@craftainer/crud-sdk 0.5.1 → 0.7.0

package/dist/{client-Drvc7htU.d.mts → client-C_Qz7dS5.d.mts}

@@ -1,4 +1,4 @@
-import { a as Middleware, l as TokenProvider, s as Op } from "./interfaces-s73cVfIF.mjs";
+import { a as Middleware, l as TokenProvider, s as Op } from "./interfaces-Ca8EDwyf.mjs";
 //#region src/manifest.d.ts
 declare const PROFILE = "https://craftainer.github.io/schemas/crud-manifest/v1";
 declare const CATALOG_PATH = "/.well-known/api-catalog";
@@ -195,6 +195,10 @@ interface ListOptions extends RequestOptions {
 interface WriteOptions extends RequestOptions {
   readonly ifMatch?: string | undefined;
 }
+/** Options of `deleteMany`. */
+interface DeleteManyOptions extends RequestOptions {
+  readonly includeUnpublished?: boolean | undefined;
+}
 /** Options of `stats`. There is no `onlyArchived` (the server rejects it on `/stats`). */
 interface StatsOptions extends RequestOptions {
   readonly bucket?: string | undefined;
@@ -257,8 +261,12 @@ declare class ResourceClient<Read extends object = JsonObject, Create extends ob
   updateMany(filters: Filters, data: Update, options?: RequestOptions): Promise<BulkResult>;
   /** Deletes one record; `ifMatch` as for `update`. */
   delete(id: number, options?: WriteOptions): Promise<void>;
-  /** Deletes every record matching `filters`. */
-  deleteMany(filters: Filters, options?: RequestOptions): Promise<BulkResult>;
+  /**
+   * Deletes every record matching `filters`. `includeUnpublished: false`
+   * leaves not-yet/no-longer-published rows alone; it is sent only when
+   * given (needs a server with the BD1 bulk-delete support, older ones ignore it).
+   */
+  deleteMany(filters: Filters, options?: DeleteManyOptions): Promise<BulkResult>;
   /** Restores archived records, by `id` or by `filters`. */
   restore(options: RestoreOptions): Promise<BulkResult>;
   /** Aggregates over the resource. */
@@ -286,6 +294,37 @@ interface ClientOptions {
   readonly fetch?: typeof fetch | undefined;
   /** Returns the bearer token; called again with `refresh: true` once after a `401`. */
   readonly tokenProvider?: TokenProvider | undefined;
+  /**
+   * The cache scope of the caller, for sessions that carry no bearer token
+   * (a cookie session behind a BFF). A string, or a function (sync or async)
+   * evaluated per request (and reused across that request's 401 retry), plus
+   * once per `scope()` call; return the same value for the same caller (for example the OIDC `sub`). It must be non-empty. When given it
+   * REPLACES the token-hash / `"anon"` scope, even if a `tokenProvider` is also
+   * set (the token still authenticates; it no longer selects the scope), and
+   * the `./cache` middleware keys by it instead of the Authorization header.
+   * Change what it returns on login or logout and nothing cached for the
+   * previous caller is visible.
+   */
+  readonly cacheScope?: string | (() => string | Promise<string>) | undefined;
+  /**
+   * Passed to every `fetch` as `RequestInit.credentials` (`"same-origin"`
+   * sends the session cookie to a same-origin `baseUrl`). Default: the
+   * platform's (`"same-origin"`). `"include"` over plain `http:` to a
+   * non-loopback host is refused with {@link InsecureTransportError}.
+   */
+  readonly credentials?: NonNullable<RequestInit["credentials"]> | undefined;
+  /**
+   * Called (and awaited) on each final `401` response, after the
+   * `tokenProvider` refresh retry (if any) has failed to help; manifest and
+   * discovery requests included. A client call that makes several requests
+   * can fire it more than once, so make it idempotent (for example a
+   * navigation). It gets a clone of the response, so its body may be read.
+   * The call still rejects with `Unauthorized` afterwards; if the callback
+   * throws, its error is the `Unauthorized`'s `cause` (or, when the problem
+   * already has a `cause`, a non-enumerable `onUnauthorizedError` property).
+   * Typical use: navigate to the login page.
+   */
+  readonly onUnauthorized?: ((response: Response) => void | Promise<void>) | undefined;
   /** Outermost first; see `composeMiddleware`. */
   readonly middleware?: readonly Middleware[] | undefined;
   /** Skips api-catalog discovery. */
@@ -305,11 +344,12 @@ interface ClientOptions {
    */
   readonly allowedOrigins?: readonly string[] | undefined;
   /**
-   * Allow sending an `Authorization` header (the bearer token) over plain
-   * `http:` to a host that is not loopback. Default `false`: such a request
-   * is refused with {@link InsecureTransportError} before it is sent.
+   * Allow sending an `Authorization` header (the bearer token), or cookies
+   * (`credentials: "include"`), over plain `http:` to a
+   * host that is not loopback. Default `false`: such a request is refused
+   * with {@link InsecureTransportError} before it is sent.
    * Loopback (`localhost`, `*.localhost`, `127.0.0.0/8`, `[::1]`) and
-   * anonymous requests are always allowed. Opt in only for a trusted
+   * anonymous requests without credentials are always allowed. Opt in only for a trusted
    * network, as the token is readable on the wire.
    */
   readonly allowInsecureHttp?: boolean | undefined;
@@ -325,7 +365,11 @@ declare class CrudClient {
   use(middleware: Middleware): this;
   /** The current bearer token, or `null` when anonymous. */
   token(refresh?: boolean): Promise<string | null>;
-  /** The cache scope of the current caller (`"anon"` or a hash of the token). */
+  /**
+   * The cache scope of the current caller: the `cacheScope` option (opaque,
+   * namespaced; the `tokenProvider` is not called), else `"anon"` or a hash of
+   * the token.
+   */
   scope(): Promise<string>;
   /** The `{ client, scope }` namespace the `./tanstack` key factory takes. */
   namespace(): Promise<{
@@ -342,5 +386,5 @@ declare class CrudClient {
 /** Creates a client; the manifest loads on first use. */
 declare function createClient(options: ClientOptions): CrudClient;
 //#endregion
-export { Pagination as A, Capabilities as C, JsonObject as D, GetJson as E, manifestUrlFromCatalog as F, parseManifest as I, Schemas as M, findResource as N, Manifest as O, loadManifest as P, CacheHints as S, FieldSpec as T, encodeParams as _, PredictOptions as a, AuthSpec as b, RestoreOptions as c, createClient as d, Filters as f, buildQuery as g, Sort as h, ListOptions as i, Resource as j, PROFILE as k, StatsOptions as l, QueryParams as m, ClientOptions as n, RequestOptions as o, QueryField as p, CrudClient as r, ResourceClient as s, BulkResult as t, WriteOptions as u, formatScalar as v, EventsSpec as w, CATALOG_PATH as x, quote as y };
-//# sourceMappingURL=client-Drvc7htU.d.mts.map
+export { PROFILE as A, CacheHints as C, GetJson as D, FieldSpec as E, loadManifest as F, manifestUrlFromCatalog as I, parseManifest as L, Resource as M, Schemas as N, JsonObject as O, findResource as P, CATALOG_PATH as S, EventsSpec as T, buildQuery as _, ListOptions as a, quote as b, ResourceClient as c, WriteOptions as d, createClient as f, Sort as g, QueryParams as h, DeleteManyOptions as i, Pagination as j, Manifest as k, RestoreOptions as l, QueryField as m, ClientOptions as n, PredictOptions as o, Filters as p, CrudClient as r, RequestOptions as s, BulkResult as t, StatsOptions as u, encodeParams as v, Capabilities as w, AuthSpec as x, formatScalar as y };
+//# sourceMappingURL=client-C_Qz7dS5.d.mts.map

package/dist/{client-CUFoB5IC.mjs → client-CzbFW5YG.mjs}

@@ -625,9 +625,12 @@ var Plan = class {
 	#need(supported, what) {
 		if (!supported) throw new CapabilityError(`resource "${this.resource.name}" does not support ${what}`);
 	}
-	#bulkFilters(filters) {
+	#bulkFilters(filters, includeUnpublished) {
 		if (Object.keys(filters).length === 0) throw new InvalidQueryError("a bulk operation needs at least one filter");
-		return this.#query({ filters });
+		return this.#query({
+			filters,
+			includeUnpublished
+		});
 	}
 	get #base() {
 		return this.resource.base_path;
@@ -672,9 +675,9 @@ var Plan = class {
 			ifMatch
 		});
 	}
-	deleteMany(filters) {
+	deleteMany(filters, includeUnpublished) {
 		this.#need(this.resource.capabilities.bulk_delete, "bulk_delete");
-		return this.#call("DELETE", "bulk_delete", this.#base, this.#bulkFilters(filters));
+		return this.#call("DELETE", "bulk_delete", this.#base, this.#bulkFilters(filters, includeUnpublished));
 	}
 	restore(id, filters) {
 		const path = this.#subPath("restore", this.resource.capabilities.archive_restore);
@@ -790,9 +793,13 @@ var ResourceClient = class {
 	async delete(id, options = {}) {
 		await this.#transport.none(this.#plan.delete(id, options.ifMatch), options.signal);
 	}
-	/** Deletes every record matching `filters`. */
+	/**
+	* Deletes every record matching `filters`. `includeUnpublished: false`
+	* leaves not-yet/no-longer-published rows alone; it is sent only when
+	* given (needs a server with the BD1 bulk-delete support, older ones ignore it).
+	*/
 	async deleteMany(filters, options = {}) {
-		return this.#one(this.#plan.deleteMany(filters), options);
+		return this.#one(this.#plan.deleteMany(filters, options.includeUnpublished), options);
 	}
 	/** Restores archived records, by `id` or by `filters`. */
 	async restore(options) {
@@ -842,6 +849,9 @@ var CrudClient = class {
 	id;
 	#fetch;
 	#tokenProvider;
+	#cacheScope;
+	#credentials;
+	#onUnauthorized;
 	#middleware;
 	#manifestUrl;
 	#allowedOrigins;
@@ -855,6 +865,9 @@ var CrudClient = class {
 		this.id = options.id ?? options.baseUrl;
 		this.#fetch = options.fetch;
 		this.#tokenProvider = options.tokenProvider;
+		this.#cacheScope = options.cacheScope;
+		this.#credentials = options.credentials;
+		this.#onUnauthorized = options.onUnauthorized;
 		this.#middleware = [...options.middleware ?? []];
 		this.#manifestUrl = options.manifestUrl;
 		this.#allowedOrigins = [...options.allowedOrigins ?? []];
@@ -887,9 +900,25 @@ var CrudClient = class {
 	token(refresh = false) {
 		return this.#token(refresh);
 	}
-	/** The cache scope of the current caller (`"anon"` or a hash of the token). */
+	/**
+	* The `cacheScope` option, evaluated once, validated and namespaced
+	* (`s:` + the percent-encoded value, so it can never equal `anon` or a token
+	* hash and adds no key segments); `undefined` when the option is not used.
+	* The prefix is internal.
+	*/
+	async #explicitScope() {
+		if (this.#cacheScope === void 0) return;
+		const value = typeof this.#cacheScope === "function" ? await this.#cacheScope() : this.#cacheScope;
+		if (typeof value !== "string" || value === "") throw new ClientError("cacheScope must resolve to a non-empty string");
+		return `s:${encodeURIComponent(value)}`;
+	}
+	/**
+	* The cache scope of the current caller: the `cacheScope` option (opaque,
+	* namespaced; the `tokenProvider` is not called), else `"anon"` or a hash of
+	* the token.
+	*/
 	async scope() {
-		return cacheScope(await this.#token(false));
+		return await this.#explicitScope() ?? cacheScope(await this.#token(false));
 	}
 	/** The `{ client, scope }` namespace the `./tanstack` key factory takes. */
 	async namespace() {
@@ -898,7 +927,7 @@ var CrudClient = class {
 			scope: await this.scope()
 		};
 	}
-	async #dispatch(call, token, signal) {
+	async #dispatch(call, token, explicit, signal) {
 		const headers = new Headers({
 			Accept: "application/json",
 			...call.headers
@@ -907,7 +936,8 @@ var CrudClient = class {
 		const init = {
 			method: call.method,
 			headers,
-			signal: signal ?? null
+			signal: signal ?? null,
+			...this.#credentials === void 0 ? {} : { credentials: this.#credentials }
 		};
 		if (call.json !== void 0) {
 			headers.set("Content-Type", "application/json");
@@ -915,7 +945,7 @@ var CrudClient = class {
 		}
 		const request = new Request(call.url, init);
 		const terminal = async (ctx) => {
-			if (!this.#allowInsecureHttp && ctx.request.headers.has("Authorization") && isInsecureRemote(ctx.request.url)) throw new InsecureTransportError(`refusing to send credentials over plain http to ${new URL(ctx.request.url).origin}; use https, or pass allowInsecureHttp: true to createClient to allow it`);
+			if (!this.#allowInsecureHttp && (ctx.request.headers.has("Authorization") || this.#credentials === "include") && isInsecureRemote(ctx.request.url)) throw new InsecureTransportError(`refusing to send credentials (an Authorization header or cookies) over plain http to ${new URL(ctx.request.url).origin}; use https, or pass allowInsecureHttp: true to createClient to allow it`);
 			try {
 				return await (this.#fetch ?? globalThis.fetch)(ctx.request);
 			} catch (error) {
@@ -928,23 +958,45 @@ var CrudClient = class {
 			resource: call.resource,
 			op: call.op,
 			recordId: call.recordId,
-			scope: await cacheScope(token),
+			scope: explicit ?? await cacheScope(token),
+			...explicit === void 0 ? {} : { cacheScope: explicit },
 			apiVersion: call.apiVersion,
 			signal
 		});
 	}
 	/** Sends `call`, retrying once with a refreshed token after a `401`; throws on `>= 400`. */
 	async #send(call, signal) {
+		const explicit = await this.#explicitScope();
 		const token = await this.#token(false);
-		let response = await this.#dispatch(call, token, signal);
+		let response = await this.#dispatch(call, token, explicit, signal);
 		if (response.status === 401 && this.#tokenProvider !== void 0) {
 			const fresh = await this.#token(true);
 			if (fresh !== null && fresh !== token) {
 				await response.body?.cancel();
-				response = await this.#dispatch(call, fresh, signal);
+				response = await this.#dispatch(call, fresh, explicit, signal);
+			}
+		}
+		let callbackError;
+		let callbackFailed = false;
+		if (response.status === 401 && this.#onUnauthorized !== void 0) try {
+			await this.#onUnauthorized(response.clone());
+		} catch (error) {
+			callbackFailed = true;
+			callbackError = error;
+		}
+		if (response.status >= 400) {
+			const problem = await problemFromResponse(response);
+			if (callbackFailed) {
+				if (problem.cause === void 0) problem.cause = callbackError;
+				else Object.defineProperty(problem, "onUnauthorizedError", {
+					value: callbackError,
+					enumerable: false,
+					configurable: true,
+					writable: true
+				});
 			}
+			throw problem;
 		}
-		if (response.status >= 400) throw await problemFromResponse(response);
 		return response;
 	}
 	async #getJson(url, catalog) {
@@ -1004,4 +1056,4 @@ function createClient(options) {
 //#endregion
 export { Unauthorized as A, ManifestError as C, RateLimited as D, ProblemError as E, ValidationFailed as M, problemFromResponse as N, ResponseError as O, composeMiddleware as P, Locked as S, PreconditionFailed as T, ConnectionFailed as _, encodeParams as a, InsecureTransportError as b, CATALOG_PATH as c, loadManifest as d, manifestUrlFromCatalog as f, ClientError as g, CapabilityError as h, buildQuery as i, UnknownResourceError as j, ServerError as k, PROFILE as l, BadRequest as m, ResourceClient as n, formatScalar as o, parseManifest as p, createClient as r, quote as s, CrudClient as t, findResource as u, CrudError as v, NotFound as w, InvalidQueryError as x, Forbidden as y };
 
-//# sourceMappingURL=client-CUFoB5IC.mjs.map
+//# sourceMappingURL=client-CzbFW5YG.mjs.map

package/dist/client-CzbFW5YG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-CzbFW5YG.mjs","names":["isObject","tokenScope"],"sources":["../src/interfaces.ts","../src/errors.ts","../src/manifest.ts","../src/query.ts","../src/client.ts"],"sourcesContent":["/**\n * Contracts shared by the client core (TS1) and the cache layer (TS2).\n * Fixed in TS0 (plan interface I3): change them only through the plan.\n */\n\n/** A value or a promise of it. */\nexport type MaybePromise<T> = T | Promise<T>;\n\n/** What a request does, as classified by the client. */\nexport type Op =\n  | \"manifest\"\n  | \"list\"\n  | \"record\"\n  | \"filters\"\n  | \"stats\"\n  | \"predict\"\n  | \"revisions\"\n  | \"create\"\n  | \"update\"\n  | \"delete\"\n  | \"bulk_update\"\n  | \"bulk_delete\"\n  | \"clone\"\n  | \"draft\"\n  | \"publish\"\n  | \"restore\"\n  | \"events\";\n\n/**\n * One stored `200` response. Times are epoch milliseconds (`Date.now()`).\n * Structured-clone safe, so IndexedDB can store it as is.\n */\nexport interface CacheEntry {\n  readonly status: number;\n  readonly headers: ReadonlyArray<readonly [string, string]>;\n  /** JSON text; the SDK only caches JSON. */\n  readonly body: string;\n  readonly storedAt: number;\n  /** `<= storedAt` means \"always revalidate\". */\n  readonly freshUntil: number;\n  /** End of the stale-while-revalidate window (`>= freshUntil`). */\n  readonly staleUntil: number;\n  readonly etag?: string;\n}\n\n/**\n * Cache backend. Keys are opaque, slash-separated strings built by\n * `./cache`'s `cacheKey`\n * (`v1/{resource}/{kind}/{subject}/{apiVersion}/{scope}/{query}`, with `_`\n * when there is no apiVersion).\n * `ttlMs` is how long the backend may keep the entry (undefined = backend\n * default); freshness lives in `CacheEntry`. `clear(prefix)` removes every\n * key starting with `prefix`; `clear()` removes everything the store owns.\n * Methods may be sync or async. They must not reject for a missing key\n * (`get` resolves `undefined`), and a failing backend must not fail the\n * request: the cache layer swallows store errors and treats them as a miss.\n */\nexport interface CacheStore {\n  get(key: string): MaybePromise<CacheEntry | undefined>;\n  set(key: string, entry: CacheEntry, ttlMs?: number): MaybePromise<void>;\n  delete(key: string): MaybePromise<void>;\n  clear(prefix?: string): MaybePromise<void>;\n}\n\n/**\n * What the client knows about a request that a bare `Request` does not. The\n * client builds it for every call; middleware read it, so they never parse\n * URLs or read Authorization.\n */\nexport interface RequestContext {\n  /** The request about to be sent; replace it by passing a new context to `next`. */\n  readonly request: Request;\n  /** Manifest name; `undefined` for the manifest document itself. */\n  readonly resource: string | undefined;\n  readonly op: Op;\n  /** The record the request targets, when it targets one. */\n  readonly recordId: number | undefined;\n  /**\n   * \"anon\", or the first 32 hex characters of the SHA-256 of the\n   * Authorization credential actually sent.\n   */\n  readonly scope: string;\n  /**\n   * Set by the client only when `createClient({ cacheScope })` is used: the\n   * caller scope the cache keys by (opaque and key-safe, internally\n   * namespaced; it equals `scope`). When absent the cache derives the scope\n   * from the Authorization header. A middleware that builds a new context must\n   * carry it through (`{ ...ctx, request }`), or the cache falls back to the\n   * header scope.\n   */\n  readonly cacheScope?: string;\n  /**\n   * The resource's `api_version` from the manifest, or `null` when it has\n   * none. Part of the cache key, so versions never share entries (the cache\n   * layer renders `null` as `_`).\n   */\n  readonly apiVersion: string | null;\n  readonly signal: AbortSignal | undefined;\n}\n\n/** Calls the next middleware, or the network when none is left. */\nexport type Next = (ctx: RequestContext) => Promise<Response>;\n\n/**\n * Onion middleware. In `chain = [a, b]`, `a` is outermost: the request runs\n * a -> b -> fetch and the response returns fetch -> b -> a. A middleware may\n * replace `ctx.request` (pass `{ ...ctx, request }` to `next`), return\n * without calling `next` (short-circuit, e.g. a fresh cache hit), or replace\n * the response (e.g. a `304` rebuilt from the cache). It must not consume\n * `response.body` unless it returns a different `Response`; use\n * `response.clone()` to read it.\n */\nexport type Middleware = (ctx: RequestContext, next: Next) => Promise<Response>;\n\n/**\n * Returns the bearer token, or `null`/`undefined` for an anonymous call.\n * `refresh: true` is passed once after a `401`, to force a new token.\n */\nexport type TokenProvider = (opts: {\n  readonly refresh: boolean;\n}) => MaybePromise<string | null | undefined>;\n\n/** One record-mutation event from `GET {basePath}/events` (the server's event envelope). */\nexport interface CrudEvent {\n  /** The server's event label (e.g. \"hero\"), not the manifest name. */\n  readonly resource: string;\n  readonly recordId: number;\n  readonly action: \"create\" | \"update\" | \"delete\" | \"restore\";\n  /** The read view of the record after the change. */\n  readonly snapshot: Readonly<Record<string, unknown>>;\n  /** ISO 8601, UTC. */\n  readonly timestamp: string;\n}\n\n/**\n * Folds `chain` (outermost first) around `terminal`, usually the network\n * `fetch`, into one `Next`. Each middleware's `next` is the rest of the\n * chain; an empty chain is `terminal`. A throwing middleware yields a\n * rejected promise.\n */\nexport function composeMiddleware(\n  chain: readonly Middleware[],\n  terminal: Next,\n): Next {\n  const dispatch = async (\n    index: number,\n    ctx: RequestContext,\n  ): Promise<Response> => {\n    const middleware = chain[index];\n    if (middleware === undefined) {\n      return terminal(ctx);\n    }\n    return middleware(ctx, (next) => dispatch(index + 1, next));\n  };\n  return (ctx) => dispatch(0, ctx);\n}\n","/**\n * Error hierarchy: client-side errors and RFC 9457 problem details (ADR-0004).\n * Mirrors the Python SDK class for class.\n */\n\n/** Base class of every error this package throws on purpose. */\nexport class CrudError extends Error {\n  constructor(message: string, options?: ErrorOptions) {\n    super(message, options);\n    this.name = new.target.name;\n  }\n}\n\n/** The call was refused before any request was sent. */\nexport class ClientError extends CrudError {}\n\n/** The resource does not support the operation (manifest capability or path missing). */\nexport class CapabilityError extends ClientError {}\n\n/** A filter, sort or paging argument is not valid for the resource. */\nexport class InvalidQueryError extends ClientError {}\n\n/**\n * A request carrying an `Authorization` header was about to go over plain\n * `http:` to a non-loopback host. Nothing was sent. Use `https:`, or opt in\n * with `allowInsecureHttp`.\n */\nexport class InsecureTransportError extends ClientError {}\n\n/** The discovery document or the manifest is missing, unusable or of an unknown version. */\nexport class ManifestError extends ClientError {}\n\n/** The manifest lists no such resource for this caller. */\nexport class UnknownResourceError extends ClientError {}\n\n/** A successful response whose body is not the JSON the client expects; `cause` holds the parse error. */\nexport class ResponseError extends CrudError {}\n\n/** The request never produced a response; `cause` holds the transport error. */\nexport class ConnectionFailed extends CrudError {}\n\n/** One normalized validation error (`422`). */\nexport interface ProblemDetail {\n  readonly loc: readonly (string | number)[];\n  readonly msg: string;\n  readonly type: string;\n}\n\n/** Members of a {@link ProblemError}. */\nexport interface ProblemInit {\n  readonly status: number;\n  readonly title: string;\n  readonly detail?: string | undefined;\n  readonly type?: string | undefined;\n  readonly instance?: string | undefined;\n  readonly errors?: readonly ProblemDetail[] | undefined;\n  readonly headers?: Headers | undefined;\n  readonly response?: Response | undefined;\n}\n\nconst NO_TYPE = \"about:blank\";\n\n/** An error response, as RFC 9457 problem details. */\nexport class ProblemError extends CrudError {\n  readonly status: number;\n  readonly title: string;\n  readonly detail: string | undefined;\n  readonly type: string;\n  readonly instance: string | undefined;\n  readonly errors: readonly ProblemDetail[];\n  readonly headers: Headers;\n  readonly response: Response | undefined;\n\n  constructor(init: ProblemInit) {\n    const errors = init.errors ?? [];\n    let message = `${init.status} ${init.title}`;\n    if (init.detail) {\n      message += `: ${init.detail}`;\n    } else if (errors.length > 0) {\n      message += `: ${errors.map((e) => `${e.loc.join(\".\")}: ${e.msg}`).join(\"; \")}`;\n    }\n    super(message);\n    this.status = init.status;\n    this.title = init.title;\n    this.detail = init.detail;\n    this.type = init.type ?? NO_TYPE;\n    this.instance = init.instance;\n    this.errors = errors;\n    this.headers = init.headers ?? new Headers();\n    this.response = init.response;\n  }\n}\n\n/** 400. */\nexport class BadRequest extends ProblemError {}\n\n/** 401; `wwwAuthenticate` keeps the challenge. */\nexport class Unauthorized extends ProblemError {\n  get wwwAuthenticate(): string | undefined {\n    return this.headers.get(\"www-authenticate\") ?? undefined;\n  }\n}\n\n/** 403. */\nexport class Forbidden extends ProblemError {}\n\n/** 404. */\nexport class NotFound extends ProblemError {}\n\n/** 412: a stale `If-Match`. */\nexport class PreconditionFailed extends ProblemError {}\n\n/** 422; `errors` holds normalized `{loc, msg, type}` entries. */\nexport class ValidationFailed extends ProblemError {}\n\n/** 423. */\nexport class Locked extends ProblemError {}\n\n/** 429; `retryAfter` is the `Retry-After` header in seconds, when it is a number. */\nexport class RateLimited extends ProblemError {\n  get retryAfter(): number | undefined {\n    const raw = this.headers.get(\"retry-after\");\n    if (raw === null || raw.trim() === \"\") {\n      return undefined;\n    }\n    const seconds = Number(raw);\n    return Number.isFinite(seconds) && seconds >= 0 ? seconds : undefined;\n  }\n}\n\n/** 5xx. */\nexport class ServerError extends ProblemError {}\n\nconst BY_STATUS: ReadonlyMap<number, typeof ProblemError> = new Map([\n  [400, BadRequest],\n  [401, Unauthorized],\n  [403, Forbidden],\n  [404, NotFound],\n  [412, PreconditionFailed],\n  [422, ValidationFailed],\n  [423, Locked],\n  [429, RateLimited],\n]);\n\n// Python's `http.HTTPStatus` phrases, so both SDKs synthesize the same title.\nconst PHRASES: ReadonlyMap<number, string> = new Map([\n  [100, \"Continue\"],\n  [101, \"Switching Protocols\"],\n  [102, \"Processing\"],\n  [103, \"Early Hints\"],\n  [200, \"OK\"],\n  [201, \"Created\"],\n  [202, \"Accepted\"],\n  [203, \"Non-Authoritative Information\"],\n  [204, \"No Content\"],\n  [205, \"Reset Content\"],\n  [206, \"Partial Content\"],\n  [207, \"Multi-Status\"],\n  [208, \"Already Reported\"],\n  [226, \"IM Used\"],\n  [300, \"Multiple Choices\"],\n  [301, \"Moved Permanently\"],\n  [302, \"Found\"],\n  [303, \"See Other\"],\n  [304, \"Not Modified\"],\n  [305, \"Use Proxy\"],\n  [307, \"Temporary Redirect\"],\n  [308, \"Permanent Redirect\"],\n  [400, \"Bad Request\"],\n  [401, \"Unauthorized\"],\n  [402, \"Payment Required\"],\n  [403, \"Forbidden\"],\n  [404, \"Not Found\"],\n  [405, \"Method Not Allowed\"],\n  [406, \"Not Acceptable\"],\n  [407, \"Proxy Authentication Required\"],\n  [408, \"Request Timeout\"],\n  [409, \"Conflict\"],\n  [410, \"Gone\"],\n  [411, \"Length Required\"],\n  [412, \"Precondition Failed\"],\n  [413, \"Content Too Large\"],\n  [414, \"URI Too Long\"],\n  [415, \"Unsupported Media Type\"],\n  [416, \"Range Not Satisfiable\"],\n  [417, \"Expectation Failed\"],\n  [418, \"I'm a Teapot\"],\n  [421, \"Misdirected Request\"],\n  [422, \"Unprocessable Content\"],\n  [423, \"Locked\"],\n  [424, \"Failed Dependency\"],\n  [425, \"Too Early\"],\n  [426, \"Upgrade Required\"],\n  [428, \"Precondition Required\"],\n  [429, \"Too Many Requests\"],\n  [431, \"Request Header Fields Too Large\"],\n  [451, \"Unavailable For Legal Reasons\"],\n  [500, \"Internal Server Error\"],\n  [501, \"Not Implemented\"],\n  [502, \"Bad Gateway\"],\n  [503, \"Service Unavailable\"],\n  [504, \"Gateway Timeout\"],\n  [505, \"HTTP Version Not Supported\"],\n  [506, \"Variant Also Negotiates\"],\n  [507, \"Insufficient Storage\"],\n  [508, \"Loop Detected\"],\n  [510, \"Not Extended\"],\n  [511, \"Network Authentication Required\"],\n]);\n\ntype Obj = Record<string, unknown>;\n\nconst isObject = (value: unknown): value is Obj =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nfunction normalizeErrors(items: readonly unknown[]): ProblemDetail[] {\n  return items.map((item) => {\n    if (isObject(item)) {\n      return {\n        loc: Array.isArray(item[\"loc\"])\n          ? (item[\"loc\"] as (string | number)[])\n          : [],\n        msg: String(item[\"msg\"] ?? \"\"),\n        type: String(item[\"type\"] ?? \"\"),\n      };\n    }\n    return { loc: [], msg: String(item), type: \"\" };\n  });\n}\n\n/**\n * Builds the matching `ProblemError` subclass from an error response. A body\n * that is not a JSON object yields a synthesized problem from the status\n * phrase. Reads a clone, so `response.body` stays readable.\n */\nexport async function problemFromResponse(\n  response: Response,\n): Promise<ProblemError> {\n  const status = response.status;\n  const phrase = PHRASES.get(status) ?? \"Error\";\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(await response.clone().text());\n  } catch {\n    parsed = undefined;\n  }\n  const body: Obj = isObject(parsed) ? parsed : {};\n  const rawDetail = body[\"detail\"];\n  const rawErrors = Array.isArray(rawDetail) ? rawDetail : body[\"errors\"];\n  const Cls =\n    BY_STATUS.get(status) ?? (status >= 500 ? ServerError : ProblemError);\n  const instance = body[\"instance\"];\n  return new Cls({\n    status,\n    title: String(body[\"title\"] || phrase),\n    detail: typeof rawDetail === \"string\" ? rawDetail : undefined,\n    type: String(body[\"type\"] || NO_TYPE),\n    instance: typeof instance === \"string\" ? instance : undefined,\n    errors: Array.isArray(rawErrors) ? normalizeErrors(rawErrors) : [],\n    headers: response.headers,\n    response,\n  });\n}\n","/**\n * Typed models of the CRUD manifest (v1) and discovery via the api-catalog.\n * Members keep their wire names (`skip_param`, `max_age`, ...). Members this\n * version does not know are ignored, as the manifest spec requires.\n */\nimport { ManifestError } from \"./errors.ts\";\n\nexport const PROFILE = \"https://craftainer.github.io/schemas/crud-manifest/v1\";\nexport const CATALOG_PATH = \"/.well-known/api-catalog\";\n\n/** A JSON object. */\nexport type JsonObject = Record<string, unknown>;\n\n/** One filterable and sortable field. */\nexport interface FieldSpec {\n  readonly name: string;\n  readonly value_type: string;\n  readonly filter_ops: readonly string[];\n  readonly sortable: boolean;\n  readonly choices: readonly string[] | null;\n  readonly numeric: boolean;\n  readonly categorical: boolean;\n  readonly read_only: boolean;\n  readonly required: boolean;\n}\n\n/** Offset paging parameters and bounds. */\nexport interface Pagination {\n  readonly style: string;\n  readonly skip_param: string;\n  readonly limit_param: string;\n  readonly sort_param: string;\n  readonly default_limit: number;\n  readonly max_limit: number;\n  readonly total: boolean;\n}\n\n/** The SSE stream of a resource. */\nexport interface EventsSpec {\n  readonly transport: string;\n  readonly path: string;\n  /** The server-side event label (not the manifest name). */\n  readonly resource: string;\n  readonly resume_param: string;\n  readonly replay: string;\n  readonly keepalive_seconds: number;\n  readonly actions: readonly string[];\n}\n\n/** What the resource supports. */\nexport interface Capabilities {\n  readonly bulk_update: boolean;\n  readonly bulk_delete: boolean;\n  readonly clone: boolean;\n  readonly draft_publish: boolean;\n  readonly archive_restore: boolean;\n  readonly revisions: boolean;\n  readonly events: EventsSpec | null;\n  readonly stats: boolean;\n  readonly predict: boolean;\n  readonly conditional_requests: boolean;\n  readonly owner_scoped: boolean;\n  readonly schedulable: boolean;\n}\n\n/** Authentication scheme and roles. */\nexport interface AuthSpec {\n  readonly scheme: string;\n  readonly oidc_discovery_url: string | null;\n  readonly public_read: boolean;\n  readonly read_roles: readonly string[];\n  readonly write_roles: readonly string[];\n  readonly delete_roles: readonly string[];\n}\n\n/** The manifest `cache` hints of a resource. */\nexport interface CacheHints {\n  readonly etag: boolean;\n  readonly max_age: number;\n  readonly stats_ttl: number | null;\n  readonly stale_while_revalidate: number;\n  readonly list_etag: string | null;\n  readonly record_etag: string | null;\n  readonly revalidate_only: boolean;\n}\n\n/** JSON Schemas of the record views (plain objects). */\nexport interface Schemas {\n  readonly read: JsonObject;\n  readonly create: JsonObject;\n  readonly update: JsonObject;\n  readonly draft: JsonObject | null;\n}\n\n/** One resource (`name` + `api_version`). */\nexport interface Resource {\n  readonly name: string;\n  readonly title: string;\n  readonly api_version: string;\n  readonly base_path: string;\n  readonly formats: Readonly<Record<string, string>>;\n  readonly id_field: string;\n  readonly schemas: Schemas;\n  readonly fields: readonly FieldSpec[];\n  readonly pagination: Pagination;\n  readonly capabilities: Capabilities;\n  readonly paths: Readonly<Record<string, string>>;\n  readonly bulk: { readonly max_matched: number };\n  readonly auth: AuthSpec;\n  readonly cache: CacheHints;\n}\n\n/** The manifest document, as filtered to the caller. */\nexport interface Manifest {\n  readonly manifest_version: string;\n  readonly service: { readonly name: string; readonly version: string };\n  readonly resources: readonly Resource[];\n}\n\nconst isObject = (value: unknown): value is JsonObject =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nfunction bad(where: string, key: string, what: string): never {\n  throw new ManifestError(`${where}.${key}: ${what}`);\n}\n\nfunction str(obj: JsonObject, key: string, where: string): string {\n  const value = obj[key];\n  return typeof value === \"string\"\n    ? value\n    : bad(where, key, \"missing or not a string\");\n}\n\nfunction bool(obj: JsonObject, key: string, where: string): boolean {\n  const value = obj[key];\n  return typeof value === \"boolean\"\n    ? value\n    : bad(where, key, \"missing or not a boolean\");\n}\n\nfunction num(obj: JsonObject, key: string, where: string): number {\n  const value = obj[key];\n  return typeof value === \"number\" && Number.isFinite(value)\n    ? value\n    : bad(where, key, \"missing or not a number\");\n}\n\nfunction int(obj: JsonObject, key: string, where: string): number {\n  const value = num(obj, key, where);\n  return Number.isInteger(value) ? value : bad(where, key, \"not an integer\");\n}\n\nfunction obj(parent: JsonObject, key: string, where: string): JsonObject {\n  const value = parent[key];\n  return isObject(value) ? value : bad(where, key, \"missing or not an object\");\n}\n\nfunction list(\n  parent: JsonObject,\n  key: string,\n  where: string,\n): readonly unknown[] {\n  const value = parent[key];\n  return Array.isArray(value)\n    ? value\n    : bad(where, key, \"missing or not a list\");\n}\n\nfunction strs(\n  parent: JsonObject,\n  key: string,\n  where: string,\n): readonly string[] {\n  const items = list(parent, key, where);\n  return items.every((item) => typeof item === \"string\")\n    ? (items as readonly string[])\n    : bad(where, key, \"expected a list of strings\");\n}\n\n/** A member that may be absent or `null`. */\nfunction opt<T>(\n  parent: JsonObject,\n  key: string,\n  where: string,\n  read: (parent: JsonObject, key: string, where: string) => T,\n): T | null {\n  return parent[key] === undefined || parent[key] === null\n    ? null\n    : read(parent, key, where);\n}\n\nfunction stringMap(\n  parent: JsonObject,\n  key: string,\n  where: string,\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const [k, v] of Object.entries(obj(parent, key, where))) {\n    if (typeof v === \"string\") {\n      out[k] = v;\n    }\n  }\n  return out;\n}\n\nfunction objects(parent: JsonObject, key: string, where: string): JsonObject[] {\n  return list(parent, key, where).map((item, i) =>\n    isObject(item) ? item : bad(`${where}.${key}`, `[${i}]`, \"not an object\"),\n  );\n}\n\nfunction parseField(o: JsonObject, w: string): FieldSpec {\n  return {\n    name: str(o, \"name\", w),\n    value_type: str(o, \"value_type\", w),\n    filter_ops: strs(o, \"filter_ops\", w),\n    sortable: bool(o, \"sortable\", w),\n    choices: opt(o, \"choices\", w, strs),\n    numeric: bool(o, \"numeric\", w),\n    categorical: bool(o, \"categorical\", w),\n    read_only: bool(o, \"read_only\", w),\n    required: bool(o, \"required\", w),\n  };\n}\n\nfunction parseEvents(o: JsonObject, w: string): EventsSpec {\n  return {\n    transport: str(o, \"transport\", w),\n    path: str(o, \"path\", w),\n    resource: str(o, \"resource\", w),\n    resume_param: str(o, \"resume_param\", w),\n    replay: str(o, \"replay\", w),\n    keepalive_seconds: num(o, \"keepalive_seconds\", w),\n    actions: strs(o, \"actions\", w),\n  };\n}\n\nfunction parseCapabilities(o: JsonObject, w: string): Capabilities {\n  return {\n    bulk_update: bool(o, \"bulk_update\", w),\n    bulk_delete: bool(o, \"bulk_delete\", w),\n    clone: bool(o, \"clone\", w),\n    draft_publish: bool(o, \"draft_publish\", w),\n    archive_restore: bool(o, \"archive_restore\", w),\n    revisions: bool(o, \"revisions\", w),\n    events: opt(o, \"events\", w, (p, k, ww) =>\n      parseEvents(obj(p, k, ww), `${ww}.${k}`),\n    ),\n    stats: bool(o, \"stats\", w),\n    predict: bool(o, \"predict\", w),\n    conditional_requests: bool(o, \"conditional_requests\", w),\n    owner_scoped: bool(o, \"owner_scoped\", w),\n    schedulable: bool(o, \"schedulable\", w),\n  };\n}\n\nfunction parseResource(o: JsonObject, w: string): Resource {\n  const schemas = obj(o, \"schemas\", w);\n  const pagination = obj(o, \"pagination\", w);\n  const auth = obj(o, \"auth\", w);\n  const cache = obj(o, \"cache\", w);\n  const sw = `${w}.schemas`;\n  return {\n    name: str(o, \"name\", w),\n    title: str(o, \"title\", w),\n    api_version: str(o, \"api_version\", w),\n    base_path: str(o, \"base_path\", w),\n    formats: stringMap(o, \"formats\", w),\n    id_field: str(o, \"id_field\", w),\n    schemas: {\n      read: obj(schemas, \"read\", sw),\n      create: obj(schemas, \"create\", sw),\n      update: obj(schemas, \"update\", sw),\n      draft: opt(schemas, \"draft\", sw, obj),\n    },\n    fields: objects(o, \"fields\", w).map((f, i) =>\n      parseField(f, `${w}.fields[${i}]`),\n    ),\n    pagination: {\n      style: str(pagination, \"style\", w),\n      skip_param: str(pagination, \"skip_param\", w),\n      limit_param: str(pagination, \"limit_param\", w),\n      sort_param: str(pagination, \"sort_param\", w),\n      default_limit: int(pagination, \"default_limit\", w),\n      max_limit: int(pagination, \"max_limit\", w),\n      total: bool(pagination, \"total\", w),\n    },\n    capabilities: parseCapabilities(\n      obj(o, \"capabilities\", w),\n      `${w}.capabilities`,\n    ),\n    paths: stringMap(o, \"paths\", w),\n    bulk: { max_matched: int(obj(o, \"bulk\", w), \"max_matched\", `${w}.bulk`) },\n    auth: {\n      scheme: str(auth, \"scheme\", w),\n      oidc_discovery_url: opt(auth, \"oidc_discovery_url\", w, str),\n      public_read: bool(auth, \"public_read\", w),\n      read_roles: strs(auth, \"read_roles\", w),\n      write_roles: strs(auth, \"write_roles\", w),\n      delete_roles: strs(auth, \"delete_roles\", w),\n    },\n    cache: {\n      etag: bool(cache, \"etag\", w),\n      max_age: int(cache, \"max_age\", w),\n      stats_ttl: opt(cache, \"stats_ttl\", w, int),\n      stale_while_revalidate: int(cache, \"stale_while_revalidate\", w),\n      list_etag: opt(cache, \"list_etag\", w, str),\n      record_etag: opt(cache, \"record_etag\", w, str),\n      revalidate_only: bool(cache, \"revalidate_only\", w),\n    },\n  };\n}\n\n/** Parses a manifest document; unknown members are ignored, unknown versions refused. */\nexport function parseManifest(document: unknown): Manifest {\n  if (!isObject(document)) {\n    throw new ManifestError(\"the manifest is not a JSON object\");\n  }\n  const version = str(document, \"manifest_version\", \"manifest\");\n  if (version !== \"1\") {\n    throw new ManifestError(`unsupported manifest_version \"${version}\"`);\n  }\n  const service = obj(document, \"service\", \"manifest\");\n  return {\n    manifest_version: version,\n    service: {\n      name: str(service, \"name\", \"manifest.service\"),\n      version: str(service, \"version\", \"manifest.service\"),\n    },\n    resources: objects(document, \"resources\", \"manifest\").map((r, i) =>\n      parseResource(r, `resources[${i}]`),\n    ),\n  };\n}\n\n/**\n * The resource called `name`: the one with `apiVersion` when given, else the\n * highest `api_version` (`v2` beats `v1`); `undefined` when there is none.\n */\nexport function findResource(\n  manifest: Manifest,\n  name: string,\n  apiVersion?: string,\n): Resource | undefined {\n  // The manifest spec's `v<N>`; anything else (`v2beta`, `x5`, `next`) ranks lowest.\n  const rank = (r: Resource): number =>\n    Number(/^v(\\d+)$/.exec(r.api_version)?.[1] ?? 0);\n  let best: Resource | undefined;\n  for (const r of manifest.resources) {\n    if (\n      r.name === name &&\n      (apiVersion === undefined || r.api_version === apiVersion)\n    ) {\n      if (best === undefined || rank(r) > rank(best)) {\n        best = r;\n      }\n    }\n  }\n  return best;\n}\n\n/** The absolute manifest URL: the first `describedby` link with the manifest profile. */\nexport function manifestUrlFromCatalog(\n  linkset: unknown,\n  catalogUrl: string,\n): string {\n  const entries = isObject(linkset) ? linkset[\"linkset\"] : undefined;\n  for (const entry of Array.isArray(entries) ? entries : []) {\n    const links = isObject(entry) ? entry[\"describedby\"] : undefined;\n    for (const link of Array.isArray(links) ? links : []) {\n      if (\n        isObject(link) &&\n        link[\"profile\"] === PROFILE &&\n        typeof link[\"href\"] === \"string\"\n      ) {\n        const url = new URL(link[\"href\"], catalogUrl);\n        if (url.origin !== new URL(catalogUrl).origin) {\n          // The client sends its bearer token to this URL: stay on the server's origin.\n          throw new ManifestError(\n            `the api-catalog points at another origin (${url.origin}); pass manifestUrl to use it`,\n          );\n        }\n        return url.href;\n      }\n    }\n  }\n  throw new ManifestError(\n    `the api-catalog has no describedby link with profile ${PROFILE}`,\n  );\n}\n\n/** Fetches a JSON document; `catalog` marks the api-catalog request (kept out of the manifest cache). */\nexport type GetJson = (url: string, catalog: boolean) => Promise<unknown>;\n\n/**\n * Loads and parses the manifest, via api-catalog discovery from `baseUrl` or\n * a direct `manifestUrl`.\n */\nexport async function loadManifest(\n  getJson: GetJson,\n  baseUrl: string,\n  manifestUrl?: string,\n): Promise<Manifest> {\n  let url = manifestUrl;\n  if (url === undefined) {\n    const catalogUrl = new URL(CATALOG_PATH, baseUrl).href;\n    url = manifestUrlFromCatalog(await getJson(catalogUrl, true), catalogUrl);\n  }\n  return parseManifest(await getJson(url, false));\n}\n","/**\n * Query-string builder with `crud_query` semantics, validated against the\n * manifest fields. Produces the same bytes as the Python SDK.\n */\nimport { InvalidQueryError } from \"./errors.ts\";\nimport type { FieldSpec } from \"./manifest.ts\";\n\nconst MAX_REGEX_LENGTH = 200;\n\n/** The part of a manifest field the builder needs. */\nexport type QueryField = Pick<\n  FieldSpec,\n  \"name\" | \"value_type\" | \"filter_ops\" | \"sortable\" | \"choices\"\n>;\n\n/** Filter arguments: `field` (equality, emitted bare) or `field__op` -> value. */\nexport type Filters = Readonly<Record<string, unknown>>;\n\n/** `\"name,-other\"` or `[\"name\", \"-other\"]`. */\nexport type Sort = string | readonly string[];\n\n/** Everything {@link buildQuery} takes beside the fields. */\nexport interface QueryParams {\n  readonly recordId?: number | undefined;\n  readonly filters?: Filters | undefined;\n  readonly sort?: Sort | undefined;\n  readonly skip?: number | undefined;\n  readonly limit?: number | undefined;\n  readonly maxLimit?: number | undefined;\n  readonly skipParam?: string | undefined;\n  readonly limitParam?: string | undefined;\n  readonly sortParam?: string | undefined;\n  readonly includeArchived?: boolean | undefined;\n  /**\n   * Only rows with `archived_at` set (list only; implies `include_archived`).\n   * Emitted only when `true`; combining `true` with `includeArchived: false`\n   * throws `InvalidQueryError`, as the server answers 422.\n   */\n  readonly onlyArchived?: boolean | undefined;\n  readonly includeUnpublished?: boolean | undefined;\n}\n\n/** Percent-encodes everything but the RFC 3986 unreserved characters `A-Za-z0-9-._~`. */\nexport function quote(text: string): string {\n  return encodeURIComponent(text).replace(\n    /[!'()*]/g,\n    (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`,\n  );\n}\n\n/**\n * {@link quote} for caller input: a lone surrogate (an emoji cut in half)\n * cannot be UTF-8 encoded, which is an invalid argument, not a `URIError`.\n */\nfunction encode(text: string): string {\n  try {\n    return quote(text);\n  } catch (error) {\n    // `encodeURIComponent` throws only `URIError`.\n    throw new InvalidQueryError(\n      \"a query value is not well-formed Unicode (lone surrogate)\",\n      { cause: error },\n    );\n  }\n}\n\n/** Joins already-stringified pairs, encoding keys and values. */\nexport function encodeParams(\n  pairs: readonly (readonly [string, string])[],\n): string {\n  return pairs.map(([k, v]) => `${encode(k)}=${encode(v)}`).join(\"&\");\n}\n\nfunction formatDatetime(value: Date): string | undefined {\n  if (Number.isNaN(value.getTime())) {\n    return undefined;\n  }\n  const iso = value.toISOString();\n  if (iso.length !== 24) {\n    return undefined; // expanded years (outside 0000-9999)\n  }\n  const millis = iso.slice(20, 23).replace(/0+$/, \"\");\n  return millis === \"\"\n    ? `${iso.slice(0, 19)}Z`\n    : `${iso.slice(0, 19)}.${millis}Z`;\n}\n\nfunction formatDate(value: string): string | undefined {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(value)) {\n    return undefined;\n  }\n  const parsed = new Date(`${value}T00:00:00Z`);\n  return Number.isNaN(parsed.getTime()) ||\n    parsed.toISOString().slice(0, 10) !== value\n    ? undefined\n    : value;\n}\n\nfunction scalarText(kind: string, value: unknown): string | undefined {\n  switch (kind) {\n    case \"integer\":\n      return typeof value === \"number\" && Number.isSafeInteger(value)\n        ? String(value)\n        : undefined;\n    case \"number\":\n      return typeof value === \"number\" && Number.isFinite(value)\n        ? String(value)\n        : undefined;\n    case \"boolean\":\n      return typeof value === \"boolean\" ? String(value) : undefined;\n    case \"date\":\n      return typeof value === \"string\" ? formatDate(value) : undefined;\n    case \"datetime\":\n      return value instanceof Date ? formatDatetime(value) : undefined;\n    default:\n      return typeof value === \"string\" ? value : undefined;\n  }\n}\n\n/**\n * Wire form of one value for `field`; throws `InvalidQueryError` on a type\n * mismatch. Dates are `YYYY-MM-DD` strings, datetimes `Date`s (UTC, with\n * millisecond precision, trailing zeros trimmed).\n */\nexport function formatScalar(field: QueryField, value: unknown): string {\n  const text = scalarText(field.value_type, value);\n  if (text === undefined) {\n    throw new InvalidQueryError(\n      `field \"${field.name}\" (${field.value_type}) cannot take ${String(value)}`,\n    );\n  }\n  if (\n    field.value_type === \"enum\" &&\n    field.choices !== null &&\n    !field.choices.includes(text)\n  ) {\n    throw new InvalidQueryError(\n      `field \"${field.name}\" accepts only ${JSON.stringify(field.choices)}, not \"${text}\"`,\n    );\n  }\n  return text;\n}\n\nfunction filterPair(\n  field: QueryField,\n  op: string,\n  value: unknown,\n): [string, string] {\n  const key = op === \"eq\" ? field.name : `${field.name}__${op}`;\n  if (op === \"in\") {\n    if (!Array.isArray(value) || value.length === 0) {\n      throw new InvalidQueryError(`\"${key}\" takes a non-empty array`);\n    }\n    const parts = value.map((item: unknown) => formatScalar(field, item));\n    if (parts.some((part) => part.includes(\",\"))) {\n      throw new InvalidQueryError(\n        `\"${key}\": a value contains a comma, which separates the list`,\n      );\n    }\n    return [key, parts.map((part) => encode(part)).join(\",\")];\n  }\n  const text = formatScalar(field, value);\n  if (op === \"regex\" && [...text].length > MAX_REGEX_LENGTH) {\n    throw new InvalidQueryError(\n      `\"${key}\": a regex is limited to ${MAX_REGEX_LENGTH} characters`,\n    );\n  }\n  return [key, encode(text)];\n}\n\nconst compare = (a: string, b: string): number => (a < b ? -1 : a > b ? 1 : 0);\n\nfunction filterPairs(\n  fields: ReadonlyMap<string, QueryField>,\n  filters: Filters,\n): [string, string][] {\n  const parsed = new Map<\n    string,\n    { name: string; op: string; pair: [string, string] }\n  >();\n  for (const [rawKey, value] of Object.entries(filters)) {\n    const at = rawKey.lastIndexOf(\"__\");\n    const name = at < 0 ? rawKey : rawKey.slice(0, at);\n    const op = at < 0 ? \"eq\" : rawKey.slice(at + 2);\n    const field = fields.get(name);\n    if (field === undefined) {\n      throw new InvalidQueryError(`unknown filter field \"${name}\"`);\n    }\n    if (!field.filter_ops.includes(op)) {\n      throw new InvalidQueryError(\n        `field \"${name}\" does not support the \"${op}\" operator`,\n      );\n    }\n    if (name === \"id\" && op === \"eq\") {\n      throw new InvalidQueryError(\n        \"filter on id with recordId, not an equality filter\",\n      );\n    }\n    const id = `${name}\\u0000${op}`;\n    if (parsed.has(id)) {\n      throw new InvalidQueryError(`filter \"${name}\" \"${op}\" given twice`);\n    }\n    parsed.set(id, { name, op, pair: filterPair(field, op, value) });\n  }\n  return [...parsed.values()]\n    .sort((a, b) => compare(a.name, b.name) || compare(a.op, b.op))\n    .map((entry) => entry.pair);\n}\n\nfunction sortValue(\n  fields: ReadonlyMap<string, QueryField>,\n  sort: Sort,\n): string {\n  const parts = typeof sort === \"string\" ? sort.split(\",\") : sort;\n  const out = parts.map((part) => {\n    const name = part.startsWith(\"-\") ? part.slice(1) : part;\n    const field = fields.get(name);\n    if (field === undefined || !field.sortable) {\n      throw new InvalidQueryError(`cannot sort by \"${name}\"`);\n    }\n    return encode(part);\n  });\n  if (out.length === 0) {\n    throw new InvalidQueryError(\"sort is empty\");\n  }\n  return out.join(\",\");\n}\n\nfunction intArg(name: string, value: unknown, minimum: number): string {\n  if (\n    typeof value !== \"number\" ||\n    !Number.isSafeInteger(value) ||\n    value < minimum\n  ) {\n    throw new InvalidQueryError(`${name} must be an integer >= ${minimum}`);\n  }\n  return String(value);\n}\n\n/**\n * The query string (no leading `?`) for a list, get or bulk call. Order of\n * parameters: `id`, filters sorted by (field, operator), sort, skip, limit,\n * `include_archived`, `only_archived`, `include_unpublished`. The sort/skip/limit names are\n * `sortParam`/`skipParam`/`limitParam` (the manifest's `pagination`); the\n * `id` parameter is always `id`. Flags are emitted whenever they are not\n * `undefined`, except `only_archived`, which is emitted only when `true`\n * (absent means false; it is a reserved key, not a filter).\n */\nexport function buildQuery(\n  fields: readonly QueryField[],\n  params: QueryParams = {},\n): string {\n  if (params.onlyArchived === true && params.includeArchived === false) {\n    throw new InvalidQueryError(\n      \"onlyArchived cannot be combined with includeArchived: false\",\n    );\n  }\n  const byName = new Map(fields.map((f) => [f.name, f]));\n  const parts: string[] = [];\n  if (params.recordId !== undefined) {\n    parts.push(`id=${intArg(\"recordId\", params.recordId, 0)}`);\n  }\n  for (const [key, value] of filterPairs(byName, params.filters ?? {})) {\n    parts.push(`${encode(key)}=${value}`); // values arrive encoded; `in` keeps its commas\n  }\n  if (params.sort !== undefined) {\n    parts.push(\n      `${encode(params.sortParam ?? \"sort\")}=${sortValue(byName, params.sort)}`,\n    );\n  }\n  if (params.skip !== undefined) {\n    parts.push(\n      `${encode(params.skipParam ?? \"skip\")}=${intArg(\"skip\", params.skip, 0)}`,\n    );\n  }\n  if (params.limit !== undefined) {\n    const text = intArg(\"limit\", params.limit, 1);\n    if (params.maxLimit !== undefined && params.limit > params.maxLimit) {\n      throw new InvalidQueryError(\n        `limit ${params.limit} exceeds the server maximum ${params.maxLimit}`,\n      );\n    }\n    parts.push(`${encode(params.limitParam ?? \"limit\")}=${text}`);\n  }\n  if (params.includeArchived !== undefined) {\n    parts.push(`include_archived=${params.includeArchived}`);\n  }\n  if (params.onlyArchived === true) {\n    parts.push(\"only_archived=true\");\n  }\n  if (params.includeUnpublished !== undefined) {\n    parts.push(`include_unpublished=${params.includeUnpublished}`);\n  }\n  return parts.join(\"&\");\n}\n","/** Fetch client: manifest-driven resource handles over a middleware chain. */\nimport { cacheScope as tokenScope, isInsecureRemote } from \"./auth.ts\";\nimport {\n  CapabilityError,\n  ClientError,\n  ConnectionFailed,\n  InsecureTransportError,\n  InvalidQueryError,\n  ManifestError,\n  ResponseError,\n  UnknownResourceError,\n  problemFromResponse,\n} from \"./errors.ts\";\nimport { composeMiddleware } from \"./interfaces.ts\";\nimport type { Middleware, Op, TokenProvider } from \"./interfaces.ts\";\nimport { findResource, loadManifest } from \"./manifest.ts\";\nimport type { JsonObject, Manifest, Resource } from \"./manifest.ts\";\nimport { buildQuery, encodeParams } from \"./query.ts\";\nimport type { Filters, QueryParams, Sort } from \"./query.ts\";\n\n/** Per-call options. */\nexport interface RequestOptions {\n  readonly signal?: AbortSignal | undefined;\n}\n\n/**\n * Options of `list` and `iterAll`. `onlyArchived: true` returns only archived\n * rows (it implies `includeArchived`; with `includeArchived: false` the call\n * throws `InvalidQueryError` before any request). Non-archivable resources\n * ignore it.\n */\nexport interface ListOptions extends RequestOptions {\n  readonly filters?: Filters | undefined;\n  readonly sort?: Sort | undefined;\n  readonly skip?: number | undefined;\n  readonly limit?: number | undefined;\n  readonly includeArchived?: boolean | undefined;\n  readonly onlyArchived?: boolean | undefined;\n  readonly includeUnpublished?: boolean | undefined;\n}\n\n/** Options of `update` and `delete`: `ifMatch` is an ETag (`412` when stale). */\nexport interface WriteOptions extends RequestOptions {\n  readonly ifMatch?: string | undefined;\n}\n\n/** Options of `deleteMany`. */\nexport interface DeleteManyOptions extends RequestOptions {\n  readonly includeUnpublished?: boolean | undefined;\n}\n\n/** Options of `stats`. There is no `onlyArchived` (the server rejects it on `/stats`). */\nexport interface StatsOptions extends RequestOptions {\n  readonly bucket?: string | undefined;\n  readonly includeArchived?: boolean | undefined;\n  readonly includeUnpublished?: boolean | undefined;\n}\n\n/** Options of `predict`. */\nexport interface PredictOptions extends RequestOptions {\n  readonly field?: string | undefined;\n  readonly periods?: number | undefined;\n  readonly bucket?: string | undefined;\n}\n\n/** Options of `restore`: exactly one of `id` and `filters`. */\nexport interface RestoreOptions extends RequestOptions {\n  readonly id?: number | undefined;\n  readonly filters?: Filters | undefined;\n}\n\n/** The result of a bulk call. */\nexport interface BulkResult {\n  readonly matched: number;\n  readonly ids: readonly number[];\n}\n\nexport interface Call {\n  readonly method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\";\n  readonly url: string;\n  readonly op: Op;\n  readonly resource: string | undefined;\n  readonly recordId: number | undefined;\n  readonly apiVersion: string | null;\n  readonly json?: unknown;\n  readonly headers?: Readonly<Record<string, string>>;\n}\n\n/** What a {@link ResourceClient} needs from its client. */\nexport interface Transport {\n  json(call: Call, signal: AbortSignal | undefined): Promise<unknown>;\n  none(call: Call, signal: AbortSignal | undefined): Promise<void>;\n}\n\n/**\n * The origins of `allowedOrigins`, normalised (`https://a.example:443` and\n * `https://a.example` are one). Anything that is not an http(s) origin is a\n * configuration error.\n */\nfunction normalizeOrigins(origins: readonly string[]): ReadonlySet<string> {\n  const out = new Set<string>();\n  for (const value of origins) {\n    let origin: string | undefined;\n    try {\n      const url = new URL(value);\n      origin =\n        (url.protocol === \"http:\" || url.protocol === \"https:\") &&\n        url.origin !== \"null\"\n          ? url.origin\n          : undefined;\n    } catch {\n      origin = undefined;\n    }\n    if (origin === undefined) {\n      throw new ClientError(\n        `allowedOrigins entry \"${value}\" is not an http(s) origin`,\n      );\n    }\n    out.add(origin);\n  }\n  return out;\n}\n\n/** Builds the requests of one resource. */\nclass Plan {\n  readonly #baseUrl: string;\n  readonly #origins: ReadonlySet<string>;\n  readonly resource: Resource;\n\n  constructor(\n    baseUrl: string,\n    resource: Resource,\n    allowedOrigins: ReadonlySet<string>,\n  ) {\n    this.#baseUrl = baseUrl;\n    this.#origins = new Set([...allowedOrigins, new URL(baseUrl).origin]);\n    this.resource = resource;\n  }\n\n  /**\n   * Resolves a manifest-supplied path against `baseUrl`. The client sends its\n   * bearer token there, so a path that leaves baseUrl's origin (an absolute\n   * URL or a protocol-relative `//host`) is refused unless the client lists\n   * that origin in `allowedOrigins`.\n   */\n  #url(path: string): string {\n    const url = new URL(path, this.#baseUrl);\n    if (!this.#origins.has(url.origin)) {\n      throw new ManifestError(\n        `resource \"${this.resource.name}\": the manifest path \"${path}\" points at another origin (${url.origin}), ` +\n          \"where the token would follow; pass allowedOrigins to the client to allow it\",\n      );\n    }\n    return url.href;\n  }\n\n  #call(\n    method: Call[\"method\"],\n    op: Op,\n    path: string,\n    query = \"\",\n    extra: {\n      recordId?: number | undefined;\n      json?: unknown;\n      ifMatch?: string | undefined;\n    } = {},\n  ): Call {\n    const url = this.#url(path) + (query === \"\" ? \"\" : `?${query}`);\n    return {\n      method,\n      url,\n      op,\n      resource: this.resource.name,\n      recordId: extra.recordId,\n      apiVersion: this.resource.api_version,\n      ...(extra.json === undefined ? {} : { json: extra.json }),\n      ...(extra.ifMatch === undefined\n        ? {}\n        : { headers: { \"If-Match\": extra.ifMatch } }),\n    };\n  }\n\n  #query(params: QueryParams = {}): string {\n    const paging = this.resource.pagination;\n    return buildQuery(this.resource.fields, {\n      maxLimit: paging.max_limit,\n      skipParam: paging.skip_param,\n      limitParam: paging.limit_param,\n      sortParam: paging.sort_param,\n      ...params,\n    });\n  }\n\n  #subPath(key: string, supported: boolean): string {\n    const path = this.resource.paths[key];\n    if (!supported || path === undefined) {\n      throw new CapabilityError(\n        `resource \"${this.resource.name}\" does not support ${key}`,\n      );\n    }\n    return path;\n  }\n\n  #need(supported: boolean, what: string): void {\n    if (!supported) {\n      throw new CapabilityError(\n        `resource \"${this.resource.name}\" does not support ${what}`,\n      );\n    }\n  }\n\n  #bulkFilters(\n    filters: Filters,\n    includeUnpublished?: boolean | undefined,\n  ): string {\n    if (Object.keys(filters).length === 0) {\n      throw new InvalidQueryError(\"a bulk operation needs at least one filter\");\n    }\n    return this.#query({ filters, includeUnpublished });\n  }\n\n  get #base(): string {\n    return this.resource.base_path;\n  }\n\n  eventsUrl(): string {\n    const events = this.resource.capabilities.events;\n    if (events === null) {\n      throw new CapabilityError(\n        `resource \"${this.resource.name}\" does not support events`,\n      );\n    }\n    return this.#url(events.path);\n  }\n\n  list(o: ListOptions): Call {\n    const query = this.#query({\n      filters: o.filters,\n      sort: o.sort,\n      skip: o.skip,\n      limit: o.limit,\n      includeArchived: o.includeArchived,\n      onlyArchived: o.onlyArchived,\n      includeUnpublished: o.includeUnpublished,\n    });\n    return this.#call(\"GET\", \"list\", this.#base, query);\n  }\n\n  get(id: number): Call {\n    return this.#call(\n      \"GET\",\n      \"record\",\n      this.#base,\n      this.#query({ recordId: id }),\n      {\n        recordId: id,\n      },\n    );\n  }\n\n  create(data: unknown): Call {\n    return this.#call(\"POST\", \"create\", this.#base, \"\", { json: data });\n  }\n\n  update(id: number, data: unknown, ifMatch: string | undefined): Call {\n    return this.#call(\n      \"PATCH\",\n      \"update\",\n      this.#base,\n      this.#query({ recordId: id }),\n      {\n        recordId: id,\n        json: data,\n        ifMatch,\n      },\n    );\n  }\n\n  updateMany(filters: Filters, data: unknown): Call {\n    this.#need(this.resource.capabilities.bulk_update, \"bulk_update\");\n    return this.#call(\n      \"PATCH\",\n      \"bulk_update\",\n      this.#base,\n      this.#bulkFilters(filters),\n      {\n        json: data,\n      },\n    );\n  }\n\n  delete(id: number, ifMatch: string | undefined): Call {\n    return this.#call(\n      \"DELETE\",\n      \"delete\",\n      this.#base,\n      this.#query({ recordId: id }),\n      {\n        recordId: id,\n        ifMatch,\n      },\n    );\n  }\n\n  deleteMany(filters: Filters, includeUnpublished?: boolean | undefined): Call {\n    this.#need(this.resource.capabilities.bulk_delete, \"bulk_delete\");\n    return this.#call(\n      \"DELETE\",\n      \"bulk_delete\",\n      this.#base,\n      this.#bulkFilters(filters, includeUnpublished),\n    );\n  }\n\n  restore(id: number | undefined, filters: Filters | undefined): Call {\n    const path = this.#subPath(\n      \"restore\",\n      this.resource.capabilities.archive_restore,\n    );\n    if ((id === undefined) === (filters === undefined)) {\n      throw new InvalidQueryError(\n        \"restore takes exactly one of id and filters\",\n      );\n    }\n    const query =\n      filters === undefined\n        ? this.#query({ recordId: id })\n        : this.#bulkFilters(filters);\n    return this.#call(\"POST\", \"restore\", path, query, { recordId: id });\n  }\n\n  stats(o: StatsOptions): Call {\n    const path = this.#subPath(\"stats\", this.resource.capabilities.stats);\n    const pairs: [string, string][] =\n      o.bucket === undefined ? [] : [[\"bucket\", o.bucket]];\n    if (o.includeArchived !== undefined) {\n      pairs.push([\"include_archived\", String(o.includeArchived)]);\n    }\n    if (o.includeUnpublished !== undefined) {\n      pairs.push([\"include_unpublished\", String(o.includeUnpublished)]);\n    }\n    return this.#call(\"GET\", \"stats\", path, encodeParams(pairs));\n  }\n\n  predict(o: PredictOptions): Call {\n    const path = this.#subPath(\"predict\", this.resource.capabilities.predict);\n    const pairs: [string, string][] = [];\n    if (o.field !== undefined) {\n      const spec = this.resource.fields.find((f) => f.name === o.field);\n      if (spec === undefined || !spec.numeric) {\n        throw new InvalidQueryError(\n          `cannot predict \"${o.field}\": not a numeric field`,\n        );\n      }\n      pairs.push([\"field\", o.field]);\n    }\n    if (o.periods !== undefined) {\n      if (!Number.isSafeInteger(o.periods) || o.periods < 1) {\n        throw new InvalidQueryError(\"periods must be an integer >= 1\");\n      }\n      pairs.push([\"periods\", String(o.periods)]);\n    }\n    if (o.bucket !== undefined) {\n      pairs.push([\"bucket\", o.bucket]);\n    }\n    return this.#call(\"GET\", \"predict\", path, encodeParams(pairs));\n  }\n\n  clone(id: number): Call {\n    const path = this.#subPath(\"clone\", this.resource.capabilities.clone);\n    return this.#call(\"POST\", \"clone\", path, this.#query({ recordId: id }), {\n      recordId: id,\n    });\n  }\n\n  draft(data: unknown): Call {\n    const path = this.#subPath(\n      \"draft\",\n      this.resource.capabilities.draft_publish,\n    );\n    return this.#call(\"POST\", \"draft\", path, \"\", { json: data });\n  }\n\n  publish(id: number): Call {\n    const path = this.#subPath(\n      \"publish\",\n      this.resource.capabilities.draft_publish,\n    );\n    return this.#call(\"POST\", \"publish\", path, this.#query({ recordId: id }), {\n      recordId: id,\n    });\n  }\n\n  filters(): Call {\n    return this.#call(\"GET\", \"filters\", this.#subPath(\"filters\", true));\n  }\n\n  revisions(id: number): Call {\n    const path = this.#subPath(\n      \"revisions\",\n      this.resource.capabilities.revisions,\n    );\n    return this.#call(\"GET\", \"revisions\", path, this.#query({ recordId: id }), {\n      recordId: id,\n    });\n  }\n}\n\n/**\n * Operations on one resource. The type parameters are the record views;\n * `crud-sdk-codegen` writes interfaces to pass for them (they are not\n * checked against the manifest at runtime).\n */\nexport class ResourceClient<\n  Read extends object = JsonObject,\n  Create extends object = JsonObject,\n  Update extends object = JsonObject,\n> {\n  /** The manifest entry this handle is bound to. */\n  readonly resource: Resource;\n  readonly #plan: Plan;\n  readonly #transport: Transport;\n\n  /** Use `CrudClient.resource`. */\n  constructor(\n    baseUrl: string,\n    resource: Resource,\n    transport: Transport,\n    allowedOrigins: readonly string[] = [],\n  ) {\n    this.resource = resource;\n    this.#plan = new Plan(baseUrl, resource, normalizeOrigins(allowedOrigins));\n    this.#transport = transport;\n  }\n\n  async #one<T>(call: Call, options: RequestOptions): Promise<T> {\n    const body = await this.#transport.json(call, options.signal);\n    if (typeof body !== \"object\" || body === null || Array.isArray(body)) {\n      throw new ResponseError(\n        `${call.method} ${call.url}: expected a JSON object, got ${shapeOf(body)}`,\n      );\n    }\n    return body as T;\n  }\n\n  async #many<T>(call: Call, options: RequestOptions): Promise<T[]> {\n    const body = await this.#transport.json(call, options.signal);\n    if (!Array.isArray(body)) {\n      throw new ResponseError(\n        `${call.method} ${call.url}: expected a JSON array, got ${shapeOf(body)}`,\n      );\n    }\n    return body as T[];\n  }\n\n  /** One page of records. */\n  async list(options: ListOptions = {}): Promise<Read[]> {\n    return this.#many(this.#plan.list(options), options);\n  }\n\n  /** Every record, paging with `skip += limit` until a page shorter than `limit`. */\n  async *iterAll(\n    options: ListOptions = {},\n  ): AsyncGenerator<Read, void, undefined> {\n    const { default_limit: fallback, max_limit: cap } =\n      this.resource.pagination;\n    const size = options.limit ?? Math.min(fallback, cap);\n    let skip = options.skip ?? 0;\n    for (;;) {\n      const page = await this.list({ ...options, skip, limit: size });\n      yield* page;\n      if (page.length < size) {\n        return;\n      }\n      skip += size;\n    }\n  }\n\n  /** One record. */\n  async get(id: number, options: RequestOptions = {}): Promise<Read> {\n    return this.#one(this.#plan.get(id), options);\n  }\n\n  /** Creates a record. */\n  async create(data: Create, options: RequestOptions = {}): Promise<Read> {\n    return this.#one(this.#plan.create(data), options);\n  }\n\n  /** Patches one record; `ifMatch` is an ETag (`412` when stale). */\n  async update(\n    id: number,\n    data: Update,\n    options: WriteOptions = {},\n  ): Promise<Read> {\n    return this.#one(this.#plan.update(id, data, options.ifMatch), options);\n  }\n\n  /** Patches every record matching `filters`. */\n  async updateMany(\n    filters: Filters,\n    data: Update,\n    options: RequestOptions = {},\n  ): Promise<BulkResult> {\n    return this.#one(this.#plan.updateMany(filters, data), options);\n  }\n\n  /** Deletes one record; `ifMatch` as for `update`. */\n  async delete(id: number, options: WriteOptions = {}): Promise<void> {\n    await this.#transport.none(\n      this.#plan.delete(id, options.ifMatch),\n      options.signal,\n    );\n  }\n\n  /**\n   * Deletes every record matching `filters`. `includeUnpublished: false`\n   * leaves not-yet/no-longer-published rows alone; it is sent only when\n   * given (needs a server with the BD1 bulk-delete support, older ones ignore it).\n   */\n  async deleteMany(\n    filters: Filters,\n    options: DeleteManyOptions = {},\n  ): Promise<BulkResult> {\n    return this.#one(\n      this.#plan.deleteMany(filters, options.includeUnpublished),\n      options,\n    );\n  }\n\n  /** Restores archived records, by `id` or by `filters`. */\n  async restore(options: RestoreOptions): Promise<BulkResult> {\n    return this.#one(this.#plan.restore(options.id, options.filters), options);\n  }\n\n  /** Aggregates over the resource. */\n  async stats(options: StatsOptions = {}): Promise<JsonObject> {\n    return this.#one(this.#plan.stats(options), options);\n  }\n\n  /** A forecast. */\n  async predict(options: PredictOptions = {}): Promise<JsonObject> {\n    return this.#one(this.#plan.predict(options), options);\n  }\n\n  /** Copies a record; returns the copy. */\n  async clone(id: number, options: RequestOptions = {}): Promise<Read> {\n    return this.#one(this.#plan.clone(id), options);\n  }\n\n  /** Creates a draft (needs `draft_publish`). */\n  async createDraft(data: Create, options: RequestOptions = {}): Promise<Read> {\n    return this.#one(this.#plan.draft(data), options);\n  }\n\n  /** Publishes a draft (needs `draft_publish`). */\n  async publish(id: number, options: RequestOptions = {}): Promise<Read> {\n    return this.#one(this.#plan.publish(id), options);\n  }\n\n  /** The server's filter metadata (`kind` instead of `value_type`). */\n  async filters(options: RequestOptions = {}): Promise<JsonObject[]> {\n    return this.#many(this.#plan.filters(), options);\n  }\n\n  /** Revisions of one record, newest first. */\n  async revisions(\n    id: number,\n    options: RequestOptions = {},\n  ): Promise<JsonObject[]> {\n    return this.#many(this.#plan.revisions(id), options);\n  }\n\n  /** Absolute URL of the resource's SSE stream. */\n  eventsUrl(): string {\n    return this.#plan.eventsUrl();\n  }\n}\n\n/** Options of {@link createClient}. */\nexport interface ClientOptions {\n  /** The server origin (or any URL on it). */\n  readonly baseUrl: string;\n  /** The network `fetch`; defaults to `globalThis.fetch`. */\n  readonly fetch?: typeof fetch | undefined;\n  /** Returns the bearer token; called again with `refresh: true` once after a `401`. */\n  readonly tokenProvider?: TokenProvider | undefined;\n  /**\n   * The cache scope of the caller, for sessions that carry no bearer token\n   * (a cookie session behind a BFF). A string, or a function (sync or async)\n   * evaluated per request (and reused across that request's 401 retry), plus\n   * once per `scope()` call; return the same value for the same caller (for example the OIDC `sub`). It must be non-empty. When given it\n   * REPLACES the token-hash / `\"anon\"` scope, even if a `tokenProvider` is also\n   * set (the token still authenticates; it no longer selects the scope), and\n   * the `./cache` middleware keys by it instead of the Authorization header.\n   * Change what it returns on login or logout and nothing cached for the\n   * previous caller is visible.\n   */\n  readonly cacheScope?: string | (() => string | Promise<string>) | undefined;\n  /**\n   * Passed to every `fetch` as `RequestInit.credentials` (`\"same-origin\"`\n   * sends the session cookie to a same-origin `baseUrl`). Default: the\n   * platform's (`\"same-origin\"`). `\"include\"` over plain `http:` to a\n   * non-loopback host is refused with {@link InsecureTransportError}.\n   */\n  readonly credentials?: NonNullable<RequestInit[\"credentials\"]> | undefined;\n  /**\n   * Called (and awaited) on each final `401` response, after the\n   * `tokenProvider` refresh retry (if any) has failed to help; manifest and\n   * discovery requests included. A client call that makes several requests\n   * can fire it more than once, so make it idempotent (for example a\n   * navigation). It gets a clone of the response, so its body may be read.\n   * The call still rejects with `Unauthorized` afterwards; if the callback\n   * throws, its error is the `Unauthorized`'s `cause` (or, when the problem\n   * already has a `cause`, a non-enumerable `onUnauthorizedError` property).\n   * Typical use: navigate to the login page.\n   */\n  readonly onUnauthorized?:\n    ((response: Response) => void | Promise<void>) | undefined;\n  /** Outermost first; see `composeMiddleware`. */\n  readonly middleware?: readonly Middleware[] | undefined;\n  /** Skips api-catalog discovery. */\n  readonly manifestUrl?: string | undefined;\n  /**\n   * Stable identity of this client in TanStack query keys. Defaults to\n   * `baseUrl`; set it when two clients share a `baseUrl` but must not share\n   * cached data, and keep it constant across reloads of a persisted cache.\n   */\n  readonly id?: string | undefined;\n  /**\n   * Exact origins (`https://files.example`) that manifest-supplied\n   * `base_path`, `paths.*` and `events.path` may resolve to besides\n   * `baseUrl`'s own. By default such a URL (absolute or protocol-relative) is\n   * refused with a `ManifestError`, because the token would follow it. For\n   * split-origin deployments only.\n   */\n  readonly allowedOrigins?: readonly string[] | undefined;\n  /**\n   * Allow sending an `Authorization` header (the bearer token), or cookies\n   * (`credentials: \"include\"`), over plain `http:` to a\n   * host that is not loopback. Default `false`: such a request is refused\n   * with {@link InsecureTransportError} before it is sent.\n   * Loopback (`localhost`, `*.localhost`, `127.0.0.0/8`, `[::1]`) and\n   * anonymous requests without credentials are always allowed. Opt in only for a trusted\n   * network, as the token is readable on the wire.\n   */\n  readonly allowInsecureHttp?: boolean | undefined;\n}\n\nfunction shapeOf(body: unknown): string {\n  if (body === undefined) {\n    return \"no body\";\n  }\n  return body === null\n    ? \"null\"\n    : Array.isArray(body)\n      ? \"an array\"\n      : typeof body;\n}\n\n/** Discovers the manifest and hands out {@link ResourceClient}s. */\nexport class CrudClient {\n  readonly baseUrl: string;\n  /** Stable identity in TanStack query keys (`ClientOptions.id`, else `baseUrl`). */\n  readonly id: string;\n  readonly #fetch: typeof fetch | undefined;\n  readonly #tokenProvider: TokenProvider | undefined;\n  readonly #cacheScope: ClientOptions[\"cacheScope\"];\n  readonly #credentials: NonNullable<RequestInit[\"credentials\"]> | undefined;\n  readonly #onUnauthorized: ClientOptions[\"onUnauthorized\"];\n  readonly #middleware: Middleware[];\n  readonly #manifestUrl: string | undefined;\n  readonly #allowedOrigins: readonly string[];\n  readonly #allowInsecureHttp: boolean;\n  readonly #manifests = new Map<string, Promise<Manifest>>();\n  /** The newest `refresh: true` load per scope, until it settles. */\n  readonly #refreshes = new Map<string, Promise<Manifest>>();\n  readonly #transport: Transport;\n\n  constructor(options: ClientOptions) {\n    this.baseUrl = options.baseUrl;\n    this.id = options.id ?? options.baseUrl;\n    this.#fetch = options.fetch;\n    this.#tokenProvider = options.tokenProvider;\n    this.#cacheScope = options.cacheScope;\n    this.#credentials = options.credentials;\n    this.#onUnauthorized = options.onUnauthorized;\n    this.#middleware = [...(options.middleware ?? [])];\n    this.#manifestUrl = options.manifestUrl;\n    this.#allowedOrigins = [...(options.allowedOrigins ?? [])];\n    this.#allowInsecureHttp = options.allowInsecureHttp ?? false;\n    normalizeOrigins(this.#allowedOrigins); // fail at createClient, not at the first call\n    this.#transport = {\n      json: async (call, signal) => {\n        const response = await this.#send(call, signal);\n        if (response.status === 204) {\n          return undefined;\n        }\n        try {\n          return (await response.json()) as unknown;\n        } catch (error) {\n          throw new ResponseError(\n            `${call.method} ${call.url}: the ${response.status} response body is not valid JSON`,\n            { cause: error },\n          );\n        }\n      },\n      none: async (call, signal) => {\n        await (await this.#send(call, signal)).body?.cancel();\n      },\n    };\n  }\n\n  /** Adds middleware after the existing ones (innermost); it sees every later request. */\n  use(middleware: Middleware): this {\n    this.#middleware.push(middleware);\n    return this;\n  }\n\n  async #token(refresh: boolean): Promise<string | null> {\n    // An empty token sends no header, so it is anonymous for the scope too.\n    return (await this.#tokenProvider?.({ refresh })) || null;\n  }\n\n  /** The current bearer token, or `null` when anonymous. */\n  token(refresh = false): Promise<string | null> {\n    return this.#token(refresh);\n  }\n\n  /**\n   * The `cacheScope` option, evaluated once, validated and namespaced\n   * (`s:` + the percent-encoded value, so it can never equal `anon` or a token\n   * hash and adds no key segments); `undefined` when the option is not used.\n   * The prefix is internal.\n   */\n  async #explicitScope(): Promise<string | undefined> {\n    if (this.#cacheScope === undefined) {\n      return undefined;\n    }\n    const value: unknown =\n      typeof this.#cacheScope === \"function\"\n        ? await this.#cacheScope()\n        : this.#cacheScope;\n    if (typeof value !== \"string\" || value === \"\") {\n      throw new ClientError(\"cacheScope must resolve to a non-empty string\");\n    }\n    return `s:${encodeURIComponent(value)}`;\n  }\n\n  /**\n   * The cache scope of the current caller: the `cacheScope` option (opaque,\n   * namespaced; the `tokenProvider` is not called), else `\"anon\"` or a hash of\n   * the token.\n   */\n  async scope(): Promise<string> {\n    return (\n      (await this.#explicitScope()) ?? tokenScope(await this.#token(false))\n    );\n  }\n\n  /** The `{ client, scope }` namespace the `./tanstack` key factory takes. */\n  async namespace(): Promise<{\n    readonly client: string;\n    readonly scope: string;\n  }> {\n    return { client: this.id, scope: await this.scope() };\n  }\n\n  async #dispatch(\n    call: Call,\n    token: string | null,\n    explicit: string | undefined,\n    signal: AbortSignal | undefined,\n  ): Promise<Response> {\n    const headers = new Headers({\n      Accept: \"application/json\",\n      ...call.headers,\n    });\n    if (token !== null) {\n      headers.set(\"Authorization\", `Bearer ${token}`);\n    }\n    const init: RequestInit = {\n      method: call.method,\n      headers,\n      signal: signal ?? null,\n      ...(this.#credentials === undefined\n        ? {}\n        : { credentials: this.#credentials }),\n    };\n    if (call.json !== undefined) {\n      headers.set(\"Content-Type\", \"application/json\");\n      init.body = JSON.stringify(call.json);\n    }\n    const request = new Request(call.url, init);\n    const terminal = async (ctx: {\n      readonly request: Request;\n    }): Promise<Response> => {\n      // Judged on the request as it is sent, so a middleware that rewrites the\n      // URL or sets its own Authorization is covered too.\n      if (\n        !this.#allowInsecureHttp &&\n        (ctx.request.headers.has(\"Authorization\") ||\n          this.#credentials === \"include\") &&\n        isInsecureRemote(ctx.request.url)\n      ) {\n        throw new InsecureTransportError(\n          `refusing to send credentials (an Authorization header or cookies) over plain http to ${new URL(ctx.request.url).origin}; ` +\n            \"use https, or pass allowInsecureHttp: true to createClient to allow it\",\n        );\n      }\n      try {\n        return await (this.#fetch ?? globalThis.fetch)(ctx.request);\n      } catch (error) {\n        if (ctx.request.signal.aborted) {\n          throw error;\n        }\n        throw new ConnectionFailed(\n          error instanceof Error ? error.message : String(error),\n          {\n            cause: error,\n          },\n        );\n      }\n    };\n    return composeMiddleware(\n      this.#middleware,\n      terminal,\n    )({\n      request,\n      resource: call.resource,\n      op: call.op,\n      recordId: call.recordId,\n      scope: explicit ?? (await tokenScope(token)),\n      ...(explicit === undefined ? {} : { cacheScope: explicit }),\n      apiVersion: call.apiVersion,\n      signal,\n    });\n  }\n\n  /** Sends `call`, retrying once with a refreshed token after a `401`; throws on `>= 400`. */\n  async #send(call: Call, signal: AbortSignal | undefined): Promise<Response> {\n    const explicit = await this.#explicitScope(); // once per call, reused on the retry\n    const token = await this.#token(false);\n    let response = await this.#dispatch(call, token, explicit, signal);\n    if (response.status === 401 && this.#tokenProvider !== undefined) {\n      const fresh = await this.#token(true);\n      if (fresh !== null && fresh !== token) {\n        await response.body?.cancel();\n        response = await this.#dispatch(call, fresh, explicit, signal);\n      }\n    }\n    let callbackError: unknown;\n    let callbackFailed = false;\n    if (response.status === 401 && this.#onUnauthorized !== undefined) {\n      try {\n        await this.#onUnauthorized(response.clone());\n      } catch (error) {\n        callbackFailed = true;\n        callbackError = error;\n      }\n    }\n    if (response.status >= 400) {\n      const problem = await problemFromResponse(response);\n      if (callbackFailed) {\n        if (problem.cause === undefined) {\n          problem.cause = callbackError;\n        } else {\n          // Keep the cause the problem already has; expose the callback's error here.\n          Object.defineProperty(problem, \"onUnauthorizedError\", {\n            value: callbackError,\n            enumerable: false,\n            configurable: true,\n            writable: true,\n          });\n        }\n      }\n      throw problem;\n    }\n    return response;\n  }\n\n  async #getJson(url: string, catalog: boolean): Promise<unknown> {\n    const call: Call = {\n      method: \"GET\",\n      url,\n      op: \"manifest\",\n      resource: undefined,\n      recordId: undefined,\n      apiVersion: null,\n      // The catalog shares the \"manifest\" op; no-store keeps it out of the manifest cache entry.\n      ...(catalog ? { headers: { \"Cache-Control\": \"no-store\" } } : {}),\n    };\n    const response = await this.#send(call, undefined);\n    try {\n      return (await response.json()) as unknown;\n    } catch (error) {\n      throw new ManifestError(`${url} is not JSON`, { cause: error });\n    }\n  }\n\n  /** The manifest for this caller, loaded once per caller scope (`refresh: true` reloads). */\n  async manifest(\n    options: { readonly refresh?: boolean } = {},\n  ): Promise<Manifest> {\n    const scope = await this.scope(); // the manifest is filtered per caller\n    const current = this.#manifests.get(scope);\n    if (current !== undefined && options.refresh !== true) {\n      return current;\n    }\n    const started = loadManifest(\n      (url, catalog) => this.#getJson(url, catalog),\n      this.baseUrl,\n      this.#manifestUrl,\n    );\n    if (current === undefined) {\n      this.#manifests.clear(); // rotated tokens must not pile up manifests\n      this.#manifests.set(scope, started);\n      started.catch(() => {\n        if (this.#manifests.get(scope) === started) {\n          this.#manifests.delete(scope);\n        }\n      });\n    } else {\n      // A refresh replaces the cached manifest only once it loaded, and only\n      // if no newer refresh was started: a failed one rejects here and leaves\n      // the last good manifest to everyone else.\n      this.#refreshes.set(scope, started);\n      const settle = (loaded?: Manifest): void => {\n        if (this.#refreshes.get(scope) === started) {\n          this.#refreshes.delete(scope);\n          // Not for a scope the rotation eviction already dropped.\n          if (\n            loaded !== undefined &&\n            (this.#manifests.has(scope) || this.#manifests.size === 0)\n          ) {\n            this.#manifests.set(scope, Promise.resolve(loaded));\n          }\n        }\n      };\n      started.then(settle, () => {\n        settle();\n      });\n    }\n    return started;\n  }\n\n  /** A handle for `name` (the highest `api_version` unless given). */\n  async resource<\n    Read extends object = JsonObject,\n    Create extends object = JsonObject,\n    Update extends object = JsonObject,\n  >(\n    name: string,\n    apiVersion?: string,\n  ): Promise<ResourceClient<Read, Create, Update>> {\n    const resource = findResource(await this.manifest(), name, apiVersion);\n    if (resource === undefined) {\n      throw new UnknownResourceError(\n        `the manifest has no resource \"${name}\"${apiVersion === undefined ? \"\" : ` ${apiVersion}`} for this caller`,\n      );\n    }\n    return new ResourceClient<Read, Create, Update>(\n      this.baseUrl,\n      resource,\n      this.#transport,\n      this.#allowedOrigins,\n    );\n  }\n}\n\n/** Creates a client; the manifest loads on first use. */\nexport function createClient(options: ClientOptions): CrudClient {\n  return new CrudClient(options);\n}\n"],"mappings":";;;;;;;;AA4IA,SAAgB,kBACd,OACA,UACM;CACN,MAAM,WAAW,OACf,OACA,QACsB;EACtB,MAAM,aAAa,MAAM;EACzB,IAAI,eAAe,KAAA,GACjB,OAAO,SAAS,GAAG;EAErB,OAAO,WAAW,MAAM,SAAS,SAAS,QAAQ,GAAG,IAAI,CAAC;CAC5D;CACA,QAAQ,QAAQ,SAAS,GAAG,GAAG;AACjC;;;;;;;;ACrJA,IAAa,YAAb,cAA+B,MAAM;CACnC,YAAY,SAAiB,SAAwB;EACnD,MAAM,SAAS,OAAO;EACtB,KAAK,OAAO,WAAW;CACzB;AACF;;AAGA,IAAa,cAAb,cAAiC,UAAU,CAAC;;AAG5C,IAAa,kBAAb,cAAqC,YAAY,CAAC;;AAGlD,IAAa,oBAAb,cAAuC,YAAY,CAAC;;;;;;AAOpD,IAAa,yBAAb,cAA4C,YAAY,CAAC;;AAGzD,IAAa,gBAAb,cAAmC,YAAY,CAAC;;AAGhD,IAAa,uBAAb,cAA0C,YAAY,CAAC;;AAGvD,IAAa,gBAAb,cAAmC,UAAU,CAAC;;AAG9C,IAAa,mBAAb,cAAsC,UAAU,CAAC;AAqBjD,MAAM,UAAU;;AAGhB,IAAa,eAAb,cAAkC,UAAU;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,MAAmB;EAC7B,MAAM,SAAS,KAAK,UAAU,CAAC;EAC/B,IAAI,UAAU,GAAG,KAAK,OAAO,GAAG,KAAK;EACrC,IAAI,KAAK,QACP,WAAW,KAAK,KAAK;OAChB,IAAI,OAAO,SAAS,GACzB,WAAW,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI;EAE7E,MAAM,OAAO;EACb,KAAK,SAAS,KAAK;EACnB,KAAK,QAAQ,KAAK;EAClB,KAAK,SAAS,KAAK;EACnB,KAAK,OAAO,KAAK,QAAQ;EACzB,KAAK,WAAW,KAAK;EACrB,KAAK,SAAS;EACd,KAAK,UAAU,KAAK,WAAW,IAAI,QAAQ;EAC3C,KAAK,WAAW,KAAK;CACvB;AACF;;AAGA,IAAa,aAAb,cAAgC,aAAa,CAAC;;AAG9C,IAAa,eAAb,cAAkC,aAAa;CAC7C,IAAI,kBAAsC;EACxC,OAAO,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAA;CACjD;AACF;;AAGA,IAAa,YAAb,cAA+B,aAAa,CAAC;;AAG7C,IAAa,WAAb,cAA8B,aAAa,CAAC;;AAG5C,IAAa,qBAAb,cAAwC,aAAa,CAAC;;AAGtD,IAAa,mBAAb,cAAsC,aAAa,CAAC;;AAGpD,IAAa,SAAb,cAA4B,aAAa,CAAC;;AAG1C,IAAa,cAAb,cAAiC,aAAa;CAC5C,IAAI,aAAiC;EACnC,MAAM,MAAM,KAAK,QAAQ,IAAI,aAAa;EAC1C,IAAI,QAAQ,QAAQ,IAAI,KAAK,MAAM,IACjC;EAEF,MAAM,UAAU,OAAO,GAAG;EAC1B,OAAO,OAAO,SAAS,OAAO,KAAK,WAAW,IAAI,UAAU,KAAA;CAC9D;AACF;;AAGA,IAAa,cAAb,cAAiC,aAAa,CAAC;AAE/C,MAAM,4BAAsD,IAAI,IAAI;CAClE,CAAC,KAAK,UAAU;CAChB,CAAC,KAAK,YAAY;CAClB,CAAC,KAAK,SAAS;CACf,CAAC,KAAK,QAAQ;CACd,CAAC,KAAK,kBAAkB;CACxB,CAAC,KAAK,gBAAgB;CACtB,CAAC,KAAK,MAAM;CACZ,CAAC,KAAK,WAAW;AACnB,CAAC;AAGD,MAAM,0BAAuC,IAAI,IAAI;CACnD,CAAC,KAAK,UAAU;CAChB,CAAC,KAAK,qBAAqB;CAC3B,CAAC,KAAK,YAAY;CAClB,CAAC,KAAK,aAAa;CACnB,CAAC,KAAK,IAAI;CACV,CAAC,KAAK,SAAS;CACf,CAAC,KAAK,UAAU;CAChB,CAAC,KAAK,+BAA+B;CACrC,CAAC,KAAK,YAAY;CAClB,CAAC,KAAK,eAAe;CACrB,CAAC,KAAK,iBAAiB;CACvB,CAAC,KAAK,cAAc;CACpB,CAAC,KAAK,kBAAkB;CACxB,CAAC,KAAK,SAAS;CACf,CAAC,KAAK,kBAAkB;CACxB,CAAC,KAAK,mBAAmB;CACzB,CAAC,KAAK,OAAO;CACb,CAAC,KAAK,WAAW;CACjB,CAAC,KAAK,cAAc;CACpB,CAAC,KAAK,WAAW;CACjB,CAAC,KAAK,oBAAoB;CAC1B,CAAC,KAAK,oBAAoB;CAC1B,CAAC,KAAK,aAAa;CACnB,CAAC,KAAK,cAAc;CACpB,CAAC,KAAK,kBAAkB;CACxB,CAAC,KAAK,WAAW;CACjB,CAAC,KAAK,WAAW;CACjB,CAAC,KAAK,oBAAoB;CAC1B,CAAC,KAAK,gBAAgB;CACtB,CAAC,KAAK,+BAA+B;CACrC,CAAC,KAAK,iBAAiB;CACvB,CAAC,KAAK,UAAU;CAChB,CAAC,KAAK,MAAM;CACZ,CAAC,KAAK,iBAAiB;CACvB,CAAC,KAAK,qBAAqB;CAC3B,CAAC,KAAK,mBAAmB;CACzB,CAAC,KAAK,cAAc;CACpB,CAAC,KAAK,wBAAwB;CAC9B,CAAC,KAAK,uBAAuB;CAC7B,CAAC,KAAK,oBAAoB;CAC1B,CAAC,KAAK,cAAc;CACpB,CAAC,KAAK,qBAAqB;CAC3B,CAAC,KAAK,uBAAuB;CAC7B,CAAC,KAAK,QAAQ;CACd,CAAC,KAAK,mBAAmB;CACzB,CAAC,KAAK,WAAW;CACjB,CAAC,KAAK,kBAAkB;CACxB,CAAC,KAAK,uBAAuB;CAC7B,CAAC,KAAK,mBAAmB;CACzB,CAAC,KAAK,iCAAiC;CACvC,CAAC,KAAK,+BAA+B;CACrC,CAAC,KAAK,uBAAuB;CAC7B,CAAC,KAAK,iBAAiB;CACvB,CAAC,KAAK,aAAa;CACnB,CAAC,KAAK,qBAAqB;CAC3B,CAAC,KAAK,iBAAiB;CACvB,CAAC,KAAK,4BAA4B;CAClC,CAAC,KAAK,yBAAyB;CAC/B,CAAC,KAAK,sBAAsB;CAC5B,CAAC,KAAK,eAAe;CACrB,CAAC,KAAK,cAAc;CACpB,CAAC,KAAK,iCAAiC;AACzC,CAAC;AAID,MAAMA,cAAY,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,SAAS,gBAAgB,OAA4C;CACnE,OAAO,MAAM,KAAK,SAAS;EACzB,IAAIA,WAAS,IAAI,GACf,OAAO;GACL,KAAK,MAAM,QAAQ,KAAK,MAAM,IACzB,KAAK,SACN,CAAC;GACL,KAAK,OAAO,KAAK,UAAU,EAAE;GAC7B,MAAM,OAAO,KAAK,WAAW,EAAE;EACjC;EAEF,OAAO;GAAE,KAAK,CAAC;GAAG,KAAK,OAAO,IAAI;GAAG,MAAM;EAAG;CAChD,CAAC;AACH;;;;;;AAOA,eAAsB,oBACpB,UACuB;CACvB,MAAM,SAAS,SAAS;CACxB,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK;CACtC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC,CAAC,KAAK,CAAC;CACnD,QAAQ;EACN,SAAS,KAAA;CACX;CACA,MAAM,OAAYA,WAAS,MAAM,IAAI,SAAS,CAAC;CAC/C,MAAM,YAAY,KAAK;CACvB,MAAM,YAAY,MAAM,QAAQ,SAAS,IAAI,YAAY,KAAK;CAC9D,MAAM,MACJ,UAAU,IAAI,MAAM,MAAM,UAAU,MAAM,cAAc;CAC1D,MAAM,WAAW,KAAK;CACtB,OAAO,IAAI,IAAI;EACb;EACA,OAAO,OAAO,KAAK,YAAY,MAAM;EACrC,QAAQ,OAAO,cAAc,WAAW,YAAY,KAAA;EACpD,MAAM,OAAO,KAAK,WAAW,OAAO;EACpC,UAAU,OAAO,aAAa,WAAW,WAAW,KAAA;EACpD,QAAQ,MAAM,QAAQ,SAAS,IAAI,gBAAgB,SAAS,IAAI,CAAC;EACjE,SAAS,SAAS;EAClB;CACF,CAAC;AACH;;;;;;;;AC/PA,MAAa,UAAU;AACvB,MAAa,eAAe;AA+G5B,MAAM,YAAY,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,SAAS,IAAI,OAAe,KAAa,MAAqB;CAC5D,MAAM,IAAI,cAAc,GAAG,MAAM,GAAG,IAAI,IAAI,MAAM;AACpD;AAEA,SAAS,IAAI,KAAiB,KAAa,OAAuB;CAChE,MAAM,QAAQ,IAAI;CAClB,OAAO,OAAO,UAAU,WACpB,QACA,IAAI,OAAO,KAAK,yBAAyB;AAC/C;AAEA,SAAS,KAAK,KAAiB,KAAa,OAAwB;CAClE,MAAM,QAAQ,IAAI;CAClB,OAAO,OAAO,UAAU,YACpB,QACA,IAAI,OAAO,KAAK,0BAA0B;AAChD;AAEA,SAAS,IAAI,KAAiB,KAAa,OAAuB;CAChE,MAAM,QAAQ,IAAI;CAClB,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IACrD,QACA,IAAI,OAAO,KAAK,yBAAyB;AAC/C;AAEA,SAAS,IAAI,KAAiB,KAAa,OAAuB;CAChE,MAAM,QAAQ,IAAI,KAAK,KAAK,KAAK;CACjC,OAAO,OAAO,UAAU,KAAK,IAAI,QAAQ,IAAI,OAAO,KAAK,gBAAgB;AAC3E;AAEA,SAAS,IAAI,QAAoB,KAAa,OAA2B;CACvE,MAAM,QAAQ,OAAO;CACrB,OAAO,SAAS,KAAK,IAAI,QAAQ,IAAI,OAAO,KAAK,0BAA0B;AAC7E;AAEA,SAAS,KACP,QACA,KACA,OACoB;CACpB,MAAM,QAAQ,OAAO;CACrB,OAAO,MAAM,QAAQ,KAAK,IACtB,QACA,IAAI,OAAO,KAAK,uBAAuB;AAC7C;AAEA,SAAS,KACP,QACA,KACA,OACmB;CACnB,MAAM,QAAQ,KAAK,QAAQ,KAAK,KAAK;CACrC,OAAO,MAAM,OAAO,SAAS,OAAO,SAAS,QAAQ,IAChD,QACD,IAAI,OAAO,KAAK,4BAA4B;AAClD;;AAGA,SAAS,IACP,QACA,KACA,OACA,MACU;CACV,OAAO,OAAO,SAAS,KAAA,KAAa,OAAO,SAAS,OAChD,OACA,KAAK,QAAQ,KAAK,KAAK;AAC7B;AAEA,SAAS,UACP,QACA,KACA,OACwB;CACxB,MAAM,MAA8B,CAAC;CACrC,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,IAAI,QAAQ,KAAK,KAAK,CAAC,GACzD,IAAI,OAAO,MAAM,UACf,IAAI,KAAK;CAGb,OAAO;AACT;AAEA,SAAS,QAAQ,QAAoB,KAAa,OAA6B;CAC7E,OAAO,KAAK,QAAQ,KAAK,KAAK,CAAC,CAAC,KAAK,MAAM,MACzC,SAAS,IAAI,IAAI,OAAO,IAAI,GAAG,MAAM,GAAG,OAAO,IAAI,EAAE,IAAI,eAAe,CAC1E;AACF;AAEA,SAAS,WAAW,GAAe,GAAsB;CACvD,OAAO;EACL,MAAM,IAAI,GAAG,QAAQ,CAAC;EACtB,YAAY,IAAI,GAAG,cAAc,CAAC;EAClC,YAAY,KAAK,GAAG,cAAc,CAAC;EACnC,UAAU,KAAK,GAAG,YAAY,CAAC;EAC/B,SAAS,IAAI,GAAG,WAAW,GAAG,IAAI;EAClC,SAAS,KAAK,GAAG,WAAW,CAAC;EAC7B,aAAa,KAAK,GAAG,eAAe,CAAC;EACrC,WAAW,KAAK,GAAG,aAAa,CAAC;EACjC,UAAU,KAAK,GAAG,YAAY,CAAC;CACjC;AACF;AAEA,SAAS,YAAY,GAAe,GAAuB;CACzD,OAAO;EACL,WAAW,IAAI,GAAG,aAAa,CAAC;EAChC,MAAM,IAAI,GAAG,QAAQ,CAAC;EACtB,UAAU,IAAI,GAAG,YAAY,CAAC;EAC9B,cAAc,IAAI,GAAG,gBAAgB,CAAC;EACtC,QAAQ,IAAI,GAAG,UAAU,CAAC;EAC1B,mBAAmB,IAAI,GAAG,qBAAqB,CAAC;EAChD,SAAS,KAAK,GAAG,WAAW,CAAC;CAC/B;AACF;AAEA,SAAS,kBAAkB,GAAe,GAAyB;CACjE,OAAO;EACL,aAAa,KAAK,GAAG,eAAe,CAAC;EACrC,aAAa,KAAK,GAAG,eAAe,CAAC;EACrC,OAAO,KAAK,GAAG,SAAS,CAAC;EACzB,eAAe,KAAK,GAAG,iBAAiB,CAAC;EACzC,iBAAiB,KAAK,GAAG,mBAAmB,CAAC;EAC7C,WAAW,KAAK,GAAG,aAAa,CAAC;EACjC,QAAQ,IAAI,GAAG,UAAU,IAAI,GAAG,GAAG,OACjC,YAAY,IAAI,GAAG,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CACzC;EACA,OAAO,KAAK,GAAG,SAAS,CAAC;EACzB,SAAS,KAAK,GAAG,WAAW,CAAC;EAC7B,sBAAsB,KAAK,GAAG,wBAAwB,CAAC;EACvD,cAAc,KAAK,GAAG,gBAAgB,CAAC;EACvC,aAAa,KAAK,GAAG,eAAe,CAAC;CACvC;AACF;AAEA,SAAS,cAAc,GAAe,GAAqB;CACzD,MAAM,UAAU,IAAI,GAAG,WAAW,CAAC;CACnC,MAAM,aAAa,IAAI,GAAG,cAAc,CAAC;CACzC,MAAM,OAAO,IAAI,GAAG,QAAQ,CAAC;CAC7B,MAAM,QAAQ,IAAI,GAAG,SAAS,CAAC;CAC/B,MAAM,KAAK,GAAG,EAAE;CAChB,OAAO;EACL,MAAM,IAAI,GAAG,QAAQ,CAAC;EACtB,OAAO,IAAI,GAAG,SAAS,CAAC;EACxB,aAAa,IAAI,GAAG,eAAe,CAAC;EACpC,WAAW,IAAI,GAAG,aAAa,CAAC;EAChC,SAAS,UAAU,GAAG,WAAW,CAAC;EAClC,UAAU,IAAI,GAAG,YAAY,CAAC;EAC9B,SAAS;GACP,MAAM,IAAI,SAAS,QAAQ,EAAE;GAC7B,QAAQ,IAAI,SAAS,UAAU,EAAE;GACjC,QAAQ,IAAI,SAAS,UAAU,EAAE;GACjC,OAAO,IAAI,SAAS,SAAS,IAAI,GAAG;EACtC;EACA,QAAQ,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,MACtC,WAAW,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,CACnC;EACA,YAAY;GACV,OAAO,IAAI,YAAY,SAAS,CAAC;GACjC,YAAY,IAAI,YAAY,cAAc,CAAC;GAC3C,aAAa,IAAI,YAAY,eAAe,CAAC;GAC7C,YAAY,IAAI,YAAY,cAAc,CAAC;GAC3C,eAAe,IAAI,YAAY,iBAAiB,CAAC;GACjD,WAAW,IAAI,YAAY,aAAa,CAAC;GACzC,OAAO,KAAK,YAAY,SAAS,CAAC;EACpC;EACA,cAAc,kBACZ,IAAI,GAAG,gBAAgB,CAAC,GACxB,GAAG,EAAE,cACP;EACA,OAAO,UAAU,GAAG,SAAS,CAAC;EAC9B,MAAM,EAAE,aAAa,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,eAAe,GAAG,EAAE,MAAM,EAAE;EACxE,MAAM;GACJ,QAAQ,IAAI,MAAM,UAAU,CAAC;GAC7B,oBAAoB,IAAI,MAAM,sBAAsB,GAAG,GAAG;GAC1D,aAAa,KAAK,MAAM,eAAe,CAAC;GACxC,YAAY,KAAK,MAAM,cAAc,CAAC;GACtC,aAAa,KAAK,MAAM,eAAe,CAAC;GACxC,cAAc,KAAK,MAAM,gBAAgB,CAAC;EAC5C;EACA,OAAO;GACL,MAAM,KAAK,OAAO,QAAQ,CAAC;GAC3B,SAAS,IAAI,OAAO,WAAW,CAAC;GAChC,WAAW,IAAI,OAAO,aAAa,GAAG,GAAG;GACzC,wBAAwB,IAAI,OAAO,0BAA0B,CAAC;GAC9D,WAAW,IAAI,OAAO,aAAa,GAAG,GAAG;GACzC,aAAa,IAAI,OAAO,eAAe,GAAG,GAAG;GAC7C,iBAAiB,KAAK,OAAO,mBAAmB,CAAC;EACnD;CACF;AACF;;AAGA,SAAgB,cAAc,UAA6B;CACzD,IAAI,CAAC,SAAS,QAAQ,GACpB,MAAM,IAAI,cAAc,mCAAmC;CAE7D,MAAM,UAAU,IAAI,UAAU,oBAAoB,UAAU;CAC5D,IAAI,YAAY,KACd,MAAM,IAAI,cAAc,iCAAiC,QAAQ,EAAE;CAErE,MAAM,UAAU,IAAI,UAAU,WAAW,UAAU;CACnD,OAAO;EACL,kBAAkB;EAClB,SAAS;GACP,MAAM,IAAI,SAAS,QAAQ,kBAAkB;GAC7C,SAAS,IAAI,SAAS,WAAW,kBAAkB;EACrD;EACA,WAAW,QAAQ,UAAU,aAAa,UAAU,CAAC,CAAC,KAAK,GAAG,MAC5D,cAAc,GAAG,aAAa,EAAE,EAAE,CACpC;CACF;AACF;;;;;AAMA,SAAgB,aACd,UACA,MACA,YACsB;CAEtB,MAAM,QAAQ,MACZ,OAAO,WAAW,KAAK,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC;CACjD,IAAI;CACJ,KAAK,MAAM,KAAK,SAAS,WACvB,IACE,EAAE,SAAS,SACV,eAAe,KAAA,KAAa,EAAE,gBAAgB,aAE3C;MAAA,SAAS,KAAA,KAAa,KAAK,CAAC,IAAI,KAAK,IAAI,GAC3C,OAAO;CAAA;CAIb,OAAO;AACT;;AAGA,SAAgB,uBACd,SACA,YACQ;CACR,MAAM,UAAU,SAAS,OAAO,IAAI,QAAQ,aAAa,KAAA;CACzD,KAAK,MAAM,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,GAAG;EACzD,MAAM,QAAQ,SAAS,KAAK,IAAI,MAAM,iBAAiB,KAAA;EACvD,KAAK,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GACjD,IACE,SAAS,IAAI,KACb,KAAK,eAAA,2DACL,OAAO,KAAK,YAAY,UACxB;GACA,MAAM,MAAM,IAAI,IAAI,KAAK,SAAS,UAAU;GAC5C,IAAI,IAAI,WAAW,IAAI,IAAI,UAAU,CAAC,CAAC,QAErC,MAAM,IAAI,cACR,6CAA6C,IAAI,OAAO,8BAC1D;GAEF,OAAO,IAAI;EACb;CAEJ;CACA,MAAM,IAAI,cACR,wDAAwD,SAC1D;AACF;;;;;AASA,eAAsB,aACpB,SACA,SACA,aACmB;CACnB,IAAI,MAAM;CACV,IAAI,QAAQ,KAAA,GAAW;EACrB,MAAM,aAAa,IAAI,IAAI,cAAc,OAAO,CAAC,CAAC;EAClD,MAAM,uBAAuB,MAAM,QAAQ,YAAY,IAAI,GAAG,UAAU;CAC1E;CACA,OAAO,cAAc,MAAM,QAAQ,KAAK,KAAK,CAAC;AAChD;;;;;;;AClZA,MAAM,mBAAmB;;AAoCzB,SAAgB,MAAM,MAAsB;CAC1C,OAAO,mBAAmB,IAAI,CAAC,CAAC,QAC9B,aACC,MAAM,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,GACtD;AACF;;;;;AAMA,SAAS,OAAO,MAAsB;CACpC,IAAI;EACF,OAAO,MAAM,IAAI;CACnB,SAAS,OAAO;EAEd,MAAM,IAAI,kBACR,6DACA,EAAE,OAAO,MAAM,CACjB;CACF;AACF;;AAGA,SAAgB,aACd,OACQ;CACR,OAAO,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;AACpE;AAEA,SAAS,eAAe,OAAiC;CACvD,IAAI,OAAO,MAAM,MAAM,QAAQ,CAAC,GAC9B;CAEF,MAAM,MAAM,MAAM,YAAY;CAC9B,IAAI,IAAI,WAAW,IACjB;CAEF,MAAM,SAAS,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE;CAClD,OAAO,WAAW,KACd,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,KACpB,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,GAAG,OAAO;AACpC;AAEA,SAAS,WAAW,OAAmC;CACrD,IAAI,CAAC,sBAAsB,KAAK,KAAK,GACnC;CAEF,MAAM,yBAAS,IAAI,KAAK,GAAG,MAAM,WAAW;CAC5C,OAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,KAClC,OAAO,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE,MAAM,QACpC,KAAA,IACA;AACN;AAEA,SAAS,WAAW,MAAc,OAAoC;CACpE,QAAQ,MAAR;EACE,KAAK,WACH,OAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,IAC1D,OAAO,KAAK,IACZ,KAAA;EACN,KAAK,UACH,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IACrD,OAAO,KAAK,IACZ,KAAA;EACN,KAAK,WACH,OAAO,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI,KAAA;EACtD,KAAK,QACH,OAAO,OAAO,UAAU,WAAW,WAAW,KAAK,IAAI,KAAA;EACzD,KAAK,YACH,OAAO,iBAAiB,OAAO,eAAe,KAAK,IAAI,KAAA;EACzD,SACE,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;CAC/C;AACF;;;;;;AAOA,SAAgB,aAAa,OAAmB,OAAwB;CACtE,MAAM,OAAO,WAAW,MAAM,YAAY,KAAK;CAC/C,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,kBACR,UAAU,MAAM,KAAK,KAAK,MAAM,WAAW,gBAAgB,OAAO,KAAK,GACzE;CAEF,IACE,MAAM,eAAe,UACrB,MAAM,YAAY,QAClB,CAAC,MAAM,QAAQ,SAAS,IAAI,GAE5B,MAAM,IAAI,kBACR,UAAU,MAAM,KAAK,iBAAiB,KAAK,UAAU,MAAM,OAAO,EAAE,SAAS,KAAK,EACpF;CAEF,OAAO;AACT;AAEA,SAAS,WACP,OACA,IACA,OACkB;CAClB,MAAM,MAAM,OAAO,OAAO,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI;CACzD,IAAI,OAAO,MAAM;EACf,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAC5C,MAAM,IAAI,kBAAkB,IAAI,IAAI,0BAA0B;EAEhE,MAAM,QAAQ,MAAM,KAAK,SAAkB,aAAa,OAAO,IAAI,CAAC;EACpE,IAAI,MAAM,MAAM,SAAS,KAAK,SAAS,GAAG,CAAC,GACzC,MAAM,IAAI,kBACR,IAAI,IAAI,sDACV;EAEF,OAAO,CAAC,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;CAC1D;CACA,MAAM,OAAO,aAAa,OAAO,KAAK;CACtC,IAAI,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,SAAS,kBACvC,MAAM,IAAI,kBACR,IAAI,IAAI,2BAA2B,iBAAiB,YACtD;CAEF,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC;AAC3B;AAEA,MAAM,WAAW,GAAW,MAAuB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI;AAE5E,SAAS,YACP,QACA,SACoB;CACpB,MAAM,yBAAS,IAAI,IAGjB;CACF,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,OAAO,GAAG;EACrD,MAAM,KAAK,OAAO,YAAY,IAAI;EAClC,MAAM,OAAO,KAAK,IAAI,SAAS,OAAO,MAAM,GAAG,EAAE;EACjD,MAAM,KAAK,KAAK,IAAI,OAAO,OAAO,MAAM,KAAK,CAAC;EAC9C,MAAM,QAAQ,OAAO,IAAI,IAAI;EAC7B,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,kBAAkB,yBAAyB,KAAK,EAAE;EAE9D,IAAI,CAAC,MAAM,WAAW,SAAS,EAAE,GAC/B,MAAM,IAAI,kBACR,UAAU,KAAK,0BAA0B,GAAG,WAC9C;EAEF,IAAI,SAAS,QAAQ,OAAO,MAC1B,MAAM,IAAI,kBACR,oDACF;EAEF,MAAM,KAAK,GAAG,KAAK,QAAQ;EAC3B,IAAI,OAAO,IAAI,EAAE,GACf,MAAM,IAAI,kBAAkB,WAAW,KAAK,KAAK,GAAG,cAAc;EAEpE,OAAO,IAAI,IAAI;GAAE;GAAM;GAAI,MAAM,WAAW,OAAO,IAAI,KAAK;EAAE,CAAC;CACjE;CACA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CACxB,MAAM,GAAG,MAAM,QAAQ,EAAE,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAC9D,KAAK,UAAU,MAAM,IAAI;AAC9B;AAEA,SAAS,UACP,QACA,MACQ;CAER,MAAM,OADQ,OAAO,SAAS,WAAW,KAAK,MAAM,GAAG,IAAI,KAAA,CACzC,KAAK,SAAS;EAC9B,MAAM,OAAO,KAAK,WAAW,GAAG,IAAI,KAAK,MAAM,CAAC,IAAI;EACpD,MAAM,QAAQ,OAAO,IAAI,IAAI;EAC7B,IAAI,UAAU,KAAA,KAAa,CAAC,MAAM,UAChC,MAAM,IAAI,kBAAkB,mBAAmB,KAAK,EAAE;EAExD,OAAO,OAAO,IAAI;CACpB,CAAC;CACD,IAAI,IAAI,WAAW,GACjB,MAAM,IAAI,kBAAkB,eAAe;CAE7C,OAAO,IAAI,KAAK,GAAG;AACrB;AAEA,SAAS,OAAO,MAAc,OAAgB,SAAyB;CACrE,IACE,OAAO,UAAU,YACjB,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,SAER,MAAM,IAAI,kBAAkB,GAAG,KAAK,yBAAyB,SAAS;CAExE,OAAO,OAAO,KAAK;AACrB;;;;;;;;;;AAWA,SAAgB,WACd,QACA,SAAsB,CAAC,GACf;CACR,IAAI,OAAO,iBAAiB,QAAQ,OAAO,oBAAoB,OAC7D,MAAM,IAAI,kBACR,6DACF;CAEF,MAAM,SAAS,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD,MAAM,QAAkB,CAAC;CACzB,IAAI,OAAO,aAAa,KAAA,GACtB,MAAM,KAAK,MAAM,OAAO,YAAY,OAAO,UAAU,CAAC,GAAG;CAE3D,KAAK,MAAM,CAAC,KAAK,UAAU,YAAY,QAAQ,OAAO,WAAW,CAAC,CAAC,GACjE,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO;CAEtC,IAAI,OAAO,SAAS,KAAA,GAClB,MAAM,KACJ,GAAG,OAAO,OAAO,aAAa,MAAM,EAAE,GAAG,UAAU,QAAQ,OAAO,IAAI,GACxE;CAEF,IAAI,OAAO,SAAS,KAAA,GAClB,MAAM,KACJ,GAAG,OAAO,OAAO,aAAa,MAAM,EAAE,GAAG,OAAO,QAAQ,OAAO,MAAM,CAAC,GACxE;CAEF,IAAI,OAAO,UAAU,KAAA,GAAW;EAC9B,MAAM,OAAO,OAAO,SAAS,OAAO,OAAO,CAAC;EAC5C,IAAI,OAAO,aAAa,KAAA,KAAa,OAAO,QAAQ,OAAO,UACzD,MAAM,IAAI,kBACR,SAAS,OAAO,MAAM,8BAA8B,OAAO,UAC7D;EAEF,MAAM,KAAK,GAAG,OAAO,OAAO,cAAc,OAAO,EAAE,GAAG,MAAM;CAC9D;CACA,IAAI,OAAO,oBAAoB,KAAA,GAC7B,MAAM,KAAK,oBAAoB,OAAO,iBAAiB;CAEzD,IAAI,OAAO,iBAAiB,MAC1B,MAAM,KAAK,oBAAoB;CAEjC,IAAI,OAAO,uBAAuB,KAAA,GAChC,MAAM,KAAK,uBAAuB,OAAO,oBAAoB;CAE/D,OAAO,MAAM,KAAK,GAAG;AACvB;;;;;;;;;ACnMA,SAAS,iBAAiB,SAAiD;CACzE,MAAM,sBAAM,IAAI,IAAY;CAC5B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI;EACJ,IAAI;GACF,MAAM,MAAM,IAAI,IAAI,KAAK;GACzB,UACG,IAAI,aAAa,WAAW,IAAI,aAAa,aAC9C,IAAI,WAAW,SACX,IAAI,SACJ,KAAA;EACR,QAAQ;GACN,SAAS,KAAA;EACX;EACA,IAAI,WAAW,KAAA,GACb,MAAM,IAAI,YACR,yBAAyB,MAAM,2BACjC;EAEF,IAAI,IAAI,MAAM;CAChB;CACA,OAAO;AACT;;AAGA,IAAM,OAAN,MAAW;CACT;CACA;CACA;CAEA,YACE,SACA,UACA,gBACA;EACA,KAAK,WAAW;EAChB,KAAK,2BAAW,IAAI,IAAI,CAAC,GAAG,gBAAgB,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC;EACpE,KAAK,WAAW;CAClB;;;;;;;CAQA,KAAK,MAAsB;EACzB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK,QAAQ;EACvC,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,MAAM,GAC/B,MAAM,IAAI,cACR,aAAa,KAAK,SAAS,KAAK,wBAAwB,KAAK,8BAA8B,IAAI,OAAO,+EAExG;EAEF,OAAO,IAAI;CACb;CAEA,MACE,QACA,IACA,MACA,QAAQ,IACR,QAII,CAAC,GACC;EAEN,OAAO;GACL;GACA,KAHU,KAAK,KAAK,IAAI,KAAK,UAAU,KAAK,KAAK,IAAI;GAIrD;GACA,UAAU,KAAK,SAAS;GACxB,UAAU,MAAM;GAChB,YAAY,KAAK,SAAS;GAC1B,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;GACvD,GAAI,MAAM,YAAY,KAAA,IAClB,CAAC,IACD,EAAE,SAAS,EAAE,YAAY,MAAM,QAAQ,EAAE;EAC/C;CACF;CAEA,OAAO,SAAsB,CAAC,GAAW;EACvC,MAAM,SAAS,KAAK,SAAS;EAC7B,OAAO,WAAW,KAAK,SAAS,QAAQ;GACtC,UAAU,OAAO;GACjB,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,WAAW,OAAO;GAClB,GAAG;EACL,CAAC;CACH;CAEA,SAAS,KAAa,WAA4B;EAChD,MAAM,OAAO,KAAK,SAAS,MAAM;EACjC,IAAI,CAAC,aAAa,SAAS,KAAA,GACzB,MAAM,IAAI,gBACR,aAAa,KAAK,SAAS,KAAK,qBAAqB,KACvD;EAEF,OAAO;CACT;CAEA,MAAM,WAAoB,MAAoB;EAC5C,IAAI,CAAC,WACH,MAAM,IAAI,gBACR,aAAa,KAAK,SAAS,KAAK,qBAAqB,MACvD;CAEJ;CAEA,aACE,SACA,oBACQ;EACR,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,GAClC,MAAM,IAAI,kBAAkB,4CAA4C;EAE1E,OAAO,KAAK,OAAO;GAAE;GAAS;EAAmB,CAAC;CACpD;CAEA,IAAI,QAAgB;EAClB,OAAO,KAAK,SAAS;CACvB;CAEA,YAAoB;EAClB,MAAM,SAAS,KAAK,SAAS,aAAa;EAC1C,IAAI,WAAW,MACb,MAAM,IAAI,gBACR,aAAa,KAAK,SAAS,KAAK,0BAClC;EAEF,OAAO,KAAK,KAAK,OAAO,IAAI;CAC9B;CAEA,KAAK,GAAsB;EACzB,MAAM,QAAQ,KAAK,OAAO;GACxB,SAAS,EAAE;GACX,MAAM,EAAE;GACR,MAAM,EAAE;GACR,OAAO,EAAE;GACT,iBAAiB,EAAE;GACnB,cAAc,EAAE;GAChB,oBAAoB,EAAE;EACxB,CAAC;EACD,OAAO,KAAK,MAAM,OAAO,QAAQ,KAAK,OAAO,KAAK;CACpD;CAEA,IAAI,IAAkB;EACpB,OAAO,KAAK,MACV,OACA,UACA,KAAK,OACL,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,GAC5B,EACE,UAAU,GACZ,CACF;CACF;CAEA,OAAO,MAAqB;EAC1B,OAAO,KAAK,MAAM,QAAQ,UAAU,KAAK,OAAO,IAAI,EAAE,MAAM,KAAK,CAAC;CACpE;CAEA,OAAO,IAAY,MAAe,SAAmC;EACnE,OAAO,KAAK,MACV,SACA,UACA,KAAK,OACL,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,GAC5B;GACE,UAAU;GACV,MAAM;GACN;EACF,CACF;CACF;CAEA,WAAW,SAAkB,MAAqB;EAChD,KAAK,MAAM,KAAK,SAAS,aAAa,aAAa,aAAa;EAChE,OAAO,KAAK,MACV,SACA,eACA,KAAK,OACL,KAAK,aAAa,OAAO,GACzB,EACE,MAAM,KACR,CACF;CACF;CAEA,OAAO,IAAY,SAAmC;EACpD,OAAO,KAAK,MACV,UACA,UACA,KAAK,OACL,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,GAC5B;GACE,UAAU;GACV;EACF,CACF;CACF;CAEA,WAAW,SAAkB,oBAAgD;EAC3E,KAAK,MAAM,KAAK,SAAS,aAAa,aAAa,aAAa;EAChE,OAAO,KAAK,MACV,UACA,eACA,KAAK,OACL,KAAK,aAAa,SAAS,kBAAkB,CAC/C;CACF;CAEA,QAAQ,IAAwB,SAAoC;EAClE,MAAM,OAAO,KAAK,SAChB,WACA,KAAK,SAAS,aAAa,eAC7B;EACA,IAAK,OAAO,KAAA,OAAgB,YAAY,KAAA,IACtC,MAAM,IAAI,kBACR,6CACF;EAEF,MAAM,QACJ,YAAY,KAAA,IACR,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,IAC5B,KAAK,aAAa,OAAO;EAC/B,OAAO,KAAK,MAAM,QAAQ,WAAW,MAAM,OAAO,EAAE,UAAU,GAAG,CAAC;CACpE;CAEA,MAAM,GAAuB;EAC3B,MAAM,OAAO,KAAK,SAAS,SAAS,KAAK,SAAS,aAAa,KAAK;EACpE,MAAM,QACJ,EAAE,WAAW,KAAA,IAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC;EACrD,IAAI,EAAE,oBAAoB,KAAA,GACxB,MAAM,KAAK,CAAC,oBAAoB,OAAO,EAAE,eAAe,CAAC,CAAC;EAE5D,IAAI,EAAE,uBAAuB,KAAA,GAC3B,MAAM,KAAK,CAAC,uBAAuB,OAAO,EAAE,kBAAkB,CAAC,CAAC;EAElE,OAAO,KAAK,MAAM,OAAO,SAAS,MAAM,aAAa,KAAK,CAAC;CAC7D;CAEA,QAAQ,GAAyB;EAC/B,MAAM,OAAO,KAAK,SAAS,WAAW,KAAK,SAAS,aAAa,OAAO;EACxE,MAAM,QAA4B,CAAC;EACnC,IAAI,EAAE,UAAU,KAAA,GAAW;GACzB,MAAM,OAAO,KAAK,SAAS,OAAO,MAAM,MAAM,EAAE,SAAS,EAAE,KAAK;GAChE,IAAI,SAAS,KAAA,KAAa,CAAC,KAAK,SAC9B,MAAM,IAAI,kBACR,mBAAmB,EAAE,MAAM,uBAC7B;GAEF,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;EAC/B;EACA,IAAI,EAAE,YAAY,KAAA,GAAW;GAC3B,IAAI,CAAC,OAAO,cAAc,EAAE,OAAO,KAAK,EAAE,UAAU,GAClD,MAAM,IAAI,kBAAkB,iCAAiC;GAE/D,MAAM,KAAK,CAAC,WAAW,OAAO,EAAE,OAAO,CAAC,CAAC;EAC3C;EACA,IAAI,EAAE,WAAW,KAAA,GACf,MAAM,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC;EAEjC,OAAO,KAAK,MAAM,OAAO,WAAW,MAAM,aAAa,KAAK,CAAC;CAC/D;CAEA,MAAM,IAAkB;EACtB,MAAM,OAAO,KAAK,SAAS,SAAS,KAAK,SAAS,aAAa,KAAK;EACpE,OAAO,KAAK,MAAM,QAAQ,SAAS,MAAM,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,GAAG,EACtE,UAAU,GACZ,CAAC;CACH;CAEA,MAAM,MAAqB;EACzB,MAAM,OAAO,KAAK,SAChB,SACA,KAAK,SAAS,aAAa,aAC7B;EACA,OAAO,KAAK,MAAM,QAAQ,SAAS,MAAM,IAAI,EAAE,MAAM,KAAK,CAAC;CAC7D;CAEA,QAAQ,IAAkB;EACxB,MAAM,OAAO,KAAK,SAChB,WACA,KAAK,SAAS,aAAa,aAC7B;EACA,OAAO,KAAK,MAAM,QAAQ,WAAW,MAAM,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,GAAG,EACxE,UAAU,GACZ,CAAC;CACH;CAEA,UAAgB;EACd,OAAO,KAAK,MAAM,OAAO,WAAW,KAAK,SAAS,WAAW,IAAI,CAAC;CACpE;CAEA,UAAU,IAAkB;EAC1B,MAAM,OAAO,KAAK,SAChB,aACA,KAAK,SAAS,aAAa,SAC7B;EACA,OAAO,KAAK,MAAM,OAAO,aAAa,MAAM,KAAK,OAAO,EAAE,UAAU,GAAG,CAAC,GAAG,EACzE,UAAU,GACZ,CAAC;CACH;AACF;;;;;;AAOA,IAAa,iBAAb,MAIE;;CAEA;CACA;CACA;;CAGA,YACE,SACA,UACA,WACA,iBAAoC,CAAC,GACrC;EACA,KAAK,WAAW;EAChB,KAAK,QAAQ,IAAI,KAAK,SAAS,UAAU,iBAAiB,cAAc,CAAC;EACzE,KAAK,aAAa;CACpB;CAEA,MAAM,KAAQ,MAAY,SAAqC;EAC7D,MAAM,OAAO,MAAM,KAAK,WAAW,KAAK,MAAM,QAAQ,MAAM;EAC5D,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,GACjE,MAAM,IAAI,cACR,GAAG,KAAK,OAAO,GAAG,KAAK,IAAI,gCAAgC,QAAQ,IAAI,GACzE;EAEF,OAAO;CACT;CAEA,MAAM,MAAS,MAAY,SAAuC;EAChE,MAAM,OAAO,MAAM,KAAK,WAAW,KAAK,MAAM,QAAQ,MAAM;EAC5D,IAAI,CAAC,MAAM,QAAQ,IAAI,GACrB,MAAM,IAAI,cACR,GAAG,KAAK,OAAO,GAAG,KAAK,IAAI,+BAA+B,QAAQ,IAAI,GACxE;EAEF,OAAO;CACT;;CAGA,MAAM,KAAK,UAAuB,CAAC,GAAoB;EACrD,OAAO,KAAK,MAAM,KAAK,MAAM,KAAK,OAAO,GAAG,OAAO;CACrD;;CAGA,OAAO,QACL,UAAuB,CAAC,GACe;EACvC,MAAM,EAAE,eAAe,UAAU,WAAW,QAC1C,KAAK,SAAS;EAChB,MAAM,OAAO,QAAQ,SAAS,KAAK,IAAI,UAAU,GAAG;EACpD,IAAI,OAAO,QAAQ,QAAQ;EAC3B,SAAS;GACP,MAAM,OAAO,MAAM,KAAK,KAAK;IAAE,GAAG;IAAS;IAAM,OAAO;GAAK,CAAC;GAC9D,OAAO;GACP,IAAI,KAAK,SAAS,MAChB;GAEF,QAAQ;EACV;CACF;;CAGA,MAAM,IAAI,IAAY,UAA0B,CAAC,GAAkB;EACjE,OAAO,KAAK,KAAK,KAAK,MAAM,IAAI,EAAE,GAAG,OAAO;CAC9C;;CAGA,MAAM,OAAO,MAAc,UAA0B,CAAC,GAAkB;EACtE,OAAO,KAAK,KAAK,KAAK,MAAM,OAAO,IAAI,GAAG,OAAO;CACnD;;CAGA,MAAM,OACJ,IACA,MACA,UAAwB,CAAC,GACV;EACf,OAAO,KAAK,KAAK,KAAK,MAAM,OAAO,IAAI,MAAM,QAAQ,OAAO,GAAG,OAAO;CACxE;;CAGA,MAAM,WACJ,SACA,MACA,UAA0B,CAAC,GACN;EACrB,OAAO,KAAK,KAAK,KAAK,MAAM,WAAW,SAAS,IAAI,GAAG,OAAO;CAChE;;CAGA,MAAM,OAAO,IAAY,UAAwB,CAAC,GAAkB;EAClE,MAAM,KAAK,WAAW,KACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,OAAO,GACrC,QAAQ,MACV;CACF;;;;;;CAOA,MAAM,WACJ,SACA,UAA6B,CAAC,GACT;EACrB,OAAO,KAAK,KACV,KAAK,MAAM,WAAW,SAAS,QAAQ,kBAAkB,GACzD,OACF;CACF;;CAGA,MAAM,QAAQ,SAA8C;EAC1D,OAAO,KAAK,KAAK,KAAK,MAAM,QAAQ,QAAQ,IAAI,QAAQ,OAAO,GAAG,OAAO;CAC3E;;CAGA,MAAM,MAAM,UAAwB,CAAC,GAAwB;EAC3D,OAAO,KAAK,KAAK,KAAK,MAAM,MAAM,OAAO,GAAG,OAAO;CACrD;;CAGA,MAAM,QAAQ,UAA0B,CAAC,GAAwB;EAC/D,OAAO,KAAK,KAAK,KAAK,MAAM,QAAQ,OAAO,GAAG,OAAO;CACvD;;CAGA,MAAM,MAAM,IAAY,UAA0B,CAAC,GAAkB;EACnE,OAAO,KAAK,KAAK,KAAK,MAAM,MAAM,EAAE,GAAG,OAAO;CAChD;;CAGA,MAAM,YAAY,MAAc,UAA0B,CAAC,GAAkB;EAC3E,OAAO,KAAK,KAAK,KAAK,MAAM,MAAM,IAAI,GAAG,OAAO;CAClD;;CAGA,MAAM,QAAQ,IAAY,UAA0B,CAAC,GAAkB;EACrE,OAAO,KAAK,KAAK,KAAK,MAAM,QAAQ,EAAE,GAAG,OAAO;CAClD;;CAGA,MAAM,QAAQ,UAA0B,CAAC,GAA0B;EACjE,OAAO,KAAK,MAAM,KAAK,MAAM,QAAQ,GAAG,OAAO;CACjD;;CAGA,MAAM,UACJ,IACA,UAA0B,CAAC,GACJ;EACvB,OAAO,KAAK,MAAM,KAAK,MAAM,UAAU,EAAE,GAAG,OAAO;CACrD;;CAGA,YAAoB;EAClB,OAAO,KAAK,MAAM,UAAU;CAC9B;AACF;AAwEA,SAAS,QAAQ,MAAuB;CACtC,IAAI,SAAS,KAAA,GACX,OAAO;CAET,OAAO,SAAS,OACZ,SACA,MAAM,QAAQ,IAAI,IAChB,aACA,OAAO;AACf;;AAGA,IAAa,aAAb,MAAwB;CACtB;;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,6BAAsB,IAAI,IAA+B;;CAEzD,6BAAsB,IAAI,IAA+B;CACzD;CAEA,YAAY,SAAwB;EAClC,KAAK,UAAU,QAAQ;EACvB,KAAK,KAAK,QAAQ,MAAM,QAAQ;EAChC,KAAK,SAAS,QAAQ;EACtB,KAAK,iBAAiB,QAAQ;EAC9B,KAAK,cAAc,QAAQ;EAC3B,KAAK,eAAe,QAAQ;EAC5B,KAAK,kBAAkB,QAAQ;EAC/B,KAAK,cAAc,CAAC,GAAI,QAAQ,cAAc,CAAC,CAAE;EACjD,KAAK,eAAe,QAAQ;EAC5B,KAAK,kBAAkB,CAAC,GAAI,QAAQ,kBAAkB,CAAC,CAAE;EACzD,KAAK,qBAAqB,QAAQ,qBAAqB;EACvD,iBAAiB,KAAK,eAAe;EACrC,KAAK,aAAa;GAChB,MAAM,OAAO,MAAM,WAAW;IAC5B,MAAM,WAAW,MAAM,KAAK,MAAM,MAAM,MAAM;IAC9C,IAAI,SAAS,WAAW,KACtB;IAEF,IAAI;KACF,OAAQ,MAAM,SAAS,KAAK;IAC9B,SAAS,OAAO;KACd,MAAM,IAAI,cACR,GAAG,KAAK,OAAO,GAAG,KAAK,IAAI,QAAQ,SAAS,OAAO,mCACnD,EAAE,OAAO,MAAM,CACjB;IACF;GACF;GACA,MAAM,OAAO,MAAM,WAAW;IAC5B,OAAO,MAAM,KAAK,MAAM,MAAM,MAAM,EAAA,CAAG,MAAM,OAAO;GACtD;EACF;CACF;;CAGA,IAAI,YAA8B;EAChC,KAAK,YAAY,KAAK,UAAU;EAChC,OAAO;CACT;CAEA,MAAM,OAAO,SAA0C;EAErD,OAAQ,MAAM,KAAK,iBAAiB,EAAE,QAAQ,CAAC,KAAM;CACvD;;CAGA,MAAM,UAAU,OAA+B;EAC7C,OAAO,KAAK,OAAO,OAAO;CAC5B;;;;;;;CAQA,MAAM,iBAA8C;EAClD,IAAI,KAAK,gBAAgB,KAAA,GACvB;EAEF,MAAM,QACJ,OAAO,KAAK,gBAAgB,aACxB,MAAM,KAAK,YAAY,IACvB,KAAK;EACX,IAAI,OAAO,UAAU,YAAY,UAAU,IACzC,MAAM,IAAI,YAAY,+CAA+C;EAEvE,OAAO,KAAK,mBAAmB,KAAK;CACtC;;;;;;CAOA,MAAM,QAAyB;EAC7B,OACG,MAAM,KAAK,eAAe,KAAMC,WAAW,MAAM,KAAK,OAAO,KAAK,CAAC;CAExE;;CAGA,MAAM,YAGH;EACD,OAAO;GAAE,QAAQ,KAAK;GAAI,OAAO,MAAM,KAAK,MAAM;EAAE;CACtD;CAEA,MAAM,UACJ,MACA,OACA,UACA,QACmB;EACnB,MAAM,UAAU,IAAI,QAAQ;GAC1B,QAAQ;GACR,GAAG,KAAK;EACV,CAAC;EACD,IAAI,UAAU,MACZ,QAAQ,IAAI,iBAAiB,UAAU,OAAO;EAEhD,MAAM,OAAoB;GACxB,QAAQ,KAAK;GACb;GACA,QAAQ,UAAU;GAClB,GAAI,KAAK,iBAAiB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,KAAK,aAAa;EACvC;EACA,IAAI,KAAK,SAAS,KAAA,GAAW;GAC3B,QAAQ,IAAI,gBAAgB,kBAAkB;GAC9C,KAAK,OAAO,KAAK,UAAU,KAAK,IAAI;EACtC;EACA,MAAM,UAAU,IAAI,QAAQ,KAAK,KAAK,IAAI;EAC1C,MAAM,WAAW,OAAO,QAEC;GAGvB,IACE,CAAC,KAAK,uBACL,IAAI,QAAQ,QAAQ,IAAI,eAAe,KACtC,KAAK,iBAAiB,cACxB,iBAAiB,IAAI,QAAQ,GAAG,GAEhC,MAAM,IAAI,uBACR,wFAAwF,IAAI,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,OAAO,yEAE1H;GAEF,IAAI;IACF,OAAO,OAAO,KAAK,UAAU,WAAW,MAAA,CAAO,IAAI,OAAO;GAC5D,SAAS,OAAO;IACd,IAAI,IAAI,QAAQ,OAAO,SACrB,MAAM;IAER,MAAM,IAAI,iBACR,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACrD,EACE,OAAO,MACT,CACF;GACF;EACF;EACA,OAAO,kBACL,KAAK,aACL,QACF,CAAC,CAAC;GACA;GACA,UAAU,KAAK;GACf,IAAI,KAAK;GACT,UAAU,KAAK;GACf,OAAO,YAAa,MAAMA,WAAW,KAAK;GAC1C,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,SAAS;GACzD,YAAY,KAAK;GACjB;EACF,CAAC;CACH;;CAGA,MAAM,MAAM,MAAY,QAAoD;EAC1E,MAAM,WAAW,MAAM,KAAK,eAAe;EAC3C,MAAM,QAAQ,MAAM,KAAK,OAAO,KAAK;EACrC,IAAI,WAAW,MAAM,KAAK,UAAU,MAAM,OAAO,UAAU,MAAM;EACjE,IAAI,SAAS,WAAW,OAAO,KAAK,mBAAmB,KAAA,GAAW;GAChE,MAAM,QAAQ,MAAM,KAAK,OAAO,IAAI;GACpC,IAAI,UAAU,QAAQ,UAAU,OAAO;IACrC,MAAM,SAAS,MAAM,OAAO;IAC5B,WAAW,MAAM,KAAK,UAAU,MAAM,OAAO,UAAU,MAAM;GAC/D;EACF;EACA,IAAI;EACJ,IAAI,iBAAiB;EACrB,IAAI,SAAS,WAAW,OAAO,KAAK,oBAAoB,KAAA,GACtD,IAAI;GACF,MAAM,KAAK,gBAAgB,SAAS,MAAM,CAAC;EAC7C,SAAS,OAAO;GACd,iBAAiB;GACjB,gBAAgB;EAClB;EAEF,IAAI,SAAS,UAAU,KAAK;GAC1B,MAAM,UAAU,MAAM,oBAAoB,QAAQ;GAClD,IAAI,gBAAgB;IAClB,IAAI,QAAQ,UAAU,KAAA,GACpB,QAAQ,QAAQ;SAGhB,OAAO,eAAe,SAAS,uBAAuB;KACpD,OAAO;KACP,YAAY;KACZ,cAAc;KACd,UAAU;IACZ,CAAC;GAEL;GACA,MAAM;EACR;EACA,OAAO;CACT;CAEA,MAAM,SAAS,KAAa,SAAoC;EAC9D,MAAM,OAAa;GACjB,QAAQ;GACR;GACA,IAAI;GACJ,UAAU,KAAA;GACV,UAAU,KAAA;GACV,YAAY;GAEZ,GAAI,UAAU,EAAE,SAAS,EAAE,iBAAiB,WAAW,EAAE,IAAI,CAAC;EAChE;EACA,MAAM,WAAW,MAAM,KAAK,MAAM,MAAM,KAAA,CAAS;EACjD,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,SAAS,OAAO;GACd,MAAM,IAAI,cAAc,GAAG,IAAI,eAAe,EAAE,OAAO,MAAM,CAAC;EAChE;CACF;;CAGA,MAAM,SACJ,UAA0C,CAAC,GACxB;EACnB,MAAM,QAAQ,MAAM,KAAK,MAAM;EAC/B,MAAM,UAAU,KAAK,WAAW,IAAI,KAAK;EACzC,IAAI,YAAY,KAAA,KAAa,QAAQ,YAAY,MAC/C,OAAO;EAET,MAAM,UAAU,cACb,KAAK,YAAY,KAAK,SAAS,KAAK,OAAO,GAC5C,KAAK,SACL,KAAK,YACP;EACA,IAAI,YAAY,KAAA,GAAW;GACzB,KAAK,WAAW,MAAM;GACtB,KAAK,WAAW,IAAI,OAAO,OAAO;GAClC,QAAQ,YAAY;IAClB,IAAI,KAAK,WAAW,IAAI,KAAK,MAAM,SACjC,KAAK,WAAW,OAAO,KAAK;GAEhC,CAAC;EACH,OAAO;GAIL,KAAK,WAAW,IAAI,OAAO,OAAO;GAClC,MAAM,UAAU,WAA4B;IAC1C,IAAI,KAAK,WAAW,IAAI,KAAK,MAAM,SAAS;KAC1C,KAAK,WAAW,OAAO,KAAK;KAE5B,IACE,WAAW,KAAA,MACV,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,WAAW,SAAS,IAExD,KAAK,WAAW,IAAI,OAAO,QAAQ,QAAQ,MAAM,CAAC;IAEtD;GACF;GACA,QAAQ,KAAK,cAAc;IACzB,OAAO;GACT,CAAC;EACH;EACA,OAAO;CACT;;CAGA,MAAM,SAKJ,MACA,YAC+C;EAC/C,MAAM,WAAW,aAAa,MAAM,KAAK,SAAS,GAAG,MAAM,UAAU;EACrE,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,qBACR,iCAAiC,KAAK,GAAG,eAAe,KAAA,IAAY,KAAK,IAAI,aAAa,iBAC5F;EAEF,OAAO,IAAI,eACT,KAAK,SACL,UACA,KAAK,YACL,KAAK,eACP;CACF;AACF;;AAGA,SAAgB,aAAa,SAAoC;CAC/D,OAAO,IAAI,WAAW,OAAO;AAC/B"}

package/dist/codegen/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { p as parseManifest, r as createClient, v as CrudError } from "../client-CUFoB5IC.mjs";
+import { p as parseManifest, r as createClient, v as CrudError } from "../client-CzbFW5YG.mjs";
 import { readFile, writeFile } from "node:fs/promises";
 //#region src/codegen/generate.ts
 /** Loads the optional peer `json-schema-to-typescript`; a clear error when it is missing. */

package/dist/{events-DdT0AkNE.d.mts → events-CsFyFDMI.d.mts}

@@ -1,4 +1,4 @@
-import { i as MaybePromise, r as CrudEvent } from "./interfaces-s73cVfIF.mjs";
+import { i as MaybePromise, r as CrudEvent } from "./interfaces-Ca8EDwyf.mjs";
 //#region src/cache/policy.d.ts
 /** Per-resource cache policy, defaulted from the manifest `cache` hints. */
 /**
@@ -108,4 +108,4 @@ declare function getEventHub(options: EventHubOptions): EventHub;
 declare function subscribeEvents(options: SubscribeEventsOptions): () => void;
 //#endregion
 export { EventsConfig as a, subscribeEvents as c, cachePolicyFromManifest as d, tanstackCachePolicy as f, EventHubOptions as i, CachePolicy as l, EventHandlers as n, SubscribeEventsOptions as o, EventHub as r, getEventHub as s, EventConnection as t, ManifestCacheHints as u };
-//# sourceMappingURL=events-DdT0AkNE.d.mts.map
+//# sourceMappingURL=events-CsFyFDMI.d.mts.map

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { a as Middleware, c as RequestContext, i as MaybePromise, l as TokenProvider, n as CacheStore, o as Next, r as CrudEvent, s as Op, t as CacheEntry, u as composeMiddleware } from "./interfaces-s73cVfIF.mjs";
-import { A as Pagination, C as Capabilities, D as JsonObject, E as GetJson, F as manifestUrlFromCatalog, I as parseManifest, M as Schemas, N as findResource, O as Manifest, P as loadManifest, S as CacheHints, T as FieldSpec, _ as encodeParams, a as PredictOptions, b as AuthSpec, c as RestoreOptions, d as createClient, f as Filters, g as buildQuery, h as Sort, i as ListOptions, j as Resource, k as PROFILE, l as StatsOptions, m as QueryParams, n as ClientOptions, o as RequestOptions, p as QueryField, r as CrudClient, s as ResourceClient, t as BulkResult, u as WriteOptions, v as formatScalar, w as EventsSpec, x as CATALOG_PATH, y as quote } from "./client-Drvc7htU.mjs";
+import { a as Middleware, c as RequestContext, i as MaybePromise, l as TokenProvider, n as CacheStore, o as Next, r as CrudEvent, s as Op, t as CacheEntry, u as composeMiddleware } from "./interfaces-Ca8EDwyf.mjs";
+import { A as PROFILE, C as CacheHints, D as GetJson, E as FieldSpec, F as loadManifest, I as manifestUrlFromCatalog, L as parseManifest, M as Resource, N as Schemas, O as JsonObject, P as findResource, S as CATALOG_PATH, T as EventsSpec, _ as buildQuery, a as ListOptions, b as quote, c as ResourceClient, d as WriteOptions, f as createClient, g as Sort, h as QueryParams, i as DeleteManyOptions, j as Pagination, k as Manifest, l as RestoreOptions, m as QueryField, n as ClientOptions, o as PredictOptions, p as Filters, r as CrudClient, s as RequestOptions, t as BulkResult, u as StatsOptions, v as encodeParams, w as Capabilities, x as AuthSpec, y as formatScalar } from "./client-C_Qz7dS5.mjs";
 //#region src/auth.d.ts
 /** The scope of an anonymous caller. */
 export declare const ANON = "anon";
@@ -100,5 +100,5 @@ export declare class ServerError extends ProblemError {}
  */
 export declare function problemFromResponse(response: Response): Promise<ProblemError>;
 //#endregion
-export { type AuthSpec, type BulkResult, CATALOG_PATH, type CacheEntry, type CacheHints, type CacheStore, type Capabilities, type ClientOptions, CrudClient, type CrudEvent, type EventsSpec, type FieldSpec, type Filters, type GetJson, type JsonObject, type ListOptions, type Manifest, type MaybePromise, type Middleware, type Next, type Op, PROFILE, type Pagination, type PredictOptions, type ProblemDetail, type ProblemInit, type QueryField, type QueryParams, type RequestContext, type RequestOptions, type Resource, ResourceClient, type RestoreOptions, type Schemas, type Sort, type StatsOptions, type TokenProvider, type WriteOptions, buildQuery, composeMiddleware, createClient, encodeParams, findResource, formatScalar, loadManifest, manifestUrlFromCatalog, parseManifest, quote };
+export { type AuthSpec, type BulkResult, CATALOG_PATH, type CacheEntry, type CacheHints, type CacheStore, type Capabilities, type ClientOptions, CrudClient, type CrudEvent, type DeleteManyOptions, type EventsSpec, type FieldSpec, type Filters, type GetJson, type JsonObject, type ListOptions, type Manifest, type MaybePromise, type Middleware, type Next, type Op, PROFILE, type Pagination, type PredictOptions, type ProblemDetail, type ProblemInit, type QueryField, type QueryParams, type RequestContext, type RequestOptions, type Resource, ResourceClient, type RestoreOptions, type Schemas, type Sort, type StatsOptions, type TokenProvider, type WriteOptions, buildQuery, composeMiddleware, createClient, encodeParams, findResource, formatScalar, loadManifest, manifestUrlFromCatalog, parseManifest, quote };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,3 +1,3 @@
-import { A as Unauthorized, C as ManifestError, D as RateLimited, E as ProblemError, M as ValidationFailed, N as problemFromResponse, O as ResponseError, P as composeMiddleware, S as Locked, T as PreconditionFailed, _ as ConnectionFailed, a as encodeParams, b as InsecureTransportError, c as CATALOG_PATH, d as loadManifest, f as manifestUrlFromCatalog, g as ClientError, h as CapabilityError, i as buildQuery, j as UnknownResourceError, k as ServerError, l as PROFILE, m as BadRequest, n as ResourceClient, o as formatScalar, p as parseManifest, r as createClient, s as quote, t as CrudClient, u as findResource, v as CrudError, w as NotFound, x as InvalidQueryError, y as Forbidden } from "./client-CUFoB5IC.mjs";
+import { A as Unauthorized, C as ManifestError, D as RateLimited, E as ProblemError, M as ValidationFailed, N as problemFromResponse, O as ResponseError, P as composeMiddleware, S as Locked, T as PreconditionFailed, _ as ConnectionFailed, a as encodeParams, b as InsecureTransportError, c as CATALOG_PATH, d as loadManifest, f as manifestUrlFromCatalog, g as ClientError, h as CapabilityError, i as buildQuery, j as UnknownResourceError, k as ServerError, l as PROFILE, m as BadRequest, n as ResourceClient, o as formatScalar, p as parseManifest, r as createClient, s as quote, t as CrudClient, u as findResource, v as CrudError, w as NotFound, x as InvalidQueryError, y as Forbidden } from "./client-CzbFW5YG.mjs";
 import { i as staticToken, n as cacheScope, t as ANON } from "./auth-C5__H0Ln.mjs";
 export { ANON, BadRequest, CATALOG_PATH, CapabilityError, ClientError, ConnectionFailed, CrudClient, CrudError, Forbidden, InsecureTransportError, InvalidQueryError, Locked, ManifestError, NotFound, PROFILE, PreconditionFailed, ProblemError, RateLimited, ResourceClient, ResponseError, ServerError, Unauthorized, UnknownResourceError, ValidationFailed, buildQuery, cacheScope, composeMiddleware, createClient, encodeParams, findResource, formatScalar, loadManifest, manifestUrlFromCatalog, parseManifest, problemFromResponse, quote, staticToken };

package/dist/{interfaces-s73cVfIF.d.mts → interfaces-Ca8EDwyf.d.mts}

@@ -59,6 +59,15 @@ interface RequestContext {
    * Authorization credential actually sent.
    */
   readonly scope: string;
+  /**
+   * Set by the client only when `createClient({ cacheScope })` is used: the
+   * caller scope the cache keys by (opaque and key-safe, internally
+   * namespaced; it equals `scope`). When absent the cache derives the scope
+   * from the Authorization header. A middleware that builds a new context must
+   * carry it through (`{ ...ctx, request }`), or the cache falls back to the
+   * header scope.
+   */
+  readonly cacheScope?: string;
   /**
    * The resource's `api_version` from the manifest, or `null` when it has
    * none. Part of the cache key, so versions never share entries (the cache
@@ -106,4 +115,4 @@ interface CrudEvent {
 declare function composeMiddleware(chain: readonly Middleware[], terminal: Next): Next;
 //#endregion
 export { Middleware as a, RequestContext as c, MaybePromise as i, TokenProvider as l, CacheStore as n, Next as o, CrudEvent as r, Op as s, CacheEntry as t, composeMiddleware as u };
-//# sourceMappingURL=interfaces-s73cVfIF.d.mts.map
+//# sourceMappingURL=interfaces-Ca8EDwyf.d.mts.map

package/dist/tanstack/index.d.mts

@@ -1,6 +1,6 @@
-import { r as CrudEvent } from "../interfaces-s73cVfIF.mjs";
-import { a as EventsConfig, c as subscribeEvents, f as tanstackCachePolicy, i as EventHubOptions, l as CachePolicy, n as EventHandlers, o as SubscribeEventsOptions, r as EventHub, s as getEventHub, t as EventConnection, u as ManifestCacheHints } from "../events-DdT0AkNE.mjs";
-import { D as JsonObject, O as Manifest, r as CrudClient, s as ResourceClient } from "../client-Drvc7htU.mjs";
+import { r as CrudEvent } from "../interfaces-Ca8EDwyf.mjs";
+import { a as EventsConfig, c as subscribeEvents, f as tanstackCachePolicy, i as EventHubOptions, l as CachePolicy, n as EventHandlers, o as SubscribeEventsOptions, r as EventHub, s as getEventHub, t as EventConnection, u as ManifestCacheHints } from "../events-CsFyFDMI.mjs";
+import { O as JsonObject, c as ResourceClient, k as Manifest, r as CrudClient } from "../client-C_Qz7dS5.mjs";
 import { DataTag, QueryClient } from "@tanstack/query-core";
 //#region src/tanstack/adapter.d.ts
 type Init = {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@craftainer/crud-sdk",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "description": "Typed fetch client for craftainer CRUD APIs: manifest-driven resources, query builder, problem-details errors, opt-in cache with SSE invalidation and TanStack Query helpers.",
-  "license": "GPL-3.0-or-later",
+  "license": "GPL-3.0-only",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/craftainer/lib-crud-sdk-ts.git"