@wildo-ai/saas-frontend-lib 1.0.1 → 1.1.0

package/dist/esm/core/requests/wildo-http-client-manual-calls.frontend.service.js

@@ -3,13 +3,16 @@
  * Specialized HTTP client for manual/custom API calls
  * Extends base WildoBackendHttpClient with flexibility for non-standard endpoints
  */
-import { AuthFactorLevel, AuthMethod, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey } from '@wildo-ai/saas-models';
+import { AuthFactorLevel, AuthMethod, MAIN_API_BASE_PATH, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey, TokenExchangeRequestSchema } from '@wildo-ai/saas-models';
 import { WildoBackendHttpClient } from './wildo-http-client.frontend.service.js';
 /**
  * Specialized HTTP client for manual/custom API calls
  * Provides methods for application configuration and other manual endpoints
  */
-const API_CALL_PREFIX = '/api/v1';
+// Single source of truth for the API mount prefix — shared with the backend
+// HTTP server mount and the refresh-token cookie `Path` so the URLs this
+// client builds always hit the same served paths the cookie is scoped to.
+const API_CALL_PREFIX = MAIN_API_BASE_PATH;
 export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
     constructor(config = {}) {
         super(config);
@@ -18,12 +21,43 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
      * Retrieve application configuration from backend
      * @param frontendServiceName Frontend service identity (required)
      * @param options Optional request options for headers, timeout, etc.
-     * @returns Promise<AppConfiguration_Shared> The application configuration
+     * @returns Promise<AppConfiguration_FrontendBootstrapResponse> The application configuration plus frontend provider bootstrap data
      */
     async getApplicationConfig(frontendServiceName, options) {
         const url = `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET]}?frontendServiceName=${frontendServiceName}`;
         return this.get(url, options);
     }
+    // ── OIDC interactive consent (S1) ─────────────────────────────────────────
+    /**
+     * `GET /oauth/authorize` for the browser authorize flow. `params` are the raw authorize query the
+     * third-party client redirected with (`response_type=code`, `client_id`, `redirect_uri`,
+     * `code_challenge`(+`_method=S256`), optional `scope`/`resource`/`state`/`nonce`). Returns EITHER the
+     * `consent_required` payload (a `requiresConsent` client → the SPA renders the consent screen) OR a
+     * `{ redirect_to }` payload (a trusted client → the code is already minted; the SPA navigates the
+     * browser there). The Bearer is auto-attached.
+     */
+    async oauthAuthorizeConsent(params, options) {
+        const url = `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.OAUTH_PROVIDER_AUTHORIZE]}?${params.toString()}`;
+        return this.get(url, options);
+    }
+    /**
+     * `POST /oauth/authorize/decision` — record the user's approve/deny. `remember` (Item 3) opts into a
+     * durable consent grant so a future authorize with covering scopes skips the prompt; sent as the
+     * string `'true'`/`'false'` the backend compares against. Returns `{ redirect_to }`; the caller
+     * navigates the browser there to complete the OAuth redirect to the third-party client.
+     */
+    async oauthConsentDecision(consentToken, decision, remember, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.OAUTH_PROVIDER_CONSENT]}`, { consent_token: consentToken, decision, remember: remember ? 'true' : 'false' }, options);
+    }
+    /**
+     * `POST /oauth/end-session/confirm` — the OIDC RP-Initiated Logout §6 confirmation decision. Presents the
+     * single-use `token` the `/oauth/logout-confirm` prompt was redirected with; the backend consumes it,
+     * terminates the named session, and returns `{ redirect_to }` (the signed-out page). Token-authorized —
+     * no Bearer is required (the End-User may be unauthenticated here, having arrived via an RP redirect).
+     */
+    async oauthEndSessionConfirm(token, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.OAUTH_PROVIDER_END_SESSION_CONFIRM]}`, { token }, options);
+    }
     // Authentication manual calls
     async identifyByEmail(email, options) {
         const body = { email };
@@ -41,13 +75,29 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
         return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_AUTHENTICATE]}`, request, options);
     }
     /**
-     * Refresh access token using a valid refresh token.
-     * Calls POST /api/v1/auth/token/refresh
-     * @param refreshToken The JWT refresh token
-     * @returns Fresh access token (and optionally rotated refresh token)
+     * Refresh access token. Calls POST /api/v1/auth/token/refresh.
+     *
+     * **Cookie-only contract** (Auth-hardening Slice A Step 6, 2026-04-13).
+     * The refresh token travels EXCLUSIVELY via the `__wildo_refresh`
+     * `HttpOnly` cookie (set by the backend on every issuance / rotation,
+     * scoped `Path=/api/v1/auth`). The browser automatically attaches it because
+     * the shared HTTP client's `authCookiesInterceptor` flips
+     * `withCredentials: true` on every `/auth/*` request. The request body
+     * is EMPTY and the backend's `RefreshTokenBodySchema` is
+     * `z.strictObject({})` — re-introducing a body field here would now
+     * fail backend validation with a 400.
+     *
+     * History: A-Step 2 (2026-04-13) added the cookie channel; A-Step 3
+     * stopped this client from emitting the body field; A-K-5 added a
+     * transitional backend dual-read; A-Step 6 dropped the body channel.
+     *
+     * @returns Fresh `{ accessToken, expiresIn }`. The refresh token is
+     *   NOT in the response body — the rotated value lives only in the
+     *   `Set-Cookie: __wildo_refresh=…` response header (HttpOnly, so
+     *   JavaScript here cannot observe it).
      */
-    async refreshTokens(refreshToken, options) {
-        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_TOKEN_REFRESH]}`, { refreshToken }, options);
+    async refreshTokens(options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_TOKEN_REFRESH]}`, {}, options);
     }
     /**
      * Get OAuth2 authorization URL for a given provider.
@@ -55,12 +105,8 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
      * @param providerRef The SSO provider reference (e.g., 'google', 'microsoft')
      * @returns The authorization URL to redirect the user to
      *
-     * [Capacitor] [OAuth2] [SAML]
-     * This endpoint is unaffected by Capacitor — it returns a URL, the caller decides
-     * how to open it (window.location.href on web, Browser.open() on Capacitor).
-     * For native Apple/Google SDKs on mobile, this endpoint is NOT used — those flows
-     * bypass the web-based authorization URL entirely and use native SDK tokens instead,
-     * exchanged via POST /auth/native-token/exchange (see exchangeNativeToken() below).
+     * Browser-only — the framework targets web stacks exclusively, so the
+     * caller always opens the returned URL via `window.location.href`.
      */
     async getOAuth2AuthorizationUrl(providerRef, returnUrl, options) {
         const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_OAUTH2_AUTHORIZE];
@@ -71,27 +117,51 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
         return this.get(url, options);
     }
     /**
-     * Exchange a one-time authorization code for access and refresh tokens.
-     * Calls POST /api/v1/auth/token/exchange
-     * The code is obtained from the OAuth2 callback redirect URL query parameter.
-     * @param code The one-time authorization code from the callback
-     * @returns Access token, refresh token, and token expiry
+     * Exchange a one-time AUTH_CODE_EXCHANGE token for access and refresh tokens.
+     * Calls POST /api/v1/auth/token/exchange.
+     *
+     * Two issuers feed this endpoint:
+     *   - OAuth2 / SAML callback (`auth-code-exchange.md` Step 4) — token carries
+     *     `accessToken`/`expiresIn` only. Refresh arrives through the
+     *     HttpOnly cookie channel, and response body omits both `refreshToken` and the
+     *     `returnPath`/`sourceFrontendServiceName`/`targetServiceKey` fields.
+     *   - Cross-frontend handoff (`cross-app-jwt-propagation.md` Step 2 + Step 5)
+     *     — token additionally carries `returnPath`/`sourceFrontendServiceName`/
+     *     `targetServiceKey`. Response surfaces them so the receiving SPA can
+     *     navigate to `returnPath` and render telemetry.
+     *
+     * Receivers detect "this came from a cross-frontend handoff" by checking
+     * `typeof returnPath === 'string'`. Renamed from `exchangeOAuth2Code`
+     * (cross-app-jwt-propagation Step 5 deferred) — the method now serves
+     * BOTH the OAuth2 callback path (`Auth_AuthCallback`) AND the
+     * cross-frontend handoff receiver (`Auth_OneOffSession` in
+     * `cross-frontend-handoff` mode), so the OAuth2-specific naming was
+     * misleading. The docs site's own client (`engine/saas-technical-doc/
+     * src/runtime/docs-auth-client.ts`) already uses the same name —
+     * single conceptual symbol across both client surfaces.
      *
-     * [Capacitor] [OAuth2] [SAML]
-     * This endpoint works identically on Capacitor — the code is extracted from the deep link
-     * URL instead of React Router search params, but the exchange call is the same.
+     * @param code The one-time AUTH_CODE_EXCHANGE token (from `?code=` query
+     *   param after either an OAuth2 callback or a cross-frontend handoff redirect).
      */
-    async exchangeOAuth2Code(code, options) {
-        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_TOKEN_EXCHANGE]}`, { code }, options);
+    async exchangeAuthCode(code, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_TOKEN_EXCHANGE]}`, TokenExchangeRequestSchema.parse({ code }), options);
     }
     /**
-     * Logout from the backend by revoking the refresh token.
-     * Calls POST /api/v1/auth/logout
-     * The backend adds the refresh token's JTI to a Redis blacklist.
-     * @param refreshToken The refresh token to revoke
+     * Logout from the backend by revoking the refresh token AND clearing the
+     * `__wildo_refresh` cookie. Calls POST /api/v1/auth/logout.
+     *
+     * **Cookie-only contract** (Auth-hardening Slice A Step 6, 2026-04-13).
+     * The refresh token travels EXCLUSIVELY via the cookie (auto-attached
+     * by the `authCookiesInterceptor`); the request body is EMPTY and the
+     * backend's `LogoutBodySchema` is `z.strictObject({})`. The backend
+     * ALWAYS clears the cookie on response, so logout works even when the
+     * cookie is present but the JS access token was lost (e.g., after a
+     * tab crash). `tokenIssuer.revokeRefreshToken()` is best-effort —
+     * clearing the cookie is the user-visible action and never blocks on
+     * revocation.
      */
-    async logoutFromBackend(refreshToken, options) {
-        await this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_LOGOUT]}`, { refreshToken }, options);
+    async logoutFromBackend(options) {
+        await this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_LOGOUT]}`, {}, options);
     }
     // ─── Password Reset manual calls ───
     /**
@@ -122,9 +192,34 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
     async register(data, options) {
         return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REGISTER]}`, data, options);
     }
+    /**
+     * Discover the org's SSO/SCIM-aware first-factor auth methods for a PUBLIC
+     * invitation-accept screen, keyed by the invitation token WITHOUT consuming it
+     * (unlike accept). Calls GET /api/v1/auth/invitation/info?token=…
+     *
+     * Distinct from `identifyByEmail` (email→domain, requires an existing user):
+     * this works for a not-yet-activated invitee (INVITED membership, no session) and
+     * additionally returns `managementMode` (open/sso/scim) so the chooser can render
+     * the SCIM informational state instead of a credential form. The returned
+     * `availableFirstFactorMethods` are consumed identically to `identify()`'s
+     * `firstFactorMethods`, so the login `AUTH_METHOD_COMPONENTS` registry renders them.
+     */
+    async getInvitationInfo(token, options) {
+        const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_INVITATION_INFO];
+        const url = `${API_CALL_PREFIX}${routeTemplate}?token=${encodeURIComponent(token)}`;
+        return this.get(url, options);
+    }
     /**
      * Accept an invitation using a public invitation token.
      * Calls POST /api/v1/auth/invitation/accept
+     *
+     * Two outcomes on the wire (discriminated by `credentialMethod`):
+     *  - PASSWORD / absent / PASSKEY → a SESSION (`accessToken` when the pipeline completed,
+     *    else MFA-continuation fields). This is the path `AuthSessionContext.acceptInvitation`
+     *    drives.
+     *  - `MAGIC_LINK` → NO session; a link is emailed and the response is the generic
+     *    `{ messageRef, message }` ("check your email", anti-enumeration). The invitation
+     *    magic-link sub-form calls this directly and ignores the body (success ⇒ link sent).
      */
     async acceptInvitation(data, options) {
         return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ACCEPT_INVITATION]}`, data, options);
@@ -136,6 +231,27 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
     async rejectInvitation(data, options) {
         return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REJECT_INVITATION]}`, data, options);
     }
+    /**
+     * List the authenticated caller's OWN pending invitations across all organizations
+     * (Approach P, email-owned — no token). Calls GET /api/v1/auth/invitations/mine.
+     */
+    async listMyPendingInvitations(options) {
+        return this.get(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_LIST_MY_INVITATIONS]}`, options);
+    }
+    /**
+     * Accept ONE of the caller's own pending invitations in-app — no token, no new session
+     * (the caller is already authenticated). Calls POST /api/v1/auth/invitations/accept.
+     */
+    async acceptMyInvitation(membershipId, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ACCEPT_MY_INVITATION]}`, { membershipId }, options);
+    }
+    /**
+     * Decline ONE of the caller's own pending invitations in-app (deletes the INVITED
+     * membership row). Calls POST /api/v1/auth/invitations/reject.
+     */
+    async rejectMyInvitation(membershipId, rejectionReason, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REJECT_MY_INVITATION]}`, { membershipId, rejectionReason }, options);
+    }
     /**
      * Verify an email address using the token and email from the verification link.
      * Calls POST /api/v1/auth/verify-email
@@ -245,20 +361,29 @@ export class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {
             : baseUrl;
         return this.get(url, options);
     }
-    // ─── Native SDK Token Exchange (F2) ───
+    async exchangeOneOffToken(token, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ONE_OFF_SESSION_EXCHANGE]}`, { token }, options);
+    }
     /**
-     * Exchange a native identity token (Apple/Google) for Wildo access + refresh tokens.
-     * Used by Capacitor mobile apps after obtaining a token from the native Sign-In SDK.
+     * Request a one-time cross-frontend handoff URL (cross-app-jwt-propagation Step 2 + 3).
      *
-     * [Capacitor] This method is platform-agnostic — it takes a raw identity token
-     * and sends it to the backend. The caller is responsible for obtaining the token
-     * via the native SDK (@capacitor-community/apple-sign-in, @codetrix-studio/capacitor-google-auth, etc.).
+     * Calls POST /api/v1/auth/cross-frontend-handoff with the user's bearer token. The
+     * backend re-issues a fresh JWT pair, binds it to a single-use AUTH_CODE_EXCHANGE
+     * consumable token (60s TTL), and returns `{ handoffUrl, expiresAt }`. The caller
+     * decides how to use the URL (`location.assign` to replace, `window.open` for a new
+     * tab) — see `requestCrossFrontendHandoff()` /
+     * `useCrossFrontendHandoff()` in `core/security/cross-frontend-handoff.frontend.service.ts`
+     * for the friendlier wrapper that maps backend error codes onto a typed client error.
+     *
+     * Bearer-only — no cookies / `withCredentials`. The base client's authentication
+     * interceptor injects `Authorization: Bearer <accessToken>` and
+     * `X-Frontend-Service-Name: <envFrontendServiceName>` automatically; the backend uses
+     * the latter to (a) scope rate-limiting per `(userId, sourceFrontend)` pair and
+     * (b) cross-validate the source identity against the browser's `Origin` header to
+     * defend against header spoofing.
      */
-    async exchangeNativeToken(request, options) {
-        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_NATIVE_TOKEN_EXCHANGE]}`, request, options);
-    }
-    async exchangeOneOffToken(token, options) {
-        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ONE_OFF_SESSION_EXCHANGE]}`, { token }, options);
+    async crossFrontendHandoff(request, options) {
+        return this.post(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_CROSS_FRONTEND_HANDOFF]}`, request, options);
     }
     // ─── Features ───
     async getResolvedFeatures(options) {
@@ -346,4 +471,4 @@ export function getManualCallsHttpClient() {
     }
     return _manualCallsHttpClient;
 }
-//# sourceMappingURL=wildo-http-client-manual-calls.frontend.service.js.map
+//# sourceMappingURL=wildo-http-client-manual-calls.frontend.service.js.map

package/dist/esm/core/requests/wildo-http-client-manual-calls.frontend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-http-client-manual-calls.frontend.service.js","sourceRoot":"","sources":["../../../../src/core/requests/wildo-http-client-manual-calls.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAA0E,eAAe,EAA8B,UAAU,EAAyB,6BAA6B,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACxP,OAAO,EAAkB,sBAAsB,EAAgC,MAAM,sCAAsC,CAAC;AAE5H;;;GAGG;AAEH,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,OAAO,kCAAmC,SAAQ,sBAAsB;IAE5E,YAAY,SAAuC,EAAE;QACnD,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,mBAA2B,EAAE,OAAwB;QAC9E,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,wBAAwB,mBAAmB,EAAE,CAAC;QAC7J,OAAO,IAAI,CAAC,GAAG,CAA0B,GAAG,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,8BAA8B;IAC9B,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,OAAwB;QAC3D,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,CAA6B,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5J,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,OAAwB;QAC/D,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC,GAAG,CAAM,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACvG,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAA8D,EAAE,OAAwB;QACrH,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC;QAC5F,OAAO,IAAI,CAAC,IAAI,CAAyB,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrK,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA8B,EAAE,OAAwB;QACzE,OAAO,IAAI,CAAC,IAAI,CAAyB,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/J,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,OAAwB;QAChE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,EAAE,EACjG,EAAE,YAAY,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,yBAAyB,CAC7B,WAAmB,EACnB,SAAkB,EAClB,OAAwB;QAExB,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,OAAO,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,IAAI,EAAE,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,YAAoB,EAAE,OAAwB;QACpE,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,EAC1F,EAAE,YAAY,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,sCAAsC;IAEtC;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,KAAa,EAAE,OAAwB;QAChE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,EAAE,EAC1G,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAa,EAAE,WAAmB,EAAE,OAAwB;QACtF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,EAAE,EAC3G,EAAE,KAAK,EAAE,WAAW,EAAE,EACtB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,oCAAoC;IAEpC;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,IAA0G,EAAE,OAAwB;QACjJ,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE,EAC5F,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAA2F,EAC3F,OAAwB;QAaxB,OAAO,IAAI,CAAC,IAAI,CAYd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAA2D,EAC3D,OAAwB;QAExB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAa,EAAE,OAAwB;QAMtE,OAAO,IAAI,CAAC,IAAI,CAMd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,EAAE,KAAK,EAAE,KAAK,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAa,EAAE,OAAwB;QACnE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,OAAwB;QAC/D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,uBAAuB,CAAC,EAAE,EACtG,EAAE,SAAS,EAAE,EACb,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,IAAY,EAAE,OAAwB;QAC/E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,YAAY,CAAC,OAAwB;QACzC,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,EAAE,IAAI,EAAE,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,IAAY,EAAE,OAAwB;QAC3E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,EACnG,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,2BAA2B;IAE3B,KAAK,CAAC,sBAAsB,CAAC,SAAkB,EAAE,OAAwB;QACvE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,EAAE,EAC5G,EAAE,SAAS,EAAE,EACb,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,UAAmC,EAAE,OAAwB;QACvF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,EAAE,EAC3G,UAAU,EACV,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,OAAwB;QAClE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,SAAS,EAAE,EACb,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAmC,EAAE,OAAwB;QACnF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,UAAU,EACV,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAwB;QACxC,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,OAAwB;QAChE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,YAAY,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,IAAY,EAAE,OAAwB;QAC9E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,YAAY,EAAE,IAAI,EAAE,EACtB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,gCAAgC;IAEhC,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,OAAwB;QACzD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,EACnG,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,KAAa,EAAE,OAAwB;QAC1E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,EAAE,KAAK,EAAE,KAAK,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,6BAA6B;IAE7B,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,WAAoB,EAAE,OAAwB;QAChF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,EAAE,SAAS,EAAE,WAAW,EAAE,EAC1B,OAAO,CACR,CAAC;IACJ,CAAC;IAED,wCAAwC;IAExC,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,OAAwB;QACjE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,EAAE,WAAW,EAAE,EACf,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,WAAmB,EAAE,IAAY,EAAE,OAAwB;QAClF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,WAAW,EAAE,IAAI,EAAE,EACrB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,mCAAmC;IAEnC,KAAK,CAAC,cAAc,CAAC,eAAuB,EAAE,WAAmB,EAAE,OAAwB;QACzF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,EACnG,EAAE,eAAe,EAAE,WAAW,EAAE,EAChC,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,EAAE,WAAW,EAAE,EACf,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAwB;QAC3C,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,EAAE,EACpG,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAwB;QACzC,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAwB;QAC7C,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,OAAwB;QAC/D,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC,MAAM,CAAwB,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAgD,EAAE,WAA6E,EAAE,OAAwB;QAC5K,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,EAC1F,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,EAC1B,OAAO,CACR,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,gCAAgC,CACpC,KAAa,EACb,YAAoB,EACpB,SAAkB,EAClB,OAAwB;QAExB,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;QACrH,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,OAAO,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,mCAAmC,CACvC,YAAoB,EACpB,SAAkB,EAClB,OAAwB;QAExB,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,OAAO,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,yCAAyC;IAEzC;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAmC,EAAE,OAAwB;QACrF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAa,EAAE,OAAwB;QAC/D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,EAAE,EAC5G,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,mBAAmB,CAAC,OAAwB;QAChD,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,QAA2B,EAAE,QAAmB,EAAE,OAAwB;QAC5F,IAAI,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,eAAe,CAAC,aAAa,QAAQ,EAAE,CAAC;QAE9H,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,IAAI,aAAa,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAwB,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,QAA2B,EAAE,IAAc,EAAE,OAAwB;QAC7F,IAAI,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,eAAe,CAAC,aAAa,QAAQ,EAAE,CAAC;QAC9H,GAAG,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,GAAG,CAAwB,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,sBAAsB;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,IAA2B,EAC3B,OAAwB,EACxB,WAAgD;QAEhD,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC1F,MAAM,WAAW,GAAG,WAAW;YAC7B,CAAC,CAAC,IAAI,eAAe,CACnB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAA4B,CAC5H,CAAC,QAAQ,EAAE;YACZ,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvH,OAAO,IAAI,CAAC,IAAI,CAA2B,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,yBAAyB;IACzB;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,IAA4C,EAAE,OAAwB;QAC9F,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,EAC/F,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,2BAA2B,CAAC,OAAwB;QACxD,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4BAA4B,CAAC,IAAkD,EAAE,OAAwB;QAC7G,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAAC,OAAwB;QACpD,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,OAAO,CACR,CAAC;IACJ,CAAC;CAEF;AAED,0FAA0F;AAC1F,IAAI,sBAAsB,GAA8C,IAAI,CAAC;AAE7E,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,IAAI,kCAAkC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC"}
+{"version":3,"file":"wildo-http-client-manual-calls.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/requests/wildo-http-client-manual-calls.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,EAA6F,eAAe,EAA8B,UAAU,EAAyB,kBAAkB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAC3T,OAAO,EAAkB,sBAAsB,EAAgC,MAAM,sCAAsC,CAAC;AAE5H;;;GAGG;AAEH,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAgE3C,MAAM,OAAO,kCAAmC,SAAQ,sBAAsB;IAE5E,YAAY,SAAuC,EAAE;QACnD,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,mBAA2B,EAAE,OAAwB;QAC9E,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,wBAAwB,mBAAmB,EAAE,CAAC;QAC7J,OAAO,IAAI,CAAC,GAAG,CAA6C,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED,6EAA6E;IAC7E;;;;;;;OAOG;IACH,KAAK,CAAC,qBAAqB,CAAC,MAAuB,EAAE,OAAwB;QAC3E,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACzI,OAAO,IAAI,CAAC,GAAG,CAAyB,GAAG,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,YAAoB,EAAE,QAA4B,EAAE,QAAkB,EAAE,OAAwB;QACzH,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,EAChF,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAAC,KAAa,EAAE,OAAwB;QAClE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,kCAAkC,CAAC,EAAE,EACjH,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,OAAwB;QAC3D,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,CAA6B,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5J,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,OAAwB;QAC/D,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC,GAAG,CAAM,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACvG,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAA8D,EAAE,OAAwB;QACrH,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC;QAC5F,OAAO,IAAI,CAAC,IAAI,CAAyB,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrK,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA8B,EAAE,OAAwB;QACzE,OAAO,IAAI,CAAC,IAAI,CAAyB,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/J,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,aAAa,CAAC,OAAwB;QAC1C,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,EAAE,EACjG,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,yBAAyB,CAC7B,WAAmB,EACnB,SAAkB,EAClB,OAAwB;QAExB,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,OAAO,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,OAAwB;QAC3D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,0BAA0B,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAC1C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAwB;QAC9C,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,EAC1F,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,sCAAsC;IAEtC;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,KAAa,EAAE,OAAwB;QAChE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,EAAE,EAC1G,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAa,EAAE,WAAmB,EAAE,OAAwB;QACtF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,EAAE,EAC3G,EAAE,KAAK,EAAE,WAAW,EAAE,EACtB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,oCAAoC;IAEpC;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,IAA0G,EAAE,OAAwB;QACjJ,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE,EAC5F,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,OAAwB;QAC7D,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,aAAa,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC,GAAG,CAA6B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAA0H,EAC1H,OAAwB;QA2BxB,OAAO,IAAI,CAAC,IAAI,CAcd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAA2D,EAC3D,OAAwB;QAExB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAAwB;QAExB,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CACtB,YAAoB,EACpB,OAAwB;QAExB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,YAAY,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CACtB,YAAoB,EACpB,eAAwB,EACxB,OAAwB;QAExB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,YAAY,EAAE,eAAe,EAAE,EACjC,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAa,EAAE,OAAwB;QAMtE,OAAO,IAAI,CAAC,IAAI,CAMd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,EAAE,KAAK,EAAE,KAAK,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAa,EAAE,OAAwB;QACnE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,OAAwB;QAC/D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,uBAAuB,CAAC,EAAE,EACtG,EAAE,SAAS,EAAE,EACb,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,IAAY,EAAE,OAAwB;QAC/E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,YAAY,CAAC,OAAwB;QACzC,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,EAAE,IAAI,EAAE,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,IAAY,EAAE,OAAwB;QAC3E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,EACnG,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,2BAA2B;IAE3B,KAAK,CAAC,sBAAsB,CAAC,SAAkB,EAAE,OAAwB;QACvE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,EAAE,EAC5G,EAAE,SAAS,EAAE,EACb,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,UAAmC,EAAE,OAAwB;QACvF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,EAAE,EAC3G,UAAU,EACV,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,OAAwB;QAClE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,SAAS,EAAE,EACb,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAmC,EAAE,OAAwB;QACnF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,UAAU,EACV,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAwB;QACxC,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,OAAwB;QAChE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,YAAY,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,IAAY,EAAE,OAAwB;QAC9E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,EAClG,EAAE,YAAY,EAAE,IAAI,EAAE,EACtB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,gCAAgC;IAEhC,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,OAAwB;QACzD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,EACnG,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,KAAa,EAAE,OAAwB;QAC1E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,EAAE,KAAK,EAAE,KAAK,EAAE,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,6BAA6B;IAE7B,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,WAAoB,EAAE,OAAwB;QAChF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,EAAE,SAAS,EAAE,WAAW,EAAE,EAC1B,OAAO,CACR,CAAC;IACJ,CAAC;IAED,wCAAwC;IAExC,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,OAAwB;QACjE,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,EAAE,WAAW,EAAE,EACf,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,WAAmB,EAAE,IAAY,EAAE,OAAwB;QAClF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,EACxG,EAAE,WAAW,EAAE,IAAI,EAAE,EACrB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,mCAAmC;IAEnC,KAAK,CAAC,cAAc,CAAC,eAAuB,EAAE,WAAmB,EAAE,OAAwB;QACzF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,EACnG,EAAE,eAAe,EAAE,WAAW,EAAE,EAChC,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,EAAE,WAAW,EAAE,EACf,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAwB;QAC3C,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,EAAE,EACpG,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAwB;QACzC,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAwB;QAC7C,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,EACvG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,OAAwB;QAC/D,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC,MAAM,CAAwB,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAgD,EAAE,WAA6E,EAAE,OAAwB;QAC5K,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,EAC1F,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,EAC1B,OAAO,CACR,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,gCAAgC,CACpC,KAAa,EACb,YAAoB,EACpB,SAAkB,EAClB,OAAwB;QAExB,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;QACrH,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,OAAO,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,mCAAmC,CACvC,YAAoB,EACpB,SAAkB,EAClB,OAAwB;QAExB,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,OAAO,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAa,EAAE,OAAwB;QAC/D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,EAAE,EAC5G,EAAE,KAAK,EAAE,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAAoC,EAAE,OAAwB;QACvF,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,EAAE,EAC1G,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,mBAAmB,CAAC,OAAwB;QAChD,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,EAChG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,QAA2B,EAAE,QAAmB,EAAE,OAAwB;QAC5F,IAAI,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,eAAe,CAAC,aAAa,QAAQ,EAAE,CAAC;QAE9H,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,IAAI,aAAa,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAwB,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,QAA2B,EAAE,IAAc,EAAE,OAAwB;QAC7F,IAAI,GAAG,GAAG,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,eAAe,CAAC,aAAa,QAAQ,EAAE,CAAC;QAC9H,GAAG,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,GAAG,CAAwB,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,sBAAsB;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,IAA2B,EAC3B,OAAwB,EACxB,WAAgD;QAEhD,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC1F,MAAM,WAAW,GAAG,WAAW;YAC7B,CAAC,CAAC,IAAI,eAAe,CACnB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAA4B,CAC5H,CAAC,QAAQ,EAAE;YACZ,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvH,OAAO,IAAI,CAAC,IAAI,CAA2B,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,yBAAyB;IACzB;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,IAA4C,EAAE,OAAwB;QAC9F,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,EAC/F,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,2BAA2B,CAAC,OAAwB;QACxD,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4BAA4B,CAAC,IAAkD,EAAE,OAAwB;QAC7G,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,EACzG,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAAC,OAAwB;QACpD,OAAO,IAAI,CAAC,GAAG,CACb,GAAG,eAAe,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EACrG,OAAO,CACR,CAAC;IACJ,CAAC;CAEF;AAED,0FAA0F;AAC1F,IAAI,sBAAsB,GAA8C,IAAI,CAAC;AAE7E,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,IAAI,kCAAkC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC","sourcesContent":["/**\n * WildoBackendHttpClient_ManualCalls\n * Specialized HTTP client for manual/custom API calls\n * Extends base WildoBackendHttpClient with flexibility for non-standard endpoints\n */\n\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models';\nimport type {\n  AggregationQueryResponse,\n  AuthInvitationInfoResponse,\n  ChartDataRequestBody,\n  CrossFrontendHandoffRequest,\n  CrossFrontendHandoffResponse,\n  ExternalIdentitySource,\n  MilestoneDefinition,\n  OneOffTokenExchangeResponse,\n  SsoConnectionType,\n  TokenExchangeResponse,\n} from '@wildo-ai/saas-models';\nimport { AppConfiguration_FrontendBootstrapResponse, AuthenticationRequest, AuthenticationResponse, AuthFactorLevel, AuthIdentificationResponse, AuthMethod, I18nLabelsResponseDto, MAIN_API_BASE_PATH, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey, TokenExchangeRequestSchema } from '@wildo-ai/saas-models';\nimport { RequestOptions, WildoBackendHttpClient, WildoBackendHttpClientConfig } from './wildo-http-client.frontend.service';\n\n/**\n * Specialized HTTP client for manual/custom API calls\n * Provides methods for application configuration and other manual endpoints\n */\n\n// Single source of truth for the API mount prefix — shared with the backend\n// HTTP server mount and the refresh-token cookie `Path` so the URLs this\n// client builds always hit the same served paths the cookie is scoped to.\nconst API_CALL_PREFIX = MAIN_API_BASE_PATH;\n\n/**\n * OIDC interactive-consent (S1). `GET /oauth/authorize` for a `requiresConsent` client returns this\n * INSTEAD of a code redirect: the app renders a consent screen from it. `resource` is the A2A/MCP\n * agent endpoint (RFC 8707) the delegated token will be bound to; `null` when the request carried none.\n */\nexport interface OAuthConsentRequiredResponse {\n  consent_required: true;\n  consent_token: string;\n  client: { id: string; name: string };\n  scopes: string[];\n  resource: string | null;\n}\n\n/**\n * Trusted (non-`requiresConsent`) authorize result: the backend already minted the authorization code\n * and returns the redirect target (same `{ redirect_to }` shape as the consent decision, but a distinct\n * event — no user prompt). The SPA navigates the browser there without showing a consent screen.\n */\nexport interface OAuthAuthorizeRedirectResponse {\n  redirect_to: string;\n}\n\n/**\n * `GET /oauth/authorize` result: EITHER a consent prompt (a `requiresConsent` client) OR a direct\n * redirect (a trusted client, code already minted). Discriminated by the presence of `consent_required`.\n */\nexport type OAuthAuthorizeResponse = OAuthConsentRequiredResponse | OAuthAuthorizeRedirectResponse;\n\n/**\n * The consent decision result (S1). The app navigates the browser to `redirect_to`\n * (`window.location.assign`) to complete the OAuth redirect back to the third-party client — carrying\n * either the authorization `code` (approve) or `error=access_denied` (deny).\n */\nexport interface OAuthConsentDecisionResponse {\n  redirect_to: string;\n}\n\n/**\n * The OIDC RP-Initiated Logout §6 confirmation result (revocation-C). After the End-User confirms, the\n * backend terminated the session and returns the signed-out page as `redirect_to` (always same-origin\n * `/oauth/logged-out`); the app navigates there. A stale/invalid token yields the same landing WITHOUT\n * terminating, so the caller need not distinguish success from a no-op.\n */\nexport interface OAuthEndSessionConfirmResponse {\n  redirect_to: string;\n}\n\n/**\n * One of the authenticated caller's own pending invitations, as returned by\n * `GET /auth/invitations/mine` (Approach P). Mirrors the backend\n * `listMyPendingInvitations` projection; the invitee is not yet a member, so only\n * the org id/name + granted roles are surfaced for the \"accept/reject\" UI.\n */\nexport interface MyPendingInvitationView {\n  /** The INVITED membership row id — the accept/decline target (junction model). */\n  membershipId: string;\n  organizationId: string;\n  organizationName?: string;\n  roles: string[];\n  createdAt?: string;\n}\n\nexport class WildoBackendHttpClient_ManualCalls extends WildoBackendHttpClient {\n\n  constructor(config: WildoBackendHttpClientConfig = {}) {\n    super(config);\n  }\n\n  /**\n   * Retrieve application configuration from backend\n   * @param frontendServiceName Frontend service identity (required)\n   * @param options Optional request options for headers, timeout, etc.\n   * @returns Promise<AppConfiguration_FrontendBootstrapResponse> The application configuration plus frontend provider bootstrap data\n   */\n  async getApplicationConfig(frontendServiceName: string, options?: RequestOptions): Promise<AppConfiguration_FrontendBootstrapResponse> {\n    const url = `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET]}?frontendServiceName=${frontendServiceName}`;\n    return this.get<AppConfiguration_FrontendBootstrapResponse>(url, options);\n  }\n\n  // ── OIDC interactive consent (S1) ─────────────────────────────────────────\n  /**\n   * `GET /oauth/authorize` for the browser authorize flow. `params` are the raw authorize query the\n   * third-party client redirected with (`response_type=code`, `client_id`, `redirect_uri`,\n   * `code_challenge`(+`_method=S256`), optional `scope`/`resource`/`state`/`nonce`). Returns EITHER the\n   * `consent_required` payload (a `requiresConsent` client → the SPA renders the consent screen) OR a\n   * `{ redirect_to }` payload (a trusted client → the code is already minted; the SPA navigates the\n   * browser there). The Bearer is auto-attached.\n   */\n  async oauthAuthorizeConsent(params: URLSearchParams, options?: RequestOptions): Promise<OAuthAuthorizeResponse> {\n    const url = `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.OAUTH_PROVIDER_AUTHORIZE]}?${params.toString()}`;\n    return this.get<OAuthAuthorizeResponse>(url, options);\n  }\n\n  /**\n   * `POST /oauth/authorize/decision` — record the user's approve/deny. `remember` (Item 3) opts into a\n   * durable consent grant so a future authorize with covering scopes skips the prompt; sent as the\n   * string `'true'`/`'false'` the backend compares against. Returns `{ redirect_to }`; the caller\n   * navigates the browser there to complete the OAuth redirect to the third-party client.\n   */\n  async oauthConsentDecision(consentToken: string, decision: 'approve' | 'deny', remember?: boolean, options?: RequestOptions): Promise<OAuthConsentDecisionResponse> {\n    return this.post<OAuthConsentDecisionResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.OAUTH_PROVIDER_CONSENT]}`,\n      { consent_token: consentToken, decision, remember: remember ? 'true' : 'false' },\n      options,\n    );\n  }\n\n  /**\n   * `POST /oauth/end-session/confirm` — the OIDC RP-Initiated Logout §6 confirmation decision. Presents the\n   * single-use `token` the `/oauth/logout-confirm` prompt was redirected with; the backend consumes it,\n   * terminates the named session, and returns `{ redirect_to }` (the signed-out page). Token-authorized —\n   * no Bearer is required (the End-User may be unauthenticated here, having arrived via an RP redirect).\n   */\n  async oauthEndSessionConfirm(token: string, options?: RequestOptions): Promise<OAuthEndSessionConfirmResponse> {\n    return this.post<OAuthEndSessionConfirmResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.OAUTH_PROVIDER_END_SESSION_CONFIRM]}`,\n      { token },\n      options,\n    );\n  }\n\n  // Authentication manual calls\n  async identifyByEmail(email: string, options?: RequestOptions): Promise<AuthIdentificationResponse> {\n    const body = { email };\n    return this.post<AuthIdentificationResponse>(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTIFY]}`, body, options);\n  }\n\n  async getSessionState(sessionId: string, options?: RequestOptions): Promise<any> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_SESSION_STATE];\n    return this.get<any>(`${API_CALL_PREFIX}${routeTemplate.replace(':sessionId', sessionId)}`, options);\n  }\n\n  async authenticateWithPassword(params: { sessionId: string; email: string; password: string }, options?: RequestOptions): Promise<AuthenticationResponse> {\n    const body = { ...params, method: AuthMethod.PASSWORD, factorLevel: AuthFactorLevel.FIRST };\n    return this.post<AuthenticationResponse>(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_AUTHENTICATE_PASSWORD]}`, body, options);\n  }\n\n  async authenticate(request: AuthenticationRequest, options?: RequestOptions): Promise<AuthenticationResponse> {\n    return this.post<AuthenticationResponse>(`${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_AUTHENTICATE]}`, request, options);\n  }\n\n  /**\n   * Refresh access token. Calls POST /api/v1/auth/token/refresh.\n   *\n   * **Cookie-only contract** (Auth-hardening Slice A Step 6, 2026-04-13).\n   * The refresh token travels EXCLUSIVELY via the `__wildo_refresh`\n   * `HttpOnly` cookie (set by the backend on every issuance / rotation,\n   * scoped `Path=/api/v1/auth`). The browser automatically attaches it because\n   * the shared HTTP client's `authCookiesInterceptor` flips\n   * `withCredentials: true` on every `/auth/*` request. The request body\n   * is EMPTY and the backend's `RefreshTokenBodySchema` is\n   * `z.strictObject({})` — re-introducing a body field here would now\n   * fail backend validation with a 400.\n   *\n   * History: A-Step 2 (2026-04-13) added the cookie channel; A-Step 3\n   * stopped this client from emitting the body field; A-K-5 added a\n   * transitional backend dual-read; A-Step 6 dropped the body channel.\n   *\n   * @returns Fresh `{ accessToken, expiresIn }`. The refresh token is\n   *   NOT in the response body — the rotated value lives only in the\n   *   `Set-Cookie: __wildo_refresh=…` response header (HttpOnly, so\n   *   JavaScript here cannot observe it).\n   */\n  async refreshTokens(options?: RequestOptions): Promise<{ accessToken: string; expiresIn?: number }> {\n    return this.post<{ accessToken: string; expiresIn?: number }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_TOKEN_REFRESH]}`,\n      {},\n      options,\n    );\n  }\n\n  /**\n   * Get OAuth2 authorization URL for a given provider.\n   * Calls GET /api/v1/auth/oauth2/authorize/:providerRef\n   * @param providerRef The SSO provider reference (e.g., 'google', 'microsoft')\n   * @returns The authorization URL to redirect the user to\n   *\n   * Browser-only — the framework targets web stacks exclusively, so the\n   * caller always opens the returned URL via `window.location.href`.\n   */\n  async getOAuth2AuthorizationUrl(\n    providerRef: string,\n    returnUrl?: string,\n    options?: RequestOptions,\n  ): Promise<{ authorizationUrl: string }> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_OAUTH2_AUTHORIZE];\n    const baseUrl = `${API_CALL_PREFIX}${routeTemplate.replace(':providerRef', providerRef)}`;\n    const url = returnUrl\n      ? `${baseUrl}?returnUrl=${encodeURIComponent(returnUrl)}`\n      : baseUrl;\n    return this.get<{ authorizationUrl: string }>(url, options);\n  }\n\n  /**\n   * Exchange a one-time AUTH_CODE_EXCHANGE token for access and refresh tokens.\n   * Calls POST /api/v1/auth/token/exchange.\n   *\n   * Two issuers feed this endpoint:\n   *   - OAuth2 / SAML callback (`auth-code-exchange.md` Step 4) — token carries\n   *     `accessToken`/`expiresIn` only. Refresh arrives through the\n   *     HttpOnly cookie channel, and response body omits both `refreshToken` and the\n   *     `returnPath`/`sourceFrontendServiceName`/`targetServiceKey` fields.\n   *   - Cross-frontend handoff (`cross-app-jwt-propagation.md` Step 2 + Step 5)\n   *     — token additionally carries `returnPath`/`sourceFrontendServiceName`/\n   *     `targetServiceKey`. Response surfaces them so the receiving SPA can\n   *     navigate to `returnPath` and render telemetry.\n   *\n   * Receivers detect \"this came from a cross-frontend handoff\" by checking\n   * `typeof returnPath === 'string'`. Renamed from `exchangeOAuth2Code`\n   * (cross-app-jwt-propagation Step 5 deferred) — the method now serves\n   * BOTH the OAuth2 callback path (`Auth_AuthCallback`) AND the\n   * cross-frontend handoff receiver (`Auth_OneOffSession` in\n   * `cross-frontend-handoff` mode), so the OAuth2-specific naming was\n   * misleading. The docs site's own client (`engine/saas-technical-doc/\n   * src/runtime/docs-auth-client.ts`) already uses the same name —\n   * single conceptual symbol across both client surfaces.\n   *\n   * @param code The one-time AUTH_CODE_EXCHANGE token (from `?code=` query\n   *   param after either an OAuth2 callback or a cross-frontend handoff redirect).\n   */\n  async exchangeAuthCode(code: string, options?: RequestOptions): Promise<TokenExchangeResponse> {\n    return this.post<TokenExchangeResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_TOKEN_EXCHANGE]}`,\n      TokenExchangeRequestSchema.parse({ code }),\n      options,\n    );\n  }\n\n  /**\n   * Logout from the backend by revoking the refresh token AND clearing the\n   * `__wildo_refresh` cookie. Calls POST /api/v1/auth/logout.\n   *\n   * **Cookie-only contract** (Auth-hardening Slice A Step 6, 2026-04-13).\n   * The refresh token travels EXCLUSIVELY via the cookie (auto-attached\n   * by the `authCookiesInterceptor`); the request body is EMPTY and the\n   * backend's `LogoutBodySchema` is `z.strictObject({})`. The backend\n   * ALWAYS clears the cookie on response, so logout works even when the\n   * cookie is present but the JS access token was lost (e.g., after a\n   * tab crash). `tokenIssuer.revokeRefreshToken()` is best-effort —\n   * clearing the cookie is the user-visible action and never blocks on\n   * revocation.\n   */\n  async logoutFromBackend(options?: RequestOptions): Promise<void> {\n    await this.post<void>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_LOGOUT]}`,\n      {},\n      options,\n    );\n  }\n\n  // ─── Password Reset manual calls ───\n\n  /**\n   * Request a password reset email.\n   * Calls POST /api/v1/auth/password-reset/request\n   * The backend always returns success to prevent email enumeration.\n   * @param email The email address to send the reset link to\n   */\n  async requestPasswordReset(email: string, options?: RequestOptions): Promise<{ message: string }> {\n    return this.post<{ message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_RESET_REQUEST]}`,\n      { email },\n      options,\n    );\n  }\n\n  /**\n   * Complete a password reset by providing the token and new password.\n   * Calls POST /api/v1/auth/password-reset/complete\n   * @param token The reset token from the email link\n   * @param newPassword The new password\n   */\n  async completePasswordReset(token: string, newPassword: string, options?: RequestOptions): Promise<{ message: string }> {\n    return this.post<{ message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_RESET_COMPLETE]}`,\n      { token, newPassword },\n      options,\n    );\n  }\n\n  // ─── Registration manual calls ───\n\n  /**\n   * Register a new user account.\n   * Calls POST /api/v1/auth/register\n   * The backend always returns a generic success message to prevent email enumeration.\n   * @param data Registration form data (email, firstName, lastName, password)\n   */\n  async register(data: { email: string; firstName: string; lastName: string; password?: string; organizationName?: string }, options?: RequestOptions): Promise<{ message: string; ssoRedirectHint?: boolean }> {\n    return this.post<{ message: string; ssoRedirectHint?: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REGISTER]}`,\n      data,\n      options,\n    );\n  }\n\n  /**\n   * Discover the org's SSO/SCIM-aware first-factor auth methods for a PUBLIC\n   * invitation-accept screen, keyed by the invitation token WITHOUT consuming it\n   * (unlike accept). Calls GET /api/v1/auth/invitation/info?token=…\n   *\n   * Distinct from `identifyByEmail` (email→domain, requires an existing user):\n   * this works for a not-yet-activated invitee (INVITED membership, no session) and\n   * additionally returns `managementMode` (open/sso/scim) so the chooser can render\n   * the SCIM informational state instead of a credential form. The returned\n   * `availableFirstFactorMethods` are consumed identically to `identify()`'s\n   * `firstFactorMethods`, so the login `AUTH_METHOD_COMPONENTS` registry renders them.\n   */\n  async getInvitationInfo(token: string, options?: RequestOptions): Promise<AuthInvitationInfoResponse> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_INVITATION_INFO];\n    const url = `${API_CALL_PREFIX}${routeTemplate}?token=${encodeURIComponent(token)}`;\n    return this.get<AuthInvitationInfoResponse>(url, options);\n  }\n\n  /**\n   * Accept an invitation using a public invitation token.\n   * Calls POST /api/v1/auth/invitation/accept\n   *\n   * Two outcomes on the wire (discriminated by `credentialMethod`):\n   *  - PASSWORD / absent / PASSKEY → a SESSION (`accessToken` when the pipeline completed,\n   *    else MFA-continuation fields). This is the path `AuthSessionContext.acceptInvitation`\n   *    drives.\n   *  - `MAGIC_LINK` → NO session; a link is emailed and the response is the generic\n   *    `{ messageRef, message }` (\"check your email\", anti-enumeration). The invitation\n   *    magic-link sub-form calls this directly and ignores the body (success ⇒ link sent).\n   */\n  async acceptInvitation(\n    data: { invitationToken: string; firstName?: string; lastName?: string; password?: string; credentialMethod?: AuthMethod },\n    options?: RequestOptions,\n  ): Promise<{\n    sessionId: string;\n    state: string;\n    purpose: string;\n    nextStep?: string;\n    userId?: string;\n    accessToken?: string;\n    expiresIn?: number;\n    requiresMFA?: boolean;\n    availableEnrollmentMethods?: AuthMethod[];\n    /**\n     * The Wildo refresh token is NEVER on the wire (cookie-only contract, Auth-hardening\n     * A-Step 6) — the controller sets it as the `__wildo_refresh` HttpOnly cookie. So this\n     * return type intentionally omits `refreshToken`.\n     */\n    /** Present ONLY on the MAGIC_LINK-at-accept outcome (no session issued). */\n    message?: string;\n    messageRef?: string;\n    /**\n     * Present ONLY on the PASSKEY-at-accept session-issued outcome — the pre-generated WebAuthn\n     * registration challenge. The caller runs the browser ceremony and completes it against the\n     * authenticated `/auth/passkey/register/verify` route. Shape is the `@simplewebauthn` options\n     * JSON (kept as `Record` here to avoid coupling the HTTP client to the browser lib).\n     */\n    passkeyRegistrationOptions?: Record<string, unknown>;\n  }> {\n    return this.post<{\n      sessionId: string;\n      state: string;\n      purpose: string;\n      nextStep?: string;\n      userId?: string;\n      accessToken?: string;\n      expiresIn?: number;\n      requiresMFA?: boolean;\n      availableEnrollmentMethods?: AuthMethod[];\n      message?: string;\n      messageRef?: string;\n      passkeyRegistrationOptions?: Record<string, unknown>;\n    }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ACCEPT_INVITATION]}`,\n      data,\n      options,\n    );\n  }\n\n  /**\n   * Reject an invitation using a public invitation token.\n   * Calls POST /api/v1/auth/invitation/reject\n   */\n  async rejectInvitation(\n    data: { invitationToken: string; rejectionReason?: string },\n    options?: RequestOptions,\n  ): Promise<{ rejected: true; status: 'REJECTED' }> {\n    return this.post<{ rejected: true; status: 'REJECTED' }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REJECT_INVITATION]}`,\n      data,\n      options,\n    );\n  }\n\n  /**\n   * List the authenticated caller's OWN pending invitations across all organizations\n   * (Approach P, email-owned — no token). Calls GET /api/v1/auth/invitations/mine.\n   */\n  async listMyPendingInvitations(\n    options?: RequestOptions,\n  ): Promise<{ invitations: MyPendingInvitationView[] }> {\n    return this.get<{ invitations: MyPendingInvitationView[] }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_LIST_MY_INVITATIONS]}`,\n      options,\n    );\n  }\n\n  /**\n   * Accept ONE of the caller's own pending invitations in-app — no token, no new session\n   * (the caller is already authenticated). Calls POST /api/v1/auth/invitations/accept.\n   */\n  async acceptMyInvitation(\n    membershipId: string,\n    options?: RequestOptions,\n  ): Promise<{ accepted: true; organizationId: string }> {\n    return this.post<{ accepted: true; organizationId: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ACCEPT_MY_INVITATION]}`,\n      { membershipId },\n      options,\n    );\n  }\n\n  /**\n   * Decline ONE of the caller's own pending invitations in-app (deletes the INVITED\n   * membership row). Calls POST /api/v1/auth/invitations/reject.\n   */\n  async rejectMyInvitation(\n    membershipId: string,\n    rejectionReason?: string,\n    options?: RequestOptions,\n  ): Promise<{ rejected: true; organizationId: string }> {\n    return this.post<{ rejected: true; organizationId: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REJECT_MY_INVITATION]}`,\n      { membershipId, rejectionReason },\n      options,\n    );\n  }\n\n  /**\n   * Verify an email address using the token and email from the verification link.\n   * Calls POST /api/v1/auth/verify-email\n   * On success, returns JWT tokens for auto-login.\n   */\n  async verifyEmail(token: string, email: string, options?: RequestOptions): Promise<{\n    accessToken?: string; refreshToken?: string; expiresIn?: number;\n    userId?: string; sessionId?: string; state?: string; nextStep?: string;\n    requiresMFA?: boolean; availableEnrollmentMethods?: AuthMethod[]; requireStrongMFA?: boolean;\n    mfaGraceExpiresAt?: string;\n  }> {\n    return this.post<{\n      accessToken?: string; refreshToken?: string; expiresIn?: number;\n      userId?: string; sessionId?: string; state?: string; nextStep?: string;\n      requiresMFA?: boolean; availableEnrollmentMethods?: AuthMethod[]; requireStrongMFA?: boolean;\n      mfaGraceExpiresAt?: string;\n    }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_VERIFY_EMAIL]}`,\n      { token, email },\n      options,\n    );\n  }\n\n  async resendVerificationEmail(email: string, options?: RequestOptions): Promise<{ messageRef: string; message: string }> {\n    return this.post<{ messageRef: string; message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_RESEND_VERIFICATION]}`,\n      { email },\n      options,\n    );\n  }\n\n  // ─── MFA: Email OTP ───\n\n  async mfaEmailOTPSend(sessionId: string, options?: RequestOptions): Promise<{ message: string }> {\n    return this.post<{ message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_EMAIL_OTP_SEND]}`,\n      { sessionId },\n      options,\n    );\n  }\n\n  async mfaEmailOTPVerify(sessionId: string, code: string, options?: RequestOptions): Promise<AuthenticationResponse> {\n    return this.post<AuthenticationResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_EMAIL_OTP_VERIFY]}`,\n      { sessionId, code },\n      options,\n    );\n  }\n\n  // ─── MFA: TOTP ───\n\n  async mfaTOTPSetup(options?: RequestOptions): Promise<{ secret: string; qrCodeUri: string; backupCodes?: string[] }> {\n    return this.post<{ secret: string; qrCodeUri: string; backupCodes?: string[] }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_TOTP_SETUP]}`,\n      {},\n      options,\n    );\n  }\n\n  async mfaTOTPVerifySetup(code: string, options?: RequestOptions): Promise<{ verified: boolean }> {\n    return this.post<{ verified: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_TOTP_VERIFY_SETUP]}`,\n      { code },\n      options,\n    );\n  }\n\n  async mfaTOTPVerify(sessionId: string, code: string, options?: RequestOptions): Promise<AuthenticationResponse> {\n    return this.post<AuthenticationResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_TOTP_VERIFY]}`,\n      { sessionId, code },\n      options,\n    );\n  }\n\n  // ─── WebAuthn/Passkey ───\n\n  async passkeyRegisterOptions(sessionId?: string, options?: RequestOptions): Promise<Record<string, unknown>> {\n    return this.post<Record<string, unknown>>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_REGISTER_OPTIONS]}`,\n      { sessionId },\n      options,\n    );\n  }\n\n  async passkeyRegisterVerify(credential: Record<string, unknown>, options?: RequestOptions): Promise<{ registered: boolean }> {\n    return this.post<{ registered: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_REGISTER_VERIFY]}`,\n      credential,\n      options,\n    );\n  }\n\n  async passkeyAuthOptions(sessionId: string, options?: RequestOptions): Promise<Record<string, unknown>> {\n    return this.post<Record<string, unknown>>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_AUTH_OPTIONS]}`,\n      { sessionId },\n      options,\n    );\n  }\n\n  async passkeyAuthVerify(credential: Record<string, unknown>, options?: RequestOptions): Promise<AuthenticationResponse> {\n    return this.post<AuthenticationResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_AUTH_VERIFY]}`,\n      credential,\n      options,\n    );\n  }\n\n  async passkeyList(options?: RequestOptions): Promise<{ credentials: Array<{ credentialId: string; name: string; createdAt: string }> }> {\n    return this.get<{ credentials: Array<{ credentialId: string; name: string; createdAt: string }> }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_LIST]}`,\n      options,\n    );\n  }\n\n  async passkeyRemove(credentialId: string, options?: RequestOptions): Promise<{ success: boolean }> {\n    return this.post<{ success: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_REMOVE]}`,\n      { credentialId },\n      options,\n    );\n  }\n\n  async passkeyRename(credentialId: string, name: string, options?: RequestOptions): Promise<{ success: boolean }> {\n    return this.post<{ success: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSKEY_RENAME]}`,\n      { credentialId, name },\n      options,\n    );\n  }\n\n  // ─── Magic Link (Phase G2) ───\n\n  async magicLinkSend(email: string, options?: RequestOptions): Promise<{ message: string }> {\n    return this.post<{ message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MAGIC_LINK_SEND]}`,\n      { email },\n      options,\n    );\n  }\n\n  async magicLinkVerify(token: string, email: string, options?: RequestOptions): Promise<AuthenticationResponse> {\n    return this.post<AuthenticationResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MAGIC_LINK_VERIFY]}`,\n      { token, email },\n      options,\n    );\n  }\n\n  // ─── SMS OTP (Phase G2) ───\n\n  async smsOTPSend(sessionId: string, phoneNumber?: string, options?: RequestOptions): Promise<{ message: string }> {\n    return this.post<{ message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_SMS_OTP_SEND]}`,\n      { sessionId, phoneNumber },\n      options,\n    );\n  }\n\n  // ─── Phone Verification (Phase G2) ───\n\n  async phoneVerifySend(phoneNumber: string, options?: RequestOptions): Promise<{ message: string }> {\n    return this.post<{ message: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PHONE_VERIFY_SEND]}`,\n      { phoneNumber },\n      options,\n    );\n  }\n\n  async phoneVerifyConfirm(phoneNumber: string, code: string, options?: RequestOptions): Promise<{ verified: boolean }> {\n    return this.post<{ verified: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PHONE_VERIFY_CONFIRM]}`,\n      { phoneNumber, code },\n      options,\n    );\n  }\n\n  // ─── Method Management (#13f) ───\n\n  async passwordChange(currentPassword: string, newPassword: string, options?: RequestOptions): Promise<{ changed: boolean }> {\n    return this.post<{ changed: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_CHANGE]}`,\n      { currentPassword, newPassword },\n      options,\n    );\n  }\n\n  async passwordSet(newPassword: string, options?: RequestOptions): Promise<{ set: boolean }> {\n    return this.post<{ set: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_SET]}`,\n      { newPassword },\n      options,\n    );\n  }\n\n  async mfaTOTPDisable(options?: RequestOptions): Promise<{ disabled: boolean }> {\n    return this.post<{ disabled: boolean }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_TOTP_DISABLE]}`,\n      {},\n      options,\n    );\n  }\n\n  async getMyMethods(options?: RequestOptions): Promise<{ methods: Array<{ method: string; enrolled: boolean; enrolledAt?: string; details?: Record<string, unknown> }> }> {\n    return this.get<{ methods: Array<{ method: string; enrolled: boolean; enrolledAt?: string; details?: Record<string, unknown> }> }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_METHODS_MINE]}`,\n      options,\n    );\n  }\n\n  async getIdentityLinks(options?: RequestOptions): Promise<{ links: Array<{ _id: string; connectionType: SsoConnectionType; source: ExternalIdentitySource; providerRef: string; providerEmail: string; linkedAt: string; lastUsedAt: string }> }> {\n    return this.get<{ links: Array<{ _id: string; connectionType: SsoConnectionType; source: ExternalIdentitySource; providerRef: string; providerEmail: string; linkedAt: string; lastUsedAt: string }> }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTITY_LINKS_LIST]}`,\n      options,\n    );\n  }\n\n  async unlinkIdentityLink(linkId: string, options?: RequestOptions): Promise<{ unlinked: boolean }> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTITY_LINKS_UNLINK];\n    const url = `${API_CALL_PREFIX}${routeTemplate.replace(':linkId', linkId)}`;\n    return this.delete<{ unlinked: boolean }>(url, options);\n  }\n\n  async reAuthenticate(method: AuthMethod.PASSWORD | AuthMethod.PASSKEY, credentials: { password?: string; passkeyResponse?: Record<string, unknown> }, options?: RequestOptions): Promise<{ reAuthToken: string }> {\n    return this.post<{ reAuthToken: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REAUTH]}`,\n      { method, ...credentials },\n      options,\n    );\n  }\n\n  // ─── Enterprise SSO ───\n\n  async getEnterpriseSSOAuthorizationUrl(\n    orgId: string,\n    connectionId: string,\n    returnUrl?: string,\n    options?: RequestOptions,\n  ): Promise<{ authorizationUrl: string }> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ENTERPRISE_SSO_AUTHORIZE];\n    const baseUrl = `${API_CALL_PREFIX}${routeTemplate.replace(':orgId', orgId).replace(':connectionId', connectionId)}`;\n    const url = returnUrl\n      ? `${baseUrl}?returnUrl=${encodeURIComponent(returnUrl)}`\n      : baseUrl;\n    return this.get<{ authorizationUrl: string }>(url, options);\n  }\n\n  async getAppEnterpriseSSOAuthorizationUrl(\n    connectionId: string,\n    returnUrl?: string,\n    options?: RequestOptions,\n  ): Promise<{ authorizationUrl: string }> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_APP_ENTERPRISE_AUTHORIZE];\n    const baseUrl = `${API_CALL_PREFIX}${routeTemplate.replace(':connectionId', connectionId)}`;\n    const url = returnUrl\n      ? `${baseUrl}?returnUrl=${encodeURIComponent(returnUrl)}`\n      : baseUrl;\n    return this.get<{ authorizationUrl: string }>(url, options);\n  }\n\n  async exchangeOneOffToken(token: string, options?: RequestOptions): Promise<OneOffTokenExchangeResponse> {\n    return this.post<OneOffTokenExchangeResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_ONE_OFF_SESSION_EXCHANGE]}`,\n      { token },\n      options,\n    );\n  }\n\n  /**\n   * Request a one-time cross-frontend handoff URL (cross-app-jwt-propagation Step 2 + 3).\n   *\n   * Calls POST /api/v1/auth/cross-frontend-handoff with the user's bearer token. The\n   * backend re-issues a fresh JWT pair, binds it to a single-use AUTH_CODE_EXCHANGE\n   * consumable token (60s TTL), and returns `{ handoffUrl, expiresAt }`. The caller\n   * decides how to use the URL (`location.assign` to replace, `window.open` for a new\n   * tab) — see `requestCrossFrontendHandoff()` /\n   * `useCrossFrontendHandoff()` in `core/security/cross-frontend-handoff.frontend.service.ts`\n   * for the friendlier wrapper that maps backend error codes onto a typed client error.\n   *\n   * Bearer-only — no cookies / `withCredentials`. The base client's authentication\n   * interceptor injects `Authorization: Bearer <accessToken>` and\n   * `X-Frontend-Service-Name: <envFrontendServiceName>` automatically; the backend uses\n   * the latter to (a) scope rate-limiting per `(userId, sourceFrontend)` pair and\n   * (b) cross-validate the source identity against the browser's `Origin` header to\n   * defend against header spoofing.\n   */\n  async crossFrontendHandoff(request: CrossFrontendHandoffRequest, options?: RequestOptions): Promise<CrossFrontendHandoffResponse> {\n    return this.post<CrossFrontendHandoffResponse>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_CROSS_FRONTEND_HANDOFF]}`,\n      request,\n      options,\n    );\n  }\n\n  // ─── Features ───\n\n  async getResolvedFeatures(options?: RequestOptions): Promise<Record<string, unknown>> {\n    return this.get<Record<string, unknown>>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.FEATURES_RESOLVED]}`,\n      options,\n    );\n  }\n\n  // I18n manual calls\n  /**\n   * Retrieve i18n labels from backend\n   * @param language The language to retrieve labels for (required)\n   * @param sections Optional array of specific sections to retrieve\n   * @param options Optional request options for headers, timeout, etc.\n   * @returns Promise<I18nLabelsResponseDto> The i18n labels response\n   */\n  async getI18nLabels(language: AvailableLanguage, sections?: string[], options?: RequestOptions): Promise<I18nLabelsResponseDto> {\n    let url = `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.I18N_GET_LABELS]}?language=${language}`;\n\n    if (sections && sections.length > 0) {\n      url += `&sections=${sections.join(',')}`;\n    }\n\n    return this.get<I18nLabelsResponseDto>(url, options);\n  }\n\n  /**\n   * Load specific translation sub-trees by dot-path keys.\n   * Response preserves the nested structure (e.g. `components.low_level_button` →\n   * `{ components: { low_level_button: { ... } } }`).\n   */\n  async getI18nLabelsByKeys(language: AvailableLanguage, keys: string[], options?: RequestOptions): Promise<I18nLabelsResponseDto> {\n    let url = `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.I18N_GET_LABELS]}?language=${language}`;\n    url += `&keys=${keys.map(k => encodeURIComponent(k)).join(',')}`;\n    return this.get<I18nLabelsResponseDto>(url, options);\n  }\n\n  // Charts manual calls\n  /**\n   * Fetch chart data by chart reference.\n   * Calls POST /api/v1/charts/:chartRef/data with optional explicit inputs.\n   *\n   * @param chartRef Backend-resolvable chart execution reference\n   * @param body Optional body payload (`{ inputs }`)\n   * @param options Optional request options (abort signal, timeout, etc.)\n   * @param queryParams Optional query parameters (for example validated org scope)\n   * @returns Promise<AggregationQueryResponse>\n   */\n  async getChartData(\n    chartRef: string,\n    body?: ChartDataRequestBody,\n    options?: RequestOptions,\n    queryParams?: Record<string, string | undefined>,\n  ): Promise<AggregationQueryResponse> {\n    const routeTemplate = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.CHARTS_DATA];\n    const queryString = queryParams\n      ? new URLSearchParams(\n        Object.entries(queryParams).filter(([, value]) => typeof value === 'string' && value.length > 0) as Array<[string, string]>,\n      ).toString()\n      : '';\n    const url = `${API_CALL_PREFIX}${routeTemplate.replace(':chartRef', chartRef)}${queryString ? `?${queryString}` : ''}`;\n    return this.post<AggregationQueryResponse>(url, body || {}, options);\n  }\n\n  // Analytics manual calls\n  /**\n   * Ingest a batch of analytics events.\n   * Calls POST /api/v1/analytics/events\n   */\n  async postAnalyticsEvents(body: { events: unknown[]; userId?: string }, options?: RequestOptions): Promise<{ accepted: number }> {\n    return this.post<{ accepted: number }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_EVENTS]}`,\n      body,\n      options,\n    );\n  }\n\n  /**\n   * Get achieved value moments for the current user.\n   * Calls GET /api/v1/analytics/moments/achieved\n   */\n  async getAnalyticsMomentsAchieved(options?: RequestOptions): Promise<{ moments: string[] }> {\n    return this.get<{ moments: string[] }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_MOMENTS_ACHIEVED]}`,\n      options,\n    );\n  }\n\n  /**\n   * Mark a value moment as achieved.\n   * Calls POST /api/v1/analytics/moments/achieved\n   */\n  async postAnalyticsMomentsAchieved(body: { momentIdentifier: string; scope?: string }, options?: RequestOptions): Promise<{ success: boolean; momentIdentifier: string }> {\n    return this.post<{ success: boolean; momentIdentifier: string }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_MOMENTS_ACHIEVED]}`,\n      body,\n      options,\n    );\n  }\n\n  /**\n   * Get all registered milestone definitions.\n   * Calls GET /api/v1/progression/milestones\n   */\n  async getMilestoneDefinitions(options?: RequestOptions): Promise<{ definitions: MilestoneDefinition[] }> {\n    return this.get<{ definitions: MilestoneDefinition[] }>(\n      `${API_CALL_PREFIX}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.PROGRESSION_MILESTONES]}`,\n      options,\n    );\n  }\n\n}\n\n// Lazy singleton instance - created on first access to avoid module initialization issues\nlet _manualCallsHttpClient: WildoBackendHttpClient_ManualCalls | null = null;\n\nexport function getManualCallsHttpClient(): WildoBackendHttpClient_ManualCalls {\n  if (!_manualCallsHttpClient) {\n    _manualCallsHttpClient = new WildoBackendHttpClient_ManualCalls();\n  }\n  return _manualCallsHttpClient;\n}\n"]}

package/dist/esm/core/requests/wildo-http-client-resources.frontend.service.d.ts

@@ -3,10 +3,10 @@
  * Specialized HTTP client for resource-based operations (CRUD)
  * Extends base WildoBackendHttpClient with resource-specific functionality
  */
-import { WildoBackendHttpClient, WildoBackendHttpClientConfig, RequestOptions } from './wildo-http-client.frontend.service.js';
+import { WildoBackendHttpClient, WildoBackendHttpClientConfig, RequestOptions } from './wildo-http-client.frontend.service';
 import { DataMode, type Resources_PaginationRequest } from '@wildo-ai/saas-models';
-import type { FrontendResource_ParentResourceRequirement } from '../../core/resources/resource-path.frontend.schemas.js';
-import type { FrontendResourcesRegistry, FrontendResourceConfiguration_Operation } from '../../core/resources/resources.frontend.schemas.js';
+import type { FrontendResource_ParentResourceRequirement } from '../../core/resources/resource-path.frontend.schemas';
+import type { FrontendResourcesRegistry, FrontendResourceConfiguration_Operation } from '../../core/resources/resources.frontend.schemas';
 /**
  * Parameters needed to execute a resource operation
  */
@@ -92,6 +92,12 @@ export declare class WildoBackendHttpClient_Resources extends WildoBackendHttpCl
      * @throws Error if validation fails
      */
     private validateResponseData;
+    /**
+     * Reattach engine metadata (`_version`, `_field_meta`) that a strict responseDto parse strips,
+     * from the raw wire payload onto the parsed result. Recurses into flat arrays (LIST) and
+     * `{ data: [...] }` paginated wrappers so every item keeps its optimistic-locking version.
+     */
+    private static reattachEngineMetadata;
     /**
      * Find an operation in the registry based on operation path
      */
@@ -112,13 +118,13 @@ export declare class WildoBackendHttpClient_Resources extends WildoBackendHttpCl
     private executeSearchOperationInternal;
     /**
      * Select the best matching initiatorInfo based on context.
-     * Uses deterministic algorithm: filter ? sort ? select first.
      *
-     * Selection criteria:
-     * 1. All parameters in initiatorInfo must be satisfiable from contextualParameters
-     * 2. If parentResourcesRequirements specified, relationship fields must match
-     * 3. Among valid options: prefer most specific (most parameters)
-     * 4. Final tiebreaker: prefer default relationships, then alphabetical
+     * The deterministic selection algorithm lives in
+     * `FrontendResourceUtils.selectOperationUrlInitiatorInfo` — shared with
+     * non-transport consumers (e.g. the filters layer derives URL-pinned filter
+     * fields from the same selection). This wrapper owns only the transport
+     * error semantics: an unsatisfiable selection is a hard
+     * FRONTEND_RESOURCE_NO_ENDPOINT_AVAILABLE failure here.
      */
     private selectInitiatorInfo;
     /**

package/dist/esm/core/requests/wildo-http-client-resources.frontend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-http-client-resources.frontend.service.d.ts","sourceRoot":"","sources":["../../../../src/core/requests/wildo-http-client-resources.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC5H,OAAO,EASL,QAAQ,EAIR,KAAK,2BAA2B,EAEjC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AACpI,OAAO,KAAK,EACV,yBAAyB,EAEzB,uCAAuC,EACxC,MAAM,+DAA+D,CAAC;AAMvE;;GAEG;AACH,MAAM,MAAM,gCAAgC,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAQ1E,MAAM,WAAW,+BAA+B;IAC9C,gEAAgE;IAChE,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;IACvE,kDAAkD;IAClD,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,aAAa,GAAG,cAAc,CAAC;IAC1C;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,+BAA+B;IACnF,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,yBAAyB;IACzB,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,iBAAiB;IACjB,UAAU,CAAC,EAAE,2BAA2B,CAAC;CAE1C;AAUD;;;GAGG;AACH,qBAAa,gCAAiC,SAAQ,sBAAsB;IAC1E,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,YAAY,CAAuB;gBAGzC,iBAAiB,EAAE,yBAAyB,EAC5C,MAAM,GAAE,4BAAiC;IAO3C;;OAEG;IACH,OAAO,CAAC,UAAU;IAelB;;;;;OAKG;IACU,WAAW,CAAC,SAAS,GAAG,GAAG,EACtC,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,+BAA+B,EAC3C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC;IAiCrB;;;;;OAKG;IACU,sBAAsB,CAAC,SAAS,GAAG,GAAG,EACjD,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,4BAA4B,EACxC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC;IA0BrB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAezB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IA2B5B;;OAEG;IACH,OAAO,CAAC,aAAa;IAqCrB;;OAEG;YACW,uBAAuB;IA0FrC;;OAEG;YACW,mCAAmC;IA6DjD;;;;OAIG;YACW,8BAA8B;IAmG5C;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAyE3B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAkBlC;;OAEG;IACH,OAAO,CAAC,kCAAkC;IA0D1C;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA0BjC;;OAEG;IACI,0BAA0B,IAAI,MAAM,EAAE;IAe7C;;OAEG;IACI,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,uCAAuC,GAAG,IAAI;CAIrG"}
+{"version":3,"file":"wildo-http-client-resources.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/requests/wildo-http-client-resources.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC5H,OAAO,EASL,QAAQ,EAIR,KAAK,2BAA2B,EAEjC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AACpI,OAAO,KAAK,EACV,yBAAyB,EAEzB,uCAAuC,EACxC,MAAM,+DAA+D,CAAC;AAMvE;;GAEG;AACH,MAAM,MAAM,gCAAgC,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAQ1E,MAAM,WAAW,+BAA+B;IAC9C,gEAAgE;IAChE,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;IACvE,kDAAkD;IAClD,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,aAAa,GAAG,cAAc,CAAC;IAC1C;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,+BAA+B;IACnF,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,yBAAyB;IACzB,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,iBAAiB;IACjB,UAAU,CAAC,EAAE,2BAA2B,CAAC;CAE1C;AAUD;;;GAGG;AACH,qBAAa,gCAAiC,SAAQ,sBAAsB;IAC1E,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,YAAY,CAAuB;gBAGzC,iBAAiB,EAAE,yBAAyB,EAC5C,MAAM,GAAE,4BAAiC;IAO3C;;OAEG;IACH,OAAO,CAAC,UAAU;IAelB;;;;;OAKG;IACU,WAAW,CAAC,SAAS,GAAG,GAAG,EACtC,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,+BAA+B,EAC3C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC;IAiCrB;;;;;OAKG;IACU,sBAAsB,CAAC,SAAS,GAAG,GAAG,EACjD,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,4BAA4B,EACxC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC;IA0BrB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAezB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAqC5B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA4BrC;;OAEG;IACH,OAAO,CAAC,aAAa;IAwCrB;;OAEG;YACW,uBAAuB;IA0FrC;;OAEG;YACW,mCAAmC;IA6DjD;;;;OAIG;YACW,8BAA8B;IAmG5C;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAuC3B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAkBlC;;OAEG;IACH,OAAO,CAAC,kCAAkC;IA0D1C;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA0BjC;;OAEG;IACI,0BAA0B,IAAI,MAAM,EAAE;IAe7C;;OAEG;IACI,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,uCAAuC,GAAG,IAAI;CAIrG"}