@oneuptime/common 14.0.11 → 14.0.12

package/build/dist/UI/Components/Workflow/WorkflowTurnedOffNotice.js

@@ -0,0 +1,34 @@
+import Button, { ButtonSize, ButtonStyleType } from "../Button/Button";
+import Icon from "../Icon/Icon";
+import { WorkflowEnabledCopy } from "./WorkflowEnabledCopy";
+import useTranslateValue from "../../Utils/Translation";
+import IconProp from "../../../Types/Icon/IconProp";
+import React from "react";
+/*
+ * Above the Builder's canvas while the workflow is turned off. People used to
+ * find out that a workflow was off from an Error dialog, after trying to run
+ * it, and that dialog did not say how to turn it on. This says it up front,
+ * with the one thing to do about it.
+ *
+ * Amber rather than red: off is a normal state for a workflow that is still
+ * being built, not a failure, but nothing it is meant to do happens until it
+ * changes, so it should not be missed either.
+ */
+const WorkflowTurnedOffNotice = (props) => {
+    const { translateString } = useTranslateValue();
+    const translate = (text) => {
+        return translateString(text) || text;
+    };
+    return (React.createElement("div", { role: "status", "data-testid": "workflow-turned-off-notice", className: "flex flex-col gap-3 rounded-lg border border-amber-200 bg-amber-50 px-4 py-3 sm:flex-row sm:items-center sm:justify-between" },
+        React.createElement("div", { className: "flex min-w-0 items-start gap-3" },
+            React.createElement("div", { "aria-hidden": "true", className: "flex h-8 w-8 shrink-0 items-center justify-center rounded-lg bg-amber-100 text-amber-700" },
+                React.createElement(Icon, { icon: IconProp.Power, className: "h-5 w-5" })),
+            React.createElement("div", { className: "min-w-0 text-sm leading-6" },
+                React.createElement("p", { className: "font-semibold text-amber-900", "data-testid": "workflow-turned-off-notice-title" }, translate(WorkflowEnabledCopy.noticeTitle)),
+                React.createElement("p", { className: "text-amber-800" }, translate(WorkflowEnabledCopy.noticeBody)),
+                props.onTurnOn ? (React.createElement(React.Fragment, null)) : (React.createElement("p", { className: "text-amber-800", "data-testid": "workflow-turned-off-notice-who-can" }, translate(WorkflowEnabledCopy.onlyEditorsCanTurnOn))))),
+        props.onTurnOn ? (React.createElement("div", { className: "shrink-0" },
+            React.createElement(Button, { title: WorkflowEnabledCopy.turnOnWorkflow, icon: IconProp.Power, buttonStyle: ButtonStyleType.PRIMARY, buttonSize: ButtonSize.Small, isLoading: Boolean(props.isTurningOn), disabled: Boolean(props.isTurningOn), onClick: props.onTurnOn, dataTestId: "workflow-turn-on-button" }))) : (React.createElement(React.Fragment, null))));
+};
+export default WorkflowTurnedOffNotice;
+//# sourceMappingURL=WorkflowTurnedOffNotice.js.map

package/build/dist/UI/Components/Workflow/WorkflowTurnedOffNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkflowTurnedOffNotice.js","sourceRoot":"","sources":["../../../../../UI/Components/Workflow/WorkflowTurnedOffNotice.tsx"],"names":[],"mappings":"AAAA,OAAO,MAAM,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,IAAI,MAAM,cAAc,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,iBAAiB,MAAM,yBAAyB,CAAC;AACxD,OAAO,QAAQ,MAAM,8BAA8B,CAAC;AACpD,OAAO,KAA0C,MAAM,OAAO,CAAC;AAW/D;;;;;;;;;GASG;AACH,MAAM,uBAAuB,GAAsC,CACjE,KAAqB,EACP,EAAE;IAChB,MAAM,EAAE,eAAe,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAEhD,MAAM,SAAS,GAA6B,CAAC,IAAY,EAAU,EAAE;QACnE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC,CAAC;IAEF,OAAO,CACL,6BACE,IAAI,EAAC,QAAQ,iBACD,4BAA4B,EACxC,SAAS,EAAC,6HAA6H;QAEvI,6BAAK,SAAS,EAAC,gCAAgC;YAC7C,4CACc,MAAM,EAClB,SAAS,EAAC,0FAA0F;gBAEpG,oBAAC,IAAI,IAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAC,SAAS,GAAG,CAC9C;YACN,6BAAK,SAAS,EAAC,2BAA2B;gBACxC,2BACE,SAAS,EAAC,8BAA8B,iBAC5B,kCAAkC,IAE7C,SAAS,CAAC,mBAAmB,CAAC,WAAW,CAAC,CACzC;gBACJ,2BAAG,SAAS,EAAC,gBAAgB,IAC1B,SAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,CACxC;gBACH,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChB,yCAAK,CACN,CAAC,CAAC,CAAC,CACF,2BACE,SAAS,EAAC,gBAAgB,iBACd,oCAAoC,IAE/C,SAAS,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAClD,CACL,CACG,CACF;QACL,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChB,6BAAK,SAAS,EAAC,UAAU;YACvB,oBAAC,MAAM,IACL,KAAK,EAAE,mBAAmB,CAAC,cAAc,EACzC,IAAI,EAAE,QAAQ,CAAC,KAAK,EACpB,WAAW,EAAE,eAAe,CAAC,OAAO,EACpC,UAAU,EAAE,UAAU,CAAC,KAAK,EAC5B,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EACrC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,EACvB,UAAU,EAAC,yBAAyB,GACpC,CACE,CACP,CAAC,CAAC,CAAC,CACF,yCAAK,CACN,CACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/build/dist/UI/Components/Workflow/WorkflowWebhookSecretKey.js

@@ -0,0 +1,112 @@
+import ModelAPI from "../../Utils/ModelAPI/ModelAPI";
+import PermissionUtil from "../../Utils/Permission";
+import PermissionGate from "../../Utils/PermissionGate";
+import User from "../../Utils/User";
+import Workflow from "../../../Models/DatabaseModels/Workflow";
+import { PermissionHelper } from "../../../Types/Permission";
+import UUID from "../../../Utils/UUID";
+/*
+ * A workflow's webhook secret key: the last segment of its Webhook trigger's
+ * URL (Types/Workflow/WebhookTrigger.ts), and so a bearer credential - whoever
+ * has the URL can start the workflow.
+ *
+ * It is shown, copied and reset in the Webhook trigger's settings dialog
+ * (WebhookTriggerPanel), where someone wiring an outside system to the
+ * workflow goes looking for it. It used to be a card on the workflow's
+ * Settings page, away from the trigger it belongs to.
+ *
+ * Who may see it is who may reset it: the column's read list is its update
+ * list (Workflow.webhookSecretKey). Asking for a column you cannot read is
+ * fatal, not degraded - SelectPermission refuses the whole request - so the
+ * builder spreads getWebhookSecretKeySelect() into its select rather than
+ * naming the column.
+ */
+export const WEBHOOK_SECRET_KEY_COLUMN = "webhookSecretKey";
+const getColumnUpdatePermissions = () => {
+    const accessControl = new Workflow().getColumnAccessControlForAllColumns()[WEBHOOK_SECRET_KEY_COLUMN];
+    return (accessControl === null || accessControl === void 0 ? void 0 : accessControl.update) || [];
+};
+/*
+ * Whether the signed-in user may read the key. Fails closed while the
+ * permission snapshot has not landed, like PermissionGate.canReadColumn: the
+ * dialog then says the URL is hidden, which is recoverable, where asking for
+ * the column would fail the builder's whole load.
+ */
+export const canSeeWebhookSecretKey = (options) => {
+    return PermissionGate.canReadColumn(new Workflow(), WEBHOOK_SECRET_KEY_COLUMN, options);
+};
+// Spread into a Workflow select: the key when the user may read it, else nothing.
+export const getWebhookSecretKeySelect = (options) => {
+    if (!canSeeWebhookSecretKey(options)) {
+        return {};
+    }
+    return { webhookSecretKey: true };
+};
+/*
+ * Whether the signed-in user may reset the key, and when not, the sentence
+ * that says which permission is missing. Read the same way as
+ * PermissionGate.check, but against the column's own update list: that is
+ * what ColumnPermission checks when the reset is saved, and it is narrower
+ * than the table's (Delete Workflow can update a workflow, not its key).
+ *
+ * `isAllowed: false` with no reason means the permission snapshot has not
+ * landed: hide the action rather than accuse anyone of lacking a permission
+ * they hold.
+ */
+export const getWebhookSecretKeyResetGate = (options) => {
+    var _a;
+    if (User.isMasterAdmin()) {
+        return { isAllowed: true };
+    }
+    const columnPermissions = getColumnUpdatePermissions();
+    if (columnPermissions.length === 0) {
+        return { isAllowed: false };
+    }
+    const userPermissions = (_a = options === null || options === void 0 ? void 0 : options.permissions) !== null && _a !== void 0 ? _a : PermissionUtil.getAllPermissions();
+    if (userPermissions.length === 0) {
+        return { isAllowed: false };
+    }
+    if (PermissionHelper.doesPermissionsIntersect(userPermissions, columnPermissions)) {
+        return { isAllowed: true };
+    }
+    const titles = PermissionGate.getPermissionTitles(columnPermissions);
+    return {
+        isAllowed: false,
+        disabledReason: titles.length > 0
+            ? `You do not have permission to reset this webhook URL. You need one of these permissions: ${titles.join(", ")}.`
+            : "You do not have permission to reset this webhook URL.",
+    };
+};
+/*
+ * Gives the workflow a new key and resolves with it once it is saved. The old
+ * URL stops working at once: the trigger looks workflows up by the key in the
+ * URL, and nothing remembers the previous one.
+ *
+ * A random v4 UUID, as the server generates for a new workflow
+ * (WorkflowService.onCreateSuccess). Rejects with the API's error when the
+ * save is refused, and the key is then unchanged.
+ */
+export const resetWebhookSecretKey = async (workflowId) => {
+    const secretKey = UUID.generate();
+    await ModelAPI.updateById({
+        modelType: Workflow,
+        id: workflowId,
+        data: {
+            [WEBHOOK_SECRET_KEY_COLUMN]: secretKey,
+        },
+    });
+    return secretKey;
+};
+/*
+ * Workflows created before webhook secret keys existed were given their own ID
+ * as the key, so the URLs they already had kept working
+ * (1774559064920-MigrationName). That ID is no secret: it is in the address of
+ * every page of the workflow. The dialog says so, next to the reset that fixes
+ * it.
+ */
+export const isWebhookSecretKeyTheWorkflowId = (data) => {
+    const secretKey = data.secretKey.trim().toLowerCase();
+    return (secretKey.length > 0 &&
+        secretKey === data.workflowId.toString().trim().toLowerCase());
+};
+//# sourceMappingURL=WorkflowWebhookSecretKey.js.map

package/build/dist/UI/Components/Workflow/WorkflowWebhookSecretKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkflowWebhookSecretKey.js","sourceRoot":"","sources":["../../../../../UI/Components/Workflow/WorkflowWebhookSecretKey.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,+BAA+B,CAAC;AACrD,OAAO,cAAc,MAAM,wBAAwB,CAAC;AACpD,OAAO,cAGN,MAAM,4BAA4B,CAAC;AACpC,OAAO,IAAI,MAAM,kBAAkB,CAAC;AACpC,OAAO,QAAQ,MAAM,yCAAyC,CAAC;AAI/D,OAAmB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,IAAI,MAAM,qBAAqB,CAAC;AAEvC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAW,kBAAkB,CAAC;AAIpE,MAAM,0BAA0B,GAC9B,GAAsB,EAAE;IACtB,MAAM,aAAa,GACjB,IAAI,QAAQ,EAAE,CAAC,mCAAmC,EAAE,CAClD,yBAAyB,CAC1B,CAAC;IAEJ,OAAO,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,KAAI,EAAE,CAAC;AACrC,CAAC,CAAC;AAMJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CACpE,OAA2C,EAClC,EAAE;IACX,OAAO,cAAc,CAAC,aAAa,CACjC,IAAI,QAAQ,EAAE,EACd,yBAAyB,EACzB,OAAO,CACR,CAAC;AACJ,CAAC,CAAC;AAMF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAsC,CAC1E,OAA2C,EACzB,EAAE;IACpB,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC,CAAC;AAMF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,CAAC,OAA2C,EAAwB,EAAE;;IACpE,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,iBAAiB,GAAsB,0BAA0B,EAAE,CAAC;IAE1E,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,eAAe,GACnB,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,mCAAI,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAE7D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,IACE,gBAAgB,CAAC,wBAAwB,CACvC,eAAe,EACf,iBAAiB,CAClB,EACD,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GACV,cAAc,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,cAAc,EACZ,MAAM,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,CAAC,4FAA4F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAClH,CAAC,CAAC,uDAAuD;KAC9D,CAAC;AACJ,CAAC,CAAC;AAMJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkC,KAAK,EACvE,UAAoB,EACH,EAAE;IACnB,MAAM,SAAS,GAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;IAE1C,MAAM,QAAQ,CAAC,UAAU,CAAW;QAClC,SAAS,EAAE,QAAQ;QACnB,EAAE,EAAE,UAAU;QACd,IAAI,EAAE;YACJ,CAAC,yBAAyB,CAAC,EAAE,SAAS;SACvC;KACF,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAOF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,CAAC,IAA0D,EAAW,EAAE;IACtE,MAAM,SAAS,GAAW,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE9D,OAAO,CACL,SAAS,CAAC,MAAM,GAAG,CAAC;QACpB,SAAS,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAC9D,CAAC;AACJ,CAAC,CAAC"}

package/build/dist/UI/Utils/McpOAuthPendingAuthorization.js

@@ -0,0 +1,111 @@
+import { AccountsRoute, DashboardRoute } from "../../ServiceRoute";
+import Route from "../../Types/API/Route";
+import { MCP_OAUTH_TICKET_MAX_LENGTH, MCP_OAUTH_TICKET_PATTERN, } from "../../Types/Mcp/McpOAuthTicket";
+import UniversalCookies from "universal-cookie";
+/*
+ * Carries an MCP authorization request across a sign-in.
+ *
+ * Someone connecting an MCP client is sent to the consent screen
+ * (/accounts/mcp-authorize) with a signed description of the request in the
+ * URL. If they are not signed in, the screen has to send them to the sign-in
+ * page - and every way of signing in (password, two-factor, passkey, SSO
+ * through an identity provider and back) ends on the dashboard, not where the
+ * person came from: there is no return address in that flow, and several of
+ * its hops leave this site entirely.
+ *
+ * So the request waits in a cookie. The consent screen writes it before it
+ * finds out whether there is a session; the dashboard, once it has loaded for
+ * a signed-in user, looks for it and sends the browser back to the consent
+ * screen. One hook, and it covers every sign-in method there is or will be.
+ *
+ * WHY A COOKIE, AND WHY THIS ONE SURVIVES
+ *
+ * Being sent to the sign-in page wipes nearly everything a page can leave
+ * behind, twice over:
+ *
+ *   - in the browser, UserUtil.logout clears local storage, session storage
+ *     and every cookie named in the CookieName enum - which is why this name
+ *     is NOT in it;
+ *   - on the server, the failed session refresh and the logout call that
+ *     precede the redirect each clear EVERY cookie the request carried
+ *     (CookieUtil.removeAllCookies), whatever it is called.
+ *
+ * The second one is why the cookie is scoped to the dashboard's path. A cookie
+ * is only sent with requests under its path, so one for /dashboard never
+ * reaches the identity endpoints and cannot be cleared by them; and the
+ * dashboard - the only reader - is exactly where it is visible. A page may
+ * set (and remove) a cookie for a path it is not on, so the consent screen
+ * can still write it.
+ *
+ * WHAT IS IN IT
+ *
+ * The ticket and nothing else. It is not a credential: it only says what a
+ * client asked for, it is signed so it cannot be altered, and approving it
+ * still takes the person's own session. It is short-lived to match the ticket
+ * (ten minutes), and it is used once - reading it removes it.
+ */
+const COOKIE_NAME = "oneuptime-mcp-oauth-pending-request";
+// Sent only with requests for the dashboard, which is where it is read.
+const COOKIE_PATH = DashboardRoute.toString();
+// The ticket's own lifetime (McpOAuthConfig.AUTHORIZATION_REQUEST_TTL_SECONDS).
+const MAX_AGE_IN_SECONDS = 10 * 60;
+export const MCP_AUTHORIZE_ROUTE = `${AccountsRoute.toString()}/mcp-authorize`;
+export default class McpOAuthPendingAuthorization {
+    /*
+     * Shaped like a ticket, and no longer than the server ever issues one (the
+     * limit is shared with it - see McpOAuthTicket). Whether it is GENUINE only
+     * the server can say; this keeps anything else out of a URL or a cookie.
+     */
+    static isTicket(value) {
+        return (typeof value === "string" &&
+            value.length <= MCP_OAUTH_TICKET_MAX_LENGTH &&
+            MCP_OAUTH_TICKET_PATTERN.test(value));
+    }
+    /*
+     * Remember a request across a sign-in. False when it cannot be - not a
+     * ticket, or too large for a cookie.
+     */
+    static remember(ticket) {
+        if (!McpOAuthPendingAuthorization.isTicket(ticket)) {
+            return false;
+        }
+        new UniversalCookies().set(COOKIE_NAME, ticket, {
+            path: COOKIE_PATH,
+            maxAge: MAX_AGE_IN_SECONDS,
+            sameSite: "lax",
+            secure: window.location.protocol === "https:",
+        });
+        return true;
+    }
+    static clear() {
+        new UniversalCookies().remove(COOKIE_NAME, { path: COOKIE_PATH });
+    }
+    /*
+     * The consent screen route for the remembered request, or null. Reading it
+     * forgets it: a request is resumed once. Whatever is in the cookie is
+     * checked to be shaped like a ticket before it goes anywhere near a URL.
+     *
+     * Only a page under the dashboard's path can see the cookie, so this
+     * answers null anywhere else.
+     */
+    static consumeRoute() {
+        const cookies = new UniversalCookies();
+        /*
+         * doNotParse: a ticket is never JSON, and the library would otherwise try
+         * to parse anything that looks like it.
+         */
+        const ticket = cookies.get(COOKIE_NAME, { doNotParse: true });
+        if (ticket === undefined || ticket === null || ticket === "") {
+            return null;
+        }
+        McpOAuthPendingAuthorization.clear();
+        if (!McpOAuthPendingAuthorization.isTicket(ticket)) {
+            return null;
+        }
+        return McpOAuthPendingAuthorization.getConsentRoute(ticket);
+    }
+    static getConsentRoute(ticket) {
+        return new Route(`${MCP_AUTHORIZE_ROUTE}?request=${ticket}`);
+    }
+}
+//# sourceMappingURL=McpOAuthPendingAuthorization.js.map

package/build/dist/UI/Utils/McpOAuthPendingAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpOAuthPendingAuthorization.js","sourceRoot":"","sources":["../../../../UI/Utils/McpOAuthPendingAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,MAAM,uBAAuB,CAAC;AAC1C,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,gBAAgB,MAAM,kBAAkB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,MAAM,WAAW,GAAW,qCAAqC,CAAC;AAElE,wEAAwE;AACxE,MAAM,WAAW,GAAW,cAAc,CAAC,QAAQ,EAAE,CAAC;AAEtD,gFAAgF;AAChF,MAAM,kBAAkB,GAAW,EAAE,GAAG,EAAE,CAAC;AAE3C,MAAM,CAAC,MAAM,mBAAmB,GAAW,GAAG,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AAEvF,MAAM,CAAC,OAAO,OAAO,4BAA4B;IAC/C;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,KAAc;QACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,IAAI,2BAA2B;YAC3C,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CACrC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,QAAQ,CAAC,MAAe;QACpC,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,gBAAgB,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE;YAC9C,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;SAC9C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK;QACjB,IAAI,gBAAgB,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,YAAY;QACxB,MAAM,OAAO,GAAqB,IAAI,gBAAgB,EAAE,CAAC;QAEzD;;;WAGG;QACH,MAAM,MAAM,GAAY,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B,CAAC,KAAK,EAAE,CAAC;QAErC,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,4BAA4B,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAEM,MAAM,CAAC,eAAe,CAAC,MAAc;QAC1C,OAAO,IAAI,KAAK,CAAC,GAAG,mBAAmB,YAAY,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/build/dist/UI/Utils/ModelDisplayName.js

@@ -0,0 +1,197 @@
+/*
+ * What one record is called when a sentence has to name it.
+ *
+ * A delete confirmation used to ask "Are you sure you want to delete this
+ * workflow?" - a sentence equally true of every workflow in the project, and
+ * no help at the one moment the user wants to be sure which one is about to
+ * go. This module is where the product decides what a record's name is, so
+ * the Delete page, the table's row and bulk deletes and the custom dialogs all
+ * say the same thing about the same record.
+ */
+/*
+ * The columns a record is worth naming itself by, in the order a person would
+ * pick one:
+ *
+ *   - templateName: a template's own name. Incident and scheduled maintenance
+ *     templates also carry a `title`, but that is the title of the incident or
+ *     event the template creates, not the template's name.
+ *   - name, title: almost everything. Incidents, alerts, episodes, scheduled
+ *     maintenance and announcements key on `title`, and those are exactly the
+ *     lists where deleting the row next to the one you meant hurts most.
+ *   - displayName: inventory items and status page resources.
+ *   - fullDomain, domain: custom domains, which have no name but the domain.
+ *   - email, subscriberEmail, subscriberPhone, phoneNumber, username: people
+ *     and subscriptions, which are known by how they are reached.
+ */
+export const DISPLAY_NAME_COLUMNS = [
+    "templateName",
+    "name",
+    "title",
+    "displayName",
+    "fullDomain",
+    "domain",
+    "email",
+    "subscriberEmail",
+    "subscriberPhone",
+    "phoneNumber",
+    "username",
+];
+/*
+ * Read from a record when none of the above is on it, but never chosen as the
+ * column to fetch: a slug is derived from the record's name, so a model with
+ * a slug always has the better column it was made from.
+ */
+const LAST_RESORT_COLUMNS = ["slug"];
+/*
+ * Names are shown in full up to this many characters. An exception message or
+ * an incident title pasted from a stack trace can run to thousands, and the
+ * dialog only has to say which one - the start of it does that.
+ */
+export const MAX_DISPLAY_NAME_LENGTH = 120;
+/*
+ * The column that names a record of this model, or null when it has none.
+ *
+ * A model may declare it (@TableMetadata's displayNameColumn) where the
+ * inference below would pick the wrong column or none. Otherwise a model that
+ * builds its slug from a column has told us its name column already (Incident
+ * slugs its title, a template its templateName). Failing both, the first
+ * column of DISPLAY_NAME_COLUMNS the model has.
+ */
+export const getDisplayNameColumn = (model) => {
+    var _a, _b;
+    if (!model) {
+        return null;
+    }
+    const declaredColumn = (_a = model.getDisplayNameColumn) === null || _a === void 0 ? void 0 : _a.call(model);
+    if (declaredColumn && model.hasColumn(declaredColumn)) {
+        return declaredColumn;
+    }
+    const slugSourceColumn = (_b = model.getSlugifyColumn) === null || _b === void 0 ? void 0 : _b.call(model);
+    if (slugSourceColumn && model.hasColumn(slugSourceColumn)) {
+        return slugSourceColumn;
+    }
+    for (const column of DISPLAY_NAME_COLUMNS) {
+        if (model.hasColumn(column)) {
+            return column;
+        }
+    }
+    return null;
+};
+/*
+ * A value as one line of text, or "" when it is not something to call a
+ * record by.
+ *
+ * Name, Email, Phone and Domain values arrive as objects whose toString is the
+ * text; over the wire, before they are turned back into objects, they are
+ * `{ _type, value }`. Dates, booleans, arrays and plain objects are never a
+ * name - "[object Object]" in a confirmation is worse than no name at all.
+ * Line breaks and runs of spaces are collapsed: the name sits inside a
+ * sentence.
+ */
+export const readDisplayText = (value) => {
+    const collapse = (text) => {
+        return text.replace(/\s+/g, " ").trim();
+    };
+    if (value === null || value === undefined) {
+        return "";
+    }
+    if (typeof value === "string") {
+        return collapse(value);
+    }
+    if (typeof value === "number" || typeof value === "bigint") {
+        return String(value);
+    }
+    if (typeof value !== "object") {
+        return "";
+    }
+    if (value instanceof Date || Array.isArray(value)) {
+        return "";
+    }
+    const record = value;
+    if (typeof record["_type"] === "string" && "value" in record) {
+        return readDisplayText(record["value"]);
+    }
+    if (typeof value.toString !== "function" ||
+        value.toString === Object.prototype.toString) {
+        return "";
+    }
+    const text = String(value);
+    return text.startsWith("[object ") ? "" : collapse(text);
+};
+/*
+ * Cuts a long name down to maxLength characters, ending in an ellipsis.
+ * Counted in code points, so an emoji is never split in half.
+ */
+export const shortenDisplayName = (name, maxLength = MAX_DISPLAY_NAME_LENGTH) => {
+    const characters = Array.from(name);
+    if (characters.length <= maxLength) {
+        return name;
+    }
+    return `${characters
+        .slice(0, Math.max(1, maxLength - 1))
+        .join("")
+        .trimEnd()}…`;
+};
+/*
+ * The name of one record, or "" when nothing on it names it.
+ *
+ * Reads only what is on the record: a table row carries the columns the table
+ * selected and nothing else, so this never guesses at a name it was not given.
+ * Relations are not followed. A team member row carries its user's name, but
+ * "delete Jane Doe" would be a lie about a row that only takes Jane off a
+ * team.
+ */
+export const getRecordDisplayName = (record, options) => {
+    if (!record || typeof record !== "object") {
+        return "";
+    }
+    const fields = record;
+    const columns = [];
+    const addColumn = (column) => {
+        if (column && !columns.includes(column)) {
+            columns.push(column);
+        }
+    };
+    addColumn(options === null || options === void 0 ? void 0 : options.column);
+    addColumn(getDisplayNameColumn(options === null || options === void 0 ? void 0 : options.model));
+    DISPLAY_NAME_COLUMNS.forEach(addColumn);
+    LAST_RESORT_COLUMNS.forEach(addColumn);
+    for (const column of columns) {
+        const text = readDisplayText(fields[column]);
+        if (text) {
+            return (options === null || options === void 0 ? void 0 : options.maxLength) === 0
+                ? text
+                : shortenDisplayName(text, options === null || options === void 0 ? void 0 : options.maxLength);
+        }
+    }
+    return "";
+};
+/*
+ * Which names a confirmation about many records lists, and how many it then
+ * counts as "and N more".
+ *
+ * At most maxShown names - except that a list of exactly one more than that is
+ * shown whole, because "and 1 more" takes the same line the name would have.
+ * Records without a name are never listed, only counted. Two records with the
+ * same name are both listed: the user selected two things.
+ */
+export const summarizeNames = (data) => {
+    var _a;
+    const maxShown = Math.max(1, (_a = data.maxShown) !== null && _a !== void 0 ? _a : 5);
+    const names = data.names
+        .map((name) => {
+        return readDisplayText(name);
+    })
+        .filter((name) => {
+        return name.length > 0;
+    });
+    const totalCount = Math.max(data.totalCount, names.length);
+    const shownNames = names.length === totalCount && totalCount <= maxShown + 1
+        ? names
+        : names.slice(0, maxShown);
+    return {
+        shownNames: shownNames,
+        remainingCount: totalCount - shownNames.length,
+    };
+};
+//# sourceMappingURL=ModelDisplayName.js.map

package/build/dist/UI/Utils/ModelDisplayName.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelDisplayName.js","sourceRoot":"","sources":["../../../../UI/Utils/ModelDisplayName.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA0B;IACzD,cAAc;IACd,MAAM;IACN,OAAO;IACP,aAAa;IACb,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,iBAAiB;IACjB,iBAAiB;IACjB,aAAa;IACb,UAAU;CACX,CAAC;AAEF;;;;GAIG;AACH,MAAM,mBAAmB,GAA0B,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAW,GAAG,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAEZ,CACnB,KAA0C,EAC3B,EAAE;;IACjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAClB,MAAA,KAAK,CAAC,oBAAoB,qDAAI,CAAC;IAEjC,IAAI,cAAc,IAAI,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,gBAAgB,GACpB,MAAA,KAAK,CAAC,gBAAgB,qDAAI,CAAC;IAE7B,IAAI,gBAAgB,IAAI,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1D,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAA+B,CACzD,KAAc,EACN,EAAE;IACV,MAAM,QAAQ,GAA6B,CAAC,IAAY,EAAU,EAAE;QAClE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC,CAAC;IAEF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAA4B,KAAgC,CAAC;IAEzE,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7D,OAAO,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,IACE,OAAQ,KAAgC,CAAC,QAAQ,KAAK,UAAU;QAC/D,KAA+B,CAAC,QAAQ,KAAK,MAAM,CAAC,SAAS,CAAC,QAAQ,EACvE,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnC,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAGjB,CACZ,IAAY,EACZ,YAAoB,uBAAuB,EACnC,EAAE;IACV,MAAM,UAAU,GAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnD,IAAI,UAAU,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,UAAU;SACjB,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;SACpC,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,EAAE,GAAG,CAAC;AAClB,CAAC,CAAC;AAWF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAGnB,CACZ,MAAe,EACf,OAAqC,EAC7B,EAAE;IACV,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAA4B,MAAiC,CAAC;IAE1E,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,MAAM,SAAS,GAAgD,CAC7D,MAAiC,EAC3B,EAAE;QACR,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,SAAS,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,CAAC;IAC3B,SAAS,CAAC,oBAAoB,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC,CAAC,CAAC;IAChD,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAW,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAErD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,MAAK,CAAC;gBAC7B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAYF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAIH,CAAC,IAIxB,EAAmB,EAAE;;IACpB,MAAM,QAAQ,GAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAkB,IAAI,CAAC,KAAK;SACpC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;QACpB,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;QACvB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,MAAM,UAAU,GAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEnE,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,IAAI,QAAQ,GAAG,CAAC;QACvD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE/B,OAAO;QACL,UAAU,EAAE,UAAU;QACtB,cAAc,EAAE,UAAU,GAAG,UAAU,CAAC,MAAM;KAC/C,CAAC;AACJ,CAAC,CAAC"}

package/build/dist/UI/Utils/TranslateTemplate.js

@@ -0,0 +1,63 @@
+import i18next from "i18next";
+const PLACEHOLDER = /\{\{\s*([\w.]+)\s*\}\}/g;
+/*
+ * Fills {{key}} placeholders from values. A placeholder with no value is left
+ * as it is, which a test notices and a reader at least recognises as a slot.
+ */
+export const fillTemplate = (template, values = {}) => {
+    return template.replace(PLACEHOLDER, (match, key) => {
+        return Object.prototype.hasOwnProperty.call(values, key)
+            ? String(values[key])
+            : match;
+    });
+};
+/*
+ * The sentence in the reader's language, with its values filled in.
+ */
+export const translateTemplate = (template, values = {}) => {
+    const english = fillTemplate(template, values);
+    try {
+        if (!i18next.isInitialized) {
+            return english;
+        }
+        const translated = i18next.t(template, Object.assign({ defaultValue: template, keySeparator: false, nsSeparator: false, interpolation: { escapeValue: false } }, values));
+        return typeof translated === "string" && translated.length > 0
+            ? translated
+            : english;
+    }
+    catch (_a) {
+        return english;
+    }
+};
+/*
+ * A marker no name contains, put where the slot goes so the translated
+ * sentence can be cut around it.
+ */
+const SLOT_MARKER = "\u0000";
+/*
+ * The translated sentence cut in two around one {{slot}}, for a caller that
+ * draws the slot's value itself - in bold, say - between the two halves.
+ *
+ * The value never goes through the translation: whatever a name contains
+ * (braces, "$t(", markup), it is drawn as text by the caller.
+ */
+export const translateTemplateAround = (template, slot, values = {}) => {
+    const withMarker = Object.assign(Object.assign({}, values), { [slot]: SLOT_MARKER });
+    const split = (sentence) => {
+        const parts = sentence.split(SLOT_MARKER);
+        if (parts.length !== 2) {
+            return null;
+        }
+        return { before: parts[0], after: parts[1] };
+    };
+    /*
+     * A translation that lost its slot, or repeated it, cannot be drawn with the
+     * name in it - fall back to English rather than drop the name.
+     */
+    return (split(translateTemplate(template, withMarker)) ||
+        split(fillTemplate(template, withMarker)) || {
+        before: fillTemplate(template, values),
+        after: "",
+    });
+};
+//# sourceMappingURL=TranslateTemplate.js.map

package/build/dist/UI/Utils/TranslateTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TranslateTemplate.js","sourceRoot":"","sources":["../../../../UI/Utils/TranslateTemplate.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAuB9B,MAAM,WAAW,GAAW,yBAAyB,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAGX,CAAC,QAAgB,EAAE,SAAyB,EAAE,EAAU,EAAE;IACtE,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE;QAClE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC;YACtD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAGhB,CAAC,QAAgB,EAAE,SAAyB,EAAE,EAAU,EAAE;IACtE,MAAM,OAAO,GAAW,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEvD,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAY,OAAO,CAAC,CAAC,CAAC,QAAQ,kBAC5C,YAAY,EAAE,QAAQ,EACtB,YAAY,EAAE,KAAK,EACnB,WAAW,EAAE,KAAK,EAClB,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,IAClC,MAAM,EACT,CAAC;QAEH,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAC5D,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC;AAOF;;;GAGG;AACH,MAAM,WAAW,GAAW,QAAQ,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAId,CACpB,QAAgB,EAChB,IAAY,EACZ,SAAyB,EAAE,EACX,EAAE;IAClB,MAAM,UAAU,mCAAwB,MAAM,KAAE,CAAC,IAAI,CAAC,EAAE,WAAW,GAAE,CAAC;IAEtE,MAAM,KAAK,GAAgD,CACzD,QAAgB,EACO,EAAE;QACzB,MAAM,KAAK,GAAkB,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IACjD,CAAC,CAAC;IAEF;;;OAGG;IACH,OAAO,CACL,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9C,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI;QAC3C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;QACtC,KAAK,EAAE,EAAE;KACV,CACF,CAAC;AACJ,CAAC,CAAC"}