@choiceapps/communityservices-sdk 0.1.0

package/dist/esm/transport.js

@@ -0,0 +1,369 @@
+import { WellSkyError, toItems } from "./runtime.js";
+import { decodeResponse, isRecord, matches } from "./validation.js";
+import { AuthError, TenantMismatchError, ThrottledError, UpstreamError, ValidationError } from "./errors.js";
+import { emit, identity, requestControl, sharedAuthentication, tokenMintQueue } from "./control.js";
+import { correctMobileEffectiveDate } from "./effective-date.js";
+const retryStatuses = new Set([408, 429, 500, 502, 503, 504]);
+function positiveInteger(value, name, minimum = 1) {
+    if (!Number.isSafeInteger(value) || value < minimum)
+        throw new TypeError(`${name} must be an integer >= ${minimum}`);
+    return value;
+}
+function expiry(token) {
+    try {
+        const part = token.split(".")[1];
+        if (!part)
+            return 0;
+        const base64 = part.replaceAll("-", "+").replaceAll("_", "/");
+        const parsed = JSON.parse(atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "=")));
+        return isRecord(parsed) && typeof parsed.exp === "number" && Number.isFinite(parsed.exp) ? parsed.exp * 1000 : 0;
+    }
+    catch {
+        return 0;
+    }
+}
+function retryAfter(headers) {
+    const raw = headers.get("retry-after");
+    if (!raw)
+        return undefined;
+    const seconds = Number(raw);
+    const delay = Number.isFinite(seconds) ? seconds * 1000 : Date.parse(raw) - Date.now();
+    return Number.isFinite(delay) ? Math.max(0, delay) : undefined;
+}
+function abortError(signal, operation) {
+    return new WellSkyError(signal.reason instanceof DOMException && signal.reason.name === "TimeoutError" ? "timeout" : "aborted", operation);
+}
+/** A caller can cancel its wait without cancelling authentication shared by other callers. */
+function withSignal(promise, signal, operation) {
+    return new Promise((resolve, reject) => {
+        const abort = () => reject(abortError(signal, operation));
+        if (signal.aborted)
+            abort();
+        else
+            signal.addEventListener("abort", abort, { once: true });
+        promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+    });
+}
+function delay(ms, signal, operation) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(abortError(signal, operation));
+            return;
+        }
+        const abort = () => { clearTimeout(timer); reject(abortError(signal, operation)); };
+        const timer = setTimeout(() => { signal.removeEventListener("abort", abort); resolve(); }, ms);
+        signal.addEventListener("abort", abort, { once: true });
+    });
+}
+export class Transport {
+    #baseUrl;
+    #tenant;
+    #version;
+    #auth;
+    #fetch;
+    #schemas;
+    #timeout;
+    #retries;
+    #retryBase;
+    #retryMax;
+    #shared;
+    #control;
+    #observers;
+    #mobileDateCorrection;
+    constructor(options, version, schemas) {
+        if (typeof window !== "undefined" || !("process" in globalThis))
+            throw new TypeError("WellSky SDK requires a server-side Node.js runtime");
+        if (!options.tenant.trim() || /[\r\n]/.test(options.tenant))
+            throw new TypeError("tenant is required and must be a valid header value");
+        const url = new URL(options.baseUrl ?? "https://csclientapi.wellsky.com/client-api-prod");
+        if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password || url.search || url.hash)
+            throw new TypeError("baseUrl must be an HTTP(S) URL without credentials, query, or fragment");
+        if (url.protocol === 'http:' && !['localhost', '127.0.0.1', '[::1]'].includes(url.hostname))
+            throw new TypeError("Use HTTPS except for loopback testing");
+        if (options.auth.kind === "credentials" && (!options.auth.username.trim() || !options.auth.password))
+            throw new TypeError("username and password are required");
+        if (options.auth.kind === "token" && (!options.auth.token.trim() || /\s/.test(options.auth.token)))
+            throw new TypeError("token must be a non-empty bearer token");
+        this.#baseUrl = url.toString().replace(/\/$/, "");
+        this.#tenant = options.tenant;
+        this.#version = version;
+        this.#auth = { ...options.auth };
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.#schemas = schemas;
+        const correction = options.mobileAssessmentDateCorrectionMinutes;
+        if (correction !== undefined && (!Number.isSafeInteger(correction) || Math.abs(correction) > 840))
+            throw new ValidationError("client configuration", ["mobileAssessmentDateCorrectionMinutes"]);
+        this.#mobileDateCorrection = correction;
+        this.#timeout = positiveInteger(options.timeoutMs ?? 30_000, "timeoutMs");
+        this.#retries = positiveInteger(options.maxReadRetries ?? 2, "maxReadRetries", 0);
+        this.#retryBase = positiveInteger(options.retryBaseDelayMs ?? 250, "retryBaseDelayMs", 0);
+        this.#retryMax = positiveInteger(options.maxRetryDelayMs ?? 30_000, "maxRetryDelayMs", 0);
+        const scope = JSON.stringify([this.#baseUrl, this.#tenant, identity(this.#fetch)]);
+        this.#control = requestControl(scope, options);
+        this.#shared = sharedAuthentication(scope, this.#auth);
+        this.#observers = { ...(options.hooks ? { hooks: { ...options.hooks } } : {}), ...(options.logger ? { logger: options.logger } : {}) };
+        if (this.#auth.kind === "token")
+            this.#checkTokenTenant(this.#auth.token);
+    }
+    get tenant() { return this.#tenant; }
+    get baseUrl() { return this.#baseUrl; }
+    health() { return this.#control.health(); }
+    #checkTenant(value, operation) {
+        if (!isRecord(value))
+            return;
+        for (const key of ["tenant", "tenantCode", "tenant_code", "x-tenant"]) {
+            if (value[key] !== undefined && value[key] !== null && value[key] !== this.#tenant)
+                throw new TenantMismatchError(operation);
+        }
+    }
+    #checkTokenTenant(token) {
+        let payload;
+        try {
+            const segment = token.split(".")[1];
+            if (!segment)
+                return;
+            const base64 = segment.replaceAll("-", "+").replaceAll("_", "/");
+            payload = JSON.parse(atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "=")));
+        }
+        catch {
+            return;
+        }
+        this.#checkTenant(payload, "authentication token");
+    }
+    async #send(url, init, operation, correlationId, retryCount) {
+        this.#control.check(operation);
+        const release = await this.#control.semaphore.acquire(init.signal, operation);
+        const started = Date.now();
+        const base = { operation, correlationId, retryCount };
+        try {
+            this.#control.check(operation);
+            const headers = new Headers(init.headers);
+            headers.set("x-correlation-id", correlationId);
+            emit(this.#observers, { ...base, type: "request" });
+            const response = await this.#fetch(url, { ...init, headers });
+            const event = { ...base, type: "response", status: response.status, durationMs: Date.now() - started };
+            emit(this.#observers, event);
+            if (response.status === 429)
+                emit(this.#observers, { ...event, type: "throttle", retryAfterMs: retryAfter(response.headers) ?? this.#retryBase });
+            const until = this.#control.failed(response.status);
+            if (until !== undefined)
+                emit(this.#observers, { ...base, type: "cooldown", until: new Date(until).toISOString() });
+            if (response.headers.has("x-tenant") && response.headers.get("x-tenant") !== this.#tenant) {
+                await response.body?.cancel();
+                throw new TenantMismatchError(operation);
+            }
+            // Hold the concurrency slot through body consumption, not merely until headers arrive.
+            const body = await response.arrayBuffer();
+            return new Response(response.status === 204 || response.status === 205 || response.status === 304 ? null : body, { status: response.status, statusText: response.statusText, headers: response.headers });
+        }
+        finally {
+            release();
+        }
+    }
+    #headers(token) {
+        const headers = new Headers({ Accept: "application/json", "x-tenant": this.#tenant, "x-version": this.#version });
+        if (token)
+            headers.set("Authorization", `Bearer ${token}`);
+        return headers;
+    }
+    async #read(response, operation, allowText = false) {
+        if (!response.ok) {
+            // Discard upstream error content; it may contain client data or credentials.
+            await response.body?.cancel();
+            const requestId = response.headers.get("x-request-id") ?? response.headers.get("request-id") ?? undefined;
+            const wait = retryAfter(response.headers);
+            if (response.status === 429)
+                throw new ThrottledError(operation, wait ?? this.#retryBase, response.status, requestId);
+            if (response.status === 401 || response.status === 403)
+                throw new AuthError(operation, response.status);
+            throw new UpstreamError(operation, response.status, requestId, wait);
+        }
+        const text = await response.text();
+        if (!text.trim())
+            return null;
+        let value;
+        try {
+            value = JSON.parse(text);
+        }
+        catch {
+            if (allowText)
+                return text;
+            throw new WellSkyError("protocol", operation);
+        }
+        this.#checkTenant(value, operation);
+        return value;
+    }
+    async #mint(forceRefresh, shared) {
+        const operation = "POST /authentication/SetAuthKey";
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(new DOMException("Deadline exceeded", "TimeoutError")), this.#timeout);
+        const signal = controller.signal;
+        let release;
+        try {
+            release = await tokenMintQueue.acquire(signal, operation);
+            this.#control.check(operation);
+            const correlationId = crypto.randomUUID();
+            this.#control.tokenMintCount++;
+            emit(this.#observers, { type: "tokenMint", operation, correlationId, retryCount: 0 });
+            let token;
+            if (this.#auth.kind === "provider")
+                token = await withSignal(Promise.resolve().then(() => this.#auth.kind === "provider" ? this.#auth.getToken({ forceRefresh, signal }) : ""), signal, operation);
+            else if (this.#auth.kind === "credentials") {
+                const headers = this.#headers();
+                headers.set("Content-Type", "application/json");
+                const response = await this.#send(`${this.#baseUrl}/authentication/SetAuthKey`, {
+                    method: "POST", headers, body: JSON.stringify({ username: this.#auth.username, password: this.#auth.password }), signal, redirect: "error", cache: "no-store",
+                }, operation, correlationId, 0);
+                const result = await this.#read(response, operation);
+                token = isRecord(result) ? result.token : undefined;
+            }
+            if (typeof token !== "string" || !token || /\s/.test(token))
+                throw new WellSkyError("protocol", operation);
+            this.#checkTokenTenant(token);
+            const expiresAt = expiry(token);
+            if (expiresAt !== 0 && expiresAt <= Date.now())
+                throw new WellSkyError("protocol", operation);
+            shared.cached = { token, expiresAt };
+            return token;
+        }
+        catch (error) {
+            if (signal.aborted)
+                throw abortError(signal, operation);
+            if (error instanceof WellSkyError)
+                throw error;
+            throw new WellSkyError("network", operation);
+        }
+        finally {
+            release?.();
+            clearTimeout(timer);
+        }
+    }
+    async #token(rejectedToken) {
+        if (this.#auth.kind === "none")
+            return Promise.resolve(undefined);
+        if (this.#auth.kind === "token")
+            return Promise.resolve(this.#auth.token);
+        const shared = await this.#shared;
+        // An older request's late 401 must not evict a newer token.
+        if (rejectedToken && shared.cached?.token !== rejectedToken && shared.cached)
+            return shared.cached.token;
+        if (shared.inFlight)
+            return shared.inFlight;
+        if (!rejectedToken && shared.cached && shared.cached.expiresAt > Date.now() + 120_000)
+            return shared.cached.token;
+        shared.cached = undefined;
+        shared.inFlight = this.#mint(Boolean(rejectedToken), shared).finally(() => { shared.inFlight = undefined; });
+        return shared.inFlight;
+    }
+    async execute(definition, args) {
+        const operation = `${definition.method} ${definition.path}`;
+        const correlationId = args.correlationId ?? crypto.randomUUID();
+        if (!/^[A-Za-z0-9_.:-]{1,128}$/.test(correlationId))
+            throw new ValidationError(operation, ["correlationId"]);
+        const timeout = positiveInteger(args.timeoutMs ?? this.#timeout, "timeoutMs");
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(new DOMException("Deadline exceeded", "TimeoutError")), timeout);
+        const signal = args.signal ? AbortSignal.any([args.signal, controller.signal]) : controller.signal;
+        try {
+            if (signal.aborted)
+                throw abortError(signal, operation);
+            this.#control.check(operation);
+            if (!matches(args.path ?? {}, definition.pathSchema, this.#schemas, "request") || !matches(args.query ?? {}, definition.querySchema, this.#schemas, "request") || (definition.bodySchema && !matches(args.body, definition.bodySchema, this.#schemas, "request")))
+                throw new ValidationError(operation);
+            // Check file bytes before multipart construction or credential authentication.
+            if (definition.multipart && isRecord(args.body) && args.body.fileData instanceof Blob && args.body.fileData.size > 10_000_000)
+                throw new ValidationError(operation, ["fileData"]);
+            const pathValues = new Map(Object.entries(args.path ?? {}));
+            const path = definition.path.replace(/\{([^}]+)\}/g, (_, name) => {
+                const value = String(pathValues.get(name));
+                if (value === "." || value === "..")
+                    throw new WellSkyError("validation", operation);
+                return encodeURIComponent(value);
+            });
+            const url = new URL(this.#baseUrl + path);
+            for (const [name, value] of Object.entries(args.query ?? {})) {
+                if (value !== undefined && value !== null) {
+                    const encoded = this.#mobileDateCorrection !== undefined && name === "dateEffective" && operation === "POST /assessmentsmobile/AddAssessmentAnswer/{clientId}/{assessmentCode}"
+                        ? correctMobileEffectiveDate(value, this.#mobileDateCorrection, operation) : String(value);
+                    url.searchParams.set(name, encoded);
+                }
+            }
+            let body;
+            if (definition.multipart && isRecord(args.body)) {
+                body = new FormData();
+                for (const [name, value] of Object.entries(args.body)) {
+                    if (value !== undefined && value !== null)
+                        body.append(name, value instanceof Blob ? value : String(value));
+                }
+            }
+            else if (args.body !== undefined)
+                body = JSON.stringify(args.body);
+            let token = definition.authenticated ? await withSignal(this.#token(), signal, operation) : undefined;
+            let refreshed = false;
+            let attempts = 0;
+            while (true) {
+                try {
+                    const headers = this.#headers(token);
+                    if (typeof body === "string")
+                        headers.set("Content-Type", "application/json");
+                    const response = await this.#send(url, { method: definition.method, headers, ...(body === undefined ? {} : { body }), signal, redirect: "error", cache: "no-store" }, operation, correlationId, attempts);
+                    // Reads can refresh once. Writes are never automatically sent twice, even after a 401.
+                    if (response.status === 401 && definition.method === "GET" && definition.authenticated && !refreshed && (this.#auth.kind === "credentials" || this.#auth.kind === "provider")) {
+                        await response.body?.cancel();
+                        refreshed = true;
+                        token = await withSignal(this.#token(token), signal, operation);
+                        continue;
+                    }
+                    const result = await this.#read(response, operation, definition.responseSchema === undefined);
+                    return decodeResponse(result, definition.responseSchema, this.#schemas, operation);
+                }
+                catch (error) {
+                    if (signal.aborted)
+                        throw abortError(signal, operation);
+                    const failure = error instanceof WellSkyError ? error : new WellSkyError("network", operation);
+                    const retryable = failure.kind === "network" || ((failure.kind === "http" || failure.kind === "throttled") && retryStatuses.has(failure.status ?? 0));
+                    if (definition.method !== "GET" || failure.operation !== operation || !retryable || attempts >= this.#retries)
+                        throw failure;
+                    const wait = failure.retryAfterMs ?? Math.min(this.#retryMax, this.#retryBase * 2 ** attempts * (1 + Math.random() * 0.2));
+                    // Never retry earlier than Retry-After. Return the error if the delay exceeds our bound.
+                    if (wait > this.#retryMax)
+                        throw failure;
+                    attempts++;
+                    await delay(wait, signal, operation);
+                }
+            }
+        }
+        catch (error) {
+            if (signal.aborted) {
+                const error = abortError(signal, operation);
+                error.correlationId = correlationId;
+                throw error;
+            }
+            if (error instanceof WellSkyError)
+                error.correlationId = correlationId;
+            if (error instanceof WellSkyError || error instanceof TypeError)
+                throw error;
+            throw new WellSkyError("network", operation);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async *paginate(definition, args) {
+        const operation = `${definition.method} ${definition.path}`;
+        const query = Object.fromEntries(Object.entries(args.query ?? {}));
+        const start = positiveInteger(typeof query.startPage === "number" ? query.startPage : 1, "startPage");
+        positiveInteger(typeof query.perPage === "number" ? query.perPage : 30, "perPage");
+        const maxPages = positiveInteger(args.maxPages ?? 10_000, "maxPages");
+        for (let page = 0; page < maxPages; page++) {
+            const response = await this.execute(definition, { ...args, query: { perPage: 30, ...query, startPage: start + page } });
+            const items = toItems(response);
+            if (!items.length)
+                return;
+            yield* items;
+            // Continue through short pages: some tenants cap perPage below the requested size.
+        }
+        throw new WellSkyError("pagination", operation);
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/esm/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7G,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAOjE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY,EAAE,OAAO,GAAG,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACrH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvF,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB,EAAE,SAAiB;IACxD,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,YAAY,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAC7I,CAAC;AAED,8FAA8F;AAC9F,SAAS,UAAU,CAAI,OAAmB,EAAE,MAAmB,EAAE,SAAiB;IAChF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;;YACvB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAmB,EAAE,SAAiB;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtE,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,SAAS;IACX,QAAQ,CAAS;IACjB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,KAAK,CAAiB;IACtB,MAAM,CAA0B;IAChC,QAAQ,CAAiB;IACzB,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,OAAO,CAAgC;IACvC,QAAQ,CAAiB;IACzB,UAAU,CAA0C;IACpD,qBAAqB,CAAqB;IAEnD,YAAY,OAAsB,EAAE,OAAe,EAAE,OAAuB;QAC1E,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;QAC3I,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;QACxI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,iDAAiD,CAAC,CAAC;QAC1F,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,wEAAwE,CAAC,CAAC;QACzM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC1J,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAChK,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAClK,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,MAAM,UAAU,GAAG,OAAO,CAAC,qCAAqC,CAAC;QACjE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,CAAC,uCAAuC,CAAC,CAAC,CAAC;QAChM,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,IAAI,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,IAAI,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,MAAM,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAmB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEzD,YAAY,CAAC,KAAc,EAAE,SAAiB;QAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC;YACtE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;IACD,iBAAiB,CAAC,KAAa;QAC7B,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAiB,EAAE,IAA2C,EAAE,SAAiB,EAAE,aAAqB,EAAE,UAAkB;QACtI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAgB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACpH,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAClJ,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACpH,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1F,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC1E,CAAC;YACD,uFAAuF;YACvF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5M,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,QAAQ,CAAC,KAAc;QACrB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClH,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAkB,EAAE,SAAiB,EAAE,SAAS,GAAG,KAAK;QAClE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,6EAA6E;YAC7E,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;YAC1G,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACtH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxG,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACjC,MAAM,CAAC;YACL,IAAI,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC3B,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAAqB,EAAE,MAA4B;QAC7D,MAAM,SAAS,GAAG,iCAAiC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YACtF,IAAI,KAAc,CAAC;YACnB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;iBAC9L,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,4BAA4B,EAAE;oBAC9E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU;iBAC9J,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACrD,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC3G,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC9F,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,KAAK,YAAY,YAAY;gBAAE,MAAM,KAAK,CAAC;YAC/C,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAsB;QACjC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;QAClC,4DAA4D;QAC5D,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACzG,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QAC5C,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAClH,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,UAA+B,EAAE,IAAe;QAC/D,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAChE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACnG,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;YACxS,+EAA+E;YAC/E,IAAI,UAAU,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,YAAY,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU;gBAAE,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAClL,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;gBACvE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3C,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBACrF,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,KAAK,SAAS,IAAI,IAAI,KAAK,eAAe,IAAI,SAAS,KAAK,yEAAyE;wBAC7K,CAAC,CAAC,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC7F,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YACD,IAAI,IAAmC,CAAC;YACxC,IAAI,UAAU,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;wBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,KAAK,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACrC,IAAI,OAAO,IAAI,KAAK,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAC9E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;oBAC1M,uFAAuF;oBACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,IAAI,UAAU,CAAC,aAAa,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;wBAC9K,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;wBAC9B,SAAS,GAAG,IAAI,CAAC;wBACjB,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;wBAChE,SAAS;oBACX,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC;oBAC9F,OAAO,cAAc,CAAI,MAAM,EAAE,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACxF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBACxD,MAAM,OAAO,GAAG,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBAC/F,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;oBACtJ,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,IAAI,QAAQ,IAAI,IAAI,CAAC,QAAQ;wBAAE,MAAM,OAAO,CAAC;oBAC7H,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBAC3H,yFAAyF;oBACzF,IAAI,IAAI,GAAG,IAAI,CAAC,SAAS;wBAAE,MAAM,OAAO,CAAC;oBACzC,QAAQ,EAAE,CAAC;oBACX,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAAC,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YACtH,IAAI,KAAK,YAAY,YAAY;gBAAE,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;YACvE,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC7E,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,CAAC,QAAQ,CAAI,UAA+B,EAAE,IAAmC;QACrF,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACtG,eAAe,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,UAAU,CAAC,CAAC;QACtE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC;YACxI,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,KAAK,CAAC,CAAC,KAAK,CAAC;YACb,mFAAmF;QACrF,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;CACF","sourcesContent":["import { WellSkyError, toItems } from \"./runtime.js\";\nimport type { ApiResponse, Authentication, ClientOptions, PaginationOptions, RequestOptions } from \"./runtime.js\";\nimport { decodeResponse, isRecord, matches } from \"./validation.js\";\nimport type { OperationDefinition, SchemaRegistry } from \"./validation.js\";\nimport { AuthError, TenantMismatchError, ThrottledError, UpstreamError, ValidationError } from \"./errors.js\";\nimport { emit, identity, requestControl, sharedAuthentication, tokenMintQueue } from \"./control.js\";\nimport type { RequestControl, SharedAuthentication } from \"./control.js\";\nimport type { ClientEvent, ClientHealth } from \"./runtime.js\";\nimport { correctMobileEffectiveDate } from \"./effective-date.js\";\n\ninterface Arguments extends RequestOptions {\n  path?: object;\n  query?: object;\n  body?: unknown;\n}\nconst retryStatuses = new Set([408, 429, 500, 502, 503, 504]);\n\nfunction positiveInteger(value: number, name: string, minimum = 1): number {\n  if (!Number.isSafeInteger(value) || value < minimum) throw new TypeError(`${name} must be an integer >= ${minimum}`);\n  return value;\n}\n\nfunction expiry(token: string): number {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return 0;\n    const base64 = part.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\");\n    const parsed: unknown = JSON.parse(atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, \"=\")));\n    return isRecord(parsed) && typeof parsed.exp === \"number\" && Number.isFinite(parsed.exp) ? parsed.exp * 1000 : 0;\n  } catch { return 0; }\n}\n\nfunction retryAfter(headers: Headers): number | undefined {\n  const raw = headers.get(\"retry-after\");\n  if (!raw) return undefined;\n  const seconds = Number(raw);\n  const delay = Number.isFinite(seconds) ? seconds * 1000 : Date.parse(raw) - Date.now();\n  return Number.isFinite(delay) ? Math.max(0, delay) : undefined;\n}\n\nfunction abortError(signal: AbortSignal, operation: string): WellSkyError {\n  return new WellSkyError(signal.reason instanceof DOMException && signal.reason.name === \"TimeoutError\" ? \"timeout\" : \"aborted\", operation);\n}\n\n/** A caller can cancel its wait without cancelling authentication shared by other callers. */\nfunction withSignal<T>(promise: Promise<T>, signal: AbortSignal, operation: string): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const abort = () => reject(abortError(signal, operation));\n    if (signal.aborted) abort();\n    else signal.addEventListener(\"abort\", abort, { once: true });\n    promise.then(resolve, reject).finally(() => signal.removeEventListener(\"abort\", abort));\n  });\n}\n\nfunction delay(ms: number, signal: AbortSignal, operation: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal.aborted) { reject(abortError(signal, operation)); return; }\n    const abort = () => { clearTimeout(timer); reject(abortError(signal, operation)); };\n    const timer = setTimeout(() => { signal.removeEventListener(\"abort\", abort); resolve(); }, ms);\n    signal.addEventListener(\"abort\", abort, { once: true });\n  });\n}\n\nexport class Transport {\n  readonly #baseUrl: string;\n  readonly #tenant: string;\n  readonly #version: string;\n  readonly #auth: Authentication;\n  readonly #fetch: typeof globalThis.fetch;\n  readonly #schemas: SchemaRegistry;\n  readonly #timeout: number;\n  readonly #retries: number;\n  readonly #retryBase: number;\n  readonly #retryMax: number;\n  readonly #shared: Promise<SharedAuthentication>;\n  readonly #control: RequestControl;\n  readonly #observers: Pick<ClientOptions, \"hooks\" | \"logger\">;\n  readonly #mobileDateCorrection: number | undefined;\n\n  constructor(options: ClientOptions, version: string, schemas: SchemaRegistry) {\n    if (typeof window !== \"undefined\" || !(\"process\" in globalThis)) throw new TypeError(\"WellSky SDK requires a server-side Node.js runtime\");\n    if (!options.tenant.trim() || /[\\r\\n]/.test(options.tenant)) throw new TypeError(\"tenant is required and must be a valid header value\");\n    const url = new URL(options.baseUrl ?? \"https://csclientapi.wellsky.com/client-api-prod\");\n    if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new TypeError(\"baseUrl must be an HTTP(S) URL without credentials, query, or fragment\");\n    if (url.protocol === 'http:' && !['localhost', '127.0.0.1', '[::1]'].includes(url.hostname)) throw new TypeError(\"Use HTTPS except for loopback testing\");\n    if (options.auth.kind === \"credentials\" && (!options.auth.username.trim() || !options.auth.password)) throw new TypeError(\"username and password are required\");\n    if (options.auth.kind === \"token\" && (!options.auth.token.trim() || /\\s/.test(options.auth.token))) throw new TypeError(\"token must be a non-empty bearer token\");\n    this.#baseUrl = url.toString().replace(/\\/$/, \"\");\n    this.#tenant = options.tenant;\n    this.#version = version;\n    this.#auth = { ...options.auth };\n    this.#fetch = options.fetch ?? globalThis.fetch;\n    this.#schemas = schemas;\n    const correction = options.mobileAssessmentDateCorrectionMinutes;\n    if (correction !== undefined && (!Number.isSafeInteger(correction) || Math.abs(correction) > 840)) throw new ValidationError(\"client configuration\", [\"mobileAssessmentDateCorrectionMinutes\"]);\n    this.#mobileDateCorrection = correction;\n    this.#timeout = positiveInteger(options.timeoutMs ?? 30_000, \"timeoutMs\");\n    this.#retries = positiveInteger(options.maxReadRetries ?? 2, \"maxReadRetries\", 0);\n    this.#retryBase = positiveInteger(options.retryBaseDelayMs ?? 250, \"retryBaseDelayMs\", 0);\n    this.#retryMax = positiveInteger(options.maxRetryDelayMs ?? 30_000, \"maxRetryDelayMs\", 0);\n    const scope = JSON.stringify([this.#baseUrl, this.#tenant, identity(this.#fetch)]);\n    this.#control = requestControl(scope, options);\n    this.#shared = sharedAuthentication(scope, this.#auth);\n    this.#observers = { ...(options.hooks ? { hooks: { ...options.hooks } } : {}), ...(options.logger ? { logger: options.logger } : {}) };\n    if (this.#auth.kind === \"token\") this.#checkTokenTenant(this.#auth.token);\n  }\n\n  get tenant(): string { return this.#tenant; }\n  get baseUrl(): string { return this.#baseUrl; }\n  health(): ClientHealth { return this.#control.health(); }\n\n  #checkTenant(value: unknown, operation: string): void {\n    if (!isRecord(value)) return;\n    for (const key of [\"tenant\", \"tenantCode\", \"tenant_code\", \"x-tenant\"]) {\n      if (value[key] !== undefined && value[key] !== null && value[key] !== this.#tenant) throw new TenantMismatchError(operation);\n    }\n  }\n  #checkTokenTenant(token: string): void {\n    let payload: unknown;\n    try {\n      const segment = token.split(\".\")[1];\n      if (!segment) return;\n      const base64 = segment.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\");\n      payload = JSON.parse(atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, \"=\")));\n    } catch { return; }\n    this.#checkTenant(payload, \"authentication token\");\n  }\n\n  async #send(url: string | URL, init: RequestInit & { signal: AbortSignal }, operation: string, correlationId: string, retryCount: number): Promise<Response> {\n    this.#control.check(operation);\n    const release = await this.#control.semaphore.acquire(init.signal, operation);\n    const started = Date.now();\n    const base = { operation, correlationId, retryCount };\n    try {\n      this.#control.check(operation);\n      const headers = new Headers(init.headers);\n      headers.set(\"x-correlation-id\", correlationId);\n      emit(this.#observers, { ...base, type: \"request\" });\n      const response = await this.#fetch(url, { ...init, headers });\n      const event: ClientEvent = { ...base, type: \"response\", status: response.status, durationMs: Date.now() - started };\n      emit(this.#observers, event);\n      if (response.status === 429) emit(this.#observers, { ...event, type: \"throttle\", retryAfterMs: retryAfter(response.headers) ?? this.#retryBase });\n      const until = this.#control.failed(response.status);\n      if (until !== undefined) emit(this.#observers, { ...base, type: \"cooldown\", until: new Date(until).toISOString() });\n      if (response.headers.has(\"x-tenant\") && response.headers.get(\"x-tenant\") !== this.#tenant) {\n        await response.body?.cancel(); throw new TenantMismatchError(operation);\n      }\n      // Hold the concurrency slot through body consumption, not merely until headers arrive.\n      const body = await response.arrayBuffer();\n      return new Response(response.status === 204 || response.status === 205 || response.status === 304 ? null : body, { status: response.status, statusText: response.statusText, headers: response.headers });\n    } finally { release(); }\n  }\n\n  #headers(token?: string): Headers {\n    const headers = new Headers({ Accept: \"application/json\", \"x-tenant\": this.#tenant, \"x-version\": this.#version });\n    if (token) headers.set(\"Authorization\", `Bearer ${token}`);\n    return headers;\n  }\n\n  async #read(response: Response, operation: string, allowText = false): Promise<unknown> {\n    if (!response.ok) {\n      // Discard upstream error content; it may contain client data or credentials.\n      await response.body?.cancel();\n      const requestId = response.headers.get(\"x-request-id\") ?? response.headers.get(\"request-id\") ?? undefined;\n      const wait = retryAfter(response.headers);\n      if (response.status === 429) throw new ThrottledError(operation, wait ?? this.#retryBase, response.status, requestId);\n      if (response.status === 401 || response.status === 403) throw new AuthError(operation, response.status);\n      throw new UpstreamError(operation, response.status, requestId, wait);\n    }\n    const text = await response.text();\n    if (!text.trim()) return null;\n    let value: unknown;\n    try { value = JSON.parse(text); }\n    catch {\n      if (allowText) return text;\n      throw new WellSkyError(\"protocol\", operation);\n    }\n    this.#checkTenant(value, operation);\n    return value;\n  }\n\n  async #mint(forceRefresh: boolean, shared: SharedAuthentication): Promise<string> {\n    const operation = \"POST /authentication/SetAuthKey\";\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(new DOMException(\"Deadline exceeded\", \"TimeoutError\")), this.#timeout);\n    const signal = controller.signal;\n    let release: (() => void) | undefined;\n    try {\n      release = await tokenMintQueue.acquire(signal, operation);\n      this.#control.check(operation);\n      const correlationId = crypto.randomUUID();\n      this.#control.tokenMintCount++;\n      emit(this.#observers, { type: \"tokenMint\", operation, correlationId, retryCount: 0 });\n      let token: unknown;\n      if (this.#auth.kind === \"provider\") token = await withSignal(Promise.resolve().then(() => this.#auth.kind === \"provider\" ? this.#auth.getToken({ forceRefresh, signal }) : \"\"), signal, operation);\n      else if (this.#auth.kind === \"credentials\") {\n        const headers = this.#headers();\n        headers.set(\"Content-Type\", \"application/json\");\n        const response = await this.#send(`${this.#baseUrl}/authentication/SetAuthKey`, {\n          method: \"POST\", headers, body: JSON.stringify({ username: this.#auth.username, password: this.#auth.password }), signal, redirect: \"error\", cache: \"no-store\",\n        }, operation, correlationId, 0);\n        const result = await this.#read(response, operation);\n        token = isRecord(result) ? result.token : undefined;\n      }\n      if (typeof token !== \"string\" || !token || /\\s/.test(token)) throw new WellSkyError(\"protocol\", operation);\n      this.#checkTokenTenant(token);\n      const expiresAt = expiry(token);\n      if (expiresAt !== 0 && expiresAt <= Date.now()) throw new WellSkyError(\"protocol\", operation);\n      shared.cached = { token, expiresAt };\n      return token;\n    } catch (error) {\n      if (signal.aborted) throw abortError(signal, operation);\n      if (error instanceof WellSkyError) throw error;\n      throw new WellSkyError(\"network\", operation);\n    } finally { release?.(); clearTimeout(timer); }\n  }\n\n  async #token(rejectedToken?: string): Promise<string | undefined> {\n    if (this.#auth.kind === \"none\") return Promise.resolve(undefined);\n    if (this.#auth.kind === \"token\") return Promise.resolve(this.#auth.token);\n    const shared = await this.#shared;\n    // An older request's late 401 must not evict a newer token.\n    if (rejectedToken && shared.cached?.token !== rejectedToken && shared.cached) return shared.cached.token;\n    if (shared.inFlight) return shared.inFlight;\n    if (!rejectedToken && shared.cached && shared.cached.expiresAt > Date.now() + 120_000) return shared.cached.token;\n    shared.cached = undefined;\n    shared.inFlight = this.#mint(Boolean(rejectedToken), shared).finally(() => { shared.inFlight = undefined; });\n    return shared.inFlight;\n  }\n\n  async execute<T>(definition: OperationDefinition, args: Arguments): Promise<T> {\n    const operation = `${definition.method} ${definition.path}`;\n    const correlationId = args.correlationId ?? crypto.randomUUID();\n    if (!/^[A-Za-z0-9_.:-]{1,128}$/.test(correlationId)) throw new ValidationError(operation, [\"correlationId\"]);\n    const timeout = positiveInteger(args.timeoutMs ?? this.#timeout, \"timeoutMs\");\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(new DOMException(\"Deadline exceeded\", \"TimeoutError\")), timeout);\n    const signal = args.signal ? AbortSignal.any([args.signal, controller.signal]) : controller.signal;\n    try {\n      if (signal.aborted) throw abortError(signal, operation);\n      this.#control.check(operation);\n      if (!matches(args.path ?? {}, definition.pathSchema, this.#schemas, \"request\") || !matches(args.query ?? {}, definition.querySchema, this.#schemas, \"request\") || (definition.bodySchema && !matches(args.body, definition.bodySchema, this.#schemas, \"request\"))) throw new ValidationError(operation);\n      // Check file bytes before multipart construction or credential authentication.\n      if (definition.multipart && isRecord(args.body) && args.body.fileData instanceof Blob && args.body.fileData.size > 10_000_000) throw new ValidationError(operation, [\"fileData\"]);\n      const pathValues = new Map(Object.entries(args.path ?? {}));\n      const path = definition.path.replace(/\\{([^}]+)\\}/g, (_, name: string) => {\n        const value = String(pathValues.get(name));\n        if (value === \".\" || value === \"..\") throw new WellSkyError(\"validation\", operation);\n        return encodeURIComponent(value);\n      });\n      const url = new URL(this.#baseUrl + path);\n      for (const [name, value] of Object.entries(args.query ?? {})) {\n        if (value !== undefined && value !== null) {\n          const encoded = this.#mobileDateCorrection !== undefined && name === \"dateEffective\" && operation === \"POST /assessmentsmobile/AddAssessmentAnswer/{clientId}/{assessmentCode}\"\n            ? correctMobileEffectiveDate(value, this.#mobileDateCorrection, operation) : String(value);\n          url.searchParams.set(name, encoded);\n        }\n      }\n      let body: string | FormData | undefined;\n      if (definition.multipart && isRecord(args.body)) {\n        body = new FormData();\n        for (const [name, value] of Object.entries(args.body)) {\n          if (value !== undefined && value !== null) body.append(name, value instanceof Blob ? value : String(value));\n        }\n      } else if (args.body !== undefined) body = JSON.stringify(args.body);\n      let token = definition.authenticated ? await withSignal(this.#token(), signal, operation) : undefined;\n      let refreshed = false;\n      let attempts = 0;\n      while (true) {\n        try {\n          const headers = this.#headers(token);\n          if (typeof body === \"string\") headers.set(\"Content-Type\", \"application/json\");\n          const response = await this.#send(url, { method: definition.method, headers, ...(body === undefined ? {} : { body }), signal, redirect: \"error\", cache: \"no-store\" }, operation, correlationId, attempts);\n          // Reads can refresh once. Writes are never automatically sent twice, even after a 401.\n          if (response.status === 401 && definition.method === \"GET\" && definition.authenticated && !refreshed && (this.#auth.kind === \"credentials\" || this.#auth.kind === \"provider\")) {\n            await response.body?.cancel();\n            refreshed = true;\n            token = await withSignal(this.#token(token), signal, operation);\n            continue;\n          }\n          const result = await this.#read(response, operation, definition.responseSchema === undefined);\n          return decodeResponse<T>(result, definition.responseSchema, this.#schemas, operation);\n        } catch (error) {\n          if (signal.aborted) throw abortError(signal, operation);\n          const failure = error instanceof WellSkyError ? error : new WellSkyError(\"network\", operation);\n          const retryable = failure.kind === \"network\" || ((failure.kind === \"http\" || failure.kind === \"throttled\") && retryStatuses.has(failure.status ?? 0));\n          if (definition.method !== \"GET\" || failure.operation !== operation || !retryable || attempts >= this.#retries) throw failure;\n          const wait = failure.retryAfterMs ?? Math.min(this.#retryMax, this.#retryBase * 2 ** attempts * (1 + Math.random() * 0.2));\n          // Never retry earlier than Retry-After. Return the error if the delay exceeds our bound.\n          if (wait > this.#retryMax) throw failure;\n          attempts++;\n          await delay(wait, signal, operation);\n        }\n      }\n    } catch (error) {\n      if (signal.aborted) { const error = abortError(signal, operation); error.correlationId = correlationId; throw error; }\n      if (error instanceof WellSkyError) error.correlationId = correlationId;\n      if (error instanceof WellSkyError || error instanceof TypeError) throw error;\n      throw new WellSkyError(\"network\", operation);\n    } finally { clearTimeout(timer); }\n  }\n\n  async *paginate<T>(definition: OperationDefinition, args: Arguments & PaginationOptions): AsyncGenerator<T> {\n    const operation = `${definition.method} ${definition.path}`;\n    const query = Object.fromEntries(Object.entries(args.query ?? {}));\n    const start = positiveInteger(typeof query.startPage === \"number\" ? query.startPage : 1, \"startPage\");\n    positiveInteger(typeof query.perPage === \"number\" ? query.perPage : 30, \"perPage\");\n    const maxPages = positiveInteger(args.maxPages ?? 10_000, \"maxPages\");\n    for (let page = 0; page < maxPages; page++) {\n      const response = await this.execute<ApiResponse<T>>(definition, { ...args, query: { perPage: 30, ...query, startPage: start + page } });\n      const items = toItems(response);\n      if (!items.length) return;\n      yield* items;\n      // Continue through short pages: some tenants cap perPage below the requested size.\n    }\n    throw new WellSkyError(\"pagination\", operation);\n  }\n}\n"]}

package/dist/esm/v2.d.ts

@@ -0,0 +1,13 @@
+export * from "./generated/v2.js";
+export * from "./generated/v2-models.js";
+export * from "./runtime.js";
+export * from "./metadata.js";
+export * from "./errors.js";
+export * from "./encoding.js";
+export * from "./verification.js";
+export * from "./bulk.js";
+export * from "./subassessments.js";
+export * from "./enrollment-verifications.js";
+export * from "./gwt-enrollments.js";
+export * from "./program-discovery.js";
+//# sourceMappingURL=v2.d.ts.map

package/dist/esm/v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC"}

package/dist/esm/v2.js

@@ -0,0 +1,13 @@
+export * from "./generated/v2.js";
+export * from "./generated/v2-models.js";
+export * from "./runtime.js";
+export * from "./metadata.js";
+export * from "./errors.js";
+export * from "./encoding.js";
+export * from "./verification.js";
+export * from "./bulk.js";
+export * from "./subassessments.js";
+export * from "./enrollment-verifications.js";
+export * from "./gwt-enrollments.js";
+export * from "./program-discovery.js";
+//# sourceMappingURL=v2.js.map

package/dist/esm/v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.js","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC","sourcesContent":["export * from \"./generated/v2.js\";\nexport * from \"./generated/v2-models.js\";\nexport * from \"./runtime.js\";\nexport * from \"./metadata.js\";\nexport * from \"./errors.js\";\nexport * from \"./encoding.js\";\nexport * from \"./verification.js\";\nexport * from \"./bulk.js\";\nexport * from \"./subassessments.js\";\nexport * from \"./enrollment-verifications.js\";\n\nexport * from \"./gwt-enrollments.js\";\nexport * from \"./program-discovery.js\";\n"]}

package/dist/esm/v3.d.ts

@@ -0,0 +1,13 @@
+export * from "./generated/v3.js";
+export * from "./generated/v3-models.js";
+export * from "./runtime.js";
+export * from "./metadata.js";
+export * from "./errors.js";
+export * from "./encoding.js";
+export * from "./verification.js";
+export * from "./bulk.js";
+export * from "./subassessments.js";
+export * from "./enrollment-verifications.js";
+export * from "./gwt-enrollments.js";
+export * from "./program-discovery.js";
+//# sourceMappingURL=v3.d.ts.map

package/dist/esm/v3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v3.d.ts","sourceRoot":"","sources":["../../src/v3.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC"}

package/dist/esm/v3.js

@@ -0,0 +1,13 @@
+export * from "./generated/v3.js";
+export * from "./generated/v3-models.js";
+export * from "./runtime.js";
+export * from "./metadata.js";
+export * from "./errors.js";
+export * from "./encoding.js";
+export * from "./verification.js";
+export * from "./bulk.js";
+export * from "./subassessments.js";
+export * from "./enrollment-verifications.js";
+export * from "./gwt-enrollments.js";
+export * from "./program-discovery.js";
+//# sourceMappingURL=v3.js.map

package/dist/esm/v3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v3.js","sourceRoot":"","sources":["../../src/v3.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC","sourcesContent":["export * from \"./generated/v3.js\";\nexport * from \"./generated/v3-models.js\";\nexport * from \"./runtime.js\";\nexport * from \"./metadata.js\";\nexport * from \"./errors.js\";\nexport * from \"./encoding.js\";\nexport * from \"./verification.js\";\nexport * from \"./bulk.js\";\nexport * from \"./subassessments.js\";\nexport * from \"./enrollment-verifications.js\";\n\nexport * from \"./gwt-enrollments.js\";\nexport * from \"./program-discovery.js\";\n"]}

package/dist/esm/validation.d.ts

@@ -0,0 +1,33 @@
+export interface Schema {
+    $ref?: string;
+    type?: string;
+    format?: string;
+    nullable?: boolean;
+    properties?: Record<string, Schema>;
+    required?: string[];
+    items?: Schema;
+    additionalProperties?: boolean | Schema;
+    minLength?: number;
+    maxLength?: number;
+    pattern?: string;
+    default?: unknown;
+    enum?: unknown[];
+}
+export type SchemaRegistry = Record<string, Schema>;
+export type Method = "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | "HEAD" | "OPTIONS";
+export interface OperationDefinition {
+    method: Method;
+    path: string;
+    authenticated: boolean;
+    pathSchema: Schema;
+    querySchema: Schema;
+    bodySchema?: Schema;
+    responseSchema?: Schema;
+    multipart: boolean;
+    pageable: boolean;
+}
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** Validates the structural subset used by the pinned specifications. */
+export declare function matches(value: unknown, schema: Schema, registry: SchemaRegistry, mode: "request" | "response", depth?: number): boolean;
+export declare function decodeResponse<T>(value: unknown, schema: Schema | undefined, registry: SchemaRegistry, operation: string): T;
+//# sourceMappingURL=validation.d.ts.map

package/dist/esm/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/validation.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACpD,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AACtF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,yEAAyE;AACzE,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,UAAU,EAAE,KAAK,SAAI,GAAG,OAAO,CAiClI;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,CAgB5H"}