@rawdash/connector-drata 0.28.0 → 0.28.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.js.map +1 -1
  2. package/package.json +2 -2
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../../../connector-shared/src/errors.ts","../../../connector-shared/src/retry.ts","../../../connector-shared/src/version.ts","../../../connector-shared/src/request.ts","../../../connector-shared/src/rate-limit.ts","../../../connector-shared/src/map-concurrent.ts","../../../connector-shared/src/sanitize.ts","../../../connector-shared/src/epoch.ts","../../../connector-shared/src/pagination.ts","../../../connector-shared/src/logger.ts","../src/drata.ts","../src/index.ts"],"sourcesContent":["import type { HttpResponse } from './types';\n\nexport type HttpErrorKind =\n | 'transient'\n | 'rate_limit'\n | 'auth'\n | 'upstream_bug'\n | 'client_bug';\n\nexport abstract class HttpClientError extends Error {\n abstract readonly kind: HttpErrorKind;\n readonly response?: HttpResponse;\n\n constructor(message: string, response?: HttpResponse) {\n super(message);\n this.name = new.target.name;\n this.response = response;\n }\n}\n\nexport class TransientError extends HttpClientError {\n readonly kind = 'transient' as const;\n}\n\nexport class RateLimitError extends HttpClientError {\n readonly kind = 'rate_limit' as const;\n readonly retryAfter?: Date;\n\n constructor(message: string, response?: HttpResponse, retryAfter?: Date) {\n super(message, response);\n this.retryAfter = retryAfter;\n }\n}\n\nexport class AuthError extends HttpClientError {\n readonly kind = 'auth' as const;\n}\n\nexport class UpstreamBugError extends HttpClientError {\n readonly kind = 'upstream_bug' as const;\n}\n\nexport class ClientBugError extends HttpClientError {\n readonly kind = 'client_bug' as const;\n}\n\nexport function classifyStatus(status: number): HttpErrorKind {\n if (status === 429) {\n return 'rate_limit';\n }\n if (status === 401 || status === 403) {\n return 'auth';\n }\n if (status === 408) {\n return 'transient';\n }\n if (status >= 500) {\n return 'upstream_bug';\n }\n if (status >= 400) {\n return 'client_bug';\n }\n return 'client_bug';\n}\n\nexport function errorForStatus(\n message: string,\n response: HttpResponse,\n retryAfter?: Date,\n): HttpClientError {\n const kind = classifyStatus(response.status);\n switch (kind) {\n case 'rate_limit':\n return new RateLimitError(message, response, retryAfter);\n case 'auth':\n return new AuthError(message, response);\n case 'transient':\n return new TransientError(message, response);\n case 'upstream_bug':\n return new UpstreamBugError(message, response);\n case 'client_bug':\n return new ClientBugError(message, response);\n }\n}\n","import { HttpClientError, RateLimitError, TransientError } from './errors';\n\nexport interface RetryPolicy {\n maxAttempts?: number;\n initialDelayMs?: number;\n maxDelayMs?: number;\n retryOn?: (status: number | null, err?: Error) => boolean;\n}\n\nexport const defaultRetryOn = (status: number | null, err?: Error): boolean => {\n if (err instanceof RateLimitError) {\n return true;\n }\n if (err instanceof TransientError) {\n return true;\n }\n if (status === null) {\n return err instanceof Error && !(err instanceof HttpClientError);\n }\n if (status === 408 || status === 429) {\n return true;\n }\n if (status >= 500) {\n return true;\n }\n return false;\n};\n\nexport function backoffDelayMs(\n attempt: number,\n policy: Required<Pick<RetryPolicy, 'initialDelayMs' | 'maxDelayMs'>>,\n): number {\n const base = policy.initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, policy.maxDelayMs);\n}\n\nexport function parseRetryAfter(\n headerValue: string | null,\n now: Date = new Date(),\n): Date | undefined {\n if (!headerValue) {\n return undefined;\n }\n const trimmed = headerValue.trim();\n if (/^\\d+$/.test(trimmed)) {\n return new Date(now.getTime() + Number(trimmed) * 1000);\n }\n const parsed = Date.parse(trimmed);\n if (Number.isNaN(parsed)) {\n return undefined;\n }\n return new Date(parsed);\n}\n\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n if (signal?.aborted) {\n return Promise.reject(signal.reason ?? new Error('Aborted'));\n }\n return new Promise<void>((resolve, reject) => {\n const onAbort = () => {\n clearTimeout(timer);\n reject(signal!.reason ?? new Error('Aborted'));\n };\n const timer = setTimeout(() => {\n signal?.removeEventListener('abort', onAbort);\n resolve();\n }, ms);\n signal?.addEventListener('abort', onAbort, { once: true });\n });\n}\n","export const HTTP_CLIENT_VERSION = '0.0.0';\n\nexport const DEFAULT_USER_AGENT = `rawdash-connector/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n\nexport function connectorUserAgent(connectorId: string): string {\n return `rawdash-connector-${connectorId}/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n}\n","import {\n AuthError,\n ClientBugError,\n HttpClientError,\n RateLimitError,\n TransientError,\n UpstreamBugError,\n errorForStatus,\n} from './errors';\nimport { defaultRetryOn, parseRetryAfter, sleep } from './retry';\nimport type { FetchLike, HttpMethod, HttpRequest, HttpResponse } from './types';\nimport { DEFAULT_USER_AGENT } from './version';\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_INITIAL_DELAY_MS = 1000;\nconst DEFAULT_MAX_DELAY_MS = 60_000;\nconst OBSERVER_TIMEOUT_MS = 250;\n\nexport interface RequestObservation {\n url: string;\n method: HttpMethod;\n status: number;\n resource: string;\n requestId: string;\n body: unknown;\n}\n\nexport type RequestObserver = (\n event: RequestObservation,\n) => void | Promise<void>;\n\nexport interface RequestOptions {\n fetch?: FetchLike;\n observer?: RequestObserver;\n resource: string;\n requestId?: string;\n}\n\nasync function notifyObserver(\n observer: RequestObserver,\n event: RequestObservation,\n): Promise<void> {\n let result: void | Promise<void>;\n try {\n result = observer(event);\n } catch (err) {\n console.warn('[connector-shared] request observer threw:', err);\n return;\n }\n if (!(result instanceof Promise)) {\n return;\n }\n const guarded = result.catch((err) => {\n console.warn('[connector-shared] request observer rejected:', err);\n });\n let timer: ReturnType<typeof setTimeout> | undefined;\n const timeout = new Promise<void>((resolve) => {\n timer = setTimeout(resolve, OBSERVER_TIMEOUT_MS);\n });\n try {\n await Promise.race([guarded, timeout]);\n } finally {\n if (timer) {\n clearTimeout(timer);\n }\n }\n}\n\nfunction newRequestId(): string {\n const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n if (c?.randomUUID) {\n return c.randomUUID();\n }\n return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction mergeHeaders(\n defaults: Record<string, string>,\n overrides: Record<string, string> | undefined,\n): Record<string, string> {\n const merged: Record<string, string> = {};\n for (const [k, v] of Object.entries(defaults)) {\n merged[k.toLowerCase()] = v;\n }\n if (overrides) {\n for (const [k, v] of Object.entries(overrides)) {\n merged[k.toLowerCase()] = v;\n }\n }\n return merged;\n}\n\nfunction linkTimeoutSignal(\n parent: AbortSignal | undefined,\n timeoutMs: number,\n): { signal: AbortSignal; cancel: () => void } {\n const controller = new AbortController();\n const onParentAbort = () => {\n controller.abort(parent?.reason);\n };\n if (parent) {\n if (parent.aborted) {\n controller.abort(parent.reason);\n } else {\n parent.addEventListener('abort', onParentAbort, { once: true });\n }\n }\n const timer = setTimeout(() => {\n controller.abort(new Error(`Request timed out after ${timeoutMs}ms`));\n }, timeoutMs);\n return {\n signal: controller.signal,\n cancel: () => {\n clearTimeout(timer);\n if (parent) {\n parent.removeEventListener('abort', onParentAbort);\n }\n },\n };\n}\n\nasync function readBody(res: Response, parseJson: boolean): Promise<unknown> {\n if (res.status === 204 || res.status === 205) {\n return null;\n }\n const contentType = res.headers.get('content-type') ?? '';\n if (parseJson && contentType.includes('application/json')) {\n const text = await res.text();\n if (text.length === 0) {\n return null;\n }\n return JSON.parse(text);\n }\n return res.text();\n}\n\nexport async function request<T = unknown>(\n req: HttpRequest,\n options: RequestOptions,\n): Promise<HttpResponse<T>> {\n const fetchImpl: FetchLike = options.fetch ?? (globalThis.fetch as FetchLike);\n const retry = req.retry ?? {};\n const maxAttempts = retry.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n const initialDelayMs = retry.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;\n const maxDelayMs = retry.maxDelayMs ?? DEFAULT_MAX_DELAY_MS;\n const retryOn = retry.retryOn ?? defaultRetryOn;\n const timeoutMs = req.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n const parseJson = req.parseJson ?? true;\n\n const headers = mergeHeaders(\n {\n 'User-Agent': DEFAULT_USER_AGENT,\n Accept: 'application/json',\n },\n req.headers,\n );\n\n let lastErr: Error | undefined;\n\n for (let attempt = 0; attempt < maxAttempts; attempt++) {\n req.signal?.throwIfAborted();\n\n const { signal, cancel } = linkTimeoutSignal(req.signal, timeoutMs);\n let res: Response;\n try {\n res = await fetchImpl(req.url, {\n method: req.method ?? 'GET',\n headers,\n body: req.body as RequestInit['body'],\n signal,\n });\n } catch (err) {\n cancel();\n if (req.signal?.aborted) {\n throw req.signal.reason ?? err;\n }\n const error = err instanceof Error ? err : new Error(String(err));\n lastErr = error;\n if (attempt < maxAttempts - 1 && retryOn(null, error)) {\n const delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n await sleep(delay, req.signal);\n continue;\n }\n throw new TransientError(error.message);\n }\n cancel();\n\n const body = await readBody(res, parseJson);\n const httpResponse: HttpResponse<T> = {\n status: res.status,\n headers: res.headers,\n body: body as T,\n };\n if (req.rateLimit) {\n const state = req.rateLimit.parse(res.headers);\n if (state) {\n httpResponse.rateLimitState = state;\n }\n }\n\n if (options.observer) {\n await notifyObserver(options.observer, {\n url: req.url,\n method: req.method ?? 'GET',\n status: res.status,\n resource: options.resource,\n requestId: options.requestId ?? newRequestId(),\n body,\n });\n }\n\n if (res.ok) {\n return httpResponse;\n }\n\n const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n const message = `HTTP ${res.status} ${res.statusText} for ${req.method ?? 'GET'} ${req.url}`;\n const err = errorForStatus(message, httpResponse, retryAfter);\n\n if (\n attempt < maxAttempts - 1 &&\n retryOn(res.status, err) &&\n !(err instanceof AuthError) &&\n !(err instanceof ClientBugError)\n ) {\n lastErr = err;\n let delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n if (err instanceof RateLimitError && retryAfter) {\n const wait = retryAfter.getTime() - Date.now();\n if (wait > 0) {\n delay = Math.min(wait, maxDelayMs);\n }\n }\n await sleep(delay, req.signal);\n continue;\n }\n\n throw err;\n }\n\n throw lastErr ?? new UpstreamBugError('Exhausted retry attempts');\n}\n\nfunction computeDelay(\n attempt: number,\n initialDelayMs: number,\n maxDelayMs: number,\n): number {\n const base = initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, maxDelayMs);\n}\n\nexport { HttpClientError };\n","export interface RateLimitState {\n remaining: number;\n resetAt: Date;\n}\n\nexport interface RateLimitPolicy {\n parse(headers: Headers): RateLimitState | null;\n}\n\nexport interface StandardRateLimitPolicyConfig {\n remainingHeader: string;\n resetHeader: string;\n resetUnit: 's' | 'ms';\n resetFallbackMs?: number;\n}\n\nexport function standardRateLimitPolicy(\n config: StandardRateLimitPolicyConfig,\n): RateLimitPolicy {\n const { remainingHeader, resetHeader, resetUnit, resetFallbackMs } = config;\n const multiplier = resetUnit === 's' ? 1000 : 1;\n return {\n parse(h) {\n const remainingRaw = h.get(remainingHeader);\n if (remainingRaw === null || remainingRaw.trim() === '') {\n return null;\n }\n const remaining = Number(remainingRaw);\n if (!Number.isFinite(remaining)) {\n return null;\n }\n const resetRaw = h.get(resetHeader);\n if (resetRaw === null) {\n if (resetFallbackMs === undefined) {\n return null;\n }\n return {\n remaining,\n resetAt: new Date(Date.now() + resetFallbackMs),\n };\n }\n if (resetRaw.trim() === '') {\n return null;\n }\n const reset = Number(resetRaw);\n if (!Number.isFinite(reset) || reset < 0) {\n return null;\n }\n const resetMs = reset * multiplier;\n if (!Number.isFinite(resetMs)) {\n return null;\n }\n return { remaining, resetAt: new Date(resetMs) };\n },\n };\n}\n","export async function mapWithConcurrency<T, R>(\n items: readonly T[],\n concurrency: number,\n fn: (item: T, index: number) => Promise<R>,\n): Promise<R[]> {\n const results = new Array<R>(items.length);\n if (items.length === 0) {\n return results;\n }\n const normalized = Number.isFinite(concurrency) ? Math.floor(concurrency) : 1;\n const limit = Math.max(1, Math.min(normalized, items.length));\n let next = 0;\n let failed = false;\n\n async function worker(): Promise<void> {\n while (!failed) {\n const i = next++;\n if (i >= items.length) {\n return;\n }\n try {\n results[i] = await fn(items[i]!, i);\n } catch (err) {\n failed = true;\n throw err;\n }\n }\n }\n\n const workers: Promise<void>[] = [];\n for (let w = 0; w < limit; w++) {\n workers.push(worker());\n }\n await Promise.all(workers);\n return results;\n}\n","export interface SanitizeAllowedUrlOptions {\n url: string | null;\n host: string;\n pathname: string;\n protocol?: 'https:' | 'http:';\n}\n\nexport function sanitizeAllowedUrl(\n options: SanitizeAllowedUrlOptions,\n): string | null {\n const { url, host, pathname, protocol = 'https:' } = options;\n if (url === null) {\n return null;\n }\n try {\n const u = new URL(url);\n if (u.protocol !== protocol || u.host !== host || u.pathname !== pathname) {\n return null;\n }\n return u.toString();\n } catch {\n return null;\n }\n}\n","export type EpochUnit = 'ms' | 's' | 'iso';\n\nexport function parseEpoch(\n value: number | string | null | undefined,\n unit: EpochUnit,\n): number | null {\n if (value === null || value === undefined) {\n return null;\n }\n if (unit === 'iso') {\n if (typeof value !== 'string') {\n return null;\n }\n const ms = new Date(value).getTime();\n return Number.isFinite(ms) ? ms : null;\n }\n if (typeof value === 'string' && value.trim() === '') {\n return null;\n }\n const n = typeof value === 'number' ? value : Number(value);\n if (!Number.isFinite(n)) {\n return null;\n }\n const result = unit === 's' ? n * 1000 : n;\n return Number.isFinite(result) ? result : null;\n}\n","import { request } from './request';\nimport type { HttpRequest } from './types';\n\nexport function parseLinkHeader(header: string | null): Record<string, string> {\n if (!header) {\n return {};\n }\n const result: Record<string, string> = {};\n for (const part of header.split(',')) {\n const match = part.match(/<([^>]+)>\\s*;\\s*rel=\"([^\"]+)\"/);\n if (match) {\n result[match[2]!] = match[1]!;\n }\n }\n return result;\n}\n\nexport async function* paginateLink<T>(\n initial: HttpRequest,\n parse: (body: unknown) => T[],\n options: { resource: string },\n): AsyncIterable<T> {\n let next: string | null = initial.url;\n while (next) {\n const res: Awaited<ReturnType<typeof request>> = await request(\n {\n ...initial,\n url: next,\n },\n { resource: options.resource },\n );\n for (const item of parse(res.body)) {\n yield item;\n }\n const links = parseLinkHeader(res.headers.get('link'));\n next = links['next'] ?? null;\n }\n}\n\nexport async function* paginateCursor<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; nextCursor: string | null },\n buildNext: (req: HttpRequest, cursor: string) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let req: HttpRequest = initial;\n while (true) {\n const res = await request(req, { resource: options.resource });\n const { items, nextCursor } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!nextCursor) {\n return;\n }\n req = buildNext(req, nextCursor);\n }\n}\n\nexport async function* paginatePage<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; hasMore: boolean },\n buildPage: (req: HttpRequest, page: number) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let page = 1;\n while (true) {\n const req = page === 1 ? initial : buildPage(initial, page);\n const res = await request(req, { resource: options.resource });\n const { items, hasMore } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!hasMore || items.length === 0) {\n return;\n }\n page++;\n }\n}\n","export type LogFields = Record<string, unknown>;\n\nexport interface ConnectorLogger {\n info(event: string, fields?: LogFields): void;\n warn(event: string, fields?: LogFields): void;\n}\n\nexport interface ConnectorLoggerOptions {\n scope: string;\n}\n\nconst MAX_VALUE_LEN = 120;\n\nfunction truncate(s: string, max = MAX_VALUE_LEN): string {\n if (s.length <= max) {\n return s;\n }\n return `${s.slice(0, max - 1)}…`;\n}\n\nfunction formatValue(value: unknown): string {\n if (value === null) {\n return 'null';\n }\n if (value === undefined) {\n return '';\n }\n if (typeof value === 'number' || typeof value === 'boolean') {\n return String(value);\n }\n if (typeof value === 'string') {\n const t = truncate(value);\n if (/[\\s\"=]/.test(t)) {\n return JSON.stringify(t);\n }\n return t;\n }\n if (typeof value === 'bigint') {\n return value.toString();\n }\n let json: string | undefined;\n try {\n json = JSON.stringify(value);\n } catch {\n json = undefined;\n }\n return truncate(json ?? String(value));\n}\n\nexport function formatLogFields(fields?: LogFields): string {\n if (!fields) {\n return '';\n }\n const parts: string[] = [];\n for (const [k, v] of Object.entries(fields)) {\n if (v === undefined) {\n continue;\n }\n parts.push(`${k}=${formatValue(v)}`);\n }\n return parts.length > 0 ? ` ${parts.join(' ')}` : '';\n}\n\nexport function formatLogLine(\n scope: string,\n event: string,\n fields?: LogFields,\n): string {\n return `[${scope}] ${event}${formatLogFields(fields)}`;\n}\n\nexport function createDefaultConnectorLogger(\n opts: ConnectorLoggerOptions,\n): ConnectorLogger {\n return {\n info(event, fields) {\n console.info(formatLogLine(opts.scope, event, fields));\n },\n warn(event, fields) {\n console.warn(formatLogLine(opts.scope, event, fields));\n },\n };\n}\n\nconst NOOP_LOGGER: ConnectorLogger = {\n info() {},\n warn() {},\n};\n\nexport function noopConnectorLogger(): ConnectorLogger {\n return NOOP_LOGGER;\n}\n","import {\n type HttpResponse,\n connectorUserAgent,\n parseEpoch,\n} from '@rawdash/connector-shared';\nimport {\n BaseConnector,\n type ChunkedSyncCursor,\n type ConnectorContext,\n type ConnectorDoc,\n type CredentialsSchema,\n type StorageHandle,\n type SyncOptions,\n type SyncResult,\n defineConfigFields,\n defineConnectorDoc,\n defineResources,\n makeChunkedCursorGuard,\n paginateChunked,\n schemasFromResources,\n selectActivePhases,\n} from '@rawdash/core';\nimport { z } from 'zod';\n\nexport const configFields = defineConfigFields(\n z.object({\n apiKey: z.object({ $secret: z.string().min(1) }).meta({\n label: 'Drata API key',\n description:\n 'Drata Public API key. Generated under Settings -> Integrations -> Public API. Treated as a bearer token. Stored as a secret.',\n placeholder: 'DRATA_API_KEY',\n secret: true,\n }),\n baseUrl: z\n .string()\n .trim()\n .url()\n .optional()\n .refine((u) => u === undefined || !u.endsWith('/'), {\n message: 'baseUrl must not end with a trailing slash.',\n })\n .meta({\n label: 'Base URL',\n description:\n 'Override the Drata Public API base URL. Defaults to \"https://public-api.drata.com\". Useful for sandbox / region-specific tenants.',\n placeholder: 'https://public-api.drata.com',\n }),\n resources: z\n .array(z.enum(['controls', 'tests', 'personnel', 'findings']))\n .nonempty()\n .optional()\n .meta({\n label: 'Resources',\n description:\n 'Which Drata resources to sync. Omit to sync all of them. The API key only needs read access to the resources listed here.',\n }),\n findingsLookbackDays: z.number().int().positive().optional().meta({\n label: 'Findings lookback (days)',\n description:\n 'How many days of test findings to refresh on each full sync. Defaults to 90. Incremental syncs use the run watermark and ignore this field.',\n placeholder: '90',\n }),\n }),\n);\n\nexport const doc: ConnectorDoc = defineConnectorDoc({\n displayName: 'Drata',\n category: 'security',\n brandColor: '#6D2BFF',\n tagline:\n 'Sync controls, tests, personnel, and test findings from Drata for audit-ready %, failing-test count, training-completion, and open-finding compliance dashboards.',\n vendor: {\n name: 'Drata',\n domain: 'drata.com',\n apiDocs: 'https://developers.drata.com/',\n website: 'https://drata.com',\n },\n auth: {\n summary:\n 'Bearer-token auth with a Drata Public API key. Read access to the resources you sync is sufficient.',\n setup: [\n 'Sign in to Drata as an admin and open Settings -> Integrations -> Public API.',\n 'Create a new API key; grant it read access to the resources you intend to sync (controls, tests, personnel, findings).',\n 'Copy the generated key. Drata only shows the key once.',\n 'Store the key as a rawdash secret and reference it from the connector config as `apiKey: secret(\"DRATA_API_KEY\")`.',\n ],\n },\n rateLimit:\n 'Drata enforces a per-tenant quota and responds with 429 + Retry-After when exceeded; the shared HTTP client honors Retry-After when scheduling the next request.',\n limitations: [\n 'Only controls, tests, personnel, and test findings are synced. Frameworks, risks, vendors, audits, and document-evidence resources are out of scope.',\n 'Controls, tests, and personnel are full-snapshot resources: every sync re-reads the whole list and rewrites the entity scope on the first page. Tenants with very large catalogs (10k+ controls/tests) should run the connector less often.',\n 'Test findings before the configured lookback window (default 90 days) are not refreshed; they remain whatever the most recent sync that did see them wrote.',\n ],\n});\n\nexport type DrataResource = 'controls' | 'tests' | 'personnel' | 'findings';\n\nexport interface DrataSettings {\n baseUrl?: string;\n resources?: readonly DrataResource[];\n findingsLookbackDays?: number;\n}\n\nconst drataCredentials = {\n apiKey: {\n description: 'Drata Public API key',\n auth: 'required' as const,\n },\n} satisfies CredentialsSchema;\n\ntype DrataCredentials = typeof drataCredentials;\n\nconst PHASE_ORDER = ['controls', 'tests', 'personnel', 'findings'] as const;\n\ntype DrataPhase = (typeof PHASE_ORDER)[number];\n\ntype DrataSyncCursor = ChunkedSyncCursor<DrataPhase, string>;\n\nconst isDrataSyncCursor = makeChunkedCursorGuard(PHASE_ORDER);\n\nconst CONTROL_ENTITY = 'drata_control';\nconst TEST_ENTITY = 'drata_test';\nconst PERSONNEL_ENTITY = 'drata_personnel';\nconst FINDING_EVENT = 'drata_test_finding';\n\nconst DEFAULT_BASE_URL = 'https://public-api.drata.com';\nconst PAGE_SIZE = 100;\nconst DEFAULT_FINDINGS_LOOKBACK_DAYS = 90;\n\nconst CONTROL_STATUSES = [\n 'PASSING',\n 'FAILING',\n 'NEEDS_ATTENTION',\n 'DEACTIVATED',\n] as const;\ntype ControlStatus = (typeof CONTROL_STATUSES)[number];\n\nconst TEST_STATUSES = [\n 'OK',\n 'NEEDS_ATTENTION',\n 'DEACTIVATED',\n 'IN_PROGRESS',\n] as const;\ntype TestStatus = (typeof TEST_STATUSES)[number];\n\nconst FINDING_SEVERITIES = ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'] as const;\ntype FindingSeverity = (typeof FINDING_SEVERITIES)[number];\n\nconst idString = z.string().min(1);\n\nconst paginationSchema = z\n .object({\n nextCursor: z.string().nullish(),\n hasMore: z.boolean().nullish(),\n })\n .nullish();\n\nconst frameworkRefSchema = z.object({\n name: z.string().nullish(),\n matchingId: z.string().nullish(),\n});\n\nconst controlSchema = z.object({\n id: idString,\n name: z.string().nullish(),\n description: z.string().nullish(),\n status: z.string().nullish(),\n frameworks: z.array(frameworkRefSchema).nullish(),\n lastEvaluatedAt: z.string().nullish(),\n updatedAt: z.string().nullish(),\n createdAt: z.string().nullish(),\n});\n\nconst controlsResponseSchema = z.object({\n data: z.array(controlSchema),\n pagination: paginationSchema,\n});\n\nconst testSchema = z.object({\n id: idString,\n name: z.string().nullish(),\n description: z.string().nullish(),\n status: z.string().nullish(),\n controlIds: z.array(z.string()).nullish(),\n controls: z.array(z.object({ id: z.string() })).nullish(),\n evidenceCount: z.number().nullish(),\n lastTestedAt: z.string().nullish(),\n updatedAt: z.string().nullish(),\n createdAt: z.string().nullish(),\n});\n\nconst testsResponseSchema = z.object({\n data: z.array(testSchema),\n pagination: paginationSchema,\n});\n\nconst personnelSchema = z.object({\n id: idString,\n email: z.string().nullish(),\n firstName: z.string().nullish(),\n lastName: z.string().nullish(),\n role: z.string().nullish(),\n employmentStatus: z.string().nullish(),\n startDate: z.string().nullish(),\n trainingStatus: z.string().nullish(),\n trainingCompletedAt: z.string().nullish(),\n updatedAt: z.string().nullish(),\n createdAt: z.string().nullish(),\n});\n\nconst personnelResponseSchema = z.object({\n data: z.array(personnelSchema),\n pagination: paginationSchema,\n});\n\nconst findingSchema = z.object({\n id: idString,\n testId: z.string().nullish(),\n controlId: z.string().nullish(),\n severity: z.string().nullish(),\n status: z.string().nullish(),\n createdAt: z.string(),\n resolvedAt: z.string().nullish(),\n description: z.string().nullish(),\n resourceId: z.string().nullish(),\n});\n\nconst findingsResponseSchema = z.object({\n data: z.array(findingSchema),\n pagination: paginationSchema,\n});\n\nexport const drataResources = defineResources({\n [CONTROL_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'status',\n ops: ['eq'],\n values: ['PASSING', 'FAILING', 'NEEDS_ATTENTION', 'DEACTIVATED'],\n },\n { field: 'framework', ops: ['eq'] },\n ],\n description:\n 'Drata controls keyed by id. Each control belongs to one or more frameworks (SOC 2, HIPAA, ISO 27001, etc.) and has a roll-up status of PASSING, FAILING, or NEEDS_ATTENTION.',\n endpoint: 'GET /v1/controls',\n notes:\n 'Cursor pagination via cursor / limit. Controls are a full-snapshot resource: a full sync rewrites the scope on first page.',\n fields: [\n { name: 'name', description: 'Human-readable control name.' },\n {\n name: 'status',\n description:\n 'Roll-up status (PASSING, FAILING, NEEDS_ATTENTION, or DEACTIVATED).',\n },\n {\n name: 'framework',\n description:\n 'Name of the first framework the control is mapped to (e.g. \"SOC 2\"). Use the framework dimension for distributions when a control maps to several frameworks.',\n },\n {\n name: 'frameworks',\n description:\n 'Comma-separated list of every framework the control is mapped to.',\n },\n {\n name: 'lastEvaluated',\n description: 'When Drata last evaluated the control (Unix ms).',\n },\n ],\n responses: {\n controls: controlsResponseSchema,\n },\n },\n [TEST_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'status',\n ops: ['eq'],\n values: ['OK', 'NEEDS_ATTENTION', 'DEACTIVATED', 'IN_PROGRESS'],\n },\n ],\n description:\n 'Drata tests keyed by id. A test is the smallest unit of evaluation in Drata and may be mapped to multiple controls.',\n endpoint: 'GET /v1/tests',\n notes:\n 'Cursor pagination via cursor / limit. Tests are a full-snapshot resource.',\n fields: [\n { name: 'name', description: 'Human-readable test name.' },\n {\n name: 'status',\n description:\n 'Test status (OK, NEEDS_ATTENTION, DEACTIVATED, or IN_PROGRESS).',\n },\n {\n name: 'controlId',\n description:\n 'First control id the test is mapped to (a test may be mapped to several controls).',\n },\n {\n name: 'controlCount',\n description: 'Number of controls the test is mapped to.',\n },\n {\n name: 'evidenceCount',\n description:\n 'Number of distinct evidence rows backing the test (counter maintained by Drata).',\n },\n {\n name: 'lastTested',\n description: 'When Drata last ran the test (Unix ms).',\n },\n ],\n responses: { tests: testsResponseSchema },\n },\n [PERSONNEL_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'employmentStatus',\n ops: ['eq'],\n },\n {\n field: 'trainingStatus',\n ops: ['eq'],\n },\n ],\n description:\n 'Drata personnel records keyed by id. Surfaces employment status, role, training completion, and training-completed timestamp for compliance-training dashboards.',\n endpoint: 'GET /v1/personnel',\n notes:\n 'Cursor pagination via cursor / limit. Personnel is a full-snapshot resource.',\n fields: [\n { name: 'email', description: 'Work email address.' },\n { name: 'name', description: 'Full name (\"firstName lastName\").' },\n { name: 'role', description: 'Reported role / job title.' },\n {\n name: 'employmentStatus',\n description:\n 'Reported employment status (e.g. ACTIVE, ONBOARDING, OFFBOARDED).',\n },\n {\n name: 'trainingStatus',\n description:\n 'Reported security-training status (e.g. COMPLETED, IN_PROGRESS, NOT_STARTED, OVERDUE).',\n },\n {\n name: 'trainingCompleted',\n description:\n 'When the most recent training was marked completed (Unix ms).',\n },\n {\n name: 'startDate',\n description: 'Reported employment start date (Unix ms).',\n },\n ],\n responses: { personnel: personnelResponseSchema },\n },\n [FINDING_EVENT]: {\n shape: 'event',\n filterable: [\n {\n field: 'severity',\n ops: ['eq'],\n values: ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'],\n },\n {\n field: 'status',\n ops: ['eq'],\n values: ['OPEN', 'RESOLVED', 'DEFERRED', 'WONT_FIX'],\n },\n ],\n description:\n 'Test findings (one event per finding row), with severity, the test it came from, and resolved-at when applicable. Useful for open-finding counts and MTTR-to-resolution timeseries.',\n endpoint: 'GET /v1/findings',\n notes:\n 'Cursor pagination via cursor / limit. Full syncs walk back findingsLookbackDays days; incremental syncs use the sync `since` watermark.',\n fields: [\n { name: 'findingId', description: 'Drata finding id.' },\n {\n name: 'severity',\n description: 'Finding severity (LOW, MEDIUM, HIGH, CRITICAL).',\n },\n {\n name: 'status',\n description: 'Finding status (OPEN, RESOLVED, DEFERRED, WONT_FIX).',\n },\n {\n name: 'testId',\n description: 'Id of the test that produced the finding.',\n },\n {\n name: 'controlId',\n description:\n 'First control id the finding is mapped to (via its test).',\n },\n {\n name: 'resolvedAt',\n description: 'Resolution timestamp (Unix ms) when resolved.',\n },\n ],\n responses: { findings: findingsResponseSchema },\n },\n});\n\nexport const id = 'drata';\n\ntype ControlsResponse = z.infer<typeof controlsResponseSchema>;\ntype TestsResponse = z.infer<typeof testsResponseSchema>;\ntype PersonnelResponse = z.infer<typeof personnelResponseSchema>;\ntype FindingsResponse = z.infer<typeof findingsResponseSchema>;\ntype DrataControl = z.infer<typeof controlSchema>;\ntype DrataTest = z.infer<typeof testSchema>;\ntype DrataPersonnel = z.infer<typeof personnelSchema>;\ntype DrataFinding = z.infer<typeof findingSchema>;\n\nfunction isControlStatus(value: string): value is ControlStatus {\n return (CONTROL_STATUSES as readonly string[]).includes(value);\n}\n\nfunction isTestStatus(value: string): value is TestStatus {\n return (TEST_STATUSES as readonly string[]).includes(value);\n}\n\nfunction isFindingSeverity(value: string): value is FindingSeverity {\n return (FINDING_SEVERITIES as readonly string[]).includes(value);\n}\n\nfunction normalizeFrameworks(control: DrataControl): {\n primary: string | null;\n list: string;\n} {\n const frameworks = control.frameworks ?? [];\n const names: string[] = [];\n for (const f of frameworks) {\n if (typeof f.name === 'string' && f.name.length > 0) {\n names.push(f.name);\n }\n }\n if (names.length === 0) {\n return { primary: null, list: '' };\n }\n return { primary: names[0]!, list: names.join(',') };\n}\n\nfunction controlIdsForTest(test: DrataTest): string[] {\n if (Array.isArray(test.controlIds) && test.controlIds.length > 0) {\n return test.controlIds.filter((s) => typeof s === 'string' && s.length > 0);\n }\n if (Array.isArray(test.controls) && test.controls.length > 0) {\n return test.controls\n .map((c) => c.id)\n .filter((s) => typeof s === 'string' && s.length > 0);\n }\n return [];\n}\n\nfunction personnelFullName(p: DrataPersonnel): string | null {\n const parts = [p.firstName, p.lastName]\n .filter((s): s is string => typeof s === 'string' && s.length > 0)\n .map((s) => s.trim())\n .filter((s) => s.length > 0);\n if (parts.length === 0) {\n return null;\n }\n return parts.join(' ');\n}\n\nexport class DrataConnector extends BaseConnector<\n DrataSettings,\n DrataCredentials\n> {\n static readonly id = id;\n\n static readonly resources = drataResources;\n\n static readonly schemas = schemasFromResources(drataResources);\n\n static create(input: unknown, ctx?: ConnectorContext): DrataConnector {\n const parsed = configFields.parse(input);\n return new DrataConnector(\n {\n baseUrl: parsed.baseUrl,\n resources: parsed.resources,\n findingsLookbackDays: parsed.findingsLookbackDays,\n },\n {\n apiKey: parsed.apiKey,\n },\n ctx,\n );\n }\n\n readonly id = id;\n override readonly credentials = drataCredentials;\n\n private baseUrl(): string {\n return this.settings.baseUrl ?? DEFAULT_BASE_URL;\n }\n\n private async apiGet<T>(\n url: string,\n resource: string,\n signal?: AbortSignal,\n ): Promise<HttpResponse<T>> {\n return this.get<T>(url, {\n resource,\n headers: {\n Authorization: `Bearer ${this.creds.apiKey}`,\n Accept: 'application/json',\n 'User-Agent': connectorUserAgent('drata'),\n },\n signal,\n });\n }\n\n private buildListUrl(\n path: string,\n cursor: string | null,\n extra?: Record<string, string>,\n ): string {\n const u = new URL(`${this.baseUrl()}${path}`);\n u.searchParams.set('limit', String(PAGE_SIZE));\n if (cursor) {\n u.searchParams.set('cursor', cursor);\n }\n if (extra) {\n for (const [k, v] of Object.entries(extra)) {\n u.searchParams.set(k, v);\n }\n }\n return u.toString();\n }\n\n private nextCursor(\n pagination:\n | { nextCursor?: string | null; hasMore?: boolean | null }\n | null\n | undefined,\n ): string | null {\n if (!pagination) {\n return null;\n }\n if (pagination.hasMore === false) {\n return null;\n }\n return pagination.nextCursor ?? null;\n }\n\n private async fetchControlsPage(\n cursor: string | null,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataControl[]; next: string | null }> {\n const url = this.buildListUrl('/v1/controls', cursor);\n const res = await this.apiGet<ControlsResponse>(url, 'controls', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private async fetchTestsPage(\n cursor: string | null,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataTest[]; next: string | null }> {\n const url = this.buildListUrl('/v1/tests', cursor);\n const res = await this.apiGet<TestsResponse>(url, 'tests', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private async fetchPersonnelPage(\n cursor: string | null,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataPersonnel[]; next: string | null }> {\n const url = this.buildListUrl('/v1/personnel', cursor);\n const res = await this.apiGet<PersonnelResponse>(url, 'personnel', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private findingsSinceIso(options: SyncOptions): string {\n if (options.since) {\n return options.since;\n }\n const lookback =\n this.settings.findingsLookbackDays ?? DEFAULT_FINDINGS_LOOKBACK_DAYS;\n const since = new Date(Date.now() - lookback * 24 * 60 * 60 * 1000);\n return since.toISOString();\n }\n\n private async fetchFindingsPage(\n cursor: string | null,\n options: SyncOptions,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataFinding[]; next: string | null }> {\n const url = this.buildListUrl('/v1/findings', cursor, {\n createdAfter: this.findingsSinceIso(options),\n });\n const res = await this.apiGet<FindingsResponse>(url, 'findings', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private async writeControls(\n storage: StorageHandle,\n items: DrataControl[],\n ): Promise<void> {\n for (const c of items) {\n const { primary, list } = normalizeFrameworks(c);\n const status =\n typeof c.status === 'string' && isControlStatus(c.status)\n ? c.status\n : (c.status ?? null);\n const updatedMs =\n parseEpoch(c.updatedAt ?? null, 'iso') ??\n parseEpoch(c.lastEvaluatedAt ?? null, 'iso') ??\n parseEpoch(c.createdAt ?? null, 'iso') ??\n 0;\n await storage.entity({\n type: CONTROL_ENTITY,\n id: c.id,\n attributes: {\n name: c.name ?? null,\n status,\n framework: primary,\n frameworks: list,\n lastEvaluated: parseEpoch(c.lastEvaluatedAt ?? null, 'iso'),\n },\n updated_at: updatedMs,\n });\n }\n }\n\n private async writeTests(\n storage: StorageHandle,\n items: DrataTest[],\n ): Promise<void> {\n for (const t of items) {\n const controlIds = controlIdsForTest(t);\n const status =\n typeof t.status === 'string' && isTestStatus(t.status)\n ? t.status\n : (t.status ?? null);\n const updatedMs =\n parseEpoch(t.updatedAt ?? null, 'iso') ??\n parseEpoch(t.lastTestedAt ?? null, 'iso') ??\n parseEpoch(t.createdAt ?? null, 'iso') ??\n 0;\n await storage.entity({\n type: TEST_ENTITY,\n id: t.id,\n attributes: {\n name: t.name ?? null,\n status,\n controlId: controlIds[0] ?? null,\n controlCount: controlIds.length,\n evidenceCount: t.evidenceCount ?? null,\n lastTested: parseEpoch(t.lastTestedAt ?? null, 'iso'),\n },\n updated_at: updatedMs,\n });\n }\n }\n\n private async writePersonnel(\n storage: StorageHandle,\n items: DrataPersonnel[],\n ): Promise<void> {\n for (const p of items) {\n const updatedMs =\n parseEpoch(p.updatedAt ?? null, 'iso') ??\n parseEpoch(p.trainingCompletedAt ?? null, 'iso') ??\n parseEpoch(p.createdAt ?? null, 'iso') ??\n 0;\n await storage.entity({\n type: PERSONNEL_ENTITY,\n id: p.id,\n attributes: {\n email: p.email ?? null,\n name: personnelFullName(p),\n role: p.role ?? null,\n employmentStatus: p.employmentStatus ?? null,\n trainingStatus: p.trainingStatus ?? null,\n trainingCompleted: parseEpoch(p.trainingCompletedAt ?? null, 'iso'),\n startDate: parseEpoch(p.startDate ?? null, 'iso'),\n },\n updated_at: updatedMs,\n });\n }\n }\n\n private async writeFindings(\n storage: StorageHandle,\n items: DrataFinding[],\n sinceMs: number | null,\n ): Promise<void> {\n for (const f of items) {\n const ts = parseEpoch(f.createdAt, 'iso');\n if (ts === null) {\n continue;\n }\n if (sinceMs !== null && ts < sinceMs) {\n continue;\n }\n const severity =\n typeof f.severity === 'string' && isFindingSeverity(f.severity)\n ? f.severity\n : (f.severity ?? null);\n const resolvedMs = parseEpoch(f.resolvedAt ?? null, 'iso');\n await storage.event({\n name: FINDING_EVENT,\n start_ts: ts,\n end_ts: resolvedMs,\n attributes: {\n findingId: f.id,\n severity,\n status: f.status ?? null,\n testId: f.testId ?? null,\n controlId: f.controlId ?? null,\n resolvedAt: resolvedMs,\n },\n });\n }\n }\n\n private async writePhase(\n storage: StorageHandle,\n phase: DrataPhase,\n items: unknown[],\n sinceMs: number | null,\n ): Promise<void> {\n switch (phase) {\n case 'controls':\n return this.writeControls(storage, items as DrataControl[]);\n case 'tests':\n return this.writeTests(storage, items as DrataTest[]);\n case 'personnel':\n return this.writePersonnel(storage, items as DrataPersonnel[]);\n case 'findings':\n return this.writeFindings(storage, items as DrataFinding[], sinceMs);\n }\n }\n\n private async clearScopeOnFirstPage(\n storage: StorageHandle,\n phase: DrataPhase,\n isFull: boolean,\n ): Promise<void> {\n switch (phase) {\n case 'controls':\n await storage.entities([], { types: [CONTROL_ENTITY] });\n return;\n case 'tests':\n await storage.entities([], { types: [TEST_ENTITY] });\n return;\n case 'personnel':\n await storage.entities([], { types: [PERSONNEL_ENTITY] });\n return;\n case 'findings':\n if (isFull) {\n await storage.events([], { names: [FINDING_EVENT] });\n }\n return;\n }\n }\n\n private resolveCursor(cursor: unknown): DrataSyncCursor | undefined {\n return isDrataSyncCursor(cursor) ? cursor : undefined;\n }\n\n async sync(\n options: SyncOptions,\n storage: StorageHandle,\n signal?: AbortSignal,\n ): Promise<SyncResult> {\n const cursor = this.resolveCursor(options.cursor);\n const isFull = options.mode === 'full';\n\n const phases = selectActivePhases<DrataResource, DrataPhase>(\n (r) => r,\n PHASE_ORDER,\n this.settings.resources,\n );\n\n const sinceMs = options.since ? Date.parse(options.since) : null;\n\n return paginateChunked<DrataPhase, string>({\n phases,\n cursor,\n signal,\n logger: this.logger,\n fetchPage: async (phase, page, sig) => {\n switch (phase) {\n case 'controls':\n return this.fetchControlsPage(page, sig);\n case 'tests':\n return this.fetchTestsPage(page, sig);\n case 'personnel':\n return this.fetchPersonnelPage(page, sig);\n case 'findings':\n return this.fetchFindingsPage(page, options, sig);\n }\n },\n writeBatch: async (phase, items, page) => {\n if (page === null) {\n await this.clearScopeOnFirstPage(storage, phase, isFull);\n }\n await this.writePhase(\n storage,\n phase,\n items,\n phase === 'findings' ? sinceMs : null,\n );\n },\n });\n }\n}\n","import { DrataConnector } from './drata';\n\nexport {\n DrataConnector,\n drataResources as resources,\n configFields,\n doc,\n id,\n} from './drata';\nexport type { DrataResource, DrataSettings } from './drata';\nexport default DrataConnector;\n"],"mappings":";AEAO,IAAM,sBAAsB;AAE5B,IAAM,qBAAqB,qBAAqB,mBAAmB;AAEnE,SAAS,mBAAmB,aAA6B;AAC9D,SAAO,qBAAqB,WAAW,IAAI,mBAAmB;AAChE;AKJO,SAAS,WACd,OACA,MACe;AACf,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;EACT;AACA,MAAI,SAAS,OAAO;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;IACT;AACA,UAAM,KAAK,IAAI,KAAK,KAAK,EAAE,QAAQ;AACnC,WAAO,OAAO,SAAS,EAAE,IAAI,KAAK;EACpC;AACA,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,WAAO;EACT;AACA,QAAM,IAAI,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC1D,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,WAAO;EACT;AACA,QAAM,SAAS,SAAS,MAAM,IAAI,MAAO;AACzC,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;;;AGpBA;AAAA,EACE;AAAA,EAQA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAEX,IAAM,eAAe;AAAA,EAC1B,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK;AAAA,MACpD,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,SAAS,EACN,OAAO,EACP,KAAK,EACL,IAAI,EACJ,SAAS,EACT,OAAO,CAAC,MAAM,MAAM,UAAa,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,MAClD,SAAS;AAAA,IACX,CAAC,EACA,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,IACH,WAAW,EACR,MAAM,EAAE,KAAK,CAAC,YAAY,SAAS,aAAa,UAAU,CAAC,CAAC,EAC5D,SAAS,EACT,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,IACJ,CAAC;AAAA,IACH,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK;AAAA,MAChE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AACH;AAEO,IAAM,MAAoB,mBAAmB;AAAA,EAClD,aAAa;AAAA,EACb,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,SACE;AAAA,EACF,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA,MAAM;AAAA,IACJ,SACE;AAAA,IACF,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,WACE;AAAA,EACF,aAAa;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF,CAAC;AAUD,IAAM,mBAAmB;AAAA,EACvB,QAAQ;AAAA,IACN,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AACF;AAIA,IAAM,cAAc,CAAC,YAAY,SAAS,aAAa,UAAU;AAMjE,IAAM,oBAAoB,uBAAuB,WAAW;AAE5D,IAAM,iBAAiB;AACvB,IAAM,cAAc;AACpB,IAAM,mBAAmB;AACzB,IAAM,gBAAgB;AAEtB,IAAM,mBAAmB;AACzB,IAAM,YAAY;AAClB,IAAM,iCAAiC;AAEvC,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,gBAAgB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,qBAAqB,CAAC,OAAO,UAAU,QAAQ,UAAU;AAG/D,IAAM,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAEjC,IAAM,mBAAmB,EACtB,OAAO;AAAA,EACN,YAAY,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC/B,SAAS,EAAE,QAAQ,EAAE,QAAQ;AAC/B,CAAC,EACA,QAAQ;AAEX,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,QAAQ;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,MAAM,kBAAkB,EAAE,QAAQ;AAAA,EAChD,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,MAAM,aAAa;AAAA,EAC3B,YAAY;AACd,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,QAAQ;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ;AAAA,EACxC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ;AAAA,EACxD,eAAe,EAAE,OAAO,EAAE,QAAQ;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,QAAQ;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,MAAM,UAAU;AAAA,EACxB,YAAY;AACd,CAAC;AAED,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,IAAI;AAAA,EACJ,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,kBAAkB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,gBAAgB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACnC,qBAAqB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,MAAM,eAAe;AAAA,EAC7B,YAAY;AACd,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,IAAI;AAAA,EACJ,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,QAAQ;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,MAAM,aAAa;AAAA,EAC3B,YAAY;AACd,CAAC;AAEM,IAAM,iBAAiB,gBAAgB;AAAA,EAC5C,CAAC,cAAc,GAAG;AAAA,IAChB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,WAAW,WAAW,mBAAmB,aAAa;AAAA,MACjE;AAAA,MACA,EAAE,OAAO,aAAa,KAAK,CAAC,IAAI,EAAE;AAAA,IACpC;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,+BAA+B;AAAA,MAC5D;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,CAAC,WAAW,GAAG;AAAA,IACb,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,MAAM,mBAAmB,eAAe,aAAa;AAAA,MAChE;AAAA,IACF;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,4BAA4B;AAAA,MACzD;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,OAAO,oBAAoB;AAAA,EAC1C;AAAA,EACA,CAAC,gBAAgB,GAAG;AAAA,IAClB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,MACZ;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,MACZ;AAAA,IACF;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,SAAS,aAAa,sBAAsB;AAAA,MACpD,EAAE,MAAM,QAAQ,aAAa,oCAAoC;AAAA,MACjE,EAAE,MAAM,QAAQ,aAAa,6BAA6B;AAAA,MAC1D;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,WAAW,wBAAwB;AAAA,EAClD;AAAA,EACA,CAAC,aAAa,GAAG;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,OAAO,UAAU,QAAQ,UAAU;AAAA,MAC9C;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,QAAQ,YAAY,YAAY,UAAU;AAAA,MACrD;AAAA,IACF;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,aAAa,aAAa,oBAAoB;AAAA,MACtD;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,UAAU,uBAAuB;AAAA,EAChD;AACF,CAAC;AAEM,IAAM,KAAK;AAWlB,SAAS,gBAAgB,OAAuC;AAC9D,SAAQ,iBAAuC,SAAS,KAAK;AAC/D;AAEA,SAAS,aAAa,OAAoC;AACxD,SAAQ,cAAoC,SAAS,KAAK;AAC5D;AAEA,SAAS,kBAAkB,OAAyC;AAClE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAEA,SAAS,oBAAoB,SAG3B;AACA,QAAM,aAAa,QAAQ,cAAc,CAAC;AAC1C,QAAM,QAAkB,CAAC;AACzB,aAAW,KAAK,YAAY;AAC1B,QAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,SAAS,GAAG;AACnD,YAAM,KAAK,EAAE,IAAI;AAAA,IACnB;AAAA,EACF;AACA,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,SAAS,MAAM,MAAM,GAAG;AAAA,EACnC;AACA,SAAO,EAAE,SAAS,MAAM,CAAC,GAAI,MAAM,MAAM,KAAK,GAAG,EAAE;AACrD;AAEA,SAAS,kBAAkB,MAA2B;AACpD,MAAI,MAAM,QAAQ,KAAK,UAAU,KAAK,KAAK,WAAW,SAAS,GAAG;AAChE,WAAO,KAAK,WAAW,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,EAC5E;AACA,MAAI,MAAM,QAAQ,KAAK,QAAQ,KAAK,KAAK,SAAS,SAAS,GAAG;AAC5D,WAAO,KAAK,SACT,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,EACxD;AACA,SAAO,CAAC;AACV;AAEA,SAAS,kBAAkB,GAAkC;AAC3D,QAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,EACnC,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EAChE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC7B,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO;AAAA,EACT;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEO,IAAM,iBAAN,MAAM,wBAAuB,cAGlC;AAAA,EACA,OAAgB,KAAK;AAAA,EAErB,OAAgB,YAAY;AAAA,EAE5B,OAAgB,UAAU,qBAAqB,cAAc;AAAA,EAE7D,OAAO,OAAO,OAAgB,KAAwC;AACpE,UAAM,SAAS,aAAa,MAAM,KAAK;AACvC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,SAAS,OAAO;AAAA,QAChB,WAAW,OAAO;AAAA,QAClB,sBAAsB,OAAO;AAAA,MAC/B;AAAA,MACA;AAAA,QACE,QAAQ,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAES,KAAK;AAAA,EACI,cAAc;AAAA,EAExB,UAAkB;AACxB,WAAO,KAAK,SAAS,WAAW;AAAA,EAClC;AAAA,EAEA,MAAc,OACZ,KACA,UACA,QAC0B;AAC1B,WAAO,KAAK,IAAO,KAAK;AAAA,MACtB;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK,MAAM,MAAM;AAAA,QAC1C,QAAQ;AAAA,QACR,cAAc,mBAAmB,OAAO;AAAA,MAC1C;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,aACN,MACA,QACA,OACQ;AACR,UAAM,IAAI,IAAI,IAAI,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,EAAE;AAC5C,MAAE,aAAa,IAAI,SAAS,OAAO,SAAS,CAAC;AAC7C,QAAI,QAAQ;AACV,QAAE,aAAa,IAAI,UAAU,MAAM;AAAA,IACrC;AACA,QAAI,OAAO;AACT,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,UAAE,aAAa,IAAI,GAAG,CAAC;AAAA,MACzB;AAAA,IACF;AACA,WAAO,EAAE,SAAS;AAAA,EACpB;AAAA,EAEQ,WACN,YAIe;AACf,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,IACT;AACA,QAAI,WAAW,YAAY,OAAO;AAChC,aAAO;AAAA,IACT;AACA,WAAO,WAAW,cAAc;AAAA,EAClC;AAAA,EAEA,MAAc,kBACZ,QACA,QACyD;AACzD,UAAM,MAAM,KAAK,aAAa,gBAAgB,MAAM;AACpD,UAAM,MAAM,MAAM,KAAK,OAAyB,KAAK,YAAY,MAAM;AACvE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,QACA,QACsD;AACtD,UAAM,MAAM,KAAK,aAAa,aAAa,MAAM;AACjD,UAAM,MAAM,MAAM,KAAK,OAAsB,KAAK,SAAS,MAAM;AACjE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,mBACZ,QACA,QAC2D;AAC3D,UAAM,MAAM,KAAK,aAAa,iBAAiB,MAAM;AACrD,UAAM,MAAM,MAAM,KAAK,OAA0B,KAAK,aAAa,MAAM;AACzE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEQ,iBAAiB,SAA8B;AACrD,QAAI,QAAQ,OAAO;AACjB,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,WACJ,KAAK,SAAS,wBAAwB;AACxC,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,KAAK,KAAK,KAAK,GAAI;AAClE,WAAO,MAAM,YAAY;AAAA,EAC3B;AAAA,EAEA,MAAc,kBACZ,QACA,SACA,QACyD;AACzD,UAAM,MAAM,KAAK,aAAa,gBAAgB,QAAQ;AAAA,MACpD,cAAc,KAAK,iBAAiB,OAAO;AAAA,IAC7C,CAAC;AACD,UAAM,MAAM,MAAM,KAAK,OAAyB,KAAK,YAAY,MAAM;AACvE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,cACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,EAAE,SAAS,KAAK,IAAI,oBAAoB,CAAC;AAC/C,YAAM,SACJ,OAAO,EAAE,WAAW,YAAY,gBAAgB,EAAE,MAAM,IACpD,EAAE,SACD,EAAE,UAAU;AACnB,YAAM,YACJ,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC,WAAW,EAAE,mBAAmB,MAAM,KAAK,KAC3C,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC;AACF,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE,QAAQ;AAAA,UAChB;AAAA,UACA,WAAW;AAAA,UACX,YAAY;AAAA,UACZ,eAAe,WAAW,EAAE,mBAAmB,MAAM,KAAK;AAAA,QAC5D;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,aAAa,kBAAkB,CAAC;AACtC,YAAM,SACJ,OAAO,EAAE,WAAW,YAAY,aAAa,EAAE,MAAM,IACjD,EAAE,SACD,EAAE,UAAU;AACnB,YAAM,YACJ,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC,WAAW,EAAE,gBAAgB,MAAM,KAAK,KACxC,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC;AACF,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE,QAAQ;AAAA,UAChB;AAAA,UACA,WAAW,WAAW,CAAC,KAAK;AAAA,UAC5B,cAAc,WAAW;AAAA,UACzB,eAAe,EAAE,iBAAiB;AAAA,UAClC,YAAY,WAAW,EAAE,gBAAgB,MAAM,KAAK;AAAA,QACtD;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,YACJ,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC,WAAW,EAAE,uBAAuB,MAAM,KAAK,KAC/C,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC;AACF,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,OAAO,EAAE,SAAS;AAAA,UAClB,MAAM,kBAAkB,CAAC;AAAA,UACzB,MAAM,EAAE,QAAQ;AAAA,UAChB,kBAAkB,EAAE,oBAAoB;AAAA,UACxC,gBAAgB,EAAE,kBAAkB;AAAA,UACpC,mBAAmB,WAAW,EAAE,uBAAuB,MAAM,KAAK;AAAA,UAClE,WAAW,WAAW,EAAE,aAAa,MAAM,KAAK;AAAA,QAClD;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,cACZ,SACA,OACA,SACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,KAAK,WAAW,EAAE,WAAW,KAAK;AACxC,UAAI,OAAO,MAAM;AACf;AAAA,MACF;AACA,UAAI,YAAY,QAAQ,KAAK,SAAS;AACpC;AAAA,MACF;AACA,YAAM,WACJ,OAAO,EAAE,aAAa,YAAY,kBAAkB,EAAE,QAAQ,IAC1D,EAAE,WACD,EAAE,YAAY;AACrB,YAAM,aAAa,WAAW,EAAE,cAAc,MAAM,KAAK;AACzD,YAAM,QAAQ,MAAM;AAAA,QAClB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,YAAY;AAAA,UACV,WAAW,EAAE;AAAA,UACb;AAAA,UACA,QAAQ,EAAE,UAAU;AAAA,UACpB,QAAQ,EAAE,UAAU;AAAA,UACpB,WAAW,EAAE,aAAa;AAAA,UAC1B,YAAY;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACA,OACA,SACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,cAAc,SAAS,KAAuB;AAAA,MAC5D,KAAK;AACH,eAAO,KAAK,WAAW,SAAS,KAAoB;AAAA,MACtD,KAAK;AACH,eAAO,KAAK,eAAe,SAAS,KAAyB;AAAA,MAC/D,KAAK;AACH,eAAO,KAAK,cAAc,SAAS,OAAyB,OAAO;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,SACA,OACA,QACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACtD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACnD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;AACxD;AAAA,MACF,KAAK;AACH,YAAI,QAAQ;AACV,gBAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;AAAA,QACrD;AACA;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,cAAc,QAA8C;AAClE,WAAO,kBAAkB,MAAM,IAAI,SAAS;AAAA,EAC9C;AAAA,EAEA,MAAM,KACJ,SACA,SACA,QACqB;AACrB,UAAM,SAAS,KAAK,cAAc,QAAQ,MAAM;AAChD,UAAM,SAAS,QAAQ,SAAS;AAEhC,UAAM,SAAS;AAAA,MACb,CAAC,MAAM;AAAA,MACP;AAAA,MACA,KAAK,SAAS;AAAA,IAChB;AAEA,UAAM,UAAU,QAAQ,QAAQ,KAAK,MAAM,QAAQ,KAAK,IAAI;AAE5D,WAAO,gBAAoC;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,WAAW,OAAO,OAAO,MAAM,QAAQ;AACrC,gBAAQ,OAAO;AAAA,UACb,KAAK;AACH,mBAAO,KAAK,kBAAkB,MAAM,GAAG;AAAA,UACzC,KAAK;AACH,mBAAO,KAAK,eAAe,MAAM,GAAG;AAAA,UACtC,KAAK;AACH,mBAAO,KAAK,mBAAmB,MAAM,GAAG;AAAA,UAC1C,KAAK;AACH,mBAAO,KAAK,kBAAkB,MAAM,SAAS,GAAG;AAAA,QACpD;AAAA,MACF;AAAA,MACA,YAAY,OAAO,OAAO,OAAO,SAAS;AACxC,YAAI,SAAS,MAAM;AACjB,gBAAM,KAAK,sBAAsB,SAAS,OAAO,MAAM;AAAA,QACzD;AACA,cAAM,KAAK;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU,aAAa,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AC/yBA,IAAO,gBAAQ;","names":[]}
1
+ {"version":3,"sources":["../../../connector-shared/src/errors.ts","../../../connector-shared/src/retry.ts","../../../connector-shared/src/version.ts","../../../connector-shared/src/request.ts","../../../connector-shared/src/rate-limit.ts","../../../connector-shared/src/map-concurrent.ts","../../../connector-shared/src/sanitize.ts","../../../connector-shared/src/epoch.ts","../../../connector-shared/src/pagination.ts","../../../connector-shared/src/logger.ts","../src/drata.ts","../src/index.ts"],"sourcesContent":["import type { HttpResponse } from './types';\n\nexport type HttpErrorKind =\n | 'transient'\n | 'rate_limit'\n | 'auth'\n | 'upstream_bug'\n | 'client_bug';\n\nexport abstract class HttpClientError extends Error {\n abstract readonly kind: HttpErrorKind;\n readonly response?: HttpResponse;\n\n constructor(message: string, response?: HttpResponse) {\n super(message);\n this.name = new.target.name;\n this.response = response;\n }\n}\n\nexport class TransientError extends HttpClientError {\n readonly kind = 'transient' as const;\n}\n\nexport class RateLimitError extends HttpClientError {\n readonly kind = 'rate_limit' as const;\n readonly retryAfter?: Date;\n\n constructor(message: string, response?: HttpResponse, retryAfter?: Date) {\n super(message, response);\n this.retryAfter = retryAfter;\n }\n}\n\nexport class AuthError extends HttpClientError {\n readonly kind = 'auth' as const;\n}\n\nexport class UpstreamBugError extends HttpClientError {\n readonly kind = 'upstream_bug' as const;\n}\n\nexport class ClientBugError extends HttpClientError {\n readonly kind = 'client_bug' as const;\n}\n\nexport function classifyStatus(status: number): HttpErrorKind {\n if (status === 429) {\n return 'rate_limit';\n }\n if (status === 401 || status === 403) {\n return 'auth';\n }\n if (status === 408) {\n return 'transient';\n }\n if (status >= 500) {\n return 'upstream_bug';\n }\n if (status >= 400) {\n return 'client_bug';\n }\n return 'client_bug';\n}\n\nexport function errorForStatus(\n message: string,\n response: HttpResponse,\n retryAfter?: Date,\n): HttpClientError {\n const kind = classifyStatus(response.status);\n switch (kind) {\n case 'rate_limit':\n return new RateLimitError(message, response, retryAfter);\n case 'auth':\n return new AuthError(message, response);\n case 'transient':\n return new TransientError(message, response);\n case 'upstream_bug':\n return new UpstreamBugError(message, response);\n case 'client_bug':\n return new ClientBugError(message, response);\n }\n}\n","import { HttpClientError, RateLimitError, TransientError } from './errors';\n\nexport interface RetryPolicy {\n maxAttempts?: number;\n initialDelayMs?: number;\n maxDelayMs?: number;\n retryOn?: (status: number | null, err?: Error) => boolean;\n}\n\nexport const defaultRetryOn = (status: number | null, err?: Error): boolean => {\n if (err instanceof RateLimitError) {\n return true;\n }\n if (err instanceof TransientError) {\n return true;\n }\n if (status === null) {\n return err instanceof Error && !(err instanceof HttpClientError);\n }\n if (status === 408 || status === 429) {\n return true;\n }\n if (status >= 500) {\n return true;\n }\n return false;\n};\n\nexport function backoffDelayMs(\n attempt: number,\n policy: Required<Pick<RetryPolicy, 'initialDelayMs' | 'maxDelayMs'>>,\n): number {\n const base = policy.initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, policy.maxDelayMs);\n}\n\nexport function parseRetryAfter(\n headerValue: string | null,\n now: Date = new Date(),\n): Date | undefined {\n if (!headerValue) {\n return undefined;\n }\n const trimmed = headerValue.trim();\n if (/^\\d+$/.test(trimmed)) {\n return new Date(now.getTime() + Number(trimmed) * 1000);\n }\n const parsed = Date.parse(trimmed);\n if (Number.isNaN(parsed)) {\n return undefined;\n }\n return new Date(parsed);\n}\n\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n if (signal?.aborted) {\n return Promise.reject(signal.reason ?? new Error('Aborted'));\n }\n return new Promise<void>((resolve, reject) => {\n const onAbort = () => {\n clearTimeout(timer);\n reject(signal!.reason ?? new Error('Aborted'));\n };\n const timer = setTimeout(() => {\n signal?.removeEventListener('abort', onAbort);\n resolve();\n }, ms);\n signal?.addEventListener('abort', onAbort, { once: true });\n });\n}\n","export const HTTP_CLIENT_VERSION = '0.0.0';\n\nexport const DEFAULT_USER_AGENT = `rawdash-connector/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n\nexport function connectorUserAgent(connectorId: string): string {\n return `rawdash-connector-${connectorId}/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n}\n","import {\n AuthError,\n ClientBugError,\n HttpClientError,\n RateLimitError,\n TransientError,\n UpstreamBugError,\n errorForStatus,\n} from './errors';\nimport { defaultRetryOn, parseRetryAfter, sleep } from './retry';\nimport type { FetchLike, HttpMethod, HttpRequest, HttpResponse } from './types';\nimport { DEFAULT_USER_AGENT } from './version';\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_INITIAL_DELAY_MS = 1000;\nconst DEFAULT_MAX_DELAY_MS = 60_000;\nconst OBSERVER_TIMEOUT_MS = 250;\n\nexport interface RequestObservation {\n url: string;\n method: HttpMethod;\n status: number;\n resource: string;\n requestId: string;\n body: unknown;\n}\n\nexport type RequestObserver = (\n event: RequestObservation,\n) => void | Promise<void>;\n\nexport interface RequestOptions {\n fetch?: FetchLike;\n observer?: RequestObserver;\n resource: string;\n requestId?: string;\n}\n\nasync function notifyObserver(\n observer: RequestObserver,\n event: RequestObservation,\n): Promise<void> {\n let result: void | Promise<void>;\n try {\n result = observer(event);\n } catch (err) {\n console.warn('[connector-shared] request observer threw:', err);\n return;\n }\n if (!(result instanceof Promise)) {\n return;\n }\n const guarded = result.catch((err) => {\n console.warn('[connector-shared] request observer rejected:', err);\n });\n let timer: ReturnType<typeof setTimeout> | undefined;\n const timeout = new Promise<void>((resolve) => {\n timer = setTimeout(resolve, OBSERVER_TIMEOUT_MS);\n });\n try {\n await Promise.race([guarded, timeout]);\n } finally {\n if (timer) {\n clearTimeout(timer);\n }\n }\n}\n\nfunction newRequestId(): string {\n const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n if (c?.randomUUID) {\n return c.randomUUID();\n }\n return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction mergeHeaders(\n defaults: Record<string, string>,\n overrides: Record<string, string> | undefined,\n): Record<string, string> {\n const merged: Record<string, string> = {};\n for (const [k, v] of Object.entries(defaults)) {\n merged[k.toLowerCase()] = v;\n }\n if (overrides) {\n for (const [k, v] of Object.entries(overrides)) {\n merged[k.toLowerCase()] = v;\n }\n }\n return merged;\n}\n\nfunction linkTimeoutSignal(\n parent: AbortSignal | undefined,\n timeoutMs: number,\n): { signal: AbortSignal; cancel: () => void } {\n const controller = new AbortController();\n const onParentAbort = () => {\n controller.abort(parent?.reason);\n };\n if (parent) {\n if (parent.aborted) {\n controller.abort(parent.reason);\n } else {\n parent.addEventListener('abort', onParentAbort, { once: true });\n }\n }\n const timer = setTimeout(() => {\n controller.abort(new Error(`Request timed out after ${timeoutMs}ms`));\n }, timeoutMs);\n return {\n signal: controller.signal,\n cancel: () => {\n clearTimeout(timer);\n if (parent) {\n parent.removeEventListener('abort', onParentAbort);\n }\n },\n };\n}\n\nasync function readBody(\n res: Response,\n parseJson: boolean,\n binary: boolean,\n): Promise<unknown> {\n if (res.status === 204 || res.status === 205) {\n return null;\n }\n if (binary) {\n return new Uint8Array(await res.arrayBuffer());\n }\n const contentType = res.headers.get('content-type') ?? '';\n if (parseJson && contentType.includes('application/json')) {\n const text = await res.text();\n if (text.length === 0) {\n return null;\n }\n return JSON.parse(text);\n }\n return res.text();\n}\n\nexport async function request<T = unknown>(\n req: HttpRequest,\n options: RequestOptions,\n): Promise<HttpResponse<T>> {\n const fetchImpl: FetchLike = options.fetch ?? (globalThis.fetch as FetchLike);\n const retry = req.retry ?? {};\n const maxAttempts = retry.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n const initialDelayMs = retry.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;\n const maxDelayMs = retry.maxDelayMs ?? DEFAULT_MAX_DELAY_MS;\n const retryOn = retry.retryOn ?? defaultRetryOn;\n const timeoutMs = req.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n const parseJson = req.parseJson ?? true;\n const binary = req.binary ?? false;\n\n const headers = mergeHeaders(\n {\n 'User-Agent': DEFAULT_USER_AGENT,\n Accept: 'application/json',\n },\n req.headers,\n );\n\n let lastErr: Error | undefined;\n\n for (let attempt = 0; attempt < maxAttempts; attempt++) {\n req.signal?.throwIfAborted();\n\n const { signal, cancel } = linkTimeoutSignal(req.signal, timeoutMs);\n let res: Response;\n try {\n res = await fetchImpl(req.url, {\n method: req.method ?? 'GET',\n headers,\n body: req.body as RequestInit['body'],\n signal,\n });\n } catch (err) {\n cancel();\n if (req.signal?.aborted) {\n throw req.signal.reason ?? err;\n }\n const error = err instanceof Error ? err : new Error(String(err));\n lastErr = error;\n if (attempt < maxAttempts - 1 && retryOn(null, error)) {\n const delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n await sleep(delay, req.signal);\n continue;\n }\n throw new TransientError(error.message);\n }\n cancel();\n\n const body = await readBody(res, parseJson, binary);\n const httpResponse: HttpResponse<T> = {\n status: res.status,\n headers: res.headers,\n body: body as T,\n };\n if (req.rateLimit) {\n const state = req.rateLimit.parse(res.headers);\n if (state) {\n httpResponse.rateLimitState = state;\n }\n }\n\n if (options.observer) {\n await notifyObserver(options.observer, {\n url: req.url,\n method: req.method ?? 'GET',\n status: res.status,\n resource: options.resource,\n requestId: options.requestId ?? newRequestId(),\n body,\n });\n }\n\n if (res.ok) {\n return httpResponse;\n }\n\n const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n const message = `HTTP ${res.status} ${res.statusText} for ${req.method ?? 'GET'} ${req.url}`;\n const err = errorForStatus(message, httpResponse, retryAfter);\n\n if (\n attempt < maxAttempts - 1 &&\n retryOn(res.status, err) &&\n !(err instanceof AuthError) &&\n !(err instanceof ClientBugError)\n ) {\n lastErr = err;\n let delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n if (err instanceof RateLimitError && retryAfter) {\n const wait = retryAfter.getTime() - Date.now();\n if (wait > 0) {\n delay = Math.min(wait, maxDelayMs);\n }\n }\n await sleep(delay, req.signal);\n continue;\n }\n\n throw err;\n }\n\n throw lastErr ?? new UpstreamBugError('Exhausted retry attempts');\n}\n\nfunction computeDelay(\n attempt: number,\n initialDelayMs: number,\n maxDelayMs: number,\n): number {\n const base = initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, maxDelayMs);\n}\n\nexport { HttpClientError };\n","export interface RateLimitState {\n remaining: number;\n resetAt: Date;\n}\n\nexport interface RateLimitPolicy {\n parse(headers: Headers): RateLimitState | null;\n}\n\nexport interface StandardRateLimitPolicyConfig {\n remainingHeader: string;\n resetHeader: string;\n resetUnit: 's' | 'ms';\n resetFallbackMs?: number;\n}\n\nexport function standardRateLimitPolicy(\n config: StandardRateLimitPolicyConfig,\n): RateLimitPolicy {\n const { remainingHeader, resetHeader, resetUnit, resetFallbackMs } = config;\n const multiplier = resetUnit === 's' ? 1000 : 1;\n return {\n parse(h) {\n const remainingRaw = h.get(remainingHeader);\n if (remainingRaw === null || remainingRaw.trim() === '') {\n return null;\n }\n const remaining = Number(remainingRaw);\n if (!Number.isFinite(remaining)) {\n return null;\n }\n const resetRaw = h.get(resetHeader);\n if (resetRaw === null) {\n if (resetFallbackMs === undefined) {\n return null;\n }\n return {\n remaining,\n resetAt: new Date(Date.now() + resetFallbackMs),\n };\n }\n if (resetRaw.trim() === '') {\n return null;\n }\n const reset = Number(resetRaw);\n if (!Number.isFinite(reset) || reset < 0) {\n return null;\n }\n const resetMs = reset * multiplier;\n if (!Number.isFinite(resetMs)) {\n return null;\n }\n return { remaining, resetAt: new Date(resetMs) };\n },\n };\n}\n","export async function mapWithConcurrency<T, R>(\n items: readonly T[],\n concurrency: number,\n fn: (item: T, index: number) => Promise<R>,\n): Promise<R[]> {\n const results = new Array<R>(items.length);\n if (items.length === 0) {\n return results;\n }\n const normalized = Number.isFinite(concurrency) ? Math.floor(concurrency) : 1;\n const limit = Math.max(1, Math.min(normalized, items.length));\n let next = 0;\n let failed = false;\n\n async function worker(): Promise<void> {\n while (!failed) {\n const i = next++;\n if (i >= items.length) {\n return;\n }\n try {\n results[i] = await fn(items[i]!, i);\n } catch (err) {\n failed = true;\n throw err;\n }\n }\n }\n\n const workers: Promise<void>[] = [];\n for (let w = 0; w < limit; w++) {\n workers.push(worker());\n }\n await Promise.all(workers);\n return results;\n}\n","export interface SanitizeAllowedUrlOptions {\n url: string | null;\n host: string;\n pathname: string;\n protocol?: 'https:' | 'http:';\n}\n\nexport function sanitizeAllowedUrl(\n options: SanitizeAllowedUrlOptions,\n): string | null {\n const { url, host, pathname, protocol = 'https:' } = options;\n if (url === null) {\n return null;\n }\n try {\n const u = new URL(url);\n if (u.protocol !== protocol || u.host !== host || u.pathname !== pathname) {\n return null;\n }\n return u.toString();\n } catch {\n return null;\n }\n}\n","export type EpochUnit = 'ms' | 's' | 'iso';\n\nexport function parseEpoch(\n value: number | string | null | undefined,\n unit: EpochUnit,\n): number | null {\n if (value === null || value === undefined) {\n return null;\n }\n if (unit === 'iso') {\n if (typeof value !== 'string') {\n return null;\n }\n const ms = new Date(value).getTime();\n return Number.isFinite(ms) ? ms : null;\n }\n if (typeof value === 'string' && value.trim() === '') {\n return null;\n }\n const n = typeof value === 'number' ? value : Number(value);\n if (!Number.isFinite(n)) {\n return null;\n }\n const result = unit === 's' ? n * 1000 : n;\n return Number.isFinite(result) ? result : null;\n}\n","import { request } from './request';\nimport type { HttpRequest } from './types';\n\nexport function parseLinkHeader(header: string | null): Record<string, string> {\n if (!header) {\n return {};\n }\n const result: Record<string, string> = {};\n for (const part of header.split(',')) {\n const match = part.match(/<([^>]+)>\\s*;\\s*rel=\"([^\"]+)\"/);\n if (match) {\n result[match[2]!] = match[1]!;\n }\n }\n return result;\n}\n\nexport async function* paginateLink<T>(\n initial: HttpRequest,\n parse: (body: unknown) => T[],\n options: { resource: string },\n): AsyncIterable<T> {\n let next: string | null = initial.url;\n while (next) {\n const res: Awaited<ReturnType<typeof request>> = await request(\n {\n ...initial,\n url: next,\n },\n { resource: options.resource },\n );\n for (const item of parse(res.body)) {\n yield item;\n }\n const links = parseLinkHeader(res.headers.get('link'));\n next = links['next'] ?? null;\n }\n}\n\nexport async function* paginateCursor<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; nextCursor: string | null },\n buildNext: (req: HttpRequest, cursor: string) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let req: HttpRequest = initial;\n while (true) {\n const res = await request(req, { resource: options.resource });\n const { items, nextCursor } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!nextCursor) {\n return;\n }\n req = buildNext(req, nextCursor);\n }\n}\n\nexport async function* paginatePage<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; hasMore: boolean },\n buildPage: (req: HttpRequest, page: number) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let page = 1;\n while (true) {\n const req = page === 1 ? initial : buildPage(initial, page);\n const res = await request(req, { resource: options.resource });\n const { items, hasMore } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!hasMore || items.length === 0) {\n return;\n }\n page++;\n }\n}\n","export type LogFields = Record<string, unknown>;\n\nexport interface ConnectorLogger {\n info(event: string, fields?: LogFields): void;\n warn(event: string, fields?: LogFields): void;\n}\n\nexport interface ConnectorLoggerOptions {\n scope: string;\n}\n\nconst MAX_VALUE_LEN = 120;\n\nfunction truncate(s: string, max = MAX_VALUE_LEN): string {\n if (s.length <= max) {\n return s;\n }\n return `${s.slice(0, max - 1)}…`;\n}\n\nfunction formatValue(value: unknown): string {\n if (value === null) {\n return 'null';\n }\n if (value === undefined) {\n return '';\n }\n if (typeof value === 'number' || typeof value === 'boolean') {\n return String(value);\n }\n if (typeof value === 'string') {\n const t = truncate(value);\n if (/[\\s\"=]/.test(t)) {\n return JSON.stringify(t);\n }\n return t;\n }\n if (typeof value === 'bigint') {\n return value.toString();\n }\n let json: string | undefined;\n try {\n json = JSON.stringify(value);\n } catch {\n json = undefined;\n }\n return truncate(json ?? String(value));\n}\n\nexport function formatLogFields(fields?: LogFields): string {\n if (!fields) {\n return '';\n }\n const parts: string[] = [];\n for (const [k, v] of Object.entries(fields)) {\n if (v === undefined) {\n continue;\n }\n parts.push(`${k}=${formatValue(v)}`);\n }\n return parts.length > 0 ? ` ${parts.join(' ')}` : '';\n}\n\nexport function formatLogLine(\n scope: string,\n event: string,\n fields?: LogFields,\n): string {\n return `[${scope}] ${event}${formatLogFields(fields)}`;\n}\n\nexport function createDefaultConnectorLogger(\n opts: ConnectorLoggerOptions,\n): ConnectorLogger {\n return {\n info(event, fields) {\n console.info(formatLogLine(opts.scope, event, fields));\n },\n warn(event, fields) {\n console.warn(formatLogLine(opts.scope, event, fields));\n },\n };\n}\n\nconst NOOP_LOGGER: ConnectorLogger = {\n info() {},\n warn() {},\n};\n\nexport function noopConnectorLogger(): ConnectorLogger {\n return NOOP_LOGGER;\n}\n","import {\n type HttpResponse,\n connectorUserAgent,\n parseEpoch,\n} from '@rawdash/connector-shared';\nimport {\n BaseConnector,\n type ChunkedSyncCursor,\n type ConnectorContext,\n type ConnectorDoc,\n type CredentialsSchema,\n type StorageHandle,\n type SyncOptions,\n type SyncResult,\n defineConfigFields,\n defineConnectorDoc,\n defineResources,\n makeChunkedCursorGuard,\n paginateChunked,\n schemasFromResources,\n selectActivePhases,\n} from '@rawdash/core';\nimport { z } from 'zod';\n\nexport const configFields = defineConfigFields(\n z.object({\n apiKey: z.object({ $secret: z.string().min(1) }).meta({\n label: 'Drata API key',\n description:\n 'Drata Public API key. Generated under Settings -> Integrations -> Public API. Treated as a bearer token. Stored as a secret.',\n placeholder: 'DRATA_API_KEY',\n secret: true,\n }),\n baseUrl: z\n .string()\n .trim()\n .url()\n .optional()\n .refine((u) => u === undefined || !u.endsWith('/'), {\n message: 'baseUrl must not end with a trailing slash.',\n })\n .meta({\n label: 'Base URL',\n description:\n 'Override the Drata Public API base URL. Defaults to \"https://public-api.drata.com\". Useful for sandbox / region-specific tenants.',\n placeholder: 'https://public-api.drata.com',\n }),\n resources: z\n .array(z.enum(['controls', 'tests', 'personnel', 'findings']))\n .nonempty()\n .optional()\n .meta({\n label: 'Resources',\n description:\n 'Which Drata resources to sync. Omit to sync all of them. The API key only needs read access to the resources listed here.',\n }),\n findingsLookbackDays: z.number().int().positive().optional().meta({\n label: 'Findings lookback (days)',\n description:\n 'How many days of test findings to refresh on each full sync. Defaults to 90. Incremental syncs use the run watermark and ignore this field.',\n placeholder: '90',\n }),\n }),\n);\n\nexport const doc: ConnectorDoc = defineConnectorDoc({\n displayName: 'Drata',\n category: 'security',\n brandColor: '#6D2BFF',\n tagline:\n 'Sync controls, tests, personnel, and test findings from Drata for audit-ready %, failing-test count, training-completion, and open-finding compliance dashboards.',\n vendor: {\n name: 'Drata',\n domain: 'drata.com',\n apiDocs: 'https://developers.drata.com/',\n website: 'https://drata.com',\n },\n auth: {\n summary:\n 'Bearer-token auth with a Drata Public API key. Read access to the resources you sync is sufficient.',\n setup: [\n 'Sign in to Drata as an admin and open Settings -> Integrations -> Public API.',\n 'Create a new API key; grant it read access to the resources you intend to sync (controls, tests, personnel, findings).',\n 'Copy the generated key. Drata only shows the key once.',\n 'Store the key as a rawdash secret and reference it from the connector config as `apiKey: secret(\"DRATA_API_KEY\")`.',\n ],\n },\n rateLimit:\n 'Drata enforces a per-tenant quota and responds with 429 + Retry-After when exceeded; the shared HTTP client honors Retry-After when scheduling the next request.',\n limitations: [\n 'Only controls, tests, personnel, and test findings are synced. Frameworks, risks, vendors, audits, and document-evidence resources are out of scope.',\n 'Controls, tests, and personnel are full-snapshot resources: every sync re-reads the whole list and rewrites the entity scope on the first page. Tenants with very large catalogs (10k+ controls/tests) should run the connector less often.',\n 'Test findings before the configured lookback window (default 90 days) are not refreshed; they remain whatever the most recent sync that did see them wrote.',\n ],\n});\n\nexport type DrataResource = 'controls' | 'tests' | 'personnel' | 'findings';\n\nexport interface DrataSettings {\n baseUrl?: string;\n resources?: readonly DrataResource[];\n findingsLookbackDays?: number;\n}\n\nconst drataCredentials = {\n apiKey: {\n description: 'Drata Public API key',\n auth: 'required' as const,\n },\n} satisfies CredentialsSchema;\n\ntype DrataCredentials = typeof drataCredentials;\n\nconst PHASE_ORDER = ['controls', 'tests', 'personnel', 'findings'] as const;\n\ntype DrataPhase = (typeof PHASE_ORDER)[number];\n\ntype DrataSyncCursor = ChunkedSyncCursor<DrataPhase, string>;\n\nconst isDrataSyncCursor = makeChunkedCursorGuard(PHASE_ORDER);\n\nconst CONTROL_ENTITY = 'drata_control';\nconst TEST_ENTITY = 'drata_test';\nconst PERSONNEL_ENTITY = 'drata_personnel';\nconst FINDING_EVENT = 'drata_test_finding';\n\nconst DEFAULT_BASE_URL = 'https://public-api.drata.com';\nconst PAGE_SIZE = 100;\nconst DEFAULT_FINDINGS_LOOKBACK_DAYS = 90;\n\nconst CONTROL_STATUSES = [\n 'PASSING',\n 'FAILING',\n 'NEEDS_ATTENTION',\n 'DEACTIVATED',\n] as const;\ntype ControlStatus = (typeof CONTROL_STATUSES)[number];\n\nconst TEST_STATUSES = [\n 'OK',\n 'NEEDS_ATTENTION',\n 'DEACTIVATED',\n 'IN_PROGRESS',\n] as const;\ntype TestStatus = (typeof TEST_STATUSES)[number];\n\nconst FINDING_SEVERITIES = ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'] as const;\ntype FindingSeverity = (typeof FINDING_SEVERITIES)[number];\n\nconst idString = z.string().min(1);\n\nconst paginationSchema = z\n .object({\n nextCursor: z.string().nullish(),\n hasMore: z.boolean().nullish(),\n })\n .nullish();\n\nconst frameworkRefSchema = z.object({\n name: z.string().nullish(),\n matchingId: z.string().nullish(),\n});\n\nconst controlSchema = z.object({\n id: idString,\n name: z.string().nullish(),\n description: z.string().nullish(),\n status: z.string().nullish(),\n frameworks: z.array(frameworkRefSchema).nullish(),\n lastEvaluatedAt: z.string().nullish(),\n updatedAt: z.string().nullish(),\n createdAt: z.string().nullish(),\n});\n\nconst controlsResponseSchema = z.object({\n data: z.array(controlSchema),\n pagination: paginationSchema,\n});\n\nconst testSchema = z.object({\n id: idString,\n name: z.string().nullish(),\n description: z.string().nullish(),\n status: z.string().nullish(),\n controlIds: z.array(z.string()).nullish(),\n controls: z.array(z.object({ id: z.string() })).nullish(),\n evidenceCount: z.number().nullish(),\n lastTestedAt: z.string().nullish(),\n updatedAt: z.string().nullish(),\n createdAt: z.string().nullish(),\n});\n\nconst testsResponseSchema = z.object({\n data: z.array(testSchema),\n pagination: paginationSchema,\n});\n\nconst personnelSchema = z.object({\n id: idString,\n email: z.string().nullish(),\n firstName: z.string().nullish(),\n lastName: z.string().nullish(),\n role: z.string().nullish(),\n employmentStatus: z.string().nullish(),\n startDate: z.string().nullish(),\n trainingStatus: z.string().nullish(),\n trainingCompletedAt: z.string().nullish(),\n updatedAt: z.string().nullish(),\n createdAt: z.string().nullish(),\n});\n\nconst personnelResponseSchema = z.object({\n data: z.array(personnelSchema),\n pagination: paginationSchema,\n});\n\nconst findingSchema = z.object({\n id: idString,\n testId: z.string().nullish(),\n controlId: z.string().nullish(),\n severity: z.string().nullish(),\n status: z.string().nullish(),\n createdAt: z.string(),\n resolvedAt: z.string().nullish(),\n description: z.string().nullish(),\n resourceId: z.string().nullish(),\n});\n\nconst findingsResponseSchema = z.object({\n data: z.array(findingSchema),\n pagination: paginationSchema,\n});\n\nexport const drataResources = defineResources({\n [CONTROL_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'status',\n ops: ['eq'],\n values: ['PASSING', 'FAILING', 'NEEDS_ATTENTION', 'DEACTIVATED'],\n },\n { field: 'framework', ops: ['eq'] },\n ],\n description:\n 'Drata controls keyed by id. Each control belongs to one or more frameworks (SOC 2, HIPAA, ISO 27001, etc.) and has a roll-up status of PASSING, FAILING, or NEEDS_ATTENTION.',\n endpoint: 'GET /v1/controls',\n notes:\n 'Cursor pagination via cursor / limit. Controls are a full-snapshot resource: a full sync rewrites the scope on first page.',\n fields: [\n { name: 'name', description: 'Human-readable control name.' },\n {\n name: 'status',\n description:\n 'Roll-up status (PASSING, FAILING, NEEDS_ATTENTION, or DEACTIVATED).',\n },\n {\n name: 'framework',\n description:\n 'Name of the first framework the control is mapped to (e.g. \"SOC 2\"). Use the framework dimension for distributions when a control maps to several frameworks.',\n },\n {\n name: 'frameworks',\n description:\n 'Comma-separated list of every framework the control is mapped to.',\n },\n {\n name: 'lastEvaluated',\n description: 'When Drata last evaluated the control (Unix ms).',\n },\n ],\n responses: {\n controls: controlsResponseSchema,\n },\n },\n [TEST_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'status',\n ops: ['eq'],\n values: ['OK', 'NEEDS_ATTENTION', 'DEACTIVATED', 'IN_PROGRESS'],\n },\n ],\n description:\n 'Drata tests keyed by id. A test is the smallest unit of evaluation in Drata and may be mapped to multiple controls.',\n endpoint: 'GET /v1/tests',\n notes:\n 'Cursor pagination via cursor / limit. Tests are a full-snapshot resource.',\n fields: [\n { name: 'name', description: 'Human-readable test name.' },\n {\n name: 'status',\n description:\n 'Test status (OK, NEEDS_ATTENTION, DEACTIVATED, or IN_PROGRESS).',\n },\n {\n name: 'controlId',\n description:\n 'First control id the test is mapped to (a test may be mapped to several controls).',\n },\n {\n name: 'controlCount',\n description: 'Number of controls the test is mapped to.',\n },\n {\n name: 'evidenceCount',\n description:\n 'Number of distinct evidence rows backing the test (counter maintained by Drata).',\n },\n {\n name: 'lastTested',\n description: 'When Drata last ran the test (Unix ms).',\n },\n ],\n responses: { tests: testsResponseSchema },\n },\n [PERSONNEL_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'employmentStatus',\n ops: ['eq'],\n },\n {\n field: 'trainingStatus',\n ops: ['eq'],\n },\n ],\n description:\n 'Drata personnel records keyed by id. Surfaces employment status, role, training completion, and training-completed timestamp for compliance-training dashboards.',\n endpoint: 'GET /v1/personnel',\n notes:\n 'Cursor pagination via cursor / limit. Personnel is a full-snapshot resource.',\n fields: [\n { name: 'email', description: 'Work email address.' },\n { name: 'name', description: 'Full name (\"firstName lastName\").' },\n { name: 'role', description: 'Reported role / job title.' },\n {\n name: 'employmentStatus',\n description:\n 'Reported employment status (e.g. ACTIVE, ONBOARDING, OFFBOARDED).',\n },\n {\n name: 'trainingStatus',\n description:\n 'Reported security-training status (e.g. COMPLETED, IN_PROGRESS, NOT_STARTED, OVERDUE).',\n },\n {\n name: 'trainingCompleted',\n description:\n 'When the most recent training was marked completed (Unix ms).',\n },\n {\n name: 'startDate',\n description: 'Reported employment start date (Unix ms).',\n },\n ],\n responses: { personnel: personnelResponseSchema },\n },\n [FINDING_EVENT]: {\n shape: 'event',\n filterable: [\n {\n field: 'severity',\n ops: ['eq'],\n values: ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'],\n },\n {\n field: 'status',\n ops: ['eq'],\n values: ['OPEN', 'RESOLVED', 'DEFERRED', 'WONT_FIX'],\n },\n ],\n description:\n 'Test findings (one event per finding row), with severity, the test it came from, and resolved-at when applicable. Useful for open-finding counts and MTTR-to-resolution timeseries.',\n endpoint: 'GET /v1/findings',\n notes:\n 'Cursor pagination via cursor / limit. Full syncs walk back findingsLookbackDays days; incremental syncs use the sync `since` watermark.',\n fields: [\n { name: 'findingId', description: 'Drata finding id.' },\n {\n name: 'severity',\n description: 'Finding severity (LOW, MEDIUM, HIGH, CRITICAL).',\n },\n {\n name: 'status',\n description: 'Finding status (OPEN, RESOLVED, DEFERRED, WONT_FIX).',\n },\n {\n name: 'testId',\n description: 'Id of the test that produced the finding.',\n },\n {\n name: 'controlId',\n description:\n 'First control id the finding is mapped to (via its test).',\n },\n {\n name: 'resolvedAt',\n description: 'Resolution timestamp (Unix ms) when resolved.',\n },\n ],\n responses: { findings: findingsResponseSchema },\n },\n});\n\nexport const id = 'drata';\n\ntype ControlsResponse = z.infer<typeof controlsResponseSchema>;\ntype TestsResponse = z.infer<typeof testsResponseSchema>;\ntype PersonnelResponse = z.infer<typeof personnelResponseSchema>;\ntype FindingsResponse = z.infer<typeof findingsResponseSchema>;\ntype DrataControl = z.infer<typeof controlSchema>;\ntype DrataTest = z.infer<typeof testSchema>;\ntype DrataPersonnel = z.infer<typeof personnelSchema>;\ntype DrataFinding = z.infer<typeof findingSchema>;\n\nfunction isControlStatus(value: string): value is ControlStatus {\n return (CONTROL_STATUSES as readonly string[]).includes(value);\n}\n\nfunction isTestStatus(value: string): value is TestStatus {\n return (TEST_STATUSES as readonly string[]).includes(value);\n}\n\nfunction isFindingSeverity(value: string): value is FindingSeverity {\n return (FINDING_SEVERITIES as readonly string[]).includes(value);\n}\n\nfunction normalizeFrameworks(control: DrataControl): {\n primary: string | null;\n list: string;\n} {\n const frameworks = control.frameworks ?? [];\n const names: string[] = [];\n for (const f of frameworks) {\n if (typeof f.name === 'string' && f.name.length > 0) {\n names.push(f.name);\n }\n }\n if (names.length === 0) {\n return { primary: null, list: '' };\n }\n return { primary: names[0]!, list: names.join(',') };\n}\n\nfunction controlIdsForTest(test: DrataTest): string[] {\n if (Array.isArray(test.controlIds) && test.controlIds.length > 0) {\n return test.controlIds.filter((s) => typeof s === 'string' && s.length > 0);\n }\n if (Array.isArray(test.controls) && test.controls.length > 0) {\n return test.controls\n .map((c) => c.id)\n .filter((s) => typeof s === 'string' && s.length > 0);\n }\n return [];\n}\n\nfunction personnelFullName(p: DrataPersonnel): string | null {\n const parts = [p.firstName, p.lastName]\n .filter((s): s is string => typeof s === 'string' && s.length > 0)\n .map((s) => s.trim())\n .filter((s) => s.length > 0);\n if (parts.length === 0) {\n return null;\n }\n return parts.join(' ');\n}\n\nexport class DrataConnector extends BaseConnector<\n DrataSettings,\n DrataCredentials\n> {\n static readonly id = id;\n\n static readonly resources = drataResources;\n\n static readonly schemas = schemasFromResources(drataResources);\n\n static create(input: unknown, ctx?: ConnectorContext): DrataConnector {\n const parsed = configFields.parse(input);\n return new DrataConnector(\n {\n baseUrl: parsed.baseUrl,\n resources: parsed.resources,\n findingsLookbackDays: parsed.findingsLookbackDays,\n },\n {\n apiKey: parsed.apiKey,\n },\n ctx,\n );\n }\n\n readonly id = id;\n override readonly credentials = drataCredentials;\n\n private baseUrl(): string {\n return this.settings.baseUrl ?? DEFAULT_BASE_URL;\n }\n\n private async apiGet<T>(\n url: string,\n resource: string,\n signal?: AbortSignal,\n ): Promise<HttpResponse<T>> {\n return this.get<T>(url, {\n resource,\n headers: {\n Authorization: `Bearer ${this.creds.apiKey}`,\n Accept: 'application/json',\n 'User-Agent': connectorUserAgent('drata'),\n },\n signal,\n });\n }\n\n private buildListUrl(\n path: string,\n cursor: string | null,\n extra?: Record<string, string>,\n ): string {\n const u = new URL(`${this.baseUrl()}${path}`);\n u.searchParams.set('limit', String(PAGE_SIZE));\n if (cursor) {\n u.searchParams.set('cursor', cursor);\n }\n if (extra) {\n for (const [k, v] of Object.entries(extra)) {\n u.searchParams.set(k, v);\n }\n }\n return u.toString();\n }\n\n private nextCursor(\n pagination:\n | { nextCursor?: string | null; hasMore?: boolean | null }\n | null\n | undefined,\n ): string | null {\n if (!pagination) {\n return null;\n }\n if (pagination.hasMore === false) {\n return null;\n }\n return pagination.nextCursor ?? null;\n }\n\n private async fetchControlsPage(\n cursor: string | null,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataControl[]; next: string | null }> {\n const url = this.buildListUrl('/v1/controls', cursor);\n const res = await this.apiGet<ControlsResponse>(url, 'controls', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private async fetchTestsPage(\n cursor: string | null,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataTest[]; next: string | null }> {\n const url = this.buildListUrl('/v1/tests', cursor);\n const res = await this.apiGet<TestsResponse>(url, 'tests', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private async fetchPersonnelPage(\n cursor: string | null,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataPersonnel[]; next: string | null }> {\n const url = this.buildListUrl('/v1/personnel', cursor);\n const res = await this.apiGet<PersonnelResponse>(url, 'personnel', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private findingsSinceIso(options: SyncOptions): string {\n if (options.since) {\n return options.since;\n }\n const lookback =\n this.settings.findingsLookbackDays ?? DEFAULT_FINDINGS_LOOKBACK_DAYS;\n const since = new Date(Date.now() - lookback * 24 * 60 * 60 * 1000);\n return since.toISOString();\n }\n\n private async fetchFindingsPage(\n cursor: string | null,\n options: SyncOptions,\n signal: AbortSignal | undefined,\n ): Promise<{ items: DrataFinding[]; next: string | null }> {\n const url = this.buildListUrl('/v1/findings', cursor, {\n createdAfter: this.findingsSinceIso(options),\n });\n const res = await this.apiGet<FindingsResponse>(url, 'findings', signal);\n return {\n items: res.body.data,\n next: this.nextCursor(res.body.pagination),\n };\n }\n\n private async writeControls(\n storage: StorageHandle,\n items: DrataControl[],\n ): Promise<void> {\n for (const c of items) {\n const { primary, list } = normalizeFrameworks(c);\n const status =\n typeof c.status === 'string' && isControlStatus(c.status)\n ? c.status\n : (c.status ?? null);\n const updatedMs =\n parseEpoch(c.updatedAt ?? null, 'iso') ??\n parseEpoch(c.lastEvaluatedAt ?? null, 'iso') ??\n parseEpoch(c.createdAt ?? null, 'iso') ??\n 0;\n await storage.entity({\n type: CONTROL_ENTITY,\n id: c.id,\n attributes: {\n name: c.name ?? null,\n status,\n framework: primary,\n frameworks: list,\n lastEvaluated: parseEpoch(c.lastEvaluatedAt ?? null, 'iso'),\n },\n updated_at: updatedMs,\n });\n }\n }\n\n private async writeTests(\n storage: StorageHandle,\n items: DrataTest[],\n ): Promise<void> {\n for (const t of items) {\n const controlIds = controlIdsForTest(t);\n const status =\n typeof t.status === 'string' && isTestStatus(t.status)\n ? t.status\n : (t.status ?? null);\n const updatedMs =\n parseEpoch(t.updatedAt ?? null, 'iso') ??\n parseEpoch(t.lastTestedAt ?? null, 'iso') ??\n parseEpoch(t.createdAt ?? null, 'iso') ??\n 0;\n await storage.entity({\n type: TEST_ENTITY,\n id: t.id,\n attributes: {\n name: t.name ?? null,\n status,\n controlId: controlIds[0] ?? null,\n controlCount: controlIds.length,\n evidenceCount: t.evidenceCount ?? null,\n lastTested: parseEpoch(t.lastTestedAt ?? null, 'iso'),\n },\n updated_at: updatedMs,\n });\n }\n }\n\n private async writePersonnel(\n storage: StorageHandle,\n items: DrataPersonnel[],\n ): Promise<void> {\n for (const p of items) {\n const updatedMs =\n parseEpoch(p.updatedAt ?? null, 'iso') ??\n parseEpoch(p.trainingCompletedAt ?? null, 'iso') ??\n parseEpoch(p.createdAt ?? null, 'iso') ??\n 0;\n await storage.entity({\n type: PERSONNEL_ENTITY,\n id: p.id,\n attributes: {\n email: p.email ?? null,\n name: personnelFullName(p),\n role: p.role ?? null,\n employmentStatus: p.employmentStatus ?? null,\n trainingStatus: p.trainingStatus ?? null,\n trainingCompleted: parseEpoch(p.trainingCompletedAt ?? null, 'iso'),\n startDate: parseEpoch(p.startDate ?? null, 'iso'),\n },\n updated_at: updatedMs,\n });\n }\n }\n\n private async writeFindings(\n storage: StorageHandle,\n items: DrataFinding[],\n sinceMs: number | null,\n ): Promise<void> {\n for (const f of items) {\n const ts = parseEpoch(f.createdAt, 'iso');\n if (ts === null) {\n continue;\n }\n if (sinceMs !== null && ts < sinceMs) {\n continue;\n }\n const severity =\n typeof f.severity === 'string' && isFindingSeverity(f.severity)\n ? f.severity\n : (f.severity ?? null);\n const resolvedMs = parseEpoch(f.resolvedAt ?? null, 'iso');\n await storage.event({\n name: FINDING_EVENT,\n start_ts: ts,\n end_ts: resolvedMs,\n attributes: {\n findingId: f.id,\n severity,\n status: f.status ?? null,\n testId: f.testId ?? null,\n controlId: f.controlId ?? null,\n resolvedAt: resolvedMs,\n },\n });\n }\n }\n\n private async writePhase(\n storage: StorageHandle,\n phase: DrataPhase,\n items: unknown[],\n sinceMs: number | null,\n ): Promise<void> {\n switch (phase) {\n case 'controls':\n return this.writeControls(storage, items as DrataControl[]);\n case 'tests':\n return this.writeTests(storage, items as DrataTest[]);\n case 'personnel':\n return this.writePersonnel(storage, items as DrataPersonnel[]);\n case 'findings':\n return this.writeFindings(storage, items as DrataFinding[], sinceMs);\n }\n }\n\n private async clearScopeOnFirstPage(\n storage: StorageHandle,\n phase: DrataPhase,\n isFull: boolean,\n ): Promise<void> {\n switch (phase) {\n case 'controls':\n await storage.entities([], { types: [CONTROL_ENTITY] });\n return;\n case 'tests':\n await storage.entities([], { types: [TEST_ENTITY] });\n return;\n case 'personnel':\n await storage.entities([], { types: [PERSONNEL_ENTITY] });\n return;\n case 'findings':\n if (isFull) {\n await storage.events([], { names: [FINDING_EVENT] });\n }\n return;\n }\n }\n\n private resolveCursor(cursor: unknown): DrataSyncCursor | undefined {\n return isDrataSyncCursor(cursor) ? cursor : undefined;\n }\n\n async sync(\n options: SyncOptions,\n storage: StorageHandle,\n signal?: AbortSignal,\n ): Promise<SyncResult> {\n const cursor = this.resolveCursor(options.cursor);\n const isFull = options.mode === 'full';\n\n const phases = selectActivePhases<DrataResource, DrataPhase>(\n (r) => r,\n PHASE_ORDER,\n this.settings.resources,\n );\n\n const sinceMs = options.since ? Date.parse(options.since) : null;\n\n return paginateChunked<DrataPhase, string>({\n phases,\n cursor,\n signal,\n logger: this.logger,\n fetchPage: async (phase, page, sig) => {\n switch (phase) {\n case 'controls':\n return this.fetchControlsPage(page, sig);\n case 'tests':\n return this.fetchTestsPage(page, sig);\n case 'personnel':\n return this.fetchPersonnelPage(page, sig);\n case 'findings':\n return this.fetchFindingsPage(page, options, sig);\n }\n },\n writeBatch: async (phase, items, page) => {\n if (page === null) {\n await this.clearScopeOnFirstPage(storage, phase, isFull);\n }\n await this.writePhase(\n storage,\n phase,\n items,\n phase === 'findings' ? sinceMs : null,\n );\n },\n });\n }\n}\n","import { DrataConnector } from './drata';\n\nexport {\n DrataConnector,\n drataResources as resources,\n configFields,\n doc,\n id,\n} from './drata';\nexport type { DrataResource, DrataSettings } from './drata';\nexport default DrataConnector;\n"],"mappings":";AEAO,IAAM,sBAAsB;AAE5B,IAAM,qBAAqB,qBAAqB,mBAAmB;AAEnE,SAAS,mBAAmB,aAA6B;AAC9D,SAAO,qBAAqB,WAAW,IAAI,mBAAmB;AAChE;AKJO,SAAS,WACd,OACA,MACe;AACf,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;EACT;AACA,MAAI,SAAS,OAAO;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;IACT;AACA,UAAM,KAAK,IAAI,KAAK,KAAK,EAAE,QAAQ;AACnC,WAAO,OAAO,SAAS,EAAE,IAAI,KAAK;EACpC;AACA,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,WAAO;EACT;AACA,QAAM,IAAI,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC1D,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,WAAO;EACT;AACA,QAAM,SAAS,SAAS,MAAM,IAAI,MAAO;AACzC,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;;;AGpBA;AAAA,EACE;AAAA,EAQA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAEX,IAAM,eAAe;AAAA,EAC1B,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK;AAAA,MACpD,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,SAAS,EACN,OAAO,EACP,KAAK,EACL,IAAI,EACJ,SAAS,EACT,OAAO,CAAC,MAAM,MAAM,UAAa,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,MAClD,SAAS;AAAA,IACX,CAAC,EACA,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,IACH,WAAW,EACR,MAAM,EAAE,KAAK,CAAC,YAAY,SAAS,aAAa,UAAU,CAAC,CAAC,EAC5D,SAAS,EACT,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,IACJ,CAAC;AAAA,IACH,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK;AAAA,MAChE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AACH;AAEO,IAAM,MAAoB,mBAAmB;AAAA,EAClD,aAAa;AAAA,EACb,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,SACE;AAAA,EACF,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA,MAAM;AAAA,IACJ,SACE;AAAA,IACF,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,WACE;AAAA,EACF,aAAa;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF,CAAC;AAUD,IAAM,mBAAmB;AAAA,EACvB,QAAQ;AAAA,IACN,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AACF;AAIA,IAAM,cAAc,CAAC,YAAY,SAAS,aAAa,UAAU;AAMjE,IAAM,oBAAoB,uBAAuB,WAAW;AAE5D,IAAM,iBAAiB;AACvB,IAAM,cAAc;AACpB,IAAM,mBAAmB;AACzB,IAAM,gBAAgB;AAEtB,IAAM,mBAAmB;AACzB,IAAM,YAAY;AAClB,IAAM,iCAAiC;AAEvC,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,gBAAgB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,qBAAqB,CAAC,OAAO,UAAU,QAAQ,UAAU;AAG/D,IAAM,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAEjC,IAAM,mBAAmB,EACtB,OAAO;AAAA,EACN,YAAY,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC/B,SAAS,EAAE,QAAQ,EAAE,QAAQ;AAC/B,CAAC,EACA,QAAQ;AAEX,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,QAAQ;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,MAAM,kBAAkB,EAAE,QAAQ;AAAA,EAChD,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,MAAM,aAAa;AAAA,EAC3B,YAAY;AACd,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,QAAQ;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ;AAAA,EACxC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ;AAAA,EACxD,eAAe,EAAE,OAAO,EAAE,QAAQ;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,QAAQ;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,MAAM,UAAU;AAAA,EACxB,YAAY;AACd,CAAC;AAED,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,IAAI;AAAA,EACJ,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,kBAAkB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,gBAAgB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACnC,qBAAqB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,MAAM,eAAe;AAAA,EAC7B,YAAY;AACd,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,IAAI;AAAA,EACJ,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,QAAQ;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,MAAM,aAAa;AAAA,EAC3B,YAAY;AACd,CAAC;AAEM,IAAM,iBAAiB,gBAAgB;AAAA,EAC5C,CAAC,cAAc,GAAG;AAAA,IAChB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,WAAW,WAAW,mBAAmB,aAAa;AAAA,MACjE;AAAA,MACA,EAAE,OAAO,aAAa,KAAK,CAAC,IAAI,EAAE;AAAA,IACpC;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,+BAA+B;AAAA,MAC5D;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,CAAC,WAAW,GAAG;AAAA,IACb,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,MAAM,mBAAmB,eAAe,aAAa;AAAA,MAChE;AAAA,IACF;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,4BAA4B;AAAA,MACzD;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,OAAO,oBAAoB;AAAA,EAC1C;AAAA,EACA,CAAC,gBAAgB,GAAG;AAAA,IAClB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,MACZ;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,MACZ;AAAA,IACF;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,SAAS,aAAa,sBAAsB;AAAA,MACpD,EAAE,MAAM,QAAQ,aAAa,oCAAoC;AAAA,MACjE,EAAE,MAAM,QAAQ,aAAa,6BAA6B;AAAA,MAC1D;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,WAAW,wBAAwB;AAAA,EAClD;AAAA,EACA,CAAC,aAAa,GAAG;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,OAAO,UAAU,QAAQ,UAAU;AAAA,MAC9C;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,QAAQ,YAAY,YAAY,UAAU;AAAA,MACrD;AAAA,IACF;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN,EAAE,MAAM,aAAa,aAAa,oBAAoB;AAAA,MACtD;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,UAAU,uBAAuB;AAAA,EAChD;AACF,CAAC;AAEM,IAAM,KAAK;AAWlB,SAAS,gBAAgB,OAAuC;AAC9D,SAAQ,iBAAuC,SAAS,KAAK;AAC/D;AAEA,SAAS,aAAa,OAAoC;AACxD,SAAQ,cAAoC,SAAS,KAAK;AAC5D;AAEA,SAAS,kBAAkB,OAAyC;AAClE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAEA,SAAS,oBAAoB,SAG3B;AACA,QAAM,aAAa,QAAQ,cAAc,CAAC;AAC1C,QAAM,QAAkB,CAAC;AACzB,aAAW,KAAK,YAAY;AAC1B,QAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,SAAS,GAAG;AACnD,YAAM,KAAK,EAAE,IAAI;AAAA,IACnB;AAAA,EACF;AACA,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,SAAS,MAAM,MAAM,GAAG;AAAA,EACnC;AACA,SAAO,EAAE,SAAS,MAAM,CAAC,GAAI,MAAM,MAAM,KAAK,GAAG,EAAE;AACrD;AAEA,SAAS,kBAAkB,MAA2B;AACpD,MAAI,MAAM,QAAQ,KAAK,UAAU,KAAK,KAAK,WAAW,SAAS,GAAG;AAChE,WAAO,KAAK,WAAW,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,EAC5E;AACA,MAAI,MAAM,QAAQ,KAAK,QAAQ,KAAK,KAAK,SAAS,SAAS,GAAG;AAC5D,WAAO,KAAK,SACT,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,EACxD;AACA,SAAO,CAAC;AACV;AAEA,SAAS,kBAAkB,GAAkC;AAC3D,QAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,EACnC,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EAChE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC7B,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO;AAAA,EACT;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEO,IAAM,iBAAN,MAAM,wBAAuB,cAGlC;AAAA,EACA,OAAgB,KAAK;AAAA,EAErB,OAAgB,YAAY;AAAA,EAE5B,OAAgB,UAAU,qBAAqB,cAAc;AAAA,EAE7D,OAAO,OAAO,OAAgB,KAAwC;AACpE,UAAM,SAAS,aAAa,MAAM,KAAK;AACvC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,SAAS,OAAO;AAAA,QAChB,WAAW,OAAO;AAAA,QAClB,sBAAsB,OAAO;AAAA,MAC/B;AAAA,MACA;AAAA,QACE,QAAQ,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAES,KAAK;AAAA,EACI,cAAc;AAAA,EAExB,UAAkB;AACxB,WAAO,KAAK,SAAS,WAAW;AAAA,EAClC;AAAA,EAEA,MAAc,OACZ,KACA,UACA,QAC0B;AAC1B,WAAO,KAAK,IAAO,KAAK;AAAA,MACtB;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK,MAAM,MAAM;AAAA,QAC1C,QAAQ;AAAA,QACR,cAAc,mBAAmB,OAAO;AAAA,MAC1C;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,aACN,MACA,QACA,OACQ;AACR,UAAM,IAAI,IAAI,IAAI,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,EAAE;AAC5C,MAAE,aAAa,IAAI,SAAS,OAAO,SAAS,CAAC;AAC7C,QAAI,QAAQ;AACV,QAAE,aAAa,IAAI,UAAU,MAAM;AAAA,IACrC;AACA,QAAI,OAAO;AACT,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,UAAE,aAAa,IAAI,GAAG,CAAC;AAAA,MACzB;AAAA,IACF;AACA,WAAO,EAAE,SAAS;AAAA,EACpB;AAAA,EAEQ,WACN,YAIe;AACf,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,IACT;AACA,QAAI,WAAW,YAAY,OAAO;AAChC,aAAO;AAAA,IACT;AACA,WAAO,WAAW,cAAc;AAAA,EAClC;AAAA,EAEA,MAAc,kBACZ,QACA,QACyD;AACzD,UAAM,MAAM,KAAK,aAAa,gBAAgB,MAAM;AACpD,UAAM,MAAM,MAAM,KAAK,OAAyB,KAAK,YAAY,MAAM;AACvE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,QACA,QACsD;AACtD,UAAM,MAAM,KAAK,aAAa,aAAa,MAAM;AACjD,UAAM,MAAM,MAAM,KAAK,OAAsB,KAAK,SAAS,MAAM;AACjE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,mBACZ,QACA,QAC2D;AAC3D,UAAM,MAAM,KAAK,aAAa,iBAAiB,MAAM;AACrD,UAAM,MAAM,MAAM,KAAK,OAA0B,KAAK,aAAa,MAAM;AACzE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEQ,iBAAiB,SAA8B;AACrD,QAAI,QAAQ,OAAO;AACjB,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM,WACJ,KAAK,SAAS,wBAAwB;AACxC,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,KAAK,KAAK,KAAK,GAAI;AAClE,WAAO,MAAM,YAAY;AAAA,EAC3B;AAAA,EAEA,MAAc,kBACZ,QACA,SACA,QACyD;AACzD,UAAM,MAAM,KAAK,aAAa,gBAAgB,QAAQ;AAAA,MACpD,cAAc,KAAK,iBAAiB,OAAO;AAAA,IAC7C,CAAC;AACD,UAAM,MAAM,MAAM,KAAK,OAAyB,KAAK,YAAY,MAAM;AACvE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,KAAK,WAAW,IAAI,KAAK,UAAU;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,cACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,EAAE,SAAS,KAAK,IAAI,oBAAoB,CAAC;AAC/C,YAAM,SACJ,OAAO,EAAE,WAAW,YAAY,gBAAgB,EAAE,MAAM,IACpD,EAAE,SACD,EAAE,UAAU;AACnB,YAAM,YACJ,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC,WAAW,EAAE,mBAAmB,MAAM,KAAK,KAC3C,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC;AACF,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE,QAAQ;AAAA,UAChB;AAAA,UACA,WAAW;AAAA,UACX,YAAY;AAAA,UACZ,eAAe,WAAW,EAAE,mBAAmB,MAAM,KAAK;AAAA,QAC5D;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,aAAa,kBAAkB,CAAC;AACtC,YAAM,SACJ,OAAO,EAAE,WAAW,YAAY,aAAa,EAAE,MAAM,IACjD,EAAE,SACD,EAAE,UAAU;AACnB,YAAM,YACJ,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC,WAAW,EAAE,gBAAgB,MAAM,KAAK,KACxC,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC;AACF,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE,QAAQ;AAAA,UAChB;AAAA,UACA,WAAW,WAAW,CAAC,KAAK;AAAA,UAC5B,cAAc,WAAW;AAAA,UACzB,eAAe,EAAE,iBAAiB;AAAA,UAClC,YAAY,WAAW,EAAE,gBAAgB,MAAM,KAAK;AAAA,QACtD;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,YACJ,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC,WAAW,EAAE,uBAAuB,MAAM,KAAK,KAC/C,WAAW,EAAE,aAAa,MAAM,KAAK,KACrC;AACF,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,OAAO,EAAE,SAAS;AAAA,UAClB,MAAM,kBAAkB,CAAC;AAAA,UACzB,MAAM,EAAE,QAAQ;AAAA,UAChB,kBAAkB,EAAE,oBAAoB;AAAA,UACxC,gBAAgB,EAAE,kBAAkB;AAAA,UACpC,mBAAmB,WAAW,EAAE,uBAAuB,MAAM,KAAK;AAAA,UAClE,WAAW,WAAW,EAAE,aAAa,MAAM,KAAK;AAAA,QAClD;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,cACZ,SACA,OACA,SACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,KAAK,WAAW,EAAE,WAAW,KAAK;AACxC,UAAI,OAAO,MAAM;AACf;AAAA,MACF;AACA,UAAI,YAAY,QAAQ,KAAK,SAAS;AACpC;AAAA,MACF;AACA,YAAM,WACJ,OAAO,EAAE,aAAa,YAAY,kBAAkB,EAAE,QAAQ,IAC1D,EAAE,WACD,EAAE,YAAY;AACrB,YAAM,aAAa,WAAW,EAAE,cAAc,MAAM,KAAK;AACzD,YAAM,QAAQ,MAAM;AAAA,QAClB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,YAAY;AAAA,UACV,WAAW,EAAE;AAAA,UACb;AAAA,UACA,QAAQ,EAAE,UAAU;AAAA,UACpB,QAAQ,EAAE,UAAU;AAAA,UACpB,WAAW,EAAE,aAAa;AAAA,UAC1B,YAAY;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACA,OACA,SACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,cAAc,SAAS,KAAuB;AAAA,MAC5D,KAAK;AACH,eAAO,KAAK,WAAW,SAAS,KAAoB;AAAA,MACtD,KAAK;AACH,eAAO,KAAK,eAAe,SAAS,KAAyB;AAAA,MAC/D,KAAK;AACH,eAAO,KAAK,cAAc,SAAS,OAAyB,OAAO;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,SACA,OACA,QACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACtD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACnD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;AACxD;AAAA,MACF,KAAK;AACH,YAAI,QAAQ;AACV,gBAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;AAAA,QACrD;AACA;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,cAAc,QAA8C;AAClE,WAAO,kBAAkB,MAAM,IAAI,SAAS;AAAA,EAC9C;AAAA,EAEA,MAAM,KACJ,SACA,SACA,QACqB;AACrB,UAAM,SAAS,KAAK,cAAc,QAAQ,MAAM;AAChD,UAAM,SAAS,QAAQ,SAAS;AAEhC,UAAM,SAAS;AAAA,MACb,CAAC,MAAM;AAAA,MACP;AAAA,MACA,KAAK,SAAS;AAAA,IAChB;AAEA,UAAM,UAAU,QAAQ,QAAQ,KAAK,MAAM,QAAQ,KAAK,IAAI;AAE5D,WAAO,gBAAoC;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,WAAW,OAAO,OAAO,MAAM,QAAQ;AACrC,gBAAQ,OAAO;AAAA,UACb,KAAK;AACH,mBAAO,KAAK,kBAAkB,MAAM,GAAG;AAAA,UACzC,KAAK;AACH,mBAAO,KAAK,eAAe,MAAM,GAAG;AAAA,UACtC,KAAK;AACH,mBAAO,KAAK,mBAAmB,MAAM,GAAG;AAAA,UAC1C,KAAK;AACH,mBAAO,KAAK,kBAAkB,MAAM,SAAS,GAAG;AAAA,QACpD;AAAA,MACF;AAAA,MACA,YAAY,OAAO,OAAO,OAAO,SAAS;AACxC,YAAI,SAAS,MAAM;AACjB,gBAAM,KAAK,sBAAsB,SAAS,OAAO,MAAM;AAAA,QACzD;AACA,cAAM,KAAK;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU,aAAa,UAAU;AAAA,QACnC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AC/yBA,IAAO,gBAAQ;","names":[]}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rawdash/connector-drata",
3
- "version": "0.28.0",
3
+ "version": "0.28.2",
4
4
  "description": "Rawdash connector for Drata — syncs controls, tests, personnel, and test findings from the Drata Public API into the six-shape storage model for compliance dashboards",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",
@@ -24,7 +24,7 @@
24
24
  },
25
25
  "dependencies": {
26
26
  "zod": "^4.4.3",
27
- "@rawdash/core": "0.28.0"
27
+ "@rawdash/core": "0.28.2"
28
28
  },
29
29
  "devDependencies": {
30
30
  "fast-check": "^4.8.0",