAAkB;KAC5B;IAED,cAAc;IACd;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,yCAAyC;QACtD,UAAU,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QACrD,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,iDAAiD;QAC9D,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QACpD,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,8BAA8B;QAC3C,UAAU,EAAE;YACV,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC;YACtC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;SAC9F;QACD,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmB,EACnB,QAAgB,EAChB,IAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sBAAsB,QAAQ,kCAAkC;aACxE,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAI,MAA8D,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,cAAc,MAAM,EAAE,EAAE,CAAC;QACpF,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,QAAQ,EAAE,EAAE,CAAC;QAChF,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/auth/cli-auth.d.ts

@@ -1,83 +1,57 @@
 /**
- * CliAuth — reuse Porta CLI stored credentials as an authentication provider.
+ * Authentication backed by credentials created by the Porta CLI.
  *
- * Reads credentials from `~/.porta/credentials.json` (the file created by
- * `porta login`) and uses them for API authentication. Handles token expiry
- * detection and automatic refresh via the refresh_token grant.
- *
- * Key behaviors:
- * - Reads credentials file on first `getToken()` call, caches in memory
- * - Checks `expiresAt` with 60s safety buffer to detect near-expired tokens
- * - `refreshToken()` re-reads the file (CLI may have refreshed) then
- *   POSTs refresh_token grant to the token endpoint
- * - Does NOT write back to the credentials file — only the CLI writes
- *
- * @example
- * ```typescript
- * import { createCliAuth } from '@portaidentity/sdk';
- *
- * // Uses default ~/.porta/credentials.json
- * const auth = createCliAuth();
- * const client = createPortaClient({ baseUrl: '...', auth });
- *
- * // Custom path for testing
- * const auth2 = createCliAuth({ credentialsPath: '/tmp/test-creds.json' });
- * ```
+ * The default provider remains memory-only. CLI consumers may opt into a
+ * transaction that persists refresh-token rotation before a new access token
+ * becomes observable.
  *
  * @module auth/cli-auth
  */
 import type { AuthProvider } from './types.js';
-/**
- * Options for creating a CLI auth provider.
- */
+/** Consumer-owned persistence hooks for a durable refresh transaction. */
+export interface CliCredentialPersistence {
+    /** Runs an operation while holding the consumer's refresh lock. */
+    readonly withRefreshLock: <T>(operation: () => Promise<T>) => Promise<T>;
+    /** Atomically replaces the previous stored snapshot with the refreshed one. */
+    readonly persistRefreshedCredentials: (previous: StoredCredentials, refreshed: StoredCredentials) => Promise<void>;
+}
+/** Options for creating a CLI credential authentication provider. */
 export interface CliAuthOptions {
-    /** Path to credentials file (default: '~/.porta/credentials.json') */
-    credentialsPath?: string;
+    /** Path to the credentials file. Defaults to `~/.porta/credentials.json`. */
+    readonly credentialsPath?: string;
+    /** Optional durable persistence supplied by the CLI. */
+    readonly credentialPersistence?: CliCredentialPersistence;
+    /** Optional caller-owned cancellation for refresh network requests. */
+    readonly signal?: AbortSignal;
 }
-/**
- * Shape of the credentials file written by `porta login`.
- *
- * This matches the `StoredCredentials` interface from the CLI's token-store
- * module. The SDK only reads these fields — it never writes them.
- */
+/** User identity retained in the CLI credential snapshot. */
+export interface StoredUserInfo {
+    /** Stable OIDC subject identifier. */
+    readonly sub: string;
+    /** Display email accepted during login. */
+    readonly email: string;
+    /** Optional display name accepted during login. */
+    readonly name?: string;
+}
+/** Credentials written by `porta login` and consumed by the SDK. */
 export interface StoredCredentials {
-    /** Porta server URL (e.g., 'https://porta.local:3443') */
-    server: string;
-    /** Organization slug for the admin org (e.g., 'porta-admin') */
-    orgSlug: string;
-    /** OIDC client_id used for the login flow */
-    clientId: string;
-    /** JWT access token for API requests */
-    accessToken: string;
-    /** Refresh token for obtaining new access tokens */
-    refreshToken: string;
-    /** OIDC ID token containing user identity claims */
-    idToken: string;
-    /** ISO 8601 datetime when the access token expires */
-    expiresAt: string;
-    /** Decoded user identity from the ID token */
-    userInfo: {
-        /** OIDC subject identifier (user ID) */
-        sub: string;
-        /** User email address */
-        email: string;
-        /** User display name */
-        name?: string;
-    };
+    /** Porta server origin. */
+    readonly server: string;
+    /** Organization slug used by the CLI client. */
+    readonly orgSlug: string;
+    /** Public OIDC client identifier. */
+    readonly clientId: string;
+    /** Current bearer access token. */
+    readonly accessToken: string;
+    /** Optional refresh token; omission means interactive login is required. */
+    readonly refreshToken?: string;
+    /** Last validated ID token. */
+    readonly idToken: string;
+    /** ISO timestamp at which the access token expires. */
+    readonly expiresAt: string;
+    /** Last validated display identity. */
+    readonly userInfo: StoredUserInfo;
 }
-/**
- * Creates a CLI credentials authentication provider.
- *
- * Returns an {@link AuthProvider} that reads the Porta CLI's stored
- * credentials file and uses them for API authentication. The provider
- * caches credentials in memory and handles token refresh transparently.
- *
- * **Important:** This provider does NOT write back to the credentials file.
- * Only the CLI (`porta login`, `porta logout`) manages the file. The SDK
- * refreshes tokens in-memory only.
- *
- * @param options - Optional configuration (credentials file path)
- * @returns An AuthProvider backed by CLI stored credentials
- */
+/** Creates an authentication provider over the Porta CLI credential file. */
 export declare function createCliAuth(options?: CliAuthOptions): AuthProvider;
 //# sourceMappingURL=cli-auth.d.ts.map

package/dist/auth/cli-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-auth.d.ts","sourceRoot":"","sources":["../../src/auth/cli-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAO/C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,QAAQ,EAAE;QACR,wCAAwC;QACxC,GAAG,EAAE,MAAM,CAAC;QACZ,yBAAyB;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,wBAAwB;QACxB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAkJxE"}
+{"version":3,"file":"cli-auth.d.ts","sourceRoot":"","sources":["../../src/auth/cli-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,+EAA+E;IAC/E,QAAQ,CAAC,2BAA2B,EAAE,CACpC,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,iBAAiB,KACzB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,wDAAwD;IACxD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,wBAAwB,CAAC;IAC1D,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AA6HD,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAmKxE"}

package/dist/auth/cli-auth.js

@@ -1,187 +1,251 @@
 /**
- * CliAuth — reuse Porta CLI stored credentials as an authentication provider.
+ * Authentication backed by credentials created by the Porta CLI.
  *
- * Reads credentials from `~/.porta/credentials.json` (the file created by
- * `porta login`) and uses them for API authentication. Handles token expiry
- * detection and automatic refresh via the refresh_token grant.
- *
- * Key behaviors:
- * - Reads credentials file on first `getToken()` call, caches in memory
- * - Checks `expiresAt` with 60s safety buffer to detect near-expired tokens
- * - `refreshToken()` re-reads the file (CLI may have refreshed) then
- *   POSTs refresh_token grant to the token endpoint
- * - Does NOT write back to the credentials file — only the CLI writes
- *
- * @example
- * ```typescript
- * import { createCliAuth } from '@portaidentity/sdk';
- *
- * // Uses default ~/.porta/credentials.json
- * const auth = createCliAuth();
- * const client = createPortaClient({ baseUrl: '...', auth });
- *
- * // Custom path for testing
- * const auth2 = createCliAuth({ credentialsPath: '/tmp/test-creds.json' });
- * ```
+ * The default provider remains memory-only. CLI consumers may opt into a
+ * transaction that persists refresh-token rotation before a new access token
+ * becomes observable.
  *
  * @module auth/cli-auth
  */
 import { readFile } from 'node:fs/promises';
-import { join } from 'node:path';
 import { homedir } from 'node:os';
+import { join } from 'node:path';
 import { PortaAuthenticationError } from '../errors/index.js';
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-/** Default path to the credentials file */
-const DEFAULT_CREDENTIALS_DIR = '.porta';
-const DEFAULT_CREDENTIALS_FILE = 'credentials.json';
-/**
- * Safety buffer (in seconds) for token expiry checks.
- * Matches the CLI's 60-second buffer to avoid clock skew issues.
- */
-const EXPIRY_BUFFER_SECONDS = 60;
-// ---------------------------------------------------------------------------
-// Factory
-// ---------------------------------------------------------------------------
-/**
- * Creates a CLI credentials authentication provider.
- *
- * Returns an {@link AuthProvider} that reads the Porta CLI's stored
- * credentials file and uses them for API authentication. The provider
- * caches credentials in memory and handles token refresh transparently.
- *
- * **Important:** This provider does NOT write back to the credentials file.
- * Only the CLI (`porta login`, `porta logout`) manages the file. The SDK
- * refreshes tokens in-memory only.
- *
- * @param options - Optional configuration (credentials file path)
- * @returns An AuthProvider backed by CLI stored credentials
- */
+const DEFAULT_CREDENTIALS_PATH = join(homedir(), '.porta', 'credentials.json');
+const EXPIRY_BUFFER_MS = 60_000;
+const ORGANIZATION_SLUG = /^[a-z0-9][a-z0-9-]{1,98}[a-z0-9]$/;
+/** Creates a categorized authentication error without exposing remote detail. */
+function authenticationError(message, code) {
+    const error = new PortaAuthenticationError({ message });
+    if (code) {
+        Object.defineProperty(error, 'code', { configurable: true, enumerable: true, value: code });
+    }
+    return error;
+}
+/** Returns true when a value is a non-empty string. */
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+/** Validates untrusted JSON as a complete stored credential snapshot. */
+function parseStoredCredentials(value) {
+    if (!value || typeof value !== 'object') {
+        throw authenticationError("Invalid credentials: missing required fields. Run 'porta login' again.");
+    }
+    const candidate = value;
+    const userInfo = candidate.userInfo;
+    if (!isNonEmptyString(candidate.server) ||
+        !isNonEmptyString(candidate.orgSlug) ||
+        !ORGANIZATION_SLUG.test(candidate.orgSlug) ||
+        !isNonEmptyString(candidate.clientId) ||
+        !isNonEmptyString(candidate.accessToken) ||
+        (candidate.refreshToken !== undefined && typeof candidate.refreshToken !== 'string') ||
+        !isNonEmptyString(candidate.idToken) ||
+        !isNonEmptyString(candidate.expiresAt) ||
+        Number.isNaN(Date.parse(candidate.expiresAt)) ||
+        !userInfo ||
+        typeof userInfo !== 'object') {
+        throw authenticationError("Invalid credentials: missing required fields. Run 'porta login' again.");
+    }
+    const identity = userInfo;
+    if (!isNonEmptyString(identity.sub) ||
+        typeof identity.email !== 'string' ||
+        (identity.name !== undefined && typeof identity.name !== 'string')) {
+        throw authenticationError("Invalid credentials. Run 'porta login' again.");
+    }
+    try {
+        const server = new URL(candidate.server);
+        if (server.protocol !== 'https:' ||
+            server.username ||
+            server.password ||
+            !/^\/*$/.test(server.pathname) ||
+            server.search ||
+            server.hash) {
+            throw new Error('invalid server');
+        }
+    }
+    catch {
+        throw authenticationError("Invalid credentials. Run 'porta login' again.");
+    }
+    return {
+        server: candidate.server,
+        orgSlug: candidate.orgSlug,
+        clientId: candidate.clientId,
+        accessToken: candidate.accessToken,
+        refreshToken: isNonEmptyString(candidate.refreshToken) ? candidate.refreshToken : undefined,
+        idToken: candidate.idToken,
+        expiresAt: candidate.expiresAt,
+        userInfo: { sub: identity.sub, email: identity.email, name: identity.name },
+    };
+}
+/** Validates the security-relevant fields returned by the token endpoint. */
+function parseRefreshResponse(value) {
+    if (!value || typeof value !== 'object') {
+        throw authenticationError('Token refresh returned an invalid response.');
+    }
+    const candidate = value;
+    if (!isNonEmptyString(candidate.access_token) ||
+        (candidate.refresh_token !== undefined && !isNonEmptyString(candidate.refresh_token)) ||
+        (candidate.id_token !== undefined && !isNonEmptyString(candidate.id_token)) ||
+        (candidate.expires_in !== undefined &&
+            (typeof candidate.expires_in !== 'number' ||
+                !Number.isFinite(candidate.expires_in) ||
+                candidate.expires_in <= 0))) {
+        throw authenticationError(candidate.access_token === undefined
+            ? 'Token refresh response missing access_token.'
+            : 'Token refresh returned an invalid response.');
+    }
+    return {
+        accessToken: candidate.access_token,
+        refreshToken: candidate.refresh_token,
+        idToken: candidate.id_token,
+        expiresIn: candidate.expires_in,
+    };
+}
+/** Creates an authentication provider over the Porta CLI credential file. */
 export function createCliAuth(options = {}) {
-    const credentialsPath = options.credentialsPath ??
-        join(homedir(), DEFAULT_CREDENTIALS_DIR, DEFAULT_CREDENTIALS_FILE);
-    /** In-memory cached credentials — null until first read */
-    let cached = null;
-    /**
-     * Reads and parses the credentials file from disk.
-     *
-     * @throws PortaAuthenticationError if file not found or unreadable
-     */
+    const credentialsPath = options.credentialsPath ?? DEFAULT_CREDENTIALS_PATH;
+    const persistence = options.credentialPersistence;
+    let cached;
+    let refreshInFlight;
+    let pendingWrite;
+    let terminalRefreshFailure;
+    /** Latches a post-dispatch failure so a rotated grant is never replayed. */
+    function latchRefreshFailure(error) {
+        if (!('code' in error)) {
+            Object.defineProperty(error, 'code', {
+                configurable: true,
+                enumerable: true,
+                value: 'REFRESH_INDETERMINATE',
+            });
+        }
+        terminalRefreshFailure = error;
+        return error;
+    }
+    /** Reads and validates the latest on-disk credential snapshot. */
     async function readCredentialsFile() {
         try {
-            const content = await readFile(credentialsPath, 'utf-8');
-            const parsed = JSON.parse(content);
-            // Validate minimum required fields
-            if (!parsed.accessToken || !parsed.server || !parsed.orgSlug) {
-                throw new PortaAuthenticationError({
-                    message: `Invalid credentials file at ${credentialsPath}: missing required fields. Run 'porta login' to re-authenticate.`,
-                });
-            }
-            return parsed;
+            return parseStoredCredentials(JSON.parse(await readFile(credentialsPath, 'utf-8')));
         }
         catch (error) {
-            // File not found — user hasn't logged in yet
-            if (error.code === 'ENOENT') {
-                throw new PortaAuthenticationError({
-                    message: `Credentials file not found at ${credentialsPath}. Run 'porta login' first.`,
-                });
-            }
-            // Re-throw PortaAuthenticationError (from validation above or nested)
-            if (error instanceof PortaAuthenticationError) {
+            if (error instanceof PortaAuthenticationError)
                 throw error;
+            if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') {
+                throw authenticationError("Credentials not found. Run 'porta login' first.");
             }
-            // JSON parse error or other read failure
-            throw new PortaAuthenticationError({
-                message: `Failed to read credentials file at ${credentialsPath}: ${error.message}`,
-            });
+            throw authenticationError("Unable to read credentials. Run 'porta login' again.");
         }
     }
-    /**
-     * Checks whether the access token is expired or about to expire.
-     * Uses a 60-second safety buffer matching the CLI's behavior.
-     */
-    function isTokenExpired(creds) {
-        if (!creds.expiresAt)
-            return false;
-        const expiresAtMs = new Date(creds.expiresAt).getTime();
-        return Date.now() >= expiresAtMs - EXPIRY_BUFFER_SECONDS * 1000;
+    /** Determines whether a token is expired or within the safety buffer. */
+    function isExpired(credentials) {
+        return Date.now() >= Date.parse(credentials.expiresAt) - EXPIRY_BUFFER_MS;
     }
-    /**
-     * Refreshes the access token using the refresh_token grant.
-     *
-     * POSTs to the OIDC token endpoint (`/{orgSlug}/token`) with
-     * grant_type=refresh_token. Updates the in-memory cache but does
-     * NOT write back to the credentials file.
-     *
-     * @throws PortaAuthenticationError if refresh fails or missing refresh_token
-     */
-    async function refreshWithGrant(creds) {
-        if (!creds.refreshToken) {
-            throw new PortaAuthenticationError({
-                message: "Cannot refresh token: no refresh_token available. Run 'porta login' again.",
-            });
+    /** Dispatches exactly one refresh grant and validates its response. */
+    async function dispatchRefresh(previous) {
+        if (!previous.refreshToken) {
+            throw authenticationError("Cannot refresh token: no refresh_token available. Run 'porta login' again.");
         }
-        // Construct token endpoint from server URL and org slug
-        const tokenUrl = `${creds.server}/${creds.orgSlug}/token`;
         const body = new URLSearchParams({
             grant_type: 'refresh_token',
-            client_id: creds.clientId,
-            refresh_token: creds.refreshToken,
+            client_id: previous.clientId,
+            refresh_token: previous.refreshToken,
         });
         let response;
         try {
-            response = await fetch(tokenUrl, {
+            response = await fetch(`${previous.server}/${previous.orgSlug}/token`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
                 body: body.toString(),
+                signal: options.signal,
             });
         }
-        catch (error) {
-            throw new PortaAuthenticationError({
-                message: `Token refresh request failed: ${error.message}. Run 'porta login' again.`,
-            });
+        catch {
+            throw latchRefreshFailure(authenticationError("Token refresh outcome is unknown. Run 'porta login' again.", 'REFRESH_INDETERMINATE'));
         }
         if (!response.ok) {
-            throw new PortaAuthenticationError({
-                message: `Token refresh failed (${response.status}). Run 'porta login' again.`,
-            });
+            throw latchRefreshFailure(authenticationError(`Token refresh was rejected (${response.status}). Run 'porta login' again.`, 'REFRESH_REJECTED'));
         }
-        const data = (await response.json());
-        if (!data.access_token) {
-            throw new PortaAuthenticationError({
-                message: "Token refresh response missing access_token. Run 'porta login' again.",
-            });
+        let data;
+        try {
+            data = await response.json();
         }
-        // Update in-memory cache with new tokens (don't write to file)
-        cached = {
-            ...creds,
-            accessToken: data.access_token,
-            // Preserve existing tokens if server doesn't rotate them
-            refreshToken: data.refresh_token ?? creds.refreshToken,
-            idToken: data.id_token ?? creds.idToken,
-            expiresAt: data.expires_in
-                ? new Date(Date.now() + data.expires_in * 1000).toISOString()
-                : creds.expiresAt,
+        catch {
+            throw latchRefreshFailure(authenticationError('Token refresh returned an invalid response.'));
+        }
+        let refreshed;
+        try {
+            refreshed = parseRefreshResponse(data);
+        }
+        catch (error) {
+            throw latchRefreshFailure(error instanceof PortaAuthenticationError
+                ? error
+                : authenticationError('Token refresh returned an invalid response.'));
+        }
+        return {
+            ...previous,
+            accessToken: refreshed.accessToken,
+            refreshToken: refreshed.refreshToken ?? previous.refreshToken,
+            idToken: refreshed.idToken ?? previous.idToken,
+            expiresAt: refreshed.expiresIn
+                ? new Date(Date.now() + refreshed.expiresIn * 1000).toISOString()
+                : previous.expiresAt,
         };
-        return data.access_token;
     }
-    return {
-        async getToken() {
-            // Read from file on first call
-            if (!cached) {
-                cached = await readCredentialsFile();
+    /** Commits a durable refresh, retaining a failed write for same-write retry. */
+    async function refreshDurably() {
+        if (!persistence)
+            throw new Error('Durable refresh requires persistence hooks');
+        return persistence.withRefreshLock(async () => {
+            if (pendingWrite) {
+                await persistence.persistRefreshedCredentials(pendingWrite.previous, pendingWrite.refreshed);
+                cached = pendingWrite.refreshed;
+                pendingWrite = undefined;
+                return cached.accessToken;
             }
-            // If expired, try to refresh using the refresh_token grant
-            if (isTokenExpired(cached)) {
-                return refreshWithGrant(cached);
+            if (terminalRefreshFailure)
+                throw terminalRefreshFailure;
+            const current = await readCredentialsFile();
+            if (!isExpired(current)) {
+                cached = current;
+                return current.accessToken;
             }
-            return cached.accessToken;
+            const refreshed = await dispatchRefresh(current);
+            pendingWrite = { previous: current, refreshed };
+            await persistence.persistRefreshedCredentials(current, refreshed);
+            pendingWrite = undefined;
+            cached = refreshed;
+            return refreshed.accessToken;
+        });
+    }
+    /** Coalesces callers onto one immutable refresh transaction. */
+    function refreshOnce() {
+        if (terminalRefreshFailure)
+            return Promise.reject(terminalRefreshFailure);
+        if (!refreshInFlight) {
+            const operation = persistence
+                ? refreshDurably()
+                : (async () => {
+                    const previous = cached ?? (await readCredentialsFile());
+                    cached = await dispatchRefresh(previous);
+                    return cached.accessToken;
+                })();
+            refreshInFlight = operation.finally(() => {
+                refreshInFlight = undefined;
+            });
+        }
+        return refreshInFlight;
+    }
+    return {
+        async getToken() {
+            if (terminalRefreshFailure)
+                throw terminalRefreshFailure;
+            cached ??= await readCredentialsFile();
+            return isExpired(cached) || pendingWrite ? refreshOnce() : cached.accessToken;
         },
         async refreshToken() {
-            // Re-read from file — the CLI may have refreshed since we last read
+            if (terminalRefreshFailure)
+                throw terminalRefreshFailure;
             cached = await readCredentialsFile();
-            return refreshWithGrant(cached);
+            return refreshOnce();
         },
     };
 }