@djangocfg/api 2.1.455 → 2.1.457

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/_api/generated/helpers/errors.ts","../src/_api/generated/helpers/auth.ts","../src/_api/generated/helpers/logger.ts","../src/_api/generated/core/bodySerializer.gen.ts","../src/_api/generated/core/params.gen.ts","../src/_api/generated/core/serverSentEvents.gen.ts","../src/_api/generated/core/pathSerializer.gen.ts","../src/_api/generated/core/utils.gen.ts","../src/_api/generated/core/auth.gen.ts","../src/_api/generated/client/utils.gen.ts","../src/_api/generated/client/client.gen.ts","../src/_api/generated/client.gen.ts","../src/_api/generated/sdk.gen.ts","../src/_api/generated/_cfg_accounts/api.ts","../src/_api/generated/helpers/storage.ts","../src/_api/generated/helpers/validation-events.ts","../src/_api/generated/_cfg_centrifugo/api.ts","../src/_api/generated/_cfg_totp/api.ts","../src/_api/generated/index.ts","../src/auth/utils/env.ts","../src/log-control.ts"],"sourcesContent":["/**\n * @djangocfg/api — package entry point.\n *\n * Per-group API singletons + API classes + shared utilities.\n *\n * Usage:\n *   import { cfgAccountsApi, AccountsTypes } from '@djangocfg/api';\n *   await cfgAccountsApi.accounts.cfgAccountsLogin({ body });\n */\n\nexport * from './_api/generated';\n\n// Hey API SDK classes (one per OpenAPI tag) — direct callable static methods.\nexport {\n  CfgAccountsApiKey,\n  CfgAccountsOauth,\n  CfgAccounts,\n  CfgAccountsProfile,\n  CfgAccountsAuth,\n  CfgCentrifugo,\n  CfgTotpBackupCodes,\n  CfgTotp,\n  CfgTotpSetup,\n  CfgTotpVerify,\n} from './_api/generated/sdk.gen';\n\n// Type namespaces (one per group) for code that needs `AccountsTypes.User`.\nexport type * as AccountsTypes from './_api/generated/_cfg_accounts/types.gen';\nexport type * as TotpTypes from './_api/generated/_cfg_totp/types.gen';\nexport type * as CentrifugoTypes from './_api/generated/_cfg_centrifugo/types.gen';\n\n// Convenience top-level type re-exports.\nexport type { User } from './_api/generated/_cfg_accounts/types.gen';\n\n// Legacy alias for code that still imports `api` (= cfg_accounts singleton).\nexport { CfgAccountsApi as api } from './_api/generated';\n\n// Global runtime log-level control (role-aware verbosity).\nexport {\n  getLogLevel,\n  setLogLevel,\n  onLogLevelChange,\n  applyRoleLogPolicy,\n  type ConsolaLevel,\n} from './log-control';\n\n// Env flags — single source of truth (api is the lowest shared package).\nexport { isDev, isProd, isBrowser, isStaticBuild, dpopEnabled } from './auth/utils/env';\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Typed error classes with DRF field-error support.\n// DO NOT EDIT — re-run `make gen`.\n\n/**\n * HTTP API Error with DRF field-specific validation errors.\n */\nexport class APIError extends Error {\n  constructor(\n    public statusCode: number,\n    public statusText: string,\n    public response: any,\n    public url: string,\n    message?: string,\n  ) {\n    super(message || `HTTP ${statusCode}: ${statusText}`);\n    this.name = \"APIError\";\n  }\n\n  get details(): Record<string, any> | null {\n    if (typeof this.response === \"object\" && this.response !== null) {\n      return this.response;\n    }\n    return null;\n  }\n\n  get fieldErrors(): Record<string, string[]> | null {\n    const details = this.details;\n    if (!details) return null;\n    const fieldErrors: Record<string, string[]> = {};\n    for (const [key, value] of Object.entries(details)) {\n      if (Array.isArray(value)) fieldErrors[key] = value;\n    }\n    return Object.keys(fieldErrors).length > 0 ? fieldErrors : null;\n  }\n\n  get errorMessage(): string {\n    const details = this.details;\n    if (!details) return this.message;\n    if (details.detail) {\n      return Array.isArray(details.detail) ? details.detail.join(\", \") : String(details.detail);\n    }\n    if (details.error) return String(details.error);\n    if (details.message) return String(details.message);\n    const fieldErrors = this.fieldErrors;\n    if (fieldErrors) {\n      const firstField = Object.keys(fieldErrors)[0];\n      if (firstField) return `${firstField}: ${fieldErrors[firstField]?.join(\", \")}`;\n    }\n    return this.message;\n  }\n\n  get isValidationError(): boolean { return this.statusCode === 400; }\n  get isAuthError(): boolean { return this.statusCode === 401; }\n  get isPermissionError(): boolean { return this.statusCode === 403; }\n  get isNotFoundError(): boolean { return this.statusCode === 404; }\n  get isServerError(): boolean { return this.statusCode >= 500 && this.statusCode < 600; }\n}\n\n/** Network Error (connection failed, timeout, etc.) */\nexport class NetworkError extends Error {\n  constructor(\n    message: string,\n    public url: string,\n    public originalError?: Error,\n  ) {\n    super(message);\n    this.name = \"NetworkError\";\n  }\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Global auth store. Wired into the shared `client` from `client.gen.ts`\n// via `installAuthOnClient(client)` — called synchronously by the\n// post-processed bottom of client.gen.ts. No circular import here.\n// DO NOT EDIT — re-run `make gen`.\n\nimport { APIError } from './errors';\n\nconst ACCESS_KEY = 'cfg.access_token';\nconst REFRESH_KEY = 'cfg.refresh_token';\nconst API_KEY_KEY = 'cfg.api_key';\n\nconst isBrowser = typeof window !== 'undefined';\n\nexport type StorageMode = 'localStorage' | 'cookie';\n\n// ── Storage backends (browser-only; server-side reads return null) ─────────\n\ninterface KVStore {\n  get(key: string): string | null;\n  set(key: string, value: string | null): void;\n}\n\nconst localStorageBackend: KVStore = {\n  get(key) {\n    if (!isBrowser) return null;\n    try { return window.localStorage.getItem(key); } catch { return null; }\n  },\n  set(key, value) {\n    if (!isBrowser) return;\n    try {\n      if (value === null) window.localStorage.removeItem(key);\n      else window.localStorage.setItem(key, value);\n    } catch {}\n  },\n};\n\n/** 30 days, matches typical refresh-token lifetime. */\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\n\nconst cookieBackend: KVStore = {\n  get(key) {\n    if (!isBrowser) return null;\n    try {\n      const re = new RegExp(`(?:^|;\\\\s*)${encodeURIComponent(key)}=([^;]*)`);\n      const m = document.cookie.match(re);\n      return m ? decodeURIComponent(m[1]) : null;\n    } catch { return null; }\n  },\n  set(key, value) {\n    if (!isBrowser) return;\n    try {\n      const k = encodeURIComponent(key);\n      const secure = window.location.protocol === 'https:' ? '; Secure' : '';\n      if (value === null) {\n        document.cookie = `${k}=; Path=/; Max-Age=0; SameSite=Lax${secure}`;\n      } else {\n        const v = encodeURIComponent(value);\n        document.cookie = `${k}=${v}; Path=/; Max-Age=${COOKIE_MAX_AGE}; SameSite=Lax${secure}`;\n      }\n    } catch {}\n  },\n};\n\nlet _storage: KVStore = localStorageBackend;\nlet _storageMode: StorageMode = 'localStorage';\n\n/** Detect locale from `NEXT_LOCALE` cookie or `navigator.language`. */\nfunction detectLocale(): string | null {\n  try {\n    if (typeof document !== 'undefined') {\n      const m = document.cookie.match(/(?:^|;\\s*)NEXT_LOCALE=([^;]*)/);\n      if (m) return decodeURIComponent(m[1]);\n    }\n    if (typeof navigator !== 'undefined' && navigator.language) {\n      return navigator.language;\n    }\n  } catch {}\n  return null;\n}\n\n/** Default baseUrl.\n *\n * Browser: uses NEXT_PUBLIC_API_PROXY_URL if set (empty string = same-origin\n * Next.js proxy), otherwise falls back to NEXT_PUBLIC_API_URL directly.\n * Set NEXT_PUBLIC_API_PROXY_URL='' in apps that proxy /apix/* via Next.js\n * Route Handler; leave it unset in apps that hit Django directly.\n *\n * Server (SSR / RSC / Edge): use NEXT_PUBLIC_API_URL so server-side fetch\n * reaches Django directly (proxy is a same-origin HTTP round-trip on server).\n */\nfunction defaultBaseUrl(): string {\n  if (typeof window !== 'undefined') {\n    try {\n      if (typeof process !== 'undefined' && process.env) {\n        if (process.env.NEXT_PUBLIC_STATIC_BUILD === 'true') return '';\n        // NEXT_PUBLIC_API_PROXY_URL='' means same-origin proxy (e.g. /apix/* route handler).\n        // Next.js inlines defined vars as their value; undefined means the var was not set.\n        if (process.env.NEXT_PUBLIC_API_PROXY_URL !== undefined)\n          return process.env.NEXT_PUBLIC_API_PROXY_URL;\n        return process.env.NEXT_PUBLIC_API_URL || '';\n      }\n    } catch {}\n    return '';\n  }\n  try {\n    if (typeof process !== 'undefined' && process.env) {\n      if (process.env.NEXT_PUBLIC_STATIC_BUILD === 'true') return '';\n      return process.env.NEXT_PUBLIC_API_URL || '';\n    }\n  } catch {}\n  return '';\n}\n\n/** Default API key fallback from `NEXT_PUBLIC_API_KEY`.\n *\n * Both browser and server: if NEXT_PUBLIC_API_KEY is set it is used as a\n * global fallback (e.g. a public demo key). When not set, returns null so\n * per-request keys passed via options.headers take effect unobstructed.\n */\nfunction defaultApiKey(): string | null {\n  try {\n    if (typeof process !== 'undefined' && process.env?.NEXT_PUBLIC_API_KEY) {\n      return process.env.NEXT_PUBLIC_API_KEY;\n    }\n  } catch {}\n  return null;\n}\n\n// ── In-memory overrides (win over storage / env) ───────────────────────────\nlet _localeOverride: string | null = null;\nlet _apiKeyOverride: string | null = null;\nlet _baseUrlOverride: string | null = null;\nlet _withCredentials = true;\nlet _onUnauthorized: ((response: Response) => void) | null = null;\n\n/**\n * User-supplied refresh handler. Receives the current refresh token,\n * must return a fresh access (and optional refresh) pair or null on failure.\n * Set once at app bootstrap via `auth.setRefreshHandler(...)`.\n */\ntype RefreshResult = { access: string; refresh?: string } | null;\ntype RefreshHandler = (refreshToken: string) => Promise<RefreshResult>;\nlet _refreshHandler: RefreshHandler | null = null;\n\n/** Single-flight: every concurrent 401 awaits the same refresh. */\nlet _refreshInflight: Promise<string | null> | null = null;\n\n/** Marker header — set on retried requests so we never loop on 401. */\nconst RETRY_MARKER = 'X-Auth-Retry';\n\n/**\n * Captured reference to the shared Hey API client. Set exactly once by\n * `installAuthOnClient(client)` (called from client.gen.ts). All `auth.set*`\n * methods that mutate transport config (baseUrl / credentials) push through\n * this reference. Until installed, those mutations are silently buffered as\n * in-memory state — the next request after install will pick them up.\n */\ntype HeyClient = {\n  setConfig(opts: Record<string, unknown>): void;\n  interceptors: {\n    request: { use(fn: (req: Request) => Request | Promise<Request>): void };\n    response: { use(fn: (res: Response, req: Request) => Response | Promise<Response>): void };\n    error: { use(fn: (err: unknown, res: Response | undefined, req: Request | undefined, opts: unknown) => unknown): void };\n  };\n};\nlet _client: HeyClient | null = null;\n\nfunction pushClientConfig(): void {\n  if (!_client) return;\n  _client.setConfig({\n    baseUrl: auth.getBaseUrl(),\n    credentials: _withCredentials ? 'include' : 'same-origin',\n  });\n}\n\n/**\n * Global auth/config store. All getters read live state every call —\n * the interceptor below uses these to attach headers per-request.\n *\n * Default storage backend is `localStorage`. Switch to cookies (e.g.\n * for Next.js SSR cookie access) via `auth.setStorageMode('cookie')`\n * early in the app bootstrap.\n *\n * @example\n *   import { auth } from '@your/api';\n *   auth.setToken(jwt);\n *   auth.clearTokens();\n *   auth.setStorageMode('cookie');\n */\nexport const auth = {\n  // ── Storage mode ──────────────────────────────────────────────────\n  getStorageMode(): StorageMode { return _storageMode; },\n  setStorageMode(mode: StorageMode): void {\n    _storageMode = mode;\n    _storage = mode === 'cookie' ? cookieBackend : localStorageBackend;\n  },\n\n  // ── Bearer token ──────────────────────────────────────────────────\n  getToken(): string | null { return _storage.get(ACCESS_KEY); },\n  setToken(token: string | null): void { _storage.set(ACCESS_KEY, token); },\n  getRefreshToken(): string | null { return _storage.get(REFRESH_KEY); },\n  setRefreshToken(token: string | null): void { _storage.set(REFRESH_KEY, token); },\n  clearTokens(): void { _storage.set(ACCESS_KEY, null); _storage.set(REFRESH_KEY, null); },\n  isAuthenticated(): boolean { return _storage.get(ACCESS_KEY) !== null; },\n\n  // ── API key ───────────────────────────────────────────────────────\n  getApiKey(): string | null {\n    return _apiKeyOverride ?? _storage.get(API_KEY_KEY) ?? defaultApiKey();\n  },\n  setApiKey(key: string | null): void { _apiKeyOverride = key; },\n  setApiKeyPersist(key: string | null): void {\n    _apiKeyOverride = key;\n    _storage.set(API_KEY_KEY, key);\n  },\n  clearApiKey(): void { _apiKeyOverride = null; _storage.set(API_KEY_KEY, null); },\n\n  // ── Locale ────────────────────────────────────────────────────────\n  getLocale(): string | null { return _localeOverride ?? detectLocale(); },\n  setLocale(locale: string | null): void { _localeOverride = locale; },\n\n  // ── Base URL ──────────────────────────────────────────────────────\n  getBaseUrl(): string {\n    const url = (_baseUrlOverride ?? defaultBaseUrl());\n    return url.replace(/\\/$/, '');\n  },\n  setBaseUrl(url: string | null): void {\n    _baseUrlOverride = url ? url.replace(/\\/$/, '') : null;\n    pushClientConfig();\n  },\n\n  // ── Credentials toggle ────────────────────────────────────────────\n  getWithCredentials(): boolean { return _withCredentials; },\n  setWithCredentials(value: boolean): void {\n    _withCredentials = value;\n    pushClientConfig();\n  },\n\n  // ── 401 handler ───────────────────────────────────────────────────\n  /**\n   * Fired when the server returns 401 AND no refresh path recovers it\n   * (no refresh token, no refresh handler, refresh failed, or retry\n   * still 401). The app should clear local state and redirect to login.\n   *\n   * NOT fired for 401 that gets transparently recovered by the refresh\n   * handler — those are invisible to callers.\n   */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    _onUnauthorized = cb;\n  },\n\n  /**\n   * Register the refresh strategy. The handler receives the current\n   * refresh token and must call your refresh endpoint, returning\n   * `{ access, refresh? }` on success or `null` on failure.\n   *\n   * @example\n   *   auth.setRefreshHandler(async (refresh) => {\n   *     const { data } = await Auth.tokenRefreshCreate({ body: { refresh } });\n   *     return data ? { access: data.access, refresh: data.refresh } : null;\n   *   });\n   */\n  setRefreshHandler(fn: RefreshHandler | null): void {\n    _refreshHandler = fn;\n  },\n\n  /**\n   * Proactively run the registered refresh handler right now, reusing the\n   * SAME single-flight promise as the 401-recovery interceptor. Callers\n   * (e.g. an expiry timer / focus / reconnect) get token rotation,\n   * de-duplication and rotated-token persistence for free — they must NOT\n   * re-implement any of it. Returns the fresh access token, or null if\n   * there is no handler / no refresh token / the refresh failed.\n   */\n  refreshNow(): Promise<string | null> {\n    return tryRefresh();\n  },\n};\n\n/**\n * Run the user-supplied refresh handler under single-flight, persist\n * the new tokens, and return the fresh access token (or null on any\n * failure path). All concurrent 401s share the same in-flight promise.\n */\nasync function tryRefresh(): Promise<string | null> {\n  if (_refreshInflight) return _refreshInflight;\n  if (!_refreshHandler) return null;\n  const refresh = auth.getRefreshToken();\n  if (!refresh) return null;\n\n  _refreshInflight = (async () => {\n    try {\n      const result = await _refreshHandler!(refresh);\n      if (!result?.access) return null;\n      auth.setToken(result.access);\n      if (result.refresh) auth.setRefreshToken(result.refresh);\n      return result.access;\n    } catch {\n      return null;\n    } finally {\n      _refreshInflight = null;\n    }\n  })();\n\n  return _refreshInflight;\n}\n\n/**\n * Wire the shared client to the global auth store. Called exactly\n * once from `client.gen.ts` (post-processed) right after\n * `createClient()`. Synchronous — no microtask, no TDZ races.\n *\n * Safe to call from server / SSR: storage backends short-circuit on\n * non-browser environments, so headers populated by the interceptor\n * are simply absent server-side (which is the correct behaviour\n * unless the caller explicitly sets a server-side token).\n *\n * ── How API key auth works ────────────────────────────────────────────────\n *\n * There are three ways to supply X-API-Key, in priority order:\n *\n *   1. Per-request header (highest priority, overrides everything):\n *        SomeApi.someEndpoint({ headers: { 'X-API-Key': userKey } })\n *      Use this in playgrounds or any context where the key comes from\n *      user input rather than app config.\n *\n *   2. Global override via auth.setApiKey(key) — applies to every request\n *      from this client until cleared. Good for single-user sessions.\n *\n *   3. NEXT_PUBLIC_API_KEY env var — read by defaultApiKey() on every request.\n *      Use as a public fallback key (e.g. a shared demo key for unauthenticated\n *      visitors). When not set, returns null so per-request keys work freely.\n *\n * ── baseUrl gotcha with proxy packages ───────────────────────────────────\n *\n * If another package (e.g. @carapis/catalog-api/client) calls\n * `auth.setBaseUrl('')` on import, ALL requests from this shared client\n * will go to relative paths (Next.js proxy) instead of hitting Django\n * directly. This is intentional for the public catalog — but breaks any\n * feature that needs to reach Django with a dynamic API key from the\n * browser (e.g. a playground).\n *\n * Fix: pass `baseUrl` explicitly per-call to override the global setting:\n *   SomeApi.someEndpoint({\n *     baseUrl: process.env.NEXT_PUBLIC_API_URL,\n *     headers: { 'X-API-Key': userKey },\n *   })\n */\n// ── DPoP (RFC 9449) — sender-constrained tokens ────────────────────────────\n//\n// When NEXT_PUBLIC_DPOP_ENABLED === 'true', the client holds a P-256 keypair\n// whose PRIVATE key is non-extractable (Web Crypto `extractable:false`) and\n// stored in IndexedDB. JS — including XSS — can sign with it but can NEVER read\n// it. Each request carries a fresh `DPoP` proof signed by that key; the backend\n// binds the token to the key (`cnf.jkt`) and rejects any request whose proof key\n// doesn't match. A stolen token is therefore useless to an attacker.\n//\n// Dormant unless the env flag is on — bearer-mode apps are unaffected.\n\nfunction dpopEnabled(): boolean {\n  try {\n    return typeof process !== 'undefined'\n      && process.env?.NEXT_PUBLIC_DPOP_ENABLED === 'true';\n  } catch { return false; }\n}\n\nconst _DPOP_DB = 'cfg-auth';\nconst _DPOP_STORE = 'keys';\nconst _DPOP_KEY_ID = 'dpop-ec-p256';\n\nfunction _idbOpen(): Promise<IDBDatabase> {\n  return new Promise((resolve, reject) => {\n    const req = indexedDB.open(_DPOP_DB, 1);\n    req.onupgradeneeded = () => req.result.createObjectStore(_DPOP_STORE);\n    req.onsuccess = () => resolve(req.result);\n    req.onerror = () => reject(req.error);\n  });\n}\n\nfunction _idbGet(key: string): Promise<CryptoKeyPair | undefined> {\n  return _idbOpen().then((db) => new Promise((resolve, reject) => {\n    const tx = db.transaction(_DPOP_STORE, 'readonly');\n    const req = tx.objectStore(_DPOP_STORE).get(key);\n    req.onsuccess = () => resolve(req.result);\n    req.onerror = () => reject(req.error);\n  }));\n}\n\nfunction _idbPut(key: string, value: CryptoKeyPair): Promise<void> {\n  return _idbOpen().then((db) => new Promise((resolve, reject) => {\n    const tx = db.transaction(_DPOP_STORE, 'readwrite');\n    tx.objectStore(_DPOP_STORE).put(value, key);\n    tx.oncomplete = () => resolve();\n    tx.onerror = () => reject(tx.error);\n  }));\n}\n\n/** Single-flight keypair init — the private key is created non-extractable. */\nlet _dpopKeyPromise: Promise<CryptoKeyPair> | null = null;\n\nfunction _getDpopKeyPair(): Promise<CryptoKeyPair> {\n  if (_dpopKeyPromise) return _dpopKeyPromise;\n  _dpopKeyPromise = (async () => {\n    const existing = await _idbGet(_DPOP_KEY_ID).catch(() => undefined);\n    if (existing) return existing;\n    const pair = await crypto.subtle.generateKey(\n      { name: 'ECDSA', namedCurve: 'P-256' },\n      false, // extractable:false — JS can sign but never export the private key\n      ['sign'],\n    );\n    // CryptoKey is structured-cloneable; IndexedDB persists it across reloads\n    // WITHOUT ever exposing raw key bytes to JS.\n    await _idbPut(_DPOP_KEY_ID, pair).catch(() => {});\n    return pair;\n  })();\n  return _dpopKeyPromise;\n}\n\nfunction _b64urlFromBytes(bytes: ArrayBuffer | Uint8Array): string {\n  const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n  let s = '';\n  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);\n  return btoa(s).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n\nfunction _b64urlFromString(str: string): string {\n  return _b64urlFromBytes(new TextEncoder().encode(str));\n}\n\n/** ECDSA raw signature (r||s) → JOSE base64url (Web Crypto already returns raw). */\nasync function _publicJwk(pub: CryptoKey): Promise<Record<string, string>> {\n  const jwk = await crypto.subtle.exportKey('jwk', pub);\n  // Public components only — required RFC 7638 members for EC.\n  return { kty: 'EC', crv: 'P-256', x: jwk.x as string, y: jwk.y as string };\n}\n\n/** Build a DPoP proof JWT for this request (htm/htu/iat/jti), signed in-key. */\nasync function _makeDpopProof(method: string, url: string): Promise<string | null> {\n  try {\n    const pair = await _getDpopKeyPair();\n    const jwk = await _publicJwk(pair.publicKey);\n    const header = { typ: 'dpop+jwt', alg: 'ES256', jwk };\n    // htu = scheme://authority/path without query/fragment.\n    const htu = url.split('#')[0].split('?')[0];\n    const jti =\n      (crypto.randomUUID && crypto.randomUUID()) ||\n      _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));\n    const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1000), jti };\n    const signingInput =\n      `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;\n    const sig = await crypto.subtle.sign(\n      { name: 'ECDSA', hash: 'SHA-256' },\n      pair.privateKey,\n      new TextEncoder().encode(signingInput),\n    );\n    return `${signingInput}.${_b64urlFromBytes(sig)}`;\n  } catch {\n    return null; // never break a request because proof generation failed\n  }\n}\n\nexport function installAuthOnClient(client: HeyClient): void {\n  if (_client) return; // idempotent\n  _client = client;\n\n  client.setConfig({\n    baseUrl: auth.getBaseUrl(),\n    credentials: _withCredentials ? 'include' : 'same-origin',\n  });\n\n  client.interceptors.request.use(async (request) => {\n    const token = auth.getToken();\n    if (token) request.headers.set('Authorization', `Bearer ${token}`);\n\n    const locale = auth.getLocale();\n    if (locale) request.headers.set('Accept-Language', locale);\n\n    // Only set X-API-Key from global store if NOT already present on the\n    // request — per-request headers (option 1 above) take precedence.\n    const apiKey = auth.getApiKey();\n    if (apiKey && !request.headers.has('X-API-Key')) request.headers.set('X-API-Key', apiKey);\n\n    try {\n      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;\n      if (tz) request.headers.set('X-Timezone', tz);\n    } catch {}\n    request.headers.set('X-Client-Time', new Date().toISOString());\n\n    // DPoP proof — sign a fresh per-request proof with the non-extractable key.\n    // Only in a browser, only when enabled. Failure is non-fatal (proof null).\n    if (dpopEnabled() && typeof window !== 'undefined') {\n      const proof = await _makeDpopProof(request.method, request.url);\n      if (proof) request.headers.set('DPoP', proof);\n    }\n\n    return request;\n  });\n\n  // Wrap raw JSON error objects (thrown by hey-api on non-2xx responses) into\n  // APIError so callers can do `error instanceof APIError` and read\n  // `error.statusCode` / `error.response` consistently.\n  client.interceptors.error.use((err, res, req) => {\n    if (err instanceof APIError) return err;\n    const url = (req as Request | undefined)?.url ?? '';\n    const status = (res as Response | undefined)?.status ?? 0;\n    const statusText = (res as Response | undefined)?.statusText ?? '';\n    return new APIError(status, statusText, err, url);\n  });\n\n  client.interceptors.response.use(async (response, request) => {\n    if (response.status !== 401) return response;\n\n    // Already retried once — give up to avoid loops.\n    if (request.headers.get(RETRY_MARKER)) {\n      if (_onUnauthorized) {\n        try { _onUnauthorized(response); } catch {}\n      }\n      return response;\n    }\n\n    const newToken = await tryRefresh();\n    if (!newToken) {\n      if (_onUnauthorized) {\n        try { _onUnauthorized(response); } catch {}\n      }\n      return response;\n    }\n\n    // Retry the original request once with the new token. We mutate a\n    // clone so the original Request body (already consumed by the\n    // failed call) doesn't trip \"body already used\".\n    const retry = request.clone();\n    retry.headers.set('Authorization', `Bearer ${newToken}`);\n    retry.headers.set(RETRY_MARKER, '1');\n    // This retry uses raw fetch() and bypasses the request interceptor, so the\n    // DPoP proof must be re-attached here or a bound token would 401 on retry.\n    if (dpopEnabled() && typeof window !== 'undefined') {\n      const proof = await _makeDpopProof(retry.method, retry.url);\n      if (proof) retry.headers.set('DPoP', proof);\n    }\n    try {\n      const retried = await fetch(retry);\n      if (retried.status === 401 && _onUnauthorized) {\n        try { _onUnauthorized(retried); } catch {}\n      }\n      return retried;\n    } catch {\n      // Network error on retry — surface the original 401.\n      if (_onUnauthorized) {\n        try { _onUnauthorized(response); } catch {}\n      }\n      return response;\n    }\n  });\n}\n\nexport type Auth = typeof auth;\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// API logger built on consola. Optional dependency — install if you enable logging:\n//   npm install consola\n// DO NOT EDIT — re-run `make gen`.\n\nimport { type ConsolaInstance, createConsola } from \"consola\";\n\nexport interface RequestLog {\n  method: string;\n  url: string;\n  headers?: Record<string, string>;\n  body?: any;\n  timestamp: number;\n}\n\nexport interface ResponseLog {\n  status: number;\n  statusText: string;\n  data?: any;\n  duration: number;\n  timestamp: number;\n}\n\nexport interface ErrorLog {\n  message: string;\n  statusCode?: number;\n  fieldErrors?: Record<string, string[]>;\n  duration: number;\n  timestamp: number;\n}\n\nexport interface LoggerConfig {\n  enabled: boolean;\n  logRequests: boolean;\n  logResponses: boolean;\n  logErrors: boolean;\n  logBodies: boolean;\n  logHeaders: boolean;\n  consola?: ConsolaInstance;\n}\n\nconst DEFAULT_CONFIG: LoggerConfig = {\n  enabled: typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\",\n  logRequests: true,\n  logResponses: true,\n  logErrors: true,\n  logBodies: true,\n  logHeaders: false,\n};\n\nconst SENSITIVE_HEADERS = [\n  \"authorization\",\n  \"cookie\",\n  \"set-cookie\",\n  \"x-api-key\",\n  \"x-csrf-token\",\n];\n\nexport class APILogger {\n  private config: LoggerConfig;\n  private consola: ConsolaInstance;\n\n  constructor(config: Partial<LoggerConfig> = {}) {\n    this.config = { ...DEFAULT_CONFIG, ...config };\n    this.consola = config.consola || createConsola({\n      level: this.config.enabled ? 4 : 0,\n    });\n  }\n\n  enable(): void { this.config.enabled = true; }\n  disable(): void { this.config.enabled = false; }\n  setConfig(config: Partial<LoggerConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n\n  private filterHeaders(headers?: Record<string, string>): Record<string, string> {\n    if (!headers) return {};\n    const filtered: Record<string, string> = {};\n    Object.keys(headers).forEach((key) => {\n      filtered[key] = SENSITIVE_HEADERS.includes(key.toLowerCase()) ? \"***\" : (headers[key] || \"\");\n    });\n    return filtered;\n  }\n\n  logRequest(request: RequestLog): void {\n    if (!this.config.enabled || !this.config.logRequests) return;\n    const { method, url, headers, body } = request;\n    this.consola.start(`${method} ${url}`);\n    if (this.config.logHeaders && headers) this.consola.debug(\"Headers:\", this.filterHeaders(headers));\n    if (this.config.logBodies && body) this.consola.debug(\"Body:\", body);\n  }\n\n  logResponse(request: RequestLog, response: ResponseLog): void {\n    if (!this.config.enabled || !this.config.logResponses) return;\n    const { method, url } = request;\n    const { status, statusText, data, duration } = response;\n    this.consola.success(`${method} ${url} ${status} ${statusText} (${duration}ms)`);\n    if (this.config.logBodies && data) this.consola.debug(\"Response:\", data);\n  }\n\n  logError(request: RequestLog, error: ErrorLog): void {\n    if (!this.config.enabled || !this.config.logErrors) return;\n    const { method, url } = request;\n    const { message, statusCode, fieldErrors, duration } = error;\n    this.consola.error(`${method} ${url} ${statusCode || \"Network\"} Error (${duration}ms)`);\n    this.consola.error(\"Message:\", message);\n    if (fieldErrors && Object.keys(fieldErrors).length > 0) {\n      this.consola.error(\"Field Errors:\");\n      Object.entries(fieldErrors).forEach(([field, errors]) => {\n        errors.forEach((err) => this.consola.error(`  • ${field}: ${err}`));\n      });\n    }\n  }\n\n  info(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.info(message, ...args); }\n  warn(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.warn(message, ...args); }\n  error(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.error(message, ...args); }\n  debug(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.debug(message, ...args); }\n  success(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.success(message, ...args); }\n  withTag(tag: string): ConsolaInstance { return this.consola.withTag(tag); }\n}\n\nexport const defaultLogger = new APILogger();\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport type { ArrayStyle, ObjectStyle, SerializerOptions } from './pathSerializer.gen';\n\nexport type QuerySerializer = (query: Record<string, unknown>) => string;\n\nexport type BodySerializer = (body: unknown) => unknown;\n\ntype QuerySerializerOptionsObject = {\n  allowReserved?: boolean;\n  array?: Partial<SerializerOptions<ArrayStyle>>;\n  object?: Partial<SerializerOptions<ObjectStyle>>;\n};\n\nexport type QuerySerializerOptions = QuerySerializerOptionsObject & {\n  /**\n   * Per-parameter serialization overrides. When provided, these settings\n   * override the global array/object settings for specific parameter names.\n   */\n  parameters?: Record<string, QuerySerializerOptionsObject>;\n};\n\nconst serializeFormDataPair = (data: FormData, key: string, value: unknown): void => {\n  if (typeof value === 'string' || value instanceof Blob) {\n    data.append(key, value);\n  } else if (value instanceof Date) {\n    data.append(key, value.toISOString());\n  } else {\n    data.append(key, JSON.stringify(value));\n  }\n};\n\nconst serializeUrlSearchParamsPair = (data: URLSearchParams, key: string, value: unknown): void => {\n  if (typeof value === 'string') {\n    data.append(key, value);\n  } else {\n    data.append(key, JSON.stringify(value));\n  }\n};\n\nexport const formDataBodySerializer = {\n  bodySerializer: (body: unknown): FormData => {\n    const data = new FormData();\n\n    Object.entries(body as Record<string, unknown>).forEach(([key, value]) => {\n      if (value === undefined || value === null) {\n        return;\n      }\n      if (Array.isArray(value)) {\n        value.forEach((v) => serializeFormDataPair(data, key, v));\n      } else {\n        serializeFormDataPair(data, key, value);\n      }\n    });\n\n    return data;\n  },\n};\n\nexport const jsonBodySerializer = {\n  bodySerializer: (body: unknown): string =>\n    JSON.stringify(body, (_key, value) => (typeof value === 'bigint' ? value.toString() : value)),\n};\n\nexport const urlSearchParamsBodySerializer = {\n  bodySerializer: (body: unknown): string => {\n    const data = new URLSearchParams();\n\n    Object.entries(body as Record<string, unknown>).forEach(([key, value]) => {\n      if (value === undefined || value === null) {\n        return;\n      }\n      if (Array.isArray(value)) {\n        value.forEach((v) => serializeUrlSearchParamsPair(data, key, v));\n      } else {\n        serializeUrlSearchParamsPair(data, key, value);\n      }\n    });\n\n    return data.toString();\n  },\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\ntype Slot = 'body' | 'headers' | 'path' | 'query';\n\nexport type Field =\n  | {\n      in: Exclude<Slot, 'body'>;\n      /**\n       * Field name. This is the name we want the user to see and use.\n       */\n      key: string;\n      /**\n       * Field mapped name. This is the name we want to use in the request.\n       * If omitted, we use the same value as `key`.\n       */\n      map?: string;\n    }\n  | {\n      in: Extract<Slot, 'body'>;\n      /**\n       * Key isn't required for bodies.\n       */\n      key?: string;\n      map?: string;\n    }\n  | {\n      /**\n       * Field name. This is the name we want the user to see and use.\n       */\n      key: string;\n      /**\n       * Field mapped name. This is the name we want to use in the request.\n       * If `in` is omitted, `map` aliases `key` to the transport layer.\n       */\n      map: Slot;\n    };\n\nexport interface Fields {\n  allowExtra?: Partial<Record<Slot, boolean>>;\n  args?: ReadonlyArray<Field>;\n}\n\nexport type FieldsConfig = ReadonlyArray<Field | Fields>;\n\nconst extraPrefixesMap: Record<string, Slot> = {\n  $body_: 'body',\n  $headers_: 'headers',\n  $path_: 'path',\n  $query_: 'query',\n};\nconst extraPrefixes = Object.entries(extraPrefixesMap);\n\ntype KeyMap = Map<\n  string,\n  | {\n      in: Slot;\n      map?: string;\n    }\n  | {\n      in?: never;\n      map: Slot;\n    }\n>;\n\nfunction buildKeyMap(fields: FieldsConfig, map?: KeyMap): KeyMap {\n  if (!map) {\n    map = new Map();\n  }\n\n  for (const config of fields) {\n    if ('in' in config) {\n      if (config.key) {\n        map.set(config.key, {\n          in: config.in,\n          map: config.map,\n        });\n      }\n    } else if ('key' in config) {\n      map.set(config.key, {\n        map: config.map,\n      });\n    } else if (config.args) {\n      buildKeyMap(config.args, map);\n    }\n  }\n\n  return map;\n}\n\ninterface Params {\n  body?: unknown;\n  headers: Record<string, unknown>;\n  path: Record<string, unknown>;\n  query: Record<string, unknown>;\n}\n\nfunction stripEmptySlots(params: Params): void {\n  for (const [slot, value] of Object.entries(params)) {\n    if (slot === 'body') continue;\n    if (value && typeof value === 'object' && !Array.isArray(value) && !Object.keys(value).length) {\n      delete params[slot as Slot];\n    }\n  }\n}\n\nexport function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsConfig): Params {\n  const params: Params = {\n    headers: Object.create(null),\n    path: Object.create(null),\n    query: Object.create(null),\n  };\n\n  const map = buildKeyMap(fields);\n\n  function writeSlot(slot: Slot, key: string, value: unknown): void {\n    let record = params[slot] as Record<string, unknown> | undefined;\n    if (record === undefined) {\n      record = Object.create(null) as Record<string, unknown>;\n      params[slot] = record;\n    }\n    record[key] = value;\n  }\n\n  let config: FieldsConfig[number] | undefined;\n\n  for (const [index, arg] of args.entries()) {\n    if (fields[index]) {\n      config = fields[index];\n    }\n\n    if (!config) {\n      continue;\n    }\n\n    if ('in' in config) {\n      if (config.key) {\n        const field = map.get(config.key)!;\n        const name = field.map || config.key;\n        if (field.in) {\n          writeSlot(field.in, name, arg);\n        }\n      } else {\n        params.body = arg;\n      }\n    } else {\n      for (const [key, value] of Object.entries(arg ?? {})) {\n        const field = map.get(key);\n\n        if (field) {\n          if (field.in) {\n            const name = field.map || key;\n            writeSlot(field.in, name, value);\n          } else {\n            params[field.map] = value;\n          }\n        } else {\n          const extra = extraPrefixes.find(([prefix]) => key.startsWith(prefix));\n\n          if (extra) {\n            const [prefix, slot] = extra;\n            writeSlot(slot, key.slice(prefix.length), value);\n          } else if ('allowExtra' in config && config.allowExtra) {\n            for (const [slot, allowed] of Object.entries(config.allowExtra)) {\n              if (allowed) {\n                writeSlot(slot as Slot, key, value);\n                break;\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n\n  stripEmptySlots(params);\n\n  return params;\n}\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport type { Config } from './types.gen';\n\nexport type ServerSentEventsOptions<TData = unknown> = Omit<RequestInit, 'method'> &\n  Pick<Config, 'method' | 'responseTransformer' | 'responseValidator'> & {\n    /**\n     * Fetch API implementation. You can use this option to provide a custom\n     * fetch instance.\n     *\n     * @default globalThis.fetch\n     */\n    fetch?: typeof fetch;\n    /**\n     * Implementing clients can call request interceptors inside this hook.\n     */\n    onRequest?: (url: string, init: RequestInit) => Promise<Request>;\n    /**\n     * Callback invoked when a network or parsing error occurs during streaming.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @param error The error that occurred.\n     */\n    onSseError?: (error: unknown) => void;\n    /**\n     * Callback invoked when an event is streamed from the server.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @param event Event streamed from the server.\n     * @returns Nothing (void).\n     */\n    onSseEvent?: (event: StreamEvent<TData>) => void;\n    serializedBody?: RequestInit['body'];\n    /**\n     * Default retry delay in milliseconds.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @default 3000\n     */\n    sseDefaultRetryDelay?: number;\n    /**\n     * Maximum number of retry attempts before giving up.\n     */\n    sseMaxRetryAttempts?: number;\n    /**\n     * Maximum retry delay in milliseconds.\n     *\n     * Applies only when exponential backoff is used.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @default 30000\n     */\n    sseMaxRetryDelay?: number;\n    /**\n     * Optional sleep function for retry backoff.\n     *\n     * Defaults to using `setTimeout`.\n     */\n    sseSleepFn?: (ms: number) => Promise<void>;\n    url: string;\n  };\n\nexport interface StreamEvent<TData = unknown> {\n  data: TData;\n  event?: string;\n  id?: string;\n  retry?: number;\n}\n\nexport type ServerSentEventsResult<TData = unknown, TReturn = void, TNext = unknown> = {\n  stream: AsyncGenerator<\n    TData extends Record<string, unknown> ? TData[keyof TData] : TData,\n    TReturn,\n    TNext\n  >;\n};\n\nexport function createSseClient<TData = unknown>({\n  onRequest,\n  onSseError,\n  onSseEvent,\n  responseTransformer,\n  responseValidator,\n  sseDefaultRetryDelay,\n  sseMaxRetryAttempts,\n  sseMaxRetryDelay,\n  sseSleepFn,\n  url,\n  ...options\n}: ServerSentEventsOptions): ServerSentEventsResult<TData> {\n  let lastEventId: string | undefined;\n\n  const sleep = sseSleepFn ?? ((ms: number) => new Promise((resolve) => setTimeout(resolve, ms)));\n\n  const createStream = async function* () {\n    let retryDelay: number = sseDefaultRetryDelay ?? 3000;\n    let attempt = 0;\n    const signal = options.signal ?? new AbortController().signal;\n\n    while (true) {\n      if (signal.aborted) break;\n\n      attempt++;\n\n      const headers =\n        options.headers instanceof Headers\n          ? options.headers\n          : new Headers(options.headers as Record<string, string> | undefined);\n\n      if (lastEventId !== undefined) {\n        headers.set('Last-Event-ID', lastEventId);\n      }\n\n      try {\n        const requestInit: RequestInit = {\n          redirect: 'follow',\n          ...options,\n          body: options.serializedBody,\n          headers,\n          signal,\n        };\n        let request = new Request(url, requestInit);\n        if (onRequest) {\n          request = await onRequest(url, requestInit);\n        }\n        // fetch must be assigned here, otherwise it would throw the error:\n        // TypeError: Failed to execute 'fetch' on 'Window': Illegal invocation\n        const _fetch = options.fetch ?? globalThis.fetch;\n        const response = await _fetch(request);\n\n        if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);\n\n        if (!response.body) throw new Error('No body in SSE response');\n\n        const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();\n\n        let buffer = '';\n\n        const abortHandler = () => {\n          try {\n            reader.cancel();\n          } catch {\n            // noop\n          }\n        };\n\n        signal.addEventListener('abort', abortHandler);\n\n        try {\n          while (true) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += value;\n            buffer = buffer.replace(/\\r\\n?/g, '\\n'); // normalize line endings\n\n            const chunks = buffer.split('\\n\\n');\n            buffer = chunks.pop() ?? '';\n\n            for (const chunk of chunks) {\n              const lines = chunk.split('\\n');\n              const dataLines: Array<string> = [];\n              let eventName: string | undefined;\n\n              for (const line of lines) {\n                if (line.startsWith('data:')) {\n                  dataLines.push(line.replace(/^data:\\s*/, ''));\n                } else if (line.startsWith('event:')) {\n                  eventName = line.replace(/^event:\\s*/, '');\n                } else if (line.startsWith('id:')) {\n                  lastEventId = line.replace(/^id:\\s*/, '');\n                } else if (line.startsWith('retry:')) {\n                  const parsed = Number.parseInt(line.replace(/^retry:\\s*/, ''), 10);\n                  if (!Number.isNaN(parsed)) {\n                    retryDelay = parsed;\n                  }\n                }\n              }\n\n              let data: unknown;\n              let parsedJson = false;\n\n              if (dataLines.length) {\n                const rawData = dataLines.join('\\n');\n                try {\n                  data = JSON.parse(rawData);\n                  parsedJson = true;\n                } catch {\n                  data = rawData;\n                }\n              }\n\n              if (parsedJson) {\n                if (responseValidator) {\n                  await responseValidator(data);\n                }\n\n                if (responseTransformer) {\n                  data = await responseTransformer(data);\n                }\n              }\n\n              onSseEvent?.({\n                data,\n                event: eventName,\n                id: lastEventId,\n                retry: retryDelay,\n              });\n\n              if (dataLines.length) {\n                yield data as any;\n              }\n            }\n          }\n        } finally {\n          signal.removeEventListener('abort', abortHandler);\n          reader.releaseLock();\n        }\n\n        break; // exit loop on normal completion\n      } catch (error) {\n        // connection failed or aborted; retry after delay\n        onSseError?.(error);\n\n        if (sseMaxRetryAttempts !== undefined && attempt >= sseMaxRetryAttempts) {\n          break; // stop after firing error\n        }\n\n        // exponential backoff: double retry each attempt, cap at 30s\n        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 30000);\n        await sleep(backoff);\n      }\n    }\n  };\n\n  const stream = createStream();\n\n  return { stream };\n}\n","// This file is auto-generated by @hey-api/openapi-ts\n\ninterface SerializeOptions<T> extends SerializePrimitiveOptions, SerializerOptions<T> {}\n\ninterface SerializePrimitiveOptions {\n  allowReserved?: boolean;\n  name: string;\n}\n\nexport interface SerializerOptions<T> {\n  /**\n   * @default true\n   */\n  explode: boolean;\n  style: T;\n}\n\nexport type ArrayStyle = 'form' | 'spaceDelimited' | 'pipeDelimited';\nexport type ArraySeparatorStyle = ArrayStyle | MatrixStyle;\ntype MatrixStyle = 'label' | 'matrix' | 'simple';\nexport type ObjectStyle = 'form' | 'deepObject';\ntype ObjectSeparatorStyle = ObjectStyle | MatrixStyle;\n\ninterface SerializePrimitiveParam extends SerializePrimitiveOptions {\n  value: string;\n}\n\nexport const separatorArrayExplode = (style: ArraySeparatorStyle): '.' | ';' | ',' | '&' => {\n  switch (style) {\n    case 'label':\n      return '.';\n    case 'matrix':\n      return ';';\n    case 'simple':\n      return ',';\n    default:\n      return '&';\n  }\n};\n\nexport const separatorArrayNoExplode = (style: ArraySeparatorStyle): ',' | '|' | '%20' => {\n  switch (style) {\n    case 'form':\n      return ',';\n    case 'pipeDelimited':\n      return '|';\n    case 'spaceDelimited':\n      return '%20';\n    default:\n      return ',';\n  }\n};\n\nexport const separatorObjectExplode = (style: ObjectSeparatorStyle): '.' | ';' | ',' | '&' => {\n  switch (style) {\n    case 'label':\n      return '.';\n    case 'matrix':\n      return ';';\n    case 'simple':\n      return ',';\n    default:\n      return '&';\n  }\n};\n\nexport const serializeArrayParam = ({\n  allowReserved,\n  explode,\n  name,\n  style,\n  value,\n}: SerializeOptions<ArraySeparatorStyle> & {\n  value: unknown[];\n}): string => {\n  if (!explode) {\n    const joinedValues = (\n      allowReserved ? value : value.map((v) => encodeURIComponent(v as string))\n    ).join(separatorArrayNoExplode(style));\n    switch (style) {\n      case 'label':\n        return `.${joinedValues}`;\n      case 'matrix':\n        return `;${name}=${joinedValues}`;\n      case 'simple':\n        return joinedValues;\n      default:\n        return `${name}=${joinedValues}`;\n    }\n  }\n\n  const separator = separatorArrayExplode(style);\n  const joinedValues = value\n    .map((v) => {\n      if (style === 'label' || style === 'simple') {\n        return allowReserved ? v : encodeURIComponent(v as string);\n      }\n\n      return serializePrimitiveParam({\n        allowReserved,\n        name,\n        value: v as string,\n      });\n    })\n    .join(separator);\n  return style === 'label' || style === 'matrix' ? separator + joinedValues : joinedValues;\n};\n\nexport const serializePrimitiveParam = ({\n  allowReserved,\n  name,\n  value,\n}: SerializePrimitiveParam): string => {\n  if (value === undefined || value === null) {\n    return '';\n  }\n\n  if (typeof value === 'object') {\n    throw new Error(\n      'Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.',\n    );\n  }\n\n  return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;\n};\n\nexport const serializeObjectParam = ({\n  allowReserved,\n  explode,\n  name,\n  style,\n  value,\n  valueOnly,\n}: SerializeOptions<ObjectSeparatorStyle> & {\n  value: Record<string, unknown> | Date;\n  valueOnly?: boolean;\n}): string => {\n  if (value instanceof Date) {\n    return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;\n  }\n\n  if (style !== 'deepObject' && !explode) {\n    let values: string[] = [];\n    Object.entries(value).forEach(([key, v]) => {\n      values = [...values, key, allowReserved ? (v as string) : encodeURIComponent(v as string)];\n    });\n    const joinedValues = values.join(',');\n    switch (style) {\n      case 'form':\n        return `${name}=${joinedValues}`;\n      case 'label':\n        return `.${joinedValues}`;\n      case 'matrix':\n        return `;${name}=${joinedValues}`;\n      default:\n        return joinedValues;\n    }\n  }\n\n  const separator = separatorObjectExplode(style);\n  const joinedValues = Object.entries(value)\n    .map(([key, v]) =>\n      serializePrimitiveParam({\n        allowReserved,\n        name: style === 'deepObject' ? `${name}[${key}]` : key,\n        value: v as string,\n      }),\n    )\n    .join(separator);\n  return style === 'label' || style === 'matrix' ? separator + joinedValues : joinedValues;\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport type { BodySerializer, QuerySerializer } from './bodySerializer.gen';\nimport {\n  type ArraySeparatorStyle,\n  serializeArrayParam,\n  serializeObjectParam,\n  serializePrimitiveParam,\n} from './pathSerializer.gen';\n\nexport interface PathSerializer {\n  path: Record<string, unknown>;\n  url: string;\n}\n\nexport const PATH_PARAM_RE: RegExp = /\\{[^{}]+\\}/g;\n\nexport const defaultPathSerializer = ({ path, url: _url }: PathSerializer): string => {\n  let url = _url;\n  const matches = _url.match(PATH_PARAM_RE);\n  if (matches) {\n    for (const match of matches) {\n      let explode = false;\n      let name = match.substring(1, match.length - 1);\n      let style: ArraySeparatorStyle = 'simple';\n\n      if (name.endsWith('*')) {\n        explode = true;\n        name = name.substring(0, name.length - 1);\n      }\n\n      if (name.startsWith('.')) {\n        name = name.substring(1);\n        style = 'label';\n      } else if (name.startsWith(';')) {\n        name = name.substring(1);\n        style = 'matrix';\n      }\n\n      const value = path[name];\n\n      if (value === undefined || value === null) {\n        continue;\n      }\n\n      if (Array.isArray(value)) {\n        url = url.replace(match, serializeArrayParam({ explode, name, style, value }));\n        continue;\n      }\n\n      if (typeof value === 'object') {\n        url = url.replace(\n          match,\n          serializeObjectParam({\n            explode,\n            name,\n            style,\n            value: value as Record<string, unknown>,\n            valueOnly: true,\n          }),\n        );\n        continue;\n      }\n\n      if (style === 'matrix') {\n        url = url.replace(\n          match,\n          `;${serializePrimitiveParam({\n            name,\n            value: value as string,\n          })}`,\n        );\n        continue;\n      }\n\n      const replaceValue = encodeURIComponent(\n        style === 'label' ? `.${value as string}` : (value as string),\n      );\n      url = url.replace(match, replaceValue);\n    }\n  }\n  return url;\n};\n\nexport const getUrl = ({\n  baseUrl,\n  path,\n  query,\n  querySerializer,\n  url: _url,\n}: {\n  baseUrl?: string;\n  path?: Record<string, unknown>;\n  query?: Record<string, unknown>;\n  querySerializer: QuerySerializer;\n  url: string;\n}): string => {\n  const pathUrl = _url.startsWith('/') ? _url : `/${_url}`;\n  let url = (baseUrl ?? '') + pathUrl;\n  if (path) {\n    url = defaultPathSerializer({ path, url });\n  }\n  let search = query ? querySerializer(query) : '';\n  if (search.startsWith('?')) {\n    search = search.substring(1);\n  }\n  if (search) {\n    url += `?${search}`;\n  }\n  return url;\n};\n\nexport function getValidRequestBody(options: {\n  body?: unknown;\n  bodySerializer?: BodySerializer | null;\n  serializedBody?: unknown;\n}): unknown {\n  const hasBody = options.body !== undefined;\n  const isSerializedBody = hasBody && options.bodySerializer;\n\n  if (isSerializedBody) {\n    if ('serializedBody' in options) {\n      const hasSerializedBody =\n        options.serializedBody !== undefined && options.serializedBody !== '';\n\n      return hasSerializedBody ? options.serializedBody : null;\n    }\n\n    // not all clients implement a serializedBody property (i.e., client-axios)\n    return options.body !== '' ? options.body : null;\n  }\n\n  // plain/text body\n  if (hasBody) {\n    return options.body;\n  }\n\n  // no body was provided\n  return undefined;\n}\n","// This file is auto-generated by @hey-api/openapi-ts\n\nexport type AuthToken = string | undefined;\n\nexport interface Auth {\n  /**\n   * Which part of the request do we use to send the auth?\n   *\n   * @default 'header'\n   */\n  in?: 'header' | 'query' | 'cookie';\n  /**\n   * A unique identifier for the security scheme.\n   *\n   * Defined only when there are multiple security schemes whose `Auth`\n   * shape would otherwise be identical.\n   */\n  key?: string;\n  /**\n   * Header or query parameter name.\n   *\n   * @default 'Authorization'\n   */\n  name?: string;\n  scheme?: 'basic' | 'bearer';\n  type: 'apiKey' | 'http';\n}\n\nexport const getAuthToken = async (\n  auth: Auth,\n  callback: ((auth: Auth) => Promise<AuthToken> | AuthToken) | AuthToken,\n): Promise<string | undefined> => {\n  const token = typeof callback === 'function' ? await callback(auth) : callback;\n\n  if (!token) {\n    return;\n  }\n\n  if (auth.scheme === 'bearer') {\n    return `Bearer ${token}`;\n  }\n\n  if (auth.scheme === 'basic') {\n    return `Basic ${btoa(token)}`;\n  }\n\n  return token;\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { getAuthToken } from '../core/auth.gen';\nimport type { QuerySerializerOptions } from '../core/bodySerializer.gen';\nimport { jsonBodySerializer } from '../core/bodySerializer.gen';\nimport {\n  serializeArrayParam,\n  serializeObjectParam,\n  serializePrimitiveParam,\n} from '../core/pathSerializer.gen';\nimport { getUrl } from '../core/utils.gen';\nimport type { Client, ClientOptions, Config, RequestOptions } from './types.gen';\n\nexport const createQuerySerializer = <T = unknown>({\n  parameters = {},\n  ...args\n}: QuerySerializerOptions = {}): ((queryParams: T) => string) => {\n  const querySerializer = (queryParams: T): string => {\n    const search: string[] = [];\n    if (queryParams && typeof queryParams === 'object') {\n      for (const name in queryParams) {\n        const value = queryParams[name];\n\n        if (value === undefined || value === null) {\n          continue;\n        }\n\n        const options = parameters[name] || args;\n\n        if (Array.isArray(value)) {\n          const serializedArray = serializeArrayParam({\n            allowReserved: options.allowReserved,\n            explode: true,\n            name,\n            style: 'form',\n            value,\n            ...options.array,\n          });\n          if (serializedArray) search.push(serializedArray);\n        } else if (typeof value === 'object') {\n          const serializedObject = serializeObjectParam({\n            allowReserved: options.allowReserved,\n            explode: true,\n            name,\n            style: 'deepObject',\n            value: value as Record<string, unknown>,\n            ...options.object,\n          });\n          if (serializedObject) search.push(serializedObject);\n        } else {\n          const serializedPrimitive = serializePrimitiveParam({\n            allowReserved: options.allowReserved,\n            name,\n            value: value as string,\n          });\n          if (serializedPrimitive) search.push(serializedPrimitive);\n        }\n      }\n    }\n    return search.join('&');\n  };\n  return querySerializer;\n};\n\n/**\n * Infers parseAs value from provided Content-Type header.\n */\nexport const getParseAs = (contentType: string | null): Exclude<Config['parseAs'], 'auto'> => {\n  if (!contentType) {\n    // If no Content-Type header is provided, the best we can do is return the raw response body,\n    // which is effectively the same as the 'stream' option.\n    return 'stream';\n  }\n\n  const cleanContent = contentType.split(';')[0]?.trim();\n\n  if (!cleanContent) {\n    return;\n  }\n\n  if (cleanContent.startsWith('application/json') || cleanContent.endsWith('+json')) {\n    return 'json';\n  }\n\n  if (cleanContent === 'multipart/form-data') {\n    return 'formData';\n  }\n\n  if (\n    ['application/', 'audio/', 'image/', 'video/'].some((type) => cleanContent.startsWith(type))\n  ) {\n    return 'blob';\n  }\n\n  if (cleanContent.startsWith('text/')) {\n    return 'text';\n  }\n\n  return;\n};\n\nconst checkForExistence = (\n  options: Pick<RequestOptions, 'auth' | 'query'> & {\n    headers: Headers;\n  },\n  name?: string,\n): boolean => {\n  if (!name) {\n    return false;\n  }\n  if (\n    options.headers.has(name) ||\n    options.query?.[name] ||\n    options.headers.get('Cookie')?.includes(`${name}=`)\n  ) {\n    return true;\n  }\n  return false;\n};\n\nexport async function setAuthParams(\n  options: Pick<RequestOptions, 'auth' | 'query' | 'security'> & {\n    headers: Headers;\n  },\n): Promise<void> {\n  for (const auth of options.security ?? []) {\n    if (checkForExistence(options, auth.name)) {\n      continue;\n    }\n\n    const token = await getAuthToken(auth, options.auth);\n\n    if (!token) {\n      continue;\n    }\n\n    const name = auth.name ?? 'Authorization';\n\n    switch (auth.in) {\n      case 'query':\n        if (!options.query) {\n          options.query = {};\n        }\n        options.query[name] = token;\n        break;\n      case 'cookie':\n        options.headers.append('Cookie', `${name}=${token}`);\n        break;\n      case 'header':\n      default:\n        options.headers.set(name, token);\n        break;\n    }\n  }\n}\n\nexport const buildUrl: Client['buildUrl'] = (options) =>\n  getUrl({\n    baseUrl: options.baseUrl as string,\n    path: options.path,\n    query: options.query,\n    querySerializer:\n      typeof options.querySerializer === 'function'\n        ? options.querySerializer\n        : createQuerySerializer(options.querySerializer),\n    url: options.url,\n  });\n\nexport const mergeConfigs = (a: Config, b: Config): Config => {\n  const config = { ...a, ...b };\n  if (config.baseUrl?.endsWith('/')) {\n    config.baseUrl = config.baseUrl.substring(0, config.baseUrl.length - 1);\n  }\n  config.headers = mergeHeaders(a.headers, b.headers);\n  return config;\n};\n\nconst headersEntries = (headers: Headers): Array<[string, string]> => {\n  const entries: Array<[string, string]> = [];\n  headers.forEach((value, key) => {\n    entries.push([key, value]);\n  });\n  return entries;\n};\n\nexport const mergeHeaders = (\n  ...headers: Array<Required<Config>['headers'] | undefined>\n): Headers => {\n  const mergedHeaders = new Headers();\n  for (const header of headers) {\n    if (!header) {\n      continue;\n    }\n\n    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);\n\n    for (const [key, value] of iterator) {\n      if (value === null) {\n        mergedHeaders.delete(key);\n      } else if (Array.isArray(value)) {\n        for (const v of value) {\n          mergedHeaders.append(key, v as string);\n        }\n      } else if (value !== undefined) {\n        // assume object headers are meant to be JSON stringified, i.e., their\n        // content value in OpenAPI specification is 'application/json'\n        mergedHeaders.set(\n          key,\n          typeof value === 'object' ? JSON.stringify(value) : (value as string),\n        );\n      }\n    }\n  }\n  return mergedHeaders;\n};\n\ntype ErrInterceptor<Err, Res, Req, Options> = (\n  error: Err,\n  /** response may be undefined due to a network error where no response object is produced */\n  response: Res | undefined,\n  /** request may be undefined, because error may be from building the request object itself */\n  request: Req | undefined,\n  options: Options,\n) => Err | Promise<Err>;\n\ntype ReqInterceptor<Req, Options> = (request: Req, options: Options) => Req | Promise<Req>;\n\ntype ResInterceptor<Res, Req, Options> = (\n  response: Res,\n  request: Req,\n  options: Options,\n) => Res | Promise<Res>;\n\nclass Interceptors<Interceptor> {\n  fns: Array<Interceptor | null> = [];\n\n  clear(): void {\n    this.fns = [];\n  }\n\n  eject(id: number | Interceptor): void {\n    const index = this.getInterceptorIndex(id);\n    if (this.fns[index]) {\n      this.fns[index] = null;\n    }\n  }\n\n  exists(id: number | Interceptor): boolean {\n    const index = this.getInterceptorIndex(id);\n    return Boolean(this.fns[index]);\n  }\n\n  getInterceptorIndex(id: number | Interceptor): number {\n    if (typeof id === 'number') {\n      return this.fns[id] ? id : -1;\n    }\n    return this.fns.indexOf(id);\n  }\n\n  update(id: number | Interceptor, fn: Interceptor): number | Interceptor | false {\n    const index = this.getInterceptorIndex(id);\n    if (this.fns[index]) {\n      this.fns[index] = fn;\n      return id;\n    }\n    return false;\n  }\n\n  use(fn: Interceptor): number {\n    this.fns.push(fn);\n    return this.fns.length - 1;\n  }\n}\n\nexport interface Middleware<Req, Res, Err, Options> {\n  error: Interceptors<ErrInterceptor<Err, Res, Req, Options>>;\n  request: Interceptors<ReqInterceptor<Req, Options>>;\n  response: Interceptors<ResInterceptor<Res, Req, Options>>;\n}\n\nexport const createInterceptors = <Req, Res, Err, Options>(): Middleware<\n  Req,\n  Res,\n  Err,\n  Options\n> => ({\n  error: new Interceptors<ErrInterceptor<Err, Res, Req, Options>>(),\n  request: new Interceptors<ReqInterceptor<Req, Options>>(),\n  response: new Interceptors<ResInterceptor<Res, Req, Options>>(),\n});\n\nconst defaultQuerySerializer = createQuerySerializer({\n  allowReserved: false,\n  array: {\n    explode: true,\n    style: 'form',\n  },\n  object: {\n    explode: true,\n    style: 'deepObject',\n  },\n});\n\nconst defaultHeaders = {\n  'Content-Type': 'application/json',\n};\n\nexport const createConfig = <T extends ClientOptions = ClientOptions>(\n  override: Config<Omit<ClientOptions, keyof T> & T> = {},\n): Config<Omit<ClientOptions, keyof T> & T> => ({\n  ...jsonBodySerializer,\n  headers: defaultHeaders,\n  parseAs: 'auto',\n  querySerializer: defaultQuerySerializer,\n  ...override,\n});\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { createSseClient } from '../core/serverSentEvents.gen';\nimport type { HttpMethod } from '../core/types.gen';\nimport { getValidRequestBody } from '../core/utils.gen';\nimport type { Client, Config, RequestOptions, ResolvedRequestOptions } from './types.gen';\nimport {\n  buildUrl,\n  createConfig,\n  createInterceptors,\n  getParseAs,\n  mergeConfigs,\n  mergeHeaders,\n  setAuthParams,\n} from './utils.gen';\n\ntype ReqInit = Omit<RequestInit, 'body' | 'headers'> & {\n  body?: any;\n  headers: ReturnType<typeof mergeHeaders>;\n};\n\nexport const createClient = (config: Config = {}): Client => {\n  let _config = mergeConfigs(createConfig(), config);\n\n  const getConfig = (): Config => ({ ..._config });\n\n  const setConfig = (config: Config): Config => {\n    _config = mergeConfigs(_config, config);\n    return getConfig();\n  };\n\n  const interceptors = createInterceptors<Request, Response, unknown, ResolvedRequestOptions>();\n\n  const beforeRequest = async <\n    TData = unknown,\n    TResponseStyle extends 'data' | 'fields' = 'fields',\n    ThrowOnError extends boolean = boolean,\n    Url extends string = string,\n  >(\n    options: RequestOptions<TData, TResponseStyle, ThrowOnError, Url>,\n  ) => {\n    const opts = {\n      ..._config,\n      ...options,\n      fetch: options.fetch ?? _config.fetch ?? globalThis.fetch,\n      headers: mergeHeaders(_config.headers, options.headers),\n      serializedBody: undefined as string | undefined,\n    };\n\n    if (opts.security) {\n      await setAuthParams(opts);\n    }\n\n    if (opts.requestValidator) {\n      await opts.requestValidator(opts);\n    }\n\n    if (opts.body !== undefined && opts.bodySerializer) {\n      opts.serializedBody = opts.bodySerializer(opts.body) as string | undefined;\n    }\n\n    // remove Content-Type header if body is empty to avoid sending invalid requests\n    if (opts.body === undefined || opts.serializedBody === '') {\n      opts.headers.delete('Content-Type');\n    }\n\n    const resolvedOpts = opts as typeof opts &\n      ResolvedRequestOptions<TResponseStyle, ThrowOnError, Url>;\n    const url = buildUrl(resolvedOpts);\n\n    return { opts: resolvedOpts, url };\n  };\n\n  const request: Client['request'] = async (options) => {\n    const throwOnError = options.throwOnError ?? _config.throwOnError;\n    const responseStyle = options.responseStyle ?? _config.responseStyle;\n\n    let request: Request | undefined;\n    let response: Response | undefined;\n\n    try {\n      const { opts, url } = await beforeRequest(options);\n      const requestInit: ReqInit = {\n        redirect: 'follow',\n        ...opts,\n        body: getValidRequestBody(opts),\n      };\n\n      request = new Request(url, requestInit);\n\n      for (const fn of interceptors.request.fns) {\n        if (fn) {\n          request = await fn(request, opts);\n        }\n      }\n\n      // fetch must be assigned here, otherwise it would throw the error:\n      // TypeError: Failed to execute 'fetch' on 'Window': Illegal invocation\n      const _fetch = opts.fetch!;\n\n      response = await _fetch(request);\n\n      for (const fn of interceptors.response.fns) {\n        if (fn) {\n          response = await fn(response, request, opts);\n        }\n      }\n\n      const result = {\n        request,\n        response,\n      };\n\n      if (response.ok) {\n        const parseAs =\n          (opts.parseAs === 'auto'\n            ? getParseAs(response.headers.get('Content-Type'))\n            : opts.parseAs) ?? 'json';\n\n        if (response.status === 204 || response.headers.get('Content-Length') === '0') {\n          let emptyData: any;\n          switch (parseAs) {\n            case 'arrayBuffer':\n            case 'blob':\n            case 'text':\n              emptyData = await response[parseAs]();\n              break;\n            case 'formData':\n              emptyData = new FormData();\n              break;\n            case 'stream':\n              emptyData = response.body;\n              break;\n            case 'json':\n            default:\n              emptyData = {};\n              break;\n          }\n          return opts.responseStyle === 'data'\n            ? emptyData\n            : {\n                data: emptyData,\n                ...result,\n              };\n        }\n\n        let data: any;\n        switch (parseAs) {\n          case 'arrayBuffer':\n          case 'blob':\n          case 'formData':\n          case 'text':\n            data = await response[parseAs]();\n            break;\n          case 'json': {\n            // Some servers return 200 with no Content-Length and empty body.\n            // response.json() would throw; read as text and parse if non-empty.\n            const text = await response.text();\n            data = text ? JSON.parse(text) : {};\n            break;\n          }\n          case 'stream':\n            return opts.responseStyle === 'data'\n              ? response.body\n              : {\n                  data: response.body,\n                  ...result,\n                };\n        }\n\n        if (parseAs === 'json') {\n          if (opts.responseValidator) {\n            await opts.responseValidator(data);\n          }\n\n          if (opts.responseTransformer) {\n            data = await opts.responseTransformer(data);\n          }\n        }\n\n        return opts.responseStyle === 'data'\n          ? data\n          : {\n              data,\n              ...result,\n            };\n      }\n\n      const textError = await response.text();\n      let jsonError: unknown;\n\n      try {\n        jsonError = JSON.parse(textError);\n      } catch {\n        // noop\n      }\n\n      throw jsonError ?? textError;\n    } catch (error) {\n      let finalError = error;\n\n      for (const fn of interceptors.error.fns) {\n        if (fn) {\n          finalError = await fn(finalError, response, request, options as ResolvedRequestOptions);\n        }\n      }\n\n      finalError = finalError || {};\n\n      if (throwOnError) {\n        throw finalError;\n      }\n\n      // TODO: we probably want to return error and improve types\n      return responseStyle === 'data'\n        ? undefined\n        : {\n            error: finalError,\n            request,\n            response,\n          };\n    }\n  };\n\n  const makeMethodFn = (method: Uppercase<HttpMethod>) => (options: RequestOptions) =>\n    request({ ...options, method });\n\n  const makeSseFn = (method: Uppercase<HttpMethod>) => async (options: RequestOptions) => {\n    const { opts, url } = await beforeRequest(options);\n    return createSseClient({\n      ...opts,\n      body: opts.body as BodyInit | null | undefined,\n      method,\n      onRequest: async (url, init) => {\n        let request = new Request(url, init);\n        for (const fn of interceptors.request.fns) {\n          if (fn) {\n            request = await fn(request, opts);\n          }\n        }\n        return request;\n      },\n      serializedBody: getValidRequestBody(opts) as BodyInit | null | undefined,\n      url,\n    });\n  };\n\n  const _buildUrl: Client['buildUrl'] = (options) => buildUrl({ ..._config, ...options });\n\n  return {\n    buildUrl: _buildUrl,\n    connect: makeMethodFn('CONNECT'),\n    delete: makeMethodFn('DELETE'),\n    get: makeMethodFn('GET'),\n    getConfig,\n    head: makeMethodFn('HEAD'),\n    interceptors,\n    options: makeMethodFn('OPTIONS'),\n    patch: makeMethodFn('PATCH'),\n    post: makeMethodFn('POST'),\n    put: makeMethodFn('PUT'),\n    request,\n    setConfig,\n    sse: {\n      connect: makeSseFn('CONNECT'),\n      delete: makeSseFn('DELETE'),\n      get: makeSseFn('GET'),\n      head: makeSseFn('HEAD'),\n      options: makeSseFn('OPTIONS'),\n      patch: makeSseFn('PATCH'),\n      post: makeSseFn('POST'),\n      put: makeSseFn('PUT'),\n      trace: makeSseFn('TRACE'),\n    },\n    trace: makeMethodFn('TRACE'),\n  } as Client;\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { type Client, type ClientOptions, type Config, createClient, createConfig } from './client';\nimport type { ClientOptions as ClientOptions2 } from './types.gen';\n\n/**\n * The `createClientConfig()` function will be called on client initialization\n * and the returned object will become the client's initial configuration.\n *\n * You may want to initialize your client this way instead of calling\n * `setConfig()`. This is useful for example if you're using Next.js\n * to ensure your client always has the correct values.\n */\nexport type CreateClientConfig<T extends ClientOptions = ClientOptions2> = (override?: Config<ClientOptions & T>) => Config<Required<ClientOptions> & T>;\n\nexport const client: Client = createClient(createConfig<ClientOptions2>({ baseUrl: 'http://localhost:8000' }));\n\n// auto-init: install auth on client\nimport { installAuthOnClient } from './helpers/auth';\ninstallAuthOnClient(client);\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { type Client, type ClientMeta, formDataBodySerializer, type Options as Options2, type RequestResult, type TDataShape } from './client';\nimport { client } from './client.gen';\nimport type { CfgAccountsApiKeyRegenerateCreateData, CfgAccountsApiKeyRegenerateCreateErrors, CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRetrieveData, CfgAccountsApiKeyRetrieveErrors, CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRevealCreateData, CfgAccountsApiKeyRevealCreateErrors, CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyTestCreateData, CfgAccountsApiKeyTestCreateResponses, CfgAccountsOauthConnectionsListData, CfgAccountsOauthConnectionsListResponses, CfgAccountsOauthDisconnectCreateData, CfgAccountsOauthDisconnectCreateErrors, CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthGithubAuthorizeCreateData, CfgAccountsOauthGithubAuthorizeCreateErrors, CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubCallbackCreateData, CfgAccountsOauthGithubCallbackCreateErrors, CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthProvidersRetrieveData, CfgAccountsOauthProvidersRetrieveResponses, CfgAccountsOtpRequestCreateData, CfgAccountsOtpRequestCreateErrors, CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpVerifyCreateData, CfgAccountsOtpVerifyCreateErrors, CfgAccountsOtpVerifyCreateResponses, CfgAccountsProfileAvatarCreateData, CfgAccountsProfileAvatarCreateErrors, CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileDeleteCreateData, CfgAccountsProfileDeleteCreateErrors, CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfilePartialPartialUpdateData, CfgAccountsProfilePartialPartialUpdateErrors, CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialUpdateData, CfgAccountsProfilePartialUpdateErrors, CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfileRetrieveData, CfgAccountsProfileRetrieveErrors, CfgAccountsProfileRetrieveResponses, CfgAccountsProfileUpdatePartialUpdateData, CfgAccountsProfileUpdatePartialUpdateErrors, CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdateUpdateData, CfgAccountsProfileUpdateUpdateErrors, CfgAccountsProfileUpdateUpdateResponses, CfgAccountsTokenRefreshCreateData, CfgAccountsTokenRefreshCreateResponses, CfgCentrifugoAuthTokenRetrieveData, CfgCentrifugoAuthTokenRetrieveErrors, CfgCentrifugoAuthTokenRetrieveResponses, CfgTotpBackupCodesRegenerateCreateData, CfgTotpBackupCodesRegenerateCreateErrors, CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRetrieveData, CfgTotpBackupCodesRetrieveResponses, CfgTotpDevicesDestroyData, CfgTotpDevicesDestroyResponses, CfgTotpDevicesRetrieveData, CfgTotpDevicesRetrieveResponses, CfgTotpDisableCreateData, CfgTotpDisableCreateErrors, CfgTotpDisableCreateResponses, CfgTotpSetupConfirmCreateData, CfgTotpSetupConfirmCreateErrors, CfgTotpSetupConfirmCreateResponses, CfgTotpSetupCreateData, CfgTotpSetupCreateErrors, CfgTotpSetupCreateResponses, CfgTotpVerifyBackupCreateData, CfgTotpVerifyBackupCreateErrors, CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyCreateData, CfgTotpVerifyCreateErrors, CfgTotpVerifyCreateResponses } from './types.gen';\n\nexport type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean, TResponse = unknown> = Options2<TData, ThrowOnError, TResponse> & {\n    /**\n     * You can provide a client instance returned by `createClient()` instead of\n     * individual options. This might be also useful if you want to implement a\n     * custom client.\n     */\n    client?: Client;\n    /**\n     * You can pass arbitrary values through the `meta` object. This can be\n     * used to access values that aren't defined as part of the SDK function.\n     */\n    meta?: keyof ClientMeta extends never ? Record<string, unknown> : ClientMeta;\n};\n\nexport class CfgAccountsApiKey {\n    /**\n     * Get API key details\n     *\n     * Retrieve the current user's API key (masked) and metadata.\n     */\n    public static cfgAccountsApiKeyRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsApiKeyRetrieveData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRetrieveErrors, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRetrieveErrors, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/',\n            ...options\n        });\n    }\n    \n    /**\n     * Regenerate API key\n     *\n     * Generate a new API key. The full key is returned only once.\n     */\n    public static cfgAccountsApiKeyRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRegenerateCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/regenerate/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Reveal API key\n     *\n     * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.\n     */\n    public static cfgAccountsApiKeyRevealCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRevealCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyRevealCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyRevealCreateErrors, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/reveal/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Test API key\n     *\n     * Test whether an API key is valid without consuming it.\n     */\n    public static cfgAccountsApiKeyTestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyTestCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyTestCreateResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsApiKeyTestCreateResponses, unknown, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/test/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgAccountsOauth {\n    /**\n     * List OAuth connections\n     *\n     * Get all OAuth connections for the current user.\n     */\n    public static cfgAccountsOauthConnectionsList<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthConnectionsListData, ThrowOnError>): RequestResult<CfgAccountsOauthConnectionsListResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsOauthConnectionsListResponses, unknown, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/accounts/oauth/connections/',\n            ...options\n        });\n    }\n    \n    /**\n     * Disconnect OAuth provider\n     *\n     * Remove OAuth connection for the specified provider.\n     */\n    public static cfgAccountsOauthDisconnectCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthDisconnectCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthDisconnectCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthDisconnectCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/accounts/oauth/disconnect/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Start GitHub OAuth\n     *\n     * Generate GitHub OAuth authorization URL. Redirect user to this URL to start authentication.\n     */\n    public static cfgAccountsOauthGithubAuthorizeCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthGithubAuthorizeCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubAuthorizeCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubAuthorizeCreateErrors, ThrowOnError>({\n            url: '/cfg/accounts/oauth/github/authorize/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Complete GitHub OAuth\n     *\n     * Exchange authorization code for JWT tokens. Call this after GitHub redirects back with code.\n     */\n    public static cfgAccountsOauthGithubCallbackCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthGithubCallbackCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthGithubCallbackCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthGithubCallbackCreateErrors, ThrowOnError>({\n            url: '/cfg/accounts/oauth/github/callback/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * List OAuth providers\n     *\n     * Get list of available OAuth providers for authentication.\n     */\n    public static cfgAccountsOauthProvidersRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthProvidersRetrieveData, ThrowOnError>): RequestResult<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError>({ url: '/cfg/accounts/oauth/providers/', ...options });\n    }\n}\n\nexport class CfgAccounts {\n    /**\n     * Request OTP code to email.\n     */\n    public static cfgAccountsOtpRequestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpRequestCreateData, ThrowOnError>): RequestResult<CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpRequestCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpRequestCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/accounts/otp/request/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Verify OTP code and return JWT tokens or 2FA session.\n     *\n     * If user has 2FA enabled:\n     * - Returns requires_2fa=True with session_id\n     * - Client must complete 2FA verification at /cfg/totp/verify/\n     *\n     * If user has no 2FA:\n     * - Returns JWT tokens and user data directly\n     */\n    public static cfgAccountsOtpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpVerifyCreateData, ThrowOnError>): RequestResult<CfgAccountsOtpVerifyCreateResponses, CfgAccountsOtpVerifyCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOtpVerifyCreateResponses, CfgAccountsOtpVerifyCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/accounts/otp/verify/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgAccountsProfile {\n    /**\n     * Get current user profile\n     *\n     * Retrieve the current authenticated user's profile information.\n     */\n    public static cfgAccountsProfileRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileRetrieveData, ThrowOnError>): RequestResult<CfgAccountsProfileRetrieveResponses, CfgAccountsProfileRetrieveErrors, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsProfileRetrieveResponses, CfgAccountsProfileRetrieveErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/',\n            ...options\n        });\n    }\n    \n    /**\n     * Upload user avatar\n     *\n     * Upload avatar image for the current authenticated user. Accepts multipart/form-data with 'avatar' field.\n     */\n    public static cfgAccountsProfileAvatarCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileAvatarCreateData, ThrowOnError>): RequestResult<CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileAvatarCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileAvatarCreateErrors, ThrowOnError>({\n            ...formDataBodySerializer,\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/accounts/profile/avatar/',\n            ...options,\n            headers: {\n                'Content-Type': null,\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Delete user account\n     *\n     *\n     * Permanently delete the current user's account.\n     *\n     * This operation:\n     * - Deactivates the account (user cannot log in)\n     * - Anonymizes personal data (GDPR compliance)\n     * - Frees up the email address for re-registration\n     * - Preserves audit trail\n     *\n     * The account can be restored by an administrator if needed.\n     *\n     */\n    public static cfgAccountsProfileDeleteCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileDeleteCreateData, ThrowOnError>): RequestResult<CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfileDeleteCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfileDeleteCreateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/delete/',\n            ...options\n        });\n    }\n    \n    /**\n     * Partial update user profile\n     *\n     * Partially update the current authenticated user's profile information. Supports avatar upload.\n     */\n    public static cfgAccountsProfilePartialPartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialPartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialPartialUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).patch<CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialPartialUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/partial/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Partial update user profile\n     *\n     * Partially update the current authenticated user's profile information. Supports avatar upload.\n     */\n    public static cfgAccountsProfilePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfilePartialUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).put<CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfilePartialUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/partial/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Update user profile\n     *\n     * Update the current authenticated user's profile information.\n     */\n    public static cfgAccountsProfileUpdatePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdatePartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdatePartialUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).patch<CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdatePartialUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/update/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Update user profile\n     *\n     * Update the current authenticated user's profile information.\n     */\n    public static cfgAccountsProfileUpdateUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdateUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfileUpdateUpdateResponses, CfgAccountsProfileUpdateUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).put<CfgAccountsProfileUpdateUpdateResponses, CfgAccountsProfileUpdateUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/update/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n}\n\nexport class CfgAccountsAuth {\n    /**\n     * Refresh JWT token.\n     *\n     * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the\n     * rotated access/refresh in the response are re-stamped with the same `cnf`\n     * (stock SimpleJWT drops it from the derived access), and a matching DPoP\n     * proof is required on the refresh request — so a stolen refresh token can't\n     * be used to mint fresh tokens.\n     */\n    public static cfgAccountsTokenRefreshCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenRefreshCreateData, ThrowOnError>): RequestResult<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError>({\n            url: '/cfg/accounts/token/refresh/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgCentrifugo {\n    /**\n     * Get Centrifugo connection token\n     *\n     * Generate JWT token for WebSocket connection to Centrifugo. Token includes user's allowed channels based on their permissions. Requires authentication.\n     */\n    public static cfgCentrifugoAuthTokenRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgCentrifugoAuthTokenRetrieveData, ThrowOnError>): RequestResult<CfgCentrifugoAuthTokenRetrieveResponses, CfgCentrifugoAuthTokenRetrieveErrors, ThrowOnError> {\n        return (options?.client ?? client).get<CfgCentrifugoAuthTokenRetrieveResponses, CfgCentrifugoAuthTokenRetrieveErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/centrifugo/auth/token/',\n            ...options\n        });\n    }\n}\n\nexport class CfgTotpBackupCodes {\n    /**\n     * Get backup codes status for user.\n     */\n    public static cfgTotpBackupCodesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpBackupCodesRetrieveData, ThrowOnError>): RequestResult<CfgTotpBackupCodesRetrieveResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgTotpBackupCodesRetrieveResponses, unknown, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/backup-codes/',\n            ...options\n        });\n    }\n    \n    /**\n     * Regenerate backup codes.\n     *\n     * Requires TOTP code for verification.\n     * Invalidates all existing codes.\n     */\n    public static cfgTotpBackupCodesRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpBackupCodesRegenerateCreateData, ThrowOnError>): RequestResult<CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRegenerateCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRegenerateCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/backup-codes/regenerate/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgTotp {\n    /**\n     * List all TOTP devices for user.\n     */\n    public static cfgTotpDevicesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpDevicesRetrieveData, ThrowOnError>): RequestResult<CfgTotpDevicesRetrieveResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgTotpDevicesRetrieveResponses, unknown, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/devices/',\n            ...options\n        });\n    }\n    \n    /**\n     * Delete a TOTP device.\n     *\n     * Requires verification code if removing the last/primary device.\n     */\n    public static cfgTotpDevicesDestroy<ThrowOnError extends boolean = false>(options: Options<CfgTotpDevicesDestroyData, ThrowOnError>): RequestResult<CfgTotpDevicesDestroyResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).delete<CfgTotpDevicesDestroyResponses, unknown, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/devices/{id}/',\n            ...options\n        });\n    }\n    \n    /**\n     * Completely disable 2FA for account.\n     *\n     * Requires verification code.\n     */\n    public static cfgTotpDisableCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpDisableCreateData, ThrowOnError>): RequestResult<CfgTotpDisableCreateResponses, CfgTotpDisableCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpDisableCreateResponses, CfgTotpDisableCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/disable/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgTotpSetup {\n    /**\n     * Start 2FA setup process.\n     *\n     * Creates a new TOTP device and returns QR code for scanning.\n     */\n    public static cfgTotpSetupCreate<ThrowOnError extends boolean = false>(options?: Options<CfgTotpSetupCreateData, ThrowOnError>): RequestResult<CfgTotpSetupCreateResponses, CfgTotpSetupCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgTotpSetupCreateResponses, CfgTotpSetupCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/setup/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Confirm 2FA setup with first valid code.\n     *\n     * Activates the device and generates backup codes.\n     */\n    public static cfgTotpSetupConfirmCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpSetupConfirmCreateData, ThrowOnError>): RequestResult<CfgTotpSetupConfirmCreateResponses, CfgTotpSetupConfirmCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpSetupConfirmCreateResponses, CfgTotpSetupConfirmCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/setup/confirm/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgTotpVerify {\n    /**\n     * Verify TOTP code for 2FA session.\n     *\n     * Completes authentication and returns JWT tokens on success.\n     */\n    public static cfgTotpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyCreateData, ThrowOnError>): RequestResult<CfgTotpVerifyCreateResponses, CfgTotpVerifyCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpVerifyCreateResponses, CfgTotpVerifyCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/verify/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Verify backup recovery code for 2FA session.\n     *\n     * Alternative verification method when TOTP device unavailable.\n     */\n    public static cfgTotpVerifyBackupCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyBackupCreateData, ThrowOnError>): RequestResult<CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyBackupCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyBackupCreateErrors, ThrowOnError>({\n            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],\n            url: '/cfg/totp/verify/backup/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Thin per-group proxy over the global `auth` store. All actual auth\n// wiring lives in `helpers/auth.ts` (one interceptor, one source of\n// truth). DO NOT EDIT — re-run `make gen`.\n\nimport { auth } from '../helpers/auth';\nimport { APILogger, type LoggerConfig } from '../helpers/logger';\n\nimport { CfgAccountsApiKey } from '../sdk.gen';\nimport { CfgAccountsOauth } from '../sdk.gen';\nimport { CfgAccounts } from '../sdk.gen';\nimport { CfgAccountsProfile } from '../sdk.gen';\nimport { CfgAccountsAuth } from '../sdk.gen';\n\n\n\nexport interface APIOptions {\n  /** Logger config (defaults to dev-only). */\n  logger?: Partial<LoggerConfig>;\n  /** Locale for `Accept-Language`. If omitted, auto-detected from cookie/navigator. */\n  locale?: string;\n  /** API key sent as `X-API-Key`. Falls back to NEXT_PUBLIC_API_KEY. */\n  apiKey?: string;\n  /** Send Django session/CSRF cookies cross-origin. Defaults to true. */\n  withCredentials?: boolean;\n}\n\n/**\n * Per-group ergonomic facade.\n *\n * Calling `setToken/setApiKey/setLocale/setBaseUrl` proxies to the\n * global `auth` store — the change applies to **every** group's API\n * instance because they share the same HTTP client and interceptor.\n *\n * Use the global `auth` object directly when you don't need a group\n * facade: `import { auth } from '@your/api'; auth.setToken(jwt);`\n */\nexport class API {\n  readonly logger: APILogger;\n\n  readonly cfgAccountsApiKey = CfgAccountsApiKey;\n  readonly cfgAccountsOauth = CfgAccountsOauth;\n  readonly cfgAccounts = CfgAccounts;\n  readonly cfgAccountsProfile = CfgAccountsProfile;\n  readonly cfgAccountsAuth = CfgAccountsAuth;\n\n  constructor(_baseUrl?: string, opts: APIOptions = {}) {\n    this.logger = new APILogger(opts.logger);\n    if (_baseUrl) auth.setBaseUrl(_baseUrl);\n    if (opts.locale !== undefined) auth.setLocale(opts.locale);\n    if (opts.apiKey !== undefined) auth.setApiKey(opts.apiKey);\n    if (opts.withCredentials !== undefined) auth.setWithCredentials(opts.withCredentials);\n  }\n\n  // ── Base URL ────────────────────────────────────────────────────────────\n  getBaseUrl(): string { return auth.getBaseUrl(); }\n  setBaseUrl(url: string): void { auth.setBaseUrl(url); }\n\n  // ── Tokens ──────────────────────────────────────────────────────────────\n  getToken(): string | null { return auth.getToken(); }\n  setToken(token: string | null): void { auth.setToken(token); }\n  getRefreshToken(): string | null { return auth.getRefreshToken(); }\n  setRefreshToken(token: string | null): void { auth.setRefreshToken(token); }\n  clearToken(): void { auth.clearTokens(); }\n  isAuthenticated(): boolean { return auth.isAuthenticated(); }\n\n  // ── Locale / API key ────────────────────────────────────────────────────\n  getLocale(): string | null { return auth.getLocale(); }\n  setLocale(locale: string | null): void { auth.setLocale(locale); }\n  getApiKey(): string | null { return auth.getApiKey(); }\n  setApiKey(key: string | null): void { auth.setApiKey(key); }\n\n  // ── 401 handling ────────────────────────────────────────────────────────\n  /** Fired only on terminal 401 (after refresh+retry path is exhausted). */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    auth.onUnauthorized(cb);\n  }\n  /** Provide a refresh strategy. See `auth.setRefreshHandler` for the contract. */\n  setRefreshHandler(\n    fn: ((refreshToken: string) => Promise<{ access: string; refresh?: string } | null>) | null,\n  ): void {\n    auth.setRefreshHandler(fn);\n  }\n  /**\n   * Proactively refresh now via the registered handler, sharing the single\n   * 401-recovery flight (rotation + dedup + rotated-token persistence).\n   * See `auth.refreshNow`.\n   */\n  refreshNow(): Promise<string | null> {\n    return auth.refreshNow();\n  }\n}\n\nexport { CfgAccountsApiKey, CfgAccountsOauth, CfgAccounts, CfgAccountsProfile, CfgAccountsAuth };\nexport { auth };\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Storage adapters for token persistence.\n// DO NOT EDIT — re-run `make gen`.\n\nexport interface StorageAdapter {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n  clear?(): void;\n}\n\n/** Browser localStorage. Falls back to no-op on SSR / private mode. */\nexport class LocalStorageAdapter implements StorageAdapter {\n  getItem(key: string): string | null {\n    if (typeof window === \"undefined\") return null;\n    try { return window.localStorage.getItem(key); } catch { return null; }\n  }\n  setItem(key: string, value: string): void {\n    if (typeof window === \"undefined\") return;\n    try { window.localStorage.setItem(key, value); } catch { /* quota / private */ }\n  }\n  removeItem(key: string): void {\n    if (typeof window === \"undefined\") return;\n    try { window.localStorage.removeItem(key); } catch { /* ignore */ }\n  }\n  clear(): void {\n    if (typeof window === \"undefined\") return;\n    try { window.localStorage.clear(); } catch { /* ignore */ }\n  }\n}\n\n/** In-memory store. Use for SSR, Electron main process, or tests. */\nexport class MemoryStorageAdapter implements StorageAdapter {\n  private store = new Map<string, string>();\n  getItem(key: string): string | null { return this.store.get(key) ?? null; }\n  setItem(key: string, value: string): void { this.store.set(key, value); }\n  removeItem(key: string): void { this.store.delete(key); }\n  clear(): void { this.store.clear(); }\n}\n\n/** Cookie-backed storage (browser only). */\nexport class CookieStorageAdapter implements StorageAdapter {\n  constructor(\n    private opts: {\n      domain?: string;\n      path?: string;\n      secure?: boolean;\n      sameSite?: \"Strict\" | \"Lax\" | \"None\";\n      maxAgeSeconds?: number;\n    } = {},\n  ) {}\n\n  getItem(key: string): string | null {\n    if (typeof document === \"undefined\") return null;\n    const prefix = `${encodeURIComponent(key)}=`;\n    for (const part of document.cookie.split(\"; \")) {\n      if (part.startsWith(prefix)) {\n        return decodeURIComponent(part.slice(prefix.length));\n      }\n    }\n    return null;\n  }\n\n  setItem(key: string, value: string): void {\n    if (typeof document === \"undefined\") return;\n    const parts = [\n      `${encodeURIComponent(key)}=${encodeURIComponent(value)}`,\n      `Path=${this.opts.path ?? \"/\"}`,\n    ];\n    if (this.opts.domain) parts.push(`Domain=${this.opts.domain}`);\n    if (this.opts.secure) parts.push(\"Secure\");\n    if (this.opts.sameSite) parts.push(`SameSite=${this.opts.sameSite}`);\n    if (this.opts.maxAgeSeconds != null) {\n      parts.push(`Max-Age=${this.opts.maxAgeSeconds}`);\n    }\n    document.cookie = parts.join(\"; \");\n  }\n\n  removeItem(key: string): void {\n    if (typeof document === \"undefined\") return;\n    document.cookie = `${encodeURIComponent(key)}=; Max-Age=0; Path=${this.opts.path ?? \"/\"}`;\n  }\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Browser CustomEvent integration for Zod validation errors.\n// DO NOT EDIT — re-run `make gen`.\n\nimport type { ZodError } from \"zod\";\n\nexport interface ValidationErrorDetail {\n  operation: string;\n  path: string;\n  method: string;\n  error: ZodError;\n  response: any;\n  timestamp: Date;\n}\n\nexport type ValidationErrorEvent = CustomEvent<ValidationErrorDetail>;\n\nexport function dispatchValidationError(detail: ValidationErrorDetail): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    const event = new CustomEvent<ValidationErrorDetail>(\"zod-validation-error\", {\n      detail,\n      bubbles: true,\n      cancelable: false,\n    });\n    window.dispatchEvent(event);\n  } catch (error) {\n    console.warn(\"Failed to dispatch validation error event:\", error);\n  }\n}\n\nexport function onValidationError(\n  callback: (detail: ValidationErrorDetail) => void,\n): () => void {\n  if (typeof window === \"undefined\") return () => {};\n  const handler = (event: Event) => {\n    if (event instanceof CustomEvent) callback(event.detail);\n  };\n  window.addEventListener(\"zod-validation-error\", handler);\n  return () => window.removeEventListener(\"zod-validation-error\", handler);\n}\n\nexport function formatZodError(error: ZodError): string {\n  const issues = error.issues.map((issue, index) => {\n    const path = issue.path.join(\".\") || \"root\";\n    const parts = [`${index + 1}. ${path}: ${issue.message}`];\n    if (\"expected\" in issue && issue.expected) parts.push(`   Expected: ${issue.expected}`);\n    if (\"received\" in issue && issue.received) parts.push(`   Received: ${issue.received}`);\n    return parts.join(\"\\n\");\n  });\n  return issues.join(\"\\n\");\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Thin per-group proxy over the global `auth` store. All actual auth\n// wiring lives in `helpers/auth.ts` (one interceptor, one source of\n// truth). DO NOT EDIT — re-run `make gen`.\n\nimport { auth } from '../helpers/auth';\nimport { APILogger, type LoggerConfig } from '../helpers/logger';\n\nimport { CfgCentrifugo } from '../sdk.gen';\n\n\n\nexport interface APIOptions {\n  /** Logger config (defaults to dev-only). */\n  logger?: Partial<LoggerConfig>;\n  /** Locale for `Accept-Language`. If omitted, auto-detected from cookie/navigator. */\n  locale?: string;\n  /** API key sent as `X-API-Key`. Falls back to NEXT_PUBLIC_API_KEY. */\n  apiKey?: string;\n  /** Send Django session/CSRF cookies cross-origin. Defaults to true. */\n  withCredentials?: boolean;\n}\n\n/**\n * Per-group ergonomic facade.\n *\n * Calling `setToken/setApiKey/setLocale/setBaseUrl` proxies to the\n * global `auth` store — the change applies to **every** group's API\n * instance because they share the same HTTP client and interceptor.\n *\n * Use the global `auth` object directly when you don't need a group\n * facade: `import { auth } from '@your/api'; auth.setToken(jwt);`\n */\nexport class API {\n  readonly logger: APILogger;\n\n  readonly cfgCentrifugo = CfgCentrifugo;\n\n  constructor(_baseUrl?: string, opts: APIOptions = {}) {\n    this.logger = new APILogger(opts.logger);\n    if (_baseUrl) auth.setBaseUrl(_baseUrl);\n    if (opts.locale !== undefined) auth.setLocale(opts.locale);\n    if (opts.apiKey !== undefined) auth.setApiKey(opts.apiKey);\n    if (opts.withCredentials !== undefined) auth.setWithCredentials(opts.withCredentials);\n  }\n\n  // ── Base URL ────────────────────────────────────────────────────────────\n  getBaseUrl(): string { return auth.getBaseUrl(); }\n  setBaseUrl(url: string): void { auth.setBaseUrl(url); }\n\n  // ── Tokens ──────────────────────────────────────────────────────────────\n  getToken(): string | null { return auth.getToken(); }\n  setToken(token: string | null): void { auth.setToken(token); }\n  getRefreshToken(): string | null { return auth.getRefreshToken(); }\n  setRefreshToken(token: string | null): void { auth.setRefreshToken(token); }\n  clearToken(): void { auth.clearTokens(); }\n  isAuthenticated(): boolean { return auth.isAuthenticated(); }\n\n  // ── Locale / API key ────────────────────────────────────────────────────\n  getLocale(): string | null { return auth.getLocale(); }\n  setLocale(locale: string | null): void { auth.setLocale(locale); }\n  getApiKey(): string | null { return auth.getApiKey(); }\n  setApiKey(key: string | null): void { auth.setApiKey(key); }\n\n  // ── 401 handling ────────────────────────────────────────────────────────\n  /** Fired only on terminal 401 (after refresh+retry path is exhausted). */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    auth.onUnauthorized(cb);\n  }\n  /** Provide a refresh strategy. See `auth.setRefreshHandler` for the contract. */\n  setRefreshHandler(\n    fn: ((refreshToken: string) => Promise<{ access: string; refresh?: string } | null>) | null,\n  ): void {\n    auth.setRefreshHandler(fn);\n  }\n  /**\n   * Proactively refresh now via the registered handler, sharing the single\n   * 401-recovery flight (rotation + dedup + rotated-token persistence).\n   * See `auth.refreshNow`.\n   */\n  refreshNow(): Promise<string | null> {\n    return auth.refreshNow();\n  }\n}\n\nexport { CfgCentrifugo };\nexport { auth };\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Thin per-group proxy over the global `auth` store. All actual auth\n// wiring lives in `helpers/auth.ts` (one interceptor, one source of\n// truth). DO NOT EDIT — re-run `make gen`.\n\nimport { auth } from '../helpers/auth';\nimport { APILogger, type LoggerConfig } from '../helpers/logger';\n\nimport { CfgTotpBackupCodes } from '../sdk.gen';\nimport { CfgTotp } from '../sdk.gen';\nimport { CfgTotpSetup } from '../sdk.gen';\nimport { CfgTotpVerify } from '../sdk.gen';\n\n\n\nexport interface APIOptions {\n  /** Logger config (defaults to dev-only). */\n  logger?: Partial<LoggerConfig>;\n  /** Locale for `Accept-Language`. If omitted, auto-detected from cookie/navigator. */\n  locale?: string;\n  /** API key sent as `X-API-Key`. Falls back to NEXT_PUBLIC_API_KEY. */\n  apiKey?: string;\n  /** Send Django session/CSRF cookies cross-origin. Defaults to true. */\n  withCredentials?: boolean;\n}\n\n/**\n * Per-group ergonomic facade.\n *\n * Calling `setToken/setApiKey/setLocale/setBaseUrl` proxies to the\n * global `auth` store — the change applies to **every** group's API\n * instance because they share the same HTTP client and interceptor.\n *\n * Use the global `auth` object directly when you don't need a group\n * facade: `import { auth } from '@your/api'; auth.setToken(jwt);`\n */\nexport class API {\n  readonly logger: APILogger;\n\n  readonly cfgTotpBackupCodes = CfgTotpBackupCodes;\n  readonly cfgTotp = CfgTotp;\n  readonly cfgTotpSetup = CfgTotpSetup;\n  readonly cfgTotpVerify = CfgTotpVerify;\n\n  constructor(_baseUrl?: string, opts: APIOptions = {}) {\n    this.logger = new APILogger(opts.logger);\n    if (_baseUrl) auth.setBaseUrl(_baseUrl);\n    if (opts.locale !== undefined) auth.setLocale(opts.locale);\n    if (opts.apiKey !== undefined) auth.setApiKey(opts.apiKey);\n    if (opts.withCredentials !== undefined) auth.setWithCredentials(opts.withCredentials);\n  }\n\n  // ── Base URL ────────────────────────────────────────────────────────────\n  getBaseUrl(): string { return auth.getBaseUrl(); }\n  setBaseUrl(url: string): void { auth.setBaseUrl(url); }\n\n  // ── Tokens ──────────────────────────────────────────────────────────────\n  getToken(): string | null { return auth.getToken(); }\n  setToken(token: string | null): void { auth.setToken(token); }\n  getRefreshToken(): string | null { return auth.getRefreshToken(); }\n  setRefreshToken(token: string | null): void { auth.setRefreshToken(token); }\n  clearToken(): void { auth.clearTokens(); }\n  isAuthenticated(): boolean { return auth.isAuthenticated(); }\n\n  // ── Locale / API key ────────────────────────────────────────────────────\n  getLocale(): string | null { return auth.getLocale(); }\n  setLocale(locale: string | null): void { auth.setLocale(locale); }\n  getApiKey(): string | null { return auth.getApiKey(); }\n  setApiKey(key: string | null): void { auth.setApiKey(key); }\n\n  // ── 401 handling ────────────────────────────────────────────────────────\n  /** Fired only on terminal 401 (after refresh+retry path is exhausted). */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    auth.onUnauthorized(cb);\n  }\n  /** Provide a refresh strategy. See `auth.setRefreshHandler` for the contract. */\n  setRefreshHandler(\n    fn: ((refreshToken: string) => Promise<{ access: string; refresh?: string } | null>) | null,\n  ): void {\n    auth.setRefreshHandler(fn);\n  }\n  /**\n   * Proactively refresh now via the registered handler, sharing the single\n   * 401-recovery flight (rotation + dedup + rotated-token persistence).\n   * See `auth.refreshNow`.\n   */\n  refreshNow(): Promise<string | null> {\n    return auth.refreshNow();\n  }\n}\n\nexport { CfgTotpBackupCodes, CfgTotp, CfgTotpSetup, CfgTotpVerify };\nexport { auth };\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Top-level barrel — global `auth` + per-group facades.\n// DO NOT EDIT — re-run `make gen`.\n\n// Side-effect: ensure auth interceptor is installed even if consumers\n// only ever import this barrel (it'll also load via client.gen.ts).\nimport './helpers/auth';\n\n// Global auth/config store — single source of truth.\nexport { auth, type Auth } from './helpers/auth';\n\nimport { API as CfgAccountsAPI } from './_cfg_accounts';\nimport { API as CfgCentrifugoAPI } from './_cfg_centrifugo';\nimport { API as CfgTotpAPI } from './_cfg_totp';\n\n// Singletons for ergonomic access (`import { apiAccounts } from '@your/api'`).\n// All instances share the same global `auth` store.\nexport const CfgAccountsApi = new CfgAccountsAPI();\nexport const CfgCentrifugoApi = new CfgCentrifugoAPI();\nexport const CfgTotpApi = new CfgTotpAPI();\n\n// Per-group wrapper classes (e.g. for tests / SSR isolation of options).\nexport { API as CfgAccountsAPI } from './_cfg_accounts';\nexport { API as CfgCentrifugoAPI } from './_cfg_centrifugo';\nexport { API as CfgTotpAPI } from './_cfg_totp';\n\n// Hey API SDK classes — one per OpenAPI tag. Lets consumers call\n// `Centrifugo.cfgCentrifugoAuthTokenRetrieve({...})` directly.\n//\n// NOTE: classes whose name would collide with a barrel-level type\n// alias (e.g. `Auth`, which is also `type Auth = typeof auth`) are\n// re-exported under a `*SDK` suffix here. The original name is still\n// available via the per-group import: `import { Auth } from\n// '<api>/_auth'`. To remove the alias, rename the OpenAPI tag on the\n// backend so the SDK class doesn't collide.\nexport { CfgAccountsApiKey, CfgAccountsOauth, CfgAccounts, CfgAccountsProfile, CfgAccountsAuth } from './_cfg_accounts';\nexport { CfgCentrifugo } from './_cfg_centrifugo';\nexport { CfgTotpBackupCodes, CfgTotp, CfgTotpSetup, CfgTotpVerify } from './_cfg_totp';\n\n// Generated DTO / schema types (Hey API). The per-group barrels each\n// re-export these too; surfacing them at the top level lets consumers\n// `import { FleetSummary } from '<api>'` without reaching into a\n// group subpath.\nexport type * from './types.gen';\n\n// Shared utilities (errors, storage adapters, logger).\nexport * from './helpers';\n","export const isDev = process.env.NODE_ENV === 'development';\nexport const isProd = !isDev;\nexport const isBrowser = typeof window !== 'undefined';\n\n/**\n * Next.js static-export build (`output: 'export'`). Loggers treat it like dev\n * for visibility; some auth/SSR features behave differently under it.\n */\nexport const isStaticBuild = process.env.NEXT_PUBLIC_STATIC_BUILD === 'true';\n\n/**\n * DPoP (RFC 9449) sender-constrained tokens are enabled for this app.\n *\n * Set by `createBaseNextConfig({ dpop: true })` (inlines\n * `NEXT_PUBLIC_DPOP_ENABLED='true'`). When true: tokens are bound to a\n * non-extractable in-browser key, a copied Bearer token can't be replayed, and\n * the API client signs a per-request DPoP proof. This flag lives in\n * `@djangocfg/api` — the package that implements DPoP — so it is the single\n * source of truth, importable by every higher-level package.\n */\nexport const dpopEnabled = process.env.NEXT_PUBLIC_DPOP_ENABLED === 'true';\n","/**\n * Global runtime log-level control.\n *\n * One mutable level that every `@djangocfg/*` consola wrapper reads, so the\n * whole app's console verbosity can be changed at runtime (e.g. raised for an\n * admin, kept silent for a regular user in production) WITHOUT each package\n * hardcoding `isDev ? 4 : 1`.\n *\n * Lives in `@djangocfg/api` because it's the lowest shared package — api,\n * layouts, centrifugo, ui-core consumers can all import it without a cycle.\n *\n * consola levels: 0 silent · 1 error · 2 warn · 3 info · 4 debug · 5 trace.\n *\n * Default policy (before anyone calls setLogLevel):\n *   - dev / static build → 4 (debug)\n *   - production         → 1 (errors only)\n * App bootstrap should call `applyRoleLogPolicy({ isAdmin, isDev })` once auth\n * is known to raise verbosity for staff/superusers even in production.\n */\n\nimport { isDev, isStaticBuild } from './auth/utils/env';\n\nexport type ConsolaLevel = 0 | 1 | 2 | 3 | 4 | 5;\n\n/** Dev or a static export → show verbose logs by default. */\nconst verboseByDefault = isDev || isStaticBuild;\n\nconst DEFAULT_LEVEL: ConsolaLevel = verboseByDefault ? 4 : 1;\n\nlet _level: ConsolaLevel = DEFAULT_LEVEL;\n\n/** Subscribers (the wrapper loggers) notified when the level changes. */\nconst _subscribers = new Set<(level: ConsolaLevel) => void>();\n\n/** Current global log level. Wrappers read this when constructing/refreshing. */\nexport function getLogLevel(): ConsolaLevel {\n  return _level;\n}\n\n/** Set the global log level and notify all live loggers. */\nexport function setLogLevel(level: ConsolaLevel): void {\n  _level = level;\n  for (const fn of _subscribers) {\n    try {\n      fn(level);\n    } catch {\n      /* a bad subscriber must not break logging */\n    }\n  }\n}\n\n/**\n * Subscribe to level changes. Returns an unsubscribe fn. The callback fires\n * immediately with the current level so a logger can sync on registration.\n */\nexport function onLogLevelChange(fn: (level: ConsolaLevel) => void): () => void {\n  _subscribers.add(fn);\n  try {\n    fn(_level);\n  } catch {\n    /* ignore */\n  }\n  return () => _subscribers.delete(fn);\n}\n\n/**\n * Apply the role-aware policy. Call once at bootstrap and whenever auth changes.\n *\n *   - admin (is_staff / is_superuser): full verbosity (debug) everywhere, even\n *     in production — so support/devs can diagnose live without a redeploy.\n *   - dev (non-admin): debug.\n *   - production regular user: errors only — a clean console, like big SaaS apps.\n */\nexport function applyRoleLogPolicy(opts: { isAdmin: boolean; isDev?: boolean }): void {\n  const devMode = opts.isDev ?? verboseByDefault;\n  if (opts.isAdmin || devMode) {\n    setLogLevel(4);\n  } else {\n    setLogLevel(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAAAA;AAAA,EAAA;AAAA;AAAA,oBAAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAAC;AAAA,EAAA;AAAA;AAAA,mBAAAC;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACOO,IAAM,WAAN,cAAuB,MAAM;AAAA,EAClC,YACS,YACA,YACA,UACA,KACP,SACA;AACA,UAAM,WAAW,QAAQ,UAAU,KAAK,UAAU,EAAE;AAN7C;AACA;AACA;AACA;AAIP,SAAK,OAAO;AAAA,EACd;AAAA,EAjBF,OAOoC;AAAA;AAAA;AAAA,EAYlC,IAAI,UAAsC;AACxC,QAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,MAAM;AAC/D,aAAO,KAAK;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,cAA+C;AACjD,UAAM,UAAU,KAAK;AACrB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,cAAwC,CAAC;AAC/C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,UAAI,MAAM,QAAQ,KAAK,EAAG,aAAY,GAAG,IAAI;AAAA,IAC/C;AACA,WAAO,OAAO,KAAK,WAAW,EAAE,SAAS,IAAI,cAAc;AAAA,EAC7D;AAAA,EAEA,IAAI,eAAuB;AACzB,UAAM,UAAU,KAAK;AACrB,QAAI,CAAC,QAAS,QAAO,KAAK;AAC1B,QAAI,QAAQ,QAAQ;AAClB,aAAO,MAAM,QAAQ,QAAQ,MAAM,IAAI,QAAQ,OAAO,KAAK,IAAI,IAAI,OAAO,QAAQ,MAAM;AAAA,IAC1F;AACA,QAAI,QAAQ,MAAO,QAAO,OAAO,QAAQ,KAAK;AAC9C,QAAI,QAAQ,QAAS,QAAO,OAAO,QAAQ,OAAO;AAClD,UAAM,cAAc,KAAK;AACzB,QAAI,aAAa;AACf,YAAM,aAAa,OAAO,KAAK,WAAW,EAAE,CAAC;AAC7C,UAAI,WAAY,QAAO,GAAG,UAAU,KAAK,YAAY,UAAU,GAAG,KAAK,IAAI,CAAC;AAAA,IAC9E;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,oBAA6B;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EACnE,IAAI,cAAuB;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EAC7D,IAAI,oBAA6B;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EACnE,IAAI,kBAA2B;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EACjE,IAAI,gBAAyB;AAAE,WAAO,KAAK,cAAc,OAAO,KAAK,aAAa;AAAA,EAAK;AACzF;AAGO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACE,SACO,KACA,eACP;AACA,UAAM,OAAO;AAHN;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AAAA,EApEF,OA4DwC;AAAA;AAAA;AASxC;;;AC7DA,IAAM,aAAa;AACnB,IAAM,cAAc;AACpB,IAAM,cAAc;AAEpB,IAAM,YAAY,OAAO,WAAW;AAWpC,IAAM,sBAA+B;AAAA,EACnC,IAAI,KAAK;AACP,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI;AAAE,aAAO,OAAO,aAAa,QAAQ,GAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EACxE;AAAA,EACA,IAAI,KAAK,OAAO;AACd,QAAI,CAAC,UAAW;AAChB,QAAI;AACF,UAAI,UAAU,KAAM,QAAO,aAAa,WAAW,GAAG;AAAA,UACjD,QAAO,aAAa,QAAQ,KAAK,KAAK;AAAA,IAC7C,QAAQ;AAAA,IAAC;AAAA,EACX;AACF;AAGA,IAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,IAAM,gBAAyB;AAAA,EAC7B,IAAI,KAAK;AACP,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI;AACF,YAAM,KAAK,IAAI,OAAO,cAAc,mBAAmB,GAAG,CAAC,UAAU;AACrE,YAAM,IAAI,SAAS,OAAO,MAAM,EAAE;AAClC,aAAO,IAAI,mBAAmB,EAAE,CAAC,CAAC,IAAI;AAAA,IACxC,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EACzB;AAAA,EACA,IAAI,KAAK,OAAO;AACd,QAAI,CAAC,UAAW;AAChB,QAAI;AACF,YAAM,IAAI,mBAAmB,GAAG;AAChC,YAAM,SAAS,OAAO,SAAS,aAAa,WAAW,aAAa;AACpE,UAAI,UAAU,MAAM;AAClB,iBAAS,SAAS,GAAG,CAAC,qCAAqC,MAAM;AAAA,MACnE,OAAO;AACL,cAAM,IAAI,mBAAmB,KAAK;AAClC,iBAAS,SAAS,GAAG,CAAC,IAAI,CAAC,qBAAqB,cAAc,iBAAiB,MAAM;AAAA,MACvF;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACF;AAEA,IAAI,WAAoB;AACxB,IAAI,eAA4B;AAGhC,SAAS,eAA8B;AACrC,MAAI;AACF,QAAI,OAAO,aAAa,aAAa;AACnC,YAAM,IAAI,SAAS,OAAO,MAAM,+BAA+B;AAC/D,UAAI,EAAG,QAAO,mBAAmB,EAAE,CAAC,CAAC;AAAA,IACvC;AACA,QAAI,OAAO,cAAc,eAAe,UAAU,UAAU;AAC1D,aAAO,UAAU;AAAA,IACnB;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AAXS;AAuBT,SAAS,iBAAyB;AAChC,MAAI,OAAO,WAAW,aAAa;AACjC,QAAI;AACF,UAAI,OAAO,YAAY,eAAe,QAAQ,KAAK;AACjD,YAAI,QAAQ,IAAI,6BAA6B,OAAQ,QAAO;AAG5D,YAAI,QAAQ,IAAI,8BAA8B;AAC5C,iBAAO,QAAQ,IAAI;AACrB,eAAO,QAAQ,IAAI,uBAAuB;AAAA,MAC5C;AAAA,IACF,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,OAAO,YAAY,eAAe,QAAQ,KAAK;AACjD,UAAI,QAAQ,IAAI,6BAA6B,OAAQ,QAAO;AAC5D,aAAO,QAAQ,IAAI,uBAAuB;AAAA,IAC5C;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AArBS;AA6BT,SAAS,gBAA+B;AACtC,MAAI;AACF,QAAI,OAAO,YAAY,eAAe,QAAQ,KAAK,qBAAqB;AACtE,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AAPS;AAUT,IAAI,kBAAiC;AACrC,IAAI,kBAAiC;AACrC,IAAI,mBAAkC;AACtC,IAAI,mBAAmB;AACvB,IAAI,kBAAyD;AAS7D,IAAI,kBAAyC;AAG7C,IAAI,mBAAkD;AAGtD,IAAM,eAAe;AAiBrB,IAAI,UAA4B;AAEhC,SAAS,mBAAyB;AAChC,MAAI,CAAC,QAAS;AACd,UAAQ,UAAU;AAAA,IAChB,SAAS,KAAK,WAAW;AAAA,IACzB,aAAa,mBAAmB,YAAY;AAAA,EAC9C,CAAC;AACH;AANS;AAsBF,IAAM,OAAO;AAAA;AAAA,EAElB,iBAA8B;AAAE,WAAO;AAAA,EAAc;AAAA,EACrD,eAAe,MAAyB;AACtC,mBAAe;AACf,eAAW,SAAS,WAAW,gBAAgB;AAAA,EACjD;AAAA;AAAA,EAGA,WAA0B;AAAE,WAAO,SAAS,IAAI,UAAU;AAAA,EAAG;AAAA,EAC7D,SAAS,OAA4B;AAAE,aAAS,IAAI,YAAY,KAAK;AAAA,EAAG;AAAA,EACxE,kBAAiC;AAAE,WAAO,SAAS,IAAI,WAAW;AAAA,EAAG;AAAA,EACrE,gBAAgB,OAA4B;AAAE,aAAS,IAAI,aAAa,KAAK;AAAA,EAAG;AAAA,EAChF,cAAoB;AAAE,aAAS,IAAI,YAAY,IAAI;AAAG,aAAS,IAAI,aAAa,IAAI;AAAA,EAAG;AAAA,EACvF,kBAA2B;AAAE,WAAO,SAAS,IAAI,UAAU,MAAM;AAAA,EAAM;AAAA;AAAA,EAGvE,YAA2B;AACzB,WAAO,mBAAmB,SAAS,IAAI,WAAW,KAAK,cAAc;AAAA,EACvE;AAAA,EACA,UAAU,KAA0B;AAAE,sBAAkB;AAAA,EAAK;AAAA,EAC7D,iBAAiB,KAA0B;AACzC,sBAAkB;AAClB,aAAS,IAAI,aAAa,GAAG;AAAA,EAC/B;AAAA,EACA,cAAoB;AAAE,sBAAkB;AAAM,aAAS,IAAI,aAAa,IAAI;AAAA,EAAG;AAAA;AAAA,EAG/E,YAA2B;AAAE,WAAO,mBAAmB,aAAa;AAAA,EAAG;AAAA,EACvE,UAAU,QAA6B;AAAE,sBAAkB;AAAA,EAAQ;AAAA;AAAA,EAGnE,aAAqB;AACnB,UAAM,MAAO,oBAAoB,eAAe;AAChD,WAAO,IAAI,QAAQ,OAAO,EAAE;AAAA,EAC9B;AAAA,EACA,WAAW,KAA0B;AACnC,uBAAmB,MAAM,IAAI,QAAQ,OAAO,EAAE,IAAI;AAClD,qBAAiB;AAAA,EACnB;AAAA;AAAA,EAGA,qBAA8B;AAAE,WAAO;AAAA,EAAkB;AAAA,EACzD,mBAAmB,OAAsB;AACvC,uBAAmB;AACnB,qBAAiB;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,eAAe,IAAiD;AAC9D,sBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,kBAAkB,IAAiC;AACjD,sBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAqC;AACnC,WAAO,WAAW;AAAA,EACpB;AACF;AAOA,eAAe,aAAqC;AAClD,MAAI,iBAAkB,QAAO;AAC7B,MAAI,CAAC,gBAAiB,QAAO;AAC7B,QAAM,UAAU,KAAK,gBAAgB;AACrC,MAAI,CAAC,QAAS,QAAO;AAErB,sBAAoB,YAAY;AAC9B,QAAI;AACF,YAAM,SAAS,MAAM,gBAAiB,OAAO;AAC7C,UAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,WAAK,SAAS,OAAO,MAAM;AAC3B,UAAI,OAAO,QAAS,MAAK,gBAAgB,OAAO,OAAO;AACvD,aAAO,OAAO;AAAA,IAChB,QAAQ;AACN,aAAO;AAAA,IACT,UAAE;AACA,yBAAmB;AAAA,IACrB;AAAA,EACF,GAAG;AAEH,SAAO;AACT;AArBe;AA2Ef,SAAS,cAAuB;AAC9B,MAAI;AACF,WAAO,OAAO,YAAY,eACrB,QAAQ,KAAK,6BAA6B;AAAA,EACjD,QAAQ;AAAE,WAAO;AAAA,EAAO;AAC1B;AALS;AAOT,IAAM,WAAW;AACjB,IAAM,cAAc;AACpB,IAAM,eAAe;AAErB,SAAS,WAAiC;AACxC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,MAAM,UAAU,KAAK,UAAU,CAAC;AACtC,QAAI,kBAAkB,MAAM,IAAI,OAAO,kBAAkB,WAAW;AACpE,QAAI,YAAY,MAAM,QAAQ,IAAI,MAAM;AACxC,QAAI,UAAU,MAAM,OAAO,IAAI,KAAK;AAAA,EACtC,CAAC;AACH;AAPS;AAST,SAAS,QAAQ,KAAiD;AAChE,SAAO,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC9D,UAAM,KAAK,GAAG,YAAY,aAAa,UAAU;AACjD,UAAM,MAAM,GAAG,YAAY,WAAW,EAAE,IAAI,GAAG;AAC/C,QAAI,YAAY,MAAM,QAAQ,IAAI,MAAM;AACxC,QAAI,UAAU,MAAM,OAAO,IAAI,KAAK;AAAA,EACtC,CAAC,CAAC;AACJ;AAPS;AAST,SAAS,QAAQ,KAAa,OAAqC;AACjE,SAAO,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC9D,UAAM,KAAK,GAAG,YAAY,aAAa,WAAW;AAClD,OAAG,YAAY,WAAW,EAAE,IAAI,OAAO,GAAG;AAC1C,OAAG,aAAa,MAAM,QAAQ;AAC9B,OAAG,UAAU,MAAM,OAAO,GAAG,KAAK;AAAA,EACpC,CAAC,CAAC;AACJ;AAPS;AAUT,IAAI,kBAAiD;AAErD,SAAS,kBAA0C;AACjD,MAAI,gBAAiB,QAAO;AAC5B,qBAAmB,YAAY;AAC7B,UAAM,WAAW,MAAM,QAAQ,YAAY,EAAE,MAAM,MAAM,MAAS;AAClE,QAAI,SAAU,QAAO;AACrB,UAAM,OAAO,MAAM,OAAO,OAAO;AAAA,MAC/B,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,MACrC;AAAA;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAGA,UAAM,QAAQ,cAAc,IAAI,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAChD,WAAO;AAAA,EACT,GAAG;AACH,SAAO;AACT;AAhBS;AAkBT,SAAS,iBAAiB,OAAyC;AACjE,QAAM,MAAM,iBAAiB,aAAa,QAAQ,IAAI,WAAW,KAAK;AACtE,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,MAAK,OAAO,aAAa,IAAI,CAAC,CAAC;AACpE,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;AALS;AAOT,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,iBAAiB,IAAI,YAAY,EAAE,OAAO,GAAG,CAAC;AACvD;AAFS;AAKT,eAAe,WAAW,KAAiD;AACzE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AAEpD,SAAO,EAAE,KAAK,MAAM,KAAK,SAAS,GAAG,IAAI,GAAa,GAAG,IAAI,EAAY;AAC3E;AAJe;AAOf,eAAe,eAAe,QAAgB,KAAqC;AACjF,MAAI;AACF,UAAM,OAAO,MAAM,gBAAgB;AACnC,UAAM,MAAM,MAAM,WAAW,KAAK,SAAS;AAC3C,UAAM,SAAS,EAAE,KAAK,YAAY,KAAK,SAAS,IAAI;AAEpD,UAAM,MAAM,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC;AAC1C,UAAM,MACH,OAAO,cAAc,OAAO,WAAW,KACxC,iBAAiB,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC;AAC7D,UAAM,UAAU,EAAE,KAAK,OAAO,YAAY,GAAG,KAAK,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAAG,IAAI;AAC1F,UAAM,eACJ,GAAG,kBAAkB,KAAK,UAAU,MAAM,CAAC,CAAC,IAAI,kBAAkB,KAAK,UAAU,OAAO,CAAC,CAAC;AAC5F,UAAM,MAAM,MAAM,OAAO,OAAO;AAAA,MAC9B,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,MACjC,KAAK;AAAA,MACL,IAAI,YAAY,EAAE,OAAO,YAAY;AAAA,IACvC;AACA,WAAO,GAAG,YAAY,IAAI,iBAAiB,GAAG,CAAC;AAAA,EACjD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAtBe;AAwBR,SAAS,oBAAoBC,SAAyB;AAC3D,MAAI,QAAS;AACb,YAAUA;AAEV,EAAAA,QAAO,UAAU;AAAA,IACf,SAAS,KAAK,WAAW;AAAA,IACzB,aAAa,mBAAmB,YAAY;AAAA,EAC9C,CAAC;AAED,EAAAA,QAAO,aAAa,QAAQ,IAAI,OAAO,YAAY;AACjD,UAAM,QAAQ,KAAK,SAAS;AAC5B,QAAI,MAAO,SAAQ,QAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAEjE,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI,OAAQ,SAAQ,QAAQ,IAAI,mBAAmB,MAAM;AAIzD,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI,UAAU,CAAC,QAAQ,QAAQ,IAAI,WAAW,EAAG,SAAQ,QAAQ,IAAI,aAAa,MAAM;AAExF,QAAI;AACF,YAAM,KAAK,KAAK,eAAe,EAAE,gBAAgB,EAAE;AACnD,UAAI,GAAI,SAAQ,QAAQ,IAAI,cAAc,EAAE;AAAA,IAC9C,QAAQ;AAAA,IAAC;AACT,YAAQ,QAAQ,IAAI,kBAAiB,oBAAI,KAAK,GAAE,YAAY,CAAC;AAI7D,QAAI,YAAY,KAAK,OAAO,WAAW,aAAa;AAClD,YAAM,QAAQ,MAAM,eAAe,QAAQ,QAAQ,QAAQ,GAAG;AAC9D,UAAI,MAAO,SAAQ,QAAQ,IAAI,QAAQ,KAAK;AAAA,IAC9C;AAEA,WAAO;AAAA,EACT,CAAC;AAKD,EAAAA,QAAO,aAAa,MAAM,IAAI,CAAC,KAAK,KAAK,QAAQ;AAC/C,QAAI,eAAe,SAAU,QAAO;AACpC,UAAM,MAAO,KAA6B,OAAO;AACjD,UAAM,SAAU,KAA8B,UAAU;AACxD,UAAM,aAAc,KAA8B,cAAc;AAChE,WAAO,IAAI,SAAS,QAAQ,YAAY,KAAK,GAAG;AAAA,EAClD,CAAC;AAED,EAAAA,QAAO,aAAa,SAAS,IAAI,OAAO,UAAU,YAAY;AAC5D,QAAI,SAAS,WAAW,IAAK,QAAO;AAGpC,QAAI,QAAQ,QAAQ,IAAI,YAAY,GAAG;AACrC,UAAI,iBAAiB;AACnB,YAAI;AAAE,0BAAgB,QAAQ;AAAA,QAAG,QAAQ;AAAA,QAAC;AAAA,MAC5C;AACA,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,MAAM,WAAW;AAClC,QAAI,CAAC,UAAU;AACb,UAAI,iBAAiB;AACnB,YAAI;AAAE,0BAAgB,QAAQ;AAAA,QAAG,QAAQ;AAAA,QAAC;AAAA,MAC5C;AACA,aAAO;AAAA,IACT;AAKA,UAAM,QAAQ,QAAQ,MAAM;AAC5B,UAAM,QAAQ,IAAI,iBAAiB,UAAU,QAAQ,EAAE;AACvD,UAAM,QAAQ,IAAI,cAAc,GAAG;AAGnC,QAAI,YAAY,KAAK,OAAO,WAAW,aAAa;AAClD,YAAM,QAAQ,MAAM,eAAe,MAAM,QAAQ,MAAM,GAAG;AAC1D,UAAI,MAAO,OAAM,QAAQ,IAAI,QAAQ,KAAK;AAAA,IAC5C;AACA,QAAI;AACF,YAAM,UAAU,MAAM,MAAM,KAAK;AACjC,UAAI,QAAQ,WAAW,OAAO,iBAAiB;AAC7C,YAAI;AAAE,0BAAgB,OAAO;AAAA,QAAG,QAAQ;AAAA,QAAC;AAAA,MAC3C;AACA,aAAO;AAAA,IACT,QAAQ;AAEN,UAAI,iBAAiB;AACnB,YAAI;AAAE,0BAAgB,QAAQ;AAAA,QAAG,QAAQ;AAAA,QAAC;AAAA,MAC5C;AACA,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACH;AA7FgB;;;ACxchB,qBAAoD;AAoCpD,IAAM,iBAA+B;AAAA,EACnC,SAAS,OAAO,YAAY,eAAe,yBAA0B;AAAA,EACrE,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX,WAAW;AAAA,EACX,YAAY;AACd;AAEA,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,YAAN,MAAgB;AAAA,EA1DvB,OA0DuB;AAAA;AAAA;AAAA,EACb;AAAA,EACA;AAAA,EAER,YAAY,SAAgC,CAAC,GAAG;AAC9C,SAAK,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAC7C,SAAK,UAAU,OAAO,eAAW,8BAAc;AAAA,MAC7C,OAAO,KAAK,OAAO,UAAU,IAAI;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEA,SAAe;AAAE,SAAK,OAAO,UAAU;AAAA,EAAM;AAAA,EAC7C,UAAgB;AAAE,SAAK,OAAO,UAAU;AAAA,EAAO;AAAA,EAC/C,UAAU,QAAqC;AAC7C,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAAA,EAC5C;AAAA,EAEQ,cAAc,SAA0D;AAC9E,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,WAAmC,CAAC;AAC1C,WAAO,KAAK,OAAO,EAAE,QAAQ,CAAC,QAAQ;AACpC,eAAS,GAAG,IAAI,kBAAkB,SAAS,IAAI,YAAY,CAAC,IAAI,QAAS,QAAQ,GAAG,KAAK;AAAA,IAC3F,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,SAA2B;AACpC,QAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,YAAa;AACtD,UAAM,EAAE,QAAQ,KAAK,SAAS,KAAK,IAAI;AACvC,SAAK,QAAQ,MAAM,GAAG,MAAM,IAAI,GAAG,EAAE;AACrC,QAAI,KAAK,OAAO,cAAc,QAAS,MAAK,QAAQ,MAAM,YAAY,KAAK,cAAc,OAAO,CAAC;AACjG,QAAI,KAAK,OAAO,aAAa,KAAM,MAAK,QAAQ,MAAM,SAAS,IAAI;AAAA,EACrE;AAAA,EAEA,YAAY,SAAqB,UAA6B;AAC5D,QAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,aAAc;AACvD,UAAM,EAAE,QAAQ,IAAI,IAAI;AACxB,UAAM,EAAE,QAAQ,YAAY,MAAM,SAAS,IAAI;AAC/C,SAAK,QAAQ,QAAQ,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,UAAU,KAAK,QAAQ,KAAK;AAC/E,QAAI,KAAK,OAAO,aAAa,KAAM,MAAK,QAAQ,MAAM,aAAa,IAAI;AAAA,EACzE;AAAA,EAEA,SAAS,SAAqB,OAAuB;AACnD,QAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,UAAW;AACpD,UAAM,EAAE,QAAQ,IAAI,IAAI;AACxB,UAAM,EAAE,SAAS,YAAY,aAAa,SAAS,IAAI;AACvD,SAAK,QAAQ,MAAM,GAAG,MAAM,IAAI,GAAG,IAAI,cAAc,SAAS,WAAW,QAAQ,KAAK;AACtF,SAAK,QAAQ,MAAM,YAAY,OAAO;AACtC,QAAI,eAAe,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AACtD,WAAK,QAAQ,MAAM,eAAe;AAClC,aAAO,QAAQ,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,MAAM,MAAM;AACvD,eAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,MAAM,YAAO,KAAK,KAAK,GAAG,EAAE,CAAC;AAAA,MACpE,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,KAAK,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,KAAK,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC5G,KAAK,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,KAAK,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC5G,MAAM,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,MAAM,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC9G,MAAM,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,MAAM,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC9G,QAAQ,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,QAAQ,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAClH,QAAQ,KAA8B;AAAE,WAAO,KAAK,QAAQ,QAAQ,GAAG;AAAA,EAAG;AAC5E;AAEO,IAAM,gBAAgB,IAAI,UAAU;;;ACpG3C,IAAM,wBAAwB,wBAAC,MAAgB,KAAa,UAAyB;AACnF,MAAI,OAAO,UAAU,YAAY,iBAAiB,MAAM;AACtD,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB,WAAW,iBAAiB,MAAM;AAChC,SAAK,OAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACtC,OAAO;AACL,SAAK,OAAO,KAAK,KAAK,UAAU,KAAK,CAAC;AAAA,EACxC;AACF,GAR8B;AAkBvB,IAAM,yBAAyB;AAAA,EACpC,gBAAgB,wBAAC,SAA4B;AAC3C,UAAM,OAAO,IAAI,SAAS;AAE1B,WAAO,QAAQ,IAA+B,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACxE,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC;AAAA,MACF;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,cAAM,QAAQ,CAAC,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC;AAAA,MAC1D,OAAO;AACL,8BAAsB,MAAM,KAAK,KAAK;AAAA,MACxC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT,GAfgB;AAgBlB;AAEO,IAAM,qBAAqB;AAAA,EAChC,gBAAgB,wBAAC,SACf,KAAK,UAAU,MAAM,CAAC,MAAM,UAAW,OAAO,UAAU,WAAW,MAAM,SAAS,IAAI,KAAM,GAD9E;AAElB;;;AClBA,IAAM,mBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AACX;AACA,IAAM,gBAAgB,OAAO,QAAQ,gBAAgB;;;AC+B9C,SAAS,gBAAiC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA2D;AACzD,MAAI;AAEJ,QAAM,QAAQ,eAAe,CAAC,OAAe,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAE7F,QAAM,eAAe,0CAAmB;AACtC,QAAI,aAAqB,wBAAwB;AACjD,QAAI,UAAU;AACd,UAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,EAAE;AAEvD,WAAO,MAAM;AACX,UAAI,OAAO,QAAS;AAEpB;AAEA,YAAM,UACJ,QAAQ,mBAAmB,UACvB,QAAQ,UACR,IAAI,QAAQ,QAAQ,OAA6C;AAEvE,UAAI,gBAAgB,QAAW;AAC7B,gBAAQ,IAAI,iBAAiB,WAAW;AAAA,MAC1C;AAEA,UAAI;AACF,cAAM,cAA2B;AAAA,UAC/B,UAAU;AAAA,UACV,GAAG;AAAA,UACH,MAAM,QAAQ;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,YAAI,UAAU,IAAI,QAAQ,KAAK,WAAW;AAC1C,YAAI,WAAW;AACb,oBAAU,MAAM,UAAU,KAAK,WAAW;AAAA,QAC5C;AAGA,cAAM,SAAS,QAAQ,SAAS,WAAW;AAC3C,cAAM,WAAW,MAAM,OAAO,OAAO;AAErC,YAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,eAAe,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAEzF,YAAI,CAAC,SAAS,KAAM,OAAM,IAAI,MAAM,yBAAyB;AAE7D,cAAM,SAAS,SAAS,KAAK,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AAE5E,YAAI,SAAS;AAEb,cAAM,eAAe,6BAAM;AACzB,cAAI;AACF,mBAAO,OAAO;AAAA,UAChB,QAAQ;AAAA,UAER;AAAA,QACF,GANqB;AAQrB,eAAO,iBAAiB,SAAS,YAAY;AAE7C,YAAI;AACF,iBAAO,MAAM;AACX,kBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,gBAAI,KAAM;AACV,sBAAU;AACV,qBAAS,OAAO,QAAQ,UAAU,IAAI;AAEtC,kBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,qBAAS,OAAO,IAAI,KAAK;AAEzB,uBAAW,SAAS,QAAQ;AAC1B,oBAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,oBAAM,YAA2B,CAAC;AAClC,kBAAI;AAEJ,yBAAW,QAAQ,OAAO;AACxB,oBAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,4BAAU,KAAK,KAAK,QAAQ,aAAa,EAAE,CAAC;AAAA,gBAC9C,WAAW,KAAK,WAAW,QAAQ,GAAG;AACpC,8BAAY,KAAK,QAAQ,cAAc,EAAE;AAAA,gBAC3C,WAAW,KAAK,WAAW,KAAK,GAAG;AACjC,gCAAc,KAAK,QAAQ,WAAW,EAAE;AAAA,gBAC1C,WAAW,KAAK,WAAW,QAAQ,GAAG;AACpC,wBAAM,SAAS,OAAO,SAAS,KAAK,QAAQ,cAAc,EAAE,GAAG,EAAE;AACjE,sBAAI,CAAC,OAAO,MAAM,MAAM,GAAG;AACzB,iCAAa;AAAA,kBACf;AAAA,gBACF;AAAA,cACF;AAEA,kBAAI;AACJ,kBAAI,aAAa;AAEjB,kBAAI,UAAU,QAAQ;AACpB,sBAAM,UAAU,UAAU,KAAK,IAAI;AACnC,oBAAI;AACF,yBAAO,KAAK,MAAM,OAAO;AACzB,+BAAa;AAAA,gBACf,QAAQ;AACN,yBAAO;AAAA,gBACT;AAAA,cACF;AAEA,kBAAI,YAAY;AACd,oBAAI,mBAAmB;AACrB,wBAAM,kBAAkB,IAAI;AAAA,gBAC9B;AAEA,oBAAI,qBAAqB;AACvB,yBAAO,MAAM,oBAAoB,IAAI;AAAA,gBACvC;AAAA,cACF;AAEA,2BAAa;AAAA,gBACX;AAAA,gBACA,OAAO;AAAA,gBACP,IAAI;AAAA,gBACJ,OAAO;AAAA,cACT,CAAC;AAED,kBAAI,UAAU,QAAQ;AACpB,sBAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF;AAAA,QACF,UAAE;AACA,iBAAO,oBAAoB,SAAS,YAAY;AAChD,iBAAO,YAAY;AAAA,QACrB;AAEA;AAAA,MACF,SAAS,OAAO;AAEd,qBAAa,KAAK;AAElB,YAAI,wBAAwB,UAAa,WAAW,qBAAqB;AACvE;AAAA,QACF;AAGA,cAAM,UAAU,KAAK,IAAI,aAAa,MAAM,UAAU,IAAI,oBAAoB,GAAK;AACnF,cAAM,MAAM,OAAO;AAAA,MACrB;AAAA,IACF;AAAA,EACF,GA1IqB;AA4IrB,QAAM,SAAS,aAAa;AAE5B,SAAO,EAAE,OAAO;AAClB;AAhKgB;;;ACtDT,IAAM,wBAAwB,wBAAC,UAAsD;AAC1F,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF,GAXqC;AAa9B,IAAM,0BAA0B,wBAAC,UAAkD;AACxF,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF,GAXuC;AAahC,IAAM,yBAAyB,wBAAC,UAAuD;AAC5F,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF,GAXsC;AAa/B,IAAM,sBAAsB,wBAAC;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAEc;AACZ,MAAI,CAAC,SAAS;AACZ,UAAMC,iBACJ,gBAAgB,QAAQ,MAAM,IAAI,CAAC,MAAM,mBAAmB,CAAW,CAAC,GACxE,KAAK,wBAAwB,KAAK,CAAC;AACrC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,IAAIA,aAAY;AAAA,MACzB,KAAK;AACH,eAAO,IAAI,IAAI,IAAIA,aAAY;AAAA,MACjC,KAAK;AACH,eAAOA;AAAA,MACT;AACE,eAAO,GAAG,IAAI,IAAIA,aAAY;AAAA,IAClC;AAAA,EACF;AAEA,QAAM,YAAY,sBAAsB,KAAK;AAC7C,QAAM,eAAe,MAClB,IAAI,CAAC,MAAM;AACV,QAAI,UAAU,WAAW,UAAU,UAAU;AAC3C,aAAO,gBAAgB,IAAI,mBAAmB,CAAW;AAAA,IAC3D;AAEA,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC,EACA,KAAK,SAAS;AACjB,SAAO,UAAU,WAAW,UAAU,WAAW,YAAY,eAAe;AAC9E,GAxCmC;AA0C5B,IAAM,0BAA0B,wBAAC;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AACF,MAAuC;AACrC,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,GAAG,IAAI,IAAI,gBAAgB,QAAQ,mBAAmB,KAAK,CAAC;AACrE,GAhBuC;AAkBhC,IAAM,uBAAuB,wBAAC;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAGc;AACZ,MAAI,iBAAiB,MAAM;AACzB,WAAO,YAAY,MAAM,YAAY,IAAI,GAAG,IAAI,IAAI,MAAM,YAAY,CAAC;AAAA,EACzE;AAEA,MAAI,UAAU,gBAAgB,CAAC,SAAS;AACtC,QAAI,SAAmB,CAAC;AACxB,WAAO,QAAQ,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM;AAC1C,eAAS,CAAC,GAAG,QAAQ,KAAK,gBAAiB,IAAe,mBAAmB,CAAW,CAAC;AAAA,IAC3F,CAAC;AACD,UAAMA,gBAAe,OAAO,KAAK,GAAG;AACpC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,GAAG,IAAI,IAAIA,aAAY;AAAA,MAChC,KAAK;AACH,eAAO,IAAIA,aAAY;AAAA,MACzB,KAAK;AACH,eAAO,IAAI,IAAI,IAAIA,aAAY;AAAA,MACjC;AACE,eAAOA;AAAA,IACX;AAAA,EACF;AAEA,QAAM,YAAY,uBAAuB,KAAK;AAC9C,QAAM,eAAe,OAAO,QAAQ,KAAK,EACtC;AAAA,IAAI,CAAC,CAAC,KAAK,CAAC,MACX,wBAAwB;AAAA,MACtB;AAAA,MACA,MAAM,UAAU,eAAe,GAAG,IAAI,IAAI,GAAG,MAAM;AAAA,MACnD,OAAO;AAAA,IACT,CAAC;AAAA,EACH,EACC,KAAK,SAAS;AACjB,SAAO,UAAU,WAAW,UAAU,WAAW,YAAY,eAAe;AAC9E,GA5CoC;;;AC/G7B,IAAM,gBAAwB;AAE9B,IAAM,wBAAwB,wBAAC,EAAE,MAAM,KAAK,KAAK,MAA8B;AACpF,MAAI,MAAM;AACV,QAAM,UAAU,KAAK,MAAM,aAAa;AACxC,MAAI,SAAS;AACX,eAAW,SAAS,SAAS;AAC3B,UAAI,UAAU;AACd,UAAI,OAAO,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC;AAC9C,UAAI,QAA6B;AAEjC,UAAI,KAAK,SAAS,GAAG,GAAG;AACtB,kBAAU;AACV,eAAO,KAAK,UAAU,GAAG,KAAK,SAAS,CAAC;AAAA,MAC1C;AAEA,UAAI,KAAK,WAAW,GAAG,GAAG;AACxB,eAAO,KAAK,UAAU,CAAC;AACvB,gBAAQ;AAAA,MACV,WAAW,KAAK,WAAW,GAAG,GAAG;AAC/B,eAAO,KAAK,UAAU,CAAC;AACvB,gBAAQ;AAAA,MACV;AAEA,YAAM,QAAQ,KAAK,IAAI;AAEvB,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC;AAAA,MACF;AAEA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,cAAM,IAAI,QAAQ,OAAO,oBAAoB,EAAE,SAAS,MAAM,OAAO,MAAM,CAAC,CAAC;AAC7E;AAAA,MACF;AAEA,UAAI,OAAO,UAAU,UAAU;AAC7B,cAAM,IAAI;AAAA,UACR;AAAA,UACA,qBAAqB;AAAA,YACnB;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAW;AAAA,UACb,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,UAAI,UAAU,UAAU;AACtB,cAAM,IAAI;AAAA,UACR;AAAA,UACA,IAAI,wBAAwB;AAAA,YAC1B;AAAA,YACA;AAAA,UACF,CAAC,CAAC;AAAA,QACJ;AACA;AAAA,MACF;AAEA,YAAM,eAAe;AAAA,QACnB,UAAU,UAAU,IAAI,KAAe,KAAM;AAAA,MAC/C;AACA,YAAM,IAAI,QAAQ,OAAO,YAAY;AAAA,IACvC;AAAA,EACF;AACA,SAAO;AACT,GAjEqC;AAmE9B,IAAM,SAAS,wBAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,KAAK;AACP,MAMc;AACZ,QAAM,UAAU,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI;AACtD,MAAI,OAAO,WAAW,MAAM;AAC5B,MAAI,MAAM;AACR,UAAM,sBAAsB,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3C;AACA,MAAI,SAAS,QAAQ,gBAAgB,KAAK,IAAI;AAC9C,MAAI,OAAO,WAAW,GAAG,GAAG;AAC1B,aAAS,OAAO,UAAU,CAAC;AAAA,EAC7B;AACA,MAAI,QAAQ;AACV,WAAO,IAAI,MAAM;AAAA,EACnB;AACA,SAAO;AACT,GA1BsB;AA4Bf,SAAS,oBAAoB,SAIxB;AACV,QAAM,UAAU,QAAQ,SAAS;AACjC,QAAM,mBAAmB,WAAW,QAAQ;AAE5C,MAAI,kBAAkB;AACpB,QAAI,oBAAoB,SAAS;AAC/B,YAAM,oBACJ,QAAQ,mBAAmB,UAAa,QAAQ,mBAAmB;AAErE,aAAO,oBAAoB,QAAQ,iBAAiB;AAAA,IACtD;AAGA,WAAO,QAAQ,SAAS,KAAK,QAAQ,OAAO;AAAA,EAC9C;AAGA,MAAI,SAAS;AACX,WAAO,QAAQ;AAAA,EACjB;AAGA,SAAO;AACT;AA3BgB;;;ACpFT,IAAM,eAAe,8BAC1BC,OACA,aACgC;AAChC,QAAM,QAAQ,OAAO,aAAa,aAAa,MAAM,SAASA,KAAI,IAAI;AAEtE,MAAI,CAAC,OAAO;AACV;AAAA,EACF;AAEA,MAAIA,MAAK,WAAW,UAAU;AAC5B,WAAO,UAAU,KAAK;AAAA,EACxB;AAEA,MAAIA,MAAK,WAAW,SAAS;AAC3B,WAAO,SAAS,KAAK,KAAK,CAAC;AAAA,EAC7B;AAEA,SAAO;AACT,GAnB4B;;;ACfrB,IAAM,wBAAwB,wBAAc;AAAA,EACjD,aAAa,CAAC;AAAA,EACd,GAAG;AACL,IAA4B,CAAC,MAAoC;AAC/D,QAAM,kBAAkB,wBAAC,gBAA2B;AAClD,UAAM,SAAmB,CAAC;AAC1B,QAAI,eAAe,OAAO,gBAAgB,UAAU;AAClD,iBAAW,QAAQ,aAAa;AAC9B,cAAM,QAAQ,YAAY,IAAI;AAE9B,YAAI,UAAU,UAAa,UAAU,MAAM;AACzC;AAAA,QACF;AAEA,cAAM,UAAU,WAAW,IAAI,KAAK;AAEpC,YAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,gBAAM,kBAAkB,oBAAoB;AAAA,YAC1C,eAAe,QAAQ;AAAA,YACvB,SAAS;AAAA,YACT;AAAA,YACA,OAAO;AAAA,YACP;AAAA,YACA,GAAG,QAAQ;AAAA,UACb,CAAC;AACD,cAAI,gBAAiB,QAAO,KAAK,eAAe;AAAA,QAClD,WAAW,OAAO,UAAU,UAAU;AACpC,gBAAM,mBAAmB,qBAAqB;AAAA,YAC5C,eAAe,QAAQ;AAAA,YACvB,SAAS;AAAA,YACT;AAAA,YACA,OAAO;AAAA,YACP;AAAA,YACA,GAAG,QAAQ;AAAA,UACb,CAAC;AACD,cAAI,iBAAkB,QAAO,KAAK,gBAAgB;AAAA,QACpD,OAAO;AACL,gBAAM,sBAAsB,wBAAwB;AAAA,YAClD,eAAe,QAAQ;AAAA,YACvB;AAAA,YACA;AAAA,UACF,CAAC;AACD,cAAI,oBAAqB,QAAO,KAAK,mBAAmB;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO,KAAK,GAAG;AAAA,EACxB,GA3CwB;AA4CxB,SAAO;AACT,GAjDqC;AAsD9B,IAAM,aAAa,wBAAC,gBAAmE;AAC5F,MAAI,CAAC,aAAa;AAGhB,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,YAAY,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAErD,MAAI,CAAC,cAAc;AACjB;AAAA,EACF;AAEA,MAAI,aAAa,WAAW,kBAAkB,KAAK,aAAa,SAAS,OAAO,GAAG;AACjF,WAAO;AAAA,EACT;AAEA,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO;AAAA,EACT;AAEA,MACE,CAAC,gBAAgB,UAAU,UAAU,QAAQ,EAAE,KAAK,CAAC,SAAS,aAAa,WAAW,IAAI,CAAC,GAC3F;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO;AAAA,EACT;AAEA;AACF,GAhC0B;AAkC1B,IAAM,oBAAoB,wBACxB,SAGA,SACY;AACZ,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MACE,QAAQ,QAAQ,IAAI,IAAI,KACxB,QAAQ,QAAQ,IAAI,KACpB,QAAQ,QAAQ,IAAI,QAAQ,GAAG,SAAS,GAAG,IAAI,GAAG,GAClD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT,GAjB0B;AAmB1B,eAAsB,cACpB,SAGe;AACf,aAAWC,SAAQ,QAAQ,YAAY,CAAC,GAAG;AACzC,QAAI,kBAAkB,SAASA,MAAK,IAAI,GAAG;AACzC;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,aAAaA,OAAM,QAAQ,IAAI;AAEnD,QAAI,CAAC,OAAO;AACV;AAAA,IACF;AAEA,UAAM,OAAOA,MAAK,QAAQ;AAE1B,YAAQA,MAAK,IAAI;AAAA,MACf,KAAK;AACH,YAAI,CAAC,QAAQ,OAAO;AAClB,kBAAQ,QAAQ,CAAC;AAAA,QACnB;AACA,gBAAQ,MAAM,IAAI,IAAI;AACtB;AAAA,MACF,KAAK;AACH,gBAAQ,QAAQ,OAAO,UAAU,GAAG,IAAI,IAAI,KAAK,EAAE;AACnD;AAAA,MACF,KAAK;AAAA,MACL;AACE,gBAAQ,QAAQ,IAAI,MAAM,KAAK;AAC/B;AAAA,IACJ;AAAA,EACF;AACF;AAlCsB;AAoCf,IAAM,WAA+B,wBAAC,YAC3C,OAAO;AAAA,EACL,SAAS,QAAQ;AAAA,EACjB,MAAM,QAAQ;AAAA,EACd,OAAO,QAAQ;AAAA,EACf,iBACE,OAAO,QAAQ,oBAAoB,aAC/B,QAAQ,kBACR,sBAAsB,QAAQ,eAAe;AAAA,EACnD,KAAK,QAAQ;AACf,CAAC,GAVyC;AAYrC,IAAM,eAAe,wBAAC,GAAW,MAAsB;AAC5D,QAAM,SAAS,EAAE,GAAG,GAAG,GAAG,EAAE;AAC5B,MAAI,OAAO,SAAS,SAAS,GAAG,GAAG;AACjC,WAAO,UAAU,OAAO,QAAQ,UAAU,GAAG,OAAO,QAAQ,SAAS,CAAC;AAAA,EACxE;AACA,SAAO,UAAU,aAAa,EAAE,SAAS,EAAE,OAAO;AAClD,SAAO;AACT,GAP4B;AAS5B,IAAM,iBAAiB,wBAAC,YAA8C;AACpE,QAAM,UAAmC,CAAC;AAC1C,UAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,YAAQ,KAAK,CAAC,KAAK,KAAK,CAAC;AAAA,EAC3B,CAAC;AACD,SAAO;AACT,GANuB;AAQhB,IAAM,eAAe,2BACvB,YACS;AACZ,QAAM,gBAAgB,IAAI,QAAQ;AAClC,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AAEA,UAAM,WAAW,kBAAkB,UAAU,eAAe,MAAM,IAAI,OAAO,QAAQ,MAAM;AAE3F,eAAW,CAAC,KAAK,KAAK,KAAK,UAAU;AACnC,UAAI,UAAU,MAAM;AAClB,sBAAc,OAAO,GAAG;AAAA,MAC1B,WAAW,MAAM,QAAQ,KAAK,GAAG;AAC/B,mBAAW,KAAK,OAAO;AACrB,wBAAc,OAAO,KAAK,CAAW;AAAA,QACvC;AAAA,MACF,WAAW,UAAU,QAAW;AAG9B,sBAAc;AAAA,UACZ;AAAA,UACA,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAK;AAAA,QACvD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT,GA7B4B;AAgD5B,IAAM,eAAN,MAAgC;AAAA,EAzOhC,OAyOgC;AAAA;AAAA;AAAA,EAC9B,MAAiC,CAAC;AAAA,EAElC,QAAc;AACZ,SAAK,MAAM,CAAC;AAAA,EACd;AAAA,EAEA,MAAM,IAAgC;AACpC,UAAM,QAAQ,KAAK,oBAAoB,EAAE;AACzC,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAK,IAAI,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,OAAO,IAAmC;AACxC,UAAM,QAAQ,KAAK,oBAAoB,EAAE;AACzC,WAAO,QAAQ,KAAK,IAAI,KAAK,CAAC;AAAA,EAChC;AAAA,EAEA,oBAAoB,IAAkC;AACpD,QAAI,OAAO,OAAO,UAAU;AAC1B,aAAO,KAAK,IAAI,EAAE,IAAI,KAAK;AAAA,IAC7B;AACA,WAAO,KAAK,IAAI,QAAQ,EAAE;AAAA,EAC5B;AAAA,EAEA,OAAO,IAA0B,IAA+C;AAC9E,UAAM,QAAQ,KAAK,oBAAoB,EAAE;AACzC,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAK,IAAI,KAAK,IAAI;AAClB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,IAAyB;AAC3B,SAAK,IAAI,KAAK,EAAE;AAChB,WAAO,KAAK,IAAI,SAAS;AAAA,EAC3B;AACF;AAQO,IAAM,qBAAqB,8BAK5B;AAAA,EACJ,OAAO,IAAI,aAAqD;AAAA,EAChE,SAAS,IAAI,aAA2C;AAAA,EACxD,UAAU,IAAI,aAAgD;AAChE,IATkC;AAWlC,IAAM,yBAAyB,sBAAsB;AAAA,EACnD,eAAe;AAAA,EACf,OAAO;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AAAA,EACA,QAAQ;AAAA,IACN,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AACF,CAAC;AAED,IAAM,iBAAiB;AAAA,EACrB,gBAAgB;AAClB;AAEO,IAAM,eAAe,wBAC1B,WAAqD,CAAC,OACR;AAAA,EAC9C,GAAG;AAAA,EACH,SAAS;AAAA,EACT,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,GAAG;AACL,IAR4B;;;AC9RrB,IAAM,eAAe,wBAAC,SAAiB,CAAC,MAAc;AAC3D,MAAI,UAAU,aAAa,aAAa,GAAG,MAAM;AAEjD,QAAM,YAAY,8BAAe,EAAE,GAAG,QAAQ,IAA5B;AAElB,QAAM,YAAY,wBAACC,YAA2B;AAC5C,cAAU,aAAa,SAASA,OAAM;AACtC,WAAO,UAAU;AAAA,EACnB,GAHkB;AAKlB,QAAM,eAAe,mBAAuE;AAE5F,QAAM,gBAAgB,8BAMpB,YACG;AACH,UAAM,OAAO;AAAA,MACX,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO,QAAQ,SAAS,QAAQ,SAAS,WAAW;AAAA,MACpD,SAAS,aAAa,QAAQ,SAAS,QAAQ,OAAO;AAAA,MACtD,gBAAgB;AAAA,IAClB;AAEA,QAAI,KAAK,UAAU;AACjB,YAAM,cAAc,IAAI;AAAA,IAC1B;AAEA,QAAI,KAAK,kBAAkB;AACzB,YAAM,KAAK,iBAAiB,IAAI;AAAA,IAClC;AAEA,QAAI,KAAK,SAAS,UAAa,KAAK,gBAAgB;AAClD,WAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AAAA,IACrD;AAGA,QAAI,KAAK,SAAS,UAAa,KAAK,mBAAmB,IAAI;AACzD,WAAK,QAAQ,OAAO,cAAc;AAAA,IACpC;AAEA,UAAM,eAAe;AAErB,UAAM,MAAM,SAAS,YAAY;AAEjC,WAAO,EAAE,MAAM,cAAc,IAAI;AAAA,EACnC,GAtCsB;AAwCtB,QAAM,UAA6B,8BAAO,YAAY;AACpD,UAAM,eAAe,QAAQ,gBAAgB,QAAQ;AACrD,UAAM,gBAAgB,QAAQ,iBAAiB,QAAQ;AAEvD,QAAIC;AACJ,QAAI;AAEJ,QAAI;AACF,YAAM,EAAE,MAAM,IAAI,IAAI,MAAM,cAAc,OAAO;AACjD,YAAM,cAAuB;AAAA,QAC3B,UAAU;AAAA,QACV,GAAG;AAAA,QACH,MAAM,oBAAoB,IAAI;AAAA,MAChC;AAEA,MAAAA,WAAU,IAAI,QAAQ,KAAK,WAAW;AAEtC,iBAAW,MAAM,aAAa,QAAQ,KAAK;AACzC,YAAI,IAAI;AACN,UAAAA,WAAU,MAAM,GAAGA,UAAS,IAAI;AAAA,QAClC;AAAA,MACF;AAIA,YAAM,SAAS,KAAK;AAEpB,iBAAW,MAAM,OAAOA,QAAO;AAE/B,iBAAW,MAAM,aAAa,SAAS,KAAK;AAC1C,YAAI,IAAI;AACN,qBAAW,MAAM,GAAG,UAAUA,UAAS,IAAI;AAAA,QAC7C;AAAA,MACF;AAEA,YAAM,SAAS;AAAA,QACb,SAAAA;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,IAAI;AACf,cAAM,WACH,KAAK,YAAY,SACd,WAAW,SAAS,QAAQ,IAAI,cAAc,CAAC,IAC/C,KAAK,YAAY;AAEvB,YAAI,SAAS,WAAW,OAAO,SAAS,QAAQ,IAAI,gBAAgB,MAAM,KAAK;AAC7E,cAAI;AACJ,kBAAQ,SAAS;AAAA,YACf,KAAK;AAAA,YACL,KAAK;AAAA,YACL,KAAK;AACH,0BAAY,MAAM,SAAS,OAAO,EAAE;AACpC;AAAA,YACF,KAAK;AACH,0BAAY,IAAI,SAAS;AACzB;AAAA,YACF,KAAK;AACH,0BAAY,SAAS;AACrB;AAAA,YACF,KAAK;AAAA,YACL;AACE,0BAAY,CAAC;AACb;AAAA,UACJ;AACA,iBAAO,KAAK,kBAAkB,SAC1B,YACA;AAAA,YACE,MAAM;AAAA,YACN,GAAG;AAAA,UACL;AAAA,QACN;AAEA,YAAI;AACJ,gBAAQ,SAAS;AAAA,UACf,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACH,mBAAO,MAAM,SAAS,OAAO,EAAE;AAC/B;AAAA,UACF,KAAK,QAAQ;AAGX,kBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,mBAAO,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC;AAClC;AAAA,UACF;AAAA,UACA,KAAK;AACH,mBAAO,KAAK,kBAAkB,SAC1B,SAAS,OACT;AAAA,cACE,MAAM,SAAS;AAAA,cACf,GAAG;AAAA,YACL;AAAA,QACR;AAEA,YAAI,YAAY,QAAQ;AACtB,cAAI,KAAK,mBAAmB;AAC1B,kBAAM,KAAK,kBAAkB,IAAI;AAAA,UACnC;AAEA,cAAI,KAAK,qBAAqB;AAC5B,mBAAO,MAAM,KAAK,oBAAoB,IAAI;AAAA,UAC5C;AAAA,QACF;AAEA,eAAO,KAAK,kBAAkB,SAC1B,OACA;AAAA,UACE;AAAA,UACA,GAAG;AAAA,QACL;AAAA,MACN;AAEA,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,UAAI;AAEJ,UAAI;AACF,oBAAY,KAAK,MAAM,SAAS;AAAA,MAClC,QAAQ;AAAA,MAER;AAEA,YAAM,aAAa;AAAA,IACrB,SAAS,OAAO;AACd,UAAI,aAAa;AAEjB,iBAAW,MAAM,aAAa,MAAM,KAAK;AACvC,YAAI,IAAI;AACN,uBAAa,MAAM,GAAG,YAAY,UAAUA,UAAS,OAAiC;AAAA,QACxF;AAAA,MACF;AAEA,mBAAa,cAAc,CAAC;AAE5B,UAAI,cAAc;AAChB,cAAM;AAAA,MACR;AAGA,aAAO,kBAAkB,SACrB,SACA;AAAA,QACE,OAAO;AAAA,QACP,SAAAA;AAAA,QACA;AAAA,MACF;AAAA,IACN;AAAA,EACF,GArJmC;AAuJnC,QAAM,eAAe,wBAAC,WAAkC,CAAC,YACvD,QAAQ,EAAE,GAAG,SAAS,OAAO,CAAC,GADX;AAGrB,QAAM,YAAY,wBAAC,WAAkC,OAAO,YAA4B;AACtF,UAAM,EAAE,MAAM,IAAI,IAAI,MAAM,cAAc,OAAO;AACjD,WAAO,gBAAgB;AAAA,MACrB,GAAG;AAAA,MACH,MAAM,KAAK;AAAA,MACX;AAAA,MACA,WAAW,8BAAOC,MAAK,SAAS;AAC9B,YAAID,WAAU,IAAI,QAAQC,MAAK,IAAI;AACnC,mBAAW,MAAM,aAAa,QAAQ,KAAK;AACzC,cAAI,IAAI;AACN,YAAAD,WAAU,MAAM,GAAGA,UAAS,IAAI;AAAA,UAClC;AAAA,QACF;AACA,eAAOA;AAAA,MACT,GARW;AAAA,MASX,gBAAgB,oBAAoB,IAAI;AAAA,MACxC;AAAA,IACF,CAAC;AAAA,EACH,GAlBkB;AAoBlB,QAAM,YAAgC,wBAAC,YAAY,SAAS,EAAE,GAAG,SAAS,GAAG,QAAQ,CAAC,GAAhD;AAEtC,SAAO;AAAA,IACL,UAAU;AAAA,IACV,SAAS,aAAa,SAAS;AAAA,IAC/B,QAAQ,aAAa,QAAQ;AAAA,IAC7B,KAAK,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,aAAa,MAAM;AAAA,IACzB;AAAA,IACA,SAAS,aAAa,SAAS;AAAA,IAC/B,OAAO,aAAa,OAAO;AAAA,IAC3B,MAAM,aAAa,MAAM;AAAA,IACzB,KAAK,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,KAAK;AAAA,MACH,SAAS,UAAU,SAAS;AAAA,MAC5B,QAAQ,UAAU,QAAQ;AAAA,MAC1B,KAAK,UAAU,KAAK;AAAA,MACpB,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,UAAU,SAAS;AAAA,MAC5B,OAAO,UAAU,OAAO;AAAA,MACxB,MAAM,UAAU,MAAM;AAAA,MACtB,KAAK,UAAU,KAAK;AAAA,MACpB,OAAO,UAAU,OAAO;AAAA,IAC1B;AAAA,IACA,OAAO,aAAa,OAAO;AAAA,EAC7B;AACF,GA/P4B;;;ACNrB,IAAM,SAAiB,aAAa,aAA6B,EAAE,SAAS,wBAAwB,CAAC,CAAC;AAI7G,oBAAoB,MAAM;;;ACCnB,IAAM,oBAAN,MAAwB;AAAA,EApB/B,OAoB+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3B,OAAc,0BAAgE,SAAkK;AAC5O,YAAQ,SAAS,UAAU,QAAQ,IAAuF;AAAA,MACtH,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,kCAAwE,SAAyL;AAC3Q,YAAQ,QAAQ,UAAU,QAAQ,KAAwG;AAAA,MACtI,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,8BAAoE,SAA6K;AAC3P,YAAQ,QAAQ,UAAU,QAAQ,KAAgG;AAAA,MAC9H,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,4BAAkE,SAA6I;AACzN,YAAQ,QAAQ,UAAU,QAAQ,KAAkE;AAAA,MAChG,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAtH9B,OAsH8B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1B,OAAc,gCAAsE,SAAsJ;AACtO,YAAQ,SAAS,UAAU,QAAQ,IAAqE;AAAA,MACpG,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,iCAAuE,SAAsL;AACvQ,YAAQ,QAAQ,UAAU,QAAQ,KAAsG;AAAA,MACpI,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,sCAA4E,SAAsM;AAC5R,YAAQ,SAAS,UAAU,QAAQ,KAAgH;AAAA,MAC/I,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,qCAA2E,SAAkM;AACvR,YAAQ,QAAQ,UAAU,QAAQ,KAA8G;AAAA,MAC5I,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,kCAAwE,SAA0J;AAC5O,YAAQ,SAAS,UAAU,QAAQ,IAAuE,EAAE,KAAK,kCAAkC,GAAG,QAAQ,CAAC;AAAA,EACnK;AACJ;AAEO,IAAM,cAAN,MAAkB;AAAA,EA/LzB,OA+LyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAIrB,OAAc,4BAAkE,SAAuK;AACnP,YAAQ,QAAQ,UAAU,QAAQ,KAA4F;AAAA,MAC1H,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAc,2BAAiE,SAAoK;AAC/O,YAAQ,QAAQ,UAAU,QAAQ,KAA0F;AAAA,MACxH,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAtOhC,OAsOgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5B,OAAc,2BAAiE,SAAqK;AAChP,YAAQ,SAAS,UAAU,QAAQ,IAAyF;AAAA,MACxH,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,KAAkG;AAAA,MACjI,GAAG;AAAA,MACH,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,KAAkG;AAAA,MACjI,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,uCAA6E,SAAyM;AAChS,YAAQ,SAAS,UAAU,QAAQ,MAAmH;AAAA,MAClJ,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,gCAAsE,SAAoL;AACpQ,YAAQ,SAAS,UAAU,QAAQ,IAAmG;AAAA,MAClI,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,sCAA4E,SAAsM;AAC5R,YAAQ,SAAS,UAAU,QAAQ,MAAiH;AAAA,MAChJ,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,IAAiG;AAAA,MAChI,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,kBAAN,MAAsB;AAAA,EA1X7B,OA0X6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUzB,OAAc,8BAAoE,SAAiJ;AAC/N,YAAQ,QAAQ,UAAU,QAAQ,KAAoE;AAAA,MAClG,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EAhZ3B,OAgZ2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvB,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,IAAiG;AAAA,MAChI,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,qBAAN,MAAyB;AAAA,EA/ZhC,OA+ZgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAI5B,OAAc,2BAAiE,SAA4I;AACvN,YAAQ,SAAS,UAAU,QAAQ,IAAgE;AAAA,MAC/F,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAc,mCAAyE,SAA4L;AAC/Q,YAAQ,QAAQ,UAAU,QAAQ,KAA0G;AAAA,MACxI,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,UAAN,MAAc;AAAA,EA9brB,OA8bqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAIjB,OAAc,uBAA6D,SAAoI;AAC3M,YAAQ,SAAS,UAAU,QAAQ,IAA4D;AAAA,MAC3F,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,sBAA4D,SAAiI;AACvM,YAAQ,QAAQ,UAAU,QAAQ,OAA8D;AAAA,MAC5F,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,qBAA2D,SAAkJ;AACvN,YAAQ,QAAQ,UAAU,QAAQ,KAA8E;AAAA,MAC5G,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,eAAN,MAAmB;AAAA,EAze1B,OAye0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,OAAc,mBAAyD,SAA6I;AAChN,YAAQ,SAAS,UAAU,QAAQ,KAA0E;AAAA,MACzG,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,0BAAgE,SAAiK;AAC3O,YAAQ,QAAQ,UAAU,QAAQ,KAAwF;AAAA,MACtH,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EA7gB3B,OA6gB2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvB,OAAc,oBAA0D,SAA+I;AACnN,YAAQ,QAAQ,UAAU,QAAQ,KAA4E;AAAA,MAC1G,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,0BAAgE,SAAiK;AAC3O,YAAQ,QAAQ,UAAU,QAAQ,KAAwF;AAAA,MACtH,UAAU,CAAC,EAAE,MAAM,aAAa,MAAM,SAAS,GAAG,EAAE,QAAQ,UAAU,MAAM,OAAO,CAAC;AAAA,MACpF,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;;;AC1gBO,IAAM,MAAN,MAAU;AAAA,EArCjB,OAqCiB;AAAA;AAAA;AAAA,EACN;AAAA,EAEA,oBAAoB;AAAA,EACpB,mBAAmB;AAAA,EACnB,cAAc;AAAA,EACd,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAE3B,YAAY,UAAmB,OAAmB,CAAC,GAAG;AACpD,SAAK,SAAS,IAAI,UAAU,KAAK,MAAM;AACvC,QAAI,SAAU,MAAK,WAAW,QAAQ;AACtC,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,oBAAoB,OAAW,MAAK,mBAAmB,KAAK,eAAe;AAAA,EACtF;AAAA;AAAA,EAGA,aAAqB;AAAE,WAAO,KAAK,WAAW;AAAA,EAAG;AAAA,EACjD,WAAW,KAAmB;AAAE,SAAK,WAAW,GAAG;AAAA,EAAG;AAAA;AAAA,EAGtD,WAA0B;AAAE,WAAO,KAAK,SAAS;AAAA,EAAG;AAAA,EACpD,SAAS,OAA4B;AAAE,SAAK,SAAS,KAAK;AAAA,EAAG;AAAA,EAC7D,kBAAiC;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA,EAClE,gBAAgB,OAA4B;AAAE,SAAK,gBAAgB,KAAK;AAAA,EAAG;AAAA,EAC3E,aAAmB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA,EACzC,kBAA2B;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA;AAAA,EAG5D,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,QAA6B;AAAE,SAAK,UAAU,MAAM;AAAA,EAAG;AAAA,EACjE,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,KAA0B;AAAE,SAAK,UAAU,GAAG;AAAA,EAAG;AAAA;AAAA;AAAA,EAI3D,eAAe,IAAiD;AAC9D,SAAK,eAAe,EAAE;AAAA,EACxB;AAAA;AAAA,EAEA,kBACE,IACM;AACN,SAAK,kBAAkB,EAAE;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqC;AACnC,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;AC/EO,IAAM,sBAAN,MAAoD;AAAA,EAZ3D,OAY2D;AAAA;AAAA;AAAA,EACzD,QAAQ,KAA4B;AAClC,QAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAI;AAAE,aAAO,OAAO,aAAa,QAAQ,GAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EACxE;AAAA,EACA,QAAQ,KAAa,OAAqB;AACxC,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AAAE,aAAO,aAAa,QAAQ,KAAK,KAAK;AAAA,IAAG,QAAQ;AAAA,IAAwB;AAAA,EACjF;AAAA,EACA,WAAW,KAAmB;AAC5B,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AAAE,aAAO,aAAa,WAAW,GAAG;AAAA,IAAG,QAAQ;AAAA,IAAe;AAAA,EACpE;AAAA,EACA,QAAc;AACZ,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AAAE,aAAO,aAAa,MAAM;AAAA,IAAG,QAAQ;AAAA,IAAe;AAAA,EAC5D;AACF;AAGO,IAAM,uBAAN,MAAqD;AAAA,EAhC5D,OAgC4D;AAAA;AAAA;AAAA,EAClD,QAAQ,oBAAI,IAAoB;AAAA,EACxC,QAAQ,KAA4B;AAAE,WAAO,KAAK,MAAM,IAAI,GAAG,KAAK;AAAA,EAAM;AAAA,EAC1E,QAAQ,KAAa,OAAqB;AAAE,SAAK,MAAM,IAAI,KAAK,KAAK;AAAA,EAAG;AAAA,EACxE,WAAW,KAAmB;AAAE,SAAK,MAAM,OAAO,GAAG;AAAA,EAAG;AAAA,EACxD,QAAc;AAAE,SAAK,MAAM,MAAM;AAAA,EAAG;AACtC;AAGO,IAAM,uBAAN,MAAqD;AAAA,EAC1D,YACU,OAMJ,CAAC,GACL;AAPQ;AAAA,EAOP;AAAA,EAlDL,OAyC4D;AAAA;AAAA;AAAA,EAW1D,QAAQ,KAA4B;AAClC,QAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,UAAM,SAAS,GAAG,mBAAmB,GAAG,CAAC;AACzC,eAAW,QAAQ,SAAS,OAAO,MAAM,IAAI,GAAG;AAC9C,UAAI,KAAK,WAAW,MAAM,GAAG;AAC3B,eAAO,mBAAmB,KAAK,MAAM,OAAO,MAAM,CAAC;AAAA,MACrD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,QAAQ,KAAa,OAAqB;AACxC,QAAI,OAAO,aAAa,YAAa;AACrC,UAAM,QAAQ;AAAA,MACZ,GAAG,mBAAmB,GAAG,CAAC,IAAI,mBAAmB,KAAK,CAAC;AAAA,MACvD,QAAQ,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC/B;AACA,QAAI,KAAK,KAAK,OAAQ,OAAM,KAAK,UAAU,KAAK,KAAK,MAAM,EAAE;AAC7D,QAAI,KAAK,KAAK,OAAQ,OAAM,KAAK,QAAQ;AACzC,QAAI,KAAK,KAAK,SAAU,OAAM,KAAK,YAAY,KAAK,KAAK,QAAQ,EAAE;AACnE,QAAI,KAAK,KAAK,iBAAiB,MAAM;AACnC,YAAM,KAAK,WAAW,KAAK,KAAK,aAAa,EAAE;AAAA,IACjD;AACA,aAAS,SAAS,MAAM,KAAK,IAAI;AAAA,EACnC;AAAA,EAEA,WAAW,KAAmB;AAC5B,QAAI,OAAO,aAAa,YAAa;AACrC,aAAS,SAAS,GAAG,mBAAmB,GAAG,CAAC,sBAAsB,KAAK,KAAK,QAAQ,GAAG;AAAA,EACzF;AACF;;;ACjEO,SAAS,wBAAwB,QAAqC;AAC3E,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACF,UAAM,QAAQ,IAAI,YAAmC,wBAAwB;AAAA,MAC3E;AAAA,MACA,SAAS;AAAA,MACT,YAAY;AAAA,IACd,CAAC;AACD,WAAO,cAAc,KAAK;AAAA,EAC5B,SAAS,OAAO;AACd,YAAQ,KAAK,8CAA8C,KAAK;AAAA,EAClE;AACF;AAZgB;AAcT,SAAS,kBACd,UACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,UAAU,wBAAC,UAAiB;AAChC,QAAI,iBAAiB,YAAa,UAAS,MAAM,MAAM;AAAA,EACzD,GAFgB;AAGhB,SAAO,iBAAiB,wBAAwB,OAAO;AACvD,SAAO,MAAM,OAAO,oBAAoB,wBAAwB,OAAO;AACzE;AATgB;AAWT,SAAS,eAAe,OAAyB;AACtD,QAAM,SAAS,MAAM,OAAO,IAAI,CAAC,OAAO,UAAU;AAChD,UAAM,OAAO,MAAM,KAAK,KAAK,GAAG,KAAK;AACrC,UAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,KAAK,MAAM,OAAO,EAAE;AACxD,QAAI,cAAc,SAAS,MAAM,SAAU,OAAM,KAAK,gBAAgB,MAAM,QAAQ,EAAE;AACtF,QAAI,cAAc,SAAS,MAAM,SAAU,OAAM,KAAK,gBAAgB,MAAM,QAAQ,EAAE;AACtF,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB,CAAC;AACD,SAAO,OAAO,KAAK,IAAI;AACzB;AATgB;;;ACTT,IAAME,OAAN,MAAU;AAAA,EAjCjB,OAiCiB;AAAA;AAAA;AAAA,EACN;AAAA,EAEA,gBAAgB;AAAA,EAEzB,YAAY,UAAmB,OAAmB,CAAC,GAAG;AACpD,SAAK,SAAS,IAAI,UAAU,KAAK,MAAM;AACvC,QAAI,SAAU,MAAK,WAAW,QAAQ;AACtC,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,oBAAoB,OAAW,MAAK,mBAAmB,KAAK,eAAe;AAAA,EACtF;AAAA;AAAA,EAGA,aAAqB;AAAE,WAAO,KAAK,WAAW;AAAA,EAAG;AAAA,EACjD,WAAW,KAAmB;AAAE,SAAK,WAAW,GAAG;AAAA,EAAG;AAAA;AAAA,EAGtD,WAA0B;AAAE,WAAO,KAAK,SAAS;AAAA,EAAG;AAAA,EACpD,SAAS,OAA4B;AAAE,SAAK,SAAS,KAAK;AAAA,EAAG;AAAA,EAC7D,kBAAiC;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA,EAClE,gBAAgB,OAA4B;AAAE,SAAK,gBAAgB,KAAK;AAAA,EAAG;AAAA,EAC3E,aAAmB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA,EACzC,kBAA2B;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA;AAAA,EAG5D,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,QAA6B;AAAE,SAAK,UAAU,MAAM;AAAA,EAAG;AAAA,EACjE,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,KAA0B;AAAE,SAAK,UAAU,GAAG;AAAA,EAAG;AAAA;AAAA;AAAA,EAI3D,eAAe,IAAiD;AAC9D,SAAK,eAAe,EAAE;AAAA,EACxB;AAAA;AAAA,EAEA,kBACE,IACM;AACN,SAAK,kBAAkB,EAAE;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqC;AACnC,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;AC/CO,IAAMC,OAAN,MAAU;AAAA,EApCjB,OAoCiB;AAAA;AAAA;AAAA,EACN;AAAA,EAEA,qBAAqB;AAAA,EACrB,UAAU;AAAA,EACV,eAAe;AAAA,EACf,gBAAgB;AAAA,EAEzB,YAAY,UAAmB,OAAmB,CAAC,GAAG;AACpD,SAAK,SAAS,IAAI,UAAU,KAAK,MAAM;AACvC,QAAI,SAAU,MAAK,WAAW,QAAQ;AACtC,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,oBAAoB,OAAW,MAAK,mBAAmB,KAAK,eAAe;AAAA,EACtF;AAAA;AAAA,EAGA,aAAqB;AAAE,WAAO,KAAK,WAAW;AAAA,EAAG;AAAA,EACjD,WAAW,KAAmB;AAAE,SAAK,WAAW,GAAG;AAAA,EAAG;AAAA;AAAA,EAGtD,WAA0B;AAAE,WAAO,KAAK,SAAS;AAAA,EAAG;AAAA,EACpD,SAAS,OAA4B;AAAE,SAAK,SAAS,KAAK;AAAA,EAAG;AAAA,EAC7D,kBAAiC;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA,EAClE,gBAAgB,OAA4B;AAAE,SAAK,gBAAgB,KAAK;AAAA,EAAG;AAAA,EAC3E,aAAmB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA,EACzC,kBAA2B;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA;AAAA,EAG5D,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,QAA6B;AAAE,SAAK,UAAU,MAAM;AAAA,EAAG;AAAA,EACjE,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,KAA0B;AAAE,SAAK,UAAU,GAAG;AAAA,EAAG;AAAA;AAAA;AAAA,EAI3D,eAAe,IAAiD;AAC9D,SAAK,eAAe,EAAE;AAAA,EACxB;AAAA;AAAA,EAEA,kBACE,IACM;AACN,SAAK,kBAAkB,EAAE;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqC;AACnC,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;ACxEO,IAAM,iBAAiB,IAAI,IAAe;AAC1C,IAAM,mBAAmB,IAAIC,KAAiB;AAC9C,IAAM,aAAa,IAAIA,KAAW;;;ACnBlC,IAAM,QAAQ,yBAAyB;AACvC,IAAM,SAAS,CAAC;AAChB,IAAMC,aAAY,OAAO,WAAW;AAMpC,IAAM,gBAAgB,QAAQ,IAAI,6BAA6B;AAY/D,IAAMC,eAAc,QAAQ,IAAI,6BAA6B;;;ACKpE,IAAM,mBAAmB,SAAS;AAElC,IAAM,gBAA8B,mBAAmB,IAAI;AAE3D,IAAI,SAAuB;AAG3B,IAAM,eAAe,oBAAI,IAAmC;AAGrD,SAAS,cAA4B;AAC1C,SAAO;AACT;AAFgB;AAKT,SAAS,YAAY,OAA2B;AACrD,WAAS;AACT,aAAW,MAAM,cAAc;AAC7B,QAAI;AACF,SAAG,KAAK;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AATgB;AAeT,SAAS,iBAAiB,IAA+C;AAC9E,eAAa,IAAI,EAAE;AACnB,MAAI;AACF,OAAG,MAAM;AAAA,EACX,QAAQ;AAAA,EAER;AACA,SAAO,MAAM,aAAa,OAAO,EAAE;AACrC;AARgB;AAkBT,SAAS,mBAAmB,MAAmD;AACpF,QAAM,UAAU,KAAK,SAAS;AAC9B,MAAI,KAAK,WAAW,SAAS;AAC3B,gBAAY,CAAC;AAAA,EACf,OAAO;AACL,gBAAY,CAAC;AAAA,EACf;AACF;AAPgB;","names":["API","dpopEnabled","isBrowser","client","joinedValues","auth","auth","config","request","url","API","API","API","isBrowser","dpopEnabled"]}
+{"version":3,"sources":["../src/index.ts","../src/_api/generated/helpers/errors.ts","../src/_api/generated/helpers/auth.ts","../src/_api/generated/helpers/logger.ts","../src/_api/generated/core/bodySerializer.gen.ts","../src/_api/generated/core/params.gen.ts","../src/_api/generated/core/serverSentEvents.gen.ts","../src/_api/generated/core/pathSerializer.gen.ts","../src/_api/generated/core/utils.gen.ts","../src/_api/generated/core/auth.gen.ts","../src/_api/generated/client/utils.gen.ts","../src/_api/generated/client/client.gen.ts","../src/_api/generated/client.gen.ts","../src/_api/generated/sdk.gen.ts","../src/_api/generated/_cfg_accounts/api.ts","../src/_api/generated/helpers/storage.ts","../src/_api/generated/helpers/validation-events.ts","../src/_api/generated/_cfg_centrifugo/api.ts","../src/_api/generated/_cfg_totp/api.ts","../src/_api/generated/index.ts","../src/auth/utils/env.ts","../src/log-control.ts"],"sourcesContent":["/**\n * @djangocfg/api — package entry point.\n *\n * Per-group API singletons + API classes + shared utilities.\n *\n * Usage:\n *   import { cfgAccountsApi, AccountsTypes } from '@djangocfg/api';\n *   await cfgAccountsApi.accounts.cfgAccountsLogin({ body });\n */\n\nexport * from './_api/generated';\n\n// Hey API SDK classes (one per OpenAPI tag) — direct callable static methods.\nexport {\n  CfgAccountsApiKey,\n  CfgAccountsOauth,\n  CfgAccounts,\n  CfgAccountsProfile,\n  CfgAccountsAuth,\n  CfgCentrifugo,\n  CfgTotpBackupCodes,\n  CfgTotp,\n  CfgTotpSetup,\n  CfgTotpVerify,\n} from './_api/generated/sdk.gen';\n\n// Type namespaces (one per group) for code that needs `AccountsTypes.User`.\nexport type * as AccountsTypes from './_api/generated/_cfg_accounts/types.gen';\nexport type * as TotpTypes from './_api/generated/_cfg_totp/types.gen';\nexport type * as CentrifugoTypes from './_api/generated/_cfg_centrifugo/types.gen';\n\n// Convenience top-level type re-exports.\nexport type { User } from './_api/generated/_cfg_accounts/types.gen';\n\n// Legacy alias for code that still imports `api` (= cfg_accounts singleton).\nexport { CfgAccountsApi as api } from './_api/generated';\n\n// Global runtime log-level control (role-aware verbosity).\nexport {\n  getLogLevel,\n  setLogLevel,\n  onLogLevelChange,\n  applyRoleLogPolicy,\n  type ConsolaLevel,\n} from './log-control';\n\n// Env flags — single source of truth (api is the lowest shared package).\nexport { isDev, isProd, isBrowser, isStaticBuild, dpopEnabled } from './auth/utils/env';\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Typed error classes with DRF field-error support.\n// DO NOT EDIT — re-run `make gen`.\n\n/**\n * HTTP API Error with DRF field-specific validation errors.\n */\nexport class APIError extends Error {\n  constructor(\n    public statusCode: number,\n    public statusText: string,\n    public response: any,\n    public url: string,\n    message?: string,\n  ) {\n    super(message || `HTTP ${statusCode}: ${statusText}`);\n    this.name = \"APIError\";\n  }\n\n  get details(): Record<string, any> | null {\n    if (typeof this.response === \"object\" && this.response !== null) {\n      return this.response;\n    }\n    return null;\n  }\n\n  get fieldErrors(): Record<string, string[]> | null {\n    const details = this.details;\n    if (!details) return null;\n    const fieldErrors: Record<string, string[]> = {};\n    for (const [key, value] of Object.entries(details)) {\n      if (Array.isArray(value)) fieldErrors[key] = value;\n    }\n    return Object.keys(fieldErrors).length > 0 ? fieldErrors : null;\n  }\n\n  get errorMessage(): string {\n    const details = this.details;\n    if (!details) return this.message;\n    if (details.detail) {\n      return Array.isArray(details.detail) ? details.detail.join(\", \") : String(details.detail);\n    }\n    if (details.error) return String(details.error);\n    if (details.message) return String(details.message);\n    const fieldErrors = this.fieldErrors;\n    if (fieldErrors) {\n      const firstField = Object.keys(fieldErrors)[0];\n      if (firstField) return `${firstField}: ${fieldErrors[firstField]?.join(\", \")}`;\n    }\n    return this.message;\n  }\n\n  get isValidationError(): boolean { return this.statusCode === 400; }\n  get isAuthError(): boolean { return this.statusCode === 401; }\n  get isPermissionError(): boolean { return this.statusCode === 403; }\n  get isNotFoundError(): boolean { return this.statusCode === 404; }\n  get isServerError(): boolean { return this.statusCode >= 500 && this.statusCode < 600; }\n}\n\n/** Network Error (connection failed, timeout, etc.) */\nexport class NetworkError extends Error {\n  constructor(\n    message: string,\n    public url: string,\n    public originalError?: Error,\n  ) {\n    super(message);\n    this.name = \"NetworkError\";\n  }\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Global auth store. Wired into the shared `client` from `client.gen.ts`\n// via `installAuthOnClient(client)` — called synchronously by the\n// post-processed bottom of client.gen.ts. No circular import here.\n// DO NOT EDIT — re-run `make gen`.\n\nimport { APIError } from './errors';\n\nconst ACCESS_KEY = 'cfg.access_token';\nconst REFRESH_KEY = 'cfg.refresh_token';\nconst API_KEY_KEY = 'cfg.api_key';\n\nconst isBrowser = typeof window !== 'undefined';\n\nexport type StorageMode = 'localStorage' | 'cookie';\n\n// ── Storage backends (browser-only; server-side reads return null) ─────────\n\ninterface KVStore {\n  get(key: string): string | null;\n  set(key: string, value: string | null): void;\n}\n\nconst localStorageBackend: KVStore = {\n  get(key) {\n    if (!isBrowser) return null;\n    try { return window.localStorage.getItem(key); } catch { return null; }\n  },\n  set(key, value) {\n    if (!isBrowser) return;\n    try {\n      if (value === null) window.localStorage.removeItem(key);\n      else window.localStorage.setItem(key, value);\n    } catch {}\n  },\n};\n\n/** 30 days, matches typical refresh-token lifetime. */\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30;\n\nconst cookieBackend: KVStore = {\n  get(key) {\n    if (!isBrowser) return null;\n    try {\n      const re = new RegExp(`(?:^|;\\\\s*)${encodeURIComponent(key)}=([^;]*)`);\n      const m = document.cookie.match(re);\n      return m ? decodeURIComponent(m[1]) : null;\n    } catch { return null; }\n  },\n  set(key, value) {\n    if (!isBrowser) return;\n    try {\n      const k = encodeURIComponent(key);\n      const secure = window.location.protocol === 'https:' ? '; Secure' : '';\n      if (value === null) {\n        document.cookie = `${k}=; Path=/; Max-Age=0; SameSite=Lax${secure}`;\n      } else {\n        const v = encodeURIComponent(value);\n        document.cookie = `${k}=${v}; Path=/; Max-Age=${COOKIE_MAX_AGE}; SameSite=Lax${secure}`;\n      }\n    } catch {}\n  },\n};\n\nlet _storage: KVStore = localStorageBackend;\nlet _storageMode: StorageMode = 'localStorage';\n\n/** Detect locale from `NEXT_LOCALE` cookie or `navigator.language`. */\nfunction detectLocale(): string | null {\n  try {\n    if (typeof document !== 'undefined') {\n      const m = document.cookie.match(/(?:^|;\\s*)NEXT_LOCALE=([^;]*)/);\n      if (m) return decodeURIComponent(m[1]);\n    }\n    if (typeof navigator !== 'undefined' && navigator.language) {\n      return navigator.language;\n    }\n  } catch {}\n  return null;\n}\n\n/** Default baseUrl.\n *\n * Browser: uses NEXT_PUBLIC_API_PROXY_URL if set (empty string = same-origin\n * Next.js proxy), otherwise falls back to NEXT_PUBLIC_API_URL directly.\n * Set NEXT_PUBLIC_API_PROXY_URL='' in apps that proxy /apix/* via Next.js\n * Route Handler; leave it unset in apps that hit Django directly.\n *\n * Server (SSR / RSC / Edge): use NEXT_PUBLIC_API_URL so server-side fetch\n * reaches Django directly (proxy is a same-origin HTTP round-trip on server).\n */\nfunction defaultBaseUrl(): string {\n  if (typeof window !== 'undefined') {\n    try {\n      if (typeof process !== 'undefined' && process.env) {\n        if (process.env.NEXT_PUBLIC_STATIC_BUILD === 'true') return '';\n        // NEXT_PUBLIC_API_PROXY_URL='' means same-origin proxy (e.g. /apix/* route handler).\n        // Next.js inlines defined vars as their value; undefined means the var was not set.\n        if (process.env.NEXT_PUBLIC_API_PROXY_URL !== undefined)\n          return process.env.NEXT_PUBLIC_API_PROXY_URL;\n        return process.env.NEXT_PUBLIC_API_URL || '';\n      }\n    } catch {}\n    return '';\n  }\n  try {\n    if (typeof process !== 'undefined' && process.env) {\n      if (process.env.NEXT_PUBLIC_STATIC_BUILD === 'true') return '';\n      return process.env.NEXT_PUBLIC_API_URL || '';\n    }\n  } catch {}\n  return '';\n}\n\n/** Default API key fallback from `NEXT_PUBLIC_API_KEY`.\n *\n * Both browser and server: if NEXT_PUBLIC_API_KEY is set it is used as a\n * global fallback (e.g. a public demo key). When not set, returns null so\n * per-request keys passed via options.headers take effect unobstructed.\n */\nfunction defaultApiKey(): string | null {\n  try {\n    if (typeof process !== 'undefined' && process.env?.NEXT_PUBLIC_API_KEY) {\n      return process.env.NEXT_PUBLIC_API_KEY;\n    }\n  } catch {}\n  return null;\n}\n\n// ── In-memory overrides (win over storage / env) ───────────────────────────\nlet _localeOverride: string | null = null;\nlet _apiKeyOverride: string | null = null;\nlet _baseUrlOverride: string | null = null;\nlet _withCredentials = true;\nlet _onUnauthorized: ((response: Response) => void) | null = null;\n\n/**\n * User-supplied refresh handler. Receives the current refresh token,\n * must return a fresh access (and optional refresh) pair or null on failure.\n * Set once at app bootstrap via `auth.setRefreshHandler(...)`.\n */\ntype RefreshResult = { access: string; refresh?: string } | null;\ntype RefreshHandler = (refreshToken: string) => Promise<RefreshResult>;\nlet _refreshHandler: RefreshHandler | null = null;\n\n/** Single-flight: every concurrent 401 awaits the same refresh. */\nlet _refreshInflight: Promise<string | null> | null = null;\n\n/** Marker header — set on retried requests so we never loop on 401. */\nconst RETRY_MARKER = 'X-Auth-Retry';\n\n// ── Reactive session snapshot ───────────────────────────────────────────────\n//\n// The store is the single source of truth for \"am I logged in\". React (or any\n// listener) subscribes via `auth.subscribe` + `auth.getSnapshot` — designed to\n// plug straight into `useSyncExternalStore`. The snapshot flips automatically\n// on: token writes, refresh success/failure, cross-tab storage events, and an\n// internal timer armed to the next JWT `exp` boundary.\n\nexport type SessionStatus = 'authenticated' | 'anonymous';\n\nexport type SessionSnapshot = {\n  /** 'authenticated' = a live access token OR a live refresh token exists. */\n  status: SessionStatus;\n  /** ms-epoch expiry of the current access token (null: no token / no exp). */\n  accessExpiresAt: number | null;\n};\n\n/** Decode a JWT `exp` claim to ms epoch. Null on any malformed input. */\nfunction jwtExpMs(token: string): number | null {\n  try {\n    const payload = token.split('.')[1];\n    if (!payload) return null;\n    const json = JSON.parse(atob(payload.replace(/-/g, '+').replace(/_/g, '/')));\n    return typeof json.exp === 'number' ? json.exp * 1000 : null;\n  } catch { return null; }\n}\n\nfunction computeSnapshot(): SessionSnapshot {\n  const access = _storage.get(ACCESS_KEY);\n  const refresh = _storage.get(REFRESH_KEY);\n  const now = Date.now();\n  const accessExp = access ? jwtExpMs(access) : null;\n  const accessAlive = access !== null && (accessExp === null || accessExp > now);\n  const refreshExp = refresh ? jwtExpMs(refresh) : null;\n  const refreshAlive = refresh !== null && (refreshExp === null || refreshExp > now);\n  return {\n    status: accessAlive || refreshAlive ? 'authenticated' : 'anonymous',\n    accessExpiresAt: accessExp,\n  };\n}\n\n/** Stable object for SSR — `useSyncExternalStore` needs referential equality. */\nconst SERVER_SNAPSHOT: SessionSnapshot = { status: 'anonymous', accessExpiresAt: null };\n\n/** Same-tab, cross-store sync channel. An app can host several copies of this\n * generated store (separate JS modules) sharing the same storage keys; the\n * `storage` event only fires in OTHER tabs, so a window event bridges them\n * synchronously within the tab (login in one store flips all of them). */\nconst SESSION_SYNC_EVENT = `cfg-auth:changed:${ACCESS_KEY}`;\n\nlet _snapshot: SessionSnapshot = computeSnapshot();\nconst _sessionListeners = new Set<() => void>();\nlet _expiryTimer: ReturnType<typeof setTimeout> | null = null;\nlet _storageListenerInstalled = false;\n\n/** Re-arm the timer that flips the snapshot exactly when a token expires. */\nfunction scheduleExpiryFlip(): void {\n  if (!isBrowser) return;\n  if (_expiryTimer !== null) { clearTimeout(_expiryTimer); _expiryTimer = null; }\n  if (_sessionListeners.size === 0) return;\n  const now = Date.now();\n  const exps: number[] = [];\n  const access = _storage.get(ACCESS_KEY);\n  const refresh = _storage.get(REFRESH_KEY);\n  const accessExp = access ? jwtExpMs(access) : null;\n  const refreshExp = refresh ? jwtExpMs(refresh) : null;\n  if (accessExp !== null && accessExp > now) exps.push(accessExp);\n  if (refreshExp !== null && refreshExp > now) exps.push(refreshExp);\n  if (!exps.length) return;\n  // +250ms grace so the token is REALLY expired when we flip; clamp to the\n  // max signed-32-bit setTimeout delay (~24.8 days).\n  const delay = Math.min(Math.min(...exps) - now + 250, 0x7fffffff);\n  _expiryTimer = setTimeout(notifySessionChanged, delay);\n}\n\n/** Recompute the snapshot; notify subscribers only when it actually changed. */\nfunction notifySessionChanged(): void {\n  const next = computeSnapshot();\n  const changed =\n    next.status !== _snapshot.status ||\n    next.accessExpiresAt !== _snapshot.accessExpiresAt;\n  if (changed) _snapshot = next;\n  scheduleExpiryFlip();\n  if (!changed) return;\n  for (const listener of Array.from(_sessionListeners)) {\n    try { listener(); } catch {}\n  }\n  // Wake sibling stores in this tab. Re-entrant but convergent: a store that\n  // recomputes to the SAME snapshot doesn't re-dispatch, so the cascade stops\n  // after every store has caught up.\n  if (isBrowser) {\n    try { window.dispatchEvent(new Event(SESSION_SYNC_EVENT)); } catch {}\n  }\n}\n\n/** Cross-tab + cross-store sync — `storage` events only fire in OTHER tabs;\n * the window event covers sibling stores in THIS tab. Either way a login or\n * logout anywhere flips every snapshot reading the same keys. */\nfunction ensureStorageSync(): void {\n  if (!isBrowser || _storageListenerInstalled) return;\n  _storageListenerInstalled = true;\n  window.addEventListener('storage', (e) => {\n    if (e.key === null || e.key === ACCESS_KEY || e.key === REFRESH_KEY) {\n      notifySessionChanged();\n    }\n  });\n  window.addEventListener(SESSION_SYNC_EVENT, () => notifySessionChanged());\n}\n\n/**\n * Terminal-401 subscribers. Unlike the single `onUnauthorized` slot these\n * compose: each registration returns its own unsubscribe, so StrictMode\n * double-mounts and multiple packages can't clobber each other.\n */\ntype SessionExpiredHandler = (response: Response) => void;\nconst _sessionExpiredHandlers = new Set<SessionExpiredHandler>();\n\n/**\n * Captured reference to the shared Hey API client. Set exactly once by\n * `installAuthOnClient(client)` (called from client.gen.ts). All `auth.set*`\n * methods that mutate transport config (baseUrl / credentials) push through\n * this reference. Until installed, those mutations are silently buffered as\n * in-memory state — the next request after install will pick them up.\n */\ntype HeyClient = {\n  setConfig(opts: Record<string, unknown>): void;\n  interceptors: {\n    request: { use(fn: (req: Request) => Request | Promise<Request>): void };\n    response: { use(fn: (res: Response, req: Request) => Response | Promise<Response>): void };\n    error: { use(fn: (err: unknown, res: Response | undefined, req: Request | undefined, opts: unknown) => unknown): void };\n  };\n};\nlet _client: HeyClient | null = null;\n\nfunction pushClientConfig(): void {\n  if (!_client) return;\n  _client.setConfig({\n    baseUrl: auth.getBaseUrl(),\n    credentials: _withCredentials ? 'include' : 'same-origin',\n  });\n}\n\n/**\n * Global auth/config store. All getters read live state every call —\n * the interceptor below uses these to attach headers per-request.\n *\n * Default storage backend is `localStorage`. Switch to cookies (e.g.\n * for Next.js SSR cookie access) via `auth.setStorageMode('cookie')`\n * early in the app bootstrap.\n *\n * @example\n *   import { auth } from '@your/api';\n *   auth.setToken(jwt);\n *   auth.clearTokens();\n *   auth.setStorageMode('cookie');\n */\nexport const auth = {\n  // ── Storage mode ──────────────────────────────────────────────────\n  getStorageMode(): StorageMode { return _storageMode; },\n  setStorageMode(mode: StorageMode): void {\n    _storageMode = mode;\n    _storage = mode === 'cookie' ? cookieBackend : localStorageBackend;\n    notifySessionChanged();\n  },\n\n  // ── Bearer token ──────────────────────────────────────────────────\n  getToken(): string | null { return _storage.get(ACCESS_KEY); },\n  setToken(token: string | null): void {\n    _storage.set(ACCESS_KEY, token);\n    notifySessionChanged();\n  },\n  getRefreshToken(): string | null { return _storage.get(REFRESH_KEY); },\n  setRefreshToken(token: string | null): void {\n    _storage.set(REFRESH_KEY, token);\n    notifySessionChanged();\n  },\n  clearTokens(): void {\n    _storage.set(ACCESS_KEY, null);\n    _storage.set(REFRESH_KEY, null);\n    notifySessionChanged();\n  },\n  /** Session-aware: token PRESENT and not past its `exp` (or a live refresh\n   * token exists that can mint one). Prefer `getSnapshot().status` in React. */\n  isAuthenticated(): boolean { return computeSnapshot().status === 'authenticated'; },\n\n  // ── Session (the ONE write path for login/logout flows) ──────────\n  /**\n   * Persist a token pair atomically. Every login flow (OTP verify, 2FA,\n   * OAuth callback) and the refresh handler should end here — do NOT\n   * scatter `setToken`/`setRefreshToken` pairs through app code.\n   * `refresh: undefined` keeps the current refresh token (access-only\n   * rotation); `refresh: null` explicitly drops it.\n   */\n  setSession(tokens: { access: string; refresh?: string | null }): void {\n    _storage.set(ACCESS_KEY, tokens.access);\n    if (tokens.refresh !== undefined) _storage.set(REFRESH_KEY, tokens.refresh);\n    notifySessionChanged();\n  },\n  clearSession(): void { auth.clearTokens(); },\n\n  // ── Reactive snapshot (for useSyncExternalStore) ──────────────────\n  /**\n   * @example React:\n   *   const session = useSyncExternalStore(\n   *     auth.subscribe, auth.getSnapshot, auth.getServerSnapshot,\n   *   );\n   *   const isAuthenticated = session.status === 'authenticated';\n   */\n  getSnapshot(): SessionSnapshot { return _snapshot; },\n  getServerSnapshot(): SessionSnapshot { return SERVER_SNAPSHOT; },\n  subscribe(listener: () => void): () => void {\n    ensureStorageSync();\n    _sessionListeners.add(listener);\n    // Sync state & arm the expiry timer now that someone is listening.\n    notifySessionChanged();\n    return () => {\n      _sessionListeners.delete(listener);\n      if (_sessionListeners.size === 0 && _expiryTimer !== null) {\n        clearTimeout(_expiryTimer);\n        _expiryTimer = null;\n      }\n    };\n  },\n\n  /**\n   * Fired on TERMINAL 401 — after the refresh+retry path is exhausted.\n   * The store has already cleared the session before calling back, so\n   * handlers only need to route to login (no clear-then-redirect\n   * ordering to get wrong). Returns an unsubscribe function; multiple\n   * handlers compose (unlike the legacy single-slot `onUnauthorized`).\n   */\n  onSessionExpired(cb: SessionExpiredHandler): () => void {\n    _sessionExpiredHandlers.add(cb);\n    return () => { _sessionExpiredHandlers.delete(cb); };\n  },\n\n  // ── API key ───────────────────────────────────────────────────────\n  getApiKey(): string | null {\n    return _apiKeyOverride ?? _storage.get(API_KEY_KEY) ?? defaultApiKey();\n  },\n  setApiKey(key: string | null): void { _apiKeyOverride = key; },\n  setApiKeyPersist(key: string | null): void {\n    _apiKeyOverride = key;\n    _storage.set(API_KEY_KEY, key);\n  },\n  clearApiKey(): void { _apiKeyOverride = null; _storage.set(API_KEY_KEY, null); },\n\n  // ── Locale ────────────────────────────────────────────────────────\n  getLocale(): string | null { return _localeOverride ?? detectLocale(); },\n  setLocale(locale: string | null): void { _localeOverride = locale; },\n\n  // ── Base URL ──────────────────────────────────────────────────────\n  getBaseUrl(): string {\n    const url = (_baseUrlOverride ?? defaultBaseUrl());\n    return url.replace(/\\/$/, '');\n  },\n  setBaseUrl(url: string | null): void {\n    _baseUrlOverride = url ? url.replace(/\\/$/, '') : null;\n    pushClientConfig();\n  },\n\n  // ── Credentials toggle ────────────────────────────────────────────\n  getWithCredentials(): boolean { return _withCredentials; },\n  setWithCredentials(value: boolean): void {\n    _withCredentials = value;\n    pushClientConfig();\n  },\n\n  // ── 401 handler ───────────────────────────────────────────────────\n  /**\n   * Fired when the server returns 401 AND no refresh path recovers it\n   * (no refresh token, no refresh handler, refresh failed, or retry\n   * still 401). The app should clear local state and redirect to login.\n   *\n   * NOT fired for 401 that gets transparently recovered by the refresh\n   * handler — those are invisible to callers.\n   */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    _onUnauthorized = cb;\n  },\n\n  /**\n   * Register the refresh strategy. The handler receives the current\n   * refresh token and must call your refresh endpoint, returning\n   * `{ access, refresh? }` on success or `null` on failure.\n   *\n   * @example\n   *   auth.setRefreshHandler(async (refresh) => {\n   *     const { data } = await Auth.tokenRefreshCreate({ body: { refresh } });\n   *     return data ? { access: data.access, refresh: data.refresh } : null;\n   *   });\n   */\n  setRefreshHandler(fn: RefreshHandler | null): void {\n    _refreshHandler = fn;\n  },\n\n  /**\n   * Proactively run the registered refresh handler right now, reusing the\n   * SAME single-flight promise as the 401-recovery interceptor. Callers\n   * (e.g. an expiry timer / focus / reconnect) get token rotation,\n   * de-duplication and rotated-token persistence for free — they must NOT\n   * re-implement any of it. Returns the fresh access token, or null if\n   * there is no handler / no refresh token / the refresh failed.\n   */\n  refreshNow(): Promise<string | null> {\n    return tryRefresh();\n  },\n};\n\n/**\n * Run the user-supplied refresh handler, persist the rotated tokens, and\n * return the fresh access token (or null on any failure path).\n *\n * TWO layers of coordination, because a single app can host MULTIPLE copies of\n * this generated store (e.g. `@djangocfg/api` + a locally-generated client +\n * `@djangocfg/monitor`), all sharing the SAME refresh token in storage:\n *\n *   1. Per-store single-flight (`_refreshInflight`) — concurrent 401s WITHIN\n *      this module coalesce onto one promise. Fast path, no lock.\n *   2. Cross-store mutex (`navigator.locks`) keyed on the refresh-token storage\n *      key — serializes refreshes across EVERY store in the app. The refresh\n *      token is re-read INSIDE the lock, so if another store already rotated it\n *      (SimpleJWT `ROTATE_REFRESH_TOKENS` blacklists the old one), the loser\n *      picks up the fresh access token instead of re-POSTing a blacklisted\n *      refresh token and getting a spurious 401 → logout.\n *\n * Web Locks is browser-only; on SSR / older runtimes we degrade gracefully to\n * layer 1 alone (correct whenever at most one store refreshes).\n */\nasync function tryRefresh(): Promise<string | null> {\n  if (_refreshInflight) return _refreshInflight;\n  if (!_refreshHandler) return null;\n\n  // The critical section — re-reads the refresh token every time it runs, so a\n  // rotation performed by another store (or by us on a prior attempt) is always\n  // observed. Returns the fresh access token, or null on any failure.\n  const runRefresh = async (): Promise<string | null> => {\n    const refresh = auth.getRefreshToken();\n    if (!refresh) return null;\n    const result = await _refreshHandler!(refresh);\n    if (!result?.access) return null;\n    auth.setToken(result.access);\n    if (result.refresh) auth.setRefreshToken(result.refresh);\n    return result.access;\n  };\n\n  _refreshInflight = (async () => {\n    try {\n      // Serialize across all stores in this app when Web Locks is available.\n      const locks =\n        typeof navigator !== 'undefined'\n          ? (navigator as Navigator & { locks?: LockManager }).locks\n          : undefined;\n      if (locks?.request) {\n        return await locks.request(`${REFRESH_KEY}:refresh`, runRefresh);\n      }\n      return await runRefresh();\n    } catch {\n      return null;\n    } finally {\n      _refreshInflight = null;\n    }\n  })();\n\n  return _refreshInflight;\n}\n\n/**\n * Terminal 401 — no refresh path can recover this session. The store clears\n * its own tokens FIRST (subscribers flip to 'anonymous' via the snapshot),\n * then notifies `onSessionExpired` subscribers and the legacy\n * `onUnauthorized` slot. Apps only route to login; they never own the\n * clear-before-redirect ordering.\n */\nfunction expireSession(response: Response): void {\n  auth.clearTokens();\n  for (const cb of Array.from(_sessionExpiredHandlers)) {\n    try { cb(response); } catch {}\n  }\n  if (_onUnauthorized) {\n    try { _onUnauthorized(response); } catch {}\n  }\n}\n\n/**\n * Wire the shared client to the global auth store. Called exactly\n * once from `client.gen.ts` (post-processed) right after\n * `createClient()`. Synchronous — no microtask, no TDZ races.\n *\n * Safe to call from server / SSR: storage backends short-circuit on\n * non-browser environments, so headers populated by the interceptor\n * are simply absent server-side (which is the correct behaviour\n * unless the caller explicitly sets a server-side token).\n *\n * ── How API key auth works ────────────────────────────────────────────────\n *\n * There are three ways to supply X-API-Key, in priority order:\n *\n *   1. Per-request header (highest priority, overrides everything):\n *        SomeApi.someEndpoint({ headers: { 'X-API-Key': userKey } })\n *      Use this in playgrounds or any context where the key comes from\n *      user input rather than app config.\n *\n *   2. Global override via auth.setApiKey(key) — applies to every request\n *      from this client until cleared. Good for single-user sessions.\n *\n *   3. NEXT_PUBLIC_API_KEY env var — read by defaultApiKey() on every request.\n *      Use as a public fallback key (e.g. a shared demo key for unauthenticated\n *      visitors). When not set, returns null so per-request keys work freely.\n *\n * ── baseUrl gotcha with proxy packages ───────────────────────────────────\n *\n * If another package (e.g. @carapis/catalog-api/client) calls\n * `auth.setBaseUrl('')` on import, ALL requests from this shared client\n * will go to relative paths (Next.js proxy) instead of hitting Django\n * directly. This is intentional for the public catalog — but breaks any\n * feature that needs to reach Django with a dynamic API key from the\n * browser (e.g. a playground).\n *\n * Fix: pass `baseUrl` explicitly per-call to override the global setting:\n *   SomeApi.someEndpoint({\n *     baseUrl: process.env.NEXT_PUBLIC_API_URL,\n *     headers: { 'X-API-Key': userKey },\n *   })\n */\n// ── DPoP (RFC 9449) — sender-constrained tokens ────────────────────────────\n//\n// When NEXT_PUBLIC_DPOP_ENABLED === 'true', the client holds a P-256 keypair\n// whose PRIVATE key is non-extractable (Web Crypto `extractable:false`) and\n// stored in IndexedDB. JS — including XSS — can sign with it but can NEVER read\n// it. Each request carries a fresh `DPoP` proof signed by that key; the backend\n// binds the token to the key (`cnf.jkt`) and rejects any request whose proof key\n// doesn't match. A stolen token is therefore useless to an attacker.\n//\n// Dormant unless the env flag is on — bearer-mode apps are unaffected.\n\nfunction dpopEnabled(): boolean {\n  try {\n    return typeof process !== 'undefined'\n      && process.env?.NEXT_PUBLIC_DPOP_ENABLED === 'true';\n  } catch { return false; }\n}\n\nconst _DPOP_DB = 'cfg-auth';\nconst _DPOP_STORE = 'keys';\nconst _DPOP_KEY_ID = 'dpop-ec-p256';\n\nfunction _idbOpen(): Promise<IDBDatabase> {\n  return new Promise((resolve, reject) => {\n    const req = indexedDB.open(_DPOP_DB, 1);\n    req.onupgradeneeded = () => req.result.createObjectStore(_DPOP_STORE);\n    req.onsuccess = () => resolve(req.result);\n    req.onerror = () => reject(req.error);\n  });\n}\n\nfunction _idbGet(key: string): Promise<CryptoKeyPair | undefined> {\n  return _idbOpen().then((db) => new Promise((resolve, reject) => {\n    const tx = db.transaction(_DPOP_STORE, 'readonly');\n    const req = tx.objectStore(_DPOP_STORE).get(key);\n    req.onsuccess = () => resolve(req.result);\n    req.onerror = () => reject(req.error);\n  }));\n}\n\nfunction _idbPut(key: string, value: CryptoKeyPair): Promise<void> {\n  return _idbOpen().then((db) => new Promise((resolve, reject) => {\n    const tx = db.transaction(_DPOP_STORE, 'readwrite');\n    tx.objectStore(_DPOP_STORE).put(value, key);\n    tx.oncomplete = () => resolve();\n    tx.onerror = () => reject(tx.error);\n  }));\n}\n\n/** Single-flight keypair init — the private key is created non-extractable. */\nlet _dpopKeyPromise: Promise<CryptoKeyPair> | null = null;\n\nfunction _getDpopKeyPair(): Promise<CryptoKeyPair> {\n  if (_dpopKeyPromise) return _dpopKeyPromise;\n  _dpopKeyPromise = (async () => {\n    const existing = await _idbGet(_DPOP_KEY_ID).catch(() => undefined);\n    if (existing) return existing;\n    const pair = await crypto.subtle.generateKey(\n      { name: 'ECDSA', namedCurve: 'P-256' },\n      false, // extractable:false — JS can sign but never export the private key\n      ['sign'],\n    );\n    // CryptoKey is structured-cloneable; IndexedDB persists it across reloads\n    // WITHOUT ever exposing raw key bytes to JS.\n    await _idbPut(_DPOP_KEY_ID, pair).catch(() => {});\n    return pair;\n  })();\n  return _dpopKeyPromise;\n}\n\nfunction _b64urlFromBytes(bytes: ArrayBuffer | Uint8Array): string {\n  const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n  let s = '';\n  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);\n  return btoa(s).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n\nfunction _b64urlFromString(str: string): string {\n  return _b64urlFromBytes(new TextEncoder().encode(str));\n}\n\n/** ECDSA raw signature (r||s) → JOSE base64url (Web Crypto already returns raw). */\nasync function _publicJwk(pub: CryptoKey): Promise<Record<string, string>> {\n  const jwk = await crypto.subtle.exportKey('jwk', pub);\n  // Public components only — required RFC 7638 members for EC.\n  return { kty: 'EC', crv: 'P-256', x: jwk.x as string, y: jwk.y as string };\n}\n\n/** Build a DPoP proof JWT for this request (htm/htu/iat/jti), signed in-key. */\nasync function _makeDpopProof(method: string, url: string): Promise<string | null> {\n  try {\n    const pair = await _getDpopKeyPair();\n    const jwk = await _publicJwk(pair.publicKey);\n    const header = { typ: 'dpop+jwt', alg: 'ES256', jwk };\n    // htu = scheme://authority/path without query/fragment.\n    const htu = url.split('#')[0].split('?')[0];\n    const jti =\n      (crypto.randomUUID && crypto.randomUUID()) ||\n      _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));\n    const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1000), jti };\n    const signingInput =\n      `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;\n    const sig = await crypto.subtle.sign(\n      { name: 'ECDSA', hash: 'SHA-256' },\n      pair.privateKey,\n      new TextEncoder().encode(signingInput),\n    );\n    return `${signingInput}.${_b64urlFromBytes(sig)}`;\n  } catch {\n    return null; // never break a request because proof generation failed\n  }\n}\n\nexport function installAuthOnClient(client: HeyClient): void {\n  if (_client) return; // idempotent\n  _client = client;\n\n  client.setConfig({\n    baseUrl: auth.getBaseUrl(),\n    credentials: _withCredentials ? 'include' : 'same-origin',\n  });\n\n  client.interceptors.request.use(async (request) => {\n    const token = auth.getToken();\n    if (token) request.headers.set('Authorization', `Bearer ${token}`);\n\n    const locale = auth.getLocale();\n    if (locale) request.headers.set('Accept-Language', locale);\n\n    // Only set X-API-Key from global store if NOT already present on the\n    // request — per-request headers take precedence.\n    const apiKey = auth.getApiKey();\n    if (apiKey && !request.headers.has('X-API-Key')) request.headers.set('X-API-Key', apiKey);\n\n    try {\n      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;\n      if (tz) request.headers.set('X-Timezone', tz);\n    } catch {}\n    request.headers.set('X-Client-Time', new Date().toISOString());\n\n    // DPoP proof — sign a fresh per-request proof with the non-extractable key.\n    // Only in a browser, only when enabled. Failure is non-fatal (proof null).\n    if (dpopEnabled() && typeof window !== 'undefined') {\n      const proof = await _makeDpopProof(request.method, request.url);\n      if (proof) request.headers.set('DPoP', proof);\n    }\n\n    return request;\n  });\n\n  client.interceptors.error.use((err, res, req) => {\n    if (err instanceof APIError) return err;\n    const url = (req as Request | undefined)?.url ?? '';\n    const status = (res as Response | undefined)?.status ?? 0;\n    const statusText = (res as Response | undefined)?.statusText ?? '';\n    return new APIError(status, statusText, err, url);\n  });\n\n\n  client.interceptors.response.use(async (response, request) => {\n    if (response.status !== 401) return response;\n\n    // Already retried once — give up to avoid loops.\n    if (request.headers.get(RETRY_MARKER)) {\n      expireSession(response);\n      return response;\n    }\n\n    const newToken = await tryRefresh();\n    if (!newToken) {\n      expireSession(response);\n      return response;\n    }\n\n    // Retry the original request once with the new token. We mutate a\n    // clone so the original Request body (already consumed by the\n    // failed call) doesn't trip \"body already used\".\n    const retry = request.clone();\n    retry.headers.set('Authorization', `Bearer ${newToken}`);\n    retry.headers.set(RETRY_MARKER, '1');\n    // This retry uses raw fetch() and bypasses the request interceptor, so the\n    // DPoP proof must be re-attached here or a bound token would 401 on retry.\n    if (dpopEnabled() && typeof window !== 'undefined') {\n      const proof = await _makeDpopProof(retry.method, retry.url);\n      if (proof) retry.headers.set('DPoP', proof);\n    }\n    try {\n      const retried = await fetch(retry);\n      if (retried.status === 401) expireSession(retried);\n      return retried;\n    } catch {\n      // Network error on the retry. The refresh SUCCEEDED (we hold a fresh\n      // token), so the session is alive — a transient network blip must NOT\n      // log the user out. Surface the original 401 to the caller only.\n      return response;\n    }\n  });\n}\n\n// ── Default refresh handler (auto-registered) ──────────────────────────────\n//\n// POSTs straight to the SimpleJWT refresh endpoint so a 401 transparently\n// refreshes and retries. Registered at import time; an app can override it\n// afterwards with `auth.setRefreshHandler(...)` (last write wins). Returns the\n// ROTATED refresh token so the store persists it — `ROTATE_REFRESH_TOKENS`\n// blacklists the old one, so reusing it would 401 on the next refresh.\n//\n// Raw fetch, NOT the SDK: the endpoint exists on the server even when this\n// target's sliced SDK doesn't include the accounts group, and importing\n// sdk.gen here would close the cycle auth.ts → sdk.gen → client.gen → auth.ts.\nconst REFRESH_ENDPOINT = '/cfg/accounts/token/refresh/';\n\nauth.setRefreshHandler(async (refresh) => {\n  try {\n    const url = `${auth.getBaseUrl()}${REFRESH_ENDPOINT}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    // Bound tokens (`cnf.jkt`) require a DPoP proof on the refresh call too.\n    if (dpopEnabled() && typeof window !== 'undefined') {\n      const proof = await _makeDpopProof('POST', url);\n      if (proof) headers['DPoP'] = proof;\n    }\n    const res = await fetch(url, {\n      method: 'POST',\n      headers,\n      credentials: auth.getWithCredentials() ? 'include' : 'same-origin',\n      body: JSON.stringify({ refresh }),\n    });\n    if (!res.ok) return null;\n    const data = (await res.json()) as { access?: string; refresh?: string } | null;\n    return data?.access\n      ? { access: data.access, refresh: data.refresh ?? refresh }\n      : null;\n  } catch {\n    return null;\n  }\n});\n\nexport type Auth = typeof auth;\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// API logger built on consola. Optional dependency — install if you enable logging:\n//   npm install consola\n// DO NOT EDIT — re-run `make gen`.\n\nimport { type ConsolaInstance, createConsola } from \"consola\";\n\nexport interface RequestLog {\n  method: string;\n  url: string;\n  headers?: Record<string, string>;\n  body?: any;\n  timestamp: number;\n}\n\nexport interface ResponseLog {\n  status: number;\n  statusText: string;\n  data?: any;\n  duration: number;\n  timestamp: number;\n}\n\nexport interface ErrorLog {\n  message: string;\n  statusCode?: number;\n  fieldErrors?: Record<string, string[]>;\n  duration: number;\n  timestamp: number;\n}\n\nexport interface LoggerConfig {\n  enabled: boolean;\n  logRequests: boolean;\n  logResponses: boolean;\n  logErrors: boolean;\n  logBodies: boolean;\n  logHeaders: boolean;\n  consola?: ConsolaInstance;\n}\n\nconst DEFAULT_CONFIG: LoggerConfig = {\n  enabled: typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\",\n  logRequests: true,\n  logResponses: true,\n  logErrors: true,\n  logBodies: true,\n  logHeaders: false,\n};\n\nconst SENSITIVE_HEADERS = [\n  \"authorization\",\n  \"cookie\",\n  \"set-cookie\",\n  \"x-api-key\",\n  \"x-csrf-token\",\n];\n\nexport class APILogger {\n  private config: LoggerConfig;\n  private consola: ConsolaInstance;\n\n  constructor(config: Partial<LoggerConfig> = {}) {\n    this.config = { ...DEFAULT_CONFIG, ...config };\n    this.consola = config.consola || createConsola({\n      level: this.config.enabled ? 4 : 0,\n    });\n  }\n\n  enable(): void { this.config.enabled = true; }\n  disable(): void { this.config.enabled = false; }\n  setConfig(config: Partial<LoggerConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n\n  private filterHeaders(headers?: Record<string, string>): Record<string, string> {\n    if (!headers) return {};\n    const filtered: Record<string, string> = {};\n    Object.keys(headers).forEach((key) => {\n      filtered[key] = SENSITIVE_HEADERS.includes(key.toLowerCase()) ? \"***\" : (headers[key] || \"\");\n    });\n    return filtered;\n  }\n\n  logRequest(request: RequestLog): void {\n    if (!this.config.enabled || !this.config.logRequests) return;\n    const { method, url, headers, body } = request;\n    this.consola.start(`${method} ${url}`);\n    if (this.config.logHeaders && headers) this.consola.debug(\"Headers:\", this.filterHeaders(headers));\n    if (this.config.logBodies && body) this.consola.debug(\"Body:\", body);\n  }\n\n  logResponse(request: RequestLog, response: ResponseLog): void {\n    if (!this.config.enabled || !this.config.logResponses) return;\n    const { method, url } = request;\n    const { status, statusText, data, duration } = response;\n    this.consola.success(`${method} ${url} ${status} ${statusText} (${duration}ms)`);\n    if (this.config.logBodies && data) this.consola.debug(\"Response:\", data);\n  }\n\n  logError(request: RequestLog, error: ErrorLog): void {\n    if (!this.config.enabled || !this.config.logErrors) return;\n    const { method, url } = request;\n    const { message, statusCode, fieldErrors, duration } = error;\n    this.consola.error(`${method} ${url} ${statusCode || \"Network\"} Error (${duration}ms)`);\n    this.consola.error(\"Message:\", message);\n    if (fieldErrors && Object.keys(fieldErrors).length > 0) {\n      this.consola.error(\"Field Errors:\");\n      Object.entries(fieldErrors).forEach(([field, errors]) => {\n        errors.forEach((err) => this.consola.error(`  • ${field}: ${err}`));\n      });\n    }\n  }\n\n  info(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.info(message, ...args); }\n  warn(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.warn(message, ...args); }\n  error(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.error(message, ...args); }\n  debug(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.debug(message, ...args); }\n  success(message: string, ...args: any[]): void { if (this.config.enabled) this.consola.success(message, ...args); }\n  withTag(tag: string): ConsolaInstance { return this.consola.withTag(tag); }\n}\n\nexport const defaultLogger = new APILogger();\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport type { ArrayStyle, ObjectStyle, SerializerOptions } from './pathSerializer.gen';\n\nexport type QuerySerializer = (query: Record<string, unknown>) => string;\n\nexport type BodySerializer = (body: unknown) => unknown;\n\ntype QuerySerializerOptionsObject = {\n  allowReserved?: boolean;\n  array?: Partial<SerializerOptions<ArrayStyle>>;\n  object?: Partial<SerializerOptions<ObjectStyle>>;\n};\n\nexport type QuerySerializerOptions = QuerySerializerOptionsObject & {\n  /**\n   * Per-parameter serialization overrides. When provided, these settings\n   * override the global array/object settings for specific parameter names.\n   */\n  parameters?: Record<string, QuerySerializerOptionsObject>;\n};\n\nconst serializeFormDataPair = (data: FormData, key: string, value: unknown): void => {\n  if (typeof value === 'string' || value instanceof Blob) {\n    data.append(key, value);\n  } else if (value instanceof Date) {\n    data.append(key, value.toISOString());\n  } else {\n    data.append(key, JSON.stringify(value));\n  }\n};\n\nconst serializeUrlSearchParamsPair = (data: URLSearchParams, key: string, value: unknown): void => {\n  if (typeof value === 'string') {\n    data.append(key, value);\n  } else {\n    data.append(key, JSON.stringify(value));\n  }\n};\n\nexport const formDataBodySerializer = {\n  bodySerializer: (body: unknown): FormData => {\n    const data = new FormData();\n\n    Object.entries(body as Record<string, unknown>).forEach(([key, value]) => {\n      if (value === undefined || value === null) {\n        return;\n      }\n      if (Array.isArray(value)) {\n        value.forEach((v) => serializeFormDataPair(data, key, v));\n      } else {\n        serializeFormDataPair(data, key, value);\n      }\n    });\n\n    return data;\n  },\n};\n\nexport const jsonBodySerializer = {\n  bodySerializer: (body: unknown): string =>\n    JSON.stringify(body, (_key, value) => (typeof value === 'bigint' ? value.toString() : value)),\n};\n\nexport const urlSearchParamsBodySerializer = {\n  bodySerializer: (body: unknown): string => {\n    const data = new URLSearchParams();\n\n    Object.entries(body as Record<string, unknown>).forEach(([key, value]) => {\n      if (value === undefined || value === null) {\n        return;\n      }\n      if (Array.isArray(value)) {\n        value.forEach((v) => serializeUrlSearchParamsPair(data, key, v));\n      } else {\n        serializeUrlSearchParamsPair(data, key, value);\n      }\n    });\n\n    return data.toString();\n  },\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\ntype Slot = 'body' | 'headers' | 'path' | 'query';\n\nexport type Field =\n  | {\n      in: Exclude<Slot, 'body'>;\n      /**\n       * Field name. This is the name we want the user to see and use.\n       */\n      key: string;\n      /**\n       * Field mapped name. This is the name we want to use in the request.\n       * If omitted, we use the same value as `key`.\n       */\n      map?: string;\n    }\n  | {\n      in: Extract<Slot, 'body'>;\n      /**\n       * Key isn't required for bodies.\n       */\n      key?: string;\n      map?: string;\n    }\n  | {\n      /**\n       * Field name. This is the name we want the user to see and use.\n       */\n      key: string;\n      /**\n       * Field mapped name. This is the name we want to use in the request.\n       * If `in` is omitted, `map` aliases `key` to the transport layer.\n       */\n      map: Slot;\n    };\n\nexport interface Fields {\n  allowExtra?: Partial<Record<Slot, boolean>>;\n  args?: ReadonlyArray<Field>;\n}\n\nexport type FieldsConfig = ReadonlyArray<Field | Fields>;\n\nconst extraPrefixesMap: Record<string, Slot> = {\n  $body_: 'body',\n  $headers_: 'headers',\n  $path_: 'path',\n  $query_: 'query',\n};\nconst extraPrefixes = Object.entries(extraPrefixesMap);\n\ntype KeyMap = Map<\n  string,\n  | {\n      in: Slot;\n      map?: string;\n    }\n  | {\n      in?: never;\n      map: Slot;\n    }\n>;\n\nfunction buildKeyMap(fields: FieldsConfig, map?: KeyMap): KeyMap {\n  if (!map) {\n    map = new Map();\n  }\n\n  for (const config of fields) {\n    if ('in' in config) {\n      if (config.key) {\n        map.set(config.key, {\n          in: config.in,\n          map: config.map,\n        });\n      }\n    } else if ('key' in config) {\n      map.set(config.key, {\n        map: config.map,\n      });\n    } else if (config.args) {\n      buildKeyMap(config.args, map);\n    }\n  }\n\n  return map;\n}\n\ninterface Params {\n  body?: unknown;\n  headers: Record<string, unknown>;\n  path: Record<string, unknown>;\n  query: Record<string, unknown>;\n}\n\nfunction stripEmptySlots(params: Params): void {\n  for (const [slot, value] of Object.entries(params)) {\n    if (slot === 'body') continue;\n    if (value && typeof value === 'object' && !Array.isArray(value) && !Object.keys(value).length) {\n      delete params[slot as Slot];\n    }\n  }\n}\n\nexport function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsConfig): Params {\n  const params: Params = {\n    headers: Object.create(null),\n    path: Object.create(null),\n    query: Object.create(null),\n  };\n\n  const map = buildKeyMap(fields);\n\n  function writeSlot(slot: Slot, key: string, value: unknown): void {\n    let record = params[slot] as Record<string, unknown> | undefined;\n    if (record === undefined) {\n      record = Object.create(null) as Record<string, unknown>;\n      params[slot] = record;\n    }\n    record[key] = value;\n  }\n\n  let config: FieldsConfig[number] | undefined;\n\n  for (const [index, arg] of args.entries()) {\n    if (fields[index]) {\n      config = fields[index];\n    }\n\n    if (!config) {\n      continue;\n    }\n\n    if ('in' in config) {\n      if (config.key) {\n        const field = map.get(config.key)!;\n        const name = field.map || config.key;\n        if (field.in) {\n          writeSlot(field.in, name, arg);\n        }\n      } else {\n        params.body = arg;\n      }\n    } else {\n      for (const [key, value] of Object.entries(arg ?? {})) {\n        const field = map.get(key);\n\n        if (field) {\n          if (field.in) {\n            const name = field.map || key;\n            writeSlot(field.in, name, value);\n          } else {\n            params[field.map] = value;\n          }\n        } else {\n          const extra = extraPrefixes.find(([prefix]) => key.startsWith(prefix));\n\n          if (extra) {\n            const [prefix, slot] = extra;\n            writeSlot(slot, key.slice(prefix.length), value);\n          } else if ('allowExtra' in config && config.allowExtra) {\n            for (const [slot, allowed] of Object.entries(config.allowExtra)) {\n              if (allowed) {\n                writeSlot(slot as Slot, key, value);\n                break;\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n\n  stripEmptySlots(params);\n\n  return params;\n}\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport type { Config } from './types.gen';\n\nexport type ServerSentEventsOptions<TData = unknown> = Omit<RequestInit, 'method'> &\n  Pick<Config, 'method' | 'responseTransformer' | 'responseValidator'> & {\n    /**\n     * Fetch API implementation. You can use this option to provide a custom\n     * fetch instance.\n     *\n     * @default globalThis.fetch\n     */\n    fetch?: typeof fetch;\n    /**\n     * Implementing clients can call request interceptors inside this hook.\n     */\n    onRequest?: (url: string, init: RequestInit) => Promise<Request>;\n    /**\n     * Callback invoked when a network or parsing error occurs during streaming.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @param error The error that occurred.\n     */\n    onSseError?: (error: unknown) => void;\n    /**\n     * Callback invoked when an event is streamed from the server.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @param event Event streamed from the server.\n     * @returns Nothing (void).\n     */\n    onSseEvent?: (event: StreamEvent<TData>) => void;\n    serializedBody?: RequestInit['body'];\n    /**\n     * Default retry delay in milliseconds.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @default 3000\n     */\n    sseDefaultRetryDelay?: number;\n    /**\n     * Maximum number of retry attempts before giving up.\n     */\n    sseMaxRetryAttempts?: number;\n    /**\n     * Maximum retry delay in milliseconds.\n     *\n     * Applies only when exponential backoff is used.\n     *\n     * This option applies only if the endpoint returns a stream of events.\n     *\n     * @default 30000\n     */\n    sseMaxRetryDelay?: number;\n    /**\n     * Optional sleep function for retry backoff.\n     *\n     * Defaults to using `setTimeout`.\n     */\n    sseSleepFn?: (ms: number) => Promise<void>;\n    url: string;\n  };\n\nexport interface StreamEvent<TData = unknown> {\n  data: TData;\n  event?: string;\n  id?: string;\n  retry?: number;\n}\n\nexport type ServerSentEventsResult<TData = unknown, TReturn = void, TNext = unknown> = {\n  stream: AsyncGenerator<\n    TData extends Record<string, unknown> ? TData[keyof TData] : TData,\n    TReturn,\n    TNext\n  >;\n};\n\nexport function createSseClient<TData = unknown>({\n  onRequest,\n  onSseError,\n  onSseEvent,\n  responseTransformer,\n  responseValidator,\n  sseDefaultRetryDelay,\n  sseMaxRetryAttempts,\n  sseMaxRetryDelay,\n  sseSleepFn,\n  url,\n  ...options\n}: ServerSentEventsOptions): ServerSentEventsResult<TData> {\n  let lastEventId: string | undefined;\n\n  const sleep = sseSleepFn ?? ((ms: number) => new Promise((resolve) => setTimeout(resolve, ms)));\n\n  const createStream = async function* () {\n    let retryDelay: number = sseDefaultRetryDelay ?? 3000;\n    let attempt = 0;\n    const signal = options.signal ?? new AbortController().signal;\n\n    while (true) {\n      if (signal.aborted) break;\n\n      attempt++;\n\n      const headers =\n        options.headers instanceof Headers\n          ? options.headers\n          : new Headers(options.headers as Record<string, string> | undefined);\n\n      if (lastEventId !== undefined) {\n        headers.set('Last-Event-ID', lastEventId);\n      }\n\n      try {\n        const requestInit: RequestInit = {\n          redirect: 'follow',\n          ...options,\n          body: options.serializedBody,\n          headers,\n          signal,\n        };\n        let request = new Request(url, requestInit);\n        if (onRequest) {\n          request = await onRequest(url, requestInit);\n        }\n        // fetch must be assigned here, otherwise it would throw the error:\n        // TypeError: Failed to execute 'fetch' on 'Window': Illegal invocation\n        const _fetch = options.fetch ?? globalThis.fetch;\n        const response = await _fetch(request);\n\n        if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);\n\n        if (!response.body) throw new Error('No body in SSE response');\n\n        const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();\n\n        let buffer = '';\n\n        const abortHandler = () => {\n          try {\n            reader.cancel();\n          } catch {\n            // noop\n          }\n        };\n\n        signal.addEventListener('abort', abortHandler);\n\n        try {\n          while (true) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += value;\n            buffer = buffer.replace(/\\r\\n?/g, '\\n'); // normalize line endings\n\n            const chunks = buffer.split('\\n\\n');\n            buffer = chunks.pop() ?? '';\n\n            for (const chunk of chunks) {\n              const lines = chunk.split('\\n');\n              const dataLines: Array<string> = [];\n              let eventName: string | undefined;\n\n              for (const line of lines) {\n                if (line.startsWith('data:')) {\n                  dataLines.push(line.replace(/^data:\\s*/, ''));\n                } else if (line.startsWith('event:')) {\n                  eventName = line.replace(/^event:\\s*/, '');\n                } else if (line.startsWith('id:')) {\n                  lastEventId = line.replace(/^id:\\s*/, '');\n                } else if (line.startsWith('retry:')) {\n                  const parsed = Number.parseInt(line.replace(/^retry:\\s*/, ''), 10);\n                  if (!Number.isNaN(parsed)) {\n                    retryDelay = parsed;\n                  }\n                }\n              }\n\n              let data: unknown;\n              let parsedJson = false;\n\n              if (dataLines.length) {\n                const rawData = dataLines.join('\\n');\n                try {\n                  data = JSON.parse(rawData);\n                  parsedJson = true;\n                } catch {\n                  data = rawData;\n                }\n              }\n\n              if (parsedJson) {\n                if (responseValidator) {\n                  await responseValidator(data);\n                }\n\n                if (responseTransformer) {\n                  data = await responseTransformer(data);\n                }\n              }\n\n              onSseEvent?.({\n                data,\n                event: eventName,\n                id: lastEventId,\n                retry: retryDelay,\n              });\n\n              if (dataLines.length) {\n                yield data as any;\n              }\n            }\n          }\n        } finally {\n          signal.removeEventListener('abort', abortHandler);\n          reader.releaseLock();\n        }\n\n        break; // exit loop on normal completion\n      } catch (error) {\n        // connection failed or aborted; retry after delay\n        onSseError?.(error);\n\n        if (sseMaxRetryAttempts !== undefined && attempt >= sseMaxRetryAttempts) {\n          break; // stop after firing error\n        }\n\n        // exponential backoff: double retry each attempt, cap at 30s\n        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 30000);\n        await sleep(backoff);\n      }\n    }\n  };\n\n  const stream = createStream();\n\n  return { stream };\n}\n","// This file is auto-generated by @hey-api/openapi-ts\n\ninterface SerializeOptions<T> extends SerializePrimitiveOptions, SerializerOptions<T> {}\n\ninterface SerializePrimitiveOptions {\n  allowReserved?: boolean;\n  name: string;\n}\n\nexport interface SerializerOptions<T> {\n  /**\n   * @default true\n   */\n  explode: boolean;\n  style: T;\n}\n\nexport type ArrayStyle = 'form' | 'spaceDelimited' | 'pipeDelimited';\nexport type ArraySeparatorStyle = ArrayStyle | MatrixStyle;\ntype MatrixStyle = 'label' | 'matrix' | 'simple';\nexport type ObjectStyle = 'form' | 'deepObject';\ntype ObjectSeparatorStyle = ObjectStyle | MatrixStyle;\n\ninterface SerializePrimitiveParam extends SerializePrimitiveOptions {\n  value: string;\n}\n\nexport const separatorArrayExplode = (style: ArraySeparatorStyle): '.' | ';' | ',' | '&' => {\n  switch (style) {\n    case 'label':\n      return '.';\n    case 'matrix':\n      return ';';\n    case 'simple':\n      return ',';\n    default:\n      return '&';\n  }\n};\n\nexport const separatorArrayNoExplode = (style: ArraySeparatorStyle): ',' | '|' | '%20' => {\n  switch (style) {\n    case 'form':\n      return ',';\n    case 'pipeDelimited':\n      return '|';\n    case 'spaceDelimited':\n      return '%20';\n    default:\n      return ',';\n  }\n};\n\nexport const separatorObjectExplode = (style: ObjectSeparatorStyle): '.' | ';' | ',' | '&' => {\n  switch (style) {\n    case 'label':\n      return '.';\n    case 'matrix':\n      return ';';\n    case 'simple':\n      return ',';\n    default:\n      return '&';\n  }\n};\n\nexport const serializeArrayParam = ({\n  allowReserved,\n  explode,\n  name,\n  style,\n  value,\n}: SerializeOptions<ArraySeparatorStyle> & {\n  value: unknown[];\n}): string => {\n  if (!explode) {\n    const joinedValues = (\n      allowReserved ? value : value.map((v) => encodeURIComponent(v as string))\n    ).join(separatorArrayNoExplode(style));\n    switch (style) {\n      case 'label':\n        return `.${joinedValues}`;\n      case 'matrix':\n        return `;${name}=${joinedValues}`;\n      case 'simple':\n        return joinedValues;\n      default:\n        return `${name}=${joinedValues}`;\n    }\n  }\n\n  const separator = separatorArrayExplode(style);\n  const joinedValues = value\n    .map((v) => {\n      if (style === 'label' || style === 'simple') {\n        return allowReserved ? v : encodeURIComponent(v as string);\n      }\n\n      return serializePrimitiveParam({\n        allowReserved,\n        name,\n        value: v as string,\n      });\n    })\n    .join(separator);\n  return style === 'label' || style === 'matrix' ? separator + joinedValues : joinedValues;\n};\n\nexport const serializePrimitiveParam = ({\n  allowReserved,\n  name,\n  value,\n}: SerializePrimitiveParam): string => {\n  if (value === undefined || value === null) {\n    return '';\n  }\n\n  if (typeof value === 'object') {\n    throw new Error(\n      'Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.',\n    );\n  }\n\n  return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;\n};\n\nexport const serializeObjectParam = ({\n  allowReserved,\n  explode,\n  name,\n  style,\n  value,\n  valueOnly,\n}: SerializeOptions<ObjectSeparatorStyle> & {\n  value: Record<string, unknown> | Date;\n  valueOnly?: boolean;\n}): string => {\n  if (value instanceof Date) {\n    return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;\n  }\n\n  if (style !== 'deepObject' && !explode) {\n    let values: string[] = [];\n    Object.entries(value).forEach(([key, v]) => {\n      values = [...values, key, allowReserved ? (v as string) : encodeURIComponent(v as string)];\n    });\n    const joinedValues = values.join(',');\n    switch (style) {\n      case 'form':\n        return `${name}=${joinedValues}`;\n      case 'label':\n        return `.${joinedValues}`;\n      case 'matrix':\n        return `;${name}=${joinedValues}`;\n      default:\n        return joinedValues;\n    }\n  }\n\n  const separator = separatorObjectExplode(style);\n  const joinedValues = Object.entries(value)\n    .map(([key, v]) =>\n      serializePrimitiveParam({\n        allowReserved,\n        name: style === 'deepObject' ? `${name}[${key}]` : key,\n        value: v as string,\n      }),\n    )\n    .join(separator);\n  return style === 'label' || style === 'matrix' ? separator + joinedValues : joinedValues;\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport type { BodySerializer, QuerySerializer } from './bodySerializer.gen';\nimport {\n  type ArraySeparatorStyle,\n  serializeArrayParam,\n  serializeObjectParam,\n  serializePrimitiveParam,\n} from './pathSerializer.gen';\n\nexport interface PathSerializer {\n  path: Record<string, unknown>;\n  url: string;\n}\n\nexport const PATH_PARAM_RE: RegExp = /\\{[^{}]+\\}/g;\n\nexport const defaultPathSerializer = ({ path, url: _url }: PathSerializer): string => {\n  let url = _url;\n  const matches = _url.match(PATH_PARAM_RE);\n  if (matches) {\n    for (const match of matches) {\n      let explode = false;\n      let name = match.substring(1, match.length - 1);\n      let style: ArraySeparatorStyle = 'simple';\n\n      if (name.endsWith('*')) {\n        explode = true;\n        name = name.substring(0, name.length - 1);\n      }\n\n      if (name.startsWith('.')) {\n        name = name.substring(1);\n        style = 'label';\n      } else if (name.startsWith(';')) {\n        name = name.substring(1);\n        style = 'matrix';\n      }\n\n      const value = path[name];\n\n      if (value === undefined || value === null) {\n        continue;\n      }\n\n      if (Array.isArray(value)) {\n        url = url.replace(match, serializeArrayParam({ explode, name, style, value }));\n        continue;\n      }\n\n      if (typeof value === 'object') {\n        url = url.replace(\n          match,\n          serializeObjectParam({\n            explode,\n            name,\n            style,\n            value: value as Record<string, unknown>,\n            valueOnly: true,\n          }),\n        );\n        continue;\n      }\n\n      if (style === 'matrix') {\n        url = url.replace(\n          match,\n          `;${serializePrimitiveParam({\n            name,\n            value: value as string,\n          })}`,\n        );\n        continue;\n      }\n\n      const replaceValue = encodeURIComponent(\n        style === 'label' ? `.${value as string}` : (value as string),\n      );\n      url = url.replace(match, replaceValue);\n    }\n  }\n  return url;\n};\n\nexport const getUrl = ({\n  baseUrl,\n  path,\n  query,\n  querySerializer,\n  url: _url,\n}: {\n  baseUrl?: string;\n  path?: Record<string, unknown>;\n  query?: Record<string, unknown>;\n  querySerializer: QuerySerializer;\n  url: string;\n}): string => {\n  const pathUrl = _url.startsWith('/') ? _url : `/${_url}`;\n  let url = (baseUrl ?? '') + pathUrl;\n  if (path) {\n    url = defaultPathSerializer({ path, url });\n  }\n  let search = query ? querySerializer(query) : '';\n  if (search.startsWith('?')) {\n    search = search.substring(1);\n  }\n  if (search) {\n    url += `?${search}`;\n  }\n  return url;\n};\n\nexport function getValidRequestBody(options: {\n  body?: unknown;\n  bodySerializer?: BodySerializer | null;\n  serializedBody?: unknown;\n}): unknown {\n  const hasBody = options.body !== undefined;\n  const isSerializedBody = hasBody && options.bodySerializer;\n\n  if (isSerializedBody) {\n    if ('serializedBody' in options) {\n      const hasSerializedBody =\n        options.serializedBody !== undefined && options.serializedBody !== '';\n\n      return hasSerializedBody ? options.serializedBody : null;\n    }\n\n    // not all clients implement a serializedBody property (i.e., client-axios)\n    return options.body !== '' ? options.body : null;\n  }\n\n  // plain/text body\n  if (hasBody) {\n    return options.body;\n  }\n\n  // no body was provided\n  return undefined;\n}\n","// This file is auto-generated by @hey-api/openapi-ts\n\nexport type AuthToken = string | undefined;\n\nexport interface Auth {\n  /**\n   * Which part of the request do we use to send the auth?\n   *\n   * @default 'header'\n   */\n  in?: 'header' | 'query' | 'cookie';\n  /**\n   * A unique identifier for the security scheme.\n   *\n   * Defined only when there are multiple security schemes whose `Auth`\n   * shape would otherwise be identical.\n   */\n  key?: string;\n  /**\n   * Header or query parameter name.\n   *\n   * @default 'Authorization'\n   */\n  name?: string;\n  scheme?: 'basic' | 'bearer';\n  type: 'apiKey' | 'http';\n}\n\nexport const getAuthToken = async (\n  auth: Auth,\n  callback: ((auth: Auth) => Promise<AuthToken> | AuthToken) | AuthToken,\n): Promise<string | undefined> => {\n  const token = typeof callback === 'function' ? await callback(auth) : callback;\n\n  if (!token) {\n    return;\n  }\n\n  if (auth.scheme === 'bearer') {\n    return `Bearer ${token}`;\n  }\n\n  if (auth.scheme === 'basic') {\n    return `Basic ${btoa(token)}`;\n  }\n\n  return token;\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { getAuthToken } from '../core/auth.gen';\nimport type { QuerySerializerOptions } from '../core/bodySerializer.gen';\nimport { jsonBodySerializer } from '../core/bodySerializer.gen';\nimport {\n  serializeArrayParam,\n  serializeObjectParam,\n  serializePrimitiveParam,\n} from '../core/pathSerializer.gen';\nimport { getUrl } from '../core/utils.gen';\nimport type { Client, ClientOptions, Config, RequestOptions } from './types.gen';\n\nexport const createQuerySerializer = <T = unknown>({\n  parameters = {},\n  ...args\n}: QuerySerializerOptions = {}): ((queryParams: T) => string) => {\n  const querySerializer = (queryParams: T): string => {\n    const search: string[] = [];\n    if (queryParams && typeof queryParams === 'object') {\n      for (const name in queryParams) {\n        const value = queryParams[name];\n\n        if (value === undefined || value === null) {\n          continue;\n        }\n\n        const options = parameters[name] || args;\n\n        if (Array.isArray(value)) {\n          const serializedArray = serializeArrayParam({\n            allowReserved: options.allowReserved,\n            explode: true,\n            name,\n            style: 'form',\n            value,\n            ...options.array,\n          });\n          if (serializedArray) search.push(serializedArray);\n        } else if (typeof value === 'object') {\n          const serializedObject = serializeObjectParam({\n            allowReserved: options.allowReserved,\n            explode: true,\n            name,\n            style: 'deepObject',\n            value: value as Record<string, unknown>,\n            ...options.object,\n          });\n          if (serializedObject) search.push(serializedObject);\n        } else {\n          const serializedPrimitive = serializePrimitiveParam({\n            allowReserved: options.allowReserved,\n            name,\n            value: value as string,\n          });\n          if (serializedPrimitive) search.push(serializedPrimitive);\n        }\n      }\n    }\n    return search.join('&');\n  };\n  return querySerializer;\n};\n\n/**\n * Infers parseAs value from provided Content-Type header.\n */\nexport const getParseAs = (contentType: string | null): Exclude<Config['parseAs'], 'auto'> => {\n  if (!contentType) {\n    // If no Content-Type header is provided, the best we can do is return the raw response body,\n    // which is effectively the same as the 'stream' option.\n    return 'stream';\n  }\n\n  const cleanContent = contentType.split(';')[0]?.trim();\n\n  if (!cleanContent) {\n    return;\n  }\n\n  if (cleanContent.startsWith('application/json') || cleanContent.endsWith('+json')) {\n    return 'json';\n  }\n\n  if (cleanContent === 'multipart/form-data') {\n    return 'formData';\n  }\n\n  if (\n    ['application/', 'audio/', 'image/', 'video/'].some((type) => cleanContent.startsWith(type))\n  ) {\n    return 'blob';\n  }\n\n  if (cleanContent.startsWith('text/')) {\n    return 'text';\n  }\n\n  return;\n};\n\nconst checkForExistence = (\n  options: Pick<RequestOptions, 'auth' | 'query'> & {\n    headers: Headers;\n  },\n  name?: string,\n): boolean => {\n  if (!name) {\n    return false;\n  }\n  if (\n    options.headers.has(name) ||\n    options.query?.[name] ||\n    options.headers.get('Cookie')?.includes(`${name}=`)\n  ) {\n    return true;\n  }\n  return false;\n};\n\nexport async function setAuthParams(\n  options: Pick<RequestOptions, 'auth' | 'query' | 'security'> & {\n    headers: Headers;\n  },\n): Promise<void> {\n  for (const auth of options.security ?? []) {\n    if (checkForExistence(options, auth.name)) {\n      continue;\n    }\n\n    const token = await getAuthToken(auth, options.auth);\n\n    if (!token) {\n      continue;\n    }\n\n    const name = auth.name ?? 'Authorization';\n\n    switch (auth.in) {\n      case 'query':\n        if (!options.query) {\n          options.query = {};\n        }\n        options.query[name] = token;\n        break;\n      case 'cookie':\n        options.headers.append('Cookie', `${name}=${token}`);\n        break;\n      case 'header':\n      default:\n        options.headers.set(name, token);\n        break;\n    }\n  }\n}\n\nexport const buildUrl: Client['buildUrl'] = (options) =>\n  getUrl({\n    baseUrl: options.baseUrl as string,\n    path: options.path,\n    query: options.query,\n    querySerializer:\n      typeof options.querySerializer === 'function'\n        ? options.querySerializer\n        : createQuerySerializer(options.querySerializer),\n    url: options.url,\n  });\n\nexport const mergeConfigs = (a: Config, b: Config): Config => {\n  const config = { ...a, ...b };\n  if (config.baseUrl?.endsWith('/')) {\n    config.baseUrl = config.baseUrl.substring(0, config.baseUrl.length - 1);\n  }\n  config.headers = mergeHeaders(a.headers, b.headers);\n  return config;\n};\n\nconst headersEntries = (headers: Headers): Array<[string, string]> => {\n  const entries: Array<[string, string]> = [];\n  headers.forEach((value, key) => {\n    entries.push([key, value]);\n  });\n  return entries;\n};\n\nexport const mergeHeaders = (\n  ...headers: Array<Required<Config>['headers'] | undefined>\n): Headers => {\n  const mergedHeaders = new Headers();\n  for (const header of headers) {\n    if (!header) {\n      continue;\n    }\n\n    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);\n\n    for (const [key, value] of iterator) {\n      if (value === null) {\n        mergedHeaders.delete(key);\n      } else if (Array.isArray(value)) {\n        for (const v of value) {\n          mergedHeaders.append(key, v as string);\n        }\n      } else if (value !== undefined) {\n        // assume object headers are meant to be JSON stringified, i.e., their\n        // content value in OpenAPI specification is 'application/json'\n        mergedHeaders.set(\n          key,\n          typeof value === 'object' ? JSON.stringify(value) : (value as string),\n        );\n      }\n    }\n  }\n  return mergedHeaders;\n};\n\ntype ErrInterceptor<Err, Res, Req, Options> = (\n  error: Err,\n  /** response may be undefined due to a network error where no response object is produced */\n  response: Res | undefined,\n  /** request may be undefined, because error may be from building the request object itself */\n  request: Req | undefined,\n  options: Options,\n) => Err | Promise<Err>;\n\ntype ReqInterceptor<Req, Options> = (request: Req, options: Options) => Req | Promise<Req>;\n\ntype ResInterceptor<Res, Req, Options> = (\n  response: Res,\n  request: Req,\n  options: Options,\n) => Res | Promise<Res>;\n\nclass Interceptors<Interceptor> {\n  fns: Array<Interceptor | null> = [];\n\n  clear(): void {\n    this.fns = [];\n  }\n\n  eject(id: number | Interceptor): void {\n    const index = this.getInterceptorIndex(id);\n    if (this.fns[index]) {\n      this.fns[index] = null;\n    }\n  }\n\n  exists(id: number | Interceptor): boolean {\n    const index = this.getInterceptorIndex(id);\n    return Boolean(this.fns[index]);\n  }\n\n  getInterceptorIndex(id: number | Interceptor): number {\n    if (typeof id === 'number') {\n      return this.fns[id] ? id : -1;\n    }\n    return this.fns.indexOf(id);\n  }\n\n  update(id: number | Interceptor, fn: Interceptor): number | Interceptor | false {\n    const index = this.getInterceptorIndex(id);\n    if (this.fns[index]) {\n      this.fns[index] = fn;\n      return id;\n    }\n    return false;\n  }\n\n  use(fn: Interceptor): number {\n    this.fns.push(fn);\n    return this.fns.length - 1;\n  }\n}\n\nexport interface Middleware<Req, Res, Err, Options> {\n  error: Interceptors<ErrInterceptor<Err, Res, Req, Options>>;\n  request: Interceptors<ReqInterceptor<Req, Options>>;\n  response: Interceptors<ResInterceptor<Res, Req, Options>>;\n}\n\nexport const createInterceptors = <Req, Res, Err, Options>(): Middleware<\n  Req,\n  Res,\n  Err,\n  Options\n> => ({\n  error: new Interceptors<ErrInterceptor<Err, Res, Req, Options>>(),\n  request: new Interceptors<ReqInterceptor<Req, Options>>(),\n  response: new Interceptors<ResInterceptor<Res, Req, Options>>(),\n});\n\nconst defaultQuerySerializer = createQuerySerializer({\n  allowReserved: false,\n  array: {\n    explode: true,\n    style: 'form',\n  },\n  object: {\n    explode: true,\n    style: 'deepObject',\n  },\n});\n\nconst defaultHeaders = {\n  'Content-Type': 'application/json',\n};\n\nexport const createConfig = <T extends ClientOptions = ClientOptions>(\n  override: Config<Omit<ClientOptions, keyof T> & T> = {},\n): Config<Omit<ClientOptions, keyof T> & T> => ({\n  ...jsonBodySerializer,\n  headers: defaultHeaders,\n  parseAs: 'auto',\n  querySerializer: defaultQuerySerializer,\n  ...override,\n});\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { createSseClient } from '../core/serverSentEvents.gen';\nimport type { HttpMethod } from '../core/types.gen';\nimport { getValidRequestBody } from '../core/utils.gen';\nimport type { Client, Config, RequestOptions, ResolvedRequestOptions } from './types.gen';\nimport {\n  buildUrl,\n  createConfig,\n  createInterceptors,\n  getParseAs,\n  mergeConfigs,\n  mergeHeaders,\n  setAuthParams,\n} from './utils.gen';\n\ntype ReqInit = Omit<RequestInit, 'body' | 'headers'> & {\n  body?: any;\n  headers: ReturnType<typeof mergeHeaders>;\n};\n\nexport const createClient = (config: Config = {}): Client => {\n  let _config = mergeConfigs(createConfig(), config);\n\n  const getConfig = (): Config => ({ ..._config });\n\n  const setConfig = (config: Config): Config => {\n    _config = mergeConfigs(_config, config);\n    return getConfig();\n  };\n\n  const interceptors = createInterceptors<Request, Response, unknown, ResolvedRequestOptions>();\n\n  const beforeRequest = async <\n    TData = unknown,\n    TResponseStyle extends 'data' | 'fields' = 'fields',\n    ThrowOnError extends boolean = boolean,\n    Url extends string = string,\n  >(\n    options: RequestOptions<TData, TResponseStyle, ThrowOnError, Url>,\n  ) => {\n    const opts = {\n      ..._config,\n      ...options,\n      fetch: options.fetch ?? _config.fetch ?? globalThis.fetch,\n      headers: mergeHeaders(_config.headers, options.headers),\n      serializedBody: undefined as string | undefined,\n    };\n\n    if (opts.security) {\n      await setAuthParams(opts);\n    }\n\n    if (opts.requestValidator) {\n      await opts.requestValidator(opts);\n    }\n\n    if (opts.body !== undefined && opts.bodySerializer) {\n      opts.serializedBody = opts.bodySerializer(opts.body) as string | undefined;\n    }\n\n    // remove Content-Type header if body is empty to avoid sending invalid requests\n    if (opts.body === undefined || opts.serializedBody === '') {\n      opts.headers.delete('Content-Type');\n    }\n\n    const resolvedOpts = opts as typeof opts &\n      ResolvedRequestOptions<TResponseStyle, ThrowOnError, Url>;\n    const url = buildUrl(resolvedOpts);\n\n    return { opts: resolvedOpts, url };\n  };\n\n  const request: Client['request'] = async (options) => {\n    const throwOnError = options.throwOnError ?? _config.throwOnError;\n    const responseStyle = options.responseStyle ?? _config.responseStyle;\n\n    let request: Request | undefined;\n    let response: Response | undefined;\n\n    try {\n      const { opts, url } = await beforeRequest(options);\n      const requestInit: ReqInit = {\n        redirect: 'follow',\n        ...opts,\n        body: getValidRequestBody(opts),\n      };\n\n      request = new Request(url, requestInit);\n\n      for (const fn of interceptors.request.fns) {\n        if (fn) {\n          request = await fn(request, opts);\n        }\n      }\n\n      // fetch must be assigned here, otherwise it would throw the error:\n      // TypeError: Failed to execute 'fetch' on 'Window': Illegal invocation\n      const _fetch = opts.fetch!;\n\n      response = await _fetch(request);\n\n      for (const fn of interceptors.response.fns) {\n        if (fn) {\n          response = await fn(response, request, opts);\n        }\n      }\n\n      const result = {\n        request,\n        response,\n      };\n\n      if (response.ok) {\n        const parseAs =\n          (opts.parseAs === 'auto'\n            ? getParseAs(response.headers.get('Content-Type'))\n            : opts.parseAs) ?? 'json';\n\n        if (response.status === 204 || response.headers.get('Content-Length') === '0') {\n          let emptyData: any;\n          switch (parseAs) {\n            case 'arrayBuffer':\n            case 'blob':\n            case 'text':\n              emptyData = await response[parseAs]();\n              break;\n            case 'formData':\n              emptyData = new FormData();\n              break;\n            case 'stream':\n              emptyData = response.body;\n              break;\n            case 'json':\n            default:\n              emptyData = {};\n              break;\n          }\n          return opts.responseStyle === 'data'\n            ? emptyData\n            : {\n                data: emptyData,\n                ...result,\n              };\n        }\n\n        let data: any;\n        switch (parseAs) {\n          case 'arrayBuffer':\n          case 'blob':\n          case 'formData':\n          case 'text':\n            data = await response[parseAs]();\n            break;\n          case 'json': {\n            // Some servers return 200 with no Content-Length and empty body.\n            // response.json() would throw; read as text and parse if non-empty.\n            const text = await response.text();\n            data = text ? JSON.parse(text) : {};\n            break;\n          }\n          case 'stream':\n            return opts.responseStyle === 'data'\n              ? response.body\n              : {\n                  data: response.body,\n                  ...result,\n                };\n        }\n\n        if (parseAs === 'json') {\n          if (opts.responseValidator) {\n            await opts.responseValidator(data);\n          }\n\n          if (opts.responseTransformer) {\n            data = await opts.responseTransformer(data);\n          }\n        }\n\n        return opts.responseStyle === 'data'\n          ? data\n          : {\n              data,\n              ...result,\n            };\n      }\n\n      const textError = await response.text();\n      let jsonError: unknown;\n\n      try {\n        jsonError = JSON.parse(textError);\n      } catch {\n        // noop\n      }\n\n      throw jsonError ?? textError;\n    } catch (error) {\n      let finalError = error;\n\n      for (const fn of interceptors.error.fns) {\n        if (fn) {\n          finalError = await fn(finalError, response, request, options as ResolvedRequestOptions);\n        }\n      }\n\n      finalError = finalError || {};\n\n      if (throwOnError) {\n        throw finalError;\n      }\n\n      // TODO: we probably want to return error and improve types\n      return responseStyle === 'data'\n        ? undefined\n        : {\n            error: finalError,\n            request,\n            response,\n          };\n    }\n  };\n\n  const makeMethodFn = (method: Uppercase<HttpMethod>) => (options: RequestOptions) =>\n    request({ ...options, method });\n\n  const makeSseFn = (method: Uppercase<HttpMethod>) => async (options: RequestOptions) => {\n    const { opts, url } = await beforeRequest(options);\n    return createSseClient({\n      ...opts,\n      body: opts.body as BodyInit | null | undefined,\n      method,\n      onRequest: async (url, init) => {\n        let request = new Request(url, init);\n        for (const fn of interceptors.request.fns) {\n          if (fn) {\n            request = await fn(request, opts);\n          }\n        }\n        return request;\n      },\n      serializedBody: getValidRequestBody(opts) as BodyInit | null | undefined,\n      url,\n    });\n  };\n\n  const _buildUrl: Client['buildUrl'] = (options) => buildUrl({ ..._config, ...options });\n\n  return {\n    buildUrl: _buildUrl,\n    connect: makeMethodFn('CONNECT'),\n    delete: makeMethodFn('DELETE'),\n    get: makeMethodFn('GET'),\n    getConfig,\n    head: makeMethodFn('HEAD'),\n    interceptors,\n    options: makeMethodFn('OPTIONS'),\n    patch: makeMethodFn('PATCH'),\n    post: makeMethodFn('POST'),\n    put: makeMethodFn('PUT'),\n    request,\n    setConfig,\n    sse: {\n      connect: makeSseFn('CONNECT'),\n      delete: makeSseFn('DELETE'),\n      get: makeSseFn('GET'),\n      head: makeSseFn('HEAD'),\n      options: makeSseFn('OPTIONS'),\n      patch: makeSseFn('PATCH'),\n      post: makeSseFn('POST'),\n      put: makeSseFn('PUT'),\n      trace: makeSseFn('TRACE'),\n    },\n    trace: makeMethodFn('TRACE'),\n  } as Client;\n};\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { type Client, type ClientOptions, type Config, createClient, createConfig } from './client';\nimport type { ClientOptions as ClientOptions2 } from './types.gen';\n\n/**\n * The `createClientConfig()` function will be called on client initialization\n * and the returned object will become the client's initial configuration.\n *\n * You may want to initialize your client this way instead of calling\n * `setConfig()`. This is useful for example if you're using Next.js\n * to ensure your client always has the correct values.\n */\nexport type CreateClientConfig<T extends ClientOptions = ClientOptions2> = (override?: Config<ClientOptions & T>) => Config<Required<ClientOptions> & T>;\n\nexport const client: Client = createClient(createConfig<ClientOptions2>({ baseUrl: 'http://localhost:8000' }));\n\n// auto-init: install auth on client\nimport { installAuthOnClient } from './helpers/auth';\ninstallAuthOnClient(client);\n","// This file is auto-generated by @hey-api/openapi-ts\n\nimport { type Client, type ClientMeta, formDataBodySerializer, type Options as Options2, type RequestResult, type TDataShape } from './client';\nimport { client } from './client.gen';\nimport type { CfgAccountsApiKeyRegenerateCreateData, CfgAccountsApiKeyRegenerateCreateErrors, CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRetrieveData, CfgAccountsApiKeyRetrieveErrors, CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRevealCreateData, CfgAccountsApiKeyRevealCreateErrors, CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyTestCreateData, CfgAccountsApiKeyTestCreateResponses, CfgAccountsOauthConnectionsListData, CfgAccountsOauthConnectionsListResponses, CfgAccountsOauthDisconnectCreateData, CfgAccountsOauthDisconnectCreateErrors, CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthGithubAuthorizeCreateData, CfgAccountsOauthGithubAuthorizeCreateErrors, CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubCallbackCreateData, CfgAccountsOauthGithubCallbackCreateErrors, CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthProvidersRetrieveData, CfgAccountsOauthProvidersRetrieveResponses, CfgAccountsOtpRequestCreateData, CfgAccountsOtpRequestCreateErrors, CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpVerifyCreateData, CfgAccountsOtpVerifyCreateErrors, CfgAccountsOtpVerifyCreateResponses, CfgAccountsProfileAvatarCreateData, CfgAccountsProfileAvatarCreateErrors, CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileDeleteCreateData, CfgAccountsProfileDeleteCreateErrors, CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfilePartialPartialUpdateData, CfgAccountsProfilePartialPartialUpdateErrors, CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialUpdateData, CfgAccountsProfilePartialUpdateErrors, CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfileRetrieveData, CfgAccountsProfileRetrieveErrors, CfgAccountsProfileRetrieveResponses, CfgAccountsProfileUpdatePartialUpdateData, CfgAccountsProfileUpdatePartialUpdateErrors, CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdateUpdateData, CfgAccountsProfileUpdateUpdateErrors, CfgAccountsProfileUpdateUpdateResponses, CfgAccountsTokenBlacklistCreateData, CfgAccountsTokenBlacklistCreateResponses, CfgAccountsTokenRefreshCreateData, CfgAccountsTokenRefreshCreateResponses, CfgCentrifugoAuthTokenRetrieveData, CfgCentrifugoAuthTokenRetrieveErrors, CfgCentrifugoAuthTokenRetrieveResponses, CfgTotpBackupCodesRegenerateCreateData, CfgTotpBackupCodesRegenerateCreateErrors, CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRetrieveData, CfgTotpBackupCodesRetrieveResponses, CfgTotpDevicesDestroyData, CfgTotpDevicesDestroyResponses, CfgTotpDevicesRetrieveData, CfgTotpDevicesRetrieveResponses, CfgTotpDisableCreateData, CfgTotpDisableCreateErrors, CfgTotpDisableCreateResponses, CfgTotpSetupConfirmCreateData, CfgTotpSetupConfirmCreateErrors, CfgTotpSetupConfirmCreateResponses, CfgTotpSetupCreateData, CfgTotpSetupCreateErrors, CfgTotpSetupCreateResponses, CfgTotpVerifyBackupCreateData, CfgTotpVerifyBackupCreateErrors, CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyCreateData, CfgTotpVerifyCreateErrors, CfgTotpVerifyCreateResponses } from './types.gen';\n\nexport type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean, TResponse = unknown> = Options2<TData, ThrowOnError, TResponse> & {\n    /**\n     * You can provide a client instance returned by `createClient()` instead of\n     * individual options. This might be also useful if you want to implement a\n     * custom client.\n     */\n    client?: Client;\n    /**\n     * You can pass arbitrary values through the `meta` object. This can be\n     * used to access values that aren't defined as part of the SDK function.\n     */\n    meta?: keyof ClientMeta extends never ? Record<string, unknown> : ClientMeta;\n};\n\nexport class CfgAccountsApiKey {\n    /**\n     * Get API key details\n     *\n     * Retrieve the current user's API key (masked) and metadata.\n     */\n    public static cfgAccountsApiKeyRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsApiKeyRetrieveData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRetrieveErrors, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRetrieveErrors, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/',\n            ...options\n        });\n    }\n    \n    /**\n     * Regenerate API key\n     *\n     * Generate a new API key. The full key is returned only once.\n     */\n    public static cfgAccountsApiKeyRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRegenerateCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/regenerate/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Reveal API key\n     *\n     * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.\n     */\n    public static cfgAccountsApiKeyRevealCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRevealCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyRevealCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyRevealCreateErrors, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/reveal/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Test API key\n     *\n     * Test whether an API key is valid without consuming it.\n     */\n    public static cfgAccountsApiKeyTestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyTestCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyTestCreateResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsApiKeyTestCreateResponses, unknown, ThrowOnError>({\n            security: [\n                { scheme: 'bearer', type: 'http' },\n                {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                },\n                { name: 'X-API-Key', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/api-key/test/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgAccountsOauth {\n    /**\n     * List OAuth connections\n     *\n     * Get all OAuth connections for the current user.\n     */\n    public static cfgAccountsOauthConnectionsList<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthConnectionsListData, ThrowOnError>): RequestResult<CfgAccountsOauthConnectionsListResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsOauthConnectionsListResponses, unknown, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/oauth/connections/',\n            ...options\n        });\n    }\n    \n    /**\n     * Disconnect OAuth provider\n     *\n     * Remove OAuth connection for the specified provider.\n     */\n    public static cfgAccountsOauthDisconnectCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthDisconnectCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthDisconnectCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthDisconnectCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/oauth/disconnect/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Start GitHub OAuth\n     *\n     * Generate GitHub OAuth authorization URL. Redirect user to this URL to start authentication.\n     */\n    public static cfgAccountsOauthGithubAuthorizeCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthGithubAuthorizeCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubAuthorizeCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubAuthorizeCreateErrors, ThrowOnError>({\n            url: '/cfg/accounts/oauth/github/authorize/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Complete GitHub OAuth\n     *\n     * Exchange authorization code for JWT tokens. Call this after GitHub redirects back with code.\n     */\n    public static cfgAccountsOauthGithubCallbackCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthGithubCallbackCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthGithubCallbackCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthGithubCallbackCreateErrors, ThrowOnError>({\n            url: '/cfg/accounts/oauth/github/callback/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * List OAuth providers\n     *\n     * Get list of available OAuth providers for authentication.\n     */\n    public static cfgAccountsOauthProvidersRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthProvidersRetrieveData, ThrowOnError>): RequestResult<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError>({ url: '/cfg/accounts/oauth/providers/', ...options });\n    }\n}\n\nexport class CfgAccounts {\n    /**\n     * Request OTP code to email.\n     */\n    public static cfgAccountsOtpRequestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpRequestCreateData, ThrowOnError>): RequestResult<CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpRequestCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpRequestCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/otp/request/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Verify OTP code and return JWT tokens or 2FA session.\n     *\n     * If user has 2FA enabled:\n     * - Returns requires_2fa=True with session_id\n     * - Client must complete 2FA verification at /cfg/totp/verify/\n     *\n     * If user has no 2FA:\n     * - Returns JWT tokens and user data directly\n     */\n    public static cfgAccountsOtpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpVerifyCreateData, ThrowOnError>): RequestResult<CfgAccountsOtpVerifyCreateResponses, CfgAccountsOtpVerifyCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsOtpVerifyCreateResponses, CfgAccountsOtpVerifyCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/otp/verify/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgAccountsProfile {\n    /**\n     * Get current user profile\n     *\n     * Retrieve the current authenticated user's profile information.\n     */\n    public static cfgAccountsProfileRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileRetrieveData, ThrowOnError>): RequestResult<CfgAccountsProfileRetrieveResponses, CfgAccountsProfileRetrieveErrors, ThrowOnError> {\n        return (options?.client ?? client).get<CfgAccountsProfileRetrieveResponses, CfgAccountsProfileRetrieveErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/',\n            ...options\n        });\n    }\n    \n    /**\n     * Upload user avatar\n     *\n     * Upload avatar image for the current authenticated user. Accepts multipart/form-data with 'avatar' field.\n     */\n    public static cfgAccountsProfileAvatarCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileAvatarCreateData, ThrowOnError>): RequestResult<CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileAvatarCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileAvatarCreateErrors, ThrowOnError>({\n            ...formDataBodySerializer,\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/accounts/profile/avatar/',\n            ...options,\n            headers: {\n                'Content-Type': null,\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Delete user account\n     *\n     *\n     * Permanently delete the current user's account.\n     *\n     * This operation:\n     * - Deactivates the account (user cannot log in)\n     * - Anonymizes personal data (GDPR compliance)\n     * - Frees up the email address for re-registration\n     * - Preserves audit trail\n     *\n     * The account can be restored by an administrator if needed.\n     *\n     */\n    public static cfgAccountsProfileDeleteCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileDeleteCreateData, ThrowOnError>): RequestResult<CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfileDeleteCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfileDeleteCreateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/delete/',\n            ...options\n        });\n    }\n    \n    /**\n     * Partial update user profile\n     *\n     * Partially update the current authenticated user's profile information. Supports avatar upload.\n     */\n    public static cfgAccountsProfilePartialPartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialPartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialPartialUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).patch<CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialPartialUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/partial/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Partial update user profile\n     *\n     * Partially update the current authenticated user's profile information. Supports avatar upload.\n     */\n    public static cfgAccountsProfilePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfilePartialUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).put<CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfilePartialUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/partial/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Update user profile\n     *\n     * Update the current authenticated user's profile information.\n     */\n    public static cfgAccountsProfileUpdatePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdatePartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdatePartialUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).patch<CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdatePartialUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/update/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Update user profile\n     *\n     * Update the current authenticated user's profile information.\n     */\n    public static cfgAccountsProfileUpdateUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdateUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfileUpdateUpdateResponses, CfgAccountsProfileUpdateUpdateErrors, ThrowOnError> {\n        return (options?.client ?? client).put<CfgAccountsProfileUpdateUpdateResponses, CfgAccountsProfileUpdateUpdateErrors, ThrowOnError>({\n            security: [{ scheme: 'bearer', type: 'http' }, {\n                    in: 'cookie',\n                    name: 'sessionid',\n                    type: 'apiKey'\n                }],\n            url: '/cfg/accounts/profile/update/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n}\n\nexport class CfgAccountsAuth {\n    /**\n     * Revoke a refresh token (logout).\n     *\n     * Blacklists the posted refresh token so it can never mint another access\n     * token. Called best-effort by the client's logout — without it, \"logout\"\n     * is purely client-side and a stolen refresh token survives until expiry.\n     */\n    public static cfgAccountsTokenBlacklistCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenBlacklistCreateData, ThrowOnError>): RequestResult<CfgAccountsTokenBlacklistCreateResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsTokenBlacklistCreateResponses, unknown, ThrowOnError>({\n            url: '/cfg/accounts/token/blacklist/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Refresh JWT token.\n     *\n     * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the\n     * rotated access/refresh in the response are re-stamped with the same `cnf`\n     * (stock SimpleJWT drops it from the derived access), and a matching DPoP\n     * proof is required on the refresh request — so a stolen refresh token can't\n     * be used to mint fresh tokens.\n     */\n    public static cfgAccountsTokenRefreshCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenRefreshCreateData, ThrowOnError>): RequestResult<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).post<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError>({\n            url: '/cfg/accounts/token/refresh/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgCentrifugo {\n    /**\n     * Get Centrifugo connection token\n     *\n     * Generate JWT token for WebSocket connection to Centrifugo. Token includes user's allowed channels based on their permissions. Requires authentication.\n     */\n    public static cfgCentrifugoAuthTokenRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgCentrifugoAuthTokenRetrieveData, ThrowOnError>): RequestResult<CfgCentrifugoAuthTokenRetrieveResponses, CfgCentrifugoAuthTokenRetrieveErrors, ThrowOnError> {\n        return (options?.client ?? client).get<CfgCentrifugoAuthTokenRetrieveResponses, CfgCentrifugoAuthTokenRetrieveErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/centrifugo/auth/token/',\n            ...options\n        });\n    }\n}\n\nexport class CfgTotpBackupCodes {\n    /**\n     * Get backup codes status for user.\n     */\n    public static cfgTotpBackupCodesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpBackupCodesRetrieveData, ThrowOnError>): RequestResult<CfgTotpBackupCodesRetrieveResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgTotpBackupCodesRetrieveResponses, unknown, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/backup-codes/',\n            ...options\n        });\n    }\n    \n    /**\n     * Regenerate backup codes.\n     *\n     * Requires TOTP code for verification.\n     * Invalidates all existing codes.\n     */\n    public static cfgTotpBackupCodesRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpBackupCodesRegenerateCreateData, ThrowOnError>): RequestResult<CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRegenerateCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRegenerateCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/backup-codes/regenerate/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgTotp {\n    /**\n     * List all TOTP devices for user.\n     */\n    public static cfgTotpDevicesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpDevicesRetrieveData, ThrowOnError>): RequestResult<CfgTotpDevicesRetrieveResponses, unknown, ThrowOnError> {\n        return (options?.client ?? client).get<CfgTotpDevicesRetrieveResponses, unknown, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/devices/',\n            ...options\n        });\n    }\n    \n    /**\n     * Delete a TOTP device.\n     *\n     * Requires verification code if removing the last/primary device.\n     */\n    public static cfgTotpDevicesDestroy<ThrowOnError extends boolean = false>(options: Options<CfgTotpDevicesDestroyData, ThrowOnError>): RequestResult<CfgTotpDevicesDestroyResponses, unknown, ThrowOnError> {\n        return (options.client ?? client).delete<CfgTotpDevicesDestroyResponses, unknown, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/devices/{id}/',\n            ...options\n        });\n    }\n    \n    /**\n     * Completely disable 2FA for account.\n     *\n     * Requires verification code.\n     */\n    public static cfgTotpDisableCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpDisableCreateData, ThrowOnError>): RequestResult<CfgTotpDisableCreateResponses, CfgTotpDisableCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpDisableCreateResponses, CfgTotpDisableCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/disable/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgTotpSetup {\n    /**\n     * Start 2FA setup process.\n     *\n     * Creates a new TOTP device and returns QR code for scanning.\n     */\n    public static cfgTotpSetupCreate<ThrowOnError extends boolean = false>(options?: Options<CfgTotpSetupCreateData, ThrowOnError>): RequestResult<CfgTotpSetupCreateResponses, CfgTotpSetupCreateErrors, ThrowOnError> {\n        return (options?.client ?? client).post<CfgTotpSetupCreateResponses, CfgTotpSetupCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/setup/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options?.headers\n            }\n        });\n    }\n    \n    /**\n     * Confirm 2FA setup with first valid code.\n     *\n     * Activates the device and generates backup codes.\n     */\n    public static cfgTotpSetupConfirmCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpSetupConfirmCreateData, ThrowOnError>): RequestResult<CfgTotpSetupConfirmCreateResponses, CfgTotpSetupConfirmCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpSetupConfirmCreateResponses, CfgTotpSetupConfirmCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/setup/confirm/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n\nexport class CfgTotpVerify {\n    /**\n     * Verify TOTP code for 2FA session.\n     *\n     * Completes authentication and returns JWT tokens on success.\n     */\n    public static cfgTotpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyCreateData, ThrowOnError>): RequestResult<CfgTotpVerifyCreateResponses, CfgTotpVerifyCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpVerifyCreateResponses, CfgTotpVerifyCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/verify/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n    \n    /**\n     * Verify backup recovery code for 2FA session.\n     *\n     * Alternative verification method when TOTP device unavailable.\n     */\n    public static cfgTotpVerifyBackupCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyBackupCreateData, ThrowOnError>): RequestResult<CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyBackupCreateErrors, ThrowOnError> {\n        return (options.client ?? client).post<CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyBackupCreateErrors, ThrowOnError>({\n            security: [\n                { name: 'X-API-Key', type: 'apiKey' },\n                { scheme: 'bearer', type: 'http' },\n                { name: 'Authorization', type: 'apiKey' }\n            ],\n            url: '/cfg/totp/verify/backup/',\n            ...options,\n            headers: {\n                'Content-Type': 'application/json',\n                ...options.headers\n            }\n        });\n    }\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Thin per-group proxy over the global `auth` store. All actual auth\n// wiring lives in `helpers/auth.ts` (one interceptor, one source of\n// truth). DO NOT EDIT — re-run `make gen`.\n\nimport { auth } from '../helpers/auth';\nimport { APILogger, type LoggerConfig } from '../helpers/logger';\n\nimport { CfgAccountsApiKey } from '../sdk.gen';\nimport { CfgAccountsOauth } from '../sdk.gen';\nimport { CfgAccounts } from '../sdk.gen';\nimport { CfgAccountsProfile } from '../sdk.gen';\nimport { CfgAccountsAuth } from '../sdk.gen';\n\n\n\nexport interface APIOptions {\n  /** Logger config (defaults to dev-only). */\n  logger?: Partial<LoggerConfig>;\n  /** Locale for `Accept-Language`. If omitted, auto-detected from cookie/navigator. */\n  locale?: string;\n  /** API key sent as `X-API-Key`. Falls back to NEXT_PUBLIC_API_KEY. */\n  apiKey?: string;\n  /** Send Django session/CSRF cookies cross-origin. Defaults to true. */\n  withCredentials?: boolean;\n}\n\n/**\n * Per-group ergonomic facade.\n *\n * Calling `setToken/setApiKey/setLocale/setBaseUrl` proxies to the\n * global `auth` store — the change applies to **every** group's API\n * instance because they share the same HTTP client and interceptor.\n *\n * Use the global `auth` object directly when you don't need a group\n * facade: `import { auth } from '@your/api'; auth.setToken(jwt);`\n */\nexport class API {\n  readonly logger: APILogger;\n\n  readonly cfgAccountsApiKey = CfgAccountsApiKey;\n  readonly cfgAccountsOauth = CfgAccountsOauth;\n  readonly cfgAccounts = CfgAccounts;\n  readonly cfgAccountsProfile = CfgAccountsProfile;\n  readonly cfgAccountsAuth = CfgAccountsAuth;\n\n  constructor(_baseUrl?: string, opts: APIOptions = {}) {\n    this.logger = new APILogger(opts.logger);\n    if (_baseUrl) auth.setBaseUrl(_baseUrl);\n    if (opts.locale !== undefined) auth.setLocale(opts.locale);\n    if (opts.apiKey !== undefined) auth.setApiKey(opts.apiKey);\n    if (opts.withCredentials !== undefined) auth.setWithCredentials(opts.withCredentials);\n  }\n\n  // ── Base URL ────────────────────────────────────────────────────────────\n  getBaseUrl(): string { return auth.getBaseUrl(); }\n  setBaseUrl(url: string): void { auth.setBaseUrl(url); }\n\n  // ── Tokens ──────────────────────────────────────────────────────────────\n  getToken(): string | null { return auth.getToken(); }\n  setToken(token: string | null): void { auth.setToken(token); }\n  getRefreshToken(): string | null { return auth.getRefreshToken(); }\n  setRefreshToken(token: string | null): void { auth.setRefreshToken(token); }\n  clearToken(): void { auth.clearTokens(); }\n  isAuthenticated(): boolean { return auth.isAuthenticated(); }\n\n  // ── Locale / API key ────────────────────────────────────────────────────\n  getLocale(): string | null { return auth.getLocale(); }\n  setLocale(locale: string | null): void { auth.setLocale(locale); }\n  getApiKey(): string | null { return auth.getApiKey(); }\n  setApiKey(key: string | null): void { auth.setApiKey(key); }\n\n  // ── 401 handling ────────────────────────────────────────────────────────\n  /** Fired only on terminal 401 (after refresh+retry path is exhausted). */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    auth.onUnauthorized(cb);\n  }\n  /** Provide a refresh strategy. See `auth.setRefreshHandler` for the contract. */\n  setRefreshHandler(\n    fn: ((refreshToken: string) => Promise<{ access: string; refresh?: string } | null>) | null,\n  ): void {\n    auth.setRefreshHandler(fn);\n  }\n  /**\n   * Proactively refresh now via the registered handler, sharing the single\n   * 401-recovery flight (rotation + dedup + rotated-token persistence).\n   * See `auth.refreshNow`.\n   */\n  refreshNow(): Promise<string | null> {\n    return auth.refreshNow();\n  }\n}\n\nexport { CfgAccountsApiKey, CfgAccountsOauth, CfgAccounts, CfgAccountsProfile, CfgAccountsAuth };\nexport { auth };\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Storage adapters for token persistence.\n// DO NOT EDIT — re-run `make gen`.\n\nexport interface StorageAdapter {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n  clear?(): void;\n}\n\n/** Browser localStorage. Falls back to no-op on SSR / private mode. */\nexport class LocalStorageAdapter implements StorageAdapter {\n  getItem(key: string): string | null {\n    if (typeof window === \"undefined\") return null;\n    try { return window.localStorage.getItem(key); } catch { return null; }\n  }\n  setItem(key: string, value: string): void {\n    if (typeof window === \"undefined\") return;\n    try { window.localStorage.setItem(key, value); } catch { /* quota / private */ }\n  }\n  removeItem(key: string): void {\n    if (typeof window === \"undefined\") return;\n    try { window.localStorage.removeItem(key); } catch { /* ignore */ }\n  }\n  clear(): void {\n    if (typeof window === \"undefined\") return;\n    try { window.localStorage.clear(); } catch { /* ignore */ }\n  }\n}\n\n/** In-memory store. Use for SSR, Electron main process, or tests. */\nexport class MemoryStorageAdapter implements StorageAdapter {\n  private store = new Map<string, string>();\n  getItem(key: string): string | null { return this.store.get(key) ?? null; }\n  setItem(key: string, value: string): void { this.store.set(key, value); }\n  removeItem(key: string): void { this.store.delete(key); }\n  clear(): void { this.store.clear(); }\n}\n\n/** Cookie-backed storage (browser only). */\nexport class CookieStorageAdapter implements StorageAdapter {\n  constructor(\n    private opts: {\n      domain?: string;\n      path?: string;\n      secure?: boolean;\n      sameSite?: \"Strict\" | \"Lax\" | \"None\";\n      maxAgeSeconds?: number;\n    } = {},\n  ) {}\n\n  getItem(key: string): string | null {\n    if (typeof document === \"undefined\") return null;\n    const prefix = `${encodeURIComponent(key)}=`;\n    for (const part of document.cookie.split(\"; \")) {\n      if (part.startsWith(prefix)) {\n        return decodeURIComponent(part.slice(prefix.length));\n      }\n    }\n    return null;\n  }\n\n  setItem(key: string, value: string): void {\n    if (typeof document === \"undefined\") return;\n    const parts = [\n      `${encodeURIComponent(key)}=${encodeURIComponent(value)}`,\n      `Path=${this.opts.path ?? \"/\"}`,\n    ];\n    if (this.opts.domain) parts.push(`Domain=${this.opts.domain}`);\n    if (this.opts.secure) parts.push(\"Secure\");\n    if (this.opts.sameSite) parts.push(`SameSite=${this.opts.sameSite}`);\n    if (this.opts.maxAgeSeconds != null) {\n      parts.push(`Max-Age=${this.opts.maxAgeSeconds}`);\n    }\n    document.cookie = parts.join(\"; \");\n  }\n\n  removeItem(key: string): void {\n    if (typeof document === \"undefined\") return;\n    document.cookie = `${encodeURIComponent(key)}=; Max-Age=0; Path=${this.opts.path ?? \"/\"}`;\n  }\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Browser CustomEvent integration for Zod validation errors.\n// DO NOT EDIT — re-run `make gen`.\n\nimport type { ZodError } from \"zod\";\n\nexport interface ValidationErrorDetail {\n  operation: string;\n  path: string;\n  method: string;\n  error: ZodError;\n  response: any;\n  timestamp: Date;\n}\n\nexport type ValidationErrorEvent = CustomEvent<ValidationErrorDetail>;\n\nexport function dispatchValidationError(detail: ValidationErrorDetail): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    const event = new CustomEvent<ValidationErrorDetail>(\"zod-validation-error\", {\n      detail,\n      bubbles: true,\n      cancelable: false,\n    });\n    window.dispatchEvent(event);\n  } catch (error) {\n    console.warn(\"Failed to dispatch validation error event:\", error);\n  }\n}\n\nexport function onValidationError(\n  callback: (detail: ValidationErrorDetail) => void,\n): () => void {\n  if (typeof window === \"undefined\") return () => {};\n  const handler = (event: Event) => {\n    if (event instanceof CustomEvent) callback(event.detail);\n  };\n  window.addEventListener(\"zod-validation-error\", handler);\n  return () => window.removeEventListener(\"zod-validation-error\", handler);\n}\n\nexport function formatZodError(error: ZodError): string {\n  const issues = error.issues.map((issue, index) => {\n    const path = issue.path.join(\".\") || \"root\";\n    const parts = [`${index + 1}. ${path}: ${issue.message}`];\n    if (\"expected\" in issue && issue.expected) parts.push(`   Expected: ${issue.expected}`);\n    if (\"received\" in issue && issue.received) parts.push(`   Received: ${issue.received}`);\n    return parts.join(\"\\n\");\n  });\n  return issues.join(\"\\n\");\n}\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Thin per-group proxy over the global `auth` store. All actual auth\n// wiring lives in `helpers/auth.ts` (one interceptor, one source of\n// truth). DO NOT EDIT — re-run `make gen`.\n\nimport { auth } from '../helpers/auth';\nimport { APILogger, type LoggerConfig } from '../helpers/logger';\n\nimport { CfgCentrifugo } from '../sdk.gen';\n\n\n\nexport interface APIOptions {\n  /** Logger config (defaults to dev-only). */\n  logger?: Partial<LoggerConfig>;\n  /** Locale for `Accept-Language`. If omitted, auto-detected from cookie/navigator. */\n  locale?: string;\n  /** API key sent as `X-API-Key`. Falls back to NEXT_PUBLIC_API_KEY. */\n  apiKey?: string;\n  /** Send Django session/CSRF cookies cross-origin. Defaults to true. */\n  withCredentials?: boolean;\n}\n\n/**\n * Per-group ergonomic facade.\n *\n * Calling `setToken/setApiKey/setLocale/setBaseUrl` proxies to the\n * global `auth` store — the change applies to **every** group's API\n * instance because they share the same HTTP client and interceptor.\n *\n * Use the global `auth` object directly when you don't need a group\n * facade: `import { auth } from '@your/api'; auth.setToken(jwt);`\n */\nexport class API {\n  readonly logger: APILogger;\n\n  readonly cfgCentrifugo = CfgCentrifugo;\n\n  constructor(_baseUrl?: string, opts: APIOptions = {}) {\n    this.logger = new APILogger(opts.logger);\n    if (_baseUrl) auth.setBaseUrl(_baseUrl);\n    if (opts.locale !== undefined) auth.setLocale(opts.locale);\n    if (opts.apiKey !== undefined) auth.setApiKey(opts.apiKey);\n    if (opts.withCredentials !== undefined) auth.setWithCredentials(opts.withCredentials);\n  }\n\n  // ── Base URL ────────────────────────────────────────────────────────────\n  getBaseUrl(): string { return auth.getBaseUrl(); }\n  setBaseUrl(url: string): void { auth.setBaseUrl(url); }\n\n  // ── Tokens ──────────────────────────────────────────────────────────────\n  getToken(): string | null { return auth.getToken(); }\n  setToken(token: string | null): void { auth.setToken(token); }\n  getRefreshToken(): string | null { return auth.getRefreshToken(); }\n  setRefreshToken(token: string | null): void { auth.setRefreshToken(token); }\n  clearToken(): void { auth.clearTokens(); }\n  isAuthenticated(): boolean { return auth.isAuthenticated(); }\n\n  // ── Locale / API key ────────────────────────────────────────────────────\n  getLocale(): string | null { return auth.getLocale(); }\n  setLocale(locale: string | null): void { auth.setLocale(locale); }\n  getApiKey(): string | null { return auth.getApiKey(); }\n  setApiKey(key: string | null): void { auth.setApiKey(key); }\n\n  // ── 401 handling ────────────────────────────────────────────────────────\n  /** Fired only on terminal 401 (after refresh+retry path is exhausted). */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    auth.onUnauthorized(cb);\n  }\n  /** Provide a refresh strategy. See `auth.setRefreshHandler` for the contract. */\n  setRefreshHandler(\n    fn: ((refreshToken: string) => Promise<{ access: string; refresh?: string } | null>) | null,\n  ): void {\n    auth.setRefreshHandler(fn);\n  }\n  /**\n   * Proactively refresh now via the registered handler, sharing the single\n   * 401-recovery flight (rotation + dedup + rotated-token persistence).\n   * See `auth.refreshNow`.\n   */\n  refreshNow(): Promise<string | null> {\n    return auth.refreshNow();\n  }\n}\n\nexport { CfgCentrifugo };\nexport { auth };\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Thin per-group proxy over the global `auth` store. All actual auth\n// wiring lives in `helpers/auth.ts` (one interceptor, one source of\n// truth). DO NOT EDIT — re-run `make gen`.\n\nimport { auth } from '../helpers/auth';\nimport { APILogger, type LoggerConfig } from '../helpers/logger';\n\nimport { CfgTotpBackupCodes } from '../sdk.gen';\nimport { CfgTotp } from '../sdk.gen';\nimport { CfgTotpSetup } from '../sdk.gen';\nimport { CfgTotpVerify } from '../sdk.gen';\n\n\n\nexport interface APIOptions {\n  /** Logger config (defaults to dev-only). */\n  logger?: Partial<LoggerConfig>;\n  /** Locale for `Accept-Language`. If omitted, auto-detected from cookie/navigator. */\n  locale?: string;\n  /** API key sent as `X-API-Key`. Falls back to NEXT_PUBLIC_API_KEY. */\n  apiKey?: string;\n  /** Send Django session/CSRF cookies cross-origin. Defaults to true. */\n  withCredentials?: boolean;\n}\n\n/**\n * Per-group ergonomic facade.\n *\n * Calling `setToken/setApiKey/setLocale/setBaseUrl` proxies to the\n * global `auth` store — the change applies to **every** group's API\n * instance because they share the same HTTP client and interceptor.\n *\n * Use the global `auth` object directly when you don't need a group\n * facade: `import { auth } from '@your/api'; auth.setToken(jwt);`\n */\nexport class API {\n  readonly logger: APILogger;\n\n  readonly cfgTotpBackupCodes = CfgTotpBackupCodes;\n  readonly cfgTotp = CfgTotp;\n  readonly cfgTotpSetup = CfgTotpSetup;\n  readonly cfgTotpVerify = CfgTotpVerify;\n\n  constructor(_baseUrl?: string, opts: APIOptions = {}) {\n    this.logger = new APILogger(opts.logger);\n    if (_baseUrl) auth.setBaseUrl(_baseUrl);\n    if (opts.locale !== undefined) auth.setLocale(opts.locale);\n    if (opts.apiKey !== undefined) auth.setApiKey(opts.apiKey);\n    if (opts.withCredentials !== undefined) auth.setWithCredentials(opts.withCredentials);\n  }\n\n  // ── Base URL ────────────────────────────────────────────────────────────\n  getBaseUrl(): string { return auth.getBaseUrl(); }\n  setBaseUrl(url: string): void { auth.setBaseUrl(url); }\n\n  // ── Tokens ──────────────────────────────────────────────────────────────\n  getToken(): string | null { return auth.getToken(); }\n  setToken(token: string | null): void { auth.setToken(token); }\n  getRefreshToken(): string | null { return auth.getRefreshToken(); }\n  setRefreshToken(token: string | null): void { auth.setRefreshToken(token); }\n  clearToken(): void { auth.clearTokens(); }\n  isAuthenticated(): boolean { return auth.isAuthenticated(); }\n\n  // ── Locale / API key ────────────────────────────────────────────────────\n  getLocale(): string | null { return auth.getLocale(); }\n  setLocale(locale: string | null): void { auth.setLocale(locale); }\n  getApiKey(): string | null { return auth.getApiKey(); }\n  setApiKey(key: string | null): void { auth.setApiKey(key); }\n\n  // ── 401 handling ────────────────────────────────────────────────────────\n  /** Fired only on terminal 401 (after refresh+retry path is exhausted). */\n  onUnauthorized(cb: ((response: Response) => void) | null): void {\n    auth.onUnauthorized(cb);\n  }\n  /** Provide a refresh strategy. See `auth.setRefreshHandler` for the contract. */\n  setRefreshHandler(\n    fn: ((refreshToken: string) => Promise<{ access: string; refresh?: string } | null>) | null,\n  ): void {\n    auth.setRefreshHandler(fn);\n  }\n  /**\n   * Proactively refresh now via the registered handler, sharing the single\n   * 401-recovery flight (rotation + dedup + rotated-token persistence).\n   * See `auth.refreshNow`.\n   */\n  refreshNow(): Promise<string | null> {\n    return auth.refreshNow();\n  }\n}\n\nexport { CfgTotpBackupCodes, CfgTotp, CfgTotpSetup, CfgTotpVerify };\nexport { auth };\n","// AUTO-GENERATED by django_generator / ts_extras.wrapper\n// Top-level barrel — global `auth` + per-group facades.\n// DO NOT EDIT — re-run `make gen`.\n\n// Side-effect: ensure auth interceptor is installed even if consumers\n// only ever import this barrel (it'll also load via client.gen.ts).\nimport './helpers/auth';\n\n// Global auth/config store — single source of truth.\nexport { auth, type Auth } from './helpers/auth';\n\nimport { API as CfgAccountsAPI } from './_cfg_accounts';\nimport { API as CfgCentrifugoAPI } from './_cfg_centrifugo';\nimport { API as CfgTotpAPI } from './_cfg_totp';\n\n// Singletons for ergonomic access (`import { apiAccounts } from '@your/api'`).\n// All instances share the same global `auth` store.\nexport const CfgAccountsApi = new CfgAccountsAPI();\nexport const CfgCentrifugoApi = new CfgCentrifugoAPI();\nexport const CfgTotpApi = new CfgTotpAPI();\n\n// Per-group wrapper classes (e.g. for tests / SSR isolation of options).\nexport { API as CfgAccountsAPI } from './_cfg_accounts';\nexport { API as CfgCentrifugoAPI } from './_cfg_centrifugo';\nexport { API as CfgTotpAPI } from './_cfg_totp';\n\n// Hey API SDK classes — one per OpenAPI tag. Lets consumers call\n// `Centrifugo.cfgCentrifugoAuthTokenRetrieve({...})` directly.\n//\n// NOTE: classes whose name would collide with a barrel-level type\n// alias (e.g. `Auth`, which is also `type Auth = typeof auth`) are\n// re-exported under a `*SDK` suffix here. The original name is still\n// available via the per-group import: `import { Auth } from\n// '<api>/_auth'`. To remove the alias, rename the OpenAPI tag on the\n// backend so the SDK class doesn't collide.\nexport { CfgAccountsApiKey, CfgAccountsOauth, CfgAccounts, CfgAccountsProfile, CfgAccountsAuth } from './_cfg_accounts';\nexport { CfgCentrifugo } from './_cfg_centrifugo';\nexport { CfgTotpBackupCodes, CfgTotp, CfgTotpSetup, CfgTotpVerify } from './_cfg_totp';\n\n// Generated DTO / schema types (Hey API). The per-group barrels each\n// re-export these too; surfacing them at the top level lets consumers\n// `import { FleetSummary } from '<api>'` without reaching into a\n// group subpath.\nexport type * from './types.gen';\n\n// Shared utilities (errors, storage adapters, logger).\nexport * from './helpers';\n","export const isDev = process.env.NODE_ENV === 'development';\nexport const isProd = !isDev;\nexport const isBrowser = typeof window !== 'undefined';\n\n/**\n * Next.js static-export build (`output: 'export'`). Loggers treat it like dev\n * for visibility; some auth/SSR features behave differently under it.\n */\nexport const isStaticBuild = process.env.NEXT_PUBLIC_STATIC_BUILD === 'true';\n\n/**\n * DPoP (RFC 9449) sender-constrained tokens are enabled for this app.\n *\n * Set by `createBaseNextConfig({ dpop: true })` (inlines\n * `NEXT_PUBLIC_DPOP_ENABLED='true'`). When true: tokens are bound to a\n * non-extractable in-browser key, a copied Bearer token can't be replayed, and\n * the API client signs a per-request DPoP proof. This flag lives in\n * `@djangocfg/api` — the package that implements DPoP — so it is the single\n * source of truth, importable by every higher-level package.\n */\nexport const dpopEnabled = process.env.NEXT_PUBLIC_DPOP_ENABLED === 'true';\n","/**\n * Global runtime log-level control.\n *\n * One mutable level that every `@djangocfg/*` consola wrapper reads, so the\n * whole app's console verbosity can be changed at runtime (e.g. raised for an\n * admin, kept silent for a regular user in production) WITHOUT each package\n * hardcoding `isDev ? 4 : 1`.\n *\n * Lives in `@djangocfg/api` because it's the lowest shared package — api,\n * layouts, centrifugo, ui-core consumers can all import it without a cycle.\n *\n * consola levels: 0 silent · 1 error · 2 warn · 3 info · 4 debug · 5 trace.\n *\n * Default policy (before anyone calls setLogLevel):\n *   - dev / static build → 4 (debug)\n *   - production         → 1 (errors only)\n * App bootstrap should call `applyRoleLogPolicy({ isAdmin, isDev })` once auth\n * is known to raise verbosity for staff/superusers even in production.\n */\n\nimport { isDev, isStaticBuild } from './auth/utils/env';\n\nexport type ConsolaLevel = 0 | 1 | 2 | 3 | 4 | 5;\n\n/** Dev or a static export → show verbose logs by default. */\nconst verboseByDefault = isDev || isStaticBuild;\n\nconst DEFAULT_LEVEL: ConsolaLevel = verboseByDefault ? 4 : 1;\n\nlet _level: ConsolaLevel = DEFAULT_LEVEL;\n\n/** Subscribers (the wrapper loggers) notified when the level changes. */\nconst _subscribers = new Set<(level: ConsolaLevel) => void>();\n\n/** Current global log level. Wrappers read this when constructing/refreshing. */\nexport function getLogLevel(): ConsolaLevel {\n  return _level;\n}\n\n/** Set the global log level and notify all live loggers. */\nexport function setLogLevel(level: ConsolaLevel): void {\n  _level = level;\n  for (const fn of _subscribers) {\n    try {\n      fn(level);\n    } catch {\n      /* a bad subscriber must not break logging */\n    }\n  }\n}\n\n/**\n * Subscribe to level changes. Returns an unsubscribe fn. The callback fires\n * immediately with the current level so a logger can sync on registration.\n */\nexport function onLogLevelChange(fn: (level: ConsolaLevel) => void): () => void {\n  _subscribers.add(fn);\n  try {\n    fn(_level);\n  } catch {\n    /* ignore */\n  }\n  return () => _subscribers.delete(fn);\n}\n\n/**\n * Apply the role-aware policy. Call once at bootstrap and whenever auth changes.\n *\n *   - admin (is_staff / is_superuser): full verbosity (debug) everywhere, even\n *     in production — so support/devs can diagnose live without a redeploy.\n *   - dev (non-admin): debug.\n *   - production regular user: errors only — a clean console, like big SaaS apps.\n */\nexport function applyRoleLogPolicy(opts: { isAdmin: boolean; isDev?: boolean }): void {\n  const devMode = opts.isDev ?? verboseByDefault;\n  if (opts.isAdmin || devMode) {\n    setLogLevel(4);\n  } else {\n    setLogLevel(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAAAA;AAAA,EAAA;AAAA;AAAA,oBAAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAAC;AAAA,EAAA;AAAA;AAAA,mBAAAC;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACOO,IAAM,WAAN,cAAuB,MAAM;AAAA,EAClC,YACS,YACA,YACA,UACA,KACP,SACA;AACA,UAAM,WAAW,QAAQ,UAAU,KAAK,UAAU,EAAE;AAN7C;AACA;AACA;AACA;AAIP,SAAK,OAAO;AAAA,EACd;AAAA,EAjBF,OAOoC;AAAA;AAAA;AAAA,EAYlC,IAAI,UAAsC;AACxC,QAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,MAAM;AAC/D,aAAO,KAAK;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,cAA+C;AACjD,UAAM,UAAU,KAAK;AACrB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,cAAwC,CAAC;AAC/C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,UAAI,MAAM,QAAQ,KAAK,EAAG,aAAY,GAAG,IAAI;AAAA,IAC/C;AACA,WAAO,OAAO,KAAK,WAAW,EAAE,SAAS,IAAI,cAAc;AAAA,EAC7D;AAAA,EAEA,IAAI,eAAuB;AACzB,UAAM,UAAU,KAAK;AACrB,QAAI,CAAC,QAAS,QAAO,KAAK;AAC1B,QAAI,QAAQ,QAAQ;AAClB,aAAO,MAAM,QAAQ,QAAQ,MAAM,IAAI,QAAQ,OAAO,KAAK,IAAI,IAAI,OAAO,QAAQ,MAAM;AAAA,IAC1F;AACA,QAAI,QAAQ,MAAO,QAAO,OAAO,QAAQ,KAAK;AAC9C,QAAI,QAAQ,QAAS,QAAO,OAAO,QAAQ,OAAO;AAClD,UAAM,cAAc,KAAK;AACzB,QAAI,aAAa;AACf,YAAM,aAAa,OAAO,KAAK,WAAW,EAAE,CAAC;AAC7C,UAAI,WAAY,QAAO,GAAG,UAAU,KAAK,YAAY,UAAU,GAAG,KAAK,IAAI,CAAC;AAAA,IAC9E;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,oBAA6B;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EACnE,IAAI,cAAuB;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EAC7D,IAAI,oBAA6B;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EACnE,IAAI,kBAA2B;AAAE,WAAO,KAAK,eAAe;AAAA,EAAK;AAAA,EACjE,IAAI,gBAAyB;AAAE,WAAO,KAAK,cAAc,OAAO,KAAK,aAAa;AAAA,EAAK;AACzF;AAGO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACE,SACO,KACA,eACP;AACA,UAAM,OAAO;AAHN;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AAAA,EApEF,OA4DwC;AAAA;AAAA;AASxC;;;AC7DA,IAAM,aAAa;AACnB,IAAM,cAAc;AACpB,IAAM,cAAc;AAEpB,IAAM,YAAY,OAAO,WAAW;AAWpC,IAAM,sBAA+B;AAAA,EACnC,IAAI,KAAK;AACP,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI;AAAE,aAAO,OAAO,aAAa,QAAQ,GAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EACxE;AAAA,EACA,IAAI,KAAK,OAAO;AACd,QAAI,CAAC,UAAW;AAChB,QAAI;AACF,UAAI,UAAU,KAAM,QAAO,aAAa,WAAW,GAAG;AAAA,UACjD,QAAO,aAAa,QAAQ,KAAK,KAAK;AAAA,IAC7C,QAAQ;AAAA,IAAC;AAAA,EACX;AACF;AAGA,IAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,IAAM,gBAAyB;AAAA,EAC7B,IAAI,KAAK;AACP,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI;AACF,YAAM,KAAK,IAAI,OAAO,cAAc,mBAAmB,GAAG,CAAC,UAAU;AACrE,YAAM,IAAI,SAAS,OAAO,MAAM,EAAE;AAClC,aAAO,IAAI,mBAAmB,EAAE,CAAC,CAAC,IAAI;AAAA,IACxC,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EACzB;AAAA,EACA,IAAI,KAAK,OAAO;AACd,QAAI,CAAC,UAAW;AAChB,QAAI;AACF,YAAM,IAAI,mBAAmB,GAAG;AAChC,YAAM,SAAS,OAAO,SAAS,aAAa,WAAW,aAAa;AACpE,UAAI,UAAU,MAAM;AAClB,iBAAS,SAAS,GAAG,CAAC,qCAAqC,MAAM;AAAA,MACnE,OAAO;AACL,cAAM,IAAI,mBAAmB,KAAK;AAClC,iBAAS,SAAS,GAAG,CAAC,IAAI,CAAC,qBAAqB,cAAc,iBAAiB,MAAM;AAAA,MACvF;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACF;AAEA,IAAI,WAAoB;AACxB,IAAI,eAA4B;AAGhC,SAAS,eAA8B;AACrC,MAAI;AACF,QAAI,OAAO,aAAa,aAAa;AACnC,YAAM,IAAI,SAAS,OAAO,MAAM,+BAA+B;AAC/D,UAAI,EAAG,QAAO,mBAAmB,EAAE,CAAC,CAAC;AAAA,IACvC;AACA,QAAI,OAAO,cAAc,eAAe,UAAU,UAAU;AAC1D,aAAO,UAAU;AAAA,IACnB;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AAXS;AAuBT,SAAS,iBAAyB;AAChC,MAAI,OAAO,WAAW,aAAa;AACjC,QAAI;AACF,UAAI,OAAO,YAAY,eAAe,QAAQ,KAAK;AACjD,YAAI,QAAQ,IAAI,6BAA6B,OAAQ,QAAO;AAG5D,YAAI,QAAQ,IAAI,8BAA8B;AAC5C,iBAAO,QAAQ,IAAI;AACrB,eAAO,QAAQ,IAAI,uBAAuB;AAAA,MAC5C;AAAA,IACF,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,OAAO,YAAY,eAAe,QAAQ,KAAK;AACjD,UAAI,QAAQ,IAAI,6BAA6B,OAAQ,QAAO;AAC5D,aAAO,QAAQ,IAAI,uBAAuB;AAAA,IAC5C;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AArBS;AA6BT,SAAS,gBAA+B;AACtC,MAAI;AACF,QAAI,OAAO,YAAY,eAAe,QAAQ,KAAK,qBAAqB;AACtE,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;AAPS;AAUT,IAAI,kBAAiC;AACrC,IAAI,kBAAiC;AACrC,IAAI,mBAAkC;AACtC,IAAI,mBAAmB;AACvB,IAAI,kBAAyD;AAS7D,IAAI,kBAAyC;AAG7C,IAAI,mBAAkD;AAGtD,IAAM,eAAe;AAoBrB,SAAS,SAAS,OAA8B;AAC9C,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,OAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,CAAC;AAC3E,WAAO,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM,MAAO;AAAA,EAC1D,QAAQ;AAAE,WAAO;AAAA,EAAM;AACzB;AAPS;AAST,SAAS,kBAAmC;AAC1C,QAAM,SAAS,SAAS,IAAI,UAAU;AACtC,QAAM,UAAU,SAAS,IAAI,WAAW;AACxC,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,YAAY,SAAS,SAAS,MAAM,IAAI;AAC9C,QAAM,cAAc,WAAW,SAAS,cAAc,QAAQ,YAAY;AAC1E,QAAM,aAAa,UAAU,SAAS,OAAO,IAAI;AACjD,QAAM,eAAe,YAAY,SAAS,eAAe,QAAQ,aAAa;AAC9E,SAAO;AAAA,IACL,QAAQ,eAAe,eAAe,kBAAkB;AAAA,IACxD,iBAAiB;AAAA,EACnB;AACF;AAZS;AAeT,IAAM,kBAAmC,EAAE,QAAQ,aAAa,iBAAiB,KAAK;AAMtF,IAAM,qBAAqB,oBAAoB,UAAU;AAEzD,IAAI,YAA6B,gBAAgB;AACjD,IAAM,oBAAoB,oBAAI,IAAgB;AAC9C,IAAI,eAAqD;AACzD,IAAI,4BAA4B;AAGhC,SAAS,qBAA2B;AAClC,MAAI,CAAC,UAAW;AAChB,MAAI,iBAAiB,MAAM;AAAE,iBAAa,YAAY;AAAG,mBAAe;AAAA,EAAM;AAC9E,MAAI,kBAAkB,SAAS,EAAG;AAClC,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAiB,CAAC;AACxB,QAAM,SAAS,SAAS,IAAI,UAAU;AACtC,QAAM,UAAU,SAAS,IAAI,WAAW;AACxC,QAAM,YAAY,SAAS,SAAS,MAAM,IAAI;AAC9C,QAAM,aAAa,UAAU,SAAS,OAAO,IAAI;AACjD,MAAI,cAAc,QAAQ,YAAY,IAAK,MAAK,KAAK,SAAS;AAC9D,MAAI,eAAe,QAAQ,aAAa,IAAK,MAAK,KAAK,UAAU;AACjE,MAAI,CAAC,KAAK,OAAQ;AAGlB,QAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,MAAM,KAAK,UAAU;AAChE,iBAAe,WAAW,sBAAsB,KAAK;AACvD;AAjBS;AAoBT,SAAS,uBAA6B;AACpC,QAAM,OAAO,gBAAgB;AAC7B,QAAM,UACJ,KAAK,WAAW,UAAU,UAC1B,KAAK,oBAAoB,UAAU;AACrC,MAAI,QAAS,aAAY;AACzB,qBAAmB;AACnB,MAAI,CAAC,QAAS;AACd,aAAW,YAAY,MAAM,KAAK,iBAAiB,GAAG;AACpD,QAAI;AAAE,eAAS;AAAA,IAAG,QAAQ;AAAA,IAAC;AAAA,EAC7B;AAIA,MAAI,WAAW;AACb,QAAI;AAAE,aAAO,cAAc,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAAG,QAAQ;AAAA,IAAC;AAAA,EACtE;AACF;AAjBS;AAsBT,SAAS,oBAA0B;AACjC,MAAI,CAAC,aAAa,0BAA2B;AAC7C,8BAA4B;AAC5B,SAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,QAAI,EAAE,QAAQ,QAAQ,EAAE,QAAQ,cAAc,EAAE,QAAQ,aAAa;AACnE,2BAAqB;AAAA,IACvB;AAAA,EACF,CAAC;AACD,SAAO,iBAAiB,oBAAoB,MAAM,qBAAqB,CAAC;AAC1E;AATS;AAiBT,IAAM,0BAA0B,oBAAI,IAA2B;AAiB/D,IAAI,UAA4B;AAEhC,SAAS,mBAAyB;AAChC,MAAI,CAAC,QAAS;AACd,UAAQ,UAAU;AAAA,IAChB,SAAS,KAAK,WAAW;AAAA,IACzB,aAAa,mBAAmB,YAAY;AAAA,EAC9C,CAAC;AACH;AANS;AAsBF,IAAM,OAAO;AAAA;AAAA,EAElB,iBAA8B;AAAE,WAAO;AAAA,EAAc;AAAA,EACrD,eAAe,MAAyB;AACtC,mBAAe;AACf,eAAW,SAAS,WAAW,gBAAgB;AAC/C,yBAAqB;AAAA,EACvB;AAAA;AAAA,EAGA,WAA0B;AAAE,WAAO,SAAS,IAAI,UAAU;AAAA,EAAG;AAAA,EAC7D,SAAS,OAA4B;AACnC,aAAS,IAAI,YAAY,KAAK;AAC9B,yBAAqB;AAAA,EACvB;AAAA,EACA,kBAAiC;AAAE,WAAO,SAAS,IAAI,WAAW;AAAA,EAAG;AAAA,EACrE,gBAAgB,OAA4B;AAC1C,aAAS,IAAI,aAAa,KAAK;AAC/B,yBAAqB;AAAA,EACvB;AAAA,EACA,cAAoB;AAClB,aAAS,IAAI,YAAY,IAAI;AAC7B,aAAS,IAAI,aAAa,IAAI;AAC9B,yBAAqB;AAAA,EACvB;AAAA;AAAA;AAAA,EAGA,kBAA2B;AAAE,WAAO,gBAAgB,EAAE,WAAW;AAAA,EAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlF,WAAW,QAA2D;AACpE,aAAS,IAAI,YAAY,OAAO,MAAM;AACtC,QAAI,OAAO,YAAY,OAAW,UAAS,IAAI,aAAa,OAAO,OAAO;AAC1E,yBAAqB;AAAA,EACvB;AAAA,EACA,eAAqB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU3C,cAA+B;AAAE,WAAO;AAAA,EAAW;AAAA,EACnD,oBAAqC;AAAE,WAAO;AAAA,EAAiB;AAAA,EAC/D,UAAU,UAAkC;AAC1C,sBAAkB;AAClB,sBAAkB,IAAI,QAAQ;AAE9B,yBAAqB;AACrB,WAAO,MAAM;AACX,wBAAkB,OAAO,QAAQ;AACjC,UAAI,kBAAkB,SAAS,KAAK,iBAAiB,MAAM;AACzD,qBAAa,YAAY;AACzB,uBAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,iBAAiB,IAAuC;AACtD,4BAAwB,IAAI,EAAE;AAC9B,WAAO,MAAM;AAAE,8BAAwB,OAAO,EAAE;AAAA,IAAG;AAAA,EACrD;AAAA;AAAA,EAGA,YAA2B;AACzB,WAAO,mBAAmB,SAAS,IAAI,WAAW,KAAK,cAAc;AAAA,EACvE;AAAA,EACA,UAAU,KAA0B;AAAE,sBAAkB;AAAA,EAAK;AAAA,EAC7D,iBAAiB,KAA0B;AACzC,sBAAkB;AAClB,aAAS,IAAI,aAAa,GAAG;AAAA,EAC/B;AAAA,EACA,cAAoB;AAAE,sBAAkB;AAAM,aAAS,IAAI,aAAa,IAAI;AAAA,EAAG;AAAA;AAAA,EAG/E,YAA2B;AAAE,WAAO,mBAAmB,aAAa;AAAA,EAAG;AAAA,EACvE,UAAU,QAA6B;AAAE,sBAAkB;AAAA,EAAQ;AAAA;AAAA,EAGnE,aAAqB;AACnB,UAAM,MAAO,oBAAoB,eAAe;AAChD,WAAO,IAAI,QAAQ,OAAO,EAAE;AAAA,EAC9B;AAAA,EACA,WAAW,KAA0B;AACnC,uBAAmB,MAAM,IAAI,QAAQ,OAAO,EAAE,IAAI;AAClD,qBAAiB;AAAA,EACnB;AAAA;AAAA,EAGA,qBAA8B;AAAE,WAAO;AAAA,EAAkB;AAAA,EACzD,mBAAmB,OAAsB;AACvC,uBAAmB;AACnB,qBAAiB;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,eAAe,IAAiD;AAC9D,sBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,kBAAkB,IAAiC;AACjD,sBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAqC;AACnC,WAAO,WAAW;AAAA,EACpB;AACF;AAsBA,eAAe,aAAqC;AAClD,MAAI,iBAAkB,QAAO;AAC7B,MAAI,CAAC,gBAAiB,QAAO;AAK7B,QAAM,aAAa,mCAAoC;AACrD,UAAM,UAAU,KAAK,gBAAgB;AACrC,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,SAAS,MAAM,gBAAiB,OAAO;AAC7C,QAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAK,SAAS,OAAO,MAAM;AAC3B,QAAI,OAAO,QAAS,MAAK,gBAAgB,OAAO,OAAO;AACvD,WAAO,OAAO;AAAA,EAChB,GARmB;AAUnB,sBAAoB,YAAY;AAC9B,QAAI;AAEF,YAAM,QACJ,OAAO,cAAc,cAChB,UAAkD,QACnD;AACN,UAAI,OAAO,SAAS;AAClB,eAAO,MAAM,MAAM,QAAQ,GAAG,WAAW,YAAY,UAAU;AAAA,MACjE;AACA,aAAO,MAAM,WAAW;AAAA,IAC1B,QAAQ;AACN,aAAO;AAAA,IACT,UAAE;AACA,yBAAmB;AAAA,IACrB;AAAA,EACF,GAAG;AAEH,SAAO;AACT;AApCe;AA6Cf,SAAS,cAAc,UAA0B;AAC/C,OAAK,YAAY;AACjB,aAAW,MAAM,MAAM,KAAK,uBAAuB,GAAG;AACpD,QAAI;AAAE,SAAG,QAAQ;AAAA,IAAG,QAAQ;AAAA,IAAC;AAAA,EAC/B;AACA,MAAI,iBAAiB;AACnB,QAAI;AAAE,sBAAgB,QAAQ;AAAA,IAAG,QAAQ;AAAA,IAAC;AAAA,EAC5C;AACF;AARS;AA8DT,SAAS,cAAuB;AAC9B,MAAI;AACF,WAAO,OAAO,YAAY,eACrB,QAAQ,KAAK,6BAA6B;AAAA,EACjD,QAAQ;AAAE,WAAO;AAAA,EAAO;AAC1B;AALS;AAOT,IAAM,WAAW;AACjB,IAAM,cAAc;AACpB,IAAM,eAAe;AAErB,SAAS,WAAiC;AACxC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,MAAM,UAAU,KAAK,UAAU,CAAC;AACtC,QAAI,kBAAkB,MAAM,IAAI,OAAO,kBAAkB,WAAW;AACpE,QAAI,YAAY,MAAM,QAAQ,IAAI,MAAM;AACxC,QAAI,UAAU,MAAM,OAAO,IAAI,KAAK;AAAA,EACtC,CAAC;AACH;AAPS;AAST,SAAS,QAAQ,KAAiD;AAChE,SAAO,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC9D,UAAM,KAAK,GAAG,YAAY,aAAa,UAAU;AACjD,UAAM,MAAM,GAAG,YAAY,WAAW,EAAE,IAAI,GAAG;AAC/C,QAAI,YAAY,MAAM,QAAQ,IAAI,MAAM;AACxC,QAAI,UAAU,MAAM,OAAO,IAAI,KAAK;AAAA,EACtC,CAAC,CAAC;AACJ;AAPS;AAST,SAAS,QAAQ,KAAa,OAAqC;AACjE,SAAO,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC9D,UAAM,KAAK,GAAG,YAAY,aAAa,WAAW;AAClD,OAAG,YAAY,WAAW,EAAE,IAAI,OAAO,GAAG;AAC1C,OAAG,aAAa,MAAM,QAAQ;AAC9B,OAAG,UAAU,MAAM,OAAO,GAAG,KAAK;AAAA,EACpC,CAAC,CAAC;AACJ;AAPS;AAUT,IAAI,kBAAiD;AAErD,SAAS,kBAA0C;AACjD,MAAI,gBAAiB,QAAO;AAC5B,qBAAmB,YAAY;AAC7B,UAAM,WAAW,MAAM,QAAQ,YAAY,EAAE,MAAM,MAAM,MAAS;AAClE,QAAI,SAAU,QAAO;AACrB,UAAM,OAAO,MAAM,OAAO,OAAO;AAAA,MAC/B,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,MACrC;AAAA;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAGA,UAAM,QAAQ,cAAc,IAAI,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAChD,WAAO;AAAA,EACT,GAAG;AACH,SAAO;AACT;AAhBS;AAkBT,SAAS,iBAAiB,OAAyC;AACjE,QAAM,MAAM,iBAAiB,aAAa,QAAQ,IAAI,WAAW,KAAK;AACtE,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,MAAK,OAAO,aAAa,IAAI,CAAC,CAAC;AACpE,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;AALS;AAOT,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,iBAAiB,IAAI,YAAY,EAAE,OAAO,GAAG,CAAC;AACvD;AAFS;AAKT,eAAe,WAAW,KAAiD;AACzE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AAEpD,SAAO,EAAE,KAAK,MAAM,KAAK,SAAS,GAAG,IAAI,GAAa,GAAG,IAAI,EAAY;AAC3E;AAJe;AAOf,eAAe,eAAe,QAAgB,KAAqC;AACjF,MAAI;AACF,UAAM,OAAO,MAAM,gBAAgB;AACnC,UAAM,MAAM,MAAM,WAAW,KAAK,SAAS;AAC3C,UAAM,SAAS,EAAE,KAAK,YAAY,KAAK,SAAS,IAAI;AAEpD,UAAM,MAAM,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC;AAC1C,UAAM,MACH,OAAO,cAAc,OAAO,WAAW,KACxC,iBAAiB,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC;AAC7D,UAAM,UAAU,EAAE,KAAK,OAAO,YAAY,GAAG,KAAK,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAAG,IAAI;AAC1F,UAAM,eACJ,GAAG,kBAAkB,KAAK,UAAU,MAAM,CAAC,CAAC,IAAI,kBAAkB,KAAK,UAAU,OAAO,CAAC,CAAC;AAC5F,UAAM,MAAM,MAAM,OAAO,OAAO;AAAA,MAC9B,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,MACjC,KAAK;AAAA,MACL,IAAI,YAAY,EAAE,OAAO,YAAY;AAAA,IACvC;AACA,WAAO,GAAG,YAAY,IAAI,iBAAiB,GAAG,CAAC;AAAA,EACjD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAtBe;AAwBR,SAAS,oBAAoBC,SAAyB;AAC3D,MAAI,QAAS;AACb,YAAUA;AAEV,EAAAA,QAAO,UAAU;AAAA,IACf,SAAS,KAAK,WAAW;AAAA,IACzB,aAAa,mBAAmB,YAAY;AAAA,EAC9C,CAAC;AAED,EAAAA,QAAO,aAAa,QAAQ,IAAI,OAAO,YAAY;AACjD,UAAM,QAAQ,KAAK,SAAS;AAC5B,QAAI,MAAO,SAAQ,QAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAEjE,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI,OAAQ,SAAQ,QAAQ,IAAI,mBAAmB,MAAM;AAIzD,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI,UAAU,CAAC,QAAQ,QAAQ,IAAI,WAAW,EAAG,SAAQ,QAAQ,IAAI,aAAa,MAAM;AAExF,QAAI;AACF,YAAM,KAAK,KAAK,eAAe,EAAE,gBAAgB,EAAE;AACnD,UAAI,GAAI,SAAQ,QAAQ,IAAI,cAAc,EAAE;AAAA,IAC9C,QAAQ;AAAA,IAAC;AACT,YAAQ,QAAQ,IAAI,kBAAiB,oBAAI,KAAK,GAAE,YAAY,CAAC;AAI7D,QAAI,YAAY,KAAK,OAAO,WAAW,aAAa;AAClD,YAAM,QAAQ,MAAM,eAAe,QAAQ,QAAQ,QAAQ,GAAG;AAC9D,UAAI,MAAO,SAAQ,QAAQ,IAAI,QAAQ,KAAK;AAAA,IAC9C;AAEA,WAAO;AAAA,EACT,CAAC;AAED,EAAAA,QAAO,aAAa,MAAM,IAAI,CAAC,KAAK,KAAK,QAAQ;AAC/C,QAAI,eAAe,SAAU,QAAO;AACpC,UAAM,MAAO,KAA6B,OAAO;AACjD,UAAM,SAAU,KAA8B,UAAU;AACxD,UAAM,aAAc,KAA8B,cAAc;AAChE,WAAO,IAAI,SAAS,QAAQ,YAAY,KAAK,GAAG;AAAA,EAClD,CAAC;AAGD,EAAAA,QAAO,aAAa,SAAS,IAAI,OAAO,UAAU,YAAY;AAC5D,QAAI,SAAS,WAAW,IAAK,QAAO;AAGpC,QAAI,QAAQ,QAAQ,IAAI,YAAY,GAAG;AACrC,oBAAc,QAAQ;AACtB,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,MAAM,WAAW;AAClC,QAAI,CAAC,UAAU;AACb,oBAAc,QAAQ;AACtB,aAAO;AAAA,IACT;AAKA,UAAM,QAAQ,QAAQ,MAAM;AAC5B,UAAM,QAAQ,IAAI,iBAAiB,UAAU,QAAQ,EAAE;AACvD,UAAM,QAAQ,IAAI,cAAc,GAAG;AAGnC,QAAI,YAAY,KAAK,OAAO,WAAW,aAAa;AAClD,YAAM,QAAQ,MAAM,eAAe,MAAM,QAAQ,MAAM,GAAG;AAC1D,UAAI,MAAO,OAAM,QAAQ,IAAI,QAAQ,KAAK;AAAA,IAC5C;AACA,QAAI;AACF,YAAM,UAAU,MAAM,MAAM,KAAK;AACjC,UAAI,QAAQ,WAAW,IAAK,eAAc,OAAO;AACjD,aAAO;AAAA,IACT,QAAQ;AAIN,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACH;AApFgB;AAiGhB,IAAM,mBAAmB;AAEzB,KAAK,kBAAkB,OAAO,YAAY;AACxC,MAAI;AACF,UAAM,MAAM,GAAG,KAAK,WAAW,CAAC,GAAG,gBAAgB;AACnD,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAE7E,QAAI,YAAY,KAAK,OAAO,WAAW,aAAa;AAClD,YAAM,QAAQ,MAAM,eAAe,QAAQ,GAAG;AAC9C,UAAI,MAAO,SAAQ,MAAM,IAAI;AAAA,IAC/B;AACA,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR;AAAA,MACA,aAAa,KAAK,mBAAmB,IAAI,YAAY;AAAA,MACrD,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,IAClC,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,MAAM,SACT,EAAE,QAAQ,KAAK,QAAQ,SAAS,KAAK,WAAW,QAAQ,IACxD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF,CAAC;;;ACtyBD,qBAAoD;AAoCpD,IAAM,iBAA+B;AAAA,EACnC,SAAS,OAAO,YAAY,eAAe,yBAA0B;AAAA,EACrE,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX,WAAW;AAAA,EACX,YAAY;AACd;AAEA,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,YAAN,MAAgB;AAAA,EA1DvB,OA0DuB;AAAA;AAAA;AAAA,EACb;AAAA,EACA;AAAA,EAER,YAAY,SAAgC,CAAC,GAAG;AAC9C,SAAK,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAC7C,SAAK,UAAU,OAAO,eAAW,8BAAc;AAAA,MAC7C,OAAO,KAAK,OAAO,UAAU,IAAI;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEA,SAAe;AAAE,SAAK,OAAO,UAAU;AAAA,EAAM;AAAA,EAC7C,UAAgB;AAAE,SAAK,OAAO,UAAU;AAAA,EAAO;AAAA,EAC/C,UAAU,QAAqC;AAC7C,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAAA,EAC5C;AAAA,EAEQ,cAAc,SAA0D;AAC9E,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,WAAmC,CAAC;AAC1C,WAAO,KAAK,OAAO,EAAE,QAAQ,CAAC,QAAQ;AACpC,eAAS,GAAG,IAAI,kBAAkB,SAAS,IAAI,YAAY,CAAC,IAAI,QAAS,QAAQ,GAAG,KAAK;AAAA,IAC3F,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,SAA2B;AACpC,QAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,YAAa;AACtD,UAAM,EAAE,QAAQ,KAAK,SAAS,KAAK,IAAI;AACvC,SAAK,QAAQ,MAAM,GAAG,MAAM,IAAI,GAAG,EAAE;AACrC,QAAI,KAAK,OAAO,cAAc,QAAS,MAAK,QAAQ,MAAM,YAAY,KAAK,cAAc,OAAO,CAAC;AACjG,QAAI,KAAK,OAAO,aAAa,KAAM,MAAK,QAAQ,MAAM,SAAS,IAAI;AAAA,EACrE;AAAA,EAEA,YAAY,SAAqB,UAA6B;AAC5D,QAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,aAAc;AACvD,UAAM,EAAE,QAAQ,IAAI,IAAI;AACxB,UAAM,EAAE,QAAQ,YAAY,MAAM,SAAS,IAAI;AAC/C,SAAK,QAAQ,QAAQ,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,UAAU,KAAK,QAAQ,KAAK;AAC/E,QAAI,KAAK,OAAO,aAAa,KAAM,MAAK,QAAQ,MAAM,aAAa,IAAI;AAAA,EACzE;AAAA,EAEA,SAAS,SAAqB,OAAuB;AACnD,QAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,UAAW;AACpD,UAAM,EAAE,QAAQ,IAAI,IAAI;AACxB,UAAM,EAAE,SAAS,YAAY,aAAa,SAAS,IAAI;AACvD,SAAK,QAAQ,MAAM,GAAG,MAAM,IAAI,GAAG,IAAI,cAAc,SAAS,WAAW,QAAQ,KAAK;AACtF,SAAK,QAAQ,MAAM,YAAY,OAAO;AACtC,QAAI,eAAe,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AACtD,WAAK,QAAQ,MAAM,eAAe;AAClC,aAAO,QAAQ,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,MAAM,MAAM;AACvD,eAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,MAAM,YAAO,KAAK,KAAK,GAAG,EAAE,CAAC;AAAA,MACpE,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,KAAK,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,KAAK,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC5G,KAAK,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,KAAK,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC5G,MAAM,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,MAAM,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC9G,MAAM,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,MAAM,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAC9G,QAAQ,YAAoB,MAAmB;AAAE,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,QAAQ,SAAS,GAAG,IAAI;AAAA,EAAG;AAAA,EAClH,QAAQ,KAA8B;AAAE,WAAO,KAAK,QAAQ,QAAQ,GAAG;AAAA,EAAG;AAC5E;AAEO,IAAM,gBAAgB,IAAI,UAAU;;;ACpG3C,IAAM,wBAAwB,wBAAC,MAAgB,KAAa,UAAyB;AACnF,MAAI,OAAO,UAAU,YAAY,iBAAiB,MAAM;AACtD,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB,WAAW,iBAAiB,MAAM;AAChC,SAAK,OAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACtC,OAAO;AACL,SAAK,OAAO,KAAK,KAAK,UAAU,KAAK,CAAC;AAAA,EACxC;AACF,GAR8B;AAkBvB,IAAM,yBAAyB;AAAA,EACpC,gBAAgB,wBAAC,SAA4B;AAC3C,UAAM,OAAO,IAAI,SAAS;AAE1B,WAAO,QAAQ,IAA+B,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACxE,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC;AAAA,MACF;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,cAAM,QAAQ,CAAC,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC;AAAA,MAC1D,OAAO;AACL,8BAAsB,MAAM,KAAK,KAAK;AAAA,MACxC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT,GAfgB;AAgBlB;AAEO,IAAM,qBAAqB;AAAA,EAChC,gBAAgB,wBAAC,SACf,KAAK,UAAU,MAAM,CAAC,MAAM,UAAW,OAAO,UAAU,WAAW,MAAM,SAAS,IAAI,KAAM,GAD9E;AAElB;;;AClBA,IAAM,mBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AACX;AACA,IAAM,gBAAgB,OAAO,QAAQ,gBAAgB;;;AC+B9C,SAAS,gBAAiC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA2D;AACzD,MAAI;AAEJ,QAAM,QAAQ,eAAe,CAAC,OAAe,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAE7F,QAAM,eAAe,0CAAmB;AACtC,QAAI,aAAqB,wBAAwB;AACjD,QAAI,UAAU;AACd,UAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,EAAE;AAEvD,WAAO,MAAM;AACX,UAAI,OAAO,QAAS;AAEpB;AAEA,YAAM,UACJ,QAAQ,mBAAmB,UACvB,QAAQ,UACR,IAAI,QAAQ,QAAQ,OAA6C;AAEvE,UAAI,gBAAgB,QAAW;AAC7B,gBAAQ,IAAI,iBAAiB,WAAW;AAAA,MAC1C;AAEA,UAAI;AACF,cAAM,cAA2B;AAAA,UAC/B,UAAU;AAAA,UACV,GAAG;AAAA,UACH,MAAM,QAAQ;AAAA,UACd;AAAA,UACA;AAAA,QACF;AACA,YAAI,UAAU,IAAI,QAAQ,KAAK,WAAW;AAC1C,YAAI,WAAW;AACb,oBAAU,MAAM,UAAU,KAAK,WAAW;AAAA,QAC5C;AAGA,cAAM,SAAS,QAAQ,SAAS,WAAW;AAC3C,cAAM,WAAW,MAAM,OAAO,OAAO;AAErC,YAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,eAAe,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAEzF,YAAI,CAAC,SAAS,KAAM,OAAM,IAAI,MAAM,yBAAyB;AAE7D,cAAM,SAAS,SAAS,KAAK,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AAE5E,YAAI,SAAS;AAEb,cAAM,eAAe,6BAAM;AACzB,cAAI;AACF,mBAAO,OAAO;AAAA,UAChB,QAAQ;AAAA,UAER;AAAA,QACF,GANqB;AAQrB,eAAO,iBAAiB,SAAS,YAAY;AAE7C,YAAI;AACF,iBAAO,MAAM;AACX,kBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,gBAAI,KAAM;AACV,sBAAU;AACV,qBAAS,OAAO,QAAQ,UAAU,IAAI;AAEtC,kBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,qBAAS,OAAO,IAAI,KAAK;AAEzB,uBAAW,SAAS,QAAQ;AAC1B,oBAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,oBAAM,YAA2B,CAAC;AAClC,kBAAI;AAEJ,yBAAW,QAAQ,OAAO;AACxB,oBAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,4BAAU,KAAK,KAAK,QAAQ,aAAa,EAAE,CAAC;AAAA,gBAC9C,WAAW,KAAK,WAAW,QAAQ,GAAG;AACpC,8BAAY,KAAK,QAAQ,cAAc,EAAE;AAAA,gBAC3C,WAAW,KAAK,WAAW,KAAK,GAAG;AACjC,gCAAc,KAAK,QAAQ,WAAW,EAAE;AAAA,gBAC1C,WAAW,KAAK,WAAW,QAAQ,GAAG;AACpC,wBAAM,SAAS,OAAO,SAAS,KAAK,QAAQ,cAAc,EAAE,GAAG,EAAE;AACjE,sBAAI,CAAC,OAAO,MAAM,MAAM,GAAG;AACzB,iCAAa;AAAA,kBACf;AAAA,gBACF;AAAA,cACF;AAEA,kBAAI;AACJ,kBAAI,aAAa;AAEjB,kBAAI,UAAU,QAAQ;AACpB,sBAAM,UAAU,UAAU,KAAK,IAAI;AACnC,oBAAI;AACF,yBAAO,KAAK,MAAM,OAAO;AACzB,+BAAa;AAAA,gBACf,QAAQ;AACN,yBAAO;AAAA,gBACT;AAAA,cACF;AAEA,kBAAI,YAAY;AACd,oBAAI,mBAAmB;AACrB,wBAAM,kBAAkB,IAAI;AAAA,gBAC9B;AAEA,oBAAI,qBAAqB;AACvB,yBAAO,MAAM,oBAAoB,IAAI;AAAA,gBACvC;AAAA,cACF;AAEA,2BAAa;AAAA,gBACX;AAAA,gBACA,OAAO;AAAA,gBACP,IAAI;AAAA,gBACJ,OAAO;AAAA,cACT,CAAC;AAED,kBAAI,UAAU,QAAQ;AACpB,sBAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF;AAAA,QACF,UAAE;AACA,iBAAO,oBAAoB,SAAS,YAAY;AAChD,iBAAO,YAAY;AAAA,QACrB;AAEA;AAAA,MACF,SAAS,OAAO;AAEd,qBAAa,KAAK;AAElB,YAAI,wBAAwB,UAAa,WAAW,qBAAqB;AACvE;AAAA,QACF;AAGA,cAAM,UAAU,KAAK,IAAI,aAAa,MAAM,UAAU,IAAI,oBAAoB,GAAK;AACnF,cAAM,MAAM,OAAO;AAAA,MACrB;AAAA,IACF;AAAA,EACF,GA1IqB;AA4IrB,QAAM,SAAS,aAAa;AAE5B,SAAO,EAAE,OAAO;AAClB;AAhKgB;;;ACtDT,IAAM,wBAAwB,wBAAC,UAAsD;AAC1F,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF,GAXqC;AAa9B,IAAM,0BAA0B,wBAAC,UAAkD;AACxF,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF,GAXuC;AAahC,IAAM,yBAAyB,wBAAC,UAAuD;AAC5F,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF,GAXsC;AAa/B,IAAM,sBAAsB,wBAAC;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAEc;AACZ,MAAI,CAAC,SAAS;AACZ,UAAMC,iBACJ,gBAAgB,QAAQ,MAAM,IAAI,CAAC,MAAM,mBAAmB,CAAW,CAAC,GACxE,KAAK,wBAAwB,KAAK,CAAC;AACrC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,IAAIA,aAAY;AAAA,MACzB,KAAK;AACH,eAAO,IAAI,IAAI,IAAIA,aAAY;AAAA,MACjC,KAAK;AACH,eAAOA;AAAA,MACT;AACE,eAAO,GAAG,IAAI,IAAIA,aAAY;AAAA,IAClC;AAAA,EACF;AAEA,QAAM,YAAY,sBAAsB,KAAK;AAC7C,QAAM,eAAe,MAClB,IAAI,CAAC,MAAM;AACV,QAAI,UAAU,WAAW,UAAU,UAAU;AAC3C,aAAO,gBAAgB,IAAI,mBAAmB,CAAW;AAAA,IAC3D;AAEA,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC,EACA,KAAK,SAAS;AACjB,SAAO,UAAU,WAAW,UAAU,WAAW,YAAY,eAAe;AAC9E,GAxCmC;AA0C5B,IAAM,0BAA0B,wBAAC;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AACF,MAAuC;AACrC,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,GAAG,IAAI,IAAI,gBAAgB,QAAQ,mBAAmB,KAAK,CAAC;AACrE,GAhBuC;AAkBhC,IAAM,uBAAuB,wBAAC;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAGc;AACZ,MAAI,iBAAiB,MAAM;AACzB,WAAO,YAAY,MAAM,YAAY,IAAI,GAAG,IAAI,IAAI,MAAM,YAAY,CAAC;AAAA,EACzE;AAEA,MAAI,UAAU,gBAAgB,CAAC,SAAS;AACtC,QAAI,SAAmB,CAAC;AACxB,WAAO,QAAQ,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM;AAC1C,eAAS,CAAC,GAAG,QAAQ,KAAK,gBAAiB,IAAe,mBAAmB,CAAW,CAAC;AAAA,IAC3F,CAAC;AACD,UAAMA,gBAAe,OAAO,KAAK,GAAG;AACpC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,GAAG,IAAI,IAAIA,aAAY;AAAA,MAChC,KAAK;AACH,eAAO,IAAIA,aAAY;AAAA,MACzB,KAAK;AACH,eAAO,IAAI,IAAI,IAAIA,aAAY;AAAA,MACjC;AACE,eAAOA;AAAA,IACX;AAAA,EACF;AAEA,QAAM,YAAY,uBAAuB,KAAK;AAC9C,QAAM,eAAe,OAAO,QAAQ,KAAK,EACtC;AAAA,IAAI,CAAC,CAAC,KAAK,CAAC,MACX,wBAAwB;AAAA,MACtB;AAAA,MACA,MAAM,UAAU,eAAe,GAAG,IAAI,IAAI,GAAG,MAAM;AAAA,MACnD,OAAO;AAAA,IACT,CAAC;AAAA,EACH,EACC,KAAK,SAAS;AACjB,SAAO,UAAU,WAAW,UAAU,WAAW,YAAY,eAAe;AAC9E,GA5CoC;;;AC/G7B,IAAM,gBAAwB;AAE9B,IAAM,wBAAwB,wBAAC,EAAE,MAAM,KAAK,KAAK,MAA8B;AACpF,MAAI,MAAM;AACV,QAAM,UAAU,KAAK,MAAM,aAAa;AACxC,MAAI,SAAS;AACX,eAAW,SAAS,SAAS;AAC3B,UAAI,UAAU;AACd,UAAI,OAAO,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC;AAC9C,UAAI,QAA6B;AAEjC,UAAI,KAAK,SAAS,GAAG,GAAG;AACtB,kBAAU;AACV,eAAO,KAAK,UAAU,GAAG,KAAK,SAAS,CAAC;AAAA,MAC1C;AAEA,UAAI,KAAK,WAAW,GAAG,GAAG;AACxB,eAAO,KAAK,UAAU,CAAC;AACvB,gBAAQ;AAAA,MACV,WAAW,KAAK,WAAW,GAAG,GAAG;AAC/B,eAAO,KAAK,UAAU,CAAC;AACvB,gBAAQ;AAAA,MACV;AAEA,YAAM,QAAQ,KAAK,IAAI;AAEvB,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC;AAAA,MACF;AAEA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,cAAM,IAAI,QAAQ,OAAO,oBAAoB,EAAE,SAAS,MAAM,OAAO,MAAM,CAAC,CAAC;AAC7E;AAAA,MACF;AAEA,UAAI,OAAO,UAAU,UAAU;AAC7B,cAAM,IAAI;AAAA,UACR;AAAA,UACA,qBAAqB;AAAA,YACnB;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAW;AAAA,UACb,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,UAAI,UAAU,UAAU;AACtB,cAAM,IAAI;AAAA,UACR;AAAA,UACA,IAAI,wBAAwB;AAAA,YAC1B;AAAA,YACA;AAAA,UACF,CAAC,CAAC;AAAA,QACJ;AACA;AAAA,MACF;AAEA,YAAM,eAAe;AAAA,QACnB,UAAU,UAAU,IAAI,KAAe,KAAM;AAAA,MAC/C;AACA,YAAM,IAAI,QAAQ,OAAO,YAAY;AAAA,IACvC;AAAA,EACF;AACA,SAAO;AACT,GAjEqC;AAmE9B,IAAM,SAAS,wBAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,KAAK;AACP,MAMc;AACZ,QAAM,UAAU,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI;AACtD,MAAI,OAAO,WAAW,MAAM;AAC5B,MAAI,MAAM;AACR,UAAM,sBAAsB,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3C;AACA,MAAI,SAAS,QAAQ,gBAAgB,KAAK,IAAI;AAC9C,MAAI,OAAO,WAAW,GAAG,GAAG;AAC1B,aAAS,OAAO,UAAU,CAAC;AAAA,EAC7B;AACA,MAAI,QAAQ;AACV,WAAO,IAAI,MAAM;AAAA,EACnB;AACA,SAAO;AACT,GA1BsB;AA4Bf,SAAS,oBAAoB,SAIxB;AACV,QAAM,UAAU,QAAQ,SAAS;AACjC,QAAM,mBAAmB,WAAW,QAAQ;AAE5C,MAAI,kBAAkB;AACpB,QAAI,oBAAoB,SAAS;AAC/B,YAAM,oBACJ,QAAQ,mBAAmB,UAAa,QAAQ,mBAAmB;AAErE,aAAO,oBAAoB,QAAQ,iBAAiB;AAAA,IACtD;AAGA,WAAO,QAAQ,SAAS,KAAK,QAAQ,OAAO;AAAA,EAC9C;AAGA,MAAI,SAAS;AACX,WAAO,QAAQ;AAAA,EACjB;AAGA,SAAO;AACT;AA3BgB;;;ACpFT,IAAM,eAAe,8BAC1BC,OACA,aACgC;AAChC,QAAM,QAAQ,OAAO,aAAa,aAAa,MAAM,SAASA,KAAI,IAAI;AAEtE,MAAI,CAAC,OAAO;AACV;AAAA,EACF;AAEA,MAAIA,MAAK,WAAW,UAAU;AAC5B,WAAO,UAAU,KAAK;AAAA,EACxB;AAEA,MAAIA,MAAK,WAAW,SAAS;AAC3B,WAAO,SAAS,KAAK,KAAK,CAAC;AAAA,EAC7B;AAEA,SAAO;AACT,GAnB4B;;;ACfrB,IAAM,wBAAwB,wBAAc;AAAA,EACjD,aAAa,CAAC;AAAA,EACd,GAAG;AACL,IAA4B,CAAC,MAAoC;AAC/D,QAAM,kBAAkB,wBAAC,gBAA2B;AAClD,UAAM,SAAmB,CAAC;AAC1B,QAAI,eAAe,OAAO,gBAAgB,UAAU;AAClD,iBAAW,QAAQ,aAAa;AAC9B,cAAM,QAAQ,YAAY,IAAI;AAE9B,YAAI,UAAU,UAAa,UAAU,MAAM;AACzC;AAAA,QACF;AAEA,cAAM,UAAU,WAAW,IAAI,KAAK;AAEpC,YAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,gBAAM,kBAAkB,oBAAoB;AAAA,YAC1C,eAAe,QAAQ;AAAA,YACvB,SAAS;AAAA,YACT;AAAA,YACA,OAAO;AAAA,YACP;AAAA,YACA,GAAG,QAAQ;AAAA,UACb,CAAC;AACD,cAAI,gBAAiB,QAAO,KAAK,eAAe;AAAA,QAClD,WAAW,OAAO,UAAU,UAAU;AACpC,gBAAM,mBAAmB,qBAAqB;AAAA,YAC5C,eAAe,QAAQ;AAAA,YACvB,SAAS;AAAA,YACT;AAAA,YACA,OAAO;AAAA,YACP;AAAA,YACA,GAAG,QAAQ;AAAA,UACb,CAAC;AACD,cAAI,iBAAkB,QAAO,KAAK,gBAAgB;AAAA,QACpD,OAAO;AACL,gBAAM,sBAAsB,wBAAwB;AAAA,YAClD,eAAe,QAAQ;AAAA,YACvB;AAAA,YACA;AAAA,UACF,CAAC;AACD,cAAI,oBAAqB,QAAO,KAAK,mBAAmB;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO,KAAK,GAAG;AAAA,EACxB,GA3CwB;AA4CxB,SAAO;AACT,GAjDqC;AAsD9B,IAAM,aAAa,wBAAC,gBAAmE;AAC5F,MAAI,CAAC,aAAa;AAGhB,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,YAAY,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAErD,MAAI,CAAC,cAAc;AACjB;AAAA,EACF;AAEA,MAAI,aAAa,WAAW,kBAAkB,KAAK,aAAa,SAAS,OAAO,GAAG;AACjF,WAAO;AAAA,EACT;AAEA,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO;AAAA,EACT;AAEA,MACE,CAAC,gBAAgB,UAAU,UAAU,QAAQ,EAAE,KAAK,CAAC,SAAS,aAAa,WAAW,IAAI,CAAC,GAC3F;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO;AAAA,EACT;AAEA;AACF,GAhC0B;AAkC1B,IAAM,oBAAoB,wBACxB,SAGA,SACY;AACZ,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MACE,QAAQ,QAAQ,IAAI,IAAI,KACxB,QAAQ,QAAQ,IAAI,KACpB,QAAQ,QAAQ,IAAI,QAAQ,GAAG,SAAS,GAAG,IAAI,GAAG,GAClD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT,GAjB0B;AAmB1B,eAAsB,cACpB,SAGe;AACf,aAAWC,SAAQ,QAAQ,YAAY,CAAC,GAAG;AACzC,QAAI,kBAAkB,SAASA,MAAK,IAAI,GAAG;AACzC;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,aAAaA,OAAM,QAAQ,IAAI;AAEnD,QAAI,CAAC,OAAO;AACV;AAAA,IACF;AAEA,UAAM,OAAOA,MAAK,QAAQ;AAE1B,YAAQA,MAAK,IAAI;AAAA,MACf,KAAK;AACH,YAAI,CAAC,QAAQ,OAAO;AAClB,kBAAQ,QAAQ,CAAC;AAAA,QACnB;AACA,gBAAQ,MAAM,IAAI,IAAI;AACtB;AAAA,MACF,KAAK;AACH,gBAAQ,QAAQ,OAAO,UAAU,GAAG,IAAI,IAAI,KAAK,EAAE;AACnD;AAAA,MACF,KAAK;AAAA,MACL;AACE,gBAAQ,QAAQ,IAAI,MAAM,KAAK;AAC/B;AAAA,IACJ;AAAA,EACF;AACF;AAlCsB;AAoCf,IAAM,WAA+B,wBAAC,YAC3C,OAAO;AAAA,EACL,SAAS,QAAQ;AAAA,EACjB,MAAM,QAAQ;AAAA,EACd,OAAO,QAAQ;AAAA,EACf,iBACE,OAAO,QAAQ,oBAAoB,aAC/B,QAAQ,kBACR,sBAAsB,QAAQ,eAAe;AAAA,EACnD,KAAK,QAAQ;AACf,CAAC,GAVyC;AAYrC,IAAM,eAAe,wBAAC,GAAW,MAAsB;AAC5D,QAAM,SAAS,EAAE,GAAG,GAAG,GAAG,EAAE;AAC5B,MAAI,OAAO,SAAS,SAAS,GAAG,GAAG;AACjC,WAAO,UAAU,OAAO,QAAQ,UAAU,GAAG,OAAO,QAAQ,SAAS,CAAC;AAAA,EACxE;AACA,SAAO,UAAU,aAAa,EAAE,SAAS,EAAE,OAAO;AAClD,SAAO;AACT,GAP4B;AAS5B,IAAM,iBAAiB,wBAAC,YAA8C;AACpE,QAAM,UAAmC,CAAC;AAC1C,UAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,YAAQ,KAAK,CAAC,KAAK,KAAK,CAAC;AAAA,EAC3B,CAAC;AACD,SAAO;AACT,GANuB;AAQhB,IAAM,eAAe,2BACvB,YACS;AACZ,QAAM,gBAAgB,IAAI,QAAQ;AAClC,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AAEA,UAAM,WAAW,kBAAkB,UAAU,eAAe,MAAM,IAAI,OAAO,QAAQ,MAAM;AAE3F,eAAW,CAAC,KAAK,KAAK,KAAK,UAAU;AACnC,UAAI,UAAU,MAAM;AAClB,sBAAc,OAAO,GAAG;AAAA,MAC1B,WAAW,MAAM,QAAQ,KAAK,GAAG;AAC/B,mBAAW,KAAK,OAAO;AACrB,wBAAc,OAAO,KAAK,CAAW;AAAA,QACvC;AAAA,MACF,WAAW,UAAU,QAAW;AAG9B,sBAAc;AAAA,UACZ;AAAA,UACA,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAK;AAAA,QACvD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT,GA7B4B;AAgD5B,IAAM,eAAN,MAAgC;AAAA,EAzOhC,OAyOgC;AAAA;AAAA;AAAA,EAC9B,MAAiC,CAAC;AAAA,EAElC,QAAc;AACZ,SAAK,MAAM,CAAC;AAAA,EACd;AAAA,EAEA,MAAM,IAAgC;AACpC,UAAM,QAAQ,KAAK,oBAAoB,EAAE;AACzC,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAK,IAAI,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,OAAO,IAAmC;AACxC,UAAM,QAAQ,KAAK,oBAAoB,EAAE;AACzC,WAAO,QAAQ,KAAK,IAAI,KAAK,CAAC;AAAA,EAChC;AAAA,EAEA,oBAAoB,IAAkC;AACpD,QAAI,OAAO,OAAO,UAAU;AAC1B,aAAO,KAAK,IAAI,EAAE,IAAI,KAAK;AAAA,IAC7B;AACA,WAAO,KAAK,IAAI,QAAQ,EAAE;AAAA,EAC5B;AAAA,EAEA,OAAO,IAA0B,IAA+C;AAC9E,UAAM,QAAQ,KAAK,oBAAoB,EAAE;AACzC,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAK,IAAI,KAAK,IAAI;AAClB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,IAAyB;AAC3B,SAAK,IAAI,KAAK,EAAE;AAChB,WAAO,KAAK,IAAI,SAAS;AAAA,EAC3B;AACF;AAQO,IAAM,qBAAqB,8BAK5B;AAAA,EACJ,OAAO,IAAI,aAAqD;AAAA,EAChE,SAAS,IAAI,aAA2C;AAAA,EACxD,UAAU,IAAI,aAAgD;AAChE,IATkC;AAWlC,IAAM,yBAAyB,sBAAsB;AAAA,EACnD,eAAe;AAAA,EACf,OAAO;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AAAA,EACA,QAAQ;AAAA,IACN,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AACF,CAAC;AAED,IAAM,iBAAiB;AAAA,EACrB,gBAAgB;AAClB;AAEO,IAAM,eAAe,wBAC1B,WAAqD,CAAC,OACR;AAAA,EAC9C,GAAG;AAAA,EACH,SAAS;AAAA,EACT,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,GAAG;AACL,IAR4B;;;AC9RrB,IAAM,eAAe,wBAAC,SAAiB,CAAC,MAAc;AAC3D,MAAI,UAAU,aAAa,aAAa,GAAG,MAAM;AAEjD,QAAM,YAAY,8BAAe,EAAE,GAAG,QAAQ,IAA5B;AAElB,QAAM,YAAY,wBAACC,YAA2B;AAC5C,cAAU,aAAa,SAASA,OAAM;AACtC,WAAO,UAAU;AAAA,EACnB,GAHkB;AAKlB,QAAM,eAAe,mBAAuE;AAE5F,QAAM,gBAAgB,8BAMpB,YACG;AACH,UAAM,OAAO;AAAA,MACX,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO,QAAQ,SAAS,QAAQ,SAAS,WAAW;AAAA,MACpD,SAAS,aAAa,QAAQ,SAAS,QAAQ,OAAO;AAAA,MACtD,gBAAgB;AAAA,IAClB;AAEA,QAAI,KAAK,UAAU;AACjB,YAAM,cAAc,IAAI;AAAA,IAC1B;AAEA,QAAI,KAAK,kBAAkB;AACzB,YAAM,KAAK,iBAAiB,IAAI;AAAA,IAClC;AAEA,QAAI,KAAK,SAAS,UAAa,KAAK,gBAAgB;AAClD,WAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AAAA,IACrD;AAGA,QAAI,KAAK,SAAS,UAAa,KAAK,mBAAmB,IAAI;AACzD,WAAK,QAAQ,OAAO,cAAc;AAAA,IACpC;AAEA,UAAM,eAAe;AAErB,UAAM,MAAM,SAAS,YAAY;AAEjC,WAAO,EAAE,MAAM,cAAc,IAAI;AAAA,EACnC,GAtCsB;AAwCtB,QAAM,UAA6B,8BAAO,YAAY;AACpD,UAAM,eAAe,QAAQ,gBAAgB,QAAQ;AACrD,UAAM,gBAAgB,QAAQ,iBAAiB,QAAQ;AAEvD,QAAIC;AACJ,QAAI;AAEJ,QAAI;AACF,YAAM,EAAE,MAAM,IAAI,IAAI,MAAM,cAAc,OAAO;AACjD,YAAM,cAAuB;AAAA,QAC3B,UAAU;AAAA,QACV,GAAG;AAAA,QACH,MAAM,oBAAoB,IAAI;AAAA,MAChC;AAEA,MAAAA,WAAU,IAAI,QAAQ,KAAK,WAAW;AAEtC,iBAAW,MAAM,aAAa,QAAQ,KAAK;AACzC,YAAI,IAAI;AACN,UAAAA,WAAU,MAAM,GAAGA,UAAS,IAAI;AAAA,QAClC;AAAA,MACF;AAIA,YAAM,SAAS,KAAK;AAEpB,iBAAW,MAAM,OAAOA,QAAO;AAE/B,iBAAW,MAAM,aAAa,SAAS,KAAK;AAC1C,YAAI,IAAI;AACN,qBAAW,MAAM,GAAG,UAAUA,UAAS,IAAI;AAAA,QAC7C;AAAA,MACF;AAEA,YAAM,SAAS;AAAA,QACb,SAAAA;AAAA,QACA;AAAA,MACF;AAEA,UAAI,SAAS,IAAI;AACf,cAAM,WACH,KAAK,YAAY,SACd,WAAW,SAAS,QAAQ,IAAI,cAAc,CAAC,IAC/C,KAAK,YAAY;AAEvB,YAAI,SAAS,WAAW,OAAO,SAAS,QAAQ,IAAI,gBAAgB,MAAM,KAAK;AAC7E,cAAI;AACJ,kBAAQ,SAAS;AAAA,YACf,KAAK;AAAA,YACL,KAAK;AAAA,YACL,KAAK;AACH,0BAAY,MAAM,SAAS,OAAO,EAAE;AACpC;AAAA,YACF,KAAK;AACH,0BAAY,IAAI,SAAS;AACzB;AAAA,YACF,KAAK;AACH,0BAAY,SAAS;AACrB;AAAA,YACF,KAAK;AAAA,YACL;AACE,0BAAY,CAAC;AACb;AAAA,UACJ;AACA,iBAAO,KAAK,kBAAkB,SAC1B,YACA;AAAA,YACE,MAAM;AAAA,YACN,GAAG;AAAA,UACL;AAAA,QACN;AAEA,YAAI;AACJ,gBAAQ,SAAS;AAAA,UACf,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACH,mBAAO,MAAM,SAAS,OAAO,EAAE;AAC/B;AAAA,UACF,KAAK,QAAQ;AAGX,kBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,mBAAO,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC;AAClC;AAAA,UACF;AAAA,UACA,KAAK;AACH,mBAAO,KAAK,kBAAkB,SAC1B,SAAS,OACT;AAAA,cACE,MAAM,SAAS;AAAA,cACf,GAAG;AAAA,YACL;AAAA,QACR;AAEA,YAAI,YAAY,QAAQ;AACtB,cAAI,KAAK,mBAAmB;AAC1B,kBAAM,KAAK,kBAAkB,IAAI;AAAA,UACnC;AAEA,cAAI,KAAK,qBAAqB;AAC5B,mBAAO,MAAM,KAAK,oBAAoB,IAAI;AAAA,UAC5C;AAAA,QACF;AAEA,eAAO,KAAK,kBAAkB,SAC1B,OACA;AAAA,UACE;AAAA,UACA,GAAG;AAAA,QACL;AAAA,MACN;AAEA,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,UAAI;AAEJ,UAAI;AACF,oBAAY,KAAK,MAAM,SAAS;AAAA,MAClC,QAAQ;AAAA,MAER;AAEA,YAAM,aAAa;AAAA,IACrB,SAAS,OAAO;AACd,UAAI,aAAa;AAEjB,iBAAW,MAAM,aAAa,MAAM,KAAK;AACvC,YAAI,IAAI;AACN,uBAAa,MAAM,GAAG,YAAY,UAAUA,UAAS,OAAiC;AAAA,QACxF;AAAA,MACF;AAEA,mBAAa,cAAc,CAAC;AAE5B,UAAI,cAAc;AAChB,cAAM;AAAA,MACR;AAGA,aAAO,kBAAkB,SACrB,SACA;AAAA,QACE,OAAO;AAAA,QACP,SAAAA;AAAA,QACA;AAAA,MACF;AAAA,IACN;AAAA,EACF,GArJmC;AAuJnC,QAAM,eAAe,wBAAC,WAAkC,CAAC,YACvD,QAAQ,EAAE,GAAG,SAAS,OAAO,CAAC,GADX;AAGrB,QAAM,YAAY,wBAAC,WAAkC,OAAO,YAA4B;AACtF,UAAM,EAAE,MAAM,IAAI,IAAI,MAAM,cAAc,OAAO;AACjD,WAAO,gBAAgB;AAAA,MACrB,GAAG;AAAA,MACH,MAAM,KAAK;AAAA,MACX;AAAA,MACA,WAAW,8BAAOC,MAAK,SAAS;AAC9B,YAAID,WAAU,IAAI,QAAQC,MAAK,IAAI;AACnC,mBAAW,MAAM,aAAa,QAAQ,KAAK;AACzC,cAAI,IAAI;AACN,YAAAD,WAAU,MAAM,GAAGA,UAAS,IAAI;AAAA,UAClC;AAAA,QACF;AACA,eAAOA;AAAA,MACT,GARW;AAAA,MASX,gBAAgB,oBAAoB,IAAI;AAAA,MACxC;AAAA,IACF,CAAC;AAAA,EACH,GAlBkB;AAoBlB,QAAM,YAAgC,wBAAC,YAAY,SAAS,EAAE,GAAG,SAAS,GAAG,QAAQ,CAAC,GAAhD;AAEtC,SAAO;AAAA,IACL,UAAU;AAAA,IACV,SAAS,aAAa,SAAS;AAAA,IAC/B,QAAQ,aAAa,QAAQ;AAAA,IAC7B,KAAK,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,aAAa,MAAM;AAAA,IACzB;AAAA,IACA,SAAS,aAAa,SAAS;AAAA,IAC/B,OAAO,aAAa,OAAO;AAAA,IAC3B,MAAM,aAAa,MAAM;AAAA,IACzB,KAAK,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,KAAK;AAAA,MACH,SAAS,UAAU,SAAS;AAAA,MAC5B,QAAQ,UAAU,QAAQ;AAAA,MAC1B,KAAK,UAAU,KAAK;AAAA,MACpB,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,UAAU,SAAS;AAAA,MAC5B,OAAO,UAAU,OAAO;AAAA,MACxB,MAAM,UAAU,MAAM;AAAA,MACtB,KAAK,UAAU,KAAK;AAAA,MACpB,OAAO,UAAU,OAAO;AAAA,IAC1B;AAAA,IACA,OAAO,aAAa,OAAO;AAAA,EAC7B;AACF,GA/P4B;;;ACNrB,IAAM,SAAiB,aAAa,aAA6B,EAAE,SAAS,wBAAwB,CAAC,CAAC;AAI7G,oBAAoB,MAAM;;;ACCnB,IAAM,oBAAN,MAAwB;AAAA,EApB/B,OAoB+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3B,OAAc,0BAAgE,SAAkK;AAC5O,YAAQ,SAAS,UAAU,QAAQ,IAAuF;AAAA,MACtH,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,kCAAwE,SAAyL;AAC3Q,YAAQ,QAAQ,UAAU,QAAQ,KAAwG;AAAA,MACtI,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,8BAAoE,SAA6K;AAC3P,YAAQ,QAAQ,UAAU,QAAQ,KAAgG;AAAA,MAC9H,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,4BAAkE,SAA6I;AACzN,YAAQ,QAAQ,UAAU,QAAQ,KAAkE;AAAA,MAChG,UAAU;AAAA,QACN,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC;AAAA,UACI,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,QACV;AAAA,QACA,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,MACxC;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAtH9B,OAsH8B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1B,OAAc,gCAAsE,SAAsJ;AACtO,YAAQ,SAAS,UAAU,QAAQ,IAAqE;AAAA,MACpG,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,iCAAuE,SAAsL;AACvQ,YAAQ,QAAQ,UAAU,QAAQ,KAAsG;AAAA,MACpI,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,sCAA4E,SAAsM;AAC5R,YAAQ,SAAS,UAAU,QAAQ,KAAgH;AAAA,MAC/I,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,qCAA2E,SAAkM;AACvR,YAAQ,QAAQ,UAAU,QAAQ,KAA8G;AAAA,MAC5I,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,kCAAwE,SAA0J;AAC5O,YAAQ,SAAS,UAAU,QAAQ,IAAuE,EAAE,KAAK,kCAAkC,GAAG,QAAQ,CAAC;AAAA,EACnK;AACJ;AAEO,IAAM,cAAN,MAAkB;AAAA,EAvMzB,OAuMyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAIrB,OAAc,4BAAkE,SAAuK;AACnP,YAAQ,QAAQ,UAAU,QAAQ,KAA4F;AAAA,MAC1H,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAc,2BAAiE,SAAoK;AAC/O,YAAQ,QAAQ,UAAU,QAAQ,KAA0F;AAAA,MACxH,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAtPhC,OAsPgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5B,OAAc,2BAAiE,SAAqK;AAChP,YAAQ,SAAS,UAAU,QAAQ,IAAyF;AAAA,MACxH,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,KAAkG;AAAA,MACjI,GAAG;AAAA,MACH,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,KAAkG;AAAA,MACjI,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,uCAA6E,SAAyM;AAChS,YAAQ,SAAS,UAAU,QAAQ,MAAmH;AAAA,MAClJ,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,gCAAsE,SAAoL;AACpQ,YAAQ,SAAS,UAAU,QAAQ,IAAmG;AAAA,MAClI,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,sCAA4E,SAAsM;AAC5R,YAAQ,SAAS,UAAU,QAAQ,MAAiH;AAAA,MAChJ,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,IAAiG;AAAA,MAChI,UAAU,CAAC,EAAE,QAAQ,UAAU,MAAM,OAAO,GAAG;AAAA,QACvC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,MACV,CAAC;AAAA,MACL,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,kBAAN,MAAsB;AAAA,EA9Y7B,OA8Y6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQzB,OAAc,gCAAsE,SAAqJ;AACrO,YAAQ,QAAQ,UAAU,QAAQ,KAAsE;AAAA,MACpG,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAc,8BAAoE,SAAiJ;AAC/N,YAAQ,QAAQ,UAAU,QAAQ,KAAoE;AAAA,MAClG,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EAtb3B,OAsb2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvB,OAAc,+BAAqE,SAAiL;AAChQ,YAAQ,SAAS,UAAU,QAAQ,IAAiG;AAAA,MAChI,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,qBAAN,MAAyB;AAAA,EAzchC,OAycgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAI5B,OAAc,2BAAiE,SAA4I;AACvN,YAAQ,SAAS,UAAU,QAAQ,IAAgE;AAAA,MAC/F,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAc,mCAAyE,SAA4L;AAC/Q,YAAQ,QAAQ,UAAU,QAAQ,KAA0G;AAAA,MACxI,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,UAAN,MAAc;AAAA,EAhfrB,OAgfqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAIjB,OAAc,uBAA6D,SAAoI;AAC3M,YAAQ,SAAS,UAAU,QAAQ,IAA4D;AAAA,MAC3F,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,sBAA4D,SAAiI;AACvM,YAAQ,QAAQ,UAAU,QAAQ,OAA8D;AAAA,MAC5F,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,IACP,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,qBAA2D,SAAkJ;AACvN,YAAQ,QAAQ,UAAU,QAAQ,KAA8E;AAAA,MAC5G,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,eAAN,MAAmB;AAAA,EAviB1B,OAuiB0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,OAAc,mBAAyD,SAA6I;AAChN,YAAQ,SAAS,UAAU,QAAQ,KAA0E;AAAA,MACzG,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,SAAS;AAAA,MAChB;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,0BAAgE,SAAiK;AAC3O,YAAQ,QAAQ,UAAU,QAAQ,KAAwF;AAAA,MACtH,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EAnlB3B,OAmlB2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvB,OAAc,oBAA0D,SAA+I;AACnN,YAAQ,QAAQ,UAAU,QAAQ,KAA4E;AAAA,MAC1G,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAc,0BAAgE,SAAiK;AAC3O,YAAQ,QAAQ,UAAU,QAAQ,KAAwF;AAAA,MACtH,UAAU;AAAA,QACN,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,QACpC,EAAE,QAAQ,UAAU,MAAM,OAAO;AAAA,QACjC,EAAE,MAAM,iBAAiB,MAAM,SAAS;AAAA,MAC5C;AAAA,MACA,KAAK;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;;;ACxlBO,IAAM,MAAN,MAAU;AAAA,EArCjB,OAqCiB;AAAA;AAAA;AAAA,EACN;AAAA,EAEA,oBAAoB;AAAA,EACpB,mBAAmB;AAAA,EACnB,cAAc;AAAA,EACd,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAE3B,YAAY,UAAmB,OAAmB,CAAC,GAAG;AACpD,SAAK,SAAS,IAAI,UAAU,KAAK,MAAM;AACvC,QAAI,SAAU,MAAK,WAAW,QAAQ;AACtC,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,oBAAoB,OAAW,MAAK,mBAAmB,KAAK,eAAe;AAAA,EACtF;AAAA;AAAA,EAGA,aAAqB;AAAE,WAAO,KAAK,WAAW;AAAA,EAAG;AAAA,EACjD,WAAW,KAAmB;AAAE,SAAK,WAAW,GAAG;AAAA,EAAG;AAAA;AAAA,EAGtD,WAA0B;AAAE,WAAO,KAAK,SAAS;AAAA,EAAG;AAAA,EACpD,SAAS,OAA4B;AAAE,SAAK,SAAS,KAAK;AAAA,EAAG;AAAA,EAC7D,kBAAiC;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA,EAClE,gBAAgB,OAA4B;AAAE,SAAK,gBAAgB,KAAK;AAAA,EAAG;AAAA,EAC3E,aAAmB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA,EACzC,kBAA2B;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA;AAAA,EAG5D,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,QAA6B;AAAE,SAAK,UAAU,MAAM;AAAA,EAAG;AAAA,EACjE,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,KAA0B;AAAE,SAAK,UAAU,GAAG;AAAA,EAAG;AAAA;AAAA;AAAA,EAI3D,eAAe,IAAiD;AAC9D,SAAK,eAAe,EAAE;AAAA,EACxB;AAAA;AAAA,EAEA,kBACE,IACM;AACN,SAAK,kBAAkB,EAAE;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqC;AACnC,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;AC/EO,IAAM,sBAAN,MAAoD;AAAA,EAZ3D,OAY2D;AAAA;AAAA;AAAA,EACzD,QAAQ,KAA4B;AAClC,QAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAI;AAAE,aAAO,OAAO,aAAa,QAAQ,GAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EACxE;AAAA,EACA,QAAQ,KAAa,OAAqB;AACxC,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AAAE,aAAO,aAAa,QAAQ,KAAK,KAAK;AAAA,IAAG,QAAQ;AAAA,IAAwB;AAAA,EACjF;AAAA,EACA,WAAW,KAAmB;AAC5B,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AAAE,aAAO,aAAa,WAAW,GAAG;AAAA,IAAG,QAAQ;AAAA,IAAe;AAAA,EACpE;AAAA,EACA,QAAc;AACZ,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AAAE,aAAO,aAAa,MAAM;AAAA,IAAG,QAAQ;AAAA,IAAe;AAAA,EAC5D;AACF;AAGO,IAAM,uBAAN,MAAqD;AAAA,EAhC5D,OAgC4D;AAAA;AAAA;AAAA,EAClD,QAAQ,oBAAI,IAAoB;AAAA,EACxC,QAAQ,KAA4B;AAAE,WAAO,KAAK,MAAM,IAAI,GAAG,KAAK;AAAA,EAAM;AAAA,EAC1E,QAAQ,KAAa,OAAqB;AAAE,SAAK,MAAM,IAAI,KAAK,KAAK;AAAA,EAAG;AAAA,EACxE,WAAW,KAAmB;AAAE,SAAK,MAAM,OAAO,GAAG;AAAA,EAAG;AAAA,EACxD,QAAc;AAAE,SAAK,MAAM,MAAM;AAAA,EAAG;AACtC;AAGO,IAAM,uBAAN,MAAqD;AAAA,EAC1D,YACU,OAMJ,CAAC,GACL;AAPQ;AAAA,EAOP;AAAA,EAlDL,OAyC4D;AAAA;AAAA;AAAA,EAW1D,QAAQ,KAA4B;AAClC,QAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,UAAM,SAAS,GAAG,mBAAmB,GAAG,CAAC;AACzC,eAAW,QAAQ,SAAS,OAAO,MAAM,IAAI,GAAG;AAC9C,UAAI,KAAK,WAAW,MAAM,GAAG;AAC3B,eAAO,mBAAmB,KAAK,MAAM,OAAO,MAAM,CAAC;AAAA,MACrD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,QAAQ,KAAa,OAAqB;AACxC,QAAI,OAAO,aAAa,YAAa;AACrC,UAAM,QAAQ;AAAA,MACZ,GAAG,mBAAmB,GAAG,CAAC,IAAI,mBAAmB,KAAK,CAAC;AAAA,MACvD,QAAQ,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC/B;AACA,QAAI,KAAK,KAAK,OAAQ,OAAM,KAAK,UAAU,KAAK,KAAK,MAAM,EAAE;AAC7D,QAAI,KAAK,KAAK,OAAQ,OAAM,KAAK,QAAQ;AACzC,QAAI,KAAK,KAAK,SAAU,OAAM,KAAK,YAAY,KAAK,KAAK,QAAQ,EAAE;AACnE,QAAI,KAAK,KAAK,iBAAiB,MAAM;AACnC,YAAM,KAAK,WAAW,KAAK,KAAK,aAAa,EAAE;AAAA,IACjD;AACA,aAAS,SAAS,MAAM,KAAK,IAAI;AAAA,EACnC;AAAA,EAEA,WAAW,KAAmB;AAC5B,QAAI,OAAO,aAAa,YAAa;AACrC,aAAS,SAAS,GAAG,mBAAmB,GAAG,CAAC,sBAAsB,KAAK,KAAK,QAAQ,GAAG;AAAA,EACzF;AACF;;;ACjEO,SAAS,wBAAwB,QAAqC;AAC3E,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACF,UAAM,QAAQ,IAAI,YAAmC,wBAAwB;AAAA,MAC3E;AAAA,MACA,SAAS;AAAA,MACT,YAAY;AAAA,IACd,CAAC;AACD,WAAO,cAAc,KAAK;AAAA,EAC5B,SAAS,OAAO;AACd,YAAQ,KAAK,8CAA8C,KAAK;AAAA,EAClE;AACF;AAZgB;AAcT,SAAS,kBACd,UACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,UAAU,wBAAC,UAAiB;AAChC,QAAI,iBAAiB,YAAa,UAAS,MAAM,MAAM;AAAA,EACzD,GAFgB;AAGhB,SAAO,iBAAiB,wBAAwB,OAAO;AACvD,SAAO,MAAM,OAAO,oBAAoB,wBAAwB,OAAO;AACzE;AATgB;AAWT,SAAS,eAAe,OAAyB;AACtD,QAAM,SAAS,MAAM,OAAO,IAAI,CAAC,OAAO,UAAU;AAChD,UAAM,OAAO,MAAM,KAAK,KAAK,GAAG,KAAK;AACrC,UAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,KAAK,MAAM,OAAO,EAAE;AACxD,QAAI,cAAc,SAAS,MAAM,SAAU,OAAM,KAAK,gBAAgB,MAAM,QAAQ,EAAE;AACtF,QAAI,cAAc,SAAS,MAAM,SAAU,OAAM,KAAK,gBAAgB,MAAM,QAAQ,EAAE;AACtF,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB,CAAC;AACD,SAAO,OAAO,KAAK,IAAI;AACzB;AATgB;;;ACTT,IAAME,OAAN,MAAU;AAAA,EAjCjB,OAiCiB;AAAA;AAAA;AAAA,EACN;AAAA,EAEA,gBAAgB;AAAA,EAEzB,YAAY,UAAmB,OAAmB,CAAC,GAAG;AACpD,SAAK,SAAS,IAAI,UAAU,KAAK,MAAM;AACvC,QAAI,SAAU,MAAK,WAAW,QAAQ;AACtC,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,oBAAoB,OAAW,MAAK,mBAAmB,KAAK,eAAe;AAAA,EACtF;AAAA;AAAA,EAGA,aAAqB;AAAE,WAAO,KAAK,WAAW;AAAA,EAAG;AAAA,EACjD,WAAW,KAAmB;AAAE,SAAK,WAAW,GAAG;AAAA,EAAG;AAAA;AAAA,EAGtD,WAA0B;AAAE,WAAO,KAAK,SAAS;AAAA,EAAG;AAAA,EACpD,SAAS,OAA4B;AAAE,SAAK,SAAS,KAAK;AAAA,EAAG;AAAA,EAC7D,kBAAiC;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA,EAClE,gBAAgB,OAA4B;AAAE,SAAK,gBAAgB,KAAK;AAAA,EAAG;AAAA,EAC3E,aAAmB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA,EACzC,kBAA2B;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA;AAAA,EAG5D,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,QAA6B;AAAE,SAAK,UAAU,MAAM;AAAA,EAAG;AAAA,EACjE,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,KAA0B;AAAE,SAAK,UAAU,GAAG;AAAA,EAAG;AAAA;AAAA;AAAA,EAI3D,eAAe,IAAiD;AAC9D,SAAK,eAAe,EAAE;AAAA,EACxB;AAAA;AAAA,EAEA,kBACE,IACM;AACN,SAAK,kBAAkB,EAAE;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqC;AACnC,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;AC/CO,IAAMC,OAAN,MAAU;AAAA,EApCjB,OAoCiB;AAAA;AAAA;AAAA,EACN;AAAA,EAEA,qBAAqB;AAAA,EACrB,UAAU;AAAA,EACV,eAAe;AAAA,EACf,gBAAgB;AAAA,EAEzB,YAAY,UAAmB,OAAmB,CAAC,GAAG;AACpD,SAAK,SAAS,IAAI,UAAU,KAAK,MAAM;AACvC,QAAI,SAAU,MAAK,WAAW,QAAQ;AACtC,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,WAAW,OAAW,MAAK,UAAU,KAAK,MAAM;AACzD,QAAI,KAAK,oBAAoB,OAAW,MAAK,mBAAmB,KAAK,eAAe;AAAA,EACtF;AAAA;AAAA,EAGA,aAAqB;AAAE,WAAO,KAAK,WAAW;AAAA,EAAG;AAAA,EACjD,WAAW,KAAmB;AAAE,SAAK,WAAW,GAAG;AAAA,EAAG;AAAA;AAAA,EAGtD,WAA0B;AAAE,WAAO,KAAK,SAAS;AAAA,EAAG;AAAA,EACpD,SAAS,OAA4B;AAAE,SAAK,SAAS,KAAK;AAAA,EAAG;AAAA,EAC7D,kBAAiC;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA,EAClE,gBAAgB,OAA4B;AAAE,SAAK,gBAAgB,KAAK;AAAA,EAAG;AAAA,EAC3E,aAAmB;AAAE,SAAK,YAAY;AAAA,EAAG;AAAA,EACzC,kBAA2B;AAAE,WAAO,KAAK,gBAAgB;AAAA,EAAG;AAAA;AAAA,EAG5D,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,QAA6B;AAAE,SAAK,UAAU,MAAM;AAAA,EAAG;AAAA,EACjE,YAA2B;AAAE,WAAO,KAAK,UAAU;AAAA,EAAG;AAAA,EACtD,UAAU,KAA0B;AAAE,SAAK,UAAU,GAAG;AAAA,EAAG;AAAA;AAAA;AAAA,EAI3D,eAAe,IAAiD;AAC9D,SAAK,eAAe,EAAE;AAAA,EACxB;AAAA;AAAA,EAEA,kBACE,IACM;AACN,SAAK,kBAAkB,EAAE;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqC;AACnC,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;ACxEO,IAAM,iBAAiB,IAAI,IAAe;AAC1C,IAAM,mBAAmB,IAAIC,KAAiB;AAC9C,IAAM,aAAa,IAAIA,KAAW;;;ACnBlC,IAAM,QAAQ,yBAAyB;AACvC,IAAM,SAAS,CAAC;AAChB,IAAMC,aAAY,OAAO,WAAW;AAMpC,IAAM,gBAAgB,QAAQ,IAAI,6BAA6B;AAY/D,IAAMC,eAAc,QAAQ,IAAI,6BAA6B;;;ACKpE,IAAM,mBAAmB,SAAS;AAElC,IAAM,gBAA8B,mBAAmB,IAAI;AAE3D,IAAI,SAAuB;AAG3B,IAAM,eAAe,oBAAI,IAAmC;AAGrD,SAAS,cAA4B;AAC1C,SAAO;AACT;AAFgB;AAKT,SAAS,YAAY,OAA2B;AACrD,WAAS;AACT,aAAW,MAAM,cAAc;AAC7B,QAAI;AACF,SAAG,KAAK;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AATgB;AAeT,SAAS,iBAAiB,IAA+C;AAC9E,eAAa,IAAI,EAAE;AACnB,MAAI;AACF,OAAG,MAAM;AAAA,EACX,QAAQ;AAAA,EAER;AACA,SAAO,MAAM,aAAa,OAAO,EAAE;AACrC;AARgB;AAkBT,SAAS,mBAAmB,MAAmD;AACpF,QAAM,UAAU,KAAK,SAAS;AAC9B,MAAI,KAAK,WAAW,SAAS;AAC3B,gBAAY,CAAC;AAAA,EACf,OAAO;AACL,gBAAY,CAAC;AAAA,EACf;AACF;AAPgB;","names":["API","dpopEnabled","isBrowser","client","joinedValues","auth","auth","config","request","url","API","API","API","isBrowser","dpopEnabled"]}