@sponson/adapters 0.4.0 → 0.5.0

package/dist/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAmG,MAAM,eAAe,CAAC;AAC9K,OAAO,EAAE,SAAS,EAAE,eAAe,EAAkB,MAAM,WAAW,CAAC;AAEvE;;;;;;;;;;;;;;;;GAgBG;AAEH,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAsB,EAAE,IAAY,EAAE,OAAe;IAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,0BAA0B,IAAI,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,GAAsB,EAAE,IAAY;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAW,EAAE,OAAe;IAChF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,GAAG,OAAO,eAAe,OAAO,IAAI,GAAG,0BAA0B,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnK,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,GAAW;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,OAAe,EAAE,IAAoF;IACnJ,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IACxE,OAAO,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,KAAK,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,OAAe;IACrE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,IAAY,EAAQ,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,GAAG,OAAO,WAAW,IAAI,sBAAsB,UAAU,CAAC,CAAW,CAAC,uDAAuD,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7O,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;aAC/D,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACpD,MAAM,CAAC,MAAM,SAAS,GAAa,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAE1D,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,SAAkB;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAW,CAAC,EAAE,CAAC;IACxG,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgI;IACxJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,KAAK,iHAAiH,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9K,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxE,MAAM,MAAM,GAAa,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC7H,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,IAAY,EAAE,OAAe,EAAE,QAAiB;IAClG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAc,EAAE,IAAY;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,oBAAoB,CAAC;YAAE,MAAM,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAmG,MAAM,eAAe,CAAC;AAC9K,OAAO,EAAE,SAAS,EAAE,eAAe,EAAyC,MAAM,WAAW,CAAC;AAE9F;;;;;;;;;;;;;;;;GAgBG;AAEH,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAsB,EAAE,IAAY,EAAE,OAAe;IAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,0BAA0B,IAAI,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,GAAsB,EAAE,IAAY;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAW,EAAE,OAAe;IAChF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,GAAG,OAAO,eAAe,OAAO,IAAI,GAAG,0BAA0B,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnK,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,GAAW;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,OAAe,EAAE,IAA+H;IAC9L,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IACxE,OAAO,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,OAAO,KAAK,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,OAAe;IACrE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,IAAY,EAAQ,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,GAAG,OAAO,WAAW,IAAI,sBAAsB,UAAU,CAAC,CAAW,CAAC,uDAAuD,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7O,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;aAC/D,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACpD,MAAM,CAAC,MAAM,SAAS,GAAa,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAE1D,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,SAAkB;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAW,CAAC,EAAE,CAAC;IACxG,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgI;IACxJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,KAAK,iHAAiH,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9K,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxE,MAAM,MAAM,GAAa,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC7H,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,IAAY,EAAE,OAAe,EAAE,QAAiB;IAClG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,IAAI,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAc,EAAE,IAAY;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,oBAAoB,CAAC;YAAE,MAAM,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/digest.d.ts

@@ -0,0 +1,46 @@
+/** The hash algorithms supported, as a challenge names them. */
+export type DigestAlgorithm = "MD5" | "MD5-sess" | "SHA-256" | "SHA-256-sess";
+/** One `Digest` challenge of a `WWW-Authenticate` header. */
+export interface DigestChallenge {
+    realm: string;
+    nonce: string;
+    opaque?: string;
+    algorithm: DigestAlgorithm;
+    /** The `qop` values the server offers. */
+    qop: string[];
+    /** The previous nonce was merely stale: retry with the new one, the credentials were fine. */
+    stale: boolean;
+}
+/** One auth scheme and its parameters, as written in a `WWW-Authenticate` header. */
+interface RawChallenge {
+    scheme: string;
+    params: Record<string, string>;
+}
+/** Every challenge in a `WWW-Authenticate` value (several headers arrive joined with `, `). */
+export declare function parseChallenges(header: string): RawChallenge[];
+/**
+ * The challenge to answer: a Digest one offering `qop=auth`, SHA-256 preferred over MD5. A reason when there is
+ * none Sponson can answer.
+ */
+export declare function pickChallenge(header: string | null): DigestChallenge | {
+    problem: string;
+};
+/** What an answer is computed from. `nc` counts the requests made with this nonce (1, 2, …). */
+export interface DigestInput {
+    challenge: DigestChallenge;
+    username: string;
+    password: string;
+    method: string;
+    /** The request target as sent: path and query. */
+    uri: string;
+    nc: number;
+    /** The client nonce; random when absent. */
+    cnonce?: string;
+}
+/** The `response` value of RFC 7616 §3.4.1 for `qop=auth`. */
+export declare function digestResponse(input: DigestInput & {
+    cnonce: string;
+}): string;
+/** The `Authorization` header value answering `challenge`. */
+export declare function digestAuthorization(input: DigestInput): string;
+export {};

package/dist/digest.js

@@ -0,0 +1,129 @@
+/**
+ * HTTP Digest access authentication (RFC 7616), client side: parse a `WWW-Authenticate` challenge and compute the
+ * `Authorization` answer. MD5 and SHA-256 (and their `-sess` variants), `qop=auth` only: `auth-int` (a hash of the
+ * body) and the legacy no-qop form of RFC 2069 are refused, as is `userhash`. Pure: the client nonce is a
+ * parameter. Checked against the worked example of RFC 7616 §3.9.1 (digest.test.ts).
+ *
+ * Used by the generic `http` adapter for `auth: { digest: … }` (MongoDB Atlas Admin API keys).
+ */
+import { createHash, randomBytes } from "node:crypto";
+const TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+/;
+/** A quoted-string at `s[i]` (which is `"`): its unescaped value and the index after the closing quote. */
+function quoted(s, i) {
+    let value = "";
+    let j = i + 1;
+    while (j < s.length && s[j] !== '"') {
+        if (s[j] === "\\" && j + 1 < s.length)
+            j++;
+        value += s[j];
+        j++;
+    }
+    return { value, end: j + 1 };
+}
+/** Skip spaces and commas. */
+function skipSeparators(s, i) {
+    while (i < s.length && /[\s,]/.test(s[i]))
+        i++;
+    return i;
+}
+/** One `name=value` (token or quoted-string) at `i`, or null when what is there is not a parameter (a new scheme). */
+function param(s, i) {
+    const name = TOKEN.exec(s.slice(i))?.[0];
+    if (!name)
+        return null;
+    let j = i + name.length;
+    while (s[j] === " ")
+        j++;
+    if (s[j] !== "=")
+        return null;
+    j++;
+    while (s[j] === " ")
+        j++;
+    if (s[j] === '"') {
+        const q = quoted(s, j);
+        return { name: name.toLowerCase(), value: q.value, end: q.end };
+    }
+    const value = TOKEN.exec(s.slice(j))?.[0] ?? "";
+    return { name: name.toLowerCase(), value, end: j + value.length };
+}
+/** Every challenge in a `WWW-Authenticate` value (several headers arrive joined with `, `). */
+export function parseChallenges(header) {
+    const out = [];
+    let i = skipSeparators(header, 0);
+    while (i < header.length) {
+        const scheme = TOKEN.exec(header.slice(i))?.[0];
+        if (!scheme)
+            break;
+        const challenge = { scheme: scheme.toLowerCase(), params: {} };
+        out.push(challenge);
+        i = skipSeparators(header, i + scheme.length);
+        for (let p = param(header, i); p; p = param(header, i)) {
+            challenge.params[p.name] = p.value;
+            i = skipSeparators(header, p.end);
+        }
+    }
+    return out;
+}
+const ALGORITHMS = { "md5": "MD5", "md5-sess": "MD5-sess", "sha-256": "SHA-256", "sha-256-sess": "SHA-256-sess" };
+function toDigest(c) {
+    const algorithm = ALGORITHMS[(c.params.algorithm ?? "MD5").toLowerCase()];
+    const { realm, nonce } = c.params;
+    if (c.scheme !== "digest" || !algorithm || realm === undefined || !nonce)
+        return null;
+    const qop = (c.params.qop ?? "").split(",").map((q) => q.trim().toLowerCase()).filter((q) => q !== "");
+    return { realm, nonce, algorithm, qop, stale: (c.params.stale ?? "").toLowerCase() === "true", ...(c.params.opaque !== undefined ? { opaque: c.params.opaque } : {}) };
+}
+/**
+ * The challenge to answer: a Digest one offering `qop=auth`, SHA-256 preferred over MD5. A reason when there is
+ * none Sponson can answer.
+ */
+export function pickChallenge(header) {
+    if (!header)
+        return { problem: "the 401 carries no WWW-Authenticate challenge" };
+    const digests = parseChallenges(header).map(toDigest).filter((c) => c !== null);
+    if (digests.length === 0)
+        return { problem: "the server offers no Digest challenge with an MD5 or SHA-256 algorithm" };
+    const usable = digests.filter((c) => c.qop.includes("auth"));
+    if (usable.length === 0)
+        return { problem: "the server's Digest challenge does not offer qop=auth (auth-int and RFC 2069 digests are not supported)" };
+    return usable.find((c) => c.algorithm.startsWith("SHA-256")) ?? usable[0];
+}
+function hash(algorithm, s) {
+    return createHash(algorithm.startsWith("SHA-256") ? "sha256" : "md5").update(s, "utf8").digest("hex");
+}
+/** The `response` value of RFC 7616 §3.4.1 for `qop=auth`. */
+export function digestResponse(input) {
+    const { challenge: c, username, password, method, uri, cnonce } = input;
+    const nc = ncOf(input.nc);
+    let ha1 = hash(c.algorithm, `${username}:${c.realm}:${password}`);
+    if (c.algorithm.endsWith("-sess"))
+        ha1 = hash(c.algorithm, `${ha1}:${c.nonce}:${cnonce}`);
+    const ha2 = hash(c.algorithm, `${method.toUpperCase()}:${uri}`);
+    return hash(c.algorithm, `${ha1}:${c.nonce}:${nc}:${cnonce}:auth:${ha2}`);
+}
+function ncOf(n) {
+    return n.toString(16).padStart(8, "0");
+}
+function quote(s) {
+    return `"${s.replace(/(["\\])/g, "\\$1")}"`;
+}
+/** The `Authorization` header value answering `challenge`. */
+export function digestAuthorization(input) {
+    const cnonce = input.cnonce ?? randomBytes(16).toString("hex");
+    const c = input.challenge;
+    const response = digestResponse({ ...input, cnonce });
+    const parts = [
+        `username=${quote(input.username)}`,
+        `realm=${quote(c.realm)}`,
+        `uri=${quote(input.uri)}`,
+        `algorithm=${c.algorithm}`,
+        `nonce=${quote(c.nonce)}`,
+        `nc=${ncOf(input.nc)}`,
+        `cnonce=${quote(cnonce)}`,
+        "qop=auth",
+        `response=${quote(response)}`,
+        ...(c.opaque !== undefined ? [`opaque=${quote(c.opaque)}`] : []),
+    ];
+    return `Digest ${parts.join(", ")}`;
+}
+//# sourceMappingURL=digest.js.map

package/dist/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../src/digest.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuBtD,MAAM,KAAK,GAAG,8BAA8B,CAAC;AAE7C,2GAA2G;AAC3G,SAAS,MAAM,CAAC,CAAS,EAAE,CAAS;IAClC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,CAAC,EAAE,CAAC;QAC3C,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACd,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,8BAA8B;AAC9B,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAChD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sHAAsH;AACtH,SAAS,KAAK,CAAC,CAAS,EAAE,CAAS;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,CAAC,EAAE,CAAC;IACJ,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;AACpE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,MAAM,SAAS,GAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpB,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACnC,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,GAAoC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAEnJ,SAAS,QAAQ,CAAC,CAAe;IAC/B,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACvG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzK,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACtG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,wEAAwE,EAAE,CAAC;IACvH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,yGAAyG,EAAE,CAAC;IACvJ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC;AAC7E,CAAC;AAED,SAAS,IAAI,CAAC,SAA0B,EAAE,CAAS;IACjD,OAAO,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxG,CAAC;AAeD,8DAA8D;AAC9D,MAAM,UAAU,cAAc,CAAC,KAAuC;IACpE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACxE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACpD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;IAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG;QACZ,YAAY,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACnC,SAAS,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QACzB,aAAa,CAAC,CAAC,SAAS,EAAE;QAC1B,SAAS,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;QACtB,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE;QACzB,UAAU;QACV,YAAY,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC7B,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,OAAO,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC"}

package/dist/digitalocean.d.ts

@@ -0,0 +1,5 @@
+import { type ResourceAdapter } from "@sponson/core";
+/** DigitalOcean's API base URL (DO1). `DIGITALOCEAN_API_URL` overrides it; tests point that at the sim. */
+export declare const DIGITALOCEAN_DEFAULT_API_URL = "https://api.digitalocean.com";
+/** The DigitalOcean adapter (`adapter: digitalocean` in a plan). Registered in `createRegistry()`; needs `DIGITALOCEAN_ACCESS_TOKEN`. */
+export declare const digitaloceanAdapter: ResourceAdapter;

package/dist/digitalocean.js

@@ -0,0 +1,243 @@
+/**
+ * DigitalOcean App Platform adapter: an app per scope, created from an app spec the plan carries whole (its
+ * environment variables included), and waited for until its deployment is live. App Platform has no native pull
+ * request previews; this is the app per pull request that DigitalOcean's GitHub action otherwise makes. The API
+ * assumptions it relies on are numbered DO1… at the top of packages/sim/src/routes/digitalocean.ts.
+ *
+ * - Key: `app:<spec.name>` (names are unique in an account, DO3). Id: the app's id.
+ * - Hash: the spec's fields the plan declares, read back from the live spec (the platform adds defaults, DO6;
+ *   those are not the plan's), with the values of `SECRET` variables left out (they read back encrypted, DO7). A
+ *   console edit of a declared field is `changed` drift; a secret's value edited in the console is not seen.
+ * - Writes: `PUT` of the whole spec (DO4), so a field set only in the console is lost on the next update. Every
+ *   create and update starts a deployment, which `apply` waits for (`wait: false` to skip).
+ */
+import { setTimeout as sleep } from "node:timers/promises";
+import { SponsonError, canonicalJson, markerKind, sha256 } from "@sponson/core";
+// Only the stable authoring API exported from `@sponson/adapters` (listed in CONTRIBUTING.md).
+import { assertNoPending, clientFor, deleteIgnoringNotFound, desiredSide, optionalEnv, paramError, requireEnv } from "./common.js";
+import { ShapeError, isObject, isProviderError, listAll } from "./http.js";
+const ADAPTER = "digitalocean";
+/** The environment DigitalOcean reads (doctl's variable); declared once, used here and by the generated docs. */
+const ABOUT = { credentialEnv: "DIGITALOCEAN_ACCESS_TOKEN", baseUrlEnv: "DIGITALOCEAN_API_URL", title: "DigitalOcean App Platform", category: "deploy", detect: { env: ["DIGITALOCEAN_*"], files: [".do/app.yaml", ".do/deploy.template.yaml"] } };
+/** DigitalOcean's API base URL (DO1). `DIGITALOCEAN_API_URL` overrides it; tests point that at the sim. */
+export const DIGITALOCEAN_DEFAULT_API_URL = "https://api.digitalocean.com";
+/** How often a deployment is polled, and for how long (milliseconds; overridable for tests). */
+const POLL_MS = { env: "SPONSON_DIGITALOCEAN_POLL_MS", fallback: 5000 };
+const DEPLOY_TIMEOUT_MS = { env: "SPONSON_DIGITALOCEAN_DEPLOY_TIMEOUT_MS", fallback: 20 * 60 * 1000 };
+function msFromEnv(env, s) {
+    const raw = optionalEnv(env, s.env);
+    const n = Number(raw);
+    return raw !== undefined && Number.isFinite(n) && n >= 0 ? n : s.fallback;
+}
+function client(actx) {
+    const token = requireEnv(actx.env, ABOUT.credentialEnv, ADAPTER);
+    return clientFor(actx, ADAPTER, { baseUrl: optionalEnv(actx.env, ABOUT.baseUrlEnv) ?? DIGITALOCEAN_DEFAULT_API_URL, token });
+}
+function parseApp(v) {
+    if (!isObject(v) || typeof v.id !== "string" || !isObject(v.spec))
+        throw new ShapeError("expected an app with `id` and `spec`");
+    const dep = [v.pending_deployment, v.in_progress_deployment].find((d) => isObject(d) && typeof d.id === "string");
+    return { id: v.id, spec: v.spec, ...(typeof v.live_url === "string" && v.live_url !== "" ? { liveUrl: v.live_url } : {}), ...(dep ? { deployment: dep.id } : {}) };
+}
+function appOf(body) {
+    if (!isObject(body))
+        throw new ShapeError("expected `{ app }`");
+    return parseApp(body.app);
+}
+// ---------------------------------------------------------------------------
+// The spec and its hash
+// ---------------------------------------------------------------------------
+/** The plan's spec; PARAM_INVALID unless it is a map with a `name`. */
+function specParam(params) {
+    const spec = params.spec;
+    if (!isObject(spec))
+        throw paramError(ADAPTER, "param `spec` is required: the whole app spec, as a map", "spec");
+    if (markerKind(spec.name) === null && (typeof spec.name !== "string" || spec.name === ""))
+        throw paramError(ADAPTER, "`spec.name` is required: the app's name, unique in the account", "spec.name");
+    return spec;
+}
+/** `live` reduced to the fields `desired` declares, recursively (maps by key, lists by position). */
+function projectSpec(live, desired) {
+    if (isObject(desired))
+        return Object.fromEntries(Object.entries(desired).map(([k, v]) => [k, projectSpec(isObject(live) ? live[k] : undefined, v)]));
+    if (Array.isArray(desired))
+        return desired.map((d, i) => projectSpec(Array.isArray(live) ? live[i] : undefined, d));
+    return live ?? null;
+}
+/** The spec with the value of every `type: SECRET` variable replaced by a placeholder: it reads back encrypted (DO7). */
+function maskSecrets(v) {
+    if (Array.isArray(v))
+        return v.map(maskSecrets);
+    if (!isObject(v))
+        return v;
+    const out = Object.fromEntries(Object.entries(v).map(([k, x]) => [k, maskSecrets(x)]));
+    if (out.type === "SECRET" && "value" in out)
+        out.value = "(secret)";
+    return out;
+}
+function specHash(spec) {
+    return sha256(canonicalJson(maskSecrets(spec)));
+}
+const PREFIX = "app:";
+function appRecord(name, id, hash) {
+    return { key: `${PREFIX}${name}`, id, hash, label: `DigitalOcean app ${name}` };
+}
+function outputsOf(app) {
+    return { app_id: app.id, ...(app.liveUrl ? { live_url: app.liveUrl } : {}) };
+}
+/** The first pending or secret marker anywhere in the spec. */
+function firstMarker(v) {
+    const kind = markerKind(v);
+    if (kind === "pending" || kind === "secret")
+        return v;
+    const children = Array.isArray(v) ? v : isObject(v) ? Object.values(v) : [];
+    for (const c of children) {
+        const m = firstMarker(c);
+        if (m !== undefined)
+            return m;
+    }
+    return undefined;
+}
+// ---------------------------------------------------------------------------
+// Reading, waiting
+// ---------------------------------------------------------------------------
+/** What `read` found, kept for `apply` of the same inspection. */
+const found = new WeakMap();
+/** The app named `name`, from the paged list (DO2, DO3); null when there is none. */
+async function findApp(api, name) {
+    const apps = await listAll(api, "/v2/apps?per_page=100", (body, n) => {
+        if (!isObject(body))
+            throw new ShapeError("expected `{ apps, links }`");
+        const list = Array.isArray(body.apps) ? body.apps.map(parseApp) : [];
+        const pages = isObject(body.links) && isObject(body.links.pages) ? body.links.pages : {};
+        return { items: list, next: typeof pages.next === "string" ? { page: String(n + 2) } : null };
+    });
+    return apps.find((a) => a.spec.name === name) ?? null;
+}
+/** The phase of a deployment (DO5). */
+async function phaseOf(api, app, deployment) {
+    return api.get(`/v2/apps/${encodeURIComponent(app)}/deployments/${encodeURIComponent(deployment)}`, (b) => {
+        if (!isObject(b) || !isObject(b.deployment) || typeof b.deployment.phase !== "string")
+            throw new ShapeError("expected `{ deployment: { phase } }`");
+        return b.deployment.phase;
+    });
+}
+const DONE = ["ACTIVE", "SUPERSEDED"];
+const FAILED = ["ERROR", "CANCELED"];
+/** Poll the deployment a write started until it is live (DO5); a failed one fails the line. */
+async function waitDeployed(actx, api, name, app) {
+    if (!app.deployment)
+        return app;
+    const deadline = Date.now() + msFromEnv(actx.env, DEPLOY_TIMEOUT_MS);
+    for (;;) {
+        const phase = await phaseOf(api, app.id, app.deployment);
+        if (DONE.includes(phase))
+            return api.get(`/v2/apps/${encodeURIComponent(app.id)}`, appOf);
+        if (FAILED.includes(phase))
+            throw new SponsonError("PROVIDER_INVALID", `digitalocean: the deployment of app ${name} ended ${phase}; see its build and deploy logs`, { adapter: ADAPTER, app: name });
+        if (Date.now() > deadline) {
+            throw new SponsonError("WAIT_TIMEOUT", `digitalocean: app ${name} is not deployed after ${msFromEnv(actx.env, DEPLOY_TIMEOUT_MS)}ms (${DEPLOY_TIMEOUT_MS.env}); run again to keep waiting`, { adapter: ADAPTER, app: name });
+        }
+        actx.log(`app ${name}: deployment ${phase}`);
+        await sleep(msFromEnv(actx.env, POLL_MS));
+    }
+}
+// ---------------------------------------------------------------------------
+// Writing
+// ---------------------------------------------------------------------------
+function waits(params) {
+    if (params.wait !== undefined && typeof params.wait !== "boolean")
+        throw paramError(ADAPTER, "param `wait` must be true or false", "wait");
+    return params.wait !== false;
+}
+async function update(actx, api, spec, existing, wait) {
+    const name = String(spec.name);
+    actx.log(`update app ${name}`);
+    const app = await api.put(`/v2/apps/${encodeURIComponent(existing.id)}`, { spec }, appOf);
+    const done = wait ? await waitDeployed(actx, api, name, app) : app;
+    return { resources: [appRecord(name, done.id, specHash(spec))], outputs: outputsOf(done), created: [] };
+}
+async function create(actx, api, spec, wait) {
+    const name = String(spec.name);
+    const key = `${PREFIX}${name}`;
+    await actx.intend([key]);
+    actx.log(`create app ${name}`);
+    let app;
+    try {
+        app = await api.post("/v2/apps", { spec }, appOf);
+    }
+    catch (e) {
+        if (!isProviderError(e, "PROVIDER_CONFLICT"))
+            throw e;
+        // It exists already (DO3): ours from a create whose answer was lost, or someone else's. Not created by this
+        // call; the engine claims it when an earlier intent of ours named it.
+        const existing = await findApp(api, name);
+        if (!existing)
+            throw e;
+        return update(actx, api, spec, existing, wait);
+    }
+    const done = wait ? await waitDeployed(actx, api, name, app) : app;
+    return { resources: [appRecord(name, done.id, specHash(spec))], outputs: outputsOf(done), created: [key] };
+}
+function pendingDiff(name, marker) {
+    const key = markerKind(name) !== null ? `${PREFIX}(pending)` : `${PREFIX}${String(name)}`;
+    return [{ key, kind: "create", label: `DigitalOcean app ${String(name)}`, before: { state: "absent" }, after: desiredSide(marker, false) }];
+}
+/** A spec shown by its hash: it may hold resolved secret values, which never belong in a diff. */
+function specSide(spec) {
+    return { state: "literal", value: `spec ${specHash(spec).slice(0, 12)}` };
+}
+const app = {
+    outputs: { app_id: { available: "immediate" }, live_url: { available: "immediate" } },
+    async read(actx, params) {
+        const spec = specParam(params);
+        if (markerKind(spec.name) !== null)
+            return null;
+        const live = await findApp(client(actx), String(spec.name));
+        if (!live)
+            return null;
+        const state = { resources: [appRecord(String(spec.name), live.id, specHash(projectSpec(live.spec, spec)))], outputs: outputsOf(live) };
+        found.set(state, live);
+        return state;
+    },
+    diff(live, params) {
+        const spec = specParam(params);
+        const marker = firstMarker(spec);
+        const key = `${PREFIX}${String(spec.name)}`;
+        const label = `DigitalOcean app ${String(spec.name)}`;
+        const current = live?.resources.find((r) => r.key === key);
+        if (marker !== undefined && !current)
+            return pendingDiff(spec.name, marker);
+        if (!current)
+            return [{ key, kind: "create", label, before: { state: "absent" }, after: specSide(spec) }];
+        if (marker !== undefined)
+            return [{ key, kind: "update", label, before: { state: "literal", value: `spec ${current.hash.slice(0, 12)}` }, after: desiredSide(marker, false) }];
+        if (current.hash === specHash(spec))
+            return [{ key, kind: "unchanged", label }];
+        return [{ key, kind: "update", label, before: { state: "literal", value: `spec ${current.hash.slice(0, 12)}` }, after: specSide(spec) }];
+    },
+    async apply(actx, params, live) {
+        assertNoPending(params, ADAPTER);
+        const spec = specParam(params);
+        const wait = waits(params);
+        const api = client(actx);
+        const key = `${PREFIX}${String(spec.name)}`;
+        const current = live?.resources.find((r) => r.key === key);
+        const existing = live ? found.get(live) : undefined;
+        if (current && live && current.hash === specHash(spec))
+            return { resources: live.resources, outputs: live.outputs, created: [] };
+        if (existing)
+            return update(actx, api, spec, existing, wait);
+        return create(actx, api, spec, wait);
+    },
+    async destroy(actx, resources) {
+        const api = client(actx);
+        // An intent the engine could not locate has no id: nothing is deleted on a guess.
+        for (const r of resources)
+            if (r.id !== "")
+                await deleteIgnoringNotFound(api, `/v2/apps/${encodeURIComponent(r.id)}`);
+    },
+};
+/** The DigitalOcean adapter (`adapter: digitalocean` in a plan). Registered in `createRegistry()`; needs `DIGITALOCEAN_ACCESS_TOKEN`. */
+export const digitaloceanAdapter = { name: ADAPTER, ops: { app }, about: ABOUT };
+//# sourceMappingURL=digitalocean.js.map

package/dist/digitalocean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.js","sourceRoot":"","sources":["../src/digitalocean.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAA4H,MAAM,eAAe,CAAC;AAC1M,+FAA+F;AAC/F,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACnI,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAkB,MAAM,WAAW,CAAC;AAE3F,MAAM,OAAO,GAAG,cAAc,CAAC;AAC/B,iHAAiH;AACjH,MAAM,KAAK,GAAG,EAAE,aAAa,EAAE,2BAA2B,EAAE,UAAU,EAAE,sBAAsB,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,0BAA0B,CAAC,EAAE,EAAW,CAAC;AAE5P,2GAA2G;AAC3G,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE3E,gGAAgG;AAChG,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,8BAA8B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACxE,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,wCAAwC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;AAEtG,SAAS,SAAS,CAAC,GAAsB,EAAE,CAAoC;IAC7E,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5E,CAAC;AAED,SAAS,MAAM,CAAC,IAAoB;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,4BAA4B,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/H,CAAC;AAaD,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;IAChI,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAA+B,CAAC;IAChJ,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrK,CAAC;AAED,SAAS,KAAK,CAAC,IAAa;IAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,uEAAuE;AACvE,SAAS,SAAS,CAAC,MAA+B;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,wDAAwD,EAAE,MAAM,CAAC,CAAC;IACjH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,gEAAgE,EAAE,WAAW,CAAC,CAAC;IACpM,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qGAAqG;AACrG,SAAS,WAAW,CAAC,IAAa,EAAE,OAAgB;IAClD,IAAI,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrJ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACpH,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAED,yHAAyH;AACzH,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,GAAG;QAAE,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB,SAAS,SAAS,CAAC,IAAY,EAAE,EAAU,EAAE,IAAY;IACvD,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ;IACzB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,+DAA+D;AAC/D,SAAS,WAAW,CAAC,CAAU;IAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAW,CAAC;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,kEAAkE;AAClE,MAAM,KAAK,GAAG,IAAI,OAAO,EAAkB,CAAC;AAE5C,qFAAqF;AACrF,KAAK,UAAU,OAAO,CAAC,GAAc,EAAE,IAAY;IACjD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,uBAAuB,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACnE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,uCAAuC;AACvC,KAAK,UAAU,OAAO,CAAC,GAAc,EAAE,GAAW,EAAE,UAAkB;IACpE,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;QACxG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;QACpJ,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AACtC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAErC,+FAA+F;AAC/F,KAAK,UAAU,YAAY,CAAC,IAAoB,EAAE,GAAc,EAAE,IAAY,EAAE,GAAQ;IACtF,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACrE,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,uCAAuC,IAAI,UAAU,KAAK,iCAAiC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACrM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,qBAAqB,IAAI,0BAA0B,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,OAAO,iBAAiB,CAAC,GAAG,8BAA8B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/N,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,KAAK,CAAC,MAA+B;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC;IAC3I,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,GAAc,EAAE,IAAU,EAAE,QAAa,EAAE,IAAa;IAClG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnE,OAAO,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,GAAc,EAAE,IAAU,EAAE,IAAa;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC/B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,mBAAmB,CAAC;YAAE,MAAM,CAAC,CAAC;QACtD,4GAA4G;QAC5G,sEAAsE;QACtE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnE,OAAO,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,WAAW,CAAC,IAAa,EAAE,MAAc;IAChD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1F,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AAC9I,CAAC;AAED,kGAAkG;AAClG,SAAS,QAAQ,CAAC,IAAU;IAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,GAAG,GAAW;IAClB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;IAErF,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,KAAK,GAAc,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAClJ,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,MAAM;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,oBAAoB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/K,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3I,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;QAC5B,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACjI,IAAI,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,kFAAkF;QAClF,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;gBAAE,MAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;CACF,CAAC;AAEF,yIAAyI;AACzI,MAAM,CAAC,MAAM,mBAAmB,GAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC"}

package/dist/http-adapter-action.d.ts

@@ -0,0 +1,63 @@
+/**
+ * `http.action`: one request (or GraphQL request) sent when the line's trigger changes, for side effects with
+ * nothing to read back or delete: an Inngest sync of a preview deployment, a cache purge, a deploy notification.
+ * See ADR 0022 and docs/plan-format.md#httpaction.
+ *
+ * The engine owns the line's state (`OpSpec.action`): the ledger key is `action:<line id>`, the hash the trigger's,
+ * and `apply` is called only to send it. This file parses the line, sends the request and checks the answer
+ * (status, `expect`), takes the declared outputs, and returns the record id that says how to undo it:
+ *
+ * - `FORGET`: no `undo`; destroy forgets the record;
+ * - `UNDO <canonical JSON request>`: the `undo` request with every value resolved when the action ran (references
+ *   and outputs filled in, never a secret), so destroy needs nothing but the ledger.
+ *
+ * A request goes either to the line's API (`path`, or `graphql`; the `providers.http.<api>` block's base URL,
+ * credential and headers) or to an absolute `url` (the app's own endpoint, such as a preview deployment's
+ * `/api/inngest`), which gets no credential and no API headers: a URL resolved at run time never receives the
+ * API's credential. A `url` line has no `api` and its provider block (ledger identity) is empty.
+ */
+import { type OpSpec } from "@sponson/core";
+import { type GraphqlSpec } from "./http-adapter-graphql.js";
+/** One request of an action: to the API (`path` or `graphql`) or to an absolute `url`. */
+export interface ActionRequest {
+    method: string;
+    /** Relative to the API's base URL; placeholders from `vars` (and, in `undo`, from the outputs). */
+    path?: string;
+    /** An absolute http(s) URL; a reference until it resolves. */
+    url?: unknown;
+    /** Absent: no body. */
+    body?: unknown;
+    /** Header name → value (references allowed; a `{ secret }` only in `request`, never in `undo`). */
+    headers: Record<string, unknown>;
+    contentType?: string;
+    graphql?: GraphqlSpec;
+}
+/** `http.action` params, checked. Values may still be markers. */
+export interface ActionSpec {
+    api?: string;
+    vars: Record<string, unknown>;
+    trigger: Record<string, unknown>;
+    request: ActionRequest & {
+        idempotencyKey: boolean;
+    };
+    undo?: ActionRequest;
+    /** Statuses (400–499) that count as success too, with no answer to read (an "already done" 409). */
+    okStatus: number[];
+    /** JSON pointer → value the answer must hold, or the action failed. */
+    expect: Record<string, unknown>;
+    /** Output name → JSON pointer into the answer. Never sensitive: an unchanged line's outputs come from the ledger. */
+    outputs: Record<string, string>;
+}
+/** `http.action` params, checked; PARAM_INVALID naming the field otherwise. */
+export declare function parseAction(line: Record<string, unknown>): ActionSpec;
+/**
+ * What the ledger knows a line's action by, as far as the line decides it: the key is the engine's
+ * (`action:<line id>`), the record id `FORGET` or the undo request (its placeholders filled when it runs). The
+ * recipe identity lock (recipes.test.ts) pins it per recipe op.
+ */
+export declare function actionIdentity(spec: ActionSpec): {
+    key: string;
+    id: string;
+};
+/** `http.action`: one request sent when the line's trigger changes; the engine records which trigger ran. */
+export declare const action: OpSpec;