@sponson/adapters 0.0.0-stage → 0.5.0

package/dist/cloudflare.js

@@ -0,0 +1,310 @@
+/**
+ * Cloudflare adapter. One op, `pages_env`: the variables of a Cloudflare Pages project's `preview` or `production`
+ * deployment config (`deployment_configs.<env>.env_vars`), plain text (`vars`) and secret (`secrets`).
+ *
+ * The variables are a map on the project, not objects of their own, so `apply` is read-modify-write: it PATCHes only
+ * the keys this line manages (Cloudflare merges the map; `null` deletes a key), as an idempotent PATCH, then re-reads
+ * the project to check that what it sent landed and that no other key went missing. API facts and their sources are
+ * the numbered assumptions (CF1…) at the top of packages/sim/src/routes/cloudflare.ts.
+ *
+ * Pages has one set of preview variables shared by every preview deployment (CF8): there are no per-branch values.
+ * A key is therefore one resource per environment, `env:<target>:<NAME>`, whatever scope wrote it; a second scope
+ * (another pull request) that declares the same key with another value is refused with OWNED_BY_OTHER_SCOPE.
+ *
+ * Secret values are write-only (CF3): a `secret_text` variable is compared by presence and type, never by value.
+ * See `secretHash` and docs/plan-format.md (`cloudflare.pages_env`).
+ */
+import { SponsonError, canonicalJson, markerKind, sha256 } from "@sponson/core";
+import { ABSENT, SENSITIVE, assertNoPending, clientFor, desiredSide, optionalEnv, paramError, requireEnv, requireProvider, stringParam } from "./common.js";
+import { ShapeError, isObject, isProviderError, obj } from "./http.js";
+const ADAPTER = "cloudflare";
+/** The environment Cloudflare reads; declared once, used by the code below and by the generated docs (`about`). */
+const ABOUT = { credentialEnv: "CLOUDFLARE_API_TOKEN", baseUrlEnv: "CLOUDFLARE_API_URL", title: "Cloudflare Pages", category: "deploy", detect: { deps: ["wrangler", "@cloudflare/next-on-pages"], env: ["CLOUDFLARE_*"], files: ["wrangler.json", "wrangler.jsonc", "wrangler.toml"] } };
+/** Cloudflare's API base URL (CF1). `CLOUDFLARE_API_URL` overrides it; tests and scenarios point that at the sim. */
+export const CLOUDFLARE_DEFAULT_API_URL = "https://api.cloudflare.com/client/v4";
+const TARGETS = ["preview", "production"];
+/** The HTTP client and the project's path, from `providers.cloudflare.{account,project}`. */
+function client(actx) {
+    const token = requireEnv(actx.env, ABOUT.credentialEnv, ADAPTER);
+    const account = requireProvider(actx, "account", ADAPTER);
+    const project = requireProvider(actx, "project", ADAPTER);
+    return {
+        api: clientFor(actx, ADAPTER, { baseUrl: optionalEnv(actx.env, ABOUT.baseUrlEnv) ?? CLOUDFLARE_DEFAULT_API_URL, token }),
+        path: `/accounts/${encodeURIComponent(account)}/pages/projects/${encodeURIComponent(project)}`,
+    };
+}
+// ---------------------------------------------------------------------------
+// Response shape (CF2): { success, errors, messages, result: project }
+// ---------------------------------------------------------------------------
+/** One environment's `env_vars` (nullable in the schema) as a map. A secret's value is dropped whatever it says. */
+function parseVars(v, what) {
+    const out = new Map();
+    if (v === null || v === undefined)
+        return out;
+    for (const [name, e] of Object.entries(obj(v, what))) {
+        if (e === null)
+            continue;
+        const entry = obj(e, `${what}.${name}`);
+        if (typeof entry.type !== "string")
+            throw new ShapeError(`expected ${what}.${name}.type to be a string`);
+        const readable = entry.type === "plain_text" && typeof entry.value === "string";
+        out.set(name, readable ? { type: entry.type, value: entry.value } : { type: entry.type });
+    }
+    return out;
+}
+function parseProject(body) {
+    const env = obj(body, "the response");
+    if (env.success !== true)
+        throw new ShapeError("expected `success` to be true");
+    const configs = obj(obj(env.result, "`result`").deployment_configs, "`result.deployment_configs`");
+    const of = (t) => {
+        const c = configs[t];
+        return c === null || c === undefined ? new Map() : parseVars(obj(c, `\`deployment_configs.${t}\``).env_vars, `\`deployment_configs.${t}.env_vars\``);
+    };
+    return { preview: of("preview"), production: of("production") };
+}
+async function readVars(c, target) {
+    return (await c.api.get(c.path, parseProject))[target];
+}
+/** PATCH a partial `env_vars` map (CF4): a value sets a key, `null` deletes it, keys not named are left alone. */
+async function patchVars(c, target, vars) {
+    // Sets state rather than adding to it, so a dropped connection or a 5xx may be retried.
+    await c.api.patch(c.path, { deployment_configs: { [target]: { env_vars: vars } } }, undefined, { idempotent: true });
+}
+// ---------------------------------------------------------------------------
+// Hashes: one canonical form for read, diff and apply
+// ---------------------------------------------------------------------------
+/** A plain-text variable: its type and value. */
+function plainHash(value) {
+    return sha256(canonicalJson({ type: "plain_text", value }));
+}
+/**
+ * A secret: its type only. Cloudflare never returns a secret's value (CF3) and the adapter API offers no place to
+ * keep a fingerprint, so a secret is equal when it exists as `secret_text`. What that means: a value changed in the
+ * Cloudflare dashboard is not seen as drift; a changed value in the plan is not written unless the line sets
+ * `rewrite_secrets: true` (then every apply sends the secrets again). Deleting it, or turning it into plain text,
+ * is seen.
+ */
+function secretHash() {
+    return sha256(canonicalJson({ type: "secret_text" }));
+}
+function liveHash(v) {
+    if (v.type === "plain_text")
+        return plainHash(v.value ?? "");
+    if (v.type === "secret_text")
+        return secretHash();
+    return sha256(canonicalJson({ type: v.type }));
+}
+function mapParam(params, name) {
+    const v = params[name];
+    if (v === undefined || v === null)
+        return {};
+    if (!isObject(v))
+        throw paramError(ADAPTER, `param \`${name}\` must be an object of NAME → value`, name);
+    return v;
+}
+function envScope(params) {
+    const target = stringParam(params, "target", ADAPTER, "preview");
+    if (!TARGETS.includes(target))
+        throw paramError(ADAPTER, `param \`target\` must be one of ${TARGETS.join(", ")} (got ${JSON.stringify(target)})`, "target");
+    const rewrite = params.rewrite_secrets;
+    if (rewrite !== undefined && rewrite !== null && typeof rewrite !== "boolean")
+        throw paramError(ADAPTER, "param `rewrite_secrets` must be true or false", "rewrite_secrets");
+    const values = new Map();
+    for (const [name, value] of Object.entries(mapParam(params, "vars")))
+        values.set(name, { value, type: "plain_text" });
+    for (const [name, value] of Object.entries(mapParam(params, "secrets"))) {
+        if (values.has(name))
+            throw paramError(ADAPTER, `${name} is in both \`vars\` and \`secrets\`; a variable is either plain text or secret`, "secrets");
+        values.set(name, { value, type: "secret_text" });
+    }
+    for (const name of values.keys())
+        if (name === "")
+            throw paramError(ADAPTER, "a variable name must not be empty", "vars");
+    return { target: target, values, rewriteSecrets: rewrite === true };
+}
+/** The target a run writes by default: production under `--env production`, preview otherwise. */
+function targetFor(ctx) {
+    return ctx.env === "production" ? "production" : "preview";
+}
+/**
+ * Pages has exactly two variable sets, so the line must write the run's own environment. Ownership between scopes
+ * is decided among the scopes of one Sponson environment; a `target: production` line applied under `--env preview`
+ * would be invisible to the production scopes' ledgers (and a preview pull request's destroy would delete it).
+ */
+function assertRunEnvironment(scope, ctx) {
+    if (scope.target === ctx.env)
+        return;
+    throw paramError(ADAPTER, `this line writes the Pages \`${scope.target}\` variables but the run's environment is \`${ctx.env}\`. Pages variables are shared by every deployment of an environment, so Sponson only writes them from a run of that environment: run with \`--env ${scope.target}\`, or limit the line with \`environments: [${scope.target}]\`.`, "target");
+}
+/** Identity: the environment and the name. No branch or scope: every preview deployment shares the set (CF8). */
+function varKey(target, name) {
+    return `env:${target}:${name}`;
+}
+/** Inverse of varKey. A target never contains `:`; a name may. */
+function parseVarKey(key) {
+    const m = /^env:(preview|production):(.+)$/.exec(key);
+    if (!m)
+        throw new SponsonError("INTERNAL", `${ADAPTER}: \`${key}\` is not a pages_env key`, { adapter: ADAPTER, key });
+    return { target: m[1], name: m[2] };
+}
+const SECRET_LABEL = ", secret)";
+function varLabel(target, name, type) {
+    return `${name} (Pages ${target}${type === "secret_text" ? SECRET_LABEL : ")"}`;
+}
+function varRecord(target, name, v) {
+    return { key: varKey(target, name), id: name, hash: liveHash(v), label: varLabel(target, name, v.type) };
+}
+/** One declared variable's diff against its live record. */
+function diffVar(scope, name, desired, live) {
+    const key = varKey(scope.target, name);
+    const label = varLabel(scope.target, name, desired.type);
+    const secret = desired.type === "secret_text";
+    const marker = markerKind(desired.value);
+    if (marker === "keep") {
+        if (live)
+            return { key, kind: "unchanged", label };
+        throw paramError(ADAPTER, `${label} is declared \`{ keep: true }\` but does not exist, so there is no value to keep. Give it a value or remove it.`, secret ? "secrets" : "vars");
+    }
+    const after = desiredSide(desired.value, secret);
+    if (!live)
+        return { key, kind: "create", label, before: ABSENT, after };
+    if (marker === null && !(secret && scope.rewriteSecrets)) {
+        const want = secret ? secretHash() : plainHash(String(desired.value));
+        if (live.hash === want)
+            return { key, kind: "unchanged", label };
+    }
+    return { key, kind: "update", label, before: SENSITIVE, after };
+}
+/** After a write: every variable sent is there as sent, and every other variable that was there still is. */
+function verifyWrite(c, target, sent, before, after) {
+    const wrong = [...sent].filter(([name, s]) => {
+        const v = after.get(name);
+        return !v || v.type !== s.type || (s.type === "plain_text" && v.value !== s.value);
+    });
+    const lost = [...before.keys()].filter((name) => !sent.has(name) && !after.has(name));
+    if (wrong.length === 0 && lost.length === 0)
+        return;
+    const parts = [
+        ...(wrong.length ? [`does not show ${wrong.map(([n]) => n).join(", ")} as written`] : []),
+        ...(lost.length ? [`no longer has ${lost.join(", ")}, which this write did not name (another writer removed them, or the PATCH replaced the map instead of merging it)`] : []),
+    ];
+    throw new SponsonError("PROVIDER_RESPONSE", `${ADAPTER}: after PATCH ${c.path}, the ${target} env_vars ${parts.join("; ")}`, { adapter: ADAPTER, method: "PATCH", path: c.path, written: wrong.map(([n]) => n), lost });
+}
+const pagesEnv = {
+    outputs: {},
+    defaults(params, ctx) {
+        return { ...params, target: params.target ?? targetFor(ctx) };
+    },
+    writesEnvironment(params, ctx) {
+        return typeof params.target === "string" ? params.target : targetFor(ctx);
+    },
+    /**
+     * The environment's `env_vars` map is read-modify-write on one project object that every scope (and a run of the
+     * other environment, for the other map) writes, so the engine serialises writers with a parent lock (ADR 0019).
+     */
+    lockOn(params, provider) {
+        const { account, project } = provider;
+        if (typeof account !== "string" || account === "" || typeof project !== "string" || project === "")
+            return null;
+        const target = typeof params.target === "string" && params.target !== "" ? params.target : "preview";
+        return `cloudflare:${account}:pages:${project}:${target}:env`;
+    },
+    async read(actx, params) {
+        const scope = envScope(params);
+        assertRunEnvironment(scope, actx.ctx);
+        const live = await readVars(client(actx), scope.target);
+        const resources = [];
+        for (const name of scope.values.keys()) {
+            const v = live.get(name);
+            if (v)
+                resources.push(varRecord(scope.target, name, v));
+        }
+        return resources.length ? { resources, outputs: {} } : null;
+    },
+    diff(live, params) {
+        const scope = envScope(params);
+        const byKey = new Map((live?.resources ?? []).map((r) => [r.key, r]));
+        return [...scope.values].map(([name, desired]) => diffVar(scope, name, desired, byKey.get(varKey(scope.target, name))));
+    },
+    async apply(actx, params, live) {
+        assertNoPending(params, ADAPTER);
+        const scope = envScope(params);
+        assertRunEnvironment(scope, actx.ctx);
+        const diffs = new Map(pagesEnv.diff(live, params).map((d) => [d.key, d.kind]));
+        const sent = new Map();
+        for (const [name, d] of scope.values)
+            if (diffs.get(varKey(scope.target, name)) !== "unchanged")
+                sent.set(name, { type: d.type, value: String(d.value) });
+        const created = [...sent.keys()].map((n) => varKey(scope.target, n)).filter((k) => diffs.get(k) === "create");
+        if (sent.size === 0)
+            return { resources: live?.resources ?? [], outputs: {}, created: [] };
+        const c = client(actx);
+        // Read-modify-write: the variables before the write, to check afterwards that no other key was lost.
+        const before = await readVars(c, scope.target);
+        if (created.length)
+            await actx.intend(created);
+        actx.log(`set ${sent.size} Pages ${scope.target} variable(s): ${[...sent.keys()].join(", ")}`);
+        await patchVars(c, scope.target, Object.fromEntries(sent));
+        const after = await readVars(c, scope.target);
+        verifyWrite(c, scope.target, sent, before, after);
+        // A declared variable missing now was not written by this call (verifyWrite checked those): it vanished meanwhile.
+        const resources = [...scope.values.keys()].flatMap((name) => {
+            const v = after.get(name);
+            return v ? [varRecord(scope.target, name, v)] : [];
+        });
+        return { resources, outputs: {}, created };
+    },
+    /** `null` for each key still present, per environment; a project or key already gone is success. */
+    async destroy(actx, resources) {
+        const c = client(actx);
+        const byTarget = new Map();
+        for (const r of resources) {
+            const { target, name } = parseVarKey(r.key);
+            byTarget.set(target, [...(byTarget.get(target) ?? []), name]);
+        }
+        for (const [target, names] of byTarget) {
+            let live;
+            try {
+                live = await readVars(c, target);
+            }
+            catch (e) {
+                if (isProviderError(e, "PROVIDER_NOT_FOUND"))
+                    return;
+                throw e;
+            }
+            const present = names.filter((n) => live.has(n));
+            if (present.length)
+                await patchVars(c, target, Object.fromEntries(present.map((n) => [n, null])));
+        }
+    },
+    /** Every variable of the line's environment, for drift (`unmanaged`) and `sponson init`. */
+    async listScope(actx, params) {
+        const scope = envScope(params);
+        const live = await readVars(client(actx), scope.target);
+        return [...live].map(([name, v]) => varRecord(scope.target, name, v));
+    },
+    /** One line per environment; every variable `{ keep: true }` under `vars` or `secrets`, never its value. */
+    adopt(resources) {
+        const groups = new Map();
+        for (const r of resources) {
+            const { target, name } = parseVarKey(r.key);
+            const g = groups.get(target) ?? { vars: {}, secrets: {}, keys: [] };
+            (r.label?.endsWith(SECRET_LABEL) ? g.secrets : g.vars)[name] = { keep: true };
+            g.keys.push(r.key);
+            groups.set(target, g);
+        }
+        return [...groups].map(([target, g]) => ({
+            id: `pages-env-${target}`,
+            params: { target, ...(Object.keys(g.vars).length ? { vars: g.vars } : {}), ...(Object.keys(g.secrets).length ? { secrets: g.secrets } : {}) },
+            keys: g.keys,
+        }));
+    },
+};
+/**
+ * The Cloudflare adapter (`adapter: cloudflare` in a plan): op `pages_env` manages a Pages project's preview or
+ * production variables. Needs `CLOUDFLARE_API_TOKEN` (account permission "Cloudflare Pages Edit") and
+ * `providers.cloudflare.{account,project}`.
+ */
+export const cloudflareAdapter = { name: ADAPTER, ops: { pages_env: pagesEnv }, about: ABOUT };
+//# sourceMappingURL=cloudflare.js.map

package/dist/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../src/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAgJ,MAAM,eAAe,CAAC;AAC9N,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5J,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAkB,MAAM,WAAW,CAAC;AAEvF,MAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,mHAAmH;AACnH,MAAM,KAAK,GAAG,EAAE,aAAa,EAAE,sBAAsB,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,EAAW,CAAC;AAEnS,qHAAqH;AACrH,MAAM,CAAC,MAAM,0BAA0B,GAAG,sCAAsC,CAAC;AAEjF,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,YAAY,CAAU,CAAC;AAiBnD,6FAA6F;AAC7F,SAAS,MAAM,CAAC,IAAoB;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,0BAA0B,EAAE,KAAK,EAAE,CAAC;QACxH,IAAI,EAAE,aAAa,kBAAkB,CAAC,OAAO,CAAC,mBAAmB,kBAAkB,CAAC,OAAO,CAAC,EAAE;KAC/F,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,oHAAoH;AACpH,SAAS,SAAS,CAAC,CAAU,EAAE,IAAY;IACzC,MAAM,GAAG,GAAW,IAAI,GAAG,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,YAAY,IAAI,IAAI,IAAI,sBAAsB,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QAChF,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;IACnG,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACvJ,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,CAAS,EAAE,MAAc;IAC/C,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,kHAAkH;AAClH,KAAK,UAAU,SAAS,CAAC,CAAS,EAAE,MAAc,EAAE,IAA6D;IAC/G,wFAAwF;IACxF,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,kBAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACvH,CAAC;AAED,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,iDAAiD;AACjD,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU;IACjB,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,UAAU,EAAE,CAAC;IAClD,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAaD,SAAS,QAAQ,CAAC,MAAsB,EAAE,IAAY;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,sCAAsC,EAAE,IAAI,CAAC,CAAC;IACzG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,MAAsB;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnL,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,+CAA+C,EAAE,iBAAiB,CAAC,CAAC;IAC7K,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACtH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,iFAAiF,EAAE,SAAS,CAAC,CAAC;QACrJ,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,UAAU,CAAC,OAAO,EAAE,mCAAmC,EAAE,MAAM,CAAC,CAAC;IAC1H,OAAO,EAAE,MAAM,EAAE,MAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,kGAAkG;AAClG,SAAS,SAAS,CAAC,GAAQ;IACzB,OAAO,GAAG,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAe,EAAE,GAAQ;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG;QAAE,OAAO;IACrC,MAAM,UAAU,CACd,OAAO,EACP,gCAAgC,KAAK,CAAC,MAAM,+CAA+C,GAAG,CAAC,GAAG,sJAAsJ,KAAK,CAAC,MAAM,+CAA+C,KAAK,CAAC,MAAM,MAAM,EACrU,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,iHAAiH;AACjH,SAAS,MAAM,CAAC,MAAc,EAAE,IAAY;IAC1C,OAAO,OAAO,MAAM,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,kEAAkE;AAClE,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,GAAG,OAAO,OAAO,GAAG,2BAA2B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACvH,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,YAAY,GAAG,WAAW,CAAC;AAEjC,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY;IAC1D,OAAO,GAAG,IAAI,WAAW,MAAM,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,CAAU;IACzD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED,4DAA4D;AAC5D,SAAS,OAAO,CAAC,KAAe,EAAE,IAAY,EAAE,OAA0C,EAAE,IAAgC;IAC1H,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,KAAK,iHAAiH,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpL,CAAC;IACD,MAAM,KAAK,GAAa,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxE,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAClE,CAAC;AAED,6GAA6G;AAC7G,SAAS,WAAW,CAAC,CAAS,EAAE,MAAc,EAAE,IAAmD,EAAE,MAAc,EAAE,KAAa;IAChI,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpD,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oHAAoH,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/K,CAAC;IACF,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,GAAG,OAAO,iBAAiB,CAAC,CAAC,IAAI,SAAS,MAAM,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1N,CAAC;AAED,MAAM,QAAQ,GAAW;IACvB,OAAO,EAAE,EAAE;IAEX,QAAQ,CAAC,MAAM,EAAE,GAAG;QAClB,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAG,MAAM,CAAC,MAA6B,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,iBAAiB,CAAC,MAAM,EAAE,GAAG;QAC3B,OAAO,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,QAAQ;QACrB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;QACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAChH,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,OAAO,cAAc,OAAO,UAAU,OAAO,IAAI,MAAM,MAAM,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM;QACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,MAAM;QACf,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;QAC5B,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4C,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,WAAW;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1J,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC9G,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAE3F,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,qGAAqG;QACrG,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,UAAU,KAAK,CAAC,MAAM,iBAAiB,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAClD,mHAAmH;QACnH,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1D,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,eAAe,CAAC,CAAC,EAAE,oBAAoB,CAAC;oBAAE,OAAO;gBACrD,MAAM,CAAC,CAAC;YACV,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM;QAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6G,CAAC;QACpI,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACpE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC9E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,aAAa,MAAM,EAAE;YACzB,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC7I,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC"}

package/dist/common.d.ts

@@ -0,0 +1,73 @@
+import { SponsonError, type AdapterContext, type DiffSide, type ResolvedParams, type ResourceDiff, type ResourceRecord } from "@sponson/core";
+import { type ApiClient, type ApiClientOptions } from "./http.js";
+/**
+ * The adapter authoring API. These helpers are stable and exported from `@sponson/adapters`; third-party
+ * adapters should use them rather than re-implementing the contracts they encode:
+ *
+ *   clientFor              HTTP client with retry policy and redaction from the adapter context
+ *   requireEnv             a credential from the environment, PROVIDER_AUTH when missing
+ *   optionalEnv            an optional setting from the environment (a base URL override)
+ *   requireProvider        a `providers.<adapter>.<key>` value, PLAN_INVALID when missing
+ *   stringParam/paramError a string param with a default, PARAM_INVALID otherwise
+ *   desiredSide/diffValue  the marker contract (pending / secret / keep) applied to one value's diff
+ *   assertNoPending        apply-time guard that the engine resolved every reference
+ *   deleteIgnoringNotFound destroy's "already gone is success" rule
+ *
+ * The HTTP side of the authoring API (ApiClient, Page, Shape, ShapeError, isObject, obj, records, listAll,
+ * withQuery, isProviderError) lives in http.ts; packages/adapters/src/index.ts lists the whole API.
+ * Anything else in this file is internal and may change.
+ */
+/** A credential from the environment; PROVIDER_AUTH naming the variable when it is unset or blank. */
+export declare function requireEnv(env: NodeJS.ProcessEnv, name: string, adapter: string): string;
+/** An optional setting from the environment (a base URL override); blank counts as unset. Stable authoring API. */
+export declare function optionalEnv(env: NodeJS.ProcessEnv, name: string): string | undefined;
+/**
+ * A `providers.<adapter>.<key>` string from the plan; PLAN_INVALID when missing. Use it for project and team
+ * ids.
+ */
+export declare function requireProvider(actx: AdapterContext, key: string, adapter: string): string;
+/** A `providers.<adapter>.<key>` string from the plan, or undefined. */
+export declare function optionalProvider(actx: AdapterContext, key: string): string | undefined;
+/**
+ * The HTTP client for an adapter call: the context's environment sets the policy and its redactor masks error text.
+ *
+ * @example
+ * ```ts
+ * // inside an op's read():
+ * const token = requireEnv(actx.env, "ACME_TOKEN", "acme");
+ * const api = clientFor(actx, "acme", { baseUrl: "https://api.acme.dev", token });
+ * // Retries, timeouts and classification happen inside: a 404 throws PROVIDER_NOT_FOUND, and so on.
+ * const site = await api.get(`/sites/${stringParam(params, "name", "acme")}`);
+ * ```
+ */
+export declare function clientFor(actx: AdapterContext, adapter: string, opts: Pick<ApiClientOptions, "baseUrl" | "token" | "authHeader" | "headers" | "encoding" | "contentType" | "accept" | "signer">): ApiClient;
+/**
+ * The PARAM_INVALID error for a bad param, prefixed with the adapter name. Throw it from `diff`/`apply`
+ * validation.
+ */
+export declare function paramError(adapter: string, message: string, param: string): SponsonError;
+/** The engine never passes a pending marker into apply; if one arrives, something upstream is wrong. */
+export declare function assertNoPending(params: ResolvedParams, adapter: string): void;
+export declare const ABSENT: DiffSide;
+export declare const SENSITIVE: DiffSide;
+/** A desired value as a diff side: pending markers name their reference (secret refs are URLs: `env://X`). */
+export declare function desiredSide(v: unknown, sensitive: boolean): DiffSide;
+/**
+ * Diff one desired value against the live record by hash. `liveValue` is what `before` shows for a non-sensitive
+ * value (the live record carries only a hash). Unchanged diffs carry no sides: there is nothing to show.
+ */
+export declare function diffValue(opts: {
+    key: string;
+    label: string;
+    live: ResourceRecord | undefined;
+    desired: unknown;
+    sensitive: boolean;
+    liveValue?: string;
+}): ResourceDiff;
+/**
+ * A string param, or `fallback` when absent or empty; PARAM_INVALID when missing without a fallback or not a
+ * string.
+ */
+export declare function stringParam(params: ResolvedParams, name: string, adapter: string, fallback?: string): string;
+/** DELETE that treats 404 as success: the contract says a resource that is already gone is not an error. */
+export declare function deleteIgnoringNotFound(api: ApiClient, path: string): Promise<void>;

package/dist/common.js

@@ -0,0 +1,140 @@
+import { SponsonError, markerKind, pendingRef, sha256 } from "@sponson/core";
+import { apiClient, isProviderError } from "./http.js";
+/**
+ * The adapter authoring API. These helpers are stable and exported from `@sponson/adapters`; third-party
+ * adapters should use them rather than re-implementing the contracts they encode:
+ *
+ *   clientFor              HTTP client with retry policy and redaction from the adapter context
+ *   requireEnv             a credential from the environment, PROVIDER_AUTH when missing
+ *   optionalEnv            an optional setting from the environment (a base URL override)
+ *   requireProvider        a `providers.<adapter>.<key>` value, PLAN_INVALID when missing
+ *   stringParam/paramError a string param with a default, PARAM_INVALID otherwise
+ *   desiredSide/diffValue  the marker contract (pending / secret / keep) applied to one value's diff
+ *   assertNoPending        apply-time guard that the engine resolved every reference
+ *   deleteIgnoringNotFound destroy's "already gone is success" rule
+ *
+ * The HTTP side of the authoring API (ApiClient, Page, Shape, ShapeError, isObject, obj, records, listAll,
+ * withQuery, isProviderError) lives in http.ts; packages/adapters/src/index.ts lists the whole API.
+ * Anything else in this file is internal and may change.
+ */
+/** A credential from the environment; PROVIDER_AUTH naming the variable when it is unset or blank. */
+export function requireEnv(env, name, adapter) {
+    const v = env[name];
+    if (!v)
+        throw new SponsonError("PROVIDER_AUTH", `${adapter}: environment variable ${name} is not set`, { adapter, variable: name });
+    return v;
+}
+/** An optional setting from the environment (a base URL override); blank counts as unset. Stable authoring API. */
+export function optionalEnv(env, name) {
+    const v = env[name];
+    return v === undefined || v === "" ? undefined : v;
+}
+/**
+ * A `providers.<adapter>.<key>` string from the plan; PLAN_INVALID when missing. Use it for project and team
+ * ids.
+ */
+export function requireProvider(actx, key, adapter) {
+    const v = actx.provider[key];
+    if (typeof v !== "string" || v === "")
+        throw new SponsonError("PLAN_INVALID", `${adapter}: providers.${adapter}.${key} is required in the plan`, { adapter, key });
+    return v;
+}
+/** A `providers.<adapter>.<key>` string from the plan, or undefined. */
+export function optionalProvider(actx, key) {
+    const v = actx.provider[key];
+    return typeof v === "string" && v !== "" ? v : undefined;
+}
+/**
+ * The HTTP client for an adapter call: the context's environment sets the policy and its redactor masks error text.
+ *
+ * @example
+ * ```ts
+ * // inside an op's read():
+ * const token = requireEnv(actx.env, "ACME_TOKEN", "acme");
+ * const api = clientFor(actx, "acme", { baseUrl: "https://api.acme.dev", token });
+ * // Retries, timeouts and classification happen inside: a 404 throws PROVIDER_NOT_FOUND, and so on.
+ * const site = await api.get(`/sites/${stringParam(params, "name", "acme")}`);
+ * ```
+ */
+export function clientFor(actx, adapter, opts) {
+    return apiClient({ adapter, ...opts, redact: actx.redact, env: actx.env });
+}
+/**
+ * The PARAM_INVALID error for a bad param, prefixed with the adapter name. Throw it from `diff`/`apply`
+ * validation.
+ */
+export function paramError(adapter, message, param) {
+    return new SponsonError("PARAM_INVALID", `${adapter}: ${message}`, { adapter, param });
+}
+/** The engine never passes a pending marker into apply; if one arrives, something upstream is wrong. */
+export function assertNoPending(params, adapter) {
+    const walk = (v, path) => {
+        const marker = markerKind(v);
+        if (marker === "pending" || marker === "secret")
+            throw new SponsonError("INTERNAL", `${adapter}: param ${path} is still pending (${pendingRef(v)}); apply must not be called before its inputs resolve`, { adapter, param: path });
+        if (Array.isArray(v))
+            v.forEach((x, i) => walk(x, `${path}[${i}]`));
+        else if (v && typeof v === "object")
+            for (const [k, x] of Object.entries(v))
+                walk(x, path ? `${path}.${k}` : k);
+    };
+    walk(params, "");
+}
+// ---------------------------------------------------------------------------
+// Diff sides: data only. Renderers turn them into text.
+// ---------------------------------------------------------------------------
+export const ABSENT = { state: "absent" };
+export const SENSITIVE = { state: "sensitive" };
+/** A desired value as a diff side: pending markers name their reference (secret refs are URLs: `env://X`). */
+export function desiredSide(v, sensitive) {
+    const marker = markerKind(v);
+    if (marker === "pending" || marker === "secret")
+        return { state: marker, ref: pendingRef(v) };
+    return sensitive ? SENSITIVE : { state: "literal", value: String(v) };
+}
+/**
+ * Diff one desired value against the live record by hash. `liveValue` is what `before` shows for a non-sensitive
+ * value (the live record carries only a hash). Unchanged diffs carry no sides: there is nothing to show.
+ */
+export function diffValue(opts) {
+    const { key, label, live, desired, sensitive } = opts;
+    const marker = markerKind(desired);
+    if (marker === "keep") {
+        if (live)
+            return { key, kind: "unchanged", label };
+        throw new SponsonError("PARAM_INVALID", `${label} is declared \`{ keep: true }\` but does not exist, so there is no value to keep. Give it a value or remove it.`, { key });
+    }
+    const after = desiredSide(desired, sensitive);
+    if (!live)
+        return { key, kind: "create", label, before: ABSENT, after };
+    const before = sensitive || opts.liveValue === undefined ? SENSITIVE : { state: "literal", value: opts.liveValue };
+    if (marker === null && live.hash === sha256(String(desired)))
+        return { key, kind: "unchanged", label };
+    return { key, kind: "update", label, before, after };
+}
+/**
+ * A string param, or `fallback` when absent or empty; PARAM_INVALID when missing without a fallback or not a
+ * string.
+ */
+export function stringParam(params, name, adapter, fallback) {
+    const v = params[name];
+    if (v === undefined || v === null || v === "") {
+        if (fallback !== undefined)
+            return fallback;
+        throw paramError(adapter, `param \`${name}\` is required`, name);
+    }
+    if (typeof v !== "string")
+        throw paramError(adapter, `param \`${name}\` must be a string`, name);
+    return v;
+}
+/** DELETE that treats 404 as success: the contract says a resource that is already gone is not an error. */
+export async function deleteIgnoringNotFound(api, path) {
+    try {
+        await api.delete(path);
+    }
+    catch (e) {
+        if (!isProviderError(e, "PROVIDER_NOT_FOUND"))
+            throw e;
+    }
+}
+//# sourceMappingURL=common.js.map

package/dist/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAmG,MAAM,eAAe,CAAC;AAC9K,OAAO,EAAE,SAAS,EAAE,eAAe,EAAyC,MAAM,WAAW,CAAC;AAE9F;;;;;;;;;;;;;;;;GAgBG;AAEH,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAsB,EAAE,IAAY,EAAE,OAAe;IAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,0BAA0B,IAAI,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,GAAsB,EAAE,IAAY;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAW,EAAE,OAAe;IAChF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,GAAG,OAAO,eAAe,OAAO,IAAI,GAAG,0BAA0B,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnK,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,GAAW;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,OAAe,EAAE,IAA+H;IAC9L,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IACxE,OAAO,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,KAAK,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,OAAe;IACrE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,IAAY,EAAQ,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,GAAG,OAAO,WAAW,IAAI,sBAAsB,UAAU,CAAC,CAAW,CAAC,uDAAuD,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7O,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;aAC/D,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACpD,MAAM,CAAC,MAAM,SAAS,GAAa,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAE1D,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,SAAkB;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAW,CAAC,EAAE,CAAC;IACxG,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgI;IACxJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,KAAK,iHAAiH,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9K,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxE,MAAM,MAAM,GAAa,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC7H,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,IAAY,EAAE,OAAe,EAAE,QAAiB;IAClG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAc,EAAE,IAAY;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,oBAAoB,CAAC;YAAE,MAAM,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/digest.d.ts

@@ -0,0 +1,46 @@
+/** The hash algorithms supported, as a challenge names them. */
+export type DigestAlgorithm = "MD5" | "MD5-sess" | "SHA-256" | "SHA-256-sess";
+/** One `Digest` challenge of a `WWW-Authenticate` header. */
+export interface DigestChallenge {
+    realm: string;
+    nonce: string;
+    opaque?: string;
+    algorithm: DigestAlgorithm;
+    /** The `qop` values the server offers. */
+    qop: string[];
+    /** The previous nonce was merely stale: retry with the new one, the credentials were fine. */
+    stale: boolean;
+}
+/** One auth scheme and its parameters, as written in a `WWW-Authenticate` header. */
+interface RawChallenge {
+    scheme: string;
+    params: Record<string, string>;
+}
+/** Every challenge in a `WWW-Authenticate` value (several headers arrive joined with `, `). */
+export declare function parseChallenges(header: string): RawChallenge[];
+/**
+ * The challenge to answer: a Digest one offering `qop=auth`, SHA-256 preferred over MD5. A reason when there is
+ * none Sponson can answer.
+ */
+export declare function pickChallenge(header: string | null): DigestChallenge | {
+    problem: string;
+};
+/** What an answer is computed from. `nc` counts the requests made with this nonce (1, 2, …). */
+export interface DigestInput {
+    challenge: DigestChallenge;
+    username: string;
+    password: string;
+    method: string;
+    /** The request target as sent: path and query. */
+    uri: string;
+    nc: number;
+    /** The client nonce; random when absent. */
+    cnonce?: string;
+}
+/** The `response` value of RFC 7616 §3.4.1 for `qop=auth`. */
+export declare function digestResponse(input: DigestInput & {
+    cnonce: string;
+}): string;
+/** The `Authorization` header value answering `challenge`. */
+export declare function digestAuthorization(input: DigestInput): string;
+export {};