@casfa/client 0.0.1

package/dist/api/index.js

@@ -0,0 +1,421 @@
+// src/utils/http.ts
+var statusToErrorCode = (status) => {
+  switch (status) {
+    case 401:
+      return "UNAUTHORIZED";
+    case 403:
+      return "FORBIDDEN";
+    case 404:
+      return "NOT_FOUND";
+    case 409:
+      return "CONFLICT";
+    case 400:
+    case 422:
+      return "VALIDATION_ERROR";
+    case 429:
+      return "RATE_LIMITED";
+    default:
+      return "UNKNOWN";
+  }
+};
+var createErrorFromResponse = async (response) => {
+  const code = statusToErrorCode(response.status);
+  let message = response.statusText;
+  let details;
+  try {
+    const body = await response.json();
+    if (typeof body.message === "string") {
+      message = body.message;
+    }
+    if (typeof body.error === "string") {
+      message = body.error;
+    }
+    details = body;
+  } catch {
+  }
+  return { code, message, status: response.status, details };
+};
+var createNetworkError = (err) => ({
+  code: "NETWORK_ERROR",
+  message: err instanceof Error ? err.message : "Network request failed",
+  details: err
+});
+var fetchApi = async (url, options = {}) => {
+  const { method = "GET", headers = {}, body, responseType = "json" } = options;
+  const requestHeaders = { ...headers };
+  if (body !== void 0 && !requestHeaders["Content-Type"]) {
+    requestHeaders["Content-Type"] = "application/json";
+  }
+  try {
+    const response = await fetch(url, {
+      method,
+      headers: requestHeaders,
+      body: body !== void 0 ? JSON.stringify(body) : void 0
+    });
+    if (!response.ok) {
+      const error = await createErrorFromResponse(response);
+      return { ok: false, error };
+    }
+    let data;
+    switch (responseType) {
+      case "json":
+        data = await response.json();
+        break;
+      case "blob":
+        data = await response.blob();
+        break;
+      case "text":
+        data = await response.text();
+        break;
+      case "none":
+        data = void 0;
+        break;
+    }
+    return { ok: true, data, status: response.status };
+  } catch (err) {
+    return { ok: false, error: createNetworkError(err) };
+  }
+};
+var fetchWithAuth = async (url, authHeader, options = {}) => {
+  const headers = { ...options.headers };
+  if (authHeader) {
+    headers.Authorization = authHeader;
+  }
+  return fetchApi(url, { ...options, headers });
+};
+
+// src/api/depots.ts
+var createDepot = async (baseUrl, realm, accessTokenBase64, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "POST",
+      body: params
+    }
+  );
+};
+var listDepots = async (baseUrl, realm, accessTokenBase64, params) => {
+  const query = new URLSearchParams();
+  if (params?.limit) query.set("limit", String(params.limit));
+  if (params?.cursor) query.set("cursor", params.cursor);
+  const queryString = query.toString();
+  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots${queryString ? `?${queryString}` : ""}`;
+  return fetchWithAuth(url, `Bearer ${accessTokenBase64}`);
+};
+var getDepot = async (baseUrl, realm, accessTokenBase64, depotId) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}`,
+    `Bearer ${accessTokenBase64}`
+  );
+};
+var updateDepot = async (baseUrl, realm, accessTokenBase64, depotId, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "PATCH",
+      body: params
+    }
+  );
+};
+var deleteDepot = async (baseUrl, realm, accessTokenBase64, depotId) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "DELETE",
+      responseType: "none"
+    }
+  );
+};
+var commitDepot = async (baseUrl, realm, accessTokenBase64, depotId, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}/commit`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "POST",
+      body: params
+    }
+  );
+};
+
+// src/api/info.ts
+var fetchServiceInfo = async (baseUrl) => {
+  return fetchApi(`${baseUrl}/api/info`);
+};
+var healthCheck = async (baseUrl) => {
+  return fetchApi(`${baseUrl}/api/health`);
+};
+
+// src/api/nodes.ts
+var getNode = async (baseUrl, realm, accessTokenBase64, nodeKey, indexPath) => {
+  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/${encodeURIComponent(nodeKey)}`;
+  try {
+    const response = await fetch(url, {
+      headers: {
+        Authorization: `Bearer ${accessTokenBase64}`,
+        "X-CAS-Index-Path": indexPath
+      }
+    });
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({ message: response.statusText }));
+      return {
+        ok: false,
+        error: {
+          code: String(response.status),
+          message: error.message ?? response.statusText,
+          status: response.status
+        }
+      };
+    }
+    const data = new Uint8Array(await response.arrayBuffer());
+    return { ok: true, data, status: response.status };
+  } catch (err) {
+    return {
+      ok: false,
+      error: {
+        code: "NETWORK_ERROR",
+        message: err instanceof Error ? err.message : "Network error"
+      }
+    };
+  }
+};
+var getNodeMetadata = async (baseUrl, realm, accessTokenBase64, nodeKey, indexPath) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/${encodeURIComponent(nodeKey)}/metadata`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      headers: {
+        "X-CAS-Index-Path": indexPath
+      }
+    }
+  );
+};
+var prepareNodes = async (baseUrl, realm, accessTokenBase64, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/prepare`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "POST",
+      body: params
+    }
+  );
+};
+var putNode = async (baseUrl, realm, accessTokenBase64, nodeKey, content) => {
+  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/${encodeURIComponent(nodeKey)}`;
+  try {
+    const response = await fetch(url, {
+      method: "PUT",
+      headers: {
+        Authorization: `Bearer ${accessTokenBase64}`,
+        "Content-Type": "application/octet-stream"
+      },
+      body: content
+    });
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({ message: response.statusText }));
+      return {
+        ok: false,
+        error: {
+          code: String(response.status),
+          message: error.message ?? response.statusText,
+          status: response.status
+        }
+      };
+    }
+    const data = await response.json();
+    return { ok: true, data, status: response.status };
+  } catch (err) {
+    return {
+      ok: false,
+      error: {
+        code: "NETWORK_ERROR",
+        message: err instanceof Error ? err.message : "Network error"
+      }
+    };
+  }
+};
+
+// src/api/oauth.ts
+var getOAuthConfig = async (baseUrl) => {
+  return fetchApi(`${baseUrl}/api/oauth/config`);
+};
+var exchangeCode = async (baseUrl, params) => {
+  return fetchApi(`${baseUrl}/api/oauth/token`, {
+    method: "POST",
+    body: params
+  });
+};
+var login = async (baseUrl, params) => {
+  return fetchApi(`${baseUrl}/api/oauth/login`, {
+    method: "POST",
+    body: params
+  });
+};
+var refresh = async (baseUrl, params) => {
+  return fetchApi(`${baseUrl}/api/oauth/refresh`, {
+    method: "POST",
+    body: params
+  });
+};
+var getMe = async (baseUrl, userAccessToken) => {
+  return fetchWithAuth(`${baseUrl}/api/oauth/me`, `Bearer ${userAccessToken}`);
+};
+var tokenResponseToStoredUserToken = (response, userId) => ({
+  accessToken: response.accessToken,
+  refreshToken: response.refreshToken,
+  userId,
+  expiresAt: Date.now() + response.expiresIn * 1e3
+});
+
+// src/api/requests.ts
+var createAuthRequest = async (baseUrl, params) => {
+  return fetchApi(`${baseUrl}/api/tokens/requests`, {
+    method: "POST",
+    body: params
+  });
+};
+var pollAuthRequest = async (baseUrl, requestId) => {
+  return fetchApi(
+    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}/poll`
+  );
+};
+var getAuthRequest = async (baseUrl, userAccessToken, requestId) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}`,
+    `Bearer ${userAccessToken}`
+  );
+};
+var approveAuthRequest = async (baseUrl, userAccessToken, requestId, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}/approve`,
+    `Bearer ${userAccessToken}`,
+    {
+      method: "POST",
+      body: params ?? {}
+    }
+  );
+};
+var rejectAuthRequest = async (baseUrl, userAccessToken, requestId, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}/reject`,
+    `Bearer ${userAccessToken}`,
+    {
+      method: "POST",
+      body: params ?? {}
+    }
+  );
+};
+
+// src/api/tickets.ts
+var createTicket = async (baseUrl, realm, accessTokenBase64, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "POST",
+      body: params
+    }
+  );
+};
+var listTickets = async (baseUrl, realm, accessTokenBase64, params) => {
+  const query = new URLSearchParams();
+  if (params?.limit) query.set("limit", String(params.limit));
+  if (params?.cursor) query.set("cursor", params.cursor);
+  if (params?.status) query.set("status", params.status);
+  const queryString = query.toString();
+  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets${queryString ? `?${queryString}` : ""}`;
+  return fetchWithAuth(url, `Bearer ${accessTokenBase64}`);
+};
+var getTicket = async (baseUrl, realm, accessTokenBase64, ticketId) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets/${encodeURIComponent(ticketId)}`,
+    `Bearer ${accessTokenBase64}`
+  );
+};
+var submitTicket = async (baseUrl, realm, accessTokenBase64, ticketId, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets/${encodeURIComponent(ticketId)}/submit`,
+    `Bearer ${accessTokenBase64}`,
+    {
+      method: "POST",
+      body: params
+    }
+  );
+};
+
+// src/api/tokens.ts
+var createToken = async (baseUrl, userAccessToken, params) => {
+  return fetchWithAuth(`${baseUrl}/api/tokens`, `Bearer ${userAccessToken}`, {
+    method: "POST",
+    body: params
+  });
+};
+var listTokens = async (baseUrl, userAccessToken, params) => {
+  const query = new URLSearchParams();
+  if (params?.limit) query.set("limit", String(params.limit));
+  if (params?.cursor) query.set("cursor", params.cursor);
+  if (params?.type) query.set("type", params.type);
+  const queryString = query.toString();
+  const url = `${baseUrl}/api/tokens${queryString ? `?${queryString}` : ""}`;
+  return fetchWithAuth(url, `Bearer ${userAccessToken}`);
+};
+var getToken = async (baseUrl, userAccessToken, tokenId) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/tokens/${encodeURIComponent(tokenId)}`,
+    `Bearer ${userAccessToken}`
+  );
+};
+var revokeToken = async (baseUrl, userAccessToken, tokenId) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/tokens/${encodeURIComponent(tokenId)}/revoke`,
+    `Bearer ${userAccessToken}`,
+    { method: "POST" }
+  );
+};
+var delegateToken = async (baseUrl, delegateTokenBase64, params) => {
+  return fetchWithAuth(
+    `${baseUrl}/api/tokens/delegate`,
+    `Bearer ${delegateTokenBase64}`,
+    {
+      method: "POST",
+      body: params
+    }
+  );
+};
+export {
+  approveAuthRequest,
+  commitDepot,
+  createAuthRequest,
+  createDepot,
+  createTicket,
+  createToken,
+  delegateToken,
+  deleteDepot,
+  exchangeCode,
+  fetchServiceInfo,
+  getAuthRequest,
+  getDepot,
+  getMe,
+  getNode,
+  getNodeMetadata,
+  getOAuthConfig,
+  getTicket,
+  getToken,
+  healthCheck,
+  listDepots,
+  listTickets,
+  listTokens,
+  login,
+  pollAuthRequest,
+  prepareNodes,
+  putNode,
+  refresh,
+  rejectAuthRequest,
+  revokeToken,
+  submitTicket,
+  tokenResponseToStoredUserToken,
+  updateDepot
+};
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/http.ts","../../src/api/depots.ts","../../src/api/info.ts","../../src/api/nodes.ts","../../src/api/oauth.ts","../../src/api/requests.ts","../../src/api/tickets.ts","../../src/api/tokens.ts"],"sourcesContent":["/**\n * Fetch utilities for the stateful client.\n */\n\nimport type { ClientError, FetchResult } from \"../types/client.ts\";\n\n// ============================================================================\n// Error Handling\n// ============================================================================\n\n/**\n * Map HTTP status to error code.\n */\nexport const statusToErrorCode = (status: number): string => {\n  switch (status) {\n    case 401:\n      return \"UNAUTHORIZED\";\n    case 403:\n      return \"FORBIDDEN\";\n    case 404:\n      return \"NOT_FOUND\";\n    case 409:\n      return \"CONFLICT\";\n    case 400:\n    case 422:\n      return \"VALIDATION_ERROR\";\n    case 429:\n      return \"RATE_LIMITED\";\n    default:\n      return \"UNKNOWN\";\n  }\n};\n\n/**\n * Create error from HTTP response.\n */\nexport const createErrorFromResponse = async (response: Response): Promise<ClientError> => {\n  const code = statusToErrorCode(response.status);\n  let message = response.statusText;\n  let details: unknown;\n\n  try {\n    const body = (await response.json()) as Record<string, unknown>;\n    if (typeof body.message === \"string\") {\n      message = body.message;\n    }\n    if (typeof body.error === \"string\") {\n      message = body.error;\n    }\n    details = body;\n  } catch {\n    // Response body is not JSON, use status text\n  }\n\n  return { code, message, status: response.status, details };\n};\n\n/**\n * Create a network error.\n */\nexport const createNetworkError = (err: unknown): ClientError => ({\n  code: \"NETWORK_ERROR\",\n  message: err instanceof Error ? err.message : \"Network request failed\",\n  details: err,\n});\n\n// ============================================================================\n// Fetch Function\n// ============================================================================\n\nexport type FetchOptions = {\n  method?: \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\";\n  headers?: Record<string, string>;\n  body?: unknown;\n  /** Expected response type */\n  responseType?: \"json\" | \"blob\" | \"text\" | \"none\";\n};\n\n/**\n * Make a fetch request with error handling.\n */\nexport const fetchApi = async <T>(\n  url: string,\n  options: FetchOptions = {}\n): Promise<FetchResult<T>> => {\n  const { method = \"GET\", headers = {}, body, responseType = \"json\" } = options;\n\n  const requestHeaders: Record<string, string> = { ...headers };\n\n  // Add content-type for JSON body\n  if (body !== undefined && !requestHeaders[\"Content-Type\"]) {\n    requestHeaders[\"Content-Type\"] = \"application/json\";\n  }\n\n  try {\n    const response = await fetch(url, {\n      method,\n      headers: requestHeaders,\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    });\n\n    if (!response.ok) {\n      const error = await createErrorFromResponse(response);\n      return { ok: false, error };\n    }\n\n    // Parse response based on type\n    let data: T;\n    switch (responseType) {\n      case \"json\":\n        data = (await response.json()) as T;\n        break;\n      case \"blob\":\n        data = (await response.blob()) as T;\n        break;\n      case \"text\":\n        data = (await response.text()) as T;\n        break;\n      case \"none\":\n        data = undefined as T;\n        break;\n    }\n\n    return { ok: true, data, status: response.status };\n  } catch (err) {\n    return { ok: false, error: createNetworkError(err) };\n  }\n};\n\n/**\n * Make an authenticated fetch request.\n */\nexport const fetchWithAuth = async <T>(\n  url: string,\n  authHeader: string | null,\n  options: FetchOptions = {}\n): Promise<FetchResult<T>> => {\n  const headers = { ...options.headers };\n\n  if (authHeader) {\n    headers.Authorization = authHeader;\n  }\n\n  return fetchApi<T>(url, { ...options, headers });\n};\n","/**\n * Depot API functions.\n *\n * Token Requirement:\n * - All depot operations require Access Token with canManageDepot permission.\n */\n\nimport type {\n  CreateDepot,\n  CreateDepotResponse,\n  DepotCommit,\n  DepotDetail,\n  DepotListItem,\n  ListDepotsQuery,\n  UpdateDepot,\n} from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport { fetchWithAuth } from \"../utils/http.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type ListDepotsResponse = {\n  depots: DepotListItem[];\n  nextCursor?: string;\n};\n\nexport type CommitDepotResponse = {\n  depotId: string;\n  root: string;\n  updatedAt: number;\n};\n\n// ============================================================================\n// Access Token APIs\n// ============================================================================\n\n/**\n * Create a new depot.\n * Requires Access Token with canManageDepot.\n */\nexport const createDepot = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  params: CreateDepot\n): Promise<FetchResult<CreateDepotResponse>> => {\n  return fetchWithAuth<CreateDepotResponse>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"POST\",\n      body: params,\n    }\n  );\n};\n\n/**\n * List depots.\n * Requires Access Token.\n */\nexport const listDepots = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  params?: ListDepotsQuery\n): Promise<FetchResult<ListDepotsResponse>> => {\n  const query = new URLSearchParams();\n  if (params?.limit) query.set(\"limit\", String(params.limit));\n  if (params?.cursor) query.set(\"cursor\", params.cursor);\n\n  const queryString = query.toString();\n  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots${queryString ? `?${queryString}` : \"\"}`;\n\n  return fetchWithAuth<ListDepotsResponse>(url, `Bearer ${accessTokenBase64}`);\n};\n\n/**\n * Get depot details.\n * Requires Access Token.\n */\nexport const getDepot = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  depotId: string\n): Promise<FetchResult<DepotDetail>> => {\n  return fetchWithAuth<DepotDetail>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}`,\n    `Bearer ${accessTokenBase64}`\n  );\n};\n\n/**\n * Update depot metadata.\n * Requires Access Token with canManageDepot.\n */\nexport const updateDepot = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  depotId: string,\n  params: UpdateDepot\n): Promise<FetchResult<DepotDetail>> => {\n  return fetchWithAuth<DepotDetail>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"PATCH\",\n      body: params,\n    }\n  );\n};\n\n/**\n * Delete a depot.\n * Requires Access Token with canManageDepot.\n */\nexport const deleteDepot = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  depotId: string\n): Promise<FetchResult<void>> => {\n  return fetchWithAuth<void>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"DELETE\",\n      responseType: \"none\",\n    }\n  );\n};\n\n/**\n * Commit new root to depot.\n * Requires Access Token with canManageDepot.\n */\nexport const commitDepot = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  depotId: string,\n  params: DepotCommit\n): Promise<FetchResult<CommitDepotResponse>> => {\n  return fetchWithAuth<CommitDepotResponse>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/depots/${encodeURIComponent(depotId)}/commit`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"POST\",\n      body: params,\n    }\n  );\n};\n","/**\n * Service info API.\n */\n\nimport type { ServiceInfo } from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport { fetchApi } from \"../utils/http.ts\";\n\n/**\n * Fetch service info from /api/info.\n */\nexport const fetchServiceInfo = async (baseUrl: string): Promise<FetchResult<ServiceInfo>> => {\n  return fetchApi<ServiceInfo>(`${baseUrl}/api/info`);\n};\n\n/**\n * Health check.\n */\nexport const healthCheck = async (baseUrl: string): Promise<FetchResult<{ status: string }>> => {\n  return fetchApi<{ status: string }>(`${baseUrl}/api/health`);\n};\n","/**\n * Node API functions.\n *\n * Token Requirement:\n * - GET /nodes/:nodeKey: Access Token (with X-CAS-Index-Path header)\n * - POST /nodes/prepare: Access Token with canUpload\n * - PUT /nodes/:nodeKey: Access Token with canUpload\n */\n\nimport type { NodeMetadata, PrepareNodes, PrepareNodesResponse } from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport { fetchWithAuth } from \"../utils/http.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type NodeUploadResult = {\n  nodeKey: string;\n  status: \"created\" | \"exists\";\n};\n\n// ============================================================================\n// Access Token APIs\n// ============================================================================\n\n/**\n * Get node content.\n * Requires Access Token with scope covering the index path.\n *\n * @param indexPath - The CAS index path for scope verification (e.g., \"depot:MAIN:0:1\")\n */\nexport const getNode = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  nodeKey: string,\n  indexPath: string\n): Promise<FetchResult<Uint8Array>> => {\n  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/${encodeURIComponent(nodeKey)}`;\n\n  try {\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${accessTokenBase64}`,\n        \"X-CAS-Index-Path\": indexPath,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({ message: response.statusText }));\n      return {\n        ok: false,\n        error: {\n          code: String(response.status),\n          message: (error as { message?: string }).message ?? response.statusText,\n          status: response.status,\n        },\n      };\n    }\n\n    const data = new Uint8Array(await response.arrayBuffer());\n    return { ok: true, data, status: response.status };\n  } catch (err) {\n    return {\n      ok: false,\n      error: {\n        code: \"NETWORK_ERROR\",\n        message: err instanceof Error ? err.message : \"Network error\",\n      },\n    };\n  }\n};\n\n/**\n * Get node metadata.\n * Requires Access Token with scope covering the index path.\n */\nexport const getNodeMetadata = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  nodeKey: string,\n  indexPath: string\n): Promise<FetchResult<NodeMetadata>> => {\n  return fetchWithAuth<NodeMetadata>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/${encodeURIComponent(nodeKey)}/metadata`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      headers: {\n        \"X-CAS-Index-Path\": indexPath,\n      },\n    }\n  );\n};\n\n/**\n * Prepare nodes for upload.\n * Returns which nodes need to be uploaded vs already exist.\n * Requires Access Token with canUpload.\n */\nexport const prepareNodes = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  params: PrepareNodes\n): Promise<FetchResult<PrepareNodesResponse>> => {\n  return fetchWithAuth<PrepareNodesResponse>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/prepare`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"POST\",\n      body: params,\n    }\n  );\n};\n\n/**\n * Upload a node.\n * Requires Access Token with canUpload.\n */\nexport const putNode = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  nodeKey: string,\n  content: Uint8Array\n): Promise<FetchResult<NodeUploadResult>> => {\n  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/nodes/${encodeURIComponent(nodeKey)}`;\n\n  try {\n    const response = await fetch(url, {\n      method: \"PUT\",\n      headers: {\n        Authorization: `Bearer ${accessTokenBase64}`,\n        \"Content-Type\": \"application/octet-stream\",\n      },\n      body: content,\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({ message: response.statusText }));\n      return {\n        ok: false,\n        error: {\n          code: String(response.status),\n          message: (error as { message?: string }).message ?? response.statusText,\n          status: response.status,\n        },\n      };\n    }\n\n    const data = (await response.json()) as NodeUploadResult;\n    return { ok: true, data, status: response.status };\n  } catch (err) {\n    return {\n      ok: false,\n      error: {\n        code: \"NETWORK_ERROR\",\n        message: err instanceof Error ? err.message : \"Network error\",\n      },\n    };\n  }\n};\n","/**\n * OAuth API functions.\n */\n\nimport type { Login, Refresh, TokenExchange } from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport type { StoredUserToken } from \"../types/tokens.ts\";\nimport { fetchApi, fetchWithAuth } from \"../utils/http.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type CognitoConfig = {\n  region: string;\n  userPoolId: string;\n  clientId: string;\n  domain: string;\n};\n\nexport type TokenResponse = {\n  accessToken: string;\n  refreshToken: string;\n  expiresIn: number;\n  idToken?: string;\n};\n\nexport type UserInfo = {\n  userId: string;\n  email: string;\n  role: string;\n};\n\n// ============================================================================\n// Public OAuth API\n// ============================================================================\n\n/**\n * Get Cognito configuration.\n */\nexport const getOAuthConfig = async (baseUrl: string): Promise<FetchResult<CognitoConfig>> => {\n  return fetchApi<CognitoConfig>(`${baseUrl}/api/oauth/config`);\n};\n\n/**\n * Exchange authorization code for tokens.\n */\nexport const exchangeCode = async (\n  baseUrl: string,\n  params: TokenExchange\n): Promise<FetchResult<TokenResponse>> => {\n  return fetchApi<TokenResponse>(`${baseUrl}/api/oauth/token`, {\n    method: \"POST\",\n    body: params,\n  });\n};\n\n/**\n * Login with email and password.\n */\nexport const login = async (\n  baseUrl: string,\n  params: Login\n): Promise<FetchResult<TokenResponse>> => {\n  return fetchApi<TokenResponse>(`${baseUrl}/api/oauth/login`, {\n    method: \"POST\",\n    body: params,\n  });\n};\n\n/**\n * Refresh access token.\n */\nexport const refresh = async (\n  baseUrl: string,\n  params: Refresh\n): Promise<FetchResult<TokenResponse>> => {\n  return fetchApi<TokenResponse>(`${baseUrl}/api/oauth/refresh`, {\n    method: \"POST\",\n    body: params,\n  });\n};\n\n// ============================================================================\n// Authenticated OAuth API\n// ============================================================================\n\n/**\n * Get current user info.\n * Requires User JWT.\n */\nexport const getMe = async (\n  baseUrl: string,\n  userAccessToken: string\n): Promise<FetchResult<UserInfo>> => {\n  return fetchWithAuth<UserInfo>(`${baseUrl}/api/oauth/me`, `Bearer ${userAccessToken}`);\n};\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\n/**\n * Convert token response to stored user token.\n */\nexport const tokenResponseToStoredUserToken = (\n  response: TokenResponse,\n  userId: string\n): StoredUserToken => ({\n  accessToken: response.accessToken,\n  refreshToken: response.refreshToken,\n  userId,\n  expiresAt: Date.now() + response.expiresIn * 1000,\n});\n","/**\n * Client Authorization Request API functions.\n *\n * For CLI/desktop apps to request tokens through user approval.\n */\n\nimport type {\n  ApproveRequest,\n  ApproveRequestResponse,\n  CreateAuthRequest,\n  CreateAuthRequestResponse,\n  DenyRequest,\n  DenyRequestResponse,\n  PollRequestResponse,\n} from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport { fetchApi, fetchWithAuth } from \"../utils/http.ts\";\n\n// ============================================================================\n// Public APIs (No auth required)\n// ============================================================================\n\n/**\n * Create an authorization request.\n * No auth required - called by CLI/desktop clients.\n */\nexport const createAuthRequest = async (\n  baseUrl: string,\n  params: CreateAuthRequest\n): Promise<FetchResult<CreateAuthRequestResponse>> => {\n  return fetchApi<CreateAuthRequestResponse>(`${baseUrl}/api/tokens/requests`, {\n    method: \"POST\",\n    body: params,\n  });\n};\n\n/**\n * Poll authorization request status.\n * No auth required - called by CLI/desktop clients.\n */\nexport const pollAuthRequest = async (\n  baseUrl: string,\n  requestId: string\n): Promise<FetchResult<PollRequestResponse>> => {\n  return fetchApi<PollRequestResponse>(\n    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}/poll`\n  );\n};\n\n// ============================================================================\n// User JWT APIs (For approving/rejecting requests)\n// ============================================================================\n\n/**\n * Get authorization request details.\n * Requires User JWT.\n */\nexport const getAuthRequest = async (\n  baseUrl: string,\n  userAccessToken: string,\n  requestId: string\n): Promise<FetchResult<PollRequestResponse>> => {\n  return fetchWithAuth<PollRequestResponse>(\n    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}`,\n    `Bearer ${userAccessToken}`\n  );\n};\n\n/**\n * Approve an authorization request.\n * Requires User JWT.\n */\nexport const approveAuthRequest = async (\n  baseUrl: string,\n  userAccessToken: string,\n  requestId: string,\n  params?: ApproveRequest\n): Promise<FetchResult<ApproveRequestResponse>> => {\n  return fetchWithAuth<ApproveRequestResponse>(\n    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}/approve`,\n    `Bearer ${userAccessToken}`,\n    {\n      method: \"POST\",\n      body: params ?? {},\n    }\n  );\n};\n\n/**\n * Reject an authorization request.\n * Requires User JWT.\n */\nexport const rejectAuthRequest = async (\n  baseUrl: string,\n  userAccessToken: string,\n  requestId: string,\n  params?: DenyRequest\n): Promise<FetchResult<DenyRequestResponse>> => {\n  return fetchWithAuth<DenyRequestResponse>(\n    `${baseUrl}/api/tokens/requests/${encodeURIComponent(requestId)}/reject`,\n    `Bearer ${userAccessToken}`,\n    {\n      method: \"POST\",\n      body: params ?? {},\n    }\n  );\n};\n","/**\n * Ticket API functions.\n *\n * Token Requirement:\n * - POST /api/realm/{realmId}/tickets: Access Token (create ticket, bind pre-issued token)\n * - GET /api/realm/{realmId}/tickets: Access Token (list)\n * - GET /api/realm/{realmId}/tickets/:ticketId: Access Token (get detail)\n * - POST /api/realm/{realmId}/tickets/:ticketId/submit: Access Token (submit)\n *\n * Design Principle: All Realm data operations use Access Token.\n * Delegate Token is only for issuing tokens.\n *\n * Two-step Ticket creation flow:\n *   1. Issue Access Token using Delegate Token (POST /api/tokens/delegate)\n *   2. Create Ticket and bind the token (POST /api/realm/{realmId}/tickets)\n */\n\nimport type {\n  CreateTicket,\n  CreateTicketResponse,\n  ListTicketsQuery,\n  TicketDetail,\n  TicketListItem,\n  TicketSubmit,\n} from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport { fetchWithAuth } from \"../utils/http.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type ListTicketsResponse = {\n  tickets: TicketListItem[];\n  nextCursor?: string;\n};\n\nexport type SubmitTicketResponse = {\n  ticketId: string;\n  status: \"submitted\";\n  root: string;\n  submittedAt: number;\n};\n\n// ============================================================================\n// Access Token APIs\n// ============================================================================\n\n/**\n * Create a new ticket and bind a pre-issued Access Token.\n * Requires Access Token.\n *\n * @param accessTokenBase64 - Caller's Access Token (for authentication)\n * @param params.accessTokenId - Pre-issued Access Token ID to bind (for Tool use)\n */\nexport const createTicket = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  params: CreateTicket\n): Promise<FetchResult<CreateTicketResponse>> => {\n  return fetchWithAuth<CreateTicketResponse>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"POST\",\n      body: params,\n    }\n  );\n};\n\n/**\n * List tickets.\n * Requires Access Token.\n */\nexport const listTickets = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  params?: ListTicketsQuery\n): Promise<FetchResult<ListTicketsResponse>> => {\n  const query = new URLSearchParams();\n  if (params?.limit) query.set(\"limit\", String(params.limit));\n  if (params?.cursor) query.set(\"cursor\", params.cursor);\n  if (params?.status) query.set(\"status\", params.status);\n\n  const queryString = query.toString();\n  const url = `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets${queryString ? `?${queryString}` : \"\"}`;\n\n  return fetchWithAuth<ListTicketsResponse>(url, `Bearer ${accessTokenBase64}`);\n};\n\n/**\n * Get ticket details.\n * Requires Access Token.\n */\nexport const getTicket = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  ticketId: string\n): Promise<FetchResult<TicketDetail>> => {\n  return fetchWithAuth<TicketDetail>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets/${encodeURIComponent(ticketId)}`,\n    `Bearer ${accessTokenBase64}`\n  );\n};\n\n/**\n * Submit a ticket.\n * Requires Access Token.\n */\nexport const submitTicket = async (\n  baseUrl: string,\n  realm: string,\n  accessTokenBase64: string,\n  ticketId: string,\n  params: TicketSubmit\n): Promise<FetchResult<SubmitTicketResponse>> => {\n  return fetchWithAuth<SubmitTicketResponse>(\n    `${baseUrl}/api/realm/${encodeURIComponent(realm)}/tickets/${encodeURIComponent(ticketId)}/submit`,\n    `Bearer ${accessTokenBase64}`,\n    {\n      method: \"POST\",\n      body: params,\n    }\n  );\n};\n","/**\n * Token management API functions.\n *\n * Token Requirement:\n * - POST /api/tokens: User JWT\n * - GET /api/tokens: User JWT\n * - GET /api/tokens/:tokenId: User JWT\n * - POST /api/tokens/:tokenId/revoke: User JWT\n * - POST /api/tokens/delegate: Delegate Token\n */\n\nimport type {\n  CreateToken,\n  CreateTokenResponse,\n  RevokeTokenResponse,\n  TokenDetail,\n  TokenListItem,\n} from \"@casfa/protocol\";\nimport type { FetchResult } from \"../types/client.ts\";\nimport { fetchWithAuth } from \"../utils/http.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type ListTokensParams = {\n  limit?: number;\n  cursor?: string;\n  type?: \"delegate\" | \"access\";\n};\n\nexport type ListTokensResponse = {\n  tokens: TokenListItem[];\n  nextCursor?: string;\n};\n\n// ============================================================================\n// User JWT APIs\n// ============================================================================\n\n/**\n * Create a new Delegate Token.\n * Requires User JWT.\n */\nexport const createToken = async (\n  baseUrl: string,\n  userAccessToken: string,\n  params: CreateToken\n): Promise<FetchResult<CreateTokenResponse>> => {\n  return fetchWithAuth<CreateTokenResponse>(`${baseUrl}/api/tokens`, `Bearer ${userAccessToken}`, {\n    method: \"POST\",\n    body: params,\n  });\n};\n\n/**\n * List Delegate Tokens.\n * Requires User JWT.\n */\nexport const listTokens = async (\n  baseUrl: string,\n  userAccessToken: string,\n  params?: ListTokensParams\n): Promise<FetchResult<ListTokensResponse>> => {\n  const query = new URLSearchParams();\n  if (params?.limit) query.set(\"limit\", String(params.limit));\n  if (params?.cursor) query.set(\"cursor\", params.cursor);\n  if (params?.type) query.set(\"type\", params.type);\n\n  const queryString = query.toString();\n  const url = `${baseUrl}/api/tokens${queryString ? `?${queryString}` : \"\"}`;\n\n  return fetchWithAuth<ListTokensResponse>(url, `Bearer ${userAccessToken}`);\n};\n\n/**\n * Get token details.\n * Requires User JWT.\n */\nexport const getToken = async (\n  baseUrl: string,\n  userAccessToken: string,\n  tokenId: string\n): Promise<FetchResult<TokenDetail>> => {\n  return fetchWithAuth<TokenDetail>(\n    `${baseUrl}/api/tokens/${encodeURIComponent(tokenId)}`,\n    `Bearer ${userAccessToken}`\n  );\n};\n\n/**\n * Revoke a token.\n * Requires User JWT.\n */\nexport const revokeToken = async (\n  baseUrl: string,\n  userAccessToken: string,\n  tokenId: string\n): Promise<FetchResult<RevokeTokenResponse>> => {\n  return fetchWithAuth<RevokeTokenResponse>(\n    `${baseUrl}/api/tokens/${encodeURIComponent(tokenId)}/revoke`,\n    `Bearer ${userAccessToken}`,\n    { method: \"POST\" }\n  );\n};\n\n// ============================================================================\n// Delegate Token APIs\n// ============================================================================\n\nexport type DelegateTokenParams = {\n  name: string;\n  type: \"delegate\" | \"access\";\n  expiresIn?: number;\n  canUpload?: boolean;\n  canManageDepot?: boolean;\n  scope?: string[];\n};\n\n/**\n * Delegate (re-issue) a token using existing Delegate Token.\n * Requires Delegate Token.\n */\nexport const delegateToken = async (\n  baseUrl: string,\n  delegateTokenBase64: string,\n  params: DelegateTokenParams\n): Promise<FetchResult<CreateTokenResponse>> => {\n  return fetchWithAuth<CreateTokenResponse>(\n    `${baseUrl}/api/tokens/delegate`,\n    `Bearer ${delegateTokenBase64}`,\n    {\n      method: \"POST\",\n      body: params,\n    }\n  );\n};\n"],"mappings":";AAaO,IAAM,oBAAoB,CAAC,WAA2B;AAC3D,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAKO,IAAM,0BAA0B,OAAO,aAA6C;AACzF,QAAM,OAAO,kBAAkB,SAAS,MAAM;AAC9C,MAAI,UAAU,SAAS;AACvB,MAAI;AAEJ,MAAI;AACF,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,QAAI,OAAO,KAAK,YAAY,UAAU;AACpC,gBAAU,KAAK;AAAA,IACjB;AACA,QAAI,OAAO,KAAK,UAAU,UAAU;AAClC,gBAAU,KAAK;AAAA,IACjB;AACA,cAAU;AAAA,EACZ,QAAQ;AAAA,EAER;AAEA,SAAO,EAAE,MAAM,SAAS,QAAQ,SAAS,QAAQ,QAAQ;AAC3D;AAKO,IAAM,qBAAqB,CAAC,SAA+B;AAAA,EAChE,MAAM;AAAA,EACN,SAAS,eAAe,QAAQ,IAAI,UAAU;AAAA,EAC9C,SAAS;AACX;AAiBO,IAAM,WAAW,OACtB,KACA,UAAwB,CAAC,MACG;AAC5B,QAAM,EAAE,SAAS,OAAO,UAAU,CAAC,GAAG,MAAM,eAAe,OAAO,IAAI;AAEtE,QAAM,iBAAyC,EAAE,GAAG,QAAQ;AAG5D,MAAI,SAAS,UAAa,CAAC,eAAe,cAAc,GAAG;AACzD,mBAAe,cAAc,IAAI;AAAA,EACnC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,MACT,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,IACpD,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,wBAAwB,QAAQ;AACpD,aAAO,EAAE,IAAI,OAAO,MAAM;AAAA,IAC5B;AAGA,QAAI;AACJ,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAQ,MAAM,SAAS,KAAK;AAC5B;AAAA,MACF,KAAK;AACH,eAAQ,MAAM,SAAS,KAAK;AAC5B;AAAA,MACF,KAAK;AACH,eAAQ,MAAM,SAAS,KAAK;AAC5B;AAAA,MACF,KAAK;AACH,eAAO;AACP;AAAA,IACJ;AAEA,WAAO,EAAE,IAAI,MAAM,MAAM,QAAQ,SAAS,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,mBAAmB,GAAG,EAAE;AAAA,EACrD;AACF;AAKO,IAAM,gBAAgB,OAC3B,KACA,YACA,UAAwB,CAAC,MACG;AAC5B,QAAM,UAAU,EAAE,GAAG,QAAQ,QAAQ;AAErC,MAAI,YAAY;AACd,YAAQ,gBAAgB;AAAA,EAC1B;AAEA,SAAO,SAAY,KAAK,EAAE,GAAG,SAAS,QAAQ,CAAC;AACjD;;;ACtGO,IAAM,cAAc,OACzB,SACA,OACA,mBACA,WAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC;AAAA,IACjD,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,IAAM,aAAa,OACxB,SACA,OACA,mBACA,WAC6C;AAC7C,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI,QAAQ,MAAO,OAAM,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAC1D,MAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,OAAO,MAAM;AAErD,QAAM,cAAc,MAAM,SAAS;AACnC,QAAM,MAAM,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,UAAU,cAAc,IAAI,WAAW,KAAK,EAAE;AAE3G,SAAO,cAAkC,KAAK,UAAU,iBAAiB,EAAE;AAC7E;AAMO,IAAM,WAAW,OACtB,SACA,OACA,mBACA,YACsC;AACtC,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,WAAW,mBAAmB,OAAO,CAAC;AAAA,IACvF,UAAU,iBAAiB;AAAA,EAC7B;AACF;AAMO,IAAM,cAAc,OACzB,SACA,OACA,mBACA,SACA,WACsC;AACtC,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,WAAW,mBAAmB,OAAO,CAAC;AAAA,IACvF,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,IAAM,cAAc,OACzB,SACA,OACA,mBACA,YAC+B;AAC/B,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,WAAW,mBAAmB,OAAO,CAAC;AAAA,IACvF,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,cAAc;AAAA,IAChB;AAAA,EACF;AACF;AAMO,IAAM,cAAc,OACzB,SACA,OACA,mBACA,SACA,WAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,WAAW,mBAAmB,OAAO,CAAC;AAAA,IACvF,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;;;AC/IO,IAAM,mBAAmB,OAAO,YAAuD;AAC5F,SAAO,SAAsB,GAAG,OAAO,WAAW;AACpD;AAKO,IAAM,cAAc,OAAO,YAA8D;AAC9F,SAAO,SAA6B,GAAG,OAAO,aAAa;AAC7D;;;ACYO,IAAM,UAAU,OACrB,SACA,OACA,mBACA,SACA,cACqC;AACrC,QAAM,MAAM,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,UAAU,mBAAmB,OAAO,CAAC;AAElG,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,SAAS;AAAA,QACP,eAAe,UAAU,iBAAiB;AAAA,QAC1C,oBAAoB;AAAA,MACtB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,EAAE,SAAS,SAAS,WAAW,EAAE;AAClF,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM,OAAO,SAAS,MAAM;AAAA,UAC5B,SAAU,MAA+B,WAAW,SAAS;AAAA,UAC7D,QAAQ,SAAS;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,WAAW,MAAM,SAAS,YAAY,CAAC;AACxD,WAAO,EAAE,IAAI,MAAM,MAAM,QAAQ,SAAS,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,eAAe,QAAQ,IAAI,UAAU;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAC7B,SACA,OACA,mBACA,SACA,cACuC;AACvC,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,UAAU,mBAAmB,OAAO,CAAC;AAAA,IACtF,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,SAAS;AAAA,QACP,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AACF;AAOO,IAAM,eAAe,OAC1B,SACA,OACA,mBACA,WAC+C;AAC/C,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC;AAAA,IACjD,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,IAAM,UAAU,OACrB,SACA,OACA,mBACA,SACA,YAC2C;AAC3C,QAAM,MAAM,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,UAAU,mBAAmB,OAAO,CAAC;AAElG,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,iBAAiB;AAAA,QAC1C,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,EAAE,SAAS,SAAS,WAAW,EAAE;AAClF,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM,OAAO,SAAS,MAAM;AAAA,UAC5B,SAAU,MAA+B,WAAW,SAAS;AAAA,UAC7D,QAAQ,SAAS;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,EAAE,IAAI,MAAM,MAAM,QAAQ,SAAS,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,eAAe,QAAQ,IAAI,UAAU;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACF;;;AC3HO,IAAM,iBAAiB,OAAO,YAAyD;AAC5F,SAAO,SAAwB,GAAG,OAAO,mBAAmB;AAC9D;AAKO,IAAM,eAAe,OAC1B,SACA,WACwC;AACxC,SAAO,SAAwB,GAAG,OAAO,oBAAoB;AAAA,IAC3D,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAKO,IAAM,QAAQ,OACnB,SACA,WACwC;AACxC,SAAO,SAAwB,GAAG,OAAO,oBAAoB;AAAA,IAC3D,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAKO,IAAM,UAAU,OACrB,SACA,WACwC;AACxC,SAAO,SAAwB,GAAG,OAAO,sBAAsB;AAAA,IAC7D,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAUO,IAAM,QAAQ,OACnB,SACA,oBACmC;AACnC,SAAO,cAAwB,GAAG,OAAO,iBAAiB,UAAU,eAAe,EAAE;AACvF;AASO,IAAM,iCAAiC,CAC5C,UACA,YACqB;AAAA,EACrB,aAAa,SAAS;AAAA,EACtB,cAAc,SAAS;AAAA,EACvB;AAAA,EACA,WAAW,KAAK,IAAI,IAAI,SAAS,YAAY;AAC/C;;;ACvFO,IAAM,oBAAoB,OAC/B,SACA,WACoD;AACpD,SAAO,SAAoC,GAAG,OAAO,wBAAwB;AAAA,IAC3E,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAMO,IAAM,kBAAkB,OAC7B,SACA,cAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO,wBAAwB,mBAAmB,SAAS,CAAC;AAAA,EACjE;AACF;AAUO,IAAM,iBAAiB,OAC5B,SACA,iBACA,cAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO,wBAAwB,mBAAmB,SAAS,CAAC;AAAA,IAC/D,UAAU,eAAe;AAAA,EAC3B;AACF;AAMO,IAAM,qBAAqB,OAChC,SACA,iBACA,WACA,WACiD;AACjD,SAAO;AAAA,IACL,GAAG,OAAO,wBAAwB,mBAAmB,SAAS,CAAC;AAAA,IAC/D,UAAU,eAAe;AAAA,IACzB;AAAA,MACE,QAAQ;AAAA,MACR,MAAM,UAAU,CAAC;AAAA,IACnB;AAAA,EACF;AACF;AAMO,IAAM,oBAAoB,OAC/B,SACA,iBACA,WACA,WAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO,wBAAwB,mBAAmB,SAAS,CAAC;AAAA,IAC/D,UAAU,eAAe;AAAA,IACzB;AAAA,MACE,QAAQ;AAAA,MACR,MAAM,UAAU,CAAC;AAAA,IACnB;AAAA,EACF;AACF;;;ACnDO,IAAM,eAAe,OAC1B,SACA,OACA,mBACA,WAC+C;AAC/C,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC;AAAA,IACjD,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,IAAM,cAAc,OACzB,SACA,OACA,mBACA,WAC8C;AAC9C,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI,QAAQ,MAAO,OAAM,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAC1D,MAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,OAAO,MAAM;AACrD,MAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,OAAO,MAAM;AAErD,QAAM,cAAc,MAAM,SAAS;AACnC,QAAM,MAAM,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,WAAW,cAAc,IAAI,WAAW,KAAK,EAAE;AAE5G,SAAO,cAAmC,KAAK,UAAU,iBAAiB,EAAE;AAC9E;AAMO,IAAM,YAAY,OACvB,SACA,OACA,mBACA,aACuC;AACvC,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,YAAY,mBAAmB,QAAQ,CAAC;AAAA,IACzF,UAAU,iBAAiB;AAAA,EAC7B;AACF;AAMO,IAAM,eAAe,OAC1B,SACA,OACA,mBACA,UACA,WAC+C;AAC/C,SAAO;AAAA,IACL,GAAG,OAAO,cAAc,mBAAmB,KAAK,CAAC,YAAY,mBAAmB,QAAQ,CAAC;AAAA,IACzF,UAAU,iBAAiB;AAAA,IAC3B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;;;ACnFO,IAAM,cAAc,OACzB,SACA,iBACA,WAC8C;AAC9C,SAAO,cAAmC,GAAG,OAAO,eAAe,UAAU,eAAe,IAAI;AAAA,IAC9F,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAMO,IAAM,aAAa,OACxB,SACA,iBACA,WAC6C;AAC7C,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI,QAAQ,MAAO,OAAM,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAC1D,MAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,OAAO,MAAM;AACrD,MAAI,QAAQ,KAAM,OAAM,IAAI,QAAQ,OAAO,IAAI;AAE/C,QAAM,cAAc,MAAM,SAAS;AACnC,QAAM,MAAM,GAAG,OAAO,cAAc,cAAc,IAAI,WAAW,KAAK,EAAE;AAExE,SAAO,cAAkC,KAAK,UAAU,eAAe,EAAE;AAC3E;AAMO,IAAM,WAAW,OACtB,SACA,iBACA,YACsC;AACtC,SAAO;AAAA,IACL,GAAG,OAAO,eAAe,mBAAmB,OAAO,CAAC;AAAA,IACpD,UAAU,eAAe;AAAA,EAC3B;AACF;AAMO,IAAM,cAAc,OACzB,SACA,iBACA,YAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO,eAAe,mBAAmB,OAAO,CAAC;AAAA,IACpD,UAAU,eAAe;AAAA,IACzB,EAAE,QAAQ,OAAO;AAAA,EACnB;AACF;AAmBO,IAAM,gBAAgB,OAC3B,SACA,qBACA,WAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,OAAO;AAAA,IACV,UAAU,mBAAmB;AAAA,IAC7B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACF;","names":[]}