@suiteportal/connector 0.1.0

package/README.md

@@ -0,0 +1,41 @@
+# @suiteportal/connector
+
+NetSuite OAuth 1.0a connector with SuiteQL query execution. Zero runtime dependencies — uses Node.js built-in `crypto` and `fetch`.
+
+## Install
+
+```bash
+npm install @suiteportal/connector
+```
+
+## Usage
+
+```ts
+import { createConnector } from '@suiteportal/connector';
+
+const connector = createConnector({
+  accountId: '1234567_SB1',
+  consumerKey: '...',
+  consumerSecret: '...',
+  tokenId: '...',
+  tokenSecret: '...',
+});
+
+// Execute a SuiteQL query
+const results = await connector.query('SELECT id, companyname FROM customer WHERE rownum <= 10');
+```
+
+## Features
+
+- OAuth 1.0a signing (HMAC-SHA256, RFC 5849)
+- HTTP client with retry, rate-limiting, and timeout
+- SuiteQL query executor with pagination
+- Custom error hierarchy: `AuthError`, `RateLimitError`, `TimeoutError`
+
+## Documentation
+
+Full docs at [suiteportal.dev](https://suiteportal.dev)
+
+## License
+
+MIT

package/dist/index.cjs

@@ -0,0 +1,433 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthError: () => AuthError,
+  NetSuiteClient: () => NetSuiteClient,
+  NetSuiteError: () => NetSuiteError,
+  RateLimitError: () => RateLimitError,
+  RateLimiter: () => RateLimiter,
+  TimeoutError: () => TimeoutError,
+  buildAuthorizationHeader: () => buildAuthorizationHeader,
+  buildSignatureBaseString: () => buildSignatureBaseString,
+  deriveBaseUrl: () => deriveBaseUrl,
+  executeSuiteQL: () => executeSuiteQL,
+  executeSuiteQLPaginated: () => executeSuiteQLPaginated,
+  generateNonce: () => generateNonce,
+  generateOAuthSignature: () => generateOAuthSignature,
+  generateTimestamp: () => generateTimestamp,
+  getRealm: () => getRealm,
+  isRetryableStatus: () => isRetryableStatus,
+  percentEncode: () => percentEncode,
+  resolveConfig: () => resolveConfig,
+  signHmacSha256: () => signHmacSha256,
+  withRetry: () => withRetry
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/auth/oauth.ts
+var import_node_crypto = require("crypto");
+function percentEncode(str) {
+  return encodeURIComponent(str).replace(/[!'()*]/g, (c) => {
+    return `%${c.charCodeAt(0).toString(16).toUpperCase()}`;
+  });
+}
+function generateNonce() {
+  return (0, import_node_crypto.randomBytes)(16).toString("hex");
+}
+function generateTimestamp() {
+  return Math.floor(Date.now() / 1e3).toString();
+}
+function buildSignatureBaseString(method, baseUrl, params) {
+  const sorted = [...params].sort((a, b) => {
+    const keyCompare = a[0].localeCompare(b[0]);
+    return keyCompare !== 0 ? keyCompare : a[1].localeCompare(b[1]);
+  });
+  const paramString = sorted.map(([k, v]) => `${percentEncode(k)}=${percentEncode(v)}`).join("&");
+  return [
+    method.toUpperCase(),
+    percentEncode(baseUrl),
+    percentEncode(paramString)
+  ].join("&");
+}
+function signHmacSha256(baseString, consumerSecret, tokenSecret) {
+  const signingKey = `${percentEncode(consumerSecret)}&${percentEncode(tokenSecret)}`;
+  return (0, import_node_crypto.createHmac)("sha256", signingKey).update(baseString).digest("base64");
+}
+function generateOAuthSignature(params) {
+  const timestamp = params.timestamp ?? generateTimestamp();
+  const nonce = params.nonce ?? generateNonce();
+  const oauthParams = {
+    oauth_consumer_key: params.consumerKey,
+    oauth_token: params.tokenId,
+    oauth_nonce: nonce,
+    oauth_timestamp: timestamp,
+    oauth_signature_method: "HMAC-SHA256",
+    oauth_version: "1.0"
+  };
+  const urlObj = new URL(params.url);
+  const baseUrl = `${urlObj.protocol}//${urlObj.host}${urlObj.pathname}`;
+  const allParams = Object.entries(oauthParams);
+  urlObj.searchParams.forEach((value, key) => {
+    allParams.push([key, value]);
+  });
+  const baseString = buildSignatureBaseString(params.method, baseUrl, allParams);
+  const signature = signHmacSha256(baseString, params.consumerSecret, params.tokenSecret);
+  return { signature, oauthParams };
+}
+
+// src/auth/headers.ts
+function buildAuthorizationHeader(params) {
+  const { signature, oauthParams } = generateOAuthSignature(params);
+  const headerParams = {
+    realm: params.realm,
+    ...oauthParams,
+    oauth_signature: signature
+  };
+  const parts = Object.entries(headerParams).map(([key, value]) => `${percentEncode(key)}="${percentEncode(value)}"`).join(", ");
+  return `OAuth ${parts}`;
+}
+
+// src/config.ts
+var REQUIRED_FIELDS = [
+  "accountId",
+  "consumerKey",
+  "consumerSecret",
+  "tokenId",
+  "tokenSecret"
+];
+var DEFAULTS = {
+  timeout: 3e4,
+  concurrency: 5,
+  maxRetries: 3
+};
+function resolveConfig(config) {
+  for (const field of REQUIRED_FIELDS) {
+    if (!config[field]) {
+      throw new Error(`NetSuiteConfig: "${field}" is required`);
+    }
+  }
+  return {
+    accountId: config.accountId,
+    consumerKey: config.consumerKey,
+    consumerSecret: config.consumerSecret,
+    tokenId: config.tokenId,
+    tokenSecret: config.tokenSecret,
+    timeout: config.timeout ?? DEFAULTS.timeout,
+    concurrency: config.concurrency ?? DEFAULTS.concurrency,
+    maxRetries: config.maxRetries ?? DEFAULTS.maxRetries,
+    baseUrl: config.baseUrl ?? deriveBaseUrl(config.accountId)
+  };
+}
+function deriveBaseUrl(accountId) {
+  const normalized = accountId.toLowerCase().replace(/_/g, "-");
+  return `https://${normalized}.suitetalk.api.netsuite.com`;
+}
+function getRealm(accountId) {
+  return accountId.toUpperCase().replace(/-/g, "_");
+}
+
+// src/http/errors.ts
+var NetSuiteError = class extends Error {
+  constructor(message, status, code, details) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.details = details;
+    this.name = "NetSuiteError";
+  }
+};
+var AuthError = class extends NetSuiteError {
+  constructor(message, status, details) {
+    super(message, status, "AUTH_ERROR", details);
+    this.name = "AuthError";
+  }
+};
+var RateLimitError = class extends NetSuiteError {
+  constructor(retryAfterMs, details) {
+    super(`Rate limited. Retry after ${retryAfterMs}ms`, 429, "RATE_LIMIT", details);
+    this.retryAfterMs = retryAfterMs;
+    this.name = "RateLimitError";
+  }
+};
+var TimeoutError = class extends NetSuiteError {
+  constructor(timeoutMs) {
+    super(`Request timed out after ${timeoutMs}ms`, void 0, "TIMEOUT");
+    this.name = "TimeoutError";
+  }
+};
+var RETRYABLE_STATUSES = /* @__PURE__ */ new Set([408, 429, 502, 503, 504]);
+function isRetryableStatus(status) {
+  return RETRYABLE_STATUSES.has(status);
+}
+
+// src/http/rate-limiter.ts
+var RateLimiter = class {
+  constructor(maxConcurrent) {
+    this.maxConcurrent = maxConcurrent;
+  }
+  active = 0;
+  queue = [];
+  /** Acquire a slot. Resolves when a slot is available. */
+  async acquire() {
+    if (this.active < this.maxConcurrent) {
+      this.active++;
+      return;
+    }
+    return new Promise((resolve) => {
+      this.queue.push(() => {
+        this.active++;
+        resolve();
+      });
+    });
+  }
+  /** Release a slot, unblocking the next waiter if any. */
+  release() {
+    this.active--;
+    const next = this.queue.shift();
+    if (next) {
+      next();
+    }
+  }
+  /** Run an async function within the concurrency limit. */
+  async run(fn) {
+    await this.acquire();
+    try {
+      return await fn();
+    } finally {
+      this.release();
+    }
+  }
+  /** Number of currently active tasks. */
+  get activeCount() {
+    return this.active;
+  }
+  /** Number of tasks waiting for a slot. */
+  get waitingCount() {
+    return this.queue.length;
+  }
+};
+
+// src/http/retry.ts
+async function withRetry(fn, options) {
+  const { maxRetries, baseDelay = 500, maxDelay = 3e4 } = options;
+  let lastError;
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    try {
+      return await fn();
+    } catch (error) {
+      lastError = error;
+      if (attempt >= maxRetries) break;
+      if (error instanceof NetSuiteError && error.code === "AUTH_ERROR") {
+        throw error;
+      }
+      if (error instanceof NetSuiteError && error.status != null && !isRetryableStatus(error.status)) {
+        throw error;
+      }
+      let delay;
+      if (error instanceof RateLimitError) {
+        delay = error.retryAfterMs;
+      } else {
+        const exponential = baseDelay * Math.pow(2, attempt);
+        delay = Math.min(exponential, maxDelay) * Math.random();
+      }
+      await sleep(delay);
+    }
+  }
+  throw lastError;
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+// src/http/client.ts
+var NetSuiteClient = class {
+  config;
+  rateLimiter;
+  constructor(config) {
+    this.config = resolveConfig(config);
+    this.rateLimiter = new RateLimiter(this.config.concurrency);
+  }
+  /** Make an authenticated request to the NetSuite REST API. */
+  async request(options) {
+    return this.rateLimiter.run(
+      () => withRetry(
+        () => this.executeRequest(options),
+        { maxRetries: this.config.maxRetries }
+      )
+    );
+  }
+  /** Get the resolved base URL. */
+  get baseUrl() {
+    return this.config.baseUrl;
+  }
+  /** Get the resolved config (read-only). */
+  get resolvedConfig() {
+    return this.config;
+  }
+  async executeRequest(options) {
+    const url = this.buildUrl(options.path, options.query);
+    const realm = getRealm(this.config.accountId);
+    const authHeader = buildAuthorizationHeader({
+      consumerKey: this.config.consumerKey,
+      consumerSecret: this.config.consumerSecret,
+      tokenId: this.config.tokenId,
+      tokenSecret: this.config.tokenSecret,
+      realm,
+      method: options.method,
+      url
+    });
+    const headers = {
+      Authorization: authHeader,
+      "Content-Type": "application/json",
+      Accept: "application/json",
+      ...options.headers
+    };
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
+    try {
+      const response = await fetch(url, {
+        method: options.method,
+        headers,
+        body: options.body != null ? JSON.stringify(options.body) : void 0,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      if (!response.ok) {
+        await this.handleErrorResponse(response);
+      }
+      const data = await response.json();
+      return { status: response.status, headers: response.headers, data };
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof NetSuiteError) throw error;
+      if (error instanceof DOMException && error.name === "AbortError") {
+        throw new TimeoutError(this.config.timeout);
+      }
+      throw new NetSuiteError(
+        `Network error: ${error instanceof Error ? error.message : String(error)}`,
+        void 0,
+        "NETWORK_ERROR"
+      );
+    }
+  }
+  buildUrl(path, query) {
+    const url = new URL(path, this.config.baseUrl);
+    if (query) {
+      for (const [key, value] of Object.entries(query)) {
+        url.searchParams.set(key, value);
+      }
+    }
+    return url.toString();
+  }
+  async handleErrorResponse(response) {
+    let body;
+    try {
+      body = await response.json();
+    } catch {
+      body = await response.text().catch(() => void 0);
+    }
+    if (response.status === 401 || response.status === 403) {
+      throw new AuthError(
+        `Authentication failed: ${response.status} ${response.statusText}`,
+        response.status,
+        body
+      );
+    }
+    if (response.status === 429) {
+      const retryAfter = response.headers.get("Retry-After");
+      const retryMs = retryAfter ? parseInt(retryAfter, 10) * 1e3 : 5e3;
+      throw new RateLimitError(retryMs, body);
+    }
+    throw new NetSuiteError(
+      `HTTP ${response.status}: ${response.statusText}`,
+      response.status,
+      void 0,
+      body
+    );
+  }
+};
+
+// src/suiteql/executor.ts
+var SUITEQL_PATH = "/services/rest/query/v1/suiteql";
+async function executeSuiteQL(client, query, options) {
+  const limit = options?.limit ?? 1e3;
+  const offset = options?.offset ?? 0;
+  const response = await client.request({
+    method: "POST",
+    path: SUITEQL_PATH,
+    body: { q: query },
+    headers: {
+      Prefer: "transient"
+    },
+    query: {
+      limit: limit.toString(),
+      offset: offset.toString()
+    }
+  });
+  return {
+    items: response.data.items,
+    totalResults: response.data.totalResults,
+    hasMore: response.data.hasMore
+  };
+}
+
+// src/suiteql/paginator.ts
+async function executeSuiteQLPaginated(client, query, options) {
+  const pageSize = options?.pageSize ?? 1e3;
+  const maxRows = options?.maxRows ?? Infinity;
+  const allItems = [];
+  let offset = 0;
+  while (allItems.length < maxRows) {
+    const limit = Math.min(pageSize, maxRows - allItems.length);
+    const result = await executeSuiteQL(client, query, { limit, offset });
+    allItems.push(...result.items);
+    if (!result.hasMore || result.items.length === 0) {
+      break;
+    }
+    offset += result.items.length;
+  }
+  return allItems;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthError,
+  NetSuiteClient,
+  NetSuiteError,
+  RateLimitError,
+  RateLimiter,
+  TimeoutError,
+  buildAuthorizationHeader,
+  buildSignatureBaseString,
+  deriveBaseUrl,
+  executeSuiteQL,
+  executeSuiteQLPaginated,
+  generateNonce,
+  generateOAuthSignature,
+  generateTimestamp,
+  getRealm,
+  isRetryableStatus,
+  percentEncode,
+  resolveConfig,
+  signHmacSha256,
+  withRetry
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/auth/oauth.ts","../src/auth/headers.ts","../src/config.ts","../src/http/errors.ts","../src/http/rate-limiter.ts","../src/http/retry.ts","../src/http/client.ts","../src/suiteql/executor.ts","../src/suiteql/paginator.ts"],"sourcesContent":["// Core client\nexport { NetSuiteClient } from './http/client.js';\n\n// SuiteQL\nexport { executeSuiteQL } from './suiteql/executor.js';\nexport { executeSuiteQLPaginated } from './suiteql/paginator.js';\nexport type { PaginationOptions } from './suiteql/paginator.js';\n\n// Auth (exposed for advanced use / testing)\nexport { buildAuthorizationHeader } from './auth/headers.js';\nexport {\n  generateOAuthSignature,\n  percentEncode,\n  buildSignatureBaseString,\n  signHmacSha256,\n  generateNonce,\n  generateTimestamp,\n} from './auth/oauth.js';\n\n// Config\nexport { resolveConfig, deriveBaseUrl, getRealm } from './config.js';\nexport type { ResolvedConfig } from './config.js';\n\n// Errors\nexport {\n  NetSuiteError,\n  AuthError,\n  RateLimitError,\n  TimeoutError,\n  isRetryableStatus,\n} from './http/errors.js';\n\n// Rate limiter\nexport { RateLimiter } from './http/rate-limiter.js';\n\n// Retry\nexport { withRetry } from './http/retry.js';\nexport type { RetryOptions } from './http/retry.js';\n\n// Types\nexport type {\n  NetSuiteConfig,\n  SuiteQLRow,\n  SuiteQLResult,\n  SuiteQLResponse,\n  OAuthParams,\n  RequestOptions,\n  NetSuiteResponse,\n} from './types.js';\n","import { createHmac, randomBytes } from 'node:crypto';\nimport type { OAuthParams } from '../types.js';\n\n/**\n * RFC 5849 §3.6 percent-encoding.\n * Encodes all characters except unreserved (ALPHA, DIGIT, '-', '.', '_', '~').\n */\nexport function percentEncode(str: string): string {\n  return encodeURIComponent(str).replace(/[!'()*]/g, (c) => {\n    return `%${c.charCodeAt(0).toString(16).toUpperCase()}`;\n  });\n}\n\n/** Generate a random nonce for OAuth requests. */\nexport function generateNonce(): string {\n  return randomBytes(16).toString('hex');\n}\n\n/** Generate a Unix timestamp string. */\nexport function generateTimestamp(): string {\n  return Math.floor(Date.now() / 1000).toString();\n}\n\n/**\n * Build the OAuth signature base string per RFC 5849 §3.4.1.\n */\nexport function buildSignatureBaseString(\n  method: string,\n  baseUrl: string,\n  params: Array<[string, string]>,\n): string {\n  // Sort params lexicographically by key, then by value\n  const sorted = [...params].sort((a, b) => {\n    const keyCompare = a[0]!.localeCompare(b[0]!);\n    return keyCompare !== 0 ? keyCompare : a[1]!.localeCompare(b[1]!);\n  });\n\n  const paramString = sorted\n    .map(([k, v]) => `${percentEncode(k!)}=${percentEncode(v!)}`)\n    .join('&');\n\n  return [\n    method.toUpperCase(),\n    percentEncode(baseUrl),\n    percentEncode(paramString),\n  ].join('&');\n}\n\n/**\n * Sign the base string with HMAC-SHA256.\n * Signing key = percentEncode(consumerSecret) & percentEncode(tokenSecret)\n */\nexport function signHmacSha256(\n  baseString: string,\n  consumerSecret: string,\n  tokenSecret: string,\n): string {\n  const signingKey = `${percentEncode(consumerSecret)}&${percentEncode(tokenSecret)}`;\n  return createHmac('sha256', signingKey).update(baseString).digest('base64');\n}\n\n/**\n * Generate the full OAuth 1.0a signature for a request.\n * Returns the signature string and the oauth params used (for header construction).\n */\nexport function generateOAuthSignature(params: OAuthParams): {\n  signature: string;\n  oauthParams: Record<string, string>;\n} {\n  const timestamp = params.timestamp ?? generateTimestamp();\n  const nonce = params.nonce ?? generateNonce();\n\n  const oauthParams: Record<string, string> = {\n    oauth_consumer_key: params.consumerKey,\n    oauth_token: params.tokenId,\n    oauth_nonce: nonce,\n    oauth_timestamp: timestamp,\n    oauth_signature_method: 'HMAC-SHA256',\n    oauth_version: '1.0',\n  };\n\n  // Strip query string from URL for base string\n  const urlObj = new URL(params.url);\n  const baseUrl = `${urlObj.protocol}//${urlObj.host}${urlObj.pathname}`;\n\n  // Collect all params: oauth params + query string params\n  const allParams: Array<[string, string]> = Object.entries(oauthParams);\n  urlObj.searchParams.forEach((value, key) => {\n    allParams.push([key, value]);\n  });\n\n  const baseString = buildSignatureBaseString(params.method, baseUrl, allParams);\n  const signature = signHmacSha256(baseString, params.consumerSecret, params.tokenSecret);\n\n  return { signature, oauthParams };\n}\n","import { generateOAuthSignature, percentEncode } from './oauth.js';\nimport type { OAuthParams } from '../types.js';\n\n/**\n * Build the OAuth Authorization header value.\n * Format: OAuth realm=\"...\", oauth_consumer_key=\"...\", ..., oauth_signature=\"...\"\n */\nexport function buildAuthorizationHeader(params: OAuthParams): string {\n  const { signature, oauthParams } = generateOAuthSignature(params);\n\n  const headerParams: Record<string, string> = {\n    realm: params.realm,\n    ...oauthParams,\n    oauth_signature: signature,\n  };\n\n  const parts = Object.entries(headerParams)\n    .map(([key, value]) => `${percentEncode(key)}=\"${percentEncode(value)}\"`)\n    .join(', ');\n\n  return `OAuth ${parts}`;\n}\n","import type { NetSuiteConfig } from './types.js';\n\nconst REQUIRED_FIELDS = [\n  'accountId',\n  'consumerKey',\n  'consumerSecret',\n  'tokenId',\n  'tokenSecret',\n] as const;\n\nconst DEFAULTS = {\n  timeout: 30_000,\n  concurrency: 5,\n  maxRetries: 3,\n} as const;\n\nexport interface ResolvedConfig extends Required<Omit<NetSuiteConfig, 'baseUrl'>> {\n  baseUrl: string;\n}\n\n/** Validate config and fill defaults. */\nexport function resolveConfig(config: NetSuiteConfig): ResolvedConfig {\n  for (const field of REQUIRED_FIELDS) {\n    if (!config[field]) {\n      throw new Error(`NetSuiteConfig: \"${field}\" is required`);\n    }\n  }\n\n  return {\n    accountId: config.accountId,\n    consumerKey: config.consumerKey,\n    consumerSecret: config.consumerSecret,\n    tokenId: config.tokenId,\n    tokenSecret: config.tokenSecret,\n    timeout: config.timeout ?? DEFAULTS.timeout,\n    concurrency: config.concurrency ?? DEFAULTS.concurrency,\n    maxRetries: config.maxRetries ?? DEFAULTS.maxRetries,\n    baseUrl: config.baseUrl ?? deriveBaseUrl(config.accountId),\n  };\n}\n\n/**\n * Derive the NetSuite REST API base URL from the account ID.\n * Account IDs with underscores (sandbox) have underscores replaced with hyphens.\n * Example: \"1234567_SB1\" → \"https://1234567-sb1.suitetalk.api.netsuite.com\"\n */\nexport function deriveBaseUrl(accountId: string): string {\n  const normalized = accountId.toLowerCase().replace(/_/g, '-');\n  return `https://${normalized}.suitetalk.api.netsuite.com`;\n}\n\n/** Get the realm (account ID in uppercase, underscores preserved). */\nexport function getRealm(accountId: string): string {\n  return accountId.toUpperCase().replace(/-/g, '_');\n}\n","/** Base error class for all NetSuite connector errors. */\nexport class NetSuiteError extends Error {\n  constructor(\n    message: string,\n    public readonly status?: number,\n    public readonly code?: string,\n    public readonly details?: unknown,\n  ) {\n    super(message);\n    this.name = 'NetSuiteError';\n  }\n}\n\n/** Authentication or authorization failure. */\nexport class AuthError extends NetSuiteError {\n  constructor(message: string, status?: number, details?: unknown) {\n    super(message, status, 'AUTH_ERROR', details);\n    this.name = 'AuthError';\n  }\n}\n\n/** Rate limit (429) exceeded. */\nexport class RateLimitError extends NetSuiteError {\n  constructor(\n    public readonly retryAfterMs: number,\n    details?: unknown,\n  ) {\n    super(`Rate limited. Retry after ${retryAfterMs}ms`, 429, 'RATE_LIMIT', details);\n    this.name = 'RateLimitError';\n  }\n}\n\n/** Request timeout via AbortController. */\nexport class TimeoutError extends NetSuiteError {\n  constructor(timeoutMs: number) {\n    super(`Request timed out after ${timeoutMs}ms`, undefined, 'TIMEOUT');\n    this.name = 'TimeoutError';\n  }\n}\n\n/** HTTP status codes that are safe to retry. */\nconst RETRYABLE_STATUSES = new Set([408, 429, 502, 503, 504]);\n\n/** Check if an HTTP status code is retryable. */\nexport function isRetryableStatus(status: number): boolean {\n  return RETRYABLE_STATUSES.has(status);\n}\n","/**\n * Async semaphore for concurrency governance.\n * Limits the number of in-flight requests to prevent overwhelming NetSuite.\n */\nexport class RateLimiter {\n  private active = 0;\n  private queue: Array<() => void> = [];\n\n  constructor(private readonly maxConcurrent: number) {}\n\n  /** Acquire a slot. Resolves when a slot is available. */\n  async acquire(): Promise<void> {\n    if (this.active < this.maxConcurrent) {\n      this.active++;\n      return;\n    }\n\n    return new Promise<void>((resolve) => {\n      this.queue.push(() => {\n        this.active++;\n        resolve();\n      });\n    });\n  }\n\n  /** Release a slot, unblocking the next waiter if any. */\n  release(): void {\n    this.active--;\n    const next = this.queue.shift();\n    if (next) {\n      next();\n    }\n  }\n\n  /** Run an async function within the concurrency limit. */\n  async run<T>(fn: () => Promise<T>): Promise<T> {\n    await this.acquire();\n    try {\n      return await fn();\n    } finally {\n      this.release();\n    }\n  }\n\n  /** Number of currently active tasks. */\n  get activeCount(): number {\n    return this.active;\n  }\n\n  /** Number of tasks waiting for a slot. */\n  get waitingCount(): number {\n    return this.queue.length;\n  }\n}\n","import { RateLimitError, isRetryableStatus, NetSuiteError } from './errors.js';\n\nexport interface RetryOptions {\n  maxRetries: number;\n  /** Base delay in ms before first retry. Default: 500. */\n  baseDelay?: number;\n  /** Maximum delay in ms. Default: 30000. */\n  maxDelay?: number;\n}\n\n/**\n * Execute a function with exponential backoff + jitter.\n * Respects `Retry-After` from RateLimitError.\n */\nexport async function withRetry<T>(\n  fn: () => Promise<T>,\n  options: RetryOptions,\n): Promise<T> {\n  const { maxRetries, baseDelay = 500, maxDelay = 30_000 } = options;\n  let lastError: unknown;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    try {\n      return await fn();\n    } catch (error) {\n      lastError = error;\n\n      if (attempt >= maxRetries) break;\n\n      // Don't retry auth errors — they won't resolve by retrying\n      if (error instanceof NetSuiteError && error.code === 'AUTH_ERROR') {\n        throw error;\n      }\n\n      // Only retry on retryable status codes or network errors\n      if (error instanceof NetSuiteError && error.status != null && !isRetryableStatus(error.status)) {\n        throw error;\n      }\n\n      let delay: number;\n      if (error instanceof RateLimitError) {\n        delay = error.retryAfterMs;\n      } else {\n        // Exponential backoff with full jitter\n        const exponential = baseDelay * Math.pow(2, attempt);\n        delay = Math.min(exponential, maxDelay) * Math.random();\n      }\n\n      await sleep(delay);\n    }\n  }\n\n  throw lastError;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n","import { buildAuthorizationHeader } from '../auth/headers.js';\nimport { resolveConfig, getRealm, type ResolvedConfig } from '../config.js';\nimport type { NetSuiteConfig, RequestOptions, NetSuiteResponse } from '../types.js';\nimport { NetSuiteError, AuthError, RateLimitError, TimeoutError } from './errors.js';\nimport { RateLimiter } from './rate-limiter.js';\nimport { withRetry } from './retry.js';\n\n/**\n * Core HTTP client for the NetSuite REST API.\n * Handles OAuth signing, retries, rate limiting, and timeouts.\n */\nexport class NetSuiteClient {\n  private readonly config: ResolvedConfig;\n  private readonly rateLimiter: RateLimiter;\n\n  constructor(config: NetSuiteConfig) {\n    this.config = resolveConfig(config);\n    this.rateLimiter = new RateLimiter(this.config.concurrency);\n  }\n\n  /** Make an authenticated request to the NetSuite REST API. */\n  async request<T = unknown>(options: RequestOptions): Promise<NetSuiteResponse<T>> {\n    return this.rateLimiter.run(() =>\n      withRetry(\n        () => this.executeRequest<T>(options),\n        { maxRetries: this.config.maxRetries },\n      ),\n    );\n  }\n\n  /** Get the resolved base URL. */\n  get baseUrl(): string {\n    return this.config.baseUrl;\n  }\n\n  /** Get the resolved config (read-only). */\n  get resolvedConfig(): Readonly<ResolvedConfig> {\n    return this.config;\n  }\n\n  private async executeRequest<T>(options: RequestOptions): Promise<NetSuiteResponse<T>> {\n    const url = this.buildUrl(options.path, options.query);\n    const realm = getRealm(this.config.accountId);\n\n    const authHeader = buildAuthorizationHeader({\n      consumerKey: this.config.consumerKey,\n      consumerSecret: this.config.consumerSecret,\n      tokenId: this.config.tokenId,\n      tokenSecret: this.config.tokenSecret,\n      realm,\n      method: options.method,\n      url,\n    });\n\n    const headers: Record<string, string> = {\n      Authorization: authHeader,\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n      ...options.headers,\n    };\n\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);\n\n    try {\n      const response = await fetch(url, {\n        method: options.method,\n        headers,\n        body: options.body != null ? JSON.stringify(options.body) : undefined,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n\n      if (!response.ok) {\n        await this.handleErrorResponse(response);\n      }\n\n      const data = (await response.json()) as T;\n      return { status: response.status, headers: response.headers, data };\n    } catch (error) {\n      clearTimeout(timeoutId);\n\n      if (error instanceof NetSuiteError) throw error;\n\n      if (error instanceof DOMException && error.name === 'AbortError') {\n        throw new TimeoutError(this.config.timeout);\n      }\n\n      throw new NetSuiteError(\n        `Network error: ${error instanceof Error ? error.message : String(error)}`,\n        undefined,\n        'NETWORK_ERROR',\n      );\n    }\n  }\n\n  private buildUrl(path: string, query?: Record<string, string>): string {\n    const url = new URL(path, this.config.baseUrl);\n    if (query) {\n      for (const [key, value] of Object.entries(query)) {\n        url.searchParams.set(key, value);\n      }\n    }\n    return url.toString();\n  }\n\n  private async handleErrorResponse(response: Response): Promise<never> {\n    let body: unknown;\n    try {\n      body = await response.json();\n    } catch {\n      body = await response.text().catch(() => undefined);\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      throw new AuthError(\n        `Authentication failed: ${response.status} ${response.statusText}`,\n        response.status,\n        body,\n      );\n    }\n\n    if (response.status === 429) {\n      const retryAfter = response.headers.get('Retry-After');\n      const retryMs = retryAfter ? parseInt(retryAfter, 10) * 1000 : 5000;\n      throw new RateLimitError(retryMs, body);\n    }\n\n    throw new NetSuiteError(\n      `HTTP ${response.status}: ${response.statusText}`,\n      response.status,\n      undefined,\n      body,\n    );\n  }\n}\n","import type { NetSuiteClient } from '../http/client.js';\nimport type { SuiteQLResult, SuiteQLResponse, SuiteQLRow } from '../types.js';\n\nconst SUITEQL_PATH = '/services/rest/query/v1/suiteql';\n\n/**\n * Execute a SuiteQL query and return the first page of results.\n */\nexport async function executeSuiteQL<T = SuiteQLRow>(\n  client: NetSuiteClient,\n  query: string,\n  options?: { limit?: number; offset?: number },\n): Promise<SuiteQLResult<T>> {\n  const limit = options?.limit ?? 1000;\n  const offset = options?.offset ?? 0;\n\n  const response = await client.request<SuiteQLResponse>({\n    method: 'POST',\n    path: SUITEQL_PATH,\n    body: { q: query },\n    headers: {\n      Prefer: 'transient',\n    },\n    query: {\n      limit: limit.toString(),\n      offset: offset.toString(),\n    },\n  });\n\n  return {\n    items: response.data.items as T[],\n    totalResults: response.data.totalResults,\n    hasMore: response.data.hasMore,\n  };\n}\n","import type { NetSuiteClient } from '../http/client.js';\nimport type { SuiteQLRow } from '../types.js';\nimport { executeSuiteQL } from './executor.js';\n\nexport interface PaginationOptions {\n  /** Page size per request. Default: 1000. */\n  pageSize?: number;\n  /** Maximum total rows to fetch. Default: unlimited. */\n  maxRows?: number;\n}\n\n/**\n * Execute a SuiteQL query and automatically paginate through all results.\n * Collects all pages into a single array.\n */\nexport async function executeSuiteQLPaginated<T = SuiteQLRow>(\n  client: NetSuiteClient,\n  query: string,\n  options?: PaginationOptions,\n): Promise<T[]> {\n  const pageSize = options?.pageSize ?? 1000;\n  const maxRows = options?.maxRows ?? Infinity;\n  const allItems: T[] = [];\n  let offset = 0;\n\n  while (allItems.length < maxRows) {\n    const limit = Math.min(pageSize, maxRows - allItems.length);\n    const result = await executeSuiteQL<T>(client, query, { limit, offset });\n\n    allItems.push(...result.items);\n\n    if (!result.hasMore || result.items.length === 0) {\n      break;\n    }\n\n    offset += result.items.length;\n  }\n\n  return allItems;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAAwC;AAOjC,SAAS,cAAc,KAAqB;AACjD,SAAO,mBAAmB,GAAG,EAAE,QAAQ,YAAY,CAAC,MAAM;AACxD,WAAO,IAAI,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC;AAAA,EACvD,CAAC;AACH;AAGO,SAAS,gBAAwB;AACtC,aAAO,gCAAY,EAAE,EAAE,SAAS,KAAK;AACvC;AAGO,SAAS,oBAA4B;AAC1C,SAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,SAAS;AAChD;AAKO,SAAS,yBACd,QACA,SACA,QACQ;AAER,QAAM,SAAS,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM;AACxC,UAAM,aAAa,EAAE,CAAC,EAAG,cAAc,EAAE,CAAC,CAAE;AAC5C,WAAO,eAAe,IAAI,aAAa,EAAE,CAAC,EAAG,cAAc,EAAE,CAAC,CAAE;AAAA,EAClE,CAAC;AAED,QAAM,cAAc,OACjB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,CAAE,CAAC,IAAI,cAAc,CAAE,CAAC,EAAE,EAC3D,KAAK,GAAG;AAEX,SAAO;AAAA,IACL,OAAO,YAAY;AAAA,IACnB,cAAc,OAAO;AAAA,IACrB,cAAc,WAAW;AAAA,EAC3B,EAAE,KAAK,GAAG;AACZ;AAMO,SAAS,eACd,YACA,gBACA,aACQ;AACR,QAAM,aAAa,GAAG,cAAc,cAAc,CAAC,IAAI,cAAc,WAAW,CAAC;AACjF,aAAO,+BAAW,UAAU,UAAU,EAAE,OAAO,UAAU,EAAE,OAAO,QAAQ;AAC5E;AAMO,SAAS,uBAAuB,QAGrC;AACA,QAAM,YAAY,OAAO,aAAa,kBAAkB;AACxD,QAAM,QAAQ,OAAO,SAAS,cAAc;AAE5C,QAAM,cAAsC;AAAA,IAC1C,oBAAoB,OAAO;AAAA,IAC3B,aAAa,OAAO;AAAA,IACpB,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,wBAAwB;AAAA,IACxB,eAAe;AAAA,EACjB;AAGA,QAAM,SAAS,IAAI,IAAI,OAAO,GAAG;AACjC,QAAM,UAAU,GAAG,OAAO,QAAQ,KAAK,OAAO,IAAI,GAAG,OAAO,QAAQ;AAGpE,QAAM,YAAqC,OAAO,QAAQ,WAAW;AACrE,SAAO,aAAa,QAAQ,CAAC,OAAO,QAAQ;AAC1C,cAAU,KAAK,CAAC,KAAK,KAAK,CAAC;AAAA,EAC7B,CAAC;AAED,QAAM,aAAa,yBAAyB,OAAO,QAAQ,SAAS,SAAS;AAC7E,QAAM,YAAY,eAAe,YAAY,OAAO,gBAAgB,OAAO,WAAW;AAEtF,SAAO,EAAE,WAAW,YAAY;AAClC;;;ACxFO,SAAS,yBAAyB,QAA6B;AACpE,QAAM,EAAE,WAAW,YAAY,IAAI,uBAAuB,MAAM;AAEhE,QAAM,eAAuC;AAAA,IAC3C,OAAO,OAAO;AAAA,IACd,GAAG;AAAA,IACH,iBAAiB;AAAA,EACnB;AAEA,QAAM,QAAQ,OAAO,QAAQ,YAAY,EACtC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,cAAc,GAAG,CAAC,KAAK,cAAc,KAAK,CAAC,GAAG,EACvE,KAAK,IAAI;AAEZ,SAAO,SAAS,KAAK;AACvB;;;ACnBA,IAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,WAAW;AAAA,EACf,SAAS;AAAA,EACT,aAAa;AAAA,EACb,YAAY;AACd;AAOO,SAAS,cAAc,QAAwC;AACpE,aAAW,SAAS,iBAAiB;AACnC,QAAI,CAAC,OAAO,KAAK,GAAG;AAClB,YAAM,IAAI,MAAM,oBAAoB,KAAK,eAAe;AAAA,IAC1D;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,gBAAgB,OAAO;AAAA,IACvB,SAAS,OAAO;AAAA,IAChB,aAAa,OAAO;AAAA,IACpB,SAAS,OAAO,WAAW,SAAS;AAAA,IACpC,aAAa,OAAO,eAAe,SAAS;AAAA,IAC5C,YAAY,OAAO,cAAc,SAAS;AAAA,IAC1C,SAAS,OAAO,WAAW,cAAc,OAAO,SAAS;AAAA,EAC3D;AACF;AAOO,SAAS,cAAc,WAA2B;AACvD,QAAM,aAAa,UAAU,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC5D,SAAO,WAAW,UAAU;AAC9B;AAGO,SAAS,SAAS,WAA2B;AAClD,SAAO,UAAU,YAAY,EAAE,QAAQ,MAAM,GAAG;AAClD;;;ACrDO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YACE,SACgB,QACA,MACA,SAChB;AACA,UAAM,OAAO;AAJG;AACA;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,YAAN,cAAwB,cAAc;AAAA,EAC3C,YAAY,SAAiB,QAAiB,SAAmB;AAC/D,UAAM,SAAS,QAAQ,cAAc,OAAO;AAC5C,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,iBAAN,cAA6B,cAAc;AAAA,EAChD,YACkB,cAChB,SACA;AACA,UAAM,6BAA6B,YAAY,MAAM,KAAK,cAAc,OAAO;AAH/D;AAIhB,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,eAAN,cAA2B,cAAc;AAAA,EAC9C,YAAY,WAAmB;AAC7B,UAAM,2BAA2B,SAAS,MAAM,QAAW,SAAS;AACpE,SAAK,OAAO;AAAA,EACd;AACF;AAGA,IAAM,qBAAqB,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAGrD,SAAS,kBAAkB,QAAyB;AACzD,SAAO,mBAAmB,IAAI,MAAM;AACtC;;;AC1CO,IAAM,cAAN,MAAkB;AAAA,EAIvB,YAA6B,eAAuB;AAAvB;AAAA,EAAwB;AAAA,EAH7C,SAAS;AAAA,EACT,QAA2B,CAAC;AAAA;AAAA,EAKpC,MAAM,UAAyB;AAC7B,QAAI,KAAK,SAAS,KAAK,eAAe;AACpC,WAAK;AACL;AAAA,IACF;AAEA,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,WAAK,MAAM,KAAK,MAAM;AACpB,aAAK;AACL,gBAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,UAAgB;AACd,SAAK;AACL,UAAM,OAAO,KAAK,MAAM,MAAM;AAC9B,QAAI,MAAM;AACR,WAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,IAAO,IAAkC;AAC7C,UAAM,KAAK,QAAQ;AACnB,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,UAAE;AACA,WAAK,QAAQ;AAAA,IACf;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,cAAsB;AACxB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,eAAuB;AACzB,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;;;ACvCA,eAAsB,UACpB,IACA,SACY;AACZ,QAAM,EAAE,YAAY,YAAY,KAAK,WAAW,IAAO,IAAI;AAC3D,MAAI;AAEJ,WAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,SAAS,OAAO;AACd,kBAAY;AAEZ,UAAI,WAAW,WAAY;AAG3B,UAAI,iBAAiB,iBAAiB,MAAM,SAAS,cAAc;AACjE,cAAM;AAAA,MACR;AAGA,UAAI,iBAAiB,iBAAiB,MAAM,UAAU,QAAQ,CAAC,kBAAkB,MAAM,MAAM,GAAG;AAC9F,cAAM;AAAA,MACR;AAEA,UAAI;AACJ,UAAI,iBAAiB,gBAAgB;AACnC,gBAAQ,MAAM;AAAA,MAChB,OAAO;AAEL,cAAM,cAAc,YAAY,KAAK,IAAI,GAAG,OAAO;AACnD,gBAAQ,KAAK,IAAI,aAAa,QAAQ,IAAI,KAAK,OAAO;AAAA,MACxD;AAEA,YAAM,MAAM,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,QAAM;AACR;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;;;AC9CO,IAAM,iBAAN,MAAqB;AAAA,EACT;AAAA,EACA;AAAA,EAEjB,YAAY,QAAwB;AAClC,SAAK,SAAS,cAAc,MAAM;AAClC,SAAK,cAAc,IAAI,YAAY,KAAK,OAAO,WAAW;AAAA,EAC5D;AAAA;AAAA,EAGA,MAAM,QAAqB,SAAuD;AAChF,WAAO,KAAK,YAAY;AAAA,MAAI,MAC1B;AAAA,QACE,MAAM,KAAK,eAAkB,OAAO;AAAA,QACpC,EAAE,YAAY,KAAK,OAAO,WAAW;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,UAAkB;AACpB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA;AAAA,EAGA,IAAI,iBAA2C;AAC7C,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,eAAkB,SAAuD;AACrF,UAAM,MAAM,KAAK,SAAS,QAAQ,MAAM,QAAQ,KAAK;AACrD,UAAM,QAAQ,SAAS,KAAK,OAAO,SAAS;AAE5C,UAAM,aAAa,yBAAyB;AAAA,MAC1C,aAAa,KAAK,OAAO;AAAA,MACzB,gBAAgB,KAAK,OAAO;AAAA,MAC5B,SAAS,KAAK,OAAO;AAAA,MACrB,aAAa,KAAK,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB;AAAA,IACF,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,eAAe;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,GAAG,QAAQ;AAAA,IACb;AAEA,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO,OAAO;AAE1E,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK;AAAA,QAChC,QAAQ,QAAQ;AAAA,QAChB;AAAA,QACA,MAAM,QAAQ,QAAQ,OAAO,KAAK,UAAU,QAAQ,IAAI,IAAI;AAAA,QAC5D,QAAQ,WAAW;AAAA,MACrB,CAAC;AAED,mBAAa,SAAS;AAEtB,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,KAAK,oBAAoB,QAAQ;AAAA,MACzC;AAEA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,aAAO,EAAE,QAAQ,SAAS,QAAQ,SAAS,SAAS,SAAS,KAAK;AAAA,IACpE,SAAS,OAAO;AACd,mBAAa,SAAS;AAEtB,UAAI,iBAAiB,cAAe,OAAM;AAE1C,UAAI,iBAAiB,gBAAgB,MAAM,SAAS,cAAc;AAChE,cAAM,IAAI,aAAa,KAAK,OAAO,OAAO;AAAA,MAC5C;AAEA,YAAM,IAAI;AAAA,QACR,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACxE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,SAAS,MAAc,OAAwC;AACrE,UAAM,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO,OAAO;AAC7C,QAAI,OAAO;AACT,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,YAAI,aAAa,IAAI,KAAK,KAAK;AAAA,MACjC;AAAA,IACF;AACA,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEA,MAAc,oBAAoB,UAAoC;AACpE,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,SAAS,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,MAAS;AAAA,IACpD;AAEA,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,YAAM,IAAI;AAAA,QACR,0BAA0B,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QAChE,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,aAAa,SAAS,QAAQ,IAAI,aAAa;AACrD,YAAM,UAAU,aAAa,SAAS,YAAY,EAAE,IAAI,MAAO;AAC/D,YAAM,IAAI,eAAe,SAAS,IAAI;AAAA,IACxC;AAEA,UAAM,IAAI;AAAA,MACR,QAAQ,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC/C,SAAS;AAAA,MACT;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;;;ACrIA,IAAM,eAAe;AAKrB,eAAsB,eACpB,QACA,OACA,SAC2B;AAC3B,QAAM,QAAQ,SAAS,SAAS;AAChC,QAAM,SAAS,SAAS,UAAU;AAElC,QAAM,WAAW,MAAM,OAAO,QAAyB;AAAA,IACrD,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAM,EAAE,GAAG,MAAM;AAAA,IACjB,SAAS;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,OAAO,MAAM,SAAS;AAAA,MACtB,QAAQ,OAAO,SAAS;AAAA,IAC1B;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,OAAO,SAAS,KAAK;AAAA,IACrB,cAAc,SAAS,KAAK;AAAA,IAC5B,SAAS,SAAS,KAAK;AAAA,EACzB;AACF;;;ACnBA,eAAsB,wBACpB,QACA,OACA,SACc;AACd,QAAM,WAAW,SAAS,YAAY;AACtC,QAAM,UAAU,SAAS,WAAW;AACpC,QAAM,WAAgB,CAAC;AACvB,MAAI,SAAS;AAEb,SAAO,SAAS,SAAS,SAAS;AAChC,UAAM,QAAQ,KAAK,IAAI,UAAU,UAAU,SAAS,MAAM;AAC1D,UAAM,SAAS,MAAM,eAAkB,QAAQ,OAAO,EAAE,OAAO,OAAO,CAAC;AAEvE,aAAS,KAAK,GAAG,OAAO,KAAK;AAE7B,QAAI,CAAC,OAAO,WAAW,OAAO,MAAM,WAAW,GAAG;AAChD;AAAA,IACF;AAEA,cAAU,OAAO,MAAM;AAAA,EACzB;AAEA,SAAO;AACT;","names":[]}