cliodot 1.2.3 → 1.2.4

package/dist/http/create-client.js

@@ -0,0 +1,14 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCliodotAxios = createCliodotAxios;
+const axios_1 = __importDefault(require("axios"));
+const localhost_lookup_1 = require("./localhost-lookup");
+function createCliodotAxios(config = {}) {
+    return axios_1.default.create({
+        ...(0, localhost_lookup_1.cliodotHttpAgents)(),
+        ...config,
+    });
+}

package/dist/http/events-instance-id.d.ts

@@ -0,0 +1,11 @@
+export declare const CLIODOT_INSTANCE_HEADER = "x-cliodot-instance-id";
+/**
+ * Stable id for this Event app on this computer.
+ * Same machine always hashes the same; a different computer gets a new id.
+ */
+export declare function resolveEventsInstanceId(input: {
+    appId: string;
+    instanceId?: string;
+}): string;
+export declare function applyInstanceHeader(headers: Record<string, string>, instanceId: string): Record<string, string>;
+//# sourceMappingURL=events-instance-id.d.ts.map

package/dist/http/events-instance-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-instance-id.d.ts","sourceRoot":"","sources":["../../src/http/events-instance-id.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AA+D/D;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAWT;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKxB"}

package/dist/http/events-instance-id.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLIODOT_INSTANCE_HEADER = void 0;
+exports.resolveEventsInstanceId = resolveEventsInstanceId;
+exports.applyInstanceHeader = applyInstanceHeader;
+const crypto_1 = require("crypto");
+exports.CLIODOT_INSTANCE_HEADER = "x-cliodot-instance-id";
+const INSTANCE_ID_RE = /^[A-Za-z0-9._-]{8,128}$/;
+function sha256Hex(value) {
+    return (0, crypto_1.createHash)("sha256").update(value).digest("hex");
+}
+function isNodeRuntime() {
+    return typeof process !== "undefined" && Boolean(process.versions?.node);
+}
+function nodeMachineSeed() {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const os = require("os");
+    let username = "";
+    try {
+        username = os.userInfo()?.username || "";
+    }
+    catch {
+        username = "";
+    }
+    return [
+        os.hostname?.() || "",
+        os.platform?.() || "",
+        os.arch?.() || "",
+        username,
+        os.homedir?.() || "",
+        os.cpus?.()?.[0]?.model || "",
+    ].join("|");
+}
+function readGlobal(name) {
+    return globalThis[name];
+}
+function browserInstanceSeed(appId) {
+    const key = `cliodot.events.instance.${appId}`;
+    const storage = readGlobal("localStorage");
+    try {
+        if (storage && typeof storage.getItem === "function") {
+            let stored = String(storage.getItem(key) || "");
+            if (!stored) {
+                stored =
+                    typeof crypto_1.randomUUID === "function"
+                        ? (0, crypto_1.randomUUID)()
+                        : sha256Hex(`${Date.now()}.${Math.random()}`);
+                storage.setItem(key, stored);
+            }
+            return stored;
+        }
+    }
+    catch {
+        // private mode / disabled storage
+    }
+    const nav = readGlobal("navigator");
+    const scr = readGlobal("screen");
+    return [
+        nav?.userAgent || "",
+        nav?.language || "",
+        String(scr?.width || ""),
+        String(scr?.height || ""),
+    ].join("|");
+}
+/**
+ * Stable id for this Event app on this computer.
+ * Same machine always hashes the same; a different computer gets a new id.
+ */
+function resolveEventsInstanceId(input) {
+    const override = input.instanceId?.trim();
+    if (override) {
+        if (INSTANCE_ID_RE.test(override))
+            return override;
+        return sha256Hex(`cliodot-events:${input.appId}:override:${override}`);
+    }
+    const seed = isNodeRuntime()
+        ? nodeMachineSeed()
+        : browserInstanceSeed(input.appId);
+    return sha256Hex(`cliodot-events|${input.appId}|${seed}`);
+}
+function applyInstanceHeader(headers, instanceId) {
+    if (instanceId) {
+        headers[exports.CLIODOT_INSTANCE_HEADER] = instanceId;
+    }
+    return headers;
+}

package/dist/http/localhost-lookup.d.ts

@@ -0,0 +1,12 @@
+import http from "http";
+import https from "https";
+import type { LookupAddress, LookupOptions } from "dns";
+type LookupCallback = (err: NodeJS.ErrnoException | null, address: string | LookupAddress[], family?: number) => void;
+export declare function isLoopbackHostname(hostname: string): boolean;
+export declare function localhostAwareLookup(hostname: string, options: LookupOptions | number | LookupCallback, callback?: LookupCallback): void;
+export declare function cliodotHttpAgents(): {
+    httpAgent?: http.Agent;
+    httpsAgent?: https.Agent;
+};
+export {};
+//# sourceMappingURL=localhost-lookup.d.ts.map

package/dist/http/localhost-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localhost-lookup.d.ts","sourceRoot":"","sources":["../../src/http/localhost-lookup.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAExD,KAAK,cAAc,GAAG,CACpB,GAAG,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,EACjC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE,EACjC,MAAM,CAAC,EAAE,MAAM,KACZ,IAAI,CAAC;AAEV,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM5D;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,cAAc,EAChD,QAAQ,CAAC,EAAE,cAAc,GACxB,IAAI,CA4BN;AASD,wBAAgB,iBAAiB,IAAI;IACnC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC;IACvB,UAAU,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;CAC1B,CAeA"}

package/dist/http/localhost-lookup.js

@@ -0,0 +1,67 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLoopbackHostname = isLoopbackHostname;
+exports.localhostAwareLookup = localhostAwareLookup;
+exports.cliodotHttpAgents = cliodotHttpAgents;
+const dns_1 = __importDefault(require("dns"));
+const http_1 = __importDefault(require("http"));
+const https_1 = __importDefault(require("https"));
+function isLoopbackHostname(hostname) {
+    const host = String(hostname || "")
+        .trim()
+        .toLowerCase()
+        .replace(/\.$/, "");
+    return host === "localhost" || host.endsWith(".localhost");
+}
+function localhostAwareLookup(hostname, options, callback) {
+    if (typeof options === "function") {
+        callback = options;
+        options = {};
+    }
+    const cb = callback;
+    if (!cb)
+        return;
+    const opts = typeof options === "number" ? { family: options } : options || {};
+    if (isLoopbackHostname(hostname)) {
+        if (opts.family === 6) {
+            if (opts.all) {
+                cb(null, [{ address: "::1", family: 6 }]);
+                return;
+            }
+            cb(null, "::1", 6);
+            return;
+        }
+        if (opts.all) {
+            cb(null, [{ address: "127.0.0.1", family: 4 }]);
+            return;
+        }
+        cb(null, "127.0.0.1", 4);
+        return;
+    }
+    dns_1.default.lookup(hostname, opts, cb);
+}
+function isNodeRuntime() {
+    return typeof process !== "undefined" && Boolean(process.versions?.node);
+}
+let httpAgent;
+let httpsAgent;
+function cliodotHttpAgents() {
+    if (!isNodeRuntime())
+        return {};
+    if (!httpAgent) {
+        httpAgent = new http_1.default.Agent({
+            keepAlive: true,
+            lookup: localhostAwareLookup,
+        });
+    }
+    if (!httpsAgent) {
+        httpsAgent = new https_1.default.Agent({
+            keepAlive: true,
+            lookup: localhostAwareLookup,
+        });
+    }
+    return { httpAgent, httpsAgent };
+}

package/dist/http/parse-api-error.js

@@ -1 +1,56 @@
-'use strict';const _0x37857c=_0x392f;(function(_0x110df9,_0x3e609e){const _0xbf991e=_0x392f,_0x49ee69=_0x110df9();while(!![]){try{const _0x2f85c0=parseInt(_0xbf991e(0x82))/0x1*(-parseInt(_0xbf991e(0x6f))/0x2)+parseInt(_0xbf991e(0x70))/0x3*(parseInt(_0xbf991e(0x74))/0x4)+parseInt(_0xbf991e(0x80))/0x5*(-parseInt(_0xbf991e(0x7b))/0x6)+parseInt(_0xbf991e(0x77))/0x7*(parseInt(_0xbf991e(0x7d))/0x8)+-parseInt(_0xbf991e(0x81))/0x9+parseInt(_0xbf991e(0x83))/0xa+parseInt(_0xbf991e(0x7f))/0xb;if(_0x2f85c0===_0x3e609e)break;else _0x49ee69['push'](_0x49ee69['shift']());}catch(_0x24e432){_0x49ee69['push'](_0x49ee69['shift']());}}}(_0xa526,0x4ba15));Object[_0x37857c(0x6e)](exports,_0x37857c(0x6c),{'value':!![]}),exports[_0x37857c(0x72)]=parseApiErrorMessage,exports[_0x37857c(0x7a)]=parseApiErrorCode,exports[_0x37857c(0x78)]=parseApiErrorStatus;function parseApiErrorMessage(_0x531aaa){const _0x2796a4=_0x37857c;if(!_0x531aaa||typeof _0x531aaa!=='object')return typeof _0x531aaa===_0x2796a4(0x71)&&_0x531aaa[_0x2796a4(0x75)]()?_0x531aaa[_0x2796a4(0x75)]():undefined;const _0x2482a0=_0x531aaa;if(typeof _0x2482a0[_0x2796a4(0x7e)]===_0x2796a4(0x71)&&_0x2482a0[_0x2796a4(0x7e)][_0x2796a4(0x75)]())return _0x2482a0['message'][_0x2796a4(0x75)]();if(typeof _0x2482a0[_0x2796a4(0x6d)]===_0x2796a4(0x71)&&_0x2482a0[_0x2796a4(0x6d)][_0x2796a4(0x75)]())return _0x2482a0[_0x2796a4(0x6d)][_0x2796a4(0x75)]();if(_0x2482a0[_0x2796a4(0x6d)]&&typeof _0x2482a0[_0x2796a4(0x6d)]===_0x2796a4(0x76)){const _0x53ff48=_0x2482a0['error'];if(typeof _0x53ff48[_0x2796a4(0x7e)]===_0x2796a4(0x71)&&_0x53ff48[_0x2796a4(0x7e)]['trim']())return _0x53ff48['message'][_0x2796a4(0x75)]();}return undefined;}function _0xa526(){const _0x3953b3=['C3rYAw5N','CgfYC2vbCgLfCNjVCK1LC3nHz2u','BNvTyMvY','mZa1mJbKtu11DMm','DhjPBq','B2jQzwn0','mtK1m3bkqKTHAG','CgfYC2vbCgLfCNjVCLn0yxr1CW','y29Kzq','CgfYC2vbCgLfCNjVCKnVzgu','ndq3mfLxDu1SBa','C3rHDhvZq29Kzq','mta1nLbUC293AW','BwvZC2fNzq','odm1otK4owzTqK1TDG','mJy3nuPOELfMAq','mZu3nZa1me55z215uG','mZyYmJuXr1rNBe1Q','mZeYnJiWmgj4y2v1CW','x19LC01VzhvSzq','zxjYB3i','zgvMAw5LuhjVCgvYDhK','mMr4uNrWtG','mtqXtxfNv3L6'];_0xa526=function(){return _0x3953b3;};return _0xa526();}function _0x392f(_0x1a0ae0,_0x4d2e4c){_0x1a0ae0=_0x1a0ae0-0x6c;const _0xa52648=_0xa526();let _0x392fe3=_0xa52648[_0x1a0ae0];if(_0x392f['PmiHmC']===undefined){var _0x2e9a9e=function(_0x3f5454){const _0x8e5903='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x531aaa='',_0x2482a0='';for(let _0x53ff48=0x0,_0x419890,_0x515799,_0x1bbca6=0x0;_0x515799=_0x3f5454['charAt'](_0x1bbca6++);~_0x515799&&(_0x419890=_0x53ff48%0x4?_0x419890*0x40+_0x515799:_0x515799,_0x53ff48++%0x4)?_0x531aaa+=String['fromCharCode'](0xff&_0x419890>>(-0x2*_0x53ff48&0x6)):0x0){_0x515799=_0x8e5903['indexOf'](_0x515799);}for(let _0x2e40db=0x0,_0xffcd15=_0x531aaa['length'];_0x2e40db<_0xffcd15;_0x2e40db++){_0x2482a0+='%'+('00'+_0x531aaa['charCodeAt'](_0x2e40db)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x2482a0);};_0x392f['pcArfu']=_0x2e9a9e,_0x392f['DodMoY']={},_0x392f['PmiHmC']=!![];}const _0xbb280a=_0xa52648[0x0],_0x37bee0=_0x1a0ae0+_0xbb280a,_0x229631=_0x392f['DodMoY'][_0x37bee0];return!_0x229631?(_0x392fe3=_0x392f['pcArfu'](_0x392fe3),_0x392f['DodMoY'][_0x37bee0]=_0x392fe3):_0x392fe3=_0x229631,_0x392fe3;}function parseApiErrorCode(_0x419890){const _0x166d40=_0x37857c;if(!_0x419890||typeof _0x419890!=='object')return undefined;const _0x515799=_0x419890;if(_0x515799[_0x166d40(0x6d)]&&typeof _0x515799[_0x166d40(0x6d)]===_0x166d40(0x76)){const _0x1bbca6=_0x515799[_0x166d40(0x6d)];if(typeof _0x1bbca6[_0x166d40(0x79)]===_0x166d40(0x71)&&_0x1bbca6['code'][_0x166d40(0x75)]())return _0x1bbca6[_0x166d40(0x79)][_0x166d40(0x75)]();}if(typeof _0x515799[_0x166d40(0x79)]===_0x166d40(0x71)&&_0x515799[_0x166d40(0x79)][_0x166d40(0x75)]())return _0x515799[_0x166d40(0x79)][_0x166d40(0x75)]();return undefined;}function parseApiErrorStatus(_0x2e40db,_0xffcd15){const _0x28d32d=_0x37857c;if(!_0x2e40db||typeof _0x2e40db!==_0x28d32d(0x76))return _0xffcd15;const _0x3e13a2=_0x2e40db;if(typeof _0x3e13a2[_0x28d32d(0x7c)]===_0x28d32d(0x73))return _0x3e13a2['statusCode'];if(_0x3e13a2[_0x28d32d(0x6d)]&&typeof _0x3e13a2[_0x28d32d(0x6d)]===_0x28d32d(0x76)){const _0x2b90b5=_0x3e13a2[_0x28d32d(0x6d)];if(typeof _0x2b90b5[_0x28d32d(0x7c)]===_0x28d32d(0x73))return _0x2b90b5[_0x28d32d(0x7c)];}return _0xffcd15;}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseApiErrorMessage = parseApiErrorMessage;
+exports.parseApiErrorCode = parseApiErrorCode;
+exports.parseApiErrorStatus = parseApiErrorStatus;
+function parseApiErrorMessage(data) {
+    if (!data || typeof data !== "object") {
+        return typeof data === "string" && data.trim() ? data.trim() : undefined;
+    }
+    const body = data;
+    if (typeof body.message === "string" && body.message.trim()) {
+        return body.message.trim();
+    }
+    if (typeof body.error === "string" && body.error.trim()) {
+        return body.error.trim();
+    }
+    if (body.error && typeof body.error === "object") {
+        const nested = body.error;
+        if (typeof nested.message === "string" && nested.message.trim()) {
+            return nested.message.trim();
+        }
+    }
+    return undefined;
+}
+function parseApiErrorCode(data) {
+    if (!data || typeof data !== "object") {
+        return undefined;
+    }
+    const body = data;
+    if (body.error && typeof body.error === "object") {
+        const nested = body.error;
+        if (typeof nested.code === "string" && nested.code.trim()) {
+            return nested.code.trim();
+        }
+    }
+    if (typeof body.code === "string" && body.code.trim()) {
+        return body.code.trim();
+    }
+    return undefined;
+}
+function parseApiErrorStatus(data, fallback) {
+    if (!data || typeof data !== "object") {
+        return fallback;
+    }
+    const body = data;
+    if (typeof body.statusCode === "number") {
+        return body.statusCode;
+    }
+    if (body.error && typeof body.error === "object") {
+        const nested = body.error;
+        if (typeof nested.statusCode === "number") {
+            return nested.statusCode;
+        }
+    }
+    return fallback;
+}

package/dist/http/sanitize-execution-headers.js

@@ -1 +1,79 @@
-'use strict';const _0x44b6ac=_0x58ea;(function(_0x18d8de,_0x2e8d4f){const _0x3f7a52=_0x58ea,_0x17019f=_0x18d8de();while(!![]){try{const _0x53fc78=-parseInt(_0x3f7a52(0xc9))/0x1+-parseInt(_0x3f7a52(0xad))/0x2*(parseInt(_0x3f7a52(0xb0))/0x3)+-parseInt(_0x3f7a52(0xbd))/0x4*(parseInt(_0x3f7a52(0xc1))/0x5)+parseInt(_0x3f7a52(0xb8))/0x6+parseInt(_0x3f7a52(0xc7))/0x7+parseInt(_0x3f7a52(0xae))/0x8+parseInt(_0x3f7a52(0xb6))/0x9;if(_0x53fc78===_0x2e8d4f)break;else _0x17019f['push'](_0x17019f['shift']());}catch(_0x544385){_0x17019f['push'](_0x17019f['shift']());}}}(_0x3e31,0x551ee));Object[_0x44b6ac(0xb1)](exports,_0x44b6ac(0xa2),{'value':!![]}),exports[_0x44b6ac(0xbe)]=sanitizeExecutionHeaders;function _0x58ea(_0x39cdb4,_0x1ec5ce){_0x39cdb4=_0x39cdb4-0xa2;const _0x3e31dc=_0x3e31();let _0x58ea9c=_0x3e31dc[_0x39cdb4];if(_0x58ea['HSHAJg']===undefined){var _0x3bb95b=function(_0x42fa99){const _0x4df3f9='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x54d4fd='',_0x1b2ac6='';for(let _0xf84d6=0x0,_0x42f9f6,_0x50e518,_0x3a1c04=0x0;_0x50e518=_0x42fa99['charAt'](_0x3a1c04++);~_0x50e518&&(_0x42f9f6=_0xf84d6%0x4?_0x42f9f6*0x40+_0x50e518:_0x50e518,_0xf84d6++%0x4)?_0x54d4fd+=String['fromCharCode'](0xff&_0x42f9f6>>(-0x2*_0xf84d6&0x6)):0x0){_0x50e518=_0x4df3f9['indexOf'](_0x50e518);}for(let _0x5a34a4=0x0,_0xe33d9=_0x54d4fd['length'];_0x5a34a4<_0xe33d9;_0x5a34a4++){_0x1b2ac6+='%'+('00'+_0x54d4fd['charCodeAt'](_0x5a34a4)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x1b2ac6);};_0x58ea['zwkmmu']=_0x3bb95b,_0x58ea['ZkgLEB']={},_0x58ea['HSHAJg']=!![];}const _0x221f31=_0x3e31dc[0x0],_0x32222a=_0x39cdb4+_0x221f31,_0x427f17=_0x58ea['ZkgLEB'][_0x32222a];return!_0x427f17?(_0x58ea9c=_0x58ea['zwkmmu'](_0x58ea9c),_0x58ea['ZkgLEB'][_0x32222a]=_0x58ea9c):_0x58ea9c=_0x427f17,_0x58ea9c;}const BLOCKED_FOR_EXPLICIT_HEADERS=new Set([_0x44b6ac(0xb9),_0x44b6ac(0xa5),_0x44b6ac(0xaa),_0x44b6ac(0xc8),_0x44b6ac(0xb5),_0x44b6ac(0xaf),_0x44b6ac(0xb3),_0x44b6ac(0xa6),'te',_0x44b6ac(0xc5),_0x44b6ac(0xab),'keep-alive',_0x44b6ac(0xc2)]),DEFAULT_MAX_KEYS=0x30,DEFAULT_MAX_NAME_LEN=0x80,DEFAULT_MAX_VALUE_LEN=0x2000,DEFAULT_MAX_TOTAL_VALUE_CHARS=0x10000;function isBlockedForExplicitExecutionHeaders(_0x54d4fd){const _0x5a347b=_0x44b6ac;if(BLOCKED_FOR_EXPLICIT_HEADERS[_0x5a347b(0xa4)](_0x54d4fd))return!![];if(_0x54d4fd['startsWith'](_0x5a347b(0xc3)))return!![];if(_0x54d4fd[_0x5a347b(0xca)](_0x5a347b(0xc6)))return!![];return![];}function _0x3e31(){const _0x1a5f37=['mZe0nda2nhbqt1r2Bq','Ag9ZDa','otCYyxLZDvPv','C3rHCNrZv2L0Aa','C3rYAw5N','C2XPy2u','x19LC01VzhvSzq','AxnbCNjHEq','AgfZ','y29VA2LL','DxbNCMfKzq','zMfSC2u','BgvUz3rO','zMLUza','C2v0lwnVB2TPzq','DhjHBNnMzxiTzw5JB2rPBMC','Bwf4tMfTzuXLBG','otKXnJe4DfLSEKny','mtq5ndaWoeL6vM9JBW','y29UDgvUDc1Szw5NDgG','m2rJqvDyqG','zgvMAw5LuhjVCgvYDhK','DhjPBq','zxHWzwn0','Dhj1zq','y29UBMvJDgLVBG','mZK2otCYmgPsvefTCW','Dg9mB3DLCKnHC2u','mJuZnJq4ohfmEKnIzq','ChjVEhKTyxv0Ag9YAxPHDgLVBG','Bwf4vg90ywXwywX1zunOyxjZ','BNvTyMvY','Bwf4s2v5CW','mZjWCxPUvKG','C2fUAxrPEMvfEgvJDxrPB25izwfKzxjZ','Bwf4vMfSDwvmzw4','B2jQzwn0','nda4otm1CuTTCMvX','D3D3lwf1DgHLBNrPy2f0zq','C2vJlq','AxngAw5PDgu','DhjHAwXLCG','ChjVEhKT'];_0x3e31=function(){return _0x1a5f37;};return _0x3e31();}function coerceHeaderValue(value){const _0x3fd8fe=_0x44b6ac;if(value===undefined||value===null)return null;if(typeof value===_0x3fd8fe(0xcb))return value;if(typeof value===_0x3fd8fe(0xbb)&&Number[_0x3fd8fe(0xc4)](value))return String(value);if(typeof value==='boolean')return value?_0x3fd8fe(0xb4):_0x3fd8fe(0xa7);if(Array[_0x3fd8fe(0xa3)](value)){const _0x1b2ac6=value[_0x3fd8fe(0xa9)](_0xf84d6=>_0xf84d6!==undefined&&_0xf84d6!==null);return coerceHeaderValue(_0x1b2ac6);}return null;}function sanitizeExecutionHeaders(_0x42f9f6,_0x50e518){const _0x7c3f8e=_0x44b6ac,_0x3a1c04=_0x50e518?.[_0x7c3f8e(0xbc)]??DEFAULT_MAX_KEYS,_0x5a34a4=_0x50e518?.[_0x7c3f8e(0xac)]??DEFAULT_MAX_NAME_LEN,_0xe33d9=_0x50e518?.[_0x7c3f8e(0xbf)]??DEFAULT_MAX_VALUE_LEN,_0x23960d=_0x50e518?.[_0x7c3f8e(0xba)]??DEFAULT_MAX_TOTAL_VALUE_CHARS;if(!_0x42f9f6||typeof _0x42f9f6!==_0x7c3f8e(0xc0)||Array[_0x7c3f8e(0xa3)](_0x42f9f6))return{};let _0x474a37=0x0;const _0x18ceb4={};let _0x7ea5aa=0x0;for(const [_0x43ea39,_0x1d6d21]of Object['entries'](_0x42f9f6)){if(_0x7ea5aa>=_0x3a1c04)break;if(typeof _0x43ea39!==_0x7c3f8e(0xcb))continue;const _0x1be11e=_0x43ea39[_0x7c3f8e(0xb2)]();if(!_0x1be11e||_0x1be11e[_0x7c3f8e(0xa8)]>_0x5a34a4)continue;const _0x42df2a=_0x1be11e[_0x7c3f8e(0xb7)]();if(isBlockedForExplicitExecutionHeaders(_0x42df2a))continue;const _0x48e13e=coerceHeaderValue(_0x1d6d21);if(_0x48e13e===null)continue;const _0x223cc2=_0x48e13e[_0x7c3f8e(0xa8)]>_0xe33d9?_0x48e13e[_0x7c3f8e(0xcc)](0x0,_0xe33d9):_0x48e13e;if(_0x474a37+_0x223cc2[_0x7c3f8e(0xa8)]>_0x23960d)break;_0x474a37+=_0x223cc2['length'],_0x18ceb4[_0x42df2a]=_0x223cc2,_0x7ea5aa+=0x1;}return _0x18ceb4;}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeExecutionHeaders = sanitizeExecutionHeaders;
+const BLOCKED_FOR_EXPLICIT_HEADERS = new Set([
+    "proxy-authorization",
+    "cookie",
+    "set-cookie",
+    "host",
+    "connection",
+    "content-length",
+    "expect",
+    "upgrade",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "keep-alive",
+    "www-authenticate",
+]);
+const DEFAULT_MAX_KEYS = 48;
+const DEFAULT_MAX_NAME_LEN = 128;
+const DEFAULT_MAX_VALUE_LEN = 8192;
+const DEFAULT_MAX_TOTAL_VALUE_CHARS = 65536;
+function isBlockedForExplicitExecutionHeaders(lower) {
+    if (BLOCKED_FOR_EXPLICIT_HEADERS.has(lower))
+        return true;
+    if (lower.startsWith("sec-"))
+        return true;
+    if (lower.startsWith("proxy-"))
+        return true;
+    return false;
+}
+function coerceHeaderValue(value) {
+    if (value === undefined || value === null)
+        return null;
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "number" && Number.isFinite(value))
+        return String(value);
+    if (typeof value === "boolean")
+        return value ? "true" : "false";
+    if (Array.isArray(value)) {
+        const first = value.find((x) => x !== undefined && x !== null);
+        return coerceHeaderValue(first);
+    }
+    return null;
+}
+function sanitizeExecutionHeaders(raw, limits) {
+    const maxKeys = limits?.maxKeys ?? DEFAULT_MAX_KEYS;
+    const maxNameLen = limits?.maxNameLen ?? DEFAULT_MAX_NAME_LEN;
+    const maxValueLen = limits?.maxValueLen ?? DEFAULT_MAX_VALUE_LEN;
+    const maxTotalValueChars = limits?.maxTotalValueChars ?? DEFAULT_MAX_TOTAL_VALUE_CHARS;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return {};
+    let totalChars = 0;
+    const out = {};
+    let count = 0;
+    for (const [k, v] of Object.entries(raw)) {
+        if (count >= maxKeys)
+            break;
+        if (typeof k !== "string")
+            continue;
+        const name = k.trim();
+        if (!name || name.length > maxNameLen)
+            continue;
+        const lower = name.toLowerCase();
+        if (isBlockedForExplicitExecutionHeaders(lower))
+            continue;
+        const val = coerceHeaderValue(v);
+        if (val === null)
+            continue;
+        const clipped = val.length > maxValueLen ? val.slice(0, maxValueLen) : val;
+        if (totalChars + clipped.length > maxTotalValueChars)
+            break;
+        totalChars += clipped.length;
+        out[lower] = clipped;
+        count += 1;
+    }
+    return out;
+}

package/dist/identity-offline-verify.js

@@ -1 +1,174 @@
-'use strict';const _0x415ea5=_0x58b5;function _0x58b5(_0x2e970f,_0x44aacc){_0x2e970f=_0x2e970f-0xf7;const _0x4ad74e=_0x4ad7();let _0x58b5fa=_0x4ad74e[_0x2e970f];if(_0x58b5['JInKWO']===undefined){var _0x5cd789=function(_0x43d64b){const _0x3e0a5f='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x28564c='',_0x2e50e5='';for(let _0x2a8ca3=0x0,_0x4ea9c2,_0x1290e7,_0x2d59b0=0x0;_0x1290e7=_0x43d64b['charAt'](_0x2d59b0++);~_0x1290e7&&(_0x4ea9c2=_0x2a8ca3%0x4?_0x4ea9c2*0x40+_0x1290e7:_0x1290e7,_0x2a8ca3++%0x4)?_0x28564c+=String['fromCharCode'](0xff&_0x4ea9c2>>(-0x2*_0x2a8ca3&0x6)):0x0){_0x1290e7=_0x3e0a5f['indexOf'](_0x1290e7);}for(let _0x253abd=0x0,_0x260192=_0x28564c['length'];_0x253abd<_0x260192;_0x253abd++){_0x2e50e5+='%'+('00'+_0x28564c['charCodeAt'](_0x253abd)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x2e50e5);};_0x58b5['dSISth']=_0x5cd789,_0x58b5['fSMjEq']={},_0x58b5['JInKWO']=!![];}const _0x4faccf=_0x4ad74e[0x0],_0xc1c61d=_0x2e970f+_0x4faccf,_0x2f5f76=_0x58b5['fSMjEq'][_0xc1c61d];return!_0x2f5f76?(_0x58b5fa=_0x58b5['dSISth'](_0x58b5fa),_0x58b5['fSMjEq'][_0xc1c61d]=_0x58b5fa):_0x58b5fa=_0x2f5f76,_0x58b5fa;}(function(_0x360250,_0xb9dc2){const _0x1b1304=_0x58b5,_0x9f8ea4=_0x360250();while(!![]){try{const _0x34e2f2=-parseInt(_0x1b1304(0x13b))/0x1+-parseInt(_0x1b1304(0x121))/0x2*(-parseInt(_0x1b1304(0x106))/0x3)+parseInt(_0x1b1304(0x105))/0x4*(parseInt(_0x1b1304(0x11a))/0x5)+-parseInt(_0x1b1304(0x125))/0x6+parseInt(_0x1b1304(0x103))/0x7+parseInt(_0x1b1304(0x114))/0x8+-parseInt(_0x1b1304(0x10a))/0x9;if(_0x34e2f2===_0xb9dc2)break;else _0x9f8ea4['push'](_0x9f8ea4['shift']());}catch(_0x5c8eba){_0x9f8ea4['push'](_0x9f8ea4['shift']());}}}(_0x4ad7,0x754b1));function _0x4ad7(){const _0x341c3d=['C3rHDhvZ','A2v5CW','Dg9tDhjPBMC','BM93','C3bRAq','nZy2mJe1mLjUsgzpDa','DMvYAwz5','BgvUz3rO','zMv0y2G','DMvYAwz5swrLBNrPDhLuB2TLBK9MzMXPBMu','AgfZ','mZC5ody0mhvQDgTxzG','C3bSAxq','y2XLyxi','C3rYAw5N','qwnJzxnZihrVA2vUigv4CgLYzwq','DhjPBq','ANDRC1vYBa','mtzbyNn3Dwm','vg9Rzw5fEhbPCMvKrxjYB3i','zgvMyxvSDa','y2XLyxjjzgvUDgL0EuP3A3ndywnOzq','mJu1nta2ngnNBLHstW','z2v0','sLDluYbMzxrJAcbMywLSzwqGka','yMfZzty0DxjS','tM8GBwf0y2HPBMCGsLDluYbRzxK','BMfTzq','zNjVBq','surftLrjvfLFve9lru5Fsu5wquXjra','lI9LCNjVCNm','sfmYntyGDMvYAwz5ihjLCxvPCMvZihnLy3jLDa','zgvMAw5LuhjVCgvYDhK','DxrMoa','CgvT','CgfYC2u','AxnbCNjHEq','sw52ywXPzcbkv1q','ANnVBNDLyNrVA2vU','zxHWAxjLC0f0','C2v0','surftLrjvfLFsLDux0TfwvnFtK9ux0zpvu5e','C2vJCMv0','zMLSDgvY','nZe2mdyZBhr3v3jR','sfmYnty','CgfYC2vjzgvUDgL0EvnJB3bLq2XHAw0','y3j5ChrV','Dg9Rzw4GAxmGCMvXDwLYzwq','surftLrjvfLFve9lru5FrvHqsvjfra','ANDR','zMLUza','sw52ywXPzcbHy2nLC3mGDg9Rzw4','x19PBxbVCNrezwzHDwX0','BwfW','ANnVBG','Dg9Rzw5iyxnty29Wzxm','zgvSzxrL','ote4nJm4B056y0Ls','zxHWB3j0','nffoter3sG','mZa1ndnlrgzNrKO','ChvIBgLJs2v5ugvT','uLmYnty','A2LK','mJC3mdu1munSvhberG','q2XPB2rVDefWAuvYCM9Y','sw52ywXPzcbkv1qGAgvHzgvY','y3jLyxrLuhvIBgLJs2v5','x19LC01VzhvSzq'];_0x4ad7=function(){return _0x341c3d;};return _0x4ad7();}var __importDefault=this&&this[_0x415ea5(0xfe)]||function(_0x28564c){const _0x2dfa7b=_0x415ea5;return _0x28564c&&_0x28564c[_0x2dfa7b(0x10e)]?_0x28564c:{'default':_0x28564c};};Object[_0x415ea5(0x12f)](exports,'__esModule',{'value':!![]}),exports[_0x415ea5(0x124)]=clearIdentityJwksCache,exports[_0x415ea5(0x118)]=verifyIdentityTokenOffline,exports[_0x415ea5(0xf7)]=parseIdentityScopeClaim,exports[_0x415ea5(0x101)]=tokenHasScopes;const crypto_1=__importDefault(require(_0x415ea5(0xf8))),jsonwebtoken_1=__importDefault(require(_0x415ea5(0x135))),errors_1=require(_0x415ea5(0x12d)),jwksCache=new Map();function decodeJwtHeader(_0x2e50e5){const _0x324333=_0x415ea5,_0x2a8ca3=_0x2e50e5['split']('.');if(_0x2a8ca3[_0x324333(0x116)]<0x2)throw new errors_1[(_0x324333(0x10b))](_0x324333(0x134),{'code':_0x324333(0x12c)});try{return JSON['parse'](Buffer[_0x324333(0x12b)](_0x2a8ca3[0x0],_0x324333(0x128))['toString'](_0x324333(0x130)));}catch{throw new errors_1['CliodotApiError'](_0x324333(0x10c),{'code':_0x324333(0x12c)});}}function jwkToPem(_0x4ea9c2){const _0x247c67=_0x415ea5;return crypto_1[_0x247c67(0x123)][_0x247c67(0x10d)]({'key':_0x4ea9c2,'format':_0x247c67(0xfb)})[_0x247c67(0x104)]({'type':_0x247c67(0x113),'format':_0x247c67(0x131)})[_0x247c67(0x111)]();}async function loadJwksKeys(_0x1290e7,_0x2d59b0,_0x253abd){const _0x56b8b7=_0x415ea5,_0x260192=jwksCache[_0x56b8b7(0x126)](_0x1290e7);if(_0x260192&&_0x260192[_0x56b8b7(0x136)]>Date[_0x56b8b7(0x112)]())return _0x260192[_0x56b8b7(0x110)];const _0x42fc8f=await _0x253abd(_0x1290e7);if(!_0x42fc8f['ok'])throw new errors_1[(_0x56b8b7(0x10b))](_0x56b8b7(0x127)+_0x42fc8f[_0x56b8b7(0x10f)]+')',{'status':_0x42fc8f[_0x56b8b7(0x10f)],'code':_0x56b8b7(0x138)});const _0xc0e0d1=await _0x42fc8f[_0x56b8b7(0x100)](),_0xab7bb2=_0xc0e0d1[_0x56b8b7(0x110)]||[];return jwksCache[_0x56b8b7(0x137)](_0x1290e7,{'keys':_0xab7bb2,'expiresAt':Date['now']()+_0x2d59b0}),_0xab7bb2;}function pickRs256Key(_0x553a31,_0x2fc3a0){const _0x1f443f=_0x415ea5;if(_0x2fc3a0){const _0xeb8a30=_0x553a31[_0x1f443f(0xfc)](_0x32934f=>_0x32934f[_0x1f443f(0x109)]===_0x2fc3a0);if(_0xeb8a30)return _0xeb8a30;}return _0x553a31[0x0];}function clearIdentityJwksCache(){const _0x114904=_0x415ea5;jwksCache[_0x114904(0x11c)]();}async function verifyIdentityTokenOffline(_0x357352,_0x4f405e){const _0x5af937=_0x415ea5;if(!_0x357352?.[_0x5af937(0x11f)]())throw new errors_1['CliodotApiError'](_0x5af937(0xf9),{'code':'IDENTITY_TOKEN_INVALID'});const _0x445e78=decodeJwtHeader(_0x357352[_0x5af937(0x11f)]());if(_0x4f405e['algorithm']===_0x5af937(0x13c)){if(!_0x4f405e[_0x5af937(0x139)]?.['trim']())throw new errors_1[(_0x5af937(0x10b))](_0x5af937(0x12e));try{return jsonwebtoken_1[_0x5af937(0x123)][_0x5af937(0x115)](_0x357352['trim'](),_0x4f405e['secret'],{'algorithms':[_0x5af937(0x13c)]});}catch(_0x11ead6){if(_0x11ead6?.[_0x5af937(0x12a)]===_0x5af937(0x122))throw new errors_1[(_0x5af937(0x10b))](_0x5af937(0x11e),{'code':_0x5af937(0xfa),'status':0x191});throw new errors_1[(_0x5af937(0x10b))]('Invalid\x20access\x20token',{'code':_0x5af937(0x12c),'status':0x191});}}const _0x5e99a0=_0x4f405e[_0x5af937(0x117)]||fetch;let _0x479c41=_0x4f405e[_0x5af937(0x107)]?.[_0x5af937(0x11f)]();if(!_0x479c41){if(!_0x4f405e[_0x5af937(0x120)]?.[_0x5af937(0x11f)]())throw new errors_1[(_0x5af937(0x10b))]('RS256\x20verify\x20requires\x20jwksUrl\x20or\x20publicKeyPem');const _0x468f0c=_0x4f405e['cacheTtlMs']??0x493e0;let _0x926fb8=await loadJwksKeys(_0x4f405e[_0x5af937(0x120)][_0x5af937(0x11f)](),_0x468f0c,_0x5e99a0),_0x46a1ba=pickRs256Key(_0x926fb8,_0x445e78['kid']);!_0x46a1ba&&_0x445e78[_0x5af937(0x109)]&&(jwksCache[_0x5af937(0x102)](_0x4f405e['jwksUrl'][_0x5af937(0x11f)]()),_0x926fb8=await loadJwksKeys(_0x4f405e['jwksUrl'][_0x5af937(0x11f)](),_0x468f0c,_0x5e99a0),_0x46a1ba=pickRs256Key(_0x926fb8,_0x445e78[_0x5af937(0x109)]));if(!_0x46a1ba)throw new errors_1[(_0x5af937(0x10b))](_0x5af937(0x129),{'code':_0x5af937(0x138),'status':0x191});_0x479c41=jwkToPem(_0x46a1ba);}try{return jsonwebtoken_1['default']['verify'](_0x357352['trim'](),_0x479c41,{'algorithms':[_0x5af937(0x108)]});}catch(_0x1c146a){if(_0x1c146a?.[_0x5af937(0x12a)]===_0x5af937(0x122))throw new errors_1[(_0x5af937(0x10b))](_0x5af937(0x11e),{'code':_0x5af937(0xfa),'status':0x191});throw new errors_1[(_0x5af937(0x10b))](_0x5af937(0xfd),{'code':_0x5af937(0x12c),'status':0x191});}}function parseIdentityScopeClaim(_0x8a7039){const _0x26d372=_0x415ea5;let _0x31d992;if(typeof _0x8a7039===_0x26d372(0x11d)){const _0x435dd=_0x8a7039[_0x26d372(0x11b)]('.');if(_0x435dd[_0x26d372(0x116)]<0x2)return[];try{_0x31d992=JSON[_0x26d372(0x132)](Buffer[_0x26d372(0x12b)](_0x435dd[0x1],_0x26d372(0x128))[_0x26d372(0x111)](_0x26d372(0x130)));}catch{return[];}}else _0x31d992=_0x8a7039;const _0x3e02b1=_0x31d992['scope'];if(Array[_0x26d372(0x133)](_0x3e02b1))return[...new Set(_0x3e02b1[_0x26d372(0xff)](String)[_0x26d372(0xff)](_0xc10388=>_0xc10388[_0x26d372(0x11f)]())[_0x26d372(0x13a)](Boolean))];if(typeof _0x3e02b1===_0x26d372(0x11d))return[...new Set(_0x3e02b1[_0x26d372(0x11b)](/[\s,]+/)['map'](_0x27b1ac=>_0x27b1ac['trim']())[_0x26d372(0x13a)](Boolean))];return[];}function tokenHasScopes(_0x22e803,required){const _0x3c75d0=_0x415ea5,_0x3a550a=new Set(parseIdentityScopeClaim(_0x22e803));for(const _0x8dfde6 of required||[]){const _0x31c6c8=String(_0x8dfde6||'')[_0x3c75d0(0x11f)]();if(!_0x31c6c8)continue;if(!_0x3a550a[_0x3c75d0(0x119)](_0x31c6c8))return![];}return!![];}
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearIdentityJwksCache = clearIdentityJwksCache;
+exports.verifyIdentityTokenOffline = verifyIdentityTokenOffline;
+exports.parseIdentityScopeClaim = parseIdentityScopeClaim;
+exports.tokenHasScopes = tokenHasScopes;
+const crypto_1 = __importDefault(require("crypto"));
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const errors_1 = require("./errors");
+const jwksCache = new Map();
+function decodeJwtHeader(token) {
+    const parts = token.split(".");
+    if (parts.length < 2) {
+        throw new errors_1.CliodotApiError("Invalid JWT", { code: "IDENTITY_TOKEN_INVALID" });
+    }
+    try {
+        return JSON.parse(Buffer.from(parts[0], "base64url").toString("utf8"));
+    }
+    catch {
+        throw new errors_1.CliodotApiError("Invalid JWT header", {
+            code: "IDENTITY_TOKEN_INVALID",
+        });
+    }
+}
+function jwkToPem(jwk) {
+    return crypto_1.default
+        .createPublicKey({ key: jwk, format: "jwk" })
+        .export({ type: "spki", format: "pem" })
+        .toString();
+}
+async function loadJwksKeys(jwksUrl, cacheTtlMs, fetchImpl) {
+    const cached = jwksCache.get(jwksUrl);
+    if (cached && cached.expiresAt > Date.now()) {
+        return cached.keys;
+    }
+    const res = await fetchImpl(jwksUrl);
+    if (!res.ok) {
+        throw new errors_1.CliodotApiError(`JWKS fetch failed (${res.status})`, {
+            status: res.status,
+            code: "IDENTITY_JWT_KEYS_NOT_FOUND",
+        });
+    }
+    const body = (await res.json());
+    const keys = body.keys || [];
+    jwksCache.set(jwksUrl, {
+        keys,
+        expiresAt: Date.now() + cacheTtlMs,
+    });
+    return keys;
+}
+function pickRs256Key(keys, kid) {
+    if (kid) {
+        const match = keys.find((k) => k.kid === kid);
+        if (match)
+            return match;
+    }
+    return keys[0];
+}
+function clearIdentityJwksCache() {
+    jwksCache.clear();
+}
+async function verifyIdentityTokenOffline(token, options) {
+    if (!token?.trim()) {
+        throw new errors_1.CliodotApiError("token is required", {
+            code: "IDENTITY_TOKEN_INVALID",
+        });
+    }
+    const header = decodeJwtHeader(token.trim());
+    if (options.algorithm === "HS256") {
+        if (!options.secret?.trim()) {
+            throw new errors_1.CliodotApiError("HS256 verify requires secret");
+        }
+        try {
+            return jsonwebtoken_1.default.verify(token.trim(), options.secret, {
+                algorithms: ["HS256"],
+            });
+        }
+        catch (err) {
+            if (err?.name === "TokenExpiredError") {
+                throw new errors_1.CliodotApiError("Access token expired", {
+                    code: "IDENTITY_TOKEN_EXPIRED",
+                    status: 401,
+                });
+            }
+            throw new errors_1.CliodotApiError("Invalid access token", {
+                code: "IDENTITY_TOKEN_INVALID",
+                status: 401,
+            });
+        }
+    }
+    const fetchImpl = options.fetch || fetch;
+    let publicKeyPem = options.publicKeyPem?.trim();
+    if (!publicKeyPem) {
+        if (!options.jwksUrl?.trim()) {
+            throw new errors_1.CliodotApiError("RS256 verify requires jwksUrl or publicKeyPem");
+        }
+        const cacheTtlMs = options.cacheTtlMs ?? 300000;
+        let keys = await loadJwksKeys(options.jwksUrl.trim(), cacheTtlMs, fetchImpl);
+        let jwk = pickRs256Key(keys, header.kid);
+        if (!jwk && header.kid) {
+            jwksCache.delete(options.jwksUrl.trim());
+            keys = await loadJwksKeys(options.jwksUrl.trim(), cacheTtlMs, fetchImpl);
+            jwk = pickRs256Key(keys, header.kid);
+        }
+        if (!jwk) {
+            throw new errors_1.CliodotApiError("No matching JWKS key", {
+                code: "IDENTITY_JWT_KEYS_NOT_FOUND",
+                status: 401,
+            });
+        }
+        publicKeyPem = jwkToPem(jwk);
+    }
+    try {
+        return jsonwebtoken_1.default.verify(token.trim(), publicKeyPem, {
+            algorithms: ["RS256"],
+        });
+    }
+    catch (err) {
+        if (err?.name === "TokenExpiredError") {
+            throw new errors_1.CliodotApiError("Access token expired", {
+                code: "IDENTITY_TOKEN_EXPIRED",
+                status: 401,
+            });
+        }
+        throw new errors_1.CliodotApiError("Invalid access token", {
+            code: "IDENTITY_TOKEN_INVALID",
+            status: 401,
+        });
+    }
+}
+function parseIdentityScopeClaim(tokenOrClaims) {
+    let claims;
+    if (typeof tokenOrClaims === "string") {
+        const parts = tokenOrClaims.split(".");
+        if (parts.length < 2)
+            return [];
+        try {
+            claims = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+        }
+        catch {
+            return [];
+        }
+    }
+    else {
+        claims = tokenOrClaims;
+    }
+    const raw = claims.scope;
+    if (Array.isArray(raw)) {
+        return [...new Set(raw.map(String).map((s) => s.trim()).filter(Boolean))];
+    }
+    if (typeof raw === "string") {
+        return [
+            ...new Set(raw
+                .split(/[\s,]+/)
+                .map((s) => s.trim())
+                .filter(Boolean)),
+        ];
+    }
+    return [];
+}
+function tokenHasScopes(tokenOrClaims, required) {
+    const have = new Set(parseIdentityScopeClaim(tokenOrClaims));
+    for (const name of required || []) {
+        const n = String(name || "").trim();
+        if (!n)
+            continue;
+        if (!have.has(n))
+            return false;
+    }
+    return true;
+}

package/dist/identity-token-cache.js

@@ -1 +1,51 @@
-'use strict';const _0x6e3e36=_0x11e5;function _0x32ee(){const _0x471349=['DgfYz2v0qxbWswqGAxmGCMvXDwLYzwq','ndC0tLz6qNn2','y3jLyxrLswrLBNrPDhLuB2TLBKnHy2HL','mtbbwKrIExG','BM93','mta1mdK2wwjRA3HZ','mJK0mdC5BMTNCg51','yxv0AgvUDgLJyxrL','mZa4q1z0vK9A','ywnJzxnZx3rVA2vU','Bwf4','mZmYmdaYogf4DxHIqq','y2XPzw50','mMvovu1wyq','zxHWAxjLC19HDa','C2TLD1nLy29Uzhm','x19LC01VzhvSzq','ndC3mtvsCu1twuK','CMvMCMvZAa','ntG0mJm1yNvrtuTv','zgvMAw5LuhjVCgvYDhK','mJy5odKWmJH3ChjtDu8','q2XPB2rVDefWAuvYCM9Y','DhjPBq','mtC0nJa3mMLVDvzQyq'];_0x32ee=function(){return _0x471349;};return _0x32ee();}function _0x11e5(_0x34b1ca,_0x17a4f5){_0x34b1ca=_0x34b1ca-0x1b6;const _0x32eecb=_0x32ee();let _0x11e5cc=_0x32eecb[_0x34b1ca];if(_0x11e5['bUJUpb']===undefined){var _0x501eb9=function(_0x2d2098){const _0x3f382b='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x23f4e3='',_0x56c3dc='';for(let _0x3d750e=0x0,_0x5250ac,_0x13e339,_0x33cb99=0x0;_0x13e339=_0x2d2098['charAt'](_0x33cb99++);~_0x13e339&&(_0x5250ac=_0x3d750e%0x4?_0x5250ac*0x40+_0x13e339:_0x13e339,_0x3d750e++%0x4)?_0x23f4e3+=String['fromCharCode'](0xff&_0x5250ac>>(-0x2*_0x3d750e&0x6)):0x0){_0x13e339=_0x3f382b['indexOf'](_0x13e339);}for(let _0x24b62d=0x0,_0x2d2dc7=_0x23f4e3['length'];_0x24b62d<_0x2d2dc7;_0x24b62d++){_0x56c3dc+='%'+('00'+_0x23f4e3['charCodeAt'](_0x24b62d)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x56c3dc);};_0x11e5['tDZKTq']=_0x501eb9,_0x11e5['FERpzH']={},_0x11e5['bUJUpb']=!![];}const _0xd46bfd=_0x32eecb[0x0],_0x352792=_0x34b1ca+_0xd46bfd,_0x1f2313=_0x11e5['FERpzH'][_0x352792];return!_0x1f2313?(_0x11e5cc=_0x11e5['tDZKTq'](_0x11e5cc),_0x11e5['FERpzH'][_0x352792]=_0x11e5cc):_0x11e5cc=_0x1f2313,_0x11e5cc;}(function(_0x1bf473,_0x43cdf5){const _0x4b4588=_0x11e5,_0x524849=_0x1bf473();while(!![]){try{const _0x356914=-parseInt(_0x4b4588(0x1cd))/0x1+-parseInt(_0x4b4588(0x1bb))/0x2*(parseInt(_0x4b4588(0x1c6))/0x3)+-parseInt(_0x4b4588(0x1b9))/0x4+-parseInt(_0x4b4588(0x1bf))/0x5*(-parseInt(_0x4b4588(0x1c8))/0x6)+-parseInt(_0x4b4588(0x1b6))/0x7*(parseInt(_0x4b4588(0x1cc))/0x8)+parseInt(_0x4b4588(0x1c1))/0x9*(-parseInt(_0x4b4588(0x1ca))/0xa)+parseInt(_0x4b4588(0x1c3))/0xb;if(_0x356914===_0x43cdf5)break;else _0x524849['push'](_0x524849['shift']());}catch(_0x983cb8){_0x524849['push'](_0x524849['shift']());}}}(_0x32ee,0xd1918));Object[_0x6e3e36(0x1c2)](exports,_0x6e3e36(0x1be),{'value':!![]}),exports[_0x6e3e36(0x1c9)]=createIdentityTokenCache;const errors_1=require('./errors');function createIdentityTokenCache(_0x23f4e3){const _0x38b9e6=_0x6e3e36,_0x56c3dc=new Map(),_0x3d750e=_0x23f4e3[_0x38b9e6(0x1bd)]??0x3c;async function getAccessToken(targetAppId){const _0x1939aa=_0x38b9e6;if(!targetAppId?.[_0x1939aa(0x1c5)]())throw new errors_1[(_0x1939aa(0x1c4))](_0x1939aa(0x1c7));const _0x13e339=targetAppId[_0x1939aa(0x1c5)](),_0x33cb99=_0x56c3dc['get'](_0x13e339),_0x24b62d=Date[_0x1939aa(0x1cb)]();if(_0x33cb99&&_0x33cb99[_0x1939aa(0x1bc)]-_0x3d750e*0x3e8>_0x24b62d)return _0x33cb99[_0x1939aa(0x1b7)];let _0x2d2dc7;if(_0x33cb99?.['refresh_token'])try{_0x2d2dc7=await _0x23f4e3[_0x1939aa(0x1ba)][_0x1939aa(0x1c0)]({'refresh_token':_0x33cb99['refresh_token']});}catch{_0x2d2dc7=await _0x23f4e3['client'][_0x1939aa(0x1ce)]({'target_app_id':_0x13e339});}else _0x2d2dc7=await _0x23f4e3[_0x1939aa(0x1ba)][_0x1939aa(0x1ce)]({'target_app_id':_0x13e339});return _0x56c3dc['set'](_0x13e339,{'access_token':_0x2d2dc7['access_token'],'refresh_token':_0x2d2dc7['refresh_token'],'expires_at':Date[_0x1939aa(0x1cb)]()+Math[_0x1939aa(0x1b8)](0x1,_0x2d2dc7['expires_in'])*0x3e8}),_0x2d2dc7[_0x1939aa(0x1b7)];}function _0x5250ac(targetAppId){const _0x283050=_0x38b9e6;if(targetAppId?.[_0x283050(0x1c5)]()){_0x56c3dc['delete'](targetAppId[_0x283050(0x1c5)]());return;}_0x56c3dc['clear']();}return{'getAccessToken':getAccessToken,'clear':_0x5250ac};}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createIdentityTokenCache = createIdentityTokenCache;
+const errors_1 = require("./errors");
+function createIdentityTokenCache(options) {
+    const store = new Map();
+    const skewSeconds = options.skewSeconds ?? 60;
+    async function getAccessToken(targetAppId) {
+        if (!targetAppId?.trim()) {
+            throw new errors_1.CliodotApiError("targetAppId is required");
+        }
+        const key = targetAppId.trim();
+        const cached = store.get(key);
+        const now = Date.now();
+        if (cached && cached.expires_at - skewSeconds * 1000 > now) {
+            return cached.access_token;
+        }
+        let tokens;
+        if (cached?.refresh_token) {
+            try {
+                tokens = await options.client.refresh({
+                    refresh_token: cached.refresh_token,
+                });
+            }
+            catch {
+                tokens = await options.client.authenticate({
+                    target_app_id: key,
+                });
+            }
+        }
+        else {
+            tokens = await options.client.authenticate({
+                target_app_id: key,
+            });
+        }
+        store.set(key, {
+            access_token: tokens.access_token,
+            refresh_token: tokens.refresh_token,
+            expires_at: Date.now() + Math.max(1, tokens.expires_in) * 1000,
+        });
+        return tokens.access_token;
+    }
+    function clear(targetAppId) {
+        if (targetAppId?.trim()) {
+            store.delete(targetAppId.trim());
+            return;
+        }
+        store.clear();
+    }
+    return { getAccessToken, clear };
+}

package/dist/index.d.ts

@@ -28,7 +28,7 @@ export type { AuthAppClientConfig, AuthAppClientApi, AuthMfaApi, AuthUsersApi, A
 export type { EventsConfig, EventsApi, EventPublishOptions, EventPublishResponse, EventSubscribeInput, EventSubscribeResponse, EventUnsubscribeResponse, EventListenOptions, EventListenHandle, EventListenHandler, EventListenMessage, EventListenConnected, EventEnvelope, } from "./types/event-app.api";
 export type { MemoryAppClientConfig, MemoryAppClientApi, MemoryClientConfig, MemoryClientApi, MemoryStoreInput, MemoryStoreResponse, MemoryStoreManyInput, MemoryStoreManyResponse, MemoryAddressInput, MemoryUpdateInput, MemoryDeleteInput, MemoryFindInput, MemoryFindResponse, MemorySearchInput, MemorySearchResponse, MemoryCrossSearchInput, MemorySearchHit, MemoryObject, MemorySearchMode, MemoryDeleteMode, } from "./types/memory-app.api";
 export type { IdentityAppClientConfig, IdentityAppClientApi, IdentityAuthenticateInput, IdentityAuthenticateResponse, IdentityMeResponse, IdentityVerifyInput, IdentityVerifyResponse, IdentityRefreshInput, IdentityRevokeInput, IdentityRevokeResponse, IdentityJwks, IdentityOfflineVerifyOptions, IdentityOfflineVerifyHs256, IdentityOfflineVerifyRs256, IdentityTokenCacheOptions, IdentityProviderHandle, } from "./types/identity-app.api";
-export type { CommercialAppClientConfig, CommercialAppClientApi, CommercialPaginationMeta, CommercialListParams, CommercialCustomer, CommercialFeature, CommercialPlan, CommercialPlanInterval, CommercialPlanEntitlement, CommercialPrice, CommercialSubscription, CommercialCheckInput, CommercialCheckResult, CommercialConsumeInput, CommercialConsumeResult, CommercialStateInput, CommercialStateResult, CommercialListCustomersResponse, CommercialListFeaturesResponse, CommercialListPlansResponse, CommercialListSubscriptionsParams, CommercialListSubscriptionsResponse, CommercialCreateSubscriptionInput, CommercialChangePlanInput, CommercialUpdateSubscriptionStatusInput, CommercialPricingQuoteInput, CommercialPricingQuote, CommercialInitiatePaymentInput, CommercialConfirmPaymentInput, CommercialSeatAssignInput, CommercialLicenseIssueInput, CommercialLicenseValidateInput, CommercialAnalyticsParams, } from "./types/commercial-app.api";
+export type { CommercialAppClientConfig, CommercialAppClientApi, CommercialPaginationMeta, CommercialListParams, CommercialCustomer, CommercialFeature, CommercialPlan, CommercialPlanInterval, CommercialPlanEntitlement, CommercialPrice, CommercialSubscription, CommercialCheckInput, CommercialCheckResult, CommercialConsumeInput, CommercialConsumeResult, CommercialConsumeBreakdown, CommercialStateInput, CommercialStateResult, CommercialListCustomersResponse, CommercialListFeaturesResponse, CommercialListPlansResponse, CommercialListSubscriptionsParams, CommercialListSubscriptionsResponse, CommercialCreateSubscriptionInput, CommercialChangePlanInput, CommercialUpdatePendingSubscriptionInput, CommercialUpdateSubscriptionStatusInput, CommercialPricingQuoteInput, CommercialPricingQuote, CommercialInvoice, CommercialInvoiceLineItem, CommercialInitiatePaymentInput, CommercialInitiatePaymentResult, CommercialConfirmPaymentInput, CommercialConfirmPaymentResult, CommercialChargeUsageInput, CommercialChargeUsageResult, CommercialRenewSubscriptionInput, CommercialRenewSubscriptionResult, CommercialCreditBalance, CommercialCreditLedgerEvent, CommercialListCreditsParams, CommercialListCreditsResponse, CommercialCustomerCard, CommercialAddCardInput, CommercialListCardsParams, CommercialListCardsResponse, CommercialLifecycleEvent, CommercialUsageEvent, CommercialListEventsParams, CommercialListEventsResponse, CommercialListUsageEventsResponse, CommercialEntitlementTopupInput, CommercialCreditsTopupInput, CommercialDiscount, CommercialTaxRate, CommercialAddon, CommercialSeatAssignInput, CommercialSeatAssignment, CommercialLicenseIssueInput, CommercialLicenseValidateInput, CommercialLicense, CommercialAnalyticsParams, } from "./types/commercial-app.api";
 export { stepsToNodes } from "./transformers/StepsToNodesTransformer";
 export { WorkflowBuilder, StepBuilder, StepResult } from "./WorkflowBuilder";
 export { ConnectorBuilder, connector } from "./ConnectorBuilder";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,SAAS,EACT,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,cAAc,EACd,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AACxH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EACV,aAAa,EACb,cAAc,EACd,SAAS,EACT,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,YAAY,EACV,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,gCAAgC,EAChC,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,qCAAqC,EACrC,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,GACV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,+BAA+B,EAC/B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,4BAA4B,EAC5B,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,+BAA+B,EAC/B,8BAA8B,EAC9B,2BAA2B,EAC3B,iCAAiC,EACjC,mCAAmC,EACnC,iCAAiC,EACjC,yBAAyB,EACzB,uCAAuC,EACvC,2BAA2B,EAC3B,sBAAsB,EACtB,8BAA8B,EAC9B,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACjE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACjF,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,SAAS,EACT,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,cAAc,EACd,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AACxH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EACV,aAAa,EACb,cAAc,EACd,SAAS,EACT,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,YAAY,EACV,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,gCAAgC,EAChC,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,qCAAqC,EACrC,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,GACV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,+BAA+B,EAC/B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,4BAA4B,EAC5B,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,+BAA+B,EAC/B,8BAA8B,EAC9B,2BAA2B,EAC3B,iCAAiC,EACjC,mCAAmC,EACnC,iCAAiC,EACjC,yBAAyB,EACzB,wCAAwC,EACxC,uCAAuC,EACvC,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACjE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACjF,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC"}