@stackcraftmx/calcita 0.0.0-stage → 0.25.0

package/dist/account/restAccountConnector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restAccountConnector.js","sources":["../../src/account/restAccountConnector.js"],"sourcesContent":["// El conector de la cuenta para un backend REST que sigue este contrato (llaves en snake_case, errores RFC 9457). Si el\n// backend lo sigue, conectar la cuenta es una línea:\n//\n//   export const accountConnector = createRestAccountConnector(apiClient);\n//\n// Si alguna ruta se llama distinto, se cambia en `paths`; si alguna respuesta tiene otra forma, se reemplaza esa función:\n//\n//   export const accountConnector = {...createRestAccountConnector(apiClient), signIn: async (credentials) => …};\n//\n// El contrato (las rutas por omisión, ACCOUNT_REST_PATHS):\n//\n//   GET    /auth/session                          → {user, roles, abilities, labels} | 401 si nadie está dentro\n//   POST   /auth/sign-in        {email, password, remember}   → {second_step: {methods} | null}\n//   POST   /auth/second-step    {method, code}                → 204   (method: totp | recovery_code)\n//   GET    /auth/second-step/passkey-options                  → opciones de WebAuthn para firmar\n//   POST   /auth/second-step/passkey   {credential}           → 204\n//   POST   /auth/sign-out                                     → 204\n//   POST   /auth/forgot-password       {email}                → 204 (igual exista o no el correo)\n//   POST   /auth/reset-password        {token, new_password}  → 204\n//   PUT    /account             {name, phone}                 → {message?}\n//   PUT    /account/password    {current_password, new_password} → 204\n//   GET    /account/security                                  → el estado de la verificación (abajo)\n//   POST   /account/security/totp                             → {secret, qr_image_url}\n//   POST   /account/security/totp/confirm      {code}         → {security, recovery_codes?}\n//   DELETE /account/security/totp             {password}     → {security}\n//   GET    /account/security/passkeys/registration-options    → opciones de WebAuthn para crear\n//   POST   /account/security/passkeys          {name, credential} → {security, recovery_codes?}\n//   DELETE /account/security/passkeys/{id}     {password}     → {security}\n//   POST   /account/security/recovery-codes    {password}     → {security, recovery_codes}\n//   GET    /account/sessions                                  → [{id, browser, platform, is_mobile, started_at, network, is_current}]\n//   POST   /account/sessions/close-others                     → {closed}\n//   GET    /account/activity                                  → [{id, kind, occurred_at, device, network}]\n//\n// El estado de la verificación: {is_enabled, enabled_at, passkeys: [{id, name, created_at, last_used_at}],\n// totp: {is_enabled, enabled_at}, recovery_codes_remaining}. Las opciones y la firma de WebAuthn viajan tal cual (las arma\n// y las revisa la librería del servidor: py_webauthn, @simplewebauthn/server, web-auth/webauthn-lib).\n//\n// Funciones puras, no renderizan: function (regla de la casa). Pruebas en restAccountConnector.test.js.\n\n/** Las rutas del contrato; se pegan a la baseUrl del cliente (/api + /auth/session). */\nexport const ACCOUNT_REST_PATHS = Object.freeze({\n    session: '/auth/session',\n    signIn: '/auth/sign-in',\n    secondStep: '/auth/second-step',\n    secondStepPasskeyOptions: '/auth/second-step/passkey-options',\n    secondStepPasskey: '/auth/second-step/passkey',\n    signOut: '/auth/sign-out',\n    forgotPassword: '/auth/forgot-password',\n    resetPassword: '/auth/reset-password',\n    profile: '/account',\n    password: '/account/password',\n    security: '/account/security',\n    totp: '/account/security/totp',\n    totpConfirm: '/account/security/totp/confirm',\n    passkeyRegistrationOptions: '/account/security/passkeys/registration-options',\n    passkeys: '/account/security/passkeys',\n    recoveryCodes: '/account/security/recovery-codes',\n    sessions: '/account/sessions',\n    closeOtherSessions: '/account/sessions/close-others',\n    activity: '/account/activity',\n});\n\n// cómo se llama cada método del segundo paso en el contrato (snake_case) y en las pantallas (SECOND_STEP_METHOD)\nconst SECOND_STEP_METHOD_IN_API = Object.freeze({passkey: 'passkey', totp: 'totp', recoveryCode: 'recovery_code'});\nconst SECOND_STEP_METHOD_FROM_API = Object.freeze({passkey: 'passkey', totp: 'totp', recovery_code: 'recoveryCode'});\n\n/**\n * El estado de la verificación, del contrato a camelCase.\n *\n * @param {object} response\n * @returns {import('@/account/accountConnector.js').AccountSecurity}\n */\nexport function securityFromResponse(response) {\n    return {\n        isEnabled: Boolean(response.is_enabled),\n        enabledAt: response.enabled_at ?? null,\n        passkeys: (response.passkeys ?? []).map((passkey) => ({\n            id: passkey.id, name: passkey.name, createdAt: passkey.created_at, lastUsedAt: passkey.last_used_at ?? null,\n        })),\n        totp: {isEnabled: Boolean(response.totp?.is_enabled), enabledAt: response.totp?.enabled_at ?? null},\n        recoveryCodesRemaining: response.recovery_codes_remaining ?? 0,\n    };\n}\n\n/**\n * Lo que regresa un cambio de seguridad: {security, recovery_codes?} → {security, recoveryCodes?}.\n *\n * @param {object} response\n * @returns {import('@/account/accountConnector.js').AccountSecurityChange}\n */\nexport function securityChangeFromResponse(response) {\n    return {security: securityFromResponse(response.security), recoveryCodes: response.recovery_codes ?? undefined};\n}\n\n/**\n * @param {{get: Function, post: Function, put: Function, delete: Function}} apiClient el de createApiClient\n * @param {{paths?: Partial<Record<keyof typeof ACCOUNT_REST_PATHS, string>>}} [options] las rutas que se llaman distinto\n * @returns {import('@/account/accountConnector.js').AccountConnector}\n */\nexport function createRestAccountConnector(apiClient, {paths = {}} = {}) {\n    const path = {...ACCOUNT_REST_PATHS, ...paths};\n\n    return {\n        loadSession: async () => {\n            try {\n                // sin el aviso de «sesión vencida»: aquí que no haya sesión es una respuesta normal\n                return await apiClient.get(path.session, {skipUnauthenticatedHandler: true});\n            } catch (error) {\n                if (error?.isUnauthenticated) {\n                    return null;\n                }\n                throw error;\n            }\n        },\n        signIn: async ({email, password, remember}) => {\n            const response = await apiClient.post(path.signIn, {email, password, remember}, {skipUnauthenticatedHandler: true});\n            const methods = response?.second_step?.methods;\n            return {secondStep: methods ? {methods: methods.map((method) => SECOND_STEP_METHOD_FROM_API[method] ?? method)} : null};\n        },\n        signInSecondStep: async ({method, code}) => {\n            await apiClient.post(path.secondStep, {method: SECOND_STEP_METHOD_IN_API[method] ?? method, code}, {skipUnauthenticatedHandler: true});\n        },\n        secondStepPasskeyOptions: () => apiClient.get(path.secondStepPasskeyOptions, {skipUnauthenticatedHandler: true}),\n        signInWithPasskey: async (credential) => {\n            await apiClient.post(path.secondStepPasskey, {credential}, {skipUnauthenticatedHandler: true});\n        },\n        signOut: async () => {\n            await apiClient.post(path.signOut, undefined, {skipUnauthenticatedHandler: true});\n        },\n        requestPasswordReset: async ({email}) => {\n            await apiClient.post(path.forgotPassword, {email});\n        },\n        resetPassword: async ({token, newPassword}) => {\n            await apiClient.post(path.resetPassword, {token, new_password: newPassword});\n        },\n        // todo lo del formulario viaja: name, phone y los campos propios de ProfileScreen (extraFields) con sus nombres\n        updateProfile: async (profile) => (await apiClient.put(path.profile, profile)) ?? {},\n        changePassword: async ({currentPassword, newPassword}) => {\n            await apiClient.put(path.password, {current_password: currentPassword, new_password: newPassword});\n        },\n        loadSecurity: async () => securityFromResponse(await apiClient.get(path.security)),\n        startTotp: async () => {\n            const response = await apiClient.post(path.totp);\n            return {secret: response.secret, qrImageUrl: response.qr_image_url ?? null};\n        },\n        confirmTotp: async (code) => securityChangeFromResponse(await apiClient.post(path.totpConfirm, {code})),\n        disableTotp: async (password) => securityChangeFromResponse(await apiClient.delete(path.totp, {body: {password}})),\n        passkeyRegistrationOptions: () => apiClient.get(path.passkeyRegistrationOptions),\n        savePasskey: async ({name, credential}) => securityChangeFromResponse(await apiClient.post(path.passkeys, {name, credential})),\n        removePasskey: async ({passkeyId, password}) => securityChangeFromResponse(\n            await apiClient.delete(`${path.passkeys}/${encodeURIComponent(passkeyId)}`, {body: {password}}),\n        ),\n        regenerateRecoveryCodes: async (password) => securityChangeFromResponse(await apiClient.post(path.recoveryCodes, {password})),\n        listSessions: async () => (await apiClient.get(path.sessions)).map((session) => ({\n            id: session.id, browser: session.browser, platform: session.platform, isMobile: Boolean(session.is_mobile),\n            startedAt: session.started_at, network: session.network, isCurrent: Boolean(session.is_current),\n        })),\n        closeOtherSessions: async () => (await apiClient.post(path.closeOtherSessions))?.closed ?? 0,\n        listActivity: async () => (await apiClient.get(path.activity)).map((event) => ({\n            id: event.id, kind: event.kind, occurredAt: event.occurred_at, device: event.device, network: event.network,\n        })),\n    };\n}\n"],"names":[],"mappings":"AAwCY,MAAC,qBAAqB,OAAO,OAAO;AAAA,EAC5C,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,MAAM;AAAA,EACN,aAAa;AAAA,EACb,4BAA4B;AAAA,EAC5B,UAAU;AAAA,EACV,eAAe;AAAA,EACf,UAAU;AAAA,EACV,oBAAoB;AAAA,EACpB,UAAU;AACd,CAAC;AAGD,MAAM,4BAA4B,OAAO,OAAO,EAAC,SAAS,WAAW,MAAM,QAAQ,cAAc,gBAAe,CAAC;AACjH,MAAM,8BAA8B,OAAO,OAAO,EAAC,SAAS,WAAW,MAAM,QAAQ,eAAe,eAAc,CAAC;AAQ5G,SAAS,qBAAqB,UAAU;AAC3C,SAAO;AAAA,IACH,WAAW,QAAQ,SAAS,UAAU;AAAA,IACtC,WAAW,SAAS,cAAc;AAAA,IAClC,WAAW,SAAS,YAAY,CAAA,GAAI,IAAI,CAAC,aAAa;AAAA,MAClD,IAAI,QAAQ;AAAA,MAAI,MAAM,QAAQ;AAAA,MAAM,WAAW,QAAQ;AAAA,MAAY,YAAY,QAAQ,gBAAgB;AAAA,IACnH,EAAU;AAAA,IACF,MAAM,EAAC,WAAW,QAAQ,SAAS,MAAM,UAAU,GAAG,WAAW,SAAS,MAAM,cAAc,KAAI;AAAA,IAClG,wBAAwB,SAAS,4BAA4B;AAAA,EACrE;AACA;AAQO,SAAS,2BAA2B,UAAU;AACjD,SAAO,EAAC,UAAU,qBAAqB,SAAS,QAAQ,GAAG,eAAe,SAAS,kBAAkB,OAAS;AAClH;AAOO,SAAS,2BAA2B,WAAW,EAAC,QAAQ,CAAA,EAAE,IAAI,CAAA,GAAI;AACrE,QAAM,OAAO,EAAC,GAAG,oBAAoB,GAAG,MAAK;AAE7C,SAAO;AAAA,IACH,aAAa,YAAY;AACrB,UAAI;AAEA,eAAO,MAAM,UAAU,IAAI,KAAK,SAAS,EAAC,4BAA4B,KAAI,CAAC;AAAA,MAC/E,SAAS,OAAO;AACZ,YAAI,OAAO,mBAAmB;AAC1B,iBAAO;AAAA,QACX;AACA,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,IACA,QAAQ,OAAO,EAAC,OAAO,UAAU,SAAQ,MAAM;AAC3C,YAAM,WAAW,MAAM,UAAU,KAAK,KAAK,QAAQ,EAAC,OAAO,UAAU,SAAQ,GAAG,EAAC,4BAA4B,KAAI,CAAC;AAClH,YAAM,UAAU,UAAU,aAAa;AACvC,aAAO,EAAC,YAAY,UAAU,EAAC,SAAS,QAAQ,IAAI,CAAC,WAAW,4BAA4B,MAAM,KAAK,MAAM,EAAC,IAAI,KAAI;AAAA,IAC1H;AAAA,IACA,kBAAkB,OAAO,EAAC,QAAQ,KAAI,MAAM;AACxC,YAAM,UAAU,KAAK,KAAK,YAAY,EAAC,QAAQ,0BAA0B,MAAM,KAAK,QAAQ,KAAI,GAAG,EAAC,4BAA4B,KAAI,CAAC;AAAA,IACzI;AAAA,IACA,0BAA0B,MAAM,UAAU,IAAI,KAAK,0BAA0B,EAAC,4BAA4B,KAAI,CAAC;AAAA,IAC/G,mBAAmB,OAAO,eAAe;AACrC,YAAM,UAAU,KAAK,KAAK,mBAAmB,EAAC,WAAU,GAAG,EAAC,4BAA4B,KAAI,CAAC;AAAA,IACjG;AAAA,IACA,SAAS,YAAY;AACjB,YAAM,UAAU,KAAK,KAAK,SAAS,QAAW,EAAC,4BAA4B,KAAI,CAAC;AAAA,IACpF;AAAA,IACA,sBAAsB,OAAO,EAAC,MAAK,MAAM;AACrC,YAAM,UAAU,KAAK,KAAK,gBAAgB,EAAC,MAAK,CAAC;AAAA,IACrD;AAAA,IACA,eAAe,OAAO,EAAC,OAAO,YAAW,MAAM;AAC3C,YAAM,UAAU,KAAK,KAAK,eAAe,EAAC,OAAO,cAAc,YAAW,CAAC;AAAA,IAC/E;AAAA;AAAA,IAEA,eAAe,OAAO,YAAa,MAAM,UAAU,IAAI,KAAK,SAAS,OAAO,KAAM,CAAA;AAAA,IAClF,gBAAgB,OAAO,EAAC,iBAAiB,YAAW,MAAM;AACtD,YAAM,UAAU,IAAI,KAAK,UAAU,EAAC,kBAAkB,iBAAiB,cAAc,YAAW,CAAC;AAAA,IACrG;AAAA,IACA,cAAc,YAAY,qBAAqB,MAAM,UAAU,IAAI,KAAK,QAAQ,CAAC;AAAA,IACjF,WAAW,YAAY;AACnB,YAAM,WAAW,MAAM,UAAU,KAAK,KAAK,IAAI;AAC/C,aAAO,EAAC,QAAQ,SAAS,QAAQ,YAAY,SAAS,gBAAgB,KAAI;AAAA,IAC9E;AAAA,IACA,aAAa,OAAO,SAAS,2BAA2B,MAAM,UAAU,KAAK,KAAK,aAAa,EAAC,KAAI,CAAC,CAAC;AAAA,IACtG,aAAa,OAAO,aAAa,2BAA2B,MAAM,UAAU,OAAO,KAAK,MAAM,EAAC,MAAM,EAAC,SAAQ,EAAC,CAAC,CAAC;AAAA,IACjH,4BAA4B,MAAM,UAAU,IAAI,KAAK,0BAA0B;AAAA,IAC/E,aAAa,OAAO,EAAC,MAAM,WAAU,MAAM,2BAA2B,MAAM,UAAU,KAAK,KAAK,UAAU,EAAC,MAAM,WAAU,CAAC,CAAC;AAAA,IAC7H,eAAe,OAAO,EAAC,WAAW,SAAQ,MAAM;AAAA,MAC5C,MAAM,UAAU,OAAO,GAAG,KAAK,QAAQ,IAAI,mBAAmB,SAAS,CAAC,IAAI,EAAC,MAAM,EAAC,SAAQ,EAAC,CAAC;AAAA,IAC1G;AAAA,IACQ,yBAAyB,OAAO,aAAa,2BAA2B,MAAM,UAAU,KAAK,KAAK,eAAe,EAAC,SAAQ,CAAC,CAAC;AAAA,IAC5H,cAAc,aAAa,MAAM,UAAU,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,aAAa;AAAA,MAC7E,IAAI,QAAQ;AAAA,MAAI,SAAS,QAAQ;AAAA,MAAS,UAAU,QAAQ;AAAA,MAAU,UAAU,QAAQ,QAAQ,SAAS;AAAA,MACzG,WAAW,QAAQ;AAAA,MAAY,SAAS,QAAQ;AAAA,MAAS,WAAW,QAAQ,QAAQ,UAAU;AAAA,IAC1G,EAAU;AAAA,IACF,oBAAoB,aAAa,MAAM,UAAU,KAAK,KAAK,kBAAkB,IAAI,UAAU;AAAA,IAC3F,cAAc,aAAa,MAAM,UAAU,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,WAAW;AAAA,MAC3E,IAAI,MAAM;AAAA,MAAI,MAAM,MAAM;AAAA,MAAM,YAAY,MAAM;AAAA,MAAa,QAAQ,MAAM;AAAA,MAAQ,SAAS,MAAM;AAAA,IAChH,EAAU;AAAA,EACV;AACA;"}

package/dist/account-demo.js

@@ -0,0 +1,12 @@
+import { createDemoAccountConnector } from "./account/demo/createDemoAccountConnector.js";
+import { base32Of, bytesOfBase32, isValidTotpCode, newTotpSecret, otpauthUrlOf, totpCodeAt } from "./account/demo/totp.js";
+export {
+  base32Of,
+  bytesOfBase32,
+  createDemoAccountConnector,
+  isValidTotpCode,
+  newTotpSecret,
+  otpauthUrlOf,
+  totpCodeAt
+};
+//# sourceMappingURL=account-demo.js.map

package/dist/account-demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-demo.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;"}

package/dist/account.js

@@ -0,0 +1,25 @@
+import { ACCOUNT_CONNECTOR_FUNCTIONS, missingConnectorFunctionsOf } from "./account/accountConnector.js";
+import { ACCOUNT_REST_PATHS, createRestAccountConnector, securityChangeFromResponse, securityFromResponse } from "./account/restAccountConnector.js";
+import { default as default2, useAccount } from "./account/AccountProvider.js";
+import { default as default3 } from "./account/AccountSecuritySection.js";
+import { default as default4 } from "./account/ForgotPasswordScreen.js";
+import { PROFILE_TAB, default as default5 } from "./account/ProfileScreen.js";
+import { default as default6 } from "./account/ResetPasswordScreen.js";
+import { default as default7 } from "./account/SignInScreen.js";
+export {
+  ACCOUNT_CONNECTOR_FUNCTIONS,
+  ACCOUNT_REST_PATHS,
+  default2 as AccountProvider,
+  default3 as AccountSecuritySection,
+  default4 as ForgotPasswordScreen,
+  PROFILE_TAB,
+  default5 as ProfileScreen,
+  default6 as ResetPasswordScreen,
+  default7 as SignInScreen,
+  createRestAccountConnector,
+  missingConnectorFunctionsOf,
+  securityChangeFromResponse,
+  securityFromResponse,
+  useAccount
+};
+//# sourceMappingURL=account.js.map

package/dist/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;"}

package/dist/adapters/i18next.js

@@ -0,0 +1,7 @@
+function translateWithI18next(i18n) {
+  return (namespace, key, values) => i18n.exists(key, { ns: namespace }) ? i18n.t(key, { ns: namespace, ...values }) : void 0;
+}
+export {
+  translateWithI18next
+};
+//# sourceMappingURL=i18next.js.map

package/dist/adapters/i18next.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18next.js","sources":["../../src/adapters/i18next.js"],"sourcesContent":["// Los textos del paquete desde i18next, para un proyecto que ya lo usa: el proyecto escribe sus textos en sus\n// namespaces de siempre (table, common, problems, validation, dictionaries) y lo que no escriba sale del paquete.\n//\n//   <ToolkitProvider language={i18n.resolvedLanguage} onLanguageChange={(language) => i18n.changeLanguage(language)}\n//                    translate={translateWithI18next(i18n)}>\n//\n// No importa i18next: recibe la instancia del proyecto.\n//\n// Funciones puras, no renderizan: function (regla de la casa).\n\n/**\n * El traductor de ToolkitProvider sobre una instancia de i18next: si la llave existe en el proyecto regresa su texto;\n * si no, undefined, y el paquete usa el suyo.\n *\n * @param {{exists: Function, t: Function}} i18n la instancia de i18next del proyecto\n * @returns {(namespace: string, key: string, values?: object) => string|undefined}\n */\nexport function translateWithI18next(i18n) {\n    return (namespace, key, values) => (i18n.exists(key, {ns: namespace}) ? i18n.t(key, {ns: namespace, ...values}) : undefined);\n}\n"],"names":[],"mappings":"AAiBO,SAAS,qBAAqB,MAAM;AACvC,SAAO,CAAC,WAAW,KAAK,WAAY,KAAK,OAAO,KAAK,EAAC,IAAI,UAAS,CAAC,IAAI,KAAK,EAAE,KAAK,EAAC,IAAI,WAAW,GAAG,OAAM,CAAC,IAAI;AACtH;"}

package/dist/adapters/nextNavigation.js

@@ -0,0 +1,36 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import { useCallback } from "react";
+import NextLink from "next/link";
+import { usePathname, useRouter } from "next/navigation";
+function useNextNavigate() {
+  const router = useRouter();
+  return useCallback((to, options) => {
+    if (typeof to === "number") {
+      if (to < 0) {
+        router.back();
+      } else {
+        router.forward();
+      }
+      return;
+    }
+    if (options?.replace) {
+      router.replace(to);
+    } else {
+      router.push(to);
+    }
+  }, [router]);
+}
+function useNextLocation() {
+  const pathname = usePathname();
+  const search = typeof window === "undefined" ? "" : window.location.search;
+  return { pathname, search, key: `${pathname}${search}` };
+}
+function NextToLink({ to, href, ...linkProps }) {
+  return /* @__PURE__ */ jsx(NextLink, { href: to ?? href, ...linkProps });
+}
+const nextNavigation = Object.freeze({ useNavigate: useNextNavigate, useLocation: useNextLocation, Link: NextToLink });
+export {
+  nextNavigation
+};
+//# sourceMappingURL=nextNavigation.js.map

package/dist/adapters/nextNavigation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextNavigation.js","sources":["../../src/adapters/nextNavigation.jsx"],"sourcesContent":["// La navegación de Next.js (App Router) para ToolkitProvider (@stackcraftmx/calcita/next): las tres piezas que piden los\n// componentes del framework, sacadas de next/navigation y next/link.\n//\n//   <ToolkitProvider navigation={nextNavigation}>   (dentro de un componente de cliente: el de los proveedores)\n//\n// Decisiones, con su porqué:\n//   - search se lee del navegador al pintar y NO con useSearchParams: useSearchParams obliga a envolver la página en\n//     <Suspense> (si no, `next build` truena con «Missing Suspense boundary»). En el servidor no hay búsqueda: ''.\n//   - useNavigate(-1) regresa (router.back): BackButton lo usa cuando hay historial.\n//   - Link recibe `to` (como los componentes del framework, y como MUI con component={Link}) y se lo da a next/link como\n//     href.\n// OJO: el «Regresar» que dice a dónde regresa (navigationTrail) lee el índice del historial que pone react-router; con\n// Next no existe, así que BackButton regresa a la última lista anotada o a fallbackTo.\n//\n// Genéricos del paquete: function (regla de la casa).\nimport {useCallback} from 'react';\nimport NextLink from 'next/link';\nimport {usePathname, useRouter} from 'next/navigation';\n\n/**\n * navigate(to) del framework con el router de Next.\n *\n * @returns {(to: string|number, options?: {replace?: boolean}) => void}\n */\nfunction useNextNavigate() {\n    const router = useRouter();\n    return useCallback((to, options) => {\n        if (typeof to === 'number') {\n            if (to < 0) {\n                router.back();\n            } else {\n                router.forward();\n            }\n            return;\n        }\n        if (options?.replace) {\n            router.replace(to);\n        } else {\n            router.push(to);\n        }\n    }, [router]);\n}\n\n/**\n * {pathname, search, key} de la página abierta.\n *\n * @returns {{pathname: string, search: string, key: string}}\n */\nfunction useNextLocation() {\n    const pathname = usePathname();\n    const search = typeof window === 'undefined' ? '' : window.location.search;\n    return {pathname, search, key: `${pathname}${search}`};\n}\n\n/**\n * next/link con la prop `to` del framework.\n *\n * @param {{to?: string, href?: string}} props\n */\nfunction NextToLink({to, href, ...linkProps}) {\n    return <NextLink href={to ?? href} {...linkProps} />;\n}\n\nexport const nextNavigation = Object.freeze({useNavigate: useNextNavigate, useLocation: useNextLocation, Link: NextToLink});\n"],"names":[],"mappings":";;;;;AAwBA,SAAS,kBAAkB;AACvB,QAAM,SAAS,UAAA;AACf,SAAO,YAAY,CAAC,IAAI,YAAY;AAChC,QAAI,OAAO,OAAO,UAAU;AACxB,UAAI,KAAK,GAAG;AACR,eAAO,KAAA;AAAA,MACX,OAAO;AACH,eAAO,QAAA;AAAA,MACX;AACA;AAAA,IACJ;AACA,QAAI,SAAS,SAAS;AAClB,aAAO,QAAQ,EAAE;AAAA,IACrB,OAAO;AACH,aAAO,KAAK,EAAE;AAAA,IAClB;AAAA,EACJ,GAAG,CAAC,MAAM,CAAC;AACf;AAOA,SAAS,kBAAkB;AACvB,QAAM,WAAW,YAAA;AACjB,QAAM,SAAS,OAAO,WAAW,cAAc,KAAK,OAAO,SAAS;AACpE,SAAO,EAAC,UAAU,QAAQ,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAA;AACvD;AAOA,SAAS,WAAW,EAAC,IAAI,MAAM,GAAG,aAAY;AAC1C,6BAAQ,UAAA,EAAS,MAAM,MAAM,MAAO,GAAG,WAAW;AACtD;AAEO,MAAM,iBAAiB,OAAO,OAAO,EAAC,aAAa,iBAAiB,aAAa,iBAAiB,MAAM,WAAA,CAAW;"}

package/dist/adapters/reactRouter.js

@@ -0,0 +1,7 @@
+"use client";
+import { Link, useLocation, useNavigate } from "react-router";
+const reactRouterNavigation = Object.freeze({ useNavigate, useLocation, Link });
+export {
+  reactRouterNavigation
+};
+//# sourceMappingURL=reactRouter.js.map

package/dist/adapters/reactRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactRouter.js","sources":["../../src/adapters/reactRouter.js"],"sourcesContent":["// La navegación de react-router para ToolkitProvider: tiene justo las tres piezas que piden los componentes del paquete.\n//\n//   <ToolkitProvider navigation={reactRouterNavigation}>\n//\n// Va dentro del router (RouterProvider o BrowserRouter), porque sus hooks leen el router.\nimport {Link, useLocation, useNavigate} from 'react-router';\n\nexport const reactRouterNavigation = Object.freeze({useNavigate, useLocation, Link});\n"],"names":[],"mappings":";;AAOY,MAAC,wBAAwB,OAAO,OAAO,EAAC,aAAa,aAAa,KAAI,CAAC;"}

package/dist/adapters/reactRouterRoutes.js

@@ -0,0 +1,49 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import { useEffect } from "react";
+import { useRouteError, isRouteErrorResponse, useNavigation, useOutletContext, Outlet } from "react-router";
+import RequireAccess from "../access/RequireAccess.js";
+import { isStaleChunkError, recoverFromStaleChunk } from "../api/staleChunks.js";
+import { createLogger } from "../observability/logger.js";
+import ErrorPage, { ERROR_PAGE_KIND } from "../ui/layout/ErrorPage.js";
+const log = createLogger("navigation");
+const NOT_FOUND_STATUS = 404;
+function AccessOutlet({ access, fallback }) {
+  const parentContext = useOutletContext();
+  return /* @__PURE__ */ jsx(RequireAccess, { access, fallback, children: /* @__PURE__ */ jsx(Outlet, { context: parentContext }) });
+}
+function withAccess(access, routes, { fallback } = {}) {
+  return { element: /* @__PURE__ */ jsx(AccessOutlet, { access, fallback }), children: routes };
+}
+function useIsNavigating() {
+  return useNavigation().state === "loading";
+}
+function withChunkRecovery(routes) {
+  return routes.map((route) => ({
+    ...route,
+    ...typeof route.lazy === "function" && { lazy: () => route.lazy().catch(recoverFromStaleChunk) },
+    ...route.children && { children: withChunkRecovery(route.children) }
+  }));
+}
+function reloadPage() {
+  window.location.reload();
+}
+function RouteErrorScreen({ onError, ...errorPageProps } = {}) {
+  const error = useRouteError();
+  const isNotFound = isRouteErrorResponse(error) && error.status === NOT_FOUND_STATUS;
+  const kind = isNotFound ? ERROR_PAGE_KIND.notFound : isStaleChunkError(error) ? ERROR_PAGE_KIND.newVersion : ERROR_PAGE_KIND.serverError;
+  useEffect(() => {
+    if (!isNotFound) {
+      log.error("una pantalla no se pudo pintar", { name: error?.name, message: error?.message ?? String(error) });
+    }
+    onError?.(error, kind);
+  }, [error, isNotFound]);
+  return /* @__PURE__ */ jsx(ErrorPage, { kind, onRetry: isNotFound ? void 0 : reloadPage, ...errorPageProps });
+}
+export {
+  RouteErrorScreen,
+  useIsNavigating,
+  withAccess,
+  withChunkRecovery
+};
+//# sourceMappingURL=reactRouterRoutes.js.map

package/dist/adapters/reactRouterRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactRouterRoutes.js","sources":["../../src/adapters/reactRouterRoutes.jsx"],"sourcesContent":["// Lo que conecta los permisos y la barra con react-router (@stackcraftmx/calcita/react-router):\n//\n//   withAccess(access, routes)   un grupo de rutas con la regla del menu.js de su módulo: quien no puede ve la página de\n//                                «sin permiso» en lugar de la pantalla\n//   useIsNavigating()            la pantalla siguiente se está descargando (rutas lazy): para la rayita de AppLayout\n//   withChunkRecovery(routes)    las rutas lazy recargan UNA vez si su archivo es de una versión que ya no existe\n//   RouteErrorScreen             la pantalla de error de una ruta (errorElement / ErrorBoundary del router): «Hay una\n//                                versión nueva» o «Algo falló», con su botón para recargar\n//\n//   import {access} from '@/modules/users/menu.js';\n//   import {routes} from '@/modules/users/routes.js';\n//   children: [withAccess(access, routes)]\n//\n// OJO: useIsNavigating solo funciona con un router de datos (createBrowserRouter); con <BrowserRouter> no hay estado de\n// navegación.\n//\n// Genéricos del paquete: function (regla de la casa).\nimport {useEffect} from 'react';\nimport {Outlet, isRouteErrorResponse, useNavigation, useOutletContext, useRouteError} from 'react-router';\n\nimport RequireAccess from '@/access/RequireAccess.jsx';\nimport {isStaleChunkError, recoverFromStaleChunk} from '@/api/staleChunks.js';\nimport {createLogger} from '@/observability/logger.js';\nimport ErrorPage, {ERROR_PAGE_KIND} from '@/ui/layout/ErrorPage.jsx';\n\nconst log = createLogger('navigation');\nconst NOT_FOUND_STATUS = 404;\n\n/**\n * El grupo con permiso: RequireAccess alrededor de las rutas hijas.\n *\n * OJO, trampa pagada: un <Outlet /> nuevo corta el contexto que la ruta de arriba le pasa a sus hijas (<Outlet\n * context={...} />, useOutletContext); el inicio de los ejemplos tronaba sin el menú. Aquí se pasa tal cual.\n *\n * @param {{access: object|undefined, fallback?: import('react').ReactNode}} props\n */\nfunction AccessOutlet({access, fallback}) {\n    const parentContext = useOutletContext();\n    return <RequireAccess access={access} fallback={fallback}><Outlet context={parentContext} /></RequireAccess>;\n}\n\n/**\n * Un grupo de rutas sin camino propio que pide permiso antes de pintar a sus hijas.\n *\n * @param {object|undefined} access la regla (accessRules.js); sin ella, el grupo es de todos\n * @param {object[]} routes las rutas del módulo\n * @param {{fallback?: import('react').ReactNode}} [options] fallback: lo que ve quien no tiene permiso; por omisión la página\n *     de «sin permiso» de la casa (con ErrorPage y sus props se arma una propia: un botón para pedir acceso)\n * @returns {object} la ruta de react-router\n */\nexport function withAccess(access, routes, {fallback} = {}) {\n    return {element: <AccessOutlet access={access} fallback={fallback} />, children: routes};\n}\n\n/**\n * ¿Se está descargando la pantalla siguiente?\n *\n * @returns {boolean}\n */\nexport function useIsNavigating() {\n    return useNavigation().state === 'loading';\n}\n\n/**\n * Las rutas con la recuperación de archivos viejos (staleChunks.js): cada `lazy`, también la de las hijas, recarga la\n * página UNA vez si el archivo de su pantalla ya no existe porque se publicó otra versión. Lo demás de la ruta no cambia.\n *\n * @param {object[]} routes\n * @returns {object[]}\n */\nexport function withChunkRecovery(routes) {\n    return routes.map((route) => ({\n        ...route,\n        ...(typeof route.lazy === 'function' && {lazy: () => route.lazy().catch(recoverFromStaleChunk)}),\n        ...(route.children && {children: withChunkRecovery(route.children)}),\n    }));\n}\n\n/** Recargar la página: trae la versión publicada. */\nfunction reloadPage() {\n    window.location.reload();\n}\n\n/**\n * La pantalla de error de una ruta (la que el router enseña cuando la pantalla truena o no se pudo descargar): una ruta\n * que no existe es «Esta página no existe»; un archivo de otra versión, «Hay una versión nueva»; lo demás, «Algo falló de\n * nuestro lado». Las dos últimas con su botón para recargar.\n *\n *   createBrowserRouter([{path: '/', element: <App />, ErrorBoundary: RouteErrorScreen, children: [...]}])\n *\n * Con props (como errorElement) se extiende igual que ErrorPage, y onError recibe lo que tronó (para Sentry o su aviso):\n *   {errorElement: <RouteErrorScreen onError={(error) => reportError(error)} extraActions={<SupportButton />} />}\n *\n * @param {object} [props] las de ErrorPage (extraActions, actions, children, icon, homePath, onGoHome, texts) y:\n * @param {(error: unknown, kind: string) => void} [props.onError] cada error que llega aquí, con su tipo (ERROR_PAGE_KIND)\n */\nexport function RouteErrorScreen({onError, ...errorPageProps} = {}) {\n    const error = useRouteError();\n    const isNotFound = isRouteErrorResponse(error) && error.status === NOT_FOUND_STATUS;\n    const kind = isNotFound ? ERROR_PAGE_KIND.notFound : (isStaleChunkError(error) ? ERROR_PAGE_KIND.newVersion : ERROR_PAGE_KIND.serverError);\n\n    useEffect(() => {\n        if (!isNotFound) {\n            log.error('una pantalla no se pudo pintar', {name: error?.name, message: error?.message ?? String(error)});\n        }\n        onError?.(error, kind);\n        // eslint-disable-next-line react-hooks/exhaustive-deps\n    }, [error, isNotFound]);\n\n    return <ErrorPage kind={kind} onRetry={isNotFound ? undefined : reloadPage} {...errorPageProps} />;\n}\n"],"names":[],"mappings":";;;;;;;;AAyBA,MAAM,MAAM,aAAa,YAAY;AACrC,MAAM,mBAAmB;AAUzB,SAAS,aAAa,EAAC,QAAQ,YAAW;AACtC,QAAM,gBAAgB,iBAAA;AACtB,SAAO,oBAAC,iBAAc,QAAgB,UAAoB,8BAAC,QAAA,EAAO,SAAS,eAAe,EAAA,CAAE;AAChG;AAWO,SAAS,WAAW,QAAQ,QAAQ,EAAC,SAAA,IAAY,CAAA,GAAI;AACxD,SAAO,EAAC,SAAS,oBAAC,cAAA,EAAa,QAAgB,SAAA,CAAoB,GAAI,UAAU,OAAA;AACrF;AAOO,SAAS,kBAAkB;AAC9B,SAAO,cAAA,EAAgB,UAAU;AACrC;AASO,SAAS,kBAAkB,QAAQ;AACtC,SAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC1B,GAAG;AAAA,IACH,GAAI,OAAO,MAAM,SAAS,cAAc,EAAC,MAAM,MAAM,MAAM,KAAA,EAAO,MAAM,qBAAqB,EAAA;AAAA,IAC7F,GAAI,MAAM,YAAY,EAAC,UAAU,kBAAkB,MAAM,QAAQ,EAAA;AAAA,EAAC,EACpE;AACN;AAGA,SAAS,aAAa;AAClB,SAAO,SAAS,OAAA;AACpB;AAeO,SAAS,iBAAiB,EAAC,SAAS,GAAG,eAAA,IAAkB,CAAA,GAAI;AAChE,QAAM,QAAQ,cAAA;AACd,QAAM,aAAa,qBAAqB,KAAK,KAAK,MAAM,WAAW;AACnE,QAAM,OAAO,aAAa,gBAAgB,WAAY,kBAAkB,KAAK,IAAI,gBAAgB,aAAa,gBAAgB;AAE9H,YAAU,MAAM;AACZ,QAAI,CAAC,YAAY;AACb,UAAI,MAAM,kCAAkC,EAAC,MAAM,OAAO,MAAM,SAAS,OAAO,WAAW,OAAO,KAAK,EAAA,CAAE;AAAA,IAC7G;AACA,cAAU,OAAO,IAAI;AAAA,EAEzB,GAAG,CAAC,OAAO,UAAU,CAAC;AAEtB,SAAO,oBAAC,aAAU,MAAY,SAAS,aAAa,SAAY,YAAa,GAAG,gBAAgB;AACpG;"}

package/dist/api/ApiError.js

@@ -0,0 +1,58 @@
+import { problemMessage, problemTitle } from "../problems.js";
+const API_ERROR_STATUS = Object.freeze({
+  // no hubo respuesta: red caída, servidor apagado o se acabó el tiempo
+  offline: 0,
+  unauthenticated: 401,
+  forbidden: 403,
+  notFound: 404,
+  // el registro no está en el estado que la acción necesita (p. ej. cerrar un mes que no está completo)
+  conflict: 409,
+  // la liga ya venció, ya se usó o no existe
+  gone: 410,
+  validation: 422,
+  tooManyRequests: 429
+});
+class ApiError extends Error {
+  /**
+   * @param {object} details
+   * @param {number} details.status el status HTTP; 0 si no hubo respuesta
+   * @param {object|null} [details.problem] el cuerpo RFC 9457 del servidor ({title, detail, code, errors, request_id})
+   * @param {boolean} [details.translatedByServer] false si la respuesta llegó en otro idioma que el pedido
+   * @param {number|null} [details.retryAfterSeconds] 429: los segundos del header Retry-After
+   */
+  constructor({ status, problem = null, translatedByServer = true, retryAfterSeconds = null }) {
+    super(problemMessage(problem, status, { translatedByServer }));
+    this.name = "ApiError";
+    this.status = status;
+    this.problem = problem ?? {};
+    this.code = problem?.code ?? (status === API_ERROR_STATUS.offline ? "offline" : null);
+    this.title = problemTitle(problem, status, { translatedByServer });
+    this.requestId = problem?.request_id ?? null;
+    this.retryAfterSeconds = retryAfterSeconds;
+  }
+  /** No hubo respuesta del servidor (red caída, servidor apagado, se acabó el tiempo). */
+  get isOffline() {
+    return this.status === API_ERROR_STATUS.offline;
+  }
+  /** Sin sesión, o se venció mientras se usaba la app. */
+  get isUnauthenticated() {
+    return this.status === API_ERROR_STATUS.unauthenticated;
+  }
+  /** El registro no está en el estado que la acción necesita. */
+  get isConflict() {
+    return this.status === API_ERROR_STATUS.conflict;
+  }
+  /** La liga venció, ya se usó o no existe. */
+  get isGone() {
+    return this.status === API_ERROR_STATUS.gone;
+  }
+  /** Errores de un formulario: los mensajes por campo van en problem.errors (fieldErrorsOf). */
+  get isValidation() {
+    return this.status === API_ERROR_STATUS.validation;
+  }
+}
+export {
+  API_ERROR_STATUS,
+  ApiError
+};
+//# sourceMappingURL=ApiError.js.map

package/dist/api/ApiError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiError.js","sources":["../../src/api/ApiError.js"],"sourcesContent":["// El error de cualquier petición al servidor, con la misma forma siempre: un error del servidor (RFC 9457), una red caída\n// o un archivo que llegó cortado. Así la pantalla tiene UNA forma de error que enseñar y no dos.\n//\n// El mensaje ya viene en el idioma de la persona: si el servidor lo mandó traducido (title y detail en el idioma de\n// Accept-Language) se usa tal cual; si no (sin red, un 502 del proxy en HTML, una respuesta en otro idioma), el texto\n// genérico del paquete según el status (problems.js).\n//\n// Lo usan los formularios (applyServerProblem: los errores de un 422 van a su campo), toastProblem, la tabla, las\n// descargas y la subida de archivos.\n//\n// Una clase porque es un Error (trae su pila y `instanceof ApiError` funciona); lo demás del paquete son funciones.\nimport {problemMessage, problemTitle} from '@/problems.js';\n\n/** Los status que la pantalla suele tratar distinto, con su nombre. */\nexport const API_ERROR_STATUS = Object.freeze({\n    // no hubo respuesta: red caída, servidor apagado o se acabó el tiempo\n    offline: 0,\n    unauthenticated: 401,\n    forbidden: 403,\n    notFound: 404,\n    // el registro no está en el estado que la acción necesita (p. ej. cerrar un mes que no está completo)\n    conflict: 409,\n    // la liga ya venció, ya se usó o no existe\n    gone: 410,\n    validation: 422,\n    tooManyRequests: 429,\n});\n\nexport class ApiError extends Error {\n    /**\n     * @param {object} details\n     * @param {number} details.status el status HTTP; 0 si no hubo respuesta\n     * @param {object|null} [details.problem] el cuerpo RFC 9457 del servidor ({title, detail, code, errors, request_id})\n     * @param {boolean} [details.translatedByServer] false si la respuesta llegó en otro idioma que el pedido\n     * @param {number|null} [details.retryAfterSeconds] 429: los segundos del header Retry-After\n     */\n    constructor({status, problem = null, translatedByServer = true, retryAfterSeconds = null}) {\n        super(problemMessage(problem, status, {translatedByServer}));\n        this.name = 'ApiError';\n        this.status = status;\n        this.problem = problem ?? {};\n        this.code = problem?.code ?? (status === API_ERROR_STATUS.offline ? 'offline' : null);\n        this.title = problemTitle(problem, status, {translatedByServer});\n        // el id con que el servidor guardó el error en su bitácora: lo que se le pasa a soporte\n        this.requestId = problem?.request_id ?? null;\n        this.retryAfterSeconds = retryAfterSeconds;\n    }\n\n    /** No hubo respuesta del servidor (red caída, servidor apagado, se acabó el tiempo). */\n    get isOffline() {\n        return this.status === API_ERROR_STATUS.offline;\n    }\n\n    /** Sin sesión, o se venció mientras se usaba la app. */\n    get isUnauthenticated() {\n        return this.status === API_ERROR_STATUS.unauthenticated;\n    }\n\n    /** El registro no está en el estado que la acción necesita. */\n    get isConflict() {\n        return this.status === API_ERROR_STATUS.conflict;\n    }\n\n    /** La liga venció, ya se usó o no existe. */\n    get isGone() {\n        return this.status === API_ERROR_STATUS.gone;\n    }\n\n    /** Errores de un formulario: los mensajes por campo van en problem.errors (fieldErrorsOf). */\n    get isValidation() {\n        return this.status === API_ERROR_STATUS.validation;\n    }\n}\n"],"names":[],"mappings":";AAcY,MAAC,mBAAmB,OAAO,OAAO;AAAA;AAAA,EAE1C,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,UAAU;AAAA;AAAA,EAEV,UAAU;AAAA;AAAA,EAEV,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,iBAAiB;AACrB,CAAC;AAEM,MAAM,iBAAiB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQhC,YAAY,EAAC,QAAQ,UAAU,MAAM,qBAAqB,MAAM,oBAAoB,KAAI,GAAG;AACvF,UAAM,eAAe,SAAS,QAAQ,EAAC,mBAAkB,CAAC,CAAC;AAC3D,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,UAAU,WAAW,CAAA;AAC1B,SAAK,OAAO,SAAS,SAAS,WAAW,iBAAiB,UAAU,YAAY;AAChF,SAAK,QAAQ,aAAa,SAAS,QAAQ,EAAC,mBAAkB,CAAC;AAE/D,SAAK,YAAY,SAAS,cAAc;AACxC,SAAK,oBAAoB;AAAA,EAC7B;AAAA;AAAA,EAGA,IAAI,YAAY;AACZ,WAAO,KAAK,WAAW,iBAAiB;AAAA,EAC5C;AAAA;AAAA,EAGA,IAAI,oBAAoB;AACpB,WAAO,KAAK,WAAW,iBAAiB;AAAA,EAC5C;AAAA;AAAA,EAGA,IAAI,aAAa;AACb,WAAO,KAAK,WAAW,iBAAiB;AAAA,EAC5C;AAAA;AAAA,EAGA,IAAI,SAAS;AACT,WAAO,KAAK,WAAW,iBAAiB;AAAA,EAC5C;AAAA;AAAA,EAGA,IAAI,eAAe;AACf,WAAO,KAAK,WAAW,iBAAiB;AAAA,EAC5C;AACJ;"}

package/dist/api/createApiClient.js

@@ -0,0 +1,256 @@
+import { ApiError, API_ERROR_STATUS } from "./ApiError.js";
+import { fileNameFromContentDisposition, XLSX_CONTENT_TYPE, isCompleteZip } from "../files.js";
+import { CSRF_TOKEN_MISMATCH_STATUS } from "../laravel/csrfRetry.js";
+import { createLogger } from "../observability/logger.js";
+import { reportPublishedBuild } from "../observability/publishedBuild.js";
+import { toolkitSettings, DEFAULT_LANGUAGE } from "../toolkit/toolkitSettings.js";
+const log = createLogger("api");
+const API_RESPONSE_PARSE = Object.freeze({ json: "json", blob: "blob", response: "response" });
+const DEFAULT_TIMEOUT_MILLISECONDS = 6e4;
+const NO_TIMEOUT = 0;
+const DEFAULT_PUBLISHED_BUILD_HEADER = "X-Frontend-Build";
+const NO_CONTENT_STATUS = 204;
+const SERVER_ERROR_STATUS = 500;
+function apiUrlOf(baseUrl, path, params) {
+  const url = /^https?:/i.test(path) ? path : `${baseUrl}${path}`;
+  const query = new URLSearchParams();
+  for (const [name, value] of Object.entries(params ?? {})) {
+    for (const item of [].concat(value)) {
+      if (item !== void 0 && item !== null) {
+        query.append(name, String(item));
+      }
+    }
+  }
+  const queryText = query.toString();
+  if (!queryText) {
+    return url;
+  }
+  return `${url}${url.includes("?") ? "&" : "?"}${queryText}`;
+}
+function isRawBody(body) {
+  return typeof FormData !== "undefined" && body instanceof FormData || typeof Blob !== "undefined" && body instanceof Blob || body instanceof URLSearchParams || body instanceof ArrayBuffer;
+}
+function readCookie(cookieName) {
+  if (typeof document === "undefined") {
+    return null;
+  }
+  const prefix = `${cookieName}=`;
+  const cookie = document.cookie.split(";").map((part) => part.trim()).find((part) => part.startsWith(prefix));
+  return cookie ? decodeURIComponent(cookie.slice(prefix.length)) : null;
+}
+function isSameOrigin(url) {
+  if (typeof window === "undefined" || !/^https?:/i.test(url)) {
+    return true;
+  }
+  return new URL(url).origin === window.location.origin;
+}
+function retryAfterSecondsOf(retryAfterHeader) {
+  if (!retryAfterHeader) {
+    return null;
+  }
+  if (/^\d+$/.test(retryAfterHeader.trim())) {
+    return Number(retryAfterHeader.trim());
+  }
+  const retryAt = Date.parse(retryAfterHeader);
+  return Number.isNaN(retryAt) ? null : Math.max(0, Math.ceil((retryAt - Date.now()) / 1e3));
+}
+function toProblemOrNull(toProblem, body, response) {
+  const problem = body === null ? null : toProblem(body, response);
+  return problem && typeof problem === "object" && !Array.isArray(problem) ? problem : null;
+}
+async function readProblem(response) {
+  try {
+    const body = JSON.parse(await response.text());
+    return body && typeof body === "object" && !Array.isArray(body) ? body : null;
+  } catch {
+    return null;
+  }
+}
+function combinedSignalOf(signal, timeoutMilliseconds) {
+  const signals = [signal, timeoutMilliseconds > 0 ? AbortSignal.timeout(timeoutMilliseconds) : null].filter(Boolean);
+  if (signals.length < 2) {
+    return signals[0];
+  }
+  return AbortSignal.any(signals);
+}
+async function readBlobWithProgress(response, onDownloadProgress) {
+  if (!onDownloadProgress || !response.body) {
+    return response.blob();
+  }
+  const total = Number(response.headers.get("content-length")) || null;
+  const reader = response.body.getReader();
+  const chunks = [];
+  let loaded = 0;
+  for (let part = await reader.read(); !part.done; part = await reader.read()) {
+    chunks.push(part.value);
+    loaded += part.value.byteLength;
+    onDownloadProgress({ loaded, total });
+  }
+  return new Blob(chunks, { type: response.headers.get("content-type") ?? "" });
+}
+function createApiClient({
+  baseUrl = "",
+  credentials = "same-origin",
+  getToken,
+  headers: commonHeaders = {},
+  publishedBuildHeader = DEFAULT_PUBLISHED_BUILD_HEADER,
+  csrf = null,
+  timeoutMilliseconds: defaultTimeoutMilliseconds = DEFAULT_TIMEOUT_MILLISECONDS,
+  onUnauthenticated,
+  onRequest,
+  onResponse,
+  onError,
+  toProblem = (body) => body,
+  mapResponse = (body) => body,
+  fetch: fetchImplementation
+} = {}) {
+  const notify = (eventName, handler, ...eventArguments) => {
+    try {
+      handler?.(...eventArguments);
+    } catch (error) {
+      log.error(`el evento ${eventName} del proyecto tronó`, { message: error?.message });
+    }
+  };
+  const fetchOf = () => fetchImplementation ?? globalThis.fetch;
+  const csrfCookieName = csrf?.cookieName ?? "XSRF-TOKEN";
+  const csrfHeaderName = csrf?.headerName ?? "X-XSRF-TOKEN";
+  const headersOf = (url, body, extraHeaders) => {
+    const headers = {
+      Accept: "application/json",
+      "Accept-Language": toolkitSettings().language ?? DEFAULT_LANGUAGE,
+      ...commonHeaders,
+      ...extraHeaders
+    };
+    if (body !== void 0 && !isRawBody(body)) {
+      headers["Content-Type"] = "application/json";
+    }
+    const token = getToken?.();
+    if (token) {
+      headers.Authorization = `Bearer ${token}`;
+    }
+    const csrfToken = csrf && isSameOrigin(url) ? readCookie(csrfCookieName) : null;
+    if (csrfToken) {
+      headers[csrfHeaderName] = csrfToken;
+    }
+    return headers;
+  };
+  const send = async (method, url, { body, signal, headers, timeoutMilliseconds }) => {
+    const finalHeaders = headersOf(url, body, headers);
+    try {
+      return await fetchOf()(url, {
+        method,
+        headers: finalHeaders,
+        body: body === void 0 || isRawBody(body) ? body : JSON.stringify(body),
+        credentials,
+        signal: combinedSignalOf(signal, timeoutMilliseconds)
+      });
+    } catch (error) {
+      if (signal?.aborted) {
+        throw error;
+      }
+      const reason = error?.name === "TimeoutError" ? "se acabó el tiempo" : "la petición no llegó al servidor";
+      log.error(reason, { method, url, cause: error?.name });
+      throw new ApiError({ status: API_ERROR_STATUS.offline });
+    }
+  };
+  const request = async (method, path, options = {}) => {
+    const url = apiUrlOf(baseUrl, path, options.params);
+    try {
+      return await requestOnce(method, url, options);
+    } catch (error) {
+      if (error instanceof ApiError) {
+        notify("onError", onError, error, { method, url });
+      }
+      throw error;
+    }
+  };
+  const requestOnce = async (method, url, {
+    body,
+    signal,
+    headers,
+    parse = API_RESPONSE_PARSE.json,
+    skipUnauthenticatedHandler = false,
+    timeoutMilliseconds = defaultTimeoutMilliseconds
+  } = {}) => {
+    notify("onRequest", onRequest, { method, url });
+    const startedAt = Date.now();
+    let response = await send(method, url, { body, signal, headers, timeoutMilliseconds });
+    if (response.status === CSRF_TOKEN_MISMATCH_STATUS && csrf?.refreshPath) {
+      log.info("token CSRF vencido: se renueva y se reintenta", { method, url });
+      await send("GET", apiUrlOf(baseUrl, csrf.refreshPath), { signal, timeoutMilliseconds });
+      response = await send(method, url, { body, signal, headers, timeoutMilliseconds });
+    }
+    notify("onResponse", onResponse, { method, url, status: response.status, durationMilliseconds: Date.now() - startedAt });
+    if (publishedBuildHeader) {
+      reportPublishedBuild(response.headers.get(publishedBuildHeader));
+    }
+    if (!response.ok) {
+      const problem = toProblemOrNull(toProblem, await readProblem(response), response);
+      const requestedLanguage = headersOf(url, void 0, headers)["Accept-Language"];
+      const responseLanguage = response.headers.get("content-language");
+      const apiError = new ApiError({
+        status: response.status,
+        problem,
+        translatedByServer: !responseLanguage || responseLanguage.startsWith(requestedLanguage),
+        retryAfterSeconds: retryAfterSecondsOf(response.headers.get("retry-after"))
+      });
+      log[response.status >= SERVER_ERROR_STATUS ? "error" : "debug"](`${method} ${url} → ${response.status}`, {
+        code: apiError.code,
+        requestId: apiError.requestId ?? response.headers.get("x-request-id")
+      });
+      if (apiError.isUnauthenticated && !skipUnauthenticatedHandler) {
+        onUnauthenticated?.(apiError);
+      }
+      throw apiError;
+    }
+    if (parse === API_RESPONSE_PARSE.response) {
+      return response;
+    }
+    if (parse === API_RESPONSE_PARSE.blob) {
+      return response.blob();
+    }
+    if (response.status === NO_CONTENT_STATUS) {
+      return null;
+    }
+    const text = await response.text();
+    if (!text) {
+      return null;
+    }
+    let json;
+    try {
+      json = JSON.parse(text);
+    } catch {
+      log.error(`${method} ${url} respondió algo que no es JSON`, { contentType: response.headers.get("content-type") });
+      throw new ApiError({ status: SERVER_ERROR_STATUS });
+    }
+    return mapResponse(json, { method, url });
+  };
+  const download = async (path, { params, signal, onDownloadProgress, fallbackFileName = "descarga", timeoutMilliseconds = NO_TIMEOUT } = {}) => {
+    const response = await request("GET", path, { params, signal, parse: API_RESPONSE_PARSE.response, timeoutMilliseconds });
+    const blob = await readBlobWithProgress(response, onDownloadProgress);
+    const fileName = fileNameFromContentDisposition(response.headers.get("content-disposition"), fallbackFileName);
+    const contentType = String(response.headers.get("content-type") ?? "").split(";")[0].trim();
+    if (contentType === XLSX_CONTENT_TYPE && !await isCompleteZip(blob)) {
+      const requestId = response.headers.get("x-request-id");
+      log.error(`GET ${path} → el Excel llegó incompleto: el servidor falló a media escritura`, { requestId, fileName });
+      throw new ApiError({ status: SERVER_ERROR_STATUS, problem: { request_id: requestId } });
+    }
+    return { blob, fileName };
+  };
+  return {
+    request,
+    get: (path, options) => request("GET", path, options),
+    post: (path, body, options) => request("POST", path, { ...options, body }),
+    put: (path, body, options) => request("PUT", path, { ...options, body }),
+    patch: (path, body, options) => request("PATCH", path, { ...options, body }),
+    delete: (path, options) => request("DELETE", path, options),
+    download
+  };
+}
+export {
+  API_RESPONSE_PARSE,
+  apiUrlOf,
+  createApiClient,
+  retryAfterSecondsOf
+};
+//# sourceMappingURL=createApiClient.js.map

package/dist/api/createApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createApiClient.js","sources":["../../src/api/createApiClient.js"],"sourcesContent":["// La petición de la casa: TODO lo que habla con el servidor pasa por un cliente armado aquí, con fetch del navegador (sin\n// axios ni otra librería). Lo que resuelve UNA vez y no en cada pantalla:\n//   - Accept-Language con el idioma vigente de ToolkitProvider en CADA petición: el servidor responde title y detail ya\n//     traducidos. Cambiar el idioma aplica a la siguiente petición sin recargar.\n//   - errores como ApiError (ApiError.js): el problema RFC 9457 del servidor con el mensaje ya traducido; si la\n//     respuesta llegó en otro idioma (un error que armó nginx), el texto genérico del paquete. Sin red o se acabó el\n//     tiempo: un ApiError con status 0, la misma forma, para que la pantalla no tenga dos formas de error.\n//   - cancelar NO es un error: el AbortError se relanza intacto (quien canceló ya sabe por qué).\n//   - 401 (la sesión se venció a media consulta): avisa a onUnauthenticated, que normalmente lleva a iniciar sesión. Una\n//     petición que espera el 401 (preguntar si hay sesión al arrancar, el login) pasa skipUnauthenticatedHandler.\n//   - el aviso «Hay una versión nueva»: cada respuesta trae en un header qué compilación del front está publicada y se\n//     le entrega a reportPublishedBuild.\n//   - Laravel (Sanctum): con csrf, manda la cookie XSRF-TOKEN en su header (solo al mismo origen) y ante un 419 pide una\n//     cookie nueva y repite la petición UNA vez.\n//   - cuerpo objeto → JSON; FormData, Blob y URLSearchParams van tal cual (el navegador pone su boundary).\n//   - descargas: el Blob y el nombre que mandó el servidor, con avance; un Excel que llegó cortado (el servidor falló a\n//     media escritura después de responder 200) no se entrega.\n//   - eventos hacia afuera, para lo que cada proyecto haga a su manera: onRequest (sale), onResponse (llegó, con su status\n//     y cuánto tardó) y onError (CADA error en un solo lugar: Sentry, un aviso propio, una métrica). Cancelar no es error.\n//     Si un evento del proyecto truena, la petición sigue y se anota en el registro.\n//   - un backend que ya existe y contesta a su manera, sin cambiarlo: toProblem convierte su error a la forma RFC 9457\n//     (Laravel manda {message, errors}) y mapResponse desenvuelve sus respuestas buenas ({data: …}).\n//\n//   const api = createApiClient({baseUrl: '/api/v1', onUnauthenticated: () => navigate('/sign-in')});\n//   const orders = await api.get('/orders', {params: {page: 2}, signal});\n//   await api.post('/orders', {customerId: 7});\n//\n// Se arma uno por proyecto (en su core) y las pantallas lo usan desde su *Api.js.\n//\n// Funciones puras, no renderizan: function (regla de la casa).\nimport {ApiError, API_ERROR_STATUS} from '@/api/ApiError.js';\nimport {XLSX_CONTENT_TYPE, fileNameFromContentDisposition, isCompleteZip} from '@/files.js';\nimport {CSRF_TOKEN_MISMATCH_STATUS} from '@/laravel/csrfRetry.js';\nimport {createLogger} from '@/observability/logger.js';\nimport {reportPublishedBuild} from '@/observability/publishedBuild.js';\nimport {DEFAULT_LANGUAGE, toolkitSettings} from '@/toolkit/toolkitSettings.js';\n\nconst log = createLogger('api');\n\n/** Cómo se lee una respuesta que salió bien. */\nexport const API_RESPONSE_PARSE = Object.freeze({json: 'json', blob: 'blob', response: 'response'});\n\n// Las consultas se cortan a los 60 s; las descargas van sin límite (0): el servidor arma el archivo mientras lo manda y\n// uno grande no cabe en 60 s. No se queda colgada: se cancela desde el panel de descargas.\nconst DEFAULT_TIMEOUT_MILLISECONDS = 60_000;\nconst NO_TIMEOUT = 0;\nconst DEFAULT_PUBLISHED_BUILD_HEADER = 'X-Frontend-Build';\nconst NO_CONTENT_STATUS = 204;\nconst SERVER_ERROR_STATUS = 500;\n\n/**\n * La dirección completa: la base del cliente más el camino, con los parámetros. Un camino que ya trae http(s) va tal cual.\n * Los parámetros vacíos (undefined, null) no viajan; una lista viaja repetida (estado=a&estado=b).\n *\n * @param {string} baseUrl\n * @param {string} path\n * @param {Record<string, unknown>} [params]\n * @returns {string}\n */\nexport function apiUrlOf(baseUrl, path, params) {\n    const url = /^https?:/i.test(path) ? path : `${baseUrl}${path}`;\n    const query = new URLSearchParams();\n    for (const [name, value] of Object.entries(params ?? {})) {\n        for (const item of [].concat(value)) {\n            if (item !== undefined && item !== null) {\n                query.append(name, String(item));\n            }\n        }\n    }\n    const queryText = query.toString();\n    if (!queryText) {\n        return url;\n    }\n    return `${url}${url.includes('?') ? '&' : '?'}${queryText}`;\n}\n\n/**\n * ¿El cuerpo va tal cual? FormData (archivos), Blob y URLSearchParams los arma el navegador con su propio tipo.\n *\n * @param {unknown} body\n * @returns {boolean}\n */\nfunction isRawBody(body) {\n    return (typeof FormData !== 'undefined' && body instanceof FormData)\n        || (typeof Blob !== 'undefined' && body instanceof Blob)\n        || body instanceof URLSearchParams\n        || body instanceof ArrayBuffer;\n}\n\n/**\n * El valor de una cookie del navegador (la XSRF-TOKEN de Laravel), o null.\n *\n * @param {string} cookieName\n * @returns {string|null}\n */\nfunction readCookie(cookieName) {\n    if (typeof document === 'undefined') {\n        return null;\n    }\n    const prefix = `${cookieName}=`;\n    const cookie = document.cookie.split(';').map((part) => part.trim()).find((part) => part.startsWith(prefix));\n    return cookie ? decodeURIComponent(cookie.slice(prefix.length)) : null;\n}\n\n/**\n * ¿La dirección es del mismo origen que la página? El token CSRF solo viaja al servidor propio: mandarlo a otro dominio\n * se lo regalaría.\n *\n * @param {string} url\n * @returns {boolean}\n */\nfunction isSameOrigin(url) {\n    if (typeof window === 'undefined' || !/^https?:/i.test(url)) {\n        return true;\n    }\n    return new URL(url).origin === window.location.origin;\n}\n\n/**\n * Retry-After en segundos: el estándar admite segundos o una fecha HTTP.\n *\n * @param {string|null} retryAfterHeader\n * @returns {number|null}\n */\nexport function retryAfterSecondsOf(retryAfterHeader) {\n    if (!retryAfterHeader) {\n        return null;\n    }\n    if (/^\\d+$/.test(retryAfterHeader.trim())) {\n        return Number(retryAfterHeader.trim());\n    }\n    const retryAt = Date.parse(retryAfterHeader);\n    return Number.isNaN(retryAt) ? null : Math.max(0, Math.ceil((retryAt - Date.now()) / 1000));\n}\n\n/**\n * El cuerpo RFC 9457 de una respuesta de error, o null si no es JSON (un 502 del proxy en HTML).\n *\n * @param {Response} response\n * @returns {Promise<object|null>}\n */\n/**\n * El problema RFC 9457 del cuerpo de error, pasado por el adaptador del proyecto (toProblem). Lo que no sea un objeto\n * cuenta como sin problema (se usa el texto genérico del paquete).\n *\n * @param {(body: any, response: Response) => any} toProblem\n * @param {object|null} body\n * @param {Response} response\n * @returns {object|null}\n */\nfunction toProblemOrNull(toProblem, body, response) {\n    const problem = body === null ? null : toProblem(body, response);\n    return problem && typeof problem === 'object' && !Array.isArray(problem) ? problem : null;\n}\n\nasync function readProblem(response) {\n    try {\n        const body = JSON.parse(await response.text());\n        return body && typeof body === 'object' && !Array.isArray(body) ? body : null;\n    } catch {\n        return null;\n    }\n}\n\n/**\n * La señal de la petición: la de quien la pidió (para cancelar) y la del tiempo máximo, juntas.\n *\n * @param {AbortSignal|undefined} signal\n * @param {number} timeoutMilliseconds 0 = sin límite\n * @returns {AbortSignal|undefined}\n */\nfunction combinedSignalOf(signal, timeoutMilliseconds) {\n    const signals = [signal, timeoutMilliseconds > 0 ? AbortSignal.timeout(timeoutMilliseconds) : null].filter(Boolean);\n    if (signals.length < 2) {\n        return signals[0];\n    }\n    return AbortSignal.any(signals);\n}\n\n/**\n * Lee el cuerpo de una descarga avisando cuánto lleva. total viene en null cuando el servidor arma el archivo al vuelo\n * (sin Content-Length).\n *\n * @param {Response} response\n * @param {((progress: {loaded: number, total: number|null}) => void)|undefined} onDownloadProgress\n * @returns {Promise<Blob>}\n */\nasync function readBlobWithProgress(response, onDownloadProgress) {\n    if (!onDownloadProgress || !response.body) {\n        return response.blob();\n    }\n    const total = Number(response.headers.get('content-length')) || null;\n    const reader = response.body.getReader();\n    const chunks = [];\n    let loaded = 0;\n    for (let part = await reader.read(); !part.done; part = await reader.read()) {\n        chunks.push(part.value);\n        loaded += part.value.byteLength;\n        onDownloadProgress({loaded, total});\n    }\n    return new Blob(chunks, {type: response.headers.get('content-type') ?? ''});\n}\n\n/**\n * Lo que acepta cada petición.\n *\n * @typedef {object} ApiRequestOptions\n * @property {unknown} [body] objeto → JSON; FormData, Blob o URLSearchParams tal cual\n * @property {Record<string, unknown>} [params] los de la dirección (?page=2)\n * @property {AbortSignal} [signal] para cancelar\n * @property {Record<string, string>} [headers]\n * @property {'json'|'blob'|'response'} [parse] cómo se lee la respuesta (API_RESPONSE_PARSE); por omisión JSON\n * @property {boolean} [skipUnauthenticatedHandler] un 401 que se espera (¿hay sesión?, el login)\n * @property {number} [timeoutMilliseconds] el de esta petición\n */\n\n/**\n * Lo que acepta una descarga.\n *\n * @typedef {object} ApiDownloadOptions\n * @property {Record<string, unknown>} [params]\n * @property {AbortSignal} [signal]\n * @property {(progress: {loaded: number, total: number|null}) => void} [onDownloadProgress]\n * @property {string} [fallbackFileName] si el servidor no manda el nombre\n * @property {number} [timeoutMilliseconds] por omisión sin límite\n */\n\n/**\n * El cliente del proyecto: cada método regresa el JSON de la respuesta (null si vino vacía) o truena con un ApiError.\n *\n * @typedef {object} ApiClient\n * @property {(method: string, path: string, options?: ApiRequestOptions) => Promise<any>} request\n * @property {(path: string, options?: ApiRequestOptions) => Promise<any>} get\n * @property {(path: string, body?: unknown, options?: ApiRequestOptions) => Promise<any>} post\n * @property {(path: string, body?: unknown, options?: ApiRequestOptions) => Promise<any>} put\n * @property {(path: string, body?: unknown, options?: ApiRequestOptions) => Promise<any>} patch\n * @property {(path: string, options?: ApiRequestOptions) => Promise<any>} delete\n * @property {(path: string, options?: ApiDownloadOptions) => Promise<{blob: Blob, fileName: string}>} download\n */\n\n/**\n * Arma el cliente del proyecto.\n *\n * @param {object} [options]\n * @param {string} [options.baseUrl] lo que va antes de cada camino, p. ej. '/api/v1'\n * @param {RequestCredentials} [options.credentials] 'same-origin' (por omisión, la cookie de sesión del mismo dominio) o\n *     'include' (un API en otro dominio con cookies)\n * @param {() => string|null|undefined} [options.getToken] con él cada petición lleva Authorization: Bearer; sin token, va\n *     sin el header (el servidor responde 401)\n * @param {Record<string, string>} [options.headers] los que van en todas las peticiones\n * @param {string|null} [options.publishedBuildHeader] el header con la compilación publicada; null para no leerlo\n * @param {{cookieName?: string, headerName?: string, refreshPath?: string}|null} [options.csrf] Laravel Sanctum:\n *     {refreshPath: '/auth/csrf-token'}; por omisión la cookie XSRF-TOKEN y el header X-XSRF-TOKEN\n * @param {number} [options.timeoutMilliseconds] el tiempo máximo de una consulta (0 = sin límite); por omisión 60 s\n * @param {(error: ApiError) => void} [options.onUnauthenticated] qué hacer con un 401 (normalmente ir a iniciar sesión)\n * @param {(request: {method: string, url: string}) => void} [options.onRequest] cada petición, al salir\n * @param {(response: {method: string, url: string, status: number, durationMilliseconds: number}) => void} [options.onResponse]\n *     cada respuesta, buena o mala, al llegar\n * @param {(error: ApiError, request: {method: string, url: string}) => void} [options.onError] cada error (sin red, 4xx, 5xx,\n *     una respuesta que no es JSON), en un solo lugar: Sentry, un aviso propio. Cancelar no es error\n * @param {(body: any, response: Response) => object|null} [options.toProblem] el error de un backend que no contesta en\n *     RFC 9457, a esa forma: (body) => ({title: body.message, errors: body.errors}). Por omisión el cuerpo tal cual\n * @param {(body: any, request: {method: string, url: string}) => any} [options.mapResponse] la respuesta buena de un backend\n *     que la envuelve: (body) => body.data. Por omisión tal cual\n * @param {typeof fetch} [options.fetch] para un servidor de mentira o para las pruebas; por omisión el del navegador\n * @returns {ApiClient}\n */\nexport function createApiClient({\n    baseUrl = '',\n    credentials = 'same-origin',\n    getToken,\n    headers: commonHeaders = {},\n    publishedBuildHeader = DEFAULT_PUBLISHED_BUILD_HEADER,\n    csrf = null,\n    timeoutMilliseconds: defaultTimeoutMilliseconds = DEFAULT_TIMEOUT_MILLISECONDS,\n    onUnauthenticated,\n    onRequest,\n    onResponse,\n    onError,\n    toProblem = (body) => body,\n    mapResponse = (body) => body,\n    fetch: fetchImplementation,\n} = {}) {\n    // un evento del proyecto que truena no tumba la petición: se anota y se sigue (nunca en silencio)\n    const notify = (eventName, handler, ...eventArguments) => {\n        try {\n            handler?.(...eventArguments);\n        } catch (error) {\n            log.error(`el evento ${eventName} del proyecto tronó`, {message: error?.message});\n        }\n    };\n    // OJO: se lee al pedir, no al armar el cliente: así un servidor de mentira que se conecta después también sirve\n    const fetchOf = () => fetchImplementation ?? globalThis.fetch;\n    const csrfCookieName = csrf?.cookieName ?? 'XSRF-TOKEN';\n    const csrfHeaderName = csrf?.headerName ?? 'X-XSRF-TOKEN';\n\n    /** Los headers de una petición: los comunes, el idioma vigente, el token y el CSRF. */\n    const headersOf = (url, body, extraHeaders) => {\n        const headers = {\n            Accept: 'application/json',\n            'Accept-Language': toolkitSettings().language ?? DEFAULT_LANGUAGE,\n            ...commonHeaders,\n            ...extraHeaders,\n        };\n        if (body !== undefined && !isRawBody(body)) {\n            headers['Content-Type'] = 'application/json';\n        }\n        const token = getToken?.();\n        if (token) {\n            headers.Authorization = `Bearer ${token}`;\n        }\n        const csrfToken = csrf && isSameOrigin(url) ? readCookie(csrfCookieName) : null;\n        if (csrfToken) {\n            headers[csrfHeaderName] = csrfToken;\n        }\n        return headers;\n    };\n\n    /** La petición al servidor, ya con su respuesta o con el ApiError de «sin respuesta». */\n    const send = async (method, url, {body, signal, headers, timeoutMilliseconds}) => {\n        const finalHeaders = headersOf(url, body, headers);\n        try {\n            return await fetchOf()(url, {\n                method,\n                headers: finalHeaders,\n                body: body === undefined || isRawBody(body) ? body : JSON.stringify(body),\n                credentials,\n                signal: combinedSignalOf(signal, timeoutMilliseconds),\n            });\n        } catch (error) {\n            // cancelar no es un error de negocio: quien canceló ya sabe por qué\n            if (signal?.aborted) {\n                throw error;\n            }\n            const reason = error?.name === 'TimeoutError' ? 'se acabó el tiempo' : 'la petición no llegó al servidor';\n            log.error(reason, {method, url, cause: error?.name});\n            throw new ApiError({status: API_ERROR_STATUS.offline});\n        }\n    };\n\n    /**\n     * Cualquier petición.\n     *\n     * @param {string} method 'GET', 'POST', 'PUT', 'PATCH' o 'DELETE'\n     * @param {string} path relativo a baseUrl (o completo con http)\n     * @param {object} [options]\n     * @param {unknown} [options.body] objeto → JSON; FormData, Blob o URLSearchParams tal cual\n     * @param {Record<string, unknown>} [options.params] los de la dirección (?page=2)\n     * @param {AbortSignal} [options.signal] para cancelar\n     * @param {Record<string, string>} [options.headers]\n     * @param {'json'|'blob'|'response'} [options.parse] cómo se lee la respuesta (API_RESPONSE_PARSE); por omisión JSON\n     * @param {boolean} [options.skipUnauthenticatedHandler] un 401 que se espera (¿hay sesión?, el login)\n     * @param {number} [options.timeoutMilliseconds] el de esta petición\n     * @returns {Promise<any>} el JSON (null si vino vacío o 204), el Blob o la Response\n     */\n    const request = async (method, path, options = {}) => {\n        const url = apiUrlOf(baseUrl, path, options.params);\n        try {\n            return await requestOnce(method, url, options);\n        } catch (error) {\n            // cada error del servidor (o sin red) sale por onError; cancelar no es error\n            if (error instanceof ApiError) {\n                notify('onError', onError, error, {method, url});\n            }\n            throw error;\n        }\n    };\n\n    const requestOnce = async (method, url, {\n        body, signal, headers, parse = API_RESPONSE_PARSE.json, skipUnauthenticatedHandler = false,\n        timeoutMilliseconds = defaultTimeoutMilliseconds,\n    } = {}) => {\n        notify('onRequest', onRequest, {method, url});\n        const startedAt = Date.now();\n        let response = await send(method, url, {body, signal, headers, timeoutMilliseconds});\n\n        // 419 de Laravel: la cookie CSRF venció; se pide una nueva y se repite la MISMA petición una sola vez\n        if (response.status === CSRF_TOKEN_MISMATCH_STATUS && csrf?.refreshPath) {\n            log.info('token CSRF vencido: se renueva y se reintenta', {method, url});\n            await send('GET', apiUrlOf(baseUrl, csrf.refreshPath), {signal, timeoutMilliseconds});\n            response = await send(method, url, {body, signal, headers, timeoutMilliseconds});\n        }\n\n        notify('onResponse', onResponse, {method, url, status: response.status, durationMilliseconds: Date.now() - startedAt});\n\n        // cada respuesta (también las de error) dice qué compilación del front está publicada\n        if (publishedBuildHeader) {\n            reportPublishedBuild(response.headers.get(publishedBuildHeader));\n        }\n\n        if (!response.ok) {\n            const problem = toProblemOrNull(toProblem, await readProblem(response), response);\n            // un error que armó otro (nginx) puede llegar en otro idioma: ahí se usa el texto genérico del paquete\n            const requestedLanguage = headersOf(url, undefined, headers)['Accept-Language'];\n            const responseLanguage = response.headers.get('content-language');\n            const apiError = new ApiError({\n                status: response.status,\n                problem,\n                translatedByServer: !responseLanguage || responseLanguage.startsWith(requestedLanguage),\n                retryAfterSeconds: retryAfterSecondsOf(response.headers.get('retry-after')),\n            });\n            // los 4xx son parte del flujo (un 422 es un formulario, un 401 al arrancar es «sin sesión»); los 5xx no\n            log[response.status >= SERVER_ERROR_STATUS ? 'error' : 'debug'](`${method} ${url} → ${response.status}`, {\n                code: apiError.code, requestId: apiError.requestId ?? response.headers.get('x-request-id'),\n            });\n            if (apiError.isUnauthenticated && !skipUnauthenticatedHandler) {\n                onUnauthenticated?.(apiError);\n            }\n            throw apiError;\n        }\n\n        if (parse === API_RESPONSE_PARSE.response) {\n            return response;\n        }\n        if (parse === API_RESPONSE_PARSE.blob) {\n            return response.blob();\n        }\n        if (response.status === NO_CONTENT_STATUS) {\n            return null;\n        }\n        // un 200 con el cuerpo vacío pasa de verdad; JSON.parse('') tronaría\n        const text = await response.text();\n        if (!text) {\n            return null;\n        }\n        let json;\n        try {\n            json = JSON.parse(text);\n        } catch {\n            // un 200 que no es JSON: casi siempre la página de la app que respondió en lugar del API (el camino está mal)\n            log.error(`${method} ${url} respondió algo que no es JSON`, {contentType: response.headers.get('content-type')});\n            throw new ApiError({status: SERVER_ERROR_STATUS});\n        }\n        return mapResponse(json, {method, url});\n    };\n\n    /**\n     * Descarga un archivo: el Blob y el nombre que mandó el servidor, con avance. Un Excel cortado no se entrega.\n     *\n     * @param {string} path\n     * @param {object} [options]\n     * @param {Record<string, unknown>} [options.params]\n     * @param {AbortSignal} [options.signal]\n     * @param {(progress: {loaded: number, total: number|null}) => void} [options.onDownloadProgress]\n     * @param {string} [options.fallbackFileName] si el servidor no manda el nombre\n     * @param {number} [options.timeoutMilliseconds] por omisión sin límite\n     * @returns {Promise<{blob: Blob, fileName: string}>}\n     * @throws {ApiError} status 500 si un Excel llegó incompleto\n     */\n    const download = async (path, {params, signal, onDownloadProgress, fallbackFileName = 'descarga', timeoutMilliseconds = NO_TIMEOUT} = {}) => {\n        const response = await request('GET', path, {params, signal, parse: API_RESPONSE_PARSE.response, timeoutMilliseconds});\n        const blob = await readBlobWithProgress(response, onDownloadProgress);\n        const fileName = fileNameFromContentDisposition(response.headers.get('content-disposition'), fallbackFileName);\n        // el tipo puede traer parámetros después del «;» (charset): solo cuenta lo de antes\n        const contentType = String(response.headers.get('content-type') ?? '').split(';')[0].trim();\n        if (contentType === XLSX_CONTENT_TYPE && !(await isCompleteZip(blob))) {\n            const requestId = response.headers.get('x-request-id');\n            log.error(`GET ${path} → el Excel llegó incompleto: el servidor falló a media escritura`, {requestId, fileName});\n            throw new ApiError({status: SERVER_ERROR_STATUS, problem: {request_id: requestId}});\n        }\n        return {blob, fileName};\n    };\n\n    return {\n        request,\n        get: (path, options) => request('GET', path, options),\n        post: (path, body, options) => request('POST', path, {...options, body}),\n        put: (path, body, options) => request('PUT', path, {...options, body}),\n        patch: (path, body, options) => request('PATCH', path, {...options, body}),\n        delete: (path, options) => request('DELETE', path, options),\n        download,\n    };\n}\n"],"names":[],"mappings":";;;;;;AAqCA,MAAM,MAAM,aAAa,KAAK;AAGlB,MAAC,qBAAqB,OAAO,OAAO,EAAC,MAAM,QAAQ,MAAM,QAAQ,UAAU,WAAU,CAAC;AAIlG,MAAM,+BAA+B;AACrC,MAAM,aAAa;AACnB,MAAM,iCAAiC;AACvC,MAAM,oBAAoB;AAC1B,MAAM,sBAAsB;AAWrB,SAAS,SAAS,SAAS,MAAM,QAAQ;AAC5C,QAAM,MAAM,YAAY,KAAK,IAAI,IAAI,OAAO,GAAG,OAAO,GAAG,IAAI;AAC7D,QAAM,QAAQ,IAAI,gBAAe;AACjC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,UAAU,CAAA,CAAE,GAAG;AACtD,eAAW,QAAQ,CAAA,EAAG,OAAO,KAAK,GAAG;AACjC,UAAI,SAAS,UAAa,SAAS,MAAM;AACrC,cAAM,OAAO,MAAM,OAAO,IAAI,CAAC;AAAA,MACnC;AAAA,IACJ;AAAA,EACJ;AACA,QAAM,YAAY,MAAM,SAAQ;AAChC,MAAI,CAAC,WAAW;AACZ,WAAO;AAAA,EACX;AACA,SAAO,GAAG,GAAG,GAAG,IAAI,SAAS,GAAG,IAAI,MAAM,GAAG,GAAG,SAAS;AAC7D;AAQA,SAAS,UAAU,MAAM;AACrB,SAAQ,OAAO,aAAa,eAAe,gBAAgB,YACnD,OAAO,SAAS,eAAe,gBAAgB,QAChD,gBAAgB,mBAChB,gBAAgB;AAC3B;AAQA,SAAS,WAAW,YAAY;AAC5B,MAAI,OAAO,aAAa,aAAa;AACjC,WAAO;AAAA,EACX;AACA,QAAM,SAAS,GAAG,UAAU;AAC5B,QAAM,SAAS,SAAS,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,KAAK,KAAI,CAAE,EAAE,KAAK,CAAC,SAAS,KAAK,WAAW,MAAM,CAAC;AAC3G,SAAO,SAAS,mBAAmB,OAAO,MAAM,OAAO,MAAM,CAAC,IAAI;AACtE;AASA,SAAS,aAAa,KAAK;AACvB,MAAI,OAAO,WAAW,eAAe,CAAC,YAAY,KAAK,GAAG,GAAG;AACzD,WAAO;AAAA,EACX;AACA,SAAO,IAAI,IAAI,GAAG,EAAE,WAAW,OAAO,SAAS;AACnD;AAQO,SAAS,oBAAoB,kBAAkB;AAClD,MAAI,CAAC,kBAAkB;AACnB,WAAO;AAAA,EACX;AACA,MAAI,QAAQ,KAAK,iBAAiB,KAAI,CAAE,GAAG;AACvC,WAAO,OAAO,iBAAiB,MAAM;AAAA,EACzC;AACA,QAAM,UAAU,KAAK,MAAM,gBAAgB;AAC3C,SAAO,OAAO,MAAM,OAAO,IAAI,OAAO,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,KAAK,IAAG,KAAM,GAAI,CAAC;AAC9F;AAiBA,SAAS,gBAAgB,WAAW,MAAM,UAAU;AAChD,QAAM,UAAU,SAAS,OAAO,OAAO,UAAU,MAAM,QAAQ;AAC/D,SAAO,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,IAAI,UAAU;AACzF;AAEA,eAAe,YAAY,UAAU;AACjC,MAAI;AACA,UAAM,OAAO,KAAK,MAAM,MAAM,SAAS,KAAI,CAAE;AAC7C,WAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,IAAI,OAAO;AAAA,EAC7E,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AASA,SAAS,iBAAiB,QAAQ,qBAAqB;AACnD,QAAM,UAAU,CAAC,QAAQ,sBAAsB,IAAI,YAAY,QAAQ,mBAAmB,IAAI,IAAI,EAAE,OAAO,OAAO;AAClH,MAAI,QAAQ,SAAS,GAAG;AACpB,WAAO,QAAQ,CAAC;AAAA,EACpB;AACA,SAAO,YAAY,IAAI,OAAO;AAClC;AAUA,eAAe,qBAAqB,UAAU,oBAAoB;AAC9D,MAAI,CAAC,sBAAsB,CAAC,SAAS,MAAM;AACvC,WAAO,SAAS,KAAI;AAAA,EACxB;AACA,QAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,gBAAgB,CAAC,KAAK;AAChE,QAAM,SAAS,SAAS,KAAK,UAAS;AACtC,QAAM,SAAS,CAAA;AACf,MAAI,SAAS;AACb,WAAS,OAAO,MAAM,OAAO,KAAI,GAAI,CAAC,KAAK,MAAM,OAAO,MAAM,OAAO,KAAI,GAAI;AACzE,WAAO,KAAK,KAAK,KAAK;AACtB,cAAU,KAAK,MAAM;AACrB,uBAAmB,EAAC,QAAQ,MAAK,CAAC;AAAA,EACtC;AACA,SAAO,IAAI,KAAK,QAAQ,EAAC,MAAM,SAAS,QAAQ,IAAI,cAAc,KAAK,GAAE,CAAC;AAC9E;AAkEO,SAAS,gBAAgB;AAAA,EAC5B,UAAU;AAAA,EACV,cAAc;AAAA,EACd;AAAA,EACA,SAAS,gBAAgB,CAAA;AAAA,EACzB,uBAAuB;AAAA,EACvB,OAAO;AAAA,EACP,qBAAqB,6BAA6B;AAAA,EAClD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY,CAAC,SAAS;AAAA,EACtB,cAAc,CAAC,SAAS;AAAA,EACxB,OAAO;AACX,IAAI,IAAI;AAEJ,QAAM,SAAS,CAAC,WAAW,YAAY,mBAAmB;AACtD,QAAI;AACA,gBAAU,GAAG,cAAc;AAAA,IAC/B,SAAS,OAAO;AACZ,UAAI,MAAM,aAAa,SAAS,uBAAuB,EAAC,SAAS,OAAO,QAAO,CAAC;AAAA,IACpF;AAAA,EACJ;AAEA,QAAM,UAAU,MAAM,uBAAuB,WAAW;AACxD,QAAM,iBAAiB,MAAM,cAAc;AAC3C,QAAM,iBAAiB,MAAM,cAAc;AAG3C,QAAM,YAAY,CAAC,KAAK,MAAM,iBAAiB;AAC3C,UAAM,UAAU;AAAA,MACZ,QAAQ;AAAA,MACR,mBAAmB,kBAAkB,YAAY;AAAA,MACjD,GAAG;AAAA,MACH,GAAG;AAAA,IACf;AACQ,QAAI,SAAS,UAAa,CAAC,UAAU,IAAI,GAAG;AACxC,cAAQ,cAAc,IAAI;AAAA,IAC9B;AACA,UAAM,QAAQ,WAAQ;AACtB,QAAI,OAAO;AACP,cAAQ,gBAAgB,UAAU,KAAK;AAAA,IAC3C;AACA,UAAM,YAAY,QAAQ,aAAa,GAAG,IAAI,WAAW,cAAc,IAAI;AAC3E,QAAI,WAAW;AACX,cAAQ,cAAc,IAAI;AAAA,IAC9B;AACA,WAAO;AAAA,EACX;AAGA,QAAM,OAAO,OAAO,QAAQ,KAAK,EAAC,MAAM,QAAQ,SAAS,oBAAmB,MAAM;AAC9E,UAAM,eAAe,UAAU,KAAK,MAAM,OAAO;AACjD,QAAI;AACA,aAAO,MAAM,QAAO,EAAG,KAAK;AAAA,QACxB;AAAA,QACA,SAAS;AAAA,QACT,MAAM,SAAS,UAAa,UAAU,IAAI,IAAI,OAAO,KAAK,UAAU,IAAI;AAAA,QACxE;AAAA,QACA,QAAQ,iBAAiB,QAAQ,mBAAmB;AAAA,MACpE,CAAa;AAAA,IACL,SAAS,OAAO;AAEZ,UAAI,QAAQ,SAAS;AACjB,cAAM;AAAA,MACV;AACA,YAAM,SAAS,OAAO,SAAS,iBAAiB,uBAAuB;AACvE,UAAI,MAAM,QAAQ,EAAC,QAAQ,KAAK,OAAO,OAAO,KAAI,CAAC;AACnD,YAAM,IAAI,SAAS,EAAC,QAAQ,iBAAiB,QAAO,CAAC;AAAA,IACzD;AAAA,EACJ;AAiBA,QAAM,UAAU,OAAO,QAAQ,MAAM,UAAU,CAAA,MAAO;AAClD,UAAM,MAAM,SAAS,SAAS,MAAM,QAAQ,MAAM;AAClD,QAAI;AACA,aAAO,MAAM,YAAY,QAAQ,KAAK,OAAO;AAAA,IACjD,SAAS,OAAO;AAEZ,UAAI,iBAAiB,UAAU;AAC3B,eAAO,WAAW,SAAS,OAAO,EAAC,QAAQ,IAAG,CAAC;AAAA,MACnD;AACA,YAAM;AAAA,IACV;AAAA,EACJ;AAEA,QAAM,cAAc,OAAO,QAAQ,KAAK;AAAA,IACpC;AAAA,IAAM;AAAA,IAAQ;AAAA,IAAS,QAAQ,mBAAmB;AAAA,IAAM,6BAA6B;AAAA,IACrF,sBAAsB;AAAA,EAC9B,IAAQ,OAAO;AACP,WAAO,aAAa,WAAW,EAAC,QAAQ,IAAG,CAAC;AAC5C,UAAM,YAAY,KAAK,IAAG;AAC1B,QAAI,WAAW,MAAM,KAAK,QAAQ,KAAK,EAAC,MAAM,QAAQ,SAAS,oBAAmB,CAAC;AAGnF,QAAI,SAAS,WAAW,8BAA8B,MAAM,aAAa;AACrE,UAAI,KAAK,iDAAiD,EAAC,QAAQ,IAAG,CAAC;AACvE,YAAM,KAAK,OAAO,SAAS,SAAS,KAAK,WAAW,GAAG,EAAC,QAAQ,oBAAmB,CAAC;AACpF,iBAAW,MAAM,KAAK,QAAQ,KAAK,EAAC,MAAM,QAAQ,SAAS,oBAAmB,CAAC;AAAA,IACnF;AAEA,WAAO,cAAc,YAAY,EAAC,QAAQ,KAAK,QAAQ,SAAS,QAAQ,sBAAsB,KAAK,IAAG,IAAK,UAAS,CAAC;AAGrH,QAAI,sBAAsB;AACtB,2BAAqB,SAAS,QAAQ,IAAI,oBAAoB,CAAC;AAAA,IACnE;AAEA,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,UAAU,gBAAgB,WAAW,MAAM,YAAY,QAAQ,GAAG,QAAQ;AAEhF,YAAM,oBAAoB,UAAU,KAAK,QAAW,OAAO,EAAE,iBAAiB;AAC9E,YAAM,mBAAmB,SAAS,QAAQ,IAAI,kBAAkB;AAChE,YAAM,WAAW,IAAI,SAAS;AAAA,QAC1B,QAAQ,SAAS;AAAA,QACjB;AAAA,QACA,oBAAoB,CAAC,oBAAoB,iBAAiB,WAAW,iBAAiB;AAAA,QACtF,mBAAmB,oBAAoB,SAAS,QAAQ,IAAI,aAAa,CAAC;AAAA,MAC1F,CAAa;AAED,UAAI,SAAS,UAAU,sBAAsB,UAAU,OAAO,EAAE,GAAG,MAAM,IAAI,GAAG,MAAM,SAAS,MAAM,IAAI;AAAA,QACrG,MAAM,SAAS;AAAA,QAAM,WAAW,SAAS,aAAa,SAAS,QAAQ,IAAI,cAAc;AAAA,MACzG,CAAa;AACD,UAAI,SAAS,qBAAqB,CAAC,4BAA4B;AAC3D,4BAAoB,QAAQ;AAAA,MAChC;AACA,YAAM;AAAA,IACV;AAEA,QAAI,UAAU,mBAAmB,UAAU;AACvC,aAAO;AAAA,IACX;AACA,QAAI,UAAU,mBAAmB,MAAM;AACnC,aAAO,SAAS,KAAI;AAAA,IACxB;AACA,QAAI,SAAS,WAAW,mBAAmB;AACvC,aAAO;AAAA,IACX;AAEA,UAAM,OAAO,MAAM,SAAS,KAAI;AAChC,QAAI,CAAC,MAAM;AACP,aAAO;AAAA,IACX;AACA,QAAI;AACJ,QAAI;AACA,aAAO,KAAK,MAAM,IAAI;AAAA,IAC1B,QAAQ;AAEJ,UAAI,MAAM,GAAG,MAAM,IAAI,GAAG,kCAAkC,EAAC,aAAa,SAAS,QAAQ,IAAI,cAAc,EAAC,CAAC;AAC/G,YAAM,IAAI,SAAS,EAAC,QAAQ,oBAAmB,CAAC;AAAA,IACpD;AACA,WAAO,YAAY,MAAM,EAAC,QAAQ,IAAG,CAAC;AAAA,EAC1C;AAeA,QAAM,WAAW,OAAO,MAAM,EAAC,QAAQ,QAAQ,oBAAoB,mBAAmB,YAAY,sBAAsB,WAAU,IAAI,CAAA,MAAO;AACzI,UAAM,WAAW,MAAM,QAAQ,OAAO,MAAM,EAAC,QAAQ,QAAQ,OAAO,mBAAmB,UAAU,oBAAmB,CAAC;AACrH,UAAM,OAAO,MAAM,qBAAqB,UAAU,kBAAkB;AACpE,UAAM,WAAW,+BAA+B,SAAS,QAAQ,IAAI,qBAAqB,GAAG,gBAAgB;AAE7G,UAAM,cAAc,OAAO,SAAS,QAAQ,IAAI,cAAc,KAAK,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,KAAI;AACzF,QAAI,gBAAgB,qBAAqB,CAAE,MAAM,cAAc,IAAI,GAAI;AACnE,YAAM,YAAY,SAAS,QAAQ,IAAI,cAAc;AACrD,UAAI,MAAM,OAAO,IAAI,qEAAqE,EAAC,WAAW,SAAQ,CAAC;AAC/G,YAAM,IAAI,SAAS,EAAC,QAAQ,qBAAqB,SAAS,EAAC,YAAY,UAAS,EAAC,CAAC;AAAA,IACtF;AACA,WAAO,EAAC,MAAM,SAAQ;AAAA,EAC1B;AAEA,SAAO;AAAA,IACH;AAAA,IACA,KAAK,CAAC,MAAM,YAAY,QAAQ,OAAO,MAAM,OAAO;AAAA,IACpD,MAAM,CAAC,MAAM,MAAM,YAAY,QAAQ,QAAQ,MAAM,EAAC,GAAG,SAAS,KAAI,CAAC;AAAA,IACvE,KAAK,CAAC,MAAM,MAAM,YAAY,QAAQ,OAAO,MAAM,EAAC,GAAG,SAAS,KAAI,CAAC;AAAA,IACrE,OAAO,CAAC,MAAM,MAAM,YAAY,QAAQ,SAAS,MAAM,EAAC,GAAG,SAAS,KAAI,CAAC;AAAA,IACzE,QAAQ,CAAC,MAAM,YAAY,QAAQ,UAAU,MAAM,OAAO;AAAA,IAC1D;AAAA,EACR;AACA;"}