@hodeinavarro/odoo-rpc-ts 0.2.0

package/dist/transport.d.ts

@@ -0,0 +1,62 @@
+import { Context, type Effect } from "effect";
+import type { OdooAuthenticationError } from "./errors/auth.js";
+import type { ProtocolUnsupportedError } from "./errors/protocol.js";
+import type { SchemaDriftError } from "./errors/schema.js";
+import type { OdooServerFault } from "./errors/server.js";
+import type { SessionExpiredError } from "./errors/session.js";
+import type { OdooTransportError } from "./errors/transport.js";
+/**
+ * Parameters for a single `call_kw`-shaped round trip. Deliberately mirrors
+ * Odoo's `execute_kw(model, method, args, kwargs)`.
+ */
+export interface CallKwParams {
+    readonly model: string;
+    readonly method: string;
+    readonly args: ReadonlyArray<unknown>;
+    readonly kwargs: Record<string, unknown>;
+    /**
+     * The browse target — the record ids the method operates on.
+     *
+     * GOTCHA: this is protocol-agnostic on purpose. JSON-2 sends it as its special
+     * `ids` body key; the execute_kw-family transports (web, `/jsonrpc`) prepend it
+     * as the first positional argument. Callers set `ids` instead of hand-placing
+     * it in `args`, so the same call works over every seam.
+     */
+    readonly ids?: ReadonlyArray<number>;
+}
+/**
+ * The complete typed failure channel of a transport round trip. Every seam
+ * (web, JSON-RPC, JSON-2) maps its wire faults into exactly this union at its
+ * choke point, so application code sees one shape regardless of protocol.
+ */
+export type TransportCallError = OdooTransportError | SessionExpiredError | SchemaDriftError | OdooAuthenticationError | ProtocolUnsupportedError | OdooServerFault;
+/**
+ * How a transport encodes calls on the wire. High-level ops that know a
+ * method's Python semantics branch on this — a transport itself never reorders
+ * args. The one live case: `create` vals MUST be positional over the
+ * execute_kw family (Odoo's `call_kw` reads `args[0]` unconditionally, 16–19)
+ * but keyword-only (`vals_list`) over JSON-2.
+ */
+export type TransportDialect = "execute-kw" | "json2";
+declare const Transport_base: Context.ServiceClass<Transport, "odoo-rpc-ts/Transport", {
+    /** The wire dialect — see {@link TransportDialect}. */
+    readonly dialect: TransportDialect;
+    /**
+     * Execute one `call_kw`-shaped round trip and return the raw, still-undecoded
+     * result (callers decode through `effect/Schema` at their boundary).
+     *
+     * GOTCHA: the JSON-2 API (`/json/2/<model>/<method>`) is keyword-only — it
+     * cannot take positional `args`. A `Json2Transport` will reject any call
+     * where `args` is non-empty; put everything in `kwargs` when targeting it.
+     */
+    readonly callKw: (params: CallKwParams) => Effect.Effect<unknown, TransportCallError>;
+}>;
+/**
+ * The one seam every protocol implements. `JsonRpcTransport`, `Json2Transport`,
+ * and the cookie-session `WebTransport` all provide this tag; application code
+ * depends only on it and stays protocol-agnostic.
+ */
+export declare class Transport extends Transport_base {
+}
+export {};
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,uBAAuB,GACvB,wBAAwB,GACxB,eAAe,CAAC;AAEpB;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,OAAO,CAAC;;IAUlD,uDAAuD;sBACrC,gBAAgB;IAElC;;;;;;;OAOG;qBACc,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC;;AAnBzF;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,cAgBH;CAAG"}

package/dist/transport.js

@@ -0,0 +1,9 @@
+import { Context } from "effect";
+/**
+ * The one seam every protocol implements. `JsonRpcTransport`, `Json2Transport`,
+ * and the cookie-session `WebTransport` all provide this tag; application code
+ * depends only on it and stays protocol-agnostic.
+ */
+export class Transport extends Context.Service()("odoo-rpc-ts/Transport") {
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,QAAQ,CAAC;AAkD9C;;;;GAIG;AACH,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAgB3C,CAAC,uBAAuB,CAAC;CAAG"}

package/dist/transports/json2.d.ts

@@ -0,0 +1,41 @@
+import { type Config, Effect, Layer, Option, Schema } from "effect";
+import type { OdooConfig as OdooConfigType } from "../config.js";
+import { OdooAuthenticationError } from "../errors/auth.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClient } from "../internal/platform.js";
+import { Transport } from "../transport.js";
+/**
+ * Build a {@link Transport} bound to the JSON-2 route for a given config.
+ *
+ * GOTCHA: JSON-2 is bearer-only. If the config carries `Password` credentials
+ * there is no API key to send, so construction FAILS in the typed channel with
+ * {@link OdooAuthenticationError} rather than silently degrading — this is a
+ * `Layer` build failure, surfaced eagerly so a misconfigured client never issues
+ * an unauthenticated request.
+ */
+export declare const make: (config: OdooConfigType) => Effect.Effect<typeof Transport.Service, OdooAuthenticationError, HttpClient.HttpClient>;
+/** Wire a JSON-2 {@link Transport} from an explicit config. */
+export declare const layer: (config: OdooConfigType) => Layer.Layer<Transport, OdooAuthenticationError, HttpClient.HttpClient>;
+/** Wire a JSON-2 {@link Transport}, reading {@link OdooConfig} from the environment. */
+export declare const layerConfig: Layer.Layer<Transport, OdooAuthenticationError | Config.ConfigError, HttpClient.HttpClient>;
+/**
+ * The `/json/version` probe result: the server's version string and its raw
+ * `version_info` tuple. Decoded at the boundary; drift raises
+ * {@link SchemaDriftError}.
+ */
+export declare const Json2Version: Schema.Struct<{
+    readonly version: Schema.String;
+    readonly version_info: Schema.$Array<Schema.Union<readonly [Schema.Number, Schema.String]>>;
+}>;
+export type Json2Version = typeof Json2Version.Type;
+/**
+ * Probe `GET {url}/json/version` to detect JSON-2 support.
+ *
+ * Returns `Option.some(version)` on a 200, and `Option.none()` on a 404 — a 404
+ * is the documented "this server predates Odoo 19 (no JSON-2)" signal, not an
+ * error. Any other non-2xx is a real {@link OdooTransportError}; a 200 body that
+ * fails to decode is a {@link SchemaDriftError}.
+ */
+export declare const probeJson2Version: (config: OdooConfigType) => Effect.Effect<Option.Option<Json2Version>, OdooTransportError | SchemaDriftError, HttpClient.HttpClient>;
+//# sourceMappingURL=json2.d.ts.map

package/dist/transports/json2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json2.d.ts","sourceRoot":"","sources":["../../src/transports/json2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAY,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9E,OAAO,KAAK,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AASvD,OAAO,EAAE,kBAAkB,EAAoB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EACL,UAAU,EAIX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAqB,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAyH/D;;;;;;;;GAQG;AACH,eAAO,MAAM,IAAI,WACP,cAAc,KACrB,MAAM,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,uBAAuB,EAAE,UAAU,CAAC,UAAU,CAyErF,CAAC;AASL,+DAA+D;AAC/D,eAAO,MAAM,KAAK,WACR,cAAc,KACrB,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,uBAAuB,EAAE,UAAU,CAAC,UAAU,CACjC,CAAC;AAExC,wFAAwF;AACxF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,KAAK,CACnC,SAAS,EACT,uBAAuB,GAAG,MAAM,CAAC,WAAW,EAC5C,UAAU,CAAC,UAAU,CACsC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,WACpB,cAAc,KACrB,MAAM,CAAC,MAAM,CACd,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAC3B,kBAAkB,GAAG,gBAAgB,EACrC,UAAU,CAAC,UAAU,CA6BnB,CAAC"}

package/dist/transports/json2.js

@@ -0,0 +1,196 @@
+import { Effect, Layer, Option, Redacted, Schema } from "effect";
+import { OdooConfig } from "../config.js";
+import { OdooAuthenticationError } from "../errors/auth.js";
+import { mapServerFault } from "../errors/mapFault.js";
+import { ProtocolUnsupportedError } from "../errors/protocol.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { OdooAccessError, OdooLockError, OdooMissingError, OdooServerError, OdooUserError, } from "../errors/server.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClient, HttpClientRequest, HttpClientResponse, } from "../internal/platform.js";
+import { Transport } from "../transport.js";
+import { ServerVersionInfo } from "../version.js";
+/**
+ * Odoo's `/json/2/<model>/<method>` API (Odoo 19+): a keyword-only, bearer-auth
+ * JSON route that returns the raw method result with no JSON-RPC envelope. This
+ * module is one of the three seams behind the {@link Transport} tag.
+ */
+/** Strip any trailing slashes so path segments join cleanly onto a base URL. */
+const baseUrl = (url) => url.href.replace(/\/+$/u, "");
+/** Sanitized request snapshot — never carries the bearer header or body. */
+const requestInfo = (url, method) => ({ method, url });
+const toTransportError = (request) => (cause) => OdooTransportError.fromHttpClientError(request, cause);
+/**
+ * The `serialize_exception` payload Odoo returns in an error body. Everything is
+ * optional: a bare HTTP failure (proxy 502, gateway timeout) may have no JSON
+ * body at all, in which case we synthesize a fault from the status alone.
+ */
+const SerializeException = Schema.Struct({
+    name: Schema.optional(Schema.String),
+    message: Schema.optional(Schema.String),
+    arguments: Schema.optional(Schema.Array(Schema.Unknown)),
+    context: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+    debug: Schema.optional(Schema.String),
+});
+const emptyException = {};
+/**
+ * Build a {@link RawServerFault} from a decoded exception body and the call
+ * site, honouring `exactOptionalPropertyTypes` (optional keys are attached only
+ * when present, never as explicit `undefined`).
+ */
+const rawFault = (exc, status, site) => ({
+    name: exc.name ?? `http.${status}`,
+    message: exc.message ?? "",
+    arguments: exc.arguments ?? [],
+    context: exc.context ?? {},
+    ...(exc.debug !== undefined ? { debug: exc.debug } : {}),
+    ...(site.model !== undefined ? { model: site.model } : {}),
+    ...(site.method !== undefined ? { method: site.method } : {}),
+});
+/** Status → concrete server-fault constructor, for the no-`name` fallback path. */
+const byStatus = {
+    403: OdooAccessError,
+    404: OdooMissingError,
+    409: OdooLockError,
+    422: OdooUserError,
+};
+/**
+ * The single error-mapping choke point for JSON-2. A non-2xx response becomes
+ * exactly one tagged error:
+ *
+ * - `400` / `415` are transport-shaped (malformed request / wrong media type),
+ *   so they map to {@link OdooTransportError} with sanitized response-error
+ *   metadata.
+ * - Any body with a Python `name` goes through {@link mapServerFault} (shared
+ *   with the other transports), so `AccessDenied` correctly becomes an auth
+ *   error and known exception names get their subtype.
+ * - Otherwise we fall back on the HTTP status, synthesizing a fault named
+ *   `http.<status>` so nothing is silently dropped.
+ */
+const mapJson2Fault = (response, request, site) => Effect.gen(function* () {
+    const status = response.status;
+    if (status === 400 || status === 415) {
+        // `filterStatusOk` manufactures a response error from the non-ok status
+        // without reading the body; the public error retains only safe metadata.
+        const cause = yield* Effect.flip(HttpClientResponse.filterStatusOk(response)).pipe(Effect.orDie);
+        return yield* Effect.fail(OdooTransportError.fromHttpClientError(request, cause));
+    }
+    // A non-JSON or shape-drifted error body falls back to an empty exception,
+    // which routes to status-based mapping below.
+    const exc = yield* response.json.pipe(Effect.flatMap(Schema.decodeUnknownEffect(SerializeException)), Effect.orElseSucceed(() => emptyException));
+    const raw = rawFault(exc, status, site);
+    // GOTCHA: 401 is checked BEFORE the body name. Odoo 19 serializes a bad
+    // bearer key as werkzeug.exceptions.Unauthorized — an unmapped name that
+    // would otherwise fall through to OdooServerError instead of auth.
+    if (status === 401) {
+        return yield* Effect.fail(new OdooAuthenticationError({
+            reason: "api-key-expired-or-invalid",
+            message: raw.message || "JSON-2 rejected the API key (HTTP 401).",
+        }));
+    }
+    if (exc.name !== undefined) {
+        return yield* Effect.fail(mapServerFault(raw, site));
+    }
+    const Ctor = byStatus[status] ?? OdooServerError;
+    return yield* Effect.fail(new Ctor(raw));
+});
+/**
+ * Build a {@link Transport} bound to the JSON-2 route for a given config.
+ *
+ * GOTCHA: JSON-2 is bearer-only. If the config carries `Password` credentials
+ * there is no API key to send, so construction FAILS in the typed channel with
+ * {@link OdooAuthenticationError} rather than silently degrading — this is a
+ * `Layer` build failure, surfaced eagerly so a misconfigured client never issues
+ * an unauthenticated request.
+ */
+export const make = (config) => Effect.gen(function* () {
+    if (config.credentials._tag !== "ApiKey") {
+        return yield* Effect.fail(new OdooAuthenticationError({
+            reason: "invalid-credentials",
+            message: "JSON-2 transport is bearer-only and requires ApiKey credentials; " +
+                "got Password. Provide ODOO_API_KEY.",
+        }));
+    }
+    const apiKey = config.credentials.apiKey;
+    const client = yield* HttpClient.HttpClient;
+    const base = baseUrl(config.url);
+    const callKw = (params) => {
+        const site = { model: params.model, method: params.method };
+        const run = Effect.gen(function* () {
+            // JSON-2 cannot carry positional args; reordering silently would corrupt
+            // the call, so reject loudly and name the offending method.
+            if (params.args.length > 0) {
+                return yield* Effect.fail(new ProtocolUnsupportedError({
+                    protocol: "json-2",
+                    serverVersion: "19+",
+                    message: `JSON-2 is keyword-only: "${params.model}.${params.method}" was called with ` +
+                        `${params.args.length} positional argument(s); move them into kwargs.`,
+                }));
+            }
+            const url = `${base}/json/2/${params.model}/${params.method}`;
+            const info = requestInfo(url, "POST");
+            // Keyword-only route: the browse target rides as the dedicated `ids` body
+            // key (see CallKwParams.ids), never as positional args.
+            const body = params.ids ? { ...params.kwargs, ids: params.ids } : params.kwargs;
+            // Redacted is unwrapped ONLY here, at the wire boundary.
+            const request = HttpClientRequest.post(url).pipe(HttpClientRequest.setHeaders({
+                Authorization: `Bearer ${Redacted.value(apiKey)}`,
+                "X-Odoo-Database": config.db,
+                "Content-Type": "application/json",
+            }), HttpClientRequest.bodyJsonUnsafe(body));
+            const response = yield* client
+                .execute(request)
+                .pipe(Effect.mapError(toTransportError(info)));
+            if (response.status >= 200 && response.status < 300) {
+                // Raw method result, no envelope; callers decode at their own boundary.
+                return yield* response.json.pipe(Effect.mapError(toTransportError(info)));
+            }
+            return yield* mapJson2Fault(response, info, site);
+        });
+        // Span carries only the coordinates — never args, kwargs, or the API key.
+        return run.pipe(Effect.withSpan("odoo.json2", {
+            attributes: { model: params.model, method: params.method },
+        }));
+    };
+    return { dialect: "json2", callKw };
+});
+/** Wire a JSON-2 {@link Transport} from an explicit config. */
+export const layer = (config) => Layer.effect(Transport, make(config));
+/** Wire a JSON-2 {@link Transport}, reading {@link OdooConfig} from the environment. */
+export const layerConfig = Layer.effect(Transport, Effect.flatMap(OdooConfig, make));
+/**
+ * The `/json/version` probe result: the server's version string and its raw
+ * `version_info` tuple. Decoded at the boundary; drift raises
+ * {@link SchemaDriftError}.
+ */
+export const Json2Version = Schema.Struct({
+    version: Schema.String,
+    version_info: ServerVersionInfo,
+});
+/**
+ * Probe `GET {url}/json/version` to detect JSON-2 support.
+ *
+ * Returns `Option.some(version)` on a 200, and `Option.none()` on a 404 — a 404
+ * is the documented "this server predates Odoo 19 (no JSON-2)" signal, not an
+ * error. Any other non-2xx is a real {@link OdooTransportError}; a 200 body that
+ * fails to decode is a {@link SchemaDriftError}.
+ */
+export const probeJson2Version = (config) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const url = `${baseUrl(config.url)}/json/version`;
+    const info = requestInfo(url, "GET");
+    const response = yield* client
+        .execute(HttpClientRequest.get(url))
+        .pipe(Effect.mapError(toTransportError(info)));
+    const status = response.status;
+    if (status === 404) {
+        return Option.none();
+    }
+    if (status < 200 || status >= 300) {
+        const cause = yield* Effect.flip(HttpClientResponse.filterStatusOk(response)).pipe(Effect.orDie);
+        return yield* Effect.fail(OdooTransportError.fromHttpClientError(info, cause));
+    }
+    const payload = yield* response.json.pipe(Effect.mapError(toTransportError(info)));
+    const decoded = yield* Schema.decodeUnknownEffect(Json2Version)(payload).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: "odoo.json2.version", payload, cause })));
+    return Option.some(decoded);
+});
+//# sourceMappingURL=json2.js.map

package/dist/transports/json2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json2.js","sourceRoot":"","sources":["../../src/transports/json2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAsB,cAAc,EAAuB,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,EAEf,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAoB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EACL,UAAU,EAEV,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAqB,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD;;;;GAIG;AAEH,gFAAgF;AAChF,MAAM,OAAO,GAAG,CAAC,GAAQ,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEpE,4EAA4E;AAC5E,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,MAAc,EAAe,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAEpF,MAAM,gBAAgB,GACpB,CAAC,OAAoB,EAAE,EAAE,CACzB,CAAC,KAA0B,EAAsB,EAAE,CACjD,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CACtC,CAAC,CAAC;AAGH,MAAM,cAAc,GAAuB,EAAE,CAAC;AAE9C;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CACf,GAAuB,EACvB,MAAc,EACd,IAAmB,EACa,EAAE,CAAC,CAAC;IACpC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,QAAQ,MAAM,EAAE;IAClC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;IAC1B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;IAC9B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;IAC1B,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,QAAQ,GAAoF;IAChG,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,gBAAgB;IACrB,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,aAAa;CACnB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,aAAa,GAAG,CACpB,QAA+C,EAC/C,OAAoB,EACpB,IAAmB,EACmE,EAAE,CACxF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAChF,MAAM,CAAC,KAAK,CACb,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACnC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,EAC9D,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,wEAAwE;IACxE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,uBAAuB,CAAC;YAC1B,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,yCAAyC;SAClE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;IACjD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEL;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,MAAsB,EACmE,EAAE,CAC3F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,uBAAuB,CAAC;YAC1B,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EACL,mEAAmE;gBACnE,qCAAqC;SACxC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAmD,EAAE;QACvF,MAAM,IAAI,GAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAE3E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,yEAAyE;YACzE,4DAA4D;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,wBAAwB,CAAC;oBAC3B,QAAQ,EAAE,QAAQ;oBAClB,aAAa,EAAE,KAAK;oBACpB,OAAO,EACL,4BAA4B,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,oBAAoB;wBAC7E,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,iDAAiD;iBACzE,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,IAAI,WAAW,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAEtC,0EAA0E;YAC1E,wDAAwD;YACxD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAEhF,yDAAyD;YACzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAC9C,iBAAiB,CAAC,UAAU,CAAC;gBAC3B,aAAa,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACjD,iBAAiB,EAAE,MAAM,CAAC,EAAE;gBAC5B,cAAc,EAAE,kBAAkB;aACnC,CAAC,EACF,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;iBAC3B,OAAO,CAAC,OAAO,CAAC;iBAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAEjD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,wEAAwE;gBACxE,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,OAAO,GAAG,CAAC,IAAI,CACb,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE;YAC5B,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;SAC3D,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC,CAAC,CAAC;AASL,+DAA+D;AAC/D,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,MAAsB,EACkD,EAAE,CAC1E,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAExC,wFAAwF;AACxF,MAAM,CAAC,MAAM,WAAW,GAIpB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,YAAY,EAAE,iBAAiB;CAChC,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAAsB,EAKtB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;IAClD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;SAC3B,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAChF,MAAM,CAAC,KAAK,CACb,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CACnF,CACF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/transports/jsonrpc.d.ts

@@ -0,0 +1,41 @@
+import { Config, Effect, Layer } from "effect";
+import { OdooConfig } from "../config.js";
+import { OdooAuthenticationError } from "../errors/auth.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import type { OdooServerFault } from "../errors/server.js";
+import type { SessionExpiredError } from "../errors/session.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClient } from "../internal/platform.js";
+import { Transport } from "../transport.js";
+import { CommonVersionResponse } from "../version.js";
+/** The failure channel a single round trip can produce (a subset of `TransportCallError`). */
+type RoundTripError = OdooTransportError | SchemaDriftError | SessionExpiredError | OdooServerFault | OdooAuthenticationError;
+/**
+ * Build a `JsonRpcTransport` service value against a fully-resolved config.
+ *
+ * `uid` is resolved lazily on the first `callKw` via `common.authenticate`, then
+ * success-only single-flight cached (a failed authenticate caches nothing, so
+ * the next call retries — never `Effect.cached`).
+ *
+ * Requires an `HttpClient` in context; the caller provides the platform layer.
+ */
+export declare const make: (config: OdooConfig) => Effect.Effect<typeof Transport.Service, never, HttpClient.HttpClient>;
+/**
+ * `JsonRpcTransport` as a `Layer`, wired against an explicit config. Never
+ * fails to build (`E = never`); the config is already resolved. Requires an
+ * `HttpClient` from the platform layer the consumer provides.
+ */
+export declare const layer: (config: OdooConfig) => Layer.Layer<Transport, never, HttpClient.HttpClient>;
+/**
+ * `JsonRpcTransport` as a `Layer` that reads {@link OdooConfig} from the ambient
+ * `ConfigProvider`. Fails with `ConfigError` if required values are missing.
+ */
+export declare const layerConfig: Layer.Layer<Transport, Config.ConfigError, HttpClient.HttpClient>;
+/**
+ * The `common.version` probe, decoded into {@link CommonVersionResponse}. Shared
+ * with the `VersionResolver` implementation so version resolution and the
+ * transport agree on one wire path. Requires an `HttpClient` in context.
+ */
+export declare const makeVersion: (config: OdooConfig) => Effect.Effect<CommonVersionResponse, RoundTripError, HttpClient.HttpClient>;
+export {};
+//# sourceMappingURL=jsonrpc.d.ts.map

package/dist/transports/jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../src/transports/jsonrpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAyB,MAAM,QAAQ,CAAC;AACtE,OAAO,EAAE,UAAU,EAAwB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAqB,MAAM,yBAAyB,CAAC;AAGxE,OAAO,EAAqB,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAStD,8FAA8F;AAC9F,KAAK,cAAc,GACf,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,eAAe,GACf,uBAAuB,CAAC;AA0D5B;;;;;;;;GAQG;AACH,eAAO,MAAM,IAAI,WACP,UAAU,KACjB,MAAM,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CA+EnE,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,KAAK,WAAY,UAAU,KAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CACvD,CAAC;AAExC;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAC/B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,WAAW,WACd,UAAU,KACjB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,cAAc,EAAE,UAAU,CAAC,UAAU,CAkBzE,CAAC"}

package/dist/transports/jsonrpc.js

@@ -0,0 +1,119 @@
+import { Config, Effect, Layer, Redacted, Ref, Schema } from "effect";
+import { OdooConfig } from "../config.js";
+import { OdooAuthenticationError } from "../errors/auth.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClient, HttpClientRequest } from "../internal/platform.js";
+import * as SingleFlight from "../internal/singleFlight.js";
+import { buildRequest, JsonRpcResponse, mapJsonRpcError } from "../protocol/jsonrpc.js";
+import { Transport } from "../transport.js";
+import { CommonVersionResponse } from "../version.js";
+/** Join the configured base URL with the `/jsonrpc` path, tolerating a trailing slash. */
+const jsonRpcEndpoint = (url) => `${url.href.replace(/\/+$/, "")}/jsonrpc`;
+const extractCredentials = (credentials) => credentials._tag === "ApiKey"
+    ? { username: credentials.username, secret: credentials.apiKey, isPassword: false }
+    : { username: credentials.username, secret: credentials.password, isPassword: true };
+/**
+ * One JSON-RPC round trip: build the envelope, POST it, decode the response, and
+ * either return the raw `result` or map the fault into our union.
+ *
+ * GOTCHA: never put `args`/`kwargs`/the secret into the span attributes — only
+ * the model and method (or service/method) are safe to record.
+ */
+const roundTrip = (client, endpoint, id, params, attributes, site) => Effect.gen(function* () {
+    // v4 rename: bodyUnsafeJson → bodyJsonUnsafe.
+    const request = HttpClientRequest.post(endpoint).pipe(HttpClientRequest.setHeader("Content-Type", "application/json"), HttpClientRequest.bodyJsonUnsafe(buildRequest(params, id)));
+    // HttpClientError covers both connection failures and a non-JSON body.
+    const payload = yield* client.execute(request).pipe(Effect.flatMap((response) => response.json), Effect.mapError((cause) => OdooTransportError.fromHttpClientError({ method: "POST", url: endpoint }, cause)));
+    const decoded = yield* Schema.decodeUnknownEffect(JsonRpcResponse)(payload).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: "odoo.jsonrpc response", payload, cause })));
+    if ("error" in decoded) {
+        return yield* Effect.fail(mapJsonRpcError(decoded.error, site));
+    }
+    return decoded.result;
+}).pipe(Effect.withSpan("odoo.jsonrpc", { attributes }));
+/**
+ * Build a `JsonRpcTransport` service value against a fully-resolved config.
+ *
+ * `uid` is resolved lazily on the first `callKw` via `common.authenticate`, then
+ * success-only single-flight cached (a failed authenticate caches nothing, so
+ * the next call retries — never `Effect.cached`).
+ *
+ * Requires an `HttpClient` in context; the caller provides the platform layer.
+ */
+export const make = (config) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const idRef = yield* Ref.make(0);
+    const endpoint = jsonRpcEndpoint(config.url);
+    const { username, secret, isPassword } = extractCredentials(config.credentials);
+    const db = config.db;
+    const nextId = Ref.updateAndGet(idRef, (n) => n + 1);
+    const authenticate = Effect.gen(function* () {
+        const id = yield* nextId;
+        const result = yield* roundTrip(client, endpoint, id, {
+            service: "common",
+            method: "authenticate",
+            args: [db, username, Redacted.value(secret), {}],
+        }, {}, {});
+        if (typeof result === "number" && result > 0) {
+            return result;
+        }
+        // authenticate returned `false` (or a null uid): credentials rejected.
+        return yield* Effect.fail(new OdooAuthenticationError({
+            reason: "invalid-credentials",
+            message: isPassword
+                ? "Odoo rejected the login. If this account has TOTP/2FA enabled, its password cannot be used over RPC — supply an API key as the secret instead."
+                : "Odoo rejected the provided credentials.",
+        }));
+    });
+    const uid = yield* SingleFlight.make(authenticate);
+    const callKw = (params) => Effect.gen(function* () {
+        const resolvedUid = yield* uid.get;
+        const id = yield* nextId;
+        // execute_kw-family route: an explicit `ids` browse target rides as the
+        // first positional argument (see CallKwParams.ids).
+        const args = params.ids ? [params.ids, ...params.args] : params.args;
+        return yield* roundTrip(client, endpoint, id, {
+            service: "object",
+            method: "execute_kw",
+            args: [
+                db,
+                resolvedUid,
+                Redacted.value(secret),
+                params.model,
+                params.method,
+                args,
+                params.kwargs,
+            ],
+        }, { model: params.model, method: params.method }, { model: params.model, method: params.method });
+    }).pipe(
+    // Self-healing: an auth fault means the cached uid/credential pairing is
+    // no longer valid server-side (key revoked-then-restored, credentials
+    // out of sync, ...). Drop the cache so the next call re-authenticates
+    // instead of staying wedged until the layer is rebuilt — symmetric with
+    // CookieSession.invalidate.
+    Effect.tapError((error) => error._tag === "OdooAuthenticationError" ? uid.invalidate : Effect.void));
+    return { dialect: "execute-kw", callKw };
+});
+/**
+ * `JsonRpcTransport` as a `Layer`, wired against an explicit config. Never
+ * fails to build (`E = never`); the config is already resolved. Requires an
+ * `HttpClient` from the platform layer the consumer provides.
+ */
+export const layer = (config) => Layer.effect(Transport, make(config));
+/**
+ * `JsonRpcTransport` as a `Layer` that reads {@link OdooConfig} from the ambient
+ * `ConfigProvider`. Fails with `ConfigError` if required values are missing.
+ */
+export const layerConfig = Layer.effect(Transport, Effect.flatMap(OdooConfig, make));
+/**
+ * The `common.version` probe, decoded into {@link CommonVersionResponse}. Shared
+ * with the `VersionResolver` implementation so version resolution and the
+ * transport agree on one wire path. Requires an `HttpClient` in context.
+ */
+export const makeVersion = (config) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const endpoint = jsonRpcEndpoint(config.url);
+    const raw = yield* roundTrip(client, endpoint, 1, { service: "common", method: "version", args: [] }, {}, {});
+    return yield* Schema.decodeUnknownEffect(CommonVersionResponse)(raw).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: "odoo.jsonrpc common.version", payload: raw, cause })));
+});
+//# sourceMappingURL=jsonrpc.js.map

package/dist/transports/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../../src/transports/jsonrpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,EAAE,UAAU,EAAwB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,EAAqB,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAiBtD,0FAA0F;AAC1F,MAAM,eAAe,GAAG,CAAC,GAAQ,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC;AAExF,MAAM,kBAAkB,GAAG,CACzB,WAA4B,EAK5B,EAAE,CACF,WAAW,CAAC,IAAI,KAAK,QAAQ;IAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE;IACnF,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAEzF;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,CAChB,MAA6B,EAC7B,QAAgB,EAChB,EAAU,EACV,MAAyB,EACzB,UAAkC,EAClC,IAAmB,EACqB,EAAE,CAC1C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,8CAA8C;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnD,iBAAiB,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,EAC/D,iBAAiB,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAC3D,CAAC;IAEF,uEAAuE;IACvE,MAAM,OAAO,GAAY,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,kBAAkB,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CACjF,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9E,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CACtF,CACF,CAAC;IAEF,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,MAAkB,EACqD,EAAE,CACzE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IAErB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAErD,MAAM,YAAY,GAA0C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAC7B,MAAM,EACN,QAAQ,EACR,EAAE,EACF;YACE,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;SACjD,EACD,EAAE,EACF,EAAE,CACH,CAAC;QACF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,uEAAuE;QACvE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,uBAAuB,CAAC;YAC1B,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,UAAU;gBACjB,CAAC,CAAC,gJAAgJ;gBAClJ,CAAC,CAAC,yCAAyC;SAC9C,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,CAAC,MAAoB,EAA8C,EAAE,CAClF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACnC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QACzB,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACrE,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,MAAM,EACN,QAAQ,EACR,EAAE,EACF;YACE,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE;gBACJ,EAAE;gBACF,WAAW;gBACX,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;gBACtB,MAAM,CAAC,KAAK;gBACZ,MAAM,CAAC,MAAM;gBACb,IAAI;gBACJ,MAAM,CAAC,MAAM;aACd;SACF,EACD,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAC9C,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC,IAAI;IACL,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,4BAA4B;IAC5B,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACxE,CACF,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,YAAqB,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAkB,EAAwD,EAAE,CAChG,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GACtB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAkB,EAC2D,EAAE,CAC/E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAC1B,MAAM,EACN,QAAQ,EACR,CAAC,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,EAClD,EAAE,EACF,EAAE,CACH,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CACxF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/transports/web.d.ts

@@ -0,0 +1,15 @@
+import { type Config, Effect, Layer } from "effect";
+import { OdooConfig } from "../config.js";
+import { CookieSession } from "../session/cookie.js";
+import { Transport } from "../transport.js";
+/**
+ * Build the `WebTransport` implementation. Every `call_kw` first ensures a
+ * cookie session exists (via {@link CookieSession}) and then rides the shared,
+ * cookie-bound HttpClient so `session_id` — and any rotation — is always sent.
+ */
+export declare const make: (config: Pick<OdooConfig, "url">) => Effect.Effect<typeof Transport.Service, never, CookieSession>;
+/** Provide the web `Transport` from an already-resolved config. Requires `CookieSession`. */
+export declare const layer: (config: Pick<OdooConfig, "url">) => Layer.Layer<Transport, never, CookieSession>;
+/** Provide the web `Transport`, resolving `OdooConfig` from the environment. */
+export declare const layerConfig: Layer.Layer<Transport, Config.ConfigError, CookieSession>;
+//# sourceMappingURL=web.d.ts.map

package/dist/transports/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/transports/web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAQrD,OAAO,EAAqB,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,IAAI,WAIP,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CA6D3D,CAAC;AAEL,6FAA6F;AAC7F,eAAO,MAAM,KAAK,WACR,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,KAC9B,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,CAA0C,CAAC;AAEzF,gFAAgF;AAChF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CACvB,CAAC"}

package/dist/transports/web.js

@@ -0,0 +1,62 @@
+import { Effect, Layer, Schema } from "effect";
+import { OdooConfig } from "../config.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClientRequest } from "../internal/platform.js";
+import { CookieSession } from "../session/cookie.js";
+import { joinPath } from "../session/cookie.js";
+import { buildRequest, JsonRpcResponse, mapJsonRpcError, nextRequestId, } from "../protocol/jsonrpc.js";
+import { Transport } from "../transport.js";
+/**
+ * Build the `WebTransport` implementation. Every `call_kw` first ensures a
+ * cookie session exists (via {@link CookieSession}) and then rides the shared,
+ * cookie-bound HttpClient so `session_id` — and any rotation — is always sent.
+ */
+export const make = (
+// Only `url` is read: the transport never touches credentials, so an
+// injected-cookie consumer (CookieSessionLive.fromExisting) can drive it
+// without fabricating an OdooConfig. A full OdooConfig still satisfies this.
+config) => Effect.gen(function* () {
+    const session = yield* CookieSession;
+    const callUrl = joinPath(config.url, "web/dataset/call_kw");
+    const request = { method: "POST", url: callUrl };
+    const callKw = (params) => Effect.gen(function* () {
+        // Choke point: ensure the session before the call. A SessionExpiredError
+        // from here does NOT auto-relogin (see retryOnSessionExpired).
+        yield* session.login;
+        // execute_kw-family route: an explicit `ids` browse target rides as the
+        // first positional argument (see CallKwParams.ids).
+        const args = params.ids ? [params.ids, ...params.args] : params.args;
+        const envelope = buildRequest({
+            model: params.model,
+            method: params.method,
+            args,
+            kwargs: params.kwargs,
+        }, nextRequestId());
+        const response = yield* session.client
+            .execute(HttpClientRequest.bodyJsonUnsafe(HttpClientRequest.post(callUrl), envelope))
+            .pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+        const body = yield* response.json.pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+        const decoded = yield* Schema.decodeUnknownEffect(JsonRpcResponse)(body).pipe(Effect.mapError((cause) => new SchemaDriftError({
+            context: "web/dataset/call_kw envelope",
+            payload: body,
+            cause,
+        })));
+        if ("error" in decoded) {
+            // Single mapping choke point: code 100 → SessionExpiredError, else
+            // mapServerFault, with the call site threaded through.
+            return yield* Effect.fail(mapJsonRpcError(decoded.error, { model: params.model, method: params.method }));
+        }
+        return decoded.result;
+    }).pipe(
+    // No args/secrets in span attributes — model + method only.
+    Effect.withSpan("odoo.web.call_kw", {
+        attributes: { model: params.model, method: params.method },
+    }));
+    return { dialect: "execute-kw", callKw };
+});
+/** Provide the web `Transport` from an already-resolved config. Requires `CookieSession`. */
+export const layer = (config) => Layer.effect(Transport, make(config));
+/** Provide the web `Transport`, resolving `OdooConfig` from the environment. */
+export const layerConfig = Layer.effect(Transport, Effect.flatMap(OdooConfig, make));
+//# sourceMappingURL=web.js.map

package/dist/transports/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../src/transports/web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAoB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAqB,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;AAClB,qEAAqE;AACrE,yEAAyE;AACzE,6EAA6E;AAC7E,MAA+B,EACgC,EAAE,CACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,CAAC,MAAoB,EAA8C,EAAE,CAClF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,yEAAyE;QACzE,+DAA+D;QAC/D,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAErB,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACrE,MAAM,QAAQ,GAAG,YAAY,CAC3B;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,EACD,aAAa,EAAE,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM;aACnC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;aACpF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAE5F,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACnF,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,gBAAgB,CAAC;YACnB,OAAO,EAAE,8BAA8B;YACvC,OAAO,EAAE,IAAI;YACb,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEF,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,mEAAmE;YACnE,uDAAuD;YACvD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CAAC,IAAI;IACL,4DAA4D;IAC5D,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE;QAClC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KAC3D,CAAC,CACH,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,YAAqB,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC,CAAC,CAAC;AAEL,6FAA6F;AAC7F,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,MAA+B,EACe,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAEzF,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GACtB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC"}