agentfootprint 9.72.0 → 9.74.0

package/dist/esm/adapters/identity/azure.d.ts

@@ -0,0 +1,188 @@
+/**
+ * entraIdentity — the {@link CredentialProvider} port over Microsoft Entra ID
+ * (peer-dep `@azure/identity`).
+ *
+ *   import { entraIdentity } from 'agentfootprint/security';
+ *   const credentials = entraIdentity();
+ *
+ * ── What it is, and what it deliberately is not ─────────────────────────────
+ * This is the **narrow** adapter: it vends *Entra* access tokens for *Azure*
+ * APIs, from whatever credential the environment already has — the
+ * DefaultAzureCredential chain walks environment service principal, workload
+ * identity, managed identity, VS Code, Azure CLI, Azure PowerShell and the
+ * Azure Developer CLI, in that order. That is one job and it is done
+ * completely.
+ *
+ * It is **not** a user-delegation surface. Entra's on-behalf-of flow (and any
+ * 3-legged consent dance) needs a confidential client app registration that
+ * this adapter does not hold, so `mode: 'user'` is **refused by name** rather
+ * than quietly served with a machine token. A machine token returned where a
+ * user token was asked for is the exact silent downgrade the port exists to
+ * prevent: the call succeeds, the data comes back, and it was the agent's
+ * access rather than the person's. OBO is a later train; when it lands it will
+ * be its own provider, not a flag here.
+ *
+ * ── The audience split, and where it bites ──────────────────────────────────
+ * Azure tokens are minted for ONE audience. {@link AZURE_AI_SCOPE}
+ * (`https://ai.azure.com/.default`) is the data plane — every Foundry and
+ * Azure OpenAI inference call takes it. {@link AZURE_MANAGEMENT_SCOPE}
+ * (`https://management.azure.com/.default`) is the ARM control plane —
+ * listing deployments, creating resources. A token for one audience is a 401
+ * on the other, which is why BOTH are exported by name instead of leaving the
+ * caller to guess a string. The default here is the data-plane scope, because
+ * vending inference credentials is what an agent runtime does all day.
+ *
+ * ── Caching: the credential, never a token ──────────────────────────────────
+ * One `DefaultAzureCredential` is constructed for the life of the provider and
+ * every `getToken` call goes through it. MSAL — the machinery underneath
+ * `@azure/identity` — caches and proactively refreshes tokens internally, so
+ * caching a token HERE would mean owning an expiry this adapter did not
+ * compute and cannot see revoked. Unlike the Google adapter (where scopes are
+ * fixed at client construction and a different scope set needs its own
+ * client), Azure scopes travel per `getToken` call, so the ONE cached
+ * credential serves every scope set.
+ *
+ * ── Secrets ─────────────────────────────────────────────────────────────────
+ * The `sdkFailure` law, same as every other credential-touching adapter here:
+ * the library's own message never comes through, because auth libraries echo
+ * request detail into 401/403 text and a message thrown from a
+ * `CredentialProvider` reaches the LLM as a tool result AND rides
+ * `agentfootprint.credential.failed` to every sink. What comes through is the
+ * operation that failed and the error's NAME. The original is not attached as
+ * `cause` — a cause travels into every serializer that walks own properties,
+ * which would undo all of it in one `JSON.stringify`.
+ *
+ * Pattern: Adapter (GoF) + lazy peer-dep load — `@azure/identity` is required
+ * the first time `getCredential` runs, or never if you inject a credential.
+ */
+import type { CredentialProvider } from '../../identity/types.js';
+/**
+ * The data-plane scope for ALL Foundry / Azure OpenAI inference
+ * (`https://ai.azure.com/.default`). This is the default scope this provider
+ * requests.
+ *
+ * The audience split matters: a token minted for this scope does NOT work on
+ * the ARM control plane, and a {@link AZURE_MANAGEMENT_SCOPE} token does not
+ * work here — Azure validates the audience on every call. Both are exported by
+ * name so nobody has to remember which string is which.
+ */
+export declare const AZURE_AI_SCOPE = "https://ai.azure.com/.default";
+/**
+ * The ARM control-plane scope (`https://management.azure.com/.default`) —
+ * listing deployments, managing resources. A DIFFERENT audience from
+ * {@link AZURE_AI_SCOPE}: a token for one is a 401 on the other, which is why
+ * both are named rather than leaving the caller to guess.
+ */
+export declare const AZURE_MANAGEMENT_SCOPE = "https://management.azure.com/.default";
+/**
+ * The CLASSIC Azure OpenAI data-plane scope
+ * (`https://cognitiveservices.azure.com/.default`) — the audience Microsoft's
+ * own keyless guidance names for the older deployment-scoped route
+ * (`{endpoint}/openai/deployments/{d}/…`), which is the route `azureOpenai()`
+ * builds and therefore its default. Current resources widely accept
+ * {@link AZURE_AI_SCOPE} too, but an older `*.openai.azure.com` resource may
+ * not — and a door should default to the audience ITS route documents, not the
+ * one its sibling uses. (Azure Government spells this
+ * `https://cognitiveservices.azure.us/.default`.)
+ */
+export declare const AZURE_COGNITIVE_SERVICES_SCOPE = "https://cognitiveservices.azure.com/.default";
+/**
+ * The `@azure/core-auth` `TokenCredential` duck type — the slice this adapter
+ * calls. Anything `@azure/identity` exports (DefaultAzureCredential,
+ * ManagedIdentityCredential, ClientSecretCredential, …) satisfies it.
+ *
+ * These are THE shared Azure credential duck-types for the whole repo: sibling
+ * Azure adapters `import type` them from this file rather than re-declaring
+ * their own spelling of the same SDK surface.
+ */
+export interface TokenCredentialLike {
+    /**
+     * Mint (or serve from MSAL's internal cache) an access token for the given
+     * scope(s). May resolve to `null` — the SDK's spelling of "no token
+     * available" — which this adapter refuses by name rather than passing along.
+     */
+    getToken(scopes: string | readonly string[], options?: unknown): Promise<AccessTokenLike | null>;
+}
+/**
+ * The `@azure/core-auth` `AccessToken` duck type. `expiresOnTimestamp` is unix
+ * MILLISECONDS — the port reports unix SECONDS, and the conversion lives in
+ * exactly one place ({@link entraIdentity}'s vend path).
+ *
+ * Shared repo-wide alongside {@link TokenCredentialLike} — sibling Azure
+ * adapters `import type` it from here.
+ */
+export interface AccessTokenLike {
+    /** The bearer token itself. A SECRET — never echoed, never logged. */
+    readonly token: string;
+    /** Expiry in unix MILLISECONDS epoch (the SDK's unit, not the port's). */
+    readonly expiresOnTimestamp: number;
+    /** MSAL's proactive-refresh hint, when the SDK provides one. */
+    readonly refreshAfterTimestamp?: number;
+    /** 'Bearer' | 'pop'; absent on older SDK versions. */
+    readonly tokenType?: string;
+}
+/** The slice of `@azure/identity` this adapter loads. */
+export interface AzureIdentitySdkModule {
+    readonly DefaultAzureCredential?: new () => TokenCredentialLike;
+}
+/** Options for {@link entraIdentity}. */
+export interface EntraIdentityOptions {
+    /**
+     * The scopes to request. Default `[AZURE_AI_SCOPE]` — the data-plane
+     * audience every Foundry / Azure OpenAI inference call accepts.
+     *
+     * A request's own `scopes` win when it names any — a tool that knows it
+     * needs the control plane says so, and this is where that is honoured.
+     */
+    readonly scopes?: readonly string[];
+    /**
+     * Which downstream services this provider will answer for.
+     *
+     * Unset — the default — it answers for ANY `service`, because the token it
+     * vends is an Entra credential and the caller knows better than this
+     * adapter which Azure API they are about to call.
+     *
+     * Set it and a request for a service outside the list is refused BY NAME
+     * rather than served. That is the useful setting in a deployment where
+     * tools declare `needs: [{ credential: 'github' }]` alongside Azure ones:
+     * without it, this provider would happily hand an Entra access token to the
+     * tool that wanted a GitHub one, and the failure would surface as a
+     * puzzling 401 from GitHub rather than as a wiring error here.
+     */
+    readonly services?: readonly string[];
+    /** Stable provider id (default `'entra-identity'`). */
+    readonly id?: string;
+    /**
+     * @internal Test seam — a pre-built credential. Bypasses the SDK entirely,
+     * so the suite runs with no package and no Azure account.
+     */
+    readonly _credential?: TokenCredentialLike;
+    /** @internal Test seam — the SDK module, to exercise the real construction. */
+    readonly _sdk?: AzureIdentitySdkModule;
+}
+/**
+ * Vend Entra access tokens from whatever credential this environment has —
+ * the DefaultAzureCredential chain: environment service principal, workload
+ * identity, managed identity, VS Code, Azure CLI, Azure PowerShell, Azure
+ * Developer CLI. (`AZURE_TOKEN_CREDENTIALS` can restrict the chain; that is
+ * the SDK's own dial and this adapter does not second-guess it.)
+ *
+ * @throws when `mode: 'user'` is requested — no user-delegation surface is
+ *   wired for Entra yet (on-behalf-of is a later train), and a machine token
+ *   returned in its place would be a silent downgrade.
+ * @throws when `services` is configured and the request names another one.
+ *
+ * @example  A tool that calls an Azure API with the deployment's own identity
+ *   const agent = Agent.create({ provider, credentials: entraIdentity() })
+ *     .tool(defineTool({
+ *       name: 'ask_foundry',
+ *       needs: [{ credential: 'azure-ai' }],
+ *       execute: async (args, ctx) =>
+ *         fetch(url, { headers: ctx.credential!.toHeaders() }).then((r) => r.text()),
+ *     }))
+ *     .build();
+ *
+ * @example  A control-plane token, without touching the data-plane default
+ *   entraIdentity({ scopes: [AZURE_MANAGEMENT_SCOPE] });
+ */
+export declare function entraIdentity(options?: EntraIdentityOptions): CredentialProvider;

package/dist/esm/adapters/identity/azure.js

@@ -0,0 +1,302 @@
+/**
+ * entraIdentity — the {@link CredentialProvider} port over Microsoft Entra ID
+ * (peer-dep `@azure/identity`).
+ *
+ *   import { entraIdentity } from 'agentfootprint/security';
+ *   const credentials = entraIdentity();
+ *
+ * ── What it is, and what it deliberately is not ─────────────────────────────
+ * This is the **narrow** adapter: it vends *Entra* access tokens for *Azure*
+ * APIs, from whatever credential the environment already has — the
+ * DefaultAzureCredential chain walks environment service principal, workload
+ * identity, managed identity, VS Code, Azure CLI, Azure PowerShell and the
+ * Azure Developer CLI, in that order. That is one job and it is done
+ * completely.
+ *
+ * It is **not** a user-delegation surface. Entra's on-behalf-of flow (and any
+ * 3-legged consent dance) needs a confidential client app registration that
+ * this adapter does not hold, so `mode: 'user'` is **refused by name** rather
+ * than quietly served with a machine token. A machine token returned where a
+ * user token was asked for is the exact silent downgrade the port exists to
+ * prevent: the call succeeds, the data comes back, and it was the agent's
+ * access rather than the person's. OBO is a later train; when it lands it will
+ * be its own provider, not a flag here.
+ *
+ * ── The audience split, and where it bites ──────────────────────────────────
+ * Azure tokens are minted for ONE audience. {@link AZURE_AI_SCOPE}
+ * (`https://ai.azure.com/.default`) is the data plane — every Foundry and
+ * Azure OpenAI inference call takes it. {@link AZURE_MANAGEMENT_SCOPE}
+ * (`https://management.azure.com/.default`) is the ARM control plane —
+ * listing deployments, creating resources. A token for one audience is a 401
+ * on the other, which is why BOTH are exported by name instead of leaving the
+ * caller to guess a string. The default here is the data-plane scope, because
+ * vending inference credentials is what an agent runtime does all day.
+ *
+ * ── Caching: the credential, never a token ──────────────────────────────────
+ * One `DefaultAzureCredential` is constructed for the life of the provider and
+ * every `getToken` call goes through it. MSAL — the machinery underneath
+ * `@azure/identity` — caches and proactively refreshes tokens internally, so
+ * caching a token HERE would mean owning an expiry this adapter did not
+ * compute and cannot see revoked. Unlike the Google adapter (where scopes are
+ * fixed at client construction and a different scope set needs its own
+ * client), Azure scopes travel per `getToken` call, so the ONE cached
+ * credential serves every scope set.
+ *
+ * ── Secrets ─────────────────────────────────────────────────────────────────
+ * The `sdkFailure` law, same as every other credential-touching adapter here:
+ * the library's own message never comes through, because auth libraries echo
+ * request detail into 401/403 text and a message thrown from a
+ * `CredentialProvider` reaches the LLM as a tool result AND rides
+ * `agentfootprint.credential.failed` to every sink. What comes through is the
+ * operation that failed and the error's NAME. The original is not attached as
+ * `cause` — a cause travels into every serializer that walks own properties,
+ * which would undo all of it in one `JSON.stringify`.
+ *
+ * Pattern: Adapter (GoF) + lazy peer-dep load — `@azure/identity` is required
+ * the first time `getCredential` runs, or never if you inject a credential.
+ */
+import { lazyRequire } from '../../lib/lazyRequire.js';
+import { bearer } from '../../identity/kinds.js';
+const ADAPTER = 'entraIdentity';
+/**
+ * The data-plane scope for ALL Foundry / Azure OpenAI inference
+ * (`https://ai.azure.com/.default`). This is the default scope this provider
+ * requests.
+ *
+ * The audience split matters: a token minted for this scope does NOT work on
+ * the ARM control plane, and a {@link AZURE_MANAGEMENT_SCOPE} token does not
+ * work here — Azure validates the audience on every call. Both are exported by
+ * name so nobody has to remember which string is which.
+ */
+export const AZURE_AI_SCOPE = 'https://ai.azure.com/.default';
+/**
+ * The ARM control-plane scope (`https://management.azure.com/.default`) —
+ * listing deployments, managing resources. A DIFFERENT audience from
+ * {@link AZURE_AI_SCOPE}: a token for one is a 401 on the other, which is why
+ * both are named rather than leaving the caller to guess.
+ */
+export const AZURE_MANAGEMENT_SCOPE = 'https://management.azure.com/.default';
+/**
+ * The CLASSIC Azure OpenAI data-plane scope
+ * (`https://cognitiveservices.azure.com/.default`) — the audience Microsoft's
+ * own keyless guidance names for the older deployment-scoped route
+ * (`{endpoint}/openai/deployments/{d}/…`), which is the route `azureOpenai()`
+ * builds and therefore its default. Current resources widely accept
+ * {@link AZURE_AI_SCOPE} too, but an older `*.openai.azure.com` resource may
+ * not — and a door should default to the audience ITS route documents, not the
+ * one its sibling uses. (Azure Government spells this
+ * `https://cognitiveservices.azure.us/.default`.)
+ */
+export const AZURE_COGNITIVE_SERVICES_SCOPE = 'https://cognitiveservices.azure.com/.default';
+/**
+ * Vend Entra access tokens from whatever credential this environment has —
+ * the DefaultAzureCredential chain: environment service principal, workload
+ * identity, managed identity, VS Code, Azure CLI, Azure PowerShell, Azure
+ * Developer CLI. (`AZURE_TOKEN_CREDENTIALS` can restrict the chain; that is
+ * the SDK's own dial and this adapter does not second-guess it.)
+ *
+ * @throws when `mode: 'user'` is requested — no user-delegation surface is
+ *   wired for Entra yet (on-behalf-of is a later train), and a machine token
+ *   returned in its place would be a silent downgrade.
+ * @throws when `services` is configured and the request names another one.
+ *
+ * @example  A tool that calls an Azure API with the deployment's own identity
+ *   const agent = Agent.create({ provider, credentials: entraIdentity() })
+ *     .tool(defineTool({
+ *       name: 'ask_foundry',
+ *       needs: [{ credential: 'azure-ai' }],
+ *       execute: async (args, ctx) =>
+ *         fetch(url, { headers: ctx.credential!.toHeaders() }).then((r) => r.text()),
+ *     }))
+ *     .build();
+ *
+ * @example  A control-plane token, without touching the data-plane default
+ *   entraIdentity({ scopes: [AZURE_MANAGEMENT_SCOPE] });
+ */
+export function entraIdentity(options = {}) {
+    const defaultScopes = options.scopes ?? [AZURE_AI_SCOPE];
+    const allowed = options.services === undefined ? undefined : new Set(options.services);
+    const cache = {};
+    const resolveCredential = () => {
+        if (options._credential)
+            return options._credential;
+        // ONE credential for the life of the provider — scopes ride on getToken
+        // per call (unlike Google, where they are fixed at client construction),
+        // so no per-scope keying is needed. MSAL underneath caches and refreshes
+        // tokens on its own; we cache the CREDENTIAL, never a token.
+        if (cache.credential)
+            return cache.credential;
+        const mod = loadIdentitySdk(options._sdk);
+        if (typeof mod.DefaultAzureCredential !== 'function') {
+            throw new Error(`${ADAPTER}: \`@azure/identity\` is installed but exports no ` +
+                `\`DefaultAzureCredential\`. This adapter is built against the 4.x package — ` +
+                `update it, or pass \`_credential\`.`);
+        }
+        cache.credential = new mod.DefaultAzureCredential();
+        return cache.credential;
+    };
+    return {
+        id: options.id ?? 'entra-identity',
+        async getCredential(req) {
+            if (req.mode === 'user') {
+                throw new Error(`${ADAPTER}: a \`mode: 'user'\` request arrived for '${req.service}', and this ` +
+                    `provider cannot serve one.\n` +
+                    `  It vends the DEPLOYMENT's Entra credential (the DefaultAzureCredential ` +
+                    `chain — environment service principal, workload identity, managed identity, ` +
+                    `or a developer's \`az login\`). No user-delegation surface is wired for Entra ` +
+                    `yet — the on-behalf-of flow is a later train.\n` +
+                    `  Returning a machine token here would succeed and be wrong: the call would ` +
+                    `run with the AGENT's access rather than the person's, and nothing downstream ` +
+                    `could tell.\n` +
+                    `  Fix:  declare \`mode: 'machine'\` if the deployment's own identity is really ` +
+                    `what you want, or vend the user's token from a provider that holds one.`);
+            }
+            if (req.userToken !== undefined) {
+                // A user's signed token handed to a provider that cannot exchange it.
+                // Named rather than ignored: without a confidential client app
+                // registration there is no on-behalf-of exchange to perform, and
+                // silently dropping somebody's proof and vending machine access is
+                // the same downgrade in a quieter costume.
+                throw new Error(`${ADAPTER}: a \`userToken\` arrived for '${req.service}', but this provider has ` +
+                    `nothing to exchange it against — the on-behalf-of flow needs a confidential ` +
+                    `client app registration, and this provider vends the deployment's own Entra ` +
+                    `credential.\n` +
+                    `  Ignoring it would hand back agent-scoped access while holding the user's ` +
+                    `proof. Drop the token, or use a provider that can exchange one.`);
+            }
+            if (allowed !== undefined && !allowed.has(req.service)) {
+                throw new Error(`${ADAPTER}: this provider is configured for [${[...allowed].join(', ')}] and was ` +
+                    `asked for '${req.service}'.\n` +
+                    `  It vends ENTRA access tokens; handing one to a tool that wanted a different ` +
+                    `service's credential would fail downstream as a puzzling 401 instead of here ` +
+                    `as a wiring error.\n` +
+                    `  Fix:  add '${req.service}' to 'services', or attach a provider that serves it.`);
+            }
+            let credential;
+            try {
+                credential = resolveCredential();
+            }
+            catch (err) {
+                // A refusal this adapter authored (a missing peer dependency, a
+                // too-old SDK) is already the right diagnosis; rewriting it through
+                // sdkFailure would send the reader chasing Entra sign-in logs for a
+                // problem `npm install` fixes. Wrong diagnoses are their own kind of
+                // silently-wrong.
+                if (isOwnRefusal(err))
+                    throw err;
+                throw sdkFailure('new DefaultAzureCredential', err);
+            }
+            // A request's own non-empty scopes win over the provider's default.
+            // The array goes to getToken as-is — Azure scopes are per-call, and
+            // `.default` scopes are single-element by convention anyway.
+            const scopes = req.scopes !== undefined && req.scopes.length > 0 ? req.scopes : defaultScopes;
+            let answer;
+            try {
+                answer = await credential.getToken(scopes);
+            }
+            catch (err) {
+                throw sdkFailure('getToken', err);
+            }
+            const token = answer?.token;
+            if (typeof token !== 'string' || token.trim() === '') {
+                // The SCOPES are quoted; nothing else is. An audience URI is public,
+                // and it is the datum most often wrong here — "could not mint for the
+                // requested scope" is useless when the reader cannot see WHICH scope
+                // was requested (a tool that declares `needs` without `scopes` gets
+                // this provider's default, which it never typed anywhere). The token
+                // response's own fields stay withheld: every one of them is a secret.
+                // Same conclusion `entraBearerToken` reached out loud in
+                // src/adapters/llm/OpenAIProvider.ts — the two siblings now agree.
+                throw new Error(`${ADAPTER}: the credential resolved but vended no access token for ` +
+                    `'${req.service}' at scope${scopes.length === 1 ? '' : 's'} ` +
+                    `[${scopes.join(', ')}] — ${answer === null
+                        ? '`getToken` returned null, the SDK\'s spelling of "no token available"'
+                        : "the response's `token` field was empty"}.\n` +
+                    `  No token value is quoted here on purpose — every field of a token response is ` +
+                    `a secret. This usually means the chain found a credential source that could not ` +
+                    `actually mint for THAT audience.\n` +
+                    `  Fix:  check the audience first — inference is ${AZURE_AI_SCOPE} and the ARM ` +
+                    `control plane is ${AZURE_MANAGEMENT_SCOPE}; name the right one in the request's ` +
+                    `\`scopes\` or this provider's \`scopes\` option. If it is already right, sign in as ` +
+                    `an identity that can mint for it (\`az login\`, or a managed identity with the role).`);
+            }
+            // The SDK records expiry in unix MILLISECONDS; the port reports unix
+            // SECONDS. Reported when known and omitted when not — an invented
+            // expiry is worse than none, because a caller would cache against it.
+            // (`answer` cannot be null past the token guard; the optional chain is
+            // for the compiler, which does not carry the narrowing across fields.)
+            const expiryMs = answer?.expiresOnTimestamp;
+            const expiresAt = typeof expiryMs === 'number' && Number.isFinite(expiryMs) && expiryMs > 0
+                ? Math.floor(expiryMs / 1000)
+                : undefined;
+            return {
+                status: 'issued',
+                credential: bearer(token),
+                ...(expiresAt !== undefined && { expiresAt }),
+            };
+        },
+    };
+}
+// ─── Internals ───────────────────────────────────────────────────────
+function loadIdentitySdk(injected) {
+    if (injected)
+        return injected;
+    try {
+        return lazyRequire('@azure/identity');
+    }
+    catch {
+        throw new Error(`${ADAPTER} requires the \`@azure/identity\` peer dependency.\n` +
+            `  Install:  npm install @azure/identity\n` +
+            `  It is optional and loaded only when this provider first vends, so nothing else ` +
+            `in this library pays for it.`);
+    }
+}
+/**
+ * "There is no usable credential here" — the most common real failure, given
+ * the fix instead of the library's own text. `@azure/identity` names it
+ * `CredentialUnavailableError` (one rung) or `AggregateAuthenticationError`
+ * (the whole chain came up empty); both mean the same thing to the reader.
+ */
+function credentialsUnavailable(name) {
+    const failure = new Error(`${ADAPTER}: could not acquire an Entra token in this environment — ${name}.\n` +
+        `  The underlying message is withheld: auth libraries echo request detail into ` +
+        `failure text, and this message reaches the model as a tool result.\n` +
+        `  Every rung of the DefaultAzureCredential chain was tried: environment service ` +
+        `principal, workload identity, managed identity, VS Code, Azure CLI, Azure ` +
+        `PowerShell, Azure Developer CLI.\n` +
+        `  Fix:  run \`az login\`, or set AZURE_CLIENT_ID / AZURE_TENANT_ID / ` +
+        `AZURE_CLIENT_SECRET, or run where a managed identity exists, or pass \`_credential\`.`);
+    failure.name = 'AzureCredentialsUnavailableError';
+    return failure;
+}
+/** Re-raise without the library's text. See the module header for why. */
+function sdkFailure(operation, err) {
+    const name = errorName(err);
+    // The no-credential names get the fix, not just the diagnosis — but ONLY
+    // those names. Everything else is reported as what it is.
+    if (name === 'CredentialUnavailableError' || name === 'AggregateAuthenticationError') {
+        return credentialsUnavailable(name);
+    }
+    const failure = new Error(`${ADAPTER}: ${operation} failed — ${name}.\n` +
+        `  The underlying message is withheld: this call handles an access token, and auth ` +
+        `libraries echo request detail into failure text. Check the Entra sign-in logs for ` +
+        `the full error.`);
+    failure.name = 'AzureCredentialError';
+    return failure;
+}
+/**
+ * Did THIS adapter write this error?
+ *
+ * Every refusal authored here opens with the adapter's own name — both as the
+ * marker and because it is what makes the message readable ("entraIdentity:
+ * …", "entraIdentity requires …"). A library's own failure never does, so the
+ * prefix is a reliable discriminator without an error subclass per refusal.
+ */
+function isOwnRefusal(err) {
+    return err instanceof Error && err.message.startsWith(ADAPTER);
+}
+function errorName(err) {
+    const name = err?.name;
+    return typeof name === 'string' && name.length > 0 ? name : 'an unnamed failure';
+}
+//# sourceMappingURL=azure.js.map

package/dist/esm/adapters/identity/azure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure.js","sourceRoot":"","sources":["../../../../src/adapters/identity/azure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAOjD,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uCAAuC,CAAC;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,8CAA8C,CAAC;AA6F7F;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,aAAa,CAAC,UAAgC,EAAE;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvF,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,MAAM,iBAAiB,GAAG,GAAwB,EAAE;QAClD,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,OAAO,CAAC,WAAW,CAAC;QACpD,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC,UAAU,CAAC;QAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,GAAG,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,oDAAoD;gBAC5D,8EAA8E;gBAC9E,qCAAqC,CACxC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,gBAAgB;QAElC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,6CAA6C,GAAG,CAAC,OAAO,cAAc;oBAC9E,8BAA8B;oBAC9B,2EAA2E;oBAC3E,8EAA8E;oBAC9E,gFAAgF;oBAChF,iDAAiD;oBACjD,8EAA8E;oBAC9E,+EAA+E;oBAC/E,eAAe;oBACf,iFAAiF;oBACjF,yEAAyE,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,sEAAsE;gBACtE,+DAA+D;gBAC/D,iEAAiE;gBACjE,mEAAmE;gBACnE,2CAA2C;gBAC3C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,kCAAkC,GAAG,CAAC,OAAO,2BAA2B;oBAChF,8EAA8E;oBAC9E,8EAA8E;oBAC9E,eAAe;oBACf,6EAA6E;oBAC7E,iEAAiE,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,sCAAsC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;oBACjF,cAAc,GAAG,CAAC,OAAO,MAAM;oBAC/B,gFAAgF;oBAChF,+EAA+E;oBAC/E,sBAAsB;oBACtB,gBAAgB,GAAG,CAAC,OAAO,uDAAuD,CACrF,CAAC;YACJ,CAAC;YAED,IAAI,UAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gEAAgE;gBAChE,oEAAoE;gBACpE,oEAAoE;gBACpE,qEAAqE;gBACrE,kBAAkB;gBAClB,IAAI,YAAY,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACjC,MAAM,UAAU,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAED,oEAAoE;YACpE,oEAAoE;YACpE,6DAA6D;YAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;YAE9F,IAAI,MAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;YAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrD,qEAAqE;gBACrE,sEAAsE;gBACtE,qEAAqE;gBACrE,oEAAoE;gBACpE,qEAAqE;gBACrE,sEAAsE;gBACtE,yDAAyD;gBACzD,mEAAmE;gBACnE,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,2DAA2D;oBACnE,IAAI,GAAG,CAAC,OAAO,aAAa,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;oBAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OACnB,MAAM,KAAK,IAAI;wBACb,CAAC,CAAC,uEAAuE;wBACzE,CAAC,CAAC,wCACN,KAAK;oBACL,kFAAkF;oBAClF,kFAAkF;oBAClF,oCAAoC;oBACpC,mDAAmD,cAAc,eAAe;oBAChF,oBAAoB,sBAAsB,wCAAwC;oBAClF,sFAAsF;oBACtF,uFAAuF,CAC1F,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,kEAAkE;YAClE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,QAAQ,GAAG,MAAM,EAAE,kBAAkB,CAAC;YAC5C,MAAM,SAAS,GACb,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;gBACvE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC;gBACzB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;aAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,SAAS,eAAe,CAAC,QAA4C;IACnE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAyB,iBAAiB,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,sDAAsD;YAC9D,2CAA2C;YAC3C,mFAAmF;YACnF,8BAA8B,CACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,GAAG,OAAO,4DAA4D,IAAI,KAAK;QAC7E,gFAAgF;QAChF,sEAAsE;QACtE,kFAAkF;QAClF,4EAA4E;QAC5E,oCAAoC;QACpC,uEAAuE;QACvE,uFAAuF,CAC1F,CAAC;IACF,OAAO,CAAC,IAAI,GAAG,kCAAkC,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,SAAiB,EAAE,GAAY;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,yEAAyE;IACzE,0DAA0D;IAC1D,IAAI,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,8BAA8B,EAAE,CAAC;QACrF,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,GAAG,OAAO,KAAK,SAAS,aAAa,IAAI,KAAK;QAC5C,oFAAoF;QACpF,oFAAoF;QACpF,iBAAiB,CACpB,CAAC;IACF,OAAO,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACnF,CAAC"}