@playaos/api-client 0.11.0 → 0.12.0

package/README.md

@@ -15,7 +15,6 @@ import { createClient } from "@playaos/api-client";
 
 const client = createClient({
   baseUrl: "https://api.playaos.app",
-  embedBaseUrl: "https://your-camp.playaos.app",
   apiKey: "pk_live_...",
 });
 
@@ -68,11 +67,11 @@ If your deployment serves both route families from the same host, omit `embedBas
 - `embedBaseUrl` optionally overrides the host for `/api/embed/v1/*` routes.
 - When `embedBaseUrl` is omitted, embed requests default to `baseUrl`.
 
-This is useful when a deployment splits API-key-authenticated routes onto a dedicated API host (for example `https://api.playaos.app`) but keeps embed routes on a portal host (for example `https://your-camp.playaos.app`).
+This is useful when a deployment splits API-key-authenticated routes and embed routes onto different hosts. PlayaOS production serves both route families from `https://api.playaos.app`, so most integrations can omit `embedBaseUrl`.
 
 ## Authentication
 
-Generate an API key in **Admin → Settings → Developer**. Keys use the format `pk_live_*` and are scoped to specific resources.
+Generate an API key in the PlayaOS platform console under your org's **Developer → API Keys** page. Keys use the format `pk_live_*` and are scoped to specific resources.
 
 Required scopes per endpoint:
 
@@ -95,6 +94,8 @@ try {
   if (err instanceof ApiClientError) {
     console.error(err.status, err.code, err.message);
     // 404, "NOT_FOUND", "Member not found"
+    // err.retryAfter is the Retry-After header in seconds when the server sends a
+    // numeric one (commonly on 429/503); undefined otherwise.
   }
 }
 ```

package/dist/applications-schema.d.ts

@@ -43,6 +43,7 @@ declare const step4Schema: z.ZodObject<{
     build_skills: z.ZodOptional<z.ZodString>;
     strike_available: z.ZodBoolean;
     strike_help: z.ZodOptional<z.ZodString>;
+    commitments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodNumber, z.ZodBoolean]>>>;
 }, z.core.$strip>;
 declare const step5Schema: z.ZodObject<{
     about_yourself: z.ZodString;
@@ -85,6 +86,7 @@ declare const applicationSchema: z.ZodObject<{
     strike_help: z.ZodOptional<z.ZodString>;
     about_yourself: z.ZodOptional<z.ZodString>;
     agrees_to_principles: z.ZodOptional<z.ZodLiteral<true>>;
+    commitments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodNumber, z.ZodBoolean]>>>;
     custom_fields: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$strip>;
 type ApplicationFormData = z.infer<typeof applicationSchema>;

package/dist/applications-schema.js

@@ -31,7 +31,11 @@ var step4Schema = z.object({
   build_available: z.boolean(),
   build_skills: z.string().optional(),
   strike_available: z.boolean(),
-  strike_help: z.string().optional()
+  strike_help: z.string().optional(),
+  // commitmentId → value. Integers only on the number branch (per dataType);
+  // per-commitment bounds (min/max) are validated against the live defs at
+  // form-render + on the server, not here (PLA-682).
+  commitments: z.record(z.string(), z.union([z.number().int(), z.boolean()])).optional()
 }).refine((data) => !data.build_available || data.build_skills, {
   message: "Please tell us about your build skills",
   path: ["build_skills"]
@@ -65,6 +69,9 @@ var applicationSchema = z.object({
   strike_help: z.string().optional(),
   about_yourself: z.string().optional(),
   agrees_to_principles: z.literal(true).optional(),
+  // Permissive at the API level (no bounds checks) — the server validates each
+  // value against the live commitment definition before seeding (PLA-682).
+  commitments: z.record(z.string(), z.union([z.number(), z.boolean()])).optional(),
   custom_fields: z.object({}).passthrough().optional()
 });
 export {

package/dist/applications-schema.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/applications-schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\n// Single source of truth for the apply-wizard form shape.\n// The portal apply flow and the @playaos/react <ApplicationForm> SDK both import\n// from here so the validation contract can never drift between them (PLA-483).\n// `ApplicationCreatePayload` in ./types.ts is the zod-free wire mirror; a type\n// equivalence test (applications-schema.test.ts) keeps the two locked together.\n\n// Per-step validation schemas\nexport const step0Schema = z.object({\n  acknowledged_expectations: z.literal(true, {\n    error: \"Please acknowledge the expectations to continue\",\n  }),\n});\n\nexport const step1Schema = z.object({\n  first_name: z.string().min(1, \"First name is required\"),\n  last_name: z.string().min(1, \"Last name is required\"),\n  email: z.string().email(\"Invalid email address\"),\n  phone: z.string().min(10, \"Phone number is required\"),\n  referral_code: z.string().optional(),\n  socials: z.string().optional(),\n  birthday: z.string().min(1, \"Birthday is required\"),\n  hometown: z.string().min(1, \"Location is required\"),\n});\n\nexport const step2Schema = z.object({\n  how_heard: z.string().min(1, \"Please tell us how you heard about us\"),\n  burning_man_before: z.enum([\"yes\", \"no\"], { error: \"Please select an option\" }),\n  burning_man_years: z.string().optional(),\n});\n\nexport const step3Schema = z.object({\n  shelter_type: z.enum([\"joining_rv\", \"bringing_rv\", \"shiftpod_tent\", \"car\", \"truck\", \"van\", \"unsure\"], {\n    error: \"Please select a shelter type\",\n  }),\n  shelter_mates: z.string().optional(),\n  ticket_status: z.enum([\"looking\", \"have_ticket\", \"unsure\"], { error: \"Please select your ticket status\" }),\n});\n\nexport const step4Schema = z\n  .object({\n    build_available: z.boolean(),\n    build_skills: z.string().optional(),\n    strike_available: z.boolean(),\n    strike_help: z.string().optional(),\n  })\n  .refine((data) => !data.build_available || data.build_skills, {\n    message: \"Please tell us about your build skills\",\n    path: [\"build_skills\"],\n  })\n  .refine((data) => !data.strike_available || data.strike_help, {\n    message: \"Please tell us how you can help with strike\",\n    path: [\"strike_help\"],\n  });\n\nexport const step5Schema = z.object({\n  about_yourself: z.string().min(50, \"Please write at least 50 characters about yourself\"),\n  agrees_to_principles: z.literal(true, { error: \"You must agree to the 10 Principles\" }),\n});\n\n// Combined schema for API-level validation — permissive so external camps\n// can submit applications with only first_name + last_name + email + custom_fields.\n// Step schemas (above) remain strict for the PlayaOS wizard UI.\nexport const applicationSchema = z.object({\n  acknowledged_expectations: z.literal(true).optional(),\n  first_name: z.string().min(1),\n  last_name: z.string().min(1),\n  email: z.string().email(),\n  phone: z.string().optional(),\n  referral_code: z.string().optional(),\n  socials: z.string().optional(),\n  birthday: z.string().optional(),\n  hometown: z.string().optional(),\n  how_heard: z.string().optional(),\n  burning_man_before: z.enum([\"yes\", \"no\"]).optional(),\n  burning_man_years: z.string().optional(),\n  shelter_type: z.enum([\"joining_rv\", \"bringing_rv\", \"shiftpod_tent\", \"car\", \"truck\", \"van\", \"unsure\"]).optional(),\n  shelter_mates: z.string().optional(),\n  ticket_status: z.enum([\"looking\", \"have_ticket\", \"unsure\"]).optional(),\n  build_available: z.boolean().optional(),\n  build_skills: z.string().optional(),\n  strike_available: z.boolean().optional(),\n  strike_help: z.string().optional(),\n  about_yourself: z.string().optional(),\n  agrees_to_principles: z.literal(true).optional(),\n  custom_fields: z.object({}).passthrough().optional(),\n});\n\nexport type ApplicationFormData = z.infer<typeof applicationSchema>;\nexport type Step0Data = z.infer<typeof step0Schema>;\nexport type Step1Data = z.infer<typeof step1Schema>;\nexport type Step2Data = z.infer<typeof step2Schema>;\nexport type Step3Data = z.infer<typeof step3Schema>;\nexport type Step4Data = z.infer<typeof step4Schema>;\nexport type Step5Data = z.infer<typeof step5Schema>;\n"],"mappings":";AAAA,SAAS,SAAS;AASX,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,2BAA2B,EAAE,QAAQ,MAAM;AAAA,IACzC,OAAO;AAAA,EACT,CAAC;AACH,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,wBAAwB;AAAA,EACtD,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,uBAAuB;AAAA,EACpD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,0BAA0B;AAAA,EACpD,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EAClD,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AACpD,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,uCAAuC;AAAA,EACpE,oBAAoB,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,OAAO,0BAA0B,CAAC;AAAA,EAC9E,mBAAmB,EAAE,OAAO,EAAE,SAAS;AACzC,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,cAAc,EAAE,KAAK,CAAC,cAAc,eAAe,iBAAiB,OAAO,SAAS,OAAO,QAAQ,GAAG;AAAA,IACpG,OAAO;AAAA,EACT,CAAC;AAAA,EACD,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,KAAK,CAAC,WAAW,eAAe,QAAQ,GAAG,EAAE,OAAO,mCAAmC,CAAC;AAC3G,CAAC;AAEM,IAAM,cAAc,EACxB,OAAO;AAAA,EACN,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC,EACA,OAAO,CAAC,SAAS,CAAC,KAAK,mBAAmB,KAAK,cAAc;AAAA,EAC5D,SAAS;AAAA,EACT,MAAM,CAAC,cAAc;AACvB,CAAC,EACA,OAAO,CAAC,SAAS,CAAC,KAAK,oBAAoB,KAAK,aAAa;AAAA,EAC5D,SAAS;AAAA,EACT,MAAM,CAAC,aAAa;AACtB,CAAC;AAEI,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,IAAI,IAAI,oDAAoD;AAAA,EACvF,sBAAsB,EAAE,QAAQ,MAAM,EAAE,OAAO,sCAAsC,CAAC;AACxF,CAAC;AAKM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,2BAA2B,EAAE,QAAQ,IAAI,EAAE,SAAS;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,oBAAoB,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,SAAS;AAAA,EACnD,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,KAAK,CAAC,cAAc,eAAe,iBAAiB,OAAO,SAAS,OAAO,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/G,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,KAAK,CAAC,WAAW,eAAe,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrE,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,kBAAkB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,sBAAsB,EAAE,QAAQ,IAAI,EAAE,SAAS;AAAA,EAC/C,eAAe,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS;AACrD,CAAC;","names":[]}
+{"version":3,"sources":["../src/applications-schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\n// Single source of truth for the apply-wizard form shape.\n// The portal apply flow and the @playaos/react <ApplicationForm> SDK both import\n// from here so the validation contract can never drift between them (PLA-483).\n// `ApplicationCreatePayload` in ./types.ts is the zod-free wire mirror; a type\n// equivalence test (applications-schema.test.ts) keeps the two locked together.\n\n// Per-step validation schemas\nexport const step0Schema = z.object({\n  acknowledged_expectations: z.literal(true, {\n    error: \"Please acknowledge the expectations to continue\",\n  }),\n});\n\nexport const step1Schema = z.object({\n  first_name: z.string().min(1, \"First name is required\"),\n  last_name: z.string().min(1, \"Last name is required\"),\n  email: z.string().email(\"Invalid email address\"),\n  phone: z.string().min(10, \"Phone number is required\"),\n  referral_code: z.string().optional(),\n  socials: z.string().optional(),\n  birthday: z.string().min(1, \"Birthday is required\"),\n  hometown: z.string().min(1, \"Location is required\"),\n});\n\nexport const step2Schema = z.object({\n  how_heard: z.string().min(1, \"Please tell us how you heard about us\"),\n  burning_man_before: z.enum([\"yes\", \"no\"], { error: \"Please select an option\" }),\n  burning_man_years: z.string().optional(),\n});\n\nexport const step3Schema = z.object({\n  shelter_type: z.enum([\"joining_rv\", \"bringing_rv\", \"shiftpod_tent\", \"car\", \"truck\", \"van\", \"unsure\"], {\n    error: \"Please select a shelter type\",\n  }),\n  shelter_mates: z.string().optional(),\n  ticket_status: z.enum([\"looking\", \"have_ticket\", \"unsure\"], { error: \"Please select your ticket status\" }),\n});\n\nexport const step4Schema = z\n  .object({\n    build_available: z.boolean(),\n    build_skills: z.string().optional(),\n    strike_available: z.boolean(),\n    strike_help: z.string().optional(),\n    // commitmentId → value. Integers only on the number branch (per dataType);\n    // per-commitment bounds (min/max) are validated against the live defs at\n    // form-render + on the server, not here (PLA-682).\n    commitments: z.record(z.string(), z.union([z.number().int(), z.boolean()])).optional(),\n  })\n  .refine((data) => !data.build_available || data.build_skills, {\n    message: \"Please tell us about your build skills\",\n    path: [\"build_skills\"],\n  })\n  .refine((data) => !data.strike_available || data.strike_help, {\n    message: \"Please tell us how you can help with strike\",\n    path: [\"strike_help\"],\n  });\n\nexport const step5Schema = z.object({\n  about_yourself: z.string().min(50, \"Please write at least 50 characters about yourself\"),\n  agrees_to_principles: z.literal(true, { error: \"You must agree to the 10 Principles\" }),\n});\n\n// Combined schema for API-level validation — permissive so external camps\n// can submit applications with only first_name + last_name + email + custom_fields.\n// Step schemas (above) remain strict for the PlayaOS wizard UI.\nexport const applicationSchema = z.object({\n  acknowledged_expectations: z.literal(true).optional(),\n  first_name: z.string().min(1),\n  last_name: z.string().min(1),\n  email: z.string().email(),\n  phone: z.string().optional(),\n  referral_code: z.string().optional(),\n  socials: z.string().optional(),\n  birthday: z.string().optional(),\n  hometown: z.string().optional(),\n  how_heard: z.string().optional(),\n  burning_man_before: z.enum([\"yes\", \"no\"]).optional(),\n  burning_man_years: z.string().optional(),\n  shelter_type: z.enum([\"joining_rv\", \"bringing_rv\", \"shiftpod_tent\", \"car\", \"truck\", \"van\", \"unsure\"]).optional(),\n  shelter_mates: z.string().optional(),\n  ticket_status: z.enum([\"looking\", \"have_ticket\", \"unsure\"]).optional(),\n  build_available: z.boolean().optional(),\n  build_skills: z.string().optional(),\n  strike_available: z.boolean().optional(),\n  strike_help: z.string().optional(),\n  about_yourself: z.string().optional(),\n  agrees_to_principles: z.literal(true).optional(),\n  // Permissive at the API level (no bounds checks) — the server validates each\n  // value against the live commitment definition before seeding (PLA-682).\n  commitments: z.record(z.string(), z.union([z.number(), z.boolean()])).optional(),\n  custom_fields: z.object({}).passthrough().optional(),\n});\n\nexport type ApplicationFormData = z.infer<typeof applicationSchema>;\nexport type Step0Data = z.infer<typeof step0Schema>;\nexport type Step1Data = z.infer<typeof step1Schema>;\nexport type Step2Data = z.infer<typeof step2Schema>;\nexport type Step3Data = z.infer<typeof step3Schema>;\nexport type Step4Data = z.infer<typeof step4Schema>;\nexport type Step5Data = z.infer<typeof step5Schema>;\n"],"mappings":";AAAA,SAAS,SAAS;AASX,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,2BAA2B,EAAE,QAAQ,MAAM;AAAA,IACzC,OAAO;AAAA,EACT,CAAC;AACH,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,wBAAwB;AAAA,EACtD,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,uBAAuB;AAAA,EACpD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,0BAA0B;AAAA,EACpD,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EAClD,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AACpD,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,uCAAuC;AAAA,EACpE,oBAAoB,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,OAAO,0BAA0B,CAAC;AAAA,EAC9E,mBAAmB,EAAE,OAAO,EAAE,SAAS;AACzC,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,cAAc,EAAE,KAAK,CAAC,cAAc,eAAe,iBAAiB,OAAO,SAAS,OAAO,QAAQ,GAAG;AAAA,IACpG,OAAO;AAAA,EACT,CAAC;AAAA,EACD,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,KAAK,CAAC,WAAW,eAAe,QAAQ,GAAG,EAAE,OAAO,mCAAmC,CAAC;AAC3G,CAAC;AAEM,IAAM,cAAc,EACxB,OAAO;AAAA,EACN,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIjC,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS;AACvF,CAAC,EACA,OAAO,CAAC,SAAS,CAAC,KAAK,mBAAmB,KAAK,cAAc;AAAA,EAC5D,SAAS;AAAA,EACT,MAAM,CAAC,cAAc;AACvB,CAAC,EACA,OAAO,CAAC,SAAS,CAAC,KAAK,oBAAoB,KAAK,aAAa;AAAA,EAC5D,SAAS;AAAA,EACT,MAAM,CAAC,aAAa;AACtB,CAAC;AAEI,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,IAAI,IAAI,oDAAoD;AAAA,EACvF,sBAAsB,EAAE,QAAQ,MAAM,EAAE,OAAO,sCAAsC,CAAC;AACxF,CAAC;AAKM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,2BAA2B,EAAE,QAAQ,IAAI,EAAE,SAAS;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,oBAAoB,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,SAAS;AAAA,EACnD,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,KAAK,CAAC,cAAc,eAAe,iBAAiB,OAAO,SAAS,OAAO,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/G,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,KAAK,CAAC,WAAW,eAAe,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrE,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,kBAAkB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,sBAAsB,EAAE,QAAQ,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA,EAG/C,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,EAC/E,eAAe,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS;AACrD,CAAC;","names":[]}

package/dist/index.d.ts

@@ -1,9 +1,38 @@
 declare class ApiClientError extends Error {
     readonly status: number;
     readonly code: string;
-    constructor(status: number, code: string, message: string);
+    /**
+     * Seconds to wait before retrying, parsed from a numeric `Retry-After`
+     * response header when the server sends one (commonly on 429 and 503).
+     * Undefined when the header is absent or in HTTP-date form.
+     */
+    readonly retryAfter?: number | undefined;
+    constructor(status: number, code: string, message: string, 
+    /**
+     * Seconds to wait before retrying, parsed from a numeric `Retry-After`
+     * response header when the server sends one (commonly on 429 and 503).
+     * Undefined when the header is absent or in HTTP-date form.
+     */
+    retryAfter?: number | undefined);
 }
 
+/** Cursor-paginated list envelope returned by v1 list endpoints (PLA-779). */
+interface Paginated<T> {
+    data: T[];
+    /** Opaque cursor for the next page, or null when this is the last page. */
+    nextCursor: string | null;
+}
+/**
+ * Shared cursor-pagination request params for list methods. Declared as a `type`
+ * (not an `interface`) so intersections like `{ year?: number } & PaginationParams`
+ * stay assignable to `Record<string, …>` when serialized into a query string.
+ */
+type PaginationParams = {
+    /** Max rows to return (1-100, default 50). */
+    limit?: number;
+    /** Opaque cursor from a previous response's nextCursor. */
+    cursor?: string;
+};
 interface Member {
     id: string;
     firstName: string;
@@ -85,7 +114,22 @@ interface OrgConfig {
     plan: string | null;
     logoUrl: string | null;
 }
-type ApplicationStatus = "draft" | "pending" | "invite_sent" | "interview_scheduled" | "interviewed" | "approved" | "waitlisted" | "rejected";
+type CommitmentDataType = "integer" | "boolean";
+type CommitmentValue = number | boolean;
+/** An admin-configured commitment definition (per org + year) the apply form renders. */
+interface Commitment {
+    id: string;
+    name: string;
+    displayName: string;
+    description: string | null;
+    dataType: CommitmentDataType;
+    minValue: number | null;
+    maxValue: number | null;
+}
+interface CommitmentsListResponse {
+    commitments: Commitment[];
+}
+type ApplicationStatus = "draft" | "pending" | "invite_sent" | "interview_scheduled" | "interviewed" | "approved" | "waitlisted" | "rejected" | "spam";
 type MemberRole = "member" | "admin" | "applicant" | "super_admin";
 interface PaymentPageResponse {
     provider: "givebutter" | "crowded";
@@ -114,6 +158,8 @@ interface ApplicationCreatePayload {
     strike_help?: string;
     about_yourself?: string;
     agrees_to_principles?: true;
+    /** commitmentId → value (integer or boolean per the commitment dataType), collected at apply (PLA-682). */
+    commitments?: Record<string, number | boolean>;
     custom_fields?: Record<string, unknown>;
 }
 interface ApplicationCreateResponse {
@@ -344,9 +390,9 @@ declare class PlayaOSClient {
         list: (params?: {
             role?: MemberRole;
             status?: string;
-        }, opts?: {
+        } & PaginationParams, opts?: {
             signal?: AbortSignal;
-        }) => Promise<Member[]>;
+        }) => Promise<Paginated<Member>>;
         get: (id: string, opts?: {
             signal?: AbortSignal;
         }) => Promise<Member>;
@@ -393,9 +439,9 @@ declare class PlayaOSClient {
         list: (params?: {
             status?: ApplicationStatus;
             year?: number;
-        }, opts?: {
+        } & PaginationParams, opts?: {
             signal?: AbortSignal;
-        }) => Promise<Application[]>;
+        }) => Promise<Paginated<Application>>;
         create: (payload: ApplicationCreatePayload, opts?: {
             accessToken?: string;
             signal?: AbortSignal;
@@ -430,9 +476,10 @@ declare class PlayaOSClient {
         list: (params?: {
             userId?: string;
             year?: number;
-        }, opts?: {
+            paymentStatus?: "unpaid" | "partial" | "paid";
+        } & PaginationParams, opts?: {
             signal?: AbortSignal;
-        }) => Promise<DuesStatus[]>;
+        }) => Promise<Paginated<DuesStatus>>;
     };
     readonly shifts: {
         list: (params?: {
@@ -440,15 +487,21 @@ declare class PlayaOSClient {
             fromDate?: string;
             toDate?: string;
             publishedOnly?: boolean;
-        }, opts?: {
+            openOnly?: boolean;
+        } & PaginationParams, opts?: {
             signal?: AbortSignal;
-        }) => Promise<Shift[]>;
+        }) => Promise<Paginated<Shift>>;
     };
     readonly org: {
         get: (opts?: {
             signal?: AbortSignal;
         }) => Promise<OrgConfig>;
     };
+    readonly commitments: {
+        list: (opts?: {
+            signal?: AbortSignal;
+        }) => Promise<CommitmentsListResponse>;
+    };
     readonly payments: {
         page: (memberId: string, duesCollectionId?: string, opts?: {
             signal?: AbortSignal;
@@ -501,9 +554,9 @@ declare class PlayaOSClient {
                     }) => Promise<unknown[]>;
                     create: (campaignId: number, payload: {
                         code: string;
-                        type: string;
-                        amount: number;
-                        active?: boolean;
+                        value: number;
+                        type: "percent" | "fixed";
+                        expirationDate?: string;
                     }, opts: {
                         accessToken: string;
                         signal?: AbortSignal;
@@ -670,4 +723,81 @@ interface ExchangeResult {
 }
 declare function exchangeCode(params: ExchangeParams): Promise<ExchangeResult>;
 
-export { ApiClientError, type Application, type ApplicationAnnotations, type ApplicationCreatePayload, type ApplicationCreateResponse, type ApplicationNote, type ApplicationScore, type ApplicationStatus, type ApplicationTransitionPayload, type ApplicationTransitionResponse, type DuesStatus, type ExchangeParams, type ExchangeResult, type Member, type MemberCreatePayload, type MemberCreateResponse, type MemberDeactivateResponse, type MemberRole, type MemberUpdatePayload, type MemberUpdateResponse, type OrgConfig, type PaymentPageResponse, PlayaOSClient, type Shift, type ShiftSignup, type ShiftType, type Waiver, type WaiverContent, type WaiverSection, type WaiverSignPayload, type WaiverSignResponse, type WaiverStatus, createClient, exchangeCode };
+/** A listing holds at most this many images (matches the DB's position 1–6 check). */
+declare const MAX_IMAGE_POSITION = 6;
+/**
+ * Typed client for the anonymous gift-layer marketplace API (`/api/public/marketplace/*`).
+ *
+ * Unlike `PlayaOSClient` (api-key auth for `/api/v1`), this surface authenticates
+ * writes with a Supabase **Bearer JWT** belonging to a public `global_accounts`
+ * user. The token is supplied by an injected `getToken` provider so the same
+ * client works from any consumer (the marketing UI supplies the browser
+ * Supabase session token; a future surface could supply its own). Keeps the
+ * public API as the single write contract — the UI is just another consumer.
+ */
+interface PublicMarketplaceClientOptions {
+    /** API base, e.g. `https://api.playaos.app`. */
+    baseUrl: string;
+    /** Supplies the Supabase access token (Bearer) for authenticated calls; null/undefined when signed out. */
+    getToken: () => Promise<string | null | undefined> | string | null | undefined;
+}
+interface NewListingInput {
+    category: string;
+    subcategory?: string;
+    title: string;
+    body: string;
+    price?: number;
+    location?: string;
+    replyEmail: string;
+}
+interface ImageUploadTarget {
+    /** Supabase signed upload URL — PUT the file bytes here. */
+    uploadUrl: string;
+    /** Storage path to pass back to `attachImage` once the PUT succeeds. */
+    storagePath: string;
+}
+/** Moderation flag reasons accepted by the API (mirrors the DB enum). */
+type MarketplaceFlagReason = "spam" | "prohibited" | "other";
+interface ListingImage {
+    /** Short-lived signed download URL for the image. */
+    url: string;
+    /** 1-based display order. */
+    position: number;
+}
+interface PublicMarketplaceClient {
+    /**
+     * Create a listing as the signed-in account. Throws a plain `Error` when there
+     * is no token (signed out), or `ApiClientError` on a non-2xx response.
+     */
+    createListing(input: NewListingInput, signal?: AbortSignal): Promise<{
+        id: string;
+    }>;
+    /** Request a signed upload URL for an image on a listing the caller owns. */
+    getImageUploadUrl(listingId: string, signal?: AbortSignal): Promise<ImageUploadTarget>;
+    /** Attach an already-uploaded image (by storage path) to a listing at a 1–6 position. */
+    attachImage(listingId: string, input: {
+        storagePath: string;
+        position: number;
+    }, signal?: AbortSignal): Promise<{
+        id: string;
+    }>;
+    /** Anonymous: list an active listing's images as short-lived signed URLs (for public display). */
+    listListingImages(listingId: string, signal?: AbortSignal): Promise<{
+        images: ListingImage[];
+    }>;
+    /** Anonymous: batch-fetch first-image signed thumbnail URLs (listingId -> url) for browse cards. */
+    listThumbnails(listingIds: string[], signal?: AbortSignal): Promise<{
+        thumbnails: Record<string, string>;
+    }>;
+    /** Flag a listing for moderation (signed-in). Idempotent per (listing, user). */
+    flagListing(listingId: string, reason: MarketplaceFlagReason, signal?: AbortSignal): Promise<{
+        ok: boolean;
+    }>;
+    /** Contact a listing's owner (signed-in); records the reply + queues a notification email. */
+    replyToListing(listingId: string, message: string | undefined, signal?: AbortSignal): Promise<{
+        ok: boolean;
+    }>;
+}
+declare function createPublicMarketplaceClient(opts: PublicMarketplaceClientOptions): PublicMarketplaceClient;
+
+export { ApiClientError, type Application, type ApplicationAnnotations, type ApplicationCreatePayload, type ApplicationCreateResponse, type ApplicationNote, type ApplicationScore, type ApplicationStatus, type ApplicationTransitionPayload, type ApplicationTransitionResponse, type Commitment, type CommitmentDataType, type CommitmentValue, type CommitmentsListResponse, type DuesStatus, type ExchangeParams, type ExchangeResult, type ImageUploadTarget, type ListingImage, MAX_IMAGE_POSITION, type MarketplaceFlagReason, type Member, type MemberCreatePayload, type MemberCreateResponse, type MemberDeactivateResponse, type MemberRole, type MemberUpdatePayload, type MemberUpdateResponse, type NewListingInput, type OrgConfig, type PaymentPageResponse, PlayaOSClient, type PublicMarketplaceClient, type PublicMarketplaceClientOptions, type Shift, type ShiftSignup, type ShiftType, type Waiver, type WaiverContent, type WaiverSection, type WaiverSignPayload, type WaiverSignResponse, type WaiverStatus, createClient, createPublicMarketplaceClient, exchangeCode };

package/dist/index.js

@@ -1,20 +1,27 @@
 // src/error.ts
 var ApiClientError = class extends Error {
-  constructor(status, code, message) {
+  constructor(status, code, message, retryAfter) {
     super(message);
     this.status = status;
     this.code = code;
+    this.retryAfter = retryAfter;
     this.name = "ApiClientError";
   }
   status;
   code;
+  retryAfter;
 };
+function parseRetryAfter(res) {
+  const header = res.headers?.get?.("retry-after")?.trim();
+  return header && /^\d+$/.test(header) ? parseInt(header, 10) : void 0;
+}
 async function parseError(res) {
+  const retryAfter = parseRetryAfter(res);
   try {
     const body = await res.json();
-    return new ApiClientError(res.status, body.code ?? "UNKNOWN", body.error ?? res.statusText);
+    return new ApiClientError(res.status, body.code ?? "UNKNOWN", body.error ?? res.statusText, retryAfter);
   } catch {
-    return new ApiClientError(res.status, "UNKNOWN", res.statusText);
+    return new ApiClientError(res.status, "UNKNOWN", res.statusText, retryAfter);
   }
 }
 
@@ -31,8 +38,13 @@ function buildUrl(base, path, params) {
 function buildEmbedUrl(base, path) {
   return `${base}/api/embed/v1${path}`;
 }
+function withCampKey(url, campKey) {
+  const embedUrl = new URL(url);
+  embedUrl.searchParams.set("camp_key", campKey);
+  return embedUrl.toString();
+}
 async function getEmbed(url, campKey, signal) {
-  const res = await fetch(url, {
+  const res = await fetch(withCampKey(url, campKey), {
     headers: { "X-Camp-Key": campKey },
     signal
   });
@@ -42,7 +54,7 @@ async function getEmbed(url, campKey, signal) {
 async function getEmbedAuthed(url, campKey, opts) {
   const headers = { "X-Camp-Key": campKey };
   if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;
-  const res = await fetch(url, { headers, signal: opts?.signal });
+  const res = await fetch(withCampKey(url, campKey), { headers, signal: opts?.signal });
   if (!res.ok) throw await parseError(res);
   return res.json();
 }
@@ -70,7 +82,7 @@ async function postEmbed(url, campKey, body, opts) {
     "Content-Type": "application/json"
   };
   if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;
-  const res = await fetch(url, {
+  const res = await fetch(withCampKey(url, campKey), {
     method: "POST",
     headers,
     body: JSON.stringify(body),
@@ -85,7 +97,7 @@ async function putEmbed(url, campKey, body, opts) {
     "Content-Type": "application/json"
   };
   if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;
-  const res = await fetch(url, {
+  const res = await fetch(withCampKey(url, campKey), {
     method: "PUT",
     headers,
     body: JSON.stringify(body),
@@ -97,7 +109,7 @@ async function putEmbed(url, campKey, body, opts) {
 async function deleteEmbed(url, campKey, opts) {
   const headers = { "X-Camp-Key": campKey };
   if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;
-  const res = await fetch(url, { method: "DELETE", headers, signal: opts?.signal });
+  const res = await fetch(withCampKey(url, campKey), { method: "DELETE", headers, signal: opts?.signal });
   if (!res.ok) throw await parseError(res);
   return res.json();
 }
@@ -174,6 +186,12 @@ var PlayaOSClient = class {
   org = {
     get: (opts) => request(buildUrl(this.baseUrl, "/org"), this.apiKey, opts?.signal)
   };
+  // Public embed surface: active commitment definitions for the org's current
+  // year, so the <ApplicationForm> can render + validate them (PLA-682). Uses
+  // the X-Camp-Key (the apiKey doubles as the camp key), same as applications.create.
+  commitments = {
+    list: (opts) => getEmbed(buildEmbedUrl(this.embedBaseUrl, "/commitments"), this.apiKey, opts?.signal)
+  };
   payments = {
     page: (memberId, duesCollectionId, opts) => post(buildUrl(this.baseUrl, "/payments/page"), this.apiKey, { memberId, duesCollectionId }, opts?.signal)
   };
@@ -390,8 +408,8 @@ var PlayaOSClient = class {
     /** List available interview slots for a booking token (PLA-714). Public. */
     getSlots: (token, opts) => {
       const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}`;
-      return fetch(url, { signal: opts?.signal }).then((res) => {
-        if (!res.ok) throw parseError(res);
+      return fetch(url, { signal: opts?.signal }).then(async (res) => {
+        if (!res.ok) throw await parseError(res);
         return res.json();
       });
     },
@@ -403,16 +421,16 @@ var PlayaOSClient = class {
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(payload),
         signal: opts?.signal
-      }).then((res) => {
-        if (!res.ok) throw parseError(res);
+      }).then(async (res) => {
+        if (!res.ok) throw await parseError(res);
         return res.json();
       });
     },
     /** Cancel an interview booking (PLA-714). Public. */
     cancel: (token, opts) => {
       const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/cancel`;
-      return fetch(url, { method: "POST", signal: opts?.signal }).then((res) => {
-        if (!res.ok) throw parseError(res);
+      return fetch(url, { method: "POST", signal: opts?.signal }).then(async (res) => {
+        if (!res.ok) throw await parseError(res);
         return res.json();
       });
     },
@@ -424,8 +442,8 @@ var PlayaOSClient = class {
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(payload),
         signal: opts?.signal
-      }).then((res) => {
-        if (!res.ok) throw parseError(res);
+      }).then(async (res) => {
+        if (!res.ok) throw await parseError(res);
         return res.json();
       });
     }
@@ -473,10 +491,54 @@ async function exchangeCode(params) {
     ...refreshToken !== void 0 ? { refreshToken } : {}
   };
 }
+
+// src/public-marketplace.ts
+var MAX_IMAGE_POSITION = 6;
+function createPublicMarketplaceClient(opts) {
+  const base = opts.baseUrl.replace(/\/+$/, "");
+  if (!base) {
+    throw new Error("createPublicMarketplaceClient: baseUrl is required");
+  }
+  async function authedPost(path, body, signal) {
+    const token = await opts.getToken();
+    if (!token) throw new Error("Not signed in");
+    const res = await fetch(`${base}/api/public/marketplace${path}`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal
+    });
+    if (!res.ok) throw await parseError(res);
+    return res.json();
+  }
+  async function publicGet(path, signal) {
+    const init = { signal, cache: "no-store" };
+    const res = await fetch(`${base}/api/public/marketplace${path}`, init);
+    if (!res.ok) throw await parseError(res);
+    return res.json();
+  }
+  const seg = (listingId) => `/listings/${encodeURIComponent(listingId)}`;
+  return {
+    createListing: (input, signal) => authedPost("/listings", input, signal),
+    getImageUploadUrl: (listingId, signal) => authedPost(`${seg(listingId)}/image-upload-url`, {}, signal),
+    attachImage: (listingId, input, signal) => {
+      if (!Number.isInteger(input.position) || input.position < 1 || input.position > MAX_IMAGE_POSITION) {
+        return Promise.reject(new Error(`attachImage: position must be 1\u2013${MAX_IMAGE_POSITION}`));
+      }
+      return authedPost(`${seg(listingId)}/images`, input, signal);
+    },
+    listListingImages: (listingId, signal) => publicGet(`${seg(listingId)}/images`, signal),
+    listThumbnails: (listingIds, signal) => publicGet(`/thumbnails?ids=${encodeURIComponent(listingIds.join(","))}`, signal),
+    flagListing: (listingId, reason, signal) => authedPost(`${seg(listingId)}/flag`, { reason }, signal),
+    replyToListing: (listingId, message, signal) => authedPost(`${seg(listingId)}/reply`, { message }, signal)
+  };
+}
 export {
   ApiClientError,
+  MAX_IMAGE_POSITION,
   PlayaOSClient,
   createClient,
+  createPublicMarketplaceClient,
   exchangeCode
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error.ts","../src/client.ts","../src/exchange.ts"],"sourcesContent":["export class ApiClientError extends Error {\n  constructor(\n    public readonly status: number,\n    public readonly code: string,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"ApiClientError\";\n  }\n}\n\nexport async function parseError(res: Response): Promise<ApiClientError> {\n  try {\n    const body = (await res.json()) as { error?: string; code?: string };\n    return new ApiClientError(res.status, body.code ?? \"UNKNOWN\", body.error ?? res.statusText);\n  } catch {\n    return new ApiClientError(res.status, \"UNKNOWN\", res.statusText);\n  }\n}\n","import { type ApiClientError, parseError } from \"./error.js\";\nimport type {\n  AnnouncementSendPayload,\n  AnnouncementSendResponse,\n  Application,\n  ApplicationAnnotations,\n  ApplicationCreatePayload,\n  ApplicationCreateResponse,\n  ApplicationHistoryResponse,\n  ApplicationNote,\n  ApplicationScore,\n  ApplicationStatus,\n  ApplicationTransitionPayload,\n  ApplicationTransitionResponse,\n  BookingToken,\n  BookSlotInput,\n  BookSlotResponse,\n  CalendarStatus,\n  CreateBookingTokenInput,\n  DuesCreatePayload,\n  DuesCreateResponse,\n  DuesStatus,\n  DuesUpdatePayload,\n  DuesUpdateResponse,\n  GoogleCalendar,\n  Member,\n  MemberCreatePayload,\n  MemberCreateResponse,\n  MemberDeactivateResponse,\n  MemberRole,\n  MemberUpdatePayload,\n  MemberUpdateResponse,\n  OrgConfig,\n  OrgUpdatePayload,\n  OrgUpdateResponse,\n  PaymentPageResponse,\n  RescheduleInput,\n  SelectCalendarInput,\n  SetAvailabilityInput,\n  SetAvailabilityResponse,\n  Shift,\n  Waiver,\n  WaiverSignPayload,\n  WaiverSignResponse,\n  WaiverStatus,\n} from \"./types.js\";\n\nexport type { ApiClientError };\n\ninterface ClientOptions {\n  /** Base URL for authenticated /api/v1 routes, e.g. https://api.playaos.app */\n  baseUrl: string;\n  /** Optional base URL for /api/embed/v1 routes when they live on a different host. */\n  embedBaseUrl?: string;\n  /** API key in the format pk_live_* */\n  apiKey: string;\n}\n\nfunction buildUrl(base: string, path: string, params?: Record<string, string | number | boolean | undefined>): string {\n  const url = new URL(`${base}/api/v1${path}`);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {\n      // Skip undefined and false booleans — z.coerce.boolean() on the server uses Boolean(),\n      // which treats any non-empty string (including \"false\") as true. Omitting a false boolean\n      // param has the same effect as the server default (unfiltered).\n      if (v !== undefined && v !== false) url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\nfunction buildEmbedUrl(base: string, path: string): string {\n  return `${base}/api/embed/v1${path}`;\n}\n\nasync function getEmbed<T>(url: string, campKey: string, signal?: AbortSignal): Promise<T> {\n  const res = await fetch(url, {\n    headers: { \"X-Camp-Key\": campKey },\n    signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function getEmbedAuthed<T>(\n  url: string,\n  campKey: string,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = { \"X-Camp-Key\": campKey };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(url, { headers, signal: opts?.signal });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function request<T>(url: string, apiKey: string, signal?: AbortSignal): Promise<T> {\n  const res = await fetch(url, {\n    headers: { Authorization: `Bearer ${apiKey}` },\n    signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function post<T>(url: string, apiKey: string, body: unknown, signal?: AbortSignal): Promise<T> {\n  const res = await fetch(url, {\n    method: \"POST\",\n    headers: { Authorization: `Bearer ${apiKey}`, \"Content-Type\": \"application/json\" },\n    body: JSON.stringify(body),\n    signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function postEmbed<T>(\n  url: string,\n  campKey: string,\n  body: unknown,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = {\n    \"X-Camp-Key\": campKey,\n    \"Content-Type\": \"application/json\",\n  };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(url, {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify(body),\n    signal: opts?.signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function putEmbed<T>(\n  url: string,\n  campKey: string,\n  body: unknown,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = {\n    \"X-Camp-Key\": campKey,\n    \"Content-Type\": \"application/json\",\n  };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(url, {\n    method: \"PUT\",\n    headers,\n    body: JSON.stringify(body),\n    signal: opts?.signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function deleteEmbed<T>(\n  url: string,\n  campKey: string,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = { \"X-Camp-Key\": campKey };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(url, { method: \"DELETE\", headers, signal: opts?.signal });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\n/**\n * Bearer-only helper for /api/embed/v1/admin/* (PLA-489). The admin token is\n * the sole credential (no X-Camp-Key — orgId comes from the JWT claims\n * server-side). `method` can be GET, POST, PATCH, or PUT; `body` is optional\n * (omitted for GET reads like getAnnotations).\n */\nasync function adminEmbed<T>(\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"PUT\",\n  url: string,\n  accessToken: string,\n  body?: unknown,\n  signal?: AbortSignal,\n): Promise<T> {\n  const headers: Record<string, string> = { Authorization: `Bearer ${accessToken}` };\n  const init: RequestInit = { method, headers, signal };\n  if (body !== undefined) {\n    headers[\"Content-Type\"] = \"application/json\";\n    init.body = JSON.stringify(body);\n  }\n  const res = await fetch(url, init);\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nexport class PlayaOSClient {\n  private readonly baseUrl: string;\n  private readonly embedBaseUrl: string;\n  private readonly apiKey: string;\n\n  constructor(opts: ClientOptions) {\n    this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n    this.embedBaseUrl = (opts.embedBaseUrl ?? opts.baseUrl).replace(/\\/+$/, \"\");\n    this.apiKey = opts.apiKey;\n  }\n\n  readonly members = {\n    list: (params?: { role?: MemberRole; status?: string }, opts?: { signal?: AbortSignal }): Promise<Member[]> =>\n      request(buildUrl(this.baseUrl, \"/members\", params), this.apiKey, opts?.signal),\n\n    get: (id: string, opts?: { signal?: AbortSignal }): Promise<Member> =>\n      request(buildUrl(this.baseUrl, `/members/${encodeURIComponent(id)}`), this.apiKey, opts?.signal),\n\n    /** Member-self profile update (PLA-700). Requires camp key + member Bearer token. */\n    selfUpdate: (\n      payload: {\n        bio?: string | null;\n        playaName?: string | null;\n        socialMedia?: Record<string, unknown> | null;\n        showSocialsInDirectory?: boolean;\n        phone?: string | null;\n        emergencyContactName?: string | null;\n        emergencyContactRelationship?: string | null;\n        emergencyContactPhone?: string | null;\n        profilePhotoPath?: string | null;\n        yearJoined?: number | null;\n      },\n      opts: { accessToken: string; signal?: AbortSignal },\n    ): Promise<{ profileId: string }> =>\n      putEmbed(buildEmbedUrl(this.embedBaseUrl, \"/members/self\"), this.apiKey, payload, opts),\n\n    /** Member-self shift signup + cancel (PLA-705). Requires camp key + member Bearer. */\n    shifts: {\n      signup: (\n        payload: { shiftId: string; role?: string },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<{ signupId: string; waitlisted: boolean }> =>\n        putEmbed(buildEmbedUrl(this.embedBaseUrl, \"/shifts/signup\"), this.apiKey, payload, opts),\n      cancel: (\n        signupId: string,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<{ canceled: boolean; promotedSignupId: string | null }> =>\n        deleteEmbed(\n          buildEmbedUrl(this.embedBaseUrl, `/shifts/signups/${encodeURIComponent(signupId)}`),\n          this.apiKey,\n          opts,\n        ),\n    },\n  };\n\n  readonly applications = {\n    list: (\n      params?: { status?: ApplicationStatus; year?: number },\n      opts?: { signal?: AbortSignal },\n    ): Promise<Application[]> => request(buildUrl(this.baseUrl, \"/applications\", params), this.apiKey, opts?.signal),\n\n    // Anonymous external-camp submission against POST /api/embed/v1/applications\n    // (PLA-481). Uses the X-Camp-Key header rather than Bearer auth. Pass\n    // `accessToken` to additionally send a PlayaOS IdP JWT (PLA-573 path) so\n    // the server trusts the verified profile claim and skips the email-based\n    // bootstrap.\n    create: (\n      payload: ApplicationCreatePayload,\n      opts?: { accessToken?: string; signal?: AbortSignal },\n    ): Promise<ApplicationCreateResponse> =>\n      postEmbed(buildEmbedUrl(this.embedBaseUrl, \"/applications\"), this.apiKey, payload, opts),\n  };\n\n  readonly waivers = {\n    /** Get the active waiver for an org for the current year. */\n    active: (orgId: string, opts?: { signal?: AbortSignal }): Promise<Waiver> =>\n      getEmbed(buildEmbedUrl(this.embedBaseUrl, `/waivers/${orgId}/active`), this.apiKey, opts?.signal),\n\n    /** Sign a waiver. Requires X-Camp-Key; optional accessToken for Bearer path. */\n    sign: (\n      payload: WaiverSignPayload,\n      opts?: { accessToken?: string; signal?: AbortSignal },\n    ): Promise<WaiverSignResponse> =>\n      postEmbed(buildEmbedUrl(this.embedBaseUrl, \"/waivers/sign\"), this.apiKey, payload, opts),\n\n    /** Has this applicant/member signed the active waiver? Anchor: applicationId query or Bearer accessToken. */\n    status: (\n      orgId: string,\n      opts?: { applicationId?: string; accessToken?: string; signal?: AbortSignal },\n    ): Promise<WaiverStatus> => {\n      const query = opts?.applicationId ? `?applicationId=${encodeURIComponent(opts.applicationId)}` : \"\";\n      return getEmbedAuthed(buildEmbedUrl(this.embedBaseUrl, `/waivers/${orgId}/status${query}`), this.apiKey, opts);\n    },\n\n    /** Get a short-lived download URL for a completed signature's PDF. Anchor: applicationId query or Bearer. */\n    signedPdf: (\n      orgId: string,\n      signatureId: string,\n      opts?: { applicationId?: string; accessToken?: string; signal?: AbortSignal },\n    ): Promise<{ url: string }> => {\n      const query = opts?.applicationId ? `?applicationId=${encodeURIComponent(opts.applicationId)}` : \"\";\n      return getEmbedAuthed(\n        buildEmbedUrl(this.embedBaseUrl, `/waivers/${orgId}/signatures/${encodeURIComponent(signatureId)}/pdf${query}`),\n        this.apiKey,\n        opts,\n      );\n    },\n  };\n\n  readonly dues = {\n    list: (params?: { userId?: string; year?: number }, opts?: { signal?: AbortSignal }): Promise<DuesStatus[]> =>\n      request(buildUrl(this.baseUrl, \"/dues\", params), this.apiKey, opts?.signal),\n  };\n\n  readonly shifts = {\n    list: (\n      params?: { year?: number; fromDate?: string; toDate?: string; publishedOnly?: boolean },\n      opts?: { signal?: AbortSignal },\n    ): Promise<Shift[]> => request(buildUrl(this.baseUrl, \"/shifts\", params), this.apiKey, opts?.signal),\n  };\n\n  readonly org = {\n    get: (opts?: { signal?: AbortSignal }): Promise<OrgConfig> =>\n      request(buildUrl(this.baseUrl, \"/org\"), this.apiKey, opts?.signal),\n  };\n\n  readonly payments = {\n    page: (\n      memberId: string,\n      duesCollectionId?: string,\n      opts?: { signal?: AbortSignal },\n    ): Promise<PaymentPageResponse> =>\n      post(buildUrl(this.baseUrl, \"/payments/page\"), this.apiKey, { memberId, duesCollectionId }, opts?.signal),\n  };\n\n  // Admin write APIs (PLA-489). Each method requires `accessToken` — a Supabase\n  // JWT for a camp admin/super_admin. The org boundary is enforced server-side\n  // from the JWT claims; these endpoints do not use the X-Camp-Key.\n  readonly admin = {\n    applications: {\n      /** Get application audit timeline (PLA-712). Requires admin Bearer token. */\n      history: (id: string, opts: { accessToken: string; signal?: AbortSignal }): Promise<ApplicationHistoryResponse> =>\n        adminEmbed(\n          \"GET\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/history`),\n          opts.accessToken,\n          undefined,\n          opts.signal,\n        ),\n      transition: (\n        id: string,\n        payload: ApplicationTransitionPayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationTransitionResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n      getAnnotations: (\n        id: string,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationAnnotations> =>\n        adminEmbed(\n          \"GET\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/annotations`),\n          opts.accessToken,\n          undefined,\n          opts.signal,\n        ),\n      addNote: (\n        id: string,\n        payload: { body: string },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationNote> =>\n        adminEmbed(\n          \"POST\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/notes`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n      setTags: (\n        id: string,\n        payload: { tags: string[] },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<string[]> =>\n        adminEmbed(\n          \"PUT\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/tags`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n      setScore: (\n        id: string,\n        payload: { value: number },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationScore> =>\n        adminEmbed(\n          \"PUT\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/scores`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n    },\n    givebutter: {\n      campaigns: {\n        list: (opts: { accessToken: string; signal?: AbortSignal }): Promise<unknown[]> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, \"/admin/givebutter/campaigns\"),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        discountCodes: {\n          list: (campaignId: number, opts: { accessToken: string; signal?: AbortSignal }): Promise<unknown[]> =>\n            adminEmbed(\n              \"GET\",\n              buildEmbedUrl(this.embedBaseUrl, `/admin/givebutter/campaigns/${campaignId}/discount-codes`),\n              opts.accessToken,\n              undefined,\n              opts.signal,\n            ),\n          create: (\n            campaignId: number,\n            payload: { code: string; type: string; amount: number; active?: boolean },\n            opts: { accessToken: string; signal?: AbortSignal },\n          ): Promise<unknown> =>\n            adminEmbed(\n              \"POST\",\n              buildEmbedUrl(this.embedBaseUrl, `/admin/givebutter/campaigns/${campaignId}/discount-codes`),\n              opts.accessToken,\n              payload,\n              opts.signal,\n            ),\n        },\n        tickets: {\n          create: (\n            campaignId: number,\n            payload: { name: string; price: number; totalQuantity?: number },\n            opts: { accessToken: string; signal?: AbortSignal },\n          ): Promise<unknown> =>\n            adminEmbed(\n              \"POST\",\n              buildEmbedUrl(this.embedBaseUrl, `/admin/givebutter/campaigns/${campaignId}/tickets`),\n              opts.accessToken,\n              payload,\n              opts.signal,\n            ),\n        },\n      },\n    },\n    members: {\n      create: (\n        payload: MemberCreatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<MemberCreateResponse> =>\n        adminEmbed(\"POST\", buildEmbedUrl(this.embedBaseUrl, \"/admin/members\"), opts.accessToken, payload, opts.signal),\n\n      update: (\n        id: string,\n        patch: MemberUpdatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<MemberUpdateResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/members/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          patch,\n          opts.signal,\n        ),\n\n      deactivate: (\n        id: string,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<MemberDeactivateResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/members/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          { status: \"inactive\" },\n          opts.signal,\n        ),\n    },\n    announcements: {\n      /** Send an email blast to camp members (PLA-706). Requires admin Bearer token. */\n      send: (\n        payload: AnnouncementSendPayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<AnnouncementSendResponse> =>\n        adminEmbed(\n          \"POST\",\n          buildEmbedUrl(this.embedBaseUrl, \"/admin/announcements/send\"),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n    },\n    dues: {\n      /** Create a manual dues/payment record (PLA-708). Requires admin Bearer token. */\n      create: (\n        payload: DuesCreatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<DuesCreateResponse> =>\n        adminEmbed(\"POST\", buildEmbedUrl(this.embedBaseUrl, \"/admin/dues\"), opts.accessToken, payload, opts.signal),\n\n      /** Update a dues/payment record (PLA-708). Requires admin Bearer token. */\n      update: (\n        id: string,\n        payload: DuesUpdatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<DuesUpdateResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/dues/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n    },\n    org: {\n      /** Update camp configuration settings (PLA-709). Requires admin Bearer token. */\n      update: (\n        payload: OrgUpdatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<OrgUpdateResponse> =>\n        adminEmbed(\"PATCH\", buildEmbedUrl(this.embedBaseUrl, \"/admin/org\"), opts.accessToken, payload, opts.signal),\n    },\n    scheduling: {\n      availability: {\n        /** Get interview availability for an interviewer (PLA-713). Requires admin Bearer token. */\n        get: (\n          interviewerId: string,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<SetAvailabilityResponse> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/availability/${encodeURIComponent(interviewerId)}`),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        /** Set interview availability for an interviewer (PLA-713). Requires admin Bearer token. */\n        set: (\n          interviewerId: string,\n          payload: SetAvailabilityInput,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<SetAvailabilityResponse> =>\n          adminEmbed(\n            \"PUT\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/availability/${encodeURIComponent(interviewerId)}`),\n            opts.accessToken,\n            payload,\n            opts.signal,\n          ),\n      },\n      calendar: {\n        /** Get Google Calendar connection status for an interviewer (PLA-726). Requires admin Bearer. */\n        status: (interviewerId: string, opts: { accessToken: string; signal?: AbortSignal }): Promise<CalendarStatus> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/status`),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        /** List available Google Calendars (PLA-726). Requires admin Bearer. */\n        listCalendars: (\n          interviewerId: string,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<{ calendars: GoogleCalendar[] }> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(\n              this.embedBaseUrl,\n              `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/calendars`,\n            ),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        /** Select which Google Calendar to use (PLA-726). Requires admin Bearer. */\n        select: (\n          interviewerId: string,\n          payload: SelectCalendarInput,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<{ calendarId: string }> =>\n          adminEmbed(\n            \"PUT\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/select`),\n            opts.accessToken,\n            payload,\n            opts.signal,\n          ),\n        /** Disconnect Google Calendar from interviewer (PLA-726). Requires admin Bearer. */\n        disconnect: (\n          interviewerId: string,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<{ disconnected: boolean }> =>\n          adminEmbed(\n            \"POST\",\n            buildEmbedUrl(\n              this.embedBaseUrl,\n              `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/disconnect`,\n            ),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n      },\n      bookingTokens: {\n        /** Create a booking token for an application's interview link (PLA-714). Requires admin Bearer token. */\n        create: (\n          payload: CreateBookingTokenInput,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<BookingToken> =>\n          adminEmbed(\n            \"POST\",\n            buildEmbedUrl(this.embedBaseUrl, \"/admin/booking-tokens\"),\n            opts.accessToken,\n            payload,\n            opts.signal,\n          ),\n        /** Get an existing booking token for an application (PLA-714). Requires admin Bearer token. */\n        get: (applicationId: string, opts: { accessToken: string; signal?: AbortSignal }): Promise<BookingToken> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/booking-tokens/${encodeURIComponent(applicationId)}`),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n      },\n    },\n  };\n\n  // Public embed-booking endpoints (PLA-714). No auth — these are the\n  // applicant-facing schedule surface using the hashed booking token.\n  readonly schedule = {\n    /** List available interview slots for a booking token (PLA-714). Public. */\n    getSlots: (\n      token: string,\n      opts?: { signal?: AbortSignal },\n    ): Promise<{ slots: { startsAt: string; endsAt: string }[] }> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}`;\n      return fetch(url, { signal: opts?.signal }).then((res) => {\n        if (!res.ok) throw parseError(res);\n        return res.json() as Promise<{ slots: { startsAt: string; endsAt: string }[] }>;\n      });\n    },\n    /** Book an interview slot (PLA-714). Public. */\n    book: (token: string, payload: BookSlotInput, opts?: { signal?: AbortSignal }): Promise<BookSlotResponse> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/book`;\n      return fetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(payload),\n        signal: opts?.signal,\n      }).then((res) => {\n        if (!res.ok) throw parseError(res);\n        return res.json() as Promise<BookSlotResponse>;\n      });\n    },\n    /** Cancel an interview booking (PLA-714). Public. */\n    cancel: (token: string, opts?: { signal?: AbortSignal }): Promise<BookSlotResponse> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/cancel`;\n      return fetch(url, { method: \"POST\", signal: opts?.signal }).then((res) => {\n        if (!res.ok) throw parseError(res);\n        return res.json() as Promise<BookSlotResponse>;\n      });\n    },\n    /** Reschedule an interview booking (PLA-714). Public. */\n    reschedule: (\n      token: string,\n      payload: RescheduleInput,\n      opts?: { signal?: AbortSignal },\n    ): Promise<BookSlotResponse> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/reschedule`;\n      return fetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(payload),\n        signal: opts?.signal,\n      }).then((res) => {\n        if (!res.ok) throw parseError(res);\n        return res.json() as Promise<BookSlotResponse>;\n      });\n    },\n  };\n}\n\n/** Convenience factory — equivalent to `new PlayaOSClient(opts)`. */\nexport function createClient(opts: ClientOptions): PlayaOSClient {\n  return new PlayaOSClient(opts);\n}\n","/**\n * Server-side OAuth-code → ID-token exchange.\n *\n * Swaps a one-time authorization code from the PlayaOS IdP for a short-lived\n * ID token. Confidential clients pass `clientSecret`, which is sent to the\n * token endpoint server-side. Public/PKCE-only clients omit it — the\n * authorization-code + code_verifier pair is the sole credential. Public\n * clients can also exchange directly from the browser via `usePlayaOSAuth`\n * in `@playaos/react`.\n */\n\nexport interface ExchangeParams {\n  authBaseUrl?: string;\n  code: string;\n  codeVerifier: string;\n  clientId: string;\n  /** Confidential clients only. Omit for public/PKCE-only clients. */\n  clientSecret?: string;\n  redirectUri: string;\n}\n\nexport interface ExchangeResult {\n  idToken: string;\n  expiresAt: string;\n  /** Confidential clients only. Undefined for public clients. */\n  refreshToken?: string;\n}\n\nexport async function exchangeCode(params: ExchangeParams): Promise<ExchangeResult> {\n  const base = params.authBaseUrl ?? \"https://auth.playaos.app\";\n  // A confidential client is identified by passing clientSecret at all — even an\n  // empty string. We forward it as-is so the server validates it (an empty or\n  // wrong secret is rejected there); public clients omit the field entirely.\n  const isConfidential = params.clientSecret !== undefined;\n  const res = await fetch(`${base}/api/auth/v1/exchange`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify({\n      code: params.code,\n      code_verifier: params.codeVerifier,\n      client_id: params.clientId,\n      ...(isConfidential ? { client_secret: params.clientSecret } : {}),\n      redirect_uri: params.redirectUri,\n    }),\n  });\n  let body: unknown;\n  try {\n    body = await res.json();\n  } catch {\n    throw new Error(`Exchange failed: non-JSON response (${res.status})`);\n  }\n\n  if (!res.ok) {\n    const errorReason =\n      typeof body === \"object\" && body !== null && \"error\" in body && typeof body.error === \"string\"\n        ? body.error\n        : String(res.status);\n    throw new Error(`Exchange failed: ${errorReason}`);\n  }\n\n  if (\n    typeof body !== \"object\" ||\n    body === null ||\n    !(\"idToken\" in body) ||\n    typeof body.idToken !== \"string\" ||\n    !(\"expiresAt\" in body) ||\n    typeof body.expiresAt !== \"string\"\n  ) {\n    throw new Error(\"Exchange failed: malformed success response\");\n  }\n\n  // The server mints a refresh token only for confidential clients (it sets\n  // `withRefreshToken: client.type === \"confidential\"`); public clients get\n  // none. Surface it when present, otherwise leave it undefined.\n  const refreshToken = \"refreshToken\" in body && typeof body.refreshToken === \"string\" ? body.refreshToken : undefined;\n\n  // A confidential client that gets no refresh token means the server response\n  // is malformed or the rotation flow is broken — surface it rather than\n  // silently returning a result the caller can't refresh.\n  if (isConfidential && refreshToken === undefined) {\n    throw new Error(\"Exchange failed: confidential client response missing refreshToken\");\n  }\n\n  return {\n    idToken: body.idToken,\n    expiresAt: body.expiresAt,\n    ...(refreshToken !== undefined ? { refreshToken } : {}),\n  };\n}\n"],"mappings":";AAAO,IAAM,iBAAN,cAA6B,MAAM;AAAA,EACxC,YACkB,QACA,MAChB,SACA;AACA,UAAM,OAAO;AAJG;AACA;AAIhB,SAAK,OAAO;AAAA,EACd;AAAA,EANkB;AAAA,EACA;AAMpB;AAEA,eAAsB,WAAW,KAAwC;AACvE,MAAI;AACF,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,IAAI,eAAe,IAAI,QAAQ,KAAK,QAAQ,WAAW,KAAK,SAAS,IAAI,UAAU;AAAA,EAC5F,QAAQ;AACN,WAAO,IAAI,eAAe,IAAI,QAAQ,WAAW,IAAI,UAAU;AAAA,EACjE;AACF;;;ACwCA,SAAS,SAAS,MAAc,MAAc,QAAwE;AACpH,QAAM,MAAM,IAAI,IAAI,GAAG,IAAI,UAAU,IAAI,EAAE;AAC3C,MAAI,QAAQ;AACV,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAI3C,UAAI,MAAM,UAAa,MAAM,MAAO,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,IACvE;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,cAAc,MAAc,MAAsB;AACzD,SAAO,GAAG,IAAI,gBAAgB,IAAI;AACpC;AAEA,eAAe,SAAY,KAAa,SAAiB,QAAkC;AACzF,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,SAAS,EAAE,cAAc,QAAQ;AAAA,IACjC;AAAA,EACF,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,eACb,KACA,SACA,MACY;AACZ,QAAM,UAAkC,EAAE,cAAc,QAAQ;AAChE,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,KAAK,EAAE,SAAS,QAAQ,MAAM,OAAO,CAAC;AAC9D,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,QAAW,KAAa,QAAgB,QAAkC;AACvF,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG;AAAA,IAC7C;AAAA,EACF,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,KAAQ,KAAa,QAAgB,MAAe,QAAkC;AACnG,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,QAAQ;AAAA,IACR,SAAS,EAAE,eAAe,UAAU,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,IACjF,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,UACb,KACA,SACA,MACA,MACY;AACZ,QAAM,UAAkC;AAAA,IACtC,cAAc;AAAA,IACd,gBAAgB;AAAA,EAClB;AACA,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,SACb,KACA,SACA,MACA,MACY;AACZ,QAAM,UAAkC;AAAA,IACtC,cAAc;AAAA,IACd,gBAAgB;AAAA,EAClB;AACA,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,YACb,KACA,SACA,MACY;AACZ,QAAM,UAAkC,EAAE,cAAc,QAAQ;AAChE,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,UAAU,SAAS,QAAQ,MAAM,OAAO,CAAC;AAChF,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAQA,eAAe,WACb,QACA,KACA,aACA,MACA,QACY;AACZ,QAAM,UAAkC,EAAE,eAAe,UAAU,WAAW,GAAG;AACjF,QAAM,OAAoB,EAAE,QAAQ,SAAS,OAAO;AACpD,MAAI,SAAS,QAAW;AACtB,YAAQ,cAAc,IAAI;AAC1B,SAAK,OAAO,KAAK,UAAU,IAAI;AAAA,EACjC;AACA,QAAM,MAAM,MAAM,MAAM,KAAK,IAAI;AACjC,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAqB;AAC/B,SAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAC9C,SAAK,gBAAgB,KAAK,gBAAgB,KAAK,SAAS,QAAQ,QAAQ,EAAE;AAC1E,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAES,UAAU;AAAA,IACjB,MAAM,CAAC,QAAiD,SACtD,QAAQ,SAAS,KAAK,SAAS,YAAY,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,IAE/E,KAAK,CAAC,IAAY,SAChB,QAAQ,SAAS,KAAK,SAAS,YAAY,mBAAmB,EAAE,CAAC,EAAE,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA;AAAA,IAGjG,YAAY,CACV,SAYA,SAEA,SAAS,cAAc,KAAK,cAAc,eAAe,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA;AAAA,IAGxF,QAAQ;AAAA,MACN,QAAQ,CACN,SACA,SAEA,SAAS,cAAc,KAAK,cAAc,gBAAgB,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA,MACzF,QAAQ,CACN,UACA,SAEA;AAAA,QACE,cAAc,KAAK,cAAc,mBAAmB,mBAAmB,QAAQ,CAAC,EAAE;AAAA,QAClF,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACJ;AAAA,EACF;AAAA,EAES,eAAe;AAAA,IACtB,MAAM,CACJ,QACA,SAC2B,QAAQ,SAAS,KAAK,SAAS,iBAAiB,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO/G,QAAQ,CACN,SACA,SAEA,UAAU,cAAc,KAAK,cAAc,eAAe,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA,EAC3F;AAAA,EAES,UAAU;AAAA;AAAA,IAEjB,QAAQ,CAAC,OAAe,SACtB,SAAS,cAAc,KAAK,cAAc,YAAY,KAAK,SAAS,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA;AAAA,IAGlG,MAAM,CACJ,SACA,SAEA,UAAU,cAAc,KAAK,cAAc,eAAe,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA;AAAA,IAGzF,QAAQ,CACN,OACA,SAC0B;AAC1B,YAAM,QAAQ,MAAM,gBAAgB,kBAAkB,mBAAmB,KAAK,aAAa,CAAC,KAAK;AACjG,aAAO,eAAe,cAAc,KAAK,cAAc,YAAY,KAAK,UAAU,KAAK,EAAE,GAAG,KAAK,QAAQ,IAAI;AAAA,IAC/G;AAAA;AAAA,IAGA,WAAW,CACT,OACA,aACA,SAC6B;AAC7B,YAAM,QAAQ,MAAM,gBAAgB,kBAAkB,mBAAmB,KAAK,aAAa,CAAC,KAAK;AACjG,aAAO;AAAA,QACL,cAAc,KAAK,cAAc,YAAY,KAAK,eAAe,mBAAmB,WAAW,CAAC,OAAO,KAAK,EAAE;AAAA,QAC9G,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAES,OAAO;AAAA,IACd,MAAM,CAAC,QAA6C,SAClD,QAAQ,SAAS,KAAK,SAAS,SAAS,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EAC9E;AAAA,EAES,SAAS;AAAA,IAChB,MAAM,CACJ,QACA,SACqB,QAAQ,SAAS,KAAK,SAAS,WAAW,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EACrG;AAAA,EAES,MAAM;AAAA,IACb,KAAK,CAAC,SACJ,QAAQ,SAAS,KAAK,SAAS,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EACrE;AAAA,EAES,WAAW;AAAA,IAClB,MAAM,CACJ,UACA,kBACA,SAEA,KAAK,SAAS,KAAK,SAAS,gBAAgB,GAAG,KAAK,QAAQ,EAAE,UAAU,iBAAiB,GAAG,MAAM,MAAM;AAAA,EAC5G;AAAA;AAAA;AAAA;AAAA,EAKS,QAAQ;AAAA,IACf,cAAc;AAAA;AAAA,MAEZ,SAAS,CAAC,IAAY,SACpB;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,UAAU;AAAA,QACxF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,YAAY,CACV,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,EAAE;AAAA,QAChF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,gBAAgB,CACd,IACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,cAAc;AAAA,QAC5F,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,SAAS,CACP,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,QAAQ;AAAA,QACtF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,SAAS,CACP,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,OAAO;AAAA,QACrF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,UAAU,CACR,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,SAAS;AAAA,QACvF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,YAAY;AAAA,MACV,WAAW;AAAA,QACT,MAAM,CAAC,SACL;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,6BAA6B;AAAA,UAC9D,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,QACF,eAAe;AAAA,UACb,MAAM,CAAC,YAAoB,SACzB;AAAA,YACE;AAAA,YACA,cAAc,KAAK,cAAc,+BAA+B,UAAU,iBAAiB;AAAA,YAC3F,KAAK;AAAA,YACL;AAAA,YACA,KAAK;AAAA,UACP;AAAA,UACF,QAAQ,CACN,YACA,SACA,SAEA;AAAA,YACE;AAAA,YACA,cAAc,KAAK,cAAc,+BAA+B,UAAU,iBAAiB;AAAA,YAC3F,KAAK;AAAA,YACL;AAAA,YACA,KAAK;AAAA,UACP;AAAA,QACJ;AAAA,QACA,SAAS;AAAA,UACP,QAAQ,CACN,YACA,SACA,SAEA;AAAA,YACE;AAAA,YACA,cAAc,KAAK,cAAc,+BAA+B,UAAU,UAAU;AAAA,YACpF,KAAK;AAAA,YACL;AAAA,YACA,KAAK;AAAA,UACP;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ,CACN,SACA,SAEA,WAAW,QAAQ,cAAc,KAAK,cAAc,gBAAgB,GAAG,KAAK,aAAa,SAAS,KAAK,MAAM;AAAA,MAE/G,QAAQ,CACN,IACA,OACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,kBAAkB,mBAAmB,EAAE,CAAC,EAAE;AAAA,QAC3E,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MAEF,YAAY,CACV,IACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,kBAAkB,mBAAmB,EAAE,CAAC,EAAE;AAAA,QAC3E,KAAK;AAAA,QACL,EAAE,QAAQ,WAAW;AAAA,QACrB,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,eAAe;AAAA;AAAA,MAEb,MAAM,CACJ,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,2BAA2B;AAAA,QAC5D,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,MAAM;AAAA;AAAA,MAEJ,QAAQ,CACN,SACA,SAEA,WAAW,QAAQ,cAAc,KAAK,cAAc,aAAa,GAAG,KAAK,aAAa,SAAS,KAAK,MAAM;AAAA;AAAA,MAG5G,QAAQ,CACN,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,eAAe,mBAAmB,EAAE,CAAC,EAAE;AAAA,QACxE,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,KAAK;AAAA;AAAA,MAEH,QAAQ,CACN,SACA,SAEA,WAAW,SAAS,cAAc,KAAK,cAAc,YAAY,GAAG,KAAK,aAAa,SAAS,KAAK,MAAM;AAAA,IAC9G;AAAA,IACA,YAAY;AAAA,MACV,cAAc;AAAA;AAAA,QAEZ,KAAK,CACH,eACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,kCAAkC,mBAAmB,aAAa,CAAC,EAAE;AAAA,UACtG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,KAAK,CACH,eACA,SACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,kCAAkC,mBAAmB,aAAa,CAAC,EAAE;AAAA,UACtG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACJ;AAAA,MACA,UAAU;AAAA;AAAA,QAER,QAAQ,CAAC,eAAuB,SAC9B;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,8BAA8B,mBAAmB,aAAa,CAAC,SAAS;AAAA,UACzG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,eAAe,CACb,eACA,SAEA;AAAA,UACE;AAAA,UACA;AAAA,YACE,KAAK;AAAA,YACL,8BAA8B,mBAAmB,aAAa,CAAC;AAAA,UACjE;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,QAAQ,CACN,eACA,SACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,8BAA8B,mBAAmB,aAAa,CAAC,SAAS;AAAA,UACzG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,YAAY,CACV,eACA,SAEA;AAAA,UACE;AAAA,UACA;AAAA,YACE,KAAK;AAAA,YACL,8BAA8B,mBAAmB,aAAa,CAAC;AAAA,UACjE;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACJ;AAAA,MACA,eAAe;AAAA;AAAA,QAEb,QAAQ,CACN,SACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,uBAAuB;AAAA,UACxD,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,KAAK,CAAC,eAAuB,SAC3B;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,yBAAyB,mBAAmB,aAAa,CAAC,EAAE;AAAA,UAC7F,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIS,WAAW;AAAA;AAAA,IAElB,UAAU,CACR,OACA,SAC+D;AAC/D,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK,EAAE,QAAQ,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ;AACxD,YAAI,CAAC,IAAI,GAAI,OAAM,WAAW,GAAG;AACjC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA;AAAA,IAEA,MAAM,CAAC,OAAe,SAAwB,SAA+D;AAC3G,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,QAAQ,MAAM;AAAA,MAChB,CAAC,EAAE,KAAK,CAAC,QAAQ;AACf,YAAI,CAAC,IAAI,GAAI,OAAM,WAAW,GAAG;AACjC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA;AAAA,IAEA,QAAQ,CAAC,OAAe,SAA+D;AACrF,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,QAAQ,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ;AACxE,YAAI,CAAC,IAAI,GAAI,OAAM,WAAW,GAAG;AACjC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA;AAAA,IAEA,YAAY,CACV,OACA,SACA,SAC8B;AAC9B,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,QAAQ,MAAM;AAAA,MAChB,CAAC,EAAE,KAAK,CAAC,QAAQ;AACf,YAAI,CAAC,IAAI,GAAI,OAAM,WAAW,GAAG;AACjC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAGO,SAAS,aAAa,MAAoC;AAC/D,SAAO,IAAI,cAAc,IAAI;AAC/B;;;ACzpBA,eAAsB,aAAa,QAAiD;AAClF,QAAM,OAAO,OAAO,eAAe;AAInC,QAAM,iBAAiB,OAAO,iBAAiB;AAC/C,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,yBAAyB;AAAA,IACtD,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,GAAI,iBAAiB,EAAE,eAAe,OAAO,aAAa,IAAI,CAAC;AAAA,MAC/D,cAAc,OAAO;AAAA,IACvB,CAAC;AAAA,EACH,CAAC;AACD,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,uCAAuC,IAAI,MAAM,GAAG;AAAA,EACtE;AAEA,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,cACJ,OAAO,SAAS,YAAY,SAAS,QAAQ,WAAW,QAAQ,OAAO,KAAK,UAAU,WAClF,KAAK,QACL,OAAO,IAAI,MAAM;AACvB,UAAM,IAAI,MAAM,oBAAoB,WAAW,EAAE;AAAA,EACnD;AAEA,MACE,OAAO,SAAS,YAChB,SAAS,QACT,EAAE,aAAa,SACf,OAAO,KAAK,YAAY,YACxB,EAAE,eAAe,SACjB,OAAO,KAAK,cAAc,UAC1B;AACA,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAKA,QAAM,eAAe,kBAAkB,QAAQ,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe;AAK3G,MAAI,kBAAkB,iBAAiB,QAAW;AAChD,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AAEA,SAAO;AAAA,IACL,SAAS,KAAK;AAAA,IACd,WAAW,KAAK;AAAA,IAChB,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,EACvD;AACF;","names":[]}
+{"version":3,"sources":["../src/error.ts","../src/client.ts","../src/exchange.ts","../src/public-marketplace.ts"],"sourcesContent":["export class ApiClientError extends Error {\n  constructor(\n    public readonly status: number,\n    public readonly code: string,\n    message: string,\n    /**\n     * Seconds to wait before retrying, parsed from a numeric `Retry-After`\n     * response header when the server sends one (commonly on 429 and 503).\n     * Undefined when the header is absent or in HTTP-date form.\n     */\n    public readonly retryAfter?: number,\n  ) {\n    super(message);\n    this.name = \"ApiClientError\";\n  }\n}\n\n/**\n * Parse the `Retry-After` header into integer seconds. Only the delta-seconds\n * form is honored; the HTTP-date form is ignored (returns undefined) since\n * callers expect a seconds hint.\n */\nfunction parseRetryAfter(res: Response): number | undefined {\n  const header = res.headers?.get?.(\"retry-after\")?.trim();\n  return header && /^\\d+$/.test(header) ? parseInt(header, 10) : undefined;\n}\n\nexport async function parseError(res: Response): Promise<ApiClientError> {\n  const retryAfter = parseRetryAfter(res);\n  try {\n    const body = (await res.json()) as { error?: string; code?: string };\n    return new ApiClientError(res.status, body.code ?? \"UNKNOWN\", body.error ?? res.statusText, retryAfter);\n  } catch {\n    return new ApiClientError(res.status, \"UNKNOWN\", res.statusText, retryAfter);\n  }\n}\n","import { type ApiClientError, parseError } from \"./error.js\";\nimport type {\n  AnnouncementSendPayload,\n  AnnouncementSendResponse,\n  Application,\n  ApplicationAnnotations,\n  ApplicationCreatePayload,\n  ApplicationCreateResponse,\n  ApplicationHistoryResponse,\n  ApplicationNote,\n  ApplicationScore,\n  ApplicationStatus,\n  ApplicationTransitionPayload,\n  ApplicationTransitionResponse,\n  BookingToken,\n  BookSlotInput,\n  BookSlotResponse,\n  CalendarStatus,\n  CommitmentsListResponse,\n  CreateBookingTokenInput,\n  DuesCreatePayload,\n  DuesCreateResponse,\n  DuesStatus,\n  DuesUpdatePayload,\n  DuesUpdateResponse,\n  GoogleCalendar,\n  Member,\n  MemberCreatePayload,\n  MemberCreateResponse,\n  MemberDeactivateResponse,\n  MemberRole,\n  MemberUpdatePayload,\n  MemberUpdateResponse,\n  OrgConfig,\n  OrgUpdatePayload,\n  OrgUpdateResponse,\n  Paginated,\n  PaginationParams,\n  PaymentPageResponse,\n  RescheduleInput,\n  SelectCalendarInput,\n  SetAvailabilityInput,\n  SetAvailabilityResponse,\n  Shift,\n  Waiver,\n  WaiverSignPayload,\n  WaiverSignResponse,\n  WaiverStatus,\n} from \"./types.js\";\n\nexport type { ApiClientError };\n\ninterface ClientOptions {\n  /** Base URL for authenticated /api/v1 routes, e.g. https://api.playaos.app */\n  baseUrl: string;\n  /** Optional base URL for /api/embed/v1 routes when they live on a different host. */\n  embedBaseUrl?: string;\n  /** API key in the format pk_live_* */\n  apiKey: string;\n}\n\nfunction buildUrl(base: string, path: string, params?: Record<string, string | number | boolean | undefined>): string {\n  const url = new URL(`${base}/api/v1${path}`);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {\n      // Skip undefined and false booleans — z.coerce.boolean() on the server uses Boolean(),\n      // which treats any non-empty string (including \"false\") as true. Omitting a false boolean\n      // param has the same effect as the server default (unfiltered).\n      if (v !== undefined && v !== false) url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\nfunction buildEmbedUrl(base: string, path: string): string {\n  return `${base}/api/embed/v1${path}`;\n}\n\nfunction withCampKey(url: string, campKey: string): string {\n  const embedUrl = new URL(url);\n  embedUrl.searchParams.set(\"camp_key\", campKey);\n  return embedUrl.toString();\n}\n\nasync function getEmbed<T>(url: string, campKey: string, signal?: AbortSignal): Promise<T> {\n  const res = await fetch(withCampKey(url, campKey), {\n    headers: { \"X-Camp-Key\": campKey },\n    signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function getEmbedAuthed<T>(\n  url: string,\n  campKey: string,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = { \"X-Camp-Key\": campKey };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(withCampKey(url, campKey), { headers, signal: opts?.signal });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function request<T>(url: string, apiKey: string, signal?: AbortSignal): Promise<T> {\n  const res = await fetch(url, {\n    headers: { Authorization: `Bearer ${apiKey}` },\n    signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function post<T>(url: string, apiKey: string, body: unknown, signal?: AbortSignal): Promise<T> {\n  const res = await fetch(url, {\n    method: \"POST\",\n    headers: { Authorization: `Bearer ${apiKey}`, \"Content-Type\": \"application/json\" },\n    body: JSON.stringify(body),\n    signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function postEmbed<T>(\n  url: string,\n  campKey: string,\n  body: unknown,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = {\n    \"X-Camp-Key\": campKey,\n    \"Content-Type\": \"application/json\",\n  };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(withCampKey(url, campKey), {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify(body),\n    signal: opts?.signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function putEmbed<T>(\n  url: string,\n  campKey: string,\n  body: unknown,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = {\n    \"X-Camp-Key\": campKey,\n    \"Content-Type\": \"application/json\",\n  };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(withCampKey(url, campKey), {\n    method: \"PUT\",\n    headers,\n    body: JSON.stringify(body),\n    signal: opts?.signal,\n  });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nasync function deleteEmbed<T>(\n  url: string,\n  campKey: string,\n  opts?: { accessToken?: string; signal?: AbortSignal },\n): Promise<T> {\n  const headers: Record<string, string> = { \"X-Camp-Key\": campKey };\n  if (opts?.accessToken) headers.Authorization = `Bearer ${opts.accessToken}`;\n  const res = await fetch(withCampKey(url, campKey), { method: \"DELETE\", headers, signal: opts?.signal });\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\n/**\n * Bearer-only helper for /api/embed/v1/admin/* (PLA-489). The admin token is\n * the sole credential (no X-Camp-Key — orgId comes from the JWT claims\n * server-side). `method` can be GET, POST, PATCH, or PUT; `body` is optional\n * (omitted for GET reads like getAnnotations).\n */\nasync function adminEmbed<T>(\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"PUT\",\n  url: string,\n  accessToken: string,\n  body?: unknown,\n  signal?: AbortSignal,\n): Promise<T> {\n  const headers: Record<string, string> = { Authorization: `Bearer ${accessToken}` };\n  const init: RequestInit = { method, headers, signal };\n  if (body !== undefined) {\n    headers[\"Content-Type\"] = \"application/json\";\n    init.body = JSON.stringify(body);\n  }\n  const res = await fetch(url, init);\n  if (!res.ok) throw await parseError(res);\n  return res.json() as Promise<T>;\n}\n\nexport class PlayaOSClient {\n  private readonly baseUrl: string;\n  private readonly embedBaseUrl: string;\n  private readonly apiKey: string;\n\n  constructor(opts: ClientOptions) {\n    this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n    this.embedBaseUrl = (opts.embedBaseUrl ?? opts.baseUrl).replace(/\\/+$/, \"\");\n    this.apiKey = opts.apiKey;\n  }\n\n  readonly members = {\n    list: (\n      params?: { role?: MemberRole; status?: string } & PaginationParams,\n      opts?: { signal?: AbortSignal },\n    ): Promise<Paginated<Member>> => request(buildUrl(this.baseUrl, \"/members\", params), this.apiKey, opts?.signal),\n\n    get: (id: string, opts?: { signal?: AbortSignal }): Promise<Member> =>\n      request(buildUrl(this.baseUrl, `/members/${encodeURIComponent(id)}`), this.apiKey, opts?.signal),\n\n    /** Member-self profile update (PLA-700). Requires camp key + member Bearer token. */\n    selfUpdate: (\n      payload: {\n        bio?: string | null;\n        playaName?: string | null;\n        socialMedia?: Record<string, unknown> | null;\n        showSocialsInDirectory?: boolean;\n        phone?: string | null;\n        emergencyContactName?: string | null;\n        emergencyContactRelationship?: string | null;\n        emergencyContactPhone?: string | null;\n        profilePhotoPath?: string | null;\n        yearJoined?: number | null;\n      },\n      opts: { accessToken: string; signal?: AbortSignal },\n    ): Promise<{ profileId: string }> =>\n      putEmbed(buildEmbedUrl(this.embedBaseUrl, \"/members/self\"), this.apiKey, payload, opts),\n\n    /** Member-self shift signup + cancel (PLA-705). Requires camp key + member Bearer. */\n    shifts: {\n      signup: (\n        payload: { shiftId: string; role?: string },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<{ signupId: string; waitlisted: boolean }> =>\n        putEmbed(buildEmbedUrl(this.embedBaseUrl, \"/shifts/signup\"), this.apiKey, payload, opts),\n      cancel: (\n        signupId: string,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<{ canceled: boolean; promotedSignupId: string | null }> =>\n        deleteEmbed(\n          buildEmbedUrl(this.embedBaseUrl, `/shifts/signups/${encodeURIComponent(signupId)}`),\n          this.apiKey,\n          opts,\n        ),\n    },\n  };\n\n  readonly applications = {\n    list: (\n      params?: { status?: ApplicationStatus; year?: number } & PaginationParams,\n      opts?: { signal?: AbortSignal },\n    ): Promise<Paginated<Application>> =>\n      request(buildUrl(this.baseUrl, \"/applications\", params), this.apiKey, opts?.signal),\n\n    // Anonymous external-camp submission against POST /api/embed/v1/applications\n    // (PLA-481). Uses the X-Camp-Key header rather than Bearer auth. Pass\n    // `accessToken` to additionally send a PlayaOS IdP JWT (PLA-573 path) so\n    // the server trusts the verified profile claim and skips the email-based\n    // bootstrap.\n    create: (\n      payload: ApplicationCreatePayload,\n      opts?: { accessToken?: string; signal?: AbortSignal },\n    ): Promise<ApplicationCreateResponse> =>\n      postEmbed(buildEmbedUrl(this.embedBaseUrl, \"/applications\"), this.apiKey, payload, opts),\n  };\n\n  readonly waivers = {\n    /** Get the active waiver for an org for the current year. */\n    active: (orgId: string, opts?: { signal?: AbortSignal }): Promise<Waiver> =>\n      getEmbed(buildEmbedUrl(this.embedBaseUrl, `/waivers/${orgId}/active`), this.apiKey, opts?.signal),\n\n    /** Sign a waiver. Requires X-Camp-Key; optional accessToken for Bearer path. */\n    sign: (\n      payload: WaiverSignPayload,\n      opts?: { accessToken?: string; signal?: AbortSignal },\n    ): Promise<WaiverSignResponse> =>\n      postEmbed(buildEmbedUrl(this.embedBaseUrl, \"/waivers/sign\"), this.apiKey, payload, opts),\n\n    /** Has this applicant/member signed the active waiver? Anchor: applicationId query or Bearer accessToken. */\n    status: (\n      orgId: string,\n      opts?: { applicationId?: string; accessToken?: string; signal?: AbortSignal },\n    ): Promise<WaiverStatus> => {\n      const query = opts?.applicationId ? `?applicationId=${encodeURIComponent(opts.applicationId)}` : \"\";\n      return getEmbedAuthed(buildEmbedUrl(this.embedBaseUrl, `/waivers/${orgId}/status${query}`), this.apiKey, opts);\n    },\n\n    /** Get a short-lived download URL for a completed signature's PDF. Anchor: applicationId query or Bearer. */\n    signedPdf: (\n      orgId: string,\n      signatureId: string,\n      opts?: { applicationId?: string; accessToken?: string; signal?: AbortSignal },\n    ): Promise<{ url: string }> => {\n      const query = opts?.applicationId ? `?applicationId=${encodeURIComponent(opts.applicationId)}` : \"\";\n      return getEmbedAuthed(\n        buildEmbedUrl(this.embedBaseUrl, `/waivers/${orgId}/signatures/${encodeURIComponent(signatureId)}/pdf${query}`),\n        this.apiKey,\n        opts,\n      );\n    },\n  };\n\n  readonly dues = {\n    list: (\n      params?: { userId?: string; year?: number; paymentStatus?: \"unpaid\" | \"partial\" | \"paid\" } & PaginationParams,\n      opts?: { signal?: AbortSignal },\n    ): Promise<Paginated<DuesStatus>> => request(buildUrl(this.baseUrl, \"/dues\", params), this.apiKey, opts?.signal),\n  };\n\n  readonly shifts = {\n    list: (\n      params?: {\n        year?: number;\n        fromDate?: string;\n        toDate?: string;\n        publishedOnly?: boolean;\n        openOnly?: boolean;\n      } & PaginationParams,\n      opts?: { signal?: AbortSignal },\n    ): Promise<Paginated<Shift>> => request(buildUrl(this.baseUrl, \"/shifts\", params), this.apiKey, opts?.signal),\n  };\n\n  readonly org = {\n    get: (opts?: { signal?: AbortSignal }): Promise<OrgConfig> =>\n      request(buildUrl(this.baseUrl, \"/org\"), this.apiKey, opts?.signal),\n  };\n\n  // Public embed surface: active commitment definitions for the org's current\n  // year, so the <ApplicationForm> can render + validate them (PLA-682). Uses\n  // the X-Camp-Key (the apiKey doubles as the camp key), same as applications.create.\n  readonly commitments = {\n    list: (opts?: { signal?: AbortSignal }): Promise<CommitmentsListResponse> =>\n      getEmbed(buildEmbedUrl(this.embedBaseUrl, \"/commitments\"), this.apiKey, opts?.signal),\n  };\n\n  readonly payments = {\n    page: (\n      memberId: string,\n      duesCollectionId?: string,\n      opts?: { signal?: AbortSignal },\n    ): Promise<PaymentPageResponse> =>\n      post(buildUrl(this.baseUrl, \"/payments/page\"), this.apiKey, { memberId, duesCollectionId }, opts?.signal),\n  };\n\n  // Admin write APIs (PLA-489). Each method requires `accessToken` — a Supabase\n  // JWT for a camp admin/super_admin. The org boundary is enforced server-side\n  // from the JWT claims; these endpoints do not use the X-Camp-Key.\n  readonly admin = {\n    applications: {\n      /** Get application audit timeline (PLA-712). Requires admin Bearer token. */\n      history: (id: string, opts: { accessToken: string; signal?: AbortSignal }): Promise<ApplicationHistoryResponse> =>\n        adminEmbed(\n          \"GET\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/history`),\n          opts.accessToken,\n          undefined,\n          opts.signal,\n        ),\n      transition: (\n        id: string,\n        payload: ApplicationTransitionPayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationTransitionResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n      getAnnotations: (\n        id: string,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationAnnotations> =>\n        adminEmbed(\n          \"GET\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/annotations`),\n          opts.accessToken,\n          undefined,\n          opts.signal,\n        ),\n      addNote: (\n        id: string,\n        payload: { body: string },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationNote> =>\n        adminEmbed(\n          \"POST\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/notes`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n      setTags: (\n        id: string,\n        payload: { tags: string[] },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<string[]> =>\n        adminEmbed(\n          \"PUT\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/tags`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n      setScore: (\n        id: string,\n        payload: { value: number },\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<ApplicationScore> =>\n        adminEmbed(\n          \"PUT\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/applications/${encodeURIComponent(id)}/scores`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n    },\n    givebutter: {\n      campaigns: {\n        list: (opts: { accessToken: string; signal?: AbortSignal }): Promise<unknown[]> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, \"/admin/givebutter/campaigns\"),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        discountCodes: {\n          list: (campaignId: number, opts: { accessToken: string; signal?: AbortSignal }): Promise<unknown[]> =>\n            adminEmbed(\n              \"GET\",\n              buildEmbedUrl(this.embedBaseUrl, `/admin/givebutter/campaigns/${campaignId}/discount-codes`),\n              opts.accessToken,\n              undefined,\n              opts.signal,\n            ),\n          create: (\n            campaignId: number,\n            payload: { code: string; value: number; type: \"percent\" | \"fixed\"; expirationDate?: string },\n            opts: { accessToken: string; signal?: AbortSignal },\n          ): Promise<unknown> =>\n            adminEmbed(\n              \"POST\",\n              buildEmbedUrl(this.embedBaseUrl, `/admin/givebutter/campaigns/${campaignId}/discount-codes`),\n              opts.accessToken,\n              payload,\n              opts.signal,\n            ),\n        },\n        tickets: {\n          create: (\n            campaignId: number,\n            payload: { name: string; price: number; totalQuantity?: number },\n            opts: { accessToken: string; signal?: AbortSignal },\n          ): Promise<unknown> =>\n            adminEmbed(\n              \"POST\",\n              buildEmbedUrl(this.embedBaseUrl, `/admin/givebutter/campaigns/${campaignId}/tickets`),\n              opts.accessToken,\n              payload,\n              opts.signal,\n            ),\n        },\n      },\n    },\n    members: {\n      create: (\n        payload: MemberCreatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<MemberCreateResponse> =>\n        adminEmbed(\"POST\", buildEmbedUrl(this.embedBaseUrl, \"/admin/members\"), opts.accessToken, payload, opts.signal),\n\n      update: (\n        id: string,\n        patch: MemberUpdatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<MemberUpdateResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/members/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          patch,\n          opts.signal,\n        ),\n\n      deactivate: (\n        id: string,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<MemberDeactivateResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/members/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          { status: \"inactive\" },\n          opts.signal,\n        ),\n    },\n    announcements: {\n      /** Send an email blast to camp members (PLA-706). Requires admin Bearer token. */\n      send: (\n        payload: AnnouncementSendPayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<AnnouncementSendResponse> =>\n        adminEmbed(\n          \"POST\",\n          buildEmbedUrl(this.embedBaseUrl, \"/admin/announcements/send\"),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n    },\n    dues: {\n      /** Create a manual dues/payment record (PLA-708). Requires admin Bearer token. */\n      create: (\n        payload: DuesCreatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<DuesCreateResponse> =>\n        adminEmbed(\"POST\", buildEmbedUrl(this.embedBaseUrl, \"/admin/dues\"), opts.accessToken, payload, opts.signal),\n\n      /** Update a dues/payment record (PLA-708). Requires admin Bearer token. */\n      update: (\n        id: string,\n        payload: DuesUpdatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<DuesUpdateResponse> =>\n        adminEmbed(\n          \"PATCH\",\n          buildEmbedUrl(this.embedBaseUrl, `/admin/dues/${encodeURIComponent(id)}`),\n          opts.accessToken,\n          payload,\n          opts.signal,\n        ),\n    },\n    org: {\n      /** Update camp configuration settings (PLA-709). Requires admin Bearer token. */\n      update: (\n        payload: OrgUpdatePayload,\n        opts: { accessToken: string; signal?: AbortSignal },\n      ): Promise<OrgUpdateResponse> =>\n        adminEmbed(\"PATCH\", buildEmbedUrl(this.embedBaseUrl, \"/admin/org\"), opts.accessToken, payload, opts.signal),\n    },\n    scheduling: {\n      availability: {\n        /** Get interview availability for an interviewer (PLA-713). Requires admin Bearer token. */\n        get: (\n          interviewerId: string,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<SetAvailabilityResponse> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/availability/${encodeURIComponent(interviewerId)}`),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        /** Set interview availability for an interviewer (PLA-713). Requires admin Bearer token. */\n        set: (\n          interviewerId: string,\n          payload: SetAvailabilityInput,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<SetAvailabilityResponse> =>\n          adminEmbed(\n            \"PUT\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/availability/${encodeURIComponent(interviewerId)}`),\n            opts.accessToken,\n            payload,\n            opts.signal,\n          ),\n      },\n      calendar: {\n        /** Get Google Calendar connection status for an interviewer (PLA-726). Requires admin Bearer. */\n        status: (interviewerId: string, opts: { accessToken: string; signal?: AbortSignal }): Promise<CalendarStatus> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/status`),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        /** List available Google Calendars (PLA-726). Requires admin Bearer. */\n        listCalendars: (\n          interviewerId: string,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<{ calendars: GoogleCalendar[] }> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(\n              this.embedBaseUrl,\n              `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/calendars`,\n            ),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n        /** Select which Google Calendar to use (PLA-726). Requires admin Bearer. */\n        select: (\n          interviewerId: string,\n          payload: SelectCalendarInput,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<{ calendarId: string }> =>\n          adminEmbed(\n            \"PUT\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/select`),\n            opts.accessToken,\n            payload,\n            opts.signal,\n          ),\n        /** Disconnect Google Calendar from interviewer (PLA-726). Requires admin Bearer. */\n        disconnect: (\n          interviewerId: string,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<{ disconnected: boolean }> =>\n          adminEmbed(\n            \"POST\",\n            buildEmbedUrl(\n              this.embedBaseUrl,\n              `/admin/scheduling/calendar/${encodeURIComponent(interviewerId)}/disconnect`,\n            ),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n      },\n      bookingTokens: {\n        /** Create a booking token for an application's interview link (PLA-714). Requires admin Bearer token. */\n        create: (\n          payload: CreateBookingTokenInput,\n          opts: { accessToken: string; signal?: AbortSignal },\n        ): Promise<BookingToken> =>\n          adminEmbed(\n            \"POST\",\n            buildEmbedUrl(this.embedBaseUrl, \"/admin/booking-tokens\"),\n            opts.accessToken,\n            payload,\n            opts.signal,\n          ),\n        /** Get an existing booking token for an application (PLA-714). Requires admin Bearer token. */\n        get: (applicationId: string, opts: { accessToken: string; signal?: AbortSignal }): Promise<BookingToken> =>\n          adminEmbed(\n            \"GET\",\n            buildEmbedUrl(this.embedBaseUrl, `/admin/booking-tokens/${encodeURIComponent(applicationId)}`),\n            opts.accessToken,\n            undefined,\n            opts.signal,\n          ),\n      },\n    },\n  };\n\n  // Public embed-booking endpoints (PLA-714). No auth — these are the\n  // applicant-facing schedule surface using the hashed booking token.\n  readonly schedule = {\n    /** List available interview slots for a booking token (PLA-714). Public. */\n    getSlots: (\n      token: string,\n      opts?: { signal?: AbortSignal },\n    ): Promise<{ slots: { startsAt: string; endsAt: string }[] }> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}`;\n      return fetch(url, { signal: opts?.signal }).then(async (res) => {\n        if (!res.ok) throw await parseError(res);\n        return res.json() as Promise<{ slots: { startsAt: string; endsAt: string }[] }>;\n      });\n    },\n    /** Book an interview slot (PLA-714). Public. */\n    book: (token: string, payload: BookSlotInput, opts?: { signal?: AbortSignal }): Promise<BookSlotResponse> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/book`;\n      return fetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(payload),\n        signal: opts?.signal,\n      }).then(async (res) => {\n        if (!res.ok) throw await parseError(res);\n        return res.json() as Promise<BookSlotResponse>;\n      });\n    },\n    /** Cancel an interview booking (PLA-714). Public. */\n    cancel: (token: string, opts?: { signal?: AbortSignal }): Promise<BookSlotResponse> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/cancel`;\n      return fetch(url, { method: \"POST\", signal: opts?.signal }).then(async (res) => {\n        if (!res.ok) throw await parseError(res);\n        return res.json() as Promise<BookSlotResponse>;\n      });\n    },\n    /** Reschedule an interview booking (PLA-714). Public. */\n    reschedule: (\n      token: string,\n      payload: RescheduleInput,\n      opts?: { signal?: AbortSignal },\n    ): Promise<BookSlotResponse> => {\n      const url = `${this.embedBaseUrl}/api/embed/v1/schedule/${encodeURIComponent(token)}/reschedule`;\n      return fetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(payload),\n        signal: opts?.signal,\n      }).then(async (res) => {\n        if (!res.ok) throw await parseError(res);\n        return res.json() as Promise<BookSlotResponse>;\n      });\n    },\n  };\n}\n\n/** Convenience factory — equivalent to `new PlayaOSClient(opts)`. */\nexport function createClient(opts: ClientOptions): PlayaOSClient {\n  return new PlayaOSClient(opts);\n}\n","/**\n * Server-side OAuth-code → ID-token exchange.\n *\n * Swaps a one-time authorization code from the PlayaOS IdP for a short-lived\n * ID token. Confidential clients pass `clientSecret`, which is sent to the\n * token endpoint server-side. Public/PKCE-only clients omit it — the\n * authorization-code + code_verifier pair is the sole credential. Public\n * clients can also exchange directly from the browser via `usePlayaOSAuth`\n * in `@playaos/react`.\n */\n\nexport interface ExchangeParams {\n  authBaseUrl?: string;\n  code: string;\n  codeVerifier: string;\n  clientId: string;\n  /** Confidential clients only. Omit for public/PKCE-only clients. */\n  clientSecret?: string;\n  redirectUri: string;\n}\n\nexport interface ExchangeResult {\n  idToken: string;\n  expiresAt: string;\n  /** Confidential clients only. Undefined for public clients. */\n  refreshToken?: string;\n}\n\nexport async function exchangeCode(params: ExchangeParams): Promise<ExchangeResult> {\n  const base = params.authBaseUrl ?? \"https://auth.playaos.app\";\n  // A confidential client is identified by passing clientSecret at all — even an\n  // empty string. We forward it as-is so the server validates it (an empty or\n  // wrong secret is rejected there); public clients omit the field entirely.\n  const isConfidential = params.clientSecret !== undefined;\n  const res = await fetch(`${base}/api/auth/v1/exchange`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify({\n      code: params.code,\n      code_verifier: params.codeVerifier,\n      client_id: params.clientId,\n      ...(isConfidential ? { client_secret: params.clientSecret } : {}),\n      redirect_uri: params.redirectUri,\n    }),\n  });\n  let body: unknown;\n  try {\n    body = await res.json();\n  } catch {\n    throw new Error(`Exchange failed: non-JSON response (${res.status})`);\n  }\n\n  if (!res.ok) {\n    const errorReason =\n      typeof body === \"object\" && body !== null && \"error\" in body && typeof body.error === \"string\"\n        ? body.error\n        : String(res.status);\n    throw new Error(`Exchange failed: ${errorReason}`);\n  }\n\n  if (\n    typeof body !== \"object\" ||\n    body === null ||\n    !(\"idToken\" in body) ||\n    typeof body.idToken !== \"string\" ||\n    !(\"expiresAt\" in body) ||\n    typeof body.expiresAt !== \"string\"\n  ) {\n    throw new Error(\"Exchange failed: malformed success response\");\n  }\n\n  // The server mints a refresh token only for confidential clients (it sets\n  // `withRefreshToken: client.type === \"confidential\"`); public clients get\n  // none. Surface it when present, otherwise leave it undefined.\n  const refreshToken = \"refreshToken\" in body && typeof body.refreshToken === \"string\" ? body.refreshToken : undefined;\n\n  // A confidential client that gets no refresh token means the server response\n  // is malformed or the rotation flow is broken — surface it rather than\n  // silently returning a result the caller can't refresh.\n  if (isConfidential && refreshToken === undefined) {\n    throw new Error(\"Exchange failed: confidential client response missing refreshToken\");\n  }\n\n  return {\n    idToken: body.idToken,\n    expiresAt: body.expiresAt,\n    ...(refreshToken !== undefined ? { refreshToken } : {}),\n  };\n}\n","import { parseError } from \"./error.js\";\n\n/** A listing holds at most this many images (matches the DB's position 1–6 check). */\nexport const MAX_IMAGE_POSITION = 6;\n\n/**\n * Typed client for the anonymous gift-layer marketplace API (`/api/public/marketplace/*`).\n *\n * Unlike `PlayaOSClient` (api-key auth for `/api/v1`), this surface authenticates\n * writes with a Supabase **Bearer JWT** belonging to a public `global_accounts`\n * user. The token is supplied by an injected `getToken` provider so the same\n * client works from any consumer (the marketing UI supplies the browser\n * Supabase session token; a future surface could supply its own). Keeps the\n * public API as the single write contract — the UI is just another consumer.\n */\nexport interface PublicMarketplaceClientOptions {\n  /** API base, e.g. `https://api.playaos.app`. */\n  baseUrl: string;\n  /** Supplies the Supabase access token (Bearer) for authenticated calls; null/undefined when signed out. */\n  getToken: () => Promise<string | null | undefined> | string | null | undefined;\n}\n\nexport interface NewListingInput {\n  category: string;\n  subcategory?: string;\n  title: string;\n  body: string;\n  price?: number;\n  location?: string;\n  replyEmail: string;\n}\n\nexport interface ImageUploadTarget {\n  /** Supabase signed upload URL — PUT the file bytes here. */\n  uploadUrl: string;\n  /** Storage path to pass back to `attachImage` once the PUT succeeds. */\n  storagePath: string;\n}\n\n/** Moderation flag reasons accepted by the API (mirrors the DB enum). */\nexport type MarketplaceFlagReason = \"spam\" | \"prohibited\" | \"other\";\n\nexport interface ListingImage {\n  /** Short-lived signed download URL for the image. */\n  url: string;\n  /** 1-based display order. */\n  position: number;\n}\n\nexport interface PublicMarketplaceClient {\n  /**\n   * Create a listing as the signed-in account. Throws a plain `Error` when there\n   * is no token (signed out), or `ApiClientError` on a non-2xx response.\n   */\n  createListing(input: NewListingInput, signal?: AbortSignal): Promise<{ id: string }>;\n  /** Request a signed upload URL for an image on a listing the caller owns. */\n  getImageUploadUrl(listingId: string, signal?: AbortSignal): Promise<ImageUploadTarget>;\n  /** Attach an already-uploaded image (by storage path) to a listing at a 1–6 position. */\n  attachImage(\n    listingId: string,\n    input: { storagePath: string; position: number },\n    signal?: AbortSignal,\n  ): Promise<{ id: string }>;\n  /** Anonymous: list an active listing's images as short-lived signed URLs (for public display). */\n  listListingImages(listingId: string, signal?: AbortSignal): Promise<{ images: ListingImage[] }>;\n  /** Anonymous: batch-fetch first-image signed thumbnail URLs (listingId -> url) for browse cards. */\n  listThumbnails(listingIds: string[], signal?: AbortSignal): Promise<{ thumbnails: Record<string, string> }>;\n  /** Flag a listing for moderation (signed-in). Idempotent per (listing, user). */\n  flagListing(listingId: string, reason: MarketplaceFlagReason, signal?: AbortSignal): Promise<{ ok: boolean }>;\n  /** Contact a listing's owner (signed-in); records the reply + queues a notification email. */\n  replyToListing(listingId: string, message: string | undefined, signal?: AbortSignal): Promise<{ ok: boolean }>;\n}\n\nexport function createPublicMarketplaceClient(opts: PublicMarketplaceClientOptions): PublicMarketplaceClient {\n  const base = opts.baseUrl.replace(/\\/+$/, \"\");\n  if (!base) {\n    // An empty base would issue relative requests to the caller's own origin.\n    throw new Error(\"createPublicMarketplaceClient: baseUrl is required\");\n  }\n\n  async function authedPost<T>(path: string, body: unknown, signal?: AbortSignal): Promise<T> {\n    const token = await opts.getToken();\n    if (!token) throw new Error(\"Not signed in\");\n    const res = await fetch(`${base}/api/public/marketplace${path}`, {\n      method: \"POST\",\n      headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(body),\n      signal,\n    });\n    if (!res.ok) throw await parseError(res);\n    return res.json() as Promise<T>;\n  }\n\n  async function publicGet<T>(path: string, signal?: AbortSignal): Promise<T> {\n    // no-store: responses carry short-lived signed URLs — never let the framework\n    // (e.g. Next's fetch cache) memoize them and serve expired URLs. `cache` is a\n    // valid fetch option at runtime but absent from @types/node's RequestInit,\n    // so the init is typed with an intersection.\n    const init: RequestInit & { cache: \"no-store\" } = { signal, cache: \"no-store\" };\n    const res = await fetch(`${base}/api/public/marketplace${path}`, init);\n    if (!res.ok) throw await parseError(res);\n    return res.json() as Promise<T>;\n  }\n\n  const seg = (listingId: string) => `/listings/${encodeURIComponent(listingId)}`;\n\n  return {\n    createListing: (input, signal) => authedPost(\"/listings\", input, signal),\n    getImageUploadUrl: (listingId, signal) => authedPost(`${seg(listingId)}/image-upload-url`, {}, signal),\n    attachImage: (listingId, input, signal) => {\n      // Fail fast on a misuse the API would otherwise reject with a vague 400.\n      if (!Number.isInteger(input.position) || input.position < 1 || input.position > MAX_IMAGE_POSITION) {\n        return Promise.reject(new Error(`attachImage: position must be 1–${MAX_IMAGE_POSITION}`));\n      }\n      return authedPost(`${seg(listingId)}/images`, input, signal);\n    },\n    listListingImages: (listingId, signal) => publicGet(`${seg(listingId)}/images`, signal),\n    listThumbnails: (listingIds, signal) =>\n      publicGet(`/thumbnails?ids=${encodeURIComponent(listingIds.join(\",\"))}`, signal),\n    flagListing: (listingId, reason, signal) => authedPost(`${seg(listingId)}/flag`, { reason }, signal),\n    replyToListing: (listingId, message, signal) => authedPost(`${seg(listingId)}/reply`, { message }, signal),\n  };\n}\n"],"mappings":";AAAO,IAAM,iBAAN,cAA6B,MAAM;AAAA,EACxC,YACkB,QACA,MAChB,SAMgB,YAChB;AACA,UAAM,OAAO;AAVG;AACA;AAOA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EAZkB;AAAA,EACA;AAAA,EAOA;AAKpB;AAOA,SAAS,gBAAgB,KAAmC;AAC1D,QAAM,SAAS,IAAI,SAAS,MAAM,aAAa,GAAG,KAAK;AACvD,SAAO,UAAU,QAAQ,KAAK,MAAM,IAAI,SAAS,QAAQ,EAAE,IAAI;AACjE;AAEA,eAAsB,WAAW,KAAwC;AACvE,QAAM,aAAa,gBAAgB,GAAG;AACtC,MAAI;AACF,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,IAAI,eAAe,IAAI,QAAQ,KAAK,QAAQ,WAAW,KAAK,SAAS,IAAI,YAAY,UAAU;AAAA,EACxG,QAAQ;AACN,WAAO,IAAI,eAAe,IAAI,QAAQ,WAAW,IAAI,YAAY,UAAU;AAAA,EAC7E;AACF;;;AC0BA,SAAS,SAAS,MAAc,MAAc,QAAwE;AACpH,QAAM,MAAM,IAAI,IAAI,GAAG,IAAI,UAAU,IAAI,EAAE;AAC3C,MAAI,QAAQ;AACV,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAI3C,UAAI,MAAM,UAAa,MAAM,MAAO,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,IACvE;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,cAAc,MAAc,MAAsB;AACzD,SAAO,GAAG,IAAI,gBAAgB,IAAI;AACpC;AAEA,SAAS,YAAY,KAAa,SAAyB;AACzD,QAAM,WAAW,IAAI,IAAI,GAAG;AAC5B,WAAS,aAAa,IAAI,YAAY,OAAO;AAC7C,SAAO,SAAS,SAAS;AAC3B;AAEA,eAAe,SAAY,KAAa,SAAiB,QAAkC;AACzF,QAAM,MAAM,MAAM,MAAM,YAAY,KAAK,OAAO,GAAG;AAAA,IACjD,SAAS,EAAE,cAAc,QAAQ;AAAA,IACjC;AAAA,EACF,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,eACb,KACA,SACA,MACY;AACZ,QAAM,UAAkC,EAAE,cAAc,QAAQ;AAChE,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,YAAY,KAAK,OAAO,GAAG,EAAE,SAAS,QAAQ,MAAM,OAAO,CAAC;AACpF,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,QAAW,KAAa,QAAgB,QAAkC;AACvF,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG;AAAA,IAC7C;AAAA,EACF,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,KAAQ,KAAa,QAAgB,MAAe,QAAkC;AACnG,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,QAAQ;AAAA,IACR,SAAS,EAAE,eAAe,UAAU,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,IACjF,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,UACb,KACA,SACA,MACA,MACY;AACZ,QAAM,UAAkC;AAAA,IACtC,cAAc;AAAA,IACd,gBAAgB;AAAA,EAClB;AACA,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,YAAY,KAAK,OAAO,GAAG;AAAA,IACjD,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,SACb,KACA,SACA,MACA,MACY;AACZ,QAAM,UAAkC;AAAA,IACtC,cAAc;AAAA,IACd,gBAAgB;AAAA,EAClB;AACA,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,YAAY,KAAK,OAAO,GAAG;AAAA,IACjD,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,YACb,KACA,SACA,MACY;AACZ,QAAM,UAAkC,EAAE,cAAc,QAAQ;AAChE,MAAI,MAAM,YAAa,SAAQ,gBAAgB,UAAU,KAAK,WAAW;AACzE,QAAM,MAAM,MAAM,MAAM,YAAY,KAAK,OAAO,GAAG,EAAE,QAAQ,UAAU,SAAS,QAAQ,MAAM,OAAO,CAAC;AACtG,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAQA,eAAe,WACb,QACA,KACA,aACA,MACA,QACY;AACZ,QAAM,UAAkC,EAAE,eAAe,UAAU,WAAW,GAAG;AACjF,QAAM,OAAoB,EAAE,QAAQ,SAAS,OAAO;AACpD,MAAI,SAAS,QAAW;AACtB,YAAQ,cAAc,IAAI;AAC1B,SAAK,OAAO,KAAK,UAAU,IAAI;AAAA,EACjC;AACA,QAAM,MAAM,MAAM,MAAM,KAAK,IAAI;AACjC,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,SAAO,IAAI,KAAK;AAClB;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAqB;AAC/B,SAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAC9C,SAAK,gBAAgB,KAAK,gBAAgB,KAAK,SAAS,QAAQ,QAAQ,EAAE;AAC1E,SAAK,SAAS,KAAK;AAAA,EACrB;AAAA,EAES,UAAU;AAAA,IACjB,MAAM,CACJ,QACA,SAC+B,QAAQ,SAAS,KAAK,SAAS,YAAY,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,IAE9G,KAAK,CAAC,IAAY,SAChB,QAAQ,SAAS,KAAK,SAAS,YAAY,mBAAmB,EAAE,CAAC,EAAE,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA;AAAA,IAGjG,YAAY,CACV,SAYA,SAEA,SAAS,cAAc,KAAK,cAAc,eAAe,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA;AAAA,IAGxF,QAAQ;AAAA,MACN,QAAQ,CACN,SACA,SAEA,SAAS,cAAc,KAAK,cAAc,gBAAgB,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA,MACzF,QAAQ,CACN,UACA,SAEA;AAAA,QACE,cAAc,KAAK,cAAc,mBAAmB,mBAAmB,QAAQ,CAAC,EAAE;AAAA,QAClF,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACJ;AAAA,EACF;AAAA,EAES,eAAe;AAAA,IACtB,MAAM,CACJ,QACA,SAEA,QAAQ,SAAS,KAAK,SAAS,iBAAiB,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOpF,QAAQ,CACN,SACA,SAEA,UAAU,cAAc,KAAK,cAAc,eAAe,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA,EAC3F;AAAA,EAES,UAAU;AAAA;AAAA,IAEjB,QAAQ,CAAC,OAAe,SACtB,SAAS,cAAc,KAAK,cAAc,YAAY,KAAK,SAAS,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA;AAAA,IAGlG,MAAM,CACJ,SACA,SAEA,UAAU,cAAc,KAAK,cAAc,eAAe,GAAG,KAAK,QAAQ,SAAS,IAAI;AAAA;AAAA,IAGzF,QAAQ,CACN,OACA,SAC0B;AAC1B,YAAM,QAAQ,MAAM,gBAAgB,kBAAkB,mBAAmB,KAAK,aAAa,CAAC,KAAK;AACjG,aAAO,eAAe,cAAc,KAAK,cAAc,YAAY,KAAK,UAAU,KAAK,EAAE,GAAG,KAAK,QAAQ,IAAI;AAAA,IAC/G;AAAA;AAAA,IAGA,WAAW,CACT,OACA,aACA,SAC6B;AAC7B,YAAM,QAAQ,MAAM,gBAAgB,kBAAkB,mBAAmB,KAAK,aAAa,CAAC,KAAK;AACjG,aAAO;AAAA,QACL,cAAc,KAAK,cAAc,YAAY,KAAK,eAAe,mBAAmB,WAAW,CAAC,OAAO,KAAK,EAAE;AAAA,QAC9G,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAES,OAAO;AAAA,IACd,MAAM,CACJ,QACA,SACmC,QAAQ,SAAS,KAAK,SAAS,SAAS,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EACjH;AAAA,EAES,SAAS;AAAA,IAChB,MAAM,CACJ,QAOA,SAC8B,QAAQ,SAAS,KAAK,SAAS,WAAW,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EAC9G;AAAA,EAES,MAAM;AAAA,IACb,KAAK,CAAC,SACJ,QAAQ,SAAS,KAAK,SAAS,MAAM,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKS,cAAc;AAAA,IACrB,MAAM,CAAC,SACL,SAAS,cAAc,KAAK,cAAc,cAAc,GAAG,KAAK,QAAQ,MAAM,MAAM;AAAA,EACxF;AAAA,EAES,WAAW;AAAA,IAClB,MAAM,CACJ,UACA,kBACA,SAEA,KAAK,SAAS,KAAK,SAAS,gBAAgB,GAAG,KAAK,QAAQ,EAAE,UAAU,iBAAiB,GAAG,MAAM,MAAM;AAAA,EAC5G;AAAA;AAAA;AAAA;AAAA,EAKS,QAAQ;AAAA,IACf,cAAc;AAAA;AAAA,MAEZ,SAAS,CAAC,IAAY,SACpB;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,UAAU;AAAA,QACxF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,YAAY,CACV,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,EAAE;AAAA,QAChF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,gBAAgB,CACd,IACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,cAAc;AAAA,QAC5F,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,SAAS,CACP,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,QAAQ;AAAA,QACtF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,SAAS,CACP,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,OAAO;AAAA,QACrF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MACF,UAAU,CACR,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,uBAAuB,mBAAmB,EAAE,CAAC,SAAS;AAAA,QACvF,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,YAAY;AAAA,MACV,WAAW;AAAA,QACT,MAAM,CAAC,SACL;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,6BAA6B;AAAA,UAC9D,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,QACF,eAAe;AAAA,UACb,MAAM,CAAC,YAAoB,SACzB;AAAA,YACE;AAAA,YACA,cAAc,KAAK,cAAc,+BAA+B,UAAU,iBAAiB;AAAA,YAC3F,KAAK;AAAA,YACL;AAAA,YACA,KAAK;AAAA,UACP;AAAA,UACF,QAAQ,CACN,YACA,SACA,SAEA;AAAA,YACE;AAAA,YACA,cAAc,KAAK,cAAc,+BAA+B,UAAU,iBAAiB;AAAA,YAC3F,KAAK;AAAA,YACL;AAAA,YACA,KAAK;AAAA,UACP;AAAA,QACJ;AAAA,QACA,SAAS;AAAA,UACP,QAAQ,CACN,YACA,SACA,SAEA;AAAA,YACE;AAAA,YACA,cAAc,KAAK,cAAc,+BAA+B,UAAU,UAAU;AAAA,YACpF,KAAK;AAAA,YACL;AAAA,YACA,KAAK;AAAA,UACP;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ,CACN,SACA,SAEA,WAAW,QAAQ,cAAc,KAAK,cAAc,gBAAgB,GAAG,KAAK,aAAa,SAAS,KAAK,MAAM;AAAA,MAE/G,QAAQ,CACN,IACA,OACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,kBAAkB,mBAAmB,EAAE,CAAC,EAAE;AAAA,QAC3E,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,MAEF,YAAY,CACV,IACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,kBAAkB,mBAAmB,EAAE,CAAC,EAAE;AAAA,QAC3E,KAAK;AAAA,QACL,EAAE,QAAQ,WAAW;AAAA,QACrB,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,eAAe;AAAA;AAAA,MAEb,MAAM,CACJ,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,2BAA2B;AAAA,QAC5D,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,MAAM;AAAA;AAAA,MAEJ,QAAQ,CACN,SACA,SAEA,WAAW,QAAQ,cAAc,KAAK,cAAc,aAAa,GAAG,KAAK,aAAa,SAAS,KAAK,MAAM;AAAA;AAAA,MAG5G,QAAQ,CACN,IACA,SACA,SAEA;AAAA,QACE;AAAA,QACA,cAAc,KAAK,cAAc,eAAe,mBAAmB,EAAE,CAAC,EAAE;AAAA,QACxE,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACJ;AAAA,IACA,KAAK;AAAA;AAAA,MAEH,QAAQ,CACN,SACA,SAEA,WAAW,SAAS,cAAc,KAAK,cAAc,YAAY,GAAG,KAAK,aAAa,SAAS,KAAK,MAAM;AAAA,IAC9G;AAAA,IACA,YAAY;AAAA,MACV,cAAc;AAAA;AAAA,QAEZ,KAAK,CACH,eACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,kCAAkC,mBAAmB,aAAa,CAAC,EAAE;AAAA,UACtG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,KAAK,CACH,eACA,SACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,kCAAkC,mBAAmB,aAAa,CAAC,EAAE;AAAA,UACtG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACJ;AAAA,MACA,UAAU;AAAA;AAAA,QAER,QAAQ,CAAC,eAAuB,SAC9B;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,8BAA8B,mBAAmB,aAAa,CAAC,SAAS;AAAA,UACzG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,eAAe,CACb,eACA,SAEA;AAAA,UACE;AAAA,UACA;AAAA,YACE,KAAK;AAAA,YACL,8BAA8B,mBAAmB,aAAa,CAAC;AAAA,UACjE;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,QAAQ,CACN,eACA,SACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,8BAA8B,mBAAmB,aAAa,CAAC,SAAS;AAAA,UACzG,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,YAAY,CACV,eACA,SAEA;AAAA,UACE;AAAA,UACA;AAAA,YACE,KAAK;AAAA,YACL,8BAA8B,mBAAmB,aAAa,CAAC;AAAA,UACjE;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACJ;AAAA,MACA,eAAe;AAAA;AAAA,QAEb,QAAQ,CACN,SACA,SAEA;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,uBAAuB;AAAA,UACxD,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA;AAAA,QAEF,KAAK,CAAC,eAAuB,SAC3B;AAAA,UACE;AAAA,UACA,cAAc,KAAK,cAAc,yBAAyB,mBAAmB,aAAa,CAAC,EAAE;AAAA,UAC7F,KAAK;AAAA,UACL;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIS,WAAW;AAAA;AAAA,IAElB,UAAU,CACR,OACA,SAC+D;AAC/D,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK,EAAE,QAAQ,MAAM,OAAO,CAAC,EAAE,KAAK,OAAO,QAAQ;AAC9D,YAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA;AAAA,IAEA,MAAM,CAAC,OAAe,SAAwB,SAA+D;AAC3G,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,QAAQ,MAAM;AAAA,MAChB,CAAC,EAAE,KAAK,OAAO,QAAQ;AACrB,YAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA;AAAA,IAEA,QAAQ,CAAC,OAAe,SAA+D;AACrF,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,QAAQ,MAAM,OAAO,CAAC,EAAE,KAAK,OAAO,QAAQ;AAC9E,YAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA;AAAA,IAEA,YAAY,CACV,OACA,SACA,SAC8B;AAC9B,YAAM,MAAM,GAAG,KAAK,YAAY,0BAA0B,mBAAmB,KAAK,CAAC;AACnF,aAAO,MAAM,KAAK;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,QAAQ,MAAM;AAAA,MAChB,CAAC,EAAE,KAAK,OAAO,QAAQ;AACrB,YAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,eAAO,IAAI,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAGO,SAAS,aAAa,MAAoC;AAC/D,SAAO,IAAI,cAAc,IAAI;AAC/B;;;ACrrBA,eAAsB,aAAa,QAAiD;AAClF,QAAM,OAAO,OAAO,eAAe;AAInC,QAAM,iBAAiB,OAAO,iBAAiB;AAC/C,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,yBAAyB;AAAA,IACtD,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,GAAI,iBAAiB,EAAE,eAAe,OAAO,aAAa,IAAI,CAAC;AAAA,MAC/D,cAAc,OAAO;AAAA,IACvB,CAAC;AAAA,EACH,CAAC;AACD,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,uCAAuC,IAAI,MAAM,GAAG;AAAA,EACtE;AAEA,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,cACJ,OAAO,SAAS,YAAY,SAAS,QAAQ,WAAW,QAAQ,OAAO,KAAK,UAAU,WAClF,KAAK,QACL,OAAO,IAAI,MAAM;AACvB,UAAM,IAAI,MAAM,oBAAoB,WAAW,EAAE;AAAA,EACnD;AAEA,MACE,OAAO,SAAS,YAChB,SAAS,QACT,EAAE,aAAa,SACf,OAAO,KAAK,YAAY,YACxB,EAAE,eAAe,SACjB,OAAO,KAAK,cAAc,UAC1B;AACA,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAKA,QAAM,eAAe,kBAAkB,QAAQ,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe;AAK3G,MAAI,kBAAkB,iBAAiB,QAAW;AAChD,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AAEA,SAAO;AAAA,IACL,SAAS,KAAK;AAAA,IACd,WAAW,KAAK;AAAA,IAChB,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,EACvD;AACF;;;ACrFO,IAAM,qBAAqB;AAsE3B,SAAS,8BAA8B,MAA+D;AAC3G,QAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAC5C,MAAI,CAAC,MAAM;AAET,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAEA,iBAAe,WAAc,MAAc,MAAe,QAAkC;AAC1F,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,eAAe;AAC3C,UAAM,MAAM,MAAM,MAAM,GAAG,IAAI,0BAA0B,IAAI,IAAI;AAAA,MAC/D,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,MAChF,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,WAAO,IAAI,KAAK;AAAA,EAClB;AAEA,iBAAe,UAAa,MAAc,QAAkC;AAK1E,UAAM,OAA4C,EAAE,QAAQ,OAAO,WAAW;AAC9E,UAAM,MAAM,MAAM,MAAM,GAAG,IAAI,0BAA0B,IAAI,IAAI,IAAI;AACrE,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,WAAW,GAAG;AACvC,WAAO,IAAI,KAAK;AAAA,EAClB;AAEA,QAAM,MAAM,CAAC,cAAsB,aAAa,mBAAmB,SAAS,CAAC;AAE7E,SAAO;AAAA,IACL,eAAe,CAAC,OAAO,WAAW,WAAW,aAAa,OAAO,MAAM;AAAA,IACvE,mBAAmB,CAAC,WAAW,WAAW,WAAW,GAAG,IAAI,SAAS,CAAC,qBAAqB,CAAC,GAAG,MAAM;AAAA,IACrG,aAAa,CAAC,WAAW,OAAO,WAAW;AAEzC,UAAI,CAAC,OAAO,UAAU,MAAM,QAAQ,KAAK,MAAM,WAAW,KAAK,MAAM,WAAW,oBAAoB;AAClG,eAAO,QAAQ,OAAO,IAAI,MAAM,wCAAmC,kBAAkB,EAAE,CAAC;AAAA,MAC1F;AACA,aAAO,WAAW,GAAG,IAAI,SAAS,CAAC,WAAW,OAAO,MAAM;AAAA,IAC7D;AAAA,IACA,mBAAmB,CAAC,WAAW,WAAW,UAAU,GAAG,IAAI,SAAS,CAAC,WAAW,MAAM;AAAA,IACtF,gBAAgB,CAAC,YAAY,WAC3B,UAAU,mBAAmB,mBAAmB,WAAW,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM;AAAA,IACjF,aAAa,CAAC,WAAW,QAAQ,WAAW,WAAW,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM;AAAA,IACnG,gBAAgB,CAAC,WAAW,SAAS,WAAW,WAAW,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE,QAAQ,GAAG,MAAM;AAAA,EAC3G;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@playaos/api-client",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Typed API client for PlayaOS \u2014 manage camp members, dues, shifts, applications, waivers, and annotations",
   "type": "module",
   "main": "./dist/index.js",
@@ -35,7 +35,7 @@
   "devDependencies": {
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.8",
+    "vitest": "^4.1.10",
     "zod": "^4.4.3"
   }
 }