@learnorama/mozaik-sdk 0.1.0

package/dist/react/auth.js

@@ -0,0 +1,372 @@
+"use client";
+import { r as request } from "../client-D3kMOcIr.js";
+import { useMutation, useQuery } from "@tanstack/react-query";
+//#region src/react/auth/auth.ts
+/**
+* Generated by orval 🍺
+* Do not edit manually.
+* Mozaik backend
+* Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+* OpenAPI spec version: 0.1.0
+*/
+const withQueryKey = (query, queryKey) => {
+	const result = { queryKey };
+	for (const key of Object.keys(query)) {
+		if (key === "queryKey") continue;
+		Object.defineProperty(result, key, {
+			enumerable: true,
+			configurable: true,
+			get: () => query[key]
+		});
+	}
+	return result;
+};
+const getAuthorizationUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : String(value));
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `/auth/authorization?${stringifiedParams}` : `/auth/authorization`;
+};
+/**
+* Build the Keycloak authorization URL for this client and this tenant.
+*
+* Everything cryptographic belongs to the caller: it generates ``state``, the
+* PKCE verifier and the ``nonce``, and only ever sends the challenge. This
+* endpoint contributes the one thing the caller cannot know — which identity
+* provider to route to — and refuses an unsafe ``redirect_uri``.
+*
+* ``S256`` is hardcoded. ``plain`` is a valid PKCE method and provides no
+* protection, so making it selectable would only ever be used by mistake.
+*
+* A resolved provider is passed as ``kc_idp_hint``. Aliases are case-sensitive
+* at the broker and an unknown one silently falls back to the login form, which
+* is why :func:`_resolve_provider_alias` validates against the registry instead
+* of forwarding whatever arrived.
+* @summary Authorization
+*/
+const authorization = async (params, options) => {
+	return request(getAuthorizationUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
+const getAuthorizationQueryKey = (params) => {
+	return [`/auth/authorization`, ...params ? [params] : []];
+};
+const getAuthorizationQueryOptions = (params, options) => {
+	const { query: queryOptions, request: requestOptions } = options ?? {};
+	const queryKey = queryOptions?.queryKey ?? getAuthorizationQueryKey(params);
+	const queryFn = ({ signal }) => authorization(params, {
+		signal,
+		...requestOptions
+	});
+	return {
+		queryKey,
+		queryFn,
+		...queryOptions
+	};
+};
+/**
+* @summary Authorization
+*/
+function useAuthorization(params, options, queryClient) {
+	const queryOptions = getAuthorizationQueryOptions(params, options);
+	const query = useQuery(queryOptions, queryClient);
+	return withQueryKey(query, queryOptions.queryKey);
+}
+const getReadMeUrl = () => {
+	return `/auth/me`;
+};
+/**
+* Who the bearer of this token is, and what the session may do.
+*
+* No tokens in the response — this endpoint reissues nothing, and a shape with
+* empty token fields would invite a client to store them. It is also the
+* cheapest liveness check a client has: it exercises verification,
+* tenant resolution and the account link in one call, so a 200 here means the
+* whole chain is intact.
+* @summary Read Me
+*/
+const readMe = async (options) => {
+	return request(getReadMeUrl(), {
+		...options,
+		method: "GET"
+	});
+};
+const getReadMeQueryKey = () => {
+	return [`/auth/me`];
+};
+const getReadMeQueryOptions = (options) => {
+	const { query: queryOptions, request: requestOptions } = options ?? {};
+	const queryKey = queryOptions?.queryKey ?? getReadMeQueryKey();
+	const queryFn = ({ signal }) => readMe({
+		signal,
+		...requestOptions
+	});
+	return {
+		queryKey,
+		queryFn,
+		...queryOptions
+	};
+};
+/**
+* @summary Read Me
+*/
+function useReadMe(options, queryClient) {
+	const queryOptions = getReadMeQueryOptions(options);
+	const query = useQuery(queryOptions, queryClient);
+	return withQueryKey(query, queryOptions.queryKey);
+}
+const getDeleteSessionUrl = () => {
+	return `/auth/sessions`;
+};
+/**
+* Sign out, revoking the refresh token at the broker.
+*
+* Always 204. A logout that can fail is a logout users do not trust, and there
+* is nothing useful for the caller to do about an unreachable broker — it is
+* discarding its tokens either way. The failure is logged, not returned.
+*
+* The access token stays valid until it expires. That is inherent to verifying
+* tokens offline, and it is why the realm keeps access-token lifetimes short
+* rather than why this endpoint should pretend otherwise.
+* @summary Delete Session
+*/
+const deleteSession = async (logoutWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getDeleteSessionUrl(), {
+		...options,
+		method: "DELETE",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(logoutWrite)
+	});
+};
+const getDeleteSessionMutationKey = () => ["deleteSession"];
+const getDeleteSessionMutationOptions = (options) => {
+	const mutationKey = getDeleteSessionMutationKey();
+	const { mutation: mutationOptions, request: requestOptions } = options ? options.mutation && "mutationKey" in options.mutation && options.mutation.mutationKey ? options : {
+		...options,
+		mutation: {
+			...options.mutation,
+			mutationKey
+		}
+	} : {
+		mutation: { mutationKey },
+		request: void 0
+	};
+	const mutationFn = (props) => {
+		const { data } = props ?? {};
+		return deleteSession(data, requestOptions);
+	};
+	return {
+		mutationFn,
+		...mutationOptions
+	};
+};
+/**
+* @summary Delete Session
+*/
+const useDeleteSession = (options, queryClient) => {
+	return useMutation(getDeleteSessionMutationOptions(options), queryClient);
+};
+const getCreateSessionFromCredentialsUrl = () => {
+	return `/auth/sessions`;
+};
+/**
+* Log in with a username and password, via the broker's direct grant.
+*
+* Off unless ``AUTH_ALLOW_PASSWORD_GRANT`` says otherwise, and it should stay
+* off wherever the client fleet allows: the grant defeats MFA, cannot reach a
+* brokered partner, and puts the password through this process. It exists for
+* the native apps already in the field.
+*
+* Rate limited on both the submitted username and the client address. Keyed on
+* the lower-cased username so that case variation is not a way around the
+* counter, and on the address so that spraying many usernames is bounded too.
+* @summary Create Session From Credentials
+*/
+const createSessionFromCredentials = async (credentialsWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getCreateSessionFromCredentialsUrl(), {
+		...options,
+		method: "POST",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(credentialsWrite)
+	});
+};
+const getCreateSessionFromCredentialsMutationKey = () => ["createSessionFromCredentials"];
+const getCreateSessionFromCredentialsMutationOptions = (options) => {
+	const mutationKey = getCreateSessionFromCredentialsMutationKey();
+	const { mutation: mutationOptions, request: requestOptions } = options ? options.mutation && "mutationKey" in options.mutation && options.mutation.mutationKey ? options : {
+		...options,
+		mutation: {
+			...options.mutation,
+			mutationKey
+		}
+	} : {
+		mutation: { mutationKey },
+		request: void 0
+	};
+	const mutationFn = (props) => {
+		const { data } = props ?? {};
+		return createSessionFromCredentials(data, requestOptions);
+	};
+	return {
+		mutationFn,
+		...mutationOptions
+	};
+};
+/**
+* @summary Create Session From Credentials
+*/
+const useCreateSessionFromCredentials = (options, queryClient) => {
+	return useMutation(getCreateSessionFromCredentialsMutationOptions(options), queryClient);
+};
+const getRefreshSessionUrl = () => {
+	return `/auth/sessions`;
+};
+/**
+* Exchange a refresh token for a new pair.
+*
+* Public: the refresh token *is* the credential, so requiring a valid access
+* token as well would make the endpoint useless at the moment it is needed.
+* Rotation happens at the broker, so the presented token stops working as the
+* new one is issued.
+*
+* Returns the account as well as the tokens. That costs one indexed lookup and
+* means a client resuming from cold storage does not need a second call to
+* discover whether the account is still active — which it checks, because
+* deactivation is a local decision Keycloak knows nothing about.
+* @summary Refresh Session
+*/
+const refreshSession = async (refreshWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getRefreshSessionUrl(), {
+		...options,
+		method: "PUT",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(refreshWrite)
+	});
+};
+const getRefreshSessionMutationKey = () => ["refreshSession"];
+const getRefreshSessionMutationOptions = (options) => {
+	const mutationKey = getRefreshSessionMutationKey();
+	const { mutation: mutationOptions, request: requestOptions } = options ? options.mutation && "mutationKey" in options.mutation && options.mutation.mutationKey ? options : {
+		...options,
+		mutation: {
+			...options.mutation,
+			mutationKey
+		}
+	} : {
+		mutation: { mutationKey },
+		request: void 0
+	};
+	const mutationFn = (props) => {
+		const { data } = props ?? {};
+		return refreshSession(data, requestOptions);
+	};
+	return {
+		mutationFn,
+		...mutationOptions
+	};
+};
+/**
+* @summary Refresh Session
+*/
+const useRefreshSession = (options, queryClient) => {
+	return useMutation(getRefreshSessionMutationOptions(options), queryClient);
+};
+const getCreateSessionFromCodeUrl = () => {
+	return `/auth/sessions/code`;
+};
+/**
+* Finish a brokered login: code plus verifier in, session out.
+*
+* Rate limited on the client address rather than on a user, because at this
+* point there is no user — the code has not been exchanged yet. The limit is
+* what stops a stolen code being brute-forced alongside a guessed verifier.
+* @summary Create Session From Code
+*/
+const createSessionFromCode = async (codeExchangeWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getCreateSessionFromCodeUrl(), {
+		...options,
+		method: "POST",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(codeExchangeWrite)
+	});
+};
+const getCreateSessionFromCodeMutationKey = () => ["createSessionFromCode"];
+const getCreateSessionFromCodeMutationOptions = (options) => {
+	const mutationKey = getCreateSessionFromCodeMutationKey();
+	const { mutation: mutationOptions, request: requestOptions } = options ? options.mutation && "mutationKey" in options.mutation && options.mutation.mutationKey ? options : {
+		...options,
+		mutation: {
+			...options.mutation,
+			mutationKey
+		}
+	} : {
+		mutation: { mutationKey },
+		request: void 0
+	};
+	const mutationFn = (props) => {
+		const { data } = props ?? {};
+		return createSessionFromCode(data, requestOptions);
+	};
+	return {
+		mutationFn,
+		...mutationOptions
+	};
+};
+/**
+* @summary Create Session From Code
+*/
+const useCreateSessionFromCode = (options, queryClient) => {
+	return useMutation(getCreateSessionFromCodeMutationOptions(options), queryClient);
+};
+//#endregion
+export { authorization, createSessionFromCode, createSessionFromCredentials, deleteSession, getAuthorizationQueryKey, getAuthorizationQueryOptions, getAuthorizationUrl, getCreateSessionFromCodeMutationKey, getCreateSessionFromCodeMutationOptions, getCreateSessionFromCodeUrl, getCreateSessionFromCredentialsMutationKey, getCreateSessionFromCredentialsMutationOptions, getCreateSessionFromCredentialsUrl, getDeleteSessionMutationKey, getDeleteSessionMutationOptions, getDeleteSessionUrl, getReadMeQueryKey, getReadMeQueryOptions, getReadMeUrl, getRefreshSessionMutationKey, getRefreshSessionMutationOptions, getRefreshSessionUrl, readMe, refreshSession, useAuthorization, useCreateSessionFromCode, useCreateSessionFromCredentials, useDeleteSession, useReadMe, useRefreshSession };
+
+//# sourceMappingURL=auth.js.map

package/dist/react/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","names":[],"sources":["../../src/react/auth/auth.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport {\n  useMutation,\n  useQuery\n} from '@tanstack/react-query';\nimport type {\n  DataTag,\n  DefinedInitialDataOptions,\n  DefinedUseQueryResult,\n  MutationFunction,\n  QueryClient,\n  QueryFunction,\n  QueryKey,\n  UndefinedInitialDataOptions,\n  UseMutationOptions,\n  UseMutationResult,\n  UseQueryOptions,\n  UseQueryResult\n} from '@tanstack/react-query';\n\nimport type {\n  AuthorizationParams,\n  AuthorizationRead,\n  CodeExchangeWrite,\n  CredentialsWrite,\n  HTTPExceptionResponse,\n  LogoutWrite,\n  MeRead,\n  RefreshWrite,\n  SessionRead,\n  ValidationErrorResponse\n} from '../../models';\n\nimport { request } from '../../client';\nimport type { ErrorType , BodyType } from '../../client';\n\n\ntype SecondParameter<T extends (...args: never) => unknown> = Parameters<T>[1];\n\n\n\nconst withQueryKey = <T extends object, K>(query: T, queryKey: K): T & { queryKey: K } => {\n  const result = { queryKey } as T & { queryKey: K };\n  for (const key of Object.keys(query)) {\n    // The explicit queryKey always wins, matching the previous\n    // `{ ...query, queryKey }` spread where it was set last.\n    if (key === 'queryKey') continue;\n    Object.defineProperty(result, key, {\n      enumerable: true,\n      configurable: true,\n      get: () => (query as Record<string, unknown>)[key],\n    });\n  }\n  return result;\n};\n\nexport const getAuthorizationUrl = (params: AuthorizationParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/auth/authorization?${stringifiedParams}` : `/auth/authorization`\n}\n\n/**\n * Build the Keycloak authorization URL for this client and this tenant.\n *\n * Everything cryptographic belongs to the caller: it generates ``state``, the\n * PKCE verifier and the ``nonce``, and only ever sends the challenge. This\n * endpoint contributes the one thing the caller cannot know — which identity\n * provider to route to — and refuses an unsafe ``redirect_uri``.\n *\n * ``S256`` is hardcoded. ``plain`` is a valid PKCE method and provides no\n * protection, so making it selectable would only ever be used by mistake.\n *\n * A resolved provider is passed as ``kc_idp_hint``. Aliases are case-sensitive\n * at the broker and an unknown one silently falls back to the login form, which\n * is why :func:`_resolve_provider_alias` validates against the registry instead\n * of forwarding whatever arrived.\n * @summary Authorization\n */\nexport const authorization = async (params: AuthorizationParams, options?: Parameters<typeof request>[1]): Promise<AuthorizationRead> => {\n\n  return request<AuthorizationRead>(getAuthorizationUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\n\n\n\nexport const getAuthorizationQueryKey = (params?: AuthorizationParams,) => {\n    return [\n    `/auth/authorization`, ...(params ? [params] : [])\n    ] as const;\n    }\n\n\nexport const getAuthorizationQueryOptions = <TData = Awaited<ReturnType<typeof authorization>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(params: AuthorizationParams, options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof authorization>>, TError, TData>>, request?: SecondParameter<typeof request>}\n) => {\n\nconst {query: queryOptions, request: requestOptions} = options ?? {};\n\n  const queryKey =  queryOptions?.queryKey ?? getAuthorizationQueryKey(params);\n\n\n\n    const queryFn: QueryFunction<Awaited<ReturnType<typeof authorization>>> = ({ signal }) => authorization(params, { signal, ...requestOptions });\n\n\n\n\n\n   return  { queryKey, queryFn, ...queryOptions} as UseQueryOptions<Awaited<ReturnType<typeof authorization>>, TError, TData> & { queryKey: DataTag<QueryKey, TData, TError> }\n}\n\nexport type AuthorizationQueryResult = NonNullable<Awaited<ReturnType<typeof authorization>>>\nexport type AuthorizationQueryError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>\n\n\nexport function useAuthorization<TData = Awaited<ReturnType<typeof authorization>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n params: AuthorizationParams, options: { query:Partial<UseQueryOptions<Awaited<ReturnType<typeof authorization>>, TError, TData>> & Pick<\n        DefinedInitialDataOptions<\n          Awaited<ReturnType<typeof authorization>>,\n          TError,\n          Awaited<ReturnType<typeof authorization>>\n        > , 'initialData'\n      >, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n  ):  DefinedUseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> }\nexport function useAuthorization<TData = Awaited<ReturnType<typeof authorization>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n params: AuthorizationParams, options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof authorization>>, TError, TData>> & Pick<\n        UndefinedInitialDataOptions<\n          Awaited<ReturnType<typeof authorization>>,\n          TError,\n          Awaited<ReturnType<typeof authorization>>\n        > , 'initialData'\n      >, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n  ):  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> }\nexport function useAuthorization<TData = Awaited<ReturnType<typeof authorization>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n params: AuthorizationParams, options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof authorization>>, TError, TData>>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n  ):  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> }\n/**\n * @summary Authorization\n */\n\nexport function useAuthorization<TData = Awaited<ReturnType<typeof authorization>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n params: AuthorizationParams, options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof authorization>>, TError, TData>>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n ):  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> } {\n\n  const queryOptions = getAuthorizationQueryOptions(params,options)\n\n  const query = useQuery(queryOptions, queryClient) as  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> };\n\n  return withQueryKey(query, queryOptions.queryKey);\n}\n\n\n\n\n\n\nexport const getReadMeUrl = () => {\n\n\n\n\n  return `/auth/me`\n}\n\n/**\n * Who the bearer of this token is, and what the session may do.\n *\n * No tokens in the response — this endpoint reissues nothing, and a shape with\n * empty token fields would invite a client to store them. It is also the\n * cheapest liveness check a client has: it exercises verification,\n * tenant resolution and the account link in one call, so a 200 here means the\n * whole chain is intact.\n * @summary Read Me\n */\nexport const readMe = async ( options?: Parameters<typeof request>[1]): Promise<MeRead> => {\n\n  return request<MeRead>(getReadMeUrl(),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\n\n\n\nexport const getReadMeQueryKey = () => {\n    return [\n    `/auth/me`\n    ] as const;\n    }\n\n\nexport const getReadMeQueryOptions = <TData = Awaited<ReturnType<typeof readMe>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>( options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof readMe>>, TError, TData>>, request?: SecondParameter<typeof request>}\n) => {\n\nconst {query: queryOptions, request: requestOptions} = options ?? {};\n\n  const queryKey =  queryOptions?.queryKey ?? getReadMeQueryKey();\n\n\n\n    const queryFn: QueryFunction<Awaited<ReturnType<typeof readMe>>> = ({ signal }) => readMe({ signal, ...requestOptions });\n\n\n\n\n\n   return  { queryKey, queryFn, ...queryOptions} as UseQueryOptions<Awaited<ReturnType<typeof readMe>>, TError, TData> & { queryKey: DataTag<QueryKey, TData, TError> }\n}\n\nexport type ReadMeQueryResult = NonNullable<Awaited<ReturnType<typeof readMe>>>\nexport type ReadMeQueryError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>\n\n\nexport function useReadMe<TData = Awaited<ReturnType<typeof readMe>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n  options: { query:Partial<UseQueryOptions<Awaited<ReturnType<typeof readMe>>, TError, TData>> & Pick<\n        DefinedInitialDataOptions<\n          Awaited<ReturnType<typeof readMe>>,\n          TError,\n          Awaited<ReturnType<typeof readMe>>\n        > , 'initialData'\n      >, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n  ):  DefinedUseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> }\nexport function useReadMe<TData = Awaited<ReturnType<typeof readMe>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n  options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof readMe>>, TError, TData>> & Pick<\n        UndefinedInitialDataOptions<\n          Awaited<ReturnType<typeof readMe>>,\n          TError,\n          Awaited<ReturnType<typeof readMe>>\n        > , 'initialData'\n      >, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n  ):  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> }\nexport function useReadMe<TData = Awaited<ReturnType<typeof readMe>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n  options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof readMe>>, TError, TData>>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n  ):  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> }\n/**\n * @summary Read Me\n */\n\nexport function useReadMe<TData = Awaited<ReturnType<typeof readMe>>, TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>>(\n  options?: { query?:Partial<UseQueryOptions<Awaited<ReturnType<typeof readMe>>, TError, TData>>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient\n ):  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> } {\n\n  const queryOptions = getReadMeQueryOptions(options)\n\n  const query = useQuery(queryOptions, queryClient) as  UseQueryResult<TData, TError> & { queryKey: DataTag<QueryKey, TData, TError> };\n\n  return withQueryKey(query, queryOptions.queryKey);\n}\n\n\n\n\n\n\nexport const getDeleteSessionUrl = () => {\n\n\n\n\n  return `/auth/sessions`\n}\n\n/**\n * Sign out, revoking the refresh token at the broker.\n *\n * Always 204. A logout that can fail is a logout users do not trust, and there\n * is nothing useful for the caller to do about an unreachable broker — it is\n * discarding its tokens either way. The failure is logged, not returned.\n *\n * The access token stays valid until it expires. That is inherent to verifying\n * tokens offline, and it is why the realm keeps access-token lifetimes short\n * rather than why this endpoint should pretend otherwise.\n * @summary Delete Session\n */\nexport const deleteSession = async (logoutWrite: LogoutWrite, options?: Parameters<typeof request>[1]): Promise<void> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<void>(getDeleteSessionUrl(),\n  {\n    ...options,\n    method: 'DELETE',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(logoutWrite)\n  }\n);}\n\n\n\n\n\nexport const getDeleteSessionMutationKey = () => ['deleteSession'] as const;\n\nexport const getDeleteSessionMutationOptions = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof deleteSession>>, TError,DeleteSessionMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n): UseMutationOptions<Awaited<ReturnType<typeof deleteSession>>, TError,DeleteSessionMutationVariables, TContext> => {\n\nconst mutationKey = getDeleteSessionMutationKey();\nconst {mutation: mutationOptions, request: requestOptions} = options ?\n      options.mutation && 'mutationKey' in options.mutation && options.mutation.mutationKey ?\n      options\n      : {...options, mutation: {...options.mutation, mutationKey}}\n      : {mutation: { mutationKey, }, request: undefined};\n\n\n\n\n      const mutationFn: MutationFunction<Awaited<ReturnType<typeof deleteSession>>, DeleteSessionMutationVariables> = (props) => {\n          const {data} = props ?? {};\n\n          return  deleteSession(data,requestOptions)\n        }\n\n\n\n\n\n\n  return  { mutationFn, ...mutationOptions }}\n\n    export type DeleteSessionMutationResult = NonNullable<Awaited<ReturnType<typeof deleteSession>>>\n    export type DeleteSessionMutationBody = BodyType<LogoutWrite>\n    export type DeleteSessionMutationError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>\n    export type DeleteSessionMutationVariables = {data: BodyType<LogoutWrite>}\n\n    /**\n * @summary Delete Session\n */\nexport const useDeleteSession = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof deleteSession>>, TError,DeleteSessionMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient): UseMutationResult<\n        Awaited<ReturnType<typeof deleteSession>>,\n        TError,\n        DeleteSessionMutationVariables,\n        TContext\n      > => {\n      return useMutation(getDeleteSessionMutationOptions(options), queryClient);\n    }\n    export const getCreateSessionFromCredentialsUrl = () => {\n\n\n\n\n  return `/auth/sessions`\n}\n\n/**\n * Log in with a username and password, via the broker's direct grant.\n *\n * Off unless ``AUTH_ALLOW_PASSWORD_GRANT`` says otherwise, and it should stay\n * off wherever the client fleet allows: the grant defeats MFA, cannot reach a\n * brokered partner, and puts the password through this process. It exists for\n * the native apps already in the field.\n *\n * Rate limited on both the submitted username and the client address. Keyed on\n * the lower-cased username so that case variation is not a way around the\n * counter, and on the address so that spraying many usernames is bounded too.\n * @summary Create Session From Credentials\n */\nexport const createSessionFromCredentials = async (credentialsWrite: CredentialsWrite, options?: Parameters<typeof request>[1]): Promise<SessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SessionRead>(getCreateSessionFromCredentialsUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(credentialsWrite)\n  }\n);}\n\n\n\n\n\nexport const getCreateSessionFromCredentialsMutationKey = () => ['createSessionFromCredentials'] as const;\n\nexport const getCreateSessionFromCredentialsMutationOptions = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof createSessionFromCredentials>>, TError,CreateSessionFromCredentialsMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n): UseMutationOptions<Awaited<ReturnType<typeof createSessionFromCredentials>>, TError,CreateSessionFromCredentialsMutationVariables, TContext> => {\n\nconst mutationKey = getCreateSessionFromCredentialsMutationKey();\nconst {mutation: mutationOptions, request: requestOptions} = options ?\n      options.mutation && 'mutationKey' in options.mutation && options.mutation.mutationKey ?\n      options\n      : {...options, mutation: {...options.mutation, mutationKey}}\n      : {mutation: { mutationKey, }, request: undefined};\n\n\n\n\n      const mutationFn: MutationFunction<Awaited<ReturnType<typeof createSessionFromCredentials>>, CreateSessionFromCredentialsMutationVariables> = (props) => {\n          const {data} = props ?? {};\n\n          return  createSessionFromCredentials(data,requestOptions)\n        }\n\n\n\n\n\n\n  return  { mutationFn, ...mutationOptions }}\n\n    export type CreateSessionFromCredentialsMutationResult = NonNullable<Awaited<ReturnType<typeof createSessionFromCredentials>>>\n    export type CreateSessionFromCredentialsMutationBody = BodyType<CredentialsWrite>\n    export type CreateSessionFromCredentialsMutationError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>\n    export type CreateSessionFromCredentialsMutationVariables = {data: BodyType<CredentialsWrite>}\n\n    /**\n * @summary Create Session From Credentials\n */\nexport const useCreateSessionFromCredentials = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof createSessionFromCredentials>>, TError,CreateSessionFromCredentialsMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient): UseMutationResult<\n        Awaited<ReturnType<typeof createSessionFromCredentials>>,\n        TError,\n        CreateSessionFromCredentialsMutationVariables,\n        TContext\n      > => {\n      return useMutation(getCreateSessionFromCredentialsMutationOptions(options), queryClient);\n    }\n    export const getRefreshSessionUrl = () => {\n\n\n\n\n  return `/auth/sessions`\n}\n\n/**\n * Exchange a refresh token for a new pair.\n *\n * Public: the refresh token *is* the credential, so requiring a valid access\n * token as well would make the endpoint useless at the moment it is needed.\n * Rotation happens at the broker, so the presented token stops working as the\n * new one is issued.\n *\n * Returns the account as well as the tokens. That costs one indexed lookup and\n * means a client resuming from cold storage does not need a second call to\n * discover whether the account is still active — which it checks, because\n * deactivation is a local decision Keycloak knows nothing about.\n * @summary Refresh Session\n */\nexport const refreshSession = async (refreshWrite: RefreshWrite, options?: Parameters<typeof request>[1]): Promise<SessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SessionRead>(getRefreshSessionUrl(),\n  {\n    ...options,\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(refreshWrite)\n  }\n);}\n\n\n\n\n\nexport const getRefreshSessionMutationKey = () => ['refreshSession'] as const;\n\nexport const getRefreshSessionMutationOptions = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof refreshSession>>, TError,RefreshSessionMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n): UseMutationOptions<Awaited<ReturnType<typeof refreshSession>>, TError,RefreshSessionMutationVariables, TContext> => {\n\nconst mutationKey = getRefreshSessionMutationKey();\nconst {mutation: mutationOptions, request: requestOptions} = options ?\n      options.mutation && 'mutationKey' in options.mutation && options.mutation.mutationKey ?\n      options\n      : {...options, mutation: {...options.mutation, mutationKey}}\n      : {mutation: { mutationKey, }, request: undefined};\n\n\n\n\n      const mutationFn: MutationFunction<Awaited<ReturnType<typeof refreshSession>>, RefreshSessionMutationVariables> = (props) => {\n          const {data} = props ?? {};\n\n          return  refreshSession(data,requestOptions)\n        }\n\n\n\n\n\n\n  return  { mutationFn, ...mutationOptions }}\n\n    export type RefreshSessionMutationResult = NonNullable<Awaited<ReturnType<typeof refreshSession>>>\n    export type RefreshSessionMutationBody = BodyType<RefreshWrite>\n    export type RefreshSessionMutationError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>\n    export type RefreshSessionMutationVariables = {data: BodyType<RefreshWrite>}\n\n    /**\n * @summary Refresh Session\n */\nexport const useRefreshSession = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof refreshSession>>, TError,RefreshSessionMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient): UseMutationResult<\n        Awaited<ReturnType<typeof refreshSession>>,\n        TError,\n        RefreshSessionMutationVariables,\n        TContext\n      > => {\n      return useMutation(getRefreshSessionMutationOptions(options), queryClient);\n    }\n    export const getCreateSessionFromCodeUrl = () => {\n\n\n\n\n  return `/auth/sessions/code`\n}\n\n/**\n * Finish a brokered login: code plus verifier in, session out.\n *\n * Rate limited on the client address rather than on a user, because at this\n * point there is no user — the code has not been exchanged yet. The limit is\n * what stops a stolen code being brute-forced alongside a guessed verifier.\n * @summary Create Session From Code\n */\nexport const createSessionFromCode = async (codeExchangeWrite: CodeExchangeWrite, options?: Parameters<typeof request>[1]): Promise<SessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SessionRead>(getCreateSessionFromCodeUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(codeExchangeWrite)\n  }\n);}\n\n\n\n\n\nexport const getCreateSessionFromCodeMutationKey = () => ['createSessionFromCode'] as const;\n\nexport const getCreateSessionFromCodeMutationOptions = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof createSessionFromCode>>, TError,CreateSessionFromCodeMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n): UseMutationOptions<Awaited<ReturnType<typeof createSessionFromCode>>, TError,CreateSessionFromCodeMutationVariables, TContext> => {\n\nconst mutationKey = getCreateSessionFromCodeMutationKey();\nconst {mutation: mutationOptions, request: requestOptions} = options ?\n      options.mutation && 'mutationKey' in options.mutation && options.mutation.mutationKey ?\n      options\n      : {...options, mutation: {...options.mutation, mutationKey}}\n      : {mutation: { mutationKey, }, request: undefined};\n\n\n\n\n      const mutationFn: MutationFunction<Awaited<ReturnType<typeof createSessionFromCode>>, CreateSessionFromCodeMutationVariables> = (props) => {\n          const {data} = props ?? {};\n\n          return  createSessionFromCode(data,requestOptions)\n        }\n\n\n\n\n\n\n  return  { mutationFn, ...mutationOptions }}\n\n    export type CreateSessionFromCodeMutationResult = NonNullable<Awaited<ReturnType<typeof createSessionFromCode>>>\n    export type CreateSessionFromCodeMutationBody = BodyType<CodeExchangeWrite>\n    export type CreateSessionFromCodeMutationError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>\n    export type CreateSessionFromCodeMutationVariables = {data: BodyType<CodeExchangeWrite>}\n\n    /**\n * @summary Create Session From Code\n */\nexport const useCreateSessionFromCode = <TError = ErrorType<HTTPExceptionResponse | ValidationErrorResponse>,\n    TContext = unknown>(options?: { mutation?:UseMutationOptions<Awaited<ReturnType<typeof createSessionFromCode>>, TError,CreateSessionFromCodeMutationVariables, TContext>, request?: SecondParameter<typeof request>}\n , queryClient?: QueryClient): UseMutationResult<\n        Awaited<ReturnType<typeof createSessionFromCode>>,\n        TError,\n        CreateSessionFromCodeMutationVariables,\n        TContext\n      > => {\n      return useMutation(getCreateSessionFromCodeMutationOptions(options), queryClient);\n    }\n"],"mappings":";;;;;;;;;;;AA+CA,MAAM,gBAAqC,OAAU,aAAqC;CACxF,MAAM,SAAS,EAAE,SAAS;CAC1B,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GAAG;EAGpC,IAAI,QAAQ,YAAY;EACxB,OAAO,eAAe,QAAQ,KAAK;GACjC,YAAY;GACZ,cAAc;GACd,WAAY,MAAkC;EAChD,CAAC;CACH;CACA,OAAO;AACT;AAEA,MAAa,uBAAuB,WAAiC;CACnE,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,uBAAuB,sBAAsB;AACrF;;;;;;;;;;;;;;;;;;AAmBA,MAAa,gBAAgB,OAAO,QAA6B,YAAwE;CAEvI,OAAO,QAA2B,oBAAoB,MAAM,GAC5D;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAMF,MAAa,4BAA4B,WAAkC;CACvE,OAAO,CACP,uBAAuB,GAAI,SAAS,CAAC,MAAM,IAAI,CAAC,CAChD;AACA;AAGJ,MAAa,gCAAwJ,QAA6B,YAC7L;CAEL,MAAM,EAAC,OAAO,cAAc,SAAS,mBAAkB,WAAW,CAAC;CAEjE,MAAM,WAAY,cAAc,YAAY,yBAAyB,MAAM;CAIzE,MAAM,WAAqE,EAAE,aAAa,cAAc,QAAQ;EAAE;EAAQ,GAAG;CAAe,CAAC;CAM9I,OAAQ;EAAE;EAAU;EAAS,GAAG;CAAY;AAC/C;;;;AAkCA,SAAgB,iBACf,QAA6B,SAC3B,aACiF;CAElF,MAAM,eAAe,6BAA6B,QAAO,OAAO;CAEhE,MAAM,QAAQ,SAAS,cAAc,WAAW;CAEhD,OAAO,aAAa,OAAO,aAAa,QAAQ;AAClD;AAOA,MAAa,qBAAqB;CAKhC,OAAO;AACT;;;;;;;;;;;AAYA,MAAa,SAAS,OAAQ,YAA6D;CAEzF,OAAO,QAAgB,aAAa,GACpC;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAMF,MAAa,0BAA0B;CACnC,OAAO,CACP,UACA;AACA;AAGJ,MAAa,yBAA2I,YACnJ;CAEL,MAAM,EAAC,OAAO,cAAc,SAAS,mBAAkB,WAAW,CAAC;CAEjE,MAAM,WAAY,cAAc,YAAY,kBAAkB;CAI5D,MAAM,WAA8D,EAAE,aAAa,OAAO;EAAE;EAAQ,GAAG;CAAe,CAAC;CAMxH,OAAQ;EAAE;EAAU;EAAS,GAAG;CAAY;AAC/C;;;;AAkCA,SAAgB,UACd,SACC,aACiF;CAElF,MAAM,eAAe,sBAAsB,OAAO;CAElD,MAAM,QAAQ,SAAS,cAAc,WAAW;CAEhD,OAAO,aAAa,OAAO,aAAa,QAAQ;AAClD;AAOA,MAAa,4BAA4B;CAKvC,OAAO;AACT;;;;;;;;;;;;;AAcA,MAAa,gBAAgB,OAAO,aAA0B,YAA2D;CAErH,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAc,oBAAoB,GACvC;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,WAAW;CAClC,CACF;AAAE;AAMF,MAAa,oCAAoC,CAAC,eAAe;AAEjE,MAAa,mCACW,YAC6F;CAErH,MAAM,cAAc,4BAA4B;CAChD,MAAM,EAAC,UAAU,iBAAiB,SAAS,mBAAkB,UACvD,QAAQ,YAAY,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,cAC1E,UACE;EAAC,GAAG;EAAS,UAAU;GAAC,GAAG,QAAQ;GAAU;EAAW;CAAC,IACzD;EAAC,UAAU,EAAE,YAAa;EAAG,SAAS,KAAA;CAAS;CAKjD,MAAM,cAA2G,UAAU;EACvH,MAAM,EAAC,SAAQ,SAAS,CAAC;EAEzB,OAAQ,cAAc,MAAK,cAAc;CAC3C;CAON,OAAQ;EAAE;EAAY,GAAG;CAAgB;AAAC;;;;AAU5C,MAAa,oBACW,SACrB,gBAKQ;CACL,OAAO,YAAY,gCAAgC,OAAO,GAAG,WAAW;AAC1E;AACA,MAAa,2CAA2C;CAK1D,OAAO;AACT;;;;;;;;;;;;;;AAeA,MAAa,+BAA+B,OAAO,kBAAoC,YAAkE;CAErJ,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,mCAAmC,GAC7D;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,gBAAgB;CACvC,CACF;AAAE;AAMF,MAAa,mDAAmD,CAAC,8BAA8B;AAE/F,MAAa,kDACW,YAC2H;CAEnJ,MAAM,cAAc,2CAA2C;CAC/D,MAAM,EAAC,UAAU,iBAAiB,SAAS,mBAAkB,UACvD,QAAQ,YAAY,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,cAC1E,UACE;EAAC,GAAG;EAAS,UAAU;GAAC,GAAG,QAAQ;GAAU;EAAW;CAAC,IACzD;EAAC,UAAU,EAAE,YAAa;EAAG,SAAS,KAAA;CAAS;CAKjD,MAAM,cAAyI,UAAU;EACrJ,MAAM,EAAC,SAAQ,SAAS,CAAC;EAEzB,OAAQ,6BAA6B,MAAK,cAAc;CAC1D;CAON,OAAQ;EAAE;EAAY,GAAG;CAAgB;AAAC;;;;AAU5C,MAAa,mCACW,SACrB,gBAKQ;CACL,OAAO,YAAY,+CAA+C,OAAO,GAAG,WAAW;AACzF;AACA,MAAa,6BAA6B;CAK5C,OAAO;AACT;;;;;;;;;;;;;;;AAgBA,MAAa,iBAAiB,OAAO,cAA4B,YAAkE;CAE/H,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,qBAAqB,GAC/C;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,YAAY;CACnC,CACF;AAAE;AAMF,MAAa,qCAAqC,CAAC,gBAAgB;AAEnE,MAAa,oCACW,YAC+F;CAEvH,MAAM,cAAc,6BAA6B;CACjD,MAAM,EAAC,UAAU,iBAAiB,SAAS,mBAAkB,UACvD,QAAQ,YAAY,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,cAC1E,UACE;EAAC,GAAG;EAAS,UAAU;GAAC,GAAG,QAAQ;GAAU;EAAW;CAAC,IACzD;EAAC,UAAU,EAAE,YAAa;EAAG,SAAS,KAAA;CAAS;CAKjD,MAAM,cAA6G,UAAU;EACzH,MAAM,EAAC,SAAQ,SAAS,CAAC;EAEzB,OAAQ,eAAe,MAAK,cAAc;CAC5C;CAON,OAAQ;EAAE;EAAY,GAAG;CAAgB;AAAC;;;;AAU5C,MAAa,qBACW,SACrB,gBAKQ;CACL,OAAO,YAAY,iCAAiC,OAAO,GAAG,WAAW;AAC3E;AACA,MAAa,oCAAoC;CAKnD,OAAO;AACT;;;;;;;;;AAUA,MAAa,wBAAwB,OAAO,mBAAsC,YAAkE;CAEhJ,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,4BAA4B,GACtD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,iBAAiB;CACxC,CACF;AAAE;AAMF,MAAa,4CAA4C,CAAC,uBAAuB;AAEjF,MAAa,2CACW,YAC6G;CAErI,MAAM,cAAc,oCAAoC;CACxD,MAAM,EAAC,UAAU,iBAAiB,SAAS,mBAAkB,UACvD,QAAQ,YAAY,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,cAC1E,UACE;EAAC,GAAG;EAAS,UAAU;GAAC,GAAG,QAAQ;GAAU;EAAW;CAAC,IACzD;EAAC,UAAU,EAAE,YAAa;EAAG,SAAS,KAAA;CAAS;CAKjD,MAAM,cAA2H,UAAU;EACvI,MAAM,EAAC,SAAQ,SAAS,CAAC;EAEzB,OAAQ,sBAAsB,MAAK,cAAc;CACnD;CAON,OAAQ;EAAE;EAAY,GAAG;CAAgB;AAAC;;;;AAU5C,MAAa,4BACW,SACrB,gBAKQ;CACL,OAAO,YAAY,wCAAwC,OAAO,GAAG,WAAW;AAClF"}