@rushstack/rush-http-build-cache-plugin 5.110.0 → 5.110.2

package/.rush/temp/operation/_phase_build/all.log

@@ -1,6 +1,6 @@
-Invoking: heft run --only build -- --clean --production
- ---- build started ---- 
-[build:typescript] Using TypeScript version 5.0.4
-[build:typescript] Copied 1 folder or file and linked 0 files
- ---- build finished (4.156s) ---- 
--------------------- Finished (4.163s) --------------------
+Invoking: heft run --only build -- --clean --production
+ ---- build started ---- 
+[build:typescript] Using TypeScript version 5.0.4
+[build:typescript] Copied 1 folder or file and linked 0 files
+ ---- build finished (6.182s) ---- 
+-------------------- Finished (6.19s) --------------------

package/.rush/temp/operation/_phase_build/state.json

@@ -1,3 +1,3 @@
 {
-  "nonCachedDurationMs": 4615.885499999975
+  "nonCachedDurationMs": 7136.7812619998585
 }

package/.rush/temp/operation/_phase_test/all.log

@@ -1,15 +1,15 @@
-Invoking: heft run --only test -- --clean --production
-The provided list of phases does not contain all phase dependencies. You may need to run the excluded phases manually.
- ---- test started ---- 
-[test:jest] Using Jest version 29.5.0
-[test:jest] 
-[test:jest] Run start. 1 test suite
-[test:jest] START lib\test\HttpBuildCacheProvider.test.js
-[test:jest] PASS lib\test\HttpBuildCacheProvider.test.js (duration: 0.976s, 2 passed, 0 failed)
-[test:jest] 
-[test:jest] Tests finished:
-[test:jest]   Successes: 2
-[test:jest]   Failures: 0
-[test:jest]   Total: 2
- ---- test finished (1.860s) ---- 
--------------------- Finished (1.866s) --------------------
+Invoking: heft run --only test -- --clean --production
+The provided list of phases does not contain all phase dependencies. You may need to run the excluded phases manually.
+ ---- test started ---- 
+[test:jest] Using Jest version 29.5.0
+[test:jest] 
+[test:jest] Run start. 1 test suite
+[test:jest] START lib/test/HttpBuildCacheProvider.test.js
+[test:jest] PASS lib/test/HttpBuildCacheProvider.test.js (duration: 1.013s, 2 passed, 0 failed)
+[test:jest] 
+[test:jest] Tests finished:
+[test:jest]   Successes: 2
+[test:jest]   Failures: 0
+[test:jest]   Total: 2
+ ---- test finished (2.676s) ---- 
+-------------------- Finished (2.686s) --------------------

package/.rush/temp/operation/_phase_test/state.json

@@ -1,3 +1,3 @@
 {
-  "nonCachedDurationMs": 2334.1952000000747
+  "nonCachedDurationMs": 3243.720771000022
 }

package/.rush/temp/{rushstack+rush-http-build-cache-plugin-_phase_build-6123140279635b4e69641307e04c82615d4a5778.tar.log → rushstack+rush-http-build-cache-plugin-_phase_build-44d119020b2846f013b0b59f95544625e9d86ab5.tar.log}

@@ -1,5 +1,5 @@
-Start time: Mon Oct 30 2023 23:21:22 GMT+0000 (Coordinated Universal Time)
-Invoking "C:\Windows\system32\tar.exe -c -f D:\a\_work\1\s\common\temp\build-cache\rushstack+rush-http-build-cache-plugin-_phase_build-6123140279635b4e69641307e04c82615d4a5778-2af28b40a6505109.temp -z --files-from=-"
+Start time: Thu Nov 16 2023 01:34:36 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -c -f /mnt/vss/_work/1/s/common/temp/build-cache/rushstack+rush-http-build-cache-plugin-_phase_build-44d119020b2846f013b0b59f95544625e9d86ab5-98b41b4169792d02.temp -z --files-from=-"
 
 ======= BEGIN PROCESS INPUT ======
 .rush/temp/operation/_phase_build/all.log

package/.rush/temp/rushstack+rush-http-build-cache-plugin-_phase_build-44d119020b2846f013b0b59f95544625e9d86ab5.untar.log

@@ -0,0 +1,10 @@
+Start time: Thu Nov 16 2023 01:36:06 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -x -m -f /mnt/vss/_work/1/s/common/temp/build-cache/rushstack+rush-http-build-cache-plugin-_phase_build-44d119020b2846f013b0b59f95544625e9d86ab5"
+
+======= BEGIN PROCESS INPUT ======
+
+======== END PROCESS INPUT =======
+======= BEGIN PROCESS OUTPUT =======
+======== END PROCESS OUTPUT ========
+
+Exited with code "0"

package/.rush/temp/{rushstack+rush-http-build-cache-plugin-_phase_test-78333a9310f75472822f70554dee637804eb3b97.tar.log → rushstack+rush-http-build-cache-plugin-_phase_test-0bc01f397b348cba40823329640020e159633e7c.tar.log}

@@ -1,5 +1,5 @@
-Start time: Mon Oct 30 2023 23:23:10 GMT+0000 (Coordinated Universal Time)
-Invoking "C:\Windows\system32\tar.exe -c -f D:\a\_work\1\s\common\temp\build-cache\rushstack+rush-http-build-cache-plugin-_phase_test-78333a9310f75472822f70554dee637804eb3b97-bff6412c018e4375.temp -z --files-from=-"
+Start time: Thu Nov 16 2023 01:34:39 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -c -f /mnt/vss/_work/1/s/common/temp/build-cache/rushstack+rush-http-build-cache-plugin-_phase_test-0bc01f397b348cba40823329640020e159633e7c-690a4df1dae3ae4e.temp -z --files-from=-"
 
 ======= BEGIN PROCESS INPUT ======
 .rush/temp/operation/_phase_test/all.log

package/.rush/temp/rushstack+rush-http-build-cache-plugin-_phase_test-0bc01f397b348cba40823329640020e159633e7c.untar.log

@@ -0,0 +1,10 @@
+Start time: Thu Nov 16 2023 01:36:06 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -x -m -f /mnt/vss/_work/1/s/common/temp/build-cache/rushstack+rush-http-build-cache-plugin-_phase_test-0bc01f397b348cba40823329640020e159633e7c"
+
+======= BEGIN PROCESS INPUT ======
+
+======== END PROCESS INPUT =======
+======= BEGIN PROCESS OUTPUT =======
+======== END PROCESS OUTPUT ========
+
+Exited with code "0"

package/README.md

@@ -1,116 +1,116 @@
-# @rushstack/rush-http-build-cache-plugin
-
-A Rush plugin that uses HTTP/HTTPS to manage cache objects.
-
-Authentication is provided via standard `Authorization` HTTP headers, with the value (a Bearer or Basic token) configured using a custom node script. Your "tokenHandler" node script is automatically called when the user updates their cloud credentials.
-
-## Configuration
-
-To use the HTTP build cache plugin, enable it in `common/config/rush/build-cache.json`:
-
-```json
-{
-    "buildCacheEnabled": true,
-
-    "cacheProvider": "http"
-}
-```
-
-Then customize the `httpConfiguration` block. For typical use cases, where you'll use a remote HTTP URL with authentication, you'll need to provide at least the `url` and `tokenHandler` options:
-
-```json
-{
-    "httpConfiguration": {
-        "url": "https://build-cache.example.com",
-        "tokenHandler": {
-            "exec": "node",
-            "args": ["common/scripts/custom-script-that-returns-an-authentication-header.js"]
-        },
-        "isCacheWriteAllowed": false
-    }
-}
-```
-
-(For more detail on the above properties and additional optional properties, consult the default `build-cache.json` file.)
-
-## Authorization Details
-
-The HTTP build cache plugin offloads authorization to an external executable script that you define. A typical use case would be to create a simple script, for example `common/scripts/cache-auth.js`, that prints an Authorization header value when executed.
-
-For example:
-
-```console
-node common/scripts/cache-auth.js
-# => Bearer 0284357923592790DDb979dBcd2zz
-```
-
-How the script generates authorization values is up to you, and depends on the configuration of your remote cache server.
-
-Possible implementations:
-
- - The script could read simple environment variables (`CACHE_USER` and `CACHE_TOKEN`) defined by the developer
- - It could reuse existing credentials your developers have, like NPM tokens, GitHub credentials, or jFrog API tokens
- - It could make an HTTP call to another server accessible by your developers that returns temporary credentials
-
-## HTTP Cache Server Requirements
-
-The HTTP build cache plugin can use almost any HTTP/HTTPS backend for remote caching, as long as it honors the following rules:
-
- - Uses `Authorization: Bearer xxx` or `Authorization: Basic xxx` headers for authentication.
- - Accepts GET requests for cache reads.
- - Accepts PUT requests for cache writes (with a raw request body -- no `form/multipart` MIME types).
- - Cache hits return HTTP 200 with the file in the response body.
- - Successful cache writes return HTTP 2xx (200-299).
- - Cache misses return HTTP 404 or HTTP 403.
- - Invalid or missing authentication returns HTTP 401.
-
-## Examples
-
-### Gradle Build Cache Server
-
-The Gradle Build Cache Server (typically used to support Gradle Remote Build Cache) meets all of the requirements above, so if you don't have another server in mind, you can use it as your remote backend.
-
-First, start up and configure your build cache node locally:
-
- - Download latest JAR file from https://docs.gradle.com/build-cache-node/
- - Start the service: `java -jar build-cache-node-14.0.jar start`
- - Copy the startup banner information, and navigate to the specified localhost port
- - Enter the temporary username/password credentials printed in the startup banner
- - Click Build Cache > Settings > Cache Access Control and grant "Read & write" access to Anonymous
-
-Second, configure your `build-cache.json` file as described in the Configuration section:
-
- - Note that your `url` must end with `/cache/`, for example, `http://localhost:5071/cache/`.
- - To test reading and writing, set `isCacheWriteAllowed: true`.
- - Configure `tokenHandler` to point to a script that prints a Basic or Bearer Authorization value (this can be a dummy string if you granted Read and Write to Anonymous in your build cache node configuration).
-
-Note that the Gradle Build Cache Server has a stricter format for its cache keys (they should be a simple hexadecimal hash with no non-alphanumeric characters). Configure this setting in your `build-cache.json` file:
-
-```json
-{
-    "cacheEntryNamePattern": "[hash]"
-}
-```
-
-Last, initialize your cache credentials using Rush:
-
-```console
-rush update-cloud-credentials --interactive
-```
-
-To test out your remote build cache with full debugging output (for spotting any errors reading or writing the cache), run with the `--debug` flag:
-
-```console
-rush --debug build --verbose
-```
-
-> If you go on to deploy Rush remote build caching to your developers using the Gradle Build Cache, update your `tokenHandler`
-> script to reflect your use case -- for example, you could require each developer to have a designated username/token configured
-> via environment variables, and configure Cache Access Control with the corresponding entries. In this case the `tokenHandler`
-> script should read the environment variables and print out an Authorization header, for example:
->
-> ```javascript
-> // common/scripts/build-cache-auth.js
-> const credentials = `${process.env.CACHE_USER}:${process.env.CACHE_TOKEN}`;
-> console.log('Basic ' + Buffer.from(credentials).toString('base64'));
-> ```
+# @rushstack/rush-http-build-cache-plugin
+
+A Rush plugin that uses HTTP/HTTPS to manage cache objects.
+
+Authentication is provided via standard `Authorization` HTTP headers, with the value (a Bearer or Basic token) configured using a custom node script. Your "tokenHandler" node script is automatically called when the user updates their cloud credentials.
+
+## Configuration
+
+To use the HTTP build cache plugin, enable it in `common/config/rush/build-cache.json`:
+
+```json
+{
+    "buildCacheEnabled": true,
+
+    "cacheProvider": "http"
+}
+```
+
+Then customize the `httpConfiguration` block. For typical use cases, where you'll use a remote HTTP URL with authentication, you'll need to provide at least the `url` and `tokenHandler` options:
+
+```json
+{
+    "httpConfiguration": {
+        "url": "https://build-cache.example.com",
+        "tokenHandler": {
+            "exec": "node",
+            "args": ["common/scripts/custom-script-that-returns-an-authentication-header.js"]
+        },
+        "isCacheWriteAllowed": false
+    }
+}
+```
+
+(For more detail on the above properties and additional optional properties, consult the default `build-cache.json` file.)
+
+## Authorization Details
+
+The HTTP build cache plugin offloads authorization to an external executable script that you define. A typical use case would be to create a simple script, for example `common/scripts/cache-auth.js`, that prints an Authorization header value when executed.
+
+For example:
+
+```console
+node common/scripts/cache-auth.js
+# => Bearer 0284357923592790DDb979dBcd2zz
+```
+
+How the script generates authorization values is up to you, and depends on the configuration of your remote cache server.
+
+Possible implementations:
+
+ - The script could read simple environment variables (`CACHE_USER` and `CACHE_TOKEN`) defined by the developer
+ - It could reuse existing credentials your developers have, like NPM tokens, GitHub credentials, or jFrog API tokens
+ - It could make an HTTP call to another server accessible by your developers that returns temporary credentials
+
+## HTTP Cache Server Requirements
+
+The HTTP build cache plugin can use almost any HTTP/HTTPS backend for remote caching, as long as it honors the following rules:
+
+ - Uses `Authorization: Bearer xxx` or `Authorization: Basic xxx` headers for authentication.
+ - Accepts GET requests for cache reads.
+ - Accepts PUT requests for cache writes (with a raw request body -- no `form/multipart` MIME types).
+ - Cache hits return HTTP 200 with the file in the response body.
+ - Successful cache writes return HTTP 2xx (200-299).
+ - Cache misses return HTTP 404 or HTTP 403.
+ - Invalid or missing authentication returns HTTP 401.
+
+## Examples
+
+### Gradle Build Cache Server
+
+The Gradle Build Cache Server (typically used to support Gradle Remote Build Cache) meets all of the requirements above, so if you don't have another server in mind, you can use it as your remote backend.
+
+First, start up and configure your build cache node locally:
+
+ - Download latest JAR file from https://docs.gradle.com/build-cache-node/
+ - Start the service: `java -jar build-cache-node-14.0.jar start`
+ - Copy the startup banner information, and navigate to the specified localhost port
+ - Enter the temporary username/password credentials printed in the startup banner
+ - Click Build Cache > Settings > Cache Access Control and grant "Read & write" access to Anonymous
+
+Second, configure your `build-cache.json` file as described in the Configuration section:
+
+ - Note that your `url` must end with `/cache/`, for example, `http://localhost:5071/cache/`.
+ - To test reading and writing, set `isCacheWriteAllowed: true`.
+ - Configure `tokenHandler` to point to a script that prints a Basic or Bearer Authorization value (this can be a dummy string if you granted Read and Write to Anonymous in your build cache node configuration).
+
+Note that the Gradle Build Cache Server has a stricter format for its cache keys (they should be a simple hexadecimal hash with no non-alphanumeric characters). Configure this setting in your `build-cache.json` file:
+
+```json
+{
+    "cacheEntryNamePattern": "[hash]"
+}
+```
+
+Last, initialize your cache credentials using Rush:
+
+```console
+rush update-cloud-credentials --interactive
+```
+
+To test out your remote build cache with full debugging output (for spotting any errors reading or writing the cache), run with the `--debug` flag:
+
+```console
+rush --debug build --verbose
+```
+
+> If you go on to deploy Rush remote build caching to your developers using the Gradle Build Cache, update your `tokenHandler`
+> script to reflect your use case -- for example, you could require each developer to have a designated username/token configured
+> via environment variables, and configure Cache Access Control with the corresponding entries. In this case the `tokenHandler`
+> script should read the environment variables and print out an Authorization header, for example:
+>
+> ```javascript
+> // common/scripts/build-cache-auth.js
+> const credentials = `${process.env.CACHE_USER}:${process.env.CACHE_TOKEN}`;
+> console.log('Basic ' + Buffer.from(credentials).toString('base64'));
+> ```

package/config/jest.config.json

@@ -1,14 +1,14 @@
-{
-  "extends": "local-node-rig/profiles/default/config/jest.config.json",
-  "clearMocks": true,
-  "restoreMocks": true,
-  "collectCoverage": true,
-  "coverageThreshold": {
-    "global": {
-      "branches": 4,
-      "functions": 15,
-      "lines": 4,
-      "statements": 4
-    }
-  }
-}
+{
+  "extends": "local-node-rig/profiles/default/config/jest.config.json",
+  "clearMocks": true,
+  "restoreMocks": true,
+  "collectCoverage": true,
+  "coverageThreshold": {
+    "global": {
+      "branches": 4,
+      "functions": 15,
+      "lines": 4,
+      "statements": 4
+    }
+  }
+}

package/config/rig.json

@@ -1,18 +1,18 @@
-{
-  // The "rig.json" file directs tools to look for their config files in an external package.
-  // Documentation for this system: https://www.npmjs.com/package/@rushstack/rig-package
-  "$schema": "https://developer.microsoft.com/json-schemas/rig-package/rig.schema.json",
-
-  /**
-   * (Required) The name of the rig package to inherit from.
-   * It should be an NPM package name with the "-rig" suffix.
-   */
-  "rigPackageName": "local-node-rig",
-
-  /**
-   * (Optional) Selects a config profile from the rig package.  The name must consist of
-   * lowercase alphanumeric words separated by hyphens, for example "sample-profile".
-   * If omitted, then the "default" profile will be used."
-   */
-  "rigProfile": "default"
-}
+{
+  // The "rig.json" file directs tools to look for their config files in an external package.
+  // Documentation for this system: https://www.npmjs.com/package/@rushstack/rig-package
+  "$schema": "https://developer.microsoft.com/json-schemas/rig-package/rig.schema.json",
+
+  /**
+   * (Required) The name of the rig package to inherit from.
+   * It should be an NPM package name with the "-rig" suffix.
+   */
+  "rigPackageName": "local-node-rig",
+
+  /**
+   * (Optional) Selects a config profile from the rig package.  The name must consist of
+   * lowercase alphanumeric words separated by hyphens, for example "sample-profile".
+   * If omitted, then the "default" profile will be used."
+   */
+  "rigProfile": "default"
+}

package/coverage/HttpBuildCacheProvider.ts.html

@@ -1342,7 +1342,7 @@ export class HttpBuildCacheProvider implements ICloudBuildCacheProvider {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2023-10-30T23:23:10.071Z
+                at 2023-11-16T01:34:39.317Z
             </div>
         <script src="prettify.js"></script>
         <script>

package/coverage/RushHttpBuildCachePlugin.ts.html

@@ -313,7 +313,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2023-10-30T23:23:10.071Z
+                at 2023-11-16T01:34:39.317Z
             </div>
         <script src="prettify.js"></script>
         <script>

package/coverage/cobertura-coverage.xml

@@ -1,13 +1,13 @@
 <?xml version="1.0" ?>
 <!DOCTYPE coverage SYSTEM "http://cobertura.sourceforge.net/xml/coverage-04.dtd">
-<coverage lines-valid="509" lines-covered="276" line-rate="0.5422" branches-valid="60" branches-covered="32" branch-rate="0.5333" timestamp="1698708190060" complexity="0" version="0.1">
+<coverage lines-valid="509" lines-covered="276" line-rate="0.5422" branches-valid="60" branches-covered="32" branch-rate="0.5333" timestamp="1700098479291" complexity="0" version="0.1">
   <sources>
-    <source>D:\a\_work\1\s\rush-plugins\rush-http-build-cache-plugin</source>
+    <source>/mnt/vss/_work/1/s/rush-plugins/rush-http-build-cache-plugin</source>
   </sources>
   <packages>
     <package name="main" line-rate="0.5422" branch-rate="0.5333">
       <classes>
-        <class name="HttpBuildCacheProvider.ts" filename="src\HttpBuildCacheProvider.ts" line-rate="0.6509" branch-rate="0.5517">
+        <class name="HttpBuildCacheProvider.ts" filename="src/HttpBuildCacheProvider.ts" line-rate="0.6509" branch-rate="0.5517">
           <methods>
             <method name="get isCacheWriteAllowed" hits="0" signature="()V">
               <lines>
@@ -502,7 +502,7 @@
             <line number="424" hits="1" branch="false"/>
           </lines>
         </class>
-        <class name="RushHttpBuildCachePlugin.ts" filename="src\RushHttpBuildCachePlugin.ts" line-rate="0" branch-rate="0">
+        <class name="RushHttpBuildCachePlugin.ts" filename="src/RushHttpBuildCachePlugin.ts" line-rate="0" branch-rate="0">
           <methods>
             <method name="(empty-report)" hits="0" signature="()V">
               <lines>
@@ -594,7 +594,7 @@
             <line number="81" hits="0" branch="false"/>
           </lines>
         </class>
-        <class name="index.ts" filename="src\index.ts" line-rate="0" branch-rate="0">
+        <class name="index.ts" filename="src/index.ts" line-rate="0" branch-rate="0">
           <methods>
             <method name="(empty-report)" hits="0" signature="()V">
               <lines>

package/coverage/index.html

@@ -131,7 +131,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2023-10-30T23:23:10.071Z
+                at 2023-11-16T01:34:39.317Z
             </div>
         <script src="prettify.js"></script>
         <script>

package/coverage/index.ts.html

@@ -82,7 +82,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2023-10-30T23:23:10.071Z
+                at 2023-11-16T01:34:39.317Z
             </div>
         <script src="prettify.js"></script>
         <script>

package/coverage/junit.xml

@@ -1,9 +1,9 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<testsuites name="jest tests" tests="2" failures="0" errors="0" time="1.189">
-  <testsuite name="HttpBuildCacheProvider" errors="0" failures="0" skipped="0" timestamp="2023-10-30T23:23:08" time="0.976" tests="2">
-    <testcase classname="HttpBuildCacheProvider tryGetCacheEntryBufferByIdAsync &gt; " name="prints warning if read credentials are not available (lib\test\HttpBuildCacheProvider.test.js)" time="0.012">
+<testsuites name="jest tests" tests="2" failures="0" errors="0" time="1.291">
+  <testsuite name="HttpBuildCacheProvider" errors="0" failures="0" skipped="0" timestamp="2023-11-16T01:34:37" time="1.013" tests="2">
+    <testcase classname="HttpBuildCacheProvider tryGetCacheEntryBufferByIdAsync &gt; " name="prints warning if read credentials are not available (lib/test/HttpBuildCacheProvider.test.js)" time="0.018">
     </testcase>
-    <testcase classname="HttpBuildCacheProvider tryGetCacheEntryBufferByIdAsync &gt; " name="attempts up to 3 times to download a cache entry (lib\test\HttpBuildCacheProvider.test.js)" time="0.029">
+    <testcase classname="HttpBuildCacheProvider tryGetCacheEntryBufferByIdAsync &gt; " name="attempts up to 3 times to download a cache entry (lib/test/HttpBuildCacheProvider.test.js)" time="0.008">
     </testcase>
   </testsuite>
 </testsuites>

package/lib/HttpBuildCacheProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"HttpBuildCacheProvider.js","sourceRoot":"","sources":["../src/HttpBuildCacheProvider.ts"],"names":[],"mappings":";;;;;;AAAA,oEAA4E;AAC5E,kDAM6B;AAC7B,4DAAuD;AAEvD,IAAK,kBAIJ;AAJD,WAAK,kBAAkB;IACrB,mEAAQ,CAAA;IACR,mEAAQ,CAAA;IACR,2DAAI,CAAA;AACN,CAAC,EAJI,kBAAkB,KAAlB,kBAAkB,QAItB;AAED,IAAK,WAMJ;AAND,WAAK,WAAW;IACd,6CAAI,CAAA;IACJ,+DAAa,CAAA;IACb,mDAAO,CAAA;IACP,+CAAK,CAAA;IACL,iEAAc,CAAA;AAChB,CAAC,EANI,WAAW,KAAX,WAAW,QAMf;AAsBD,MAAM,uBAAuB,GAAW,CAAC,CAAC;AAC1C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAE7C,MAAa,sBAAsB;IAajC,IAAW,mBAAmB;;QAC5B,OAAO,MAAA,mCAAwB,CAAC,sBAAsB,mCAAI,IAAI,CAAC,mCAAmC,CAAC;IACrG,CAAC;IAED,YAAmB,OAAuC,EAAE,WAAwB;;QAClF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;QAE/C,IAAI,CAAC,sBAAsB,GAAG,mCAAwB,CAAC,oBAAoB,CAAC;QAC5E,IAAI,CAAC,mCAAmC,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,aAAa,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,KAAK,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,MAAA,OAAO,CAAC,OAAO,mCAAI,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,MAAA,OAAO,CAAC,cAAc,mCAAI,EAAE,CAAC;QACpD,IAAI,CAAC,oBAAoB,GAAG,MAAA,OAAO,CAAC,mBAAmB,mCAAI,+BAA+B,CAAC;IAC7F,CAAC;IAEM,KAAK,CAAC,+BAA+B,CAC1C,QAAmB,EACnB,OAAe;QAEf,IAAI;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,2BAA2B;gBACxC,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,uBAAuB;aACrC,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD;QAAC,OAAO,CAAC,EAAE;YACV,QAAQ,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;YAC7D,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,QAAmB,EACnB,OAAe,EACf,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7B,QAAQ,CAAC,cAAc,CAAC,+DAA+D,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC;SACd;QAED,QAAQ,CAAC,cAAc,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QAEpE,IAAI;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE;gBAC3C,MAAM,EAAE,IAAI,CAAC,aAAa;gBAC1B,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,6BAA6B;gBAC1C,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,uBAAuB;aACrC,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,KAAK,CAAC;SACzB;QAAC,OAAO,CAAC,EAAE;YACV,QAAQ,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;SACd;IACH,CAAC;IAEM,KAAK,CAAC,2BAA2B,CAAC,QAAmB,EAAE,UAAkB;QAC9E,MAAM,0BAAe,CAAC,UAAU,CAC9B;YACE,cAAc,EAAE,IAAI;SACrB,EACD,KAAK,EAAE,gBAAiC,EAAE,EAAE;YAC1C,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBACtD,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,CAAC,CACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,sCAAsC,CAAC,QAAmB;QACrE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,IAAI,KAAK,CACb,6DAA6D;gBAC3D,iEAAiE,IAAI,CAAC,WAAW,4FAA4F;gBAC7K,mGAAmG;gBACnG,sCAAsC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CACzD,CAAC;SACH;QAED,MAAM,GAAG,GAAW,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,QAAQ,CAAC,gBAAgB,CAAC,YAAY,GAAG,sBAAsB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,8BAAU,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE;YAC1F,uBAAuB,EAAE,IAAI,CAAC,gBAAgB;SAC/C,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,MAAM,CAAC,KAAK,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,WAAW,CAAC,CAAC;SAC/E;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAE7C,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE7D,QAAQ,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,4BAA4B,CAAC,QAAmB;QAC3D,MAAM,0BAAe,CAAC,UAAU,CAC9B;YACE,cAAc,EAAE,IAAI;SACrB,EACD,KAAK,EAAE,gBAAiC,EAAE,EAAE;YAC1C,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC3D,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IAAY,kBAAkB;QAC5B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7B,MAAM,YAAY,GAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhD,IAAI,IAAI,CAAC,mCAAmC,EAAE;gBAC5C,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;aACxC;YAED,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACnD;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,OASnB;QACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;QAC7F,MAAM,qBAAqB,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,kBAAkB,CAAC,QAAQ,CAAC;QAC/E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAE5C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE;YACnC,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC;SACrC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;aACtB;SACF;QAED,MAAM,UAAU,GAAG,CAAC,IAA2B,aAA3B,IAAI,uBAAJ,IAAI,CAAyB,MAAM,KAAI,SAAS,CAAC;QAErE,QAAQ,CAAC,cAAc,CAAC,+BAA+B,MAAM,IAAI,GAAG,IAAI,UAAU,QAAQ,CAAC,CAAC;QAE5F,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAK,EAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,MAAM,uBAAuB,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;YAEhF,IACE,CAAC,uBAAuB;gBACxB,OAAO,WAAW,KAAK,QAAQ;gBAC/B,qBAAqB,KAAK,kBAAkB,CAAC,QAAQ,EACrD;gBACA,kFAAkF;gBAClF,iFAAiF;gBACjF,qEAAqE;gBACrE,EAAE;gBACF,wFAAwF;gBACxF,OAAO,MAAM,IAAI,CAAC,KAAK,iCAAM,OAAO,KAAE,iBAAiB,EAAE,kBAAkB,CAAC,QAAQ,IAAG,CAAC;aACzF;YAED,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE;gBAC3B,yDAAyD;gBACzD,sFAAsF;gBACtF,gGAAgG;gBAChG,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,sCAAsC;gBAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAElE,MAAM,yBAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAE9B,OAAO,MAAM,IAAI,CAAC,KAAK,iCAAM,OAAO,KAAE,WAAW,EAAE,OAAO,CAAC,WAAW,GAAG,CAAC,IAAG,CAAC;aAC/E;YAED,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;SACd;QAED,MAAM,MAAM,GAAqB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE7F,QAAQ,CAAC,cAAc,CACrB,uCAAuC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAC3D,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MACpC,QAAQ,CACT,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAMO,KAAK,CAAC,kBAAkB,CAAC,OAA2B;QAC1D,IAAI,OAAO,KAAK,kBAAkB,CAAC,IAAI,EAAE;YACvC,OAAO;SACR;QAED,IAAI,WAAW,GAAuB,IAAI,CAAC,sBAAsB,CAAC;QAElE,IAAI,WAAW,KAAK,SAAS,EAAE;YAC7B,WAAW,GAAG,MAAM,IAAI,CAAC,2BAA2B,EAAE,CAAC;SACxD;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,kBAAkB,CAAC,QAAQ,EAAE;YAC9E,MAAM,IAAI,KAAK,CACb;gBACE,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B;gBAC3D,6FAA6F;gBAC7F,EAAE;gBACF,4BAA4B;gBAC5B,EAAE;gBACF,iDAAiD;gBACjD,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;SACH;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,2BAA2B;;QACvC,IAAI,UAA6C,CAAC;QAElD,MAAM,0BAAe,CAAC,UAAU,CAC9B;YACE,cAAc,EAAE,KAAK;SACtB,EACD,CAAC,gBAAiC,EAAE,EAAE;YACpC,UAAU,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC1E,CAAC,CACF,CAAC;QAEF,IAAI,UAAU,EAAE;YACd,MAAM,cAAc,GAAuB,MAAA,UAAU,CAAC,OAAO,0CAAE,OAAO,EAAE,CAAC;YACzE,IAAI,CAAC,cAAc,IAAI,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;gBACnD,OAAO,UAAU,CAAC,UAAU,CAAC;aAC9B;SACF;IACH,CAAC;IAEO,eAAe,CAAC,aAAqB,EAAE,QAAkB,EAAE,UAAmB;QACpF,IAAI,QAAQ,CAAC,EAAE,EAAE;YACf,OAAO,WAAW,CAAC,IAAI,CAAC;SACzB;QAED,QAAQ,QAAQ,CAAC,MAAM,EAAE;YACvB,KAAK,GAAG,CAAC,CAAC;gBACR,+EAA+E;gBAC/E,4DAA4D;gBAC5D,EAAE;gBACF,4EAA4E;gBAC5E,0EAA0E;gBAC1E,gCAAgC;gBAEhC,kEAAkE;gBAClE,OAAO,WAAW,CAAC,aAAa,CAAC;aAClC;YAED,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC,CAAC;gBACR,IAAI,aAAa,KAAK,KAAK,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAClE,+CAA+C;oBAC/C,qHAAqH;oBACrH,6HAA6H;oBAC7H,qGAAqG;oBACrG,mEAAmE;oBACnE,2GAA2G;oBAC3G,qFAAqF;oBACrF,OAAO,WAAW,CAAC,IAAI,CAAC;iBACzB;gBAED,OAAO,WAAW,CAAC,cAAc,CAAC;aACnC;YAED,KAAK,GAAG,CAAC,CAAC;gBACR,IAAI,aAAa,KAAK,KAAK,EAAE;oBAC3B,+CAA+C;oBAC/C,OAAO,WAAW,CAAC,IAAI,CAAC;iBACzB;aACF;SACF;QAED,+CAA+C;QAC/C,OAAO,WAAW,CAAC,OAAO,CAAC;IAC7B,CAAC;IAEO,cAAc,CACpB,QAAmB,EACnB,aAAqB,EACrB,QAAkB,EAClB,UAAmB,EACnB,OAAe;QAEf,QAAQ,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE;YACjE,OAAO,CAAC,CAAC;gBACP,QAAQ,CAAC,cAAc,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;gBACxB,QAAQ,CAAC,gBAAgB,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACzF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,aAAa,CAAC,CAAC;gBAC9B,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAClF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;gBACrB,QAAQ,CAAC,cAAc,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,cAAc,CAAC,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb;oBACE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;oBAC9E,mDAAmD;oBACnD,6FAA6F;oBAC7F,EAAE;oBACF,4BAA4B;oBAC5B,EAAE;oBACF,iDAAiD;oBACjD,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;aACH;SACF;IACH,CAAC;CACF;AAxXD,wDAwXC","sourcesContent":["import { ITerminal, Executable, Async } from '@rushstack/node-core-library';\r\nimport {\r\n  ICloudBuildCacheProvider,\r\n  ICredentialCacheEntry,\r\n  CredentialCache,\r\n  RushSession,\r\n  EnvironmentConfiguration\r\n} from '@rushstack/rush-sdk';\r\nimport fetch, { BodyInit, Response } from 'node-fetch';\r\n\r\nenum CredentialsOptions {\r\n  Optional,\r\n  Required,\r\n  Omit\r\n}\r\n\r\nenum FailureType {\r\n  None,\r\n  Informational,\r\n  Warning,\r\n  Error,\r\n  Authentication\r\n}\r\n\r\nexport interface IHttpBuildCacheTokenHandler {\r\n  exec: string;\r\n  args?: string[];\r\n}\r\n\r\n/**\r\n * @public\r\n */\r\nexport interface IHttpBuildCacheProviderOptions {\r\n  url: string;\r\n  tokenHandler?: IHttpBuildCacheTokenHandler;\r\n  uploadMethod?: string;\r\n  minHttpRetryDelayMs?: number;\r\n  headers?: Record<string, string>;\r\n  cacheKeyPrefix?: string;\r\n  isCacheWriteAllowed: boolean;\r\n  pluginName: string;\r\n  rushJsonFolder: string;\r\n}\r\n\r\nconst MAX_HTTP_CACHE_ATTEMPTS: number = 3;\r\nconst DEFAULT_MIN_HTTP_RETRY_DELAY_MS = 2500;\r\n\r\nexport class HttpBuildCacheProvider implements ICloudBuildCacheProvider {\r\n  private readonly _pluginName: string;\r\n  private readonly _rushProjectRoot: string;\r\n  private readonly _environmentCredential: string | undefined;\r\n  private readonly _isCacheWriteAllowedByConfiguration: boolean;\r\n  private readonly _url: URL;\r\n  private readonly _uploadMethod: string;\r\n  private readonly _headers: Record<string, string>;\r\n  private readonly _cacheKeyPrefix: string;\r\n  private readonly _tokenHandler: IHttpBuildCacheTokenHandler | undefined;\r\n  private readonly _minHttpRetryDelayMs: number;\r\n  private __credentialCacheId: string | undefined;\r\n\r\n  public get isCacheWriteAllowed(): boolean {\r\n    return EnvironmentConfiguration.buildCacheWriteAllowed ?? this._isCacheWriteAllowedByConfiguration;\r\n  }\r\n\r\n  public constructor(options: IHttpBuildCacheProviderOptions, rushSession: RushSession) {\r\n    this._pluginName = options.pluginName;\r\n    this._rushProjectRoot = options.rushJsonFolder;\r\n\r\n    this._environmentCredential = EnvironmentConfiguration.buildCacheCredential;\r\n    this._isCacheWriteAllowedByConfiguration = options.isCacheWriteAllowed;\r\n    this._url = new URL(options.url.endsWith('/') ? options.url : options.url + '/');\r\n    this._uploadMethod = options.uploadMethod ?? 'PUT';\r\n    this._headers = options.headers ?? {};\r\n    this._tokenHandler = options.tokenHandler;\r\n    this._cacheKeyPrefix = options.cacheKeyPrefix ?? '';\r\n    this._minHttpRetryDelayMs = options.minHttpRetryDelayMs ?? DEFAULT_MIN_HTTP_RETRY_DELAY_MS;\r\n  }\r\n\r\n  public async tryGetCacheEntryBufferByIdAsync(\r\n    terminal: ITerminal,\r\n    cacheId: string\r\n  ): Promise<Buffer | undefined> {\r\n    try {\r\n      const result = await this._http({\r\n        terminal: terminal,\r\n        relUrl: `${this._cacheKeyPrefix}${cacheId}`,\r\n        method: 'GET',\r\n        body: undefined,\r\n        warningText: 'Could not get cache entry',\r\n        readBody: true,\r\n        maxAttempts: MAX_HTTP_CACHE_ATTEMPTS\r\n      });\r\n\r\n      return Buffer.isBuffer(result) ? result : undefined;\r\n    } catch (e) {\r\n      terminal.writeWarningLine(`Error getting cache entry: ${e}`);\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  public async trySetCacheEntryBufferAsync(\r\n    terminal: ITerminal,\r\n    cacheId: string,\r\n    objectBuffer: Buffer\r\n  ): Promise<boolean> {\r\n    if (!this.isCacheWriteAllowed) {\r\n      terminal.writeErrorLine('Writing to cache is not allowed in the current configuration.');\r\n      return false;\r\n    }\r\n\r\n    terminal.writeDebugLine('Uploading object with cacheId: ', cacheId);\r\n\r\n    try {\r\n      const result = await this._http({\r\n        terminal: terminal,\r\n        relUrl: `${this._cacheKeyPrefix}${cacheId}`,\r\n        method: this._uploadMethod,\r\n        body: objectBuffer,\r\n        warningText: 'Could not write cache entry',\r\n        readBody: false,\r\n        maxAttempts: MAX_HTTP_CACHE_ATTEMPTS\r\n      });\r\n\r\n      return result !== false;\r\n    } catch (e) {\r\n      terminal.writeWarningLine(`Error uploading cache entry: ${e}`);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  public async updateCachedCredentialAsync(terminal: ITerminal, credential: string): Promise<void> {\r\n    await CredentialCache.usingAsync(\r\n      {\r\n        supportEditing: true\r\n      },\r\n      async (credentialsCache: CredentialCache) => {\r\n        credentialsCache.setCacheEntry(this._credentialCacheId, {\r\n          credential: credential\r\n        });\r\n        await credentialsCache.saveIfModifiedAsync();\r\n      }\r\n    );\r\n  }\r\n\r\n  public async updateCachedCredentialInteractiveAsync(terminal: ITerminal): Promise<void> {\r\n    if (!this._tokenHandler) {\r\n      throw new Error(\r\n        `The interactive cloud credentials flow is not configured.\\n` +\r\n          `Set the 'tokenHandler' setting in 'common/config/rush-plugins/${this._pluginName}.json' to a command that writes your credentials to standard output and exits with code 0 ` +\r\n          `or provide your credentials to rush using the --credential flag instead. Credentials must be the ` +\r\n          `'Authorization' header expected by ${this._url.href}`\r\n      );\r\n    }\r\n\r\n    const cmd: string = `${this._tokenHandler.exec} ${(this._tokenHandler.args || []).join(' ')}`;\r\n    terminal.writeVerboseLine(`Running '${cmd}' to get credentials`);\r\n    const result = Executable.spawnSync(this._tokenHandler.exec, this._tokenHandler.args || [], {\r\n      currentWorkingDirectory: this._rushProjectRoot\r\n    });\r\n\r\n    terminal.writeErrorLine(result.stderr);\r\n\r\n    if (result.error) {\r\n      throw new Error(`Could not obtain credentials. The command '${cmd}' failed.`);\r\n    }\r\n\r\n    const credential = result.stdout.trim();\r\n    terminal.writeVerboseLine('Got credentials');\r\n\r\n    await this.updateCachedCredentialAsync(terminal, credential);\r\n\r\n    terminal.writeLine('Updated credentials cache');\r\n  }\r\n\r\n  public async deleteCachedCredentialsAsync(terminal: ITerminal): Promise<void> {\r\n    await CredentialCache.usingAsync(\r\n      {\r\n        supportEditing: true\r\n      },\r\n      async (credentialsCache: CredentialCache) => {\r\n        credentialsCache.deleteCacheEntry(this._credentialCacheId);\r\n        await credentialsCache.saveIfModifiedAsync();\r\n      }\r\n    );\r\n  }\r\n\r\n  private get _credentialCacheId(): string {\r\n    if (!this.__credentialCacheId) {\r\n      const cacheIdParts: string[] = [this._url.href];\r\n\r\n      if (this._isCacheWriteAllowedByConfiguration) {\r\n        cacheIdParts.push('cacheWriteAllowed');\r\n      }\r\n\r\n      this.__credentialCacheId = cacheIdParts.join('|');\r\n    }\r\n\r\n    return this.__credentialCacheId;\r\n  }\r\n\r\n  private async _http(options: {\r\n    terminal: ITerminal;\r\n    relUrl: string;\r\n    method: string;\r\n    body: BodyInit | undefined;\r\n    warningText: string;\r\n    readBody: boolean;\r\n    maxAttempts: number;\r\n    credentialOptions?: CredentialsOptions;\r\n  }): Promise<Buffer | boolean> {\r\n    const { terminal, relUrl, method, body, warningText, readBody, credentialOptions } = options;\r\n    const safeCredentialOptions = credentialOptions ?? CredentialsOptions.Optional;\r\n    const credentials = await this._tryGetCredentials(safeCredentialOptions);\r\n    const url = new URL(relUrl, this._url).href;\r\n\r\n    const headers: Record<string, string> = {};\r\n    if (typeof credentials === 'string') {\r\n      headers.Authorization = credentials;\r\n    }\r\n\r\n    for (const [key, value] of Object.entries(this._headers)) {\r\n      if (typeof value === 'string') {\r\n        headers[key] = value;\r\n      }\r\n    }\r\n\r\n    const bodyLength = (body as { length: number })?.length || 'unknown';\r\n\r\n    terminal.writeDebugLine(`[http-build-cache] request: ${method} ${url} ${bodyLength} bytes`);\r\n\r\n    const response = await fetch(url, {\r\n      method: method,\r\n      headers: headers,\r\n      body: body,\r\n      redirect: 'follow'\r\n    });\r\n\r\n    if (!response.ok) {\r\n      const isNonCredentialResponse = response.status >= 500 && response.status < 600;\r\n\r\n      if (\r\n        !isNonCredentialResponse &&\r\n        typeof credentials !== 'string' &&\r\n        safeCredentialOptions === CredentialsOptions.Optional\r\n      ) {\r\n        // If we don't already have credentials yet, and we got a response from the server\r\n        // that is a \"normal\" failure (4xx), then we assume that credentials are probably\r\n        // required. Re-attempt the request, requiring credentials this time.\r\n        //\r\n        // This counts as part of the \"first attempt\", so it is not included in the max attempts\r\n        return await this._http({ ...options, credentialOptions: CredentialsOptions.Required });\r\n      }\r\n\r\n      if (options.maxAttempts > 1) {\r\n        // Pause a bit before retrying in case the server is busy\r\n        // Add some random jitter to the retry so we can spread out load on the remote service\r\n        // A proper solution might add exponential back off in case the retry count is high (10 or more)\r\n        const factor = 1.0 + Math.random(); // A random number between 1.0 and 2.0\r\n        const retryDelay = Math.floor(factor * this._minHttpRetryDelayMs);\r\n\r\n        await Async.sleep(retryDelay);\r\n\r\n        return await this._http({ ...options, maxAttempts: options.maxAttempts - 1 });\r\n      }\r\n\r\n      this._reportFailure(terminal, method, response, false, warningText);\r\n      return false;\r\n    }\r\n\r\n    const result: Buffer | boolean = readBody ? Buffer.from(await response.arrayBuffer()) : true;\r\n\r\n    terminal.writeDebugLine(\r\n      `[http-build-cache] actual response: ${response.status} ${url} ${\r\n        result === true ? 'true' : result.length\r\n      } bytes`\r\n    );\r\n\r\n    return result;\r\n  }\r\n\r\n  private async _tryGetCredentials(options: CredentialsOptions.Required): Promise<string>;\r\n  private async _tryGetCredentials(options: CredentialsOptions.Optional): Promise<string | undefined>;\r\n  private async _tryGetCredentials(options: CredentialsOptions.Omit): Promise<undefined>;\r\n  private async _tryGetCredentials(options: CredentialsOptions): Promise<string | undefined>;\r\n  private async _tryGetCredentials(options: CredentialsOptions): Promise<string | undefined> {\r\n    if (options === CredentialsOptions.Omit) {\r\n      return;\r\n    }\r\n\r\n    let credentials: string | undefined = this._environmentCredential;\r\n\r\n    if (credentials === undefined) {\r\n      credentials = await this._tryGetCredentialsFromCache();\r\n    }\r\n\r\n    if (typeof credentials !== 'string' && options === CredentialsOptions.Required) {\r\n      throw new Error(\r\n        [\r\n          `Credentials for ${this._url.href} have not been provided.`,\r\n          `In CI, verify that RUSH_BUILD_CACHE_CREDENTIAL contains a valid Authorization header value.`,\r\n          ``,\r\n          `For local developers, run:`,\r\n          ``,\r\n          `    rush update-cloud-credentials --interactive`,\r\n          ``\r\n        ].join('\\n')\r\n      );\r\n    }\r\n\r\n    return credentials;\r\n  }\r\n\r\n  private async _tryGetCredentialsFromCache(): Promise<string | undefined> {\r\n    let cacheEntry: ICredentialCacheEntry | undefined;\r\n\r\n    await CredentialCache.usingAsync(\r\n      {\r\n        supportEditing: false\r\n      },\r\n      (credentialsCache: CredentialCache) => {\r\n        cacheEntry = credentialsCache.tryGetCacheEntry(this._credentialCacheId);\r\n      }\r\n    );\r\n\r\n    if (cacheEntry) {\r\n      const expirationTime: number | undefined = cacheEntry.expires?.getTime();\r\n      if (!expirationTime || expirationTime >= Date.now()) {\r\n        return cacheEntry.credential;\r\n      }\r\n    }\r\n  }\r\n\r\n  private _getFailureType(requestMethod: string, response: Response, isRedirect: boolean): FailureType {\r\n    if (response.ok) {\r\n      return FailureType.None;\r\n    }\r\n\r\n    switch (response.status) {\r\n      case 503: {\r\n        // We select 503 specifically because this represents \"service unavailable\" and\r\n        // \"rate limit throttle\" errors, which are transient issues.\r\n        //\r\n        // There are other 5xx errors, such as 501, that can occur if the request is\r\n        // malformed, so as a general rule we want to let through other 5xx errors\r\n        // so the user can troubleshoot.\r\n\r\n        // Don't fail production builds with warnings for transient issues\r\n        return FailureType.Informational;\r\n      }\r\n\r\n      case 401:\r\n      case 403:\r\n      case 407: {\r\n        if (requestMethod === 'GET' && (isRedirect || response.redirected)) {\r\n          // Cache misses for GET requests are not errors\r\n          // This is a workaround behavior where a server can issue a redirect and we fail to authenticate at the new location.\r\n          // We do not want to signal this as an authentication failure because the authorization header is not passed on to redirects.\r\n          // i.e The authentication header was accepted for the first request and therefore subsequent failures\r\n          // where it was not present should not be attributed to the header.\r\n          // This scenario usually comes up with services that redirect to pre-signed URLS that don't actually exist.\r\n          // Those services then usually treat the 404 as a 403 to prevent leaking information.\r\n          return FailureType.None;\r\n        }\r\n\r\n        return FailureType.Authentication;\r\n      }\r\n\r\n      case 404: {\r\n        if (requestMethod === 'GET') {\r\n          // Cache misses for GET requests are not errors\r\n          return FailureType.None;\r\n        }\r\n      }\r\n    }\r\n\r\n    // Let dev builds succeed, let Prod builds fail\r\n    return FailureType.Warning;\r\n  }\r\n\r\n  private _reportFailure(\r\n    terminal: ITerminal,\r\n    requestMethod: string,\r\n    response: Response,\r\n    isRedirect: boolean,\r\n    message: string\r\n  ): void {\r\n    switch (this._getFailureType(requestMethod, response, isRedirect)) {\r\n      default: {\r\n        terminal.writeErrorLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\r\n        break;\r\n      }\r\n\r\n      case FailureType.Warning: {\r\n        terminal.writeWarningLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\r\n        break;\r\n      }\r\n\r\n      case FailureType.Informational: {\r\n        terminal.writeLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\r\n        break;\r\n      }\r\n\r\n      case FailureType.None: {\r\n        terminal.writeDebugLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\r\n        break;\r\n      }\r\n\r\n      case FailureType.Authentication: {\r\n        throw new Error(\r\n          [\r\n            `${this._url.href} responded with ${response.status}: ${response.statusText}.`,\r\n            `Credentials may be misconfigured or have expired.`,\r\n            `In CI, verify that RUSH_BUILD_CACHE_CREDENTIAL contains a valid Authorization header value.`,\r\n            ``,\r\n            `For local developers, run:`,\r\n            ``,\r\n            `    rush update-cloud-credentials --interactive`,\r\n            ``\r\n          ].join('\\n')\r\n        );\r\n      }\r\n    }\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"HttpBuildCacheProvider.js","sourceRoot":"","sources":["../src/HttpBuildCacheProvider.ts"],"names":[],"mappings":";;;;;;AAAA,oEAA4E;AAC5E,kDAM6B;AAC7B,4DAAuD;AAEvD,IAAK,kBAIJ;AAJD,WAAK,kBAAkB;IACrB,mEAAQ,CAAA;IACR,mEAAQ,CAAA;IACR,2DAAI,CAAA;AACN,CAAC,EAJI,kBAAkB,KAAlB,kBAAkB,QAItB;AAED,IAAK,WAMJ;AAND,WAAK,WAAW;IACd,6CAAI,CAAA;IACJ,+DAAa,CAAA;IACb,mDAAO,CAAA;IACP,+CAAK,CAAA;IACL,iEAAc,CAAA;AAChB,CAAC,EANI,WAAW,KAAX,WAAW,QAMf;AAsBD,MAAM,uBAAuB,GAAW,CAAC,CAAC;AAC1C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAE7C,MAAa,sBAAsB;IAajC,IAAW,mBAAmB;;QAC5B,OAAO,MAAA,mCAAwB,CAAC,sBAAsB,mCAAI,IAAI,CAAC,mCAAmC,CAAC;IACrG,CAAC;IAED,YAAmB,OAAuC,EAAE,WAAwB;;QAClF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;QAE/C,IAAI,CAAC,sBAAsB,GAAG,mCAAwB,CAAC,oBAAoB,CAAC;QAC5E,IAAI,CAAC,mCAAmC,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,aAAa,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,KAAK,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,MAAA,OAAO,CAAC,OAAO,mCAAI,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,MAAA,OAAO,CAAC,cAAc,mCAAI,EAAE,CAAC;QACpD,IAAI,CAAC,oBAAoB,GAAG,MAAA,OAAO,CAAC,mBAAmB,mCAAI,+BAA+B,CAAC;IAC7F,CAAC;IAEM,KAAK,CAAC,+BAA+B,CAC1C,QAAmB,EACnB,OAAe;QAEf,IAAI;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,2BAA2B;gBACxC,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,uBAAuB;aACrC,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD;QAAC,OAAO,CAAC,EAAE;YACV,QAAQ,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;YAC7D,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,QAAmB,EACnB,OAAe,EACf,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7B,QAAQ,CAAC,cAAc,CAAC,+DAA+D,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC;SACd;QAED,QAAQ,CAAC,cAAc,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QAEpE,IAAI;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE;gBAC3C,MAAM,EAAE,IAAI,CAAC,aAAa;gBAC1B,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,6BAA6B;gBAC1C,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,uBAAuB;aACrC,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,KAAK,CAAC;SACzB;QAAC,OAAO,CAAC,EAAE;YACV,QAAQ,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;SACd;IACH,CAAC;IAEM,KAAK,CAAC,2BAA2B,CAAC,QAAmB,EAAE,UAAkB;QAC9E,MAAM,0BAAe,CAAC,UAAU,CAC9B;YACE,cAAc,EAAE,IAAI;SACrB,EACD,KAAK,EAAE,gBAAiC,EAAE,EAAE;YAC1C,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBACtD,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,CAAC,CACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,sCAAsC,CAAC,QAAmB;QACrE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,IAAI,KAAK,CACb,6DAA6D;gBAC3D,iEAAiE,IAAI,CAAC,WAAW,4FAA4F;gBAC7K,mGAAmG;gBACnG,sCAAsC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CACzD,CAAC;SACH;QAED,MAAM,GAAG,GAAW,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,QAAQ,CAAC,gBAAgB,CAAC,YAAY,GAAG,sBAAsB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,8BAAU,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE;YAC1F,uBAAuB,EAAE,IAAI,CAAC,gBAAgB;SAC/C,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,MAAM,CAAC,KAAK,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,WAAW,CAAC,CAAC;SAC/E;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAE7C,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE7D,QAAQ,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,4BAA4B,CAAC,QAAmB;QAC3D,MAAM,0BAAe,CAAC,UAAU,CAC9B;YACE,cAAc,EAAE,IAAI;SACrB,EACD,KAAK,EAAE,gBAAiC,EAAE,EAAE;YAC1C,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC3D,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IAAY,kBAAkB;QAC5B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7B,MAAM,YAAY,GAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhD,IAAI,IAAI,CAAC,mCAAmC,EAAE;gBAC5C,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;aACxC;YAED,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACnD;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,OASnB;QACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;QAC7F,MAAM,qBAAqB,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,kBAAkB,CAAC,QAAQ,CAAC;QAC/E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAE5C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE;YACnC,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC;SACrC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;aACtB;SACF;QAED,MAAM,UAAU,GAAG,CAAC,IAA2B,aAA3B,IAAI,uBAAJ,IAAI,CAAyB,MAAM,KAAI,SAAS,CAAC;QAErE,QAAQ,CAAC,cAAc,CAAC,+BAA+B,MAAM,IAAI,GAAG,IAAI,UAAU,QAAQ,CAAC,CAAC;QAE5F,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAK,EAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,MAAM,uBAAuB,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;YAEhF,IACE,CAAC,uBAAuB;gBACxB,OAAO,WAAW,KAAK,QAAQ;gBAC/B,qBAAqB,KAAK,kBAAkB,CAAC,QAAQ,EACrD;gBACA,kFAAkF;gBAClF,iFAAiF;gBACjF,qEAAqE;gBACrE,EAAE;gBACF,wFAAwF;gBACxF,OAAO,MAAM,IAAI,CAAC,KAAK,iCAAM,OAAO,KAAE,iBAAiB,EAAE,kBAAkB,CAAC,QAAQ,IAAG,CAAC;aACzF;YAED,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE;gBAC3B,yDAAyD;gBACzD,sFAAsF;gBACtF,gGAAgG;gBAChG,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,sCAAsC;gBAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAElE,MAAM,yBAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAE9B,OAAO,MAAM,IAAI,CAAC,KAAK,iCAAM,OAAO,KAAE,WAAW,EAAE,OAAO,CAAC,WAAW,GAAG,CAAC,IAAG,CAAC;aAC/E;YAED,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;SACd;QAED,MAAM,MAAM,GAAqB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE7F,QAAQ,CAAC,cAAc,CACrB,uCAAuC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAC3D,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MACpC,QAAQ,CACT,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAMO,KAAK,CAAC,kBAAkB,CAAC,OAA2B;QAC1D,IAAI,OAAO,KAAK,kBAAkB,CAAC,IAAI,EAAE;YACvC,OAAO;SACR;QAED,IAAI,WAAW,GAAuB,IAAI,CAAC,sBAAsB,CAAC;QAElE,IAAI,WAAW,KAAK,SAAS,EAAE;YAC7B,WAAW,GAAG,MAAM,IAAI,CAAC,2BAA2B,EAAE,CAAC;SACxD;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,kBAAkB,CAAC,QAAQ,EAAE;YAC9E,MAAM,IAAI,KAAK,CACb;gBACE,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B;gBAC3D,6FAA6F;gBAC7F,EAAE;gBACF,4BAA4B;gBAC5B,EAAE;gBACF,iDAAiD;gBACjD,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;SACH;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,2BAA2B;;QACvC,IAAI,UAA6C,CAAC;QAElD,MAAM,0BAAe,CAAC,UAAU,CAC9B;YACE,cAAc,EAAE,KAAK;SACtB,EACD,CAAC,gBAAiC,EAAE,EAAE;YACpC,UAAU,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC1E,CAAC,CACF,CAAC;QAEF,IAAI,UAAU,EAAE;YACd,MAAM,cAAc,GAAuB,MAAA,UAAU,CAAC,OAAO,0CAAE,OAAO,EAAE,CAAC;YACzE,IAAI,CAAC,cAAc,IAAI,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;gBACnD,OAAO,UAAU,CAAC,UAAU,CAAC;aAC9B;SACF;IACH,CAAC;IAEO,eAAe,CAAC,aAAqB,EAAE,QAAkB,EAAE,UAAmB;QACpF,IAAI,QAAQ,CAAC,EAAE,EAAE;YACf,OAAO,WAAW,CAAC,IAAI,CAAC;SACzB;QAED,QAAQ,QAAQ,CAAC,MAAM,EAAE;YACvB,KAAK,GAAG,CAAC,CAAC;gBACR,+EAA+E;gBAC/E,4DAA4D;gBAC5D,EAAE;gBACF,4EAA4E;gBAC5E,0EAA0E;gBAC1E,gCAAgC;gBAEhC,kEAAkE;gBAClE,OAAO,WAAW,CAAC,aAAa,CAAC;aAClC;YAED,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC,CAAC;gBACR,IAAI,aAAa,KAAK,KAAK,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAClE,+CAA+C;oBAC/C,qHAAqH;oBACrH,6HAA6H;oBAC7H,qGAAqG;oBACrG,mEAAmE;oBACnE,2GAA2G;oBAC3G,qFAAqF;oBACrF,OAAO,WAAW,CAAC,IAAI,CAAC;iBACzB;gBAED,OAAO,WAAW,CAAC,cAAc,CAAC;aACnC;YAED,KAAK,GAAG,CAAC,CAAC;gBACR,IAAI,aAAa,KAAK,KAAK,EAAE;oBAC3B,+CAA+C;oBAC/C,OAAO,WAAW,CAAC,IAAI,CAAC;iBACzB;aACF;SACF;QAED,+CAA+C;QAC/C,OAAO,WAAW,CAAC,OAAO,CAAC;IAC7B,CAAC;IAEO,cAAc,CACpB,QAAmB,EACnB,aAAqB,EACrB,QAAkB,EAClB,UAAmB,EACnB,OAAe;QAEf,QAAQ,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE;YACjE,OAAO,CAAC,CAAC;gBACP,QAAQ,CAAC,cAAc,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;gBACxB,QAAQ,CAAC,gBAAgB,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACzF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,aAAa,CAAC,CAAC;gBAC9B,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAClF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;gBACrB,QAAQ,CAAC,cAAc,CAAC,GAAG,OAAO,UAAU,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvF,MAAM;aACP;YAED,KAAK,WAAW,CAAC,cAAc,CAAC,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb;oBACE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;oBAC9E,mDAAmD;oBACnD,6FAA6F;oBAC7F,EAAE;oBACF,4BAA4B;oBAC5B,EAAE;oBACF,iDAAiD;oBACjD,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;aACH;SACF;IACH,CAAC;CACF;AAxXD,wDAwXC","sourcesContent":["import { ITerminal, Executable, Async } from '@rushstack/node-core-library';\nimport {\n  ICloudBuildCacheProvider,\n  ICredentialCacheEntry,\n  CredentialCache,\n  RushSession,\n  EnvironmentConfiguration\n} from '@rushstack/rush-sdk';\nimport fetch, { BodyInit, Response } from 'node-fetch';\n\nenum CredentialsOptions {\n  Optional,\n  Required,\n  Omit\n}\n\nenum FailureType {\n  None,\n  Informational,\n  Warning,\n  Error,\n  Authentication\n}\n\nexport interface IHttpBuildCacheTokenHandler {\n  exec: string;\n  args?: string[];\n}\n\n/**\n * @public\n */\nexport interface IHttpBuildCacheProviderOptions {\n  url: string;\n  tokenHandler?: IHttpBuildCacheTokenHandler;\n  uploadMethod?: string;\n  minHttpRetryDelayMs?: number;\n  headers?: Record<string, string>;\n  cacheKeyPrefix?: string;\n  isCacheWriteAllowed: boolean;\n  pluginName: string;\n  rushJsonFolder: string;\n}\n\nconst MAX_HTTP_CACHE_ATTEMPTS: number = 3;\nconst DEFAULT_MIN_HTTP_RETRY_DELAY_MS = 2500;\n\nexport class HttpBuildCacheProvider implements ICloudBuildCacheProvider {\n  private readonly _pluginName: string;\n  private readonly _rushProjectRoot: string;\n  private readonly _environmentCredential: string | undefined;\n  private readonly _isCacheWriteAllowedByConfiguration: boolean;\n  private readonly _url: URL;\n  private readonly _uploadMethod: string;\n  private readonly _headers: Record<string, string>;\n  private readonly _cacheKeyPrefix: string;\n  private readonly _tokenHandler: IHttpBuildCacheTokenHandler | undefined;\n  private readonly _minHttpRetryDelayMs: number;\n  private __credentialCacheId: string | undefined;\n\n  public get isCacheWriteAllowed(): boolean {\n    return EnvironmentConfiguration.buildCacheWriteAllowed ?? this._isCacheWriteAllowedByConfiguration;\n  }\n\n  public constructor(options: IHttpBuildCacheProviderOptions, rushSession: RushSession) {\n    this._pluginName = options.pluginName;\n    this._rushProjectRoot = options.rushJsonFolder;\n\n    this._environmentCredential = EnvironmentConfiguration.buildCacheCredential;\n    this._isCacheWriteAllowedByConfiguration = options.isCacheWriteAllowed;\n    this._url = new URL(options.url.endsWith('/') ? options.url : options.url + '/');\n    this._uploadMethod = options.uploadMethod ?? 'PUT';\n    this._headers = options.headers ?? {};\n    this._tokenHandler = options.tokenHandler;\n    this._cacheKeyPrefix = options.cacheKeyPrefix ?? '';\n    this._minHttpRetryDelayMs = options.minHttpRetryDelayMs ?? DEFAULT_MIN_HTTP_RETRY_DELAY_MS;\n  }\n\n  public async tryGetCacheEntryBufferByIdAsync(\n    terminal: ITerminal,\n    cacheId: string\n  ): Promise<Buffer | undefined> {\n    try {\n      const result = await this._http({\n        terminal: terminal,\n        relUrl: `${this._cacheKeyPrefix}${cacheId}`,\n        method: 'GET',\n        body: undefined,\n        warningText: 'Could not get cache entry',\n        readBody: true,\n        maxAttempts: MAX_HTTP_CACHE_ATTEMPTS\n      });\n\n      return Buffer.isBuffer(result) ? result : undefined;\n    } catch (e) {\n      terminal.writeWarningLine(`Error getting cache entry: ${e}`);\n      return undefined;\n    }\n  }\n\n  public async trySetCacheEntryBufferAsync(\n    terminal: ITerminal,\n    cacheId: string,\n    objectBuffer: Buffer\n  ): Promise<boolean> {\n    if (!this.isCacheWriteAllowed) {\n      terminal.writeErrorLine('Writing to cache is not allowed in the current configuration.');\n      return false;\n    }\n\n    terminal.writeDebugLine('Uploading object with cacheId: ', cacheId);\n\n    try {\n      const result = await this._http({\n        terminal: terminal,\n        relUrl: `${this._cacheKeyPrefix}${cacheId}`,\n        method: this._uploadMethod,\n        body: objectBuffer,\n        warningText: 'Could not write cache entry',\n        readBody: false,\n        maxAttempts: MAX_HTTP_CACHE_ATTEMPTS\n      });\n\n      return result !== false;\n    } catch (e) {\n      terminal.writeWarningLine(`Error uploading cache entry: ${e}`);\n      return false;\n    }\n  }\n\n  public async updateCachedCredentialAsync(terminal: ITerminal, credential: string): Promise<void> {\n    await CredentialCache.usingAsync(\n      {\n        supportEditing: true\n      },\n      async (credentialsCache: CredentialCache) => {\n        credentialsCache.setCacheEntry(this._credentialCacheId, {\n          credential: credential\n        });\n        await credentialsCache.saveIfModifiedAsync();\n      }\n    );\n  }\n\n  public async updateCachedCredentialInteractiveAsync(terminal: ITerminal): Promise<void> {\n    if (!this._tokenHandler) {\n      throw new Error(\n        `The interactive cloud credentials flow is not configured.\\n` +\n          `Set the 'tokenHandler' setting in 'common/config/rush-plugins/${this._pluginName}.json' to a command that writes your credentials to standard output and exits with code 0 ` +\n          `or provide your credentials to rush using the --credential flag instead. Credentials must be the ` +\n          `'Authorization' header expected by ${this._url.href}`\n      );\n    }\n\n    const cmd: string = `${this._tokenHandler.exec} ${(this._tokenHandler.args || []).join(' ')}`;\n    terminal.writeVerboseLine(`Running '${cmd}' to get credentials`);\n    const result = Executable.spawnSync(this._tokenHandler.exec, this._tokenHandler.args || [], {\n      currentWorkingDirectory: this._rushProjectRoot\n    });\n\n    terminal.writeErrorLine(result.stderr);\n\n    if (result.error) {\n      throw new Error(`Could not obtain credentials. The command '${cmd}' failed.`);\n    }\n\n    const credential = result.stdout.trim();\n    terminal.writeVerboseLine('Got credentials');\n\n    await this.updateCachedCredentialAsync(terminal, credential);\n\n    terminal.writeLine('Updated credentials cache');\n  }\n\n  public async deleteCachedCredentialsAsync(terminal: ITerminal): Promise<void> {\n    await CredentialCache.usingAsync(\n      {\n        supportEditing: true\n      },\n      async (credentialsCache: CredentialCache) => {\n        credentialsCache.deleteCacheEntry(this._credentialCacheId);\n        await credentialsCache.saveIfModifiedAsync();\n      }\n    );\n  }\n\n  private get _credentialCacheId(): string {\n    if (!this.__credentialCacheId) {\n      const cacheIdParts: string[] = [this._url.href];\n\n      if (this._isCacheWriteAllowedByConfiguration) {\n        cacheIdParts.push('cacheWriteAllowed');\n      }\n\n      this.__credentialCacheId = cacheIdParts.join('|');\n    }\n\n    return this.__credentialCacheId;\n  }\n\n  private async _http(options: {\n    terminal: ITerminal;\n    relUrl: string;\n    method: string;\n    body: BodyInit | undefined;\n    warningText: string;\n    readBody: boolean;\n    maxAttempts: number;\n    credentialOptions?: CredentialsOptions;\n  }): Promise<Buffer | boolean> {\n    const { terminal, relUrl, method, body, warningText, readBody, credentialOptions } = options;\n    const safeCredentialOptions = credentialOptions ?? CredentialsOptions.Optional;\n    const credentials = await this._tryGetCredentials(safeCredentialOptions);\n    const url = new URL(relUrl, this._url).href;\n\n    const headers: Record<string, string> = {};\n    if (typeof credentials === 'string') {\n      headers.Authorization = credentials;\n    }\n\n    for (const [key, value] of Object.entries(this._headers)) {\n      if (typeof value === 'string') {\n        headers[key] = value;\n      }\n    }\n\n    const bodyLength = (body as { length: number })?.length || 'unknown';\n\n    terminal.writeDebugLine(`[http-build-cache] request: ${method} ${url} ${bodyLength} bytes`);\n\n    const response = await fetch(url, {\n      method: method,\n      headers: headers,\n      body: body,\n      redirect: 'follow'\n    });\n\n    if (!response.ok) {\n      const isNonCredentialResponse = response.status >= 500 && response.status < 600;\n\n      if (\n        !isNonCredentialResponse &&\n        typeof credentials !== 'string' &&\n        safeCredentialOptions === CredentialsOptions.Optional\n      ) {\n        // If we don't already have credentials yet, and we got a response from the server\n        // that is a \"normal\" failure (4xx), then we assume that credentials are probably\n        // required. Re-attempt the request, requiring credentials this time.\n        //\n        // This counts as part of the \"first attempt\", so it is not included in the max attempts\n        return await this._http({ ...options, credentialOptions: CredentialsOptions.Required });\n      }\n\n      if (options.maxAttempts > 1) {\n        // Pause a bit before retrying in case the server is busy\n        // Add some random jitter to the retry so we can spread out load on the remote service\n        // A proper solution might add exponential back off in case the retry count is high (10 or more)\n        const factor = 1.0 + Math.random(); // A random number between 1.0 and 2.0\n        const retryDelay = Math.floor(factor * this._minHttpRetryDelayMs);\n\n        await Async.sleep(retryDelay);\n\n        return await this._http({ ...options, maxAttempts: options.maxAttempts - 1 });\n      }\n\n      this._reportFailure(terminal, method, response, false, warningText);\n      return false;\n    }\n\n    const result: Buffer | boolean = readBody ? Buffer.from(await response.arrayBuffer()) : true;\n\n    terminal.writeDebugLine(\n      `[http-build-cache] actual response: ${response.status} ${url} ${\n        result === true ? 'true' : result.length\n      } bytes`\n    );\n\n    return result;\n  }\n\n  private async _tryGetCredentials(options: CredentialsOptions.Required): Promise<string>;\n  private async _tryGetCredentials(options: CredentialsOptions.Optional): Promise<string | undefined>;\n  private async _tryGetCredentials(options: CredentialsOptions.Omit): Promise<undefined>;\n  private async _tryGetCredentials(options: CredentialsOptions): Promise<string | undefined>;\n  private async _tryGetCredentials(options: CredentialsOptions): Promise<string | undefined> {\n    if (options === CredentialsOptions.Omit) {\n      return;\n    }\n\n    let credentials: string | undefined = this._environmentCredential;\n\n    if (credentials === undefined) {\n      credentials = await this._tryGetCredentialsFromCache();\n    }\n\n    if (typeof credentials !== 'string' && options === CredentialsOptions.Required) {\n      throw new Error(\n        [\n          `Credentials for ${this._url.href} have not been provided.`,\n          `In CI, verify that RUSH_BUILD_CACHE_CREDENTIAL contains a valid Authorization header value.`,\n          ``,\n          `For local developers, run:`,\n          ``,\n          `    rush update-cloud-credentials --interactive`,\n          ``\n        ].join('\\n')\n      );\n    }\n\n    return credentials;\n  }\n\n  private async _tryGetCredentialsFromCache(): Promise<string | undefined> {\n    let cacheEntry: ICredentialCacheEntry | undefined;\n\n    await CredentialCache.usingAsync(\n      {\n        supportEditing: false\n      },\n      (credentialsCache: CredentialCache) => {\n        cacheEntry = credentialsCache.tryGetCacheEntry(this._credentialCacheId);\n      }\n    );\n\n    if (cacheEntry) {\n      const expirationTime: number | undefined = cacheEntry.expires?.getTime();\n      if (!expirationTime || expirationTime >= Date.now()) {\n        return cacheEntry.credential;\n      }\n    }\n  }\n\n  private _getFailureType(requestMethod: string, response: Response, isRedirect: boolean): FailureType {\n    if (response.ok) {\n      return FailureType.None;\n    }\n\n    switch (response.status) {\n      case 503: {\n        // We select 503 specifically because this represents \"service unavailable\" and\n        // \"rate limit throttle\" errors, which are transient issues.\n        //\n        // There are other 5xx errors, such as 501, that can occur if the request is\n        // malformed, so as a general rule we want to let through other 5xx errors\n        // so the user can troubleshoot.\n\n        // Don't fail production builds with warnings for transient issues\n        return FailureType.Informational;\n      }\n\n      case 401:\n      case 403:\n      case 407: {\n        if (requestMethod === 'GET' && (isRedirect || response.redirected)) {\n          // Cache misses for GET requests are not errors\n          // This is a workaround behavior where a server can issue a redirect and we fail to authenticate at the new location.\n          // We do not want to signal this as an authentication failure because the authorization header is not passed on to redirects.\n          // i.e The authentication header was accepted for the first request and therefore subsequent failures\n          // where it was not present should not be attributed to the header.\n          // This scenario usually comes up with services that redirect to pre-signed URLS that don't actually exist.\n          // Those services then usually treat the 404 as a 403 to prevent leaking information.\n          return FailureType.None;\n        }\n\n        return FailureType.Authentication;\n      }\n\n      case 404: {\n        if (requestMethod === 'GET') {\n          // Cache misses for GET requests are not errors\n          return FailureType.None;\n        }\n      }\n    }\n\n    // Let dev builds succeed, let Prod builds fail\n    return FailureType.Warning;\n  }\n\n  private _reportFailure(\n    terminal: ITerminal,\n    requestMethod: string,\n    response: Response,\n    isRedirect: boolean,\n    message: string\n  ): void {\n    switch (this._getFailureType(requestMethod, response, isRedirect)) {\n      default: {\n        terminal.writeErrorLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\n        break;\n      }\n\n      case FailureType.Warning: {\n        terminal.writeWarningLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\n        break;\n      }\n\n      case FailureType.Informational: {\n        terminal.writeLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\n        break;\n      }\n\n      case FailureType.None: {\n        terminal.writeDebugLine(`${message}: HTTP ${response.status}: ${response.statusText}`);\n        break;\n      }\n\n      case FailureType.Authentication: {\n        throw new Error(\n          [\n            `${this._url.href} responded with ${response.status}: ${response.statusText}.`,\n            `Credentials may be misconfigured or have expired.`,\n            `In CI, verify that RUSH_BUILD_CACHE_CREDENTIAL contains a valid Authorization header value.`,\n            ``,\n            `For local developers, run:`,\n            ``,\n            `    rush update-cloud-credentials --interactive`,\n            ``\n          ].join('\\n')\n        );\n      }\n    }\n  }\n}\n"]}