@codemation/host 0.8.0 → 0.9.1

package/CHANGELOG.md

@@ -1,5 +1,64 @@
 # @codemation/host
 
+## 0.9.1
+
+### Patch Changes
+
+- [#179](https://github.com/MadeRelevant/codemation/pull/179) [`6efde7a`](https://github.com/MadeRelevant/codemation/commit/6efde7aa045050cd2fbd22015f7608c513a6f79f) Thanks [@cblokland90](https://github.com/cblokland90)! - fix(hitl): gate the HITL timeout scheduler/worker on the scheduler abstraction instead of hardcoding Redis
+
+  `HitlTimeoutJobScheduler` and `HitlTimeoutWorker` previously fell back to
+  `redis://127.0.0.1:6379` unconditionally and always constructed a BullMQ
+  `Queue`/`Worker`. In inline/local mode (no Redis — e.g. managed workspace pods),
+  this caused two failures: the host crash-spammed `ECONNREFUSED 127.0.0.1:6379`,
+  and a HITL decision hung in `cancelTimeoutJob` (against the dead Redis) before the
+  run could resume, so the CP relay timed out (500) and the run never completed.
+
+  Both now gate on `appConfig.scheduler.kind` — the same abstraction the rest of the
+  host uses (`bullmq` only when a Redis URL is present, otherwise `local`). In local
+  mode they never touch Redis: `enqueueTimeoutJob`/`cancelTimeoutJob` are inert
+  no-ops and `start()` constructs no worker. Behavior is unchanged for Redis-backed
+  (`bullmq`) deployments.
+
+  Trade-off: in local mode, HITL expiry timeouts (auto-accept/halt on expiry) do not
+  fire, since there is no background queue. Manual decisions resume the run normally.
+
+## 0.9.0
+
+### Minor Changes
+
+- [#170](https://github.com/MadeRelevant/codemation/pull/170) [`0b3d2a3`](https://github.com/MadeRelevant/codemation/commit/0b3d2a3dc379c0d8a6509ae97e47f6bb880caea3) Thanks [@cblokland90](https://github.com/cblokland90)! - feat(credentials): app gallery API (framework half)
+
+  Adds the framework-side credential "app gallery" surface that the control
+  plane's credentials gallery UI consumes:
+  - `@codemation/host`: a `GET /api/credentials/apps` endpoint backed by a new
+    `GetCredentialAppsQuery` / handler and an `AppGalleryProjector` that projects
+    the configured credential types + connected instances into `AppGalleryEntry`
+    rows (`AppsResponse`). Wired through `CredentialContractsRegistry`,
+    `ApiPaths.credentialApps()`, the credential route registrar/handler, and DI.
+  - `@codemation/canvas-core`: `WorkflowCanvasApiClient.fetchCredentialApps()`,
+    the `credentialAppsQueryKey`, and a `useCredentialAppsQuery` hook.
+  - `@codemation/next-host`: `NextHostApiClientAdapter.fetchCredentialApps()` so
+    the dev shell satisfies the canvas API client contract.
+
+- [#167](https://github.com/MadeRelevant/codemation/pull/167) [`3044474`](https://github.com/MadeRelevant/codemation/commit/3044474495525490735510ff74500b53761284b6) Thanks [@cblokland90](https://github.com/cblokland90)! - feat(hitl): Human-in-the-Loop — engine suspend/resume, inbox approval node + channels (local + control-plane), agent-as-tool, decision/timeout handling, inbox decision UX (toast + node status icons + "waiting for approval"), plus the consolidated dev/canvas/host fixes shipped alongside.
+
+### Patch Changes
+
+- [#170](https://github.com/MadeRelevant/codemation/pull/170) [`0b3d2a3`](https://github.com/MadeRelevant/codemation/commit/0b3d2a3dc379c0d8a6509ae97e47f6bb880caea3) Thanks [@cblokland90](https://github.com/cblokland90)! - fix(host): allow CP_WEB_ORIGIN to be a comma-separated CORS allowlist
+
+  `ManagedCorsMiddleware` compared the request origin with `===` against the raw
+  `CP_WEB_ORIGIN` value, so when the provisioner injects more than one origin
+  (e.g. the Caddy origin plus the direct dev port) the joined string never
+  matched any real origin. Every CORS preflight 403'd, which left the control
+  plane's workspace canvas stuck on "Getting your canvas ready…". The middleware
+  now parses `CP_WEB_ORIGIN` as a comma-separated allowlist and echoes back the
+  request's own origin when it is a member.
+
+- Updated dependencies [[`3044474`](https://github.com/MadeRelevant/codemation/commit/3044474495525490735510ff74500b53761284b6)]:
+  - @codemation/core@0.12.0
+  - @codemation/core-nodes@0.9.0
+  - @codemation/eventbus-redis@0.0.40
+
 ## 0.8.0
 
 ### Minor Changes

package/dist/{ApiPaths-Dv1dcHu_.js → ApiPaths-DCvrlIjg.js}

@@ -120,6 +120,9 @@ var ApiPaths = class {
 	static credentialInstances() {
 		return `${this.credentialsBasePath}/instances`;
 	}
+	static credentialApps() {
+		return `${this.credentialsBasePath}/apps`;
+	}
 	static credentialInstance(instanceId, withSecrets) {
 		const base = `${this.credentialInstances()}/${encodeURIComponent(instanceId)}`;
 		return withSecrets ? `${base}?withSecrets=1` : base;
@@ -231,8 +234,16 @@ var ApiPaths = class {
 	static internalAuthBootstrap() {
 		return `${this.bootstrapBasePath}/auth/internal`;
 	}
+	/** Token-authenticated: resume a suspended HITL task. */
+	static hitlTaskResume(taskId) {
+		return `${this.apiBasePath}/hitl/tasks/${encodeURIComponent(taskId)}/resume`;
+	}
+	/** Session-authenticated: record a decision on a suspended HITL task. */
+	static hitlTaskDecide(taskId) {
+		return `${this.apiBasePath}/hitl/tasks/${encodeURIComponent(taskId)}/decide`;
+	}
 };
 
 //#endregion
 export { InAppCallbackUrlPolicy as n, ApiPaths as t };
-//# sourceMappingURL=ApiPaths-Dv1dcHu_.js.map
+//# sourceMappingURL=ApiPaths-DCvrlIjg.js.map

package/dist/{ApiPaths-Dv1dcHu_.js.map → ApiPaths-DCvrlIjg.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ApiPaths-Dv1dcHu_.js","names":[],"sources":["../src/infrastructure/auth/InAppCallbackUrlPolicy.ts","../src/presentation/http/ApiPaths.ts"],"sourcesContent":["/**\n * Restricts post-login navigation targets to same-origin relative paths (no open redirects).\n */\nexport class InAppCallbackUrlPolicy {\n  private static readonly fallbackPath = \"/\";\n\n  resolveSafeRelativeCallbackUrl(raw: string | undefined | null): string {\n    if (raw === undefined || raw === null) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (this.containsAsciiControl(raw)) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    const trimmed = raw.trim();\n    if (trimmed.length === 0) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (!trimmed.startsWith(\"/\")) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (trimmed.startsWith(\"//\")) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (trimmed.includes(\"\\\\\")) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    return trimmed;\n  }\n\n  private containsAsciiControl(value: string): boolean {\n    for (let index = 0; index < value.length; index += 1) {\n      const code = value.charCodeAt(index);\n      if (code <= 0x1f || code === 0x7f) {\n        return true;\n      }\n    }\n    return false;\n  }\n}\n","export class ApiPaths {\n  private static readonly apiBasePath = \"/api\";\n\n  private static readonly workflowsBasePath = `${this.apiBasePath}/workflows`;\n\n  private static readonly runsBasePath = `${this.apiBasePath}/runs`;\n\n  private static readonly credentialsBasePath = `${this.apiBasePath}/credentials`;\n\n  private static readonly oauth2BasePath = `${this.apiBasePath}/oauth2`;\n\n  private static readonly webhooksBasePath = `${this.apiBasePath}/webhooks`;\n\n  private static readonly usersBasePath = `${this.apiBasePath}/users`;\n\n  private static readonly telemetryBasePath = `${this.apiBasePath}/telemetry`;\n\n  private static readonly whitelabelBasePath = `${this.apiBasePath}/whitelabel`;\n\n  private static readonly bootstrapBasePath = `${this.apiBasePath}/bootstrap`;\n\n  private static readonly authBasePath = `${this.apiBasePath}/auth`;\n\n  private static readonly collectionsBasePath = `${this.apiBasePath}/collections`;\n\n  static collections(): string {\n    return this.collectionsBasePath;\n  }\n\n  static collection(name: string): string {\n    return `${this.collectionsBasePath}/${encodeURIComponent(name)}`;\n  }\n\n  static collectionRows(name: string): string {\n    return `${this.collection(name)}/rows`;\n  }\n\n  static collectionRow(name: string, id: string): string {\n    return `${this.collectionRows(name)}/${encodeURIComponent(id)}`;\n  }\n\n  static syncCollections(): string {\n    return `${this.collectionsBasePath}/sync`;\n  }\n\n  static workflows(): string {\n    return this.workflowsBasePath;\n  }\n\n  static workflow(workflowId: string): string {\n    return `${this.workflowsBasePath}/${encodeURIComponent(workflowId)}`;\n  }\n\n  static workflowActivation(workflowId: string): string {\n    return `${this.workflow(workflowId)}/activation`;\n  }\n\n  static workflowRuns(workflowId: string): string {\n    return `${this.workflow(workflowId)}/runs`;\n  }\n\n  static workflowTestSuiteRuns(workflowId: string): string {\n    return `${this.workflow(workflowId)}/test-suite-runs`;\n  }\n\n  /**\n   * `GET` returns per-assertion-metric trends across the workflow's recent suite runs. With\n   * no `names` arg, every distinct assertion name is returned (so the multi-select can populate);\n   * with `names`, only the requested subset is returned (order preserved).\n   */\n  static workflowAssertionMetricTrends(workflowId: string, names?: ReadonlyArray<string>): string {\n    const base = `${this.workflow(workflowId)}/assertion-metric-trends`;\n    if (!names || names.length === 0) {\n      return base;\n    }\n    return `${base}?names=${names.map((n) => encodeURIComponent(n)).join(\",\")}`;\n  }\n\n  static testSuiteRun(testSuiteRunId: string): string {\n    return `${this.apiBasePath}/test-suite-runs/${encodeURIComponent(testSuiteRunId)}`;\n  }\n\n  static testSuiteRunAssertions(testSuiteRunId: string): string {\n    return `${this.testSuiteRun(testSuiteRunId)}/assertions`;\n  }\n\n  static testSuiteRunChildRuns(testSuiteRunId: string): string {\n    return `${this.testSuiteRun(testSuiteRunId)}/runs`;\n  }\n\n  static runAssertions(runId: string): string {\n    return `${this.runState(runId)}/assertions`;\n  }\n\n  static workflowCredentialHealth(workflowId: string): string {\n    return `${this.workflow(workflowId)}/credential-health`;\n  }\n\n  static workflowDebuggerOverlay(workflowId: string): string {\n    return `${this.workflow(workflowId)}/debugger-overlay`;\n  }\n\n  static workflowDebuggerOverlayCopyRun(workflowId: string): string {\n    return `${this.workflowDebuggerOverlay(workflowId)}/copy-run`;\n  }\n\n  static workflowDebuggerOverlayBinaryUpload(workflowId: string): string {\n    return `${this.workflowDebuggerOverlay(workflowId)}/binary/upload`;\n  }\n\n  static workflowOverlayBinaryContent(workflowId: string, binaryId: string): string {\n    return `${this.workflow(workflowId)}/debugger-overlay/binary/${encodeURIComponent(binaryId)}/content`;\n  }\n\n  static runs(): string {\n    return this.runsBasePath;\n  }\n\n  static run(): string {\n    return this.runs();\n  }\n\n  static credentialTypes(): string {\n    return `${this.credentialsBasePath}/types`;\n  }\n\n  static credentialsEnvStatus(): string {\n    return `${this.credentialsBasePath}/env-status`;\n  }\n\n  static credentialInstances(): string {\n    return `${this.credentialsBasePath}/instances`;\n  }\n\n  static credentialInstance(instanceId: string, withSecrets?: boolean): string {\n    const base = `${this.credentialInstances()}/${encodeURIComponent(instanceId)}`;\n    return withSecrets ? `${base}?withSecrets=1` : base;\n  }\n\n  static credentialInstanceTest(instanceId: string): string {\n    return `${this.credentialInstance(instanceId)}/test`;\n  }\n\n  static credentialBindings(): string {\n    return `${this.apiBasePath}/credential-bindings`;\n  }\n\n  static oauth2RedirectUri(): string {\n    return `${this.oauth2BasePath}/redirect-uri`;\n  }\n\n  static oauth2Disconnect(instanceId: string): string {\n    return `${this.oauth2BasePath}/disconnect?instanceId=${encodeURIComponent(instanceId)}`;\n  }\n\n  static credentialOAuthStart(): string {\n    return `${this.credentialsBasePath}/oauth/start`;\n  }\n\n  static workflowWebsocket(): string {\n    return `${this.workflowsBasePath}/ws`;\n  }\n\n  /** Dev gateway: stable browser WebSocket for build lifecycle (CLI → gateway → browser). */\n  static devGatewaySocket(): string {\n    return `${this.apiBasePath}/dev/socket`;\n  }\n\n  /** Dev gateway: HTTP notify endpoint used by the Codemation CLI during consumer rebuilds. */\n  static devGatewayNotify(): string {\n    return `${this.apiBasePath}/dev/notify`;\n  }\n\n  static webhooks(): string {\n    return this.webhooksBasePath;\n  }\n\n  static users(): string {\n    return this.usersBasePath;\n  }\n\n  static telemetryDashboardSummary(): string {\n    return `${this.telemetryBasePath}/dashboard/summary`;\n  }\n\n  static telemetryDashboardTimeseries(): string {\n    return `${this.telemetryBasePath}/dashboard/timeseries`;\n  }\n\n  static telemetryDashboardDimensions(): string {\n    return `${this.telemetryBasePath}/dashboard/dimensions`;\n  }\n\n  static telemetryDashboardRuns(): string {\n    return `${this.telemetryBasePath}/dashboard/runs`;\n  }\n\n  static telemetryRunTrace(runId: string): string {\n    return `${this.telemetryBasePath}/runs/${runId}/trace`;\n  }\n\n  static authSession(): string {\n    return `${this.authBasePath}/session`;\n  }\n\n  static authLogin(): string {\n    return `${this.authBasePath}/login`;\n  }\n\n  static authLogout(): string {\n    return `${this.authBasePath}/logout`;\n  }\n\n  static authOAuthStart(providerId: string, callbackUrl?: string): string {\n    const base = `${this.authBasePath}/oauth/${encodeURIComponent(providerId)}/start`;\n    if (!callbackUrl) {\n      return base;\n    }\n    return `${base}?callbackUrl=${encodeURIComponent(callbackUrl)}`;\n  }\n\n  static authOAuthCallback(providerId: string): string {\n    return `${this.authBasePath}/oauth/${encodeURIComponent(providerId)}/callback`;\n  }\n\n  static userInviteVerify(): string {\n    return `${this.usersBasePath}/invites/verify`;\n  }\n\n  static userInviteAccept(): string {\n    return `${this.usersBasePath}/invites/accept`;\n  }\n\n  static userInvites(): string {\n    return `${this.usersBasePath}/invites`;\n  }\n\n  static userInviteRegenerate(userId: string): string {\n    return `${this.usersBasePath}/${encodeURIComponent(userId)}/invites/regenerate`;\n  }\n\n  static userStatus(userId: string): string {\n    return `${this.usersBasePath}/${encodeURIComponent(userId)}/status`;\n  }\n\n  static runState(runId: string): string {\n    return `${this.runsBasePath}/${encodeURIComponent(runId)}`;\n  }\n\n  static runDetail(runId: string): string {\n    return `${this.runState(runId)}/detail`;\n  }\n\n  static runWorkflowSnapshot(runId: string): string {\n    return `${this.runState(runId)}/workflow-snapshot`;\n  }\n\n  static runNodePin(runId: string, nodeId: string): string {\n    return `${this.runState(runId)}/nodes/${encodeURIComponent(nodeId)}/pin`;\n  }\n\n  static runNode(runId: string, nodeId: string): string {\n    return `${this.runState(runId)}/nodes/${encodeURIComponent(nodeId)}/run`;\n  }\n\n  static runBinaryContent(runId: string, binaryId: string): string {\n    return `${this.runState(runId)}/binary/${encodeURIComponent(binaryId)}/content`;\n  }\n\n  /** Anonymous: consumer logo from `codemation.config.ts` whitelabel.logoPath. */\n  static whitelabelLogo(): string {\n    return `${this.whitelabelBasePath}/logo`;\n  }\n\n  static frontendBootstrap(): string {\n    return `${this.bootstrapBasePath}/frontend`;\n  }\n\n  static internalAuthBootstrap(): string {\n    return `${this.bootstrapBasePath}/auth/internal`;\n  }\n}\n"],"mappings":";;;;AAGA,IAAa,yBAAb,MAAa,uBAAuB;CAClC,OAAwB,eAAe;CAEvC,+BAA+B,KAAwC;AACrE,MAAI,QAAQ,UAAa,QAAQ,KAC/B,QAAO,uBAAuB;AAEhC,MAAI,KAAK,qBAAqB,IAAI,CAChC,QAAO,uBAAuB;EAEhC,MAAM,UAAU,IAAI,MAAM;AAC1B,MAAI,QAAQ,WAAW,EACrB,QAAO,uBAAuB;AAEhC,MAAI,CAAC,QAAQ,WAAW,IAAI,CAC1B,QAAO,uBAAuB;AAEhC,MAAI,QAAQ,WAAW,KAAK,CAC1B,QAAO,uBAAuB;AAEhC,MAAI,QAAQ,SAAS,KAAK,CACxB,QAAO,uBAAuB;AAEhC,SAAO;;CAGT,AAAQ,qBAAqB,OAAwB;AACnD,OAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;GACpD,MAAM,OAAO,MAAM,WAAW,MAAM;AACpC,OAAI,QAAQ,MAAQ,SAAS,IAC3B,QAAO;;AAGX,SAAO;;;;;;ACpCX,IAAa,WAAb,MAAsB;CACpB,OAAwB,cAAc;CAEtC,OAAwB,oBAAoB,GAAG,KAAK,YAAY;CAEhE,OAAwB,eAAe,GAAG,KAAK,YAAY;CAE3D,OAAwB,sBAAsB,GAAG,KAAK,YAAY;CAElE,OAAwB,iBAAiB,GAAG,KAAK,YAAY;CAE7D,OAAwB,mBAAmB,GAAG,KAAK,YAAY;CAE/D,OAAwB,gBAAgB,GAAG,KAAK,YAAY;CAE5D,OAAwB,oBAAoB,GAAG,KAAK,YAAY;CAEhE,OAAwB,qBAAqB,GAAG,KAAK,YAAY;CAEjE,OAAwB,oBAAoB,GAAG,KAAK,YAAY;CAEhE,OAAwB,eAAe,GAAG,KAAK,YAAY;CAE3D,OAAwB,sBAAsB,GAAG,KAAK,YAAY;CAElE,OAAO,cAAsB;AAC3B,SAAO,KAAK;;CAGd,OAAO,WAAW,MAAsB;AACtC,SAAO,GAAG,KAAK,oBAAoB,GAAG,mBAAmB,KAAK;;CAGhE,OAAO,eAAe,MAAsB;AAC1C,SAAO,GAAG,KAAK,WAAW,KAAK,CAAC;;CAGlC,OAAO,cAAc,MAAc,IAAoB;AACrD,SAAO,GAAG,KAAK,eAAe,KAAK,CAAC,GAAG,mBAAmB,GAAG;;CAG/D,OAAO,kBAA0B;AAC/B,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,YAAoB;AACzB,SAAO,KAAK;;CAGd,OAAO,SAAS,YAA4B;AAC1C,SAAO,GAAG,KAAK,kBAAkB,GAAG,mBAAmB,WAAW;;CAGpE,OAAO,mBAAmB,YAA4B;AACpD,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,aAAa,YAA4B;AAC9C,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,sBAAsB,YAA4B;AACvD,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;;;;;;CAQtC,OAAO,8BAA8B,YAAoB,OAAuC;EAC9F,MAAM,OAAO,GAAG,KAAK,SAAS,WAAW,CAAC;AAC1C,MAAI,CAAC,SAAS,MAAM,WAAW,EAC7B,QAAO;AAET,SAAO,GAAG,KAAK,SAAS,MAAM,KAAK,MAAM,mBAAmB,EAAE,CAAC,CAAC,KAAK,IAAI;;CAG3E,OAAO,aAAa,gBAAgC;AAClD,SAAO,GAAG,KAAK,YAAY,mBAAmB,mBAAmB,eAAe;;CAGlF,OAAO,uBAAuB,gBAAgC;AAC5D,SAAO,GAAG,KAAK,aAAa,eAAe,CAAC;;CAG9C,OAAO,sBAAsB,gBAAgC;AAC3D,SAAO,GAAG,KAAK,aAAa,eAAe,CAAC;;CAG9C,OAAO,cAAc,OAAuB;AAC1C,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC;;CAGjC,OAAO,yBAAyB,YAA4B;AAC1D,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,wBAAwB,YAA4B;AACzD,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,+BAA+B,YAA4B;AAChE,SAAO,GAAG,KAAK,wBAAwB,WAAW,CAAC;;CAGrD,OAAO,oCAAoC,YAA4B;AACrE,SAAO,GAAG,KAAK,wBAAwB,WAAW,CAAC;;CAGrD,OAAO,6BAA6B,YAAoB,UAA0B;AAChF,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;;CAG9F,OAAO,OAAe;AACpB,SAAO,KAAK;;CAGd,OAAO,MAAc;AACnB,SAAO,KAAK,MAAM;;CAGpB,OAAO,kBAA0B;AAC/B,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,uBAA+B;AACpC,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,sBAA8B;AACnC,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,mBAAmB,YAAoB,aAA+B;EAC3E,MAAM,OAAO,GAAG,KAAK,qBAAqB,CAAC,GAAG,mBAAmB,WAAW;AAC5E,SAAO,cAAc,GAAG,KAAK,kBAAkB;;CAGjD,OAAO,uBAAuB,YAA4B;AACxD,SAAO,GAAG,KAAK,mBAAmB,WAAW,CAAC;;CAGhD,OAAO,qBAA6B;AAClC,SAAO,GAAG,KAAK,YAAY;;CAG7B,OAAO,oBAA4B;AACjC,SAAO,GAAG,KAAK,eAAe;;CAGhC,OAAO,iBAAiB,YAA4B;AAClD,SAAO,GAAG,KAAK,eAAe,yBAAyB,mBAAmB,WAAW;;CAGvF,OAAO,uBAA+B;AACpC,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,oBAA4B;AACjC,SAAO,GAAG,KAAK,kBAAkB;;;CAInC,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,YAAY;;;CAI7B,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,YAAY;;CAG7B,OAAO,WAAmB;AACxB,SAAO,KAAK;;CAGd,OAAO,QAAgB;AACrB,SAAO,KAAK;;CAGd,OAAO,4BAAoC;AACzC,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,+BAAuC;AAC5C,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,+BAAuC;AAC5C,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,yBAAiC;AACtC,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,kBAAkB,OAAuB;AAC9C,SAAO,GAAG,KAAK,kBAAkB,QAAQ,MAAM;;CAGjD,OAAO,cAAsB;AAC3B,SAAO,GAAG,KAAK,aAAa;;CAG9B,OAAO,YAAoB;AACzB,SAAO,GAAG,KAAK,aAAa;;CAG9B,OAAO,aAAqB;AAC1B,SAAO,GAAG,KAAK,aAAa;;CAG9B,OAAO,eAAe,YAAoB,aAA8B;EACtE,MAAM,OAAO,GAAG,KAAK,aAAa,SAAS,mBAAmB,WAAW,CAAC;AAC1E,MAAI,CAAC,YACH,QAAO;AAET,SAAO,GAAG,KAAK,eAAe,mBAAmB,YAAY;;CAG/D,OAAO,kBAAkB,YAA4B;AACnD,SAAO,GAAG,KAAK,aAAa,SAAS,mBAAmB,WAAW,CAAC;;CAGtE,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,cAAc;;CAG/B,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,cAAc;;CAG/B,OAAO,cAAsB;AAC3B,SAAO,GAAG,KAAK,cAAc;;CAG/B,OAAO,qBAAqB,QAAwB;AAClD,SAAO,GAAG,KAAK,cAAc,GAAG,mBAAmB,OAAO,CAAC;;CAG7D,OAAO,WAAW,QAAwB;AACxC,SAAO,GAAG,KAAK,cAAc,GAAG,mBAAmB,OAAO,CAAC;;CAG7D,OAAO,SAAS,OAAuB;AACrC,SAAO,GAAG,KAAK,aAAa,GAAG,mBAAmB,MAAM;;CAG1D,OAAO,UAAU,OAAuB;AACtC,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC;;CAGjC,OAAO,oBAAoB,OAAuB;AAChD,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC;;CAGjC,OAAO,WAAW,OAAe,QAAwB;AACvD,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC,SAAS,mBAAmB,OAAO,CAAC;;CAGrE,OAAO,QAAQ,OAAe,QAAwB;AACpD,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC,SAAS,mBAAmB,OAAO,CAAC;;CAGrE,OAAO,iBAAiB,OAAe,UAA0B;AAC/D,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC,UAAU,mBAAmB,SAAS,CAAC;;;CAIxE,OAAO,iBAAyB;AAC9B,SAAO,GAAG,KAAK,mBAAmB;;CAGpC,OAAO,oBAA4B;AACjC,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,wBAAgC;AACrC,SAAO,GAAG,KAAK,kBAAkB"}
+{"version":3,"file":"ApiPaths-DCvrlIjg.js","names":[],"sources":["../src/infrastructure/auth/InAppCallbackUrlPolicy.ts","../src/presentation/http/ApiPaths.ts"],"sourcesContent":["/**\n * Restricts post-login navigation targets to same-origin relative paths (no open redirects).\n */\nexport class InAppCallbackUrlPolicy {\n  private static readonly fallbackPath = \"/\";\n\n  resolveSafeRelativeCallbackUrl(raw: string | undefined | null): string {\n    if (raw === undefined || raw === null) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (this.containsAsciiControl(raw)) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    const trimmed = raw.trim();\n    if (trimmed.length === 0) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (!trimmed.startsWith(\"/\")) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (trimmed.startsWith(\"//\")) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    if (trimmed.includes(\"\\\\\")) {\n      return InAppCallbackUrlPolicy.fallbackPath;\n    }\n    return trimmed;\n  }\n\n  private containsAsciiControl(value: string): boolean {\n    for (let index = 0; index < value.length; index += 1) {\n      const code = value.charCodeAt(index);\n      if (code <= 0x1f || code === 0x7f) {\n        return true;\n      }\n    }\n    return false;\n  }\n}\n","export class ApiPaths {\n  private static readonly apiBasePath = \"/api\";\n\n  private static readonly workflowsBasePath = `${this.apiBasePath}/workflows`;\n\n  private static readonly runsBasePath = `${this.apiBasePath}/runs`;\n\n  private static readonly credentialsBasePath = `${this.apiBasePath}/credentials`;\n\n  private static readonly oauth2BasePath = `${this.apiBasePath}/oauth2`;\n\n  private static readonly webhooksBasePath = `${this.apiBasePath}/webhooks`;\n\n  private static readonly usersBasePath = `${this.apiBasePath}/users`;\n\n  private static readonly telemetryBasePath = `${this.apiBasePath}/telemetry`;\n\n  private static readonly whitelabelBasePath = `${this.apiBasePath}/whitelabel`;\n\n  private static readonly bootstrapBasePath = `${this.apiBasePath}/bootstrap`;\n\n  private static readonly authBasePath = `${this.apiBasePath}/auth`;\n\n  private static readonly collectionsBasePath = `${this.apiBasePath}/collections`;\n\n  static collections(): string {\n    return this.collectionsBasePath;\n  }\n\n  static collection(name: string): string {\n    return `${this.collectionsBasePath}/${encodeURIComponent(name)}`;\n  }\n\n  static collectionRows(name: string): string {\n    return `${this.collection(name)}/rows`;\n  }\n\n  static collectionRow(name: string, id: string): string {\n    return `${this.collectionRows(name)}/${encodeURIComponent(id)}`;\n  }\n\n  static syncCollections(): string {\n    return `${this.collectionsBasePath}/sync`;\n  }\n\n  static workflows(): string {\n    return this.workflowsBasePath;\n  }\n\n  static workflow(workflowId: string): string {\n    return `${this.workflowsBasePath}/${encodeURIComponent(workflowId)}`;\n  }\n\n  static workflowActivation(workflowId: string): string {\n    return `${this.workflow(workflowId)}/activation`;\n  }\n\n  static workflowRuns(workflowId: string): string {\n    return `${this.workflow(workflowId)}/runs`;\n  }\n\n  static workflowTestSuiteRuns(workflowId: string): string {\n    return `${this.workflow(workflowId)}/test-suite-runs`;\n  }\n\n  /**\n   * `GET` returns per-assertion-metric trends across the workflow's recent suite runs. With\n   * no `names` arg, every distinct assertion name is returned (so the multi-select can populate);\n   * with `names`, only the requested subset is returned (order preserved).\n   */\n  static workflowAssertionMetricTrends(workflowId: string, names?: ReadonlyArray<string>): string {\n    const base = `${this.workflow(workflowId)}/assertion-metric-trends`;\n    if (!names || names.length === 0) {\n      return base;\n    }\n    return `${base}?names=${names.map((n) => encodeURIComponent(n)).join(\",\")}`;\n  }\n\n  static testSuiteRun(testSuiteRunId: string): string {\n    return `${this.apiBasePath}/test-suite-runs/${encodeURIComponent(testSuiteRunId)}`;\n  }\n\n  static testSuiteRunAssertions(testSuiteRunId: string): string {\n    return `${this.testSuiteRun(testSuiteRunId)}/assertions`;\n  }\n\n  static testSuiteRunChildRuns(testSuiteRunId: string): string {\n    return `${this.testSuiteRun(testSuiteRunId)}/runs`;\n  }\n\n  static runAssertions(runId: string): string {\n    return `${this.runState(runId)}/assertions`;\n  }\n\n  static workflowCredentialHealth(workflowId: string): string {\n    return `${this.workflow(workflowId)}/credential-health`;\n  }\n\n  static workflowDebuggerOverlay(workflowId: string): string {\n    return `${this.workflow(workflowId)}/debugger-overlay`;\n  }\n\n  static workflowDebuggerOverlayCopyRun(workflowId: string): string {\n    return `${this.workflowDebuggerOverlay(workflowId)}/copy-run`;\n  }\n\n  static workflowDebuggerOverlayBinaryUpload(workflowId: string): string {\n    return `${this.workflowDebuggerOverlay(workflowId)}/binary/upload`;\n  }\n\n  static workflowOverlayBinaryContent(workflowId: string, binaryId: string): string {\n    return `${this.workflow(workflowId)}/debugger-overlay/binary/${encodeURIComponent(binaryId)}/content`;\n  }\n\n  static runs(): string {\n    return this.runsBasePath;\n  }\n\n  static run(): string {\n    return this.runs();\n  }\n\n  static credentialTypes(): string {\n    return `${this.credentialsBasePath}/types`;\n  }\n\n  static credentialsEnvStatus(): string {\n    return `${this.credentialsBasePath}/env-status`;\n  }\n\n  static credentialInstances(): string {\n    return `${this.credentialsBasePath}/instances`;\n  }\n\n  static credentialApps(): string {\n    return `${this.credentialsBasePath}/apps`;\n  }\n\n  static credentialInstance(instanceId: string, withSecrets?: boolean): string {\n    const base = `${this.credentialInstances()}/${encodeURIComponent(instanceId)}`;\n    return withSecrets ? `${base}?withSecrets=1` : base;\n  }\n\n  static credentialInstanceTest(instanceId: string): string {\n    return `${this.credentialInstance(instanceId)}/test`;\n  }\n\n  static credentialBindings(): string {\n    return `${this.apiBasePath}/credential-bindings`;\n  }\n\n  static oauth2RedirectUri(): string {\n    return `${this.oauth2BasePath}/redirect-uri`;\n  }\n\n  static oauth2Disconnect(instanceId: string): string {\n    return `${this.oauth2BasePath}/disconnect?instanceId=${encodeURIComponent(instanceId)}`;\n  }\n\n  static credentialOAuthStart(): string {\n    return `${this.credentialsBasePath}/oauth/start`;\n  }\n\n  static workflowWebsocket(): string {\n    return `${this.workflowsBasePath}/ws`;\n  }\n\n  /** Dev gateway: stable browser WebSocket for build lifecycle (CLI → gateway → browser). */\n  static devGatewaySocket(): string {\n    return `${this.apiBasePath}/dev/socket`;\n  }\n\n  /** Dev gateway: HTTP notify endpoint used by the Codemation CLI during consumer rebuilds. */\n  static devGatewayNotify(): string {\n    return `${this.apiBasePath}/dev/notify`;\n  }\n\n  static webhooks(): string {\n    return this.webhooksBasePath;\n  }\n\n  static users(): string {\n    return this.usersBasePath;\n  }\n\n  static telemetryDashboardSummary(): string {\n    return `${this.telemetryBasePath}/dashboard/summary`;\n  }\n\n  static telemetryDashboardTimeseries(): string {\n    return `${this.telemetryBasePath}/dashboard/timeseries`;\n  }\n\n  static telemetryDashboardDimensions(): string {\n    return `${this.telemetryBasePath}/dashboard/dimensions`;\n  }\n\n  static telemetryDashboardRuns(): string {\n    return `${this.telemetryBasePath}/dashboard/runs`;\n  }\n\n  static telemetryRunTrace(runId: string): string {\n    return `${this.telemetryBasePath}/runs/${runId}/trace`;\n  }\n\n  static authSession(): string {\n    return `${this.authBasePath}/session`;\n  }\n\n  static authLogin(): string {\n    return `${this.authBasePath}/login`;\n  }\n\n  static authLogout(): string {\n    return `${this.authBasePath}/logout`;\n  }\n\n  static authOAuthStart(providerId: string, callbackUrl?: string): string {\n    const base = `${this.authBasePath}/oauth/${encodeURIComponent(providerId)}/start`;\n    if (!callbackUrl) {\n      return base;\n    }\n    return `${base}?callbackUrl=${encodeURIComponent(callbackUrl)}`;\n  }\n\n  static authOAuthCallback(providerId: string): string {\n    return `${this.authBasePath}/oauth/${encodeURIComponent(providerId)}/callback`;\n  }\n\n  static userInviteVerify(): string {\n    return `${this.usersBasePath}/invites/verify`;\n  }\n\n  static userInviteAccept(): string {\n    return `${this.usersBasePath}/invites/accept`;\n  }\n\n  static userInvites(): string {\n    return `${this.usersBasePath}/invites`;\n  }\n\n  static userInviteRegenerate(userId: string): string {\n    return `${this.usersBasePath}/${encodeURIComponent(userId)}/invites/regenerate`;\n  }\n\n  static userStatus(userId: string): string {\n    return `${this.usersBasePath}/${encodeURIComponent(userId)}/status`;\n  }\n\n  static runState(runId: string): string {\n    return `${this.runsBasePath}/${encodeURIComponent(runId)}`;\n  }\n\n  static runDetail(runId: string): string {\n    return `${this.runState(runId)}/detail`;\n  }\n\n  static runWorkflowSnapshot(runId: string): string {\n    return `${this.runState(runId)}/workflow-snapshot`;\n  }\n\n  static runNodePin(runId: string, nodeId: string): string {\n    return `${this.runState(runId)}/nodes/${encodeURIComponent(nodeId)}/pin`;\n  }\n\n  static runNode(runId: string, nodeId: string): string {\n    return `${this.runState(runId)}/nodes/${encodeURIComponent(nodeId)}/run`;\n  }\n\n  static runBinaryContent(runId: string, binaryId: string): string {\n    return `${this.runState(runId)}/binary/${encodeURIComponent(binaryId)}/content`;\n  }\n\n  /** Anonymous: consumer logo from `codemation.config.ts` whitelabel.logoPath. */\n  static whitelabelLogo(): string {\n    return `${this.whitelabelBasePath}/logo`;\n  }\n\n  static frontendBootstrap(): string {\n    return `${this.bootstrapBasePath}/frontend`;\n  }\n\n  static internalAuthBootstrap(): string {\n    return `${this.bootstrapBasePath}/auth/internal`;\n  }\n\n  /** Token-authenticated: resume a suspended HITL task. */\n  static hitlTaskResume(taskId: string): string {\n    return `${this.apiBasePath}/hitl/tasks/${encodeURIComponent(taskId)}/resume`;\n  }\n\n  /** Session-authenticated: record a decision on a suspended HITL task. */\n  static hitlTaskDecide(taskId: string): string {\n    return `${this.apiBasePath}/hitl/tasks/${encodeURIComponent(taskId)}/decide`;\n  }\n}\n"],"mappings":";;;;AAGA,IAAa,yBAAb,MAAa,uBAAuB;CAClC,OAAwB,eAAe;CAEvC,+BAA+B,KAAwC;AACrE,MAAI,QAAQ,UAAa,QAAQ,KAC/B,QAAO,uBAAuB;AAEhC,MAAI,KAAK,qBAAqB,IAAI,CAChC,QAAO,uBAAuB;EAEhC,MAAM,UAAU,IAAI,MAAM;AAC1B,MAAI,QAAQ,WAAW,EACrB,QAAO,uBAAuB;AAEhC,MAAI,CAAC,QAAQ,WAAW,IAAI,CAC1B,QAAO,uBAAuB;AAEhC,MAAI,QAAQ,WAAW,KAAK,CAC1B,QAAO,uBAAuB;AAEhC,MAAI,QAAQ,SAAS,KAAK,CACxB,QAAO,uBAAuB;AAEhC,SAAO;;CAGT,AAAQ,qBAAqB,OAAwB;AACnD,OAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;GACpD,MAAM,OAAO,MAAM,WAAW,MAAM;AACpC,OAAI,QAAQ,MAAQ,SAAS,IAC3B,QAAO;;AAGX,SAAO;;;;;;ACpCX,IAAa,WAAb,MAAsB;CACpB,OAAwB,cAAc;CAEtC,OAAwB,oBAAoB,GAAG,KAAK,YAAY;CAEhE,OAAwB,eAAe,GAAG,KAAK,YAAY;CAE3D,OAAwB,sBAAsB,GAAG,KAAK,YAAY;CAElE,OAAwB,iBAAiB,GAAG,KAAK,YAAY;CAE7D,OAAwB,mBAAmB,GAAG,KAAK,YAAY;CAE/D,OAAwB,gBAAgB,GAAG,KAAK,YAAY;CAE5D,OAAwB,oBAAoB,GAAG,KAAK,YAAY;CAEhE,OAAwB,qBAAqB,GAAG,KAAK,YAAY;CAEjE,OAAwB,oBAAoB,GAAG,KAAK,YAAY;CAEhE,OAAwB,eAAe,GAAG,KAAK,YAAY;CAE3D,OAAwB,sBAAsB,GAAG,KAAK,YAAY;CAElE,OAAO,cAAsB;AAC3B,SAAO,KAAK;;CAGd,OAAO,WAAW,MAAsB;AACtC,SAAO,GAAG,KAAK,oBAAoB,GAAG,mBAAmB,KAAK;;CAGhE,OAAO,eAAe,MAAsB;AAC1C,SAAO,GAAG,KAAK,WAAW,KAAK,CAAC;;CAGlC,OAAO,cAAc,MAAc,IAAoB;AACrD,SAAO,GAAG,KAAK,eAAe,KAAK,CAAC,GAAG,mBAAmB,GAAG;;CAG/D,OAAO,kBAA0B;AAC/B,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,YAAoB;AACzB,SAAO,KAAK;;CAGd,OAAO,SAAS,YAA4B;AAC1C,SAAO,GAAG,KAAK,kBAAkB,GAAG,mBAAmB,WAAW;;CAGpE,OAAO,mBAAmB,YAA4B;AACpD,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,aAAa,YAA4B;AAC9C,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,sBAAsB,YAA4B;AACvD,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;;;;;;CAQtC,OAAO,8BAA8B,YAAoB,OAAuC;EAC9F,MAAM,OAAO,GAAG,KAAK,SAAS,WAAW,CAAC;AAC1C,MAAI,CAAC,SAAS,MAAM,WAAW,EAC7B,QAAO;AAET,SAAO,GAAG,KAAK,SAAS,MAAM,KAAK,MAAM,mBAAmB,EAAE,CAAC,CAAC,KAAK,IAAI;;CAG3E,OAAO,aAAa,gBAAgC;AAClD,SAAO,GAAG,KAAK,YAAY,mBAAmB,mBAAmB,eAAe;;CAGlF,OAAO,uBAAuB,gBAAgC;AAC5D,SAAO,GAAG,KAAK,aAAa,eAAe,CAAC;;CAG9C,OAAO,sBAAsB,gBAAgC;AAC3D,SAAO,GAAG,KAAK,aAAa,eAAe,CAAC;;CAG9C,OAAO,cAAc,OAAuB;AAC1C,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC;;CAGjC,OAAO,yBAAyB,YAA4B;AAC1D,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,wBAAwB,YAA4B;AACzD,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC;;CAGtC,OAAO,+BAA+B,YAA4B;AAChE,SAAO,GAAG,KAAK,wBAAwB,WAAW,CAAC;;CAGrD,OAAO,oCAAoC,YAA4B;AACrE,SAAO,GAAG,KAAK,wBAAwB,WAAW,CAAC;;CAGrD,OAAO,6BAA6B,YAAoB,UAA0B;AAChF,SAAO,GAAG,KAAK,SAAS,WAAW,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;;CAG9F,OAAO,OAAe;AACpB,SAAO,KAAK;;CAGd,OAAO,MAAc;AACnB,SAAO,KAAK,MAAM;;CAGpB,OAAO,kBAA0B;AAC/B,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,uBAA+B;AACpC,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,sBAA8B;AACnC,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,iBAAyB;AAC9B,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,mBAAmB,YAAoB,aAA+B;EAC3E,MAAM,OAAO,GAAG,KAAK,qBAAqB,CAAC,GAAG,mBAAmB,WAAW;AAC5E,SAAO,cAAc,GAAG,KAAK,kBAAkB;;CAGjD,OAAO,uBAAuB,YAA4B;AACxD,SAAO,GAAG,KAAK,mBAAmB,WAAW,CAAC;;CAGhD,OAAO,qBAA6B;AAClC,SAAO,GAAG,KAAK,YAAY;;CAG7B,OAAO,oBAA4B;AACjC,SAAO,GAAG,KAAK,eAAe;;CAGhC,OAAO,iBAAiB,YAA4B;AAClD,SAAO,GAAG,KAAK,eAAe,yBAAyB,mBAAmB,WAAW;;CAGvF,OAAO,uBAA+B;AACpC,SAAO,GAAG,KAAK,oBAAoB;;CAGrC,OAAO,oBAA4B;AACjC,SAAO,GAAG,KAAK,kBAAkB;;;CAInC,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,YAAY;;;CAI7B,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,YAAY;;CAG7B,OAAO,WAAmB;AACxB,SAAO,KAAK;;CAGd,OAAO,QAAgB;AACrB,SAAO,KAAK;;CAGd,OAAO,4BAAoC;AACzC,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,+BAAuC;AAC5C,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,+BAAuC;AAC5C,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,yBAAiC;AACtC,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,kBAAkB,OAAuB;AAC9C,SAAO,GAAG,KAAK,kBAAkB,QAAQ,MAAM;;CAGjD,OAAO,cAAsB;AAC3B,SAAO,GAAG,KAAK,aAAa;;CAG9B,OAAO,YAAoB;AACzB,SAAO,GAAG,KAAK,aAAa;;CAG9B,OAAO,aAAqB;AAC1B,SAAO,GAAG,KAAK,aAAa;;CAG9B,OAAO,eAAe,YAAoB,aAA8B;EACtE,MAAM,OAAO,GAAG,KAAK,aAAa,SAAS,mBAAmB,WAAW,CAAC;AAC1E,MAAI,CAAC,YACH,QAAO;AAET,SAAO,GAAG,KAAK,eAAe,mBAAmB,YAAY;;CAG/D,OAAO,kBAAkB,YAA4B;AACnD,SAAO,GAAG,KAAK,aAAa,SAAS,mBAAmB,WAAW,CAAC;;CAGtE,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,cAAc;;CAG/B,OAAO,mBAA2B;AAChC,SAAO,GAAG,KAAK,cAAc;;CAG/B,OAAO,cAAsB;AAC3B,SAAO,GAAG,KAAK,cAAc;;CAG/B,OAAO,qBAAqB,QAAwB;AAClD,SAAO,GAAG,KAAK,cAAc,GAAG,mBAAmB,OAAO,CAAC;;CAG7D,OAAO,WAAW,QAAwB;AACxC,SAAO,GAAG,KAAK,cAAc,GAAG,mBAAmB,OAAO,CAAC;;CAG7D,OAAO,SAAS,OAAuB;AACrC,SAAO,GAAG,KAAK,aAAa,GAAG,mBAAmB,MAAM;;CAG1D,OAAO,UAAU,OAAuB;AACtC,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC;;CAGjC,OAAO,oBAAoB,OAAuB;AAChD,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC;;CAGjC,OAAO,WAAW,OAAe,QAAwB;AACvD,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC,SAAS,mBAAmB,OAAO,CAAC;;CAGrE,OAAO,QAAQ,OAAe,QAAwB;AACpD,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC,SAAS,mBAAmB,OAAO,CAAC;;CAGrE,OAAO,iBAAiB,OAAe,UAA0B;AAC/D,SAAO,GAAG,KAAK,SAAS,MAAM,CAAC,UAAU,mBAAmB,SAAS,CAAC;;;CAIxE,OAAO,iBAAyB;AAC9B,SAAO,GAAG,KAAK,mBAAmB;;CAGpC,OAAO,oBAA4B;AACjC,SAAO,GAAG,KAAK,kBAAkB;;CAGnC,OAAO,wBAAgC;AACrC,SAAO,GAAG,KAAK,kBAAkB;;;CAInC,OAAO,eAAe,QAAwB;AAC5C,SAAO,GAAG,KAAK,YAAY,cAAc,mBAAmB,OAAO,CAAC;;;CAItE,OAAO,eAAe,QAAwB;AAC5C,SAAO,GAAG,KAAK,YAAY,cAAc,mBAAmB,OAAO,CAAC"}