@boxyhq/saml-jackson 1.32.0 → 1.33.1-beta.1

package/dist/src/directory-sync/types.d.ts

@@ -0,0 +1,195 @@
+import directorySync from '.';
+import { DirectoryConfig } from './scim/DirectoryConfig';
+import { DirectoryGroups } from './scim/DirectoryGroups';
+import { DirectoryUsers } from './scim/DirectoryUsers';
+import { Users } from './scim/Users';
+import { Groups } from './scim/Groups';
+import { WebhookEventsLogger } from './scim/WebhookEventsLogger';
+import { ApiError } from '../typings';
+import { RequestHandler } from './request';
+import { EventProcessor } from './batch-events/queue';
+import { CronLock as Lock } from '../cron/lock';
+export type IDirectorySyncController = Awaited<ReturnType<typeof directorySync>>;
+export type IDirectoryConfig = InstanceType<typeof DirectoryConfig>;
+export type IDirectoryGroups = InstanceType<typeof DirectoryGroups>;
+export type IDirectoryUsers = InstanceType<typeof DirectoryUsers>;
+export type IUsers = InstanceType<typeof Users>;
+export type IGroups = InstanceType<typeof Groups>;
+export type IWebhookEventsLogger = InstanceType<typeof WebhookEventsLogger>;
+export type IRequestHandler = InstanceType<typeof RequestHandler>;
+export type IEventProcessor = InstanceType<typeof EventProcessor>;
+export type CronLock = InstanceType<typeof Lock>;
+export type DirectorySyncEventType = 'user.created' | 'user.updated' | 'user.deleted' | 'group.created' | 'group.updated' | 'group.deleted' | 'group.user_added' | 'group.user_removed';
+export declare enum DirectorySyncProviders {
+    'azure-scim-v2' = "Azure SCIM v2.0",
+    'onelogin-scim-v2' = "OneLogin SCIM v2.0",
+    'okta-scim-v2' = "Okta SCIM v2.0",
+    'jumpcloud-scim-v2' = "JumpCloud v2.0",
+    'generic-scim-v2' = "Generic SCIM v2.0",
+    'google' = "Google"
+}
+export type DirectoryType = keyof typeof DirectorySyncProviders;
+export type Directory = {
+    id: string;
+    name: string;
+    tenant: string;
+    product: string;
+    type: DirectoryType;
+    log_webhook_events: boolean;
+    scim: {
+        path: string;
+        endpoint?: string;
+        secret: string;
+    };
+    webhook: {
+        endpoint: string;
+        secret: string;
+    };
+    deactivated?: boolean;
+    google_domain?: string;
+    google_access_token?: string;
+    google_refresh_token?: string;
+    google_authorization_url?: string;
+};
+export type DirectorySyncGroupMember = {
+    value: string;
+    email?: string;
+};
+export type DirectorySyncResponse = {
+    status: number;
+    data?: any;
+};
+export interface Events {
+    handle(event: DirectorySyncEvent): Promise<void>;
+}
+export interface DirectorySyncRequest {
+    method: string;
+    body: any | undefined;
+    directoryId: Directory['id'];
+    resourceType: string;
+    resourceId: string | undefined;
+    apiSecret: string | null;
+    query: {
+        count?: number;
+        startIndex?: number;
+        filter?: string;
+    };
+}
+export type DirectorySyncEventData = User | Group | UserWithGroup;
+export interface DirectorySyncEvent {
+    directory_id: Directory['id'];
+    event: DirectorySyncEventType;
+    data: DirectorySyncEventData;
+    tenant: string;
+    product: string;
+}
+export interface WebhookEventLog {
+    id: string;
+    webhook_endpoint: string;
+    created_at: Date;
+    status_code?: number;
+    delivered?: boolean;
+    payload: DirectorySyncEvent | DirectorySyncEvent[];
+}
+export type User = {
+    id: string;
+    email: string;
+    first_name: string;
+    last_name: string;
+    active: boolean;
+    roles?: string[];
+    raw?: any;
+};
+export type Group = {
+    id: string;
+    name: string;
+    raw?: any;
+};
+export type GroupMember = {
+    id: string;
+    raw?: any;
+};
+export type UserWithGroup = User & {
+    group: Group;
+};
+export type PaginationParams = {
+    pageOffset?: number;
+    pageLimit?: number;
+    pageToken?: string;
+    hasNextPage?: boolean;
+};
+export type UserPatchOperation = {
+    op: 'replace' | 'add';
+    path?: string;
+    value: boolean | {
+        active: boolean;
+    } | {
+        'name.givenName': string;
+    } | {
+        'name.familyName': string;
+    } | {
+        'emails[type eq "work"].value': string;
+    } | {
+        [key: string]: string | boolean;
+    };
+};
+export type GroupPatchOperation = {
+    op: 'add' | 'remove' | 'replace';
+    path?: 'members' | 'displayName';
+    value: string | {
+        value: string;
+        display?: string;
+    }[];
+};
+export type GroupMembership = {
+    id: string;
+    group_id: string;
+    user_id: string;
+};
+export type Response<T> = {
+    data: T;
+    error: null;
+    pageToken?: string;
+} | {
+    data: null;
+    error: ApiError;
+};
+export type EventCallback = (event: DirectorySyncEvent) => Promise<void>;
+export interface IDirectoryProvider {
+    /**
+     * Fields to exclude from the user payload while comparing the user to find if it is updated
+     */
+    userFieldsToExcludeWhenCompare?: string[];
+    /**
+     * Fields to exclude from the group payload while comparing the group to find if it is updated
+     */
+    groupFieldsToExcludeWhenCompare?: string[];
+    /**
+     * Get all directories for the provider
+     */
+    getDirectories(): Promise<Directory[]>;
+    /**
+     * Get all users for a directory
+     * @param directory
+     * @param options
+     */
+    getUsers(directory: Directory, options: PaginationParams | null): Promise<{
+        data: User[];
+        metadata: PaginationParams | null;
+    }>;
+    /**
+     * Get all groups for a directory
+     * @param directory
+     * @param options
+     */
+    getGroups(directory: Directory, options: PaginationParams | null): Promise<{
+        data: Group[];
+        metadata: PaginationParams | null;
+    }>;
+    /**
+     * Get all members of a group
+     * @param directory
+     * @param group
+     */
+    getGroupMembers(directory: Directory, group: Group): Promise<GroupMember[]>;
+}

package/dist/src/directory-sync/types.js

@@ -0,0 +1,10 @@
+export var DirectorySyncProviders;
+(function (DirectorySyncProviders) {
+    DirectorySyncProviders["azure-scim-v2"] = "Azure SCIM v2.0";
+    DirectorySyncProviders["onelogin-scim-v2"] = "OneLogin SCIM v2.0";
+    DirectorySyncProviders["okta-scim-v2"] = "Okta SCIM v2.0";
+    DirectorySyncProviders["jumpcloud-scim-v2"] = "JumpCloud v2.0";
+    DirectorySyncProviders["generic-scim-v2"] = "Generic SCIM v2.0";
+    DirectorySyncProviders["google"] = "Google";
+})(DirectorySyncProviders || (DirectorySyncProviders = {}));
+//# sourceMappingURL=types.js.map

package/dist/src/directory-sync/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/directory-sync/types.ts"],"names":[],"mappings":"AAiCA,MAAM,CAAN,IAAY,sBAOX;AAPD,WAAY,sBAAsB;IAChC,2DAAmC,CAAA;IACnC,iEAAyC,CAAA;IACzC,yDAAiC,CAAA;IACjC,8DAAsC,CAAA;IACtC,+DAAuC,CAAA;IACvC,2CAAmB,CAAA;AACrB,CAAC,EAPW,sBAAsB,KAAtB,sBAAsB,QAOjC"}

package/dist/src/directory-sync/utils.d.ts

@@ -0,0 +1,19 @@
+import type { DirectorySyncEventType, Directory, User, Group, EventCallback, DirectorySyncEvent, IWebhookEventsLogger, IDirectoryConfig, JacksonOption, IEventProcessor } from '../typings';
+export declare const eventLockTTL = 30;
+export declare const webhookLogsTTL: number;
+export declare const eventLockKey = "dsync-event-lock";
+export declare const googleLockKey = "dsync-google-lock";
+interface Payload {
+    directory: Directory;
+    group?: Group | null;
+    user?: User | null;
+}
+interface EventCallbackParams {
+    opts: JacksonOption;
+    directories: IDirectoryConfig;
+    eventProcessor: IEventProcessor;
+    webhookLogs: IWebhookEventsLogger;
+}
+export declare const sendEvent: (event: DirectorySyncEventType, payload: Payload, callback?: EventCallback) => Promise<void>;
+export declare const handleEventCallback: ({ opts, directories, eventProcessor, webhookLogs, }: EventCallbackParams) => Promise<(event: DirectorySyncEvent) => Promise<void>>;
+export {};

package/dist/src/directory-sync/utils.js

@@ -0,0 +1,56 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { sendPayloadToWebhook } from '../event/webhook';
+import { transformEventPayload } from './scim/transform';
+import { JacksonError } from '../controller/error';
+export const eventLockTTL = 30;
+export const webhookLogsTTL = 7 * 24 * 60 * 60;
+export const eventLockKey = 'dsync-event-lock';
+export const googleLockKey = 'dsync-google-lock';
+export const sendEvent = (event, payload, callback) => __awaiter(void 0, void 0, void 0, function* () {
+    if (!callback) {
+        return;
+    }
+    yield callback(transformEventPayload(event, payload));
+});
+export const handleEventCallback = (_a) => __awaiter(void 0, [_a], void 0, function* ({ opts, directories, eventProcessor, webhookLogs, }) {
+    // Callback that handles the events for Jackson service
+    return (event) => __awaiter(void 0, void 0, void 0, function* () {
+        var _a, _b;
+        const { tenant, product, directory_id: directoryId } = event;
+        const { data: directory, error } = yield directories.get(directoryId);
+        if (error) {
+            console.error(`Error fetching directory ${directoryId}: ${error.message}`);
+            throw new JacksonError(error.message, error.code);
+        }
+        if (!directory.webhook.endpoint || !directory.webhook.secret) {
+            console.error(`Webhook not configured for directory ${directoryId}. Skipping ...`);
+            return;
+        }
+        // If batch size is set, store the events in the database
+        // We will process the queue later in the background
+        if ((_a = opts.dsync) === null || _a === void 0 ? void 0 : _a.webhookBatchSize) {
+            yield eventProcessor.push(event);
+            return;
+        }
+        let status = 200;
+        try {
+            // Send the event to the webhook (synchronously)
+            yield sendPayloadToWebhook(directory.webhook, event, (_b = opts.dsync) === null || _b === void 0 ? void 0 : _b.debugWebhooks);
+        }
+        catch (err) {
+            status = err.response ? err.response.status : 500;
+        }
+        if (directory.log_webhook_events) {
+            yield webhookLogs.setTenantAndProduct(tenant, product).log(directory, event, status);
+        }
+    });
+});
+//# sourceMappingURL=utils.js.map

package/dist/src/directory-sync/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/directory-sync/utils.ts"],"names":[],"mappings":";;;;;;;;;AAYA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAejD,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,KAA6B,EAC7B,OAAgB,EAChB,QAAwB,EACxB,EAAE;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC,CAAA,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAKX,EAAE,4CALgB,EACxC,IAAI,EACJ,WAAW,EACX,cAAc,EACd,WAAW,GACS;IACpB,uDAAuD;IACvD,OAAO,CAAO,KAAyB,EAAE,EAAE;;QACzC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE7D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEtE,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,4BAA4B,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,wCAAwC,WAAW,gBAAgB,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,oDAAoD;QACpD,IAAI,MAAA,IAAI,CAAC,KAAK,0CAAE,gBAAgB,EAAE,CAAC;YACjC,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,GAAG,CAAC;QAEjB,IAAI,CAAC;YACH,gDAAgD;YAChD,MAAM,oBAAoB,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAA,IAAI,CAAC,KAAK,0CAAE,aAAa,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QACpD,CAAC;QAED,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;YACjC,MAAM,WAAW,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAA,CAAC"}

package/dist/src/ee/branding/index.d.ts

@@ -0,0 +1,17 @@
+import type { Storable, AdminPortalBranding, JacksonOption } from '../../typings';
+export declare class BrandingController {
+    private store;
+    private storeKey;
+    private opts;
+    constructor({ store, opts }: {
+        store: Storable;
+        opts: JacksonOption;
+    });
+    get(): Promise<AdminPortalBranding>;
+    update(params: Partial<AdminPortalBranding>): Promise<{
+        logoUrl: string | null;
+        faviconUrl: string | null;
+        companyName: string | null;
+        primaryColor: string | null;
+    }>;
+}

package/dist/src/ee/branding/index.js

@@ -0,0 +1,49 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { throwIfInvalidLicense } from '../common/checkLicense';
+export class BrandingController {
+    constructor({ store, opts }) {
+        this.storeKey = 'branding';
+        this.store = store;
+        this.opts = opts;
+    }
+    // Get branding
+    get() {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield throwIfInvalidLicense(this.opts.boxyhqLicenseKey);
+            const branding = yield this.store.get(this.storeKey);
+            const defaultBranding = {
+                logoUrl: null,
+                faviconUrl: null,
+                companyName: null,
+                primaryColor: null,
+            };
+            return branding ? branding : defaultBranding;
+        });
+    }
+    // Update branding
+    update(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield throwIfInvalidLicense(this.opts.boxyhqLicenseKey);
+            const { logoUrl, faviconUrl, companyName, primaryColor } = params;
+            const currentBranding = yield this.get();
+            const newBranding = {
+                logoUrl: logoUrl !== null && logoUrl !== void 0 ? logoUrl : null,
+                faviconUrl: faviconUrl !== null && faviconUrl !== void 0 ? faviconUrl : null,
+                companyName: companyName !== null && companyName !== void 0 ? companyName : null,
+                primaryColor: primaryColor !== null && primaryColor !== void 0 ? primaryColor : null,
+            };
+            const updatedbranding = Object.assign(Object.assign({}, currentBranding), newBranding);
+            yield this.store.put(this.storeKey, updatedbranding);
+            return updatedbranding;
+        });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/src/ee/branding/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ee/branding/index.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,OAAO,kBAAkB;IAK7B,YAAY,EAAE,KAAK,EAAE,IAAI,EAA4C;QAH7D,aAAQ,GAAG,UAAU,CAAC;QAI5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,eAAe;IACF,GAAG;;YACd,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAwB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE1E,MAAM,eAAe,GAAG;gBACtB,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,IAAI;aACnB,CAAC;YAEF,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;QAC/C,CAAC;KAAA;IAED,kBAAkB;IACL,MAAM,CAAC,MAAoC;;YACtD,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAExD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAElE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YAEzC,MAAM,WAAW,GAAG;gBAClB,OAAO,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,IAAI;gBACxB,UAAU,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,IAAI;gBAC9B,WAAW,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,IAAI;gBAChC,YAAY,EAAE,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI;aACnC,CAAC;YAEF,MAAM,eAAe,mCAChB,eAAe,GACf,WAAW,CACf,CAAC;YAEF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAErD,OAAO,eAAe,CAAC;QACzB,CAAC;KAAA;CACF"}

package/dist/src/ee/common/checkLicense.d.ts

@@ -0,0 +1,3 @@
+declare const checkLicense: (license: string | undefined) => Promise<boolean>;
+export declare const throwIfInvalidLicense: (license: string | undefined) => Promise<void>;
+export default checkLicense;

package/dist/src/ee/common/checkLicense.js

@@ -0,0 +1,23 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { JacksonError } from '../../controller/error';
+const checkLicense = (license) => __awaiter(void 0, void 0, void 0, function* () {
+    if (!license) {
+        return false;
+    }
+    return license === 'dummy-license';
+});
+export const throwIfInvalidLicense = (license) => __awaiter(void 0, void 0, void 0, function* () {
+    if (!(yield checkLicense(license))) {
+        throw new JacksonError('Enterprise License not found. This is an enterprise feature, please add a valid license to use this feature.', 403);
+    }
+});
+export default checkLicense;
+//# sourceMappingURL=checkLicense.js.map

package/dist/src/ee/common/checkLicense.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkLicense.js","sourceRoot":"","sources":["../../../../src/ee/common/checkLicense.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,YAAY,GAAG,CAAO,OAA2B,EAAoB,EAAE;IAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,KAAK,eAAe,CAAC;AACrC,CAAC,CAAA,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAO,OAA2B,EAAiB,EAAE;IACxF,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CACpB,8GAA8G,EAC9G,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC,CAAA,CAAC;AAEF,eAAe,YAAY,CAAC"}