ACLED

Provides conflict events, fatalities, event types, and locations.

Auth: ACLED_EMAIL or ACLED_USER, plus ACLED_PASSWORD.
Flow: OAuth password grant is tried first, then cookie session fallback.
Failure modes: missing credentials (no_credentials), rejected credentials or access denied (auth_failed), token/API endpoint failure (api_failed), and valid empty event sets (totalEvents: 0).
Behavior: missing or rejected credentials produce degraded source health with the ACLED error text.
Debug logs redact bearer tokens and cookies.
Test: set credentials, run node apis/sources/acled.mjs, then check /api/health.