@brass-build/client 0.3.0 → 0.4.1

package/dist/call-service.js

@@ -0,0 +1,253 @@
+// One brokered call to an outside service.
+//
+// The app names a HOST its manifest declares and a path on it. Brass holds the
+// credential for that host, attaches it, applies the owner's caps, and returns
+// the service's answer, so the key never reaches the browser.
+import { applyAppAssertionHeader, applyClientVersionHeader } from './api-headers.js';
+import { BrassError } from './errors.js';
+// The headers the app named for the SERVICE travel as the value of one header
+// on the Brass request, rather than spread across it. Two things follow, and
+// they are the reason this shape exists. A browser preflights a cross-origin
+// request header by name, so a vendor header spread onto the request would
+// have to be allow-listed by the api before an app could send it at all, and
+// `anthropic-version` could not be sent; carried as data, one allow-listed
+// name covers every vendor. And what the platform sends the service is then
+// exactly this set, with no rule needed to keep Brass's own headers out of it.
+//
+// Percent-encoded JSON, so a value carrying a newline or a character outside
+// ASCII is representable on the header line that carries it.
+export function encodeServiceHeaders(headers) {
+    return encodeURIComponent(JSON.stringify(headers));
+}
+// The path reaches the service verbatim, so a caller's own percent-encoding
+// survives: a service is entitled to whatever encoding it was given. Only the
+// leading separator is the SDK's to normalize, since the caller writing
+// `/v1/messages` and `v1/messages` means the same request.
+//
+// A call at the service's ROOT ends here rather than at a separator with
+// nothing after it, because a trailing slash is a different path to a gateway
+// and to some services, and `callService(host, '/')` is asking for the root
+// rather than for a child of it.
+// A host is case-insensitive to DNS and exact to the lookup that finds the
+// declaration, so the two are reconciled here rather than at each caller: an
+// app that spells one the way its vendor's console does is asking for the
+// service it declared, not for one nothing declares.
+export function normalizeServiceHost(host) {
+    return host.toLowerCase();
+}
+export function brokeredCallUrl(apiBaseUrl, organizationId, host, path) {
+    const base = apiBaseUrl.replace(/\/$/, '');
+    const tail = path.replace(/^\//, '');
+    const call = `${base}/organizations/${encodeURIComponent(organizationId)}/call/${encodeURIComponent(host)}`;
+    return tail === '' || tail.startsWith('?') ? `${call}${tail}` : `${call}/${tail}`;
+}
+// The path is appended to the broker URL, and a URL parser resolves dot and
+// backslash segments before the request leaves the browser: `../x` and
+// `..\x` climb out of the `/call/<host>/` prefix and land the credentialed
+// request on another Brass route, and a `#` truncates the request at the
+// fragment. The server refuses each of these per DECODED segment
+// (`resolveTargetPath`), but that refusal is unreachable once the parser has
+// already rewritten the path, so the same check runs here before anything is
+// sent. It matches the server's verdicts: whole `/`-segments only (an encoded
+// `%2f` stays inside one segment and is the service's own to decode), the tail
+// after the one leading slash the broker URL itself normalizes.
+export function invalidServicePath(path) {
+    const tail = path.replace(/^\//, '');
+    // A fragment is dropped by the parser, so the request past it is silently
+    // lost; a service path carries a literal `#` as `%23`. Read across the
+    // whole tail rather than the pathname, since a `#` after the query starts
+    // the fragment exactly as one before it does.
+    if (tail.includes('#'))
+        return true;
+    const pathname = tail.split('?', 1)[0] ?? '';
+    // Browsers fold `\` into `/`, so a raw backslash is a separator that this
+    // split would miss; the server refuses one outright, and a service path
+    // carries a literal backslash as `%5C`.
+    if (pathname.includes('\\'))
+        return true;
+    // A scheme prefix (`https:`) makes the tail an absolute URL to the parser.
+    if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(pathname))
+        return true;
+    for (const segment of pathname.split('/')) {
+        let decoded;
+        try {
+            decoded = decodeURIComponent(segment);
+        }
+        catch {
+            return true;
+        }
+        if (decoded === '..' || decoded === '.')
+            return true;
+    }
+    return false;
+}
+// The same shape every other refusal on this path takes: a Response the app
+// reads a `code` off, carrying the server's own code for a path it would
+// itself refuse. Returned before the request is built, so a path that would
+// escape the broker never travels with the caller's credentials.
+function invalidPathRefusal() {
+    return new Response(JSON.stringify({
+        error: 'The service path is not a valid request path',
+        code: 'path_invalid',
+    }), { status: 403, headers: { 'content-type': 'application/json' } });
+}
+export async function callService(deps, host, path, options = {}) {
+    // Resolved once, before the first send, so a retry below uses the same
+    // organization and cannot open the resolve dialog a second time.
+    //
+    // The chooser is a question for the person exactly as the two dialogs below
+    // are, so the one option governs it too.
+    const mayAsk = options.requestMissingCredentials === true;
+    // Refused before resolving an organization or opening a chooser: a path that
+    // cannot reach the service is answered without spending either.
+    if (invalidServicePath(path))
+        return invalidPathRefusal();
+    const organizationId = await deps.resolveOrganization(mayAsk);
+    if (organizationId === null)
+        return unresolvedOrganization();
+    const send = async () => {
+        const token = await deps.getAccessToken();
+        if (!token)
+            throw new BrassError('Not signed in', { status: 401 });
+        const headers = {
+            authorization: `Bearer ${token}`,
+        };
+        if (options.headers && Object.keys(options.headers).length > 0) {
+            headers['x-brass-service-headers'] = encodeServiceHeaders(options.headers);
+        }
+        applyClientVersionHeader(headers);
+        await applyAppAssertionHeader(headers, deps.getAppAssertion);
+        const doFetch = deps.fetchImpl ?? fetch;
+        return doFetch(brokeredCallUrl(deps.apiBaseUrl, organizationId, host, path), {
+            method: options.method ?? 'POST',
+            headers,
+            ...(options.body !== undefined ? { body: options.body } : {}),
+        });
+    };
+    const response = await send();
+    // The service's own status is the answer, so nothing here throws on one.
+    // The exceptions are the refusals that are a question for the person rather
+    // than a result for the app: offer the hosted surface that asks it, and send
+    // the call again once the answer lands.
+    if (response.ok)
+        return response;
+    if (!mayAsk)
+        return response;
+    const ask = response.headers.get(BRASS_ASK_HEADER);
+    if (ask === 'credential') {
+        return (await deps.offerServiceCredential(organizationId, host))
+            ? send()
+            : response;
+    }
+    if (ask !== 'install')
+        return response;
+    const denial = await notInstalledDenial(response);
+    if (!denial)
+        return response;
+    return (await deps.offerInstallConsent(denial)) ? send() : response;
+}
+// No organization resolved, for a caller that did not ask for the chooser.
+//
+// Answered as a refusal rather than thrown, because every other refusal on
+// this path arrives as a Response the app reads a `code` off, and a caller
+// reading ahead should not need a second shape for the case where it has not
+// acted yet. The code is the server's own for the same state.
+function unresolvedOrganization() {
+    return new Response(JSON.stringify({
+        error: 'No organization resolved for this app yet',
+        code: 'destination_required',
+    }), { status: 409, headers: { 'content-type': 'application/json' } });
+}
+// Which hosted surface a refusal is asking for, in Brass's own words.
+//
+// Brass states this rather than the SDK inferring it from the `code`, for two
+// reasons that both come down to the body being the service's. A declared
+// service answers with whatever status and body it likes, so a refusal shaped
+// like Brass's own would open a dialog the SERVICE asked for; the platform
+// refuses to relay any header under this prefix, so this one is Brass's alone.
+// And two of the codes cover a credential the app's author owns as well as one
+// the reader can supply, which are the same word for a question somebody can
+// answer and one nobody can. Only Brass knows which. A credential-shaped
+// refusal added after this SDK shipped therefore still opens the dialog.
+const BRASS_ASK_HEADER = 'x-brass-ask';
+// Reads the machine-readable install denial out of a refusal, leaving the
+// response untouched for a caller that gets it back: the body is read from a
+// clone, since a caller reading a consumed body sees an empty one.
+async function notInstalledDenial(response) {
+    let parsed;
+    try {
+        parsed = await response.clone().json();
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== 'object' ||
+        parsed === null ||
+        parsed.code !== 'app_not_installed' ||
+        typeof parsed.organization_id !== 'string') {
+        return null;
+    }
+    const body = parsed;
+    return new BrassError(typeof body.error === 'string' ? body.error : 'App not installed', {
+        status: response.status,
+        code: 'app_not_installed',
+        organizationId: body.organization_id,
+    });
+}
+// Which of this app's declared services would serve a call right now.
+//
+// The platform answers with the CALL's own verdict rather than a second
+// derivation of it, so a host reported ready is one the broker will spend.
+export async function listAppServices(deps, organizationId) {
+    const token = await deps.getAccessToken();
+    if (!token)
+        throw new BrassError('Not signed in', { status: 401 });
+    const headers = { authorization: `Bearer ${token}` };
+    applyClientVersionHeader(headers);
+    await applyAppAssertionHeader(headers, deps.getAppAssertion);
+    const base = deps.apiBaseUrl.replace(/\/$/, '');
+    const doFetch = deps.fetchImpl ?? fetch;
+    const response = await doFetch(`${base}/organizations/${encodeURIComponent(organizationId)}/services`, { method: 'GET', headers });
+    if (!response.ok) {
+        let message = 'Could not read this app\'s services';
+        let notInstalled = false;
+        try {
+            const body = (await response.json());
+            if (typeof body.error === 'string')
+                message = body.error;
+            notInstalled = body.code === 'app_not_installed';
+        }
+        catch {
+            // Leaves the generic message, which the status already qualifies.
+        }
+        // Only the code the SDK itself acts on is typed onto the error. The rest
+        // of the platform's refusal vocabulary describes one host rather than this
+        // read, and none of it reaches a read that returned nothing.
+        //
+        // The organization rides the install denial because that is what the
+        // hosted install dialog installs into: the read named one organization, so
+        // the refusal is about that one and the dialog does not have to ask where
+        // a second time.
+        throw new BrassError(message, {
+            status: response.status,
+            ...(notInstalled
+                ? { code: 'app_not_installed', organizationId }
+                : {}),
+        });
+    }
+    // An answer that is not the platform's own reaches here as a 200: an edge
+    // or a proxy serves its own page under whatever status it chooses. Reading
+    // it through the same error type as every refusal on this path leaves one
+    // shape for an app to catch, and a `services` that is not a list is read as
+    // none rather than handed to the app typed as an array it can iterate.
+    let parsed;
+    try {
+        parsed = await response.json();
+    }
+    catch {
+        throw new BrassError('Could not read this app\'s services', { status: 502 });
+    }
+    const services = parsed?.services;
+    return Array.isArray(services) ? services : [];
+}
+//# sourceMappingURL=call-service.js.map

package/dist/call-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-service.js","sourceRoot":"","sources":["../src/call-service.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,8DAA8D;AAE9D,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6BzC,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IAClE,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,iCAAiC;AACjC,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,UAAkB,EAClB,cAAsB,EACtB,IAAY,EACZ,IAAY;IAEZ,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,IAAI,kBAAkB,kBAAkB,CAAC,cAAc,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5G,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AACpF,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,yEAAyE;AACzE,iEAAiE;AACjE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,8CAA8C;IAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,0EAA0E;IAC1E,wEAAwE;IACxE,wCAAwC;IACxC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,2EAA2E;IAC3E,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,iEAAiE;AACjE,SAAS,kBAAkB;IACzB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,8CAA8C;QACrD,IAAI,EAAE,cAAc;KACrB,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;AACJ,CAAC;AAyBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAqB,EACrB,IAAY,EACZ,IAAY,EACZ,UAA8B,EAAE;IAEhC,uEAAuE;IACvE,iEAAiE;IACjE,EAAE;IACF,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,yBAAyB,KAAK,IAAI,CAAC;IAC1D,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,EAAE,CAAC;IAC1D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,sBAAsB,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,IAAuB,EAAE;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC,CAAC;QACF,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,yBAAyB,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;QACD,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACxC,OAAO,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YAC3E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM;YAChC,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;IAC9B,yEAAyE;IACzE,4EAA4E;IAC5E,6EAA6E;IAC7E,wCAAwC;IACxC,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC,CAAC,IAAI,EAAE;YACR,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,OAAO,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtE,CAAC;AAED,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,8DAA8D;AAC9D,SAAS,sBAAsB;IAC7B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,sBAAsB;KAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,0EAA0E;AAC1E,6EAA6E;AAC7E,mEAAmE;AACnE,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACd,MAA6B,CAAC,IAAI,KAAK,mBAAmB;QAC3D,OAAQ,MAAwC,CAAC,eAAe,KAAK,QAAQ,EAC7E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAsD,CAAC;IACpE,OAAO,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE;QACvF,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,mBAAmB;QACzB,cAAc,EAAE,IAAI,CAAC,eAAe;KACrC,CAAC,CAAC;AACL,CAAC;AAgCD,sEAAsE;AACtE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAGC,EACD,cAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;IAC7E,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,kBAAkB,kBAAkB,CAAC,cAAc,CAAC,WAAW,EACtE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAC3B,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,OAAO,GAAG,qCAAqC,CAAC;QACpD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwC,CAAC;YAC5E,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;YACzD,YAAY,GAAG,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,yEAAyE;QACzE,2EAA2E;QAC3E,6DAA6D;QAC7D,EAAE;QACF,qEAAqE;QACrE,2EAA2E;QAC3E,0EAA0E;QAC1E,iBAAiB;QACjB,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE;YAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC,EAAE,IAAI,EAAE,mBAA4B,EAAE,cAAc,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAI,MAAwC,EAAE,QAAQ,CAAC;IACrE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,QAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC"}

package/dist/client.d.ts

@@ -2,6 +2,7 @@ import { type CreateDocumentOptions, type OpenDocumentByIdOptions, type OpenedDo
 import { type DocumentHistoryResult, type SelectDocumentResult } from './hosted-ui.js';
 import type { DocumentSerializer } from './serializer.js';
 import { type DocumentImporter } from './importer.js';
+import { type AppServiceState, type CallServiceOptions } from './call-service.js';
 import { type DocumentsNamespace } from './documents-namespace.js';
 import { type DocumentSession } from './session.js';
 import { type SessionToolbarHandle, type SessionHeaderHandle, type SessionToolbarOptions, type MountedPiece } from './session-toolbar.js';
@@ -44,6 +45,14 @@ export declare class BrassClient {
     private documentFactory;
     private guestLinkTokenValue;
     private launchOrganizationId;
+    private actingOrganization;
+    private documentWatchForActingOrganization;
+    private chromeDocumentOrganization;
+    private chromeOrganizationToken;
+    private organizationNames;
+    private actingOrganizationListeners;
+    private actingOrganizationResolve;
+    private documentOrganizationIds;
     private serializer;
     private exportGuest;
     private openDocuments;
@@ -54,6 +63,7 @@ export declare class BrassClient {
     signOut(): void;
     get currentUser(): BrassUser | null;
     get authStatus(): AuthStatus;
+    private knownOrganizationId;
     get isGuest(): boolean;
     onUserChange(listener: UserChangeListener): () => void;
     onError(listener: ErrorListener): () => void;
@@ -86,6 +96,8 @@ export declare class BrassClient {
     private createDocumentInternal;
     private createDocumentIdWithConsent;
     private offerInstallConsent;
+    private retireActingOrganizationState;
+    private forgetActingOrganization;
     registerSerializer(serializer: DocumentSerializer): void;
     registerImporter(importer: DocumentImporter): void;
     private trackOpenDocument;
@@ -98,12 +110,31 @@ export declare class BrassClient {
     private getDocumentFactory;
     private getDocWsClient;
     getAccessToken(): Promise<string | null>;
+    private resolveActingOrganizationId;
+    private runActingOrganizationResolve;
+    private requireActingOrganizationId;
+    private fetchActingOrganization;
+    private pickActingOrganization;
+    private switchActingOrganization;
+    private activeDocumentOrganizationId;
+    private setActingOrganization;
+    private visibleActingOrganization;
+    private watchDocumentForActingOrganization;
+    private refreshChromeOrganization;
+    private nameStoredOrganization;
+    private namedOrganization;
+    private emitActingOrganization;
+    callService(host: string, path: string, options?: CallServiceOptions): Promise<Response>;
+    listServices(): Promise<AppServiceState[] | null>;
+    connectService(host: string): Promise<boolean>;
+    private offerServiceCredential;
     getAppAssertion(): Promise<string | null>;
     private bootstrap;
     private refresh;
     private runRefresh;
     private setTokens;
     private hydrateProfile;
+    private reportUncatchable;
     private requireInit;
     private requireAppId;
 }

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAWA,OAAO,EAIL,KAAK,qBAAqB,EAG1B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAGL,KAAK,qBAAqB,EAI1B,KAAK,oBAAoB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAoCvB,OAAO,EAEL,KAAK,kBAAkB,EAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAWL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAS9B,OAAO,KAAK,EACV,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EACnB,MAAM,YAAY,CAAC;AA4BpB,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IAKnB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAoBD,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,gBAAgB,CAmB3E;AA0BD,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,oBAAoB,CAAS;IAIrC,OAAO,CAAC,SAAS,CAAuB;IAIxC,OAAO,CAAC,iBAAiB,CAA8B;IAIvD,OAAO,CAAC,aAAa,CAA0B;IAG/C,OAAO,CAAC,yBAAyB,CAAS;IAI1C,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAI1D,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,IAAI,CAA0B;IActC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAiC;IAGlD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+C;IAC9E,OAAO,CAAC,eAAe,CAA2C;IAKlE,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,WAAW,CAAS;IAW5B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,YAAY,CAAuB;IAG3C,OAAO,CAAC,kBAAkB,CAEV;IAGhB,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,eAAe,CAAgC;IAGvD,OAAO,CAAC,mBAAmB,CAAuB;IAIlD,OAAO,CAAC,oBAAoB,CAAuB;IAInD,OAAO,CAAC,UAAU,CAAmC;IAIrD,OAAO,CAAC,WAAW,CAAsC;IAGzD,OAAO,CAAC,aAAa,CAA+B;IAIpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAI1B;IAIH,OAAO,CAAC,WAAW,CAA8B;IAQ3C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IA4JzE,MAAM,IAAI,IAAI;IAwBd,OAAO,IAAI,IAAI;IAuDf,IAAI,WAAW,IAAI,SAAS,GAAG,IAAI,CAElC;IAQD,IAAI,UAAU,IAAI,UAAU,CAI3B;IAKD,IAAI,OAAO,IAAI,OAAO,CAErB;IAUD,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAoBtD,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAI5C,OAAO,CAAC,SAAS;IASjB,IAAI,SAAS,IAAI,kBAAkB,CAElC;IAID,OAAO,CAAC,YAAY;IAgBpB,IAAI,OAAO,IAAI,eAAe,CA6D7B;IAMD,YAAY,CACV,SAAS,EAAE,WAAW,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,oBAAoB;IAQvB,WAAW,CAAC,SAAS,EAAE,WAAW,GAAG,mBAAmB;IAQxD,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGnD,kBAAkB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGxD,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGnD,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGzD,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGpD,gBAAgB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAOtD,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAMzD,OAAO,CAAC,WAAW;IAuBb,cAAc,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YAS9C,sBAAsB;IAWpC,OAAO,CAAC,oBAAoB;IAQ5B,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3C,eAAe,CACb,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAIxC,OAAO,CAAC,mBAAmB;IAsDrB,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC;YAiBZ,kBAAkB;YAelB,oBAAoB;IA2E5B,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;YAQhE,sBAAsB;YAuBtB,2BAA2B;YAoB3B,mBAAmB;IAoBjC,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI;IAaxD,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAUlD,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,gBAAgB;YAqBV,mBAAmB;YA6BnB,kBAAkB;IA0BhC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,kBAAkB;IAwF1B,OAAO,CAAC,cAAc;IA0BhB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAwBxC,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAejC,SAAS;YA0ET,OAAO;YAoDP,UAAU;IA2BxB,OAAO,CAAC,SAAS;YAqCH,cAAc;IAwB5B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,YAAY;CAKrB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAaA,OAAO,EAIL,KAAK,qBAAqB,EAG1B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAGL,KAAK,qBAAqB,EAI1B,KAAK,oBAAoB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAQvB,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAuC3B,OAAO,EAEL,KAAK,kBAAkB,EAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAWL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAS9B,OAAO,KAAK,EACV,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EACnB,MAAM,YAAY,CAAC;AA4BpB,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IAKnB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAoBD,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,gBAAgB,CAmB3E;AA0BD,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,oBAAoB,CAAS;IAIrC,OAAO,CAAC,SAAS,CAAuB;IAIxC,OAAO,CAAC,iBAAiB,CAA8B;IAIvD,OAAO,CAAC,aAAa,CAA0B;IAG/C,OAAO,CAAC,yBAAyB,CAAS;IAI1C,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAI1D,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,IAAI,CAA0B;IActC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAiC;IAGlD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+C;IAC9E,OAAO,CAAC,eAAe,CAA2C;IAKlE,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,WAAW,CAAS;IAW5B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,YAAY,CAAuB;IAG3C,OAAO,CAAC,kBAAkB,CAEV;IAGhB,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,eAAe,CAAgC;IAGvD,OAAO,CAAC,mBAAmB,CAAuB;IAIlD,OAAO,CAAC,oBAAoB,CAAuB;IAInD,OAAO,CAAC,kBAAkB,CAMV;IAKhB,OAAO,CAAC,kCAAkC,CAA6B;IAIvE,OAAO,CAAC,0BAA0B,CAA6C;IAE/E,OAAO,CAAC,uBAAuB,CAAK;IAIpC,OAAO,CAAC,iBAAiB,CAGrB;IACJ,OAAO,CAAC,2BAA2B,CAE/B;IAKJ,OAAO,CAAC,yBAAyB,CAGjB;IAIhB,OAAO,CAAC,uBAAuB,CAA6C;IAI5E,OAAO,CAAC,UAAU,CAAmC;IAIrD,OAAO,CAAC,WAAW,CAAsC;IAGzD,OAAO,CAAC,aAAa,CAA+B;IAIpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAI1B;IAIH,OAAO,CAAC,WAAW,CAA8B;IAQ3C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkKzE,MAAM,IAAI,IAAI;IA0Cd,OAAO,IAAI,IAAI;IA4Df,IAAI,WAAW,IAAI,SAAS,GAAG,IAAI,CAElC;IAQD,IAAI,UAAU,IAAI,UAAU,CAI3B;IAMD,OAAO,CAAC,mBAAmB;IAQ3B,IAAI,OAAO,IAAI,OAAO,CAErB;IAUD,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAoBtD,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAI5C,OAAO,CAAC,SAAS;IASjB,IAAI,SAAS,IAAI,kBAAkB,CAElC;IAID,OAAO,CAAC,YAAY;IAgBpB,IAAI,OAAO,IAAI,eAAe,CA6D7B;IAMD,YAAY,CACV,SAAS,EAAE,WAAW,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,oBAAoB;IAQvB,WAAW,CAAC,SAAS,EAAE,WAAW,GAAG,mBAAmB;IAQxD,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGnD,kBAAkB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGxD,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGnD,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGzD,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGpD,gBAAgB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAOtD,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAMzD,OAAO,CAAC,WAAW;IAsCb,cAAc,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YAS9C,sBAAsB;IAWpC,OAAO,CAAC,oBAAoB;IAQ5B,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3C,eAAe,CACb,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAIxC,OAAO,CAAC,mBAAmB;IA0DrB,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC;YAiBZ,kBAAkB;YAelB,oBAAoB;IA2E5B,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;YAQhE,sBAAsB;YAuBtB,2BAA2B;YAoB3B,mBAAmB;IA8BjC,OAAO,CAAC,6BAA6B;IAcrC,OAAO,CAAC,wBAAwB;IAoBhC,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI;IAaxD,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAUlD,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,gBAAgB;YAqBV,mBAAmB;YA6BnB,kBAAkB;IA0BhC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,kBAAkB;IAwF1B,OAAO,CAAC,cAAc;IA0BhB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoC9C,OAAO,CAAC,2BAA2B;IAenC,OAAO,CAAC,4BAA4B;YAsBtB,2BAA2B;IAQzC,OAAO,CAAC,uBAAuB;YAwBjB,sBAAsB;YAStB,wBAAwB;IAyCtC,OAAO,CAAC,4BAA4B;IA2CpC,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,yBAAyB;IAYjC,OAAO,CAAC,kCAAkC;YAyB5B,yBAAyB;YAiCzB,sBAAsB;YA6BtB,iBAAiB;IA+B/B,OAAO,CAAC,sBAAsB;IAkBxB,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,QAAQ,CAAC;IA6Bd,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC;IAuCjD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAYtC,sBAAsB;IAuB9B,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAejC,SAAS;YAgFT,OAAO;YAoDP,UAAU;IA2BxB,OAAO,CAAC,SAAS;YAwDH,cAAc;IA4C5B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,YAAY;CAKrB"}