ACLED

Provides conflict events, fatalities, event types, and locations.

Auth: ACLED_EMAIL and ACLED_PASSWORD.
Flow: OAuth password grant is tried first, then cookie session fallback.
Failure modes: missing credentials, terms/profile not completed, expired token, account missing API access.
Behavior: missing or rejected credentials produce degraded source health with the ACLED error text.
Test: set credentials, run node apis/sources/acled.mjs, then check /api/health.