@memberjunction/excel-addin-server 0.0.1-seed.1 → 6.2.0-edge.8

package/LICENSE

@@ -0,0 +1,183 @@
+Business Source License 1.1
+
+License text copyright (c) 2024 MariaDB plc, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB plc.
+
+-----------------------------------------------------------------------------
+
+Parameters
+
+Licensor:             Blue Cypress, Inc.
+
+Licensed Work:        MemberJunction.
+                      The Licensed Work is (c) 2023-2026 Blue Cypress, Inc.
+
+Additional Use Grant: Subject to the terms of this License, Licensor grants
+                      you the following additional rights to make Production
+                      Use of the Licensed Work.
+
+                      1. Internal Use
+
+                      You may make production use of the Licensed Work for
+                      your own internal business or organizational operations.
+
+                      2. Nonprofit Use
+
+                      If you are a Nonprofit, you may make production use of
+                      the Licensed Work for the operations and activities of
+                      your Organizational Family.
+
+                      3. MemberJunction Certified Program Use
+
+                      If you are authorized by Licensor under the
+                      MemberJunction Certified Program to provide professional
+                      services using the Licensed Work, you may make
+                      production use of the Licensed Work in providing such
+                      professional services to a client, provided that:
+
+                      (a) the Licensed Work is deployed in, and the applicable
+                      production use occurs within, an environment owned,
+                      leased, licensed, subscribed to, or otherwise controlled
+                      by that client; and
+
+                      (b) the production use is for that client's own internal
+                      business or organizational operations or is otherwise
+                      independently permitted to that client under this
+                      Additional Use Grant.
+
+                      4. Definitions Applicable to the Additional Use Grant
+
+                      "Affiliate" means, with respect to a specified Person,
+                      any other Person that directly or indirectly Controls,
+                      is Controlled by, or is under common Control with such
+                      specified Person.
+
+                      "Control" (including the terms "Controls," "Controlled
+                      by," and "under common Control with") means the direct
+                      or indirect possession of the power to direct or cause
+                      the direction of the management and policies of a
+                      Person, whether through ownership of voting interests,
+                      by contract, or otherwise.
+
+                      "Organizational Family" means, with respect to a Person,
+                      (a) such Person and its Affiliates, and (b) any
+                      nonprofit organization, governmental entity, chapter,
+                      division, local affiliate, regional affiliate, state
+                      affiliate, national affiliate, or other entity that is
+                      formally affiliated with such Person through governing
+                      documents, a charter, bylaws, a membership agreement, or
+                      another written organizational instrument, and is
+                      recognized under such documents as part of the same
+                      organizational structure.
+
+                      "Nonprofit" means a Person recognized by the Internal
+                      Revenue Service as exempt from federal income taxation
+                      under Section 501(c)(3), 501(c)(4), 501(c)(5), or
+                      501(c)(6) of the Internal Revenue Code, or a foreign
+                      organization recognized under substantially equivalent
+                      laws.
+
+                      A Person claiming eligibility as a Nonprofit shall, upon
+                      Licensor's reasonable request, provide documentation
+                      reasonably sufficient to demonstrate that it qualifies
+                      as a Nonprofit. If such Person materially misrepresents,
+                      or is unable to demonstrate, its qualification as a
+                      Nonprofit, the rights granted to such Person under
+                      Section 2 of this Additional Use Grant shall terminate.
+
+                      "MemberJunction Certified Program" means Licensor's
+                      then-current program for certifying and authorizing a
+                      Person to provide professional services using the
+                      Licensed Work.
+
+                      "Person" means any individual, corporation, limited
+                      liability company, partnership, association, nonprofit
+                      organization, governmental entity, or other legal or
+                      organizational entity.
+
+Change Date:          Four (4) years from the date the Licensed Work is first
+                      made available.
+
+Change License:       MIT License.
+
+For information about alternative licensing arrangements for the Licensed
+Work, please contact Blue Cypress, Inc.
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+-----------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License
+   can be included in a program with software provided under GPL Version 2.0
+   or a later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.

package/README.md

@@ -1,4 +1,105 @@
 # @memberjunction/excel-addin-server
-Seed release published over OIDC to prove trusted publishing is configured for
-this package. It contains no code and is tagged `seed`, never `latest`.
-Real releases are published by .github/workflows/publish.yml.
+
+The server half of the MemberJunction Excel add-in. Each MJ host serves the add-in to Excel itself, so people get **Open in Excel** on saved views and saved queries: a workbook that holds headings and no rows, and fills from MJ as whoever opens it.
+
+The browser-safe half — the workbook contract, the typed Remote Operations Explorer calls, and the add-in pane — is [`@memberjunction/excel-addin`](../Excel).
+
+## What it provides
+
+| Piece | What it does |
+|---|---|
+| `ExcelAddinServerExtension` | A Server Extension (pre-auth) that serves the add-in's manifest, its `config.json`, and the pane's pages and icons from this host |
+| `ExcelAddin.GetStatus` | Tells Explorer whether this host serves the add-in, and where |
+| `ExcelAddin.CreateConnection` | Mints the signed-in user's Excel connection key |
+| `ExcelAddin.BuildWorkbook` | Builds the connected workbook for saved views, entities, and queries the caller can see |
+| `ExcelAddin.GetCatalog` | Lists the caller's active applications, readable entities, query categories, and runnable saved queries for the in-pane browser |
+| `ExcelAddin.GetEntityViews` | Lists accessible saved `MJ: User Views` on a chosen entity for the in-pane browser |
+| `ExcelAddin.ResolveSource` | Resolves a chosen entity, view, or query into canonical columns and checked parameters before writing to `MJ_Sources` |
+| `BuildExcelAddinManifest`, `BuildConnectedWorkbook` | The builders those use |
+
+The operations are registered whenever this package is loaded. Until the Server Extension is configured, `GetStatus` reports the add-in as off, the other two refuse, and Explorer hides the Open in Excel button.
+
+## Turning it on
+
+Add the extension to the host's `mj.config.cjs`:
+
+```js
+module.exports = {
+    serverExtensions: [
+        {
+            Name: 'ExcelAddin',
+            DriverClass: 'ExcelAddinServerExtension',
+            PackagePath: '@memberjunction/excel-addin-server',
+            RootPath: '/office/excel',
+            Phase: 'pre-auth',
+            Enabled: true,
+            Settings: {
+                ExplorerUrl: 'https://explorer.example.org', // required: where MJ Explorer runs
+                ServerName: 'Example Association',          // shown in Excel and on the connect page
+            },
+        },
+    ],
+};
+```
+
+MJAPI also needs a public URL (`MJAPI_PUBLIC_URL`), because Excel loads the add-in from outside the server. The extension refuses to start without one and logs why.
+
+### Settings
+
+| Setting | Default | Meaning |
+|---|---|---|
+| `ExplorerUrl` | required | Where MJ Explorer runs. The add-in's sign-in window opens its `/office/connect` page |
+| `ServerName` | `MemberJunction` | The add-in's name in Excel and on the connect page |
+| `KeyLifetimeDays` | `90` | How long a connection key lasts (1–365) |
+| `MaxRows` | `100000` | The most rows the pane writes for one source |
+| `AddinId` | `AAEB4761-75CC-4DB1-99BD-7790FAD307C6` | The add-in's GUID. Change it only to deploy a second, differently configured copy to the same Microsoft 365 tenant |
+| `Version` | `1.0.0.0` | The add-in version in the manifest and in every workbook |
+| `StoreType`, `Store` | `EXCatalog` | How a workbook names where the add-in is deployed. `EXCatalog` is Microsoft 365 centralized deployment |
+
+## Deploying the add-in to people
+
+Once MJAPI is running with the extension, its manifest is at:
+
+```
+https://<MJAPI public URL>/office/excel/manifest.xml
+```
+
+A Microsoft 365 administrator deploys it once:
+
+1. Open the **Microsoft 365 admin center** → **Settings** → **Integrated apps** → **Upload custom apps**.
+2. Choose **Office Add-in**, then **Provide link to manifest file**, and paste the manifest URL.
+3. Choose who gets it (everyone, or specific users or groups) and finish.
+
+The add-in then appears on the **Data** tab of Excel for Windows, Mac and the web, and a workbook made by Open in Excel opens its pane automatically. Deployment can take up to a day to reach everyone.
+
+For development, sideload the same manifest (Excel → **Insert** → **Add-ins** → **Upload My Add-in**). A workbook names its add-in's deployment through `StoreType`; a sideloaded add-in may not open automatically with a workbook made for centralized deployment, but it opens from the ribbon button.
+
+## How it works
+
+1. **Open in Excel.** A person picks Open in Excel on a saved view or saved query. `ExcelAddin.BuildWorkbook` reads the view or query **as that person** (refusing one they can't see), and writes a workbook with:
+   - one sheet per source, holding only its headings;
+   - a very-hidden `MJ_Sources` sheet recording each source (the view, or the query and its chosen parameter values);
+   - the Office web-extension parts that open this add-in with the file.
+
+   No rows, no credential, and no server-set query parameter are ever written into the file.
+2. **Sign in.** The pane opens Explorer's `/office/connect` page in an Office sign-in window. The person signs in the way they always do and approves. `ExcelAddin.CreateConnection` mints their connection key, and Explorer hands it back encrypted to a key pair the pane made for that sign-in.
+3. **Refresh.** The pane fetches each source's rows through MJ's GraphQL `RunViewByID` and `GetQueryData`, sending the key as `X-API-Key`, and writes them into the sheet.
+
+## Security model
+
+- **Nothing here returns data.** The pre-auth routes serve only static pages, the manifest and a config file with public URLs. Data comes only from GraphQL, with the person's key.
+- **The connection key is narrow.** It belongs to the person, holds only the `view:run` and `query:run` scopes, and MJ denies an API key every scope-checked operation outside its scopes. It can't save, delete or mint more keys. It is bound to the `MJAPI` application when one is defined, so it can't be used against MJ's MCP or A2A servers.
+- **It is created as the person.** MJ's own permissions decide whether they may create an API key. If their role can't, Open in Excel's sign-in says so and asks them to contact an administrator.
+- **It is revocable.** It is labelled `Excel add-in` on the API Keys page, expires (90 days by default), and stops working the moment it is revoked or its user is deactivated.
+- **No half-made keys.** If any step after the key is created fails, the key is revoked before the error is reported.
+- **Every refresh is checked again.** Rows come from the same operations Explorer uses, with the person's row- and field-level security. A forwarded workbook shows each person only their own rows.
+- **The file is untrusted.** The pane validates the recorded sources before using them, and the server re-checks each one on every refresh.
+
+## Development
+
+```bash
+pnpm run build   # tsc
+pnpm test        # vitest
+```
+
+The pane is built by `@memberjunction/excel-addin` (`dist/web`); this package serves it from there and refuses to start if it isn't built.

package/dist/catalog.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @fileoverview Builds the permission-filtered catalog (Applications, readable Entities, Query
+ * Categories, and runnable Saved Queries) and per-entity Saved Views list for the Excel task pane.
+ *
+ * Every check runs strictly against the calling `UserInfo`:
+ * - Entities require `IncludeInAPI !== false`, active status, and `GetUserPermisions(user).CanRead`.
+ * - Saved Views are queried via `RunView.FromMetadataProvider(provider)` AS `user` (avoiding the
+ *   process-wide `UserViewEngine.Instance` singleton's mutable `_contextUserId`) and filtered by
+ *   `v.UserCanView`.
+ * - Saved Queries require `q.UserCanRun(user)` and expose only non-server-set parameters.
+ *
+ * @module @memberjunction/excel-addin-server
+ */
+import { IMetadataProvider, RunViewParams, RunViewResult, UserInfo } from '@memberjunction/core';
+import { ExcelAddinCatalogOutput, ExcelAddinEntityViewsOutput } from '@memberjunction/excel-addin';
+/** Minimal RunView runner shape so unit tests can supply a stub without global provider wiring. */
+export interface ExcelViewRunner {
+    RunView<T>(params: RunViewParams, contextUser?: UserInfo): Promise<RunViewResult<T>>;
+}
+/**
+ * Builds the signed-in user's permission-filtered catalog of applications, entities, query categories,
+ * and saved queries.
+ */
+export declare function BuildExcelCatalog(provider: IMetadataProvider, user: UserInfo): ExcelAddinCatalogOutput;
+/**
+ * Loads the saved `MJ: User Views` records `user` is permitted to view on `entityId`.
+ */
+export declare function LoadExcelEntityViews(entityId: string, provider: IMetadataProvider, user: UserInfo, runner?: ExcelViewRunner): Promise<ExcelAddinEntityViewsOutput>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAGH,iBAAiB,EAKjB,aAAa,EACb,aAAa,EACb,QAAQ,EACX,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACH,uBAAuB,EACvB,2BAA2B,EAQ9B,MAAM,6BAA6B,CAAC;AAGrC,mGAAmG;AACnG,MAAM,WAAW,eAAe;IAC5B,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACxF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,GAAG,uBAAuB,CAetG;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACtC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,QAAQ,EACd,MAAM,CAAC,EAAE,eAAe,GACzB,OAAO,CAAC,2BAA2B,CAAC,CAwDtC"}

package/dist/catalog.js

@@ -0,0 +1,242 @@
+/**
+ * @fileoverview Builds the permission-filtered catalog (Applications, readable Entities, Query
+ * Categories, and runnable Saved Queries) and per-entity Saved Views list for the Excel task pane.
+ *
+ * Every check runs strictly against the calling `UserInfo`:
+ * - Entities require `IncludeInAPI !== false`, active status, and `GetUserPermisions(user).CanRead`.
+ * - Saved Views are queried via `RunView.FromMetadataProvider(provider)` AS `user` (avoiding the
+ *   process-wide `UserViewEngine.Instance` singleton's mutable `_contextUserId`) and filtered by
+ *   `v.UserCanView`.
+ * - Saved Queries require `q.UserCanRun(user)` and expose only non-server-set parameters.
+ *
+ * @module @memberjunction/excel-addin-server
+ */
+import { RunView, } from '@memberjunction/core';
+import { ResourcePermissionEngine } from '@memberjunction/core-entities';
+import { IsValidUUID, UUIDsEqual } from '@memberjunction/global';
+import { ExcelSourceError } from './sources.js';
+/**
+ * Builds the signed-in user's permission-filtered catalog of applications, entities, query categories,
+ * and saved queries.
+ */
+export function BuildExcelCatalog(provider, user) {
+    const entities = buildReadableEntities(provider.Entities ?? [], user);
+    const canonicalEntityIdByLower = new Map(entities.map(e => [e.ID.toLowerCase(), e.ID]));
+    const applications = buildApplications(provider.Applications ?? [], canonicalEntityIdByLower);
+    const { Categories: queryCategories, Queries: queries } = buildQueriesAndCategories(provider.Queries ?? [], provider.QueryCategories ?? [], user);
+    return {
+        Applications: applications,
+        Entities: entities,
+        QueryCategories: queryCategories,
+        Queries: queries,
+    };
+}
+/**
+ * Loads the saved `MJ: User Views` records `user` is permitted to view on `entityId`.
+ */
+export async function LoadExcelEntityViews(entityId, provider, user, runner) {
+    if (!IsValidUUID(entityId)) {
+        throw new ExcelSourceError('That entity ID is not valid.');
+    }
+    if (!IsValidUUID(user.ID)) {
+        throw new ExcelSourceError('The current user context is not valid.');
+    }
+    const entity = (provider.Entities ?? []).find(e => UUIDsEqual(e.ID, entityId));
+    if (!entity || entity.IncludeInAPI === false || entity.Status === 'Disabled' || !entity.GetUserPermisions(user).CanRead) {
+        throw new ExcelSourceError('That entity doesn\'t exist, or you don\'t have access to read it.');
+    }
+    if (!runner && !ResourcePermissionEngine.Instance.Loaded) {
+        try {
+            await ResourcePermissionEngine.Instance.Config(false, user, provider);
+        }
+        catch {
+            // If ResourcePermissionEngine cannot load in a minimal test environment, safeCanView handles fallback.
+        }
+    }
+    const viewRunner = runner ?? RunView.FromMetadataProvider(provider);
+    const result = await viewRunner.RunView({
+        EntityName: 'MJ: User Views',
+        ExtraFilter: `EntityID='${entity.ID}' AND (UserID='${user.ID}' OR IsShared=1)`,
+        OrderBy: 'Name',
+        ResultType: 'entity_object',
+    }, user);
+    if (!result.Success) {
+        throw new ExcelSourceError(result.ErrorMessage || `Saved views for "${entity.DisplayNameOrName}" could not be loaded.`);
+    }
+    const accessible = (result.Results ?? []).filter(view => safeUserCanView(view, user));
+    const mapped = accessible.map(view => {
+        const isOwned = UUIDsEqual(view.UserID, user.ID);
+        return {
+            ID: view.ID,
+            Name: view.Name,
+            Description: view.Description ?? '',
+            IsOwned: isOwned,
+            IsShared: Boolean(view.IsShared),
+            IsDefault: isOwned && Boolean(view.IsDefault),
+        };
+    });
+    mapped.sort((a, b) => {
+        if (a.IsDefault !== b.IsDefault) {
+            return a.IsDefault ? -1 : 1;
+        }
+        if (a.IsOwned !== b.IsOwned) {
+            return a.IsOwned ? -1 : 1;
+        }
+        return a.Name.localeCompare(b.Name);
+    });
+    return {
+        EntityID: entity.ID,
+        Views: mapped,
+    };
+}
+function buildReadableEntities(entities, user) {
+    return entities
+        .filter(e => e.IncludeInAPI !== false &&
+        e.Status !== 'Disabled' &&
+        e.Status !== 'Deprecated' &&
+        e.GetUserPermisions(user).CanRead)
+        .map(e => ({
+        ID: e.ID,
+        Name: e.Name,
+        DisplayName: e.DisplayNameOrName,
+        Description: e.Description ?? '',
+    }))
+        .sort((a, b) => a.DisplayName.localeCompare(b.DisplayName));
+}
+function buildApplications(applications, canonicalEntityIdByLower) {
+    return [...applications]
+        .filter(app => !app.Status || app.Status === 'Active')
+        .sort((a, b) => {
+        const seqDiff = (a.DefaultSequence ?? 100) - (b.DefaultSequence ?? 100);
+        return seqDiff !== 0 ? seqDiff : (a.Name ?? '').localeCompare(b.Name ?? '');
+    })
+        .map(app => {
+        const seen = new Set();
+        const entityIds = [];
+        const appEntities = [...(app.ApplicationEntities ?? [])].sort((a, b) => (a.Sequence ?? 0) - (b.Sequence ?? 0));
+        for (const ae of appEntities) {
+            const canonical = ae.EntityID ? canonicalEntityIdByLower.get(ae.EntityID.toLowerCase()) : undefined;
+            if (canonical && !seen.has(canonical)) {
+                seen.add(canonical);
+                entityIds.push(canonical);
+            }
+        }
+        return {
+            ID: app.ID,
+            Name: app.Name,
+            Description: app.Description ?? '',
+            EntityIDs: entityIds,
+        };
+    })
+        .filter(app => app.EntityIDs.length > 0);
+}
+function buildQueriesAndCategories(allQueries, allCategories, user) {
+    const categoryById = new Map();
+    for (const cat of allCategories) {
+        if (cat.ID) {
+            categoryById.set(cat.ID.toLowerCase(), cat);
+        }
+    }
+    const computePath = (categoryId) => {
+        if (!categoryId) {
+            return '';
+        }
+        const parts = [];
+        const visited = new Set();
+        let cursor = categoryId;
+        while (cursor) {
+            const key = cursor.toLowerCase();
+            if (visited.has(key)) {
+                break;
+            }
+            visited.add(key);
+            const cat = categoryById.get(key);
+            if (!cat) {
+                break;
+            }
+            parts.unshift(cat.Name);
+            cursor = cat.ParentID;
+        }
+        return parts.join(' / ');
+    };
+    const usedCategoryAndAncestors = new Set();
+    const markCategoryAncestors = (categoryId) => {
+        let cursor = categoryId;
+        while (cursor) {
+            const key = cursor.toLowerCase();
+            if (usedCategoryAndAncestors.has(key)) {
+                break;
+            }
+            const cat = categoryById.get(key);
+            if (!cat) {
+                break;
+            }
+            usedCategoryAndAncestors.add(key);
+            cursor = cat.ParentID;
+        }
+    };
+    const queries = allQueries
+        .filter(q => q.Status !== 'Rejected' && q.Status !== 'Expired' && q.UserCanRun(user))
+        .map(q => {
+        markCategoryAncestors(q.CategoryID);
+        const categoryPath = computePath(q.CategoryID);
+        const callerParams = (q.Parameters ?? [])
+            .filter(p => !p.IsServerSet)
+            .map(mapQueryParameter);
+        return {
+            ID: q.ID,
+            Name: q.Name,
+            Description: q.Description ?? '',
+            CategoryID: q.CategoryID ?? null,
+            CategoryPath: categoryPath,
+            Parameters: callerParams,
+        };
+    })
+        .sort((a, b) => {
+        const pathCmp = a.CategoryPath.localeCompare(b.CategoryPath);
+        return pathCmp !== 0 ? pathCmp : a.Name.localeCompare(b.Name);
+    });
+    const categories = allCategories
+        .filter(c => c.ID && usedCategoryAndAncestors.has(c.ID.toLowerCase()))
+        .map(c => ({
+        ID: c.ID,
+        Name: c.Name,
+        ParentID: c.ParentID ?? null,
+        Path: computePath(c.ID),
+    }))
+        .sort((a, b) => a.Path.localeCompare(b.Path));
+    return { Categories: categories, Queries: queries };
+}
+function mapQueryParameter(param) {
+    return {
+        Name: param.Name,
+        Type: normalizeParameterType(param.Type),
+        IsRequired: Boolean(param.IsRequired),
+        DefaultValue: param.DefaultValue ?? null,
+        Description: param.Description ?? '',
+        SampleValue: param.SampleValue ?? '',
+    };
+}
+function normalizeParameterType(rawType) {
+    switch (rawType) {
+        case 'number':
+        case 'date':
+        case 'boolean':
+        case 'array':
+            return rawType;
+        default:
+            return 'string';
+    }
+}
+function safeUserCanView(view, user) {
+    if (UUIDsEqual(view.UserID, user.ID)) {
+        return true;
+    }
+    try {
+        return Boolean(view.UserCanView);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAOH,OAAO,GAIV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA4B,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAYjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAO7C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE,IAAc;IACzE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACtE,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAiB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC9F,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAC/E,QAAQ,CAAC,OAAO,IAAI,EAAE,EACtB,QAAQ,CAAC,eAAe,IAAI,EAAE,EAC9B,IAAI,CACP,CAAC;IACF,OAAO;QACH,YAAY,EAAE,YAAY;QAC1B,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,eAAe;QAChC,OAAO,EAAE,OAAO;KACnB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,QAAgB,EAChB,QAA2B,EAC3B,IAAc,EACd,MAAwB;IAExB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAgB,CAAC,wCAAwC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACtH,MAAM,IAAI,gBAAgB,CAAC,mEAAmE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC;YACD,MAAM,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACL,uGAAuG;QAC3G,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAoB,MAAM,IAAI,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CACnC;QACI,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,aAAa,MAAM,CAAC,EAAE,kBAAkB,IAAI,CAAC,EAAE,kBAAkB;QAC9E,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,eAAe;KAC9B,EACD,IAAI,CACP,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,YAAY,IAAI,oBAAoB,MAAM,CAAC,iBAAiB,wBAAwB,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,MAAM,MAAM,GAAuB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO;YACH,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChC,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;SAChD,CAAC;IACN,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,KAAK,EAAE,MAAM;KAChB,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAsB,EAAE,IAAc;IACjE,OAAO,QAAQ;SACV,MAAM,CACH,CAAC,CAAC,EAAE,CACA,CAAC,CAAC,YAAY,KAAK,KAAK;QACxB,CAAC,CAAC,MAAM,KAAK,UAAU;QACvB,CAAC,CAAC,MAAM,KAAK,YAAY;QACzB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,CACxC;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,iBAAiB;QAChC,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;KACnC,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CACtB,YAA+B,EAC/B,wBAA6C;IAE7C,OAAO,CAAC,GAAG,YAAY,CAAC;SACnB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACX,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;QACxE,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC;SACD,GAAG,CAAC,GAAG,CAAC,EAAE;QACP,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACzD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAClD,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC;QACD,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,SAAS,EAAE,SAAS;SACvB,CAAC;IACN,CAAC,CAAC;SACD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,yBAAyB,CAC9B,UAAuB,EACvB,aAAkC,EAClC,IAAc;IAEd,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACT,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,UAAqC,EAAU,EAAE;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,MAAM,GAA8B,UAAU,CAAC;QACnD,OAAO,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,MAAM;YACV,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM;YACV,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;IACnD,MAAM,qBAAqB,GAAG,CAAC,UAAqC,EAAQ,EAAE;QAC1E,IAAI,MAAM,GAA8B,UAAU,CAAC;QACnD,OAAO,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM;YACV,CAAC;YACD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM;YACV,CAAC;YACD,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,OAAO,GAAwB,UAAU;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;SACpF,GAAG,CAAC,CAAC,CAAC,EAAE;QACL,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;aAC3B,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5B,OAAO;YACH,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;YAChC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAChC,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,YAAY;SAC3B,CAAC;IACN,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACX,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEP,MAAM,UAAU,GAAgC,aAAa;SACxD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC5B,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAElD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAChD,OAAO;QACH,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QACrC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;KACvC,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmC;IAC/D,QAAQ,OAAO,EAAE,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,OAAO;YACR,OAAO,OAAO,CAAC;QACnB;YACI,OAAO,QAAQ,CAAC;IACxB,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAA8B,EAAE,IAAc;IACnE,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC"}

package/dist/connection.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @fileoverview Mints the API key the Excel add-in signs in with.
+ *
+ * The key belongs to the signed-in user and is created AS that user, so MJ's own permissions decide
+ * whether they may connect Excel at all (plan O10). It is limited to the `view:run` and `query:run`
+ * scopes; MJ's API keys deny every scope-checked operation outside a key's scopes, so it can't save,
+ * delete or mint more keys. It is bound to the `MJAPI` application when one is defined, expires, and
+ * shows up on the API Keys page, where it can be revoked.
+ *
+ * A key is never left without its scopes: if any step after creation fails, the key is revoked
+ * before the error is reported.
+ *
+ * @module @memberjunction/excel-addin-server
+ */
+import { IMetadataProvider, UserInfo } from '@memberjunction/core';
+/** The label every Excel connection key carries on the API Keys page. */
+export declare const EXCEL_CONNECTION_KEY_LABEL = "Excel add-in";
+/** The only scopes an Excel connection key holds. */
+export declare const EXCEL_CONNECTION_SCOPES: readonly string[];
+/** The application a key is bound to, so it works against MJAPI only. */
+export declare const EXCEL_CONNECTION_APPLICATION = "MJAPI";
+/** A new connection key. `APIKey` is the raw key, available only now. */
+export interface ExcelConnectionKey {
+    APIKey: string;
+    APIKeyID: string;
+    ExpiresAt: Date;
+    Label: string;
+}
+/** Creates, scopes and binds the user's Excel connection key. Throws with a message fit to show them. */
+export declare function CreateExcelConnectionKey(user: UserInfo, provider: IMetadataProvider, lifetimeDays: number, now?: Date): Promise<ExcelConnectionKey>;
+//# sourceMappingURL=connection.d.ts.map

package/dist/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAK7E,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAEzD,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAA8B,CAAC;AAEpF,yEAAyE;AACzE,eAAO,MAAM,4BAA4B,UAAU,CAAC;AAEpD,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACjB;AAID,yGAAyG;AACzG,wBAAsB,wBAAwB,CAC1C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE,IAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAqB7B"}