@keboola/api-client 48.0.0 → 50.0.0

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["createStore","createStore","createStore","clamp","finiteOr","isPlainObject","createStore","createProject","assert","createStore","ServiceId","createConfigurationSdk","createTagSdk","createSemanticLayerSdk","createKaiMemorySdk","createVaultSdk","ServiceUnavailableError","createVaultClient","createDataScienceClient","createAppsClient","createEncryptionClient","createEditorClient","createSyncActionsClient","createTelemetryClient","createQueryServiceClient","createQueueClient","createChatClient","createAiClient","createOmnisearchClient","createImportClient","createKaiAgentClient","createComponentsMcpClient","createOauthClient","createSchedulerClient","createStreamClient","createNotificationsClient","createBillingClient","createMetastoreClient","KeboolaHttpHeader","createStorageClient","createStorageTable","ProjectFeature","normalizeBaseUrl","createAuthClient","createManagementClient","Result","Result","Result","Result","Result","createStore","createAuthClient","Result","isUnauthorized","dedupe","createBearerAuthMiddleware","createEmitter","KeboolaHttpHeader","createStorageClient","createStorageClient","KeboolaHttpHeader","createStorageClient","createStorageTable","ProjectFeature","z","createAuthClient","createManagementClient","normalizeBaseUrl","Result","HttpHeader","KeboolaHttpHeader","lazy","CREDENTIAL_HEADERS","REDACTED","generateUUID","redactHeaders","ApiError","isApiError","HttpStatus","ApiError","delay","KeboolaHttpHeader"],"sources":["../src/utils/assert.ts","../src/utils/ensure.ts","../src/utils/async/coalesce.ts","../src/utils/store/derivedStore.ts","../src/utils/store/derivedAsyncStore.ts","../src/utils/async/poll/registry.ts","../src/utils/async/queueSeries.ts","../src/utils/deepMerge.ts","../src/utils/persistor/adapters.ts","../src/utils/persistor/persistor.ts","../src/keboola/createLiveProject.ts","../src/keboola/errors.ts","../src/serviceClientRegistry/utils.ts","../src/serviceClientRegistry/createServiceClientRegistry.ts","../src/keboola/createApi.ts","../src/keboola/createMiddlewareFor.ts","../src/keboola/legacy/createConfig.ts","../src/domain/defaultBranch.ts","../src/domain/stack.ts","../src/sdks/variables/variablesSdk.ts","../src/keboola/createSdk.ts","../src/keboola/createServiceClients.ts","../src/keboola/legacy/createProjectClients.ts","../src/keboola/legacy/keboola.ts","../src/keboola/bearer/state/factories.ts","../src/keboola/bearer/state/auth.ts","../src/keboola/bearer/state/projects.ts","../src/keboola/bearer/state/scope.ts","../src/keboola/bearer/state/stacks.ts","../src/keboola/bearer/state/state.ts","../src/keboola/bearer/credentials/renewal.ts","../src/keboola/bearer/credentials/credentials.ts","../src/keboola/bearer/context/resource.ts","../src/keboola/bearer/context/project.ts","../src/keboola/bearer/context/stack.ts","../src/keboola/bearer/perProject.ts","../src/keboola/bearer/persistor.ts","../src/keboola/bearer/perStack.ts","../src/keboola/bearer/keboola.ts","../src/middlewares/loggingMiddleware.ts","../src/middlewares/retryMiddleware.ts","../src/middlewares/uiVersionMiddleware.ts","../src/domain/adminAccount.ts"],"sourcesContent":["export function assert<T>(value: T | undefined | null, message: string): asserts value is T {\n  if (value == null) {\n    throw new Error(message);\n  }\n}\n","/**\n * Read a key, or build its value and keep it.\n *\n * `Map.prototype.getOrInsertComputed` is this natively — swap to it once it clears the app's\n * `baseline-widely-available` build target. Vite transpiles syntax, not methods, so adopting it\n * early fails in the browser rather than at build.\n */\nexport const ensure = <K, V extends NonNullable<unknown>>(\n  map: Map<K, V>,\n  key: K,\n  build: () => V,\n): V => {\n  const existing = map.get(key);\n  if (existing !== undefined) return existing;\n\n  const created = build();\n  map.set(key, created);\n\n  return created;\n};\n","import type { TaskFn } from './types';\n\n/**\n * Coalesces concurrent triggers onto a single, never-parallel run of `task`.\n *\n * - Triggers fired while a run is busy collapse into one trailing run.\n * - Each trigger resolves with the first run started after it, so it never sees stale state.\n * - The returned promise rejects with whatever `task` throws.\n */\nexport const coalesce = <T>(task: TaskFn<T>): (() => Promise<Awaited<T>>) => {\n  let running = false;\n  const waiters: PromiseWithResolvers<Awaited<T>>[] = [];\n\n  const drain = async () => {\n    running = true;\n    const batch = waiters.splice(0);\n\n    try {\n      const result = await task();\n      batch.forEach((waiter) => waiter.resolve(result));\n    } catch (error) {\n      batch.forEach((waiter) => waiter.reject(error));\n    }\n    // Tail call, so draining mid-run triggers never grows the stack.\n    if (waiters.length > 0) return drain();\n    running = false;\n  };\n\n  return () => {\n    const waiter = Promise.withResolvers<Awaited<T>>();\n    waiters.push(waiter);\n    if (!running) void drain();\n    return waiter.promise;\n  };\n};\n","import { createStore, type ReadableStore } from './store';\n\nconst isPlainObjectOrArray = (value: object): boolean => {\n  if (Array.isArray(value)) return true;\n  const proto = Object.getPrototypeOf(value);\n  return proto === Object.prototype || proto === null;\n};\n\nexport const shallowEqual = <T>(a: T, b: T): boolean => {\n  if (Object.is(a, b)) return true;\n  if (typeof a !== 'object' || a === null || typeof b !== 'object' || b === null) return false;\n  if (!isPlainObjectOrArray(a) || !isPlainObjectOrArray(b)) return false;\n  const aKeys = Object.keys(a) as (keyof T)[];\n  const bKeys = Object.keys(b) as (keyof T)[];\n  return aKeys.length === bKeys.length && aKeys.every((key) => Object.is(a[key], b[key]));\n};\n\ntype DerivedStoreOptions<S, K, T> = {\n  source: ReadableStore<S>;\n  dependsOn: (state: S) => K;\n  build: (key: K) => T;\n  keyEquals?: (a: K, b: K) => boolean;\n};\n\nexport const createDerivedStore = <S, K, T>({\n  source,\n  dependsOn,\n  build,\n  keyEquals = shallowEqual,\n}: DerivedStoreOptions<S, K, T>): ReadableStore<T> => {\n  let key = dependsOn(source.get());\n  const store = createStore(build(key));\n\n  // The source subscription lives for the derived store's lifetime (both normally live as long as\n  // the client). `dispose()` tears down both it and the derived store, so a short-lived derived\n  // store can be cleaned up without leaking the source subscription or taking stale updates.\n  const unsubscribe = source.subscribe((state) => {\n    const next = dependsOn(state);\n    if (keyEquals(key, next)) return;\n    key = next;\n    store.set(build(next));\n  });\n\n  const get = store.get;\n\n  const subscribe = store.subscribe;\n\n  const dispose = () => {\n    unsubscribe();\n    store.dispose();\n  };\n\n  return { get, subscribe, dispose };\n};\n","import { shallowEqual } from './derivedStore';\nimport { createStore, type ReadableStore } from './store';\n\nexport type AsyncState<T> =\n  | { state: 'idle' }\n  | { state: 'pending' }\n  | { state: 'ready'; value: T }\n  | { state: 'errored'; error: unknown };\n\n// The terminal states `settled()` resolves with.\ntype SettledState<T> = Extract<AsyncState<T>, { state: 'ready' } | { state: 'errored' }>;\n\ntype DerivedAsyncStoreOptions<S, K, T> = {\n  source: ReadableStore<S>;\n  dependsOn: (state: S) => K | null;\n  build: (key: K, signal: AbortSignal) => Promise<T>;\n  keyEquals?: (a: K, b: K) => boolean;\n};\n\n// Async sibling of `createDerivedStore`: an `AsyncState<T>` cell for a value that arrives later.\n// - Only the latest run writes state; a re-key or `null` key aborts the previous run's `signal`.\n// - `dependsOn` returning `null` means nothing to build → `idle`.\n// - The source subscription is permanent for the store's lifetime.\n// - `settled()` resolves with the next `ready`/`errored` state (at once if terminal); never rejects.\nexport const createDerivedAsyncStore = <S, K, T>({\n  source,\n  dependsOn,\n  build,\n  keyEquals = shallowEqual,\n}: DerivedAsyncStoreOptions<S, K, T>): {\n  store: ReadableStore<AsyncState<T>>;\n  settled: () => Promise<SettledState<T>>;\n} => {\n  const store = createStore<AsyncState<T>>({ state: 'idle' });\n  let currentKey: K | null = null;\n  let generation = 0;\n  let controller: AbortController | null = null;\n\n  const run = (key: K) => {\n    controller?.abort();\n    controller = new AbortController();\n    const runGeneration = ++generation;\n    store.set({ state: 'pending' });\n    // The reject handler consumes every rejection, including a superseded run's AbortError.\n    build(key, controller.signal).then(\n      (value) => {\n        if (runGeneration === generation) store.set({ state: 'ready', value });\n      },\n      (error) => {\n        if (runGeneration === generation) store.set({ state: 'errored', error });\n      },\n    );\n  };\n\n  const sync = (state: S) => {\n    const next = dependsOn(state);\n    if (next === null) {\n      if (currentKey === null) return;\n      controller?.abort();\n      controller = null;\n      generation += 1;\n      currentKey = null;\n      store.set({ state: 'idle' });\n      return;\n    }\n    if (currentKey !== null && keyEquals(currentKey, next)) return;\n    currentKey = next;\n    run(next);\n  };\n  sync(source.get());\n\n  const unsubscribe = source.subscribe(sync);\n\n  const get = store.get;\n\n  const subscribe = store.subscribe;\n\n  const dispose = () => {\n    controller?.abort();\n    unsubscribe();\n    store.dispose();\n  };\n\n  const readable: ReadableStore<AsyncState<T>> = { get, subscribe, dispose };\n\n  const settled = (): Promise<SettledState<T>> =>\n    new Promise<SettledState<T>>((resolve) => {\n      let unsubscribeSettled = () => {};\n      const check = (state: AsyncState<T>) => {\n        if (state.state === 'ready' || state.state === 'errored') {\n          unsubscribeSettled();\n          resolve(state);\n        }\n      };\n      unsubscribeSettled = store.subscribe(check);\n      check(store.get());\n    });\n\n  return { store: readable, settled };\n};\n","import { createStore } from '../../store';\n\nimport { emitter, type ObservedPoller, type Poller, type PollSnapshot } from './poll';\nimport { clamp, finiteOr } from './utils';\n\nconst DEFAULT_LIMIT = 50;\n\nexport type PollEntry = {\n  /** Monotonic, so a list has a key that outlives a re-render. */\n  key: number;\n  startedAt: number;\n  snapshot: PollSnapshot;\n  stop: Poller<unknown>['stop'];\n  start: Poller<unknown>['start'];\n};\n\nexport type PollRegistry = {\n  list: () => PollEntry[];\n  subscribe: (listener: () => void) => () => void;\n  clear: () => void;\n  stopAll: (reason?: string) => void;\n  collect: () => void;\n};\n\nconst isFinished = ({ snapshot }: PollEntry) =>\n  snapshot.state !== 'idle' && snapshot.state !== 'requesting' && snapshot.state !== 'polling';\n\nexport const createPollRegistry = ({ limit = DEFAULT_LIMIT } = {}): PollRegistry => {\n  const entries = createStore<PollEntry[]>([]);\n  const unsubscribes = new Map<number, () => void>();\n\n  const maxEntries = clamp(finiteOr(limit, DEFAULT_LIMIT), 1);\n  let nextKey = 1;\n\n  const forget = (key: number) => {\n    unsubscribes.get(key)?.();\n    unsubscribes.delete(key);\n  };\n\n  const trim = (list: PollEntry[]) => {\n    let kept = list;\n\n    while (kept.length > maxEntries) {\n      const dropped = kept.findLast(isFinished) ?? kept.at(-1);\n\n      if (!dropped) break;\n\n      forget(dropped.key);\n      kept = kept.filter((entry) => entry !== dropped);\n    }\n\n    return kept;\n  };\n\n  const replace = (key: number, snapshot: PollSnapshot) =>\n    entries.set(entries.get().map((entry) => (entry.key === key ? { ...entry, snapshot } : entry)));\n\n  const register = (poller: ObservedPoller) => {\n    const key = nextKey++;\n    const entry: PollEntry = {\n      key,\n      startedAt: Date.now(),\n      snapshot: poller.debug(),\n      stop: poller.stop,\n      start: poller.start,\n    };\n\n    unsubscribes.set(\n      key,\n      poller.subscribe((snapshot) => replace(key, snapshot)),\n    );\n    entries.set(trim([entry, ...entries.get()]));\n  };\n\n  const collect = () => {\n    emitter.subscribe(register);\n  };\n\n  return {\n    list: entries.get,\n    collect,\n    subscribe: (listener) => entries.subscribe(() => listener()),\n    clear: () => {\n      entries.get().forEach(({ key }) => forget(key));\n      entries.set([]);\n    },\n    stopAll: (reason) => entries.get().forEach((entry) => entry.stop(reason)),\n  };\n};\n","type Task<T> = () => T | PromiseLike<T>;\n\nconst isPromiseLike = <T>(value: T | PromiseLike<T>): value is PromiseLike<T> =>\n  ((typeof value === 'object' && value !== null) || typeof value === 'function') &&\n  'then' in value &&\n  typeof value.then === 'function';\n\n/**\n * Queues tasks added over time so a slower earlier task cannot finish after and overwrite a later one.\n * Each `add` returns its task's result; a rejection does not stop the remaining queue.\n */\nexport const queueSeries = () => {\n  let tail: Promise<void> | null = null;\n\n  const add = <T>(task: Task<T>): Promise<T> => {\n    if (tail !== null) {\n      const result = tail.then(task);\n      tail = result.then(\n        () => undefined,\n        () => undefined,\n      );\n      return result;\n    }\n\n    let value: T | PromiseLike<T>;\n    try {\n      value = task();\n    } catch (error) {\n      return Promise.reject(error);\n    }\n\n    if (!isPromiseLike(value)) return Promise.resolve(value);\n\n    const result = Promise.resolve(value);\n    tail = result.then(\n      () => undefined,\n      () => undefined,\n    );\n    return result;\n  };\n\n  const onIdle = async (): Promise<void> => {\n    while (tail !== null) {\n      const current = tail;\n      await current;\n      if (tail === current) {\n        tail = null;\n        return;\n      }\n    }\n  };\n\n  return { add, onIdle };\n};\n","import { isPlainObject } from './isPlainObject';\n\n/**\n * Recursively merge `patch` into `base`. Plain-object values are merged key-by-key; every\n * other value (primitives, arrays, or a type mismatch between the two sides) replaces the\n * base value. `undefined` patch values are skipped, so a partial patch leaves untouched\n * fields alone. Pure — neither argument is mutated; the result preserves `base`'s type.\n */\nexport const deepMerge = <T extends Record<string, unknown>>(\n  base: T,\n  patch: Record<string, unknown>,\n): T => {\n  const out: Record<string, unknown> = { ...base };\n\n  for (const [key, value] of Object.entries(patch)) {\n    if (value === undefined) continue;\n    const current = out[key];\n    out[key] = isPlainObject(current) && isPlainObject(value) ? deepMerge(current, value) : value;\n  }\n\n  return out as T;\n};\n","// Minimal key/value contract — the Web Storage shape (`localStorage`/`sessionStorage`) narrowed to\n// what a persistor needs. Framework- and environment-agnostic; a method may answer with a promise.\nexport type StorageAdapter = {\n  getItem: (key: string) => string | null | Promise<string | null>;\n  setItem: (key: string, value: string) => void | Promise<void>;\n  removeItem: (key: string) => void | Promise<void>;\n  withLock?: <T>(name: string, task: () => Promise<T>) => Promise<T>;\n};\n\n// Persist nowhere: reads always miss, writes are dropped. The default when no storage is configured,\n// so a persistor is always constructable and simply becomes a no-op.\nexport const createNullStorage = (): StorageAdapter => ({\n  getItem: () => null,\n  setItem: () => {},\n  removeItem: () => {},\n});\n\n// In-process Map, living for the lifetime of the process. The Node default and the fallback the\n// Web Storage adapters degrade to when `localStorage`/`sessionStorage` is unavailable (SSR).\nexport const createMemoryStorage = (): StorageAdapter => {\n  const store = new Map<string, string>();\n  return {\n    getItem: (key) => store.get(key) ?? null,\n    setItem: (key, value) => {\n      store.set(key, value);\n    },\n    removeItem: (key) => {\n      store.delete(key);\n    },\n  };\n};\n\n// Wrap a Web Storage instance, degrading to memory when it is absent OR unusable. Merely accessing\n// the global (sandboxed iframe) or calling its methods (privacy mode, disabled/blocked storage) can\n// throw, so a canary write probes real usability at construction; any failure falls back to an\n// in-memory store so persistence never crashes the caller. Resolution happens when the factory is\n// called (not at import), so importing this module never touches browser globals.\nconst createWebStorage = (pick: () => Storage | null): StorageAdapter => {\n  let web: Storage | null = null;\n  try {\n    web = pick();\n    if (web) {\n      const probe = '__keboola_storage_probe__';\n      web.setItem(probe, probe);\n      web.removeItem(probe);\n    }\n  } catch (err) {\n    console.warn('createWebStorage: web storage unavailable, falling back to memory', err);\n    web = null;\n  }\n  if (!web) return createMemoryStorage();\n\n  const storage = web;\n  return {\n    getItem: (key) => storage.getItem(key),\n    setItem: (key, value) => {\n      storage.setItem(key, value);\n    },\n    removeItem: (key) => {\n      storage.removeItem(key);\n    },\n    withLock: async <T>(name: string, task: () => Promise<T>): Promise<T> => {\n      if (typeof navigator === 'undefined' || !('locks' in navigator)) return task();\n      return navigator.locks.request(`keboola:${name}`, { mode: 'exclusive' }, task);\n    },\n  };\n};\n\nexport const createLocalStorage = (): StorageAdapter =>\n  createWebStorage(() => ('localStorage' in globalThis ? globalThis.localStorage : null));\n\nexport const createSessionStorage = (): StorageAdapter =>\n  createWebStorage(() => ('sessionStorage' in globalThis ? globalThis.sessionStorage : null));\n","import { queueSeries } from '../async';\n\nimport { createNullStorage, type StorageAdapter } from './adapters';\n\n// Structural so this package needs no zod dependency; any schema with `safeParse` fits.\ntype Schema<T> = {\n  safeParse: (value: unknown) => { success: true; data: T } | { success: false };\n};\n\nexport type Cell<T> = {\n  /**\n   * The stored value, `defaultValue` when empty or corrupt. Rejects when the adapter cannot be read:\n   * unreadable is not empty, and a caller taking it for empty would write over what is there.\n   */\n  read: () => Promise<T>;\n  write: (value: T) => Promise<void>;\n  /** Read, change and write as one step: no other write lands between the read and the write. */\n  modify: (change: (current: T) => T) => Promise<void>;\n  remove: () => Promise<void>;\n};\n\nexport type Persistor<T> = Cell<T> & {\n  // The verbs with the adapter's lock for this key held across `task`; a lock, not a rollback.\n  // Not reentrant: pass the cell down rather than nesting. Runs directly without an adapter lock.\n  locked: <R>(task: (cell: Cell<T>) => Promise<R>) => Promise<R>;\n};\n\ntype PersistorOptions<T> = {\n  storage?: StorageAdapter;\n  key: string;\n  schema: Schema<T>;\n  defaultValue: T;\n  encode?: (value: T) => string;\n  decode?: (raw: string) => unknown;\n};\n\n// A durable cell over a `StorageAdapter`: one key, encoded on write, validated on read.\n// - Writes run in call order and each resolves once its own write has landed; a failed write\n//   rejects and the ones after it still run. `read` waits for every write already queued.\n// - Give schema fields `.default(...)` to patch partial blobs instead of discarding them.\nexport const createPersistor = <T>({\n  storage = createNullStorage(),\n  key,\n  schema,\n  defaultValue,\n  encode = JSON.stringify,\n  decode = JSON.parse,\n}: PersistorOptions<T>): Persistor<T> => {\n  const writes = queueSeries();\n\n  const _load = async () => {\n    const raw = await storage.getItem(key);\n    if (raw === null) return { value: defaultValue, corrupt: false };\n\n    let decoded: unknown;\n    try {\n      decoded = decode(raw);\n    } catch (err) {\n      console.warn(`createPersistor: failed to decode \"${key}\"`, err);\n      return { value: defaultValue, corrupt: true };\n    }\n\n    const parsed = schema.safeParse(decoded);\n    return parsed.success\n      ? { value: parsed.data, corrupt: false }\n      : { value: defaultValue, corrupt: true };\n  };\n\n  const remove = () => writes.add(() => storage.removeItem(key));\n  const write = (value: T) => writes.add(() => storage.setItem(key, encode(value)));\n\n  const read = async (): Promise<T> => {\n    await writes.onIdle();\n    const parsed = await _load();\n    if (parsed.corrupt) {\n      remove().catch((err: unknown) => {\n        console.warn(`createPersistor: failed to drop the corrupt \"${key}\"`, err);\n      });\n    }\n    return parsed.value;\n  };\n  const modify = (change: (current: T) => T) =>\n    writes.add(async () => {\n      const parsed = await _load();\n      const next = change(parsed.value);\n      await storage.setItem(key, encode(next));\n    });\n\n  const cell: Cell<T> = { read, write, modify, remove };\n\n  const locked = <R>(task: (cell: Cell<T>) => Promise<R>): Promise<R> =>\n    storage.withLock ? storage.withLock(key, () => task(cell)) : task(cell);\n\n  return { ...cell, locked };\n};\n","import type { StorageToken } from '../clients/storage/types';\nimport type { createDefaultBranch } from '../domain/defaultBranch';\nimport { createProject, type Project } from '../domain/project';\nimport type { createStack } from '../domain/stack';\nimport type { createStorageTable } from '../domain/storageTable';\nimport type { MiddlewareFn } from '../fetchClient';\nimport { coalesce, createStore } from '../utils';\n\n// Pathnames of Storage writes that change the verified token, so the project must re-verify.\nconst STORAGE_TOKEN_MUTATING_PATTERNS = [\n  // Bucket lifecycle → token.bucketPermissions; sub-resources under /buckets/{id}/... don't match.\n  /\\/buckets(\\/[^/]+)?$/,\n  // Feature toggles → token.owner.features; /manage/features and /users/{id}/features don't match.\n  /\\/projects\\/[^/]+\\/features(\\/[^/]+)?$/,\n];\n\nexport const isStorageTokenMutatingRequest = (request: Request): boolean => {\n  if (request.method === 'GET') return false;\n  const { pathname } = new URL(request.url);\n  return STORAGE_TOKEN_MUTATING_PATTERNS.some((pattern) => pattern.test(pathname));\n};\n\nconst createProjectRefreshMiddleware =\n  (\n    shouldRefresh: (request: Request) => boolean,\n    requestRefresh: () => Promise<void>,\n  ): MiddlewareFn =>\n  (next) =>\n  async (request) => {\n    const response = await next(request);\n    // Awaited so `api.context.project` read right after the request is never stale.\n    if (shouldRefresh(request.request)) await requestRefresh();\n    return response;\n  };\n\n/**\n * The live project store, re-verified (coalesced) after a token-mutating request or a re-scope.\n */\nexport const createLiveProject = ({\n  initialToken,\n  verify,\n}: {\n  initialToken: StorageToken;\n  verify: () => Promise<StorageToken>;\n}) => {\n  const store = createStore(createProject({ sapiToken: initialToken }));\n  const refresh = coalesce(async () => store.set(createProject({ sapiToken: await verify() })));\n  const middleware = createProjectRefreshMiddleware(isStorageTokenMutatingRequest, refresh);\n  return { store, getProject: () => store.get(), subscribe: store.subscribe, middleware, refresh };\n};\n\nexport type ClientContext = {\n  /**\n   * Canonical stack URL every request is built on. Not `stack.host`, which names the serving pod;\n   * for the stack's hostname look its id up in `STACKS`.\n   */\n  baseUrl: string;\n  stack: ReturnType<typeof createStack>;\n  defaultBranch: ReturnType<typeof createDefaultBranch>;\n  readonly project: Project;\n  readonly st: ReturnType<typeof createStorageTable>;\n};\n","/**\n * The single error the keboola client / session throws. It carries a stable `type` (the switchable\n * contract) and a human-readable message derived from that type — no per-call message strings.\n */\nexport const KeboolaErrorType = {\n  Unconfigured: 'unconfigured',\n  NotAuthenticated: 'not-authenticated',\n  SignInEnded: 'sign-in-ended',\n  AlreadyAuthenticated: 'already-authenticated',\n  NoStorageToken: 'no-storage-token',\n  NoManagementToken: 'no-management-token',\n  MissingProject: 'missing-project',\n  NotBearer: 'not-bearer',\n  NotReady: 'not-ready',\n  InvalidBuildTransition: 'invalid-build-transition',\n  StackActive: 'stack-active',\n} as const;\n\nexport type KeboolaErrorType = (typeof KeboolaErrorType)[keyof typeof KeboolaErrorType];\n\nconst MESSAGES: Record<KeboolaErrorType, string> = {\n  [KeboolaErrorType.Unconfigured]: 'The session is not configured — set a baseUrl first.',\n  [KeboolaErrorType.NotAuthenticated]: 'The session is not authenticated — sign in first.',\n  [KeboolaErrorType.SignInEnded]:\n    'The sign-in this operation started under has ended — its result belongs to nobody.',\n  [KeboolaErrorType.AlreadyAuthenticated]:\n    'The session is already authenticated — reset before authenticating again.',\n  [KeboolaErrorType.NoStorageToken]: 'No storage token — authenticate the storage realm first.',\n  [KeboolaErrorType.NoManagementToken]:\n    'No management token — authenticate the management realm first.',\n  [KeboolaErrorType.MissingProject]:\n    'A bearer storage session requires a project — call setProject(projectId) first.',\n  [KeboolaErrorType.NotBearer]: 'This operation requires a bearer (OAuth) session.',\n  [KeboolaErrorType.NotReady]: 'The client is not ready — authenticate the storage realm first.',\n  [KeboolaErrorType.InvalidBuildTransition]:\n    'Invalid storage build transition — the build goes idle → initializing → ready | failed.',\n  [KeboolaErrorType.StackActive]: 'The active stack cannot be closed — select another first.',\n};\n\nexport class KeboolaError extends Error {\n  readonly type: KeboolaErrorType;\n\n  constructor(type: KeboolaErrorType) {\n    super(MESSAGES[type]);\n    this.type = type;\n    this.name = 'KeboolaError';\n    Object.setPrototypeOf(this, KeboolaError.prototype);\n  }\n}\n\nexport const isKeboolaError = (error: unknown): error is KeboolaError =>\n  error instanceof KeboolaError;\n\n/** Throw a {@link KeboolaError} of `type` when `value` is null/undefined; otherwise narrow it. */\nexport function assert<T>(value: T | null | undefined, type: KeboolaErrorType): asserts value is T {\n  if (value == null) throw new KeboolaError(type);\n}\n","export const isBuiltInProperty = (property: string | symbol) =>\n  typeof property === 'symbol' ||\n  property === 'then' ||\n  property === 'constructor' ||\n  property === 'toString' ||\n  property === 'valueOf';\n\n/**\n * Creates a dummy client that intercepts method calls and invokes the provided onCall callback.\n */\nexport const createDummyClient = <T extends Record<string, unknown>>({\n  onCall,\n}: {\n  onCall: (path: string[], args: unknown[]) => void;\n}): T => {\n  const createProxy = (path: string[] = []) =>\n    new Proxy(() => {}, {\n      // Create a new proxy for nested property access\n      get: (_target, prop) => {\n        // Don't intercept Symbol properties or special methods\n        if (isBuiltInProperty(prop)) return undefined;\n        return createProxy([...path, prop]);\n      },\n      // When called as a function, invoke the interceptor\n      apply: (_target, _thisArgs, args) => onCall(path, args),\n    });\n\n  return createProxy() as unknown as T;\n};\n","import { createDummyClient } from './utils';\n\ntype OnUnavailableFn = (info: {\n  serviceId: string;\n  path: string[];\n  args: unknown[];\n  clientName: string;\n}) => void;\n\n/**\n * A service's base URL, or a resolver for one that is not known yet — the stack index it comes from\n * may still be in flight. Declared here rather than taken from `fetchClient`, so the registry stays\n * independent of the transport its clients happen to use.\n */\nexport type ServiceUrl = string | (() => Promise<string>);\n\ntype ClientConfig<ServiceId extends string, ClientName extends string> = {\n  serviceId: ServiceId;\n  clientName: ClientName;\n  clientFn: (serviceUrl: ServiceUrl) => unknown;\n};\n\ntype ClientMeta<ServiceId extends string> = {\n  clientName: string;\n  serviceId: ServiceId;\n  isAvailable: boolean;\n};\n\ntype Options<ServiceId extends string> = {\n  getServiceBaseUrl: (serviceId: ServiceId) => ServiceUrl | null;\n  onUnavailable?: OnUnavailableFn;\n};\n\ntype BuildResult<\n  ServiceId extends string,\n  ClientName extends string,\n  Configs extends ClientConfig<ServiceId, ClientName>[],\n> = {\n  client: {\n    [Config in Configs[number] as Config['clientName']]: ReturnType<Config['clientFn']>;\n  };\n  meta: ClientMeta<ServiceId>[];\n};\n\ntype Registry<\n  ServiceId extends string,\n  ClientName extends string,\n  Configs extends ClientConfig<ServiceId, ClientName>[],\n> = {\n  add: <const Config extends ClientConfig<ServiceId, ClientName>>(\n    config: Config,\n  ) => Registry<ServiceId, ClientName, [...Configs, Config]>;\n  build: () => BuildResult<ServiceId, ClientName, Configs>;\n};\n\nexport const createServiceClientRegistry =\n  <ServiceId extends string, ClientName extends string = string>() =>\n  ({\n    getServiceBaseUrl,\n    onUnavailable,\n  }: Options<ServiceId>): Registry<ServiceId, ClientName, []> => {\n    const dummy = (serviceId: string, clientName: string) =>\n      createDummyClient({\n        onCall: (path, args) => {\n          onUnavailable?.({\n            serviceId,\n            path,\n            args,\n            clientName,\n          });\n        },\n      });\n\n    const configs: ClientConfig<ServiceId, ClientName>[] = [];\n\n    const resolveClient = ({\n      serviceId,\n      clientFn,\n      clientName,\n    }: ClientConfig<ServiceId, ClientName>) => {\n      const serviceBaseUrl = getServiceBaseUrl(serviceId);\n      return serviceBaseUrl ? clientFn(serviceBaseUrl) : dummy(serviceId, clientName);\n    };\n\n    type AnyConfig = ClientConfig<ServiceId, ClientName>;\n    const registry: Registry<ServiceId, ClientName, AnyConfig[]> = {\n      add: (config) => {\n        configs.push(config);\n        return registry;\n      },\n      build: () => {\n        const clientMap: Record<string, unknown> = {};\n        const clientMeta: ClientMeta<ServiceId>[] = [];\n\n        configs.forEach((config) => {\n          clientMap[config.clientName] = resolveClient(config);\n          clientMeta.push({\n            clientName: config.clientName,\n            serviceId: config.serviceId,\n            isAvailable: !!getServiceBaseUrl(config.serviceId),\n          });\n        });\n\n        // The dynamically-built map can't be statically proven against the\n        // per-config mapped type; the public key safety comes from the fluent\n        // `add` chain asserted at the bottom of this factory.\n        return {\n          client: clientMap,\n          meta: clientMeta,\n        } as BuildResult<ServiceId, ClientName, AnyConfig[]>;\n      },\n    };\n\n    return registry as Registry<ServiceId, ClientName, []>;\n  };\n","import type { createAuthClient } from '../clients/auth/authClient';\nimport type { createManagementClient } from '../clients/management';\nimport { isBuiltInProperty } from '../serviceClientRegistry';\n\nimport type { createProjectClients } from './legacy/createProjectClients';\nimport { assert, KeboolaErrorType } from './errors';\n\ntype AuthClient = ReturnType<typeof createAuthClient>;\ntype ManagementClient = ReturnType<typeof createManagementClient>;\n\n/**\n * Everything on `api` except `auth` and `management` — the project-scoped half of `KeboolaApi`.\n *\n * - Holds no credential; the token and its refresh loop live on the session that built it.\n */\nexport type ProjectClients = Awaited<ReturnType<typeof createProjectClients>>;\n\nexport type KeboolaApi = ProjectClients & {\n  auth: ReturnType<typeof createAuthClient>;\n  management: ReturnType<typeof createManagementClient>;\n};\n\ntype ApiState = {\n  getAuthClient: () => AuthClient | null;\n  getManagementClient: () => ManagementClient | null;\n  getProjectClients: () => ProjectClients | null;\n};\n\nexport const createApi = (state: ApiState) =>\n  new Proxy({} as KeboolaApi, {\n    get(_target, property) {\n      if (isBuiltInProperty(property)) return undefined;\n\n      if (property === 'auth') {\n        const authClient = state.getAuthClient();\n        assert(authClient, KeboolaErrorType.Unconfigured);\n        return authClient;\n      }\n\n      if (property === 'management') {\n        const management = state.getManagementClient();\n        assert(management, KeboolaErrorType.NoManagementToken);\n        return management;\n      }\n\n      const clients = state.getProjectClients();\n      assert(clients, KeboolaErrorType.NotReady);\n\n      return clients[property as keyof ProjectClients];\n    },\n  });\n","import type { MiddlewareFn } from '../fetchClient';\n\n/**\n * Service clients reached through the registry — the key is the `clientName`\n * the user accesses them by (e.g. `api.dataScience`), not the `serviceId`.\n */\nexport type ServiceClientName =\n  | 'vault'\n  | 'dataScience'\n  | 'apps'\n  | 'encryption'\n  | 'editor'\n  | 'syncActions'\n  | 'telemetry'\n  | 'queryService'\n  | 'queue'\n  | 'chat'\n  | 'ai'\n  | 'import'\n  | 'kaiAgent'\n  | 'componentsMcp'\n  | 'oauth'\n  | 'omnisearch'\n  | 'stream'\n  | 'notifications'\n  | 'scheduler'\n  | 'metastore'\n  | 'billing';\n\n/** Clients instantiated directly (not stack-discovered), keyed by their property name. */\ntype NonServiceClientName = 'storage' | 'management' | 'auth';\n\nexport type MiddlewareTarget = ServiceClientName | NonServiceClientName;\n\nexport type Middlewares =\n  | MiddlewareFn[]\n  | ({ all?: MiddlewareFn[] } & Partial<Record<MiddlewareTarget, MiddlewareFn[]>>);\n\nexport const createMiddlewareFor = (middlewares: Middlewares | undefined) => {\n  return (target: MiddlewareTarget, baseline: MiddlewareFn[] = []): MiddlewareFn[] => {\n    if (Array.isArray(middlewares)) return [...baseline, ...middlewares];\n\n    const all = middlewares?.all ?? [];\n    const targeted = middlewares?.[target] ?? [];\n    return [...baseline, ...all, ...targeted];\n  };\n};\n\nexport type MiddlewareFor = ReturnType<typeof createMiddlewareFor>;\n","import { createStore } from '../../utils';\n\nexport type State = {\n  baseUrl: string | null;\n  sapiToken: string | null;\n  managementToken: string | null;\n};\n\n// The legacy config is a plain observable state store: the host injects the baseUrl and tokens, and\n// consumers derive their clients from `store` (see `keboola.ts`). No lifecycle events — the derived\n// stores react to state changes directly.\nexport const createConfig = () => {\n  const store = createStore<State>({ baseUrl: null, sapiToken: null, managementToken: null });\n\n  const setBaseUrl = (baseUrl: string) => {\n    store.set({ ...store.get(), baseUrl });\n  };\n\n  const authenticate = (tokens: { sapiToken?: string; managementToken?: string }) => {\n    const current = store.get();\n    store.set({\n      ...current,\n      sapiToken: tokens.sapiToken ?? current.sapiToken,\n      managementToken: tokens.managementToken ?? current.managementToken,\n    });\n  };\n\n  // SAPI token accessors over the config store — the single source of truth. The storage build reads\n  // `getStorageToken` on every request; in-band rotations write back via `setStorageToken`, which\n  // surfaces to observers as an ordinary store change.\n  const getStorageToken = () => store.get().sapiToken ?? '';\n  const setStorageToken = (sapiToken: string) => store.set({ ...store.get(), sapiToken });\n\n  /** Current state, for diagnostics. */\n  const debug = (): State => store.get();\n\n  return { store, setBaseUrl, authenticate, getStorageToken, setStorageToken, debug };\n};\n","import type { DevBranch } from '../clients/storage/branches/types';\nimport { assert } from '../utils';\n\ntype BranchType = 'default' | 'dev';\n\ntype Options = {\n  devBranches: DevBranch[];\n};\n\nexport const createDefaultBranch = ({ devBranches }: Options) => {\n  const defaultBranch = devBranches.find((branch) => branch.isDefault);\n  assert(defaultBranch, 'No default branch found for the project.');\n\n  const getType = (branchId?: string | number): BranchType => {\n    if (branchId == null || branchId === 'default') return 'default';\n    return Number(branchId) === defaultBranch.id ? 'default' : 'dev';\n  };\n\n  return {\n    id: defaultBranch.id,\n    name: defaultBranch.name,\n    getType,\n    isDev: (branchId?: string | number) => getType(branchId) === 'dev',\n    isDefault: (branchId?: string | number) => getType(branchId) === 'default',\n  };\n};\n","import type { StackInfo } from '../clients/storage/types';\nimport { ServiceId } from '../constants/serviceIds';\n\nexport type ServiceUrls = Partial<Record<ServiceId, (url: string) => string | undefined | null>>;\n\nconst isServiceId = (id: string): id is ServiceId => Object.values<string>(ServiceId).includes(id);\n\nconst SERVICE_URL_OVERRIDES: ServiceUrls = {\n  // The advertised Kai Assistant URL lacks the `/api` suffix.\n  'kai-assistant': (url) => `${url}/api`,\n};\n\ntype Options = {\n  stackInfo: StackInfo;\n  clientServiceUrls?: ServiceUrls;\n};\n\nexport const createStack = ({ stackInfo, clientServiceUrls }: Options) => {\n  const { services, components, features, ...infoRest } = stackInfo;\n\n  const serviceMap = new Map(\n    services.map((service) => {\n      if (!isServiceId(service.id)) return [service.id, service.url];\n      const devOverride = clientServiceUrls?.[service.id]?.(service.url);\n      const prodOverride = SERVICE_URL_OVERRIDES[service.id]?.(service.url);\n      const url = devOverride ?? prodOverride ?? service.url;\n      return [service.id, url];\n    }),\n  );\n\n  const componentMap = new Map(components.map((component) => [component.id, component]));\n  const featureSet = new Set(features);\n\n  const hasFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => featureSet.has(x));\n  };\n\n  const hasComponent = (...componentId: string[]) => {\n    if (componentId.length === 0) return false;\n    return componentId.every((x) => componentMap.has(x));\n  };\n\n  const getComponent = (componentId: string) => componentMap.get(componentId) ?? null;\n\n  const hasService = (serviceId: ServiceId) => serviceMap.has(serviceId);\n\n  const getServiceUrl = (serviceId: ServiceId) => serviceMap.get(serviceId) ?? null;\n\n  return {\n    ...infoRest,\n    services,\n    features,\n    components,\n    hasFeature,\n    getServiceUrl,\n    hasService,\n    getComponent,\n    hasComponent,\n  };\n};\n","import type * as storage from '../../clients/storage';\n\nconst VARIABLES_COMPONENT_ID = 'keboola.variables';\n\n// The storage client takes the branch as the string the spec declares.\ntype BranchId = string;\n\ntype VariableDefinition = { name: string; type?: string };\ntype VariableValue = { name: string; value?: unknown };\n\n/** Reference to a `keboola.variables` config + the values row a config points at. */\ntype VariablesRef = { variablesId: string; variablesValuesId: string };\n\ntype Options = {\n  storageClient: ReturnType<typeof storage.createStorageClient>;\n};\n\n/** Union the definitions by name; on a name conflict the target's definition is kept. */\nexport const mergeVariableDefinitions = (\n  target: VariableDefinition[],\n  source: VariableDefinition[],\n): VariableDefinition[] => {\n  const targetNames = new Set(target.map((definition) => definition.name));\n\n  return [...target, ...source.filter((definition) => !targetNames.has(definition.name))];\n};\n\n/** Add values missing in the target; on a name conflict the value is updated to the source's. */\nexport const mergeVariableValues = (\n  target: VariableValue[],\n  source: VariableValue[],\n): VariableValue[] => {\n  const sourceByName = new Map(source.map((value) => [value.name, value.value]));\n  const targetNames = new Set(target.map((value) => value.name));\n\n  return [\n    ...target.map((value) =>\n      sourceByName.has(value.name) ? { ...value, value: sourceByName.get(value.name) } : value,\n    ),\n    ...source.filter((value) => !targetNames.has(value.name)),\n  ];\n};\n\n/**\n * Orchestration for `keboola.variables` configs: copy a config, or merge two configs into a fresh\n * one (union definitions, upsert values — source wins on a name conflict). Each result is a brand\n * new config + values row, so the caller can reference it without sharing lineage with the source.\n */\nexport const createVariablesSdk = ({ storageClient }: Options) => {\n  const configs = storageClient.configurations;\n  const rows = storageClient.configurationRows;\n\n  const readVariables = async (\n    configId: string,\n    valuesRowId: string | undefined,\n    branchId: BranchId,\n  ) => {\n    const config = await configs.getConfiguration({\n      componentId: VARIABLES_COMPONENT_ID,\n      configId,\n      branchId,\n    });\n    // variables configs carry a single values row — read the referenced one, or the only one\n    const row = config.rows.find((candidate) => candidate.id === valuesRowId) ?? config.rows[0];\n\n    const rawDefinitions = config.configuration?.variables;\n    const rawValues = row?.configuration?.values;\n\n    // guard the array shape — a non-array from Storage would throw in the merge helpers' .map()\n    return {\n      definitions: (Array.isArray(rawDefinitions) ? rawDefinitions : []) as VariableDefinition[],\n      values: (Array.isArray(rawValues) ? rawValues : []) as VariableValue[],\n    };\n  };\n\n  const createVariables = async (\n    definitions: VariableDefinition[],\n    values: VariableValue[],\n    branchId: BranchId,\n  ): Promise<VariablesRef> => {\n    const config = await configs.createConfiguration({\n      branchId,\n      componentId: VARIABLES_COMPONENT_ID,\n      name: 'Variables definition',\n      configuration: { variables: definitions },\n    });\n\n    try {\n      const row = await rows.createConfigurationRow({\n        branchId: String(branchId),\n        componentId: VARIABLES_COMPONENT_ID,\n        configurationId: config.id,\n        name: 'Default values',\n        configuration: { values },\n      });\n\n      return { variablesId: config.id, variablesValuesId: row.id };\n    } catch (error) {\n      // the values row failed — best-effort drop the orphaned config, but always surface the original error\n      await configs\n        .deleteConfiguration({\n          branchId,\n          componentId: VARIABLES_COMPONENT_ID,\n          configId: config.id,\n        })\n        .catch((cleanupError: unknown) => {\n          // keep the cleanup failure on the original error rather than letting it mask the real cause\n          if (error instanceof Error && error.cause === undefined) {\n            error.cause = cleanupError;\n          }\n        });\n      throw error;\n    }\n  };\n\n  return {\n    /** Copy a variables config into a fresh, independent config + values row. */\n    copy: async ({\n      variablesId,\n      variablesValuesId,\n      branchId = 'default',\n    }: {\n      variablesId: string;\n      variablesValuesId?: string;\n      branchId?: BranchId;\n    }): Promise<VariablesRef> => {\n      const { definitions, values } = await readVariables(variablesId, variablesValuesId, branchId);\n\n      return createVariables(definitions, values, branchId);\n    },\n\n    /** Merge the source's variables into the target's and create a fresh merged config + values row. */\n    merge: async ({\n      targetVariablesId,\n      targetValuesId,\n      sourceVariablesId,\n      sourceValuesId,\n      branchId = 'default',\n    }: {\n      targetVariablesId: string;\n      targetValuesId?: string;\n      sourceVariablesId: string;\n      sourceValuesId?: string;\n      branchId?: BranchId;\n    }): Promise<VariablesRef> => {\n      const [target, source] = await Promise.all([\n        readVariables(targetVariablesId, targetValuesId, branchId),\n        readVariables(sourceVariablesId, sourceValuesId, branchId),\n      ]);\n\n      return createVariables(\n        mergeVariableDefinitions(target.definitions, source.definitions),\n        mergeVariableValues(target.values, source.values),\n        branchId,\n      );\n    },\n  };\n};\n","import type { createStorageClient } from '../clients/storage';\nimport { createConfigurationSdk } from '../sdks/configurations';\nimport { createKaiMemorySdk } from '../sdks/kaiMemory';\nimport { createSemanticLayerSdk } from '../sdks/semanticLayer';\nimport { createTagSdk } from '../sdks/tag';\nimport { createVariablesSdk } from '../sdks/variables';\nimport { createVaultSdk } from '../sdks/vault';\n\nimport type { ClientContext } from './createLiveProject';\nimport type { createServiceClients } from './createServiceClients';\n\ntype Options = {\n  storage: ReturnType<typeof createStorageClient>;\n  services: ReturnType<typeof createServiceClients>['client'];\n  context: ClientContext;\n};\n\nexport const createSdk = ({ storage, services, context }: Options) => ({\n  configuration: createConfigurationSdk({\n    storageClient: storage,\n    encryptionClient: services.encryption,\n    context,\n  }),\n  tag: createTagSdk({ metastoreClient: services.metastore }),\n  semanticLayer: createSemanticLayerSdk({ metastoreClient: services.metastore }),\n  kaiMemory: createKaiMemorySdk({ metastoreClient: services.metastore }),\n  vault: createVaultSdk({ vaultClient: services.vault, encryptionClient: services.encryption }),\n  variables: createVariablesSdk({ storageClient: storage }),\n});\n","import { createAiClient } from '../clients/ai';\nimport { createAppsClient } from '../clients/apps';\nimport type { AuthStrategy } from '../clients/auth';\nimport { createBillingClient } from '../clients/billing';\nimport { createChatClient } from '../clients/chat';\nimport { createComponentsMcpClient } from '../clients/componentsMcp';\nimport { createDataScienceClient } from '../clients/dataScience';\nimport { createEditorClient } from '../clients/editor';\nimport { createEncryptionClient } from '../clients/encryption';\nimport { createImportClient } from '../clients/import';\nimport { createKaiAgentClient } from '../clients/kaiAgent';\nimport { createMetastoreClient } from '../clients/metastore';\nimport { createNotificationsClient } from '../clients/notifications';\nimport { createOauthClient } from '../clients/oauth';\nimport { createOmnisearchClient } from '../clients/omnisearch';\nimport { createQueryServiceClient } from '../clients/queryService';\nimport { createQueueClient } from '../clients/queue';\nimport { createSchedulerClient } from '../clients/scheduler';\nimport type { ServiceId } from '../clients/storage/types';\nimport { createStreamClient } from '../clients/stream';\nimport { createSyncActionsClient } from '../clients/syncActions';\nimport { createTelemetryClient } from '../clients/telemetry';\nimport { createVaultClient } from '../clients/vault';\nimport { ServiceUnavailableError } from '../errors';\nimport type { MiddlewareFn } from '../fetchClient';\nimport { createServiceClientRegistry, type ServiceUrl } from '../serviceClientRegistry';\n\nimport { type MiddlewareFor, type ServiceClientName } from './createMiddlewareFor';\n\ntype Options = {\n  baseUrl: string;\n  auth: AuthStrategy;\n  getServiceBaseUrl: (serviceId: ServiceId) => ServiceUrl | null;\n  middlewareFor: MiddlewareFor;\n  attachTokenMiddleware: MiddlewareFn;\n};\n\n// A service whose URL is still being resolved cannot have a path appended to it as a string.\nconst withPath = (serviceBaseUrl: ServiceUrl, path: string): ServiceUrl =>\n  typeof serviceBaseUrl === 'string'\n    ? `${serviceBaseUrl}${path}`\n    : async () => `${await serviceBaseUrl()}${path}`;\n\nexport const createServiceClients = ({\n  baseUrl,\n  auth,\n  getServiceBaseUrl,\n  middlewareFor,\n  attachTokenMiddleware,\n}: Options) =>\n  createServiceClientRegistry<ServiceId, ServiceClientName>()({\n    getServiceBaseUrl,\n    onUnavailable: ({ serviceId, path, clientName }) => {\n      throw new ServiceUnavailableError(serviceId, path, clientName);\n    },\n  })\n    .add({\n      serviceId: 'vault',\n      clientName: 'vault',\n      clientFn: (serviceBaseUrl) =>\n        createVaultClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('vault', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'data-science',\n      clientName: 'dataScience',\n      clientFn: (serviceBaseUrl) =>\n        createDataScienceClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('dataScience', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      // `/v2` App Deployments live on the sandboxes deployment; the `apps.<stack>` host is absent\n      // from the service index. At a third prefixed client, give `.add()` a `pathPrefix`.\n      serviceId: 'data-science',\n      clientName: 'apps',\n      clientFn: (serviceBaseUrl) =>\n        createAppsClient({\n          baseUrl: withPath(serviceBaseUrl, '/v2'),\n          middlewares: middlewareFor('apps', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'encryption',\n      clientName: 'encryption',\n      clientFn: (serviceBaseUrl) =>\n        createEncryptionClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('encryption'),\n        }),\n    })\n    .add({\n      serviceId: 'editor',\n      clientName: 'editor',\n      clientFn: (serviceBaseUrl) =>\n        createEditorClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('editor', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'sync-actions',\n      clientName: 'syncActions',\n      clientFn: (serviceBaseUrl) =>\n        createSyncActionsClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('syncActions', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'telemetry',\n      clientName: 'telemetry',\n      clientFn: (serviceBaseUrl) =>\n        createTelemetryClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('telemetry', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'query',\n      clientName: 'queryService',\n      clientFn: (serviceBaseUrl) =>\n        createQueryServiceClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('queryService', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'queue',\n      clientName: 'queue',\n      clientFn: (serviceBaseUrl) =>\n        createQueueClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('queue', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'kai-assistant',\n      clientName: 'chat',\n      clientFn: (serviceBaseUrl) =>\n        createChatClient({\n          storageApiUrl: baseUrl,\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('chat', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'ai',\n      clientName: 'ai',\n      clientFn: (serviceBaseUrl) =>\n        createAiClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('ai', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      // The ai-service ingress exposes omnisearch under `/omnisearch`, like the `kai-assistant`\n      // `/api` override in `domain/stack.ts`.\n      serviceId: 'ai',\n      clientName: 'omnisearch',\n      clientFn: (serviceBaseUrl) =>\n        createOmnisearchClient({\n          baseUrl: withPath(serviceBaseUrl, '/omnisearch'),\n          middlewares: middlewareFor('omnisearch', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'import',\n      clientName: 'import',\n      clientFn: (serviceBaseUrl) =>\n        createImportClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('import', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'kai-agent',\n      clientName: 'kaiAgent',\n      clientFn: (serviceBaseUrl) =>\n        createKaiAgentClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('kaiAgent', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'components-mcp',\n      clientName: 'componentsMcp',\n      clientFn: (serviceBaseUrl) =>\n        createComponentsMcpClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('componentsMcp', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'oauth',\n      clientName: 'oauth',\n      clientFn: (serviceBaseUrl) =>\n        createOauthClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('oauth', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'scheduler',\n      clientName: 'scheduler',\n      clientFn: (serviceBaseUrl) =>\n        createSchedulerClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('scheduler', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'stream',\n      clientName: 'stream',\n      clientFn: (serviceBaseUrl) =>\n        createStreamClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('stream', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'notification',\n      clientName: 'notifications',\n      clientFn: (serviceBaseUrl) =>\n        createNotificationsClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('notifications', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'billing',\n      clientName: 'billing',\n      clientFn: (serviceBaseUrl) =>\n        createBillingClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('billing', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'metastore',\n      clientName: 'metastore',\n      clientFn: (serviceBaseUrl) =>\n        createMetastoreClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('metastore', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .build();\n","import type { AuthStrategy } from '../../clients/auth';\nimport { createStorageClient } from '../../clients/storage';\nimport { ProjectFeature } from '../../constants/projectFeatures';\nimport { createDefaultBranch } from '../../domain/defaultBranch';\nimport { createStack, type ServiceUrls } from '../../domain/stack';\nimport { createStorageTable } from '../../domain/storageTable';\nimport { type MiddlewareFn, normalizeBaseUrl } from '../../fetchClient';\nimport { KeboolaHttpHeader } from '../../internal';\nimport { createDerivedStore } from '../../utils';\nimport { type ClientContext, createLiveProject } from '../createLiveProject';\nimport { type MiddlewareFor } from '../createMiddlewareFor';\nimport { createSdk } from '../createSdk';\nimport { createServiceClients } from '../createServiceClients';\n\nconst createAttachStorageToken =\n  (getToken: () => string): MiddlewareFn =>\n  (next) =>\n  (request) => {\n    request.request.headers.set(KeboolaHttpHeader.STORAGE_API_TOKEN, getToken());\n    return next(request);\n  };\n\ntype Options = {\n  baseUrl: string;\n  getStorageToken: () => string;\n  onStorageTokenRefreshed: (token: string) => void;\n  middlewareFor: MiddlewareFor;\n  clientServiceUrls?: ServiceUrls;\n};\n\nexport const createProjectClients = async ({\n  baseUrl,\n  getStorageToken,\n  onStorageTokenRefreshed,\n  middlewareFor,\n  clientServiceUrls,\n}: Options) => {\n  const auth: AuthStrategy = { type: 'sapi-token', token: getStorageToken() };\n\n  const attach = createAttachStorageToken(getStorageToken);\n  const _storage = createStorageClient({ baseUrl, auth, middlewares: [attach] });\n  const [stackInfo, sapiToken, devBranches] = await Promise.all([\n    _storage.getStackInfo({ exclude: 'componentDetails' }),\n    _storage.tokens.verify(),\n    _storage.branches.getDevBranches(),\n  ]);\n\n  const stack = createStack({ stackInfo, clientServiceUrls });\n  const defaultBranch = createDefaultBranch({ devBranches });\n  const liveProject = createLiveProject({\n    initialToken: sapiToken,\n    verify: () => _storage.tokens.verify(),\n  });\n  const storageTableStore = createDerivedStore({\n    source: liveProject.store,\n    build: createStorageTable,\n    dependsOn: (project) => ({\n      useLegacyBucketPrefix: !project.hasFeature(ProjectFeature.DisableLegacyBucketPrefix),\n      hasProtectedDefaultBranch: project.hasFeature(ProjectFeature.SoxProtectedDefaultBranch),\n      hasStorageBranches: project.hasFeature(ProjectFeature.StorageBranches),\n    }),\n  });\n  const context: ClientContext = {\n    baseUrl: normalizeBaseUrl(baseUrl),\n    stack,\n    defaultBranch,\n    get project() {\n      return liveProject.getProject();\n    },\n    get st() {\n      return storageTableStore.get();\n    },\n  };\n\n  // Static storage-token header + in-band refresh (onRefreshToken rotates the shared liveToken store).\n  const storage = createStorageClient({\n    baseUrl,\n    auth,\n    middlewares: middlewareFor('storage', [liveProject.middleware]),\n    onRefreshToken: onStorageTokenRefreshed,\n  });\n\n  const { client: services, meta: serviceMeta } = createServiceClients({\n    baseUrl,\n    auth,\n    getServiceBaseUrl: context.stack.getServiceUrl,\n    middlewareFor,\n    attachTokenMiddleware: attach,\n  });\n\n  return {\n    context,\n    serviceMeta,\n    storage,\n    ...services,\n    sdk: createSdk({ storage, services, context }),\n  };\n};\n","import { createAuthClient } from '../../clients/auth/authClient';\nimport { createManagementClient } from '../../clients/management';\nimport { createDerivedAsyncStore, createDerivedStore } from '../../utils';\nimport { createApi } from '../createApi';\nimport { createMiddlewareFor } from '../createMiddlewareFor';\nimport type { LegacyKeboolaOptions } from '../types';\n\nimport { createConfig, type State } from './createConfig';\nimport { createProjectClients } from './createProjectClients';\nimport type { SessionSnapshot } from './types';\n\ntype ProjectClients = Awaited<ReturnType<typeof createProjectClients>>;\n\nexport const createLegacyKeboola = (options: LegacyKeboolaOptions = {}) => {\n  const config = createConfig();\n  const middlewareFor = createMiddlewareFor(options.middlewares);\n\n  // The clients are derived from config state: each rebuilds only when the slice it depends on\n  // changes. auth needs a baseUrl; management builds token-less up front and upgrades once a manage\n  // token lands; storage builds once the SAPI token arrives (a later in-band rotation keeps the same\n  // baseUrl key, so it does not rebuild).\n  const authClient = createDerivedStore({\n    source: config.store,\n    dependsOn: (state) => state.baseUrl,\n    build: (baseUrl) =>\n      baseUrl ? createAuthClient({ baseUrl, middlewares: middlewareFor('auth', []) }) : null,\n  });\n\n  const management = createDerivedStore({\n    source: config.store,\n    dependsOn: (state) => ({ baseUrl: state.baseUrl, token: state.managementToken }),\n    build: ({ baseUrl, token }) =>\n      baseUrl\n        ? createManagementClient({\n            baseUrl,\n            auth: token ? { type: 'management-token', token } : { type: 'management-token' },\n            middlewares: middlewareFor('management', []),\n          })\n        : null,\n  });\n\n  const build = createDerivedAsyncStore<State, string, ProjectClients>({\n    source: config.store,\n    dependsOn: (state) => (state.sapiToken && state.baseUrl ? state.baseUrl : null),\n    build: (baseUrl) =>\n      createProjectClients({\n        baseUrl,\n        getStorageToken: config.getStorageToken,\n        onStorageTokenRefreshed: config.setStorageToken,\n        middlewareFor,\n        clientServiceUrls: options.clientServiceUrls,\n      }),\n  });\n\n  if (options.baseUrl) config.setBaseUrl(options.baseUrl);\n\n  const debug = (): SessionSnapshot => {\n    const info = config.debug();\n    return {\n      type: 'Sapi',\n      config: info,\n      authReady: authClient.get() !== null,\n      managementReady: !!info.managementToken,\n      storage: build.store.get().state,\n    };\n  };\n\n  const session = {\n    setBaseUrl: config.setBaseUrl,\n    isStorageReady: () => build.store.get().state === 'ready',\n    authenticateStorage: (sapiToken: string) => config.authenticate({ sapiToken }),\n    authenticateStorageAsync: async (sapiToken: string) => {\n      config.authenticate({ sapiToken });\n      // `authenticate` mutates synchronously, so the build is already pending; `settled` awaits it.\n      await build.settled();\n    },\n    authenticateManagement: (managementToken: string) => config.authenticate({ managementToken }),\n    subscribe: (listener: (snapshot: SessionSnapshot) => void) => {\n      // Fire on both config mutations and storage-build transitions, so `ready` is observable.\n      const unsubscribeConfig = config.store.subscribe(() => listener(debug()));\n      const unsubscribeBuild = build.store.subscribe(() => listener(debug()));\n      return () => {\n        unsubscribeConfig();\n        unsubscribeBuild();\n      };\n    },\n    debug,\n  };\n\n  const api = createApi({\n    getAuthClient: () => authClient.get(),\n    getManagementClient: () => management.get(),\n    getProjectClients: () => {\n      const state = build.store.get();\n      return state.state === 'ready' ? state.value : null;\n    },\n  });\n\n  return { api, session };\n};\n","import { Result } from '../../../utils';\nimport { KeboolaError, KeboolaErrorType } from '../../errors';\n\nimport type {\n  Auth,\n  BaseUrl,\n  Credential,\n  CredentialInput,\n  Grant,\n  Project,\n  ProjectAddress,\n  ProjectEntryId,\n  ProjectId,\n  Stack,\n  StackAddress,\n  State,\n} from './types';\n\n/**\n * Everything the table constructs: the entries themselves, and the failures reading them produces.\n *\n * Nothing here touches the store — a factory takes what it is told and returns a value, so the\n * namespaces the tables build on can be read without following a dependency.\n */\n\n// --- entry ids ---\n\nconst projectEntryId = (baseUrl: BaseUrl, projectId: ProjectId): ProjectEntryId =>\n  `${baseUrl}#${projectId}`;\n\n/** What every project entry of one stack shares — the one thing a per-stack teardown matches on. */\nconst projectEntryPrefix = (baseUrl: BaseUrl) => `${baseUrl}#`;\n\nconst isUnderStack = (baseUrl: BaseUrl) => (id: ProjectEntryId) =>\n  id.startsWith(projectEntryPrefix(baseUrl));\n\n// --- auth: the three phases of a credential holder ---\n\nconst anonymousAuth = (): Auth => ({ status: 'anonymous' });\n\nconst restoringAuth = (): Auth => ({ status: 'restoring' });\n\nconst authenticatedAuth = (credential: Credential): Auth => ({\n  status: 'authenticated',\n  credential,\n});\n\n// --- credentials ---\n\n// Stamps the issue time the credential's lifetime is measured from.\nconst credential = (input: CredentialInput): Credential => ({\n  ...input,\n  issuedAt: Date.now(),\n});\n\n// The part that renews the credential; the access token is never carried over.\nconst grant = (credential: Credential): Grant =>\n  credential.type === 'token'\n    ? { type: 'token', refreshToken: credential.refreshToken }\n    : { type: 'cookie', sessionId: credential.sessionId };\n\n// Backdates the issue time by a full lifetime, so the credential reads as expired right now.\nconst expiredCredential = (credential: Credential): Credential => ({\n  ...credential,\n  issuedAt: Date.now() - credential.expiresIn * 1000,\n});\n\n// --- fresh entries: anonymous, nothing fetched yet ---\n\nconst stack = (baseUrl: BaseUrl): Stack => ({\n  baseUrl,\n  context: 'idle',\n  epoch: 0,\n  auth: anonymousAuth(),\n  retained: null,\n});\n\nconst project = (baseUrl: BaseUrl, projectId: ProjectId): Project => ({\n  id: projectEntryId(baseUrl, projectId),\n  baseUrl,\n  projectId,\n  context: 'idle',\n});\n\n// --- addresses: references into the table ---\n\nconst stackAddress = (baseUrl: BaseUrl): StackAddress => ({\n  baseUrl,\n  projectId: null,\n});\n\nconst projectAddress = (baseUrl: BaseUrl, projectId: ProjectId): ProjectAddress => ({\n  baseUrl,\n  projectId,\n});\n\n// --- the table: scoped to its default stack from the start, which is its one row ---\n\nconst table = (defaultBaseUrl: BaseUrl): State => ({\n  active: stackAddress(defaultBaseUrl),\n  stacks: { [defaultBaseUrl]: stack(defaultBaseUrl) },\n  projects: {},\n});\n\nexport const Entry = {\n  // ids\n  projectEntryId,\n  isUnderStack,\n\n  // entries\n  stack,\n  project,\n\n  // addresses\n  stackAddress,\n  projectAddress,\n\n  // the table\n  table,\n\n  // auth\n  anonymousAuth,\n  restoringAuth,\n  authenticatedAuth,\n\n  // credentials\n  credential,\n  grant,\n  expiredCredential,\n};\n\n/**\n * Every failure the table can produce.\n *\n * - The typed ones carry a `KeboolaErrorType` a consumer branches on; the rest are plain `Error`s\n *   whose message names the entry, because nothing branches on them.\n */\nexport const Errors = {\n  // typed: a consumer reads the `type` and decides what to render\n  notAuthenticated: () => new KeboolaError(KeboolaErrorType.NotAuthenticated),\n  stackActive: () => new KeboolaError(KeboolaErrorType.StackActive),\n  /** A stack that was never opened — nothing has been configured for it. */\n  unconfigured: () => new KeboolaError(KeboolaErrorType.Unconfigured),\n  alreadyAuthenticated: () => new KeboolaError(KeboolaErrorType.AlreadyAuthenticated),\n  notReady: () => new KeboolaError(KeboolaErrorType.NotReady),\n\n  // the restore phases\n  alreadyRestoring: (baseUrl: BaseUrl) => new Error(`Stack \"${baseUrl}\" is already being restored`),\n  notRestoring: (baseUrl: BaseUrl) => new Error(`Stack \"${baseUrl}\" is not being restored`),\n\n  // a renewal answering with the other grant type\n  grantTypeChanged: (from: string, to: string) => new Error(`A ${from} grant cannot become ${to}`),\n  nothingRetained: (baseUrl: BaseUrl) => new Error(`Stack \"${baseUrl}\" retains no credential`),\n\n  missingProject: (id: ProjectEntryId) => new Error(`No project \"${id}\"`),\n};\n\n// The credential behind an `Auth`, or `NotAuthenticated` for the anonymous and restoring phases.\nexport const authenticated = (auth: Auth): Result<Credential> =>\n  auth.status === 'authenticated'\n    ? Result.success(auth.credential)\n    : Result.failure(Errors.notAuthenticated());\n","import { Result } from '../../../utils';\n\nimport { authenticated, Entry, Errors } from './factories';\nimport type { Projects } from './projects';\nimport type { Stacks } from './stacks';\nimport type { BaseUrl, CredentialInput, Retained } from './types';\n\nexport type SignOutOptions = {\n  /** Keep the grant on the stack for `restoreRetained`; the sign-in still ends. */\n  retain?: boolean;\n};\n\n/**\n * Fire-once per sign-in: the first report of a dead credential returns `true`, the rest `false`,\n * and `authenticate` re-arms it. Held beside the table because it is not state anyone restores.\n */\nexport const createExpiryLatch = () => {\n  const notified = new Map<BaseUrl, boolean>();\n\n  return {\n    arm: (baseUrl: BaseUrl) => notified.set(baseUrl, false),\n    forget: (baseUrl: BaseUrl) => notified.delete(baseUrl),\n    report: (baseUrl: BaseUrl): boolean => {\n      if (notified.get(baseUrl)) return false;\n      notified.set(baseUrl, true);\n      return true;\n    },\n  };\n};\n\ntype ExpiryLatch = ReturnType<typeof createExpiryLatch>;\n\ntype Options = {\n  stacks: Stacks;\n  projects: Projects;\n  expiry: ExpiryLatch;\n};\n\n/**\n * The stack's credential and its sign-in pin.\n *\n * - `epoch` moves on `authenticate` and `signOut` and never on a rotation, so it is exactly \"which\n *   sign-in is this\" — what an in-flight exchange compares itself against.\n */\nexport const createAuth = ({ stacks, projects, expiry }: Options) => {\n  // Nothing signed in yet: `anonymous` or `restoring` pass.\n  const requireUnauthenticated = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) =>\n      stack.auth.status === 'authenticated'\n        ? Result.failure(Errors.alreadyAuthenticated())\n        : Result.success(stack),\n    );\n\n  // Strictly `anonymous`: a restore in flight is refused too, with its own reason.\n  const requireAnonymous = (baseUrl: BaseUrl) =>\n    Result.andThen(requireUnauthenticated(baseUrl), (stack) =>\n      stack.auth.status === 'restoring'\n        ? Result.failure(Errors.alreadyRestoring(baseUrl))\n        : Result.success(stack),\n    );\n\n  const requireRestoring = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) =>\n      stack.auth.status === 'restoring'\n        ? Result.success(stack)\n        : Result.failure(Errors.notRestoring(baseUrl)),\n    );\n\n  const startRestore = (baseUrl: BaseUrl) =>\n    Result.map(requireAnonymous(baseUrl), (stack) =>\n      stacks.set({ ...stack, auth: Entry.restoringAuth() }),\n    );\n\n  // A restore that failed or was abandoned: back to anonymous, no sign-in ended.\n  const cancelRestore = (baseUrl: BaseUrl) =>\n    Result.map(requireRestoring(baseUrl), (stack) =>\n      stacks.set({ ...stack, auth: Entry.anonymousAuth() }),\n    );\n\n  // Completes a restore too: `restoring` is the one non-anonymous phase this accepts.\n  const authenticate = (baseUrl: BaseUrl, input: CredentialInput) =>\n    Result.map(requireUnauthenticated(baseUrl), (stack) => {\n      expiry.arm(baseUrl);\n\n      return stacks.set({\n        ...stack,\n        epoch: stack.epoch + 1,\n        auth: Entry.authenticatedAuth(Entry.credential(input)),\n        retained: null,\n      });\n    });\n\n  const applyRefresh = (baseUrl: BaseUrl, input: CredentialInput) =>\n    Result.andThen(stacks.requireCredential(baseUrl), (credential) =>\n      credential.type !== input.type\n        ? Result.failure(Errors.grantTypeChanged(credential.type, input.type))\n        : Result.map(stacks.get(baseUrl), (stack) =>\n            stacks.set({ ...stack, auth: Entry.authenticatedAuth(Entry.credential(input)) }),\n          ),\n    );\n\n  const forceExpire = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.requireCredential(baseUrl), (credential) =>\n      Result.map(stacks.get(baseUrl), (stack) =>\n        stacks.set({\n          ...stack,\n          auth: Entry.authenticatedAuth(Entry.expiredCredential(credential)),\n        }),\n      ),\n    );\n\n  // Drops the credential and every project under it; the stack stays, anonymous, as the scope.\n  // With `retain`, the credential's grant moves into the slot instead; a stack with nothing to\n  // move keeps what the slot already holds.\n  const signOut = (baseUrl: BaseUrl, { retain = false }: SignOutOptions = {}) =>\n    Result.map(stacks.get(baseUrl), (stack) => {\n      projects.closeAll(baseUrl);\n      const retained = retain\n        ? Result.unwrapOr(\n            Result.map(authenticated(stack.auth), (credential): Retained => ({\n              grant: Entry.grant(credential),\n            })),\n            stack.retained,\n          )\n        : null;\n\n      return stacks.set({\n        ...stack,\n        epoch: stack.epoch + 1,\n        auth: Entry.anonymousAuth(),\n        retained,\n      });\n    });\n\n  const retain = (baseUrl: BaseUrl, retained: Retained) =>\n    Result.map(stacks.get(baseUrl), (stack) => stacks.set({ ...stack, retained }));\n\n  const dropRetained = (baseUrl: BaseUrl) =>\n    Result.map(stacks.get(baseUrl), (stack) => stacks.set({ ...stack, retained: null }));\n\n  const requireRetained = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) =>\n      stack.retained\n        ? Result.success(stack.retained)\n        : Result.failure(Errors.nothingRetained(baseUrl)),\n    );\n\n  const getEpoch = (baseUrl: BaseUrl) => Result.map(stacks.get(baseUrl), (stack) => stack.epoch);\n\n  // `null` rather than a failure: an anonymous request goes out without an `Authorization` header.\n  const getAccessToken = (baseUrl: BaseUrl): string | null =>\n    Result.unwrapOr(\n      Result.map(stacks.requireCredential(baseUrl), ({ accessToken }) => accessToken),\n      null,\n    );\n\n  return {\n    startRestore,\n    cancelRestore,\n    authenticate,\n    applyRefresh,\n    forceExpire,\n    signOut,\n    retain,\n    dropRetained,\n    requireRetained,\n    notifyExpired: expiry.report,\n    requireCredential: stacks.requireCredential,\n    getEpoch,\n    getAccessToken,\n  };\n};\n","import { Result } from '../../../utils';\n\nimport { Entry, Errors } from './factories';\nimport type { Stacks } from './stacks';\nimport type {\n  Address,\n  BaseUrl,\n  FetchStatus,\n  Project,\n  ProjectEntryId,\n  ProjectId,\n  Store,\n} from './types';\n\ntype Options = {\n  store: Store;\n  stacks: Stacks;\n};\n\n/** The projects open under a stack, and what authorizes a request to one. */\nexport const createProjects = ({ store, stacks }: Options) => {\n  const has = (id: ProjectEntryId): boolean => id in store.get().projects;\n\n  const get = (id: ProjectEntryId): Result<Project> => {\n    const project = store.get().projects[id];\n    return project ? Result.success(project) : Result.failure(Errors.missingProject(id));\n  };\n\n  const list = (baseUrl: BaseUrl): Project[] =>\n    Object.values(store.get().projects).filter((project) => project.baseUrl === baseUrl);\n\n  /** Every open project with this id, whatever stack it sits on — a project number is not unique. */\n  const findAll = (projectId: ProjectId): Project[] =>\n    Object.values(store.get().projects).filter((project) => project.projectId === projectId);\n\n  const set = (project: Project): Project => {\n    const state = store.get();\n    store.set({ ...state, projects: { ...state.projects, [project.id]: project } });\n    return project;\n  };\n\n  const update = (id: ProjectEntryId, updater: (project: Project) => Project): Result<Project> =>\n    Result.map(get(id), (project) => set(updater(project)));\n\n  const removeMany = (ids: ProjectEntryId[], nextActive: Address) => {\n    const state = store.get();\n    const projects = { ...state.projects };\n    for (const id of ids) delete projects[id];\n    store.set({ ...state, active: nextActive, projects });\n  };\n\n  // What authorizes a request to this project: the credential of the stack it sits under.\n  const requireCredential = (id: ProjectEntryId) =>\n    Result.andThen(get(id), (project) => stacks.requireCredential(project.baseUrl));\n\n  // --- verbs ---\n\n  // A project borrows its stack's credential, and so needs one to exist.\n  const open = (baseUrl: BaseUrl, projectId: ProjectId): Result<Project> => {\n    const id = Entry.projectEntryId(baseUrl, projectId);\n    if (has(id)) return get(id);\n\n    return Result.map(stacks.requireCredential(baseUrl), () =>\n      set(Entry.project(baseUrl, projectId)),\n    );\n  };\n\n  // Resolves to the closed project, so the caller can tear down what it built for it.\n  const close = (id: ProjectEntryId): Result<Project> =>\n    Result.tap(get(id), ({ baseUrl, projectId }) => {\n      const { active } = store.get();\n      const isScoped = active.baseUrl === baseUrl && active.projectId === projectId;\n      removeMany([id], isScoped ? Entry.stackAddress(baseUrl) : active);\n    });\n\n  /** Every project under a stack, with the scope falling back to the stack itself. */\n  const closeAll = (baseUrl: BaseUrl) => {\n    const ids = list(baseUrl).map((project) => project.id);\n    const { active } = store.get();\n\n    removeMany(ids, active.baseUrl === baseUrl ? Entry.stackAddress(baseUrl) : active);\n  };\n\n  const updateContext = (id: ProjectEntryId, context: FetchStatus): Result<Project> =>\n    update(id, (project) => ({ ...project, context }));\n\n  return {\n    has,\n    get,\n    list,\n    findAll,\n    set,\n    update,\n    open,\n    close,\n    closeAll,\n    updateContext,\n    requireCredential,\n  };\n};\n\nexport type Projects = ReturnType<typeof createProjects>;\n","import { Result } from '../../../utils';\n\nimport { Entry, Errors } from './factories';\nimport type { Projects } from './projects';\nimport type { Stacks } from './stacks';\nimport type {\n  Address,\n  BaseUrl,\n  Location,\n  Project,\n  ProjectAddress,\n  ProjectId,\n  Stack,\n  StackAddress,\n  Store,\n} from './types';\n\ntype Options = {\n  store: Store;\n  stacks: Stacks;\n  projects: Projects;\n};\n\n/**\n * What `api.*` addresses: the `active` slot, and the address in it resolved against the tables it\n * points into.\n *\n * The tables never write here — they read `active` through the pure helpers in `address.ts`, so\n * that this can depend on them rather than the other way round.\n */\nexport const createScope = ({ store, stacks, projects }: Options) => {\n  const get = (): Address => store.get().active;\n\n  const isSame = (a: Address, b: Address) =>\n    a === b || (a.baseUrl === b.baseUrl && a.projectId === b.projectId);\n\n  // Re-activating what is already active is not a change. Without this a component that scopes on\n  // every render — the backend flow, handed its stack and project by the server — is notified back\n  // into another render, forever.\n  const set = (active: Address) => {\n    if (isSame(store.get().active, active)) return;\n    store.set({ ...store.get(), active });\n  };\n\n  const locate = (active: Address): Location | null => {\n    const stack = stacks.get(active.baseUrl);\n    if (!stack.success) return null;\n    if (active.projectId === null) return { stack: stack.data, project: null };\n\n    const project = projects.get(Entry.projectEntryId(active.baseUrl, active.projectId));\n    if (!project.success) return null;\n\n    return { stack: stack.data, project: project.data };\n  };\n\n  // The scope always names a row: the table starts on one, and the active stack cannot close.\n  const getActive = (): Location => {\n    const location = locate(get());\n    if (!location) throw new Error(`The scope names no row: ${JSON.stringify(get())}`);\n    return location;\n  };\n\n  const getActiveStack = (): Stack => getActive().stack;\n\n  const activateStack = (baseUrl: BaseUrl): Result<StackAddress> =>\n    Result.map(stacks.get(baseUrl), (stack) => {\n      const next = Entry.stackAddress(stack.baseUrl);\n      set(next);\n      return next;\n    });\n\n  // A project can only be addressed once something authorizes a request to it — which is also what\n  // proves both its own row and its stack's exist.\n  const activateProject = (baseUrl: BaseUrl, projectId: ProjectId): Result<ProjectAddress> =>\n    Result.map(projects.requireCredential(Entry.projectEntryId(baseUrl, projectId)), () => {\n      const next = Entry.projectAddress(baseUrl, projectId);\n      set(next);\n      return next;\n    });\n\n  // `select` creates the row it activates; the `activate*` pair above requires one that exists.\n  const selectStack = (baseUrl: BaseUrl): Result<Stack> => {\n    const stack = stacks.ensure(baseUrl);\n    return Result.map(activateStack(stack.baseUrl), () => stack);\n  };\n\n  const selectProject = (projectId: ProjectId): Result<Project> => {\n    const { baseUrl } = getActiveStack();\n\n    const project = projects.open(baseUrl, projectId);\n    if (!project.success) return project;\n\n    return Result.map(activateProject(baseUrl, projectId), () => project.data);\n  };\n\n  // Leaves the project but stays on its stack; a stack-level scope is left as it is.\n  const deactivate = () => {\n    const active = get();\n    if (active.projectId === null) return;\n    set(Entry.stackAddress(active.baseUrl));\n  };\n\n  // A stack-level scope is real state, not a broken one: there is no project to hand back yet.\n  const requireActiveProject = (): Result<Project> => {\n    const { project } = getActive();\n    return project ? Result.success(project) : Result.failure(Errors.notReady());\n  };\n\n  return {\n    get,\n    getActive,\n    activateStack,\n    activateProject,\n    selectStack,\n    selectProject,\n    deactivate,\n    getActiveStack,\n    requireActiveProject,\n  };\n};\n","import { Result } from '../../../utils';\n\nimport { authenticated, Entry, Errors } from './factories';\nimport type { BaseUrl, FetchStatus, Stack, Store } from './types';\n\ntype Options = {\n  store: Store;\n  /** Cleared with the stack, so a reopened stack starts with its expiry report re-armed. */\n  forgetExpiry: (baseUrl: BaseUrl) => void;\n};\n\n/** One entry per stack: the entries, and the verbs that open and close them. */\nexport const createStacks = ({ store, forgetExpiry }: Options) => {\n  const has = (baseUrl: BaseUrl) => baseUrl in store.get().stacks;\n  const get = (baseUrl: BaseUrl) => {\n    const stack = store.get().stacks[baseUrl];\n    return stack ? Result.success(stack) : Result.failure(Errors.unconfigured());\n  };\n  const list = () => Object.values(store.get().stacks);\n  const set = (stack: Stack): Stack => {\n    const state = store.get();\n    store.set({ ...state, stacks: { ...state.stacks, [stack.baseUrl]: stack } });\n    return stack;\n  };\n  const update = (baseUrl: BaseUrl, updater: (stack: Stack) => Stack) =>\n    Result.map(get(baseUrl), (stack) => set(updater(stack)));\n\n  // What authorizes a request to this stack; every project under it borrows the same one.\n  const requireCredential = (baseUrl: BaseUrl) =>\n    Result.andThen(get(baseUrl), (stack) => authenticated(stack.auth));\n\n  // --- verbs ---\n\n  const ensure = (baseUrl: BaseUrl) => {\n    const existing = get(baseUrl);\n    if (existing.success) return existing.data;\n    return set(Entry.stack(baseUrl));\n  };\n\n  // Drops the stack and every project under it in one write. The active stack is refused: the scope\n  // always names a stack.\n  const close = (baseUrl: BaseUrl) => {\n    const stack = get(baseUrl);\n    if (!stack.success) return stack;\n\n    const state = store.get();\n    if (state.active.baseUrl === baseUrl) return Result.failure(Errors.stackActive());\n\n    const stacks = { ...state.stacks };\n    delete stacks[baseUrl];\n\n    const projects = Object.fromEntries(\n      Object.entries(state.projects).filter(([, project]) => project.baseUrl !== baseUrl),\n    );\n    store.set({ active: state.active, stacks, projects });\n    forgetExpiry(baseUrl);\n    return stack;\n  };\n\n  const updateContext = (baseUrl: BaseUrl, context: FetchStatus) =>\n    update(baseUrl, (stack) => ({ ...stack, context }));\n\n  return {\n    has,\n    get,\n    list,\n    set,\n    update,\n    ensure,\n    close,\n    updateContext,\n    requireCredential,\n  };\n};\n\nexport type Stacks = ReturnType<typeof createStacks>;\n","import { createStore } from '../../../utils';\n\nimport { createAuth, createExpiryLatch } from './auth';\nimport { Entry } from './factories';\nimport { createProjects } from './projects';\nimport { createScope } from './scope';\nimport { createStacks } from './stacks';\nimport type { BaseUrl, State } from './types';\n\n/**\n * The stack table and the rules over it, one namespace per concern.\n *\n * - Built in dependency order: a project reads its stack's credential, and the scope resolves\n *   the active address against both tables.\n */\nexport const createState = (defaultBaseUrl: BaseUrl) => {\n  const store = createStore<State>(Entry.table(defaultBaseUrl));\n  const expiry = createExpiryLatch();\n\n  const stacks = createStacks({ store, forgetExpiry: expiry.forget });\n  const projects = createProjects({ store, stacks });\n  const scope = createScope({ store, stacks, projects });\n  const auth = createAuth({ stacks, projects, expiry });\n\n  return { store: store.asReadable(), stacks, projects, auth, scope };\n};\n\nexport type StateApi = ReturnType<typeof createState>;\n","import type { createAuthClient } from '../../../clients/auth/authClient';\nimport { KeboolaError, KeboolaErrorType } from '../../errors';\nimport type { CredentialInput, Grant } from '../state/types';\n\ntype AuthClient = ReturnType<typeof createAuthClient>;\n\nexport const renew = async (client: AuthClient, grant: Grant): Promise<CredentialInput> => {\n  if (grant.type === 'cookie') {\n    const { accessToken, expiresIn, sessionId } = await client.token.refreshWithSession({\n      sessionId: grant.sessionId,\n    });\n    return { type: 'cookie', accessToken, expiresIn, sessionId };\n  }\n\n  const { accessToken, expiresIn, refreshToken } = await client.token.refreshWithToken({\n    refreshToken: grant.refreshToken,\n  });\n  if (!refreshToken) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);\n  return { type: 'token', accessToken, expiresIn, refreshToken };\n};\n","import { createAuthClient } from '../../../clients/auth/authClient';\nimport type { MiddlewareFn } from '../../../fetchClient';\nimport { dedupe, ensure, Result } from '../../../utils';\nimport { KeboolaError, KeboolaErrorType } from '../../errors';\nimport type { createSessionPersistor, Locked, PersistedSession } from '../persistor';\nimport { type createState, Entry, type SignOutOptions } from '../state';\nimport type { BaseUrl, Credential, CredentialInput, Grant, ProjectId } from '../state/types';\n\nimport { createBearerAuthMiddleware, isUnauthorized } from './middleware';\nimport { renew } from './renewal';\n\ntype Options = {\n  state: ReturnType<typeof createState>;\n  persistor: ReturnType<typeof createSessionPersistor>;\n  middlewares: MiddlewareFn[];\n  refreshThreshold?: number;\n  /** Drops what the sign-in derived; also fires when a refused refresh expires it, not only on `signOut`. */\n  onSignedOut?: (baseUrl: BaseUrl) => void;\n  /** After the sign-out a refused refresh forced; never for a caller's own `signOut`. */\n  onExpired?: (baseUrl: BaseUrl) => void;\n};\n\nconst DEFAULT_REFRESH_THRESHOLD = 0.9;\n\n/**\n * What a boot-time restore found.\n *\n * - `expired`: the server refused the refresh token.\n * - `unreachable`: no answer; the stored token is still good — retry, never log in.\n */\nexport type RestoreStatus = 'restored' | 'expired' | 'unreachable' | 'empty';\n\n/**\n * One stack's outcome; `RestoreStatus` reads the scoped stack's.\n *\n * - `skipped`: the caller signed this stack in or out before the restore reached it.\n */\nexport type StackRestore = 'restored' | 'refused' | 'unreachable' | 'skipped';\n\nconst signInEnded = () => new KeboolaError(KeboolaErrorType.SignInEnded);\n\nconst toRestoreStatus = (outcome: StackRestore | undefined): RestoreStatus => {\n  if (outcome === undefined || outcome === 'skipped') return 'empty';\n  if (outcome === 'refused') return 'expired';\n  return outcome;\n};\n\nexport const createCredentials = ({\n  state,\n  persistor,\n  middlewares,\n  refreshThreshold = DEFAULT_REFRESH_THRESHOLD,\n  onSignedOut,\n  onExpired,\n}: Options) => {\n  const rotationMap = new Map<BaseUrl, () => Promise<Result<string>>>();\n\n  // `epoch` restarts with the row, so close + reopen + authenticate can repeat it; this counter\n  // outlives the row, so the pair tells sign-ins apart.\n  const generations = new Map<BaseUrl, number>();\n  const generationOf = (baseUrl: BaseUrl) => generations.get(baseUrl) ?? 0;\n\n  // No bearer middleware on this client: the cookie refresh is rejected outright if it carries one.\n  const refresh = async (baseUrl: BaseUrl, grant: Grant): Promise<Result<CredentialInput>> => {\n    const client = createAuthClient({ baseUrl, middlewares });\n    const epochBefore = Result.unwrap(state.auth.getEpoch(baseUrl));\n    const generationBefore = generationOf(baseUrl);\n    const refreshed = await Result.tryCatchAsync(() => renew(client, grant));\n    const epochAfter = Result.unwrapOr(state.auth.getEpoch(baseUrl), -1);\n    const isCurrentSignIn =\n      epochAfter === epochBefore && generationOf(baseUrl) === generationBefore;\n    return isCurrentSignIn ? refreshed : Result.failure(signInEnded());\n  };\n\n  /**\n   * A stack's teardown, from the credential's side.\n   *\n   * - Bumps the generation, so an in-flight rotation can no longer write.\n   * - Drops the deduped entry, so nothing joins that rotation.\n   */\n  const forget = (baseUrl: BaseUrl) => {\n    generations.set(baseUrl, generationOf(baseUrl) + 1);\n    rotationMap.delete(baseUrl);\n  };\n\n  /**\n   * The rotation, and the one place a credential is declared dead.\n   *\n   * - Renews by the credential's grant: the refresh token, or the session id with the cookie.\n   * - A refused refresh token or session is unambiguous.\n   * - The triggering 401 is not (an unreachable project answers the same), so never sign out on a replay.\n   */\n  const getGrantForRotation = async (\n    store: Locked,\n    baseUrl: BaseUrl,\n    credential: Credential,\n  ): Promise<Result<Grant>> => {\n    const epochBefore = Result.unwrap(state.auth.getEpoch(baseUrl));\n    const generationBefore = generationOf(baseUrl);\n    const hydrated = await Result.tryCatchAsync(() => store.read());\n    if (!hydrated.success) return hydrated;\n    if (\n      Result.unwrapOr(state.auth.getEpoch(baseUrl), -1) !== epochBefore ||\n      generationOf(baseUrl) !== generationBefore\n    ) {\n      return Result.failure(signInEnded());\n    }\n\n    const persistedStack = hydrated.data.stacks.find((stack) => stack.baseUrl === baseUrl);\n    if (persistedStack && persistedStack.credential === null) {\n      return Result.failure(signInEnded());\n    }\n    return Result.success(persistedStack?.credential ?? Entry.grant(credential));\n  };\n\n  const rotateOnce = async (baseUrl: BaseUrl): Promise<Result<string>> =>\n    persistor.locked(async (store) => {\n      const credential = state.auth.requireCredential(baseUrl);\n      if (!credential.success) return credential;\n      const grant = await getGrantForRotation(store, baseUrl, credential.data);\n      if (!grant.success) return grant;\n\n      const refreshed = await refresh(baseUrl, grant.data);\n      if (!refreshed.success) {\n        if (isUnauthorized(refreshed.error)) await expire(baseUrl, store);\n        return refreshed;\n      }\n\n      const accessToken = Result.map(\n        state.auth.applyRefresh(baseUrl, refreshed.data),\n        () => refreshed.data.accessToken,\n      );\n      await store.persistStack(baseUrl, state.store.get());\n      return accessToken;\n    });\n\n  const rotate = (baseUrl: BaseUrl): Promise<Result<string>> =>\n    ensure(rotationMap, baseUrl, () => dedupe(() => rotateOnce(baseUrl)))();\n\n  // Turns a persisted grant back into a credential; anonymous again if it is dead — which a\n  // cookie grant is off the stack's own origin, where the browser sends no session cookie.\n  const restoreStack = async (\n    baseUrl: BaseUrl,\n    grant: Grant,\n    retained = false,\n  ): Promise<StackRestore> =>\n    persistor.locked(async (store) => {\n      const session = await store.read();\n      const storedStack = session.stacks.find((stack) => stack.baseUrl === baseUrl);\n      const latestGrant = retained ? storedStack?.retained?.grant : storedStack?.credential;\n      if (storedStack && !latestGrant) return 'skipped';\n\n      const restoring = state.auth.startRestore(baseUrl);\n      if (!restoring.success) return 'unreachable';\n\n      const refreshed = await refresh(baseUrl, latestGrant ?? grant);\n      if (!refreshed.success) {\n        state.auth.cancelRestore(baseUrl);\n        if (isUnauthorized(refreshed.error)) {\n          if (retained) state.auth.dropRetained(baseUrl);\n          await store.persistStack(baseUrl, state.store.get());\n          return 'refused';\n        }\n        return 'unreachable';\n      }\n\n      state.auth.authenticate(baseUrl, refreshed.data);\n      if (!state.auth.requireCredential(baseUrl).success) return 'unreachable';\n      if (retained) state.auth.dropRetained(baseUrl);\n      await store.persistStack(baseUrl, state.store.get());\n      return 'restored';\n    });\n\n  // Runs after the credential lands: opening a project on an anonymous stack is refused.\n  const restoreProjects = (baseUrl: BaseUrl, projects: { projectId: ProjectId }[]) => {\n    for (const { projectId } of projects) state.projects.open(baseUrl, projectId);\n  };\n\n  /**\n   * Every persisted stack back into the table, with whatever credential it can hand back.\n   *\n   * - Never writes the scope. `lastActive` is what was scoped when the session was stored, for the\n   *   caller to select.\n   * - `status` reports what became of `lastActive`'s credential; the client reads it to decide\n   *   when persistence may start.\n   */\n  const restore = async (): Promise<{\n    lastActive: PersistedSession['current'];\n    status: RestoreStatus;\n  }> => {\n    // An unreadable store is `unreachable`, like a stack that does not answer: what it holds is\n    // still good, and persistence must not start until a sign-in replaces it.\n    const hydrated = await persistor\n      .locked((store) => store.read())\n      .catch((error: unknown) => {\n        console.warn('createCredentials: the stored session could not be read', error);\n        return null;\n      });\n    if (hydrated === null) return { lastActive: null, status: 'unreachable' };\n    const { stacks, current } = hydrated;\n    const scoped = stacks.find(({ baseUrl }) => baseUrl === current?.baseUrl);\n\n    const restored = stacks.map(\n      async ({ baseUrl, credential, retained, projects }): Promise<StackRestore> => {\n        state.stacks.ensure(baseUrl);\n        if (!credential && !retained) return 'unreachable';\n        if (Result.unwrapOr(state.auth.getEpoch(baseUrl), 0) > 0) return 'skipped';\n        // Back into the slot as it was: a retained sign-out stays signed out across reloads.\n        if (retained) state.auth.retain(baseUrl, retained);\n        if (!credential) return 'unreachable';\n        const outcome = await restoreStack(baseUrl, credential);\n        if (outcome === 'restored') restoreProjects(baseUrl, projects);\n        return outcome;\n      },\n    );\n\n    const results = await Promise.all(restored);\n    const scopedOutcome = scoped?.credential ? results[stacks.indexOf(scoped)] : undefined;\n\n    return { lastActive: current, status: toRestoreStatus(scopedOutcome) };\n  };\n\n  /**\n   * Signs a retained stack back in from the grant it kept.\n   *\n   * - `restored` and `refused` empty the slot; `unreachable` keeps it for another try.\n   * - Throws when the stack retains nothing.\n   */\n  const restoreRetained = async (baseUrl: BaseUrl): Promise<StackRestore> => {\n    const { grant } = Result.unwrap(state.auth.requireRetained(baseUrl));\n    return restoreStack(baseUrl, grant, true);\n  };\n\n  const isStale = (baseUrl: BaseUrl): boolean => {\n    const ageing = Result.map(\n      state.auth.requireCredential(baseUrl),\n      ({ issuedAt, expiresIn }) => Date.now() >= issuedAt + expiresIn * 1000 * refreshThreshold,\n    );\n    return Result.unwrapOr(ageing, false);\n  };\n\n  /**\n   * Drops the slot so the next sign-in's requests don't join the dying rotation.\n   *\n   * - Writes nothing: the caller persists the stack, under the lock it holds or takes.\n   */\n  const signOut = (baseUrl: BaseUrl, options?: SignOutOptions) => {\n    rotationMap.delete(baseUrl);\n    const signedOut = state.auth.signOut(baseUrl, options);\n    onSignedOut?.(baseUrl);\n\n    return signedOut;\n  };\n\n  // The table's latch re-arms on `authenticate`: one sign-out per sign-in. `onExpired` fires once\n  // the sign-out is stored, so a listener may leave the document at once.\n  const expire = async (baseUrl: BaseUrl, store: Locked) => {\n    if (!state.auth.notifyExpired(baseUrl)) return;\n    signOut(baseUrl);\n    await store.persistStack(baseUrl, state.store.get());\n    onExpired?.(baseUrl);\n  };\n\n  // Best-effort: on failure keep the token in hand; a real 401 drives the mandatory rotation.\n  const renewIfStale = async (baseUrl: BaseUrl): Promise<void> => {\n    if (isStale(baseUrl)) await rotate(baseUrl);\n  };\n\n  const middleware = (baseUrl: BaseUrl): MiddlewareFn =>\n    createBearerAuthMiddleware({\n      getAccessToken: async ({ forceRefresh = false } = {}) => {\n        if (forceRefresh) {\n          // `null`, not a rejection: nothing to rotate, so the caller keeps its original 401.\n          if (!state.auth.requireCredential(baseUrl).success) return null;\n          return Result.unwrap(await rotate(baseUrl));\n        }\n\n        await renewIfStale(baseUrl);\n        return state.auth.getAccessToken(baseUrl);\n      },\n    });\n\n  return { middleware, rotate, renewIfStale, restore, restoreRetained, signOut, forget };\n};\n","import { createEmitter, type Emitter } from '../../../utils';\n\ntype Settled<Value> = { status: 'ready'; value: Value } | { status: 'errored'; error: unknown };\ntype Entry<Input, Value> = { input: Input } & (\n  | { status: 'pending'; settled: Promise<Settled<Value>> }\n  | Settled<Value>\n);\ntype Options<Input, Key extends string, Value> = {\n  key: (input: Input) => Key;\n  fetch: (input: Input) => Promise<Value>;\n};\ntype StatusChange<Key extends string> = { key: Key; status: Entry<unknown, unknown>['status'] };\n\ntype ResourceApi<Input, Key extends string, Value> = {\n  /** The value, if it has landed. Never fetches. `null` until it does, and after a failure. */\n  get: (id: Key) => Value | null;\n\n  /** The value, awaited. Fetches unless one is landed or in flight; retries a failed key. */\n  getAsync: (input: Input) => Promise<Value>;\n\n  /** Fetches in the background, once per key. Leaves a failed key failed — use `retry`. */\n  prefetch: (input: Input) => void;\n\n  /** Fetches the key again, whatever it holds. A key that never ran has nothing to refetch. */\n  retry: (id: Key) => void;\n\n  /**\n   * Drops every key the predicate names, silently. What comes back is fetched, not remembered.\n   *\n   * Drop the state row first — a row outliving its entry keeps a `ready` this never corrects.\n   */\n  forget: (matches: (id: Key) => boolean) => void;\n\n  /** Every status change, in order. Returns its unsubscribe. `forget` is silent. */\n  subscribe: Emitter<StatusChange<Key>>['subscribe'];\n};\n\n/**\n * Owns fetching one async value per key — a caller names what it needs and never orchestrates the\n * request. Backs the stack and project contexts.\n *\n * - One fetch per key: concurrent askers share it, a landed value is never refetched.\n * - A failure is held, not thrown away — nothing here needs a rejection handler.\n * - Status lives here and nowhere else; a consumer that has to mirror it subscribes.\n */\nexport const createResource = <Input, Key extends string, Value>({\n  key,\n  fetch,\n}: Options<Input, Key, Value>): ResourceApi<Input, Key, Value> => {\n  const entries = new Map<Key, Entry<Input, Value>>();\n  const changes = createEmitter<StatusChange<Key>>();\n\n  const set = (id: Key, entry: Entry<Input, Value>): void => {\n    entries.set(id, entry);\n    changes.emit({ key: id, status: entry.status });\n  };\n\n  // The input is kept on the entry so `retry` needs only the key — the caller holding one would\n  // otherwise have to read the fetch's arguments back out of wherever they live.\n  const run = (id: Key, input: Input): Entry<Input, Value> => {\n    const settle = (next: Settled<Value>): Settled<Value> => {\n      // Only the newest run may write: a retry mid-flight starts another, and the run it\n      // replaced must not land on top of it.\n      if (entries.get(id) === entry) set(id, { input, ...next });\n      return next;\n    };\n\n    // Async wrapper, so a synchronous throw from `fetch` rejects rather than escaping `run` —\n    // which would leave the key holding whatever it held and throw at `prefetch`'s caller.\n    const attempt = async (): Promise<Value> => await fetch(input);\n\n    const entry: Entry<Input, Value> = {\n      input,\n      status: 'pending',\n      settled: attempt().then(\n        (value) => settle({ status: 'ready', value }),\n        (error: unknown) => settle({ status: 'errored', error }),\n      ),\n    };\n\n    set(id, entry);\n    return entry;\n  };\n\n  const get = (id: Key): Value | null => {\n    const entry = entries.get(id);\n    return entry?.status === 'ready' ? entry.value : null;\n  };\n\n  const getAsync = async (input: Input): Promise<Value> => {\n    const id = key(input);\n    const cached = entries.get(id);\n    const entry = cached === undefined || cached.status === 'errored' ? run(id, input) : cached;\n    const settled = entry.status === 'pending' ? await entry.settled : entry;\n\n    if (settled.status === 'errored') throw settled.error;\n    return settled.value;\n  };\n\n  const forget = (matches: (id: Key) => boolean): void => {\n    for (const id of entries.keys()) if (matches(id)) entries.delete(id);\n  };\n\n  const prefetch = (input: Input): void => {\n    const id = key(input);\n    if (!entries.has(id)) run(id, input);\n  };\n\n  const retry = (id: Key): void => {\n    const entry = entries.get(id);\n    if (entry !== undefined) run(id, entry.input);\n  };\n\n  return { get, getAsync, prefetch, retry, forget, subscribe: changes.subscribe };\n};\n","import { createStorageClient } from '../../../clients/storage';\nimport { createDefaultBranch } from '../../../domain/defaultBranch';\nimport type { MiddlewareFn } from '../../../fetchClient';\nimport { KeboolaHttpHeader } from '../../../internal';\nimport type { createCredentials } from '../credentials';\nimport { Entry, type StateApi } from '../state';\nimport type { BaseUrl, Project, ProjectEntryId, State } from '../state/types';\n\nimport { createResource } from './resource';\n\ntype Options = {\n  state: StateApi;\n  credentials: ReturnType<typeof createCredentials>;\n  /** Only the awaited read — this needs the stack's index to have landed, not to read it. */\n  stackContext: { getAsync: (baseUrl: BaseUrl) => Promise<unknown> };\n};\n\n/** What a project is, once its stack has answered for it. */\ntype ProjectContext = {\n  token: Awaited<ReturnType<ReturnType<typeof createStorageClient>['tokens']['verify']>>;\n  defaultBranch: ReturnType<typeof createDefaultBranch>;\n};\n\nexport const createProjectContext = ({ state, credentials, stackContext }: Options) => {\n  const resource = createResource({\n    key: (project: Project) => project.id,\n    fetch: async ({ baseUrl, projectId }): Promise<ProjectContext> => {\n      // Outside the auth middleware, so the header is already set when it clones the request for\n      // its 401 replay.\n      const withProjectId: MiddlewareFn = (next) => (request) => {\n        request.request.headers.set(KeboolaHttpHeader.PROJECT_ID, String(projectId));\n        return next(request);\n      };\n\n      const client = createStorageClient({\n        baseUrl,\n        auth: { type: 'bearer', token: '', projectId },\n        middlewares: [(next) => withProjectId(credentials.middleware(baseUrl)(next))],\n      });\n\n      // The stack index too, though nothing here reads it. Every consumer gates on *this* status —\n      // `BearerFrontendRoot`, `getApi` — while the service URLs a handle resolves come from the\n      // index, so a project reporting ready before it lands mounts an app whose first `api.context`\n      // read throws `NotReady`.\n      const [token, devBranches] = await Promise.all([\n        client.tokens.verify(),\n        client.branches.getDevBranches(),\n        stackContext.getAsync(baseUrl),\n      ]);\n\n      return { token, defaultBranch: createDefaultBranch({ devBranches }) };\n    },\n  });\n\n  // The resource owns the status; the entry carries a copy, for the consumers that render it.\n  resource.subscribe(({ key, status }) => {\n    state.projects.updateContext(key, status);\n  });\n\n  const subscriber = ({ projects }: State) => {\n    for (const project of Object.values(projects)) resource.prefetch(project);\n  };\n\n  /**\n   * Dropped with the sign-in that fetched them: a verified token is what a credential answered\n   * for, so it belongs to that credential and not to the project id it was keyed by.\n   */\n  const forgetUnder = (baseUrl: BaseUrl) => resource.forget(Entry.isUnderStack(baseUrl));\n\n  /** One project, closed on purpose. */\n  const forget = (id: ProjectEntryId) => resource.forget((key) => key === id);\n\n  return {\n    subscriber,\n    get: resource.get,\n    getAsync: resource.getAsync,\n    retry: resource.retry,\n    forget,\n    forgetUnder,\n  };\n};\n","import { createStorageClient } from '../../../clients/storage';\nimport type { StateApi } from '../state';\nimport type { BaseUrl, State } from '../state/types';\n\nimport { createResource } from './resource';\n\nexport const createStackContext = (state: StateApi) => {\n  const resource = createResource({\n    key: (baseUrl: BaseUrl) => baseUrl,\n    fetch: (baseUrl) =>\n      createStorageClient({ baseUrl, auth: { type: 'sapi-token', token: '' } }).getStackInfo({\n        exclude: 'componentDetails',\n      }),\n  });\n\n  // The resource owns the status; the entry carries a copy, for the consumers that render it.\n  resource.subscribe(({ key, status }) => {\n    state.stacks.updateContext(key, status);\n  });\n\n  const subscriber = ({ stacks }: State) => {\n    for (const { baseUrl } of Object.values(stacks)) resource.prefetch(baseUrl);\n  };\n\n  /** Dropped with the stack itself — a stack that comes back re-reads its index. */\n  const forget = (baseUrl: BaseUrl) => resource.forget((key) => key === baseUrl);\n\n  return {\n    subscriber,\n    get: resource.get,\n    getAsync: resource.getAsync,\n    retry: resource.retry,\n    forget,\n  };\n};\n","import type { AuthStrategy } from '../../clients/auth';\nimport { createStorageClient } from '../../clients/storage';\nimport type { ServiceId } from '../../clients/storage/types';\nimport { ProjectFeature } from '../../constants/projectFeatures';\nimport { createStack } from '../../domain/stack';\nimport { createStorageTable } from '../../domain/storageTable';\nimport type { MiddlewareFn } from '../../fetchClient';\nimport { KeboolaHttpHeader } from '../../internal';\nimport { createDerivedStore, ensure } from '../../utils';\nimport type { KeboolaApi } from '../createApi';\nimport { createLiveProject } from '../createLiveProject';\nimport type { createMiddlewareFor } from '../createMiddlewareFor';\nimport { createSdk } from '../createSdk';\nimport { createServiceClients } from '../createServiceClients';\nimport { assert, KeboolaErrorType } from '../errors';\nimport type { KeboolaOptions } from '../types';\n\nimport type { BaseUrl, Project, ProjectEntryId } from './state/types';\nimport { createProjectContext } from './context';\nimport type { createCredentials } from './credentials';\nimport type { PerStack } from './perStack';\nimport { Entry, type StateApi } from './state';\n\ntype Options = {\n  state: StateApi;\n  credentials: ReturnType<typeof createCredentials>;\n  middlewareFor: ReturnType<typeof createMiddlewareFor>;\n  stack: PerStack;\n  clientServiceUrls: KeboolaOptions['clientServiceUrls'];\n  /** What a handle for this project is. Injected, because the surface spans both lifetimes. */\n  buildApi: (project: Project) => KeboolaApi;\n};\n\n// `ensure` for a record's field. A build that throws leaves the field unbuilt, so the next read\n// attempts it again — which is what keeps a namespace gated on `NotReady` until its fetch lands.\nconst once = <V extends NonNullable<unknown>>(build: () => V): (() => V) => {\n  let value: V | null = null;\n  return () => (value ??= build());\n};\n\n/**\n * Everything one project derives, and the one call that drops it.\n *\n * Every field belongs to the credential that built it — a client set carries its middleware chain,\n * the storage client holds a `liveProject` seeded with its token, a fetched context *is* what it\n * answered for `tokens.verify` — so the record dies with the sign-in, and `forgetUnder` is the\n * only thing that ends one.\n */\nexport const createPerProject = ({\n  state,\n  credentials,\n  middlewareFor,\n  stack,\n  clientServiceUrls,\n  buildApi,\n}: Options) => {\n  const context = createProjectContext({ state, credentials, stackContext: stack.context });\n\n  // The project-id header outside the auth middleware, so it is set before the 401 replay clones\n  // the request.\n  const attachFor = ({ baseUrl, projectId }: Project): MiddlewareFn => {\n    const withProjectId: MiddlewareFn = (next) => (request) => {\n      request.request.headers.set(KeboolaHttpHeader.PROJECT_ID, String(projectId));\n      return next(request);\n    };\n\n    return (next) => withProjectId(credentials.middleware(baseUrl)(next));\n  };\n\n  const buildClients = ({ baseUrl, projectId }: Project, attach: MiddlewareFn) =>\n    createServiceClients({\n      baseUrl,\n      // No static header: the auth middleware stamps the live token, so this never reaches the wire.\n      auth: { type: 'bearer', token: '', projectId },\n      // A resolver rather than a URL: the first request awaits the stack index if it is still in\n      // flight. `createStack` applies the dev and production overrides.\n      getServiceBaseUrl: (serviceId: ServiceId) => async () => {\n        const stackInfo = await stack.context.getAsync(baseUrl);\n        const serviceUrl = createStack({ stackInfo, clientServiceUrls }).getServiceUrl(serviceId);\n\n        assert(serviceUrl, KeboolaErrorType.NotReady);\n        return serviceUrl;\n      },\n      middlewareFor,\n      attachTokenMiddleware: attach,\n    });\n\n  /**\n   * `api.storage` and `api.context`, built together: both read one live token — the storage client\n   * carries its re-verify middleware, the context reports the project it re-verifies.\n   *\n   * - Both fetches it reads are already running. `NotReady` covers the window before they land,\n   *   which the table reports as `project.context`.\n   * - `storage` is gated on the stack index too, though it addresses the project's own `baseUrl`\n   *   and does not need it — that is the gate as it stands, not a requirement.\n   */\n  const buildLive = (project: Project, attach: MiddlewareFn) => {\n    const stackInfo = stack.context.get(project.baseUrl);\n    assert(stackInfo, KeboolaErrorType.NotReady);\n\n    const fetched = context.get(project.id);\n    assert(fetched, KeboolaErrorType.NotReady);\n\n    const { baseUrl, projectId } = project;\n    const auth: AuthStrategy = { type: 'bearer', token: '', projectId };\n\n    // Carries no refresh middleware of its own: it is what that middleware calls, so routing it\n    // through would re-enter the re-verification it performs.\n    const reader = createStorageClient({ baseUrl, auth, middlewares: [attach] });\n    const liveProject = createLiveProject({\n      initialToken: fetched.token,\n      verify: () => reader.tokens.verify(),\n    });\n\n    const storageTableStore = createDerivedStore({\n      source: liveProject.store,\n      build: createStorageTable,\n      dependsOn: (live) => ({\n        useLegacyBucketPrefix: !live.hasFeature(ProjectFeature.DisableLegacyBucketPrefix),\n        hasProtectedDefaultBranch: live.hasFeature(ProjectFeature.SoxProtectedDefaultBranch),\n        hasStorageBranches: live.hasFeature(ProjectFeature.StorageBranches),\n      }),\n    });\n\n    return {\n      storage: createStorageClient({\n        baseUrl,\n        auth,\n        middlewares: middlewareFor('storage', [attach, liveProject.middleware]),\n      }),\n      context: {\n        baseUrl,\n        stack: createStack({ stackInfo, clientServiceUrls }),\n        defaultBranch: fetched.defaultBranch,\n        // Getters: the token is re-verified in place after a mutating request, so a snapshot of\n        // either would go stale.\n        get project() {\n          return liveProject.getProject();\n        },\n        get st() {\n          return storageTableStore.get();\n        },\n      },\n    };\n  };\n\n  // Getters, so `api.*` reads a field. Lazy per field: a `context` read must build neither the\n  // service clients nor a storage client whose fetch has not landed.\n  const build = (project: Project) => {\n    const attach = attachFor(project);\n    const live = once(() => buildLive(project, attach));\n    const clients = once(() => buildClients(project, attach));\n    const sdk = once(() =>\n      createSdk({ storage: live().storage, services: clients().client, context: live().context }),\n    );\n\n    return {\n      api: buildApi(project),\n      get clients() {\n        return clients();\n      },\n      get storage() {\n        return live().storage;\n      },\n      get context() {\n        return live().context;\n      },\n      get sdk() {\n        return sdk();\n      },\n    };\n  };\n\n  const derived = new Map<ProjectEntryId, ReturnType<typeof build>>();\n\n  const get = (project: Project) => ensure(derived, project.id, () => build(project));\n\n  /** One project, closed on purpose — a handle for it stops answering from the next read. */\n  const forget = (id: ProjectEntryId) => {\n    derived.delete(id);\n    context.forget(id);\n  };\n\n  const forgetUnder = (baseUrl: BaseUrl) => {\n    const isUnder = Entry.isUnderStack(baseUrl);\n    for (const id of derived.keys()) if (isUnder(id)) derived.delete(id);\n\n    context.forgetUnder(baseUrl);\n  };\n\n  return { context, get, forget, forgetUnder };\n};\n","import * as z from 'zod';\n\nimport { type Cell, createPersistor } from '../../utils/persistor';\nimport type { StorageAdapter } from '../types';\n\nimport type { BaseUrl, Stack } from './state/types';\nimport { Entry, type State } from './state';\n\n/**\n * Where a bearer session is persisted, under whichever adapter the client was given.\n *\n * Exported because a consumer sometimes has to drop a session a client cannot reach: the adapter is\n * chosen at construction, so a client built without one holds no handle to the storage its own\n * session is sitting in. `AppAuthStrategy` in kbc-ui is that case.\n */\nexport const SESSION_STORAGE_KEY = 'keboola:session';\n\n/**\n * What survives a reload, per grant type.\n *\n * - Written under `credential`: the key every blob already stored carries.\n *\n * - `token`: the refresh token. It rotates, is single-use and is server-revocable, so a leaked\n *   snapshot has limited and revocable value. The access token is never written.\n * - `cookie`: the session id. The session cookie is the durable half and the browser keeps it;\n *   the id alone renews nothing.\n */\nconst persistedGrantSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('token'), refreshToken: z.string() }),\n  z.object({ type: z.literal('cookie'), sessionId: z.string() }),\n]);\n\n/** A record per project rather than a bare id, so a project can grow a field without a migration. */\nconst persistedProjectSchema = z.object({ projectId: z.number() });\n\nconst persistedStackSchema = z.object({\n  baseUrl: z.string(),\n  // A kind this build does not know costs that stack its sign-in, not the whole table.\n  credential: persistedGrantSchema.nullable().catch(null),\n  retained: z.object({ grant: persistedGrantSchema }).nullable().default(null).catch(null),\n  projects: z.array(persistedProjectSchema),\n});\n\nconst persistedSessionSchema = z.object({\n  current: z.object({ baseUrl: z.string(), projectId: z.number().nullable() }).nullable(),\n  stacks: z.array(persistedStackSchema),\n});\n\nexport type PersistedSession = z.infer<typeof persistedSessionSchema>;\ntype PersistedStack = z.infer<typeof persistedStackSchema>;\n\nconst EMPTY_PERSISTED_SESSION: PersistedSession = { current: null, stacks: [] };\n\nconst projectsOf = (projects: State['projects'], baseUrl: BaseUrl) =>\n  Object.values(projects)\n    .filter((project) => project.baseUrl === baseUrl)\n    .map(({ projectId }) => ({ projectId }));\n\nconst grantsOf = (stack: Stack): Pick<PersistedStack, 'credential' | 'retained'> => ({\n  credential: stack.auth.status === 'authenticated' ? Entry.grant(stack.auth.credential) : null,\n  retained: stack.retained,\n});\n\n/**\n * The stored session, rewritten from the table except for the grants.\n *\n * - Scope, stack list and open projects come from memory.\n * - `credential` and `retained` stay as stored: a grant another document rotated must not be put\n *   back by a snapshot of this one's older table.\n */\nconst mergeSnapshot = (\n  stored: PersistedSession,\n  { active, stacks, projects }: State,\n): PersistedSession => ({\n  current: { baseUrl: active.baseUrl, projectId: active.projectId },\n  stacks: Object.values(stacks).map(({ baseUrl }) => {\n    const kept = stored.stacks.find((stack) => stack.baseUrl === baseUrl);\n    return {\n      baseUrl,\n      credential: kept?.credential ?? null,\n      retained: kept?.retained ?? null,\n      projects: projectsOf(projects, baseUrl),\n    };\n  }),\n});\n\nconst upsertStack = (\n  stored: PersistedSession,\n  baseUrl: BaseUrl,\n  update: (existing: PersistedStack | undefined) => PersistedStack,\n): PersistedSession => {\n  const index = stored.stacks.findIndex((stack) => stack.baseUrl === baseUrl);\n  const stacks = [...stored.stacks];\n  if (index < 0) stacks.push(update(undefined));\n  else stacks[index] = update(stacks[index]);\n  return { ...stored, stacks };\n};\n\n/** What a caller may do while it holds the session lock. */\nexport type Locked = {\n  read: () => Promise<PersistedSession>;\n  /** One stack's grants as the table holds them; the rest of the row stays as stored. */\n  persistStack: (baseUrl: BaseUrl, state: State) => Promise<void>;\n};\n\n/**\n * The stored session, reached in two ways.\n *\n * - `locked`: the only way to read, and the only way to a grant write. Rotation and restore hold\n *   it across the refresh; sign-in, sign-out and the boot restore open it for one step.\n * - `snapshot`: the table minus its grants, under the lock, coalesced; what the store subscription\n *   feeds, and what a scope change awaits before the document leaves.\n */\nexport const createSessionPersistor = (storage?: StorageAdapter) => {\n  const persistor = createPersistor<PersistedSession>({\n    storage,\n    key: SESSION_STORAGE_KEY,\n    schema: persistedSessionSchema,\n    defaultValue: EMPTY_PERSISTED_SESSION,\n  });\n\n  const persistStack = (\n    cell: Cell<PersistedSession>,\n    baseUrl: BaseUrl,\n    { stacks, projects }: State,\n  ): Promise<void> => {\n    const stack: Stack | undefined = stacks[baseUrl];\n    if (stack === undefined) return Promise.resolve();\n\n    return cell.modify((stored) =>\n      upsertStack(stored, baseUrl, (existing) => ({\n        baseUrl,\n        ...grantsOf(stack),\n        projects: existing?.projects ?? projectsOf(projects, baseUrl),\n      })),\n    );\n  };\n\n  const locked = <R>(task: (store: Locked) => Promise<R>): Promise<R> =>\n    persistor.locked((cell) =>\n      task({\n        read: cell.read,\n        persistStack: (baseUrl, state) => persistStack(cell, baseUrl, state),\n      }),\n    );\n\n  let latest: State | null = null;\n  let pending: Promise<void> | null = null;\n  // Resolves once a write holding `state` (or a later one) has landed; calls made while a write\n  // waits for the lock share it.\n  const snapshot = (state: State): Promise<void> => {\n    latest = state;\n    if (pending) return pending;\n    const write = persistor.locked((cell) => {\n      pending = null;\n      const table = latest ?? state;\n      return cell.modify((stored) => mergeSnapshot(stored, table));\n    });\n    pending = write;\n    return write;\n  };\n\n  return { locked, snapshot };\n};\n","import { createAuthClient } from '../../clients/auth/authClient';\nimport { createManagementClient } from '../../clients/management';\nimport { ensure } from '../../utils';\nimport type { createMiddlewareFor } from '../createMiddlewareFor';\n\nimport type { BaseUrl } from './state/types';\nimport { createStackContext } from './context';\nimport type { createCredentials } from './credentials';\nimport type { StateApi } from './state';\n\ntype Options = {\n  state: StateApi;\n  credentials: ReturnType<typeof createCredentials>;\n  middlewareFor: ReturnType<typeof createMiddlewareFor>;\n};\n\ntype StackDerived = {\n  auth: ReturnType<typeof createAuthClient>;\n  management: ReturnType<typeof createManagementClient>;\n};\n\n/**\n * Everything one stack derives, and the one call that drops it.\n *\n * Outlives a sign-out, unlike anything in `perProject`: both clients read the credential live per\n * request, so neither belongs to one sign-in, and the stack index is public.\n */\nexport const createPerStack = ({ state, credentials, middlewareFor }: Options) => {\n  const context = createStackContext(state);\n  const derived = new Map<BaseUrl, StackDerived>();\n\n  const get = (baseUrl: BaseUrl): StackDerived =>\n    ensure(derived, baseUrl, () => ({\n      auth: createAuthClient({\n        baseUrl,\n        middlewares: middlewareFor('auth', [credentials.middleware(baseUrl)]),\n      }),\n      management: createManagementClient({\n        baseUrl,\n        auth: { type: 'bearer', token: '' },\n        middlewares: middlewareFor('management', [credentials.middleware(baseUrl)]),\n      }),\n    }));\n\n  const forget = (baseUrl: BaseUrl) => {\n    derived.delete(baseUrl);\n    context.forget(baseUrl);\n  };\n\n  return { context, get, forget };\n};\n\nexport type PerStack = ReturnType<typeof createPerStack>;\n","import { HttpHeader, normalizeBaseUrl } from '../../fetchClient';\nimport { KeboolaHttpHeader } from '../../internal';\nimport { isBuiltInProperty } from '../../serviceClientRegistry';\nimport { lazy, Result } from '../../utils';\nimport type { KeboolaApi } from '../createApi';\nimport { createMiddlewareFor } from '../createMiddlewareFor';\nimport type { createServiceClients } from '../createServiceClients';\nimport { KeboolaError, KeboolaErrorType } from '../errors';\nimport type { KeboolaOptions } from '../types';\n\nimport type {\n  BaseUrl,\n  CredentialInput,\n  Project,\n  ProjectEntryId,\n  ProjectId,\n  Stack,\n  State,\n  TokenCredentialInput,\n} from './state/types';\nimport { createCredentials, type RestoreStatus } from './credentials';\nimport { createPerProject } from './perProject';\nimport { createSessionPersistor } from './persistor';\nimport { createPerStack } from './perStack';\nimport { createState, Entry, type SignOutOptions } from './state';\n\ntype ServiceClients = ReturnType<typeof createServiceClients>['client'];\n\n/**\n * The bearer client: the session table, its two scopes, and the surface they back.\n *\n * - Credential-derived state is owned by the scope whose end ends it (`perStack`, `perProject`).\n */\nexport const createKeboola = ({\n  defaultBaseUrl,\n  storage,\n  middlewares,\n  clientServiceUrls,\n  onExpired,\n}: KeboolaOptions) => {\n  const state = createState(normalizeBaseUrl(defaultBaseUrl));\n  const persistor = createSessionPersistor(storage);\n  const middlewareFor = createMiddlewareFor(middlewares);\n  const credentials = createCredentials({\n    state,\n    persistor,\n    middlewares: middlewareFor('auth'),\n    // Read at call time, so it reaches the `perProject` built below.\n    onSignedOut: (baseUrl) => perProject.forgetUnder(baseUrl),\n    onExpired,\n  });\n\n  const perStack = createPerStack({ state, credentials, middlewareFor });\n  const perProject = createPerProject({\n    state,\n    credentials,\n    middlewareFor,\n    stack: perStack,\n    clientServiceUrls,\n    // Pinned: throws once its project closes rather than following a replacement.\n    buildApi: (project) =>\n      createApiFor({\n        stackUrl: () => project.baseUrl,\n        project: () => Result.unwrap(state.projects.get(project.id)),\n        pinned: true,\n      }),\n  });\n\n  state.store.subscribe(perStack.context.subscriber);\n  // The default stack is in the table from the start, so no change announces it.\n  perStack.context.subscriber(state.store.get());\n  state.store.subscribe(perProject.context.subscriber);\n\n  const selectStack = (baseUrl: string): Stack =>\n    Result.unwrap(state.scope.selectStack(normalizeBaseUrl(baseUrl)));\n\n  const selectProject = (projectId: ProjectId): Project =>\n    Result.unwrap(state.scope.selectProject(projectId));\n\n  /** The scoped stack, or a named one — normalised to key like `select`. */\n  const requireStackUrl = (baseUrl?: string): BaseUrl =>\n    baseUrl === undefined ? state.scope.getActiveStack().baseUrl : normalizeBaseUrl(baseUrl);\n\n  /** The scoped project, or the row a table id names — on whichever stack that is. */\n  const requireProjectEntry = (id?: ProjectEntryId): Project =>\n    id === undefined\n      ? Result.unwrap(state.scope.requireActiveProject())\n      : Result.unwrap(state.projects.get(id));\n\n  /**\n   * The scoped project, or a named open one.\n   *\n   * - An id is ambiguous across stacks: the active stack decides, else the single one open elsewhere.\n   */\n  const requireProject = (projectId?: ProjectId): Project => {\n    if (projectId === undefined) return Result.unwrap(state.scope.requireActiveProject());\n\n    const scoped = state.projects.get(Entry.projectEntryId(requireStackUrl(), projectId));\n    if (scoped.success) return scoped.data;\n\n    const [only, ...rest] = state.projects.findAll(projectId);\n    return only !== undefined && rest.length === 0 ? only : Result.unwrap(scoped);\n  };\n\n  const headersFor = (project: Project): Record<string, string> => {\n    const credential = Result.unwrap(state.auth.requireCredential(project.baseUrl));\n    return {\n      [HttpHeader.AUTHORIZATION]: `Bearer ${credential.accessToken}`,\n      [KeboolaHttpHeader.PROJECT_ID]: String(project.projectId),\n    };\n  };\n\n  /**\n   * Auth headers for a non-fetch transport (the chat stream).\n   *\n   * - A read, not a rotation: no middleware recovers a 401 there; the fetch clients keep it fresh.\n   */\n  const getAuthHeaders = (projectId?: ProjectId): Record<string, string> =>\n    headersFor(requireProject(projectId));\n\n  /**\n   * `getAuthHeaders`, with the token renewed first once it nears expiry.\n   *\n   * - Pinned to the project resolved at the call: a scope move during the renewal does not re-point it.\n   * - Throws like the read if that project closed, or its stack signed out, meanwhile.\n   */\n  const getAuthHeadersAsync = async (projectId?: ProjectId): Promise<Record<string, string>> => {\n    const project = requireProject(projectId);\n    await credentials.renewIfStale(project.baseUrl);\n    return headersFor(Result.unwrap(state.projects.get(project.id)));\n  };\n\n  /**\n   * A login or MFA-verify response, taken as the credential it carries.\n   *\n   * - Either grant type: the credential names what renews it (`refreshToken` or `sessionId`).\n   * - `refreshToken` is optional: a browser-mode login omits it, and MFA verify can't tell.\n   * - A `token` credential without one is refused here — it would die at its first refresh.\n   */\n  type AuthenticateInput =\n    | (Omit<TokenCredentialInput, 'refreshToken'> & { refreshToken?: string | null })\n    | Exclude<CredentialInput, { type: 'token' }>;\n\n  const toCredential = (input: AuthenticateInput): CredentialInput => {\n    if (input.type !== 'token') return input;\n\n    const { refreshToken } = input;\n    if (!refreshToken) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);\n    return { ...input, refreshToken };\n  };\n\n  const authenticate = (input: AuthenticateInput): Stack => {\n    const { baseUrl } = state.scope.getActiveStack();\n    const signedIn = Result.unwrap(state.auth.authenticate(baseUrl, toCredential(input)));\n    persistor\n      .locked((store) => store.persistStack(baseUrl, state.store.get()))\n      .catch((error: unknown) => {\n        console.warn('createKeboola: the sign-in could not be stored', error);\n      });\n    return signedIn;\n  };\n\n  /**\n   * The flat product surface: `auth` and `management` per stack, the rest per project.\n   *\n   * - Both resolvers run per property read: that re-points the active handle and makes a pinned\n   *   one throw once its project is gone.\n   */\n  const createApiFor = (resolve: {\n    stackUrl: () => BaseUrl;\n    project: () => Project;\n    /** One project's handle: its `auth` / `management` throw once that project closes. */\n    pinned?: boolean;\n  }): KeboolaApi =>\n    new Proxy({} as KeboolaApi, {\n      get: (_target, property) => {\n        if (isBuiltInProperty(property)) return undefined;\n\n        if (property === 'auth' || property === 'management') {\n          if (resolve.pinned) resolve.project();\n          return perStack.get(resolve.stackUrl())[property];\n        }\n\n        const derived = perProject.get(resolve.project());\n        if (property === 'context') return derived.context;\n        if (property === 'storage') return derived.storage;\n        if (property === 'sdk') return derived.sdk;\n\n        const { client, meta } = derived.clients;\n        if (property === 'serviceMeta') return meta;\n\n        return client[property as keyof ServiceClients];\n      },\n    });\n\n  // Outside `perProject`: it names no project, so no project's teardown reaches it.\n  const activeApi = createApiFor({\n    stackUrl: () => state.scope.getActiveStack().baseUrl,\n    project: () => Result.unwrap(state.scope.requireActiveProject()),\n  });\n\n  /** The scoped project's surface. Re-points when the scope moves. */\n  const getActiveApi = (): KeboolaApi => activeApi;\n\n  /**\n   * One project's surface, on the active stack — one credential serves all of them.\n   *\n   * - Pinned: never re-points; stops once the project closes (`session.project.close`, sign-out).\n   * - Memoised per project: a React `key` or a hook dep compares handles by identity.\n   */\n  const getApi = (projectId: ProjectId): KeboolaApi => {\n    const { baseUrl } = state.scope.getActiveStack();\n    const project = Entry.project(baseUrl, projectId);\n\n    // Attempted, not required: must not throw mid-restore. The row appears when the sign-in\n    // lands; until then reads throw, as for a closed project.\n    Result.unwrapOr(state.projects.open(baseUrl, projectId), null);\n\n    return perProject.get(project).api;\n  };\n\n  /**\n   * The scope's sign-in, or a named stack's — and everything that sign-in derived.\n   *\n   * - `retain` keeps the grant on the stack, persisted beside the sign-in it ended, for\n   *   `restoreRetained`; the next sign-in on the stack replaces it.\n   * - The table is signed out on return; the promise resolves once that is stored, so a caller\n   *   leaving the document waits for it.\n   */\n  const signOut = ({\n    baseUrl,\n    ...options\n  }: SignOutOptions & { baseUrl?: string } = {}): Promise<Stack> => {\n    const target = requireStackUrl(baseUrl);\n\n    // Teardown rides `credentials.signOut`: an expiry skips this path.\n    const signedOut = Result.unwrap(credentials.signOut(target, options));\n    return persistor\n      .locked((store) => store.persistStack(target, state.store.get()))\n      .then(() => signedOut);\n  };\n\n  /** Signs a stack back in from what a retained sign-out kept; `unreachable` leaves it to retry. */\n  const restoreRetained = (baseUrl: string) =>\n    credentials.restoreRetained(normalizeBaseUrl(baseUrl));\n\n  /**\n   * `input` replaces the active stack's sign-in, whatever it holds.\n   *\n   * - Signs out first, always: a sign-out moves the epoch even on an anonymous stack, so a stored\n   *   session still being restored cannot land on top of this one.\n   */\n  const replace = (input: AuthenticateInput): Stack => {\n    void signOut();\n    return authenticate(input);\n  };\n\n  /**\n   * Leave one project: its row and everything built for it; its handles stop answering.\n   *\n   * - Counterpart of `getApi(projectId)`; without it the project is held and persisted until sign-out.\n   */\n  const closeProject = (projectId: ProjectId): Project | null => {\n    const id = Entry.projectEntryId(requireStackUrl(), projectId);\n    const closed = Result.unwrapOr(state.projects.close(id), null);\n    if (closed === null) return null;\n\n    perProject.forget(id);\n    return closed;\n  };\n\n  // A stack is always active, so the active one cannot be closed — select another first.\n  const closeStack = (baseUrl: string): Stack | null => {\n    const target = normalizeBaseUrl(baseUrl);\n    if (state.scope.get().baseUrl === target) throw new KeboolaError(KeboolaErrorType.StackActive);\n\n    const closed = Result.unwrapOr(state.stacks.close(target), null);\n    if (closed === null) return null;\n\n    // `state.stacks.close` has already dropped the project rows.\n    perProject.forgetUnder(target);\n    perStack.forget(target);\n    // Before a reopen: an in-flight rotation must not write into the next sign-in here.\n    credentials.forget(target);\n\n    return closed;\n  };\n\n  let persisting = false;\n  /**\n   * Persistence starts only once the restore has settled.\n   *\n   * - Mid-hydration an unexchanged stack is `anonymous`; the persistor would erase the\n   *   refresh token the exchange is about to spend.\n   * - Writes the settled table once: the subscription fires only on the next change.\n   */\n  const enablePersistence = () => {\n    // A failed resume is retried, and each attempt lands here again.\n    if (persisting) return;\n    persisting = true;\n\n    snapshot(state.store.get());\n    state.store.subscribe(snapshot);\n  };\n\n  const snapshot = (table: State): void => {\n    persistor.snapshot(table).catch((error: unknown) => {\n      console.warn('createKeboola: the session could not be stored', error);\n    });\n  };\n\n  // What a scope change resolves with: its write, once persistence has started; nothing before.\n  const persistScope = (): Promise<void> =>\n    persisting ? persistor.snapshot(state.store.get()) : Promise.resolve();\n\n  /**\n   * The same, deferred until a sign-in.\n   *\n   * - After an unreachable restore the table is anonymous but the stored token is still good;\n   *   writing earlier would drop it.\n   */\n  const enablePersistenceOnSignIn = () => {\n    const stop = state.store.subscribe((next) => {\n      if (!Object.values(next.stacks).some(({ auth }) => auth.status === 'authenticated')) return;\n\n      stop();\n      enablePersistence();\n    });\n  };\n\n  // Rebuilds the stored stacks, credentials and open projects; `lastActive` is the scope they were\n  // stored under, `null` only when nothing was.\n  const restore = lazy(() =>\n    credentials.restore().then(\n      (restored) => {\n        if (restored.status === 'unreachable') enablePersistenceOnSignIn();\n        else enablePersistence();\n\n        return restored;\n      },\n      (error: unknown) => {\n        // Not `enablePersistence`: writing the half-restored table now would erase the very session\n        // the retry `lazy` allows is meant to read.\n        enablePersistenceOnSignIn();\n        throw error;\n      },\n    ),\n  );\n\n  const getActiveStack = state.scope.getActiveStack;\n\n  const isAuthenticated = () => getActiveStack().auth.status === 'authenticated';\n\n  /**\n   * Picks up where the stored session left off, once.\n   *\n   * 1. A stored stack becomes active again, with its project if its credential came back.\n   * 2. Nothing stored, or the restore failed: `defaultBaseUrl` stays active; a failure rethrows.\n   * 3. The caller got there first (a select, sign-in or sign-out): its scope and sign-ins stand.\n   *\n   * - Resolves with the stored credential's fate — only this tells `expired` from `empty`.\n   * - Other stacks still come back, persistence still starts; repeat calls share one promise.\n   */\n  const resume = lazy(() =>\n    restore().then(({ lastActive, status }): RestoreStatus => {\n      if (!lastActive || callerScoped) return status;\n\n      const stack = selectStack(lastActive.baseUrl);\n      if (lastActive.projectId !== null && stack.auth.status === 'authenticated')\n        selectProject(lastActive.projectId);\n\n      return status;\n    }),\n  );\n\n  // Set by the public verbs that pick a scope or change a sign-in — the default the table starts on,\n  // the resume's own re-scope and the restore's sign-ins are not a caller's choice.\n  let callerScoped = false;\n  const byCaller =\n    <A extends unknown[], R>(verb: (...args: A) => R) =>\n    (...args: A): R => {\n      callerScoped = true;\n      return verb(...args);\n    };\n\n  return {\n    getActiveApi,\n    getApi,\n    session: {\n      getState: state.store.get,\n      subscribe: state.store.subscribe,\n      resume,\n\n      stack: {\n        getActive: getActiveStack,\n        /** Scoped on return; resolves once that is stored, for a caller leaving the document. */\n        select: byCaller((baseUrl: string): Promise<Stack> => {\n          const stack = selectStack(baseUrl);\n          return persistScope().then(() => stack);\n        }),\n        close: closeStack,\n        retryContext: perStack.context.retry,\n        getContext: (baseUrl?: string) => perStack.context.get(requireStackUrl(baseUrl)),\n        getContextAsync: (baseUrl?: string) => perStack.context.getAsync(requireStackUrl(baseUrl)),\n      },\n\n      project: {\n        /** Scoped on return; resolves once that is stored, for a caller leaving the document. */\n        select: byCaller((projectId: ProjectId): Promise<Project> => {\n          const project = selectProject(projectId);\n          return persistScope().then(() => project);\n        }),\n        close: closeProject,\n        // Still signed in — the scope falls back to the project's stack.\n        deactivate: state.scope.deactivate,\n        // Keyed by table id: reads a row on any stack, unlike `getApi` and `auth.getHeaders`.\n        retryContext: perProject.context.retry,\n        getContext: (id?: ProjectEntryId) => perProject.context.get(id ?? requireProjectEntry().id),\n        // Starts a fetch, so `errored` goes back to `pending`. A stale id throws here, while\n        // `getContext` answers `null`.\n        getContextAsync: (id?: ProjectEntryId) =>\n          perProject.context.getAsync(requireProjectEntry(id)),\n      },\n\n      auth: {\n        authenticate: byCaller(authenticate),\n        replace: byCaller(replace),\n        signOut: byCaller(signOut),\n        restoreRetained: byCaller(restoreRetained),\n        /** Whether the active stack holds a credential — `restoring` is not one yet. */\n        isAuthenticated,\n        isAuthenticatedAsync: () => resume().then(isAuthenticated),\n        rotate: (baseUrl: string) => credentials.rotate(baseUrl).then(Result.unwrap),\n        getHeaders: getAuthHeaders,\n        getHeadersAsync: getAuthHeadersAsync,\n      },\n    },\n  };\n};\n","import { ApiError } from '../errors';\nimport { type HttpMethod, isApiError, type MiddlewareFn } from '../fetchClient';\nimport { CREDENTIAL_HEADERS, REDACTED, redactHeaders } from '../internal';\nimport { generateUUID } from '../utils';\n\nconst CORRELATION_ID_HEADER = 'X-Correlation-ID';\n\nconst ALWAYS_REDACTED_HEADERS = [...CREDENTIAL_HEADERS, 'set-cookie'];\n\nconst ALWAYS_REDACTED_QUERY_PARAMS = new Set([\n  'token',\n  'apikey',\n  'api_key',\n  'access_token',\n  'refresh_token',\n  'code',\n  'state',\n  'signature',\n  'sig',\n  'x-amz-signature',\n  'x-amz-credential',\n  'x-amz-security-token',\n  'password',\n  'secret',\n]);\n\nconst getRedactedUrl = (rawUrl: string): string => {\n  const url = new URL(rawUrl);\n  if (url.username) url.username = REDACTED;\n  if (url.password) url.password = REDACTED;\n\n  url.searchParams.forEach((_value, key) => {\n    if (ALWAYS_REDACTED_QUERY_PARAMS.has(key.toLowerCase())) {\n      url.searchParams.set(key, REDACTED);\n    }\n  });\n  return url.toString();\n};\n\n// Returns the request's correlation ID, generating and attaching one if missing.\n//\n// Forwarded via the X-Correlation-ID header so downstream services log the same ID,\n// letting all log lines for a single user action be stitched together across service\n// boundaries. Reuse when the caller already set one (preserves the chain inside a\n// larger trace); otherwise mint a fresh UUID to start a new trace.\nconst ensureCorrelationId = (request: Request): string => {\n  const correlationId = request.headers.get(CORRELATION_ID_HEADER) ?? generateUUID();\n  request.headers.set(CORRELATION_ID_HEADER, correlationId);\n  return correlationId;\n};\n\nconst getRedactedHeaders = (headers: Headers, redacted: string[]): Record<string, string> =>\n  redactHeaders(headers, [...ALWAYS_REDACTED_HEADERS, ...redacted]);\n\nexport type RequestLog = {\n  url: string;\n  headers: Record<string, string>;\n};\n\nexport type ResponseLog = {\n  status: number;\n  statusText: string;\n  headers: Record<string, string>;\n};\n\ntype BaseLog = {\n  correlationId: string;\n  method: HttpMethod;\n  durationMs: number;\n  request: RequestLog;\n};\n\ntype SuccessLog = BaseLog & {\n  response: ResponseLog;\n};\n\ntype ErrorLog = BaseLog & {\n  error: Error;\n};\n\nexport type Log = SuccessLog | ErrorLog;\n\nexport type Logger = {\n  info?: (log: SuccessLog) => void;\n  error?: (log: ErrorLog) => void;\n};\n\nexport type LogLevel = 'error-only' | 'all';\n\nexport type LoggingOptions = {\n  logger?: Logger;\n  level?: LogLevel;\n  redactHeaders?: string[];\n};\n\nconst getRequestLog = (request: Request, redactedHeaders: string[]): RequestLog => ({\n  url: getRedactedUrl(request.url),\n  headers: getRedactedHeaders(request.headers, redactedHeaders),\n});\n\nconst getResponseLog = (response: Response, redactedHeaders: string[]): ResponseLog => ({\n  status: response.status,\n  statusText: response.statusText,\n  headers: getRedactedHeaders(response.headers, redactedHeaders),\n});\n\n// On failure the logger receives the thrown error itself. An ApiError masks only credential\n// request headers; its URL, its response headers and the caller's `redactHeaders` are left as\n// sent. Hand the logger a copy with the middleware's full redaction applied; the original error\n// is still thrown untouched.\nconst redactApiError = (error: ApiError, redactedHeaders: string[]): ApiError =>\n  new ApiError({\n    request: new Request(getRedactedUrl(error.request.url), {\n      method: error.request.method,\n      headers: getRedactedHeaders(error.request.headers, redactedHeaders),\n    }),\n    response: new Response(null, {\n      status: error.response.status,\n      statusText: error.response.statusText,\n      headers: getRedactedHeaders(error.response.headers, redactedHeaders),\n    }),\n    data: error.data,\n  });\n\nconst formatLog = (level: 'info' | 'error', log: Log): string => {\n  const parts = [`[${level.toUpperCase()}]`, `${Math.round(log.durationMs)}ms`, log.method];\n  parts.push(log.request.url);\n  if ('response' in log) parts.push(String(log.response.status));\n  return parts.join(' ');\n};\n\nconst createSafeLogger = (logger?: Logger, level: LogLevel = 'error-only'): Required<Logger> => {\n  return {\n    info: (log) => {\n      if (level !== 'all') return;\n      try {\n        if (logger?.info) {\n          logger.info(log);\n          return;\n        }\n\n        console.info(formatLog('info', log));\n      } catch {\n        /* never let logging break the request */\n      }\n    },\n    error: (log) => {\n      try {\n        if (logger?.error) {\n          logger.error(log);\n          return;\n        }\n\n        console.error(formatLog('error', log));\n      } catch {\n        /* never let logging break the request */\n      }\n    },\n  };\n};\n\nexport const createLoggingMiddleware = (options: LoggingOptions = {}): MiddlewareFn => {\n  const safeLogger = createSafeLogger(options.logger, options.level);\n  const redactHeaders = options.redactHeaders ?? [];\n\n  return (next) => async (fetchRequest) => {\n    const correlationId = ensureCorrelationId(fetchRequest.request);\n    const start = performance.now();\n    const method = fetchRequest.request.method.toLowerCase() as HttpMethod;\n    const requestLog = getRequestLog(fetchRequest.request, redactHeaders);\n\n    try {\n      const result = await next(fetchRequest);\n      safeLogger.info({\n        correlationId,\n        method,\n        durationMs: performance.now() - start,\n        request: requestLog,\n        response: getResponseLog(result.response, redactHeaders),\n      });\n      return result;\n    } catch (error) {\n      if (error instanceof Error)\n        safeLogger.error({\n          correlationId,\n          method,\n          durationMs: performance.now() - start,\n          request: requestLog,\n          error: isApiError(error) ? redactApiError(error, redactHeaders) : error,\n        });\n\n      throw error;\n    }\n  };\n};\n","import { ApiError } from '../errors';\nimport type { MiddlewareFn } from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { delay } from '../utils';\n\nconst DEFAULT_MAX_RETRIES = 5;\nconst DEFAULT_RETRYABLE_STATUSES: number[] = [\n  HttpStatus.INTERNAL_SERVER_ERROR,\n  HttpStatus.BAD_GATEWAY,\n  HttpStatus.SERVICE_UNAVAILABLE,\n  HttpStatus.GATEWAY_TIMEOUT,\n];\nconst DEFAULT_BACKOFF_FACTOR = 0.3;\n\nexport type RetryOptions = {\n  maxRetries?: number;\n  backoffFactor?: number;\n  shouldRetry?: (error: unknown, attempt: number) => boolean;\n};\n\nconst defaultShouldRetry = (error: unknown): boolean =>\n  error instanceof ApiError && DEFAULT_RETRYABLE_STATUSES.includes(error.response.status);\n\nexport const createRetryMiddleware = (options?: RetryOptions): MiddlewareFn => {\n  const {\n    maxRetries = DEFAULT_MAX_RETRIES,\n    backoffFactor = DEFAULT_BACKOFF_FACTOR,\n    shouldRetry = defaultShouldRetry,\n  } = options ?? {};\n\n  if (!Number.isInteger(maxRetries) || maxRetries < 0) {\n    throw new RangeError('maxRetries must be a non-negative integer');\n  }\n  if (!Number.isFinite(backoffFactor) || backoffFactor < 0) {\n    throw new RangeError('backoffFactor must be a finite non-negative number');\n  }\n\n  return (next) => async (request) => {\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      try {\n        return await next({ ...request, request: request.request.clone() });\n      } catch (error) {\n        if (attempt === maxRetries || !shouldRetry(error, attempt)) {\n          throw error;\n        }\n\n        const delayMs = backoffFactor * 1000 * Math.pow(2, attempt);\n        await delay(delayMs, request.request.signal ?? undefined);\n      }\n    }\n\n    throw new Error('unreachable');\n  };\n};\n","import type { MiddlewareFn } from '../fetchClient';\nimport { KeboolaHttpHeader } from '../internal';\n\n/** Stamps `X-KBC-Ui-Version`; an empty `uiVersion` sends no header. */\nexport const createUiVersionMiddleware = (uiVersion: string | null | undefined): MiddlewareFn => {\n  if (!uiVersion) return (next) => next;\n\n  return (next) => async (request) => {\n    request.request.headers.set(KeboolaHttpHeader.UI_VERSION, uiVersion);\n    return next(request);\n  };\n};\n","import type { ManagementToken } from '../clients/management/tokenTypes';\n\ntype Options = {\n  managementToken: ManagementToken | null;\n};\n\n/**\n * The admin behind a Manage token: `GET /manage/tokens/verify`, with the admin-level helpers.\n *\n * - `user` is absent for a token with no admin behind it (an application token) and for no token\n *   at all (a session the Manage API refused); every helper then answers `false`.\n */\nexport const createAdminAccount = ({ managementToken }: Options) => {\n  const user = managementToken?.user;\n  const adminFeatureSet = new Set(user?.features ?? []);\n\n  const hasAdminFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => adminFeatureSet.has(x));\n  };\n\n  const hasAnyAdminFeature = (...feature: string[]) => feature.some((x) => adminFeatureSet.has(x));\n\n  return {\n    isSuperAdmin: user?.isSuperAdmin ?? false,\n    hasAdminFeature,\n    hasAnyAdminFeature,\n    user,\n    managementToken,\n  };\n};\n\nexport type AdminAccount = ReturnType<typeof createAdminAccount>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAgB,OAAU,OAA6B,SAAqC;CAC1F,IAAI,SAAS,MACX,MAAM,IAAI,MAAM,OAAO;AAE3B;;;;;;;;;;ACGA,MAAa,UACX,KACA,KACA,UACM;CACN,MAAM,WAAW,IAAI,IAAI,GAAG;CAC5B,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,UAAU,MAAM;CACtB,IAAI,IAAI,KAAK,OAAO;CAEpB,OAAO;AACT;;;;;;;;;;ACVA,MAAa,YAAe,SAAiD;CAC3E,IAAI,UAAU;CACd,MAAM,UAA8C,CAAC;CAErD,MAAM,QAAQ,YAAY;EACxB,UAAU;EACV,MAAM,QAAQ,QAAQ,OAAO,CAAC;EAE9B,IAAI;GACF,MAAM,SAAS,MAAM,KAAK;GAC1B,MAAM,SAAS,WAAW,OAAO,QAAQ,MAAM,CAAC;EAClD,SAAS,OAAO;GACd,MAAM,SAAS,WAAW,OAAO,OAAO,KAAK,CAAC;EAChD;EAEA,IAAI,QAAQ,SAAS,GAAG,OAAO,MAAM;EACrC,UAAU;CACZ;CAEA,aAAa;EACX,MAAM,SAAS,QAAQ,cAA0B;EACjD,QAAQ,KAAK,MAAM;EACnB,IAAI,CAAC,SAAS,MAAW;EACzB,OAAO,OAAO;CAChB;AACF;;;AChCA,MAAM,wBAAwB,UAA2B;CACvD,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO;CACjC,MAAM,QAAQ,OAAO,eAAe,KAAK;CACzC,OAAO,UAAU,OAAO,aAAa,UAAU;AACjD;AAEA,MAAa,gBAAmB,GAAM,MAAkB;CACtD,IAAI,OAAO,GAAG,GAAG,CAAC,GAAG,OAAO;CAC5B,IAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,OAAO,MAAM,YAAY,MAAM,MAAM,OAAO;CACvF,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,OAAO;CACjE,MAAM,QAAQ,OAAO,KAAK,CAAC;CAC3B,MAAM,QAAQ,OAAO,KAAK,CAAC;CAC3B,OAAO,MAAM,WAAW,MAAM,UAAU,MAAM,OAAO,QAAQ,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;AACxF;AASA,MAAa,sBAA+B,EAC1C,QACA,WACA,OACA,YAAY,mBACwC;CACpD,IAAI,MAAM,UAAU,OAAO,IAAI,CAAC;CAChC,MAAM,QAAQA,cAAAA,YAAY,MAAM,GAAG,CAAC;CAKpC,MAAM,cAAc,OAAO,WAAW,UAAU;EAC9C,MAAM,OAAO,UAAU,KAAK;EAC5B,IAAI,UAAU,KAAK,IAAI,GAAG;EAC1B,MAAM;EACN,MAAM,IAAI,MAAM,IAAI,CAAC;CACvB,CAAC;CAED,MAAM,MAAM,MAAM;CAElB,MAAM,YAAY,MAAM;CAExB,MAAM,gBAAgB;EACpB,YAAY;EACZ,MAAM,QAAQ;CAChB;CAEA,OAAO;EAAE;EAAK;EAAW;CAAQ;AACnC;;;AC7BA,MAAa,2BAAoC,EAC/C,QACA,WACA,OACA,YAAY,mBAIT;CACH,MAAM,QAAQC,cAAAA,YAA2B,EAAE,OAAO,OAAO,CAAC;CAC1D,IAAI,aAAuB;CAC3B,IAAI,aAAa;CACjB,IAAI,aAAqC;CAEzC,MAAM,OAAO,QAAW;EACtB,YAAY,MAAM;EAClB,aAAa,IAAI,gBAAgB;EACjC,MAAM,gBAAgB,EAAE;EACxB,MAAM,IAAI,EAAE,OAAO,UAAU,CAAC;EAE9B,MAAM,KAAK,WAAW,MAAM,CAAC,CAAC,MAC3B,UAAU;GACT,IAAI,kBAAkB,YAAY,MAAM,IAAI;IAAE,OAAO;IAAS;GAAM,CAAC;EACvE,IACC,UAAU;GACT,IAAI,kBAAkB,YAAY,MAAM,IAAI;IAAE,OAAO;IAAW;GAAM,CAAC;EACzE,CACF;CACF;CAEA,MAAM,QAAQ,UAAa;EACzB,MAAM,OAAO,UAAU,KAAK;EAC5B,IAAI,SAAS,MAAM;GACjB,IAAI,eAAe,MAAM;GACzB,YAAY,MAAM;GAClB,aAAa;GACb,cAAc;GACd,aAAa;GACb,MAAM,IAAI,EAAE,OAAO,OAAO,CAAC;GAC3B;EACF;EACA,IAAI,eAAe,QAAQ,UAAU,YAAY,IAAI,GAAG;EACxD,aAAa;EACb,IAAI,IAAI;CACV;CACA,KAAK,OAAO,IAAI,CAAC;CAEjB,MAAM,cAAc,OAAO,UAAU,IAAI;CAEzC,MAAM,MAAM,MAAM;CAElB,MAAM,YAAY,MAAM;CAExB,MAAM,gBAAgB;EACpB,YAAY,MAAM;EAClB,YAAY;EACZ,MAAM,QAAQ;CAChB;CAEA,MAAM,WAAyC;EAAE;EAAK;EAAW;CAAQ;CAEzE,MAAM,gBACJ,IAAI,SAA0B,YAAY;EACxC,IAAI,2BAA2B,CAAC;EAChC,MAAM,SAAS,UAAyB;GACtC,IAAI,MAAM,UAAU,WAAW,MAAM,UAAU,WAAW;IACxD,mBAAmB;IACnB,QAAQ,KAAK;GACf;EACF;EACA,qBAAqB,MAAM,UAAU,KAAK;EAC1C,MAAM,MAAM,IAAI,CAAC;CACnB,CAAC;CAEH,OAAO;EAAE,OAAO;EAAU;CAAQ;AACpC;;;AC9FA,MAAM,gBAAgB;AAmBtB,MAAM,cAAc,EAAE,eACpB,SAAS,UAAU,UAAU,SAAS,UAAU,gBAAgB,SAAS,UAAU;AAErF,MAAa,sBAAsB,EAAE,QAAQ,kBAAkB,CAAC,MAAoB;CAClF,MAAM,UAAUC,cAAAA,YAAyB,CAAC,CAAC;CAC3C,MAAM,+BAAe,IAAI,IAAwB;CAEjD,MAAM,aAAaC,yBAAAA,MAAMC,yBAAAA,SAAS,OAAO,aAAa,GAAG,CAAC;CAC1D,IAAI,UAAU;CAEd,MAAM,UAAU,QAAgB;EAC9B,aAAa,IAAI,GAAG,CAAC,GAAG;EACxB,aAAa,OAAO,GAAG;CACzB;CAEA,MAAM,QAAQ,SAAsB;EAClC,IAAI,OAAO;EAEX,OAAO,KAAK,SAAS,YAAY;GAC/B,MAAM,UAAU,KAAK,SAAS,UAAU,KAAK,KAAK,GAAG,EAAE;GAEvD,IAAI,CAAC,SAAS;GAEd,OAAO,QAAQ,GAAG;GAClB,OAAO,KAAK,QAAQ,UAAU,UAAU,OAAO;EACjD;EAEA,OAAO;CACT;CAEA,MAAM,WAAW,KAAa,aAC5B,QAAQ,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,UAAW,MAAM,QAAQ,MAAM;EAAE,GAAG;EAAO;CAAS,IAAI,KAAM,CAAC;CAEhG,MAAM,YAAY,WAA2B;EAC3C,MAAM,MAAM;EACZ,MAAM,QAAmB;GACvB;GACA,WAAW,KAAK,IAAI;GACpB,UAAU,OAAO,MAAM;GACvB,MAAM,OAAO;GACb,OAAO,OAAO;EAChB;EAEA,aAAa,IACX,KACA,OAAO,WAAW,aAAa,QAAQ,KAAK,QAAQ,CAAC,CACvD;EACA,QAAQ,IAAI,KAAK,CAAC,OAAO,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC;CAC7C;CAEA,MAAM,gBAAgB;EACpB,yBAAA,QAAQ,UAAU,QAAQ;CAC5B;CAEA,OAAO;EACL,MAAM,QAAQ;EACd;EACA,YAAY,aAAa,QAAQ,gBAAgB,SAAS,CAAC;EAC3D,aAAa;GACX,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,OAAO,GAAG,CAAC;GAC9C,QAAQ,IAAI,CAAC,CAAC;EAChB;EACA,UAAU,WAAW,QAAQ,IAAI,CAAC,CAAC,SAAS,UAAU,MAAM,KAAK,MAAM,CAAC;CAC1E;AACF;;;ACtFA,MAAM,iBAAoB,WACtB,OAAO,UAAU,YAAY,UAAU,QAAS,OAAO,UAAU,eACnE,UAAU,SACV,OAAO,MAAM,SAAS;;;;;AAMxB,MAAa,oBAAoB;CAC/B,IAAI,OAA6B;CAEjC,MAAM,OAAU,SAA8B;EAC5C,IAAI,SAAS,MAAM;GACjB,MAAM,SAAS,KAAK,KAAK,IAAI;GAC7B,OAAO,OAAO,WACN,KAAA,SACA,KAAA,CACR;GACA,OAAO;EACT;EAEA,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK;EACf,SAAS,OAAO;GACd,OAAO,QAAQ,OAAO,KAAK;EAC7B;EAEA,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,QAAQ,QAAQ,KAAK;EAEvD,MAAM,SAAS,QAAQ,QAAQ,KAAK;EACpC,OAAO,OAAO,WACN,KAAA,SACA,KAAA,CACR;EACA,OAAO;CACT;CAEA,MAAM,SAAS,YAA2B;EACxC,OAAO,SAAS,MAAM;GACpB,MAAM,UAAU;GAChB,MAAM;GACN,IAAI,SAAS,SAAS;IACpB,OAAO;IACP;GACF;EACF;CACF;CAEA,OAAO;EAAE;EAAK;CAAO;AACvB;;;;;;;;;AC7CA,MAAa,aACX,MACA,UACM;CACN,MAAM,MAA+B,EAAE,GAAG,KAAK;CAE/C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,UAAU,IAAI;EACpB,IAAI,OAAOC,sBAAAA,cAAc,OAAO,KAAKA,sBAAAA,cAAc,KAAK,IAAI,UAAU,SAAS,KAAK,IAAI;CAC1F;CAEA,OAAO;AACT;;;ACVA,MAAa,2BAA2C;CACtD,eAAe;CACf,eAAe,CAAC;CAChB,kBAAkB,CAAC;AACrB;AAIA,MAAa,4BAA4C;CACvD,MAAM,wBAAQ,IAAI,IAAoB;CACtC,OAAO;EACL,UAAU,QAAQ,MAAM,IAAI,GAAG,KAAK;EACpC,UAAU,KAAK,UAAU;GACvB,MAAM,IAAI,KAAK,KAAK;EACtB;EACA,aAAa,QAAQ;GACnB,MAAM,OAAO,GAAG;EAClB;CACF;AACF;AAOA,MAAM,oBAAoB,SAA+C;CACvE,IAAI,MAAsB;CAC1B,IAAI;EACF,MAAM,KAAK;EACX,IAAI,KAAK;GACP,MAAM,QAAQ;GACd,IAAI,QAAQ,OAAO,KAAK;GACxB,IAAI,WAAW,KAAK;EACtB;CACF,SAAS,KAAK;EACZ,QAAQ,KAAK,qEAAqE,GAAG;EACrF,MAAM;CACR;CACA,IAAI,CAAC,KAAK,OAAO,oBAAoB;CAErC,MAAM,UAAU;CAChB,OAAO;EACL,UAAU,QAAQ,QAAQ,QAAQ,GAAG;EACrC,UAAU,KAAK,UAAU;GACvB,QAAQ,QAAQ,KAAK,KAAK;EAC5B;EACA,aAAa,QAAQ;GACnB,QAAQ,WAAW,GAAG;EACxB;EACA,UAAU,OAAU,MAAc,SAAuC;GACvE,IAAI,OAAO,cAAc,eAAe,EAAE,WAAW,YAAY,OAAO,KAAK;GAC7E,OAAO,UAAU,MAAM,QAAQ,WAAW,QAAQ,EAAE,MAAM,YAAY,GAAG,IAAI;EAC/E;CACF;AACF;AAEA,MAAa,2BACX,uBAAwB,kBAAkB,aAAa,WAAW,eAAe,IAAK;AAExF,MAAa,6BACX,uBAAwB,oBAAoB,aAAa,WAAW,iBAAiB,IAAK;;;AChC5F,MAAa,mBAAsB,EACjC,UAAU,kBAAkB,GAC5B,KACA,QACA,cACA,SAAS,KAAK,WACd,SAAS,KAAK,YACyB;CACvC,MAAM,SAAS,YAAY;CAE3B,MAAM,QAAQ,YAAY;EACxB,MAAM,MAAM,MAAM,QAAQ,QAAQ,GAAG;EACrC,IAAI,QAAQ,MAAM,OAAO;GAAE,OAAO;GAAc,SAAS;EAAM;EAE/D,IAAI;EACJ,IAAI;GACF,UAAU,OAAO,GAAG;EACtB,SAAS,KAAK;GACZ,QAAQ,KAAK,sCAAsC,IAAI,IAAI,GAAG;GAC9D,OAAO;IAAE,OAAO;IAAc,SAAS;GAAK;EAC9C;EAEA,MAAM,SAAS,OAAO,UAAU,OAAO;EACvC,OAAO,OAAO,UACV;GAAE,OAAO,OAAO;GAAM,SAAS;EAAM,IACrC;GAAE,OAAO;GAAc,SAAS;EAAK;CAC3C;CAEA,MAAM,eAAe,OAAO,UAAU,QAAQ,WAAW,GAAG,CAAC;CAC7D,MAAM,SAAS,UAAa,OAAO,UAAU,QAAQ,QAAQ,KAAK,OAAO,KAAK,CAAC,CAAC;CAEhF,MAAM,OAAO,YAAwB;EACnC,MAAM,OAAO,OAAO;EACpB,MAAM,SAAS,MAAM,MAAM;EAC3B,IAAI,OAAO,SACT,OAAO,CAAC,CAAC,OAAO,QAAiB;GAC/B,QAAQ,KAAK,gDAAgD,IAAI,IAAI,GAAG;EAC1E,CAAC;EAEH,OAAO,OAAO;CAChB;CACA,MAAM,UAAU,WACd,OAAO,IAAI,YAAY;EAErB,MAAM,OAAO,QAAO,MADC,MAAM,EAAA,CACA,KAAK;EAChC,MAAM,QAAQ,QAAQ,KAAK,OAAO,IAAI,CAAC;CACzC,CAAC;CAEH,MAAM,OAAgB;EAAE;EAAM;EAAO;EAAQ;CAAO;CAEpD,MAAM,UAAa,SACjB,QAAQ,WAAW,QAAQ,SAAS,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI;CAExE,OAAO;EAAE,GAAG;EAAM;CAAO;AAC3B;;;ACrFA,MAAM,kCAAkC,CAEtC,wBAEA,wCACF;AAEA,MAAa,iCAAiC,YAA8B;CAC1E,IAAI,QAAQ,WAAW,OAAO,OAAO;CACrC,MAAM,EAAE,aAAa,IAAI,IAAI,QAAQ,GAAG;CACxC,OAAO,gCAAgC,MAAM,YAAY,QAAQ,KAAK,QAAQ,CAAC;AACjF;AAEA,MAAM,kCAEF,eACA,oBAED,SACD,OAAO,YAAY;CACjB,MAAM,WAAW,MAAM,KAAK,OAAO;CAEnC,IAAI,cAAc,QAAQ,OAAO,GAAG,MAAM,eAAe;CACzD,OAAO;AACT;;;;AAKF,MAAa,qBAAqB,EAChC,cACA,aAII;CACJ,MAAM,QAAQC,cAAAA,YAAYC,gBAAAA,cAAc,EAAE,WAAW,aAAa,CAAC,CAAC;CACpE,MAAM,UAAU,SAAS,YAAY,MAAM,IAAIA,gBAAAA,cAAc,EAAE,WAAW,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC;CAC5F,MAAM,aAAa,+BAA+B,+BAA+B,OAAO;CACxF,OAAO;EAAE;EAAO,kBAAkB,MAAM,IAAI;EAAG,WAAW,MAAM;EAAW;EAAY;CAAQ;AACjG;;;;;;;AC7CA,MAAa,mBAAmB;CAC9B,cAAc;CACd,kBAAkB;CAClB,aAAa;CACb,sBAAsB;CACtB,gBAAgB;CAChB,mBAAmB;CACnB,gBAAgB;CAChB,WAAW;CACX,UAAU;CACV,wBAAwB;CACxB,aAAa;AACf;AAIA,MAAM,WAA6C;EAChD,iBAAiB,eAAe;EAChC,iBAAiB,mBAAmB;EACpC,iBAAiB,cAChB;EACD,iBAAiB,uBAChB;EACD,iBAAiB,iBAAiB;EAClC,iBAAiB,oBAChB;EACD,iBAAiB,iBAChB;EACD,iBAAiB,YAAY;EAC7B,iBAAiB,WAAW;EAC5B,iBAAiB,yBAChB;EACD,iBAAiB,cAAc;AAClC;AAEA,IAAa,eAAb,MAAa,qBAAqB,MAAM;CACtC;CAEA,YAAY,MAAwB;EAClC,MAAM,SAAS,KAAK;EACpB,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,aAAa,SAAS;CACpD;AACF;AAEA,MAAa,kBAAkB,UAC7B,iBAAiB;;AAGnB,SAAgBC,SAAU,OAA6B,MAA4C;CACjG,IAAI,SAAS,MAAM,MAAM,IAAI,aAAa,IAAI;AAChD;;;ACxDA,MAAa,qBAAqB,aAChC,OAAO,aAAa,YACpB,aAAa,UACb,aAAa,iBACb,aAAa,cACb,aAAa;;;;AAKf,MAAa,qBAAwD,EACnE,aAGO;CACP,MAAM,eAAe,OAAiB,CAAC,MACrC,IAAI,YAAY,CAAC,GAAG;EAElB,MAAM,SAAS,SAAS;GAEtB,IAAI,kBAAkB,IAAI,GAAG,OAAO,KAAA;GACpC,OAAO,YAAY,CAAC,GAAG,MAAM,IAAI,CAAC;EACpC;EAEA,QAAQ,SAAS,WAAW,SAAS,OAAO,MAAM,IAAI;CACxD,CAAC;CAEH,OAAO,YAAY;AACrB;;;AC2BA,MAAa,qCAEV,EACC,mBACA,oBAC6D;CAC7D,MAAM,SAAS,WAAmB,eAChC,kBAAkB,EAChB,SAAS,MAAM,SAAS;EACtB,gBAAgB;GACd;GACA;GACA;GACA;EACF,CAAC;CACH,EACF,CAAC;CAEH,MAAM,UAAiD,CAAC;CAExD,MAAM,iBAAiB,EACrB,WACA,UACA,iBACyC;EACzC,MAAM,iBAAiB,kBAAkB,SAAS;EAClD,OAAO,iBAAiB,SAAS,cAAc,IAAI,MAAM,WAAW,UAAU;CAChF;CAGA,MAAM,WAAyD;EAC7D,MAAM,WAAW;GACf,QAAQ,KAAK,MAAM;GACnB,OAAO;EACT;EACA,aAAa;GACX,MAAM,YAAqC,CAAC;GAC5C,MAAM,aAAsC,CAAC;GAE7C,QAAQ,SAAS,WAAW;IAC1B,UAAU,OAAO,cAAc,cAAc,MAAM;IACnD,WAAW,KAAK;KACd,YAAY,OAAO;KACnB,WAAW,OAAO;KAClB,aAAa,CAAC,CAAC,kBAAkB,OAAO,SAAS;IACnD,CAAC;GACH,CAAC;GAKD,OAAO;IACL,QAAQ;IACR,MAAM;GACR;EACF;CACF;CAEA,OAAO;AACT;;;ACtFF,MAAa,aAAa,UACxB,IAAI,MAAM,CAAC,GAAiB,EAC1B,IAAI,SAAS,UAAU;CACrB,IAAI,kBAAkB,QAAQ,GAAG,OAAO,KAAA;CAExC,IAAI,aAAa,QAAQ;EACvB,MAAM,aAAa,MAAM,cAAc;EACvC,SAAO,YAAY,iBAAiB,YAAY;EAChD,OAAO;CACT;CAEA,IAAI,aAAa,cAAc;EAC7B,MAAM,aAAa,MAAM,oBAAoB;EAC7C,SAAO,YAAY,iBAAiB,iBAAiB;EACrD,OAAO;CACT;CAEA,MAAM,UAAU,MAAM,kBAAkB;CACxC,SAAO,SAAS,iBAAiB,QAAQ;CAEzC,OAAO,QAAQ;AACjB,EACF,CAAC;;;ACZH,MAAa,uBAAuB,gBAAyC;CAC3E,QAAQ,QAA0B,WAA2B,CAAC,MAAsB;EAClF,IAAI,MAAM,QAAQ,WAAW,GAAG,OAAO,CAAC,GAAG,UAAU,GAAG,WAAW;EAEnE,MAAM,MAAM,aAAa,OAAO,CAAC;EACjC,MAAM,WAAW,cAAc,WAAW,CAAC;EAC3C,OAAO;GAAC,GAAG;GAAU,GAAG;GAAK,GAAG;EAAQ;CAC1C;AACF;;;ACnCA,MAAa,qBAAqB;CAChC,MAAM,QAAQC,cAAAA,YAAmB;EAAE,SAAS;EAAM,WAAW;EAAM,iBAAiB;CAAK,CAAC;CAE1F,MAAM,cAAc,YAAoB;EACtC,MAAM,IAAI;GAAE,GAAG,MAAM,IAAI;GAAG;EAAQ,CAAC;CACvC;CAEA,MAAM,gBAAgB,WAA6D;EACjF,MAAM,UAAU,MAAM,IAAI;EAC1B,MAAM,IAAI;GACR,GAAG;GACH,WAAW,OAAO,aAAa,QAAQ;GACvC,iBAAiB,OAAO,mBAAmB,QAAQ;EACrD,CAAC;CACH;CAKA,MAAM,wBAAwB,MAAM,IAAI,CAAC,CAAC,aAAa;CACvD,MAAM,mBAAmB,cAAsB,MAAM,IAAI;EAAE,GAAG,MAAM,IAAI;EAAG;CAAU,CAAC;;CAGtF,MAAM,cAAqB,MAAM,IAAI;CAErC,OAAO;EAAE;EAAO;EAAY;EAAc;EAAiB;EAAiB;CAAM;AACpF;;;AC5BA,MAAa,uBAAuB,EAAE,kBAA2B;CAC/D,MAAM,gBAAgB,YAAY,MAAM,WAAW,OAAO,SAAS;CACnE,OAAO,eAAe,0CAA0C;CAEhE,MAAM,WAAW,aAA2C;EAC1D,IAAI,YAAY,QAAQ,aAAa,WAAW,OAAO;EACvD,OAAO,OAAO,QAAQ,MAAM,cAAc,KAAK,YAAY;CAC7D;CAEA,OAAO;EACL,IAAI,cAAc;EAClB,MAAM,cAAc;EACpB;EACA,QAAQ,aAA+B,QAAQ,QAAQ,MAAM;EAC7D,YAAY,aAA+B,QAAQ,QAAQ,MAAM;CACnE;AACF;;;ACpBA,MAAM,eAAe,OAAgC,OAAO,OAAeC,kBAAAA,SAAS,CAAC,CAAC,SAAS,EAAE;AAEjG,MAAM,wBAAqC,EAEzC,kBAAkB,QAAQ,GAAG,IAAI,MACnC;AAOA,MAAa,eAAe,EAAE,WAAW,wBAAiC;CACxE,MAAM,EAAE,UAAU,YAAY,UAAU,GAAG,aAAa;CAExD,MAAM,aAAa,IAAI,IACrB,SAAS,KAAK,YAAY;EACxB,IAAI,CAAC,YAAY,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,GAAG;EAC7D,MAAM,cAAc,oBAAoB,QAAQ,GAAG,GAAG,QAAQ,GAAG;EACjE,MAAM,eAAe,sBAAsB,QAAQ,GAAG,GAAG,QAAQ,GAAG;EACpE,MAAM,MAAM,eAAe,gBAAgB,QAAQ;EACnD,OAAO,CAAC,QAAQ,IAAI,GAAG;CACzB,CAAC,CACH;CAEA,MAAM,eAAe,IAAI,IAAI,WAAW,KAAK,cAAc,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;CACrF,MAAM,aAAa,IAAI,IAAI,QAAQ;CAEnC,MAAM,cAAc,GAAG,YAAsB;EAC3C,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,WAAW,IAAI,CAAC,CAAC;CAC/C;CAEA,MAAM,gBAAgB,GAAG,gBAA0B;EACjD,IAAI,YAAY,WAAW,GAAG,OAAO;EACrC,OAAO,YAAY,OAAO,MAAM,aAAa,IAAI,CAAC,CAAC;CACrD;CAEA,MAAM,gBAAgB,gBAAwB,aAAa,IAAI,WAAW,KAAK;CAE/E,MAAM,cAAc,cAAyB,WAAW,IAAI,SAAS;CAErE,MAAM,iBAAiB,cAAyB,WAAW,IAAI,SAAS,KAAK;CAE7E,OAAO;EACL,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;AC1DA,MAAM,yBAAyB;;AAgB/B,MAAa,4BACX,QACA,WACyB;CACzB,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,eAAe,WAAW,IAAI,CAAC;CAEvE,OAAO,CAAC,GAAG,QAAQ,GAAG,OAAO,QAAQ,eAAe,CAAC,YAAY,IAAI,WAAW,IAAI,CAAC,CAAC;AACxF;;AAGA,MAAa,uBACX,QACA,WACoB;CACpB,MAAM,eAAe,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,KAAK,CAAC,CAAC;CAC7E,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,IAAI,CAAC;CAE7D,OAAO,CACL,GAAG,OAAO,KAAK,UACb,aAAa,IAAI,MAAM,IAAI,IAAI;EAAE,GAAG;EAAO,OAAO,aAAa,IAAI,MAAM,IAAI;CAAE,IAAI,KACrF,GACA,GAAG,OAAO,QAAQ,UAAU,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,CAC1D;AACF;;;;;;AAOA,MAAa,sBAAsB,EAAE,oBAA6B;CAChE,MAAM,UAAU,cAAc;CAC9B,MAAM,OAAO,cAAc;CAE3B,MAAM,gBAAgB,OACpB,UACA,aACA,aACG;EACH,MAAM,SAAS,MAAM,QAAQ,iBAAiB;GAC5C,aAAa;GACb;GACA;EACF,CAAC;EAED,MAAM,MAAM,OAAO,KAAK,MAAM,cAAc,UAAU,OAAO,WAAW,KAAK,OAAO,KAAK;EAEzF,MAAM,iBAAiB,OAAO,eAAe;EAC7C,MAAM,YAAY,KAAK,eAAe;EAGtC,OAAO;GACL,aAAc,MAAM,QAAQ,cAAc,IAAI,iBAAiB,CAAC;GAChE,QAAS,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC;EACnD;CACF;CAEA,MAAM,kBAAkB,OACtB,aACA,QACA,aAC0B;EAC1B,MAAM,SAAS,MAAM,QAAQ,oBAAoB;GAC/C;GACA,aAAa;GACb,MAAM;GACN,eAAe,EAAE,WAAW,YAAY;EAC1C,CAAC;EAED,IAAI;GACF,MAAM,MAAM,MAAM,KAAK,uBAAuB;IAC5C,UAAU,OAAO,QAAQ;IACzB,aAAa;IACb,iBAAiB,OAAO;IACxB,MAAM;IACN,eAAe,EAAE,OAAO;GAC1B,CAAC;GAED,OAAO;IAAE,aAAa,OAAO;IAAI,mBAAmB,IAAI;GAAG;EAC7D,SAAS,OAAO;GAEd,MAAM,QACH,oBAAoB;IACnB;IACA,aAAa;IACb,UAAU,OAAO;GACnB,CAAC,CAAC,CACD,OAAO,iBAA0B;IAEhC,IAAI,iBAAiB,SAAS,MAAM,UAAU,KAAA,GAC5C,MAAM,QAAQ;GAElB,CAAC;GACH,MAAM;EACR;CACF;CAEA,OAAO;;EAEL,MAAM,OAAO,EACX,aACA,mBACA,WAAW,gBAKgB;GAC3B,MAAM,EAAE,aAAa,WAAW,MAAM,cAAc,aAAa,mBAAmB,QAAQ;GAE5F,OAAO,gBAAgB,aAAa,QAAQ,QAAQ;EACtD;;EAGA,OAAO,OAAO,EACZ,mBACA,gBACA,mBACA,gBACA,WAAW,gBAOgB;GAC3B,MAAM,CAAC,QAAQ,UAAU,MAAM,QAAQ,IAAI,CACzC,cAAc,mBAAmB,gBAAgB,QAAQ,GACzD,cAAc,mBAAmB,gBAAgB,QAAQ,CAC3D,CAAC;GAED,OAAO,gBACL,yBAAyB,OAAO,aAAa,OAAO,WAAW,GAC/D,oBAAoB,OAAO,QAAQ,OAAO,MAAM,GAChD,QACF;EACF;CACF;AACF;;;AC5IA,MAAa,aAAa,EAAE,SAAS,UAAU,eAAwB;CACrE,eAAeC,uBAAAA,uBAAuB;EACpC,eAAe;EACf,kBAAkB,SAAS;EAC3B;CACF,CAAC;CACD,KAAKC,YAAAA,aAAa,EAAE,iBAAiB,SAAS,UAAU,CAAC;CACzD,eAAeC,sBAAAA,uBAAuB,EAAE,iBAAiB,SAAS,UAAU,CAAC;CAC7E,WAAWC,kBAAAA,mBAAmB,EAAE,iBAAiB,SAAS,UAAU,CAAC;CACrE,OAAOC,wBAAAA,eAAe;EAAE,aAAa,SAAS;EAAO,kBAAkB,SAAS;CAAW,CAAC;CAC5F,WAAW,mBAAmB,EAAE,eAAe,QAAQ,CAAC;AAC1D;;;ACUA,MAAM,YAAY,gBAA4B,SAC5C,OAAO,mBAAmB,WACtB,GAAG,iBAAiB,SACpB,YAAY,GAAG,MAAM,eAAe,IAAI;AAE9C,MAAa,wBAAwB,EACnC,SACA,MACA,mBACA,eACA,4BAEA,4BAA0D,CAAC,CAAC;CAC1D;CACA,gBAAgB,EAAE,WAAW,MAAM,iBAAiB;EAClD,MAAM,IAAIC,gBAAAA,wBAAwB,WAAW,MAAM,UAAU;CAC/D;AACF,CAAC,CAAC,CACC,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,oBAAAA,kBAAkB;EAChB,SAAS;EACT,aAAa,cAAc,SAAS,CAAC,qBAAqB,CAAC;EAC3D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,oBAAAA,wBAAwB;EACtB,SAAS;EACT,aAAa,cAAc,eAAe,CAAC,qBAAqB,CAAC;EACjE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CAGH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,mBAAAA,iBAAiB;EACf,SAAS,SAAS,gBAAgB,KAAK;EACvC,aAAa,cAAc,QAAQ,CAAC,qBAAqB,CAAC;EAC1D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,yBAAAA,uBAAuB;EACrB,SAAS;EACT,aAAa,cAAc,YAAY;CACzC,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,qBAAAA,mBAAmB;EACjB,SAAS;EACT,aAAa,cAAc,UAAU,CAAC,qBAAqB,CAAC;EAC5D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,oBAAAA,wBAAwB;EACtB,SAAS;EACT,aAAa,cAAc,eAAe,CAAC,qBAAqB,CAAC;EACjE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,wBAAAA,sBAAsB;EACpB,SAAS;EACT,aAAa,cAAc,aAAa,CAAC,qBAAqB,CAAC;EAC/D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,qBAAAA,yBAAyB;EACvB,SAAS;EACT,aAAa,cAAc,gBAAgB,CAAC,qBAAqB,CAAC;EAClE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,cAAAA,kBAAkB;EAChB,SAAS;EACT,aAAa,cAAc,SAAS,CAAC,qBAAqB,CAAC;EAC3D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,mBAAAA,iBAAiB;EACf,eAAe;EACf,SAAS;EACT,aAAa,cAAc,QAAQ,CAAC,qBAAqB,CAAC;EAC1D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,iBAAAA,eAAe;EACb,SAAS;EACT,aAAa,cAAc,MAAM,CAAC,qBAAqB,CAAC;EACxD;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CAGH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,yBAAAA,uBAAuB;EACrB,SAAS,SAAS,gBAAgB,aAAa;EAC/C,aAAa,cAAc,cAAc,CAAC,qBAAqB,CAAC;EAChE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,eAAAA,mBAAmB;EACjB,SAAS;EACT,aAAa,cAAc,UAAU,CAAC,qBAAqB,CAAC;EAC5D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,iBAAAA,qBAAqB;EACnB,SAAS;EACT,aAAa,cAAc,YAAY,CAAC,qBAAqB,CAAC;EAC9D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,sBAAAA,0BAA0B;EACxB,SAAS;EACT,aAAa,cAAc,iBAAiB,CAAC,qBAAqB,CAAC;EACnE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,cAAAA,kBAAkB;EAChB,SAAS;EACT,aAAa,cAAc,SAAS,CAAC,qBAAqB,CAAC;EAC3D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,wBAAAA,sBAAsB;EACpB,SAAS;EACT,aAAa,cAAc,aAAa,CAAC,qBAAqB,CAAC;EAC/D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,qBAAAA,mBAAmB;EACjB,SAAS;EACT,aAAa,cAAc,UAAU,CAAC,qBAAqB,CAAC;EAC5D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,4BAAAA,0BAA0B;EACxB,SAAS;EACT,aAAa,cAAc,iBAAiB,CAAC,qBAAqB,CAAC;EACnE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,sBAAAA,oBAAoB;EAClB,SAAS;EACT,aAAa,cAAc,WAAW,CAAC,qBAAqB,CAAC;EAC7D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,kBAAAA,sBAAsB;EACpB,SAAS;EACT,aAAa,cAAc,aAAa,CAAC,qBAAqB,CAAC;EAC/D;CACF,CAAC;AACL,CAAC,CAAC,CACD,MAAM;;;AChQX,MAAM,4BACH,cACA,UACA,YAAY;CACX,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,kBAAkB,mBAAmB,SAAS,CAAC;CAC3E,OAAO,KAAK,OAAO;AACrB;AAUF,MAAa,uBAAuB,OAAO,EACzC,SACA,iBACA,yBACA,eACA,wBACa;CACb,MAAM,OAAqB;EAAE,MAAM;EAAc,OAAO,gBAAgB;CAAE;CAE1E,MAAM,SAAS,yBAAyB,eAAe;CACvD,MAAM,WAAWC,gBAAAA,oBAAoB;EAAE;EAAS;EAAM,aAAa,CAAC,MAAM;CAAE,CAAC;CAC7E,MAAM,CAAC,WAAW,WAAW,eAAe,MAAM,QAAQ,IAAI;EAC5D,SAAS,aAAa,EAAE,SAAS,mBAAmB,CAAC;EACrD,SAAS,OAAO,OAAO;EACvB,SAAS,SAAS,eAAe;CACnC,CAAC;CAED,MAAM,QAAQ,YAAY;EAAE;EAAW;CAAkB,CAAC;CAC1D,MAAM,gBAAgB,oBAAoB,EAAE,YAAY,CAAC;CACzD,MAAM,cAAc,kBAAkB;EACpC,cAAc;EACd,cAAc,SAAS,OAAO,OAAO;CACvC,CAAC;CACD,MAAM,oBAAoB,mBAAmB;EAC3C,QAAQ,YAAY;EACpB,OAAOC,qBAAAA;EACP,YAAY,aAAa;GACvB,uBAAuB,CAAC,QAAQ,WAAWC,kBAAAA,eAAe,yBAAyB;GACnF,2BAA2B,QAAQ,WAAWA,kBAAAA,eAAe,yBAAyB;GACtF,oBAAoB,QAAQ,WAAWA,kBAAAA,eAAe,eAAe;EACvE;CACF,CAAC;CACD,MAAM,UAAyB;EAC7B,SAASC,0BAAAA,iBAAiB,OAAO;EACjC;EACA;EACA,IAAI,UAAU;GACZ,OAAO,YAAY,WAAW;EAChC;EACA,IAAI,KAAK;GACP,OAAO,kBAAkB,IAAI;EAC/B;CACF;CAGA,MAAM,UAAUH,gBAAAA,oBAAoB;EAClC;EACA;EACA,aAAa,cAAc,WAAW,CAAC,YAAY,UAAU,CAAC;EAC9D,gBAAgB;CAClB,CAAC;CAED,MAAM,EAAE,QAAQ,UAAU,MAAM,gBAAgB,qBAAqB;EACnE;EACA;EACA,mBAAmB,QAAQ,MAAM;EACjC;EACA,uBAAuB;CACzB,CAAC;CAED,OAAO;EACL;EACA;EACA;EACA,GAAG;EACH,KAAK,UAAU;GAAE;GAAS;GAAU;EAAQ,CAAC;CAC/C;AACF;;;ACpFA,MAAa,uBAAuB,UAAgC,CAAC,MAAM;CACzE,MAAM,SAAS,aAAa;CAC5B,MAAM,gBAAgB,oBAAoB,QAAQ,WAAW;CAM7D,MAAM,aAAa,mBAAmB;EACpC,QAAQ,OAAO;EACf,YAAY,UAAU,MAAM;EAC5B,QAAQ,YACN,UAAUI,mBAAAA,iBAAiB;GAAE;GAAS,aAAa,cAAc,QAAQ,CAAC,CAAC;EAAE,CAAC,IAAI;CACtF,CAAC;CAED,MAAM,aAAa,mBAAmB;EACpC,QAAQ,OAAO;EACf,YAAY,WAAW;GAAE,SAAS,MAAM;GAAS,OAAO,MAAM;EAAgB;EAC9E,QAAQ,EAAE,SAAS,YACjB,UACIC,mBAAAA,uBAAuB;GACrB;GACA,MAAM,QAAQ;IAAE,MAAM;IAAoB;GAAM,IAAI,EAAE,MAAM,mBAAmB;GAC/E,aAAa,cAAc,cAAc,CAAC,CAAC;EAC7C,CAAC,IACD;CACR,CAAC;CAED,MAAM,QAAQ,wBAAuD;EACnE,QAAQ,OAAO;EACf,YAAY,UAAW,MAAM,aAAa,MAAM,UAAU,MAAM,UAAU;EAC1E,QAAQ,YACN,qBAAqB;GACnB;GACA,iBAAiB,OAAO;GACxB,yBAAyB,OAAO;GAChC;GACA,mBAAmB,QAAQ;EAC7B,CAAC;CACL,CAAC;CAED,IAAI,QAAQ,SAAS,OAAO,WAAW,QAAQ,OAAO;CAEtD,MAAM,cAA+B;EACnC,MAAM,OAAO,OAAO,MAAM;EAC1B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,WAAW,WAAW,IAAI,MAAM;GAChC,iBAAiB,CAAC,CAAC,KAAK;GACxB,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC;EAC7B;CACF;CAEA,MAAM,UAAU;EACd,YAAY,OAAO;EACnB,sBAAsB,MAAM,MAAM,IAAI,CAAC,CAAC,UAAU;EAClD,sBAAsB,cAAsB,OAAO,aAAa,EAAE,UAAU,CAAC;EAC7E,0BAA0B,OAAO,cAAsB;GACrD,OAAO,aAAa,EAAE,UAAU,CAAC;GAEjC,MAAM,MAAM,QAAQ;EACtB;EACA,yBAAyB,oBAA4B,OAAO,aAAa,EAAE,gBAAgB,CAAC;EAC5F,YAAY,aAAkD;GAE5D,MAAM,oBAAoB,OAAO,MAAM,gBAAgB,SAAS,MAAM,CAAC,CAAC;GACxE,MAAM,mBAAmB,MAAM,MAAM,gBAAgB,SAAS,MAAM,CAAC,CAAC;GACtE,aAAa;IACX,kBAAkB;IAClB,iBAAiB;GACnB;EACF;EACA;CACF;CAWA,OAAO;EAAE,KATG,UAAU;GACpB,qBAAqB,WAAW,IAAI;GACpC,2BAA2B,WAAW,IAAI;GAC1C,yBAAyB;IACvB,MAAM,QAAQ,MAAM,MAAM,IAAI;IAC9B,OAAO,MAAM,UAAU,UAAU,MAAM,QAAQ;GACjD;EACF,CAEW;EAAG;CAAQ;AACxB;;;;;;;;;ACxEA,MAAM,kBAAkB,SAAkB,cACxC,GAAG,QAAQ,GAAG;;AAGhB,MAAM,sBAAsB,YAAqB,GAAG,QAAQ;AAE5D,MAAM,gBAAgB,aAAsB,OAC1C,GAAG,WAAW,mBAAmB,OAAO,CAAC;AAI3C,MAAM,uBAA6B,EAAE,QAAQ,YAAY;AAEzD,MAAM,uBAA6B,EAAE,QAAQ,YAAY;AAEzD,MAAM,qBAAqB,gBAAkC;CAC3D,QAAQ;CACR;AACF;AAKA,MAAM,cAAc,WAAwC;CAC1D,GAAG;CACH,UAAU,KAAK,IAAI;AACrB;AAGA,MAAM,SAAS,eACb,WAAW,SAAS,UAChB;CAAE,MAAM;CAAS,cAAc,WAAW;AAAa,IACvD;CAAE,MAAM;CAAU,WAAW,WAAW;AAAU;AAGxD,MAAM,qBAAqB,gBAAwC;CACjE,GAAG;CACH,UAAU,KAAK,IAAI,IAAI,WAAW,YAAY;AAChD;AAIA,MAAM,SAAS,aAA6B;CAC1C;CACA,SAAS;CACT,OAAO;CACP,MAAM,cAAc;CACpB,UAAU;AACZ;AAEA,MAAM,WAAW,SAAkB,eAAmC;CACpE,IAAI,eAAe,SAAS,SAAS;CACrC;CACA;CACA,SAAS;AACX;AAIA,MAAM,gBAAgB,aAAoC;CACxD;CACA,WAAW;AACb;AAEA,MAAM,kBAAkB,SAAkB,eAA0C;CAClF;CACA;AACF;AAIA,MAAM,SAAS,oBAAoC;CACjD,QAAQ,aAAa,cAAc;CACnC,QAAQ,GAAG,iBAAiB,MAAM,cAAc,EAAE;CAClD,UAAU,CAAC;AACb;AAEA,MAAa,QAAQ;CAEnB;CACA;CAGA;CACA;CAGA;CACA;CAGA;CAGA;CACA;CACA;CAGA;CACA;CACA;AACF;;;;;;;AAQA,MAAa,SAAS;CAEpB,wBAAwB,IAAI,aAAa,iBAAiB,gBAAgB;CAC1E,mBAAmB,IAAI,aAAa,iBAAiB,WAAW;;CAEhE,oBAAoB,IAAI,aAAa,iBAAiB,YAAY;CAClE,4BAA4B,IAAI,aAAa,iBAAiB,oBAAoB;CAClF,gBAAgB,IAAI,aAAa,iBAAiB,QAAQ;CAG1D,mBAAmB,4BAAqB,IAAI,MAAM,UAAU,QAAQ,4BAA4B;CAChG,eAAe,4BAAqB,IAAI,MAAM,UAAU,QAAQ,wBAAwB;CAGxF,mBAAmB,MAAc,uBAAe,IAAI,MAAM,KAAK,KAAK,uBAAuB,IAAI;CAC/F,kBAAkB,4BAAqB,IAAI,MAAM,UAAU,QAAQ,wBAAwB;CAE3F,iBAAiB,uBAAuB,IAAI,MAAM,eAAe,GAAG,EAAE;AACxE;AAGA,MAAa,iBAAiB,SAC5B,KAAK,WAAW,kBACZC,yBAAAA,OAAO,QAAQ,KAAK,UAAU,IAC9BA,yBAAAA,OAAO,QAAQ,OAAO,iBAAiB,CAAC;;;;;;;ACjJ9C,MAAa,0BAA0B;CACrC,MAAM,2BAAW,IAAI,IAAsB;CAE3C,OAAO;EACL,MAAM,YAAqB,SAAS,IAAI,SAAS,KAAK;EACtD,SAAS,YAAqB,SAAS,OAAO,OAAO;EACrD,SAAS,YAA8B;GACrC,IAAI,SAAS,IAAI,OAAO,GAAG,OAAO;GAClC,SAAS,IAAI,SAAS,IAAI;GAC1B,OAAO;EACT;CACF;AACF;;;;;;;AAgBA,MAAa,cAAc,EAAE,QAAQ,UAAU,aAAsB;CAEnE,MAAM,0BAA0B,YAC9BC,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UACnC,MAAM,KAAK,WAAW,kBAClBA,yBAAAA,OAAO,QAAQ,OAAO,qBAAqB,CAAC,IAC5CA,yBAAAA,OAAO,QAAQ,KAAK,CAC1B;CAGF,MAAM,oBAAoB,YACxBA,yBAAAA,OAAO,QAAQ,uBAAuB,OAAO,IAAI,UAC/C,MAAM,KAAK,WAAW,cAClBA,yBAAAA,OAAO,QAAQ,OAAO,iBAAiB,OAAO,CAAC,IAC/CA,yBAAAA,OAAO,QAAQ,KAAK,CAC1B;CAEF,MAAM,oBAAoB,YACxBA,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UACnC,MAAM,KAAK,WAAW,cAClBA,yBAAAA,OAAO,QAAQ,KAAK,IACpBA,yBAAAA,OAAO,QAAQ,OAAO,aAAa,OAAO,CAAC,CACjD;CAEF,MAAM,gBAAgB,YACpBA,yBAAAA,OAAO,IAAI,iBAAiB,OAAO,IAAI,UACrC,OAAO,IAAI;EAAE,GAAG;EAAO,MAAM,MAAM,cAAc;CAAE,CAAC,CACtD;CAGF,MAAM,iBAAiB,YACrBA,yBAAAA,OAAO,IAAI,iBAAiB,OAAO,IAAI,UACrC,OAAO,IAAI;EAAE,GAAG;EAAO,MAAM,MAAM,cAAc;CAAE,CAAC,CACtD;CAGF,MAAM,gBAAgB,SAAkB,UACtCA,yBAAAA,OAAO,IAAI,uBAAuB,OAAO,IAAI,UAAU;EACrD,OAAO,IAAI,OAAO;EAElB,OAAO,OAAO,IAAI;GAChB,GAAG;GACH,OAAO,MAAM,QAAQ;GACrB,MAAM,MAAM,kBAAkB,MAAM,WAAW,KAAK,CAAC;GACrD,UAAU;EACZ,CAAC;CACH,CAAC;CAEH,MAAM,gBAAgB,SAAkB,UACtCA,yBAAAA,OAAO,QAAQ,OAAO,kBAAkB,OAAO,IAAI,eACjD,WAAW,SAAS,MAAM,OACtBA,yBAAAA,OAAO,QAAQ,OAAO,iBAAiB,WAAW,MAAM,MAAM,IAAI,CAAC,IACnEA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAC/B,OAAO,IAAI;EAAE,GAAG;EAAO,MAAM,MAAM,kBAAkB,MAAM,WAAW,KAAK,CAAC;CAAE,CAAC,CACjF,CACN;CAEF,MAAM,eAAe,YACnBA,yBAAAA,OAAO,QAAQ,OAAO,kBAAkB,OAAO,IAAI,eACjDA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAC/B,OAAO,IAAI;EACT,GAAG;EACH,MAAM,MAAM,kBAAkB,MAAM,kBAAkB,UAAU,CAAC;CACnE,CAAC,CACH,CACF;CAKF,MAAM,WAAW,SAAkB,EAAE,SAAS,UAA0B,CAAC,MACvEA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU;EACzC,SAAS,SAAS,OAAO;EACzB,MAAM,WAAW,SACbA,yBAAAA,OAAO,SACLA,yBAAAA,OAAO,IAAI,cAAc,MAAM,IAAI,IAAI,gBAA0B,EAC/D,OAAO,MAAM,MAAM,UAAU,EAC/B,EAAE,GACF,MAAM,QACR,IACA;EAEJ,OAAO,OAAO,IAAI;GAChB,GAAG;GACH,OAAO,MAAM,QAAQ;GACrB,MAAM,MAAM,cAAc;GAC1B;EACF,CAAC;CACH,CAAC;CAEH,MAAM,UAAU,SAAkB,aAChCA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU,OAAO,IAAI;EAAE,GAAG;EAAO;CAAS,CAAC,CAAC;CAE/E,MAAM,gBAAgB,YACpBA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU,OAAO,IAAI;EAAE,GAAG;EAAO,UAAU;CAAK,CAAC,CAAC;CAErF,MAAM,mBAAmB,YACvBA,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UACnC,MAAM,WACFA,yBAAAA,OAAO,QAAQ,MAAM,QAAQ,IAC7BA,yBAAAA,OAAO,QAAQ,OAAO,gBAAgB,OAAO,CAAC,CACpD;CAEF,MAAM,YAAY,YAAqBA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU,MAAM,KAAK;CAG7F,MAAM,kBAAkB,YACtBA,yBAAAA,OAAO,SACLA,yBAAAA,OAAO,IAAI,OAAO,kBAAkB,OAAO,IAAI,EAAE,kBAAkB,WAAW,GAC9E,IACF;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,eAAe,OAAO;EACtB,mBAAmB,OAAO;EAC1B;EACA;CACF;AACF;;;;ACvJA,MAAa,kBAAkB,EAAE,OAAO,aAAsB;CAC5D,MAAM,OAAO,OAAgC,MAAM,MAAM,IAAI,CAAC,CAAC;CAE/D,MAAM,OAAO,OAAwC;EACnD,MAAM,UAAU,MAAM,IAAI,CAAC,CAAC,SAAS;EACrC,OAAO,UAAUC,yBAAAA,OAAO,QAAQ,OAAO,IAAIA,yBAAAA,OAAO,QAAQ,OAAO,eAAe,EAAE,CAAC;CACrF;CAEA,MAAM,QAAQ,YACZ,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,YAAY,QAAQ,YAAY,OAAO;;CAGrF,MAAM,WAAW,cACf,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,YAAY,QAAQ,cAAc,SAAS;CAEzF,MAAM,OAAO,YAA8B;EACzC,MAAM,QAAQ,MAAM,IAAI;EACxB,MAAM,IAAI;GAAE,GAAG;GAAO,UAAU;IAAE,GAAG,MAAM;KAAW,QAAQ,KAAK;GAAQ;EAAE,CAAC;EAC9E,OAAO;CACT;CAEA,MAAM,UAAU,IAAoB,YAClCA,yBAAAA,OAAO,IAAI,IAAI,EAAE,IAAI,YAAY,IAAI,QAAQ,OAAO,CAAC,CAAC;CAExD,MAAM,cAAc,KAAuB,eAAwB;EACjE,MAAM,QAAQ,MAAM,IAAI;EACxB,MAAM,WAAW,EAAE,GAAG,MAAM,SAAS;EACrC,KAAK,MAAM,MAAM,KAAK,OAAO,SAAS;EACtC,MAAM,IAAI;GAAE,GAAG;GAAO,QAAQ;GAAY;EAAS,CAAC;CACtD;CAGA,MAAM,qBAAqB,OACzBA,yBAAAA,OAAO,QAAQ,IAAI,EAAE,IAAI,YAAY,OAAO,kBAAkB,QAAQ,OAAO,CAAC;CAKhF,MAAM,QAAQ,SAAkB,cAA0C;EACxE,MAAM,KAAK,MAAM,eAAe,SAAS,SAAS;EAClD,IAAI,IAAI,EAAE,GAAG,OAAO,IAAI,EAAE;EAE1B,OAAOA,yBAAAA,OAAO,IAAI,OAAO,kBAAkB,OAAO,SAChD,IAAI,MAAM,QAAQ,SAAS,SAAS,CAAC,CACvC;CACF;CAGA,MAAM,SAAS,OACbA,yBAAAA,OAAO,IAAI,IAAI,EAAE,IAAI,EAAE,SAAS,gBAAgB;EAC9C,MAAM,EAAE,WAAW,MAAM,IAAI;EAC7B,MAAM,WAAW,OAAO,YAAY,WAAW,OAAO,cAAc;EACpE,WAAW,CAAC,EAAE,GAAG,WAAW,MAAM,aAAa,OAAO,IAAI,MAAM;CAClE,CAAC;;CAGH,MAAM,YAAY,YAAqB;EACrC,MAAM,MAAM,KAAK,OAAO,CAAC,CAAC,KAAK,YAAY,QAAQ,EAAE;EACrD,MAAM,EAAE,WAAW,MAAM,IAAI;EAE7B,WAAW,KAAK,OAAO,YAAY,UAAU,MAAM,aAAa,OAAO,IAAI,MAAM;CACnF;CAEA,MAAM,iBAAiB,IAAoB,YACzC,OAAO,KAAK,aAAa;EAAE,GAAG;EAAS;CAAQ,EAAE;CAEnD,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;;;;ACrEA,MAAa,eAAe,EAAE,OAAO,QAAQ,eAAwB;CACnE,MAAM,YAAqB,MAAM,IAAI,CAAC,CAAC;CAEvC,MAAM,UAAU,GAAY,MAC1B,MAAM,KAAM,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE;CAK3D,MAAM,OAAO,WAAoB;EAC/B,IAAI,OAAO,MAAM,IAAI,CAAC,CAAC,QAAQ,MAAM,GAAG;EACxC,MAAM,IAAI;GAAE,GAAG,MAAM,IAAI;GAAG;EAAO,CAAC;CACtC;CAEA,MAAM,UAAU,WAAqC;EACnD,MAAM,QAAQ,OAAO,IAAI,OAAO,OAAO;EACvC,IAAI,CAAC,MAAM,SAAS,OAAO;EAC3B,IAAI,OAAO,cAAc,MAAM,OAAO;GAAE,OAAO,MAAM;GAAM,SAAS;EAAK;EAEzE,MAAM,UAAU,SAAS,IAAI,MAAM,eAAe,OAAO,SAAS,OAAO,SAAS,CAAC;EACnF,IAAI,CAAC,QAAQ,SAAS,OAAO;EAE7B,OAAO;GAAE,OAAO,MAAM;GAAM,SAAS,QAAQ;EAAK;CACpD;CAGA,MAAM,kBAA4B;EAChC,MAAM,WAAW,OAAO,IAAI,CAAC;EAC7B,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,2BAA2B,KAAK,UAAU,IAAI,CAAC,GAAG;EACjF,OAAO;CACT;CAEA,MAAM,uBAA8B,UAAU,CAAC,CAAC;CAEhD,MAAM,iBAAiB,YACrBC,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU;EACzC,MAAM,OAAO,MAAM,aAAa,MAAM,OAAO;EAC7C,IAAI,IAAI;EACR,OAAO;CACT,CAAC;CAIH,MAAM,mBAAmB,SAAkB,cACzCA,yBAAAA,OAAO,IAAI,SAAS,kBAAkB,MAAM,eAAe,SAAS,SAAS,CAAC,SAAS;EACrF,MAAM,OAAO,MAAM,eAAe,SAAS,SAAS;EACpD,IAAI,IAAI;EACR,OAAO;CACT,CAAC;CAGH,MAAM,eAAe,YAAoC;EACvD,MAAM,QAAQ,OAAO,OAAO,OAAO;EACnC,OAAOA,yBAAAA,OAAO,IAAI,cAAc,MAAM,OAAO,SAAS,KAAK;CAC7D;CAEA,MAAM,iBAAiB,cAA0C;EAC/D,MAAM,EAAE,YAAY,eAAe;EAEnC,MAAM,UAAU,SAAS,KAAK,SAAS,SAAS;EAChD,IAAI,CAAC,QAAQ,SAAS,OAAO;EAE7B,OAAOA,yBAAAA,OAAO,IAAI,gBAAgB,SAAS,SAAS,SAAS,QAAQ,IAAI;CAC3E;CAGA,MAAM,mBAAmB;EACvB,MAAM,SAAS,IAAI;EACnB,IAAI,OAAO,cAAc,MAAM;EAC/B,IAAI,MAAM,aAAa,OAAO,OAAO,CAAC;CACxC;CAGA,MAAM,6BAA8C;EAClD,MAAM,EAAE,YAAY,UAAU;EAC9B,OAAO,UAAUA,yBAAAA,OAAO,QAAQ,OAAO,IAAIA,yBAAAA,OAAO,QAAQ,OAAO,SAAS,CAAC;CAC7E;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;AC3GA,MAAa,gBAAgB,EAAE,OAAO,mBAA4B;CAChE,MAAM,OAAO,YAAqB,WAAW,MAAM,IAAI,CAAC,CAAC;CACzD,MAAM,OAAO,YAAqB;EAChC,MAAM,QAAQ,MAAM,IAAI,CAAC,CAAC,OAAO;EACjC,OAAO,QAAQC,yBAAAA,OAAO,QAAQ,KAAK,IAAIA,yBAAAA,OAAO,QAAQ,OAAO,aAAa,CAAC;CAC7E;CACA,MAAM,aAAa,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,MAAM;CACnD,MAAM,OAAO,UAAwB;EACnC,MAAM,QAAQ,MAAM,IAAI;EACxB,MAAM,IAAI;GAAE,GAAG;GAAO,QAAQ;IAAE,GAAG,MAAM;KAAS,MAAM,UAAU;GAAM;EAAE,CAAC;EAC3E,OAAO;CACT;CACA,MAAM,UAAU,SAAkB,YAChCA,yBAAAA,OAAO,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,KAAK,CAAC,CAAC;CAGzD,MAAM,qBAAqB,YACzBA,yBAAAA,OAAO,QAAQ,IAAI,OAAO,IAAI,UAAU,cAAc,MAAM,IAAI,CAAC;CAInE,MAAM,UAAU,YAAqB;EACnC,MAAM,WAAW,IAAI,OAAO;EAC5B,IAAI,SAAS,SAAS,OAAO,SAAS;EACtC,OAAO,IAAI,MAAM,MAAM,OAAO,CAAC;CACjC;CAIA,MAAM,SAAS,YAAqB;EAClC,MAAM,QAAQ,IAAI,OAAO;EACzB,IAAI,CAAC,MAAM,SAAS,OAAO;EAE3B,MAAM,QAAQ,MAAM,IAAI;EACxB,IAAI,MAAM,OAAO,YAAY,SAAS,OAAOA,yBAAAA,OAAO,QAAQ,OAAO,YAAY,CAAC;EAEhF,MAAM,SAAS,EAAE,GAAG,MAAM,OAAO;EACjC,OAAO,OAAO;EAEd,MAAM,WAAW,OAAO,YACtB,OAAO,QAAQ,MAAM,QAAQ,CAAC,CAAC,QAAQ,GAAG,aAAa,QAAQ,YAAY,OAAO,CACpF;EACA,MAAM,IAAI;GAAE,QAAQ,MAAM;GAAQ;GAAQ;EAAS,CAAC;EACpD,aAAa,OAAO;EACpB,OAAO;CACT;CAEA,MAAM,iBAAiB,SAAkB,YACvC,OAAO,UAAU,WAAW;EAAE,GAAG;EAAO;CAAQ,EAAE;CAEpD,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;;;AC1DA,MAAa,eAAe,mBAA4B;CACtD,MAAM,QAAQC,cAAAA,YAAmB,MAAM,MAAM,cAAc,CAAC;CAC5D,MAAM,SAAS,kBAAkB;CAEjC,MAAM,SAAS,aAAa;EAAE;EAAO,cAAc,OAAO;CAAO,CAAC;CAClE,MAAM,WAAW,eAAe;EAAE;EAAO;CAAO,CAAC;CACjD,MAAM,QAAQ,YAAY;EAAE;EAAO;EAAQ;CAAS,CAAC;CACrD,MAAM,OAAO,WAAW;EAAE;EAAQ;EAAU;CAAO,CAAC;CAEpD,OAAO;EAAE,OAAO,MAAM,WAAW;EAAG;EAAQ;EAAU;EAAM;CAAM;AACpE;;;ACnBA,MAAa,QAAQ,OAAO,QAAoB,UAA2C;CACzF,IAAI,MAAM,SAAS,UAAU;EAC3B,MAAM,EAAE,aAAa,WAAW,cAAc,MAAM,OAAO,MAAM,mBAAmB,EAClF,WAAW,MAAM,UACnB,CAAC;EACD,OAAO;GAAE,MAAM;GAAU;GAAa;GAAW;EAAU;CAC7D;CAEA,MAAM,EAAE,aAAa,WAAW,iBAAiB,MAAM,OAAO,MAAM,iBAAiB,EACnF,cAAc,MAAM,aACtB,CAAC;CACD,IAAI,CAAC,cAAc,MAAM,IAAI,aAAa,iBAAiB,gBAAgB;CAC3E,OAAO;EAAE,MAAM;EAAS;EAAa;EAAW;CAAa;AAC/D;;;ACGA,MAAM,4BAA4B;AAiBlC,MAAM,oBAAoB,IAAI,aAAa,iBAAiB,WAAW;AAEvE,MAAM,mBAAmB,YAAqD;CAC5E,IAAI,YAAY,KAAA,KAAa,YAAY,WAAW,OAAO;CAC3D,IAAI,YAAY,WAAW,OAAO;CAClC,OAAO;AACT;AAEA,MAAa,qBAAqB,EAChC,OACA,WACA,aACA,mBAAmB,2BACnB,aACA,gBACa;CACb,MAAM,8BAAc,IAAI,IAA4C;CAIpE,MAAM,8BAAc,IAAI,IAAqB;CAC7C,MAAM,gBAAgB,YAAqB,YAAY,IAAI,OAAO,KAAK;CAGvE,MAAM,UAAU,OAAO,SAAkB,UAAmD;EAC1F,MAAM,SAASC,mBAAAA,iBAAiB;GAAE;GAAS;EAAY,CAAC;EACxD,MAAM,cAAcC,yBAAAA,OAAO,OAAO,MAAM,KAAK,SAAS,OAAO,CAAC;EAC9D,MAAM,mBAAmB,aAAa,OAAO;EAC7C,MAAM,YAAY,MAAMA,yBAAAA,OAAO,oBAAoB,MAAM,QAAQ,KAAK,CAAC;EAIvE,OAHmBA,yBAAAA,OAAO,SAAS,MAAM,KAAK,SAAS,OAAO,GAAG,EAEtD,MAAM,eAAe,aAAa,OAAO,MAAM,mBACjC,YAAYA,yBAAAA,OAAO,QAAQ,YAAY,CAAC;CACnE;;;;;;;CAQA,MAAM,UAAU,YAAqB;EACnC,YAAY,IAAI,SAAS,aAAa,OAAO,IAAI,CAAC;EAClD,YAAY,OAAO,OAAO;CAC5B;;;;;;;;CASA,MAAM,sBAAsB,OAC1B,OACA,SACA,eAC2B;EAC3B,MAAM,cAAcA,yBAAAA,OAAO,OAAO,MAAM,KAAK,SAAS,OAAO,CAAC;EAC9D,MAAM,mBAAmB,aAAa,OAAO;EAC7C,MAAM,WAAW,MAAMA,yBAAAA,OAAO,oBAAoB,MAAM,KAAK,CAAC;EAC9D,IAAI,CAAC,SAAS,SAAS,OAAO;EAC9B,IACEA,yBAAAA,OAAO,SAAS,MAAM,KAAK,SAAS,OAAO,GAAG,EAAE,MAAM,eACtD,aAAa,OAAO,MAAM,kBAE1B,OAAOA,yBAAAA,OAAO,QAAQ,YAAY,CAAC;EAGrC,MAAM,iBAAiB,SAAS,KAAK,OAAO,MAAM,UAAU,MAAM,YAAY,OAAO;EACrF,IAAI,kBAAkB,eAAe,eAAe,MAClD,OAAOA,yBAAAA,OAAO,QAAQ,YAAY,CAAC;EAErC,OAAOA,yBAAAA,OAAO,QAAQ,gBAAgB,cAAc,MAAM,MAAM,UAAU,CAAC;CAC7E;CAEA,MAAM,aAAa,OAAO,YACxB,UAAU,OAAO,OAAO,UAAU;EAChC,MAAM,aAAa,MAAM,KAAK,kBAAkB,OAAO;EACvD,IAAI,CAAC,WAAW,SAAS,OAAO;EAChC,MAAM,QAAQ,MAAM,oBAAoB,OAAO,SAAS,WAAW,IAAI;EACvE,IAAI,CAAC,MAAM,SAAS,OAAO;EAE3B,MAAM,YAAY,MAAM,QAAQ,SAAS,MAAM,IAAI;EACnD,IAAI,CAAC,UAAU,SAAS;GACtB,IAAIC,mBAAAA,eAAe,UAAU,KAAK,GAAG,MAAM,OAAO,SAAS,KAAK;GAChE,OAAO;EACT;EAEA,MAAM,cAAcD,yBAAAA,OAAO,IACzB,MAAM,KAAK,aAAa,SAAS,UAAU,IAAI,SACzC,UAAU,KAAK,WACvB;EACA,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;EACnD,OAAO;CACT,CAAC;CAEH,MAAM,UAAU,YACd,OAAO,aAAa,eAAeE,eAAAA,aAAa,WAAW,OAAO,CAAC,CAAC,CAAC,CAAC;CAIxE,MAAM,eAAe,OACnB,SACA,OACA,WAAW,UAEX,UAAU,OAAO,OAAO,UAAU;EAEhC,MAAM,eAAc,MADE,MAAM,KAAK,EAAA,CACL,OAAO,MAAM,UAAU,MAAM,YAAY,OAAO;EAC5E,MAAM,cAAc,WAAW,aAAa,UAAU,QAAQ,aAAa;EAC3E,IAAI,eAAe,CAAC,aAAa,OAAO;EAGxC,IAAI,CADc,MAAM,KAAK,aAAa,OAC7B,CAAC,CAAC,SAAS,OAAO;EAE/B,MAAM,YAAY,MAAM,QAAQ,SAAS,eAAe,KAAK;EAC7D,IAAI,CAAC,UAAU,SAAS;GACtB,MAAM,KAAK,cAAc,OAAO;GAChC,IAAID,mBAAAA,eAAe,UAAU,KAAK,GAAG;IACnC,IAAI,UAAU,MAAM,KAAK,aAAa,OAAO;IAC7C,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;IACnD,OAAO;GACT;GACA,OAAO;EACT;EAEA,MAAM,KAAK,aAAa,SAAS,UAAU,IAAI;EAC/C,IAAI,CAAC,MAAM,KAAK,kBAAkB,OAAO,CAAC,CAAC,SAAS,OAAO;EAC3D,IAAI,UAAU,MAAM,KAAK,aAAa,OAAO;EAC7C,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;EACnD,OAAO;CACT,CAAC;CAGH,MAAM,mBAAmB,SAAkB,aAAyC;EAClF,KAAK,MAAM,EAAE,eAAe,UAAU,MAAM,SAAS,KAAK,SAAS,SAAS;CAC9E;;;;;;;;;CAUA,MAAM,UAAU,YAGV;EAGJ,MAAM,WAAW,MAAM,UACpB,QAAQ,UAAU,MAAM,KAAK,CAAC,CAAC,CAC/B,OAAO,UAAmB;GACzB,QAAQ,KAAK,2DAA2D,KAAK;GAC7E,OAAO;EACT,CAAC;EACH,IAAI,aAAa,MAAM,OAAO;GAAE,YAAY;GAAM,QAAQ;EAAc;EACxE,MAAM,EAAE,QAAQ,YAAY;EAC5B,MAAM,SAAS,OAAO,MAAM,EAAE,cAAc,YAAY,SAAS,OAAO;EAExE,MAAM,WAAW,OAAO,IACtB,OAAO,EAAE,SAAS,YAAY,UAAU,eAAsC;GAC5E,MAAM,OAAO,OAAO,OAAO;GAC3B,IAAI,CAAC,cAAc,CAAC,UAAU,OAAO;GACrC,IAAID,yBAAAA,OAAO,SAAS,MAAM,KAAK,SAAS,OAAO,GAAG,CAAC,IAAI,GAAG,OAAO;GAEjE,IAAI,UAAU,MAAM,KAAK,OAAO,SAAS,QAAQ;GACjD,IAAI,CAAC,YAAY,OAAO;GACxB,MAAM,UAAU,MAAM,aAAa,SAAS,UAAU;GACtD,IAAI,YAAY,YAAY,gBAAgB,SAAS,QAAQ;GAC7D,OAAO;EACT,CACF;EAEA,MAAM,UAAU,MAAM,QAAQ,IAAI,QAAQ;EAC1C,MAAM,gBAAgB,QAAQ,aAAa,QAAQ,OAAO,QAAQ,MAAM,KAAK,KAAA;EAE7E,OAAO;GAAE,YAAY;GAAS,QAAQ,gBAAgB,aAAa;EAAE;CACvE;;;;;;;CAQA,MAAM,kBAAkB,OAAO,YAA4C;EACzE,MAAM,EAAE,UAAUA,yBAAAA,OAAO,OAAO,MAAM,KAAK,gBAAgB,OAAO,CAAC;EACnE,OAAO,aAAa,SAAS,OAAO,IAAI;CAC1C;CAEA,MAAM,WAAW,YAA8B;EAC7C,MAAM,SAASA,yBAAAA,OAAO,IACpB,MAAM,KAAK,kBAAkB,OAAO,IACnC,EAAE,UAAU,gBAAgB,KAAK,IAAI,KAAK,WAAW,YAAY,MAAO,gBAC3E;EACA,OAAOA,yBAAAA,OAAO,SAAS,QAAQ,KAAK;CACtC;;;;;;CAOA,MAAM,WAAW,SAAkB,YAA6B;EAC9D,YAAY,OAAO,OAAO;EAC1B,MAAM,YAAY,MAAM,KAAK,QAAQ,SAAS,OAAO;EACrD,cAAc,OAAO;EAErB,OAAO;CACT;CAIA,MAAM,SAAS,OAAO,SAAkB,UAAkB;EACxD,IAAI,CAAC,MAAM,KAAK,cAAc,OAAO,GAAG;EACxC,QAAQ,OAAO;EACf,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;EACnD,YAAY,OAAO;CACrB;CAGA,MAAM,eAAe,OAAO,YAAoC;EAC9D,IAAI,QAAQ,OAAO,GAAG,MAAM,OAAO,OAAO;CAC5C;CAEA,MAAM,cAAc,YAClBG,mBAAAA,2BAA2B,EACzB,gBAAgB,OAAO,EAAE,eAAe,UAAU,CAAC,MAAM;EACvD,IAAI,cAAc;GAEhB,IAAI,CAAC,MAAM,KAAK,kBAAkB,OAAO,CAAC,CAAC,SAAS,OAAO;GAC3D,OAAOH,yBAAAA,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC;EAC5C;EAEA,MAAM,aAAa,OAAO;EAC1B,OAAO,MAAM,KAAK,eAAe,OAAO;CAC1C,EACF,CAAC;CAEH,OAAO;EAAE;EAAY;EAAQ;EAAc;EAAS;EAAiB;EAAS;CAAO;AACvF;;;;;;;;;;;AC9OA,MAAa,kBAAoD,EAC/D,KACA,YACgE;CAChE,MAAM,0BAAU,IAAI,IAA8B;CAClD,MAAM,UAAUI,cAAAA,cAAiC;CAEjD,MAAM,OAAO,IAAS,UAAqC;EACzD,QAAQ,IAAI,IAAI,KAAK;EACrB,QAAQ,KAAK;GAAE,KAAK;GAAI,QAAQ,MAAM;EAAO,CAAC;CAChD;CAIA,MAAM,OAAO,IAAS,UAAsC;EAC1D,MAAM,UAAU,SAAyC;GAGvD,IAAI,QAAQ,IAAI,EAAE,MAAM,OAAO,IAAI,IAAI;IAAE;IAAO,GAAG;GAAK,CAAC;GACzD,OAAO;EACT;EAIA,MAAM,UAAU,YAA4B,MAAM,MAAM,KAAK;EAE7D,MAAM,QAA6B;GACjC;GACA,QAAQ;GACR,SAAS,QAAQ,CAAC,CAAC,MAChB,UAAU,OAAO;IAAE,QAAQ;IAAS;GAAM,CAAC,IAC3C,UAAmB,OAAO;IAAE,QAAQ;IAAW;GAAM,CAAC,CACzD;EACF;EAEA,IAAI,IAAI,KAAK;EACb,OAAO;CACT;CAEA,MAAM,OAAO,OAA0B;EACrC,MAAM,QAAQ,QAAQ,IAAI,EAAE;EAC5B,OAAO,OAAO,WAAW,UAAU,MAAM,QAAQ;CACnD;CAEA,MAAM,WAAW,OAAO,UAAiC;EACvD,MAAM,KAAK,IAAI,KAAK;EACpB,MAAM,SAAS,QAAQ,IAAI,EAAE;EAC7B,MAAM,QAAQ,WAAW,KAAA,KAAa,OAAO,WAAW,YAAY,IAAI,IAAI,KAAK,IAAI;EACrF,MAAM,UAAU,MAAM,WAAW,YAAY,MAAM,MAAM,UAAU;EAEnE,IAAI,QAAQ,WAAW,WAAW,MAAM,QAAQ;EAChD,OAAO,QAAQ;CACjB;CAEA,MAAM,UAAU,YAAwC;EACtD,KAAK,MAAM,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,EAAE,GAAG,QAAQ,OAAO,EAAE;CACrE;CAEA,MAAM,YAAY,UAAuB;EACvC,MAAM,KAAK,IAAI,KAAK;EACpB,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK;CACrC;CAEA,MAAM,SAAS,OAAkB;EAC/B,MAAM,QAAQ,QAAQ,IAAI,EAAE;EAC5B,IAAI,UAAU,KAAA,GAAW,IAAI,IAAI,MAAM,KAAK;CAC9C;CAEA,OAAO;EAAE;EAAK;EAAU;EAAU;EAAO;EAAQ,WAAW,QAAQ;CAAU;AAChF;;;AC3FA,MAAa,wBAAwB,EAAE,OAAO,aAAa,mBAA4B;CACrF,MAAM,WAAW,eAAe;EAC9B,MAAM,YAAqB,QAAQ;EACnC,OAAO,OAAO,EAAE,SAAS,gBAAyC;GAGhE,MAAM,iBAA+B,UAAU,YAAY;IACzD,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,kBAAkB,YAAY,OAAO,SAAS,CAAC;IAC3E,OAAO,KAAK,OAAO;GACrB;GAEA,MAAM,SAASC,gBAAAA,oBAAoB;IACjC;IACA,MAAM;KAAE,MAAM;KAAU,OAAO;KAAI;IAAU;IAC7C,aAAa,EAAE,SAAS,cAAc,YAAY,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;GAC9E,CAAC;GAMD,MAAM,CAAC,OAAO,eAAe,MAAM,QAAQ,IAAI;IAC7C,OAAO,OAAO,OAAO;IACrB,OAAO,SAAS,eAAe;IAC/B,aAAa,SAAS,OAAO;GAC/B,CAAC;GAED,OAAO;IAAE;IAAO,eAAe,oBAAoB,EAAE,YAAY,CAAC;GAAE;EACtE;CACF,CAAC;CAGD,SAAS,WAAW,EAAE,KAAK,aAAa;EACtC,MAAM,SAAS,cAAc,KAAK,MAAM;CAC1C,CAAC;CAED,MAAM,cAAc,EAAE,eAAsB;EAC1C,KAAK,MAAM,WAAW,OAAO,OAAO,QAAQ,GAAG,SAAS,SAAS,OAAO;CAC1E;;;;;CAMA,MAAM,eAAe,YAAqB,SAAS,OAAO,MAAM,aAAa,OAAO,CAAC;;CAGrF,MAAM,UAAU,OAAuB,SAAS,QAAQ,QAAQ,QAAQ,EAAE;CAE1E,OAAO;EACL;EACA,KAAK,SAAS;EACd,UAAU,SAAS;EACnB,OAAO,SAAS;EAChB;EACA;CACF;AACF;;;AC1EA,MAAa,sBAAsB,UAAoB;CACrD,MAAM,WAAW,eAAe;EAC9B,MAAM,YAAqB;EAC3B,QAAQ,YACNC,gBAAAA,oBAAoB;GAAE;GAAS,MAAM;IAAE,MAAM;IAAc,OAAO;GAAG;EAAE,CAAC,CAAC,CAAC,aAAa,EACrF,SAAS,mBACX,CAAC;CACL,CAAC;CAGD,SAAS,WAAW,EAAE,KAAK,aAAa;EACtC,MAAM,OAAO,cAAc,KAAK,MAAM;CACxC,CAAC;CAED,MAAM,cAAc,EAAE,aAAoB;EACxC,KAAK,MAAM,EAAE,aAAa,OAAO,OAAO,MAAM,GAAG,SAAS,SAAS,OAAO;CAC5E;;CAGA,MAAM,UAAU,YAAqB,SAAS,QAAQ,QAAQ,QAAQ,OAAO;CAE7E,OAAO;EACL;EACA,KAAK,SAAS;EACd,UAAU,SAAS;EACnB,OAAO,SAAS;EAChB;CACF;AACF;;;ACCA,MAAM,QAAwC,UAA8B;CAC1E,IAAI,QAAkB;CACtB,aAAc,UAAU,MAAM;AAChC;;;;;;;;;AAUA,MAAa,oBAAoB,EAC/B,OACA,aACA,eACA,OACA,mBACA,eACa;CACb,MAAM,UAAU,qBAAqB;EAAE;EAAO;EAAa,cAAc,MAAM;CAAQ,CAAC;CAIxF,MAAM,aAAa,EAAE,SAAS,gBAAuC;EACnE,MAAM,iBAA+B,UAAU,YAAY;GACzD,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,kBAAkB,YAAY,OAAO,SAAS,CAAC;GAC3E,OAAO,KAAK,OAAO;EACrB;EAEA,QAAQ,SAAS,cAAc,YAAY,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC;CACtE;CAEA,MAAM,gBAAgB,EAAE,SAAS,aAAsB,WACrD,qBAAqB;EACnB;EAEA,MAAM;GAAE,MAAM;GAAU,OAAO;GAAI;EAAU;EAG7C,oBAAoB,cAAyB,YAAY;GACvD,MAAM,YAAY,MAAM,MAAM,QAAQ,SAAS,OAAO;GACtD,MAAM,aAAa,YAAY;IAAE;IAAW;GAAkB,CAAC,CAAC,CAAC,cAAc,SAAS;GAExF,SAAO,YAAY,iBAAiB,QAAQ;GAC5C,OAAO;EACT;EACA;EACA,uBAAuB;CACzB,CAAC;;;;;;;;;;CAWH,MAAM,aAAa,SAAkB,WAAyB;EAC5D,MAAM,YAAY,MAAM,QAAQ,IAAI,QAAQ,OAAO;EACnD,SAAO,WAAW,iBAAiB,QAAQ;EAE3C,MAAM,UAAU,QAAQ,IAAI,QAAQ,EAAE;EACtC,SAAO,SAAS,iBAAiB,QAAQ;EAEzC,MAAM,EAAE,SAAS,cAAc;EAC/B,MAAM,OAAqB;GAAE,MAAM;GAAU,OAAO;GAAI;EAAU;EAIlE,MAAM,SAASC,gBAAAA,oBAAoB;GAAE;GAAS;GAAM,aAAa,CAAC,MAAM;EAAE,CAAC;EAC3E,MAAM,cAAc,kBAAkB;GACpC,cAAc,QAAQ;GACtB,cAAc,OAAO,OAAO,OAAO;EACrC,CAAC;EAED,MAAM,oBAAoB,mBAAmB;GAC3C,QAAQ,YAAY;GACpB,OAAOC,qBAAAA;GACP,YAAY,UAAU;IACpB,uBAAuB,CAAC,KAAK,WAAWC,kBAAAA,eAAe,yBAAyB;IAChF,2BAA2B,KAAK,WAAWA,kBAAAA,eAAe,yBAAyB;IACnF,oBAAoB,KAAK,WAAWA,kBAAAA,eAAe,eAAe;GACpE;EACF,CAAC;EAED,OAAO;GACL,SAASF,gBAAAA,oBAAoB;IAC3B;IACA;IACA,aAAa,cAAc,WAAW,CAAC,QAAQ,YAAY,UAAU,CAAC;GACxE,CAAC;GACD,SAAS;IACP;IACA,OAAO,YAAY;KAAE;KAAW;IAAkB,CAAC;IACnD,eAAe,QAAQ;IAGvB,IAAI,UAAU;KACZ,OAAO,YAAY,WAAW;IAChC;IACA,IAAI,KAAK;KACP,OAAO,kBAAkB,IAAI;IAC/B;GACF;EACF;CACF;CAIA,MAAM,SAAS,YAAqB;EAClC,MAAM,SAAS,UAAU,OAAO;EAChC,MAAM,OAAO,WAAW,UAAU,SAAS,MAAM,CAAC;EAClD,MAAM,UAAU,WAAW,aAAa,SAAS,MAAM,CAAC;EACxD,MAAM,MAAM,WACV,UAAU;GAAE,SAAS,KAAK,CAAC,CAAC;GAAS,UAAU,QAAQ,CAAC,CAAC;GAAQ,SAAS,KAAK,CAAC,CAAC;EAAQ,CAAC,CAC5F;EAEA,OAAO;GACL,KAAK,SAAS,OAAO;GACrB,IAAI,UAAU;IACZ,OAAO,QAAQ;GACjB;GACA,IAAI,UAAU;IACZ,OAAO,KAAK,CAAC,CAAC;GAChB;GACA,IAAI,UAAU;IACZ,OAAO,KAAK,CAAC,CAAC;GAChB;GACA,IAAI,MAAM;IACR,OAAO,IAAI;GACb;EACF;CACF;CAEA,MAAM,0BAAU,IAAI,IAA8C;CAElE,MAAM,OAAO,YAAqB,OAAO,SAAS,QAAQ,UAAU,MAAM,OAAO,CAAC;;CAGlF,MAAM,UAAU,OAAuB;EACrC,QAAQ,OAAO,EAAE;EACjB,QAAQ,OAAO,EAAE;CACnB;CAEA,MAAM,eAAe,YAAqB;EACxC,MAAM,UAAU,MAAM,aAAa,OAAO;EAC1C,KAAK,MAAM,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,EAAE,GAAG,QAAQ,OAAO,EAAE;EAEnE,QAAQ,YAAY,OAAO;CAC7B;CAEA,OAAO;EAAE;EAAS;EAAK;EAAQ;CAAY;AAC7C;;;;;;;;;;AChLA,MAAa,sBAAsB;;;;;;;;;;;AAYnC,MAAM,uBAAuBG,IAAE,mBAAmB,QAAQ,CACxDA,IAAE,OAAO;CAAE,MAAMA,IAAE,QAAQ,OAAO;CAAG,cAAcA,IAAE,OAAO;AAAE,CAAC,GAC/DA,IAAE,OAAO;CAAE,MAAMA,IAAE,QAAQ,QAAQ;CAAG,WAAWA,IAAE,OAAO;AAAE,CAAC,CAC/D,CAAC;;AAGD,MAAM,yBAAyBA,IAAE,OAAO,EAAE,WAAWA,IAAE,OAAO,EAAE,CAAC;AAEjE,MAAM,uBAAuBA,IAAE,OAAO;CACpC,SAASA,IAAE,OAAO;CAElB,YAAY,qBAAqB,SAAS,CAAC,CAAC,MAAM,IAAI;CACtD,UAAUA,IAAE,OAAO,EAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI;CACvF,UAAUA,IAAE,MAAM,sBAAsB;AAC1C,CAAC;AAED,MAAM,yBAAyBA,IAAE,OAAO;CACtC,SAASA,IAAE,OAAO;EAAE,SAASA,IAAE,OAAO;EAAG,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC,CAAC,CAAC,SAAS;CACtF,QAAQA,IAAE,MAAM,oBAAoB;AACtC,CAAC;AAKD,MAAM,0BAA4C;CAAE,SAAS;CAAM,QAAQ,CAAC;AAAE;AAE9E,MAAM,cAAc,UAA6B,YAC/C,OAAO,OAAO,QAAQ,CAAC,CACpB,QAAQ,YAAY,QAAQ,YAAY,OAAO,CAAC,CAChD,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE;AAE3C,MAAM,YAAY,WAAmE;CACnF,YAAY,MAAM,KAAK,WAAW,kBAAkB,MAAM,MAAM,MAAM,KAAK,UAAU,IAAI;CACzF,UAAU,MAAM;AAClB;;;;;;;;AASA,MAAM,iBACJ,QACA,EAAE,QAAQ,QAAQ,gBACI;CACtB,SAAS;EAAE,SAAS,OAAO;EAAS,WAAW,OAAO;CAAU;CAChE,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,cAAc;EACjD,MAAM,OAAO,OAAO,OAAO,MAAM,UAAU,MAAM,YAAY,OAAO;EACpE,OAAO;GACL;GACA,YAAY,MAAM,cAAc;GAChC,UAAU,MAAM,YAAY;GAC5B,UAAU,WAAW,UAAU,OAAO;EACxC;CACF,CAAC;AACH;AAEA,MAAM,eACJ,QACA,SACA,WACqB;CACrB,MAAM,QAAQ,OAAO,OAAO,WAAW,UAAU,MAAM,YAAY,OAAO;CAC1E,MAAM,SAAS,CAAC,GAAG,OAAO,MAAM;CAChC,IAAI,QAAQ,GAAG,OAAO,KAAK,OAAO,KAAA,CAAS,CAAC;MACvC,OAAO,SAAS,OAAO,OAAO,MAAM;CACzC,OAAO;EAAE,GAAG;EAAQ;CAAO;AAC7B;;;;;;;;;AAiBA,MAAa,0BAA0B,YAA6B;CAClE,MAAM,YAAY,gBAAkC;EAClD;EACA,KAAK;EACL,QAAQ;EACR,cAAc;CAChB,CAAC;CAED,MAAM,gBACJ,MACA,SACA,EAAE,QAAQ,eACQ;EAClB,MAAM,QAA2B,OAAO;EACxC,IAAI,UAAU,KAAA,GAAW,OAAO,QAAQ,QAAQ;EAEhD,OAAO,KAAK,QAAQ,WAClB,YAAY,QAAQ,UAAU,cAAc;GAC1C;GACA,GAAG,SAAS,KAAK;GACjB,UAAU,UAAU,YAAY,WAAW,UAAU,OAAO;EAC9D,EAAE,CACJ;CACF;CAEA,MAAM,UAAa,SACjB,UAAU,QAAQ,SAChB,KAAK;EACH,MAAM,KAAK;EACX,eAAe,SAAS,UAAU,aAAa,MAAM,SAAS,KAAK;CACrE,CAAC,CACH;CAEF,IAAI,SAAuB;CAC3B,IAAI,UAAgC;CAGpC,MAAM,YAAY,UAAgC;EAChD,SAAS;EACT,IAAI,SAAS,OAAO;EACpB,MAAM,QAAQ,UAAU,QAAQ,SAAS;GACvC,UAAU;GACV,MAAM,QAAQ,UAAU;GACxB,OAAO,KAAK,QAAQ,WAAW,cAAc,QAAQ,KAAK,CAAC;EAC7D,CAAC;EACD,UAAU;EACV,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;;;;;;;;ACxIA,MAAa,kBAAkB,EAAE,OAAO,aAAa,oBAA6B;CAChF,MAAM,UAAU,mBAAmB,KAAK;CACxC,MAAM,0BAAU,IAAI,IAA2B;CAE/C,MAAM,OAAO,YACX,OAAO,SAAS,gBAAgB;EAC9B,MAAMC,mBAAAA,iBAAiB;GACrB;GACA,aAAa,cAAc,QAAQ,CAAC,YAAY,WAAW,OAAO,CAAC,CAAC;EACtE,CAAC;EACD,YAAYC,mBAAAA,uBAAuB;GACjC;GACA,MAAM;IAAE,MAAM;IAAU,OAAO;GAAG;GAClC,aAAa,cAAc,cAAc,CAAC,YAAY,WAAW,OAAO,CAAC,CAAC;EAC5E,CAAC;CACH,EAAE;CAEJ,MAAM,UAAU,YAAqB;EACnC,QAAQ,OAAO,OAAO;EACtB,QAAQ,OAAO,OAAO;CACxB;CAEA,OAAO;EAAE;EAAS;EAAK;CAAO;AAChC;;;;;;;;ACjBA,MAAa,iBAAiB,EAC5B,gBACA,SACA,aACA,mBACA,gBACoB;CACpB,MAAM,QAAQ,YAAYC,0BAAAA,iBAAiB,cAAc,CAAC;CAC1D,MAAM,YAAY,uBAAuB,OAAO;CAChD,MAAM,gBAAgB,oBAAoB,WAAW;CACrD,MAAM,cAAc,kBAAkB;EACpC;EACA;EACA,aAAa,cAAc,MAAM;EAEjC,cAAc,YAAY,WAAW,YAAY,OAAO;EACxD;CACF,CAAC;CAED,MAAM,WAAW,eAAe;EAAE;EAAO;EAAa;CAAc,CAAC;CACrE,MAAM,aAAa,iBAAiB;EAClC;EACA;EACA;EACA,OAAO;EACP;EAEA,WAAW,YACT,aAAa;GACX,gBAAgB,QAAQ;GACxB,eAAeC,yBAAAA,OAAO,OAAO,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;GAC3D,QAAQ;EACV,CAAC;CACL,CAAC;CAED,MAAM,MAAM,UAAU,SAAS,QAAQ,UAAU;CAEjD,SAAS,QAAQ,WAAW,MAAM,MAAM,IAAI,CAAC;CAC7C,MAAM,MAAM,UAAU,WAAW,QAAQ,UAAU;CAEnD,MAAM,eAAe,YACnBA,yBAAAA,OAAO,OAAO,MAAM,MAAM,YAAYD,0BAAAA,iBAAiB,OAAO,CAAC,CAAC;CAElE,MAAM,iBAAiB,cACrBC,yBAAAA,OAAO,OAAO,MAAM,MAAM,cAAc,SAAS,CAAC;;CAGpD,MAAM,mBAAmB,YACvB,YAAY,KAAA,IAAY,MAAM,MAAM,eAAe,CAAC,CAAC,UAAUD,0BAAAA,iBAAiB,OAAO;;CAGzF,MAAM,uBAAuB,OAC3B,OAAO,KAAA,IACHC,yBAAAA,OAAO,OAAO,MAAM,MAAM,qBAAqB,CAAC,IAChDA,yBAAAA,OAAO,OAAO,MAAM,SAAS,IAAI,EAAE,CAAC;;;;;;CAO1C,MAAM,kBAAkB,cAAmC;EACzD,IAAI,cAAc,KAAA,GAAW,OAAOA,yBAAAA,OAAO,OAAO,MAAM,MAAM,qBAAqB,CAAC;EAEpF,MAAM,SAAS,MAAM,SAAS,IAAI,MAAM,eAAe,gBAAgB,GAAG,SAAS,CAAC;EACpF,IAAI,OAAO,SAAS,OAAO,OAAO;EAElC,MAAM,CAAC,MAAM,GAAG,QAAQ,MAAM,SAAS,QAAQ,SAAS;EACxD,OAAO,SAAS,KAAA,KAAa,KAAK,WAAW,IAAI,OAAOA,yBAAAA,OAAO,OAAO,MAAM;CAC9E;CAEA,MAAM,cAAc,YAA6C;EAC/D,MAAM,aAAaA,yBAAAA,OAAO,OAAO,MAAM,KAAK,kBAAkB,QAAQ,OAAO,CAAC;EAC9E,OAAO;IACJC,0BAAAA,WAAW,gBAAgB,UAAU,WAAW;IAChDC,0BAAAA,kBAAkB,aAAa,OAAO,QAAQ,SAAS;EAC1D;CACF;;;;;;CAOA,MAAM,kBAAkB,cACtB,WAAW,eAAe,SAAS,CAAC;;;;;;;CAQtC,MAAM,sBAAsB,OAAO,cAA2D;EAC5F,MAAM,UAAU,eAAe,SAAS;EACxC,MAAM,YAAY,aAAa,QAAQ,OAAO;EAC9C,OAAO,WAAWF,yBAAAA,OAAO,OAAO,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;CACjE;CAaA,MAAM,gBAAgB,UAA8C;EAClE,IAAI,MAAM,SAAS,SAAS,OAAO;EAEnC,MAAM,EAAE,iBAAiB;EACzB,IAAI,CAAC,cAAc,MAAM,IAAI,aAAa,iBAAiB,gBAAgB;EAC3E,OAAO;GAAE,GAAG;GAAO;EAAa;CAClC;CAEA,MAAM,gBAAgB,UAAoC;EACxD,MAAM,EAAE,YAAY,MAAM,MAAM,eAAe;EAC/C,MAAM,WAAWA,yBAAAA,OAAO,OAAO,MAAM,KAAK,aAAa,SAAS,aAAa,KAAK,CAAC,CAAC;EACpF,UACG,QAAQ,UAAU,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,CACjE,OAAO,UAAmB;GACzB,QAAQ,KAAK,kDAAkD,KAAK;EACtE,CAAC;EACH,OAAO;CACT;;;;;;;CAQA,MAAM,gBAAgB,YAMpB,IAAI,MAAM,CAAC,GAAiB,EAC1B,MAAM,SAAS,aAAa;EAC1B,IAAI,kBAAkB,QAAQ,GAAG,OAAO,KAAA;EAExC,IAAI,aAAa,UAAU,aAAa,cAAc;GACpD,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;GACpC,OAAO,SAAS,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC;EAC1C;EAEA,MAAM,UAAU,WAAW,IAAI,QAAQ,QAAQ,CAAC;EAChD,IAAI,aAAa,WAAW,OAAO,QAAQ;EAC3C,IAAI,aAAa,WAAW,OAAO,QAAQ;EAC3C,IAAI,aAAa,OAAO,OAAO,QAAQ;EAEvC,MAAM,EAAE,QAAQ,SAAS,QAAQ;EACjC,IAAI,aAAa,eAAe,OAAO;EAEvC,OAAO,OAAO;CAChB,EACF,CAAC;CAGH,MAAM,YAAY,aAAa;EAC7B,gBAAgB,MAAM,MAAM,eAAe,CAAC,CAAC;EAC7C,eAAeA,yBAAAA,OAAO,OAAO,MAAM,MAAM,qBAAqB,CAAC;CACjE,CAAC;;CAGD,MAAM,qBAAiC;;;;;;;CAQvC,MAAM,UAAU,cAAqC;EACnD,MAAM,EAAE,YAAY,MAAM,MAAM,eAAe;EAC/C,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS;EAIhD,yBAAA,OAAO,SAAS,MAAM,SAAS,KAAK,SAAS,SAAS,GAAG,IAAI;EAE7D,OAAO,WAAW,IAAI,OAAO,CAAC,CAAC;CACjC;;;;;;;;;CAUA,MAAM,WAAW,EACf,SACA,GAAG,YACsC,CAAC,MAAsB;EAChE,MAAM,SAAS,gBAAgB,OAAO;EAGtC,MAAM,YAAYA,yBAAAA,OAAO,OAAO,YAAY,QAAQ,QAAQ,OAAO,CAAC;EACpE,OAAO,UACJ,QAAQ,UAAU,MAAM,aAAa,QAAQ,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,CAChE,WAAW,SAAS;CACzB;;CAGA,MAAM,mBAAmB,YACvB,YAAY,gBAAgBD,0BAAAA,iBAAiB,OAAO,CAAC;;;;;;;CAQvD,MAAM,WAAW,UAAoC;EACnD,QAAa;EACb,OAAO,aAAa,KAAK;CAC3B;;;;;;CAOA,MAAM,gBAAgB,cAAyC;EAC7D,MAAM,KAAK,MAAM,eAAe,gBAAgB,GAAG,SAAS;EAC5D,MAAM,SAASC,yBAAAA,OAAO,SAAS,MAAM,SAAS,MAAM,EAAE,GAAG,IAAI;EAC7D,IAAI,WAAW,MAAM,OAAO;EAE5B,WAAW,OAAO,EAAE;EACpB,OAAO;CACT;CAGA,MAAM,cAAc,YAAkC;EACpD,MAAM,SAASD,0BAAAA,iBAAiB,OAAO;EACvC,IAAI,MAAM,MAAM,IAAI,CAAC,CAAC,YAAY,QAAQ,MAAM,IAAI,aAAa,iBAAiB,WAAW;EAE7F,MAAM,SAASC,yBAAAA,OAAO,SAAS,MAAM,OAAO,MAAM,MAAM,GAAG,IAAI;EAC/D,IAAI,WAAW,MAAM,OAAO;EAG5B,WAAW,YAAY,MAAM;EAC7B,SAAS,OAAO,MAAM;EAEtB,YAAY,OAAO,MAAM;EAEzB,OAAO;CACT;CAEA,IAAI,aAAa;;;;;;;;CAQjB,MAAM,0BAA0B;EAE9B,IAAI,YAAY;EAChB,aAAa;EAEb,SAAS,MAAM,MAAM,IAAI,CAAC;EAC1B,MAAM,MAAM,UAAU,QAAQ;CAChC;CAEA,MAAM,YAAY,UAAuB;EACvC,UAAU,SAAS,KAAK,CAAC,CAAC,OAAO,UAAmB;GAClD,QAAQ,KAAK,kDAAkD,KAAK;EACtE,CAAC;CACH;CAGA,MAAM,qBACJ,aAAa,UAAU,SAAS,MAAM,MAAM,IAAI,CAAC,IAAI,QAAQ,QAAQ;;;;;;;CAQvE,MAAM,kCAAkC;EACtC,MAAM,OAAO,MAAM,MAAM,WAAW,SAAS;GAC3C,IAAI,CAAC,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,KAAK,WAAW,eAAe,GAAG;GAErF,KAAK;GACL,kBAAkB;EACpB,CAAC;CACH;CAIA,MAAM,UAAUG,yBAAAA,WACd,YAAY,QAAQ,CAAC,CAAC,MACnB,aAAa;EACZ,IAAI,SAAS,WAAW,eAAe,0BAA0B;OAC5D,kBAAkB;EAEvB,OAAO;CACT,IACC,UAAmB;EAGlB,0BAA0B;EAC1B,MAAM;CACR,CACF,CACF;CAEA,MAAM,iBAAiB,MAAM,MAAM;CAEnC,MAAM,wBAAwB,eAAe,CAAC,CAAC,KAAK,WAAW;;;;;;;;;;;CAY/D,MAAM,SAASA,yBAAAA,WACb,QAAQ,CAAC,CAAC,MAAM,EAAE,YAAY,aAA4B;EACxD,IAAI,CAAC,cAAc,cAAc,OAAO;EAExC,MAAM,QAAQ,YAAY,WAAW,OAAO;EAC5C,IAAI,WAAW,cAAc,QAAQ,MAAM,KAAK,WAAW,iBACzD,cAAc,WAAW,SAAS;EAEpC,OAAO;CACT,CAAC,CACH;CAIA,IAAI,eAAe;CACnB,MAAM,YACqB,UACxB,GAAG,SAAe;EACjB,eAAe;EACf,OAAO,KAAK,GAAG,IAAI;CACrB;CAEF,OAAO;EACL;EACA;EACA,SAAS;GACP,UAAU,MAAM,MAAM;GACtB,WAAW,MAAM,MAAM;GACvB;GAEA,OAAO;IACL,WAAW;;IAEX,QAAQ,UAAU,YAAoC;KACpD,MAAM,QAAQ,YAAY,OAAO;KACjC,OAAO,aAAa,CAAC,CAAC,WAAW,KAAK;IACxC,CAAC;IACD,OAAO;IACP,cAAc,SAAS,QAAQ;IAC/B,aAAa,YAAqB,SAAS,QAAQ,IAAI,gBAAgB,OAAO,CAAC;IAC/E,kBAAkB,YAAqB,SAAS,QAAQ,SAAS,gBAAgB,OAAO,CAAC;GAC3F;GAEA,SAAS;;IAEP,QAAQ,UAAU,cAA2C;KAC3D,MAAM,UAAU,cAAc,SAAS;KACvC,OAAO,aAAa,CAAC,CAAC,WAAW,OAAO;IAC1C,CAAC;IACD,OAAO;IAEP,YAAY,MAAM,MAAM;IAExB,cAAc,WAAW,QAAQ;IACjC,aAAa,OAAwB,WAAW,QAAQ,IAAI,MAAM,oBAAoB,CAAC,CAAC,EAAE;IAG1F,kBAAkB,OAChB,WAAW,QAAQ,SAAS,oBAAoB,EAAE,CAAC;GACvD;GAEA,MAAM;IACJ,cAAc,SAAS,YAAY;IACnC,SAAS,SAAS,OAAO;IACzB,SAAS,SAAS,OAAO;IACzB,iBAAiB,SAAS,eAAe;;IAEzC;IACA,4BAA4B,OAAO,CAAC,CAAC,KAAK,eAAe;IACzD,SAAS,YAAoB,YAAY,OAAO,OAAO,CAAC,CAAC,KAAKH,yBAAAA,OAAO,MAAM;IAC3E,YAAY;IACZ,iBAAiB;GACnB;EACF;CACF;AACF;;;ACjbA,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B,CAAC,GAAGI,0BAAAA,oBAAoB,YAAY;AAEpE,MAAM,+CAA+B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,kBAAkB,WAA2B;CACjD,MAAM,MAAM,IAAI,IAAI,MAAM;CAC1B,IAAI,IAAI,UAAU,IAAI,WAAWC,0BAAAA;CACjC,IAAI,IAAI,UAAU,IAAI,WAAWA,0BAAAA;CAEjC,IAAI,aAAa,SAAS,QAAQ,QAAQ;EACxC,IAAI,6BAA6B,IAAI,IAAI,YAAY,CAAC,GACpD,IAAI,aAAa,IAAI,KAAKA,0BAAAA,QAAQ;CAEtC,CAAC;CACD,OAAO,IAAI,SAAS;AACtB;AAQA,MAAM,uBAAuB,YAA6B;CACxD,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,qBAAqB,KAAKC,qBAAAA,aAAa;CACjF,QAAQ,QAAQ,IAAI,uBAAuB,aAAa;CACxD,OAAO;AACT;AAEA,MAAM,sBAAsB,SAAkB,aAC5CC,0BAAAA,cAAc,SAAS,CAAC,GAAG,yBAAyB,GAAG,QAAQ,CAAC;AA2ClE,MAAM,iBAAiB,SAAkB,qBAA2C;CAClF,KAAK,eAAe,QAAQ,GAAG;CAC/B,SAAS,mBAAmB,QAAQ,SAAS,eAAe;AAC9D;AAEA,MAAM,kBAAkB,UAAoB,qBAA4C;CACtF,QAAQ,SAAS;CACjB,YAAY,SAAS;CACrB,SAAS,mBAAmB,SAAS,SAAS,eAAe;AAC/D;AAMA,MAAM,kBAAkB,OAAiB,oBACvC,IAAIC,0BAAAA,SAAS;CACX,SAAS,IAAI,QAAQ,eAAe,MAAM,QAAQ,GAAG,GAAG;EACtD,QAAQ,MAAM,QAAQ;EACtB,SAAS,mBAAmB,MAAM,QAAQ,SAAS,eAAe;CACpE,CAAC;CACD,UAAU,IAAI,SAAS,MAAM;EAC3B,QAAQ,MAAM,SAAS;EACvB,YAAY,MAAM,SAAS;EAC3B,SAAS,mBAAmB,MAAM,SAAS,SAAS,eAAe;CACrE,CAAC;CACD,MAAM,MAAM;AACd,CAAC;AAEH,MAAM,aAAa,OAAyB,QAAqB;CAC/D,MAAM,QAAQ;EAAC,IAAI,MAAM,YAAY,EAAE;EAAI,GAAG,KAAK,MAAM,IAAI,UAAU,EAAE;EAAK,IAAI;CAAM;CACxF,MAAM,KAAK,IAAI,QAAQ,GAAG;CAC1B,IAAI,cAAc,KAAK,MAAM,KAAK,OAAO,IAAI,SAAS,MAAM,CAAC;CAC7D,OAAO,MAAM,KAAK,GAAG;AACvB;AAEA,MAAM,oBAAoB,QAAiB,QAAkB,iBAAmC;CAC9F,OAAO;EACL,OAAO,QAAQ;GACb,IAAI,UAAU,OAAO;GACrB,IAAI;IACF,IAAI,QAAQ,MAAM;KAChB,OAAO,KAAK,GAAG;KACf;IACF;IAEA,QAAQ,KAAK,UAAU,QAAQ,GAAG,CAAC;GACrC,QAAQ,CAER;EACF;EACA,QAAQ,QAAQ;GACd,IAAI;IACF,IAAI,QAAQ,OAAO;KACjB,OAAO,MAAM,GAAG;KAChB;IACF;IAEA,QAAQ,MAAM,UAAU,SAAS,GAAG,CAAC;GACvC,QAAQ,CAER;EACF;CACF;AACF;AAEA,MAAa,2BAA2B,UAA0B,CAAC,MAAoB;CACrF,MAAM,aAAa,iBAAiB,QAAQ,QAAQ,QAAQ,KAAK;CACjE,MAAM,gBAAgB,QAAQ,iBAAiB,CAAC;CAEhD,QAAQ,SAAS,OAAO,iBAAiB;EACvC,MAAM,gBAAgB,oBAAoB,aAAa,OAAO;EAC9D,MAAM,QAAQ,YAAY,IAAI;EAC9B,MAAM,SAAS,aAAa,QAAQ,OAAO,YAAY;EACvD,MAAM,aAAa,cAAc,aAAa,SAAS,aAAa;EAEpE,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,YAAY;GACtC,WAAW,KAAK;IACd;IACA;IACA,YAAY,YAAY,IAAI,IAAI;IAChC,SAAS;IACT,UAAU,eAAe,OAAO,UAAU,aAAa;GACzD,CAAC;GACD,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,OACnB,WAAW,MAAM;IACf;IACA;IACA,YAAY,YAAY,IAAI,IAAI;IAChC,SAAS;IACT,OAAOC,0BAAAA,WAAW,KAAK,IAAI,eAAe,OAAO,aAAa,IAAI;GACpE,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;AC7LA,MAAM,sBAAsB;AAC5B,MAAM,6BAAuC;CAC3CC,0BAAAA,WAAW;CACXA,0BAAAA,WAAW;CACXA,0BAAAA,WAAW;CACXA,0BAAAA,WAAW;AACb;AACA,MAAM,yBAAyB;AAQ/B,MAAM,sBAAsB,UAC1B,iBAAiBC,0BAAAA,YAAY,2BAA2B,SAAS,MAAM,SAAS,MAAM;AAExF,MAAa,yBAAyB,YAAyC;CAC7E,MAAM,EACJ,aAAa,qBACb,gBAAgB,wBAChB,cAAc,uBACZ,WAAW,CAAC;CAEhB,IAAI,CAAC,OAAO,UAAU,UAAU,KAAK,aAAa,GAChD,MAAM,IAAI,WAAW,2CAA2C;CAElE,IAAI,CAAC,OAAO,SAAS,aAAa,KAAK,gBAAgB,GACrD,MAAM,IAAI,WAAW,oDAAoD;CAG3E,QAAQ,SAAS,OAAO,YAAY;EAClC,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAC3C,IAAI;GACF,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS,QAAQ,QAAQ,MAAM;GAAE,CAAC;EACpE,SAAS,OAAO;GACd,IAAI,YAAY,cAAc,CAAC,YAAY,OAAO,OAAO,GACvD,MAAM;GAGR,MAAM,UAAU,gBAAgB,MAAO,KAAK,IAAI,GAAG,OAAO;GAC1D,MAAMC,yBAAAA,MAAM,SAAS,QAAQ,QAAQ,UAAU,KAAA,CAAS;EAC1D;EAGF,MAAM,IAAI,MAAM,aAAa;CAC/B;AACF;;;;ACjDA,MAAa,6BAA6B,cAAuD;CAC/F,IAAI,CAAC,WAAW,QAAQ,SAAS;CAEjC,QAAQ,SAAS,OAAO,YAAY;EAClC,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,kBAAkB,YAAY,SAAS;EACnE,OAAO,KAAK,OAAO;CACrB;AACF;;;;;;;;;ACCA,MAAa,sBAAsB,EAAE,sBAA+B;CAClE,MAAM,OAAO,iBAAiB;CAC9B,MAAM,kBAAkB,IAAI,IAAI,MAAM,YAAY,CAAC,CAAC;CAEpD,MAAM,mBAAmB,GAAG,YAAsB;EAChD,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,gBAAgB,IAAI,CAAC,CAAC;CACpD;CAEA,MAAM,sBAAsB,GAAG,YAAsB,QAAQ,MAAM,MAAM,gBAAgB,IAAI,CAAC,CAAC;CAE/F,OAAO;EACL,cAAc,MAAM,gBAAgB;EACpC;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"index.cjs","names":["assert","createStore","createStore","createStore","clamp","finiteOr","isPlainObject","createStore","ServiceId","createTagSdk","createSemanticLayerSdk","createKaiMemorySdk","createVaultSdk","ServiceUnavailableError","createVaultClient","createDataScienceClient","createAppsClient","createEncryptionClient","createEditorClient","createSyncActionsClient","createTelemetryClient","createQueryServiceClient","createQueueClient","createChatClient","createAiClient","createOmnisearchClient","createImportClient","createKaiAgentClient","createComponentsMcpClient","createOauthClient","createSchedulerClient","createStreamClient","createNotificationsClient","createBillingClient","createMetastoreClient","KeboolaHttpHeader","createStorageClient","normalizeBaseUrl","createAuthClient","createManagementClient","Result","Result","createStore","Result","createAuthClient","isUnauthorized","dedupe","createBearerAuthMiddleware","KeboolaHttpHeader","createStorageClient","z","createStorageClient","createAuthClient","createManagementClient","normalizeBaseUrl","Result","HttpHeader","KeboolaHttpHeader","lazy","CREDENTIAL_HEADERS","REDACTED","generateUUID","redactHeaders","ApiError","isApiError","HttpStatus","ApiError","delay","KeboolaHttpHeader"],"sources":["../src/keboola/errors.ts","../src/utils/assert.ts","../src/utils/ensure.ts","../src/utils/async/coalesce.ts","../src/utils/store/derivedStore.ts","../src/utils/store/derivedAsyncStore.ts","../src/utils/async/poll/registry.ts","../src/utils/async/queueSeries.ts","../src/utils/deepMerge.ts","../src/utils/persistor/adapters.ts","../src/utils/persistor/persistor.ts","../src/serviceClientRegistry/utils.ts","../src/serviceClientRegistry/createServiceClientRegistry.ts","../src/keboola/createApi.ts","../src/keboola/createMiddlewareFor.ts","../src/keboola/legacy/createConfig.ts","../src/domain/stack.ts","../src/sdks/variables/variablesSdk.ts","../src/keboola/createSdk.ts","../src/keboola/createServiceClients.ts","../src/keboola/legacy/createProjectClients.ts","../src/keboola/legacy/keboola.ts","../src/keboola/bearer/state/auth.ts","../src/keboola/bearer/state/stacks.ts","../src/keboola/bearer/state/state.ts","../src/keboola/bearer/credentials/credentials.ts","../src/keboola/bearer/perProject.ts","../src/keboola/bearer/persistor.ts","../src/keboola/bearer/context.ts","../src/keboola/bearer/perStack.ts","../src/keboola/bearer/keboola.ts","../src/middlewares/loggingMiddleware.ts","../src/middlewares/retryMiddleware.ts","../src/middlewares/uiVersionMiddleware.ts","../src/domain/adminAccount.ts","../src/domain/defaultBranch.ts"],"sourcesContent":["/**\n * The single error the keboola client / session throws. It carries a stable `type` (the switchable\n * contract) and a human-readable message derived from that type — no per-call message strings.\n */\nexport const KeboolaErrorType = {\n  Unconfigured: 'unconfigured',\n  NotAuthenticated: 'not-authenticated',\n  SignInEnded: 'sign-in-ended',\n  AlreadyAuthenticated: 'already-authenticated',\n  NoStorageToken: 'no-storage-token',\n  NoManagementToken: 'no-management-token',\n  MissingProject: 'missing-project',\n  NotBearer: 'not-bearer',\n  NotReady: 'not-ready',\n  InvalidBuildTransition: 'invalid-build-transition',\n} as const;\n\nexport type KeboolaErrorType = (typeof KeboolaErrorType)[keyof typeof KeboolaErrorType];\n\nconst MESSAGES: Record<KeboolaErrorType, string> = {\n  [KeboolaErrorType.Unconfigured]: 'The session is not configured — set a baseUrl first.',\n  [KeboolaErrorType.NotAuthenticated]: 'The session is not authenticated — sign in first.',\n  [KeboolaErrorType.SignInEnded]:\n    'The sign-in this operation started under has ended — its result belongs to nobody.',\n  [KeboolaErrorType.AlreadyAuthenticated]:\n    'The session is already authenticated — reset before authenticating again.',\n  [KeboolaErrorType.NoStorageToken]: 'No storage token — authenticate the storage realm first.',\n  [KeboolaErrorType.NoManagementToken]:\n    'No management token — authenticate the management realm first.',\n  [KeboolaErrorType.MissingProject]:\n    'A bearer storage session requires a project — call setProject(projectId) first.',\n  [KeboolaErrorType.NotBearer]: 'This operation requires a bearer (OAuth) session.',\n  [KeboolaErrorType.NotReady]: 'The client is not ready — authenticate the storage realm first.',\n  [KeboolaErrorType.InvalidBuildTransition]:\n    'Invalid storage build transition — the build goes idle → initializing → ready | failed.',\n};\n\nexport class KeboolaError extends Error {\n  readonly type: KeboolaErrorType;\n\n  constructor(type: KeboolaErrorType) {\n    super(MESSAGES[type]);\n    this.type = type;\n    this.name = 'KeboolaError';\n    Object.setPrototypeOf(this, KeboolaError.prototype);\n  }\n}\n\nexport const isKeboolaError = (error: unknown): error is KeboolaError =>\n  error instanceof KeboolaError;\n\n/** Throw a {@link KeboolaError} of `type` when `value` is null/undefined; otherwise narrow it. */\nexport function assert<T>(value: T | null | undefined, type: KeboolaErrorType): asserts value is T {\n  if (value == null) throw new KeboolaError(type);\n}\n","export function assert<T>(value: T | undefined | null, message: string): asserts value is T {\n  if (value == null) {\n    throw new Error(message);\n  }\n}\n","/**\n * Read a key, or build its value and keep it.\n *\n * `Map.prototype.getOrInsertComputed` is this natively — swap to it once it clears the app's\n * `baseline-widely-available` build target. Vite transpiles syntax, not methods, so adopting it\n * early fails in the browser rather than at build.\n */\nexport const ensure = <K, V extends NonNullable<unknown>>(\n  map: Map<K, V>,\n  key: K,\n  build: () => V,\n): V => {\n  const existing = map.get(key);\n  if (existing !== undefined) return existing;\n\n  const created = build();\n  map.set(key, created);\n\n  return created;\n};\n","import type { TaskFn } from './types';\n\n/**\n * Coalesces concurrent triggers onto a single, never-parallel run of `task`.\n *\n * - Triggers fired while a run is busy collapse into one trailing run.\n * - Each trigger resolves with the first run started after it, so it never sees stale state.\n * - The returned promise rejects with whatever `task` throws.\n */\nexport const coalesce = <T>(task: TaskFn<T>): (() => Promise<Awaited<T>>) => {\n  let running = false;\n  const waiters: PromiseWithResolvers<Awaited<T>>[] = [];\n\n  const drain = async () => {\n    running = true;\n    const batch = waiters.splice(0);\n\n    try {\n      const result = await task();\n      batch.forEach((waiter) => waiter.resolve(result));\n    } catch (error) {\n      batch.forEach((waiter) => waiter.reject(error));\n    }\n    // Tail call, so draining mid-run triggers never grows the stack.\n    if (waiters.length > 0) return drain();\n    running = false;\n  };\n\n  return () => {\n    const waiter = Promise.withResolvers<Awaited<T>>();\n    waiters.push(waiter);\n    if (!running) void drain();\n    return waiter.promise;\n  };\n};\n","import { createStore, type ReadableStore } from './store';\n\nconst isPlainObjectOrArray = (value: object): boolean => {\n  if (Array.isArray(value)) return true;\n  const proto = Object.getPrototypeOf(value);\n  return proto === Object.prototype || proto === null;\n};\n\nexport const shallowEqual = <T>(a: T, b: T): boolean => {\n  if (Object.is(a, b)) return true;\n  if (typeof a !== 'object' || a === null || typeof b !== 'object' || b === null) return false;\n  if (!isPlainObjectOrArray(a) || !isPlainObjectOrArray(b)) return false;\n  const aKeys = Object.keys(a) as (keyof T)[];\n  const bKeys = Object.keys(b) as (keyof T)[];\n  return aKeys.length === bKeys.length && aKeys.every((key) => Object.is(a[key], b[key]));\n};\n\ntype DerivedStoreOptions<S, K, T> = {\n  source: ReadableStore<S>;\n  dependsOn: (state: S) => K;\n  build: (key: K) => T;\n  keyEquals?: (a: K, b: K) => boolean;\n};\n\nexport const createDerivedStore = <S, K, T>({\n  source,\n  dependsOn,\n  build,\n  keyEquals = shallowEqual,\n}: DerivedStoreOptions<S, K, T>): ReadableStore<T> => {\n  let key = dependsOn(source.get());\n  const store = createStore(build(key));\n\n  // The source subscription lives for the derived store's lifetime (both normally live as long as\n  // the client). `dispose()` tears down both it and the derived store, so a short-lived derived\n  // store can be cleaned up without leaking the source subscription or taking stale updates.\n  const unsubscribe = source.subscribe((state) => {\n    const next = dependsOn(state);\n    if (keyEquals(key, next)) return;\n    key = next;\n    store.set(build(next));\n  });\n\n  const get = store.get;\n\n  const subscribe = store.subscribe;\n\n  const dispose = () => {\n    unsubscribe();\n    store.dispose();\n  };\n\n  return { get, subscribe, dispose };\n};\n","import { shallowEqual } from './derivedStore';\nimport { createStore, type ReadableStore } from './store';\n\nexport type AsyncState<T> =\n  | { state: 'idle' }\n  | { state: 'pending' }\n  | { state: 'ready'; value: T }\n  | { state: 'errored'; error: unknown };\n\n// The terminal states `settled()` resolves with.\ntype SettledState<T> = Extract<AsyncState<T>, { state: 'ready' } | { state: 'errored' }>;\n\ntype DerivedAsyncStoreOptions<S, K, T> = {\n  source: ReadableStore<S>;\n  dependsOn: (state: S) => K | null;\n  build: (key: K, signal: AbortSignal) => Promise<T>;\n  keyEquals?: (a: K, b: K) => boolean;\n};\n\n// Async sibling of `createDerivedStore`: an `AsyncState<T>` cell for a value that arrives later.\n// - Only the latest run writes state; a re-key or `null` key aborts the previous run's `signal`.\n// - `dependsOn` returning `null` means nothing to build → `idle`.\n// - The source subscription is permanent for the store's lifetime.\n// - `settled()` resolves with the next `ready`/`errored` state (at once if terminal); never rejects.\nexport const createDerivedAsyncStore = <S, K, T>({\n  source,\n  dependsOn,\n  build,\n  keyEquals = shallowEqual,\n}: DerivedAsyncStoreOptions<S, K, T>): {\n  store: ReadableStore<AsyncState<T>>;\n  settled: () => Promise<SettledState<T>>;\n} => {\n  const store = createStore<AsyncState<T>>({ state: 'idle' });\n  let currentKey: K | null = null;\n  let generation = 0;\n  let controller: AbortController | null = null;\n\n  const run = (key: K) => {\n    controller?.abort();\n    controller = new AbortController();\n    const runGeneration = ++generation;\n    store.set({ state: 'pending' });\n    // The reject handler consumes every rejection, including a superseded run's AbortError.\n    build(key, controller.signal).then(\n      (value) => {\n        if (runGeneration === generation) store.set({ state: 'ready', value });\n      },\n      (error) => {\n        if (runGeneration === generation) store.set({ state: 'errored', error });\n      },\n    );\n  };\n\n  const sync = (state: S) => {\n    const next = dependsOn(state);\n    if (next === null) {\n      if (currentKey === null) return;\n      controller?.abort();\n      controller = null;\n      generation += 1;\n      currentKey = null;\n      store.set({ state: 'idle' });\n      return;\n    }\n    if (currentKey !== null && keyEquals(currentKey, next)) return;\n    currentKey = next;\n    run(next);\n  };\n  sync(source.get());\n\n  const unsubscribe = source.subscribe(sync);\n\n  const get = store.get;\n\n  const subscribe = store.subscribe;\n\n  const dispose = () => {\n    controller?.abort();\n    unsubscribe();\n    store.dispose();\n  };\n\n  const readable: ReadableStore<AsyncState<T>> = { get, subscribe, dispose };\n\n  const settled = (): Promise<SettledState<T>> =>\n    new Promise<SettledState<T>>((resolve) => {\n      let unsubscribeSettled = () => {};\n      const check = (state: AsyncState<T>) => {\n        if (state.state === 'ready' || state.state === 'errored') {\n          unsubscribeSettled();\n          resolve(state);\n        }\n      };\n      unsubscribeSettled = store.subscribe(check);\n      check(store.get());\n    });\n\n  return { store: readable, settled };\n};\n","import { createStore } from '../../store';\n\nimport { emitter, type ObservedPoller, type Poller, type PollSnapshot } from './poll';\nimport { clamp, finiteOr } from './utils';\n\nconst DEFAULT_LIMIT = 50;\n\nexport type PollEntry = {\n  /** Monotonic, so a list has a key that outlives a re-render. */\n  key: number;\n  startedAt: number;\n  snapshot: PollSnapshot;\n  stop: Poller<unknown>['stop'];\n  start: Poller<unknown>['start'];\n};\n\nexport type PollRegistry = {\n  list: () => PollEntry[];\n  subscribe: (listener: () => void) => () => void;\n  clear: () => void;\n  stopAll: (reason?: string) => void;\n  collect: () => void;\n};\n\nconst isFinished = ({ snapshot }: PollEntry) =>\n  snapshot.state !== 'idle' && snapshot.state !== 'requesting' && snapshot.state !== 'polling';\n\nexport const createPollRegistry = ({ limit = DEFAULT_LIMIT } = {}): PollRegistry => {\n  const entries = createStore<PollEntry[]>([]);\n  const unsubscribes = new Map<number, () => void>();\n\n  const maxEntries = clamp(finiteOr(limit, DEFAULT_LIMIT), 1);\n  let nextKey = 1;\n\n  const forget = (key: number) => {\n    unsubscribes.get(key)?.();\n    unsubscribes.delete(key);\n  };\n\n  const trim = (list: PollEntry[]) => {\n    let kept = list;\n\n    while (kept.length > maxEntries) {\n      const dropped = kept.findLast(isFinished) ?? kept.at(-1);\n\n      if (!dropped) break;\n\n      forget(dropped.key);\n      kept = kept.filter((entry) => entry !== dropped);\n    }\n\n    return kept;\n  };\n\n  const replace = (key: number, snapshot: PollSnapshot) =>\n    entries.set(entries.get().map((entry) => (entry.key === key ? { ...entry, snapshot } : entry)));\n\n  const register = (poller: ObservedPoller) => {\n    const key = nextKey++;\n    const entry: PollEntry = {\n      key,\n      startedAt: Date.now(),\n      snapshot: poller.debug(),\n      stop: poller.stop,\n      start: poller.start,\n    };\n\n    unsubscribes.set(\n      key,\n      poller.subscribe((snapshot) => replace(key, snapshot)),\n    );\n    entries.set(trim([entry, ...entries.get()]));\n  };\n\n  const collect = () => {\n    emitter.subscribe(register);\n  };\n\n  return {\n    list: entries.get,\n    collect,\n    subscribe: (listener) => entries.subscribe(() => listener()),\n    clear: () => {\n      entries.get().forEach(({ key }) => forget(key));\n      entries.set([]);\n    },\n    stopAll: (reason) => entries.get().forEach((entry) => entry.stop(reason)),\n  };\n};\n","type Task<T> = () => T | PromiseLike<T>;\n\nconst isPromiseLike = <T>(value: T | PromiseLike<T>): value is PromiseLike<T> =>\n  ((typeof value === 'object' && value !== null) || typeof value === 'function') &&\n  'then' in value &&\n  typeof value.then === 'function';\n\n/**\n * Queues tasks added over time so a slower earlier task cannot finish after and overwrite a later one.\n * Each `add` returns its task's result; a rejection does not stop the remaining queue.\n */\nexport const queueSeries = () => {\n  let tail: Promise<void> | null = null;\n\n  const add = <T>(task: Task<T>): Promise<T> => {\n    if (tail !== null) {\n      const result = tail.then(task);\n      tail = result.then(\n        () => undefined,\n        () => undefined,\n      );\n      return result;\n    }\n\n    let value: T | PromiseLike<T>;\n    try {\n      value = task();\n    } catch (error) {\n      return Promise.reject(error);\n    }\n\n    if (!isPromiseLike(value)) return Promise.resolve(value);\n\n    const result = Promise.resolve(value);\n    tail = result.then(\n      () => undefined,\n      () => undefined,\n    );\n    return result;\n  };\n\n  const onIdle = async (): Promise<void> => {\n    while (tail !== null) {\n      const current = tail;\n      await current;\n      if (tail === current) {\n        tail = null;\n        return;\n      }\n    }\n  };\n\n  return { add, onIdle };\n};\n","import { isPlainObject } from './isPlainObject';\n\n/**\n * Recursively merge `patch` into `base`. Plain-object values are merged key-by-key; every\n * other value (primitives, arrays, or a type mismatch between the two sides) replaces the\n * base value. `undefined` patch values are skipped, so a partial patch leaves untouched\n * fields alone. Pure — neither argument is mutated; the result preserves `base`'s type.\n */\nexport const deepMerge = <T extends Record<string, unknown>>(\n  base: T,\n  patch: Record<string, unknown>,\n): T => {\n  const out: Record<string, unknown> = { ...base };\n\n  for (const [key, value] of Object.entries(patch)) {\n    if (value === undefined) continue;\n    const current = out[key];\n    out[key] = isPlainObject(current) && isPlainObject(value) ? deepMerge(current, value) : value;\n  }\n\n  return out as T;\n};\n","// Minimal key/value contract — the Web Storage shape (`localStorage`/`sessionStorage`) narrowed to\n// what a persistor needs. Framework- and environment-agnostic; a method may answer with a promise.\nexport type StorageAdapter = {\n  getItem: (key: string) => string | null | Promise<string | null>;\n  setItem: (key: string, value: string) => void | Promise<void>;\n  removeItem: (key: string) => void | Promise<void>;\n  withLock?: <T>(name: string, task: () => Promise<T>) => Promise<T>;\n};\n\n// Persist nowhere: reads always miss, writes are dropped. The default when no storage is configured,\n// so a persistor is always constructable and simply becomes a no-op.\nexport const createNullStorage = (): StorageAdapter => ({\n  getItem: () => null,\n  setItem: () => {},\n  removeItem: () => {},\n});\n\n// In-process Map, living for the lifetime of the process. The Node default and the fallback the\n// Web Storage adapters degrade to when `localStorage`/`sessionStorage` is unavailable (SSR).\nexport const createMemoryStorage = (): StorageAdapter => {\n  const store = new Map<string, string>();\n  return {\n    getItem: (key) => store.get(key) ?? null,\n    setItem: (key, value) => {\n      store.set(key, value);\n    },\n    removeItem: (key) => {\n      store.delete(key);\n    },\n  };\n};\n\n// Wrap a Web Storage instance, degrading to memory when it is absent OR unusable. Merely accessing\n// the global (sandboxed iframe) or calling its methods (privacy mode, disabled/blocked storage) can\n// throw, so a canary write probes real usability at construction; any failure falls back to an\n// in-memory store so persistence never crashes the caller. Resolution happens when the factory is\n// called (not at import), so importing this module never touches browser globals.\nconst createWebStorage = (pick: () => Storage | null): StorageAdapter => {\n  let web: Storage | null = null;\n  try {\n    web = pick();\n    if (web) {\n      const probe = '__keboola_storage_probe__';\n      web.setItem(probe, probe);\n      web.removeItem(probe);\n    }\n  } catch (err) {\n    console.warn('createWebStorage: web storage unavailable, falling back to memory', err);\n    web = null;\n  }\n  if (!web) return createMemoryStorage();\n\n  const storage = web;\n  return {\n    getItem: (key) => storage.getItem(key),\n    setItem: (key, value) => {\n      storage.setItem(key, value);\n    },\n    removeItem: (key) => {\n      storage.removeItem(key);\n    },\n    withLock: async <T>(name: string, task: () => Promise<T>): Promise<T> => {\n      if (typeof navigator === 'undefined' || !('locks' in navigator)) return task();\n      return navigator.locks.request(`keboola:${name}`, { mode: 'exclusive' }, task);\n    },\n  };\n};\n\nexport const createLocalStorage = (): StorageAdapter =>\n  createWebStorage(() => ('localStorage' in globalThis ? globalThis.localStorage : null));\n\nexport const createSessionStorage = (): StorageAdapter =>\n  createWebStorage(() => ('sessionStorage' in globalThis ? globalThis.sessionStorage : null));\n","import { queueSeries } from '../async';\n\nimport { createNullStorage, type StorageAdapter } from './adapters';\n\n// Structural so this package needs no zod dependency; any schema with `safeParse` fits.\ntype Schema<T> = {\n  safeParse: (value: unknown) => { success: true; data: T } | { success: false };\n};\n\nexport type Cell<T> = {\n  /**\n   * The stored value, `defaultValue` when empty or corrupt. Rejects when the adapter cannot be read:\n   * unreadable is not empty, and a caller taking it for empty would write over what is there.\n   */\n  read: () => Promise<T>;\n  write: (value: T) => Promise<void>;\n  /** Read, change and write as one step: no other write lands between the read and the write. */\n  modify: (change: (current: T) => T) => Promise<void>;\n  remove: () => Promise<void>;\n};\n\nexport type Persistor<T> = Cell<T> & {\n  // The verbs with the adapter's lock for this key held across `task`; a lock, not a rollback.\n  // Not reentrant: pass the cell down rather than nesting. Runs directly without an adapter lock.\n  locked: <R>(task: (cell: Cell<T>) => Promise<R>) => Promise<R>;\n};\n\ntype PersistorOptions<T> = {\n  storage?: StorageAdapter;\n  key: string;\n  schema: Schema<T>;\n  defaultValue: T;\n  encode?: (value: T) => string;\n  decode?: (raw: string) => unknown;\n};\n\n// A durable cell over a `StorageAdapter`: one key, encoded on write, validated on read.\n// - Writes run in call order and each resolves once its own write has landed; a failed write\n//   rejects and the ones after it still run. `read` waits for every write already queued.\n// - Give schema fields `.default(...)` to patch partial blobs instead of discarding them.\nexport const createPersistor = <T>({\n  storage = createNullStorage(),\n  key,\n  schema,\n  defaultValue,\n  encode = JSON.stringify,\n  decode = JSON.parse,\n}: PersistorOptions<T>): Persistor<T> => {\n  const writes = queueSeries();\n\n  const _load = async () => {\n    const raw = await storage.getItem(key);\n    if (raw === null) return { value: defaultValue, corrupt: false };\n\n    let decoded: unknown;\n    try {\n      decoded = decode(raw);\n    } catch (err) {\n      console.warn(`createPersistor: failed to decode \"${key}\"`, err);\n      return { value: defaultValue, corrupt: true };\n    }\n\n    const parsed = schema.safeParse(decoded);\n    return parsed.success\n      ? { value: parsed.data, corrupt: false }\n      : { value: defaultValue, corrupt: true };\n  };\n\n  const remove = () => writes.add(() => storage.removeItem(key));\n  const write = (value: T) => writes.add(() => storage.setItem(key, encode(value)));\n\n  const read = async (): Promise<T> => {\n    await writes.onIdle();\n    const parsed = await _load();\n    if (parsed.corrupt) {\n      remove().catch((err: unknown) => {\n        console.warn(`createPersistor: failed to drop the corrupt \"${key}\"`, err);\n      });\n    }\n    return parsed.value;\n  };\n  const modify = (change: (current: T) => T) =>\n    writes.add(async () => {\n      const parsed = await _load();\n      const next = change(parsed.value);\n      await storage.setItem(key, encode(next));\n    });\n\n  const cell: Cell<T> = { read, write, modify, remove };\n\n  const locked = <R>(task: (cell: Cell<T>) => Promise<R>): Promise<R> =>\n    storage.withLock ? storage.withLock(key, () => task(cell)) : task(cell);\n\n  return { ...cell, locked };\n};\n","export const isBuiltInProperty = (property: string | symbol) =>\n  typeof property === 'symbol' ||\n  property === 'then' ||\n  property === 'constructor' ||\n  property === 'toString' ||\n  property === 'valueOf';\n\n/**\n * Creates a dummy client that intercepts method calls and invokes the provided onCall callback.\n */\nexport const createDummyClient = <T extends Record<string, unknown>>({\n  onCall,\n}: {\n  onCall: (path: string[], args: unknown[]) => void;\n}): T => {\n  const createProxy = (path: string[] = []) =>\n    new Proxy(() => {}, {\n      // Create a new proxy for nested property access\n      get: (_target, prop) => {\n        // Don't intercept Symbol properties or special methods\n        if (isBuiltInProperty(prop)) return undefined;\n        return createProxy([...path, prop]);\n      },\n      // When called as a function, invoke the interceptor\n      apply: (_target, _thisArgs, args) => onCall(path, args),\n    });\n\n  return createProxy() as unknown as T;\n};\n","import { createDummyClient } from './utils';\n\ntype OnUnavailableFn = (info: {\n  serviceId: string;\n  path: string[];\n  args: unknown[];\n  clientName: string;\n}) => void;\n\n/**\n * A service's base URL, or a resolver for one that is not known yet — the stack index it comes from\n * may still be in flight. Declared here rather than taken from `fetchClient`, so the registry stays\n * independent of the transport its clients happen to use.\n */\nexport type ServiceUrl = string | (() => Promise<string>);\n\ntype ClientConfig<ServiceId extends string, ClientName extends string> = {\n  serviceId: ServiceId;\n  clientName: ClientName;\n  clientFn: (serviceUrl: ServiceUrl) => unknown;\n};\n\ntype ClientMeta<ServiceId extends string> = {\n  clientName: string;\n  serviceId: ServiceId;\n  isAvailable: boolean;\n};\n\ntype Options<ServiceId extends string> = {\n  getServiceBaseUrl: (serviceId: ServiceId) => ServiceUrl | null;\n  onUnavailable?: OnUnavailableFn;\n};\n\ntype BuildResult<\n  ServiceId extends string,\n  ClientName extends string,\n  Configs extends ClientConfig<ServiceId, ClientName>[],\n> = {\n  client: {\n    [Config in Configs[number] as Config['clientName']]: ReturnType<Config['clientFn']>;\n  };\n  meta: ClientMeta<ServiceId>[];\n};\n\ntype Registry<\n  ServiceId extends string,\n  ClientName extends string,\n  Configs extends ClientConfig<ServiceId, ClientName>[],\n> = {\n  add: <const Config extends ClientConfig<ServiceId, ClientName>>(\n    config: Config,\n  ) => Registry<ServiceId, ClientName, [...Configs, Config]>;\n  build: () => BuildResult<ServiceId, ClientName, Configs>;\n};\n\nexport const createServiceClientRegistry =\n  <ServiceId extends string, ClientName extends string = string>() =>\n  ({\n    getServiceBaseUrl,\n    onUnavailable,\n  }: Options<ServiceId>): Registry<ServiceId, ClientName, []> => {\n    const dummy = (serviceId: string, clientName: string) =>\n      createDummyClient({\n        onCall: (path, args) => {\n          onUnavailable?.({\n            serviceId,\n            path,\n            args,\n            clientName,\n          });\n        },\n      });\n\n    const configs: ClientConfig<ServiceId, ClientName>[] = [];\n\n    const resolveClient = ({\n      serviceId,\n      clientFn,\n      clientName,\n    }: ClientConfig<ServiceId, ClientName>) => {\n      const serviceBaseUrl = getServiceBaseUrl(serviceId);\n      return serviceBaseUrl ? clientFn(serviceBaseUrl) : dummy(serviceId, clientName);\n    };\n\n    type AnyConfig = ClientConfig<ServiceId, ClientName>;\n    const registry: Registry<ServiceId, ClientName, AnyConfig[]> = {\n      add: (config) => {\n        configs.push(config);\n        return registry;\n      },\n      build: () => {\n        const clientMap: Record<string, unknown> = {};\n        const clientMeta: ClientMeta<ServiceId>[] = [];\n\n        configs.forEach((config) => {\n          clientMap[config.clientName] = resolveClient(config);\n          clientMeta.push({\n            clientName: config.clientName,\n            serviceId: config.serviceId,\n            isAvailable: !!getServiceBaseUrl(config.serviceId),\n          });\n        });\n\n        // The dynamically-built map can't be statically proven against the\n        // per-config mapped type; the public key safety comes from the fluent\n        // `add` chain asserted at the bottom of this factory.\n        return {\n          client: clientMap,\n          meta: clientMeta,\n        } as BuildResult<ServiceId, ClientName, AnyConfig[]>;\n      },\n    };\n\n    return registry as Registry<ServiceId, ClientName, []>;\n  };\n","import type { createAuthClient } from '../clients/auth/authClient';\nimport type { createManagementClient } from '../clients/management';\nimport { isBuiltInProperty } from '../serviceClientRegistry';\n\nimport type { createProjectClients } from './legacy/createProjectClients';\nimport { assert, KeboolaErrorType } from './errors';\n\ntype AuthClient = ReturnType<typeof createAuthClient>;\ntype ManagementClient = ReturnType<typeof createManagementClient>;\n\n/**\n * Everything on a `ProjectApi` except `auth` and `management` — its project-scoped half.\n *\n * - Holds no credential; the token and its refresh loop live on the session that built it.\n */\nexport type ProjectClients = Awaited<ReturnType<typeof createProjectClients>>;\n\n/** One stack: what is there before a project — signing in, the account, the project list. */\nexport type StackApi = Pick<ProjectClients, 'baseUrl' | 'stack'> & {\n  auth: AuthClient;\n  management: ManagementClient;\n};\n\n/** One project, on its stack: every namespace. */\nexport type ProjectApi = ProjectClients & StackApi;\n\ntype ApiState = {\n  getAuthClient: () => AuthClient | null;\n  getManagementClient: () => ManagementClient | null;\n  getProjectClients: () => ProjectClients | null;\n};\n\nexport const createApi = (state: ApiState) =>\n  new Proxy({} as ProjectApi, {\n    get(_target, property) {\n      if (isBuiltInProperty(property)) return undefined;\n\n      if (property === 'auth') {\n        const authClient = state.getAuthClient();\n        assert(authClient, KeboolaErrorType.Unconfigured);\n        return authClient;\n      }\n\n      if (property === 'management') {\n        const management = state.getManagementClient();\n        assert(management, KeboolaErrorType.NoManagementToken);\n        return management;\n      }\n\n      const clients = state.getProjectClients();\n      assert(clients, KeboolaErrorType.NotReady);\n\n      return clients[property as keyof ProjectClients];\n    },\n  });\n","import type { MiddlewareFn } from '../fetchClient';\n\n/**\n * Service clients reached through the registry — the key is the `clientName`\n * the user accesses them by (e.g. `api.dataScience`), not the `serviceId`.\n */\nexport type ServiceClientName =\n  | 'vault'\n  | 'dataScience'\n  | 'apps'\n  | 'encryption'\n  | 'editor'\n  | 'syncActions'\n  | 'telemetry'\n  | 'queryService'\n  | 'queue'\n  | 'chat'\n  | 'ai'\n  | 'import'\n  | 'kaiAgent'\n  | 'componentsMcp'\n  | 'oauth'\n  | 'omnisearch'\n  | 'stream'\n  | 'notifications'\n  | 'scheduler'\n  | 'metastore'\n  | 'billing';\n\n/** Clients instantiated directly (not stack-discovered), keyed by their property name. */\ntype NonServiceClientName = 'storage' | 'management' | 'auth';\n\nexport type MiddlewareTarget = ServiceClientName | NonServiceClientName;\n\nexport type Middlewares =\n  | MiddlewareFn[]\n  | ({ all?: MiddlewareFn[] } & Partial<Record<MiddlewareTarget, MiddlewareFn[]>>);\n\nexport const createMiddlewareFor = (middlewares: Middlewares | undefined) => {\n  return (target: MiddlewareTarget, baseline: MiddlewareFn[] = []): MiddlewareFn[] => {\n    if (Array.isArray(middlewares)) return [...baseline, ...middlewares];\n\n    const all = middlewares?.all ?? [];\n    const targeted = middlewares?.[target] ?? [];\n    return [...baseline, ...all, ...targeted];\n  };\n};\n\nexport type MiddlewareFor = ReturnType<typeof createMiddlewareFor>;\n","import { createStore } from '../../utils';\n\nexport type State = {\n  baseUrl: string | null;\n  sapiToken: string | null;\n  managementToken: string | null;\n};\n\n// The legacy config is a plain observable state store: the host injects the baseUrl and tokens, and\n// consumers derive their clients from `store` (see `keboola.ts`). No lifecycle events — the derived\n// stores react to state changes directly.\nexport const createConfig = () => {\n  const store = createStore<State>({ baseUrl: null, sapiToken: null, managementToken: null });\n\n  const setBaseUrl = (baseUrl: string) => {\n    store.set({ ...store.get(), baseUrl });\n  };\n\n  const authenticate = (tokens: { sapiToken?: string; managementToken?: string }) => {\n    const current = store.get();\n    store.set({\n      ...current,\n      sapiToken: tokens.sapiToken ?? current.sapiToken,\n      managementToken: tokens.managementToken ?? current.managementToken,\n    });\n  };\n\n  // SAPI token accessors over the config store — the single source of truth. The storage build reads\n  // `getStorageToken` on every request; in-band rotations write back via `setStorageToken`, which\n  // surfaces to observers as an ordinary store change.\n  const getStorageToken = () => store.get().sapiToken ?? '';\n  const setStorageToken = (sapiToken: string) => store.set({ ...store.get(), sapiToken });\n\n  /** Current state, for diagnostics. */\n  const debug = (): State => store.get();\n\n  return { store, setBaseUrl, authenticate, getStorageToken, setStorageToken, debug };\n};\n","import type { StackInfo } from '../clients/storage/types';\nimport { ServiceId } from '../constants/serviceIds';\n\nexport type ServiceUrls = Partial<Record<ServiceId, (url: string) => string | undefined | null>>;\n\nconst isServiceId = (id: string): id is ServiceId => Object.values<string>(ServiceId).includes(id);\n\nconst SERVICE_URL_OVERRIDES: ServiceUrls = {\n  // The advertised Kai Assistant URL lacks the `/api` suffix.\n  'kai-assistant': (url) => `${url}/api`,\n};\n\ntype Options = {\n  stackInfo: StackInfo;\n  clientServiceUrls?: ServiceUrls;\n};\n\nexport type Stack = ReturnType<typeof createStack>;\n\nexport const createStack = ({ stackInfo, clientServiceUrls }: Options) => {\n  const { services, components, features, ...infoRest } = stackInfo;\n\n  const serviceMap = new Map(\n    services.map((service) => {\n      if (!isServiceId(service.id)) return [service.id, service.url];\n      const devOverride = clientServiceUrls?.[service.id]?.(service.url);\n      const prodOverride = SERVICE_URL_OVERRIDES[service.id]?.(service.url);\n      const url = devOverride ?? prodOverride ?? service.url;\n      return [service.id, url];\n    }),\n  );\n\n  const componentMap = new Map(components.map((component) => [component.id, component]));\n  const featureSet = new Set(features);\n\n  const hasFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => featureSet.has(x));\n  };\n\n  const hasComponent = (...componentId: string[]) => {\n    if (componentId.length === 0) return false;\n    return componentId.every((x) => componentMap.has(x));\n  };\n\n  const getComponent = (componentId: string) => componentMap.get(componentId) ?? null;\n\n  const hasService = (serviceId: ServiceId) => serviceMap.has(serviceId);\n\n  const getServiceUrl = (serviceId: ServiceId) => serviceMap.get(serviceId) ?? null;\n\n  return {\n    ...infoRest,\n    services,\n    features,\n    components,\n    hasFeature,\n    getServiceUrl,\n    hasService,\n    getComponent,\n    hasComponent,\n  };\n};\n","import type * as storage from '../../clients/storage';\n\nconst VARIABLES_COMPONENT_ID = 'keboola.variables';\n\n// The storage client takes the branch as the string the spec declares.\ntype BranchId = string;\n\ntype VariableDefinition = { name: string; type?: string };\ntype VariableValue = { name: string; value?: unknown };\n\n/** Reference to a `keboola.variables` config + the values row a config points at. */\ntype VariablesRef = { variablesId: string; variablesValuesId: string };\n\ntype Options = {\n  storageClient: ReturnType<typeof storage.createStorageClient>;\n};\n\n/** Union the definitions by name; on a name conflict the target's definition is kept. */\nexport const mergeVariableDefinitions = (\n  target: VariableDefinition[],\n  source: VariableDefinition[],\n): VariableDefinition[] => {\n  const targetNames = new Set(target.map((definition) => definition.name));\n\n  return [...target, ...source.filter((definition) => !targetNames.has(definition.name))];\n};\n\n/** Add values missing in the target; on a name conflict the value is updated to the source's. */\nexport const mergeVariableValues = (\n  target: VariableValue[],\n  source: VariableValue[],\n): VariableValue[] => {\n  const sourceByName = new Map(source.map((value) => [value.name, value.value]));\n  const targetNames = new Set(target.map((value) => value.name));\n\n  return [\n    ...target.map((value) =>\n      sourceByName.has(value.name) ? { ...value, value: sourceByName.get(value.name) } : value,\n    ),\n    ...source.filter((value) => !targetNames.has(value.name)),\n  ];\n};\n\n/**\n * Orchestration for `keboola.variables` configs: copy a config, or merge two configs into a fresh\n * one (union definitions, upsert values — source wins on a name conflict). Each result is a brand\n * new config + values row, so the caller can reference it without sharing lineage with the source.\n */\nexport const createVariablesSdk = ({ storageClient }: Options) => {\n  const configs = storageClient.configurations;\n  const rows = storageClient.configurationRows;\n\n  const readVariables = async (\n    configId: string,\n    valuesRowId: string | undefined,\n    branchId: BranchId,\n  ) => {\n    const config = await configs.getConfiguration({\n      componentId: VARIABLES_COMPONENT_ID,\n      configId,\n      branchId,\n    });\n    // variables configs carry a single values row — read the referenced one, or the only one\n    const row = config.rows.find((candidate) => candidate.id === valuesRowId) ?? config.rows[0];\n\n    const rawDefinitions = config.configuration?.variables;\n    const rawValues = row?.configuration?.values;\n\n    // guard the array shape — a non-array from Storage would throw in the merge helpers' .map()\n    return {\n      definitions: (Array.isArray(rawDefinitions) ? rawDefinitions : []) as VariableDefinition[],\n      values: (Array.isArray(rawValues) ? rawValues : []) as VariableValue[],\n    };\n  };\n\n  const createVariables = async (\n    definitions: VariableDefinition[],\n    values: VariableValue[],\n    branchId: BranchId,\n  ): Promise<VariablesRef> => {\n    const config = await configs.createConfiguration({\n      branchId,\n      componentId: VARIABLES_COMPONENT_ID,\n      name: 'Variables definition',\n      configuration: { variables: definitions },\n    });\n\n    try {\n      const row = await rows.createConfigurationRow({\n        branchId: String(branchId),\n        componentId: VARIABLES_COMPONENT_ID,\n        configurationId: config.id,\n        name: 'Default values',\n        configuration: { values },\n      });\n\n      return { variablesId: config.id, variablesValuesId: row.id };\n    } catch (error) {\n      // the values row failed — best-effort drop the orphaned config, but always surface the original error\n      await configs\n        .deleteConfiguration({\n          branchId,\n          componentId: VARIABLES_COMPONENT_ID,\n          configId: config.id,\n        })\n        .catch((cleanupError: unknown) => {\n          // keep the cleanup failure on the original error rather than letting it mask the real cause\n          if (error instanceof Error && error.cause === undefined) {\n            error.cause = cleanupError;\n          }\n        });\n      throw error;\n    }\n  };\n\n  return {\n    /** Copy a variables config into a fresh, independent config + values row. */\n    copy: async ({\n      variablesId,\n      variablesValuesId,\n      branchId = 'default',\n    }: {\n      variablesId: string;\n      variablesValuesId?: string;\n      branchId?: BranchId;\n    }): Promise<VariablesRef> => {\n      const { definitions, values } = await readVariables(variablesId, variablesValuesId, branchId);\n\n      return createVariables(definitions, values, branchId);\n    },\n\n    /** Merge the source's variables into the target's and create a fresh merged config + values row. */\n    merge: async ({\n      targetVariablesId,\n      targetValuesId,\n      sourceVariablesId,\n      sourceValuesId,\n      branchId = 'default',\n    }: {\n      targetVariablesId: string;\n      targetValuesId?: string;\n      sourceVariablesId: string;\n      sourceValuesId?: string;\n      branchId?: BranchId;\n    }): Promise<VariablesRef> => {\n      const [target, source] = await Promise.all([\n        readVariables(targetVariablesId, targetValuesId, branchId),\n        readVariables(sourceVariablesId, sourceValuesId, branchId),\n      ]);\n\n      return createVariables(\n        mergeVariableDefinitions(target.definitions, source.definitions),\n        mergeVariableValues(target.values, source.values),\n        branchId,\n      );\n    },\n  };\n};\n","import type { createStorageClient } from '../clients/storage';\nimport { createKaiMemorySdk } from '../sdks/kaiMemory';\nimport { createSemanticLayerSdk } from '../sdks/semanticLayer';\nimport { createTagSdk } from '../sdks/tag';\nimport { createVariablesSdk } from '../sdks/variables';\nimport { createVaultSdk } from '../sdks/vault';\n\nimport type { createServiceClients } from './createServiceClients';\n\ntype Options = {\n  storage: ReturnType<typeof createStorageClient>;\n  services: ReturnType<typeof createServiceClients>['client'];\n};\n\nexport const createSdk = ({ storage, services }: Options) => ({\n  tag: createTagSdk({ metastoreClient: services.metastore }),\n  semanticLayer: createSemanticLayerSdk({ metastoreClient: services.metastore }),\n  kaiMemory: createKaiMemorySdk({ metastoreClient: services.metastore }),\n  vault: createVaultSdk({ vaultClient: services.vault, encryptionClient: services.encryption }),\n  variables: createVariablesSdk({ storageClient: storage }),\n});\n","import { createAiClient } from '../clients/ai';\nimport { createAppsClient } from '../clients/apps';\nimport type { AuthStrategy } from '../clients/auth';\nimport { createBillingClient } from '../clients/billing';\nimport { createChatClient } from '../clients/chat';\nimport { createComponentsMcpClient } from '../clients/componentsMcp';\nimport { createDataScienceClient } from '../clients/dataScience';\nimport { createEditorClient } from '../clients/editor';\nimport { createEncryptionClient } from '../clients/encryption';\nimport { createImportClient } from '../clients/import';\nimport { createKaiAgentClient } from '../clients/kaiAgent';\nimport { createMetastoreClient } from '../clients/metastore';\nimport { createNotificationsClient } from '../clients/notifications';\nimport { createOauthClient } from '../clients/oauth';\nimport { createOmnisearchClient } from '../clients/omnisearch';\nimport { createQueryServiceClient } from '../clients/queryService';\nimport { createQueueClient } from '../clients/queue';\nimport { createSchedulerClient } from '../clients/scheduler';\nimport type { ServiceId } from '../clients/storage/types';\nimport { createStreamClient } from '../clients/stream';\nimport { createSyncActionsClient } from '../clients/syncActions';\nimport { createTelemetryClient } from '../clients/telemetry';\nimport { createVaultClient } from '../clients/vault';\nimport { ServiceUnavailableError } from '../errors';\nimport type { MiddlewareFn } from '../fetchClient';\nimport { createServiceClientRegistry, type ServiceUrl } from '../serviceClientRegistry';\n\nimport { type MiddlewareFor, type ServiceClientName } from './createMiddlewareFor';\n\ntype Options = {\n  baseUrl: string;\n  auth: AuthStrategy;\n  getServiceBaseUrl: (serviceId: ServiceId) => ServiceUrl | null;\n  middlewareFor: MiddlewareFor;\n  attachTokenMiddleware: MiddlewareFn;\n};\n\n// A service whose URL is still being resolved cannot have a path appended to it as a string.\nconst withPath = (serviceBaseUrl: ServiceUrl, path: string): ServiceUrl =>\n  typeof serviceBaseUrl === 'string'\n    ? `${serviceBaseUrl}${path}`\n    : async () => `${await serviceBaseUrl()}${path}`;\n\nexport const createServiceClients = ({\n  baseUrl,\n  auth,\n  getServiceBaseUrl,\n  middlewareFor,\n  attachTokenMiddleware,\n}: Options) =>\n  createServiceClientRegistry<ServiceId, ServiceClientName>()({\n    getServiceBaseUrl,\n    onUnavailable: ({ serviceId, path, clientName }) => {\n      throw new ServiceUnavailableError(serviceId, path, clientName);\n    },\n  })\n    .add({\n      serviceId: 'vault',\n      clientName: 'vault',\n      clientFn: (serviceBaseUrl) =>\n        createVaultClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('vault', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'data-science',\n      clientName: 'dataScience',\n      clientFn: (serviceBaseUrl) =>\n        createDataScienceClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('dataScience', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      // `/v2` App Deployments live on the sandboxes deployment; the `apps.<stack>` host is absent\n      // from the service index. At a third prefixed client, give `.add()` a `pathPrefix`.\n      serviceId: 'data-science',\n      clientName: 'apps',\n      clientFn: (serviceBaseUrl) =>\n        createAppsClient({\n          baseUrl: withPath(serviceBaseUrl, '/v2'),\n          middlewares: middlewareFor('apps', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'encryption',\n      clientName: 'encryption',\n      clientFn: (serviceBaseUrl) =>\n        createEncryptionClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('encryption'),\n        }),\n    })\n    .add({\n      serviceId: 'editor',\n      clientName: 'editor',\n      clientFn: (serviceBaseUrl) =>\n        createEditorClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('editor', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'sync-actions',\n      clientName: 'syncActions',\n      clientFn: (serviceBaseUrl) =>\n        createSyncActionsClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('syncActions', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'telemetry',\n      clientName: 'telemetry',\n      clientFn: (serviceBaseUrl) =>\n        createTelemetryClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('telemetry', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'query',\n      clientName: 'queryService',\n      clientFn: (serviceBaseUrl) =>\n        createQueryServiceClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('queryService', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'queue',\n      clientName: 'queue',\n      clientFn: (serviceBaseUrl) =>\n        createQueueClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('queue', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'kai-assistant',\n      clientName: 'chat',\n      clientFn: (serviceBaseUrl) =>\n        createChatClient({\n          storageApiUrl: baseUrl,\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('chat', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'ai',\n      clientName: 'ai',\n      clientFn: (serviceBaseUrl) =>\n        createAiClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('ai', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      // The ai-service ingress exposes omnisearch under `/omnisearch`, like the `kai-assistant`\n      // `/api` override in `domain/stack.ts`.\n      serviceId: 'ai',\n      clientName: 'omnisearch',\n      clientFn: (serviceBaseUrl) =>\n        createOmnisearchClient({\n          baseUrl: withPath(serviceBaseUrl, '/omnisearch'),\n          middlewares: middlewareFor('omnisearch', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'import',\n      clientName: 'import',\n      clientFn: (serviceBaseUrl) =>\n        createImportClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('import', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'kai-agent',\n      clientName: 'kaiAgent',\n      clientFn: (serviceBaseUrl) =>\n        createKaiAgentClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('kaiAgent', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'components-mcp',\n      clientName: 'componentsMcp',\n      clientFn: (serviceBaseUrl) =>\n        createComponentsMcpClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('componentsMcp', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'oauth',\n      clientName: 'oauth',\n      clientFn: (serviceBaseUrl) =>\n        createOauthClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('oauth', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'scheduler',\n      clientName: 'scheduler',\n      clientFn: (serviceBaseUrl) =>\n        createSchedulerClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('scheduler', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'stream',\n      clientName: 'stream',\n      clientFn: (serviceBaseUrl) =>\n        createStreamClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('stream', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'notification',\n      clientName: 'notifications',\n      clientFn: (serviceBaseUrl) =>\n        createNotificationsClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('notifications', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'billing',\n      clientName: 'billing',\n      clientFn: (serviceBaseUrl) =>\n        createBillingClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('billing', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .add({\n      serviceId: 'metastore',\n      clientName: 'metastore',\n      clientFn: (serviceBaseUrl) =>\n        createMetastoreClient({\n          baseUrl: serviceBaseUrl,\n          middlewares: middlewareFor('metastore', [attachTokenMiddleware]),\n          auth,\n        }),\n    })\n    .build();\n","import type { AuthStrategy } from '../../clients/auth';\nimport { createStorageClient } from '../../clients/storage';\nimport { createStack, type ServiceUrls } from '../../domain/stack';\nimport { type MiddlewareFn, normalizeBaseUrl } from '../../fetchClient';\nimport { KeboolaHttpHeader } from '../../internal';\nimport { type MiddlewareFor } from '../createMiddlewareFor';\nimport { createSdk } from '../createSdk';\nimport { createServiceClients } from '../createServiceClients';\n\nconst createAttachStorageToken =\n  (getToken: () => string): MiddlewareFn =>\n  (next) =>\n  (request) => {\n    request.request.headers.set(KeboolaHttpHeader.STORAGE_API_TOKEN, getToken());\n    return next(request);\n  };\n\ntype Options = {\n  baseUrl: string;\n  getStorageToken: () => string;\n  onStorageTokenRefreshed: (token: string) => void;\n  middlewareFor: MiddlewareFor;\n  clientServiceUrls?: ServiceUrls;\n};\n\nexport const createProjectClients = async ({\n  baseUrl,\n  getStorageToken,\n  onStorageTokenRefreshed,\n  middlewareFor,\n  clientServiceUrls,\n}: Options) => {\n  const auth: AuthStrategy = { type: 'sapi-token', token: getStorageToken() };\n  const attach = createAttachStorageToken(getStorageToken);\n\n  // The stack index is public: the token is sent, but nothing here verifies it.\n  const stackInfo = await createStorageClient({\n    baseUrl,\n    auth,\n    middlewares: [attach],\n  }).getStackInfo({ exclude: 'componentDetails' });\n\n  const stack = createStack({ stackInfo, clientServiceUrls });\n\n  // Static storage-token header + in-band refresh (onRefreshToken rotates the shared liveToken store).\n  const storage = createStorageClient({\n    baseUrl,\n    auth,\n    middlewares: middlewareFor('storage', []),\n    onRefreshToken: onStorageTokenRefreshed,\n  });\n\n  const { client: services, meta: serviceMeta } = createServiceClients({\n    baseUrl,\n    auth,\n    getServiceBaseUrl: stack.getServiceUrl,\n    middlewareFor,\n    attachTokenMiddleware: attach,\n  });\n\n  return {\n    // Canonical: a trailing slash the caller passed is stripped, so `${baseUrl}/manage/...` is safe.\n    baseUrl: normalizeBaseUrl(baseUrl),\n    stack,\n    serviceMeta,\n    storage,\n    ...services,\n    sdk: createSdk({ storage, services }),\n  };\n};\n","import { createAuthClient } from '../../clients/auth/authClient';\nimport { createManagementClient } from '../../clients/management';\nimport { createDerivedAsyncStore, createDerivedStore } from '../../utils';\nimport { createApi } from '../createApi';\nimport { createMiddlewareFor } from '../createMiddlewareFor';\nimport type { LegacyKeboolaOptions } from '../types';\n\nimport { createConfig, type State } from './createConfig';\nimport { createProjectClients } from './createProjectClients';\nimport type { SessionSnapshot } from './types';\n\ntype ProjectClients = Awaited<ReturnType<typeof createProjectClients>>;\n\nexport const createLegacyKeboola = (options: LegacyKeboolaOptions = {}) => {\n  const config = createConfig();\n  const middlewareFor = createMiddlewareFor(options.middlewares);\n\n  // The clients are derived from config state: each rebuilds only when the slice it depends on\n  // changes. auth needs a baseUrl; management builds token-less up front and upgrades once a manage\n  // token lands; storage builds once the SAPI token arrives (a later in-band rotation keeps the same\n  // baseUrl key, so it does not rebuild).\n  const authClient = createDerivedStore({\n    source: config.store,\n    dependsOn: (state) => state.baseUrl,\n    build: (baseUrl) =>\n      baseUrl ? createAuthClient({ baseUrl, middlewares: middlewareFor('auth', []) }) : null,\n  });\n\n  const management = createDerivedStore({\n    source: config.store,\n    dependsOn: (state) => ({ baseUrl: state.baseUrl, token: state.managementToken }),\n    build: ({ baseUrl, token }) =>\n      baseUrl\n        ? createManagementClient({\n            baseUrl,\n            auth: token ? { type: 'management-token', token } : { type: 'management-token' },\n            middlewares: middlewareFor('management', []),\n          })\n        : null,\n  });\n\n  const build = createDerivedAsyncStore<State, string, ProjectClients>({\n    source: config.store,\n    dependsOn: (state) => (state.sapiToken && state.baseUrl ? state.baseUrl : null),\n    build: (baseUrl) =>\n      createProjectClients({\n        baseUrl,\n        getStorageToken: config.getStorageToken,\n        onStorageTokenRefreshed: config.setStorageToken,\n        middlewareFor,\n        clientServiceUrls: options.clientServiceUrls,\n      }),\n  });\n\n  if (options.baseUrl) config.setBaseUrl(options.baseUrl);\n\n  const debug = (): SessionSnapshot => {\n    const info = config.debug();\n    return {\n      type: 'Sapi',\n      config: info,\n      authReady: authClient.get() !== null,\n      managementReady: !!info.managementToken,\n      storage: build.store.get().state,\n    };\n  };\n\n  const session = {\n    setBaseUrl: config.setBaseUrl,\n    isStorageReady: () => build.store.get().state === 'ready',\n    authenticateStorage: (sapiToken: string) => config.authenticate({ sapiToken }),\n    authenticateStorageAsync: async (sapiToken: string) => {\n      config.authenticate({ sapiToken });\n      // `authenticate` mutates synchronously, so the build is already pending; `settled` awaits it.\n      await build.settled();\n    },\n    authenticateManagement: (managementToken: string) => config.authenticate({ managementToken }),\n    subscribe: (listener: (snapshot: SessionSnapshot) => void) => {\n      // Fire on both config mutations and storage-build transitions, so `ready` is observable.\n      const unsubscribeConfig = config.store.subscribe(() => listener(debug()));\n      const unsubscribeBuild = build.store.subscribe(() => listener(debug()));\n      return () => {\n        unsubscribeConfig();\n        unsubscribeBuild();\n      };\n    },\n    debug,\n  };\n\n  const api = createApi({\n    getAuthClient: () => authClient.get(),\n    getManagementClient: () => management.get(),\n    getProjectClients: () => {\n      const state = build.store.get();\n      return state.state === 'ready' ? state.value : null;\n    },\n  });\n\n  return { api, session };\n};\n","import { Result } from '../../../utils';\nimport { KeboolaError, KeboolaErrorType } from '../../errors';\n\nimport type { Stacks } from './stacks';\nimport type { Auth, BaseUrl, Credential, CredentialInput, Grant, Retained } from './types';\n\nexport type SignOutOptions = {\n  /** Keep the grant on the stack for `restoreRetained`; the sign-in still ends. */\n  retain?: boolean;\n};\n\n// The part that renews the credential; the access token is never carried over.\nexport const grantOf = (credential: Credential): Grant =>\n  credential.type === 'token'\n    ? { type: 'token', refreshToken: credential.refreshToken }\n    : { type: 'cookie', sessionId: credential.sessionId };\n\n// Stamps the issue time the credential's lifetime is measured from.\nconst stamped = (input: CredentialInput): Credential => ({ ...input, issuedAt: Date.now() });\n\nconst credentialOf = (auth: Auth): Result<Credential> =>\n  auth.status === 'authenticated'\n    ? Result.success(auth.credential)\n    : Result.failure(new KeboolaError(KeboolaErrorType.NotAuthenticated));\n\n/**\n * The stack's credential and its sign-in pin.\n *\n * - `epoch` moves on `authenticate` and `signOut` and never on a rotation, so it is exactly \"which\n *   sign-in is this\" — what an in-flight exchange compares itself against.\n */\nexport const createAuth = (stacks: Stacks) => {\n  // Stacks whose dead credential was reported; `authenticate` re-arms one, once per sign-in.\n  const expired = new Set<BaseUrl>();\n\n  // What authorizes a request to this stack; every project under it borrows the same one.\n  const requireCredential = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) => credentialOf(stack.auth));\n\n  // Nothing signed in yet: `anonymous` or `restoring` pass.\n  const requireUnauthenticated = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) =>\n      stack.auth.status === 'authenticated'\n        ? Result.failure(new KeboolaError(KeboolaErrorType.AlreadyAuthenticated))\n        : Result.success(stack),\n    );\n\n  // Strictly `anonymous`: a restore in flight is refused too, with its own reason.\n  const requireAnonymous = (baseUrl: BaseUrl) =>\n    Result.andThen(requireUnauthenticated(baseUrl), (stack) =>\n      stack.auth.status === 'restoring'\n        ? Result.failure(new Error(`Stack \"${baseUrl}\" is already being restored`))\n        : Result.success(stack),\n    );\n\n  const requireRestoring = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) =>\n      stack.auth.status === 'restoring'\n        ? Result.success(stack)\n        : Result.failure(new Error(`Stack \"${baseUrl}\" is not being restored`)),\n    );\n\n  const startRestore = (baseUrl: BaseUrl) =>\n    Result.map(requireAnonymous(baseUrl), (stack) =>\n      stacks.set({ ...stack, auth: { status: 'restoring' } }),\n    );\n\n  // A restore that failed or was abandoned: back to anonymous, no sign-in ended.\n  const cancelRestore = (baseUrl: BaseUrl) =>\n    Result.map(requireRestoring(baseUrl), (stack) =>\n      stacks.set({ ...stack, auth: { status: 'anonymous' } }),\n    );\n\n  // Completes a restore too: `restoring` is the one non-anonymous phase this accepts.\n  const authenticate = (baseUrl: BaseUrl, input: CredentialInput) =>\n    Result.map(requireUnauthenticated(baseUrl), (stack) => {\n      expired.delete(baseUrl);\n\n      return stacks.set({\n        ...stack,\n        epoch: stack.epoch + 1,\n        auth: { status: 'authenticated', credential: stamped(input) },\n        retained: null,\n      });\n    });\n\n  const applyRefresh = (baseUrl: BaseUrl, input: CredentialInput) =>\n    Result.andThen(requireCredential(baseUrl), (credential) =>\n      credential.type !== input.type\n        ? Result.failure(new Error(`A ${credential.type} grant cannot become ${input.type}`))\n        : Result.map(stacks.get(baseUrl), (stack) =>\n            stacks.set({ ...stack, auth: { status: 'authenticated', credential: stamped(input) } }),\n          ),\n    );\n\n  // Backdates the issue time by a full lifetime, so the credential reads as expired right now.\n  const forceExpire = (baseUrl: BaseUrl) =>\n    Result.andThen(requireCredential(baseUrl), (credential) =>\n      Result.map(stacks.get(baseUrl), (stack) =>\n        stacks.set({\n          ...stack,\n          auth: {\n            status: 'authenticated',\n            credential: { ...credential, issuedAt: Date.now() - credential.expiresIn * 1000 },\n          },\n        }),\n      ),\n    );\n\n  // Drops the credential; the stack stays, anonymous. With `retain`, the credential's grant moves\n  // into the slot instead; a stack with nothing to move keeps what the slot already holds.\n  const signOut = (baseUrl: BaseUrl, { retain = false }: SignOutOptions = {}) =>\n    Result.map(stacks.get(baseUrl), (stack) => {\n      const retained = retain\n        ? Result.unwrapOr(\n            Result.map(credentialOf(stack.auth), (credential): Retained => ({\n              grant: grantOf(credential),\n            })),\n            stack.retained,\n          )\n        : null;\n\n      return stacks.set({\n        ...stack,\n        epoch: stack.epoch + 1,\n        auth: { status: 'anonymous' },\n        retained,\n      });\n    });\n\n  const retain = (baseUrl: BaseUrl, retained: Retained) =>\n    Result.map(stacks.get(baseUrl), (stack) => stacks.set({ ...stack, retained }));\n\n  const dropRetained = (baseUrl: BaseUrl) =>\n    Result.map(stacks.get(baseUrl), (stack) => stacks.set({ ...stack, retained: null }));\n\n  const requireRetained = (baseUrl: BaseUrl) =>\n    Result.andThen(stacks.get(baseUrl), (stack) =>\n      stack.retained\n        ? Result.success(stack.retained)\n        : Result.failure(new Error(`Stack \"${baseUrl}\" retains no credential`)),\n    );\n\n  const notifyExpired = (baseUrl: BaseUrl): boolean => {\n    if (expired.has(baseUrl)) return false;\n    expired.add(baseUrl);\n    return true;\n  };\n\n  const getEpoch = (baseUrl: BaseUrl) => Result.map(stacks.get(baseUrl), (stack) => stack.epoch);\n\n  // `null` rather than a failure: an anonymous request goes out without an `Authorization` header.\n  const getAccessToken = (baseUrl: BaseUrl): string | null =>\n    Result.unwrapOr(\n      Result.map(requireCredential(baseUrl), ({ accessToken }) => accessToken),\n      null,\n    );\n\n  return {\n    startRestore,\n    cancelRestore,\n    authenticate,\n    applyRefresh,\n    forceExpire,\n    signOut,\n    retain,\n    dropRetained,\n    requireRetained,\n    notifyExpired,\n    requireCredential,\n    getEpoch,\n    getAccessToken,\n  };\n};\n","import { Result } from '../../../utils';\nimport { KeboolaError, KeboolaErrorType } from '../../errors';\n\nimport type { BaseUrl, FetchStatus, Stack, Store } from './types';\n\nexport const newStack = (baseUrl: BaseUrl): Stack => ({\n  baseUrl,\n  context: 'idle',\n  epoch: 0,\n  auth: { status: 'anonymous' },\n  retained: null,\n});\n\n/** One entry per stack, and the verbs that open and select them. */\nexport const createStacks = (store: Store) => {\n  const get = (baseUrl: BaseUrl) => {\n    const stack = store.get().stacks[baseUrl];\n    return stack\n      ? Result.success(stack)\n      : Result.failure(new KeboolaError(KeboolaErrorType.Unconfigured));\n  };\n  const set = (stack: Stack): Stack => {\n    const state = store.get();\n    store.set({ ...state, stacks: { ...state.stacks, [stack.baseUrl]: stack } });\n    return stack;\n  };\n  const update = (baseUrl: BaseUrl, updater: (stack: Stack) => Stack) =>\n    Result.map(get(baseUrl), (stack) => set(updater(stack)));\n\n  // --- verbs ---\n\n  const ensure = (baseUrl: BaseUrl) => {\n    const existing = get(baseUrl);\n    if (existing.success) return existing.data;\n    return set(newStack(baseUrl));\n  };\n\n  // The table always names an active row: it starts on one, and rows are never removed.\n  const getActive = (): Stack => {\n    const { active } = store.get();\n    const stack = get(active);\n    if (!stack.success) throw new Error(`The active stack has no row: ${active}`);\n    return stack.data;\n  };\n\n  // Re-selecting the active stack is not a change. Without this a component that selects on every\n  // render — the backend flow, handed its stack by the server — is notified back into another\n  // render, forever.\n  const select = (baseUrl: BaseUrl): Stack => {\n    const stack = ensure(baseUrl);\n    const state = store.get();\n    if (state.active !== baseUrl) store.set({ ...state, active: baseUrl });\n    return stack;\n  };\n\n  const updateContext = (baseUrl: BaseUrl, context: FetchStatus) =>\n    update(baseUrl, (stack) => ({ ...stack, context }));\n\n  return { get, set, update, ensure, getActive, select, updateContext };\n};\n\nexport type Stacks = ReturnType<typeof createStacks>;\n","import { createStore } from '../../../utils';\n\nimport { createAuth } from './auth';\nimport { createStacks, newStack } from './stacks';\nimport type { BaseUrl, State } from './types';\n\n/**\n * The stack table and the rules over it, one namespace per concern.\n *\n * - Starts active on its default stack, which is its one row.\n */\nexport const createState = (defaultBaseUrl: BaseUrl) => {\n  const store = createStore<State>({\n    active: defaultBaseUrl,\n    stacks: { [defaultBaseUrl]: newStack(defaultBaseUrl) },\n  });\n\n  const stacks = createStacks(store);\n  const auth = createAuth(stacks);\n\n  return { store: store.asReadable(), stacks, auth };\n};\n\nexport type StateApi = ReturnType<typeof createState>;\n","import { createAuthClient } from '../../../clients/auth/authClient';\nimport type { MiddlewareFn } from '../../../fetchClient';\nimport { dedupe, ensure, Result } from '../../../utils';\nimport { KeboolaError, KeboolaErrorType } from '../../errors';\nimport type { createSessionPersistor, Locked, PersistedSession } from '../persistor';\nimport { type createState, grantOf, type SignOutOptions } from '../state';\nimport type { BaseUrl, Credential, CredentialInput, Grant } from '../state/types';\n\nimport { createBearerAuthMiddleware, isUnauthorized } from './middleware';\n\ntype Options = {\n  state: ReturnType<typeof createState>;\n  persistor: ReturnType<typeof createSessionPersistor>;\n  middlewares: MiddlewareFn[];\n  refreshThreshold?: number;\n  /** Also fires when a refused refresh expires the sign-in. */\n  onSignedOut?: (baseUrl: BaseUrl) => void;\n  /** Only for a refused refresh, never for a caller's own `signOut`. */\n  onExpired?: (baseUrl: BaseUrl) => void;\n};\n\nconst DEFAULT_REFRESH_THRESHOLD = 0.9;\n\n/**\n * What a boot-time restore found.\n *\n * - `expired`: the server refused the refresh token.\n * - `unreachable`: no answer; the stored token is still good — retry, never log in.\n */\nexport type RestoreStatus = 'restored' | 'expired' | 'unreachable' | 'empty';\n\n/** `skipped`: the caller signed this stack in or out before the restore reached it. */\nexport type StackRestore = 'restored' | 'refused' | 'unreachable' | 'skipped';\n\nconst signInEnded = () => new KeboolaError(KeboolaErrorType.SignInEnded);\n\nconst toRestoreStatus = (outcome: StackRestore | undefined): RestoreStatus => {\n  if (outcome === undefined || outcome === 'skipped') return 'empty';\n  if (outcome === 'refused') return 'expired';\n  return outcome;\n};\n\nconst renew = async (\n  client: ReturnType<typeof createAuthClient>,\n  grant: Grant,\n): Promise<CredentialInput> => {\n  if (grant.type === 'cookie') {\n    const { accessToken, expiresIn, sessionId } = await client.token.refreshWithSession({\n      sessionId: grant.sessionId,\n    });\n    return { type: 'cookie', accessToken, expiresIn, sessionId };\n  }\n\n  const { accessToken, expiresIn, refreshToken } = await client.token.refreshWithToken({\n    refreshToken: grant.refreshToken,\n  });\n  if (!refreshToken) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);\n  return { type: 'token', accessToken, expiresIn, refreshToken };\n};\n\nexport const createCredentials = ({\n  state,\n  persistor,\n  middlewares,\n  refreshThreshold = DEFAULT_REFRESH_THRESHOLD,\n  onSignedOut,\n  onExpired,\n}: Options) => {\n  const rotationMap = new Map<BaseUrl, () => Promise<Result<string>>>();\n\n  const markSignIn = (baseUrl: BaseUrl) => {\n    const epoch = Result.unwrap(state.auth.getEpoch(baseUrl));\n    return () => Result.unwrapOr(state.auth.getEpoch(baseUrl), -1) === epoch;\n  };\n\n  // No bearer middleware on this client: the cookie refresh is rejected outright if it carries one.\n  const refresh = async (baseUrl: BaseUrl, grant: Grant): Promise<Result<CredentialInput>> => {\n    const client = createAuthClient({ baseUrl, middlewares });\n    const isSameSignIn = markSignIn(baseUrl);\n    const refreshed = await Result.tryCatchAsync(() => renew(client, grant));\n    return isSameSignIn() ? refreshed : Result.failure(signInEnded());\n  };\n\n  const getGrantForRotation = async (\n    store: Locked,\n    baseUrl: BaseUrl,\n    credential: Credential,\n  ): Promise<Result<Grant>> => {\n    const isSameSignIn = markSignIn(baseUrl);\n    const hydrated = await Result.tryCatchAsync(() => store.read());\n    if (!hydrated.success) return hydrated;\n    if (!isSameSignIn()) return Result.failure(signInEnded());\n\n    const persistedStack = hydrated.data.stacks.find((stack) => stack.baseUrl === baseUrl);\n    if (persistedStack && persistedStack.credential === null) {\n      return Result.failure(signInEnded());\n    }\n    return Result.success(persistedStack?.credential ?? grantOf(credential));\n  };\n\n  const rotateOnce = async (baseUrl: BaseUrl): Promise<Result<string>> =>\n    persistor.locked(async (store) => {\n      const credential = state.auth.requireCredential(baseUrl);\n      if (!credential.success) return credential;\n      const grant = await getGrantForRotation(store, baseUrl, credential.data);\n      if (!grant.success) return grant;\n\n      const refreshed = await refresh(baseUrl, grant.data);\n      if (!refreshed.success) {\n        if (isUnauthorized(refreshed.error)) await expire(baseUrl, store);\n        return refreshed;\n      }\n\n      const accessToken = Result.map(\n        state.auth.applyRefresh(baseUrl, refreshed.data),\n        () => refreshed.data.accessToken,\n      );\n      await store.persistStack(baseUrl, state.store.get());\n      return accessToken;\n    });\n\n  const rotate = (baseUrl: BaseUrl): Promise<Result<string>> =>\n    ensure(rotationMap, baseUrl, () => dedupe(() => rotateOnce(baseUrl)))();\n\n  // A cookie grant is dead off the stack's own origin: the browser sends no session cookie there.\n  const restoreStack = async (\n    baseUrl: BaseUrl,\n    grant: Grant,\n    retained = false,\n  ): Promise<StackRestore> =>\n    persistor.locked(async (store) => {\n      const session = await store.read();\n      const storedStack = session.stacks.find((stack) => stack.baseUrl === baseUrl);\n      const latestGrant = retained ? storedStack?.retained?.grant : storedStack?.credential;\n      if (storedStack && !latestGrant) return 'skipped';\n\n      const restoring = state.auth.startRestore(baseUrl);\n      if (!restoring.success) return 'unreachable';\n\n      const refreshed = await refresh(baseUrl, latestGrant ?? grant);\n      if (!refreshed.success) {\n        state.auth.cancelRestore(baseUrl);\n        if (isUnauthorized(refreshed.error)) {\n          if (retained) state.auth.dropRetained(baseUrl);\n          await store.persistStack(baseUrl, state.store.get());\n          return 'refused';\n        }\n        return 'unreachable';\n      }\n\n      state.auth.authenticate(baseUrl, refreshed.data);\n      if (!state.auth.requireCredential(baseUrl).success) return 'unreachable';\n      if (retained) state.auth.dropRetained(baseUrl);\n      await store.persistStack(baseUrl, state.store.get());\n      return 'restored';\n    });\n\n  // Never writes the scope: `lastActive` is the caller's to select.\n  const restore = async (): Promise<{\n    lastActive: PersistedSession['current'];\n    status: RestoreStatus;\n  }> => {\n    // An unreadable store is `unreachable`: what it holds is still good, so persistence waits\n    // for a sign-in to replace it.\n    const hydrated = await persistor\n      .locked((store) => store.read())\n      .catch((error: unknown) => {\n        console.warn('createCredentials: the stored session could not be read', error);\n        return null;\n      });\n    if (hydrated === null) return { lastActive: null, status: 'unreachable' };\n    const { stacks, current } = hydrated;\n    const scoped = stacks.find(({ baseUrl }) => baseUrl === current?.baseUrl);\n\n    const restored = stacks.map(\n      async ({ baseUrl, credential, retained }): Promise<StackRestore> => {\n        state.stacks.ensure(baseUrl);\n        if (!credential && !retained) return 'unreachable';\n        if (Result.unwrapOr(state.auth.getEpoch(baseUrl), 0) > 0) return 'skipped';\n        // A retained sign-out stays signed out across reloads.\n        if (retained) state.auth.retain(baseUrl, retained);\n        if (!credential) return 'unreachable';\n        return restoreStack(baseUrl, credential);\n      },\n    );\n\n    const results = await Promise.all(restored);\n    const scopedOutcome = scoped?.credential ? results[stacks.indexOf(scoped)] : undefined;\n\n    return { lastActive: current, status: toRestoreStatus(scopedOutcome) };\n  };\n\n  const restoreRetained = async (baseUrl: BaseUrl): Promise<StackRestore> => {\n    const { grant } = Result.unwrap(state.auth.requireRetained(baseUrl));\n    return restoreStack(baseUrl, grant, true);\n  };\n\n  /**\n   * - Drops the rotation, so the next sign-in's requests don't join the dying one.\n   * - Writes nothing: the caller persists the stack, under the lock it holds or takes.\n   */\n  const signOut = (baseUrl: BaseUrl, options?: SignOutOptions) => {\n    rotationMap.delete(baseUrl);\n    const signedOut = state.auth.signOut(baseUrl, options);\n    onSignedOut?.(baseUrl);\n\n    return signedOut;\n  };\n\n  // One expiry per sign-in: the latch re-arms on `authenticate`. `onExpired` fires after the\n  // write, so a listener may leave the document at once.\n  const expire = async (baseUrl: BaseUrl, store: Locked) => {\n    if (!state.auth.notifyExpired(baseUrl)) return;\n    signOut(baseUrl);\n    await store.persistStack(baseUrl, state.store.get());\n    onExpired?.(baseUrl);\n  };\n\n  // Best-effort: on failure keep the token in hand; a real 401 drives the mandatory rotation.\n  const renewIfStale = async (baseUrl: BaseUrl): Promise<void> => {\n    const isStale = Result.map(\n      state.auth.requireCredential(baseUrl),\n      ({ issuedAt, expiresIn }) => Date.now() >= issuedAt + expiresIn * 1000 * refreshThreshold,\n    );\n    if (Result.unwrapOr(isStale, false)) await rotate(baseUrl);\n  };\n\n  const middleware = (baseUrl: BaseUrl): MiddlewareFn =>\n    createBearerAuthMiddleware({\n      getAccessToken: async ({ forceRefresh = false } = {}) => {\n        if (forceRefresh) {\n          // `null`, not a rejection: nothing to rotate, so the caller keeps its original 401.\n          if (!state.auth.requireCredential(baseUrl).success) return null;\n          return Result.unwrap(await rotate(baseUrl));\n        }\n\n        await renewIfStale(baseUrl);\n        return state.auth.getAccessToken(baseUrl);\n      },\n    });\n\n  return { middleware, rotate, renewIfStale, restore, restoreRetained, signOut };\n};\n","import type { AuthStrategy } from '../../clients/auth';\nimport { createStorageClient } from '../../clients/storage';\nimport type { ServiceId } from '../../clients/storage/types';\nimport type { MiddlewareFn } from '../../fetchClient';\nimport { KeboolaHttpHeader } from '../../internal';\nimport { isBuiltInProperty } from '../../serviceClientRegistry';\nimport { ensure, Result } from '../../utils';\nimport type { ProjectApi } from '../createApi';\nimport type { createMiddlewareFor } from '../createMiddlewareFor';\nimport { createSdk } from '../createSdk';\nimport { createServiceClients } from '../createServiceClients';\nimport { assert, KeboolaError, KeboolaErrorType } from '../errors';\n\nimport type { BaseUrl } from './state/types';\nimport type { createCredentials } from './credentials';\nimport type { PerStack } from './perStack';\nimport type { StateApi } from './state';\n\nexport type ProjectId = number;\n\n/** A project: addressed only inside its own stack, whose credential it borrows via a header. */\nexport type ProjectAddress = { baseUrl: BaseUrl; projectId: ProjectId };\n\n// A project id is unique only within its stack.\ntype ProjectKey = `${BaseUrl}#${ProjectId}`;\n\nconst projectKey = ({ baseUrl, projectId }: ProjectAddress): ProjectKey =>\n  `${baseUrl}#${projectId}`;\n\ntype ServiceClients = ReturnType<typeof createServiceClients>['client'];\n\ntype Options = {\n  state: StateApi;\n  credentials: ReturnType<typeof createCredentials>;\n  middlewareFor: ReturnType<typeof createMiddlewareFor>;\n  stack: PerStack;\n};\n\n/**\n * One handle per project, and the one call that drops it.\n *\n * Every client belongs to the credential that built it — a client set carries its middleware\n * chain — so the handle dies with the sign-in, and `forgetUnder` is the only thing that ends one.\n */\nexport const createPerProject = ({ state, credentials, middlewareFor, stack }: Options) => {\n  // The project-id header outside the auth middleware, so it is set before the 401 replay clones\n  // the request.\n  const attachFor = ({ baseUrl, projectId }: ProjectAddress): MiddlewareFn => {\n    const withProjectId: MiddlewareFn = (next) => (request) => {\n      request.request.headers.set(KeboolaHttpHeader.PROJECT_ID, String(projectId));\n      return next(request);\n    };\n\n    return (next) => withProjectId(credentials.middleware(baseUrl)(next));\n  };\n\n  // No static header: the auth middleware stamps the live token, so this never reaches the wire.\n  const authFor = ({ projectId }: ProjectAddress): AuthStrategy => ({\n    type: 'bearer',\n    token: '',\n    projectId,\n  });\n\n  /**\n   * One project's surface: the stack's fields from `perStack`, the rest built for the project.\n   *\n   * - Checked per property read but `baseUrl`: `SignInEnded` once the sign-in it was built under\n   *   ends, and `NotAuthenticated` before one lands.\n   */\n  const build = (project: ProjectAddress) => {\n    let isLive = true;\n    const attach = attachFor(project);\n    const storage = createStorageClient({\n      baseUrl: project.baseUrl,\n      auth: authFor(project),\n      middlewares: middlewareFor('storage', [attach]),\n    });\n    const { client, meta } = createServiceClients({\n      baseUrl: project.baseUrl,\n      auth: authFor(project),\n      // A resolver rather than a URL: the first request awaits the stack index if it is still in\n      // flight.\n      getServiceBaseUrl: (serviceId: ServiceId) => async () => {\n        const serviceUrl = (await stack.context.getAsync(project.baseUrl)).getServiceUrl(serviceId);\n\n        assert(serviceUrl, KeboolaErrorType.NotReady);\n        return serviceUrl;\n      },\n      middlewareFor,\n      attachTokenMiddleware: attach,\n    });\n    const sdk = createSdk({ storage, services: client });\n\n    const api = new Proxy({} as ProjectApi, {\n      get: (_target, property) => {\n        if (isBuiltInProperty(property)) return undefined;\n        // The address needs no sign-in: a query key names the project before one lands.\n        if (property === 'baseUrl') return project.baseUrl;\n\n        if (!isLive) throw new KeboolaError(KeboolaErrorType.SignInEnded);\n        Result.unwrap(state.auth.requireCredential(project.baseUrl));\n\n        if (property === 'stack' || property === 'auth' || property === 'management') {\n          return stack.get(project.baseUrl)[property];\n        }\n        if (property === 'storage') return storage;\n        if (property === 'sdk') return sdk;\n        if (property === 'serviceMeta') return meta;\n\n        return client[property as keyof ServiceClients];\n      },\n    });\n\n    return {\n      api,\n      end: () => {\n        isLive = false;\n      },\n    };\n  };\n\n  const derived = new Map<ProjectKey, ReturnType<typeof build>>();\n\n  const get = (project: ProjectAddress): ProjectApi =>\n    ensure(derived, projectKey(project), () => build(project)).api;\n\n  const forgetUnder = (baseUrl: BaseUrl) => {\n    for (const [key, record] of derived) {\n      if (!key.startsWith(`${baseUrl}#`)) continue;\n      record.end();\n      derived.delete(key);\n    }\n  };\n\n  return { get, forgetUnder };\n};\n","import * as z from 'zod';\n\nimport { type Cell, createPersistor } from '../../utils/persistor';\nimport type { StorageAdapter } from '../types';\n\nimport type { BaseUrl, Stack } from './state/types';\nimport { grantOf, type State } from './state';\n\n/**\n * Where a bearer session is persisted, under whichever adapter the client was given.\n *\n * Exported because a consumer sometimes has to drop a session a client cannot reach: the adapter is\n * chosen at construction, so a client built without one holds no handle to the storage its own\n * session is sitting in. `AppAuthStrategy` in kbc-ui is that case.\n */\nexport const SESSION_STORAGE_KEY = 'keboola:session';\n\n/**\n * What survives a reload, per grant type.\n *\n * - Written under `credential`: the key every blob already stored carries.\n *\n * - `token`: the refresh token. It rotates, is single-use and is server-revocable, so a leaked\n *   snapshot has limited and revocable value. The access token is never written.\n * - `cookie`: the session id. The session cookie is the durable half and the browser keeps it;\n *   the id alone renews nothing.\n */\nconst persistedGrantSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('token'), refreshToken: z.string() }),\n  z.object({ type: z.literal('cookie'), sessionId: z.string() }),\n]);\n\nconst persistedStackSchema = z.object({\n  baseUrl: z.string(),\n  // A kind this build does not know costs that stack its sign-in, not the whole table.\n  credential: persistedGrantSchema.nullable().catch(null),\n  retained: z.object({ grant: persistedGrantSchema }).nullable().default(null).catch(null),\n  /**\n   * Written empty, never read.\n   * - An older build parses a stack without it as corrupt, and signs out.\n   */\n  projects: z.array(z.unknown()),\n});\n\nconst persistedSessionSchema = z.object({\n  current: z\n    .object({\n      baseUrl: z.string(),\n      /**\n       * Written `null`, never read: the project is the app's to keep.\n       * - An older build parses a `current` without it as corrupt, and signs out.\n       */\n      projectId: z.number().nullable(),\n    })\n    .nullable(),\n  stacks: z.array(persistedStackSchema),\n});\n\nexport type PersistedSession = z.infer<typeof persistedSessionSchema>;\ntype PersistedStack = z.infer<typeof persistedStackSchema>;\n\nconst EMPTY_PERSISTED_SESSION: PersistedSession = { current: null, stacks: [] };\n\nconst grantsOf = (stack: Stack): Pick<PersistedStack, 'credential' | 'retained'> => ({\n  credential: stack.auth.status === 'authenticated' ? grantOf(stack.auth.credential) : null,\n  retained: stack.retained,\n});\n\n/**\n * The stored session, rewritten from the table except for the grants.\n *\n * - Scope and stack list come from memory.\n * - `credential` and `retained` stay as stored: a grant another document rotated must not be put\n *   back by a snapshot of this one's older table.\n */\nconst mergeSnapshot = (stored: PersistedSession, { active, stacks }: State): PersistedSession => ({\n  current: { baseUrl: active, projectId: null },\n  stacks: Object.values(stacks).map(({ baseUrl }) => {\n    const kept = stored.stacks.find((stack) => stack.baseUrl === baseUrl);\n    return {\n      baseUrl,\n      credential: kept?.credential ?? null,\n      retained: kept?.retained ?? null,\n      projects: [],\n    };\n  }),\n});\n\nconst upsertStack = (stored: PersistedSession, row: PersistedStack): PersistedSession => {\n  const index = stored.stacks.findIndex((stack) => stack.baseUrl === row.baseUrl);\n  const stacks = [...stored.stacks];\n  if (index < 0) stacks.push(row);\n  else stacks[index] = row;\n  return { ...stored, stacks };\n};\n\n/** What a caller may do while it holds the session lock. */\nexport type Locked = {\n  read: () => Promise<PersistedSession>;\n  /** One stack's grants as the table holds them. */\n  persistStack: (baseUrl: BaseUrl, state: State) => Promise<void>;\n};\n\n/**\n * The stored session, reached in two ways.\n *\n * - `locked`: the only way to read, and the only way to a grant write. Rotation and restore hold\n *   it across the refresh; sign-in, sign-out and the boot restore open it for one step.\n * - `snapshot`: the table minus its grants, under the lock, coalesced; what the store subscription\n *   feeds, and what a scope change awaits before the document leaves.\n */\nexport const createSessionPersistor = (storage?: StorageAdapter) => {\n  const persistor = createPersistor<PersistedSession>({\n    storage,\n    key: SESSION_STORAGE_KEY,\n    schema: persistedSessionSchema,\n    defaultValue: EMPTY_PERSISTED_SESSION,\n  });\n\n  const persistStack = (\n    cell: Cell<PersistedSession>,\n    baseUrl: BaseUrl,\n    { stacks }: State,\n  ): Promise<void> => {\n    const stack: Stack | undefined = stacks[baseUrl];\n    if (stack === undefined) return Promise.resolve();\n\n    return cell.modify((stored) =>\n      upsertStack(stored, { baseUrl, ...grantsOf(stack), projects: [] }),\n    );\n  };\n\n  const locked = <R>(task: (store: Locked) => Promise<R>): Promise<R> =>\n    persistor.locked((cell) =>\n      task({\n        read: cell.read,\n        persistStack: (baseUrl, state) => persistStack(cell, baseUrl, state),\n      }),\n    );\n\n  let latest: State | null = null;\n  let pending: Promise<void> | null = null;\n  // Resolves once a write holding `state` (or a later one) has landed; calls made while a write\n  // waits for the lock share it.\n  const snapshot = (state: State): Promise<void> => {\n    latest = state;\n    if (pending) return pending;\n    const write = persistor.locked((cell) => {\n      pending = null;\n      const table = latest ?? state;\n      return cell.modify((stored) => mergeSnapshot(stored, table));\n    });\n    pending = write;\n    return write;\n  };\n\n  return { locked, snapshot };\n};\n","import { createStorageClient } from '../../clients/storage';\nimport { createStack, type ServiceUrls, type Stack } from '../../domain/stack';\n\nimport type { BaseUrl, State } from './state/types';\nimport type { StateApi } from './state';\n\nconst STACK_INDEX_TIMEOUT_MS = 30_000;\n\ntype Settled = { status: 'ready'; value: Stack } | { status: 'errored'; error: unknown };\ntype Entry = { status: 'pending'; settled: Promise<Settled> } | Settled;\n\ntype Options = {\n  state: StateApi;\n  clientServiceUrls?: ServiceUrls;\n};\n\n/**\n * One parsed stack index per stack; `createStack` applies the dev and production overrides.\n *\n * - One fetch per stack: concurrent askers share it, a landed index is never refetched.\n * - A failure is held until a retry; nothing here needs a rejection handler.\n * - Every status change is copied onto the stack's row, for the consumers that render it.\n */\nexport const createStackContext = ({ state, clientServiceUrls }: Options) => {\n  const entries = new Map<BaseUrl, Entry>();\n\n  const set = (baseUrl: BaseUrl, entry: Entry) => {\n    entries.set(baseUrl, entry);\n    state.stacks.updateContext(baseUrl, entry.status);\n  };\n\n  const fetchStack = async (baseUrl: BaseUrl) => {\n    const stackInfo = await createStorageClient({\n      baseUrl,\n      auth: { type: 'sapi-token', token: '' },\n    }).getStackInfo({ exclude: 'componentDetails' }, AbortSignal.timeout(STACK_INDEX_TIMEOUT_MS));\n    return createStack({ stackInfo, clientServiceUrls });\n  };\n\n  const run = (baseUrl: BaseUrl): Entry => {\n    const settle = (next: Settled): Settled => {\n      set(baseUrl, next);\n      return next;\n    };\n\n    const entry: Entry = {\n      status: 'pending',\n      settled: fetchStack(baseUrl).then(\n        (value) => settle({ status: 'ready', value }),\n        (error: unknown) => settle({ status: 'errored', error }),\n      ),\n    };\n\n    set(baseUrl, entry);\n    return entry;\n  };\n\n  const get = (baseUrl: BaseUrl): Stack | null => {\n    const entry = entries.get(baseUrl);\n    return entry?.status === 'ready' ? entry.value : null;\n  };\n\n  const getAsync = async (baseUrl: BaseUrl): Promise<Stack> => {\n    const cached = entries.get(baseUrl);\n    const entry = cached === undefined || cached.status === 'errored' ? run(baseUrl) : cached;\n    const settled = entry.status === 'pending' ? await entry.settled : entry;\n\n    if (settled.status === 'errored') throw settled.error;\n    return settled.value;\n  };\n\n  const subscriber = ({ stacks }: State) => {\n    for (const { baseUrl } of Object.values(stacks)) if (!entries.has(baseUrl)) run(baseUrl);\n  };\n\n  return { subscriber, get, getAsync };\n};\n","import { createAuthClient } from '../../clients/auth/authClient';\nimport { createManagementClient } from '../../clients/management';\nimport { ensure } from '../../utils';\nimport type { StackApi } from '../createApi';\nimport type { createMiddlewareFor } from '../createMiddlewareFor';\nimport { assert, KeboolaErrorType } from '../errors';\nimport type { KeboolaOptions } from '../types';\n\nimport type { BaseUrl } from './state/types';\nimport { createStackContext } from './context';\nimport type { createCredentials } from './credentials';\nimport type { StateApi } from './state';\n\ntype Options = {\n  state: StateApi;\n  credentials: ReturnType<typeof createCredentials>;\n  middlewareFor: ReturnType<typeof createMiddlewareFor>;\n  clientServiceUrls?: KeboolaOptions['clientServiceUrls'];\n};\n\n/**\n * Everything one stack derives.\n *\n * Outlives a sign-out, unlike anything in `perProject`: both clients read the credential live per\n * request, so neither belongs to one sign-in, and the stack index is public.\n */\nexport const createPerStack = ({\n  state,\n  credentials,\n  middlewareFor,\n  clientServiceUrls,\n}: Options) => {\n  const context = createStackContext({ state, clientServiceUrls });\n  const derived = new Map<BaseUrl, StackApi>();\n\n  const get = (baseUrl: BaseUrl): StackApi =>\n    ensure(derived, baseUrl, () => ({\n      baseUrl,\n      // `NotReady` until the stack index lands.\n      get stack() {\n        const parsed = context.get(baseUrl);\n        assert(parsed, KeboolaErrorType.NotReady);\n        return parsed;\n      },\n      auth: createAuthClient({\n        baseUrl,\n        middlewares: middlewareFor('auth', [credentials.middleware(baseUrl)]),\n      }),\n      management: createManagementClient({\n        baseUrl,\n        auth: { type: 'bearer', token: '' },\n        middlewares: middlewareFor('management', [credentials.middleware(baseUrl)]),\n      }),\n    }));\n\n  return { context, get };\n};\n\nexport type PerStack = ReturnType<typeof createPerStack>;\n","import { HttpHeader, normalizeBaseUrl } from '../../fetchClient';\nimport { KeboolaHttpHeader } from '../../internal';\nimport { lazy, Result } from '../../utils';\nimport type { ProjectApi, StackApi } from '../createApi';\nimport { createMiddlewareFor } from '../createMiddlewareFor';\nimport { KeboolaError, KeboolaErrorType } from '../errors';\nimport type { KeboolaOptions } from '../types';\n\nimport type { BaseUrl, CredentialInput, Stack, State, TokenCredentialInput } from './state/types';\nimport { createCredentials, type RestoreStatus } from './credentials';\nimport { createPerProject, type ProjectAddress, type ProjectId } from './perProject';\nimport { createSessionPersistor } from './persistor';\nimport { createPerStack } from './perStack';\nimport { createState, type SignOutOptions } from './state';\n\n/**\n * The bearer client: the session table, its two scopes, and the surface they back.\n *\n * - Credential-derived state is owned by the scope whose end ends it (`perStack`, `perProject`).\n */\nexport const createKeboola = ({\n  defaultBaseUrl,\n  storage,\n  middlewares,\n  clientServiceUrls,\n  onExpired,\n}: KeboolaOptions) => {\n  const state = createState(normalizeBaseUrl(defaultBaseUrl));\n  const persistor = createSessionPersistor(storage);\n  const middlewareFor = createMiddlewareFor(middlewares);\n  const credentials = createCredentials({\n    state,\n    persistor,\n    middlewares: middlewareFor('auth'),\n    // Read at call time, so it reaches the `perProject` built below.\n    onSignedOut: (baseUrl) => perProject.forgetUnder(baseUrl),\n    onExpired,\n  });\n\n  const perStack = createPerStack({ state, credentials, middlewareFor, clientServiceUrls });\n  const perProject = createPerProject({ state, credentials, middlewareFor, stack: perStack });\n\n  state.store.subscribe(perStack.context.subscriber);\n  // The default stack is in the table from the start, so no change announces it.\n  perStack.context.subscriber(state.store.get());\n\n  const selectStack = (baseUrl: string): Stack => state.stacks.select(normalizeBaseUrl(baseUrl));\n\n  /** The active stack, or a named one — normalised to key like `select`. */\n  const requireStackUrl = (baseUrl?: string): BaseUrl =>\n    baseUrl === undefined ? state.stacks.getActive().baseUrl : normalizeBaseUrl(baseUrl);\n\n  /** A project id is unique only within its stack: it always names one on the active stack. */\n  const onActiveStack = (projectId: ProjectId): ProjectAddress => ({\n    baseUrl: requireStackUrl(),\n    projectId,\n  });\n\n  /**\n   * Auth headers for a non-fetch transport (the chat stream), renewed first once near expiry.\n   *\n   * - No middleware recovers a 401 there.\n   * - Pinned to the stack active at the call: a stack switch mid-renewal does not re-point it.\n   * - Throws `NotAuthenticated` if that stack signed out meanwhile.\n   */\n  const getAuthHeadersAsync = async (projectId: ProjectId): Promise<Record<string, string>> => {\n    const { baseUrl } = onActiveStack(projectId);\n    await credentials.renewIfStale(baseUrl);\n\n    const credential = Result.unwrap(state.auth.requireCredential(baseUrl));\n    return {\n      [HttpHeader.AUTHORIZATION]: `Bearer ${credential.accessToken}`,\n      [KeboolaHttpHeader.PROJECT_ID]: String(projectId),\n    };\n  };\n\n  /**\n   * A login or MFA-verify response, taken as the credential it carries.\n   *\n   * - Either grant type: the credential names what renews it (`refreshToken` or `sessionId`).\n   * - `refreshToken` is optional: a browser-mode login omits it, and MFA verify can't tell.\n   * - A `token` credential without one is refused here — it would die at its first refresh.\n   */\n  type AuthenticateInput =\n    | (Omit<TokenCredentialInput, 'refreshToken'> & { refreshToken?: string | null })\n    | Exclude<CredentialInput, { type: 'token' }>;\n\n  const toCredential = (input: AuthenticateInput): CredentialInput => {\n    if (input.type !== 'token') return input;\n\n    const { refreshToken } = input;\n    if (!refreshToken) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);\n    return { ...input, refreshToken };\n  };\n\n  const authenticate = (input: AuthenticateInput): Stack => {\n    const { baseUrl } = state.stacks.getActive();\n    const signedIn = Result.unwrap(state.auth.authenticate(baseUrl, toCredential(input)));\n    persistor\n      .locked((store) => store.persistStack(baseUrl, state.store.get()))\n      .catch((error: unknown) => {\n        console.warn('createKeboola: the sign-in could not be stored', error);\n      });\n    return signedIn;\n  };\n\n  // Getters: each read resolves against the stack active at that moment.\n  const active = () => perStack.get(state.stacks.getActive().baseUrl);\n  const stackApi: StackApi = {\n    get baseUrl() {\n      return active().baseUrl;\n    },\n    get stack() {\n      return active().stack;\n    },\n    get auth() {\n      return active().auth;\n    },\n    get management() {\n      return active().management;\n    },\n  };\n\n  const getStackApi = (): StackApi => stackApi;\n\n  const getProjectApi = (projectId: ProjectId): ProjectApi =>\n    perProject.get(onActiveStack(projectId));\n\n  /**\n   * The scope's sign-in, or a named stack's — and everything that sign-in derived.\n   *\n   * - `retain` keeps the grant on the stack, persisted beside the sign-in it ended, for\n   *   `restoreRetained`; the next sign-in on the stack replaces it.\n   * - The table is signed out on return; the promise resolves once that is stored, so a caller\n   *   leaving the document waits for it.\n   */\n  const signOut = ({\n    baseUrl,\n    ...options\n  }: SignOutOptions & { baseUrl?: string } = {}): Promise<Stack> => {\n    const target = requireStackUrl(baseUrl);\n\n    // Teardown rides `credentials.signOut`: an expiry skips this path.\n    const signedOut = Result.unwrap(credentials.signOut(target, options));\n    return persistor\n      .locked((store) => store.persistStack(target, state.store.get()))\n      .then(() => signedOut);\n  };\n\n  /** Signs a stack back in from what a retained sign-out kept; `unreachable` leaves it to retry. */\n  const restoreRetained = (baseUrl: string) =>\n    credentials.restoreRetained(normalizeBaseUrl(baseUrl));\n\n  /**\n   * `input` replaces the active stack's sign-in, whatever it holds.\n   *\n   * - Signs out first, always: a sign-out moves the epoch even on an anonymous stack, so a stored\n   *   session still being restored cannot land on top of this one.\n   */\n  const replace = (input: AuthenticateInput): Stack => {\n    void signOut();\n    return authenticate(input);\n  };\n\n  let persisting = false;\n  /**\n   * Persistence starts only once the restore has settled.\n   *\n   * - Mid-hydration an unexchanged stack is `anonymous`; the persistor would erase the\n   *   refresh token the exchange is about to spend.\n   * - Writes the settled table once: the subscription fires only on the next change.\n   */\n  const enablePersistence = () => {\n    // A failed resume is retried, and each attempt lands here again.\n    if (persisting) return;\n    persisting = true;\n\n    snapshot(state.store.get());\n    state.store.subscribe(snapshot);\n  };\n\n  const snapshot = (table: State): void => {\n    persistor.snapshot(table).catch((error: unknown) => {\n      console.warn('createKeboola: the session could not be stored', error);\n    });\n  };\n\n  // What a scope change resolves with: its write, once persistence has started; nothing before.\n  const persistScope = (): Promise<void> =>\n    persisting ? persistor.snapshot(state.store.get()) : Promise.resolve();\n\n  /**\n   * The same, deferred until a sign-in.\n   *\n   * - After an unreachable restore the table is anonymous but the stored token is still good;\n   *   writing earlier would drop it.\n   */\n  const enablePersistenceOnSignIn = () => {\n    const stop = state.store.subscribe((next) => {\n      if (!Object.values(next.stacks).some(({ auth }) => auth.status === 'authenticated')) return;\n\n      stop();\n      enablePersistence();\n    });\n  };\n\n  // Rebuilds the stored stacks and credentials; `lastActive` is the scope they were stored under,\n  // `null` only when nothing was.\n  const restore = lazy(() =>\n    credentials.restore().then(\n      (restored) => {\n        if (restored.status === 'unreachable') enablePersistenceOnSignIn();\n        else enablePersistence();\n\n        return restored;\n      },\n      (error: unknown) => {\n        // Not `enablePersistence`: writing the half-restored table now would erase the very session\n        // the retry `lazy` allows is meant to read.\n        enablePersistenceOnSignIn();\n        throw error;\n      },\n    ),\n  );\n\n  const getActiveStack = state.stacks.getActive;\n\n  const isAuthenticated = () => getActiveStack().auth.status === 'authenticated';\n\n  /**\n   * Picks up where the stored session left off, once.\n   *\n   * 1. The stored stack becomes active again.\n   * 2. Nothing stored, or the restore failed: `defaultBaseUrl` stays active; a failure rethrows.\n   * 3. The caller got there first (a select, sign-in or sign-out): its scope and sign-ins stand.\n   *\n   * - Resolves with the stored credential's fate — only this tells `expired` from `empty`.\n   * - Other stacks still come back, persistence still starts; repeat calls share one promise.\n   */\n  const resume = lazy(() =>\n    restore().then(({ lastActive, status }): RestoreStatus => {\n      if (lastActive && !callerScoped) selectStack(lastActive.baseUrl);\n\n      return status;\n    }),\n  );\n\n  // Set by the public verbs that pick a scope or change a sign-in — the default the table starts on,\n  // the resume's own re-scope and the restore's sign-ins are not a caller's choice.\n  let callerScoped = false;\n  const byCaller =\n    <A extends unknown[], R>(verb: (...args: A) => R) =>\n    (...args: A): R => {\n      callerScoped = true;\n      return verb(...args);\n    };\n\n  return {\n    getStackApi,\n    getProjectApi,\n    session: {\n      getState: state.store.get,\n      subscribe: state.store.subscribe,\n      resume,\n\n      stack: {\n        getActive: getActiveStack,\n        /** Scoped on return; resolves once that is stored, for a caller leaving the document. */\n        select: byCaller((baseUrl: string): Promise<Stack> => {\n          const stack = selectStack(baseUrl);\n          return persistScope().then(() => stack);\n        }),\n        getContext: (baseUrl?: string) => perStack.context.get(requireStackUrl(baseUrl)),\n        getContextAsync: (baseUrl?: string) => perStack.context.getAsync(requireStackUrl(baseUrl)),\n      },\n\n      auth: {\n        authenticate: byCaller(authenticate),\n        replace: byCaller(replace),\n        signOut: byCaller(signOut),\n        restoreRetained: byCaller(restoreRetained),\n        /** Whether the active stack holds a credential — `restoring` is not one yet. */\n        isAuthenticated,\n        isAuthenticatedAsync: () => resume().then(isAuthenticated),\n        getHeadersAsync: getAuthHeadersAsync,\n      },\n    },\n  };\n};\n","import { ApiError } from '../errors';\nimport { type HttpMethod, isApiError, type MiddlewareFn } from '../fetchClient';\nimport { CREDENTIAL_HEADERS, REDACTED, redactHeaders } from '../internal';\nimport { generateUUID } from '../utils';\n\nconst CORRELATION_ID_HEADER = 'X-Correlation-ID';\n\nconst ALWAYS_REDACTED_HEADERS = [...CREDENTIAL_HEADERS, 'set-cookie'];\n\nconst ALWAYS_REDACTED_QUERY_PARAMS = new Set([\n  'token',\n  'apikey',\n  'api_key',\n  'access_token',\n  'refresh_token',\n  'code',\n  'state',\n  'signature',\n  'sig',\n  'x-amz-signature',\n  'x-amz-credential',\n  'x-amz-security-token',\n  'password',\n  'secret',\n]);\n\nconst getRedactedUrl = (rawUrl: string): string => {\n  const url = new URL(rawUrl);\n  if (url.username) url.username = REDACTED;\n  if (url.password) url.password = REDACTED;\n\n  url.searchParams.forEach((_value, key) => {\n    if (ALWAYS_REDACTED_QUERY_PARAMS.has(key.toLowerCase())) {\n      url.searchParams.set(key, REDACTED);\n    }\n  });\n  return url.toString();\n};\n\n// Returns the request's correlation ID, generating and attaching one if missing.\n//\n// Forwarded via the X-Correlation-ID header so downstream services log the same ID,\n// letting all log lines for a single user action be stitched together across service\n// boundaries. Reuse when the caller already set one (preserves the chain inside a\n// larger trace); otherwise mint a fresh UUID to start a new trace.\nconst ensureCorrelationId = (request: Request): string => {\n  const correlationId = request.headers.get(CORRELATION_ID_HEADER) ?? generateUUID();\n  request.headers.set(CORRELATION_ID_HEADER, correlationId);\n  return correlationId;\n};\n\nconst getRedactedHeaders = (headers: Headers, redacted: string[]): Record<string, string> =>\n  redactHeaders(headers, [...ALWAYS_REDACTED_HEADERS, ...redacted]);\n\nexport type RequestLog = {\n  url: string;\n  headers: Record<string, string>;\n};\n\nexport type ResponseLog = {\n  status: number;\n  statusText: string;\n  headers: Record<string, string>;\n};\n\ntype BaseLog = {\n  correlationId: string;\n  method: HttpMethod;\n  durationMs: number;\n  request: RequestLog;\n};\n\ntype SuccessLog = BaseLog & {\n  response: ResponseLog;\n};\n\ntype ErrorLog = BaseLog & {\n  error: Error;\n};\n\nexport type Log = SuccessLog | ErrorLog;\n\nexport type Logger = {\n  info?: (log: SuccessLog) => void;\n  error?: (log: ErrorLog) => void;\n};\n\nexport type LogLevel = 'error-only' | 'all';\n\nexport type LoggingOptions = {\n  logger?: Logger;\n  level?: LogLevel;\n  redactHeaders?: string[];\n};\n\nconst getRequestLog = (request: Request, redactedHeaders: string[]): RequestLog => ({\n  url: getRedactedUrl(request.url),\n  headers: getRedactedHeaders(request.headers, redactedHeaders),\n});\n\nconst getResponseLog = (response: Response, redactedHeaders: string[]): ResponseLog => ({\n  status: response.status,\n  statusText: response.statusText,\n  headers: getRedactedHeaders(response.headers, redactedHeaders),\n});\n\n// On failure the logger receives the thrown error itself. An ApiError masks only credential\n// request headers; its URL, its response headers and the caller's `redactHeaders` are left as\n// sent. Hand the logger a copy with the middleware's full redaction applied; the original error\n// is still thrown untouched.\nconst redactApiError = (error: ApiError, redactedHeaders: string[]): ApiError =>\n  new ApiError({\n    request: new Request(getRedactedUrl(error.request.url), {\n      method: error.request.method,\n      headers: getRedactedHeaders(error.request.headers, redactedHeaders),\n    }),\n    response: new Response(null, {\n      status: error.response.status,\n      statusText: error.response.statusText,\n      headers: getRedactedHeaders(error.response.headers, redactedHeaders),\n    }),\n    data: error.data,\n  });\n\nconst formatLog = (level: 'info' | 'error', log: Log): string => {\n  const parts = [`[${level.toUpperCase()}]`, `${Math.round(log.durationMs)}ms`, log.method];\n  parts.push(log.request.url);\n  if ('response' in log) parts.push(String(log.response.status));\n  return parts.join(' ');\n};\n\nconst createSafeLogger = (logger?: Logger, level: LogLevel = 'error-only'): Required<Logger> => {\n  return {\n    info: (log) => {\n      if (level !== 'all') return;\n      try {\n        if (logger?.info) {\n          logger.info(log);\n          return;\n        }\n\n        console.info(formatLog('info', log));\n      } catch {\n        /* never let logging break the request */\n      }\n    },\n    error: (log) => {\n      try {\n        if (logger?.error) {\n          logger.error(log);\n          return;\n        }\n\n        console.error(formatLog('error', log));\n      } catch {\n        /* never let logging break the request */\n      }\n    },\n  };\n};\n\nexport const createLoggingMiddleware = (options: LoggingOptions = {}): MiddlewareFn => {\n  const safeLogger = createSafeLogger(options.logger, options.level);\n  const redactHeaders = options.redactHeaders ?? [];\n\n  return (next) => async (fetchRequest) => {\n    const correlationId = ensureCorrelationId(fetchRequest.request);\n    const start = performance.now();\n    const method = fetchRequest.request.method.toLowerCase() as HttpMethod;\n    const requestLog = getRequestLog(fetchRequest.request, redactHeaders);\n\n    try {\n      const result = await next(fetchRequest);\n      safeLogger.info({\n        correlationId,\n        method,\n        durationMs: performance.now() - start,\n        request: requestLog,\n        response: getResponseLog(result.response, redactHeaders),\n      });\n      return result;\n    } catch (error) {\n      if (error instanceof Error)\n        safeLogger.error({\n          correlationId,\n          method,\n          durationMs: performance.now() - start,\n          request: requestLog,\n          error: isApiError(error) ? redactApiError(error, redactHeaders) : error,\n        });\n\n      throw error;\n    }\n  };\n};\n","import { ApiError } from '../errors';\nimport type { MiddlewareFn } from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { delay } from '../utils';\n\nconst DEFAULT_MAX_RETRIES = 5;\nconst DEFAULT_RETRYABLE_STATUSES: number[] = [\n  HttpStatus.INTERNAL_SERVER_ERROR,\n  HttpStatus.BAD_GATEWAY,\n  HttpStatus.SERVICE_UNAVAILABLE,\n  HttpStatus.GATEWAY_TIMEOUT,\n];\nconst DEFAULT_BACKOFF_FACTOR = 0.3;\n\nexport type RetryOptions = {\n  maxRetries?: number;\n  backoffFactor?: number;\n  shouldRetry?: (error: unknown, attempt: number) => boolean;\n};\n\nconst defaultShouldRetry = (error: unknown): boolean =>\n  error instanceof ApiError && DEFAULT_RETRYABLE_STATUSES.includes(error.response.status);\n\nexport const createRetryMiddleware = (options?: RetryOptions): MiddlewareFn => {\n  const {\n    maxRetries = DEFAULT_MAX_RETRIES,\n    backoffFactor = DEFAULT_BACKOFF_FACTOR,\n    shouldRetry = defaultShouldRetry,\n  } = options ?? {};\n\n  if (!Number.isInteger(maxRetries) || maxRetries < 0) {\n    throw new RangeError('maxRetries must be a non-negative integer');\n  }\n  if (!Number.isFinite(backoffFactor) || backoffFactor < 0) {\n    throw new RangeError('backoffFactor must be a finite non-negative number');\n  }\n\n  return (next) => async (request) => {\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      try {\n        return await next({ ...request, request: request.request.clone() });\n      } catch (error) {\n        if (attempt === maxRetries || !shouldRetry(error, attempt)) {\n          throw error;\n        }\n\n        const delayMs = backoffFactor * 1000 * Math.pow(2, attempt);\n        await delay(delayMs, request.request.signal ?? undefined);\n      }\n    }\n\n    throw new Error('unreachable');\n  };\n};\n","import type { MiddlewareFn } from '../fetchClient';\nimport { KeboolaHttpHeader } from '../internal';\n\n/** Stamps `X-KBC-Ui-Version`; an empty `uiVersion` sends no header. */\nexport const createUiVersionMiddleware = (uiVersion: string | null | undefined): MiddlewareFn => {\n  if (!uiVersion) return (next) => next;\n\n  return (next) => async (request) => {\n    request.request.headers.set(KeboolaHttpHeader.UI_VERSION, uiVersion);\n    return next(request);\n  };\n};\n","import type { ManagementToken } from '../clients/management/tokenTypes';\n\ntype Options = {\n  managementToken: ManagementToken | null;\n};\n\n/**\n * The admin behind a Manage token: `GET /manage/tokens/verify`, with the admin-level helpers.\n *\n * - `user` is absent for a token with no admin behind it (an application token) and for no token\n *   at all (a session the Manage API refused); every helper then answers `false`.\n */\nexport const createAdminAccount = ({ managementToken }: Options) => {\n  const user = managementToken?.user;\n  const adminFeatureSet = new Set(user?.features ?? []);\n\n  const hasAdminFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => adminFeatureSet.has(x));\n  };\n\n  const hasAnyAdminFeature = (...feature: string[]) => feature.some((x) => adminFeatureSet.has(x));\n\n  return {\n    isSuperAdmin: user?.isSuperAdmin ?? false,\n    hasAdminFeature,\n    hasAnyAdminFeature,\n    user,\n    managementToken,\n  };\n};\n\nexport type AdminAccount = ReturnType<typeof createAdminAccount>;\n","import type { DevBranch } from '../clients/storage/branches/types';\nimport { assert } from '../utils';\n\ntype BranchType = 'default' | 'dev';\n\ntype Options = {\n  devBranches: DevBranch[];\n};\n\nexport const createDefaultBranch = ({ devBranches }: Options) => {\n  const defaultBranch = devBranches.find((branch) => branch.isDefault);\n  assert(defaultBranch, 'No default branch found for the project.');\n\n  const getType = (branchId?: string | number): BranchType => {\n    if (branchId == null || branchId === 'default') return 'default';\n    return Number(branchId) === defaultBranch.id ? 'default' : 'dev';\n  };\n\n  return {\n    id: defaultBranch.id,\n    name: defaultBranch.name,\n    getType,\n    isDev: (branchId?: string | number) => getType(branchId) === 'dev',\n    isDefault: (branchId?: string | number) => getType(branchId) === 'default',\n  };\n};\n\nexport type DefaultBranch = ReturnType<typeof createDefaultBranch>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,MAAa,mBAAmB;CAC9B,cAAc;CACd,kBAAkB;CAClB,aAAa;CACb,sBAAsB;CACtB,gBAAgB;CAChB,mBAAmB;CACnB,gBAAgB;CAChB,WAAW;CACX,UAAU;CACV,wBAAwB;AAC1B;AAIA,MAAM,WAA6C;EAChD,iBAAiB,eAAe;EAChC,iBAAiB,mBAAmB;EACpC,iBAAiB,cAChB;EACD,iBAAiB,uBAChB;EACD,iBAAiB,iBAAiB;EAClC,iBAAiB,oBAChB;EACD,iBAAiB,iBAChB;EACD,iBAAiB,YAAY;EAC7B,iBAAiB,WAAW;EAC5B,iBAAiB,yBAChB;AACJ;AAEA,IAAa,eAAb,MAAa,qBAAqB,MAAM;CACtC;CAEA,YAAY,MAAwB;EAClC,MAAM,SAAS,KAAK;EACpB,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,aAAa,SAAS;CACpD;AACF;AAEA,MAAa,kBAAkB,UAC7B,iBAAiB;;AAGnB,SAAgBA,SAAU,OAA6B,MAA4C;CACjG,IAAI,SAAS,MAAM,MAAM,IAAI,aAAa,IAAI;AAChD;;ACtDA,SAAgB,OAAU,OAA6B,SAAqC;CAC1F,IAAI,SAAS,MACX,MAAM,IAAI,MAAM,OAAO;AAE3B;;;;;;;;;ACGA,MAAa,UACX,KACA,KACA,UACM;CACN,MAAM,WAAW,IAAI,IAAI,GAAG;CAC5B,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,UAAU,MAAM;CACtB,IAAI,IAAI,KAAK,OAAO;CAEpB,OAAO;AACT;;;;;;;;;ACVA,MAAa,YAAe,SAAiD;CAC3E,IAAI,UAAU;CACd,MAAM,UAA8C,CAAC;CAErD,MAAM,QAAQ,YAAY;EACxB,UAAU;EACV,MAAM,QAAQ,QAAQ,OAAO,CAAC;EAE9B,IAAI;GACF,MAAM,SAAS,MAAM,KAAK;GAC1B,MAAM,SAAS,WAAW,OAAO,QAAQ,MAAM,CAAC;EAClD,SAAS,OAAO;GACd,MAAM,SAAS,WAAW,OAAO,OAAO,KAAK,CAAC;EAChD;EAEA,IAAI,QAAQ,SAAS,GAAG,OAAO,MAAM;EACrC,UAAU;CACZ;CAEA,aAAa;EACX,MAAM,SAAS,QAAQ,cAA0B;EACjD,QAAQ,KAAK,MAAM;EACnB,IAAI,CAAC,SAAS,MAAW;EACzB,OAAO,OAAO;CAChB;AACF;;AChCA,MAAM,wBAAwB,UAA2B;CACvD,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO;CACjC,MAAM,QAAQ,OAAO,eAAe,KAAK;CACzC,OAAO,UAAU,OAAO,aAAa,UAAU;AACjD;AAEA,MAAa,gBAAmB,GAAM,MAAkB;CACtD,IAAI,OAAO,GAAG,GAAG,CAAC,GAAG,OAAO;CAC5B,IAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,OAAO,MAAM,YAAY,MAAM,MAAM,OAAO;CACvF,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,OAAO;CACjE,MAAM,QAAQ,OAAO,KAAK,CAAC;CAC3B,MAAM,QAAQ,OAAO,KAAK,CAAC;CAC3B,OAAO,MAAM,WAAW,MAAM,UAAU,MAAM,OAAO,QAAQ,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;AACxF;AASA,MAAa,sBAA+B,EAC1C,QACA,WACA,OACA,YAAY,mBACwC;CACpD,IAAI,MAAM,UAAU,OAAO,IAAI,CAAC;CAChC,MAAM,QAAQC,cAAAA,YAAY,MAAM,GAAG,CAAC;CAKpC,MAAM,cAAc,OAAO,WAAW,UAAU;EAC9C,MAAM,OAAO,UAAU,KAAK;EAC5B,IAAI,UAAU,KAAK,IAAI,GAAG;EAC1B,MAAM;EACN,MAAM,IAAI,MAAM,IAAI,CAAC;CACvB,CAAC;CAED,MAAM,MAAM,MAAM;CAElB,MAAM,YAAY,MAAM;CAExB,MAAM,gBAAgB;EACpB,YAAY;EACZ,MAAM,QAAQ;CAChB;CAEA,OAAO;EAAE;EAAK;EAAW;CAAQ;AACnC;;AC7BA,MAAa,2BAAoC,EAC/C,QACA,WACA,OACA,YAAY,mBAIT;CACH,MAAM,QAAQC,cAAAA,YAA2B,EAAE,OAAO,OAAO,CAAC;CAC1D,IAAI,aAAuB;CAC3B,IAAI,aAAa;CACjB,IAAI,aAAqC;CAEzC,MAAM,OAAO,QAAW;EACtB,YAAY,MAAM;EAClB,aAAa,IAAI,gBAAgB;EACjC,MAAM,gBAAgB,EAAE;EACxB,MAAM,IAAI,EAAE,OAAO,UAAU,CAAC;EAE9B,MAAM,KAAK,WAAW,MAAM,CAAC,CAAC,MAC3B,UAAU;GACT,IAAI,kBAAkB,YAAY,MAAM,IAAI;IAAE,OAAO;IAAS;GAAM,CAAC;EACvE,IACC,UAAU;GACT,IAAI,kBAAkB,YAAY,MAAM,IAAI;IAAE,OAAO;IAAW;GAAM,CAAC;EACzE,CACF;CACF;CAEA,MAAM,QAAQ,UAAa;EACzB,MAAM,OAAO,UAAU,KAAK;EAC5B,IAAI,SAAS,MAAM;GACjB,IAAI,eAAe,MAAM;GACzB,YAAY,MAAM;GAClB,aAAa;GACb,cAAc;GACd,aAAa;GACb,MAAM,IAAI,EAAE,OAAO,OAAO,CAAC;GAC3B;EACF;EACA,IAAI,eAAe,QAAQ,UAAU,YAAY,IAAI,GAAG;EACxD,aAAa;EACb,IAAI,IAAI;CACV;CACA,KAAK,OAAO,IAAI,CAAC;CAEjB,MAAM,cAAc,OAAO,UAAU,IAAI;CAEzC,MAAM,MAAM,MAAM;CAElB,MAAM,YAAY,MAAM;CAExB,MAAM,gBAAgB;EACpB,YAAY,MAAM;EAClB,YAAY;EACZ,MAAM,QAAQ;CAChB;CAEA,MAAM,WAAyC;EAAE;EAAK;EAAW;CAAQ;CAEzE,MAAM,gBACJ,IAAI,SAA0B,YAAY;EACxC,IAAI,2BAA2B,CAAC;EAChC,MAAM,SAAS,UAAyB;GACtC,IAAI,MAAM,UAAU,WAAW,MAAM,UAAU,WAAW;IACxD,mBAAmB;IACnB,QAAQ,KAAK;GACf;EACF;EACA,qBAAqB,MAAM,UAAU,KAAK;EAC1C,MAAM,MAAM,IAAI,CAAC;CACnB,CAAC;CAEH,OAAO;EAAE,OAAO;EAAU;CAAQ;AACpC;;AC9FA,MAAM,gBAAgB;AAmBtB,MAAM,cAAc,EAAE,eACpB,SAAS,UAAU,UAAU,SAAS,UAAU,gBAAgB,SAAS,UAAU;AAErF,MAAa,sBAAsB,EAAE,QAAQ,kBAAkB,CAAC,MAAoB;CAClF,MAAM,UAAUC,cAAAA,YAAyB,CAAC,CAAC;CAC3C,MAAM,+BAAe,IAAI,IAAwB;CAEjD,MAAM,aAAaC,yBAAAA,MAAMC,yBAAAA,SAAS,OAAO,aAAa,GAAG,CAAC;CAC1D,IAAI,UAAU;CAEd,MAAM,UAAU,QAAgB;EAC9B,aAAa,IAAI,GAAG,CAAC,GAAG;EACxB,aAAa,OAAO,GAAG;CACzB;CAEA,MAAM,QAAQ,SAAsB;EAClC,IAAI,OAAO;EAEX,OAAO,KAAK,SAAS,YAAY;GAC/B,MAAM,UAAU,KAAK,SAAS,UAAU,KAAK,KAAK,GAAG,EAAE;GAEvD,IAAI,CAAC,SAAS;GAEd,OAAO,QAAQ,GAAG;GAClB,OAAO,KAAK,QAAQ,UAAU,UAAU,OAAO;EACjD;EAEA,OAAO;CACT;CAEA,MAAM,WAAW,KAAa,aAC5B,QAAQ,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,UAAW,MAAM,QAAQ,MAAM;EAAE,GAAG;EAAO;CAAS,IAAI,KAAM,CAAC;CAEhG,MAAM,YAAY,WAA2B;EAC3C,MAAM,MAAM;EACZ,MAAM,QAAmB;GACvB;GACA,WAAW,KAAK,IAAI;GACpB,UAAU,OAAO,MAAM;GACvB,MAAM,OAAO;GACb,OAAO,OAAO;EAChB;EAEA,aAAa,IACX,KACA,OAAO,WAAW,aAAa,QAAQ,KAAK,QAAQ,CAAC,CACvD;EACA,QAAQ,IAAI,KAAK,CAAC,OAAO,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC;CAC7C;CAEA,MAAM,gBAAgB;EACpB,yBAAA,QAAQ,UAAU,QAAQ;CAC5B;CAEA,OAAO;EACL,MAAM,QAAQ;EACd;EACA,YAAY,aAAa,QAAQ,gBAAgB,SAAS,CAAC;EAC3D,aAAa;GACX,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,OAAO,GAAG,CAAC;GAC9C,QAAQ,IAAI,CAAC,CAAC;EAChB;EACA,UAAU,WAAW,QAAQ,IAAI,CAAC,CAAC,SAAS,UAAU,MAAM,KAAK,MAAM,CAAC;CAC1E;AACF;;ACtFA,MAAM,iBAAoB,WACtB,OAAO,UAAU,YAAY,UAAU,QAAS,OAAO,UAAU,eACnE,UAAU,SACV,OAAO,MAAM,SAAS;;;;;AAMxB,MAAa,oBAAoB;CAC/B,IAAI,OAA6B;CAEjC,MAAM,OAAU,SAA8B;EAC5C,IAAI,SAAS,MAAM;GACjB,MAAM,SAAS,KAAK,KAAK,IAAI;GAC7B,OAAO,OAAO,WACN,KAAA,SACA,KAAA,CACR;GACA,OAAO;EACT;EAEA,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK;EACf,SAAS,OAAO;GACd,OAAO,QAAQ,OAAO,KAAK;EAC7B;EAEA,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,QAAQ,QAAQ,KAAK;EAEvD,MAAM,SAAS,QAAQ,QAAQ,KAAK;EACpC,OAAO,OAAO,WACN,KAAA,SACA,KAAA,CACR;EACA,OAAO;CACT;CAEA,MAAM,SAAS,YAA2B;EACxC,OAAO,SAAS,MAAM;GACpB,MAAM,UAAU;GAChB,MAAM;GACN,IAAI,SAAS,SAAS;IACpB,OAAO;IACP;GACF;EACF;CACF;CAEA,OAAO;EAAE;EAAK;CAAO;AACvB;;;;;;;;AC7CA,MAAa,aACX,MACA,UACM;CACN,MAAM,MAA+B,EAAE,GAAG,KAAK;CAE/C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,UAAU,IAAI;EACpB,IAAI,OAAOC,sBAAAA,cAAc,OAAO,KAAKA,sBAAAA,cAAc,KAAK,IAAI,UAAU,SAAS,KAAK,IAAI;CAC1F;CAEA,OAAO;AACT;;ACVA,MAAa,2BAA2C;CACtD,eAAe;CACf,eAAe,CAAC;CAChB,kBAAkB,CAAC;AACrB;AAIA,MAAa,4BAA4C;CACvD,MAAM,wBAAQ,IAAI,IAAoB;CACtC,OAAO;EACL,UAAU,QAAQ,MAAM,IAAI,GAAG,KAAK;EACpC,UAAU,KAAK,UAAU;GACvB,MAAM,IAAI,KAAK,KAAK;EACtB;EACA,aAAa,QAAQ;GACnB,MAAM,OAAO,GAAG;EAClB;CACF;AACF;AAOA,MAAM,oBAAoB,SAA+C;CACvE,IAAI,MAAsB;CAC1B,IAAI;EACF,MAAM,KAAK;EACX,IAAI,KAAK;GACP,MAAM,QAAQ;GACd,IAAI,QAAQ,OAAO,KAAK;GACxB,IAAI,WAAW,KAAK;EACtB;CACF,SAAS,KAAK;EACZ,QAAQ,KAAK,qEAAqE,GAAG;EACrF,MAAM;CACR;CACA,IAAI,CAAC,KAAK,OAAO,oBAAoB;CAErC,MAAM,UAAU;CAChB,OAAO;EACL,UAAU,QAAQ,QAAQ,QAAQ,GAAG;EACrC,UAAU,KAAK,UAAU;GACvB,QAAQ,QAAQ,KAAK,KAAK;EAC5B;EACA,aAAa,QAAQ;GACnB,QAAQ,WAAW,GAAG;EACxB;EACA,UAAU,OAAU,MAAc,SAAuC;GACvE,IAAI,OAAO,cAAc,eAAe,EAAE,WAAW,YAAY,OAAO,KAAK;GAC7E,OAAO,UAAU,MAAM,QAAQ,WAAW,QAAQ,EAAE,MAAM,YAAY,GAAG,IAAI;EAC/E;CACF;AACF;AAEA,MAAa,2BACX,uBAAwB,kBAAkB,aAAa,WAAW,eAAe,IAAK;AAExF,MAAa,6BACX,uBAAwB,oBAAoB,aAAa,WAAW,iBAAiB,IAAK;;AChC5F,MAAa,mBAAsB,EACjC,UAAU,kBAAkB,GAC5B,KACA,QACA,cACA,SAAS,KAAK,WACd,SAAS,KAAK,YACyB;CACvC,MAAM,SAAS,YAAY;CAE3B,MAAM,QAAQ,YAAY;EACxB,MAAM,MAAM,MAAM,QAAQ,QAAQ,GAAG;EACrC,IAAI,QAAQ,MAAM,OAAO;GAAE,OAAO;GAAc,SAAS;EAAM;EAE/D,IAAI;EACJ,IAAI;GACF,UAAU,OAAO,GAAG;EACtB,SAAS,KAAK;GACZ,QAAQ,KAAK,sCAAsC,IAAI,IAAI,GAAG;GAC9D,OAAO;IAAE,OAAO;IAAc,SAAS;GAAK;EAC9C;EAEA,MAAM,SAAS,OAAO,UAAU,OAAO;EACvC,OAAO,OAAO,UACV;GAAE,OAAO,OAAO;GAAM,SAAS;EAAM,IACrC;GAAE,OAAO;GAAc,SAAS;EAAK;CAC3C;CAEA,MAAM,eAAe,OAAO,UAAU,QAAQ,WAAW,GAAG,CAAC;CAC7D,MAAM,SAAS,UAAa,OAAO,UAAU,QAAQ,QAAQ,KAAK,OAAO,KAAK,CAAC,CAAC;CAEhF,MAAM,OAAO,YAAwB;EACnC,MAAM,OAAO,OAAO;EACpB,MAAM,SAAS,MAAM,MAAM;EAC3B,IAAI,OAAO,SACT,OAAO,CAAC,CAAC,OAAO,QAAiB;GAC/B,QAAQ,KAAK,gDAAgD,IAAI,IAAI,GAAG;EAC1E,CAAC;EAEH,OAAO,OAAO;CAChB;CACA,MAAM,UAAU,WACd,OAAO,IAAI,YAAY;EAErB,MAAM,OAAO,QAAO,MADC,MAAM,EAAA,CACA,KAAK;EAChC,MAAM,QAAQ,QAAQ,KAAK,OAAO,IAAI,CAAC;CACzC,CAAC;CAEH,MAAM,OAAgB;EAAE;EAAM;EAAO;EAAQ;CAAO;CAEpD,MAAM,UAAa,SACjB,QAAQ,WAAW,QAAQ,SAAS,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI;CAExE,OAAO;EAAE,GAAG;EAAM;CAAO;AAC3B;;AC9FA,MAAa,qBAAqB,aAChC,OAAO,aAAa,YACpB,aAAa,UACb,aAAa,iBACb,aAAa,cACb,aAAa;;;;AAKf,MAAa,qBAAwD,EACnE,aAGO;CACP,MAAM,eAAe,OAAiB,CAAC,MACrC,IAAI,YAAY,CAAC,GAAG;EAElB,MAAM,SAAS,SAAS;GAEtB,IAAI,kBAAkB,IAAI,GAAG,OAAO,KAAA;GACpC,OAAO,YAAY,CAAC,GAAG,MAAM,IAAI,CAAC;EACpC;EAEA,QAAQ,SAAS,WAAW,SAAS,OAAO,MAAM,IAAI;CACxD,CAAC;CAEH,OAAO,YAAY;AACrB;;AC2BA,MAAa,qCAEV,EACC,mBACA,oBAC6D;CAC7D,MAAM,SAAS,WAAmB,eAChC,kBAAkB,EAChB,SAAS,MAAM,SAAS;EACtB,gBAAgB;GACd;GACA;GACA;GACA;EACF,CAAC;CACH,EACF,CAAC;CAEH,MAAM,UAAiD,CAAC;CAExD,MAAM,iBAAiB,EACrB,WACA,UACA,iBACyC;EACzC,MAAM,iBAAiB,kBAAkB,SAAS;EAClD,OAAO,iBAAiB,SAAS,cAAc,IAAI,MAAM,WAAW,UAAU;CAChF;CAGA,MAAM,WAAyD;EAC7D,MAAM,WAAW;GACf,QAAQ,KAAK,MAAM;GACnB,OAAO;EACT;EACA,aAAa;GACX,MAAM,YAAqC,CAAC;GAC5C,MAAM,aAAsC,CAAC;GAE7C,QAAQ,SAAS,WAAW;IAC1B,UAAU,OAAO,cAAc,cAAc,MAAM;IACnD,WAAW,KAAK;KACd,YAAY,OAAO;KACnB,WAAW,OAAO;KAClB,aAAa,CAAC,CAAC,kBAAkB,OAAO,SAAS;IACnD,CAAC;GACH,CAAC;GAKD,OAAO;IACL,QAAQ;IACR,MAAM;GACR;EACF;CACF;CAEA,OAAO;AACT;;AClFF,MAAa,aAAa,UACxB,IAAI,MAAM,CAAC,GAAiB,EAC1B,IAAI,SAAS,UAAU;CACrB,IAAI,kBAAkB,QAAQ,GAAG,OAAO,KAAA;CAExC,IAAI,aAAa,QAAQ;EACvB,MAAM,aAAa,MAAM,cAAc;EACvC,SAAO,YAAY,iBAAiB,YAAY;EAChD,OAAO;CACT;CAEA,IAAI,aAAa,cAAc;EAC7B,MAAM,aAAa,MAAM,oBAAoB;EAC7C,SAAO,YAAY,iBAAiB,iBAAiB;EACrD,OAAO;CACT;CAEA,MAAM,UAAU,MAAM,kBAAkB;CACxC,SAAO,SAAS,iBAAiB,QAAQ;CAEzC,OAAO,QAAQ;AACjB,EACF,CAAC;;AChBH,MAAa,uBAAuB,gBAAyC;CAC3E,QAAQ,QAA0B,WAA2B,CAAC,MAAsB;EAClF,IAAI,MAAM,QAAQ,WAAW,GAAG,OAAO,CAAC,GAAG,UAAU,GAAG,WAAW;EAEnE,MAAM,MAAM,aAAa,OAAO,CAAC;EACjC,MAAM,WAAW,cAAc,WAAW,CAAC;EAC3C,OAAO;GAAC,GAAG;GAAU,GAAG;GAAK,GAAG;EAAQ;CAC1C;AACF;;ACnCA,MAAa,qBAAqB;CAChC,MAAM,QAAQC,cAAAA,YAAmB;EAAE,SAAS;EAAM,WAAW;EAAM,iBAAiB;CAAK,CAAC;CAE1F,MAAM,cAAc,YAAoB;EACtC,MAAM,IAAI;GAAE,GAAG,MAAM,IAAI;GAAG;EAAQ,CAAC;CACvC;CAEA,MAAM,gBAAgB,WAA6D;EACjF,MAAM,UAAU,MAAM,IAAI;EAC1B,MAAM,IAAI;GACR,GAAG;GACH,WAAW,OAAO,aAAa,QAAQ;GACvC,iBAAiB,OAAO,mBAAmB,QAAQ;EACrD,CAAC;CACH;CAKA,MAAM,wBAAwB,MAAM,IAAI,CAAC,CAAC,aAAa;CACvD,MAAM,mBAAmB,cAAsB,MAAM,IAAI;EAAE,GAAG,MAAM,IAAI;EAAG;CAAU,CAAC;;CAGtF,MAAM,cAAqB,MAAM,IAAI;CAErC,OAAO;EAAE;EAAO;EAAY;EAAc;EAAiB;EAAiB;CAAM;AACpF;;AChCA,MAAM,eAAe,OAAgC,OAAO,OAAeC,kBAAAA,SAAS,CAAC,CAAC,SAAS,EAAE;AAEjG,MAAM,wBAAqC,EAEzC,kBAAkB,QAAQ,GAAG,IAAI,MACnC;AASA,MAAa,eAAe,EAAE,WAAW,wBAAiC;CACxE,MAAM,EAAE,UAAU,YAAY,UAAU,GAAG,aAAa;CAExD,MAAM,aAAa,IAAI,IACrB,SAAS,KAAK,YAAY;EACxB,IAAI,CAAC,YAAY,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,GAAG;EAC7D,MAAM,cAAc,oBAAoB,QAAQ,GAAG,GAAG,QAAQ,GAAG;EACjE,MAAM,eAAe,sBAAsB,QAAQ,GAAG,GAAG,QAAQ,GAAG;EACpE,MAAM,MAAM,eAAe,gBAAgB,QAAQ;EACnD,OAAO,CAAC,QAAQ,IAAI,GAAG;CACzB,CAAC,CACH;CAEA,MAAM,eAAe,IAAI,IAAI,WAAW,KAAK,cAAc,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;CACrF,MAAM,aAAa,IAAI,IAAI,QAAQ;CAEnC,MAAM,cAAc,GAAG,YAAsB;EAC3C,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,WAAW,IAAI,CAAC,CAAC;CAC/C;CAEA,MAAM,gBAAgB,GAAG,gBAA0B;EACjD,IAAI,YAAY,WAAW,GAAG,OAAO;EACrC,OAAO,YAAY,OAAO,MAAM,aAAa,IAAI,CAAC,CAAC;CACrD;CAEA,MAAM,gBAAgB,gBAAwB,aAAa,IAAI,WAAW,KAAK;CAE/E,MAAM,cAAc,cAAyB,WAAW,IAAI,SAAS;CAErE,MAAM,iBAAiB,cAAyB,WAAW,IAAI,SAAS,KAAK;CAE7E,OAAO;EACL,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;AC5DA,MAAM,yBAAyB;;AAgB/B,MAAa,4BACX,QACA,WACyB;CACzB,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,eAAe,WAAW,IAAI,CAAC;CAEvE,OAAO,CAAC,GAAG,QAAQ,GAAG,OAAO,QAAQ,eAAe,CAAC,YAAY,IAAI,WAAW,IAAI,CAAC,CAAC;AACxF;;AAGA,MAAa,uBACX,QACA,WACoB;CACpB,MAAM,eAAe,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,KAAK,CAAC,CAAC;CAC7E,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,IAAI,CAAC;CAE7D,OAAO,CACL,GAAG,OAAO,KAAK,UACb,aAAa,IAAI,MAAM,IAAI,IAAI;EAAE,GAAG;EAAO,OAAO,aAAa,IAAI,MAAM,IAAI;CAAE,IAAI,KACrF,GACA,GAAG,OAAO,QAAQ,UAAU,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,CAC1D;AACF;;;;;;AAOA,MAAa,sBAAsB,EAAE,oBAA6B;CAChE,MAAM,UAAU,cAAc;CAC9B,MAAM,OAAO,cAAc;CAE3B,MAAM,gBAAgB,OACpB,UACA,aACA,aACG;EACH,MAAM,SAAS,MAAM,QAAQ,iBAAiB;GAC5C,aAAa;GACb;GACA;EACF,CAAC;EAED,MAAM,MAAM,OAAO,KAAK,MAAM,cAAc,UAAU,OAAO,WAAW,KAAK,OAAO,KAAK;EAEzF,MAAM,iBAAiB,OAAO,eAAe;EAC7C,MAAM,YAAY,KAAK,eAAe;EAGtC,OAAO;GACL,aAAc,MAAM,QAAQ,cAAc,IAAI,iBAAiB,CAAC;GAChE,QAAS,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC;EACnD;CACF;CAEA,MAAM,kBAAkB,OACtB,aACA,QACA,aAC0B;EAC1B,MAAM,SAAS,MAAM,QAAQ,oBAAoB;GAC/C;GACA,aAAa;GACb,MAAM;GACN,eAAe,EAAE,WAAW,YAAY;EAC1C,CAAC;EAED,IAAI;GACF,MAAM,MAAM,MAAM,KAAK,uBAAuB;IAC5C,UAAU,OAAO,QAAQ;IACzB,aAAa;IACb,iBAAiB,OAAO;IACxB,MAAM;IACN,eAAe,EAAE,OAAO;GAC1B,CAAC;GAED,OAAO;IAAE,aAAa,OAAO;IAAI,mBAAmB,IAAI;GAAG;EAC7D,SAAS,OAAO;GAEd,MAAM,QACH,oBAAoB;IACnB;IACA,aAAa;IACb,UAAU,OAAO;GACnB,CAAC,CAAC,CACD,OAAO,iBAA0B;IAEhC,IAAI,iBAAiB,SAAS,MAAM,UAAU,KAAA,GAC5C,MAAM,QAAQ;GAElB,CAAC;GACH,MAAM;EACR;CACF;CAEA,OAAO;;EAEL,MAAM,OAAO,EACX,aACA,mBACA,WAAW,gBAKgB;GAC3B,MAAM,EAAE,aAAa,WAAW,MAAM,cAAc,aAAa,mBAAmB,QAAQ;GAE5F,OAAO,gBAAgB,aAAa,QAAQ,QAAQ;EACtD;;EAGA,OAAO,OAAO,EACZ,mBACA,gBACA,mBACA,gBACA,WAAW,gBAOgB;GAC3B,MAAM,CAAC,QAAQ,UAAU,MAAM,QAAQ,IAAI,CACzC,cAAc,mBAAmB,gBAAgB,QAAQ,GACzD,cAAc,mBAAmB,gBAAgB,QAAQ,CAC3D,CAAC;GAED,OAAO,gBACL,yBAAyB,OAAO,aAAa,OAAO,WAAW,GAC/D,oBAAoB,OAAO,QAAQ,OAAO,MAAM,GAChD,QACF;EACF;CACF;AACF;;AC/IA,MAAa,aAAa,EAAE,SAAS,gBAAyB;CAC5D,KAAKC,YAAAA,aAAa,EAAE,iBAAiB,SAAS,UAAU,CAAC;CACzD,eAAeC,sBAAAA,uBAAuB,EAAE,iBAAiB,SAAS,UAAU,CAAC;CAC7E,WAAWC,kBAAAA,mBAAmB,EAAE,iBAAiB,SAAS,UAAU,CAAC;CACrE,OAAOC,wBAAAA,eAAe;EAAE,aAAa,SAAS;EAAO,kBAAkB,SAAS;CAAW,CAAC;CAC5F,WAAW,mBAAmB,EAAE,eAAe,QAAQ,CAAC;AAC1D;;ACkBA,MAAM,YAAY,gBAA4B,SAC5C,OAAO,mBAAmB,WACtB,GAAG,iBAAiB,SACpB,YAAY,GAAG,MAAM,eAAe,IAAI;AAE9C,MAAa,wBAAwB,EACnC,SACA,MACA,mBACA,eACA,4BAEA,4BAA0D,CAAC,CAAC;CAC1D;CACA,gBAAgB,EAAE,WAAW,MAAM,iBAAiB;EAClD,MAAM,IAAIC,gBAAAA,wBAAwB,WAAW,MAAM,UAAU;CAC/D;AACF,CAAC,CAAC,CACC,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,oBAAAA,kBAAkB;EAChB,SAAS;EACT,aAAa,cAAc,SAAS,CAAC,qBAAqB,CAAC;EAC3D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,oBAAAA,wBAAwB;EACtB,SAAS;EACT,aAAa,cAAc,eAAe,CAAC,qBAAqB,CAAC;EACjE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CAGH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,mBAAAA,iBAAiB;EACf,SAAS,SAAS,gBAAgB,KAAK;EACvC,aAAa,cAAc,QAAQ,CAAC,qBAAqB,CAAC;EAC1D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,yBAAAA,uBAAuB;EACrB,SAAS;EACT,aAAa,cAAc,YAAY;CACzC,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,qBAAAA,mBAAmB;EACjB,SAAS;EACT,aAAa,cAAc,UAAU,CAAC,qBAAqB,CAAC;EAC5D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,oBAAAA,wBAAwB;EACtB,SAAS;EACT,aAAa,cAAc,eAAe,CAAC,qBAAqB,CAAC;EACjE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,wBAAAA,sBAAsB;EACpB,SAAS;EACT,aAAa,cAAc,aAAa,CAAC,qBAAqB,CAAC;EAC/D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,qBAAAA,yBAAyB;EACvB,SAAS;EACT,aAAa,cAAc,gBAAgB,CAAC,qBAAqB,CAAC;EAClE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,cAAAA,kBAAkB;EAChB,SAAS;EACT,aAAa,cAAc,SAAS,CAAC,qBAAqB,CAAC;EAC3D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,mBAAAA,iBAAiB;EACf,eAAe;EACf,SAAS;EACT,aAAa,cAAc,QAAQ,CAAC,qBAAqB,CAAC;EAC1D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,iBAAAA,eAAe;EACb,SAAS;EACT,aAAa,cAAc,MAAM,CAAC,qBAAqB,CAAC;EACxD;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CAGH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,yBAAAA,uBAAuB;EACrB,SAAS,SAAS,gBAAgB,aAAa;EAC/C,aAAa,cAAc,cAAc,CAAC,qBAAqB,CAAC;EAChE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,eAAAA,mBAAmB;EACjB,SAAS;EACT,aAAa,cAAc,UAAU,CAAC,qBAAqB,CAAC;EAC5D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,iBAAAA,qBAAqB;EACnB,SAAS;EACT,aAAa,cAAc,YAAY,CAAC,qBAAqB,CAAC;EAC9D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,sBAAAA,0BAA0B;EACxB,SAAS;EACT,aAAa,cAAc,iBAAiB,CAAC,qBAAqB,CAAC;EACnE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,cAAAA,kBAAkB;EAChB,SAAS;EACT,aAAa,cAAc,SAAS,CAAC,qBAAqB,CAAC;EAC3D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,wBAAAA,sBAAsB;EACpB,SAAS;EACT,aAAa,cAAc,aAAa,CAAC,qBAAqB,CAAC;EAC/D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,qBAAAA,mBAAmB;EACjB,SAAS;EACT,aAAa,cAAc,UAAU,CAAC,qBAAqB,CAAC;EAC5D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,4BAAAA,0BAA0B;EACxB,SAAS;EACT,aAAa,cAAc,iBAAiB,CAAC,qBAAqB,CAAC;EACnE;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,sBAAAA,oBAAoB;EAClB,SAAS;EACT,aAAa,cAAc,WAAW,CAAC,qBAAqB,CAAC;EAC7D;CACF,CAAC;AACL,CAAC,CAAC,CACD,IAAI;CACH,WAAW;CACX,YAAY;CACZ,WAAW,mBACTC,kBAAAA,sBAAsB;EACpB,SAAS;EACT,aAAa,cAAc,aAAa,CAAC,qBAAqB,CAAC;EAC/D;CACF,CAAC;AACL,CAAC,CAAC,CACD,MAAM;;ACrQX,MAAM,4BACH,cACA,UACA,YAAY;CACX,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,kBAAkB,mBAAmB,SAAS,CAAC;CAC3E,OAAO,KAAK,OAAO;AACrB;AAUF,MAAa,uBAAuB,OAAO,EACzC,SACA,iBACA,yBACA,eACA,wBACa;CACb,MAAM,OAAqB;EAAE,MAAM;EAAc,OAAO,gBAAgB;CAAE;CAC1E,MAAM,SAAS,yBAAyB,eAAe;CAGvD,MAAM,YAAY,MAAMC,gBAAAA,oBAAoB;EAC1C;EACA;EACA,aAAa,CAAC,MAAM;CACtB,CAAC,CAAC,CAAC,aAAa,EAAE,SAAS,mBAAmB,CAAC;CAE/C,MAAM,QAAQ,YAAY;EAAE;EAAW;CAAkB,CAAC;CAG1D,MAAM,UAAUA,gBAAAA,oBAAoB;EAClC;EACA;EACA,aAAa,cAAc,WAAW,CAAC,CAAC;EACxC,gBAAgB;CAClB,CAAC;CAED,MAAM,EAAE,QAAQ,UAAU,MAAM,gBAAgB,qBAAqB;EACnE;EACA;EACA,mBAAmB,MAAM;EACzB;EACA,uBAAuB;CACzB,CAAC;CAED,OAAO;EAEL,SAASC,0BAAAA,iBAAiB,OAAO;EACjC;EACA;EACA;EACA,GAAG;EACH,KAAK,UAAU;GAAE;GAAS;EAAS,CAAC;CACtC;AACF;;ACxDA,MAAa,uBAAuB,UAAgC,CAAC,MAAM;CACzE,MAAM,SAAS,aAAa;CAC5B,MAAM,gBAAgB,oBAAoB,QAAQ,WAAW;CAM7D,MAAM,aAAa,mBAAmB;EACpC,QAAQ,OAAO;EACf,YAAY,UAAU,MAAM;EAC5B,QAAQ,YACN,UAAUC,mBAAAA,iBAAiB;GAAE;GAAS,aAAa,cAAc,QAAQ,CAAC,CAAC;EAAE,CAAC,IAAI;CACtF,CAAC;CAED,MAAM,aAAa,mBAAmB;EACpC,QAAQ,OAAO;EACf,YAAY,WAAW;GAAE,SAAS,MAAM;GAAS,OAAO,MAAM;EAAgB;EAC9E,QAAQ,EAAE,SAAS,YACjB,UACIC,mBAAAA,uBAAuB;GACrB;GACA,MAAM,QAAQ;IAAE,MAAM;IAAoB;GAAM,IAAI,EAAE,MAAM,mBAAmB;GAC/E,aAAa,cAAc,cAAc,CAAC,CAAC;EAC7C,CAAC,IACD;CACR,CAAC;CAED,MAAM,QAAQ,wBAAuD;EACnE,QAAQ,OAAO;EACf,YAAY,UAAW,MAAM,aAAa,MAAM,UAAU,MAAM,UAAU;EAC1E,QAAQ,YACN,qBAAqB;GACnB;GACA,iBAAiB,OAAO;GACxB,yBAAyB,OAAO;GAChC;GACA,mBAAmB,QAAQ;EAC7B,CAAC;CACL,CAAC;CAED,IAAI,QAAQ,SAAS,OAAO,WAAW,QAAQ,OAAO;CAEtD,MAAM,cAA+B;EACnC,MAAM,OAAO,OAAO,MAAM;EAC1B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,WAAW,WAAW,IAAI,MAAM;GAChC,iBAAiB,CAAC,CAAC,KAAK;GACxB,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC;EAC7B;CACF;CAEA,MAAM,UAAU;EACd,YAAY,OAAO;EACnB,sBAAsB,MAAM,MAAM,IAAI,CAAC,CAAC,UAAU;EAClD,sBAAsB,cAAsB,OAAO,aAAa,EAAE,UAAU,CAAC;EAC7E,0BAA0B,OAAO,cAAsB;GACrD,OAAO,aAAa,EAAE,UAAU,CAAC;GAEjC,MAAM,MAAM,QAAQ;EACtB;EACA,yBAAyB,oBAA4B,OAAO,aAAa,EAAE,gBAAgB,CAAC;EAC5F,YAAY,aAAkD;GAE5D,MAAM,oBAAoB,OAAO,MAAM,gBAAgB,SAAS,MAAM,CAAC,CAAC;GACxE,MAAM,mBAAmB,MAAM,MAAM,gBAAgB,SAAS,MAAM,CAAC,CAAC;GACtE,aAAa;IACX,kBAAkB;IAClB,iBAAiB;GACnB;EACF;EACA;CACF;CAWA,OAAO;EAAE,KATG,UAAU;GACpB,qBAAqB,WAAW,IAAI;GACpC,2BAA2B,WAAW,IAAI;GAC1C,yBAAyB;IACvB,MAAM,QAAQ,MAAM,MAAM,IAAI;IAC9B,OAAO,MAAM,UAAU,UAAU,MAAM,QAAQ;GACjD;EACF,CAEW;EAAG;CAAQ;AACxB;;ACvFA,MAAa,WAAW,eACtB,WAAW,SAAS,UAChB;CAAE,MAAM;CAAS,cAAc,WAAW;AAAa,IACvD;CAAE,MAAM;CAAU,WAAW,WAAW;AAAU;AAGxD,MAAM,WAAW,WAAwC;CAAE,GAAG;CAAO,UAAU,KAAK,IAAI;AAAE;AAE1F,MAAM,gBAAgB,SACpB,KAAK,WAAW,kBACZC,yBAAAA,OAAO,QAAQ,KAAK,UAAU,IAC9BA,yBAAAA,OAAO,QAAQ,IAAI,aAAa,iBAAiB,gBAAgB,CAAC;;;;;;;AAQxE,MAAa,cAAc,WAAmB;CAE5C,MAAM,0BAAU,IAAI,IAAa;CAGjC,MAAM,qBAAqB,YACzBA,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UAAU,aAAa,MAAM,IAAI,CAAC;CAGzE,MAAM,0BAA0B,YAC9BA,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UACnC,MAAM,KAAK,WAAW,kBAClBA,yBAAAA,OAAO,QAAQ,IAAI,aAAa,iBAAiB,oBAAoB,CAAC,IACtEA,yBAAAA,OAAO,QAAQ,KAAK,CAC1B;CAGF,MAAM,oBAAoB,YACxBA,yBAAAA,OAAO,QAAQ,uBAAuB,OAAO,IAAI,UAC/C,MAAM,KAAK,WAAW,cAClBA,yBAAAA,OAAO,wBAAQ,IAAI,MAAM,UAAU,QAAQ,4BAA4B,CAAC,IACxEA,yBAAAA,OAAO,QAAQ,KAAK,CAC1B;CAEF,MAAM,oBAAoB,YACxBA,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UACnC,MAAM,KAAK,WAAW,cAClBA,yBAAAA,OAAO,QAAQ,KAAK,IACpBA,yBAAAA,OAAO,wBAAQ,IAAI,MAAM,UAAU,QAAQ,wBAAwB,CAAC,CAC1E;CAEF,MAAM,gBAAgB,YACpBA,yBAAAA,OAAO,IAAI,iBAAiB,OAAO,IAAI,UACrC,OAAO,IAAI;EAAE,GAAG;EAAO,MAAM,EAAE,QAAQ,YAAY;CAAE,CAAC,CACxD;CAGF,MAAM,iBAAiB,YACrBA,yBAAAA,OAAO,IAAI,iBAAiB,OAAO,IAAI,UACrC,OAAO,IAAI;EAAE,GAAG;EAAO,MAAM,EAAE,QAAQ,YAAY;CAAE,CAAC,CACxD;CAGF,MAAM,gBAAgB,SAAkB,UACtCA,yBAAAA,OAAO,IAAI,uBAAuB,OAAO,IAAI,UAAU;EACrD,QAAQ,OAAO,OAAO;EAEtB,OAAO,OAAO,IAAI;GAChB,GAAG;GACH,OAAO,MAAM,QAAQ;GACrB,MAAM;IAAE,QAAQ;IAAiB,YAAY,QAAQ,KAAK;GAAE;GAC5D,UAAU;EACZ,CAAC;CACH,CAAC;CAEH,MAAM,gBAAgB,SAAkB,UACtCA,yBAAAA,OAAO,QAAQ,kBAAkB,OAAO,IAAI,eAC1C,WAAW,SAAS,MAAM,OACtBA,yBAAAA,OAAO,wBAAQ,IAAI,MAAM,KAAK,WAAW,KAAK,uBAAuB,MAAM,MAAM,CAAC,IAClFA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAC/B,OAAO,IAAI;EAAE,GAAG;EAAO,MAAM;GAAE,QAAQ;GAAiB,YAAY,QAAQ,KAAK;EAAE;CAAE,CAAC,CACxF,CACN;CAGF,MAAM,eAAe,YACnBA,yBAAAA,OAAO,QAAQ,kBAAkB,OAAO,IAAI,eAC1CA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAC/B,OAAO,IAAI;EACT,GAAG;EACH,MAAM;GACJ,QAAQ;GACR,YAAY;IAAE,GAAG;IAAY,UAAU,KAAK,IAAI,IAAI,WAAW,YAAY;GAAK;EAClF;CACF,CAAC,CACH,CACF;CAIF,MAAM,WAAW,SAAkB,EAAE,SAAS,UAA0B,CAAC,MACvEA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU;EACzC,MAAM,WAAW,SACbA,yBAAAA,OAAO,SACLA,yBAAAA,OAAO,IAAI,aAAa,MAAM,IAAI,IAAI,gBAA0B,EAC9D,OAAO,QAAQ,UAAU,EAC3B,EAAE,GACF,MAAM,QACR,IACA;EAEJ,OAAO,OAAO,IAAI;GAChB,GAAG;GACH,OAAO,MAAM,QAAQ;GACrB,MAAM,EAAE,QAAQ,YAAY;GAC5B;EACF,CAAC;CACH,CAAC;CAEH,MAAM,UAAU,SAAkB,aAChCA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU,OAAO,IAAI;EAAE,GAAG;EAAO;CAAS,CAAC,CAAC;CAE/E,MAAM,gBAAgB,YACpBA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU,OAAO,IAAI;EAAE,GAAG;EAAO,UAAU;CAAK,CAAC,CAAC;CAErF,MAAM,mBAAmB,YACvBA,yBAAAA,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,UACnC,MAAM,WACFA,yBAAAA,OAAO,QAAQ,MAAM,QAAQ,IAC7BA,yBAAAA,OAAO,wBAAQ,IAAI,MAAM,UAAU,QAAQ,wBAAwB,CAAC,CAC1E;CAEF,MAAM,iBAAiB,YAA8B;EACnD,IAAI,QAAQ,IAAI,OAAO,GAAG,OAAO;EACjC,QAAQ,IAAI,OAAO;EACnB,OAAO;CACT;CAEA,MAAM,YAAY,YAAqBA,yBAAAA,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,UAAU,MAAM,KAAK;CAG7F,MAAM,kBAAkB,YACtBA,yBAAAA,OAAO,SACLA,yBAAAA,OAAO,IAAI,kBAAkB,OAAO,IAAI,EAAE,kBAAkB,WAAW,GACvE,IACF;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;ACxKA,MAAa,YAAY,aAA6B;CACpD;CACA,SAAS;CACT,OAAO;CACP,MAAM,EAAE,QAAQ,YAAY;CAC5B,UAAU;AACZ;;AAGA,MAAa,gBAAgB,UAAiB;CAC5C,MAAM,OAAO,YAAqB;EAChC,MAAM,QAAQ,MAAM,IAAI,CAAC,CAAC,OAAO;EACjC,OAAO,QACHC,yBAAAA,OAAO,QAAQ,KAAK,IACpBA,yBAAAA,OAAO,QAAQ,IAAI,aAAa,iBAAiB,YAAY,CAAC;CACpE;CACA,MAAM,OAAO,UAAwB;EACnC,MAAM,QAAQ,MAAM,IAAI;EACxB,MAAM,IAAI;GAAE,GAAG;GAAO,QAAQ;IAAE,GAAG,MAAM;KAAS,MAAM,UAAU;GAAM;EAAE,CAAC;EAC3E,OAAO;CACT;CACA,MAAM,UAAU,SAAkB,YAChCA,yBAAAA,OAAO,IAAI,IAAI,OAAO,IAAI,UAAU,IAAI,QAAQ,KAAK,CAAC,CAAC;CAIzD,MAAM,UAAU,YAAqB;EACnC,MAAM,WAAW,IAAI,OAAO;EAC5B,IAAI,SAAS,SAAS,OAAO,SAAS;EACtC,OAAO,IAAI,SAAS,OAAO,CAAC;CAC9B;CAGA,MAAM,kBAAyB;EAC7B,MAAM,EAAE,WAAW,MAAM,IAAI;EAC7B,MAAM,QAAQ,IAAI,MAAM;EACxB,IAAI,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,gCAAgC,QAAQ;EAC5E,OAAO,MAAM;CACf;CAKA,MAAM,UAAU,YAA4B;EAC1C,MAAM,QAAQ,OAAO,OAAO;EAC5B,MAAM,QAAQ,MAAM,IAAI;EACxB,IAAI,MAAM,WAAW,SAAS,MAAM,IAAI;GAAE,GAAG;GAAO,QAAQ;EAAQ,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,iBAAiB,SAAkB,YACvC,OAAO,UAAU,WAAW;EAAE,GAAG;EAAO;CAAQ,EAAE;CAEpD,OAAO;EAAE;EAAK;EAAK;EAAQ;EAAQ;EAAW;EAAQ;CAAc;AACtE;;;;;;;AChDA,MAAa,eAAe,mBAA4B;CACtD,MAAM,QAAQC,cAAAA,YAAmB;EAC/B,QAAQ;EACR,QAAQ,GAAG,iBAAiB,SAAS,cAAc,EAAE;CACvD,CAAC;CAED,MAAM,SAAS,aAAa,KAAK;CACjC,MAAM,OAAO,WAAW,MAAM;CAE9B,OAAO;EAAE,OAAO,MAAM,WAAW;EAAG;EAAQ;CAAK;AACnD;;ACAA,MAAM,4BAA4B;AAalC,MAAM,oBAAoB,IAAI,aAAa,iBAAiB,WAAW;AAEvE,MAAM,mBAAmB,YAAqD;CAC5E,IAAI,YAAY,KAAA,KAAa,YAAY,WAAW,OAAO;CAC3D,IAAI,YAAY,WAAW,OAAO;CAClC,OAAO;AACT;AAEA,MAAM,QAAQ,OACZ,QACA,UAC6B;CAC7B,IAAI,MAAM,SAAS,UAAU;EAC3B,MAAM,EAAE,aAAa,WAAW,cAAc,MAAM,OAAO,MAAM,mBAAmB,EAClF,WAAW,MAAM,UACnB,CAAC;EACD,OAAO;GAAE,MAAM;GAAU;GAAa;GAAW;EAAU;CAC7D;CAEA,MAAM,EAAE,aAAa,WAAW,iBAAiB,MAAM,OAAO,MAAM,iBAAiB,EACnF,cAAc,MAAM,aACtB,CAAC;CACD,IAAI,CAAC,cAAc,MAAM,IAAI,aAAa,iBAAiB,gBAAgB;CAC3E,OAAO;EAAE,MAAM;EAAS;EAAa;EAAW;CAAa;AAC/D;AAEA,MAAa,qBAAqB,EAChC,OACA,WACA,aACA,mBAAmB,2BACnB,aACA,gBACa;CACb,MAAM,8BAAc,IAAI,IAA4C;CAEpE,MAAM,cAAc,YAAqB;EACvC,MAAM,QAAQC,yBAAAA,OAAO,OAAO,MAAM,KAAK,SAAS,OAAO,CAAC;EACxD,aAAaA,yBAAAA,OAAO,SAAS,MAAM,KAAK,SAAS,OAAO,GAAG,EAAE,MAAM;CACrE;CAGA,MAAM,UAAU,OAAO,SAAkB,UAAmD;EAC1F,MAAM,SAASC,mBAAAA,iBAAiB;GAAE;GAAS;EAAY,CAAC;EACxD,MAAM,eAAe,WAAW,OAAO;EACvC,MAAM,YAAY,MAAMD,yBAAAA,OAAO,oBAAoB,MAAM,QAAQ,KAAK,CAAC;EACvE,OAAO,aAAa,IAAI,YAAYA,yBAAAA,OAAO,QAAQ,YAAY,CAAC;CAClE;CAEA,MAAM,sBAAsB,OAC1B,OACA,SACA,eAC2B;EAC3B,MAAM,eAAe,WAAW,OAAO;EACvC,MAAM,WAAW,MAAMA,yBAAAA,OAAO,oBAAoB,MAAM,KAAK,CAAC;EAC9D,IAAI,CAAC,SAAS,SAAS,OAAO;EAC9B,IAAI,CAAC,aAAa,GAAG,OAAOA,yBAAAA,OAAO,QAAQ,YAAY,CAAC;EAExD,MAAM,iBAAiB,SAAS,KAAK,OAAO,MAAM,UAAU,MAAM,YAAY,OAAO;EACrF,IAAI,kBAAkB,eAAe,eAAe,MAClD,OAAOA,yBAAAA,OAAO,QAAQ,YAAY,CAAC;EAErC,OAAOA,yBAAAA,OAAO,QAAQ,gBAAgB,cAAc,QAAQ,UAAU,CAAC;CACzE;CAEA,MAAM,aAAa,OAAO,YACxB,UAAU,OAAO,OAAO,UAAU;EAChC,MAAM,aAAa,MAAM,KAAK,kBAAkB,OAAO;EACvD,IAAI,CAAC,WAAW,SAAS,OAAO;EAChC,MAAM,QAAQ,MAAM,oBAAoB,OAAO,SAAS,WAAW,IAAI;EACvE,IAAI,CAAC,MAAM,SAAS,OAAO;EAE3B,MAAM,YAAY,MAAM,QAAQ,SAAS,MAAM,IAAI;EACnD,IAAI,CAAC,UAAU,SAAS;GACtB,IAAIE,mBAAAA,eAAe,UAAU,KAAK,GAAG,MAAM,OAAO,SAAS,KAAK;GAChE,OAAO;EACT;EAEA,MAAM,cAAcF,yBAAAA,OAAO,IACzB,MAAM,KAAK,aAAa,SAAS,UAAU,IAAI,SACzC,UAAU,KAAK,WACvB;EACA,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;EACnD,OAAO;CACT,CAAC;CAEH,MAAM,UAAU,YACd,OAAO,aAAa,eAAeG,eAAAA,aAAa,WAAW,OAAO,CAAC,CAAC,CAAC,CAAC;CAGxE,MAAM,eAAe,OACnB,SACA,OACA,WAAW,UAEX,UAAU,OAAO,OAAO,UAAU;EAEhC,MAAM,eAAc,MADE,MAAM,KAAK,EAAA,CACL,OAAO,MAAM,UAAU,MAAM,YAAY,OAAO;EAC5E,MAAM,cAAc,WAAW,aAAa,UAAU,QAAQ,aAAa;EAC3E,IAAI,eAAe,CAAC,aAAa,OAAO;EAGxC,IAAI,CADc,MAAM,KAAK,aAAa,OAC7B,CAAC,CAAC,SAAS,OAAO;EAE/B,MAAM,YAAY,MAAM,QAAQ,SAAS,eAAe,KAAK;EAC7D,IAAI,CAAC,UAAU,SAAS;GACtB,MAAM,KAAK,cAAc,OAAO;GAChC,IAAID,mBAAAA,eAAe,UAAU,KAAK,GAAG;IACnC,IAAI,UAAU,MAAM,KAAK,aAAa,OAAO;IAC7C,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;IACnD,OAAO;GACT;GACA,OAAO;EACT;EAEA,MAAM,KAAK,aAAa,SAAS,UAAU,IAAI;EAC/C,IAAI,CAAC,MAAM,KAAK,kBAAkB,OAAO,CAAC,CAAC,SAAS,OAAO;EAC3D,IAAI,UAAU,MAAM,KAAK,aAAa,OAAO;EAC7C,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;EACnD,OAAO;CACT,CAAC;CAGH,MAAM,UAAU,YAGV;EAGJ,MAAM,WAAW,MAAM,UACpB,QAAQ,UAAU,MAAM,KAAK,CAAC,CAAC,CAC/B,OAAO,UAAmB;GACzB,QAAQ,KAAK,2DAA2D,KAAK;GAC7E,OAAO;EACT,CAAC;EACH,IAAI,aAAa,MAAM,OAAO;GAAE,YAAY;GAAM,QAAQ;EAAc;EACxE,MAAM,EAAE,QAAQ,YAAY;EAC5B,MAAM,SAAS,OAAO,MAAM,EAAE,cAAc,YAAY,SAAS,OAAO;EAExE,MAAM,WAAW,OAAO,IACtB,OAAO,EAAE,SAAS,YAAY,eAAsC;GAClE,MAAM,OAAO,OAAO,OAAO;GAC3B,IAAI,CAAC,cAAc,CAAC,UAAU,OAAO;GACrC,IAAIF,yBAAAA,OAAO,SAAS,MAAM,KAAK,SAAS,OAAO,GAAG,CAAC,IAAI,GAAG,OAAO;GAEjE,IAAI,UAAU,MAAM,KAAK,OAAO,SAAS,QAAQ;GACjD,IAAI,CAAC,YAAY,OAAO;GACxB,OAAO,aAAa,SAAS,UAAU;EACzC,CACF;EAEA,MAAM,UAAU,MAAM,QAAQ,IAAI,QAAQ;EAC1C,MAAM,gBAAgB,QAAQ,aAAa,QAAQ,OAAO,QAAQ,MAAM,KAAK,KAAA;EAE7E,OAAO;GAAE,YAAY;GAAS,QAAQ,gBAAgB,aAAa;EAAE;CACvE;CAEA,MAAM,kBAAkB,OAAO,YAA4C;EACzE,MAAM,EAAE,UAAUA,yBAAAA,OAAO,OAAO,MAAM,KAAK,gBAAgB,OAAO,CAAC;EACnE,OAAO,aAAa,SAAS,OAAO,IAAI;CAC1C;;;;;CAMA,MAAM,WAAW,SAAkB,YAA6B;EAC9D,YAAY,OAAO,OAAO;EAC1B,MAAM,YAAY,MAAM,KAAK,QAAQ,SAAS,OAAO;EACrD,cAAc,OAAO;EAErB,OAAO;CACT;CAIA,MAAM,SAAS,OAAO,SAAkB,UAAkB;EACxD,IAAI,CAAC,MAAM,KAAK,cAAc,OAAO,GAAG;EACxC,QAAQ,OAAO;EACf,MAAM,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC;EACnD,YAAY,OAAO;CACrB;CAGA,MAAM,eAAe,OAAO,YAAoC;EAC9D,MAAM,UAAUA,yBAAAA,OAAO,IACrB,MAAM,KAAK,kBAAkB,OAAO,IACnC,EAAE,UAAU,gBAAgB,KAAK,IAAI,KAAK,WAAW,YAAY,MAAO,gBAC3E;EACA,IAAIA,yBAAAA,OAAO,SAAS,SAAS,KAAK,GAAG,MAAM,OAAO,OAAO;CAC3D;CAEA,MAAM,cAAc,YAClBI,mBAAAA,2BAA2B,EACzB,gBAAgB,OAAO,EAAE,eAAe,UAAU,CAAC,MAAM;EACvD,IAAI,cAAc;GAEhB,IAAI,CAAC,MAAM,KAAK,kBAAkB,OAAO,CAAC,CAAC,SAAS,OAAO;GAC3D,OAAOJ,yBAAAA,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC;EAC5C;EAEA,MAAM,aAAa,OAAO;EAC1B,OAAO,MAAM,KAAK,eAAe,OAAO;CAC1C,EACF,CAAC;CAEH,OAAO;EAAE;EAAY;EAAQ;EAAc;EAAS;EAAiB;CAAQ;AAC/E;;ACxNA,MAAM,cAAc,EAAE,SAAS,gBAC7B,GAAG,QAAQ,GAAG;;;;;;;AAiBhB,MAAa,oBAAoB,EAAE,OAAO,aAAa,eAAe,YAAqB;CAGzF,MAAM,aAAa,EAAE,SAAS,gBAA8C;EAC1E,MAAM,iBAA+B,UAAU,YAAY;GACzD,QAAQ,QAAQ,QAAQ,IAAIK,0BAAAA,kBAAkB,YAAY,OAAO,SAAS,CAAC;GAC3E,OAAO,KAAK,OAAO;EACrB;EAEA,QAAQ,SAAS,cAAc,YAAY,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC;CACtE;CAGA,MAAM,WAAW,EAAE,iBAA+C;EAChE,MAAM;EACN,OAAO;EACP;CACF;;;;;;;CAQA,MAAM,SAAS,YAA4B;EACzC,IAAI,SAAS;EACb,MAAM,SAAS,UAAU,OAAO;EAChC,MAAM,UAAUC,gBAAAA,oBAAoB;GAClC,SAAS,QAAQ;GACjB,MAAM,QAAQ,OAAO;GACrB,aAAa,cAAc,WAAW,CAAC,MAAM,CAAC;EAChD,CAAC;EACD,MAAM,EAAE,QAAQ,SAAS,qBAAqB;GAC5C,SAAS,QAAQ;GACjB,MAAM,QAAQ,OAAO;GAGrB,oBAAoB,cAAyB,YAAY;IACvD,MAAM,cAAc,MAAM,MAAM,QAAQ,SAAS,QAAQ,OAAO,EAAA,CAAG,cAAc,SAAS;IAE1F,SAAO,YAAY,iBAAiB,QAAQ;IAC5C,OAAO;GACT;GACA;GACA,uBAAuB;EACzB,CAAC;EACD,MAAM,MAAM,UAAU;GAAE;GAAS,UAAU;EAAO,CAAC;EAsBnD,OAAO;GACL,KAAA,IArBc,MAAM,CAAC,GAAiB,EACtC,MAAM,SAAS,aAAa;IAC1B,IAAI,kBAAkB,QAAQ,GAAG,OAAO,KAAA;IAExC,IAAI,aAAa,WAAW,OAAO,QAAQ;IAE3C,IAAI,CAAC,QAAQ,MAAM,IAAI,aAAa,iBAAiB,WAAW;IAChE,yBAAA,OAAO,OAAO,MAAM,KAAK,kBAAkB,QAAQ,OAAO,CAAC;IAE3D,IAAI,aAAa,WAAW,aAAa,UAAU,aAAa,cAC9D,OAAO,MAAM,IAAI,QAAQ,OAAO,CAAC,CAAC;IAEpC,IAAI,aAAa,WAAW,OAAO;IACnC,IAAI,aAAa,OAAO,OAAO;IAC/B,IAAI,aAAa,eAAe,OAAO;IAEvC,OAAO,OAAO;GAChB,EACF,CAGI;GACF,WAAW;IACT,SAAS;GACX;EACF;CACF;CAEA,MAAM,0BAAU,IAAI,IAA0C;CAE9D,MAAM,OAAO,YACX,OAAO,SAAS,WAAW,OAAO,SAAS,MAAM,OAAO,CAAC,CAAC,CAAC;CAE7D,MAAM,eAAe,YAAqB;EACxC,KAAK,MAAM,CAAC,KAAK,WAAW,SAAS;GACnC,IAAI,CAAC,IAAI,WAAW,GAAG,QAAQ,EAAE,GAAG;GACpC,OAAO,IAAI;GACX,QAAQ,OAAO,GAAG;EACpB;CACF;CAEA,OAAO;EAAE;EAAK;CAAY;AAC5B;;;;;;;;;ACxHA,MAAa,sBAAsB;;;;;;;;;;;AAYnC,MAAM,uBAAuBC,IAAE,mBAAmB,QAAQ,CACxDA,IAAE,OAAO;CAAE,MAAMA,IAAE,QAAQ,OAAO;CAAG,cAAcA,IAAE,OAAO;AAAE,CAAC,GAC/DA,IAAE,OAAO;CAAE,MAAMA,IAAE,QAAQ,QAAQ;CAAG,WAAWA,IAAE,OAAO;AAAE,CAAC,CAC/D,CAAC;AAED,MAAM,uBAAuBA,IAAE,OAAO;CACpC,SAASA,IAAE,OAAO;CAElB,YAAY,qBAAqB,SAAS,CAAC,CAAC,MAAM,IAAI;CACtD,UAAUA,IAAE,OAAO,EAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI;;;;;CAKvF,UAAUA,IAAE,MAAMA,IAAE,QAAQ,CAAC;AAC/B,CAAC;AAED,MAAM,yBAAyBA,IAAE,OAAO;CACtC,SAASA,IACN,OAAO;EACN,SAASA,IAAE,OAAO;;;;;EAKlB,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,CAAC,CAAC,CACD,SAAS;CACZ,QAAQA,IAAE,MAAM,oBAAoB;AACtC,CAAC;AAKD,MAAM,0BAA4C;CAAE,SAAS;CAAM,QAAQ,CAAC;AAAE;AAE9E,MAAM,YAAY,WAAmE;CACnF,YAAY,MAAM,KAAK,WAAW,kBAAkB,QAAQ,MAAM,KAAK,UAAU,IAAI;CACrF,UAAU,MAAM;AAClB;;;;;;;;AASA,MAAM,iBAAiB,QAA0B,EAAE,QAAQ,cAAuC;CAChG,SAAS;EAAE,SAAS;EAAQ,WAAW;CAAK;CAC5C,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,cAAc;EACjD,MAAM,OAAO,OAAO,OAAO,MAAM,UAAU,MAAM,YAAY,OAAO;EACpE,OAAO;GACL;GACA,YAAY,MAAM,cAAc;GAChC,UAAU,MAAM,YAAY;GAC5B,UAAU,CAAC;EACb;CACF,CAAC;AACH;AAEA,MAAM,eAAe,QAA0B,QAA0C;CACvF,MAAM,QAAQ,OAAO,OAAO,WAAW,UAAU,MAAM,YAAY,IAAI,OAAO;CAC9E,MAAM,SAAS,CAAC,GAAG,OAAO,MAAM;CAChC,IAAI,QAAQ,GAAG,OAAO,KAAK,GAAG;MACzB,OAAO,SAAS;CACrB,OAAO;EAAE,GAAG;EAAQ;CAAO;AAC7B;;;;;;;;;AAiBA,MAAa,0BAA0B,YAA6B;CAClE,MAAM,YAAY,gBAAkC;EAClD;EACA,KAAK;EACL,QAAQ;EACR,cAAc;CAChB,CAAC;CAED,MAAM,gBACJ,MACA,SACA,EAAE,aACgB;EAClB,MAAM,QAA2B,OAAO;EACxC,IAAI,UAAU,KAAA,GAAW,OAAO,QAAQ,QAAQ;EAEhD,OAAO,KAAK,QAAQ,WAClB,YAAY,QAAQ;GAAE;GAAS,GAAG,SAAS,KAAK;GAAG,UAAU,CAAC;EAAE,CAAC,CACnE;CACF;CAEA,MAAM,UAAa,SACjB,UAAU,QAAQ,SAChB,KAAK;EACH,MAAM,KAAK;EACX,eAAe,SAAS,UAAU,aAAa,MAAM,SAAS,KAAK;CACrE,CAAC,CACH;CAEF,IAAI,SAAuB;CAC3B,IAAI,UAAgC;CAGpC,MAAM,YAAY,UAAgC;EAChD,SAAS;EACT,IAAI,SAAS,OAAO;EACpB,MAAM,QAAQ,UAAU,QAAQ,SAAS;GACvC,UAAU;GACV,MAAM,QAAQ,UAAU;GACxB,OAAO,KAAK,QAAQ,WAAW,cAAc,QAAQ,KAAK,CAAC;EAC7D,CAAC;EACD,UAAU;EACV,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;ACvJA,MAAM,yBAAyB;;;;;;;;AAiB/B,MAAa,sBAAsB,EAAE,OAAO,wBAAiC;CAC3E,MAAM,0BAAU,IAAI,IAAoB;CAExC,MAAM,OAAO,SAAkB,UAAiB;EAC9C,QAAQ,IAAI,SAAS,KAAK;EAC1B,MAAM,OAAO,cAAc,SAAS,MAAM,MAAM;CAClD;CAEA,MAAM,aAAa,OAAO,YAAqB;EAC7C,MAAM,YAAY,MAAMC,gBAAAA,oBAAoB;GAC1C;GACA,MAAM;IAAE,MAAM;IAAc,OAAO;GAAG;EACxC,CAAC,CAAC,CAAC,aAAa,EAAE,SAAS,mBAAmB,GAAG,YAAY,QAAQ,sBAAsB,CAAC;EAC5F,OAAO,YAAY;GAAE;GAAW;EAAkB,CAAC;CACrD;CAEA,MAAM,OAAO,YAA4B;EACvC,MAAM,UAAU,SAA2B;GACzC,IAAI,SAAS,IAAI;GACjB,OAAO;EACT;EAEA,MAAM,QAAe;GACnB,QAAQ;GACR,SAAS,WAAW,OAAO,CAAC,CAAC,MAC1B,UAAU,OAAO;IAAE,QAAQ;IAAS;GAAM,CAAC,IAC3C,UAAmB,OAAO;IAAE,QAAQ;IAAW;GAAM,CAAC,CACzD;EACF;EAEA,IAAI,SAAS,KAAK;EAClB,OAAO;CACT;CAEA,MAAM,OAAO,YAAmC;EAC9C,MAAM,QAAQ,QAAQ,IAAI,OAAO;EACjC,OAAO,OAAO,WAAW,UAAU,MAAM,QAAQ;CACnD;CAEA,MAAM,WAAW,OAAO,YAAqC;EAC3D,MAAM,SAAS,QAAQ,IAAI,OAAO;EAClC,MAAM,QAAQ,WAAW,KAAA,KAAa,OAAO,WAAW,YAAY,IAAI,OAAO,IAAI;EACnF,MAAM,UAAU,MAAM,WAAW,YAAY,MAAM,MAAM,UAAU;EAEnE,IAAI,QAAQ,WAAW,WAAW,MAAM,QAAQ;EAChD,OAAO,QAAQ;CACjB;CAEA,MAAM,cAAc,EAAE,aAAoB;EACxC,KAAK,MAAM,EAAE,aAAa,OAAO,OAAO,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,GAAG,IAAI,OAAO;CACzF;CAEA,OAAO;EAAE;EAAY;EAAK;CAAS;AACrC;;;;;;;;AClDA,MAAa,kBAAkB,EAC7B,OACA,aACA,eACA,wBACa;CACb,MAAM,UAAU,mBAAmB;EAAE;EAAO;CAAkB,CAAC;CAC/D,MAAM,0BAAU,IAAI,IAAuB;CAE3C,MAAM,OAAO,YACX,OAAO,SAAS,gBAAgB;EAC9B;EAEA,IAAI,QAAQ;GACV,MAAM,SAAS,QAAQ,IAAI,OAAO;GAClC,SAAO,QAAQ,iBAAiB,QAAQ;GACxC,OAAO;EACT;EACA,MAAMC,mBAAAA,iBAAiB;GACrB;GACA,aAAa,cAAc,QAAQ,CAAC,YAAY,WAAW,OAAO,CAAC,CAAC;EACtE,CAAC;EACD,YAAYC,mBAAAA,uBAAuB;GACjC;GACA,MAAM;IAAE,MAAM;IAAU,OAAO;GAAG;GAClC,aAAa,cAAc,cAAc,CAAC,YAAY,WAAW,OAAO,CAAC,CAAC;EAC5E,CAAC;CACH,EAAE;CAEJ,OAAO;EAAE;EAAS;CAAI;AACxB;;;;;;;ACpCA,MAAa,iBAAiB,EAC5B,gBACA,SACA,aACA,mBACA,gBACoB;CACpB,MAAM,QAAQ,YAAYC,0BAAAA,iBAAiB,cAAc,CAAC;CAC1D,MAAM,YAAY,uBAAuB,OAAO;CAChD,MAAM,gBAAgB,oBAAoB,WAAW;CACrD,MAAM,cAAc,kBAAkB;EACpC;EACA;EACA,aAAa,cAAc,MAAM;EAEjC,cAAc,YAAY,WAAW,YAAY,OAAO;EACxD;CACF,CAAC;CAED,MAAM,WAAW,eAAe;EAAE;EAAO;EAAa;EAAe;CAAkB,CAAC;CACxF,MAAM,aAAa,iBAAiB;EAAE;EAAO;EAAa;EAAe,OAAO;CAAS,CAAC;CAE1F,MAAM,MAAM,UAAU,SAAS,QAAQ,UAAU;CAEjD,SAAS,QAAQ,WAAW,MAAM,MAAM,IAAI,CAAC;CAE7C,MAAM,eAAe,YAA2B,MAAM,OAAO,OAAOA,0BAAAA,iBAAiB,OAAO,CAAC;;CAG7F,MAAM,mBAAmB,YACvB,YAAY,KAAA,IAAY,MAAM,OAAO,UAAU,CAAC,CAAC,UAAUA,0BAAAA,iBAAiB,OAAO;;CAGrF,MAAM,iBAAiB,eAA0C;EAC/D,SAAS,gBAAgB;EACzB;CACF;;;;;;;;CASA,MAAM,sBAAsB,OAAO,cAA0D;EAC3F,MAAM,EAAE,YAAY,cAAc,SAAS;EAC3C,MAAM,YAAY,aAAa,OAAO;EAEtC,MAAM,aAAaC,yBAAAA,OAAO,OAAO,MAAM,KAAK,kBAAkB,OAAO,CAAC;EACtE,OAAO;IACJC,0BAAAA,WAAW,gBAAgB,UAAU,WAAW;IAChDC,0BAAAA,kBAAkB,aAAa,OAAO,SAAS;EAClD;CACF;CAaA,MAAM,gBAAgB,UAA8C;EAClE,IAAI,MAAM,SAAS,SAAS,OAAO;EAEnC,MAAM,EAAE,iBAAiB;EACzB,IAAI,CAAC,cAAc,MAAM,IAAI,aAAa,iBAAiB,gBAAgB;EAC3E,OAAO;GAAE,GAAG;GAAO;EAAa;CAClC;CAEA,MAAM,gBAAgB,UAAoC;EACxD,MAAM,EAAE,YAAY,MAAM,OAAO,UAAU;EAC3C,MAAM,WAAWF,yBAAAA,OAAO,OAAO,MAAM,KAAK,aAAa,SAAS,aAAa,KAAK,CAAC,CAAC;EACpF,UACG,QAAQ,UAAU,MAAM,aAAa,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,CACjE,OAAO,UAAmB;GACzB,QAAQ,KAAK,kDAAkD,KAAK;EACtE,CAAC;EACH,OAAO;CACT;CAGA,MAAM,eAAe,SAAS,IAAI,MAAM,OAAO,UAAU,CAAC,CAAC,OAAO;CAClE,MAAM,WAAqB;EACzB,IAAI,UAAU;GACZ,OAAO,OAAO,CAAC,CAAC;EAClB;EACA,IAAI,QAAQ;GACV,OAAO,OAAO,CAAC,CAAC;EAClB;EACA,IAAI,OAAO;GACT,OAAO,OAAO,CAAC,CAAC;EAClB;EACA,IAAI,aAAa;GACf,OAAO,OAAO,CAAC,CAAC;EAClB;CACF;CAEA,MAAM,oBAA8B;CAEpC,MAAM,iBAAiB,cACrB,WAAW,IAAI,cAAc,SAAS,CAAC;;;;;;;;;CAUzC,MAAM,WAAW,EACf,SACA,GAAG,YACsC,CAAC,MAAsB;EAChE,MAAM,SAAS,gBAAgB,OAAO;EAGtC,MAAM,YAAYA,yBAAAA,OAAO,OAAO,YAAY,QAAQ,QAAQ,OAAO,CAAC;EACpE,OAAO,UACJ,QAAQ,UAAU,MAAM,aAAa,QAAQ,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,CAChE,WAAW,SAAS;CACzB;;CAGA,MAAM,mBAAmB,YACvB,YAAY,gBAAgBD,0BAAAA,iBAAiB,OAAO,CAAC;;;;;;;CAQvD,MAAM,WAAW,UAAoC;EACnD,QAAa;EACb,OAAO,aAAa,KAAK;CAC3B;CAEA,IAAI,aAAa;;;;;;;;CAQjB,MAAM,0BAA0B;EAE9B,IAAI,YAAY;EAChB,aAAa;EAEb,SAAS,MAAM,MAAM,IAAI,CAAC;EAC1B,MAAM,MAAM,UAAU,QAAQ;CAChC;CAEA,MAAM,YAAY,UAAuB;EACvC,UAAU,SAAS,KAAK,CAAC,CAAC,OAAO,UAAmB;GAClD,QAAQ,KAAK,kDAAkD,KAAK;EACtE,CAAC;CACH;CAGA,MAAM,qBACJ,aAAa,UAAU,SAAS,MAAM,MAAM,IAAI,CAAC,IAAI,QAAQ,QAAQ;;;;;;;CAQvE,MAAM,kCAAkC;EACtC,MAAM,OAAO,MAAM,MAAM,WAAW,SAAS;GAC3C,IAAI,CAAC,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,KAAK,WAAW,eAAe,GAAG;GAErF,KAAK;GACL,kBAAkB;EACpB,CAAC;CACH;CAIA,MAAM,UAAUI,yBAAAA,WACd,YAAY,QAAQ,CAAC,CAAC,MACnB,aAAa;EACZ,IAAI,SAAS,WAAW,eAAe,0BAA0B;OAC5D,kBAAkB;EAEvB,OAAO;CACT,IACC,UAAmB;EAGlB,0BAA0B;EAC1B,MAAM;CACR,CACF,CACF;CAEA,MAAM,iBAAiB,MAAM,OAAO;CAEpC,MAAM,wBAAwB,eAAe,CAAC,CAAC,KAAK,WAAW;;;;;;;;;;;CAY/D,MAAM,SAASA,yBAAAA,WACb,QAAQ,CAAC,CAAC,MAAM,EAAE,YAAY,aAA4B;EACxD,IAAI,cAAc,CAAC,cAAc,YAAY,WAAW,OAAO;EAE/D,OAAO;CACT,CAAC,CACH;CAIA,IAAI,eAAe;CACnB,MAAM,YACqB,UACxB,GAAG,SAAe;EACjB,eAAe;EACf,OAAO,KAAK,GAAG,IAAI;CACrB;CAEF,OAAO;EACL;EACA;EACA,SAAS;GACP,UAAU,MAAM,MAAM;GACtB,WAAW,MAAM,MAAM;GACvB;GAEA,OAAO;IACL,WAAW;;IAEX,QAAQ,UAAU,YAAoC;KACpD,MAAM,QAAQ,YAAY,OAAO;KACjC,OAAO,aAAa,CAAC,CAAC,WAAW,KAAK;IACxC,CAAC;IACD,aAAa,YAAqB,SAAS,QAAQ,IAAI,gBAAgB,OAAO,CAAC;IAC/E,kBAAkB,YAAqB,SAAS,QAAQ,SAAS,gBAAgB,OAAO,CAAC;GAC3F;GAEA,MAAM;IACJ,cAAc,SAAS,YAAY;IACnC,SAAS,SAAS,OAAO;IACzB,SAAS,SAAS,OAAO;IACzB,iBAAiB,SAAS,eAAe;;IAEzC;IACA,4BAA4B,OAAO,CAAC,CAAC,KAAK,eAAe;IACzD,iBAAiB;GACnB;EACF;CACF;AACF;;AC3RA,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B,CAAC,GAAGC,0BAAAA,oBAAoB,YAAY;AAEpE,MAAM,+CAA+B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,kBAAkB,WAA2B;CACjD,MAAM,MAAM,IAAI,IAAI,MAAM;CAC1B,IAAI,IAAI,UAAU,IAAI,WAAWC,0BAAAA;CACjC,IAAI,IAAI,UAAU,IAAI,WAAWA,0BAAAA;CAEjC,IAAI,aAAa,SAAS,QAAQ,QAAQ;EACxC,IAAI,6BAA6B,IAAI,IAAI,YAAY,CAAC,GACpD,IAAI,aAAa,IAAI,KAAKA,0BAAAA,QAAQ;CAEtC,CAAC;CACD,OAAO,IAAI,SAAS;AACtB;AAQA,MAAM,uBAAuB,YAA6B;CACxD,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,qBAAqB,KAAKC,qBAAAA,aAAa;CACjF,QAAQ,QAAQ,IAAI,uBAAuB,aAAa;CACxD,OAAO;AACT;AAEA,MAAM,sBAAsB,SAAkB,aAC5CC,0BAAAA,cAAc,SAAS,CAAC,GAAG,yBAAyB,GAAG,QAAQ,CAAC;AA2ClE,MAAM,iBAAiB,SAAkB,qBAA2C;CAClF,KAAK,eAAe,QAAQ,GAAG;CAC/B,SAAS,mBAAmB,QAAQ,SAAS,eAAe;AAC9D;AAEA,MAAM,kBAAkB,UAAoB,qBAA4C;CACtF,QAAQ,SAAS;CACjB,YAAY,SAAS;CACrB,SAAS,mBAAmB,SAAS,SAAS,eAAe;AAC/D;AAMA,MAAM,kBAAkB,OAAiB,oBACvC,IAAIC,0BAAAA,SAAS;CACX,SAAS,IAAI,QAAQ,eAAe,MAAM,QAAQ,GAAG,GAAG;EACtD,QAAQ,MAAM,QAAQ;EACtB,SAAS,mBAAmB,MAAM,QAAQ,SAAS,eAAe;CACpE,CAAC;CACD,UAAU,IAAI,SAAS,MAAM;EAC3B,QAAQ,MAAM,SAAS;EACvB,YAAY,MAAM,SAAS;EAC3B,SAAS,mBAAmB,MAAM,SAAS,SAAS,eAAe;CACrE,CAAC;CACD,MAAM,MAAM;AACd,CAAC;AAEH,MAAM,aAAa,OAAyB,QAAqB;CAC/D,MAAM,QAAQ;EAAC,IAAI,MAAM,YAAY,EAAE;EAAI,GAAG,KAAK,MAAM,IAAI,UAAU,EAAE;EAAK,IAAI;CAAM;CACxF,MAAM,KAAK,IAAI,QAAQ,GAAG;CAC1B,IAAI,cAAc,KAAK,MAAM,KAAK,OAAO,IAAI,SAAS,MAAM,CAAC;CAC7D,OAAO,MAAM,KAAK,GAAG;AACvB;AAEA,MAAM,oBAAoB,QAAiB,QAAkB,iBAAmC;CAC9F,OAAO;EACL,OAAO,QAAQ;GACb,IAAI,UAAU,OAAO;GACrB,IAAI;IACF,IAAI,QAAQ,MAAM;KAChB,OAAO,KAAK,GAAG;KACf;IACF;IAEA,QAAQ,KAAK,UAAU,QAAQ,GAAG,CAAC;GACrC,QAAQ,CAER;EACF;EACA,QAAQ,QAAQ;GACd,IAAI;IACF,IAAI,QAAQ,OAAO;KACjB,OAAO,MAAM,GAAG;KAChB;IACF;IAEA,QAAQ,MAAM,UAAU,SAAS,GAAG,CAAC;GACvC,QAAQ,CAER;EACF;CACF;AACF;AAEA,MAAa,2BAA2B,UAA0B,CAAC,MAAoB;CACrF,MAAM,aAAa,iBAAiB,QAAQ,QAAQ,QAAQ,KAAK;CACjE,MAAM,gBAAgB,QAAQ,iBAAiB,CAAC;CAEhD,QAAQ,SAAS,OAAO,iBAAiB;EACvC,MAAM,gBAAgB,oBAAoB,aAAa,OAAO;EAC9D,MAAM,QAAQ,YAAY,IAAI;EAC9B,MAAM,SAAS,aAAa,QAAQ,OAAO,YAAY;EACvD,MAAM,aAAa,cAAc,aAAa,SAAS,aAAa;EAEpE,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,YAAY;GACtC,WAAW,KAAK;IACd;IACA;IACA,YAAY,YAAY,IAAI,IAAI;IAChC,SAAS;IACT,UAAU,eAAe,OAAO,UAAU,aAAa;GACzD,CAAC;GACD,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,OACnB,WAAW,MAAM;IACf;IACA;IACA,YAAY,YAAY,IAAI,IAAI;IAChC,SAAS;IACT,OAAOC,0BAAAA,WAAW,KAAK,IAAI,eAAe,OAAO,aAAa,IAAI;GACpE,CAAC;GAEH,MAAM;EACR;CACF;AACF;;AC7LA,MAAM,sBAAsB;AAC5B,MAAM,6BAAuC;CAC3CC,0BAAAA,WAAW;CACXA,0BAAAA,WAAW;CACXA,0BAAAA,WAAW;CACXA,0BAAAA,WAAW;AACb;AACA,MAAM,yBAAyB;AAQ/B,MAAM,sBAAsB,UAC1B,iBAAiBC,0BAAAA,YAAY,2BAA2B,SAAS,MAAM,SAAS,MAAM;AAExF,MAAa,yBAAyB,YAAyC;CAC7E,MAAM,EACJ,aAAa,qBACb,gBAAgB,wBAChB,cAAc,uBACZ,WAAW,CAAC;CAEhB,IAAI,CAAC,OAAO,UAAU,UAAU,KAAK,aAAa,GAChD,MAAM,IAAI,WAAW,2CAA2C;CAElE,IAAI,CAAC,OAAO,SAAS,aAAa,KAAK,gBAAgB,GACrD,MAAM,IAAI,WAAW,oDAAoD;CAG3E,QAAQ,SAAS,OAAO,YAAY;EAClC,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAC3C,IAAI;GACF,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS,QAAQ,QAAQ,MAAM;GAAE,CAAC;EACpE,SAAS,OAAO;GACd,IAAI,YAAY,cAAc,CAAC,YAAY,OAAO,OAAO,GACvD,MAAM;GAGR,MAAM,UAAU,gBAAgB,MAAO,KAAK,IAAI,GAAG,OAAO;GAC1D,MAAMC,yBAAAA,MAAM,SAAS,QAAQ,QAAQ,UAAU,KAAA,CAAS;EAC1D;EAGF,MAAM,IAAI,MAAM,aAAa;CAC/B;AACF;;;ACjDA,MAAa,6BAA6B,cAAuD;CAC/F,IAAI,CAAC,WAAW,QAAQ,SAAS;CAEjC,QAAQ,SAAS,OAAO,YAAY;EAClC,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,kBAAkB,YAAY,SAAS;EACnE,OAAO,KAAK,OAAO;CACrB;AACF;;;;;;;;ACCA,MAAa,sBAAsB,EAAE,sBAA+B;CAClE,MAAM,OAAO,iBAAiB;CAC9B,MAAM,kBAAkB,IAAI,IAAI,MAAM,YAAY,CAAC,CAAC;CAEpD,MAAM,mBAAmB,GAAG,YAAsB;EAChD,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,gBAAgB,IAAI,CAAC,CAAC;CACpD;CAEA,MAAM,sBAAsB,GAAG,YAAsB,QAAQ,MAAM,MAAM,gBAAgB,IAAI,CAAC,CAAC;CAE/F,OAAO;EACL,cAAc,MAAM,gBAAgB;EACpC;EACA;EACA;EACA;CACF;AACF;;ACrBA,MAAa,uBAAuB,EAAE,kBAA2B;CAC/D,MAAM,gBAAgB,YAAY,MAAM,WAAW,OAAO,SAAS;CACnE,OAAO,eAAe,0CAA0C;CAEhE,MAAM,WAAW,aAA2C;EAC1D,IAAI,YAAY,QAAQ,aAAa,WAAW,OAAO;EACvD,OAAO,OAAO,QAAQ,MAAM,cAAc,KAAK,YAAY;CAC7D;CAEA,OAAO;EACL,IAAI,cAAc;EAClB,MAAM,cAAc;EACpB;EACA,QAAQ,aAA+B,QAAQ,QAAQ,MAAM;EAC7D,YAAY,aAA+B,QAAQ,QAAQ,MAAM;CACnE;AACF"}