@lanes-sh/link 0.6.8 → 0.6.10

package/src/cli/commands/operate/dashboard.ts

@@ -1,107 +0,0 @@
-import { deploymentIdentity, endpointHealth, localUrl } from '../../endpoint-url.ts';
-import { defaultOpenBrowser } from '../../oauth.ts';
-import { announce, ok, print, style, warn } from '../../output.ts';
-import {
-  ensureProfileToken,
-  openRuntime,
-  resolveProfile,
-  type GlobalFlags,
-} from '../../runtime.ts';
-
-/**
- * `lanes link dashboard` — open the page this endpoint serves.
- *
- * The command exists because the page cannot be reached without it. A browser
- * navigating to `/dashboard` carries no `Authorization` header, so the token has
- * to arrive some other way, and the only place it already exists is the
- * credential store this command can read. It puts it in the URL once; the
- * endpoint exchanges it for a session cookie and redirects to a URL without it.
- *
- * Local only, deliberately. See `#server/dashboard.ts` — ADR-018 leaves a
- * deployed instance with no door a person at a browser can come through, and a
- * command that opened a loopback URL for a target that is not there would be
- * reporting success for a page nobody can load.
- */
-
-export interface DashboardFlags extends GlobalFlags {
-  /** Print the URL instead of opening it. */
-  readonly print?: boolean | undefined;
-}
-
-export async function dashboard(flags: DashboardFlags): Promise<void> {
-  // `resolveProfile` rather than `openRuntime`, and the order is the point.
-  // Opening a runtime opens that target's adapters, so a deployed target sends
-  // this command to Secret Manager and a bucket before it can say the one thing
-  // it needs to — that the dashboard is not there. The refusal below would
-  // still be correct and nobody would ever read it, because a storage 403
-  // arrives first. This is the seam `runtime.ts` documents `deploy` and
-  // `secrets push` stopping at, for the same reason.
-  const { resolution, config, target, resolved } = await resolveProfile(flags);
-  announce(resolution);
-
-  const deployed = deploymentIdentity(resolved?.declared.deploy);
-  if (deployed) {
-    throw new Error(
-      `Target "${target}" is deployed to ${deployed.platform}, and the dashboard is served only ` +
-        'by a local endpoint — a browser carries no bearer token, and Cloud Run\'s own gate ' +
-        'admits only a Google-signed identity token it cannot mint either (ADR-018).\n' +
-        `What a deployed target can answer: ` +
-        `lanes link status --profile ${resolution.profile} --target ${target}`,
-    );
-  }
-
-  const runtime = await openRuntime(flags);
-
-  try {
-    const { token } = await ensureProfileToken(runtime.credentials, runtime.config.auth.token_ref);
-
-    const url = new URL(localUrl(runtime.config));
-    url.pathname = '/dashboard';
-    url.searchParams.set('k', token);
-    // Named rather than left to the endpoint's primary, so the page opens on
-    // the profile this command resolved and printed above.
-    url.searchParams.set('profile', runtime.resolution.profile);
-
-    // The page is served by a running endpoint or by nothing. Saying so here
-    // beats opening a browser at a connection error.
-    const live = await endpointHealth(localUrl(runtime.config), token);
-    if (!live) {
-      // Both flags on both lines. They read as correct without them only
-      // because they were written while a missing one still resolved to the
-      // workspace default; with nothing to fall back on (ADR-037) each is a
-      // paste that refuses, and this one is printed at the moment somebody is
-      // least able to guess what it wanted.
-      const where = `--profile ${runtime.resolution.profile} --target ${target}`;
-
-      print(warn(`nothing is serving this port — run: lanes link start ${where}`));
-      print(style.dim(`  then: lanes link dashboard ${where}`));
-      return;
-    }
-
-    if (!live.profiles.includes(runtime.resolution.profile)) {
-      // `start --only` serves one profile. The URL would 404 on the rest, which
-      // is honest but unhelpful without being told why.
-      print(
-        warn(
-          `the endpoint on this port serves ${live.profiles.join(', ')} — ` +
-            `not "${runtime.resolution.profile}"`,
-        ),
-      );
-      return;
-    }
-
-    if (flags.print) {
-      // Printed, not opened: for a terminal on a machine with no browser, and
-      // for anyone who would rather see what they are about to open. It carries
-      // the token, which is why it is behind a flag rather than always shown.
-      print(url.href);
-      return;
-    }
-
-    defaultOpenBrowser(url.href);
-    print(ok(`opened ${style.bold(`${url.origin}/dashboard`)}`));
-    print(style.dim('  the link carries a one-time key; the page swaps it for a session cookie.'));
-  } finally {
-    await runtime.close();
-  }
-}

package/src/cli/dashboard-page.ts

@@ -1,293 +0,0 @@
-import { PROVIDER_MANIFESTS } from '#providers/index.ts';
-import { planAll, type ProviderPlan } from '#providers/setup/plan.ts';
-import { PROVIDER_MARKS } from './provider-marks.ts';
-import { escapeHtml } from './brand.ts';
-import { shell } from './dashboard-shell.ts';
-
-/**
- * The dashboard — one page answering what `status`, `setup plan` and
- * `target list` answer between them.
- *
- * It renders and it does not act. Every state-changing thing on it is a command
- * to paste, for two reasons that are not the same. Connecting is ADR-005: the
- * consent belongs to whoever owns the browser, and the loopback listener that
- * receives the code is the CLI's. Everything else is ADR-007: config is written
- * from the control plane, and a page served by the endpoint is not it.
- *
- * So this is a reader, and the honest shape of a reader is a page that tells you
- * the line to run. What it saves is not typing — it is knowing which line.
- *
- * The design is `callback-page.ts`'s, because that is the product's page and
- * this is the same product: nothing painted (`color-scheme: light dark` over a
- * transparent background, correct in either mode with no theme switch), Lora on
- * the heading, and colour reserved for status rather than spent on emphasis.
- * What differs is the width — a card centred at 460px is right for one sentence
- * and wrong for four sections.
- */
-
-export interface DashboardConnection {
-  /** `provider.id`, the key everything else addresses this by. */
-  readonly key: string;
-  readonly provider: string;
-  readonly account: string;
-  /** What the operator calls it, where that is not just the account. */
-  readonly label?: string | undefined;
-  /** `active`, `unauthorized`, `disabled`, or `not reconciled`. */
-  readonly state: string;
-}
-
-export interface DashboardView {
-  /** The profile being rendered, which `?profile=` may have chosen. */
-  readonly profile: string;
-  /** Every profile this endpoint serves, for the switcher. */
-  readonly profiles: readonly string[];
-  /** The target whose adapters are open. */
-  readonly target: string;
-  /** Every target the profile declares, live or not. */
-  readonly targets: readonly string[];
-  readonly connections: readonly DashboardConnection[];
-  /** `oauth_apps` keys, so a profile with its own client is described as having one. */
-  readonly ownClients: readonly string[];
-}
-
-/**
- * Every command this page renders, built in one place.
- *
- * `--profile` and `--target` on all of them, unconditionally. The shell a line
- * is pasted into resolves both for itself — from `LANES_LINK_PROFILE` and
- * `LANES_LINK_TARGET`, or from the workspace default — and a page that shows
- * you one profile while handing you a command that silently acts on another is
- * worse than one that shows nothing. It is also the rule `resolveSelection`
- * already follows by refusing to guess.
- */
-function command(view: DashboardView, rest: string): string {
-  return `lanes link ${rest} --profile ${view.profile} --target ${view.target}`;
-}
-
-/**
- * A command, shown in full.
- *
- * Kept for the two places where the command *is* the label — the sign-in page
- * and the footer — because there is no provider name to carry it. Everywhere
- * else the line is on the button, not on the page; see `copyButton`.
- */
-function commandLine(line: string): string {
-  const text = escapeHtml(line);
-  return (
-    `<div class="cmd"><code>${text}</code>` +
-    `<button class="btn copy" type="button" data-copy="${text}" aria-label="Copy command">copy</button></div>`
-  );
-}
-
-/**
- * The command, on the button rather than beside it.
- *
- * What this trades away is worth naming: the line is no longer selectable by
- * hand, so a browser with no clipboard API leaves no way to get it. That is
- * narrower than it sounds — `navigator.clipboard` needs a secure context, and
- * `http://127.0.0.1` is one by definition, which is the only address this page
- * is ever served on. The `title` carries the text for anyone who wants to read
- * before pasting, and `lanes link setup plan` prints the same lines.
- */
-function copyButton(line: string, label: string): string {
-  const text = escapeHtml(line);
-  return (
-    `<button class="btn copy" type="button" data-copy="${text}" title="${text}" ` +
-    `aria-label="Copy the command that connects ${escapeHtml(label)}">copy</button>`
-  );
-}
-
-/**
- * The provider's mark, or letters standing in for one.
- *
- * `aria-hidden` on both: every caller puts the name beside it, and a screen
- * reader announcing "GitHub, GitHub" is worse than one announcing it once.
- *
- * The fallback takes the first letter of the family and two of the member,
- * because the plain two collapse a catalogue holding four `icloud_*` entries
- * and two `*_mcp` ones into a handful of identical marks — `ICA` and `ICO`
- * rather than `IC` twice.
- */
-function mark(id: string): string {
-  const path = PROVIDER_MARKS[id];
-  if (path) {
-    return (
-      '<svg class="glyph" viewBox="0 0 24 24" fill="currentColor" aria-hidden="true">' +
-      `<path d="${path}"/></svg>`
-    );
-  }
-
-  const [family, member] = id.split('_');
-  const letters = member ? `${family![0]}${member.slice(0, 2)}` : id.slice(0, 2);
-  return `<span class="glyph letters" aria-hidden="true">${escapeHtml(letters.toUpperCase())}</span>`;
-}
-
-/**
- * The state, as one of the design system's badge variants.
- *
- * "Gold for positive, neutral tokens otherwise" — so `active` is the only gold
- * one, and `unauthorized` is *neutral* rather than red. It is not an error: the
- * credential is absent from this target's store, which is a thing to do, and
- * `--destructive` is reserved for something having gone wrong. `disabled` is
- * quieter still, being a row that config no longer declares.
- */
-function statusPill(state: string): string {
-  const kind = state === 'active' ? 'positive' : state === 'disabled' ? 'quiet' : 'neutral';
-  return `<span class="pill ${kind}">${escapeHtml(state)}</span>`;
-}
-
-function connectionsSection(view: DashboardView): string {
-  if (view.connections.length === 0) {
-    return '<p class="empty">Nothing connected in this profile yet. Pick one below.</p>';
-  }
-
-  const rows = view.connections
-    .map((connection) => {
-      // A connection that is not active is one the reader can act on, and the
-      // action is the same `connect` that made it — re-running against an
-      // existing key repairs it rather than adding a second account. An active
-      // one has nothing to do, so it carries no button.
-      const repair =
-        connection.state === 'active'
-          ? ''
-          : copyButton(command(view, `connect ${connection.key}`), connection.key);
-
-      return (
-        '<div class="row">' +
-        mark(connection.provider) +
-        `<code class="key">${escapeHtml(connection.key)}</code>` +
-        statusPill(connection.state) +
-        // The label reads, the account hovers: the row is one line wide and the
-        // address is the longer of the two, so putting both in it wraps every
-        // row to make one of them legible.
-        `<span class="account"${
-          connection.label && connection.label !== connection.account
-            ? ` title="${escapeHtml(connection.account)}"`
-            : ''
-        }>${escapeHtml(connection.label ?? connection.account)}</span>` +
-        repair +
-        '</div>'
-      );
-    })
-    .join('\n');
-
-  return `<div class="rows">${rows}</div>`;
-}
-
-/**
- * One provider, one line: what it is called and the line that connects it.
- *
- * Everything else a card used to carry is gone — the description, whether it
- * opens a browser, who operates its OAuth client. None of it is lost: it is all
- * in `lanes link setup plan` and in the `setup_provider` capability, both of
- * which exist to answer "what does connecting this involve" at the length that
- * question deserves. This page answers a different one — what is there, and
- * what would I paste — and a paragraph per provider buried it.
- *
- * `plan.command` is built by the same `planFor` those two render, so the line
- * copied here and the line an agent suggests cannot drift.
- */
-function providerCard(plan: ProviderPlan): string {
-  return (
-    '<div class="row">' +
-    mark(plan.id) +
-    `<span class="name">${escapeHtml(plan.name)}</span>` +
-    copyButton(plan.command, plan.name) +
-    '</div>'
-  );
-}
-
-function catalogue(view: DashboardView): { available: string; another: string } {
-  const plans = planAll(PROVIDER_MANIFESTS, {
-    profile: view.profile,
-    connections: view.connections.map((connection) => connection.key),
-    ownClients: view.ownClients,
-    target: view.target,
-  });
-
-  // The same split `setup_overview` makes: never connected is an invitation,
-  // and already connected is only an invitation when a second account means
-  // something (ADR — `multiAccount` is the credential test, not a preference).
-  const available = plans.filter((plan) => plan.connected.length === 0);
-  const more = plans.filter((plan) => plan.connected.length > 0 && plan.multiAccount);
-
-  return {
-    available: available.map(providerCard).join('\n'),
-    another: more.map(providerCard).join('\n'),
-  };
-}
-
-function switcher(view: DashboardView): string {
-  // Links, not a form: choosing a profile here changes what this page shows and
-  // nothing else. The workspace default is config, and config is written from
-  // the CLI.
-  const profiles = view.profiles
-    .map((name) => {
-      const current = name === view.profile;
-      const label = escapeHtml(name);
-      return current
-        ? `<span class="chip on">${label}</span>`
-        : `<a class="chip" href="?profile=${encodeURIComponent(name)}">${label}</a>`;
-    })
-    .join('');
-
-  // Every declared target, with the one whose adapters are actually open marked.
-  // The others are real — they are where `--target` would write — but nothing on
-  // this page is reading from them.
-  const targets = view.targets
-    .map((name) =>
-      name === view.target
-        ? `<span class="chip on">${escapeHtml(name)}</span>`
-        : `<span class="chip off" title="declared, but not the one this endpoint opened">${escapeHtml(name)}</span>`,
-    )
-    .join('');
-
-  return (
-    '<div class="switch">' +
-    `<div class="group"><span class="eyebrow">profile</span>${profiles}</div>` +
-    `<div class="group"><span class="eyebrow">target</span>${targets}</div>` +
-    '</div>'
-  );
-}
-
-export function dashboardPage(view: DashboardView): Response {
-  const { available, another } = catalogue(view);
-
-  const body =
-    `<h1>Lanes Link</h1>${switcher(view)}` +
-    `<h2 class="eyebrow">Connections</h2>${connectionsSection(view)}` +
-    (available ? `<h2 class="eyebrow">Available</h2><div class="rows">${available}</div>` : '') +
-    (another ? `<h2 class="eyebrow">Connect another account</h2><div class="rows">${another}</div>` : '') +
-    '<h2 class="eyebrow">Elsewhere</h2>' +
-    '<p class="empty">What is reachable, and what is wrong with it:</p>' +
-    commandLine(command(view, 'status')) +
-    commandLine(command(view, 'doctor'));
-
-  return shell(body, 'Lanes Link', 200);
-}
-
-/**
- * What an unauthenticated browser gets.
- *
- * The narrow card rather than the wide page, because it is one sentence — and
- * it names the command instead of asking for the token, since the command is
- * what puts the token in the URL in the first place. A password field here
- * would be a second way in to guard for no benefit: whoever can run the command
- * is already whoever the token would prove them to be.
- *
- * The one command on this page carries neither `--profile` nor `--target`,
- * against the rule every other command here follows. Both are names, and this
- * page answers before authentication — ADR-018 stopped `/health` naming
- * profiles to an anonymous caller for exactly that reason, and a 401 that
- * recites the workspace's profile list would put it back.
- */
-export function dashboardSignInPage(status: number): Response {
-  return shell(
-    '<div class="narrow"><h1>Not signed in</h1>' +
-      '<p class="desc">This page opens from the terminal that is serving it.</p>' +
-      commandLine('lanes link dashboard') +
-      '</div>',
-    'Lanes Link',
-    status,
-  );
-}

package/src/cli/dashboard-shell.ts

@@ -1,125 +0,0 @@
-import { escapeHtml, FONTS, FOOTER, PAGE_CSP, PAGE_HEADERS, TOKENS } from './brand.ts';
-
-/**
- * The dashboard's chrome: its layout, its one listener, and the document they
- * hang in.
- *
- * Split from `dashboard-page.ts` because the two answer different questions —
- * that file decides what a row says, this one decides what a row looks like and
- * what the response is allowed to load. Everything shared with the two
- * authorization pages, which is every colour and every face, is in `brand.ts`;
- * what is left here is the one thing this surface does not share with them, a
- * wide list rather than a centred card.
- */
-
-const STYLE = `
-body { padding: 40px 24px; }
-.wrap { width: 100%; max-width: 620px; margin: 0 auto; }
-.narrow { text-align: center; padding: 32px 0; }
-h1 { margin: 0 0 20px; }
-h2 { margin: 30px 0 8px; }
-.desc { margin: 0 0 12px; font-size: 14px; line-height: 1.6; color: var(--muted-foreground); }
-.empty { margin: 0 0 12px; font-size: 14px; line-height: 1.6; color: var(--muted-foreground);
-         opacity: 0.8; }
-
-/* Profile and target selectors. The current one is not gold: gold says a thing
-   is good, and which profile you are looking at is not a verdict. */
-.switch { display: flex; flex-wrap: wrap; gap: 20px; padding-bottom: 4px; }
-.group { display: flex; align-items: center; gap: 6px; flex-wrap: wrap; }
-.chip { display: inline-block; padding: 3px 10px; font-size: 13px; border-radius: 999px;
-        border: 1px solid var(--border); color: var(--muted-foreground); text-decoration: none; }
-.chip:hover { color: var(--foreground); background: var(--muted); }
-.chip.on { color: var(--foreground); background: var(--muted); font-weight: 500; }
-.chip.off { border-style: dashed; opacity: 0.5; }
-
-/* One line per item: mark, name, whatever qualifies it, then the button hard
-   right. \`min-width: 0\` on the row lets the name ellipsize rather than push
-   the button off the end. */
-.rows { display: flex; flex-direction: column; }
-.row { display: flex; align-items: center; gap: 10px; min-width: 0;
-       padding: 7px 10px 7px 4px; border-radius: 6px; }
-.row:hover { background: var(--muted); }
-.glyph { flex: none; display: inline-flex; align-items: center; justify-content: center;
-         width: 17px; height: 17px; margin: 0 3px; opacity: 0.85; }
-/* The stand-in wants the box the real marks do not: bare letters read as a mark
-   that failed to load, where a brand mark reads as itself. */
-.glyph.letters { width: 23px; height: 23px; margin: 0; border-radius: 6px; font-size: 8.5px;
-                 font-weight: 500; letter-spacing: 0.02em; color: var(--muted-foreground);
-                 border: 1px solid var(--border); opacity: 1; }
-.name, .key { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.name { font-size: 14px; }
-.key { font-family: var(--mono); font-size: 13px; }
-.account { font-size: 12.5px; color: var(--muted-foreground); opacity: 0.8; min-width: 0;
-           overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-
-/* Always visible, never revealed on hover: the button is the only way to get the
-   command now that the line itself is not on the page, and an affordance you
-   have to find by sweeping the mouse is one most readers never find. */
-.copy { margin-left: auto; opacity: 0.6; }
-.row:hover .copy { opacity: 1; }
-.copy:hover, .copy:focus-visible { opacity: 1; }
-
-/* The two places the command is still the label, so it stays visible. */
-.cmd { display: flex; align-items: center; gap: 8px; margin-top: 8px; padding: 8px 10px;
-       background: var(--card); border: 1px dashed var(--border); border-radius: 10px; }
-.cmd code { flex: 1; font-size: 12.5px; line-height: 1.5; word-break: break-all; }
-.cmd .copy { opacity: 0.8; margin-left: 0; }
-`.trim();
-
-/**
- * The copy button, and nothing else.
- *
- * Inline because a separate file would be the first static asset this
- * repository serves, and one listener is not worth that. It reads the command
- * from a data attribute rather than from the DOM text so that what is copied is
- * exactly what was rendered, whitespace included.
- */
-const SCRIPT = `
-document.addEventListener('click', function (event) {
-  var button = event.target.closest('.copy');
-  if (!button || !navigator.clipboard) return;
-  navigator.clipboard.writeText(button.dataset.copy).then(function () {
-    button.textContent = 'copied';
-    setTimeout(function () { button.textContent = 'copy'; }, 1200);
-  });
-});
-`.trim();
-
-export function shell(inner: string, title: string, status: number): Response {
-  return new Response(
-    `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-${FONTS}
-<title>${escapeHtml(title)}</title>
-<style>
-${TOKENS}
-${STYLE}
-</style>
-</head>
-<body>
-<div class="wrap">
-${inner}
-${FOOTER}
-</div>
-<script>
-${SCRIPT}
-</script>
-</body>
-</html>`,
-    {
-      status,
-      headers: {
-        ...PAGE_HEADERS,
-        // The shared policy plus the one thing this page has that the others do
-        // not: an inline listener, for the copy button.
-        'content-security-policy': `${PAGE_CSP}; script-src 'unsafe-inline'`,
-        // Connection keys and account names are not something to leave in a
-        // shared browser's back-forward cache.
-        'cache-control': 'no-store',
-      },
-    },
-  );
-}

package/src/cli/provider-marks.ts

@@ -1,45 +0,0 @@
-/**
- * A brand mark per provider, drawn rather than fetched.
- *
- * Vendored from Simple Icons 16.28.0, which dedicates its paths to the public
- * domain under CC0-1.0. **The trademarks themselves remain their owners'** —
- * these identify the service a connection reaches, which is what nominative use
- * is for, and nothing here implies that any of them endorses this.
- *
- * Inlined because there is nowhere else to put them. The page is served under a
- * strict `default-src 'none'`, so it fetches nothing; the alternative — a CDN —
- * would tell a third party which dashboard the owner is looking at, every time
- * they look. There is also no static-asset pipeline to serve them from.
- *
- * Every path is one shape on a `0 0 24 24` canvas, filled with `currentColor`,
- * so a mark inherits the page's text colour and is correct in either theme
- * without a second copy. That is also why these are monochrome rather than the
- * full-colour originals: `callback-page.ts` reserves colour for status, and a
- * row of brand hues would spend it on decoration.
- *
- * Ids sharing a mark do so deliberately — `gmail` and `gmail_mcp` reach the same
- * mailbox by different transports, and the four `icloud_*` providers are one
- * service. The mark names the vendor; the name beside it names the product.
- *
- * Absent here, `dashboard-page.ts` falls back to a monogram. That covers every
- * provider an operator writes themselves, and the two shipped ones Simple Icons
- * does not carry: Slack, whose mark was withdrawn at the brand's request, and
- * Google Contacts, which it never had.
- */
-export const PROVIDER_MARKS: Readonly<Record<string, string>> = {
-  calendar: 'M18.316 5.684H24v12.632h-5.684V5.684zM5.684 24h12.632v-5.684H5.684V24zM18.316 5.684V0H1.895A1.894 1.894 0 0 0 0 1.895v16.421h5.684V5.684h12.632zm-7.207 6.25v-.065c.272-.144.5-.349.687-.617s.279-.595.279-.982c0-.379-.099-.72-.3-1.025a2.05 2.05 0 0 0-.832-.714 2.703 2.703 0 0 0-1.197-.257c-.6 0-1.094.156-1.481.467-.386.311-.65.671-.793 1.078l1.085.452c.086-.249.224-.461.413-.633.189-.172.445-.257.767-.257.33 0 .602.088.816.264a.86.86 0 0 1 .322.703c0 .33-.12.589-.36.778-.24.19-.535.284-.886.284h-.567v1.085h.633c.407 0 .748.109 1.02.327.272.218.407.499.407.843 0 .336-.129.614-.387.832s-.565.327-.924.327c-.351 0-.651-.103-.897-.311-.248-.208-.422-.502-.521-.881l-1.096.452c.178.616.505 1.082.977 1.401.472.319.984.478 1.538.477a2.84 2.84 0 0 0 1.293-.291c.382-.193.684-.458.902-.794.218-.336.327-.72.327-1.149 0-.429-.115-.797-.344-1.105a2.067 2.067 0 0 0-.881-.689zm2.093-1.931l.602.913L15 10.045v5.744h1.187V8.446h-.827l-2.158 1.557zM22.105 0h-3.289v5.184H24V1.895A1.894 1.894 0 0 0 22.105 0zm-3.289 23.5l4.684-4.684h-4.684V23.5zM0 22.105C0 23.152.848 24 1.895 24h3.289v-5.184H0v3.289z',
-  docs: 'M14.727 6.727H14V0H4.91c-.905 0-1.637.732-1.637 1.636v20.728c0 .904.732 1.636 1.636 1.636h14.182c.904 0 1.636-.732 1.636-1.636V6.727h-6zm-.545 10.455H7.09v-1.364h7.09v1.364zm2.727-3.273H7.091v-1.364h9.818v1.364zm0-3.273H7.091V9.273h9.818v1.363zM14.727 6h6l-6-6v6z',
-  drive: 'M12.01 1.485c-2.082 0-3.754.02-3.743.047.01.02 1.708 3.001 3.774 6.62l3.76 6.574h3.76c2.081 0 3.753-.02 3.742-.047-.005-.02-1.708-3.001-3.775-6.62l-3.76-6.574zm-4.76 1.73a789.828 789.861 0 0 0-3.63 6.319L0 15.868l1.89 3.298 1.885 3.297 3.62-6.335 3.618-6.33-1.88-3.287C8.1 4.704 7.255 3.22 7.25 3.214zm2.259 12.653-.203.348c-.114.198-.96 1.672-1.88 3.287a423.93 423.948 0 0 1-1.698 2.97c-.01.026 3.24.042 7.222.042h7.244l1.796-3.157c.992-1.734 1.85-3.23 1.906-3.323l.104-.167h-7.249z',
-  drive_mcp: 'M12.01 1.485c-2.082 0-3.754.02-3.743.047.01.02 1.708 3.001 3.774 6.62l3.76 6.574h3.76c2.081 0 3.753-.02 3.742-.047-.005-.02-1.708-3.001-3.775-6.62l-3.76-6.574zm-4.76 1.73a789.828 789.861 0 0 0-3.63 6.319L0 15.868l1.89 3.298 1.885 3.297 3.62-6.335 3.618-6.33-1.88-3.287C8.1 4.704 7.255 3.22 7.25 3.214zm2.259 12.653-.203.348c-.114.198-.96 1.672-1.88 3.287a423.93 423.948 0 0 1-1.698 2.97c-.01.026 3.24.042 7.222.042h7.244l1.796-3.157c.992-1.734 1.85-3.23 1.906-3.323l.104-.167h-7.249z',
-  github: 'M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12',
-  gmail: 'M24 5.457v13.909c0 .904-.732 1.636-1.636 1.636h-3.819V11.73L12 16.64l-6.545-4.91v9.273H1.636A1.636 1.636 0 0 1 0 19.366V5.457c0-2.023 2.309-3.178 3.927-1.964L5.455 4.64 12 9.548l6.545-4.91 1.528-1.145C21.69 2.28 24 3.434 24 5.457z',
-  gmail_mcp: 'M24 5.457v13.909c0 .904-.732 1.636-1.636 1.636h-3.819V11.73L12 16.64l-6.545-4.91v9.273H1.636A1.636 1.636 0 0 1 0 19.366V5.457c0-2.023 2.309-3.178 3.927-1.964L5.455 4.64 12 9.548l6.545-4.91 1.528-1.145C21.69 2.28 24 3.434 24 5.457z',
-  icloud_calendar: 'M13.762 4.29a6.51 6.51 0 0 0-5.669 3.332 3.571 3.571 0 0 0-1.558-.36 3.571 3.571 0 0 0-3.516 3A4.918 4.918 0 0 0 0 14.796a4.918 4.918 0 0 0 4.92 4.914 4.93 4.93 0 0 0 .617-.045h14.42c2.305-.272 4.041-2.258 4.043-4.589v-.009a4.594 4.594 0 0 0-3.727-4.508 6.51 6.51 0 0 0-6.511-6.27z',
-  icloud_contacts: 'M13.762 4.29a6.51 6.51 0 0 0-5.669 3.332 3.571 3.571 0 0 0-1.558-.36 3.571 3.571 0 0 0-3.516 3A4.918 4.918 0 0 0 0 14.796a4.918 4.918 0 0 0 4.92 4.914 4.93 4.93 0 0 0 .617-.045h14.42c2.305-.272 4.041-2.258 4.043-4.589v-.009a4.594 4.594 0 0 0-3.727-4.508 6.51 6.51 0 0 0-6.511-6.27z',
-  icloud_drive: 'M13.762 4.29a6.51 6.51 0 0 0-5.669 3.332 3.571 3.571 0 0 0-1.558-.36 3.571 3.571 0 0 0-3.516 3A4.918 4.918 0 0 0 0 14.796a4.918 4.918 0 0 0 4.92 4.914 4.93 4.93 0 0 0 .617-.045h14.42c2.305-.272 4.041-2.258 4.043-4.589v-.009a4.594 4.594 0 0 0-3.727-4.508 6.51 6.51 0 0 0-6.511-6.27z',
-  icloud_mail: 'M13.762 4.29a6.51 6.51 0 0 0-5.669 3.332 3.571 3.571 0 0 0-1.558-.36 3.571 3.571 0 0 0-3.516 3A4.918 4.918 0 0 0 0 14.796a4.918 4.918 0 0 0 4.92 4.914 4.93 4.93 0 0 0 .617-.045h14.42c2.305-.272 4.041-2.258 4.043-4.589v-.009a4.594 4.594 0 0 0-3.727-4.508 6.51 6.51 0 0 0-6.511-6.27z',
-  linear: 'M2.886 4.18A11.982 11.982 0 0 1 11.99 0C18.624 0 24 5.376 24 12.009c0 3.64-1.62 6.903-4.18 9.105L2.887 4.18ZM1.817 5.626l16.556 16.556c-.524.33-1.075.62-1.65.866L.951 7.277c.247-.575.537-1.126.866-1.65ZM.322 9.163l14.515 14.515c-.71.172-1.443.282-2.195.322L0 11.358a12 12 0 0 1 .322-2.195Zm-.17 4.862 9.823 9.824a12.02 12.02 0 0 1-9.824-9.824Z',
-  notion: 'M4.459 4.208c.746.606 1.026.56 2.428.466l13.215-.793c.28 0 .047-.28-.046-.326L17.86 1.968c-.42-.326-.981-.7-2.055-.607L3.01 2.295c-.466.046-.56.28-.374.466zm.793 3.08v13.904c0 .747.373 1.027 1.214.98l14.523-.84c.841-.046.935-.56.935-1.167V6.354c0-.606-.233-.933-.748-.887l-15.177.887c-.56.047-.747.327-.747.933zm14.337.745c.093.42 0 .84-.42.888l-.7.14v10.264c-.608.327-1.168.514-1.635.514-.748 0-.935-.234-1.495-.933l-4.577-7.186v6.952L12.21 19s0 .84-1.168.84l-3.222.186c-.093-.186 0-.653.327-.746l.84-.233V9.854L7.822 9.76c-.094-.42.14-1.026.793-1.073l3.456-.233 4.764 7.279v-6.44l-1.215-.139c-.093-.514.28-.887.747-.933zM1.936 1.035l13.31-.98c1.634-.14 2.055-.047 3.082.7l4.249 2.986c.7.513.934.653.934 1.213v16.378c0 1.026-.373 1.634-1.68 1.726l-15.458.934c-.98.047-1.448-.093-1.962-.747l-3.129-4.06c-.56-.747-.793-1.306-.793-1.96V2.667c0-.839.374-1.54 1.447-1.632z',
-  sheets: 'M11.318 12.545H7.91v-1.909h3.41v1.91zM14.728 0v6h6l-6-6zm1.363 10.636h-3.41v1.91h3.41v-1.91zm0 3.273h-3.41v1.91h3.41v-1.91zM20.727 6.5v15.864c0 .904-.732 1.636-1.636 1.636H4.909a1.636 1.636 0 0 1-1.636-1.636V1.636C3.273.732 4.005 0 4.909 0h9.318v6.5h6.5zm-3.273 2.773H6.545v7.909h10.91v-7.91zm-6.136 4.636H7.91v1.91h3.41v-1.91z',
-  google_tasks: 'M11.383.617C5.097.617 0 5.714 0 12c0 6.286 5.097 11.383 11.383 11.383 6.286 0 11.38-5.097 11.38-11.383a11.34 11.34 0 0 0-.878-4.389l-3.203 3.203c.062.387.1.782.1 1.186a7.398 7.398 0 1 1-7.4-7.398c1.499 0 2.889.448 4.054 1.214l2.857-2.857a11.325 11.325 0 0 0-6.91-2.342zm9.674.756c-.292 0-.583.112-.805.334-2.97 2.965-5.934 5.934-8.9 8.902L9.596 8.854a1.139 1.139 0 0 0-1.61 0l-1.775 1.773a1.139 1.139 0 0 0 0 1.61l4.166 4.163a1.421 1.421 0 0 0 2.012 0L23.666 5.121a1.136 1.136 0 0 0 0-1.61l-1.805-1.804a1.136 1.136 0 0 0-.804-.334z',
-};