@serafort/core 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +93 -0
- package/dist/index.cjs +651 -0
- package/dist/index.cjs.map +1 -0
- package/dist/index.d.cts +331 -0
- package/dist/index.d.ts +331 -0
- package/dist/index.js +634 -0
- package/dist/index.js.map +1 -0
- package/package.json +61 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/errors.ts","../src/utils/jwt.ts","../src/b2b/jwks.ts","../src/b2b/b2b.ts","../src/utils/retry.ts","../src/m2m/cache.ts","../src/m2m/m2m.ts","../src/client.ts"],"names":[],"mappings":";AAKO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,SAAiB,IAAA,GAAO,gBAAA,EAAkB,SAAS,GAAA,EAAK,OAAA,GAA4B,EAAC,EAAG;AAClG,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,GAAA,CAAA,MAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,IAAM,mBAAA,GAAN,cAAkC,aAAA,CAAc;AAAA,EACrD,YAAY,OAAA,GAAU,8CAAA,EAAgD,OAAO,sBAAA,EAAwB,OAAA,GAA4B,EAAC,EAAG;AACnI,IAAA,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,GAAA,EAAK,OAAO,CAAA;AACjC,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AACF;AAKO,IAAM,gBAAA,GAAN,cAA+B,aAAA,CAAc;AAAA,EAClC,WAAA;AAAA,EACA,gBAAA;AAAA,EAEhB,YACE,OAAA,GAAU,uCAAA,EACV,aACA,gBAAA,EACA,OAAA,GAA4B,EAAC,EAC7B;AACA,IAAA,KAAA,CAAM,OAAA,EAAS,cAAA,EAAgB,GAAA,EAAK,OAAO,CAAA;AAC3C,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,WAAA,GAAc,WAAA;AACnB,IAAA,IAAA,CAAK,gBAAA,GAAmB,gBAAA;AAAA,EAC1B;AACF;AAKO,IAAM,eAAA,GAAN,cAA8B,aAAA,CAAc;AAAA,EACjD,WAAA,CAAY,OAAA,GAAU,wCAAA,EAA0C,OAAA,GAA4B,EAAC,EAAG;AAC9F,IAAA,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,GAAA,EAAK,OAAO,CAAA;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EACd;AACF;AAKO,IAAM,cAAA,GAAN,cAA6B,aAAA,CAAc;AAAA,EAChC,iBAAA;AAAA,EAEhB,YAAY,OAAA,GAAU,iDAAA,EAAmD,iBAAA,EAA4B,OAAA,GAA4B,EAAC,EAAG;AACnI,IAAA,KAAA,CAAM,OAAA,EAAS,qBAAA,EAAuB,GAAA,EAAK,OAAO,CAAA;AAClD,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,IAAA,CAAK,iBAAA,GAAoB,iBAAA;AAAA,EAC3B;AACF;AAKO,IAAM,aAAA,GAAN,cAA4B,aAAA,CAAc;AAAA,EAC/C,YAAY,OAAA,GAAU,qBAAA,EAAuB,OAAO,WAAA,EAAa,OAAA,GAA4B,EAAC,EAAG;AAC/F,IAAA,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,GAAA,EAAK,OAAO,CAAA;AACjC,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF;AAKO,IAAM,YAAA,GAAN,cAA2B,aAAA,CAAc;AAAA,EAC9C,WAAA,CAAY,OAAA,GAAU,4CAAA,EAA8C,KAAA,EAAiB;AACnF,IAAA,KAAA,CAAM,OAAA,EAAS,iBAAiB,CAAC,CAAA;AACjC,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,IACf;AAAA,EACF;AACF;;;AC7EO,SAAS,iBAAiB,GAAA,EAAyB;AACxD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,IAAI,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,WAAW,CAAC,CAAA;AAAA,EACrD;AAEA,EAAA,IAAI,MAAA,GAAS,IAAI,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AACrD,EAAA,MAAM,GAAA,GAAM,OAAO,MAAA,GAAS,CAAA;AAC5B,EAAA,IAAI,QAAQ,CAAA,EAAG;AACb,IAAA,MAAA,IAAU,IAAA;AAAA,EACZ,CAAA,MAAA,IAAW,QAAQ,CAAA,EAAG;AACpB,IAAA,MAAA,IAAU,GAAA;AAAA,EACZ;AAEA,EAAA,MAAM,SAAA,GAAY,KAAK,MAAM,CAAA;AAC7B,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AAC7C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,CAAU,QAAQ,CAAA,EAAA,EAAK;AACzC,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,SAAA,CAAU,UAAA,CAAW,CAAC,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,KAAA;AACT;AAKO,SAAS,gBAAgB,GAAA,EAAqB;AACnD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,GAAA,EAAK,WAAW,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,EACtD;AAEA,EAAA,MAAM,KAAA,GAAQ,iBAAiB,GAAG,CAAA;AAClC,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AACvC;AAKO,SAAS,SAAsC,KAAA,EAA8B;AAClF,EAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,oBAAoB,uCAAuC,CAAA;AAAA,EACvE;AAEA,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,oBAAoB,uEAAuE,CAAA;AAAA,EACvG;AAEA,EAAA,MAAM,CAAC,SAAA,EAAW,UAAA,EAAY,YAAY,CAAA,GAAI,KAAA;AAE9C,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,gBAAgB,SAAS,CAAA;AAC5C,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA;AAEpC,IAAA,MAAM,WAAA,GAAc,gBAAgB,UAAU,CAAA;AAC9C,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AAEtC,IAAA,MAAM,SAAA,GAAY,iBAAiB,YAAY,CAAA;AAC/C,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,UAAU,CAAA,CAAE,CAAA;AAE1E,IAAA,OAAO;AAAA,MACL,MAAA;AAAA,MACA,OAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF,SAAS,GAAA,EAAc;AACrB,IAAA,IAAI,GAAA,YAAe,qBAAqB,MAAM,GAAA;AAC9C,IAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,2BAAA,EAA8B,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EAChH;AACF;;;AClFO,IAAM,aAAN,MAAiB;AAAA,EACL,OAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,uBAAyC,GAAA,EAAI;AAAA,EAC7C,aAAA,GAAgB,CAAA;AAAA,EACP,UAAA;AAAA,EAEjB,WAAA,CAAY,MAAA,EAAwB,UAAA,GAAa,IAAA,EAAU;AACzD,IAAA,MAAM,OAAA,GAAA,CAAW,OAAO,QAAA,IAAY,MAAA,CAAO,WAAW,0BAAA,EAA4B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACpG,IAAA,IAAA,CAAK,OAAA,GAAU,GAAG,OAAO,CAAA,sBAAA,CAAA;AACzB,IAAA,IAAA,CAAK,YAAY,MAAA,CAAO,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACjE,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,kBAAA,CAAmB,GAAA,EAAc,GAAA,GAAM,OAAA,EAA6B;AAC/E,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,cAAA,GAAiB,GAAA,GAAM,IAAA,CAAK,aAAA,GAAgB,IAAA,CAAK,UAAA;AAEvD,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,GAAO,CAAA,IAAK,CAAC,cAAA,EAAgB;AAC/C,MAAA,IAAI,GAAA,IAAO,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA,EAAG;AACnC,QAAA,OAAO,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA;AAAA,MAChC;AAEA,MAAA,IAAI,CAAC,GAAA,IAAO,IAAA,CAAK,UAAA,CAAW,SAAS,CAAA,EAAG;AACtC,QAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,WAAW,MAAA,EAAQ,EAAE,CAAC,CAAA;AAAA,MAC/C;AAAA,IACF;AAGA,IAAA,MAAM,KAAK,WAAA,EAAY;AAEvB,IAAA,IAAI,GAAA,IAAO,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA,EAAG;AACnC,MAAA,OAAO,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA;AAAA,IAChC;AAEA,IAAA,IAAI,CAAC,GAAA,IAAO,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,EAAG;AACpC,MAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,WAAW,MAAA,EAAQ,EAAE,CAAC,CAAA;AAAA,IAC/C;AAEA,IAAA,MAAM,IAAI,mBAAA;AAAA,MACR,CAAA,8CAAA,EAAiD,GAAA,IAAO,aAAa,CAAA,WAAA,EAAc,GAAG,CAAA,EAAA,CAAA;AAAA,MACtF;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,WAAA,GAA6B;AACxC,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,OAAA,EAAS;AAAA,QAC5C,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA;AAAmB,OACvC,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,YAAA,CAAa,CAAA,0BAAA,EAA6B,IAAA,CAAK,OAAO,IAAI,GAAG,CAAA;AAAA,IACzE;AAEA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,6BAAA,EAAgC,QAAA,CAAS,MAAM,KAAK,mBAAmB,CAAA;AAAA,IACvG;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,KAAK,IAAA,IAAQ,CAAC,MAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,EAAG;AAC3C,MAAA,MAAM,IAAI,mBAAA,CAAoB,oDAAA,EAAsD,cAAc,CAAA;AAAA,IACpG;AAEA,IAAA,MAAM,OAAA,uBAAc,GAAA,EAAuB;AAE3C,IAAA,KAAA,MAAW,GAAA,IAAO,KAAK,IAAA,EAAM;AAC3B,MAAA,IAAI,CAAC,IAAI,GAAA,EAAK;AACd,MAAA,IAAI;AACF,QAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,SAAA,CAAU,GAAG,CAAA;AAC1C,QAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,SAAS,CAAA;AAAA,MAChC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,UAAA,GAAa,OAAA;AAClB,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAK,GAAA,EAAI;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,UAAU,GAAA,EAA8B;AACnD,IAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,oBAAoB,sEAAsE,CAAA;AAAA,IACtG;AAEA,IAAA,MAAM,MAAM,GAAA,CAAI,GAAA,KAAQ,GAAA,CAAI,GAAA,KAAQ,QAAQ,OAAA,GAAU,OAAA,CAAA;AAEtD,IAAA,IAAI,eAAA;AAEJ,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AACxB,MAAA,MAAM,WAAW,GAAA,KAAQ,OAAA,GAAU,SAAA,GAAY,GAAA,KAAQ,UAAU,SAAA,GAAY,SAAA;AAC7E,MAAA,eAAA,GAAkB;AAAA,QAChB,IAAA,EAAM,mBAAA;AAAA,QACN,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA;AAAS,OACzB;AAAA,IACF,CAAA,MAAA,IAAW,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AAC/B,MAAA,MAAM,aAAa,GAAA,KAAQ,OAAA,GAAU,OAAA,GAAU,GAAA,KAAQ,UAAU,OAAA,GAAU,OAAA;AAC3E,MAAA,eAAA,GAAkB;AAAA,QAChB,IAAA,EAAM,OAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,2BAAA,EAA8B,GAAG,CAAA,CAAE,CAAA;AAAA,IACnE;AAEA,IAAA,OAAO,MAAA,CAAO,SAAA;AAAA,MACZ,KAAA;AAAA,MACA,GAAA;AAAA,MACA,eAAA;AAAA,MACA,KAAA;AAAA;AAAA,MACA,CAAC,QAAQ;AAAA,KACX;AAAA,EACF;AACF;;;AC9GO,IAAM,YAAN,MAAgB;AAAA,EACL,MAAA;AAAA,EACC,UAAA;AAAA,EACA,OAAA;AAAA,EAEjB,WAAA,CAAY,QAAwB,UAAA,EAAyB;AAC3D,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA,IAAc,IAAI,UAAA,CAAW,MAAM,CAAA;AACrD,IAAA,IAAA,CAAK,OAAA,GAAA,CAAW,OAAO,QAAA,IAAY,MAAA,CAAO,WAAW,0BAAA,EAA4B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAAA,EACrG;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,aAAA,CAAc,KAAA,EAAe,OAAA,GAAkC,EAAC,EAAyB;AACpG,IAAA,MAAM,OAAA,GAAU,SAAkC,KAAK,CAAA;AACvD,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,cAAA,GAAiB,QAAQ,qBAAA,IAAyB,EAAA;AAExD,IAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AAGxB,IAAA,IAAI,OAAO,OAAA,CAAQ,KAAK,CAAA,KAAM,QAAA,EAAU;AACtC,MAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,GAAI,cAAA,GAAiB,GAAA,EAAK;AACzC,QAAA,MAAM,IAAI,mBAAA,CAAoB,oBAAA,EAAsB,eAAe,CAAA;AAAA,MACrE;AAAA,IACF;AAGA,IAAA,IAAI,OAAO,OAAA,CAAQ,KAAK,CAAA,KAAM,QAAA,EAAU;AACtC,MAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,GAAI,cAAA,GAAiB,GAAA,EAAK;AACzC,QAAA,MAAM,IAAI,mBAAA,CAAoB,sBAAA,EAAwB,qBAAqB,CAAA;AAAA,MAC7E;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,cAAA,IAAkB,IAAA,CAAK,OAAA;AACtD,IAAA,IAAI,cAAA,IAAkB,OAAO,OAAA,CAAQ,KAAK,MAAM,QAAA,EAAU;AACxD,MAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,KAAM,cAAA,EAAgB;AACrC,QAAA,MAAM,IAAI,mBAAA;AAAA,UACR,CAAA,gCAAA,EAAmC,cAAc,CAAA,aAAA,EAAgB,OAAA,CAAQ,KAAK,CAAC,CAAA,EAAA,CAAA;AAAA,UAC/E;AAAA,SACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,gBAAA,IAAoB,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC9C,MAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAC,CAAA,GAAI,OAAA,CAAQ,KAAK,CAAA,GAAI,CAAC,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC5E,MAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,gBAAgB,CAAA,EAAG;AAC3C,QAAA,MAAM,IAAI,mBAAA;AAAA,UACR,CAAA,kCAAA,EAAqC,QAAQ,gBAAgB,CAAA,EAAA,CAAA;AAAA,UAC7D;AAAA,SACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,IAAI,CAAC,QAAQ,kBAAA,EAAoB;AAC/B,MAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,MAAM,IAAI,oBAAoB,0EAA0E,CAAA;AAAA,MAC1G;AAEA,MAAA,MAAM,GAAA,GAAM,QAAQ,MAAA,CAAO,GAAA;AAC3B,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,MAAA,CAAO,GAAA,IAAO,OAAA;AAElC,MAAA,MAAM,YAAY,MAAM,IAAA,CAAK,UAAA,CAAW,kBAAA,CAAmB,KAAK,GAAG,CAAA;AAEnE,MAAA,IAAI,eAAA;AACJ,MAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AACxB,QAAA,eAAA,GAAkB,EAAE,MAAM,mBAAA,EAAoB;AAAA,MAChD,CAAA,MAAA,IAAW,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AAC/B,QAAA,eAAA,GAAkB,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,EAAE,IAAA,EAAM,GAAA,KAAQ,OAAA,GAAU,SAAA,GAAY,GAAA,KAAQ,OAAA,GAAU,SAAA,GAAY,WAAU,EAAE;AAAA,MAC3H,CAAA,MAAO;AACL,QAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,sDAAA,EAAyD,GAAG,CAAA,CAAE,CAAA;AAAA,MAC9F;AAEA,MAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA;AAAA,QAC3B,eAAA;AAAA,QACA,SAAA;AAAA,QACA,OAAA,CAAQ,SAAA;AAAA,QACR,OAAA,CAAQ;AAAA,OACV;AAEA,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA,MAAM,IAAI,mBAAA,CAAoB,oCAAA,EAAsC,mBAAmB,CAAA;AAAA,MACzF;AAAA,IACF;AAGA,IAAA,OAAO,IAAA,CAAK,uBAAuB,OAAO,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,aAAA,CAAc,aAA0B,kBAAA,EAAqC;AAClF,IAAA,IAAI,CAAC,WAAA,CAAY,WAAA,IAAe,WAAA,CAAY,WAAA,CAAY,WAAW,CAAA,EAAG;AACpE,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI,WAAA,CAAY,YAAY,QAAA,CAAS,GAAG,KAAK,WAAA,CAAY,WAAA,CAAY,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACjG,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,CAAC,IAAA,KAAS;AAC5C,MAAA,IAAI,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG;AACvB,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC/B,QAAA,OAAO,kBAAA,CAAmB,WAAW,MAAM,CAAA;AAAA,MAC7C;AACA,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKO,OAAA,CAAQ,aAA0B,YAAA,EAA+B;AACtE,IAAA,OAAO,KAAA,CAAM,QAAQ,WAAA,CAAY,KAAK,KAAK,WAAA,CAAY,KAAA,CAAM,SAAS,YAAY,CAAA;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA,EAKO,WAAA,CAAY,QAAA,EAAkB,WAAA,EAAqB,OAAA,GAAmD,EAAC,EAAW;AACvH,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,mBAAA,CAAqB,CAAA;AACxD,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,QAAQ,CAAA;AAC1C,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,WAAW,CAAA;AAEhD,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,OAAA,CAAQ,KAAK,CAAA;AAAA,IAC7C;AACA,IAAA,IAAI,QAAQ,UAAA,EAAY;AACtB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,OAAA,CAAQ,UAAU,CAAA;AAAA,IACvD;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAAuB,MAAA,EAA8C;AAC3E,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,IAAK,MAAA,CAAO,IAAI,CAAA,IAAK,MAAA,CAAO,SAAS,CAAA,IAAK,EAAE,CAAA;AAC9E,IAAA,MAAM,QAAA,GAAW,MAAA;AAAA,MACf,MAAA,CAAO,WAAW,CAAA,IAClB,MAAA,CAAO,QAAQ,CAAA,IACf,MAAA,CAAO,KAAK,CAAA,IACX,MAAA,CAAO,cAAc,CAAA,GAA4C,WAAW,CAAA,IAC7E;AAAA,KACF;AACA,IAAA,MAAM,KAAA,GAAQ,OAAO,OAAO,CAAA,GAAI,OAAO,MAAA,CAAO,OAAO,CAAC,CAAA,GAAI,MAAA;AAG1D,IAAA,IAAI,QAAkB,EAAC;AACvB,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAC,CAAA,EAAG;AAClC,MAAA,KAAA,GAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AAAA,IACpC,CAAA,MAAA,IAAW,OAAO,MAAA,CAAO,MAAM,MAAM,QAAA,EAAU;AAC7C,MAAA,KAAA,GAAQ,CAAC,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,IACzB,CAAA,MAAA,IAAW,OAAO,MAAA,CAAO,OAAO,MAAM,QAAA,EAAU;AAC9C,MAAA,KAAA,GAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,cAAwB,EAAC;AAC7B,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,aAAa,CAAC,CAAA,EAAG;AACxC,MAAA,WAAA,GAAc,MAAA,CAAO,aAAa,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AAAA,IAChD,CAAA,MAAA,IAAW,OAAO,MAAA,CAAO,OAAO,MAAM,QAAA,EAAU;AAC9C,MAAA,WAAA,GAAc,MAAA,CAAO,OAAO,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AAAA,IAC9E;AAEA,IAAA,OAAO;AAAA,MACL,MAAA;AAAA,MACA,QAAA;AAAA,MACA,KAAA;AAAA,MACA,KAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;;;AC3LA,eAAsB,gBAAA,CACpB,EAAA,EACA,OAAA,GAAmC,EAAC,EACxB;AACZ,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,WAAA,EAAa,UAAA,IAAc,CAAA;AACtD,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,WAAA,EAAa,cAAA,IAAkB,GAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,WAAA,EAAa,UAAA,IAAc,GAAA;AAEpD,EAAA,IAAI,OAAA,GAAU,CAAA;AAEd,EAAA,OAAO,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,EAAG;AAAA,IAClB,SAAS,GAAA,EAAc;AACrB,MAAA,OAAA,EAAA;AACA,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,GAAA;AAAA,MACR;AAEA,MAAA,MAAM,WAAA,GAAc,iBAAiB,GAAG,CAAA;AACxC,MAAA,IAAI,CAAC,WAAA,EAAa;AAChB,QAAA,MAAM,GAAA;AAAA,MACR;AAGA,MAAA,IAAI,OAAA,CAAQ,QAAQ,OAAA,EAAS;AAC3B,QAAA,MAAM,IAAI,YAAA,CAAa,2BAAA,EAA6B,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,MAC3E;AAEA,MAAA,IAAI,QAAQ,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,UAAU,CAAC,CAAA;AAElD,MAAA,IAAI,GAAA,YAAe,cAAA,IAAkB,GAAA,CAAI,iBAAA,EAAmB;AAC1D,QAAA,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,KAAA,EAAO,GAAA,CAAI,oBAAoB,GAAI,CAAA;AAAA,MACtD;AAGA,MAAA,MAAM,MAAA,GAAS,KAAA,IAAS,GAAA,GAAM,IAAA,CAAK,QAAO,GAAI,GAAA,CAAA;AAC9C,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAE7C,MAAA,MAAM,KAAA,CAAM,WAAA,EAAa,OAAA,CAAQ,MAAM,CAAA;AAAA,IACzC;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,GAAA,EAAuB;AAC/C,EAAA,IAAI,eAAe,cAAA,EAAgB;AACjC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,eAAe,YAAA,EAAc;AAC/B,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAY;AACpC,IAAA,IACE,IAAI,QAAA,CAAS,SAAS,KACtB,GAAA,CAAI,QAAA,CAAS,cAAc,CAAA,IAC3B,GAAA,CAAI,SAAS,YAAY,CAAA,IACzB,IAAI,QAAA,CAAS,cAAc,KAC3B,GAAA,CAAI,QAAA,CAAS,WAAW,CAAA,EACxB;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,KAAA,CAAM,IAAY,MAAA,EAAqC;AAC9D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,OAAO,OAAO,IAAI,YAAA,CAAa,gCAAA,EAAkC,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,IACjF;AAEA,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,MAAA,OAAA,EAAQ;AAAA,IACV,GAAG,EAAE,CAAA;AAEL,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAA,CAAO,gBAAA;AAAA,QACL,OAAA;AAAA,QACA,MAAM;AACJ,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,IAAI,YAAA,CAAa,iBAAA,EAAmB,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,QAC3D,CAAA;AAAA,QACA,EAAE,MAAM,IAAA;AAAK,OACf;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AACH;;;ACxFO,IAAM,gBAAN,MAAoB;AAAA,EACjB,KAAA,uBAAY,GAAA,EAAyB;AAAA,EACrC,gBAAA,uBAAuB,GAAA,EAA6B;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3C,oBAAA;AAAA,EAEjB,WAAA,CAAY,uBAAuB,GAAA,EAAK;AACtC,IAAA,IAAA,CAAK,oBAAA,GAAuB,oBAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,UAAA,CACX,QAAA,EACA,SAAA,EACA,QAAQ,KAAA,EACS;AACjB,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAExC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AACtC,MAAA,IAAI,MAAA,IAAU,MAAA,CAAO,SAAA,GAAY,IAAA,CAAK,uBAAuB,GAAA,EAAK;AAChE,QAAA,OAAO,MAAA,CAAO,WAAA;AAAA,MAChB;AAAA,IACF;AAGA,IAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,QAAQ,CAAA;AAC3D,IAAA,IAAI,gBAAA,EAAkB;AACpB,MAAA,OAAO,gBAAA;AAAA,IACT;AAEA,IAAA,MAAM,gBAAgB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,SAAA,EAAU;AACjC,QAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,SAAA;AAEjC,QAAA,IAAA,CAAK,KAAA,CAAM,IAAI,QAAA,EAAU;AAAA,UACvB,aAAa,QAAA,CAAS,WAAA;AAAA,UACtB,SAAA;AAAA,UACA,OAAO,QAAA,CAAS;AAAA,SACjB,CAAA;AAED,QAAA,OAAO,QAAA,CAAS,WAAA;AAAA,MAClB,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,gBAAA,CAAiB,OAAO,QAAQ,CAAA;AAAA,MACvC;AAAA,IACF,CAAA,GAAG;AAEH,IAAA,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,QAAA,EAAU,YAAY,CAAA;AAChD,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKO,WAAW,QAAA,EAAyB;AACzC,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,QAAQ,CAAA;AAAA,IAC5B,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,MAAM,KAAA,EAAM;AAAA,IACnB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,IAAI,QAAA,EAA2C;AACpD,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AAAA,EAChC;AACF;;;AClFO,IAAM,YAAN,MAAgB;AAAA,EACJ,MAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EAEjB,WAAA,CAAY,QAAwB,KAAA,EAAuB;AACzD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA,IAAS,IAAI,aAAA,EAAc;AACxC,IAAA,IAAA,CAAK,OAAA,GAAA,CAAW,OAAO,QAAA,IAAY,MAAA,CAAO,WAAW,0BAAA,EAA4B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACnG,IAAA,IAAA,CAAK,YAAY,MAAA,CAAO,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAa,eAAe,MAAA,EAAoC;AAC9D,IAAA,MAAM,QAAA,GAAW,MAAA,IAAU,MAAA,CAAO,MAAA,GAAS,CAAA,GAAI,OAAO,IAAA,EAAK,CAAE,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AACzE,IAAA,MAAM,WAAW,CAAA,IAAA,EAAO,IAAA,CAAK,OAAO,QAAA,IAAY,SAAS,IAAI,QAAQ,CAAA,CAAA;AAErE,IAAA,OAAO,IAAA,CAAK,MAAM,UAAA,CAAW,QAAA,EAAU,MAAM,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAK,CAAA;AAAA,EACtF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,kBAAkB,MAAA,EAAoC;AACjE,IAAA,MAAM,QAAA,GAAW,MAAA,IAAU,MAAA,CAAO,MAAA,GAAS,CAAA,GAAI,OAAO,IAAA,EAAK,CAAE,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AACzE,IAAA,MAAM,WAAW,CAAA,IAAA,EAAO,IAAA,CAAK,OAAO,QAAA,IAAY,SAAS,IAAI,QAAQ,CAAA,CAAA;AAErE,IAAA,OAAO,IAAA,CAAK,MAAM,UAAA,CAAW,QAAA,EAAU,MAAM,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA,EAAG,IAAI,CAAA;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA,EAKO,UAAA,GAAmB;AACxB,IAAA,IAAA,CAAK,MAAM,UAAA,EAAW;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,kBAAkB,KAAA,EAAoF;AAClH,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,IAAA,CAAK,OAAO,YAAA,EAAc;AACtD,MAAA,MAAM,IAAI,oBAAoB,yEAAyE,CAAA;AAAA,IACzG;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,YAAA,CAAA;AAEhC,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,CAAgB;AAAA,MACrC,UAAA,EAAY,oBAAA;AAAA,MACZ,SAAA,EAAW,KAAK,MAAA,CAAO,QAAA;AAAA,MACvB,aAAA,EAAe,KAAK,MAAA,CAAO;AAAA,KAC5B,CAAA;AAED,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,UAAA,CAAW,GAAA,CAAI,SAAS,KAAK,CAAA;AAAA,IAC/B;AAEA,IAAA,OAAO,gBAAA;AAAA,MACL,YAAY;AACV,QAAA,IAAI,QAAA;AACJ,QAAA,IAAI;AACF,UAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,UAAA,MAAM,SAAA,GAAY,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,CAAK,MAAA,CAAO,OAAA,IAAW,GAAK,CAAA;AAEnF,UAAA,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU;AAAA,YACxC,MAAA,EAAQ,MAAA;AAAA,YACR,OAAA,EAAS;AAAA,cACP,cAAA,EAAgB,mCAAA;AAAA,cAChB,MAAA,EAAQ;AAAA,aACV;AAAA,YACA,IAAA,EAAM,WAAW,QAAA,EAAS;AAAA,YAC1B,QAAQ,UAAA,CAAW;AAAA,WACpB,CAAA;AAED,UAAA,YAAA,CAAa,SAAS,CAAA;AAAA,QACxB,SAAS,GAAA,EAAc;AACrB,UAAA,MAAM,IAAI,YAAA,CAAa,CAAA,uCAAA,EAA0C,QAAQ,IAAI,GAAG,CAAA;AAAA,QAClF;AAEA,QAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,UAAA,MAAM,gBAAA,GAAmB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AAC3D,UAAA,MAAM,aAAA,GAAgB,gBAAA,GAAmB,QAAA,CAAS,gBAAA,EAAkB,EAAE,CAAA,GAAI,KAAA,CAAA;AAC1E,UAAA,MAAM,IAAI,cAAA,CAAe,uCAAA,EAAyC,MAAM,aAAc,CAAA,GAAI,SAAY,aAAa,CAAA;AAAA,QACrH;AAEA,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,IAAI,YAAA;AACJ,UAAA,IAAI;AACF,YAAA,YAAA,GAAgB,MAAM,SAAS,IAAA,EAAK;AAAA,UACtC,CAAA,CAAA,MAAQ;AAAA,UAER;AAEA,UAAA,MAAM,eAAe,YAAA,EAAc,KAAA,EAAO,OAAA,IAAW,CAAA,uCAAA,EAA0C,SAAS,MAAM,CAAA,CAAA;AAC9G,UAAA,MAAM,SAAA,GAAY,YAAA,EAAc,KAAA,EAAO,IAAA,IAAQ,sBAAA;AAE/C,UAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK;AACtD,YAAA,MAAM,IAAI,mBAAA,CAAoB,YAAA,EAAc,SAAS,CAAA;AAAA,UACvD;AAEA,UAAA,MAAM,IAAI,aAAA,CAAc,YAAA,EAAc,SAAA,EAAW,SAAS,MAAM,CAAA;AAAA,QAClE;AAEA,QAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAElC,QAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,UAAA,MAAM,IAAI,aAAA,CAAc,4DAAA,EAA8D,kBAAkB,CAAA;AAAA,QAC1G;AAEA,QAAA,OAAO;AAAA,UACL,aAAa,IAAA,CAAK,YAAA;AAAA,UAClB,SAAA,EAAW,KAAK,UAAA,IAAc,IAAA;AAAA,UAC9B,OAAO,IAAA,CAAK;AAAA,SACd;AAAA,MACF,CAAA;AAAA,MACA,EAAE,WAAA,EAAa,IAAA,CAAK,MAAA,CAAO,WAAA;AAAY,KACzC;AAAA,EACF;AACF;;;ACzHO,IAAM,iBAAN,MAAqB;AAAA,EACV,MAAA;AAAA,EACA,GAAA;AAAA,EACA,GAAA;AAAA,EAEhB,YAAY,MAAA,EAAwB;AAClC,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,QAAA,EAAU,MAAA,CAAO,QAAA,IAAY,MAAA,CAAO,OAAA,IAAW,0BAAA;AAAA,MAC/C,GAAG;AAAA,KACL;AAEA,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,SAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AACpC,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,SAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,eAAe,MAAA,EAAoC;AAC9D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,cAAA,CAAe,MAAM,CAAA;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,cAAc,KAAA,EAAe;AACxC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,aAAA,CAAc,KAAK,CAAA;AAAA,EACrC;AACF","file":"index.js","sourcesContent":["import { ApiErrorDetail } from './types.js';\n\n/**\n * Base exception class for all Serafort SDK errors.\n */\nexport class SerafortError extends Error {\n public readonly code: string;\n public readonly status: number;\n public readonly details: ApiErrorDetail[];\n\n constructor(message: string, code = 'SERAFORT_ERROR', status = 500, details: ApiErrorDetail[] = []) {\n super(message);\n this.name = 'SerafortError';\n this.code = code;\n this.status = status;\n this.details = details;\n Object.setPrototypeOf(this, new.target.prototype);\n }\n}\n\n/**\n * Authentication failed (invalid credentials, expired session, invalid JWT signature).\n */\nexport class AuthenticationError extends SerafortError {\n constructor(message = 'Authentication failed or session is invalid.', code = 'AUTHENTICATION_ERROR', details: ApiErrorDetail[] = []) {\n super(message, code, 401, details);\n this.name = 'AuthenticationError';\n }\n}\n\n/**\n * Multi-Factor Authentication required to complete access.\n */\nexport class MfaRequiredError extends SerafortError {\n public readonly challengeId?: string;\n public readonly supportedMethods?: string[];\n\n constructor(\n message = 'Multi-factor authentication required.',\n challengeId?: string,\n supportedMethods?: string[],\n details: ApiErrorDetail[] = []\n ) {\n super(message, 'MFA_REQUIRED', 403, details);\n this.name = 'MfaRequiredError';\n this.challengeId = challengeId;\n this.supportedMethods = supportedMethods;\n }\n}\n\n/**\n * Request payload failed validation checks.\n */\nexport class ValidationError extends SerafortError {\n constructor(message = 'Validation failed on input parameters.', details: ApiErrorDetail[] = []) {\n super(message, 'VALIDATION_ERROR', 422, details);\n this.name = 'ValidationError';\n }\n}\n\n/**\n * Rate limit exceeded (HTTP 429).\n */\nexport class RateLimitError extends SerafortError {\n public readonly retryAfterSeconds?: number;\n\n constructor(message = 'Rate limit exceeded. Please slow down requests.', retryAfterSeconds?: number, details: ApiErrorDetail[] = []) {\n super(message, 'RATE_LIMIT_EXCEEDED', 429, details);\n this.name = 'RateLimitError';\n this.retryAfterSeconds = retryAfterSeconds;\n }\n}\n\n/**\n * Requested resource or tenant does not exist.\n */\nexport class NotFoundError extends SerafortError {\n constructor(message = 'Resource not found.', code = 'NOT_FOUND', details: ApiErrorDetail[] = []) {\n super(message, code, 404, details);\n this.name = 'NotFoundError';\n }\n}\n\n/**\n * Network failure, client-side timeout, or host unreachable.\n */\nexport class NetworkError extends SerafortError {\n constructor(message = 'Failed to connect to Serafort IAM service.', cause?: unknown) {\n super(message, 'NETWORK_ERROR', 0);\n this.name = 'NetworkError';\n if (cause) {\n this.cause = cause;\n }\n }\n}\n","import { AuthenticationError } from '../errors.js';\n\nexport interface DecodedJwt<T = Record<string, unknown>> {\n header: {\n alg: string;\n typ?: string;\n kid?: string;\n [key: string]: unknown;\n };\n payload: T;\n signature: Uint8Array;\n signingInput: Uint8Array;\n}\n\n/**\n * Decodes a base64url-encoded string into raw Uint8Array bytes.\n */\nexport function base64UrlToBytes(str: string): Uint8Array {\n if (typeof Buffer !== 'undefined') {\n return new Uint8Array(Buffer.from(str, 'base64url'));\n }\n\n let base64 = str.replace(/-/g, '+').replace(/_/g, '/');\n const pad = base64.length % 4;\n if (pad === 2) {\n base64 += '==';\n } else if (pad === 3) {\n base64 += '=';\n }\n\n const binaryStr = atob(base64);\n const bytes = new Uint8Array(binaryStr.length);\n for (let i = 0; i < binaryStr.length; i++) {\n bytes[i] = binaryStr.charCodeAt(i);\n }\n return bytes;\n}\n\n/**\n * Decodes a base64url-encoded string into a UTF-8 string.\n */\nexport function base64UrlDecode(str: string): string {\n if (typeof Buffer !== 'undefined') {\n return Buffer.from(str, 'base64url').toString('utf8');\n }\n\n const bytes = base64UrlToBytes(str);\n return new TextDecoder().decode(bytes);\n}\n\n/**\n * Parses and separates the JWT into header, payload, signature, and signing input.\n */\nexport function parseJwt<T = Record<string, unknown>>(token: string): DecodedJwt<T> {\n if (!token || typeof token !== 'string') {\n throw new AuthenticationError('JWT token must be a non-empty string.');\n }\n\n const parts = token.split('.');\n if (parts.length !== 3) {\n throw new AuthenticationError('Invalid JWT format: token must contain exactly 3 dot-separated parts.');\n }\n\n const [headerB64, payloadB64, signatureB64] = parts as [string, string, string];\n\n try {\n const headerJson = base64UrlDecode(headerB64);\n const header = JSON.parse(headerJson) as DecodedJwt['header'];\n\n const payloadJson = base64UrlDecode(payloadB64);\n const payload = JSON.parse(payloadJson) as T;\n\n const signature = base64UrlToBytes(signatureB64);\n const signingInput = new TextEncoder().encode(`${headerB64}.${payloadB64}`);\n\n return {\n header,\n payload,\n signature,\n signingInput,\n };\n } catch (err: unknown) {\n if (err instanceof AuthenticationError) throw err;\n throw new AuthenticationError(`Failed to parse JWT token: ${err instanceof Error ? err.message : String(err)}`);\n }\n}\n","import { AuthenticationError, NetworkError } from '../errors.js';\nimport { JWK, JWKS, SerafortConfig } from '../types.js';\n\nexport class JwksClient {\n private readonly jwksUrl: string;\n private readonly fetchImpl: typeof fetch;\n private cachedKeys: Map<string, CryptoKey> = new Map();\n private lastFetchedAt = 0;\n private readonly cacheTtlMs: number;\n\n constructor(config: SerafortConfig, cacheTtlMs = 3600_000) {\n const baseUrl = (config.endpoint || config.baseUrl || 'https://api.serafort.com').replace(/\\/+$/, '');\n this.jwksUrl = `${baseUrl}/.well-known/jwks.json`;\n this.fetchImpl = config.fetch || globalThis.fetch.bind(globalThis);\n this.cacheTtlMs = cacheTtlMs;\n }\n\n /**\n * Retrieves the CryptoKey matching the key ID (kid) from cache, or fetches from the JWKS endpoint.\n */\n public async getVerificationKey(kid?: string, alg = 'RS256'): Promise<CryptoKey> {\n const now = Date.now();\n const isCacheExpired = now - this.lastFetchedAt > this.cacheTtlMs;\n\n if (this.cachedKeys.size > 0 && !isCacheExpired) {\n if (kid && this.cachedKeys.has(kid)) {\n return this.cachedKeys.get(kid)!;\n }\n // If no kid specified but we have exactly 1 key cached, return it\n if (!kid && this.cachedKeys.size === 1) {\n return Array.from(this.cachedKeys.values())[0]!;\n }\n }\n\n // Refresh keys from JWKS endpoint\n await this.refreshJwks();\n\n if (kid && this.cachedKeys.has(kid)) {\n return this.cachedKeys.get(kid)!;\n }\n\n if (!kid && this.cachedKeys.size > 0) {\n return Array.from(this.cachedKeys.values())[0]!;\n }\n\n throw new AuthenticationError(\n `No matching public key found in JWKS for kid \"${kid || 'unspecified'}\" and alg \"${alg}\".`,\n 'KEY_NOT_FOUND'\n );\n }\n\n /**\n * Refreshes public keys from the JWKS endpoint and imports them as CryptoKeys.\n */\n public async refreshJwks(): Promise<void> {\n let response: Response;\n try {\n response = await this.fetchImpl(this.jwksUrl, {\n headers: { Accept: 'application/json' },\n });\n } catch (err) {\n throw new NetworkError(`Failed to fetch JWKS from ${this.jwksUrl}`, err);\n }\n\n if (!response.ok) {\n throw new AuthenticationError(`Failed to fetch JWKS (status ${response.status})`, 'JWKS_FETCH_FAILED');\n }\n\n const jwks = (await response.json()) as JWKS;\n if (!jwks.keys || !Array.isArray(jwks.keys)) {\n throw new AuthenticationError('Invalid JWKS response format: \"keys\" array missing', 'INVALID_JWKS');\n }\n\n const newKeys = new Map<string, CryptoKey>();\n\n for (const key of jwks.keys) {\n if (!key.kid) continue;\n try {\n const cryptoKey = await this.importJwk(key);\n newKeys.set(key.kid, cryptoKey);\n } catch {\n // Skip keys with unsupported algorithms or malformed structures\n }\n }\n\n this.cachedKeys = newKeys;\n this.lastFetchedAt = Date.now();\n }\n\n /**\n * Imports a raw JWK into a Web Crypto CryptoKey.\n */\n public async importJwk(key: JWK): Promise<CryptoKey> {\n const subtle = globalThis.crypto?.subtle;\n if (!subtle) {\n throw new AuthenticationError('Web Crypto API (crypto.subtle) is not available in this environment.');\n }\n\n const alg = key.alg || (key.kty === 'RSA' ? 'RS256' : 'ES256');\n\n let importAlgorithm: RsaHashedImportParams | EcKeyImportParams;\n\n if (alg.startsWith('RS')) {\n const hashName = alg === 'RS384' ? 'SHA-384' : alg === 'RS512' ? 'SHA-512' : 'SHA-256';\n importAlgorithm = {\n name: 'RSASSA-PKCS1-v1_5',\n hash: { name: hashName },\n };\n } else if (alg.startsWith('ES')) {\n const namedCurve = alg === 'ES384' ? 'P-384' : alg === 'ES512' ? 'P-521' : 'P-256';\n importAlgorithm = {\n name: 'ECDSA',\n namedCurve,\n };\n } else {\n throw new AuthenticationError(`Unsupported key algorithm: ${alg}`);\n }\n\n return subtle.importKey(\n 'jwk',\n key,\n importAlgorithm,\n false, // non-extractable\n ['verify']\n );\n }\n}\n","import { AuthenticationError } from '../errors.js';\nimport { SerafortConfig, UserContext } from '../types.js';\nimport { parseJwt } from '../utils/jwt.js';\nimport { JwksClient } from './jwks.js';\n\nexport interface TokenValidationOptions {\n /** Expected JWT issuer (iss) */\n expectedIssuer?: string;\n /** Expected JWT audience (aud) */\n expectedAudience?: string;\n /** Allowed clock tolerance in seconds (default: 60s) */\n clockToleranceSeconds?: number;\n /** If true, skips cryptographic signature verification (ONLY for offline dev/testing) */\n skipSignatureCheck?: boolean;\n}\n\nexport class B2BModule {\n public readonly config: SerafortConfig;\n private readonly jwksClient: JwksClient;\n private readonly baseUrl: string;\n\n constructor(config: SerafortConfig, jwksClient?: JwksClient) {\n this.config = config;\n this.jwksClient = jwksClient ?? new JwksClient(config);\n this.baseUrl = (config.endpoint || config.baseUrl || 'https://api.serafort.com').replace(/\\/+$/, '');\n }\n\n /**\n * Validates a JWT token locally: checks signature against cached JWKS, verifies expiration,\n * issuer, and audience, and decodes claims into a strongly-typed UserContext.\n */\n public async validateToken(token: string, options: TokenValidationOptions = {}): Promise<UserContext> {\n const decoded = parseJwt<Record<string, unknown>>(token);\n const now = Math.floor(Date.now() / 1000);\n const clockTolerance = options.clockToleranceSeconds ?? 60;\n\n const payload = decoded.payload;\n\n // 1. Expiration check\n if (typeof payload['exp'] === 'number') {\n if (payload['exp'] + clockTolerance < now) {\n throw new AuthenticationError('Token has expired.', 'TOKEN_EXPIRED');\n }\n }\n\n // 2. Not before check\n if (typeof payload['nbf'] === 'number') {\n if (payload['nbf'] - clockTolerance > now) {\n throw new AuthenticationError('Token not yet valid.', 'TOKEN_NOT_YET_VALID');\n }\n }\n\n // 3. Issuer check\n const expectedIssuer = options.expectedIssuer || this.baseUrl;\n if (expectedIssuer && typeof payload['iss'] === 'string') {\n if (payload['iss'] !== expectedIssuer) {\n throw new AuthenticationError(\n `Invalid token issuer. Expected \"${expectedIssuer}\", received \"${payload['iss']}\".`,\n 'INVALID_ISSUER'\n );\n }\n }\n\n // 4. Audience check\n if (options.expectedAudience && payload['aud']) {\n const aud = Array.isArray(payload['aud']) ? payload['aud'] : [payload['aud']];\n if (!aud.includes(options.expectedAudience)) {\n throw new AuthenticationError(\n `Invalid token audience. Expected \"${options.expectedAudience}\".`,\n 'INVALID_AUDIENCE'\n );\n }\n }\n\n // 5. Cryptographic signature check (Web Crypto API)\n if (!options.skipSignatureCheck) {\n const subtle = globalThis.crypto?.subtle;\n if (!subtle) {\n throw new AuthenticationError('Web Crypto API (crypto.subtle) is not available to verify JWT signature.');\n }\n\n const kid = decoded.header.kid;\n const alg = decoded.header.alg || 'RS256';\n\n const cryptoKey = await this.jwksClient.getVerificationKey(kid, alg);\n\n let verifyAlgorithm: AlgorithmIdentifier | RsaPssParams | EcdsaParams;\n if (alg.startsWith('RS')) {\n verifyAlgorithm = { name: 'RSASSA-PKCS1-v1_5' };\n } else if (alg.startsWith('ES')) {\n verifyAlgorithm = { name: 'ECDSA', hash: { name: alg === 'ES384' ? 'SHA-384' : alg === 'ES512' ? 'SHA-512' : 'SHA-256' } };\n } else {\n throw new AuthenticationError(`Unsupported JWT algorithm for signature verification: ${alg}`);\n }\n\n const isValid = await subtle.verify(\n verifyAlgorithm,\n cryptoKey,\n decoded.signature as unknown as BufferSource,\n decoded.signingInput as unknown as BufferSource\n );\n\n if (!isValid) {\n throw new AuthenticationError('JWT signature verification failed.', 'INVALID_SIGNATURE');\n }\n }\n\n // 6. Map into UserContext\n return this.mapClaimsToUserContext(payload);\n }\n\n /**\n * Checks if the user context contains a specific granular permission.\n * Supports wildcard matching (e.g. \"org:*\" matches \"org:read\").\n */\n public hasPermission(userContext: UserContext, requiredPermission: string): boolean {\n if (!userContext.permissions || userContext.permissions.length === 0) {\n return false;\n }\n\n if (userContext.permissions.includes('*') || userContext.permissions.includes(requiredPermission)) {\n return true;\n }\n\n return userContext.permissions.some((perm) => {\n if (perm.endsWith(':*')) {\n const prefix = perm.slice(0, -2);\n return requiredPermission.startsWith(prefix);\n }\n return false;\n });\n }\n\n /**\n * Checks if the user context contains a specific role.\n */\n public hasRole(userContext: UserContext, requiredRole: string): boolean {\n return Array.isArray(userContext.roles) && userContext.roles.includes(requiredRole);\n }\n\n /**\n * Constructs the Enterprise SSO Login URL for a specific tenant/organization.\n */\n public getLoginUrl(tenantId: string, redirectUri: string, options: { state?: string; connection?: string } = {}): string {\n const url = new URL(`${this.baseUrl}/api/auth/sso/login`);\n url.searchParams.set('tenant_id', tenantId);\n url.searchParams.set('redirect_uri', redirectUri);\n\n if (options.state) {\n url.searchParams.set('state', options.state);\n }\n if (options.connection) {\n url.searchParams.set('connection', options.connection);\n }\n\n return url.toString();\n }\n\n /**\n * Maps un-enveloped JWT claims to standard UserContext.\n */\n private mapClaimsToUserContext(claims: Record<string, unknown>): UserContext {\n const userId = String(claims['sub'] || claims['id'] || claims['user_id'] || '');\n const tenantId = String(\n claims['tenant_id'] ||\n claims['org_id'] ||\n claims['tid'] ||\n (claims['app_metadata'] as Record<string, unknown> | undefined)?.['tenant_id'] ||\n ''\n );\n const email = claims['email'] ? String(claims['email']) : undefined;\n\n // Roles extraction\n let roles: string[] = [];\n if (Array.isArray(claims['roles'])) {\n roles = claims['roles'].map(String);\n } else if (typeof claims['role'] === 'string') {\n roles = [claims['role']];\n } else if (typeof claims['roles'] === 'string') {\n roles = claims['roles'].split(',').map((r) => r.trim());\n }\n\n // Permissions extraction\n let permissions: string[] = [];\n if (Array.isArray(claims['permissions'])) {\n permissions = claims['permissions'].map(String);\n } else if (typeof claims['scope'] === 'string') {\n permissions = claims['scope'].split(' ').map((s) => s.trim()).filter(Boolean);\n }\n\n return {\n userId,\n tenantId,\n email,\n roles,\n permissions,\n claims,\n };\n }\n}\n","import { RateLimitError, NetworkError } from '../errors.js';\nimport { RetryConfig } from '../types.js';\n\nexport interface ExecuteWithRetryOptions {\n retryConfig?: RetryConfig;\n signal?: AbortSignal;\n}\n\n/**\n * Executes an async operation with exponential backoff and jitter on retryable errors\n * (HTTP 429, 502, 503, 504, and transient network errors).\n */\nexport async function executeWithRetry<T>(\n fn: () => Promise<T>,\n options: ExecuteWithRetryOptions = {}\n): Promise<T> {\n const maxRetries = options.retryConfig?.maxRetries ?? 3;\n const initialDelay = options.retryConfig?.initialDelayMs ?? 500;\n const maxDelay = options.retryConfig?.maxDelayMs ?? 5000;\n\n let attempt = 0;\n\n while (true) {\n try {\n return await fn();\n } catch (err: unknown) {\n attempt++;\n if (attempt > maxRetries) {\n throw err;\n }\n\n const isRetryable = isErrorRetryable(err);\n if (!isRetryable) {\n throw err;\n }\n\n // Check if aborted\n if (options.signal?.aborted) {\n throw new NetworkError('Request aborted by caller', options.signal.reason);\n }\n\n let delay = initialDelay * Math.pow(2, attempt - 1);\n // If error is RateLimitError and provides retryAfterSeconds, respect it if within reason\n if (err instanceof RateLimitError && err.retryAfterSeconds) {\n delay = Math.max(delay, err.retryAfterSeconds * 1000);\n }\n\n // Add jitter: +/- 20%\n const jitter = delay * (0.8 + Math.random() * 0.4);\n const cappedDelay = Math.min(jitter, maxDelay);\n\n await sleep(cappedDelay, options.signal);\n }\n }\n}\n\nfunction isErrorRetryable(err: unknown): boolean {\n if (err instanceof RateLimitError) {\n return true;\n }\n if (err instanceof NetworkError) {\n return true;\n }\n if (err instanceof Error) {\n const msg = err.message.toLowerCase();\n if (\n msg.includes('network') ||\n msg.includes('fetch failed') ||\n msg.includes('econnreset') ||\n msg.includes('econnrefused') ||\n msg.includes('etimedout')\n ) {\n return true;\n }\n }\n return false;\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n return new Promise((resolve, reject) => {\n if (signal?.aborted) {\n return reject(new NetworkError('Request aborted while sleeping', signal.reason));\n }\n\n const timer = setTimeout(() => {\n resolve();\n }, ms);\n\n if (signal) {\n signal.addEventListener(\n 'abort',\n () => {\n clearTimeout(timer);\n reject(new NetworkError('Request aborted', signal.reason));\n },\n { once: true }\n );\n }\n });\n}\n","export interface CachedToken {\n accessToken: string;\n expiresAt: number; // Unix timestamp in seconds\n scope?: string;\n}\n\n/**\n * High-concurrency, Promise-safe in-memory cache for Machine-to-Machine (M2M) access tokens.\n * Automatically refreshes before expiration and coalesces concurrent refresh requests\n * to avoid thundering-herd problems against the IAM server.\n */\nexport class M2MTokenCache {\n private cache = new Map<string, CachedToken>();\n private inFlightRequests = new Map<string, Promise<string>>();\n\n /**\n * Refresh window buffer in seconds (default: 300s = 5 minutes).\n * A token expiring within this window will be refreshed proactively.\n */\n private readonly refreshBufferSeconds: number;\n\n constructor(refreshBufferSeconds = 300) {\n this.refreshBufferSeconds = refreshBufferSeconds;\n }\n\n /**\n * Retrieves a cached token if valid, or invokes the refresher function.\n * If a fetch is already in flight for the given cache key, coalesces into that existing promise.\n */\n public async getOrFetch(\n cacheKey: string,\n refresher: () => Promise<{ accessToken: string; expiresIn: number; scope?: string }>,\n force = false\n ): Promise<string> {\n const now = Math.floor(Date.now() / 1000);\n\n if (!force) {\n const cached = this.cache.get(cacheKey);\n if (cached && cached.expiresAt - this.refreshBufferSeconds > now) {\n return cached.accessToken;\n }\n }\n\n // Coalesce in-flight requests for the same cache key\n const existingInFlight = this.inFlightRequests.get(cacheKey);\n if (existingInFlight) {\n return existingInFlight;\n }\n\n const fetchPromise = (async () => {\n try {\n const response = await refresher();\n const expiresAt = now + response.expiresIn;\n\n this.cache.set(cacheKey, {\n accessToken: response.accessToken,\n expiresAt,\n scope: response.scope,\n });\n\n return response.accessToken;\n } finally {\n this.inFlightRequests.delete(cacheKey);\n }\n })();\n\n this.inFlightRequests.set(cacheKey, fetchPromise);\n return fetchPromise;\n }\n\n /**\n * Invalidates cached token for a specific cache key or clears all.\n */\n public invalidate(cacheKey?: string): void {\n if (cacheKey) {\n this.cache.delete(cacheKey);\n } else {\n this.cache.clear();\n }\n }\n\n /**\n * Returns current cached item metadata (for diagnostics and testing).\n */\n public get(cacheKey: string): CachedToken | undefined {\n return this.cache.get(cacheKey);\n }\n}\n","import { AuthenticationError, RateLimitError, SerafortError, NetworkError } from '../errors.js';\nimport { SerafortConfig, OAuthTokenResponse, ApiErrorEnvelope } from '../types.js';\nimport { executeWithRetry } from '../utils/retry.js';\nimport { M2MTokenCache } from './cache.js';\n\nexport class M2MModule {\n private readonly config: SerafortConfig;\n private readonly cache: M2MTokenCache;\n private readonly baseUrl: string;\n private readonly fetchImpl: typeof fetch;\n\n constructor(config: SerafortConfig, cache?: M2MTokenCache) {\n this.config = config;\n this.cache = cache ?? new M2MTokenCache();\n this.baseUrl = (config.endpoint || config.baseUrl || 'https://api.serafort.com').replace(/\\/+$/, '');\n this.fetchImpl = config.fetch || globalThis.fetch.bind(globalThis);\n }\n\n /**\n * Retrieves a valid M2M access token.\n * Pulls from memory cache if valid and outside the refresh buffer.\n * If nearing expiration or missing, transparently requests a new token.\n */\n public async getAccessToken(scopes?: string[]): Promise<string> {\n const scopeStr = scopes && scopes.length > 0 ? scopes.sort().join(' ') : '';\n const cacheKey = `m2m:${this.config.clientId || 'default'}:${scopeStr}`;\n\n return this.cache.getOrFetch(cacheKey, () => this.fetchTokenNetwork(scopeStr), false);\n }\n\n /**\n * Forces a refresh of the access token, bypassing the cache.\n * Useful when an API endpoint returns 401 due to early revocation.\n */\n public async forceRefreshToken(scopes?: string[]): Promise<string> {\n const scopeStr = scopes && scopes.length > 0 ? scopes.sort().join(' ') : '';\n const cacheKey = `m2m:${this.config.clientId || 'default'}:${scopeStr}`;\n\n return this.cache.getOrFetch(cacheKey, () => this.fetchTokenNetwork(scopeStr), true);\n }\n\n /**\n * Clears the in-memory token cache.\n */\n public clearCache(): void {\n this.cache.invalidate();\n }\n\n /**\n * Performs the HTTP request to the OAuth2 token endpoint using Client Credentials grant.\n */\n private async fetchTokenNetwork(scope: string): Promise<{ accessToken: string; expiresIn: number; scope?: string }> {\n if (!this.config.clientId || !this.config.clientSecret) {\n throw new AuthenticationError('M2M authentication requires clientId and clientSecret to be configured.');\n }\n\n const tokenUrl = `${this.baseUrl}/oauth/token`;\n\n const bodyParams = new URLSearchParams({\n grant_type: 'client_credentials',\n client_id: this.config.clientId,\n client_secret: this.config.clientSecret,\n });\n\n if (scope) {\n bodyParams.set('scope', scope);\n }\n\n return executeWithRetry(\n async () => {\n let response: Response;\n try {\n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), this.config.timeout ?? 10000);\n\n response = await this.fetchImpl(tokenUrl, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/x-www-form-urlencoded',\n Accept: 'application/json',\n },\n body: bodyParams.toString(),\n signal: controller.signal,\n });\n\n clearTimeout(timeoutId);\n } catch (err: unknown) {\n throw new NetworkError(`Failed to connect to token endpoint at ${tokenUrl}`, err);\n }\n\n if (response.status === 429) {\n const retryAfterHeader = response.headers.get('Retry-After');\n const retryAfterSec = retryAfterHeader ? parseInt(retryAfterHeader, 10) : undefined;\n throw new RateLimitError('Rate limit exceeded on token endpoint', isNaN(retryAfterSec!) ? undefined : retryAfterSec);\n }\n\n if (!response.ok) {\n let errorPayload: ApiErrorEnvelope | undefined;\n try {\n errorPayload = (await response.json()) as ApiErrorEnvelope;\n } catch {\n // Non-JSON error body\n }\n\n const errorMessage = errorPayload?.error?.message || `OAuth token request failed with status ${response.status}`;\n const errorCode = errorPayload?.error?.code || 'TOKEN_REQUEST_FAILED';\n\n if (response.status === 401 || response.status === 400) {\n throw new AuthenticationError(errorMessage, errorCode);\n }\n\n throw new SerafortError(errorMessage, errorCode, response.status);\n }\n\n const data = (await response.json()) as OAuthTokenResponse;\n\n if (!data.access_token) {\n throw new SerafortError('OAuth token endpoint response did not contain access_token', 'INVALID_RESPONSE');\n }\n\n return {\n accessToken: data.access_token,\n expiresIn: data.expires_in || 3600,\n scope: data.scope,\n };\n },\n { retryConfig: this.config.retryPolicy }\n );\n }\n}\n","import { B2BModule } from './b2b/b2b.js';\nimport { M2MModule } from './m2m/m2m.js';\nimport { SerafortConfig } from './types.js';\n\n/**\n * Unified Serafort SDK Client.\n * Provides Machine Identity (M2M) token caching and B2B User Identity / RBAC capabilities.\n */\nexport class SerafortClient {\n public readonly config: SerafortConfig;\n public readonly m2m: M2MModule;\n public readonly b2b: B2BModule;\n\n constructor(config: SerafortConfig) {\n this.config = {\n endpoint: config.endpoint || config.baseUrl || 'https://api.serafort.com',\n ...config,\n };\n\n this.m2m = new M2MModule(this.config);\n this.b2b = new B2BModule(this.config);\n }\n\n /**\n * Helper shortcut to retrieve an M2M access token.\n */\n public async getAccessToken(scopes?: string[]): Promise<string> {\n return this.m2m.getAccessToken(scopes);\n }\n\n /**\n * Helper shortcut to validate a JWT token and decode its UserContext.\n */\n public async validateToken(token: string) {\n return this.b2b.validateToken(token);\n }\n}\n"]}
|
package/package.json
ADDED
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@serafort/core",
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"type": "module",
|
|
5
|
+
"packageManager": "pnpm@10.32.1",
|
|
6
|
+
"description": "Isomorphic TypeScript core SDK for Serafort authentication, Machine Identity (M2M) resilient token caching, and local B2B JWKS token validation.",
|
|
7
|
+
"main": "./dist/index.cjs",
|
|
8
|
+
"module": "./dist/index.js",
|
|
9
|
+
"types": "./dist/index.d.ts",
|
|
10
|
+
"exports": {
|
|
11
|
+
".": {
|
|
12
|
+
"types": "./dist/index.d.ts",
|
|
13
|
+
"import": "./dist/index.js",
|
|
14
|
+
"require": "./dist/index.cjs",
|
|
15
|
+
"default": "./dist/index.js"
|
|
16
|
+
}
|
|
17
|
+
},
|
|
18
|
+
"files": [
|
|
19
|
+
"dist",
|
|
20
|
+
"README.md"
|
|
21
|
+
],
|
|
22
|
+
"sideEffects": false,
|
|
23
|
+
"license": "MIT",
|
|
24
|
+
"author": "Serafort",
|
|
25
|
+
"repository": {
|
|
26
|
+
"type": "git",
|
|
27
|
+
"url": "git+https://github.com/Serafort/serafort-javascript-sdk.git"
|
|
28
|
+
},
|
|
29
|
+
"bugs": {
|
|
30
|
+
"url": "https://github.com/Serafort/serafort-javascript-sdk/issues"
|
|
31
|
+
},
|
|
32
|
+
"homepage": "https://github.com/Serafort/serafort-javascript-sdk#readme",
|
|
33
|
+
"keywords": [
|
|
34
|
+
"serafort",
|
|
35
|
+
"authentication",
|
|
36
|
+
"auth",
|
|
37
|
+
"sdk",
|
|
38
|
+
"jwt",
|
|
39
|
+
"m2m",
|
|
40
|
+
"sso",
|
|
41
|
+
"rbac",
|
|
42
|
+
"jwks"
|
|
43
|
+
],
|
|
44
|
+
"publishConfig": {
|
|
45
|
+
"access": "public"
|
|
46
|
+
},
|
|
47
|
+
"scripts": {
|
|
48
|
+
"build": "tsup",
|
|
49
|
+
"type-check": "tsc --noEmit",
|
|
50
|
+
"test": "vitest run",
|
|
51
|
+
"test:watch": "vitest",
|
|
52
|
+
"prepare": "npm run build && (husky || true)"
|
|
53
|
+
},
|
|
54
|
+
"devDependencies": {
|
|
55
|
+
"@types/node": "^22.0.0",
|
|
56
|
+
"husky": "^9.1.7",
|
|
57
|
+
"tsup": "^8.3.5",
|
|
58
|
+
"typescript": "^5.7.0",
|
|
59
|
+
"vitest": "^2.1.0"
|
|
60
|
+
}
|
|
61
|
+
}
|