@xemahq/temporal-runtime 0.5.2 → 0.7.0

package/dist/lib/biome-worker.js

@@ -0,0 +1,253 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BiomeWorkerError = exports.BiomeWorkerErrorCode = void 0;
+exports.defineBiomeWorker = defineBiomeWorker;
+exports.composeBiomeWorkers = composeBiomeWorkers;
+const node_path_1 = require("node:path");
+const biome_1 = require("@xemahq/contracts/biome");
+const deployment_1 = require("@xemahq/contracts/deployment");
+const process_topology_1 = require("@xemahq/contracts/process-topology");
+const workflow_1 = require("@xemahq/contracts/workflow");
+const fairness_1 = require("./fairness");
+const versioned_worker_1 = require("./versioned-worker");
+const worker_1 = require("./worker");
+const worker_deployment_version_1 = require("./worker-deployment-version");
+var BiomeWorkerErrorCode;
+(function (BiomeWorkerErrorCode) {
+    BiomeWorkerErrorCode["ProtocolNotWorkerV2"] = "protocol-not-worker-v2";
+    BiomeWorkerErrorCode["ImplementationMismatch"] = "implementation-mismatch";
+    BiomeWorkerErrorCode["NexusMismatch"] = "nexus-mismatch";
+    BiomeWorkerErrorCode["InvalidComponentKey"] = "invalid-component-key";
+    BiomeWorkerErrorCode["DuplicateComponent"] = "duplicate-component";
+    BiomeWorkerErrorCode["DuplicateTaskQueue"] = "duplicate-task-queue";
+    BiomeWorkerErrorCode["MixedTrustDomains"] = "mixed-trust-domains";
+    BiomeWorkerErrorCode["EmptyComposition"] = "empty-composition";
+})(BiomeWorkerErrorCode || (exports.BiomeWorkerErrorCode = BiomeWorkerErrorCode = {}));
+class BiomeWorkerError extends Error {
+    code;
+    constructor(code, message) {
+        super(`[${code}] ${message}`);
+        this.code = code;
+        this.name = 'BiomeWorkerError';
+    }
+}
+exports.BiomeWorkerError = BiomeWorkerError;
+const COMPONENT_KEY_PATTERN = /^[a-z][a-z0-9-]*$/;
+const FAIRNESS_INTERCEPTOR_MODULE = {
+    [biome_1.BiomeWorkerTaskQueueFairness.Org]: (0, node_path_1.join)(__dirname, 'workflow-interceptors', 'org-fairness-required'),
+    [biome_1.BiomeWorkerTaskQueueFairness.None]: (0, node_path_1.join)(__dirname, 'workflow-interceptors', 'fairness-propagation'),
+};
+function nexusKey(service, version) {
+    return `${service}@${version}`;
+}
+function servesAny(queues, kind) {
+    return queues.some((queue) => queue.serves.includes(kind));
+}
+function defineBiomeWorker(options) {
+    if (!COMPONENT_KEY_PATTERN.test(options.componentKey)) {
+        throw new BiomeWorkerError(BiomeWorkerErrorCode.InvalidComponentKey, `component key ${JSON.stringify(options.componentKey)} must be kebab-case.`);
+    }
+    const where = `${options.biomeId}/${options.componentKey}`;
+    const parsed = biome_1.BiomeWorkerProtocolSchema.safeParse(options.protocol);
+    if (!parsed.success ||
+        parsed.data.kind !== biome_1.BiomeComponentProtocolKind.Worker ||
+        parsed.data.revision !== 'v2') {
+        throw new BiomeWorkerError(BiomeWorkerErrorCode.ProtocolNotWorkerV2, `${where}: the protocol must be a worker protocol at revision v2` +
+            (parsed.success
+                ? ` (got revision ${parsed.data.revision}).`
+                : `: ${parsed.error.message}`));
+    }
+    const protocol = parsed.data;
+    const declared = protocol.taskQueues;
+    for (const [kind, supplied, field] of [
+        [
+            biome_1.BiomeWorkerTaskQueueServes.Workflows,
+            options.workflowsPath,
+            'workflowsPath',
+        ],
+        [biome_1.BiomeWorkerTaskQueueServes.Activities, options.activities, 'activities'],
+    ]) {
+        const needed = servesAny(declared, kind);
+        if (needed !== (supplied !== undefined)) {
+            throw new BiomeWorkerError(BiomeWorkerErrorCode.ImplementationMismatch, needed
+                ? `${where}: a task queue serves '${kind}' but no ${field} was supplied.`
+                : `${where}: ${field} was supplied but no task queue serves '${kind}'.`);
+        }
+    }
+    const provides = protocol.nexus?.provides ?? [];
+    const supplied = options.nexusServices ?? [];
+    const suppliedByKey = new Map();
+    for (const impl of supplied) {
+        const key = nexusKey(impl.service, impl.version);
+        if (suppliedByKey.has(key)) {
+            throw new BiomeWorkerError(BiomeWorkerErrorCode.NexusMismatch, `${where}: Nexus service ${key} was supplied twice.`);
+        }
+        suppliedByKey.set(key, impl);
+    }
+    const declaredKeys = new Set(provides.map((p) => nexusKey(p.service, p.version)));
+    const undeclared = [...suppliedByKey.keys()].filter((k) => !declaredKeys.has(k));
+    const unimplemented = [...declaredKeys].filter((k) => !suppliedByKey.has(k));
+    if (undeclared.length > 0 || unimplemented.length > 0) {
+        throw new BiomeWorkerError(BiomeWorkerErrorCode.NexusMismatch, `${where}: Nexus handlers must match nexus.provides exactly` +
+            (unimplemented.length > 0
+                ? `; declared but not supplied: ${unimplemented.join(', ')}`
+                : '') +
+            (undeclared.length > 0
+                ? `; supplied but not declared: ${undeclared.join(', ')}`
+                : '') +
+            '.');
+    }
+    const queues = declared.map((queue) => {
+        const nexusServices = provides
+            .filter((p) => p.taskQueue === queue.name)
+            .map((p) => suppliedByKey.get(nexusKey(p.service, p.version)));
+        if (queue.serves.includes(biome_1.BiomeWorkerTaskQueueServes.Nexus) &&
+            nexusServices.length === 0) {
+            throw new BiomeWorkerError(BiomeWorkerErrorCode.NexusMismatch, `${where}: task queue ${queue.name} serves 'nexus' but no nexus.provides entry names it.`);
+        }
+        return Object.freeze({
+            name: queue.name,
+            taskQueue: (0, workflow_1.biomeTaskQueue)(options.biomeId, queue.name),
+            serves: Object.freeze([...queue.serves]),
+            fairness: queue.fairness,
+            nexusServices: Object.freeze(nexusServices),
+        });
+    });
+    return Object.freeze({
+        biomeId: options.biomeId,
+        componentKey: options.componentKey,
+        origin: options.origin,
+        queues: Object.freeze(queues),
+        ...(options.workflowsPath !== undefined
+            ? { workflowsPath: options.workflowsPath }
+            : {}),
+        ...(options.activities !== undefined
+            ? { activities: options.activities }
+            : {}),
+        workflowInterceptorModules: Object.freeze([
+            ...(options.workflowInterceptorModules ?? []),
+        ]),
+        activityInterceptors: Object.freeze([
+            ...(options.activityInterceptors ?? []),
+        ]),
+        ...(options.payloadCodec !== undefined
+            ? { payloadCodec: options.payloadCodec }
+            : {}),
+        ...(options.sinks !== undefined ? { sinks: options.sinks } : {}),
+        tuning: Object.freeze({ ...(options.tuning ?? {}) }),
+    });
+}
+async function composeBiomeWorkers(options) {
+    const { definitions } = options;
+    if (definitions.length === 0) {
+        throw new BiomeWorkerError(BiomeWorkerErrorCode.EmptyComposition, 'composeBiomeWorkers needs at least one definition.');
+    }
+    const deploymentId = (0, deployment_1.parseDeploymentId)(options.deploymentId);
+    const version = (0, worker_deployment_version_1.assertWorkerDeploymentVersion)(options.version);
+    const components = new Set();
+    const taskQueues = new Set();
+    const domains = new Map();
+    for (const def of definitions) {
+        const component = `${def.biomeId}/${def.componentKey}`;
+        if (components.has(component)) {
+            throw new BiomeWorkerError(BiomeWorkerErrorCode.DuplicateComponent, `${component} is composed twice.`);
+        }
+        components.add(component);
+        for (const queue of def.queues) {
+            if (taskQueues.has(queue.taskQueue)) {
+                throw new BiomeWorkerError(BiomeWorkerErrorCode.DuplicateTaskQueue, `task queue ${queue.taskQueue} is polled by two composed definitions.`);
+            }
+            taskQueues.add(queue.taskQueue);
+        }
+        const domain = (0, process_topology_1.resolveTrustDomain)(def.biomeId, def.origin, options.trustPolicy);
+        domains.set(domain, [...(domains.get(domain) ?? []), component]);
+    }
+    if (domains.size !== 1) {
+        throw new BiomeWorkerError(BiomeWorkerErrorCode.MixedTrustDomains, 'one process is one trust domain, but the composed definitions resolve to ' +
+            [...domains].map(([d, c]) => `${d} (${c.join(', ')})`).join(' and ') +
+            '.');
+    }
+    const trustDomain = [...domains.keys()][0];
+    const namespace = (0, workflow_1.workflowNamespaceForTrustDomain)(deploymentId, trustDomain);
+    const bundles = new Map();
+    async function bundleFor(def, fairness) {
+        const key = `${def.biomeId}/${def.componentKey}#${fairness}`;
+        const cached = bundles.get(key);
+        if (cached !== undefined) {
+            return cached;
+        }
+        const bundle = await (0, worker_1.bundlePlatformWorkflows)(def.workflowsPath, {
+            workflowInterceptorModules: [
+                FAIRNESS_INTERCEPTOR_MODULE[fairness],
+                ...def.workflowInterceptorModules,
+            ],
+        });
+        bundles.set(key, bundle);
+        return bundle;
+    }
+    const workers = [];
+    for (const def of definitions) {
+        for (const queue of def.queues) {
+            const servesWorkflows = queue.serves.includes(biome_1.BiomeWorkerTaskQueueServes.Workflows);
+            const servesActivities = queue.serves.includes(biome_1.BiomeWorkerTaskQueueServes.Activities);
+            const worker = await (0, versioned_worker_1.createVersionedWorker)({
+                connection: options.connection,
+                namespace,
+                taskQueue: queue.taskQueue,
+                version,
+                identity: (0, versioned_worker_1.platformWorkerIdentity)(`xema-biome-worker-${def.biomeId}-${def.componentKey}`, namespace, queue.taskQueue),
+                ...(servesWorkflows
+                    ? { workflowBundle: await bundleFor(def, queue.fairness) }
+                    : {}),
+                ...(servesActivities ? { activities: def.activities } : {}),
+                ...(queue.nexusServices.length > 0
+                    ? { nexusServices: queue.nexusServices.map((n) => n.handler) }
+                    : {}),
+                activityInterceptors: [
+                    ...(queue.fairness === biome_1.BiomeWorkerTaskQueueFairness.Org
+                        ? [fairness_1.orgFairnessActivityInterceptor]
+                        : []),
+                    ...def.activityInterceptors,
+                ],
+                ...(def.payloadCodec !== undefined
+                    ? { payloadCodec: def.payloadCodec }
+                    : {}),
+                ...(def.sinks !== undefined ? { sinks: def.sinks } : {}),
+                ...def.tuning,
+            });
+            workers.push(Object.freeze({
+                biomeId: def.biomeId,
+                componentKey: def.componentKey,
+                taskQueue: queue.taskQueue,
+                worker,
+            }));
+        }
+    }
+    function shutdown() {
+        for (const { worker } of workers) {
+            if (worker.getState() === 'RUNNING') {
+                worker.shutdown();
+            }
+        }
+    }
+    async function run() {
+        const runs = workers.map(({ worker }) => worker.run());
+        try {
+            await Promise.all(runs);
+        }
+        catch (error) {
+            shutdown();
+            await Promise.allSettled(runs);
+            throw error;
+        }
+    }
+    return Object.freeze({
+        trustDomain,
+        namespace,
+        version,
+        workers: Object.freeze(workers),
+        run,
+        shutdown,
+    });
+}
+//# sourceMappingURL=biome-worker.js.map

package/dist/lib/biome-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-worker.js","sourceRoot":"","sources":["../../src/lib/biome-worker.ts"],"names":[],"mappings":";;;AAsLA,8CAkIC;AA0DD,kDAoJC;AAtgBD,yCAAiC;AAEjC,mDAOiC;AACjC,6DAAiE;AACjE,yEAG4C;AAC5C,yDAGoC;AAEpC,yCAA4D;AAC5D,yDAM4B;AAC5B,qCAAmD;AACnD,2EAGqC;AAWrC,IAAY,oBAiBX;AAjBD,WAAY,oBAAoB;IAE9B,sEAA8C,CAAA;IAE9C,0EAAkD,CAAA;IAElD,wDAAgC,CAAA;IAEhC,qEAA6C,CAAA;IAE7C,kEAA0C,CAAA;IAE1C,mEAA2C,CAAA;IAE3C,iEAAyC,CAAA;IAEzC,8DAAsC,CAAA;AACxC,CAAC,EAjBW,oBAAoB,oCAApB,oBAAoB,QAiB/B;AAED,MAAa,gBAAiB,SAAQ,KAAK;IAE9B;IADX,YACW,IAA0B,EACnC,OAAe;QAEf,KAAK,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAHrB,SAAI,GAAJ,IAAI,CAAsB;QAInC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AARD,4CAQC;AAkED,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAOlD,MAAM,2BAA2B,GAE7B;IACF,CAAC,oCAA4B,CAAC,GAAG,CAAC,EAAE,IAAA,gBAAI,EACtC,SAAS,EACT,uBAAuB,EACvB,uBAAuB,CACxB;IACD,CAAC,oCAA4B,CAAC,IAAI,CAAC,EAAE,IAAA,gBAAI,EACvC,SAAS,EACT,uBAAuB,EACvB,sBAAsB,CACvB;CACF,CAAC;AAEF,SAAS,QAAQ,CAAC,OAAe,EAAE,OAAe;IAChD,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAChB,MAAuC,EACvC,IAAgC;IAEhC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAeD,SAAgB,iBAAiB,CAC/B,OAAiC;IAEjC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,mBAAmB,EACxC,iBAAiB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,iCAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,IACE,CAAC,MAAM,CAAC,OAAO;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,kCAA0B,CAAC,MAAM;QACtD,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,EAC7B,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,mBAAmB,EACxC,GAAG,KAAK,yDAAyD;YAC/D,CAAC,MAAM,CAAC,OAAO;gBACb,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI;gBAC5C,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpC;YACE,kCAA0B,CAAC,SAAS;YACpC,OAAO,CAAC,aAAa;YACrB,eAAe;SAChB;QACD,CAAC,kCAA0B,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;KACjE,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,sBAAsB,EAC3C,MAAM;gBACJ,CAAC,CAAC,GAAG,KAAK,0BAA0B,IAAI,YAAY,KAAK,gBAAgB;gBACzE,CAAC,CAAC,GAAG,KAAK,KAAK,KAAK,2CAA2C,IAAI,IAAI,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,GAAG,EAA2C,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,aAAa,EAClC,GAAG,KAAK,mBAAmB,GAAG,sBAAsB,CACrD,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CACpD,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5B,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,aAAa,EAClC,GAAG,KAAK,oDAAoD;YAC1D,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC,gCAAgC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,gCAAgC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CACN,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAuB,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACxD,MAAM,aAAa,GAAG,QAAQ;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC;aACzC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,aAAa,CAAC,GAAG,CACf,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CACI,CACvC,CAAC;QACJ,IACE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kCAA0B,CAAC,KAAK,CAAC;YACvD,aAAa,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,aAAa,EAClC,GAAG,KAAK,gBAAgB,KAAK,CAAC,IAAI,uDAAuD,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;YACtD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,0BAA0B,IAAI,EAAE,CAAC;SAC9C,CAAC;QACF,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC;SACxC,CAAC;QACF,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AA0DM,KAAK,UAAU,mBAAmB,CACvC,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,gBAAgB,EACrC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,8BAAiB,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAA,yDAA6B,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACvD,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,kBAAkB,EACvC,GAAG,SAAS,qBAAqB,CAClC,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,kBAAkB,EACvC,cAAc,KAAK,CAAC,SAAS,yCAAyC,CACvE,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,qCAAkB,EAC/B,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,MAAM,EACV,OAAO,CAAC,WAAW,CACpB,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,CAAC,iBAAiB,EACtC,2EAA2E;YACzE,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YACpE,GAAG,CACN,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC;IACrD,MAAM,SAAS,GAAG,IAAA,0CAA+B,EAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,KAAK,UAAU,SAAS,CACtB,GAA0B,EAC1B,QAAsC;QAEtC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAuB,EAAC,GAAG,CAAC,aAAuB,EAAE;YACxE,0BAA0B,EAAE;gBAC1B,2BAA2B,CAAC,QAAQ,CAAC;gBACrC,GAAG,GAAG,CAAC,0BAA0B;aAClC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAC3C,kCAA0B,CAAC,SAAS,CACrC,CAAC;YACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAC5C,kCAA0B,CAAC,UAAU,CACtC,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAqB,EAAC;gBACzC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO;gBACP,QAAQ,EAAE,IAAA,yCAAsB,EAC9B,qBAAqB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,EACtD,SAAS,EACT,KAAK,CAAC,SAAS,CAChB;gBACD,GAAG,CAAC,eAAe;oBACjB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;oBAChC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;oBAC9D,CAAC,CAAC,EAAE,CAAC;gBACP,oBAAoB,EAAE;oBACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,oCAA4B,CAAC,GAAG;wBACrD,CAAC,CAAC,CAAC,yCAA8B,CAAC;wBAClC,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,GAAG,CAAC,oBAAoB;iBAC5B;gBACD,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;oBACpC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,GAAG,CAAC,MAAM;aACd,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;gBACZ,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM;aACP,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS,QAAQ;QACf,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,QAAQ,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,GAAG;QAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,EAAE,CAAC;YACX,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,SAAS;QACT,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,GAAG;QACH,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/bounded-retry.d.ts

@@ -0,0 +1,22 @@
+export interface BoundedRetryPolicy {
+    readonly attempts: number;
+    readonly initialDelayMs: number;
+    readonly maxDelayMs: number;
+}
+export declare const DEFAULT_BOUNDED_RETRY_POLICY: BoundedRetryPolicy;
+export interface RetryClock {
+    now(): number;
+    setTimeout(callback: () => void, ms: number): unknown;
+    clearTimeout(handle: unknown): void;
+}
+export declare const SYSTEM_CLOCK: RetryClock;
+export declare function backoffDelayMs(policy: BoundedRetryPolicy, failedAttempt: number): number;
+export declare function sleep(clock: RetryClock, ms: number): Promise<void>;
+export declare class BoundedRetryExhaustedError extends Error {
+    readonly operation: string;
+    readonly attempts: number;
+    constructor(operation: string, attempts: number, cause: unknown);
+}
+export declare function assertBoundedRetryPolicy(policy: BoundedRetryPolicy): void;
+export declare function withBoundedRetry<T>(operationName: string, operation: () => Promise<T>, policy: BoundedRetryPolicy, clock: RetryClock, onAttemptFailed?: (attempt: number, error: unknown, nextDelayMs: number) => void): Promise<T>;
+//# sourceMappingURL=bounded-retry.d.ts.map

package/dist/lib/bounded-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-retry.d.ts","sourceRoot":"","sources":["../../src/lib/bounded-retry.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAGD,eAAO,MAAM,4BAA4B,EAAE,kBAI1C,CAAC;AAGF,MAAM,WAAW,UAAU;IACzB,GAAG,IAAI,MAAM,CAAC;IACd,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IACtD,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACrC;AAED,eAAO,MAAM,YAAY,EAAE,UAU1B,CAAC;AAEF,wBAAgB,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAExF;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIlE;AAGD,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBADhB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EACzB,KAAK,EAAE,OAAO;CAUjB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAOzE;AAOD,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,UAAU,EACjB,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,GAC/E,OAAO,CAAC,CAAC,CAAC,CAeZ"}

package/dist/lib/bounded-retry.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BoundedRetryExhaustedError = exports.SYSTEM_CLOCK = exports.DEFAULT_BOUNDED_RETRY_POLICY = void 0;
+exports.backoffDelayMs = backoffDelayMs;
+exports.sleep = sleep;
+exports.assertBoundedRetryPolicy = assertBoundedRetryPolicy;
+exports.withBoundedRetry = withBoundedRetry;
+exports.DEFAULT_BOUNDED_RETRY_POLICY = {
+    attempts: 6,
+    initialDelayMs: 1_000,
+    maxDelayMs: 15_000,
+};
+exports.SYSTEM_CLOCK = {
+    now: () => Date.now(),
+    setTimeout: (callback, ms) => {
+        const handle = setTimeout(callback, ms);
+        handle.unref();
+        return handle;
+    },
+    clearTimeout: (handle) => clearTimeout(handle),
+};
+function backoffDelayMs(policy, failedAttempt) {
+    return Math.min(policy.maxDelayMs, policy.initialDelayMs * 2 ** (failedAttempt - 1));
+}
+function sleep(clock, ms) {
+    return new Promise((resolve) => {
+        clock.setTimeout(resolve, ms);
+    });
+}
+class BoundedRetryExhaustedError extends Error {
+    operation;
+    attempts;
+    constructor(operation, attempts, cause) {
+        super(`${operation} failed after ${attempts} attempt(s): ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+        this.operation = operation;
+        this.attempts = attempts;
+        this.name = 'BoundedRetryExhaustedError';
+    }
+}
+exports.BoundedRetryExhaustedError = BoundedRetryExhaustedError;
+function assertBoundedRetryPolicy(policy) {
+    if (!Number.isInteger(policy.attempts) || policy.attempts < 1) {
+        throw new Error(`Bounded retry attempts must be an integer >= 1 (got ${policy.attempts}).`);
+    }
+    if (policy.initialDelayMs < 0 || policy.maxDelayMs < policy.initialDelayMs) {
+        throw new Error('Bounded retry delays must satisfy 0 <= initialDelayMs <= maxDelayMs.');
+    }
+}
+async function withBoundedRetry(operationName, operation, policy, clock, onAttemptFailed) {
+    assertBoundedRetryPolicy(policy);
+    let lastError;
+    for (let attempt = 1; attempt <= policy.attempts; attempt += 1) {
+        try {
+            return await operation();
+        }
+        catch (error) {
+            lastError = error;
+            if (attempt === policy.attempts)
+                break;
+            const delay = backoffDelayMs(policy, attempt);
+            onAttemptFailed?.(attempt, error, delay);
+            await sleep(clock, delay);
+        }
+    }
+    throw new BoundedRetryExhaustedError(operationName, policy.attempts, lastError);
+}
+//# sourceMappingURL=bounded-retry.js.map

package/dist/lib/bounded-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-retry.js","sourceRoot":"","sources":["../../src/lib/bounded-retry.ts"],"names":[],"mappings":";;;AAyCA,wCAEC;AAED,sBAIC;AAmBD,4DAOC;AAOD,4CAqBC;AAvFY,QAAA,4BAA4B,GAAuB;IAC9D,QAAQ,EAAE,CAAC;IACX,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,MAAM;CACnB,CAAC;AASW,QAAA,YAAY,GAAe;IACtC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAGxC,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAuC,CAAC;CAChF,CAAC;AAEF,SAAgB,cAAc,CAAC,MAA0B,EAAE,aAAqB;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAgB,KAAK,CAAC,KAAiB,EAAE,EAAU;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAGD,MAAa,0BAA2B,SAAQ,KAAK;IAExC;IACA;IAFX,YACW,SAAiB,EACjB,QAAgB,EACzB,KAAc;QAEd,KAAK,CACH,GAAG,SAAS,iBAAiB,QAAQ,gBACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,EACF,EAAE,KAAK,EAAE,CACV,CAAC;QATO,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QASzB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAdD,gEAcC;AAED,SAAgB,wBAAwB,CAAC,MAA0B;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAOM,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,SAA2B,EAC3B,MAA0B,EAC1B,KAAiB,EACjB,eAAgF;IAEhF,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,OAAO,KAAK,MAAM,CAAC,QAAQ;gBAAE,MAAM;YACvC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,eAAe,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,0BAA0B,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAClF,CAAC"}

package/dist/lib/client-credentials-token-source.d.ts

@@ -0,0 +1,23 @@
+import { type AccessTokenSource } from './access-token';
+export interface ClientCredentialsOptions {
+    readonly tokenEndpoint: string;
+    readonly clientId: string;
+    readonly clientSecretFile: string;
+    readonly audience: string;
+    readonly requestTimeoutMs?: number;
+}
+export interface ClientCredentialsDeps {
+    readonly fetch?: typeof fetch;
+    readonly readSecretFile?: (path: string) => Promise<string>;
+    readonly now?: () => number;
+}
+export declare class ClientCredentialsTokenError extends Error {
+    readonly status: number | undefined;
+    constructor(message: string, options?: {
+        status?: number;
+        cause?: unknown;
+    });
+}
+export declare function createClientCredentialsTokenSource(options: ClientCredentialsOptions, deps?: ClientCredentialsDeps): AccessTokenSource;
+export declare function validateClientCredentialsOptions(options: ClientCredentialsOptions): void;
+//# sourceMappingURL=client-credentials-token-source.d.ts.map

package/dist/lib/client-credentials-token-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials-token-source.d.ts","sourceRoot":"","sources":["../../src/lib/client-credentials-token-source.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AAYxB,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAK1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAOlC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAGD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAKD,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBAExB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAKhF;AAWD,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,wBAAwB,EACjC,IAAI,GAAE,qBAA0B,GAC/B,iBAAiB,CAsCnB;AAuDD,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAmBxF"}

package/dist/lib/client-credentials-token-source.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientCredentialsTokenError = void 0;
+exports.createClientCredentialsTokenSource = createClientCredentialsTokenSource;
+exports.validateClientCredentialsOptions = validateClientCredentialsOptions;
+const promises_1 = require("node:fs/promises");
+const access_token_1 = require("./access-token");
+const DEFAULT_REQUEST_TIMEOUT_MS = 10_000;
+class ClientCredentialsTokenError extends Error {
+    status;
+    constructor(message, options = {}) {
+        super(message, options.cause === undefined ? undefined : { cause: options.cause });
+        this.name = 'ClientCredentialsTokenError';
+        this.status = options.status;
+    }
+}
+exports.ClientCredentialsTokenError = ClientCredentialsTokenError;
+function createClientCredentialsTokenSource(options, deps = {}) {
+    validateClientCredentialsOptions(options);
+    const doFetch = deps.fetch ?? fetch;
+    const readSecret = deps.readSecretFile ?? ((path) => (0, promises_1.readFile)(path, 'utf8'));
+    const now = deps.now ?? Date.now;
+    const timeoutMs = options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+    return async () => {
+        const secret = (await readSecret(options.clientSecretFile)).trim();
+        if (secret.length === 0) {
+            throw new ClientCredentialsTokenError(`Temporal client secret file ${options.clientSecretFile} is empty.`);
+        }
+        const sentAt = now();
+        const response = await doFetch(options.tokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: new URLSearchParams({
+                grant_type: 'client_credentials',
+                client_id: options.clientId,
+                client_secret: secret,
+            }).toString(),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        const text = await response.text();
+        if (!response.ok) {
+            throw new ClientCredentialsTokenError(`Temporal token request for client ${options.clientId} was refused ` +
+                `(HTTP ${response.status}): ${text.slice(0, 300)}`, { status: response.status });
+        }
+        return parseTokenResponse(text, options, sentAt);
+    };
+}
+function parseTokenResponse(text, options, sentAt) {
+    let body;
+    try {
+        body = JSON.parse(text);
+    }
+    catch (cause) {
+        throw new ClientCredentialsTokenError(`Temporal token response for client ${options.clientId} is not JSON.`, { cause });
+    }
+    const record = (typeof body === 'object' && body !== null ? body : {});
+    const value = record['access_token'];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new ClientCredentialsTokenError(`Temporal token response for client ${options.clientId} carries no access_token.`);
+    }
+    const claims = (0, access_token_1.decodeAccessTokenClaims)(value);
+    if (!claims.aud.includes(options.audience)) {
+        throw new ClientCredentialsTokenError(`Temporal token for client ${options.clientId} does not carry the required ` +
+            `audience "${options.audience}" (aud=${JSON.stringify(claims.aud)}). ` +
+            'The frontend would refuse it; the issuer-side audience mapper is missing.');
+    }
+    const expiresIn = record['expires_in'];
+    let expiresAt;
+    if (typeof expiresIn === 'number' && expiresIn > 0) {
+        expiresAt = sentAt + expiresIn * 1000;
+    }
+    else if (claims.exp !== undefined) {
+        expiresAt = claims.exp * 1000;
+    }
+    else {
+        throw new ClientCredentialsTokenError(`Temporal token for client ${options.clientId} has neither expires_in nor exp; ` +
+            'its refresh cannot be scheduled.');
+    }
+    if (expiresAt <= sentAt) {
+        throw new ClientCredentialsTokenError(`Temporal token for client ${options.clientId} was already expired when issued.`);
+    }
+    return { value, expiresAt };
+}
+function validateClientCredentialsOptions(options) {
+    let url;
+    try {
+        url = new URL(options.tokenEndpoint);
+    }
+    catch {
+        throw new Error(`Temporal token endpoint is not a URL: ${options.tokenEndpoint}`);
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:') {
+        throw new Error(`Temporal token endpoint must be http(s): ${options.tokenEndpoint}`);
+    }
+    for (const [name, value] of [
+        ['clientId', options.clientId],
+        ['clientSecretFile', options.clientSecretFile],
+        ['audience', options.audience],
+    ]) {
+        if (value.trim().length === 0) {
+            throw new Error(`Temporal client credentials: ${name} is required.`);
+        }
+    }
+}
+//# sourceMappingURL=client-credentials-token-source.js.map

package/dist/lib/client-credentials-token-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials-token-source.js","sourceRoot":"","sources":["../../src/lib/client-credentials-token-source.ts"],"names":[],"mappings":";;;AAoEA,gFAyCC;AAuDD,4EAmBC;AAvLD,+CAA4C;AAE5C,iDAIwB;AAwCxB,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAG1C,MAAa,2BAA4B,SAAQ,KAAK;IAC3C,MAAM,CAAqB;IAEpC,YAAY,OAAe,EAAE,UAAgD,EAAE;QAC7E,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;CACF;AARD,kEAQC;AAWD,SAAgB,kCAAkC,CAChD,OAAiC,EACjC,OAA8B,EAAE;IAEhC,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAEzE,OAAO,KAAK,IAA0B,EAAE;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,2BAA2B,CACnC,+BAA+B,OAAO,CAAC,gBAAgB,YAAY,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC,QAAQ,EAAE;YACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,2BAA2B,CACnC,qCAAqC,OAAO,CAAC,QAAQ,eAAe;gBAClE,SAAS,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACpD,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC5B,CAAC;QACJ,CAAC;QACD,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAY,EACZ,OAAiC,EACjC,MAAc;IAEd,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,2BAA2B,CACnC,sCAAsC,OAAO,CAAC,QAAQ,eAAe,EACrE,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAGpE,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,2BAA2B,CACnC,sCAAsC,OAAO,CAAC,QAAQ,2BAA2B,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,sCAAuB,EAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,2BAA2B,CACnC,6BAA6B,OAAO,CAAC,QAAQ,+BAA+B;YAC1E,aAAa,OAAO,CAAC,QAAQ,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;YACtE,2EAA2E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACnD,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IACxC,CAAC;SAAM,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACpC,SAAS,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,2BAA2B,CACnC,6BAA6B,OAAO,CAAC,QAAQ,mCAAmC;YAC9E,kCAAkC,CACrC,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,2BAA2B,CACnC,6BAA6B,OAAO,CAAC,QAAQ,mCAAmC,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAGD,SAAgB,gCAAgC,CAAC,OAAiC;IAChF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC9B,CAAC,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC;QAC9C,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;KACtB,EAAE,CAAC;QACX,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,eAAe,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/connection.d.ts

@@ -1,14 +1,53 @@
 import { Connection } from '@temporalio/client';
 import { NativeConnection } from '@temporalio/worker';
+import type { AccessTokenSource } from './access-token';
+import { type BoundedRetryPolicy, type RetryClock } from './bounded-retry';
+import { type ClientCredentialsDeps, type ClientCredentialsOptions } from './client-credentials-token-source';
+import type { TemporalEnvReader } from './namespace';
+import { ProactiveTokenRefresher, type TokenRefresherLogger } from './proactive-token-refresher';
 export interface TemporalConnectionOptions {
     readonly address: string;
-    readonly tls?: {
-        readonly clientCertPath: string;
-        readonly clientKeyPath: string;
-        readonly serverName?: string;
-    };
-}
-export declare function connectTemporalWorker(options: TemporalConnectionOptions): Promise<NativeConnection>;
-export declare function connectTemporalClient(options: TemporalConnectionOptions): Promise<Connection>;
-export declare function resolveTemporalConnectionOptionsFromEnv(): TemporalConnectionOptions;
+    readonly tls: TemporalTlsOptions;
+    readonly credentials: ClientCredentialsOptions;
+    readonly connectRetry?: BoundedRetryPolicy;
+}
+export interface TemporalTlsOptions {
+    readonly serverCaPath: string;
+    readonly serverName?: string;
+    readonly clientCertPath?: string;
+    readonly clientKeyPath?: string;
+}
+export interface TemporalConnectionDeps extends ClientCredentialsDeps {
+    readonly logger?: TokenRefresherLogger;
+    readonly clock?: RetryClock;
+    readonly onCredentialFailure?: (error: Error) => void;
+    readonly readFile?: (path: string) => Promise<Buffer>;
+    readonly tokenSource?: AccessTokenSource;
+}
+export interface TemporalWorkerConnection {
+    readonly connection: NativeConnection;
+    readonly tokens: ProactiveTokenRefresher;
+    close(): Promise<void>;
+}
+export interface TemporalClientConnection {
+    readonly connection: Connection;
+    readonly tokens: ProactiveTokenRefresher;
+    close(): Promise<void>;
+}
+export declare const TEMPORAL_CONNECTION_ENV: {
+    readonly address: "TEMPORAL_ADDRESS";
+    readonly tlsCaPath: "TEMPORAL_TLS_CA_PATH";
+    readonly tlsServerName: "TEMPORAL_TLS_SERVER_NAME";
+    readonly tlsClientCertPath: "TEMPORAL_TLS_CLIENT_CERT_PATH";
+    readonly tlsClientKeyPath: "TEMPORAL_TLS_CLIENT_KEY_PATH";
+    readonly tokenEndpoint: "TEMPORAL_AUTH_TOKEN_ENDPOINT";
+    readonly clientId: "TEMPORAL_AUTH_CLIENT_ID";
+    readonly clientSecretFile: "TEMPORAL_AUTH_CLIENT_SECRET_FILE";
+    readonly audience: "TEMPORAL_AUTH_AUDIENCE";
+};
+export declare function temporalClientCredentialsFromEnv(env: TemporalEnvReader): ClientCredentialsOptions;
+export declare function temporalConnectionOptionsFromEnv(env: TemporalEnvReader): TemporalConnectionOptions;
+export declare function validateTemporalConnectionOptions(options: TemporalConnectionOptions): void;
+export declare function connectTemporalWorker(options: TemporalConnectionOptions, deps?: TemporalConnectionDeps): Promise<TemporalWorkerConnection>;
+export declare function connectTemporalClient(options: TemporalConnectionOptions, deps?: TemporalConnectionDeps): Promise<TemporalClientConnection>;
 //# sourceMappingURL=connection.d.ts.map

package/dist/lib/connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/lib/connection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAetD,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAE/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AA6BD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAOD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,UAAU,CAAC,CAQrB;AAWD,wBAAgB,uCAAuC,IAAI,yBAAyB,CAyBnF"}
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/lib/connection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,uBAAuB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AAqBrC,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAE/C,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAGD,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAE5B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtD,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CAC1C;AAGD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IAEzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAGD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IAEzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAGD,eAAO,MAAM,uBAAuB;;;;;;;;;;CAU1B,CAAC;AA2BX,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,iBAAiB,GAAG,wBAAwB,CASjG;AASD,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,iBAAiB,GAAG,yBAAyB,CAwBlG;AAGD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAe1F;AA8DD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,EAClC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,wBAAwB,CAAC,CA8BnC;AAOD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,EAClC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAgCnC"}