sentinelayer-cli 0.43.0 → 0.45.0

package/src/session/sync.js

@@ -4,6 +4,7 @@ import path from "node:path";
 import process from "node:process";
 import { randomUUID } from "node:crypto";
 
+import { credentialedRequest, credentialFor, isAuthenticated } from "../auth/credential-destinations.js";
 import { resolveActiveAuthSession } from "../auth/service.js";
 import { createAgentEvent } from "../events/schema.js";
 import { isSessionControlEvent } from "./control-events.js";
@@ -19,6 +20,8 @@ const DEFAULT_API_BASE_URL = "https://api.sentinelayer.com";
 const DEFAULT_SYNC_TIMEOUT_MS = 5_000;
 const MAX_CONSECUTIVE_FAILURES = 3;
 const CIRCUIT_RESET_MS = 60_000;
+// Message-action statuses whose body the caller needs to explain the refusal.
+const MESSAGE_ACTION_REFUSAL_STATUSES = Object.freeze([409, 422]);
 const SESSION_INGEST_LIMIT_PER_MINUTE = 500;
 const HUMAN_MESSAGE_LIMIT_PER_MINUTE = 10;
 const HUMAN_MESSAGE_MAX_LENGTH = 2_000;
@@ -374,6 +377,24 @@ function recordCircuitFailure(circuit, nowMs) {
   persistCircuitState();
 }
 
+// 401 and 403 refuse one credential (an expired, revoked or narrower agent admission, or
+// an identity the account has not granted). They say nothing about API health, so they
+// never count toward either machine-wide breaker (inbound or outbound): one agent's
+// refusals must not pause another agent's traffic. Network errors, timeouts and 5xx do.
+function isCredentialRefusal(response) {
+  return Boolean(response) && (response.status === 401 || response.status === 403);
+}
+
+function recordOutboundFailure(response, nowMs) {
+  if (isCredentialRefusal(response)) return;
+  recordCircuitFailure(outboundCircuit, nowMs);
+}
+
+function recordInboundFailure(response, nowMs) {
+  if (isCredentialRefusal(response)) return;
+  recordCircuitFailure(inboundCircuit, nowMs);
+}
+
 function recordCircuitSuccess(circuit) {
   if (!circuit) {
     return;
@@ -657,13 +678,21 @@ export async function fetchJsonWithFullTimeout(
   const controller = new AbortController();
   const startedAtMs = Date.now();
   let response = null;
+  // A credential (src/auth/credential-destinations.js) is sent only to its own origin, by
+  // credentialedRequest; fetchImpl is the transport that it calls.
+  const { credential = null, ...init } = options || {};
   const requestOptions = {
-    ...options,
+    ...init,
     signal: combineAbortSignals([options?.signal, controller.signal]),
   };
+  const sent = credential
+    ? credentialedRequest(credential, url, requestOptions, {
+        fetchImpl: (target, request) => fetchImpl(target, request, resolvedTimeoutMs),
+      })
+    : fetchImpl(url, requestOptions, resolvedTimeoutMs);
 
   response = await withTimeout(
-    fetchImpl(url, requestOptions, resolvedTimeoutMs),
+    sent,
     resolvedTimeoutMs,
     {
       reason: "request_timeout",
@@ -989,7 +1018,7 @@ export async function syncSessionEventToApi(
     return { synced: false, reason: "no_session" };
   }
 
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { synced: false, reason: "not_authenticated" };
   }
 
@@ -1003,8 +1032,8 @@ export async function syncSessionEventToApi(
     method: "POST",
     headers: {
       "Content-Type": "application/json",
-      Authorization: `Bearer ${session.token}`,
     },
+    credential: await credentialFor(session),
     body: requestBody,
   };
   const resolvedTimeoutMs = normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS);
@@ -1033,18 +1062,23 @@ export async function syncSessionEventToApi(
     if (response && response.status === 403) {
       const body = forbiddenBody;
       if (isIdentityForgeryBody(body)) {
+        if (session.source === "session_admission") {
+          // An admitted agent acts only on its admission: account-level agent grants
+          // are neither created nor used for it.
+          return { synced: false, reason: "api_403" };
+        }
         const agentId = normalizeString(event?.agent?.id);
         if (!agentId || isReservedAgentIdForGrant(agentId)) {
           // Reserved or empty — server enforcement is intentional, no grant
           // attempt is meaningful. Treat as a normal 403 failure.
-          recordCircuitFailure(outboundCircuit, normalizedNowMs);
+          recordOutboundFailure(response, normalizedNowMs);
           return { synced: false, reason: "api_403" };
         }
         if (autoGrantAttemptedAgentIds.has(agentId)) {
           // We already tried to grant this identity in a prior event in this
           // process and either it succeeded but the server still says no, or
           // the grant failed. Either way, don't loop — surface the 403.
-          recordCircuitFailure(outboundCircuit, normalizedNowMs);
+          recordOutboundFailure(response, normalizedNowMs);
           return { synced: false, reason: "api_403" };
         }
         rememberAutoGrantAttempt(agentId);
@@ -1059,8 +1093,8 @@ export async function syncSessionEventToApi(
               method: "POST",
               headers: {
                 "Content-Type": "application/json",
-                Authorization: `Bearer ${session.token}`,
               },
+              credential: await credentialFor(session),
               body: JSON.stringify({
                 agent_id: agentId,
                 role: grantRole,
@@ -1081,7 +1115,7 @@ export async function syncSessionEventToApi(
         // Treat 409 (already granted) as success — idempotent on the server.
         const grantIdempotent = grantStatus === 409;
         if (!grantOk && !grantIdempotent) {
-          recordCircuitFailure(outboundCircuit, normalizedNowMs);
+          recordOutboundFailure(grantResponse, normalizedNowMs);
           return {
             synced: false,
             reason: `grant_failed_${grantStatus || "no_response"}`,
@@ -1109,7 +1143,7 @@ export async function syncSessionEventToApi(
             autoGranted: true,
           };
         }
-        recordCircuitFailure(outboundCircuit, normalizedNowMs);
+        recordOutboundFailure(retryResponse, normalizedNowMs);
         return {
           synced: false,
           reason: `api_${retryResponse ? retryResponse.status : "no_response"}`,
@@ -1117,7 +1151,7 @@ export async function syncSessionEventToApi(
       }
     }
 
-    recordCircuitFailure(outboundCircuit, normalizedNowMs);
+    recordOutboundFailure(response, normalizedNowMs);
     return {
       synced: false,
       reason: `api_${response ? response.status : "no_response"}`,
@@ -1182,7 +1216,7 @@ async function syncSessionAuxPayload(
   } catch {
     return { synced: false, reason: "no_session" };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { synced: false, reason: "not_authenticated" };
   }
 
@@ -1195,8 +1229,8 @@ async function syncSessionAuxPayload(
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          Authorization: `Bearer ${session.token}`,
         },
+        credential: await credentialFor(session),
         body: JSON.stringify({
           ...payload,
           source: "cli",
@@ -1207,7 +1241,7 @@ async function syncSessionAuxPayload(
       { readSuccessBody: false },
     );
     if (!response || !response.ok) {
-      recordCircuitFailure(outboundCircuit, normalizedNowMs);
+      recordOutboundFailure(response, normalizedNowMs);
       return {
         synced: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -1301,7 +1335,7 @@ export async function pollHumanMessages(
       cursor: normalizeString(since) || null,
     };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -1325,14 +1359,14 @@ export async function pollHumanMessages(
       {
         method: "GET",
         headers: {
-          Authorization: `Bearer ${session.token}`,
         },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
     );
     if (!response || !response.ok) {
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -1468,7 +1502,7 @@ export async function pollSessionEvents(
       cursor: normalizeString(since) || null,
     };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -1499,7 +1533,7 @@ export async function pollSessionEvents(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
@@ -1517,7 +1551,7 @@ export async function pollSessionEvents(
           cursor: normalizedSince || null,
         };
       }
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -1636,7 +1670,7 @@ export async function fetchSessionPresence(
       present: [],
     };
   }
-  if (!session?.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -1653,7 +1687,7 @@ export async function fetchSessionPresence(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
@@ -1679,7 +1713,7 @@ export async function fetchSessionPresence(
           present: [],
         };
       }
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -1788,7 +1822,7 @@ export async function renewSessionPresence(
       recorded: false,
     };
   }
-  if (!session?.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -1817,8 +1851,8 @@ export async function renewSessionPresence(
         method: "PUT",
         headers: {
           "Content-Type": "application/json",
-          Authorization: `Bearer ${session.token}`,
         },
+        credential: await credentialFor(session),
         body: JSON.stringify(body),
         signal,
       },
@@ -1843,7 +1877,7 @@ export async function renewSessionPresence(
           retryAfterMs: retryAfterMsFromResponse(response, payload, normalizedNowMs),
         };
       }
-      recordCircuitFailure(outboundCircuit, normalizedNowMs);
+      recordOutboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -1913,7 +1947,7 @@ export async function requestSessionListenerStop(
   } catch {
     return { ok: false, reason: "no_session", recorded: false };
   }
-  if (!session?.token) {
+  if (!isAuthenticated(session)) {
     return { ok: false, reason: "not_authenticated", recorded: false };
   }
 
@@ -1933,9 +1967,9 @@ export async function requestSessionListenerStop(
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          Authorization: `Bearer ${session.token}`,
           "Idempotency-Key": normalizedIdempotencyKey,
         },
+        credential: await credentialFor(session),
         body: JSON.stringify(body),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
@@ -1958,7 +1992,7 @@ export async function requestSessionListenerStop(
           retryAfterMs: retryAfterMsFromResponse(response, payload, normalizedNowMs),
         };
       }
-      recordCircuitFailure(outboundCircuit, normalizedNowMs);
+      recordOutboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -2041,7 +2075,7 @@ export async function updateSessionReadCursor(
   } catch {
     return { ok: false, reason: "no_session", updated: false };
   }
-  if (!session?.token) {
+  if (!isAuthenticated(session)) {
     return { ok: false, reason: "not_authenticated", updated: false };
   }
 
@@ -2062,8 +2096,8 @@ export async function updateSessionReadCursor(
         method: "PUT",
         headers: {
           "Content-Type": "application/json",
-          Authorization: `Bearer ${session.token}`,
         },
+        credential: await credentialFor(session),
         body: JSON.stringify(body),
         signal,
       },
@@ -2083,7 +2117,7 @@ export async function updateSessionReadCursor(
           updated: false,
         };
       }
-      recordCircuitFailure(outboundCircuit, normalizedNowMs);
+      recordOutboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -2175,7 +2209,7 @@ export async function streamSessionEvents(
       errorCount: 0,
     };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -2225,18 +2259,18 @@ export async function streamSessionEvents(
 
   let response;
   try {
-    response = await fetchImpl(
+    response = await credentialedRequest(
+      await credentialFor(session),
       endpoint,
       {
         method: "GET",
         headers: {
           Accept: "text/event-stream",
-          Authorization: `Bearer ${session.token}`,
           ...(normalizedSince ? { "Last-Event-ID": normalizedSince } : {}),
         },
         signal: controller.signal,
       },
-      normalizedTimeoutMs
+      { fetchImpl: (target, init) => fetchImpl(target, init, normalizedTimeoutMs) },
     );
   } catch (error) {
     clearTimeout(timeoutHandle);
@@ -2396,7 +2430,7 @@ export async function pollSessionEventsBefore(
       beforeSequence: null,
     };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -2423,7 +2457,7 @@ export async function pollSessionEventsBefore(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
@@ -2441,7 +2475,7 @@ export async function pollSessionEventsBefore(
           beforeSequence: Number.isFinite(normalizedBeforeSequence) ? normalizedBeforeSequence : null,
         };
       }
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -2519,7 +2553,7 @@ export async function listSessionMessageActions(
   } catch {
     return { ok: false, reason: "no_session", actions: [], count: 0, projection: null };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { ok: false, reason: "not_authenticated", actions: [], count: 0, projection: null };
   }
 
@@ -2544,13 +2578,13 @@ export async function listSessionMessageActions(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
     );
     if (!response || !response.ok) {
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -2624,7 +2658,7 @@ export async function fetchSessionUsageLedger(
   } catch {
     return { ok: false, reason: "no_session", status: 0, payload: null };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { ok: false, reason: "not_authenticated", status: 0, payload: null };
   }
 
@@ -2641,13 +2675,13 @@ export async function fetchSessionUsageLedger(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
     );
     if (!response || !response.ok) {
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -2823,9 +2857,9 @@ export async function editSessionMessage(sessionId, {
   let auth;
   try { auth = await resolveAuthSession({ cwd: targetPath, env: process.env, autoRotate: false }); }
   catch { return { ok: false, reason: "no_session" }; }
-  if (!auth?.token) return { ok: false, reason: "not_authenticated" };
+  if (!isAuthenticated(auth)) return { ok: false, reason: "not_authenticated" };
   const base = `${resolveApiBaseUrl(auth)}/api/v1/sessions/${encodeURIComponent(sid)}`;
-  const headers = { Authorization: `Bearer ${auth.token}` };
+  const credential = await credentialFor(auth);
   const failure = (response, payload) => {
     const code = normalizeString(payload?.detail?.code || payload?.error?.code || payload?.code);
     // Client/schema/ownership conflicts are terminal and must not poison unrelated writes.
@@ -2838,7 +2872,7 @@ export async function editSessionMessage(sessionId, {
       const resource = replyId ? `replies/${encodeURIComponent(replyId)}` : messageId
         ? `messages/${encodeURIComponent(messageId)}` : `messages/by-sequence/${sequence}`;
       const authorQuery = normalizeString(agentId) ? `?agentId=${encodeURIComponent(normalizeString(agentId))}` : "";
-      const { response, payload } = await fetchJsonWithFullTimeout(`${base}/${resource}${authorQuery}`, { method: "GET", headers, signal }, timeoutMs, fetchImpl, { readErrorBody: true });
+      const { response, payload } = await fetchJsonWithFullTimeout(`${base}/${resource}${authorQuery}`, { method: "GET", credential, signal }, timeoutMs, fetchImpl, { readErrorBody: true });
       if (!response?.ok || payload?.ok === false) return failure(response, payload);
       const current = replyId ? payload?.reply : payload?.event;
       const fetchedRevision = Number(current?.messageRevision ?? 1);
@@ -2852,11 +2886,12 @@ export async function editSessionMessage(sessionId, {
     const { response, payload } = await fetchJsonWithFullTimeout(`${base}/${resource}`, {
       method: "PATCH",
       headers: {
-        ...createSessionMutationHeaders({ bearerToken: auth.token, sessionId: sid, routeId: replyId
+        ...createSessionMutationHeaders({ credential, sessionId: sid, routeId: replyId
           ? "PATCH /api/v1/sessions/{session_id}/replies/{action_id}"
           : "PATCH /api/v1/sessions/{session_id}/messages/{message_id}", idempotencyKey: mutationKey }),
         "Content-Type": "application/json", "Idempotency-Key": mutationKey,
       },
+      credential,
       body: JSON.stringify(body),
       signal,
     }, timeoutMs, fetchImpl, { readErrorBody: true });
@@ -2945,7 +2980,7 @@ export async function createSessionMessageAction(
   } catch {
     return { ok: false, reason: "no_session", action: null };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { ok: false, reason: "not_authenticated", action: null };
   }
 
@@ -2983,19 +3018,27 @@ export async function createSessionMessageAction(
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          Authorization: `Bearer ${session.token}`,
         },
+        credential: await credentialFor(session),
         body: JSON.stringify(body),
         signal,
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
+      { errorBodyStatuses: MESSAGE_ACTION_REFUSAL_STATUSES },
     );
     if (!response || !response.ok) {
-      recordCircuitFailure(outboundCircuit, normalizedNowMs);
+      const status = response ? response.status : null;
+      const refused = MESSAGE_ACTION_REFUSAL_STATUSES.includes(status);
+      // A refusal (409 nothing-to-undo, 422 a server that predates the action) is an
+      // answer about this request, not API health: it must not open the persisted
+      // breaker that guards every other outbound write.
+      if (!refused) recordOutboundFailure(response, normalizedNowMs);
       return {
         ok: false,
-        reason: `api_${response ? response.status : "no_response"}`,
+        reason: `api_${status ?? "no_response"}`,
+        status,
+        error: refused && payload && typeof payload === "object" ? payload : null,
         action: null,
       };
     }
@@ -3004,6 +3047,9 @@ export async function createSessionMessageAction(
       ok: Boolean(payload?.ok ?? true),
       reason: "",
       duplicate: Boolean(payload?.duplicate),
+      // A repeat reaction is a no-op whose key the server retains as a collapsed row
+      // (sentinelayer-api#914): the id of that evidence row.
+      collapsedActionId: normalizeString(payload?.collapsedActionId) || null,
       action: payload?.action && typeof payload.action === "object" ? payload.action : null,
     };
   } catch (error) {
@@ -3074,7 +3120,7 @@ export async function searchSessionEvents(
       nextBeforeSequence: null,
     };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -3104,13 +3150,13 @@ export async function searchSessionEvents(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
     );
     if (!response || !response.ok) {
-      recordCircuitFailure(inboundCircuit, normalizedNowMs);
+      recordInboundFailure(response, normalizedNowMs);
       return {
         ok: false,
         reason: `api_${response ? response.status : "no_response"}`,
@@ -3196,7 +3242,7 @@ export async function listSessionsFromApi({
       warnings: [],
     };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return {
       ok: false,
       reason: "not_authenticated",
@@ -3232,7 +3278,7 @@ export async function listSessionsFromApi({
         endpoint,
         {
           method: "GET",
-          headers: { Authorization: `Bearer ${session.token}` },
+          credential: await credentialFor(session),
         },
         normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
         fetchImpl,
@@ -3338,7 +3384,7 @@ export async function fetchSessionFromApi(
   } catch {
     return { ok: false, reason: "no_session", session: null };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { ok: false, reason: "not_authenticated", session: null, status: 401 };
   }
 
@@ -3352,7 +3398,7 @@ export async function fetchSessionFromApi(
       endpoint,
       {
         method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
+        credential: await credentialFor(session),
       },
       normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
       fetchImpl,
@@ -3417,7 +3463,7 @@ export async function probeSessionAccess(
   } catch {
     return { accessible: false, reason: "no_session" };
   }
-  if (!session || !session.token) {
+  if (!isAuthenticated(session)) {
     return { accessible: false, reason: "not_authenticated" };
   }
 
@@ -3428,13 +3474,11 @@ export async function probeSessionAccess(
 
   let response;
   try {
-    response = await fetchImpl(
+    response = await credentialedRequest(
+      await credentialFor(session),
       endpoint,
-      {
-        method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
-      },
-      normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
+      { method: "GET" },
+      { fetchImpl: (target, init) => fetchImpl(target, init, normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS)) },
     );
   } catch (err) {
     return {