@sponson/adapters 0.0.0-stage → 0.5.0

package/dist/http-adapter-auth.js

@@ -0,0 +1,437 @@
+/**
+ * How the generic `http` adapter authenticates to an API: the `auth` forms of a `providers.http.<api>` block,
+ * parsed (pure), and the credential each one sends at run time (ADR 0017 and its amendment).
+ *
+ *   { bearer_env }, { header, value_env, prefix? }, { basic }   a static header from environment variables
+ *   { headers: [{ header, value_env, prefix? }, …] }   several such headers at once (Datadog's API and application keys)
+ *   { oauth2_client_credentials: { … } }              a bearer token from an OAuth2 token endpoint (RFC 6749 §4.4)
+ *   { command: [argv…] }                               a bearer token printed by a CLI (`gcloud auth print-access-token`)
+ *   { aws_sigv4: { … } }                               every request signed with AWS Signature Version 4
+ *   { digest: { user_env, password_env } }             HTTP Digest (RFC 7616), answering the server's challenge
+ *
+ * Every form names environment variables, never values, so the block (the ledger identity of the API's resources)
+ * holds no secret. A credential obtained at run time (an access token, a printed token) is registered with the
+ * engine's redactor (`actx.secret`) the moment it exists and masked in this adapter's own error text too, so it never
+ * reaches output, receipts or errors. Tokens are fetched once per run per API block (cached in memory until shortly
+ * before they expire) and fetched again, once, when the API answers 401.
+ */
+import { createHash } from "node:crypto";
+import { SponsonError, canonicalJson } from "@sponson/core";
+import { optionalEnv, requireEnv } from "./common.js";
+import { digestAuthorization, pickChallenge } from "./digest.js";
+import { apiClient, isObject, ShapeError } from "./http.js";
+import { defaultExec } from "./secrets.js";
+import { signRequest } from "./sigv4.js";
+const ADAPTER = "http";
+// ---------------------------------------------------------------------------
+// Parsing (pure)
+// ---------------------------------------------------------------------------
+/**
+ * Variable names the engine masks everywhere (packages/core/src/engine/run-context.ts, CREDENTIAL_NAME). A
+ * credential under another name would be masked only in this adapter's own error text, so it is refused.
+ */
+const CREDENTIAL_NAME = /(TOKEN|SECRET|PASSWORD|PASSWD|_KEY|APIKEY)$/i;
+const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** An HTTP header name (RFC 9110 token). */
+export const HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+/** PLAN_INVALID naming where in the provider block the fault is. */
+export function planError(message, where) {
+    return new SponsonError("PLAN_INVALID", `${ADAPTER}: ${where}: ${message}`, { adapter: ADAPTER, key: where });
+}
+/** The NAME of an environment variable; a credential's name must be one the engine masks. */
+export function envName(v, where, credential) {
+    if (typeof v !== "string" || !ENV_NAME.test(v))
+        throw planError("must be the NAME of an environment variable, never a value", where);
+    if (credential && !CREDENTIAL_NAME.test(v))
+        throw planError(`\`${v}\` must end in TOKEN, SECRET, PASSWORD, PASSWD, _KEY or APIKEY, so that Sponson masks its value in every output`, where);
+    return v;
+}
+const AUTH_FORMS = "`{ bearer_env: NAME }`, `{ header: X-Api-Key, value_env: NAME, prefix?: \"Api-Key \" }`, `{ headers: [{ header, value_env }, …] }`, `{ basic: { user_env, password_env } }`, `{ oauth2_client_credentials: { token_url, client_id_env, client_secret_env } }` (`token_url` and `audience` may be paths on the base URL's origin), `{ command: [argv…] }`, `{ aws_sigv4: { region, service, access_key_id_env, secret_access_key_env } }` or `{ digest: { user_env, password_env } }`";
+function subBlock(v, where, known) {
+    if (!isObject(v))
+        throw planError(`must be a map (${known.join(", ")})`, where);
+    const extra = Object.keys(v).find((k) => !known.includes(k));
+    if (extra)
+        throw planError(`unknown key \`${extra}\` (known: ${known.join(", ")})`, where);
+    return v;
+}
+function optionalString(v, where) {
+    if (v === undefined)
+        return undefined;
+    if (typeof v !== "string" || v === "")
+        throw planError("must be a non-empty string", where);
+    return v;
+}
+function httpUrl(v, where) {
+    if (typeof v !== "string" || !/^https?:\/\/[^\s]+$/.test(v))
+        throw planError("must be an http(s) URL", where);
+    return v;
+}
+/**
+ * A value written as an absolute path (`/oauth/token`, `/api/v2/`) resolved against the origin of the block's own
+ * `base_url` (never its `base_url_env` override, so every runner and the ledger see one value); anything else as it
+ * is. A per-account API (an Auth0 tenant, a Kinde business) then names its account once, in `base_url`, and a
+ * recipe can say where the token endpoint and the audience are without knowing the account.
+ */
+function onBase(v, base, where) {
+    if (typeof v !== "string" || !v.startsWith("/"))
+        return v;
+    if (v.startsWith("//"))
+        throw planError('must be an http(s) URL, or a path starting with a single "/" (resolved against the origin of `base_url`)', where);
+    if (base === undefined)
+        throw planError("is a path, which needs the block's `base_url` to resolve against", where);
+    return new URL(v, base).href;
+}
+/** Form parameters every client-credentials request sets itself; `extra` may not override them. */
+const OAUTH_RESERVED = new Set(["grant_type", "client_id", "client_secret", "audience", "scope", "client_assertion", "client_assertion_type"]);
+function stringMap(v, where) {
+    if (v === undefined)
+        return {};
+    if (!isObject(v) || !Object.values(v).every((x) => typeof x === "string"))
+        throw planError("must be a map of parameter name to string", where);
+    const reserved = Object.keys(v).find((k) => OAUTH_RESERVED.has(k));
+    if (reserved)
+        throw planError(`\`${reserved}\` is set by Sponson (use the block's own key, or an environment variable for a credential)`, where);
+    return v;
+}
+function parseOauth2(v, where, base) {
+    const o = subBlock(v, where, ["token_url", "token_url_env", "client_id_env", "client_secret_env", "audience", "scope", "extra", "auth_method"]);
+    const method = o.auth_method ?? "client_secret_post";
+    if (method !== "client_secret_post" && method !== "client_secret_basic")
+        throw planError("must be `client_secret_post` (the default) or `client_secret_basic`; `private_key_jwt` is not supported", `${where}.auth_method`);
+    const audience = onBase(optionalString(o.audience, `${where}.audience`), base, `${where}.audience`);
+    const scope = optionalString(o.scope, `${where}.scope`);
+    return {
+        kind: "oauth2",
+        tokenUrl: httpUrl(onBase(o.token_url, base, `${where}.token_url`), `${where}.token_url`),
+        ...(o.token_url_env !== undefined ? { tokenUrlEnv: envName(o.token_url_env, `${where}.token_url_env`, false) } : {}),
+        clientIdEnv: envName(o.client_id_env, `${where}.client_id_env`, false),
+        clientSecretEnv: envName(o.client_secret_env, `${where}.client_secret_env`, true),
+        ...(audience !== undefined ? { audience } : {}),
+        ...(scope !== undefined ? { scope } : {}),
+        extra: stringMap(o.extra, `${where}.extra`),
+        method,
+    };
+}
+/**
+ * A command's argv, run without a shell. Each element is a literal string: a reference (`{ from }`, `{ secret }`), a
+ * `${…}` interpolation or a shell `$VAR` would never be expanded, so it is refused rather than passed on as text.
+ */
+function parseCommand(v, where) {
+    if (!Array.isArray(v) || v.length === 0)
+        throw planError('must be the command as a list of arguments, e.g. ["gcloud", "auth", "print-access-token"] (never a shell string)', where);
+    v.forEach((a, i) => {
+        if (typeof a !== "string" || a === "")
+            throw planError("must be a non-empty literal string (references are not resolved in a command)", `${where}[${i}]`);
+        if (a.startsWith("$") || a.includes("${"))
+            throw planError(`\`${a}\` starts with or holds a reference, which a command never expands (it runs without a shell); write the literal argument`, `${where}[${i}]`);
+    });
+    const file = v[0];
+    if (file.startsWith("-") || /\s/.test(file))
+        throw planError(`\`${file}\` must be a program name or path, one list element per argument`, `${where}[0]`);
+    return { kind: "command", argv: v };
+}
+function parseSigv4(v, where) {
+    const o = subBlock(v, where, ["region", "service", "access_key_id_env", "secret_access_key_env", "session_token_env"]);
+    const name = (x, key) => {
+        if (typeof x !== "string" || !/^[a-z0-9-]+$/.test(x))
+            throw planError("must be a lower-case AWS name such as us-east-1 or s3", `${where}.${key}`);
+        return x;
+    };
+    return {
+        kind: "sigv4",
+        region: name(o.region, "region"),
+        service: name(o.service, "service"),
+        accessKeyIdEnv: envName(o.access_key_id_env, `${where}.access_key_id_env`, false),
+        secretAccessKeyEnv: envName(o.secret_access_key_env, `${where}.secret_access_key_env`, true),
+        ...(o.session_token_env !== undefined ? { sessionTokenEnv: envName(o.session_token_env, `${where}.session_token_env`, true) } : {}),
+    };
+}
+function parseUserPassword(v, where, kind) {
+    const o = subBlock(v, where, ["user_env", "password_env"]);
+    return { kind, userEnv: envName(o.user_env, `${where}.user_env`, false), passwordEnv: envName(o.password_env, `${where}.password_env`, true) };
+}
+const PARSERS = {
+    basic: (v, w) => parseUserPassword(v, w, "basic"),
+    digest: (v, w) => parseUserPassword(v, w, "digest"),
+    oauth2_client_credentials: parseOauth2,
+    command: parseCommand,
+    aws_sigv4: parseSigv4,
+};
+/**
+ * `providers.http.<api>.auth`, checked: PLAN_INVALID naming the key at fault otherwise. `base`: the block's
+ * `base_url`, which an OAuth2 `token_url` or `audience` written as a path is resolved against.
+ */
+export function parseAuth(v, where, base) {
+    if (!isObject(v))
+        throw planError(`is required: ${AUTH_FORMS}`, where);
+    const forms = Object.keys(PARSERS).filter((k) => v[k] !== undefined);
+    if (forms.length > 1)
+        throw planError(`declares ${forms.join(" and ")}: choose one`, where);
+    if (forms.length === 1) {
+        const key = forms[0];
+        const extra = Object.keys(v).find((k) => k !== key);
+        if (extra)
+            throw planError(`unknown key \`${extra}\` next to \`${key}\``, where);
+        return PARSERS[key](v[key], `${where}.${key}`, base);
+    }
+    if (v.bearer_env !== undefined) {
+        onlyKeys(v, ["bearer_env"], where);
+        return { kind: "bearer", env: envName(v.bearer_env, `${where}.bearer_env`, true) };
+    }
+    if (v.headers !== undefined)
+        return parseHeaderList(v, where);
+    const one = headerCredential(v, where);
+    return { kind: "header", ...one };
+}
+/** One `{ header, value_env, prefix? }`. */
+function headerCredential(v, where) {
+    if (typeof v.header !== "string" || !HEADER_NAME.test(v.header))
+        throw planError(`must be one of ${AUTH_FORMS}`, where);
+    if (/^(accept|content-type)$/i.test(v.header))
+        throw planError(`\`${v.header}\` is set by Sponson`, `${where}.header`);
+    onlyKeys(v, ["header", "value_env", "prefix"], where);
+    const prefix = v.prefix === undefined ? undefined : prefixParam(v.prefix, `${where}.prefix`);
+    return { header: v.header, env: envName(v.value_env, `${where}.value_env`, true), ...(prefix !== undefined ? { prefix } : {}) };
+}
+/** `{ headers: [{ header, value_env, prefix? }, …] }`: every credential header an API needs, each named once. */
+function parseHeaderList(v, where) {
+    onlyKeys(v, ["headers"], where);
+    const list = v.headers;
+    if (!Array.isArray(list) || list.length === 0)
+        throw planError("must be a list of `{ header, value_env }`, one per credential header", `${where}.headers`);
+    const headers = list.map((h, i) => {
+        if (!isObject(h))
+            throw planError("must be `{ header, value_env, prefix? }`", `${where}.headers[${i}]`);
+        return headerCredential(h, `${where}.headers[${i}]`);
+    });
+    const names = headers.map((h) => h.header.toLowerCase());
+    const twice = names.find((n, i) => names.indexOf(n) !== i);
+    if (twice)
+        throw planError(`names the header \`${twice}\` twice`, `${where}.headers`);
+    return { kind: "headers", headers };
+}
+function onlyKeys(v, known, where) {
+    const extra = Object.keys(v).find((k) => !known.includes(k));
+    if (extra)
+        throw planError(`unknown key \`${extra}\` (known: ${known.join(", ")})`, where);
+}
+/**
+ * The literal text sent before the credential in its header (`Api-Key `, `Token `, `SSWS `). It is part of the
+ * block, so of the ledger identity, and never a credential: a reference, an interpolation or a control character is
+ * refused.
+ */
+function prefixParam(v, where) {
+    if (typeof v !== "string" || v === "" || v.length > 64)
+        throw planError("must be the literal text sent before the credential, such as \"Api-Key \" or \"Token \" (1 to 64 characters)", where);
+    if (!/^[\x20-\x7e]+$/.test(v) || v.includes("${") || v.startsWith("$"))
+        throw planError("must be plain printable text: no reference, interpolation or control character", where);
+    return v;
+}
+/** The real dependencies: commands from PATH, the system clock. */
+export const DEFAULT_AUTH_DEPS = { exec: defaultExec, now: () => Date.now() };
+/** One cache per run (the engine hands every adapter call of a run the same `ctx`), so nothing outlives the run. */
+const RUNS = new WeakMap();
+function entryFor(actx, auth, extra) {
+    let run = RUNS.get(actx.ctx);
+    if (!run)
+        RUNS.set(actx.ctx, (run = new Map()));
+    // The block identifies the API; the hash of the credential's inputs keeps a changed credential from reusing a token.
+    const key = createHash("sha256").update(canonicalJson({ block: actx.provider, auth })).update("\u0000").update(extra).digest("hex");
+    let e = run.get(key);
+    if (!e)
+        run.set(key, (e = { issued: [] }));
+    return e;
+}
+/** Remember a token: registered with the engine's redactor first, so no output can ever contain it. */
+function adopt(actx, entry, token) {
+    actx.secret?.(token.value);
+    entry.issued.push(token.value);
+    entry.token = token;
+    return token;
+}
+/** The cached token, or a new one from `fetch` (one fetch at a time per API block, however many requests wait). */
+async function tokenOf(actx, entry, deps, fetch) {
+    if (entry.token && entry.token.expiresAt > deps.now())
+        return entry.token.value;
+    entry.pending ??= fetch()
+        .then((t) => adopt(actx, entry, t))
+        .finally(() => {
+        entry.pending = undefined;
+    });
+    return (await entry.pending).value;
+}
+/** A signer that sends `Authorization: Bearer <token>` and fetches the token again, once per request, after a 401. */
+function bearerSigner(actx, entry, deps, fetch) {
+    return {
+        sign: async () => ({ authorization: `Bearer ${await tokenOf(actx, entry, deps, fetch)}` }),
+        unauthorized: async (req) => {
+            // Drop the token this request carried (not one another request has fetched since), then try once more.
+            if (entry.token && req.headers.authorization === `Bearer ${entry.token.value}`)
+                entry.token = undefined;
+            return true;
+        },
+    };
+}
+/** Seconds of validity a token loses, so it is never sent in its last minute. */
+const EXPIRY_MARGIN_S = 60;
+/** How long a command's token is used before the command runs again (CLIs print tokens valid for 5–60 minutes). */
+export const COMMAND_TOKEN_TTL_MS = 5 * 60_000;
+function authError(message, details = {}) {
+    return new SponsonError("PROVIDER_AUTH", `${ADAPTER}: ${message}`, { adapter: ADAPTER, ...details });
+}
+/** The answer of a token endpoint: an access token of type Bearer, and when it expires. */
+function tokenShape(body) {
+    if (!isObject(body) || typeof body.access_token !== "string" || body.access_token === "")
+        throw new ShapeError("expected an object with a non-empty `access_token`");
+    if (body.token_type !== undefined && String(body.token_type).toLowerCase() !== "bearer")
+        throw new ShapeError(`expected \`token_type\` Bearer, got ${String(body.token_type)}`);
+    const expires = Number(body.expires_in);
+    return { access_token: body.access_token, ...(Number.isFinite(expires) && expires > 0 ? { expires_in: expires } : {}) };
+}
+function basicOf(user, password) {
+    return Buffer.from(`${user}:${password}`).toString("base64");
+}
+/** RFC 6749 §4.4: POST the client credentials as a form to the token endpoint. */
+async function fetchOauth2(actx, auth, deps, redact) {
+    const clientId = requireEnv(actx.env, auth.clientIdEnv, ADAPTER);
+    const secret = requireEnv(actx.env, auth.clientSecretEnv, ADAPTER);
+    const url = (auth.tokenUrlEnv ? optionalEnv(actx.env, auth.tokenUrlEnv) : undefined) ?? auth.tokenUrl;
+    const basic = auth.method === "client_secret_basic" ? basicOf(clientId, secret) : undefined;
+    const hidden = [secret, ...(basic ? [basic] : [])];
+    const form = {
+        grant_type: "client_credentials",
+        ...(basic ? {} : { client_id: clientId, client_secret: secret }),
+        ...(auth.audience !== undefined ? { audience: auth.audience } : {}),
+        ...(auth.scope !== undefined ? { scope: auth.scope } : {}),
+        ...auth.extra,
+    };
+    const client = apiClient({
+        adapter: ADAPTER,
+        baseUrl: url,
+        token: basic ? `Basic ${basic}` : "",
+        authHeader: "header:authorization",
+        ...(basic ? {} : { signer: { sign: async () => ({}) } }),
+        encoding: "form",
+        redact: (t) => hidden.reduce((s, h) => s.split(h).join("****"), redact(t)),
+        env: actx.env,
+    });
+    let body;
+    try {
+        body = await client.post("", form, tokenShape, { idempotent: true });
+    }
+    catch (e) {
+        if (e instanceof SponsonError)
+            throw new SponsonError(e.code, `${ADAPTER}: OAuth2 token request to ${new URL(url).origin}${new URL(url).pathname} failed: ${e.message.replace(/^http: POST {2}→ /, "")}`, { ...e.details, tokenUrl: url });
+        throw e;
+    }
+    const lifetime = body.expires_in === undefined ? Infinity : Math.max(body.expires_in - EXPIRY_MARGIN_S, body.expires_in / 2) * 1000;
+    return { value: body.access_token, expiresAt: deps.now() + lifetime };
+}
+/** Run the command (no shell) and take its stdout, trimmed, as the token. */
+async function fetchCommand(actx, argv, deps, redact) {
+    const [file, ...args] = argv;
+    const shown = argv.join(" ");
+    let out;
+    try {
+        out = await deps.exec(file, args, actx.env);
+    }
+    catch (e) {
+        const code = e.code;
+        if (code === "ENOENT")
+            throw authError(`\`${file}\` is not installed or not on PATH (auth.command)`, { command: shown });
+        if (code === "EACCES")
+            throw authError(`\`${file}\` on PATH is not executable (auth.command)`, { command: shown });
+        throw authError(`\`${shown}\` failed: ${redact(e.message).slice(0, 500)}`, { command: shown });
+    }
+    const token = out.trim();
+    if (token === "" || /\s/.test(token))
+        throw authError(`\`${shown}\` printed ${token === "" ? "nothing" : "more than one word"}; it must print the access token alone`, { command: shown });
+    return { value: token, expiresAt: deps.now() + COMMAND_TOKEN_TTL_MS };
+}
+/** Signs every request with SigV4; S3 also gets the `Content-MD5` its configuration writes require. */
+function sigv4Signer(actx, auth, deps) {
+    const creds = {
+        accessKeyId: requireEnv(actx.env, auth.accessKeyIdEnv, ADAPTER),
+        secretAccessKey: requireEnv(actx.env, auth.secretAccessKeyEnv, ADAPTER),
+        ...(auth.sessionTokenEnv ? { sessionToken: requireEnv(actx.env, auth.sessionTokenEnv, ADAPTER) } : {}),
+    };
+    return {
+        async sign(req) {
+            const extra = {};
+            if (auth.service === "s3" && req.body !== undefined)
+                extra["content-md5"] = createHash("md5").update(req.body, "utf8").digest("base64");
+            const signed = signRequest({ method: req.method, url: req.url, headers: { ...req.headers, ...extra }, body: req.body ?? "" }, creds, { region: auth.region, service: auth.service, date: new Date(deps.now()) });
+            return { ...extra, ...signed };
+        },
+    };
+}
+/** Answers the server's Digest challenge; later requests of the run reuse it with the next nonce count. */
+function digestSigner(actx, auth, entry) {
+    const username = requireEnv(actx.env, auth.userEnv, ADAPTER);
+    const password = requireEnv(actx.env, auth.passwordEnv, ADAPTER);
+    return {
+        async sign(req) {
+            const d = entry.digest;
+            if (!d)
+                return {}; // the first request goes without: the 401 brings the challenge
+            d.nc += 1;
+            const u = new URL(req.url);
+            return { authorization: digestAuthorization({ challenge: d.challenge, username, password, method: req.method, uri: u.pathname + u.search, nc: d.nc }) };
+        },
+        async unauthorized(_req, header) {
+            const picked = pickChallenge(header);
+            if ("problem" in picked)
+                throw authError(`Digest authentication: ${picked.problem}`);
+            entry.digest = { challenge: picked, nc: 0 };
+            return true;
+        },
+    };
+}
+/** A line's own credential in the place of a bearer or header form's variable (the header name and prefix stay). */
+function lineCredential(auth, line) {
+    if (auth.kind === "bearer")
+        return { token: line, authHeader: "bearer", masks: () => [] };
+    if (auth.kind === "header")
+        return { token: `${auth.prefix ?? ""}${line}`, authHeader: `header:${auth.header}`, masks: () => [] };
+    throw authError(`a line's \`credential\` replaces a single static credential; this API authenticates with \`${auth.kind}\``);
+}
+/**
+ * The credential of an API block for this call; `line`, a line's own `credential`, replaces the variable of a bearer
+ * or header form (ADR 0017, "Line credentials"). Static forms read their variables now (PROVIDER_AUTH when one is
+ * unset); dynamic ones fetch or sign per request, through the run's cache.
+ */
+export function credentialFor(actx, auth, deps, redact, line) {
+    if (line !== undefined)
+        return lineCredential(auth, line);
+    const env = actx.env;
+    switch (auth.kind) {
+        case "bearer":
+            return { token: requireEnv(env, auth.env, ADAPTER), authHeader: "bearer", masks: () => [] };
+        case "header":
+            return { token: `${auth.prefix ?? ""}${requireEnv(env, auth.env, ADAPTER)}`, authHeader: `header:${auth.header}`, masks: () => [] };
+        case "headers": {
+            const values = Object.fromEntries(auth.headers.map((h) => [h.header.toLowerCase(), `${h.prefix ?? ""}${requireEnv(env, h.env, ADAPTER)}`]));
+            return { token: "", authHeader: "none", signer: { sign: async () => ({ ...values }) }, masks: () => Object.values(values) };
+        }
+        case "none":
+            return { token: "", authHeader: "none", masks: () => [] };
+        case "basic": {
+            const encoded = basicOf(requireEnv(env, auth.userEnv, ADAPTER), requireEnv(env, auth.passwordEnv, ADAPTER));
+            return { token: `Basic ${encoded}`, authHeader: "header:authorization", masks: () => [encoded] };
+        }
+        case "oauth2": {
+            const entry = entryFor(actx, auth, `${optionalEnv(env, auth.clientIdEnv) ?? ""}\u0000${optionalEnv(env, auth.clientSecretEnv) ?? ""}`);
+            return { token: "", authHeader: "bearer", signer: bearerSigner(actx, entry, deps, () => fetchOauth2(actx, auth, deps, redact)), masks: () => entry.issued };
+        }
+        case "command": {
+            const entry = entryFor(actx, auth, "");
+            return { token: "", authHeader: "bearer", signer: bearerSigner(actx, entry, deps, () => fetchCommand(actx, auth.argv, deps, redact)), masks: () => entry.issued };
+        }
+        case "sigv4":
+            return { token: "", authHeader: "bearer", signer: sigv4Signer(actx, auth, deps), masks: () => [] };
+        case "digest":
+            return { token: "", authHeader: "bearer", signer: digestSigner(actx, auth, entryFor(actx, auth, "")), masks: () => [] };
+    }
+}
+//# sourceMappingURL=http-adapter-auth.js.map

package/dist/http-adapter-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-adapter-auth.js","sourceRoot":"","sources":["../src/http-adapter-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAiC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAwB,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAA4C,MAAM,WAAW,CAAC;AACtG,OAAO,EAAE,WAAW,EAAa,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,OAAO,GAAG,MAAM,CAAC;AAkBvB,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,eAAe,GAAG,8CAA8C,CAAC;AACvE,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAC5C,4CAA4C;AAC5C,MAAM,CAAC,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAE3D,oEAAoE;AACpE,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa;IACtD,OAAO,IAAI,YAAY,CAAC,cAAc,EAAE,GAAG,OAAO,KAAK,KAAK,KAAK,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,OAAO,CAAC,CAAU,EAAE,KAAa,EAAE,UAAmB;IACpE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,4DAA4D,EAAE,KAAK,CAAC,CAAC;IACrI,IAAI,UAAU,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,CAAC,iHAAiH,EAAE,KAAK,CAAC,CAAC;IAC5L,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,GACd,sdAAsd,CAAC;AAEzd,SAAS,QAAQ,CAAC,CAAU,EAAE,KAAa,EAAE,KAAe;IAC1D,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK;QAAE,MAAM,SAAS,CAAC,iBAAiB,KAAK,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,CAAU,EAAE,KAAa;IAC/C,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,SAAS,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC5F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,CAAU,EAAE,KAAa;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;IAC9G,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,CAAU,EAAE,IAAwB,EAAE,KAAa;IACjE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,SAAS,CAAC,0GAA0G,EAAE,KAAK,CAAC,CAAC;IAC3J,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC,kEAAkE,EAAE,KAAK,CAAC,CAAC;IACnH,OAAO,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,mGAAmG;AACnG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAE/I,SAAS,SAAS,CAAC,CAAU,EAAE,KAAa;IAC1C,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,MAAM,SAAS,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ;QAAE,MAAM,SAAS,CAAC,KAAK,QAAQ,6FAA6F,EAAE,KAAK,CAAC,CAAC;IACjJ,OAAO,CAA2B,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,CAAU,EAAE,KAAa,EAAE,IAAa;IAC3D,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAChJ,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAI,oBAAoB,CAAC;IACrD,IAAI,MAAM,KAAK,oBAAoB,IAAI,MAAM,KAAK,qBAAqB;QAAE,MAAM,SAAS,CAAC,yGAAyG,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAC5N,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,WAAW,CAAuB,CAAC;IAC1H,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,YAAY,CAAC,EAAE,GAAG,KAAK,YAAY,CAAC;QACxF,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,KAAK,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpH,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,KAAK,gBAAgB,EAAE,KAAK,CAAC;QACtE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,KAAK,oBAAoB,EAAE,IAAI,CAAC;QACjF,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC;QAC3C,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,CAAU,EAAE,KAAa;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,kHAAkH,EAAE,KAAK,CAAC,CAAC;IACpL,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,MAAM,SAAS,CAAC,+EAA+E,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1J,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,SAAS,CAAC,KAAK,CAAC,0HAA0H,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IACjN,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;IAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,IAAI,kEAAkE,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IACzJ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAa,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,CAAU,EAAE,KAAa;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,GAAW,EAAE,EAAE;QACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,uDAAuD,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAClJ,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC;QACnC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,KAAK,oBAAoB,EAAE,KAAK,CAAC;QACjF,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAAE,GAAG,KAAK,wBAAwB,EAAE,IAAI,CAAC;QAC5F,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,KAAK,oBAAoB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpI,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU,EAAE,KAAa,EAAE,IAAwB;IAC5E,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC;AACjJ,CAAC;AAED,MAAM,OAAO,GAAuE;IAClF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;IACnD,yBAAyB,EAAE,WAAW;IACtC,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,CAAU,EAAE,KAAa,EAAE,IAAa;IAChE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,gBAAgB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,SAAS,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,MAAM,SAAS,CAAC,iBAAiB,KAAK,gBAAgB,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;QACjF,OAAO,OAAO,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,QAAQ,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,EAAE,CAAC;AACpC,CAAC;AAED,4CAA4C;AAC5C,SAAS,gBAAgB,CAAC,CAA0B,EAAE,KAAa;IACjE,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,kBAAkB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;IACxH,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,sBAAsB,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IACvH,QAAQ,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC;AAED,iHAAiH;AACjH,SAAS,eAAe,CAAC,CAA0B,EAAE,KAAa;IAChE,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,sEAAsE,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IAC3J,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,0CAA0C,EAAE,GAAG,KAAK,YAAY,CAAC,GAAG,CAAC,CAAC;QACxG,OAAO,gBAAgB,CAAC,CAAC,EAAE,GAAG,KAAK,YAAY,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK;QAAE,MAAM,SAAS,CAAC,sBAAsB,KAAK,UAAU,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IACtF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,CAA0B,EAAE,KAAe,EAAE,KAAa;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK;QAAE,MAAM,SAAS,CAAC,iBAAiB,KAAK,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,CAAU,EAAE,KAAa;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,SAAS,CAAC,8GAA8G,EAAE,KAAK,CAAC,CAAC;IAC/L,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,SAAS,CAAC,gFAAgF,EAAE,KAAK,CAAC,CAAC;IACjL,OAAO,CAAC,CAAC;AACX,CAAC;AAYD,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAa,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AA0BxF,oHAAoH;AACpH,MAAM,IAAI,GAAG,IAAI,OAAO,EAAgC,CAAC;AAEzD,SAAS,QAAQ,CAAC,IAAoB,EAAE,IAAU,EAAE,KAAa;IAC/D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAChD,qHAAqH;IACrH,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uGAAuG;AACvG,SAAS,KAAK,CAAC,IAAoB,EAAE,KAAiB,EAAE,KAAY;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mHAAmH;AACnH,KAAK,UAAU,OAAO,CAAC,IAAoB,EAAE,KAAiB,EAAE,IAAc,EAAE,KAA2B;IACzG,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;IAChF,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE;SACtB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;SAClC,OAAO,CAAC,GAAG,EAAE;QACZ,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;IAC5B,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED,sHAAsH;AACtH,SAAS,YAAY,CAAC,IAAoB,EAAE,KAAiB,EAAE,IAAc,EAAE,KAA2B;IACxG,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1F,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,uGAAuG;YACvG,IAAI,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,UAAU,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;gBAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;YACxG,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE/C,SAAS,SAAS,CAAC,OAAe,EAAE,UAAmC,EAAE;IACvE,OAAO,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,KAAK,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,2FAA2F;AAC3F,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAC;IACrK,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChL,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1H,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAgB;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,WAAW,CAAC,IAAoB,EAAE,IAAuC,EAAE,IAAc,EAAE,MAA6B;IACrI,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC;IACtG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,oBAAoB;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,IAAI,CAAC,KAAK;KACd,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;QACpC,UAAU,EAAE,sBAAsB;QAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,IAAI,IAAmD,CAAC;IACxD,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY;YAAE,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,OAAO,6BAA6B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3O,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,eAAe,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACpI,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;AACxE,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,YAAY,CAAC,IAAoB,EAAE,IAAc,EAAE,IAAc,EAAE,MAA6B;IAC7G,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAA6B,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,SAAS,CAAC,KAAK,IAAI,mDAAmD,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACzH,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,SAAS,CAAC,KAAK,IAAI,6CAA6C,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACnH,MAAM,SAAS,CAAC,KAAK,KAAK,cAAc,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,KAAK,cAAc,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,wCAAwC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3L,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC;AACxE,CAAC;AAED,uGAAuG;AACvG,SAAS,WAAW,CAAC,IAAoB,EAAE,IAAsC,EAAE,IAAc;IAC/F,MAAM,KAAK,GAAG;QACZ,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC;QAC/D,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvG,CAAC;IACF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAoB;YAC7B,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxI,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACjN,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,SAAS,YAAY,CAAC,IAAoB,EAAE,IAAuC,EAAE,KAAiB;IACpG,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC,CAAC,+DAA+D;YAClF,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,EAAE,aAAa,EAAE,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1J,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM;YAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,SAAS,IAAI,MAAM;gBAAE,MAAM,SAAS,CAAC,0BAA0B,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,KAAK,CAAC,MAAM,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oHAAoH;AACpH,SAAS,cAAc,CAAC,IAAU,EAAE,IAAY;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC1F,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAClI,MAAM,SAAS,CAAC,8FAA8F,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AAC/H,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAoB,EAAE,IAAU,EAAE,IAAc,EAAE,MAA6B,EAAE,IAAa;IAC1H,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9F,KAAK,QAAQ;YACX,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACtI,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5I,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,KAAK,MAAM;YACT,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5D,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5G,OAAO,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACnG,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvI,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9J,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACpK,CAAC;QACD,KAAK,OAAO;YACV,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACrG,KAAK,QAAQ;YACX,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC5H,CAAC;AACH,CAAC"}

package/dist/http-adapter-client.d.ts

@@ -0,0 +1,51 @@
+/**
+ * The generic `http` adapter's client and the requests both of its ops send: the API from the line's provider
+ * block (`actx.provider` is `providers.http.<api>`, narrowed by `OpSpec.providerFor`), its credential from the
+ * environment variable(s) the block names, and writes with the idempotency each method has.
+ */
+import { type AdapterContext, type Literal, type OpSpec } from "@sponson/core";
+import { type ApiClient } from "./http.js";
+import { type AuthDeps } from "./http-adapter-auth.js";
+/** Per-request settings on top of the API's: a vendor media type, an `Idempotency-Key`. */
+export interface RequestOptions {
+    contentType?: string;
+    headers?: Record<string, string>;
+    /** Overrides the API's encoding (GraphQL requests are always JSON). */
+    encoding?: "json";
+}
+/**
+ * `op` with every call's adapter context carrying `deps` (how `auth.command` runs a CLI, the clock), so the
+ * clients built inside see them. The built-in adapter uses the real ones; tests inject fakes.
+ */
+export declare function withDeps(op: OpSpec, deps: AuthDeps): OpSpec;
+/**
+ * `actx` for a line with `credential` (ADR 0017, "Line credentials"): its clients send that value instead of the
+ * API block's variable. The value is registered as a secret before any request carries it (the engine masks
+ * sensitive outputs and secrets already; this covers an engine without the hook). Without one, `actx` itself.
+ */
+export declare function withLineCredential(actx: AdapterContext, value: unknown): AdapterContext;
+/**
+ * The client for the line's API. The credential (a static header, or a signer for the forms obtained or computed
+ * per request) comes from http-adapter-auth.ts; everything it holds or obtains is masked in this client's error text
+ * too, whatever the engine already masks. `opts`: where the block is, for messages; whether a block without `auth`
+ * sends no credential (a manual step's verify request); the adapter named in errors.
+ */
+export declare function httpClient(actx: AdapterContext, req?: RequestOptions, opts?: {
+    where?: string;
+    authOptional?: boolean;
+    adapter?: string;
+}): ApiClient;
+/**
+ * A write that sets state. PUT is idempotent by method; a PATCH or POST that sets fields (or replaces a whole
+ * list) may safely be sent twice, so a dropped connection is retried like a read. `idempotent: false` is for a
+ * create without an idempotency key: sending it twice could make two objects.
+ */
+export declare function write(api: ApiClient, method: string, path: string, body: unknown, idempotent: boolean): Promise<unknown>;
+/** A provider error whose status is one of `statuses`, or of `code`. */
+export declare function failedWith(e: unknown, code: "PROVIDER_NOT_FOUND" | "PROVIDER_CONFLICT", statuses: number[]): boolean;
+/** An output value: literals as they are, anything structured as canonical JSON, absent as undefined. */
+export declare function literalOf(v: unknown): Literal | undefined;
+/** A provider id at `idPath` in `item`: a non-empty string or a number. */
+export declare function idOf(item: unknown, idPath: string): string | undefined;
+/** The object at `itemPath` in a response body, when it is one. */
+export declare function itemOf(body: unknown, itemPath: string): Record<string, unknown> | undefined;