@workos-inc/widgets 1.17.3 → 1.18.0-next.1788970242803

package/dist/cjs/lib/pipes-admin.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/pipes-admin.tsx"],"sourcesContent":["\"use client\";\nimport { Callout, Card, Flex, Switch, Text, Tooltip } from \"@radix-ui/themes\";\nimport { useState } from \"react\";\nimport { InfoCircledIcon } from \"@radix-ui/react-icons\";\nimport * as CardList from \"./card-list.js\";\nimport { CopyText } from \"./copy-text.js\";\nimport { DataIntegrationIcon } from \"./data-integration-icon.js\";\nimport { ProviderIcon } from \"./provider-icon.js\";\nimport {\n  Button,\n  Dialog,\n  Label,\n  PasswordField,\n  Skeleton,\n  TextField,\n} from \"./elements.js\";\nimport { IconPanel } from \"./icon-panel.js\";\nimport { SearchableSelectList } from \"./searchable-select-list.js\";\nimport { Status } from \"./status.js\";\nimport {\n  DataIntegrationConfiguration,\n  getListDataIntegrationConfigurationsQueryKey,\n  getMyDataIntegrationsQueryKey,\n  useListDataIntegrationConfigurations,\n  useUpsertDataIntegrationConfiguration,\n} from \"../api/endpoint.js\";\nimport { useQueryClient } from \"@tanstack/react-query\";\nimport { GenericError } from \"./generic-error.js\";\nimport { usePermissions } from \"./use-permissions.js\";\nimport { getDomProps, WidgetRootDomProps, WidgetRootState } from \"./utils.js\";\nimport { Translation } from \"./i18n/translation.js\";\nimport { useTranslation } from \"./i18n/use-translation.js\";\nimport { buildRedactedSecret, isRedactedSecret } from \"./redacted-secret.js\";\n\nfunction RedirectUriField({ value }: { value: string }) {\n  const translate = useTranslation();\n\n  const copyLabel = translate({\n    defaultMessage: \"Copy redirect URI\",\n    id: \"xqfxBC\",\n    description: \"Accessible label for the copy redirect URI button\",\n  });\n\n  return (\n    <Flex direction=\"column\" gap=\"1\">\n      <Label>\n        <Translation\n          defaultMessage=\"Redirect URI\"\n          id=\"lgEaUA\"\n          description=\"Label for the read-only OAuth redirect URI field\"\n        />\n      </Label>\n      <CopyText value={value} label={copyLabel} />\n    </Flex>\n  );\n}\n\nfunction OrgCredentialsDialog({\n  integration,\n  open,\n  onOpenChange,\n}: {\n  integration: DataIntegrationConfiguration;\n  open: boolean;\n  onOpenChange: (open: boolean) => void;\n}) {\n  const queryClient = useQueryClient();\n  const credentials = integration.credentials;\n  const hasCredentials = credentials.hasCredentials;\n  const isOrgCredentials = credentials.credentialsType === \"organization\";\n\n  // Seeded once on mount; the dialog is only mounted while open (see\n  // OrgCredentialsButton), so each open starts from the current configuration.\n  // `enabled`/`scopes` on the configuration are the effective values\n  // (the org override when present, else the developer default).\n  const redactedSecret = buildRedactedSecret(credentials.redactedClientSecret);\n  const [clientId, setClientId] = useState(credentials.client_id ?? \"\");\n  const [clientSecret, setClientSecret] = useState(redactedSecret);\n  const [enabled, setEnabled] = useState(integration.enabled);\n  const [scopes, setScopes] = useState<string[]>(integration.scopes ?? []);\n  // Organization credentials are entered first, then scopes (two-step wizard);\n  // shared/custom providers only narrow scopes, so they get a single view.\n  const [step, setStep] = useState<\"credentials\" | \"scopes\">(\"credentials\");\n  const [clientIdError, setClientIdError] = useState<string | null>(null);\n  const [clientSecretError, setClientSecretError] = useState<string | null>(\n    null,\n  );\n\n  // Provider-declared `integration`-scope config fields are configured here, but\n  // only for `organization` credentials: the API rejects per-org config for\n  // shared/custom creds (those are set on the root integration instead). The\n  // `installation`-scope pins are deferred from this UI for now (they're\n  // collected in the connect modal instead). `secret` fields are excluded: they\n  // are rejected server-side, and seeding a masked secret can't be round-tripped\n  // safely under the config-replace write.\n  const configFields = isOrgCredentials\n    ? (integration.configFields ?? [])\n        .filter((field) => field.scope === \"integration\" && !field.secret)\n        .sort((a, b) => (a.order ?? 0) - (b.order ?? 0))\n    : [];\n  const [configValues, setConfigValues] = useState<Record<string, string>>(\n    () => {\n      const seed: Record<string, string> = {};\n      for (const field of integration.configFields ?? []) {\n        if (field.scope !== \"integration\") continue;\n        // Never seed a `secret` field from the response: the value may be\n        // redacted, and re-submitting the mask would clobber the stored secret.\n        if (field.secret) continue;\n        const value = integration.config?.[field.key];\n        if (typeof value === \"string\") {\n          seed[field.key] = value;\n        }\n      }\n      return seed;\n    },\n  );\n  const [configErrors, setConfigErrors] = useState<\n    Record<string, string | null>\n  >({});\n\n  const {\n    mutate: upsertOverride,\n    error,\n    isPending,\n  } = useUpsertDataIntegrationConfiguration({\n    mutation: {\n      onSuccess: () => {\n        queryClient.invalidateQueries({\n          queryKey: getListDataIntegrationConfigurationsQueryKey(),\n        });\n        // Saving a configuration can change which providers/scopes are available\n        // in the user connection list, so refresh that list too.\n        queryClient.invalidateQueries({\n          queryKey: getMyDataIntegrationsQueryKey(),\n        });\n        onOpenChange(false);\n      },\n    },\n  });\n\n  const translate = useTranslation();\n\n  // Selectable scope pool: organization credentials can request the provider's\n  // full catalog; shared/custom can only (re)select within the developer's\n  // configured defaults. The current effective selection is always included so\n  // it stays toggleable, and the defaults are included so a previously removed\n  // default can be re-added.\n  const defaultScopes = integration.defaultScopes;\n  const effectiveScopes = integration.scopes ?? [];\n  const scopePool = isOrgCredentials\n    ? [\n        ...new Set([\n          ...effectiveScopes,\n          ...defaultScopes,\n          ...integration.availableScopes,\n        ]),\n      ]\n    : [...new Set([...effectiveScopes, ...defaultScopes])];\n  // Developer-configured scopes the admin has unselected — named in the warning.\n  const removedDefaultScopes = defaultScopes.filter(\n    (scope) => !scopes.includes(scope),\n  );\n\n  const enabledLabel = translate({\n    defaultMessage: \"Enable\",\n    id: \"hkhtrS\",\n    description: \"Label for the enable toggle\",\n  });\n  const enableTooltip = translate({\n    defaultMessage:\n      \"Allow this integration to be connected in your organization.\",\n    id: \"7ItyG3\",\n    description: \"Tooltip explaining the enable toggle\",\n  });\n\n  const clientIdPlaceholder = translate({\n    defaultMessage: \"Enter your {providerName} Client ID\",\n    id: \"pAUj4e\",\n    description: \"Placeholder for the OAuth client ID input\",\n    values: { providerName: integration.name },\n  });\n  const clientSecretPlaceholder = translate({\n    defaultMessage: \"Enter your {providerName} Client Secret\",\n    id: \"WoFO8+\",\n    description: \"Placeholder for the OAuth client secret input\",\n    values: { providerName: integration.name },\n  });\n  const scopeSearchPlaceholder = translate({\n    defaultMessage: \"Search scopes\",\n    id: \"fjuuw1\",\n    description: \"Placeholder for the scope override search input\",\n  });\n  const scopeEmptyLabel = translate({\n    defaultMessage: \"No scopes found\",\n    id: \"OSyQvz\",\n    description: \"Empty state for the scope override search\",\n  });\n  const configRequiredMessage = translate({\n    defaultMessage: \"This field is required\",\n    id: \"B2HvfC\",\n    description:\n      \"Validation error shown when a required configuration field is left empty\",\n  });\n  const configPatternMessage = translate({\n    defaultMessage: \"Enter a valid value.\",\n    id: \"2XWaGz\",\n    description:\n      \"Validation error shown when a configuration field value does not match the expected format\",\n  });\n  const secretRequiredMessage = translate({\n    defaultMessage: \"Enter a new Client Secret to change the Client ID.\",\n    id: \"O+5rxK\",\n    description:\n      \"Validation error when changing client id without a new secret\",\n  });\n\n  // Validate the integration-scope config fields against their descriptors.\n  const validateConfigFields = (): boolean => {\n    const nextErrors: Record<string, string | null> = {};\n    let valid = true;\n    for (const field of configFields) {\n      const value = (configValues[field.key] ?? \"\").trim();\n      if (field.required && !value) {\n        nextErrors[field.key] = configRequiredMessage;\n        valid = false;\n        continue;\n      }\n      if (value && field.pattern) {\n        let matches = true;\n        try {\n          matches = new RegExp(field.pattern).test(value);\n        } catch {\n          // Ignore invalid descriptor patterns client-side; the API validates.\n          matches = true;\n        }\n        if (!matches) {\n          nextErrors[field.key] = configPatternMessage;\n          valid = false;\n          continue;\n        }\n      }\n      nextErrors[field.key] = null;\n    }\n    setConfigErrors(nextErrors);\n    return valid;\n  };\n\n  // Secret descriptor keys are never round-tripped: if the API ever returned a\n  // secret as a redacted mask, copying it into the replacement payload would\n  // overwrite the stored value. (Secret config fields are rejected server-side\n  // today, so this is defensive.)\n  const secretConfigKeys = new Set(\n    (integration.configFields ?? [])\n      .filter((field) => field.secret)\n      .map((field) => field.key),\n  );\n\n  const buildConfigPayload = () => {\n    // Preserve existing config keys this UI doesn't render (e.g. installation\n    // pins, deferred for now) so saving org settings never drops them.\n    const config: Record<string, string> = {};\n    for (const [key, value] of Object.entries(integration.config ?? {})) {\n      if (typeof value === \"string\" && !secretConfigKeys.has(key)) {\n        config[key] = value;\n      }\n    }\n    // Overlay the edited integration-scope fields; an emptied field clears it.\n    for (const field of configFields) {\n      const value = (configValues[field.key] ?? \"\").trim();\n      if (value) {\n        config[field.key] = value;\n      } else {\n        delete config[field.key];\n      }\n    }\n    return config;\n  };\n\n  // Validate organization credentials before advancing to the scopes step. The\n  // secret field is pre-filled with a redacted placeholder for an existing\n  // secret; if untouched, keep the stored secret. Since client_id and\n  // client_secret travel together, changing the id requires a new secret.\n  const validateCredentials = (): boolean => {\n    setClientIdError(null);\n    setClientSecretError(null);\n    const trimmedId = clientId.trim();\n    const secretUnchanged = hasCredentials && isRedactedSecret(clientSecret);\n    let valid = true;\n    if (!trimmedId) {\n      setClientIdError(configRequiredMessage);\n      valid = false;\n    }\n    if (secretUnchanged) {\n      // Existing secret kept: only re-entry is required when the id changes.\n      if (trimmedId && trimmedId !== (credentials.client_id ?? \"\")) {\n        setClientSecretError(secretRequiredMessage);\n        valid = false;\n      }\n    } else if (!clientSecret.trim()) {\n      setClientSecretError(configRequiredMessage);\n      valid = false;\n    }\n    return valid;\n  };\n\n  // API-key integrations have no OAuth credentials or scopes to configure;\n  // the only override is the enabled toggle.\n  const isApiKeyOnly = !(integration.authMethods ?? [\"oauth\"]).includes(\n    \"oauth\",\n  );\n\n  const handleSubmit = () => {\n    // Org-cred config fields were validated on the way to the scopes step; the\n    // other surfaces submit directly from this view, so validate here.\n    if (!isOrgCredentials && !validateConfigFields()) {\n      return;\n    }\n    const configPayload =\n      configFields.length > 0 ? { config: buildConfigPayload() } : undefined;\n\n    if (isApiKeyOnly) {\n      upsertOverride({\n        slug: integration.slug,\n        data: { enabled, ...configPayload },\n      });\n      return;\n    }\n    if (!isOrgCredentials) {\n      // shared/custom: enable + (possibly narrowed) scopes only.\n      upsertOverride({\n        slug: integration.slug,\n        data: { enabled, scopes, ...configPayload },\n      });\n      return;\n    }\n    // Credentials were validated on the way to the scopes step.\n    const secretUnchanged = hasCredentials && isRedactedSecret(clientSecret);\n    if (secretUnchanged) {\n      upsertOverride({\n        slug: integration.slug,\n        data: { enabled, scopes, ...configPayload },\n      });\n      return;\n    }\n    upsertOverride({\n      slug: integration.slug,\n      data: {\n        enabled,\n        client_id: clientId.trim(),\n        client_secret: clientSecret.trim(),\n        scopes,\n        ...configPayload,\n      },\n    });\n  };\n\n  const showCredentialsStep =\n    !isApiKeyOnly && isOrgCredentials && step === \"credentials\";\n  const showScopesStep =\n    !isApiKeyOnly && (!isOrgCredentials || step === \"scopes\");\n\n  // Disable Save when nothing differs from the seeded override state. Same\n  // length + one-way subset means equal scope sets. Credential fields only\n  // exist for organization credentials; a \"changed\" secret is a freshly typed\n  // value (not the redacted placeholder), so focusing the field doesn't count.\n  const initialScopes = integration.scopes ?? [];\n  const scopesChanged =\n    scopes.length !== initialScopes.length ||\n    scopes.some((scope) => !initialScopes.includes(scope));\n  const enabledChanged = enabled !== integration.enabled;\n  const credentialsChanged =\n    isOrgCredentials &&\n    (clientId.trim() !== (credentials.client_id ?? \"\") ||\n      (clientSecret.trim() !== \"\" && !isRedactedSecret(clientSecret)));\n  const configChanged = configFields.some((field) => {\n    const current = (configValues[field.key] ?? \"\").trim();\n    // Trim both sides so an existing value with incidental surrounding\n    // whitespace doesn't read as a pending change on open.\n    const original =\n      typeof integration.config?.[field.key] === \"string\"\n        ? (integration.config[field.key] as string).trim()\n        : \"\";\n    return current !== original;\n  });\n  const hasPendingChanges =\n    enabledChanged || scopesChanged || credentialsChanged || configChanged;\n\n  // Gate the primary button on required fields being populated (matches the\n  // ApiKeyDialog / change-email patterns). A redacted secret placeholder counts\n  // as populated, so editing an existing config isn't blocked.\n  const requiredConfigMissing = configFields.some(\n    (field) => field.required && !(configValues[field.key] ?? \"\").trim(),\n  );\n  const credentialsMissing =\n    isOrgCredentials && (!clientId.trim() || !clientSecret.trim());\n  const nextDisabled = credentialsMissing || requiredConfigMissing;\n\n  const enableToggle = (\n    <Flex align=\"center\" gap=\"2\">\n      <Switch\n        checked={enabled}\n        onCheckedChange={setEnabled}\n        aria-label={enabledLabel}\n      />\n      <Text size=\"2\" weight=\"bold\">\n        <Translation\n          defaultMessage=\"Enable\"\n          id=\"hkhtrS\"\n          description=\"Label for the enable toggle\"\n        />\n      </Text>\n      <Tooltip content={enableTooltip}>\n        <InfoCircledIcon aria-hidden style={{ color: \"var(--gray-9)\" }} />\n      </Tooltip>\n    </Flex>\n  );\n\n  const configFieldsSection =\n    configFields.length > 0\n      ? configFields.map((field) => {\n          const fieldId = `pipes-admin-config-${field.key}`;\n          const errorId = `${fieldId}-error`;\n          const descriptionId = `${fieldId}-description`;\n          const error = configErrors[field.key];\n          const Control = field.secret ? PasswordField : TextField;\n          const describedBy =\n            [field.description ? descriptionId : null, error ? errorId : null]\n              .filter(Boolean)\n              .join(\" \") || undefined;\n          return (\n            <Flex key={field.key} direction=\"column\" gap=\"1\">\n              <Label htmlFor={fieldId}>{field.label}</Label>\n              {field.description ? (\n                <Text color=\"gray\" size=\"2\" id={descriptionId} mb=\"1\">\n                  {field.description}\n                </Text>\n              ) : null}\n              <Control\n                id={fieldId}\n                value={configValues[field.key] ?? \"\"}\n                placeholder={field.example}\n                autoComplete=\"off\"\n                required={field.required || undefined}\n                aria-invalid={!!error || undefined}\n                aria-describedby={describedBy}\n                onChange={(event) => {\n                  setConfigValues((prev) => ({\n                    ...prev,\n                    [field.key]: event.target.value,\n                  }));\n                  if (error) {\n                    setConfigErrors((prev) => ({\n                      ...prev,\n                      [field.key]: null,\n                    }));\n                  }\n                }}\n              />\n              {error ? (\n                <Text color=\"red\" size=\"2\" id={errorId}>\n                  {error}\n                </Text>\n              ) : null}\n            </Flex>\n          );\n        })\n      : null;\n\n  return (\n    <Dialog.Root open={open} onOpenChange={onOpenChange}>\n      <Dialog.Content>\n        <Dialog.Title size=\"3\" weight=\"bold\">\n          <Translation\n            defaultMessage=\"Configure {integrationName} for your organization\"\n            id=\"ep4eY4\"\n            description=\"Title of the organization credentials dialog\"\n            values={{ integrationName: integration.name }}\n          />\n        </Dialog.Title>\n        {integration.description && (\n          <Text size=\"2\" color=\"gray\" mb=\"4\" as=\"p\">\n            {integration.description}\n          </Text>\n        )}\n\n        {error && (\n          <Callout.Root my=\"3\" color=\"red\" role=\"alert\">\n            <Callout.Text>\n              <Translation\n                defaultMessage=\"We couldn't save these settings. Please check the values and try again.\"\n                id=\"zr1ZFZ\"\n                description=\"Error message when saving organization settings fails\"\n              />\n            </Callout.Text>\n          </Callout.Root>\n        )}\n\n        <Flex direction=\"column\" gap=\"4\" mt=\"2\">\n          {isApiKeyOnly && (\n            <>\n              {enableToggle}\n              {configFieldsSection}\n            </>\n          )}\n\n          {showCredentialsStep && (\n            <>\n              {enableToggle}\n\n              <RedirectUriField value={credentials.redirectUri} />\n\n              <Flex direction=\"column\" gap=\"1\">\n                <Label>\n                  <Translation\n                    defaultMessage=\"{providerName} Client ID\"\n                    id=\"Ew2Xew\"\n                    description=\"Label for the OAuth client ID input\"\n                    values={{ providerName: integration.name }}\n                  />\n                </Label>\n                <TextField\n                  value={clientId}\n                  autoComplete=\"off\"\n                  placeholder={clientIdPlaceholder}\n                  aria-invalid={!!clientIdError || undefined}\n                  aria-describedby={\n                    clientIdError ? \"pipes-admin-client-id-error\" : undefined\n                  }\n                  onChange={(event) => {\n                    setClientId(event.target.value);\n                    setClientIdError(null);\n                  }}\n                />\n                {clientIdError ? (\n                  <Text color=\"red\" size=\"2\" id=\"pipes-admin-client-id-error\">\n                    {clientIdError}\n                  </Text>\n                ) : null}\n              </Flex>\n\n              <Flex direction=\"column\" gap=\"1\">\n                <Label>\n                  <Translation\n                    defaultMessage=\"{providerName} Client Secret\"\n                    id=\"hZK/jR\"\n                    description=\"Label for the OAuth client secret input\"\n                    values={{ providerName: integration.name }}\n                  />\n                </Label>\n                <PasswordField\n                  value={clientSecret}\n                  autoComplete=\"off\"\n                  // The mask is what's shown, so render it as text: a password\n                  // input would re-bullet its last four digits away.\n                  type={isRedactedSecret(clientSecret) ? \"text\" : undefined}\n                  placeholder={clientSecretPlaceholder}\n                  aria-invalid={!!clientSecretError || undefined}\n                  aria-describedby={\n                    clientSecretError\n                      ? \"pipes-admin-client-secret-error\"\n                      : undefined\n                  }\n                  onChange={(event) => {\n                    setClientSecret(event.target.value);\n                    setClientSecretError(null);\n                  }}\n                  onFocus={() => {\n                    if (isRedactedSecret(clientSecret)) {\n                      setClientSecret(\"\");\n                    }\n                  }}\n                  onBlur={() => {\n                    if (clientSecret === \"\") {\n                      setClientSecret(redactedSecret);\n                    }\n                  }}\n                />\n                {clientSecretError ? (\n                  <Text\n                    color=\"red\"\n                    size=\"2\"\n                    id=\"pipes-admin-client-secret-error\"\n                  >\n                    {clientSecretError}\n                  </Text>\n                ) : null}\n              </Flex>\n\n              {configFieldsSection}\n            </>\n          )}\n\n          {showScopesStep && (\n            <>\n              {!isOrgCredentials && enableToggle}\n\n              {!isOrgCredentials && configFieldsSection}\n\n              {scopePool.length > 0 && (\n                <Flex direction=\"column\" gap=\"2\">\n                  <Flex direction=\"column\" gap=\"1\">\n                    <Label>\n                      <Translation\n                        defaultMessage=\"Allowed scopes\"\n                        id=\"kNy90T\"\n                        description=\"Label for the scope override picker\"\n                      />\n                    </Label>\n                    <Text size=\"1\" color=\"gray\">\n                      <Translation\n                        defaultMessage=\"Selected scopes may be requested by your app. Users still authorize access during their own OAuth flow.\"\n                        id=\"E2nzZd\"\n                        description=\"Helper text for the scope override picker\"\n                      />\n                    </Text>\n                  </Flex>\n                  <SearchableSelectList\n                    options={scopePool}\n                    selected={scopes}\n                    getKey={(scope) => scope}\n                    getLabel={(scope) => scope}\n                    onChange={setScopes}\n                    searchPlaceholder={scopeSearchPlaceholder}\n                    emptyLabel={scopeEmptyLabel}\n                  />\n                  {removedDefaultScopes.length > 0 && (\n                    <Callout.Root color=\"amber\" role=\"status\">\n                      <Callout.Icon>\n                        <InfoCircledIcon />\n                      </Callout.Icon>\n                      <Callout.Text>\n                        <Translation\n                          defaultMessage=\"You removed developer-configured scopes: {scopes}. This may break this integration.\"\n                          id=\"1nCuju\"\n                          description=\"Warning naming the developer-configured scopes the admin removed\"\n                          values={{ scopes: removedDefaultScopes.join(\", \") }}\n                        />\n                      </Callout.Text>\n                    </Callout.Root>\n                  )}\n                </Flex>\n              )}\n            </>\n          )}\n        </Flex>\n\n        <Flex justify=\"end\" gap=\"3\" mt=\"5\">\n          <Dialog.Close>\n            <Button variant=\"secondary\">\n              <Translation\n                defaultMessage=\"Cancel\"\n                id=\"hHNj31\"\n                description=\"Cancel button text\"\n              />\n            </Button>\n          </Dialog.Close>\n          {showCredentialsStep ? (\n            <Button\n              type=\"button\"\n              disabled={nextDisabled}\n              onClick={() => {\n                // Run both so each surfaces its own errors before advancing.\n                const credentialsValid = validateCredentials();\n                const configValid = validateConfigFields();\n                if (credentialsValid && configValid) {\n                  setStep(\"scopes\");\n                }\n              }}\n            >\n              <Translation\n                defaultMessage=\"Next\"\n                id=\"VlKGPx\"\n                description=\"Button to advance to the scopes step\"\n              />\n            </Button>\n          ) : (\n            <>\n              {isOrgCredentials && !isApiKeyOnly && (\n                <Button\n                  variant=\"secondary\"\n                  type=\"button\"\n                  onClick={() => setStep(\"credentials\")}\n                >\n                  <Translation\n                    defaultMessage=\"Back\"\n                    id=\"bnFIEs\"\n                    description=\"Button to return to the credentials step\"\n                  />\n                </Button>\n              )}\n              <Button\n                type=\"button\"\n                disabled={\n                  isPending || !hasPendingChanges || requiredConfigMissing\n                }\n                loading={isPending}\n                onClick={handleSubmit}\n              >\n                <Translation\n                  defaultMessage=\"Save\"\n                  id=\"MVKPfz\"\n                  description=\"Button to save organization settings\"\n                />\n              </Button>\n            </>\n          )}\n        </Flex>\n      </Dialog.Content>\n    </Dialog.Root>\n  );\n}\n\nfunction OrgCredentialsButton({\n  integration,\n}: {\n  integration: DataIntegrationConfiguration;\n}) {\n  const [open, setOpen] = useState(false);\n\n  return (\n    <>\n      {open && (\n        <OrgCredentialsDialog\n          integration={integration}\n          open={open}\n          onOpenChange={setOpen}\n        />\n      )}\n      <Button variant=\"secondary\" onClick={() => setOpen(true)}>\n        <Translation\n          defaultMessage=\"Configure\"\n          id=\"ADidi3\"\n          description=\"Button to configure organization credentials\"\n        />\n      </Button>\n    </>\n  );\n}\n\n/**\n * Integrations the current viewer can manage at the organization level. Backed\n * by React Query, so calling it from multiple components doesn't trigger extra\n * fetches. Surfaces errors so the caller can render an error state rather than\n * a misleadingly empty list: a denied permission (`usePermissions` throws\n * `IncorrectPermissionsError`) and a failed `/configurations` fetch both flow\n * through `error`.\n */\nfunction useManageableIntegrations(): {\n  data: DataIntegrationConfiguration[];\n  isLoading: boolean;\n  isError: boolean;\n  error: unknown;\n} {\n  const permission = usePermissions(\"widgets:pipes:manage\");\n  const configurations = useListDataIntegrationConfigurations({\n    query: { enabled: permission.isSuccess },\n  });\n\n  if (permission.isError) {\n    return {\n      data: [],\n      isLoading: false,\n      isError: true,\n      error: permission.error,\n    };\n  }\n  if (configurations.isError) {\n    return {\n      data: [],\n      isLoading: false,\n      isError: true,\n      error: configurations.error,\n    };\n  }\n\n  if (!permission.isSuccess || !configurations.isSuccess) {\n    return {\n      data: [],\n      isLoading: permission.isLoading || configurations.isLoading,\n      isError: false,\n      error: null,\n    };\n  }\n\n  // All manageable providers (not just organization-credential ones): the\n  // tabbed \"Organization settings\" list covers every available provider.\n  return {\n    data: configurations.data.data,\n    isLoading: false,\n    isError: false,\n    error: null,\n  };\n}\n\n/**\n * Returns whether an integration is currently available to members of the\n * organization. All credential types require the effective `enabled` state to\n * be on; organization credentials additionally require a stored credential\n * pair.\n */\nfunction isIntegrationAvailable(\n  integration: DataIntegrationConfiguration,\n): boolean {\n  // API-key integrations have no org-level OAuth credentials; availability is\n  // governed solely by the enabled toggle.\n  if (!(integration.authMethods ?? [\"oauth\"]).includes(\"oauth\")) {\n    return integration.enabled;\n  }\n  const credentials = integration.credentials;\n  // `enabled` is the effective state (org override when present, else the\n  // developer default). Organization credentials additionally require a stored\n  // credential pair before the provider can be connected.\n  if (credentials.credentialsType === \"organization\") {\n    return credentials.hasCredentials && integration.enabled;\n  }\n  return integration.enabled;\n}\n\nfunction getWidgetRootDomProps(\n  state: WidgetRootState,\n  domProps: WidgetRootDomProps,\n) {\n  return getDomProps({\n    ...domProps,\n    isWidgetRoot: true,\n    widgetId: \"pipes-admin\",\n    widgetState: state,\n  });\n}\n\ninterface PipesAdminProps extends WidgetRootDomProps {\n  integrations: DataIntegrationConfiguration[];\n}\n\n/**\n * IT-admin organization configuration list: every manageable provider with its\n * availability status and a Configure action (credentials + scope overrides).\n * Presentational — the client wrapper fetches via `useManageableIntegrations`.\n */\nconst PipesAdmin: React.FC<PipesAdminProps> = ({\n  integrations,\n  ...domProps\n}) => {\n  return (\n    <CardList.Root {...getWidgetRootDomProps(\"resolved\", domProps)}>\n      {integrations.map((integration) => {\n        const available = isIntegrationAvailable(integration);\n\n        return (\n          <CardList.Item key={integration.id}>\n            <Flex direction=\"row\" justify=\"between\" align=\"center\" gap=\"2\">\n              <Flex gap=\"4\" align=\"center\">\n                <IconPanel color=\"panel\">\n                  <DataIntegrationIcon integration={integration} size=\"2\" />\n                </IconPanel>\n                <Text size=\"2\" weight=\"bold\">\n                  {integration.name}\n                </Text>\n              </Flex>\n              <Flex align=\"center\" gap=\"4\">\n                <Status state={available ? \"success\" : \"neutral\"}>\n                  {available ? (\n                    <Translation\n                      defaultMessage=\"Available\"\n                      id=\"SytbAY\"\n                      description=\"Status when an org connection is available to members\"\n                    />\n                  ) : (\n                    <Translation\n                      defaultMessage=\"Disabled\"\n                      id=\"O4SGtP\"\n                      description=\"Status when an org connection is disabled\"\n                    />\n                  )}\n                </Status>\n                <OrgCredentialsButton integration={integration} />\n              </Flex>\n            </Flex>\n          </CardList.Item>\n        );\n      })}\n    </CardList.Root>\n  );\n};\n\ninterface PipesAdminLoadingProps extends WidgetRootDomProps {\n  count: number;\n}\n\nconst PipesAdminLoading: React.FC<PipesAdminLoadingProps> = ({\n  count,\n  ...domProps\n}) => {\n  return (\n    <CardList.Root {...getWidgetRootDomProps(\"loading\", domProps)}>\n      {Array.from({ length: count }).map((_, index) => (\n        <CardList.Item key={index}>\n          <Flex direction=\"row\" justify=\"between\" align=\"center\" gap=\"2\">\n            <Flex gap=\"4\" align=\"center\">\n              <Skeleton>\n                <IconPanel>\n                  <ProviderIcon provider=\"google\" size=\"2\" />\n                </IconPanel>\n              </Skeleton>\n              <Skeleton>\n                <Text size=\"2\" weight=\"bold\">\n                  <Translation\n                    defaultMessage=\"Google Drive\"\n                    id=\"g11OOu\"\n                    description=\"Placeholder text for loading state\"\n                  />\n                </Text>\n              </Skeleton>\n            </Flex>\n            <Skeleton>\n              <Button variant=\"secondary\" disabled>\n                <Translation\n                  defaultMessage=\"Configure\"\n                  id=\"ADidi3\"\n                  description=\"Button to configure organization credentials\"\n                />\n              </Button>\n            </Skeleton>\n          </Flex>\n        </CardList.Item>\n      ))}\n    </CardList.Root>\n  );\n};\n\ninterface PipesAdminErrorProps extends WidgetRootDomProps {\n  error: unknown;\n}\n\nconst PipesAdminError: React.FC<PipesAdminErrorProps> = ({\n  error,\n  ...domProps\n}) => {\n  return (\n    <Card size=\"2\" {...getWidgetRootDomProps(\"error\", domProps)}>\n      <GenericError error={error} />\n    </Card>\n  );\n};\n\nexport type { PipesAdminProps, PipesAdminLoadingProps, PipesAdminErrorProps };\nexport {\n  PipesAdmin,\n  PipesAdminLoading,\n  PipesAdminError,\n  useManageableIntegrations,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4CI;AA3CJ,oBAA2D;AAC3D,mBAAyB;AACzB,yBAAgC;AAChC,eAA0B;AAC1B,uBAAyB;AACzB,mCAAoC;AACpC,2BAA6B;AAC7B,sBAOO;AACP,wBAA0B;AAC1B,oCAAqC;AACrC,oBAAuB;AACvB,sBAMO;AACP,yBAA+B;AAC/B,2BAA6B;AAC7B,6BAA+B;AAC/B,mBAAiE;AACjE,yBAA4B;AAC5B,6BAA+B;AAC/B,6BAAsD;AAEtD,SAAS,iBAAiB,EAAE,MAAM,GAAsB;AACtD,QAAM,gBAAY,uCAAe;AAEjC,QAAM,YAAY,UAAU;AAAA,IAC1B,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AAED,SACE,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,gDAAC,yBACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,IACA,4CAAC,6BAAS,OAAc,OAAO,WAAW;AAAA,KAC5C;AAEJ;AAEA,SAAS,qBAAqB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,kBAAc,mCAAe;AACnC,QAAM,cAAc,YAAY;AAChC,QAAM,iBAAiB,YAAY;AACnC,QAAM,mBAAmB,YAAY,oBAAoB;AAMzD,QAAM,qBAAiB,4CAAoB,YAAY,oBAAoB;AAC3E,QAAM,CAAC,UAAU,WAAW,QAAI,uBAAS,YAAY,aAAa,EAAE;AACpE,QAAM,CAAC,cAAc,eAAe,QAAI,uBAAS,cAAc;AAC/D,QAAM,CAAC,SAAS,UAAU,QAAI,uBAAS,YAAY,OAAO;AAC1D,QAAM,CAAC,QAAQ,SAAS,QAAI,uBAAmB,YAAY,UAAU,CAAC,CAAC;AAGvE,QAAM,CAAC,MAAM,OAAO,QAAI,uBAAmC,aAAa;AACxE,QAAM,CAAC,eAAe,gBAAgB,QAAI,uBAAwB,IAAI;AACtE,QAAM,CAAC,mBAAmB,oBAAoB,QAAI;AAAA,IAChD;AAAA,EACF;AASA,QAAM,eAAe,oBAChB,YAAY,gBAAgB,CAAC,GAC3B,OAAO,CAAC,UAAU,MAAM,UAAU,iBAAiB,CAAC,MAAM,MAAM,EAChE,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,MAAM,EAAE,SAAS,EAAE,IACjD,CAAC;AACL,QAAM,CAAC,cAAc,eAAe,QAAI;AAAA,IACtC,MAAM;AACJ,YAAM,OAA+B,CAAC;AACtC,iBAAW,SAAS,YAAY,gBAAgB,CAAC,GAAG;AAClD,YAAI,MAAM,UAAU,cAAe;AAGnC,YAAI,MAAM,OAAQ;AAClB,cAAM,QAAQ,YAAY,SAAS,MAAM,GAAG;AAC5C,YAAI,OAAO,UAAU,UAAU;AAC7B,eAAK,MAAM,GAAG,IAAI;AAAA,QACpB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,CAAC,cAAc,eAAe,QAAI,uBAEtC,CAAC,CAAC;AAEJ,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF,QAAI,uDAAsC;AAAA,IACxC,UAAU;AAAA,MACR,WAAW,MAAM;AACf,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,8DAA6C;AAAA,QACzD,CAAC;AAGD,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,+CAA8B;AAAA,QAC1C,CAAC;AACD,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,gBAAY,uCAAe;AAOjC,QAAM,gBAAgB,YAAY;AAClC,QAAM,kBAAkB,YAAY,UAAU,CAAC;AAC/C,QAAM,YAAY,mBACd;AAAA,IACE,GAAG,oBAAI,IAAI;AAAA,MACT,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG,YAAY;AAAA,IACjB,CAAC;AAAA,EACH,IACA,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,iBAAiB,GAAG,aAAa,CAAC,CAAC;AAEvD,QAAM,uBAAuB,cAAc;AAAA,IACzC,CAAC,UAAU,CAAC,OAAO,SAAS,KAAK;AAAA,EACnC;AAEA,QAAM,eAAe,UAAU;AAAA,IAC7B,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,gBAAgB,UAAU;AAAA,IAC9B,gBACE;AAAA,IACF,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AAED,QAAM,sBAAsB,UAAU;AAAA,IACpC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA,EAC3C,CAAC;AACD,QAAM,0BAA0B,UAAU;AAAA,IACxC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA,EAC3C,CAAC;AACD,QAAM,yBAAyB,UAAU;AAAA,IACvC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,kBAAkB,UAAU;AAAA,IAChC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,wBAAwB,UAAU;AAAA,IACtC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aACE;AAAA,EACJ,CAAC;AACD,QAAM,uBAAuB,UAAU;AAAA,IACrC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aACE;AAAA,EACJ,CAAC;AACD,QAAM,wBAAwB,UAAU;AAAA,IACtC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aACE;AAAA,EACJ,CAAC;AAGD,QAAM,uBAAuB,MAAe;AAC1C,UAAM,aAA4C,CAAC;AACnD,QAAI,QAAQ;AACZ,eAAW,SAAS,cAAc;AAChC,YAAM,SAAS,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AACnD,UAAI,MAAM,YAAY,CAAC,OAAO;AAC5B,mBAAW,MAAM,GAAG,IAAI;AACxB,gBAAQ;AACR;AAAA,MACF;AACA,UAAI,SAAS,MAAM,SAAS;AAC1B,YAAI,UAAU;AACd,YAAI;AACF,oBAAU,IAAI,OAAO,MAAM,OAAO,EAAE,KAAK,KAAK;AAAA,QAChD,QAAQ;AAEN,oBAAU;AAAA,QACZ;AACA,YAAI,CAAC,SAAS;AACZ,qBAAW,MAAM,GAAG,IAAI;AACxB,kBAAQ;AACR;AAAA,QACF;AAAA,MACF;AACA,iBAAW,MAAM,GAAG,IAAI;AAAA,IAC1B;AACA,oBAAgB,UAAU;AAC1B,WAAO;AAAA,EACT;AAMA,QAAM,mBAAmB,IAAI;AAAA,KAC1B,YAAY,gBAAgB,CAAC,GAC3B,OAAO,CAAC,UAAU,MAAM,MAAM,EAC9B,IAAI,CAAC,UAAU,MAAM,GAAG;AAAA,EAC7B;AAEA,QAAM,qBAAqB,MAAM;AAG/B,UAAM,SAAiC,CAAC;AACxC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAY,UAAU,CAAC,CAAC,GAAG;AACnE,UAAI,OAAO,UAAU,YAAY,CAAC,iBAAiB,IAAI,GAAG,GAAG;AAC3D,eAAO,GAAG,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,eAAW,SAAS,cAAc;AAChC,YAAM,SAAS,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AACnD,UAAI,OAAO;AACT,eAAO,MAAM,GAAG,IAAI;AAAA,MACtB,OAAO;AACL,eAAO,OAAO,MAAM,GAAG;AAAA,MACzB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAMA,QAAM,sBAAsB,MAAe;AACzC,qBAAiB,IAAI;AACrB,yBAAqB,IAAI;AACzB,UAAM,YAAY,SAAS,KAAK;AAChC,UAAM,kBAAkB,sBAAkB,yCAAiB,YAAY;AACvE,QAAI,QAAQ;AACZ,QAAI,CAAC,WAAW;AACd,uBAAiB,qBAAqB;AACtC,cAAQ;AAAA,IACV;AACA,QAAI,iBAAiB;AAEnB,UAAI,aAAa,eAAe,YAAY,aAAa,KAAK;AAC5D,6BAAqB,qBAAqB;AAC1C,gBAAQ;AAAA,MACV;AAAA,IACF,WAAW,CAAC,aAAa,KAAK,GAAG;AAC/B,2BAAqB,qBAAqB;AAC1C,cAAQ;AAAA,IACV;AACA,WAAO;AAAA,EACT;AAIA,QAAM,eAAe,EAAE,YAAY,eAAe,CAAC,OAAO,GAAG;AAAA,IAC3D;AAAA,EACF;AAEA,QAAM,eAAe,MAAM;AAGzB,QAAI,CAAC,oBAAoB,CAAC,qBAAqB,GAAG;AAChD;AAAA,IACF;AACA,UAAM,gBACJ,aAAa,SAAS,IAAI,EAAE,QAAQ,mBAAmB,EAAE,IAAI;AAE/D,QAAI,cAAc;AAChB,qBAAe;AAAA,QACb,MAAM,YAAY;AAAA,QAClB,MAAM,EAAE,SAAS,GAAG,cAAc;AAAA,MACpC,CAAC;AACD;AAAA,IACF;AACA,QAAI,CAAC,kBAAkB;AAErB,qBAAe;AAAA,QACb,MAAM,YAAY;AAAA,QAClB,MAAM,EAAE,SAAS,QAAQ,GAAG,cAAc;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AAEA,UAAM,kBAAkB,sBAAkB,yCAAiB,YAAY;AACvE,QAAI,iBAAiB;AACnB,qBAAe;AAAA,QACb,MAAM,YAAY;AAAA,QAClB,MAAM,EAAE,SAAS,QAAQ,GAAG,cAAc;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AACA,mBAAe;AAAA,MACb,MAAM,YAAY;AAAA,MAClB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW,SAAS,KAAK;AAAA,QACzB,eAAe,aAAa,KAAK;AAAA,QACjC;AAAA,QACA,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,sBACJ,CAAC,gBAAgB,oBAAoB,SAAS;AAChD,QAAM,iBACJ,CAAC,iBAAiB,CAAC,oBAAoB,SAAS;AAMlD,QAAM,gBAAgB,YAAY,UAAU,CAAC;AAC7C,QAAM,gBACJ,OAAO,WAAW,cAAc,UAChC,OAAO,KAAK,CAAC,UAAU,CAAC,cAAc,SAAS,KAAK,CAAC;AACvD,QAAM,iBAAiB,YAAY,YAAY;AAC/C,QAAM,qBACJ,qBACC,SAAS,KAAK,OAAO,YAAY,aAAa,OAC5C,aAAa,KAAK,MAAM,MAAM,KAAC,yCAAiB,YAAY;AACjE,QAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAM,WAAW,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AAGrD,UAAM,WACJ,OAAO,YAAY,SAAS,MAAM,GAAG,MAAM,WACtC,YAAY,OAAO,MAAM,GAAG,EAAa,KAAK,IAC/C;AACN,WAAO,YAAY;AAAA,EACrB,CAAC;AACD,QAAM,oBACJ,kBAAkB,iBAAiB,sBAAsB;AAK3D,QAAM,wBAAwB,aAAa;AAAA,IACzC,CAAC,UAAU,MAAM,YAAY,EAAE,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AAAA,EACrE;AACA,QAAM,qBACJ,qBAAqB,CAAC,SAAS,KAAK,KAAK,CAAC,aAAa,KAAK;AAC9D,QAAM,eAAe,sBAAsB;AAE3C,QAAM,eACJ,6CAAC,sBAAK,OAAM,UAAS,KAAI,KACvB;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,SAAS;AAAA,QACT,iBAAiB;AAAA,QACjB,cAAY;AAAA;AAAA,IACd;AAAA,IACA,4CAAC,sBAAK,MAAK,KAAI,QAAO,QACpB;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,IACA,4CAAC,yBAAQ,SAAS,eAChB,sDAAC,sCAAgB,eAAW,MAAC,OAAO,EAAE,OAAO,gBAAgB,GAAG,GAClE;AAAA,KACF;AAGF,QAAM,sBACJ,aAAa,SAAS,IAClB,aAAa,IAAI,CAAC,UAAU;AAC1B,UAAM,UAAU,sBAAsB,MAAM,GAAG;AAC/C,UAAM,UAAU,GAAG,OAAO;AAC1B,UAAM,gBAAgB,GAAG,OAAO;AAChC,UAAMA,SAAQ,aAAa,MAAM,GAAG;AACpC,UAAM,UAAU,MAAM,SAAS,gCAAgB;AAC/C,UAAM,cACJ,CAAC,MAAM,cAAc,gBAAgB,MAAMA,SAAQ,UAAU,IAAI,EAC9D,OAAO,OAAO,EACd,KAAK,GAAG,KAAK;AAClB,WACE,6CAAC,sBAAqB,WAAU,UAAS,KAAI,KAC3C;AAAA,kDAAC,yBAAM,SAAS,SAAU,gBAAM,OAAM;AAAA,MACrC,MAAM,cACL,4CAAC,sBAAK,OAAM,QAAO,MAAK,KAAI,IAAI,eAAe,IAAG,KAC/C,gBAAM,aACT,IACE;AAAA,MACJ;AAAA,QAAC;AAAA;AAAA,UACC,IAAI;AAAA,UACJ,OAAO,aAAa,MAAM,GAAG,KAAK;AAAA,UAClC,aAAa,MAAM;AAAA,UACnB,cAAa;AAAA,UACb,UAAU,MAAM,YAAY;AAAA,UAC5B,gBAAc,CAAC,CAACA,UAAS;AAAA,UACzB,oBAAkB;AAAA,UAClB,UAAU,CAAC,UAAU;AACnB,4BAAgB,CAAC,UAAU;AAAA,cACzB,GAAG;AAAA,cACH,CAAC,MAAM,GAAG,GAAG,MAAM,OAAO;AAAA,YAC5B,EAAE;AACF,gBAAIA,QAAO;AACT,8BAAgB,CAAC,UAAU;AAAA,gBACzB,GAAG;AAAA,gBACH,CAAC,MAAM,GAAG,GAAG;AAAA,cACf,EAAE;AAAA,YACJ;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACCA,SACC,4CAAC,sBAAK,OAAM,OAAM,MAAK,KAAI,IAAI,SAC5B,UAAAA,QACH,IACE;AAAA,SAhCK,MAAM,GAiCjB;AAAA,EAEJ,CAAC,IACD;AAEN,SACE,4CAAC,uBAAO,MAAP,EAAY,MAAY,cACvB,uDAAC,uBAAO,SAAP,EACC;AAAA,gDAAC,uBAAO,OAAP,EAAa,MAAK,KAAI,QAAO,QAC5B;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA,QACZ,QAAQ,EAAE,iBAAiB,YAAY,KAAK;AAAA;AAAA,IAC9C,GACF;AAAA,IACC,YAAY,eACX,4CAAC,sBAAK,MAAK,KAAI,OAAM,QAAO,IAAG,KAAI,IAAG,KACnC,sBAAY,aACf;AAAA,IAGD,SACC,4CAAC,sBAAQ,MAAR,EAAa,IAAG,KAAI,OAAM,OAAM,MAAK,SACpC,sDAAC,sBAAQ,MAAR,EACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF,GACF;AAAA,IAGF,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAAI,IAAG,KACjC;AAAA,sBACC,4EACG;AAAA;AAAA,QACA;AAAA,SACH;AAAA,MAGD,uBACC,4EACG;AAAA;AAAA,QAED,4CAAC,oBAAiB,OAAO,YAAY,aAAa;AAAA,QAElD,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,sDAAC,yBACC;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA,cACZ,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA;AAAA,UAC3C,GACF;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,cAAa;AAAA,cACb,aAAa;AAAA,cACb,gBAAc,CAAC,CAAC,iBAAiB;AAAA,cACjC,oBACE,gBAAgB,gCAAgC;AAAA,cAElD,UAAU,CAAC,UAAU;AACnB,4BAAY,MAAM,OAAO,KAAK;AAC9B,iCAAiB,IAAI;AAAA,cACvB;AAAA;AAAA,UACF;AAAA,UACC,gBACC,4CAAC,sBAAK,OAAM,OAAM,MAAK,KAAI,IAAG,+BAC3B,yBACH,IACE;AAAA,WACN;AAAA,QAEA,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,sDAAC,yBACC;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA,cACZ,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA;AAAA,UAC3C,GACF;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,cAAa;AAAA,cAGb,UAAM,yCAAiB,YAAY,IAAI,SAAS;AAAA,cAChD,aAAa;AAAA,cACb,gBAAc,CAAC,CAAC,qBAAqB;AAAA,cACrC,oBACE,oBACI,oCACA;AAAA,cAEN,UAAU,CAAC,UAAU;AACnB,gCAAgB,MAAM,OAAO,KAAK;AAClC,qCAAqB,IAAI;AAAA,cAC3B;AAAA,cACA,SAAS,MAAM;AACb,wBAAI,yCAAiB,YAAY,GAAG;AAClC,kCAAgB,EAAE;AAAA,gBACpB;AAAA,cACF;AAAA,cACA,QAAQ,MAAM;AACZ,oBAAI,iBAAiB,IAAI;AACvB,kCAAgB,cAAc;AAAA,gBAChC;AAAA,cACF;AAAA;AAAA,UACF;AAAA,UACC,oBACC;AAAA,YAAC;AAAA;AAAA,cACC,OAAM;AAAA,cACN,MAAK;AAAA,cACL,IAAG;AAAA,cAEF;AAAA;AAAA,UACH,IACE;AAAA,WACN;AAAA,QAEC;AAAA,SACH;AAAA,MAGD,kBACC,4EACG;AAAA,SAAC,oBAAoB;AAAA,QAErB,CAAC,oBAAoB;AAAA,QAErB,UAAU,SAAS,KAClB,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,uDAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,wDAAC,yBACC;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd,GACF;AAAA,YACA,4CAAC,sBAAK,MAAK,KAAI,OAAM,QACnB;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd,GACF;AAAA,aACF;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAS;AAAA,cACT,UAAU;AAAA,cACV,QAAQ,CAAC,UAAU;AAAA,cACnB,UAAU,CAAC,UAAU;AAAA,cACrB,UAAU;AAAA,cACV,mBAAmB;AAAA,cACnB,YAAY;AAAA;AAAA,UACd;AAAA,UACC,qBAAqB,SAAS,KAC7B,6CAAC,sBAAQ,MAAR,EAAa,OAAM,SAAQ,MAAK,UAC/B;AAAA,wDAAC,sBAAQ,MAAR,EACC,sDAAC,sCAAgB,GACnB;AAAA,YACA,4CAAC,sBAAQ,MAAR,EACC;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA,gBACZ,QAAQ,EAAE,QAAQ,qBAAqB,KAAK,IAAI,EAAE;AAAA;AAAA,YACpD,GACF;AAAA,aACF;AAAA,WAEJ;AAAA,SAEJ;AAAA,OAEJ;AAAA,IAEA,6CAAC,sBAAK,SAAQ,OAAM,KAAI,KAAI,IAAG,KAC7B;AAAA,kDAAC,uBAAO,OAAP,EACC,sDAAC,0BAAO,SAAQ,aACd;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd,GACF,GACF;AAAA,MACC,sBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU;AAAA,UACV,SAAS,MAAM;AAEb,kBAAM,mBAAmB,oBAAoB;AAC7C,kBAAM,cAAc,qBAAqB;AACzC,gBAAI,oBAAoB,aAAa;AACnC,sBAAQ,QAAQ;AAAA,YAClB;AAAA,UACF;AAAA,UAEA;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA;AAAA,UACd;AAAA;AAAA,MACF,IAEA,4EACG;AAAA,4BAAoB,CAAC,gBACpB;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,SAAS,MAAM,QAAQ,aAAa;AAAA,YAEpC;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA;AAAA,QACF;AAAA,QAEF;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UACE,aAAa,CAAC,qBAAqB;AAAA,YAErC,SAAS;AAAA,YACT,SAAS;AAAA,YAET;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA;AAAA,QACF;AAAA,SACF;AAAA,OAEJ;AAAA,KACF,GACF;AAEJ;AAEA,SAAS,qBAAqB;AAAA,EAC5B;AACF,GAEG;AACD,QAAM,CAAC,MAAM,OAAO,QAAI,uBAAS,KAAK;AAEtC,SACE,4EACG;AAAA,YACC;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,cAAc;AAAA;AAAA,IAChB;AAAA,IAEF,4CAAC,0BAAO,SAAQ,aAAY,SAAS,MAAM,QAAQ,IAAI,GACrD;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,KACF;AAEJ;AAUA,SAAS,4BAKP;AACA,QAAM,iBAAa,uCAAe,sBAAsB;AACxD,QAAM,qBAAiB,sDAAqC;AAAA,IAC1D,OAAO,EAAE,SAAS,WAAW,UAAU;AAAA,EACzC,CAAC;AAED,MAAI,WAAW,SAAS;AACtB,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO,WAAW;AAAA,IACpB;AAAA,EACF;AACA,MAAI,eAAe,SAAS;AAC1B,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO,eAAe;AAAA,IACxB;AAAA,EACF;AAEA,MAAI,CAAC,WAAW,aAAa,CAAC,eAAe,WAAW;AACtD,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,WAAW,WAAW,aAAa,eAAe;AAAA,MAClD,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAIA,SAAO;AAAA,IACL,MAAM,eAAe,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AACF;AAQA,SAAS,uBACP,aACS;AAGT,MAAI,EAAE,YAAY,eAAe,CAAC,OAAO,GAAG,SAAS,OAAO,GAAG;AAC7D,WAAO,YAAY;AAAA,EACrB;AACA,QAAM,cAAc,YAAY;AAIhC,MAAI,YAAY,oBAAoB,gBAAgB;AAClD,WAAO,YAAY,kBAAkB,YAAY;AAAA,EACnD;AACA,SAAO,YAAY;AACrB;AAEA,SAAS,sBACP,OACA,UACA;AACA,aAAO,0BAAY;AAAA,IACjB,GAAG;AAAA,IACH,cAAc;AAAA,IACd,UAAU;AAAA,IACV,aAAa;AAAA,EACf,CAAC;AACH;AAWA,MAAM,aAAwC,CAAC;AAAA,EAC7C;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE,4CAAC,SAAS,MAAT,EAAe,GAAG,sBAAsB,YAAY,QAAQ,GAC1D,uBAAa,IAAI,CAAC,gBAAgB;AACjC,UAAM,YAAY,uBAAuB,WAAW;AAEpD,WACE,4CAAC,SAAS,MAAT,EACC,uDAAC,sBAAK,WAAU,OAAM,SAAQ,WAAU,OAAM,UAAS,KAAI,KACzD;AAAA,mDAAC,sBAAK,KAAI,KAAI,OAAM,UAClB;AAAA,oDAAC,+BAAU,OAAM,SACf,sDAAC,oDAAoB,aAA0B,MAAK,KAAI,GAC1D;AAAA,QACA,4CAAC,sBAAK,MAAK,KAAI,QAAO,QACnB,sBAAY,MACf;AAAA,SACF;AAAA,MACA,6CAAC,sBAAK,OAAM,UAAS,KAAI,KACvB;AAAA,oDAAC,wBAAO,OAAO,YAAY,YAAY,WACpC,sBACC;AAAA,UAAC;AAAA;AAAA,YACC,gBAAe;AAAA,YACf,IAAG;AAAA,YACH,aAAY;AAAA;AAAA,QACd,IAEA;AAAA,UAAC;AAAA;AAAA,YACC,gBAAe;AAAA,YACf,IAAG;AAAA,YACH,aAAY;AAAA;AAAA,QACd,GAEJ;AAAA,QACA,4CAAC,wBAAqB,aAA0B;AAAA,SAClD;AAAA,OACF,KA5BkB,YAAY,EA6BhC;AAAA,EAEJ,CAAC,GACH;AAEJ;AAMA,MAAM,oBAAsD,CAAC;AAAA,EAC3D;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE,4CAAC,SAAS,MAAT,EAAe,GAAG,sBAAsB,WAAW,QAAQ,GACzD,gBAAM,KAAK,EAAE,QAAQ,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,UACrC,4CAAC,SAAS,MAAT,EACC,uDAAC,sBAAK,WAAU,OAAM,SAAQ,WAAU,OAAM,UAAS,KAAI,KACzD;AAAA,iDAAC,sBAAK,KAAI,KAAI,OAAM,UAClB;AAAA,kDAAC,4BACC,sDAAC,+BACC,sDAAC,qCAAa,UAAS,UAAS,MAAK,KAAI,GAC3C,GACF;AAAA,MACA,4CAAC,4BACC,sDAAC,sBAAK,MAAK,KAAI,QAAO,QACpB;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd,GACF,GACF;AAAA,OACF;AAAA,IACA,4CAAC,4BACC,sDAAC,0BAAO,SAAQ,aAAY,UAAQ,MAClC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF,GACF;AAAA,KACF,KA3BkB,KA4BpB,CACD,GACH;AAEJ;AAMA,MAAM,kBAAkD,CAAC;AAAA,EACvD;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE,4CAAC,sBAAK,MAAK,KAAK,GAAG,sBAAsB,SAAS,QAAQ,GACxD,sDAAC,qCAAa,OAAc,GAC9B;AAEJ;","names":["error"]}
+{"version":3,"sources":["../../../src/lib/pipes-admin.tsx"],"sourcesContent":["\"use client\";\nimport { Callout, Card, Flex, Switch, Text, Tooltip } from \"@radix-ui/themes\";\nimport * as React from \"react\";\nimport { useEffect, useState } from \"react\";\nimport {\n  DotsHorizontalIcon,\n  ExternalLinkIcon,\n  InfoCircledIcon,\n} from \"@radix-ui/react-icons\";\nimport * as CardList from \"./card-list.js\";\nimport { CopyText } from \"./copy-text.js\";\nimport { DataIntegrationIcon } from \"./data-integration-icon.js\";\nimport { ProviderIcon } from \"./provider-icon.js\";\nimport {\n  AlertDialog,\n  Button,\n  Dialog,\n  DropdownMenu,\n  IconButton,\n  Label,\n  PasswordField,\n  Skeleton,\n  TextField,\n} from \"./elements.js\";\nimport { IconPanel } from \"./icon-panel.js\";\nimport { SearchableSelectList } from \"./searchable-select-list.js\";\nimport { Status } from \"./status.js\";\nimport {\n  DataInstallation,\n  DataIntegrationConfiguration,\n  OrganizationDataIntegration,\n  getListDataIntegrationConfigurationsQueryKey,\n  getMyDataIntegrationsQueryKey,\n  getOrganizationDataIntegrationsQueryKey,\n  getSharedDataConnectionsQueryKey,\n  useDeleteOrganizationDataInstallation,\n  useListDataIntegrationConfigurations,\n  useOrganizationDataIntegrations,\n  useUpsertDataIntegrationConfiguration,\n  useUpsertOrganizationDataIntegrationConfiguration,\n} from \"../api/endpoint.js\";\nimport { useQueryClient } from \"@tanstack/react-query\";\nimport { GenericError } from \"./generic-error.js\";\nimport {\n  ApiKeyDialog,\n  ClientCredentialsDialog,\n  ConnectDialog,\n  ConnectionOwner,\n  PipesEmptyItem,\n  PipesSection,\n  getUnpinnedInstallationFields,\n} from \"./pipes.js\";\nimport { usePermissions } from \"./use-permissions.js\";\nimport { getDomProps, WidgetRootDomProps, WidgetRootState } from \"./utils.js\";\nimport { Translation } from \"./i18n/translation.js\";\nimport { useTranslation } from \"./i18n/use-translation.js\";\nimport { buildRedactedSecret, isRedactedSecret } from \"./redacted-secret.js\";\n\nfunction RedirectUriField({ value }: { value: string }) {\n  const translate = useTranslation();\n\n  const copyLabel = translate({\n    defaultMessage: \"Copy redirect URI\",\n    id: \"xqfxBC\",\n    description: \"Accessible label for the copy redirect URI button\",\n  });\n\n  return (\n    <Flex direction=\"column\" gap=\"1\">\n      <Label>\n        <Translation\n          defaultMessage=\"Redirect URI\"\n          id=\"lgEaUA\"\n          description=\"Label for the read-only OAuth redirect URI field\"\n        />\n      </Label>\n      <CopyText value={value} label={copyLabel} />\n    </Flex>\n  );\n}\n\n/**\n * The configuration surface the credentials dialog edits. Structurally shared\n * by the user-policy configuration (`/configurations`) and the organization\n * configuration nested in an organization-owned integration (`/organization`).\n */\ntype ConfigurableIntegration = Pick<\n  DataIntegrationConfiguration,\n  | \"name\"\n  | \"description\"\n  | \"slug\"\n  | \"authMethods\"\n  | \"enabled\"\n  | \"scopes\"\n  | \"defaultScopes\"\n  | \"availableScopes\"\n  | \"credentials\"\n  | \"configFields\"\n  | \"config\"\n>;\n\n/**\n * Saves a configuration for its owner. The user-policy write governs what\n * members may connect on their own, so it refreshes the member list; the\n * organization write changes the organization's own connection, so it\n * refreshes the shared lanes instead.\n */\nfunction useUpsertConfiguration(owner: ConnectionOwner, onSuccess: () => void) {\n  const queryClient = useQueryClient();\n  const user = useUpsertDataIntegrationConfiguration({\n    mutation: {\n      onSuccess: () => {\n        queryClient.invalidateQueries({\n          queryKey: getListDataIntegrationConfigurationsQueryKey(),\n        });\n        // Saving a configuration can change which providers/scopes are available\n        // in the user connection list, so refresh that list too.\n        queryClient.invalidateQueries({\n          queryKey: getMyDataIntegrationsQueryKey(),\n        });\n        onSuccess();\n      },\n    },\n  });\n  const organization = useUpsertOrganizationDataIntegrationConfiguration({\n    mutation: {\n      onSuccess: () => {\n        queryClient.invalidateQueries({\n          queryKey: getOrganizationDataIntegrationsQueryKey(),\n        });\n        queryClient.invalidateQueries({\n          queryKey: getSharedDataConnectionsQueryKey(),\n        });\n        onSuccess();\n      },\n    },\n  });\n\n  return owner === \"organization\" ? organization : user;\n}\n\nfunction OrgCredentialsDialog({\n  integration,\n  open,\n  onOpenChange,\n  owner = \"user\",\n}: {\n  integration: ConfigurableIntegration;\n  open: boolean;\n  onOpenChange: (open: boolean) => void;\n  owner?: ConnectionOwner;\n}) {\n  const credentials = integration.credentials;\n  const hasCredentials = credentials.hasCredentials;\n  const isOrgCredentials = credentials.credentialsType === \"organization\";\n\n  // Seeded once on mount; the dialog is only mounted while open (see\n  // OrgCredentialsButton), so each open starts from the current configuration.\n  // `enabled`/`scopes` on the configuration are the effective values\n  // (the org override when present, else the developer default).\n  const redactedSecret = buildRedactedSecret(credentials.redactedClientSecret);\n  const [clientId, setClientId] = useState(credentials.client_id ?? \"\");\n  const [clientSecret, setClientSecret] = useState(redactedSecret);\n  const [enabled, setEnabled] = useState(integration.enabled);\n  const [scopes, setScopes] = useState<string[]>(integration.scopes ?? []);\n  // Organization credentials are entered first, then scopes (two-step wizard);\n  // shared/custom providers only narrow scopes, so they get a single view.\n  const [step, setStep] = useState<\"credentials\" | \"scopes\">(\"credentials\");\n  const [clientIdError, setClientIdError] = useState<string | null>(null);\n  const [clientSecretError, setClientSecretError] = useState<string | null>(\n    null,\n  );\n\n  // Provider-declared `integration`-scope config fields are configured here, but\n  // only for `organization` credentials: the API rejects per-org config for\n  // shared/custom creds (those are set on the root integration instead). The\n  // `installation`-scope pins are deferred from this UI for now (they're\n  // collected in the connect modal instead). `secret` fields are excluded: they\n  // are rejected server-side, and seeding a masked secret can't be round-tripped\n  // safely under the config-replace write.\n  const configFields = isOrgCredentials\n    ? (integration.configFields ?? [])\n        .filter((field) => field.scope === \"integration\" && !field.secret)\n        .sort((a, b) => (a.order ?? 0) - (b.order ?? 0))\n    : [];\n  const [configValues, setConfigValues] = useState<Record<string, string>>(\n    () => {\n      const seed: Record<string, string> = {};\n      for (const field of integration.configFields ?? []) {\n        if (field.scope !== \"integration\") continue;\n        // Never seed a `secret` field from the response: the value may be\n        // redacted, and re-submitting the mask would clobber the stored secret.\n        if (field.secret) continue;\n        const value = integration.config?.[field.key];\n        if (typeof value === \"string\") {\n          seed[field.key] = value;\n        }\n      }\n      return seed;\n    },\n  );\n  const [configErrors, setConfigErrors] = useState<\n    Record<string, string | null>\n  >({});\n\n  const {\n    mutate: upsertOverride,\n    error,\n    isPending,\n  } = useUpsertConfiguration(owner, () => onOpenChange(false));\n\n  const translate = useTranslation();\n\n  // Selectable scope pool: organization credentials can request the provider's\n  // full catalog; shared/custom can only (re)select within the developer's\n  // configured defaults. The current effective selection is always included so\n  // it stays toggleable, and the defaults are included so a previously removed\n  // default can be re-added.\n  const defaultScopes = integration.defaultScopes;\n  const effectiveScopes = integration.scopes ?? [];\n  const scopePool = isOrgCredentials\n    ? [\n        ...new Set([\n          ...effectiveScopes,\n          ...defaultScopes,\n          ...integration.availableScopes,\n        ]),\n      ]\n    : [...new Set([...effectiveScopes, ...defaultScopes])];\n  // Developer-configured scopes the admin has unselected — named in the warning.\n  const removedDefaultScopes = defaultScopes.filter(\n    (scope) => !scopes.includes(scope),\n  );\n\n  const enabledLabel = translate({\n    defaultMessage: \"Enable\",\n    id: \"hkhtrS\",\n    description: \"Label for the enable toggle\",\n  });\n  const enableTooltip = translate({\n    defaultMessage:\n      \"Allow this integration to be connected in your organization.\",\n    id: \"7ItyG3\",\n    description: \"Tooltip explaining the enable toggle\",\n  });\n\n  const clientIdPlaceholder = translate({\n    defaultMessage: \"Enter your {providerName} Client ID\",\n    id: \"pAUj4e\",\n    description: \"Placeholder for the OAuth client ID input\",\n    values: { providerName: integration.name },\n  });\n  const clientSecretPlaceholder = translate({\n    defaultMessage: \"Enter your {providerName} Client Secret\",\n    id: \"WoFO8+\",\n    description: \"Placeholder for the OAuth client secret input\",\n    values: { providerName: integration.name },\n  });\n  const scopeSearchPlaceholder = translate({\n    defaultMessage: \"Search scopes\",\n    id: \"fjuuw1\",\n    description: \"Placeholder for the scope override search input\",\n  });\n  const scopeEmptyLabel = translate({\n    defaultMessage: \"No scopes found\",\n    id: \"OSyQvz\",\n    description: \"Empty state for the scope override search\",\n  });\n  const configRequiredMessage = translate({\n    defaultMessage: \"This field is required\",\n    id: \"B2HvfC\",\n    description:\n      \"Validation error shown when a required configuration field is left empty\",\n  });\n  const configPatternMessage = translate({\n    defaultMessage: \"Enter a valid value.\",\n    id: \"2XWaGz\",\n    description:\n      \"Validation error shown when a configuration field value does not match the expected format\",\n  });\n  const secretRequiredMessage = translate({\n    defaultMessage: \"Enter a new Client Secret to change the Client ID.\",\n    id: \"O+5rxK\",\n    description:\n      \"Validation error when changing client id without a new secret\",\n  });\n\n  // Validate the integration-scope config fields against their descriptors.\n  const validateConfigFields = (): boolean => {\n    const nextErrors: Record<string, string | null> = {};\n    let valid = true;\n    for (const field of configFields) {\n      const value = (configValues[field.key] ?? \"\").trim();\n      if (field.required && !value) {\n        nextErrors[field.key] = configRequiredMessage;\n        valid = false;\n        continue;\n      }\n      if (value && field.pattern) {\n        let matches = true;\n        try {\n          matches = new RegExp(field.pattern).test(value);\n        } catch {\n          // Ignore invalid descriptor patterns client-side; the API validates.\n          matches = true;\n        }\n        if (!matches) {\n          nextErrors[field.key] = configPatternMessage;\n          valid = false;\n          continue;\n        }\n      }\n      nextErrors[field.key] = null;\n    }\n    setConfigErrors(nextErrors);\n    return valid;\n  };\n\n  // Secret descriptor keys are never round-tripped: if the API ever returned a\n  // secret as a redacted mask, copying it into the replacement payload would\n  // overwrite the stored value. (Secret config fields are rejected server-side\n  // today, so this is defensive.)\n  const secretConfigKeys = new Set(\n    (integration.configFields ?? [])\n      .filter((field) => field.secret)\n      .map((field) => field.key),\n  );\n\n  const buildConfigPayload = () => {\n    // Preserve existing config keys this UI doesn't render (e.g. installation\n    // pins, deferred for now) so saving org settings never drops them.\n    const config: Record<string, string> = {};\n    for (const [key, value] of Object.entries(integration.config ?? {})) {\n      if (typeof value === \"string\" && !secretConfigKeys.has(key)) {\n        config[key] = value;\n      }\n    }\n    // Overlay the edited integration-scope fields; an emptied field clears it.\n    for (const field of configFields) {\n      const value = (configValues[field.key] ?? \"\").trim();\n      if (value) {\n        config[field.key] = value;\n      } else {\n        delete config[field.key];\n      }\n    }\n    return config;\n  };\n\n  // Validate organization credentials before advancing to the scopes step. The\n  // secret field is pre-filled with a redacted placeholder for an existing\n  // secret; if untouched, keep the stored secret. Since client_id and\n  // client_secret travel together, changing the id requires a new secret.\n  const validateCredentials = (): boolean => {\n    setClientIdError(null);\n    setClientSecretError(null);\n    const trimmedId = clientId.trim();\n    const secretUnchanged = hasCredentials && isRedactedSecret(clientSecret);\n    let valid = true;\n    if (!trimmedId) {\n      setClientIdError(configRequiredMessage);\n      valid = false;\n    }\n    if (secretUnchanged) {\n      // Existing secret kept: only re-entry is required when the id changes.\n      if (trimmedId && trimmedId !== (credentials.client_id ?? \"\")) {\n        setClientSecretError(secretRequiredMessage);\n        valid = false;\n      }\n    } else if (!clientSecret.trim()) {\n      setClientSecretError(configRequiredMessage);\n      valid = false;\n    }\n    return valid;\n  };\n\n  // API-key integrations have no OAuth credentials or scopes to configure;\n  // the only override is the enabled toggle.\n  const isApiKeyOnly = !(integration.authMethods ?? [\"oauth\"]).includes(\n    \"oauth\",\n  );\n\n  const handleSubmit = () => {\n    // Org-cred config fields were validated on the way to the scopes step; the\n    // other surfaces submit directly from this view, so validate here.\n    if (!isOrgCredentials && !validateConfigFields()) {\n      return;\n    }\n    const configPayload =\n      configFields.length > 0 ? { config: buildConfigPayload() } : undefined;\n\n    if (isApiKeyOnly) {\n      upsertOverride({\n        slug: integration.slug,\n        data: { enabled, ...configPayload },\n      });\n      return;\n    }\n    if (!isOrgCredentials) {\n      // shared/custom: enable + (possibly narrowed) scopes only.\n      upsertOverride({\n        slug: integration.slug,\n        data: { enabled, scopes, ...configPayload },\n      });\n      return;\n    }\n    // Credentials were validated on the way to the scopes step.\n    const secretUnchanged = hasCredentials && isRedactedSecret(clientSecret);\n    if (secretUnchanged) {\n      upsertOverride({\n        slug: integration.slug,\n        data: { enabled, scopes, ...configPayload },\n      });\n      return;\n    }\n    upsertOverride({\n      slug: integration.slug,\n      data: {\n        enabled,\n        client_id: clientId.trim(),\n        client_secret: clientSecret.trim(),\n        scopes,\n        ...configPayload,\n      },\n    });\n  };\n\n  const showCredentialsStep =\n    !isApiKeyOnly && isOrgCredentials && step === \"credentials\";\n  const showScopesStep =\n    !isApiKeyOnly && (!isOrgCredentials || step === \"scopes\");\n\n  // Disable Save when nothing differs from the seeded override state. Same\n  // length + one-way subset means equal scope sets. Credential fields only\n  // exist for organization credentials; a \"changed\" secret is a freshly typed\n  // value (not the redacted placeholder), so focusing the field doesn't count.\n  const initialScopes = integration.scopes ?? [];\n  const scopesChanged =\n    scopes.length !== initialScopes.length ||\n    scopes.some((scope) => !initialScopes.includes(scope));\n  const enabledChanged = enabled !== integration.enabled;\n  const credentialsChanged =\n    isOrgCredentials &&\n    (clientId.trim() !== (credentials.client_id ?? \"\") ||\n      (clientSecret.trim() !== \"\" && !isRedactedSecret(clientSecret)));\n  const configChanged = configFields.some((field) => {\n    const current = (configValues[field.key] ?? \"\").trim();\n    // Trim both sides so an existing value with incidental surrounding\n    // whitespace doesn't read as a pending change on open.\n    const original =\n      typeof integration.config?.[field.key] === \"string\"\n        ? (integration.config[field.key] as string).trim()\n        : \"\";\n    return current !== original;\n  });\n  const hasPendingChanges =\n    enabledChanged || scopesChanged || credentialsChanged || configChanged;\n\n  // Gate the primary button on required fields being populated (matches the\n  // ApiKeyDialog / change-email patterns). A redacted secret placeholder counts\n  // as populated, so editing an existing config isn't blocked.\n  const requiredConfigMissing = configFields.some(\n    (field) => field.required && !(configValues[field.key] ?? \"\").trim(),\n  );\n  const credentialsMissing =\n    isOrgCredentials && (!clientId.trim() || !clientSecret.trim());\n  const nextDisabled = credentialsMissing || requiredConfigMissing;\n\n  const enableToggle = (\n    <Flex align=\"center\" gap=\"2\">\n      <Switch\n        checked={enabled}\n        onCheckedChange={setEnabled}\n        aria-label={enabledLabel}\n      />\n      <Text size=\"2\" weight=\"bold\">\n        <Translation\n          defaultMessage=\"Enable\"\n          id=\"hkhtrS\"\n          description=\"Label for the enable toggle\"\n        />\n      </Text>\n      <Tooltip content={enableTooltip}>\n        <InfoCircledIcon aria-hidden style={{ color: \"var(--gray-9)\" }} />\n      </Tooltip>\n    </Flex>\n  );\n\n  const configFieldsSection =\n    configFields.length > 0\n      ? configFields.map((field) => {\n          const fieldId = `pipes-admin-config-${field.key}`;\n          const errorId = `${fieldId}-error`;\n          const descriptionId = `${fieldId}-description`;\n          const error = configErrors[field.key];\n          const Control = field.secret ? PasswordField : TextField;\n          const describedBy =\n            [field.description ? descriptionId : null, error ? errorId : null]\n              .filter(Boolean)\n              .join(\" \") || undefined;\n          return (\n            <Flex key={field.key} direction=\"column\" gap=\"1\">\n              <Label htmlFor={fieldId}>{field.label}</Label>\n              {field.description ? (\n                <Text color=\"gray\" size=\"2\" id={descriptionId} mb=\"1\">\n                  {field.description}\n                </Text>\n              ) : null}\n              <Control\n                id={fieldId}\n                value={configValues[field.key] ?? \"\"}\n                placeholder={field.example}\n                autoComplete=\"off\"\n                required={field.required || undefined}\n                aria-invalid={!!error || undefined}\n                aria-describedby={describedBy}\n                onChange={(event) => {\n                  setConfigValues((prev) => ({\n                    ...prev,\n                    [field.key]: event.target.value,\n                  }));\n                  if (error) {\n                    setConfigErrors((prev) => ({\n                      ...prev,\n                      [field.key]: null,\n                    }));\n                  }\n                }}\n              />\n              {error ? (\n                <Text color=\"red\" size=\"2\" id={errorId}>\n                  {error}\n                </Text>\n              ) : null}\n            </Flex>\n          );\n        })\n      : null;\n\n  return (\n    <Dialog.Root open={open} onOpenChange={onOpenChange}>\n      <Dialog.Content>\n        <Dialog.Title size=\"3\" weight=\"bold\">\n          <Translation\n            defaultMessage=\"Configure {integrationName} for your organization\"\n            id=\"ep4eY4\"\n            description=\"Title of the organization credentials dialog\"\n            values={{ integrationName: integration.name }}\n          />\n        </Dialog.Title>\n        {integration.description && (\n          <Text size=\"2\" color=\"gray\" mb=\"4\" as=\"p\">\n            {integration.description}\n          </Text>\n        )}\n\n        {error && (\n          <Callout.Root my=\"3\" color=\"red\" role=\"alert\">\n            <Callout.Text>\n              <Translation\n                defaultMessage=\"We couldn't save these settings. Please check the values and try again.\"\n                id=\"zr1ZFZ\"\n                description=\"Error message when saving organization settings fails\"\n              />\n            </Callout.Text>\n          </Callout.Root>\n        )}\n\n        <Flex direction=\"column\" gap=\"4\" mt=\"2\">\n          {isApiKeyOnly && (\n            <>\n              {enableToggle}\n              {configFieldsSection}\n            </>\n          )}\n\n          {showCredentialsStep && (\n            <>\n              {enableToggle}\n\n              <RedirectUriField value={credentials.redirectUri} />\n\n              <Flex direction=\"column\" gap=\"1\">\n                <Label>\n                  <Translation\n                    defaultMessage=\"{providerName} Client ID\"\n                    id=\"Ew2Xew\"\n                    description=\"Label for the OAuth client ID input\"\n                    values={{ providerName: integration.name }}\n                  />\n                </Label>\n                <TextField\n                  value={clientId}\n                  autoComplete=\"off\"\n                  placeholder={clientIdPlaceholder}\n                  aria-invalid={!!clientIdError || undefined}\n                  aria-describedby={\n                    clientIdError ? \"pipes-admin-client-id-error\" : undefined\n                  }\n                  onChange={(event) => {\n                    setClientId(event.target.value);\n                    setClientIdError(null);\n                  }}\n                />\n                {clientIdError ? (\n                  <Text color=\"red\" size=\"2\" id=\"pipes-admin-client-id-error\">\n                    {clientIdError}\n                  </Text>\n                ) : null}\n              </Flex>\n\n              <Flex direction=\"column\" gap=\"1\">\n                <Label>\n                  <Translation\n                    defaultMessage=\"{providerName} Client Secret\"\n                    id=\"hZK/jR\"\n                    description=\"Label for the OAuth client secret input\"\n                    values={{ providerName: integration.name }}\n                  />\n                </Label>\n                <PasswordField\n                  value={clientSecret}\n                  autoComplete=\"off\"\n                  // The mask is what's shown, so render it as text: a password\n                  // input would re-bullet its last four digits away.\n                  type={isRedactedSecret(clientSecret) ? \"text\" : undefined}\n                  placeholder={clientSecretPlaceholder}\n                  aria-invalid={!!clientSecretError || undefined}\n                  aria-describedby={\n                    clientSecretError\n                      ? \"pipes-admin-client-secret-error\"\n                      : undefined\n                  }\n                  onChange={(event) => {\n                    setClientSecret(event.target.value);\n                    setClientSecretError(null);\n                  }}\n                  onFocus={() => {\n                    if (isRedactedSecret(clientSecret)) {\n                      setClientSecret(\"\");\n                    }\n                  }}\n                  onBlur={() => {\n                    if (clientSecret === \"\") {\n                      setClientSecret(redactedSecret);\n                    }\n                  }}\n                />\n                {clientSecretError ? (\n                  <Text\n                    color=\"red\"\n                    size=\"2\"\n                    id=\"pipes-admin-client-secret-error\"\n                  >\n                    {clientSecretError}\n                  </Text>\n                ) : null}\n              </Flex>\n\n              {configFieldsSection}\n            </>\n          )}\n\n          {showScopesStep && (\n            <>\n              {!isOrgCredentials && enableToggle}\n\n              {!isOrgCredentials && configFieldsSection}\n\n              {scopePool.length > 0 && (\n                <Flex direction=\"column\" gap=\"2\">\n                  <Flex direction=\"column\" gap=\"1\">\n                    <Label>\n                      <Translation\n                        defaultMessage=\"Allowed scopes\"\n                        id=\"kNy90T\"\n                        description=\"Label for the scope override picker\"\n                      />\n                    </Label>\n                    <Text size=\"1\" color=\"gray\">\n                      <Translation\n                        defaultMessage=\"Selected scopes may be requested by your app. Users still authorize access during their own OAuth flow.\"\n                        id=\"E2nzZd\"\n                        description=\"Helper text for the scope override picker\"\n                      />\n                    </Text>\n                  </Flex>\n                  <SearchableSelectList\n                    options={scopePool}\n                    selected={scopes}\n                    getKey={(scope) => scope}\n                    getLabel={(scope) => scope}\n                    onChange={setScopes}\n                    searchPlaceholder={scopeSearchPlaceholder}\n                    emptyLabel={scopeEmptyLabel}\n                  />\n                  {removedDefaultScopes.length > 0 && (\n                    <Callout.Root color=\"amber\" role=\"status\">\n                      <Callout.Icon>\n                        <InfoCircledIcon />\n                      </Callout.Icon>\n                      <Callout.Text>\n                        <Translation\n                          defaultMessage=\"You removed developer-configured scopes: {scopes}. This may break this integration.\"\n                          id=\"1nCuju\"\n                          description=\"Warning naming the developer-configured scopes the admin removed\"\n                          values={{ scopes: removedDefaultScopes.join(\", \") }}\n                        />\n                      </Callout.Text>\n                    </Callout.Root>\n                  )}\n                </Flex>\n              )}\n            </>\n          )}\n        </Flex>\n\n        <Flex justify=\"end\" gap=\"3\" mt=\"5\">\n          <Dialog.Close>\n            <Button variant=\"secondary\">\n              <Translation\n                defaultMessage=\"Cancel\"\n                id=\"hHNj31\"\n                description=\"Cancel button text\"\n              />\n            </Button>\n          </Dialog.Close>\n          {showCredentialsStep ? (\n            <Button\n              type=\"button\"\n              disabled={nextDisabled}\n              onClick={() => {\n                // Run both so each surfaces its own errors before advancing.\n                const credentialsValid = validateCredentials();\n                const configValid = validateConfigFields();\n                if (credentialsValid && configValid) {\n                  setStep(\"scopes\");\n                }\n              }}\n            >\n              <Translation\n                defaultMessage=\"Next\"\n                id=\"VlKGPx\"\n                description=\"Button to advance to the scopes step\"\n              />\n            </Button>\n          ) : (\n            <>\n              {isOrgCredentials && !isApiKeyOnly && (\n                <Button\n                  variant=\"secondary\"\n                  type=\"button\"\n                  onClick={() => setStep(\"credentials\")}\n                >\n                  <Translation\n                    defaultMessage=\"Back\"\n                    id=\"bnFIEs\"\n                    description=\"Button to return to the credentials step\"\n                  />\n                </Button>\n              )}\n              <Button\n                type=\"button\"\n                disabled={\n                  isPending || !hasPendingChanges || requiredConfigMissing\n                }\n                loading={isPending}\n                onClick={handleSubmit}\n              >\n                <Translation\n                  defaultMessage=\"Save\"\n                  id=\"MVKPfz\"\n                  description=\"Button to save organization settings\"\n                />\n              </Button>\n            </>\n          )}\n        </Flex>\n      </Dialog.Content>\n    </Dialog.Root>\n  );\n}\n\nfunction OrgCredentialsButton({\n  integration,\n}: {\n  integration: DataIntegrationConfiguration;\n}) {\n  const [open, setOpen] = useState(false);\n\n  return (\n    <>\n      {open && (\n        <OrgCredentialsDialog\n          integration={integration}\n          open={open}\n          onOpenChange={setOpen}\n        />\n      )}\n      <Button variant=\"secondary\" onClick={() => setOpen(true)}>\n        <Translation\n          defaultMessage=\"Configure\"\n          id=\"ADidi3\"\n          description=\"Button to configure organization credentials\"\n        />\n      </Button>\n    </>\n  );\n}\n\n/**\n * Integrations the current viewer can manage at the organization level. Backed\n * by React Query, so calling it from multiple components doesn't trigger extra\n * fetches. Surfaces errors so the caller can render an error state rather than\n * a misleadingly empty list: a denied permission (`usePermissions` throws\n * `IncorrectPermissionsError`) and a failed `/configurations` fetch both flow\n * through `error`.\n */\nfunction useManageableIntegrations(): {\n  data: DataIntegrationConfiguration[];\n  isLoading: boolean;\n  isError: boolean;\n  error: unknown;\n} {\n  const permission = usePermissions(\"widgets:pipes:manage\");\n  const configurations = useListDataIntegrationConfigurations({\n    query: { enabled: permission.isSuccess },\n  });\n\n  if (permission.isError) {\n    return {\n      data: [],\n      isLoading: false,\n      isError: true,\n      error: permission.error,\n    };\n  }\n  if (configurations.isError) {\n    return {\n      data: [],\n      isLoading: false,\n      isError: true,\n      error: configurations.error,\n    };\n  }\n\n  if (!permission.isSuccess || !configurations.isSuccess) {\n    return {\n      data: [],\n      isLoading: permission.isLoading || configurations.isLoading,\n      isError: false,\n      error: null,\n    };\n  }\n\n  // All manageable providers (not just organization-credential ones): the\n  // tabbed \"Organization settings\" list covers every available provider.\n  return {\n    data: configurations.data.data,\n    isLoading: false,\n    isError: false,\n    error: null,\n  };\n}\n\n/**\n * Integrations the organization owns and shares with everyone, with the\n * organization's configuration and the actions the server allows on them.\n * Gated on the same manage permission as provider settings, but cached\n * separately so the two sections resolve independently. Like the member\n * widget, a failed attempt drops the section rather than leaving skeletons up\n * for the whole retry sequence.\n */\nfunction useOrganizationOwnedIntegrations(): {\n  data: OrganizationDataIntegration[];\n  isLoading: boolean;\n} {\n  const permission = usePermissions(\"widgets:pipes:manage\");\n  const organization = useOrganizationDataIntegrations({\n    query: { enabled: permission.isSuccess },\n  });\n\n  if (organization.isSuccess) {\n    return { data: organization.data.data, isLoading: false };\n  }\n  return {\n    data: [],\n    isLoading:\n      permission.isLoading ||\n      (permission.isSuccess &&\n        organization.isPending &&\n        organization.failureCount === 0),\n  };\n}\n\n/**\n * The organization-owned integration's configuration, in the shape the\n * credentials dialog edits. Provider metadata sits on the integration; the\n * organization's settings sit under `configuration`.\n */\nfunction toConfigurableIntegration(\n  integration: OrganizationDataIntegration,\n): ConfigurableIntegration {\n  const { configuration } = integration;\n  return {\n    name: integration.name,\n    description: integration.description,\n    slug: integration.slug,\n    authMethods: integration.authMethods ?? [\"oauth\"],\n    enabled: configuration.enabled,\n    scopes: configuration.scopes,\n    defaultScopes: configuration.defaultScopes,\n    availableScopes: configuration.availableScopes,\n    credentials: configuration.credentials,\n    configFields: configuration.configFields,\n    config: configuration.config,\n  };\n}\n\nfunction DisconnectSharedConnectionDialog({\n  integrationName,\n  installationId,\n  open,\n  onOpenChange,\n}: {\n  integrationName: string;\n  installationId: string;\n  open: boolean;\n  onOpenChange: (open: boolean) => void;\n}) {\n  const queryClient = useQueryClient();\n  const {\n    mutate: deleteInstallation,\n    error,\n    reset,\n    isPending,\n  } = useDeleteOrganizationDataInstallation({\n    mutation: {\n      onSuccess: () => {\n        onOpenChange(false);\n        queryClient.invalidateQueries({\n          queryKey: getOrganizationDataIntegrationsQueryKey(),\n        });\n        queryClient.invalidateQueries({\n          queryKey: getSharedDataConnectionsQueryKey(),\n        });\n      },\n    },\n  });\n\n  useEffect(() => {\n    if (open) {\n      reset();\n    }\n  }, [open, reset]);\n\n  return (\n    <AlertDialog.Root open={open} onOpenChange={onOpenChange}>\n      <AlertDialog.Content style={{ width: \"80vw\", maxWidth: \"520px\" }}>\n        <AlertDialog.Title>\n          <Translation\n            defaultMessage=\"Disconnect shared connection\"\n            id=\"Xy5Xq1\"\n            description=\"Dialog title for disconnecting an organization-owned connection\"\n          />\n        </AlertDialog.Title>\n        {error && (\n          <Callout.Root my=\"5\" color=\"red\" role=\"alert\">\n            <Callout.Text>\n              <Translation\n                defaultMessage=\"An error occurred while disconnecting this connection. Please refresh the page and try again.\"\n                id=\"q0Yb2E\"\n                description=\"Error message when disconnecting an organization-owned connection fails\"\n              />\n            </Callout.Text>\n          </Callout.Root>\n        )}\n        <AlertDialog.Description>\n          <Translation\n            defaultMessage=\"Are you sure you want to disconnect the {integrationName} account your organization shares with everyone? Members will lose access to it.\"\n            id=\"mS2v8L\"\n            description=\"Confirmation message for disconnecting an organization-owned connection\"\n            values={{\n              integrationName: (\n                <Text as=\"span\" weight=\"bold\">\n                  {integrationName}\n                </Text>\n              ),\n            }}\n          />\n        </AlertDialog.Description>\n        <Flex gap=\"3\" justify=\"end\" mt=\"5\">\n          <AlertDialog.Cancel>\n            <Button variant=\"secondary\">\n              <Translation\n                defaultMessage=\"Cancel\"\n                id=\"hHNj31\"\n                description=\"Cancel button text\"\n              />\n            </Button>\n          </AlertDialog.Cancel>\n          <Button\n            variant=\"destructive\"\n            disabled={isPending}\n            loading={isPending}\n            onClick={() => deleteInstallation({ installationId })}\n          >\n            <Translation\n              defaultMessage=\"Disconnect\"\n              id=\"vMVXQh\"\n              description=\"Button to disconnect an account\"\n            />\n          </Button>\n        </Flex>\n      </AlertDialog.Content>\n    </AlertDialog.Root>\n  );\n}\n\ntype SharedConnectionAuthMethod = DataInstallation[\"auth_method\"];\n\ninterface AdminRowAction {\n  key: string;\n  label: React.ReactNode;\n  onSelect: () => void;\n  /** Rendered as the row's single button; everything else goes in the overflow. */\n  promoted?: boolean;\n  destructive?: boolean;\n  external?: boolean;\n}\n\n/**\n * The sectioned admin row grammar: status inline beside the name, the\n * connector description as the only second line, at most one promoted action\n * and the rest behind an overflow menu.\n */\nfunction AdminRow({\n  integration,\n  status,\n  description = integration.description,\n  dimmed = false,\n  actions,\n}: {\n  integration: DataIntegrationConfiguration | OrganizationDataIntegration;\n  status?: React.ReactNode;\n  description?: React.ReactNode;\n  dimmed?: boolean;\n  actions: AdminRowAction[];\n}) {\n  const translate = useTranslation();\n  const actionsTitle = translate({\n    defaultMessage: \"More actions\",\n    id: \"eR4kYp\",\n    description: \"Accessible title for a provider row's overflow actions menu\",\n  });\n  const promoted = actions.find((action) => action.promoted);\n  const overflow = actions.filter((action) => action !== promoted);\n\n  return (\n    <CardList.Item>\n      <Flex direction=\"row\" justify=\"between\" align=\"center\" gap=\"4\">\n        <Flex gap=\"4\" align=\"center\" style={dimmed ? { opacity: 0.6 } : {}}>\n          <IconPanel color=\"panel\">\n            <DataIntegrationIcon integration={integration} size=\"2\" />\n          </IconPanel>\n          <Flex direction=\"column\" gap=\"1\">\n            <Flex align=\"center\" gap=\"2\" wrap=\"wrap\">\n              <Text size=\"2\" weight=\"bold\" color={dimmed ? \"gray\" : undefined}>\n                {integration.name}\n              </Text>\n              {status}\n            </Flex>\n            {description && (\n              <Text size=\"2\" color=\"gray\">\n                {description}\n              </Text>\n            )}\n          </Flex>\n        </Flex>\n        {(promoted || overflow.length > 0) && (\n          <Flex align=\"center\" gap=\"2\" flexShrink=\"0\">\n            {promoted && (\n              <Button\n                variant={promoted.destructive ? \"destructive\" : \"secondary\"}\n                onClick={promoted.onSelect}\n              >\n                {promoted.label}\n              </Button>\n            )}\n            {overflow.length > 0 && (\n              <DropdownMenu.Root>\n                <DropdownMenu.Trigger>\n                  <IconButton title={actionsTitle}>\n                    <DotsHorizontalIcon />\n                  </IconButton>\n                </DropdownMenu.Trigger>\n                <DropdownMenu.Content align=\"end\">\n                  {overflow.map((action) => (\n                    <DropdownMenu.Item\n                      key={action.key}\n                      variant={action.destructive ? \"destructive\" : undefined}\n                      onClick={action.onSelect}\n                    >\n                      {action.external ? (\n                        <Flex\n                          gap=\"4\"\n                          width=\"100%\"\n                          justify=\"between\"\n                          align=\"center\"\n                        >\n                          {action.label}\n                          <ExternalLinkIcon aria-hidden />\n                        </Flex>\n                      ) : (\n                        action.label\n                      )}\n                    </DropdownMenu.Item>\n                  ))}\n                </DropdownMenu.Content>\n              </DropdownMenu.Root>\n            )}\n          </Flex>\n        )}\n      </Flex>\n    </CardList.Item>\n  );\n}\n\nfunction ConnectedViaStatus({\n  method,\n}: {\n  method: SharedConnectionAuthMethod;\n}) {\n  return (\n    <Status state=\"success\">\n      {method === \"api_key\" ? (\n        <Translation\n          defaultMessage=\"Connected via API key\"\n          id=\"jQLTNe\"\n          description=\"Status text for a connection established with an API key\"\n        />\n      ) : method === \"client_credentials\" ? (\n        <Translation\n          defaultMessage=\"Connected via client credentials\"\n          id=\"hQKIrx\"\n          description=\"Status text for a connection established with client credentials\"\n        />\n      ) : (\n        <Translation\n          defaultMessage=\"Connected via OAuth\"\n          id=\"pJcK_M\"\n          description=\"Status text for a connection established with OAuth\"\n        />\n      )}\n    </Status>\n  );\n}\n\nfunction DisabledForOrganizationStatus() {\n  return (\n    <Status state=\"neutral\">\n      <Translation\n        defaultMessage=\"Disabled for your organization\"\n        id=\"uH2sNc\"\n        description=\"Status for a provider the organization has disabled\"\n      />\n    </Status>\n  );\n}\n\nfunction SharedConnectionAdminStatus({\n  integration,\n  method,\n}: {\n  integration: OrganizationDataIntegration;\n  method: SharedConnectionAuthMethod;\n}) {\n  const { configuration } = integration;\n  const account = integration.connected_accounts[0];\n\n  if (!configuration.enabled) {\n    return configuration.disabledSource === \"developer\" ? (\n      <Status state=\"neutral\">\n        <Translation\n          defaultMessage=\"Disabled by developer\"\n          id=\"k2Jd9W\"\n          description=\"Status text for a shared connection the developer has disabled\"\n        />\n      </Status>\n    ) : (\n      <DisabledForOrganizationStatus />\n    );\n  }\n  if (!account) {\n    return null;\n  }\n  return account.state === \"connected\" ? (\n    <ConnectedViaStatus method={method} />\n  ) : (\n    <Status state=\"warning\">\n      <Translation\n        defaultMessage=\"Needs attention\"\n        id=\"pL5wGd\"\n        description=\"Status for a shared connection that stopped working and needs the admin to fix it\"\n      />\n    </Status>\n  );\n}\n\n/**\n * An organization-owned connection row. Actions are offered strictly per the\n * server's `capabilities`: Configure edits the organization's own credentials\n * and scopes; Connect / Reauthorize run the OAuth flow on the organization's\n * behalf (or open the credential dialog for api_key / client_credentials\n * providers); Disconnect removes the shared account. The fix for a broken\n * connection and the first Connect are promoted; everything else overflows.\n */\nfunction SharedConnectionAdminItem({\n  integration,\n}: {\n  integration: OrganizationDataIntegration;\n}) {\n  const [configureOpen, setConfigureOpen] = useState(false);\n  const [connectOpen, setConnectOpen] = useState(false);\n  const [disconnectOpen, setDisconnectOpen] = useState(false);\n  const { capabilities, configuration } = integration;\n  const account = integration.connected_accounts[0];\n  // A connected account fixes the method; otherwise prefer OAuth (when the\n  // server reports its credentials configured, mirroring how it grants\n  // canConnect), then client credentials, then an API key.\n  const authMethods = integration.authMethods ?? [];\n  const method: SharedConnectionAuthMethod =\n    account?.auth_method ??\n    (authMethods.includes(\"oauth\") && configuration.configured\n      ? \"oauth\"\n      : authMethods.includes(\"client_credentials\")\n        ? \"client_credentials\"\n        : authMethods.includes(\"api_key\")\n          ? \"api_key\"\n          : \"oauth\");\n  const needsAttention = account !== undefined && account.state !== \"connected\";\n\n  const showConnect = account\n    ? method === \"oauth\"\n      ? capabilities.canReauthorize\n      : capabilities.canUpdateCredentials\n    : capabilities.canConnect;\n  const showDisconnect = account !== undefined && capabilities.canDisconnect;\n\n  const connectLabel = !account ? (\n    <Translation\n      defaultMessage=\"Connect\"\n      id=\"quvdFp\"\n      description=\"Button to connect an integration\"\n    />\n  ) : method === \"api_key\" ? (\n    needsAttention ? (\n      <Translation\n        defaultMessage=\"Update API key\"\n        id=\"E7pMj/\"\n        description=\"Menu option to update the API key for a needs-reauthorization installation\"\n      />\n    ) : (\n      <Translation\n        defaultMessage=\"Rotate API key\"\n        id=\"kR7pQz\"\n        description=\"Menu option to rotate an organization-owned API key\"\n      />\n    )\n  ) : method === \"client_credentials\" ? (\n    <Translation\n      defaultMessage=\"Update client credentials\"\n      id=\"vB8dLq\"\n      description=\"Menu option to update an organization-owned integration's client credentials\"\n    />\n  ) : (\n    <Translation\n      defaultMessage=\"Reauthorize\"\n      id=\"0E29F1\"\n      description=\"Menu option to reauthorize an integration\"\n      trailingSpace\n    />\n  );\n\n  const actions: AdminRowAction[] = [];\n  if (showConnect) {\n    actions.push({\n      key: \"connect\",\n      label: connectLabel,\n      onSelect: () => setConnectOpen(true),\n      promoted: !account || needsAttention,\n      external: method === \"oauth\",\n    });\n  }\n  if (capabilities.canConfigure) {\n    actions.push({\n      key: \"configure\",\n      label: (\n        <Translation\n          defaultMessage=\"Configure\"\n          id=\"ADidi3\"\n          description=\"Button to configure organization credentials\"\n        />\n      ),\n      onSelect: () => setConfigureOpen(true),\n      promoted: !account && !showConnect && configuration.enabled,\n    });\n  }\n  if (showDisconnect) {\n    actions.push({\n      key: \"disconnect\",\n      label: (\n        <Translation\n          defaultMessage=\"Disconnect\"\n          id=\"vMVXQh\"\n          description=\"Button to disconnect an account\"\n        />\n      ),\n      onSelect: () => setDisconnectOpen(true),\n      destructive: true,\n    });\n  }\n\n  const needsOrganizationCredentials =\n    configuration.enabled &&\n    !account &&\n    configuration.credentials.credentialsType === \"organization\" &&\n    !configuration.configured;\n\n  return (\n    <>\n      {configureOpen && (\n        <OrgCredentialsDialog\n          integration={toConfigurableIntegration(integration)}\n          owner=\"organization\"\n          open={configureOpen}\n          onOpenChange={setConfigureOpen}\n        />\n      )}\n      {method === \"api_key\" ? (\n        connectOpen && (\n          <ApiKeyDialog\n            integration={integration}\n            installation={account}\n            owner=\"organization\"\n            open={connectOpen}\n            onOpenChange={setConnectOpen}\n          />\n        )\n      ) : method === \"client_credentials\" ? (\n        connectOpen && (\n          <ClientCredentialsDialog\n            integration={integration}\n            installation={account}\n            fields={getUnpinnedInstallationFields(integration)}\n            owner=\"organization\"\n            open={connectOpen}\n            onOpenChange={setConnectOpen}\n          />\n        )\n      ) : (\n        <ConnectDialog\n          integration={integration}\n          fields={getUnpinnedInstallationFields(integration)}\n          owner=\"organization\"\n          open={connectOpen}\n          onOpenChange={setConnectOpen}\n        />\n      )}\n      {account && (\n        <DisconnectSharedConnectionDialog\n          integrationName={integration.name}\n          installationId={account.id}\n          open={disconnectOpen}\n          onOpenChange={setDisconnectOpen}\n        />\n      )}\n      <AdminRow\n        integration={integration}\n        status={\n          <SharedConnectionAdminStatus\n            integration={integration}\n            method={method}\n          />\n        }\n        description={\n          needsOrganizationCredentials ? (\n            <Translation\n              defaultMessage=\"Enter your organization's OAuth client to make this connectable.\"\n              id=\"rQ8mVz\"\n              description=\"Second line of a shared connection row whose organization OAuth credentials have not been entered yet\"\n            />\n          ) : (\n            integration.description\n          )\n        }\n        dimmed={!configuration.enabled}\n        actions={actions}\n      />\n    </>\n  );\n}\n\n/**\n * A provider settings row in the sectioned view: the policy governing what\n * members may connect on their own. Configure is the only action; the status\n * only speaks up when something keeps members from connecting.\n */\nfunction ProviderSettingsItem({\n  integration,\n}: {\n  integration: DataIntegrationConfiguration;\n}) {\n  const [configureOpen, setConfigureOpen] = useState(false);\n  const available = isIntegrationAvailable(integration);\n  const dimmed = !integration.enabled;\n\n  return (\n    <>\n      {configureOpen && (\n        <OrgCredentialsDialog\n          integration={integration}\n          open={configureOpen}\n          onOpenChange={setConfigureOpen}\n        />\n      )}\n      <AdminRow\n        integration={integration}\n        status={\n          !integration.enabled ? (\n            <DisabledForOrganizationStatus />\n          ) : !available ? (\n            <Status state=\"neutral\">\n              <Translation\n                defaultMessage=\"Not configured\"\n                id=\"gV7bXe\"\n                description=\"Status for a provider whose organization credentials have not been entered yet\"\n              />\n            </Status>\n          ) : null\n        }\n        dimmed={dimmed}\n        actions={[\n          {\n            key: \"configure\",\n            label: (\n              <Translation\n                defaultMessage=\"Configure\"\n                id=\"ADidi3\"\n                description=\"Button to configure organization credentials\"\n              />\n            ),\n            onSelect: () => setConfigureOpen(true),\n            promoted: true,\n          },\n        ]}\n      />\n    </>\n  );\n}\n\n/**\n * Returns whether an integration is currently available to members of the\n * organization. All credential types require the effective `enabled` state to\n * be on; organization credentials additionally require a stored credential\n * pair.\n */\nfunction isIntegrationAvailable(\n  integration: DataIntegrationConfiguration,\n): boolean {\n  // API-key integrations have no org-level OAuth credentials; availability is\n  // governed solely by the enabled toggle.\n  if (!(integration.authMethods ?? [\"oauth\"]).includes(\"oauth\")) {\n    return integration.enabled;\n  }\n  const credentials = integration.credentials;\n  // `enabled` is the effective state (org override when present, else the\n  // developer default). Organization credentials additionally require a stored\n  // credential pair before the provider can be connected.\n  if (credentials.credentialsType === \"organization\") {\n    return credentials.hasCredentials && integration.enabled;\n  }\n  return integration.enabled;\n}\n\nfunction getWidgetRootDomProps(\n  state: WidgetRootState,\n  domProps: WidgetRootDomProps,\n) {\n  return getDomProps({\n    ...domProps,\n    isWidgetRoot: true,\n    widgetId: \"pipes-admin\",\n    widgetState: state,\n  });\n}\n\ninterface PipesAdminProps extends WidgetRootDomProps {\n  integrations: DataIntegrationConfiguration[];\n}\n\n/**\n * IT-admin organization configuration list: every manageable provider with its\n * availability status and a Configure action (credentials + scope overrides).\n * Presentational — the client wrapper fetches via `useManageableIntegrations`.\n */\nconst PipesAdmin: React.FC<PipesAdminProps> = ({\n  integrations,\n  ...domProps\n}) => {\n  return (\n    <CardList.Root {...getWidgetRootDomProps(\"resolved\", domProps)}>\n      <PipesAdminItems integrations={integrations} />\n    </CardList.Root>\n  );\n};\n\n/** Provider settings rows: availability status and a Configure action each. */\nfunction PipesAdminItems({\n  integrations,\n}: {\n  integrations: DataIntegrationConfiguration[];\n}) {\n  return (\n    <>\n      {integrations.map((integration) => {\n        const available = isIntegrationAvailable(integration);\n\n        return (\n          <CardList.Item key={integration.id}>\n            <Flex direction=\"row\" justify=\"between\" align=\"center\" gap=\"2\">\n              <Flex gap=\"4\" align=\"center\">\n                <IconPanel color=\"panel\">\n                  <DataIntegrationIcon integration={integration} size=\"2\" />\n                </IconPanel>\n                <Text size=\"2\" weight=\"bold\">\n                  {integration.name}\n                </Text>\n              </Flex>\n              <Flex align=\"center\" gap=\"4\">\n                <Status state={available ? \"success\" : \"neutral\"}>\n                  {available ? (\n                    <Translation\n                      defaultMessage=\"Available\"\n                      id=\"SytbAY\"\n                      description=\"Status when an org connection is available to members\"\n                    />\n                  ) : (\n                    <Translation\n                      defaultMessage=\"Disabled\"\n                      id=\"O4SGtP\"\n                      description=\"Status when an org connection is disabled\"\n                    />\n                  )}\n                </Status>\n                <OrgCredentialsButton integration={integration} />\n              </Flex>\n            </Flex>\n          </CardList.Item>\n        );\n      })}\n    </>\n  );\n}\n\ninterface PipesAdminSectionsProps extends PipesAdminProps {\n  /**\n   * Organization-owned integrations, as returned by the organization\n   * endpoint. Empty while loading, when the organization owns nothing, and\n   * when the request failed.\n   */\n  sharedIntegrations: OrganizationDataIntegration[];\n  /** Renders the shared section as skeleton rows while it resolves. */\n  isSharedLoading?: boolean;\n  /** Names the owning organization in the shared section's description. */\n  organizationName?: string;\n}\n\n/**\n * The sectioned administrator experience: the connections the organization\n * owns and shares with everyone, then the provider settings governing what\n * members may connect on their own. The two lanes come from different\n * endpoints and are never merged — the same provider can legitimately appear\n * in both, once as the organization's own account and once as the policy for\n * members' personal accounts.\n *\n * The shared section is omitted when the organization owns nothing or the\n * request failed, leaving provider settings on their own.\n */\nconst PipesAdminSections: React.FC<PipesAdminSectionsProps> = ({\n  integrations,\n  sharedIntegrations,\n  isSharedLoading,\n  organizationName,\n  ...domProps\n}) => {\n  return (\n    <Flex\n      direction=\"column\"\n      gap=\"5\"\n      {...getWidgetRootDomProps(\"resolved\", domProps)}\n    >\n      {(isSharedLoading || sharedIntegrations.length > 0) && (\n        <PipesSection\n          title={\n            <Translation\n              defaultMessage=\"Shared connections\"\n              id=\"Fcd-bK\"\n              description=\"Heading for the section listing connections the organization owns\"\n            />\n          }\n          description={\n            organizationName ? (\n              <Translation\n                defaultMessage=\"Accounts {organizationName} owns and shares with everyone.\"\n                id=\"7U8P0v\"\n                description=\"Description of the shared connections section, naming the organization\"\n                values={{ organizationName }}\n              />\n            ) : (\n              <Translation\n                defaultMessage=\"Accounts your organization owns and shares with everyone.\"\n                id=\"72FEZi\"\n                description=\"Description of the shared connections section when the organization name is unknown\"\n              />\n            )\n          }\n        >\n          <CardList.Root>\n            {isSharedLoading ? (\n              <PipesAdminSkeletonItems count={2} />\n            ) : (\n              sharedIntegrations.map((integration) => (\n                <SharedConnectionAdminItem\n                  key={integration.id}\n                  integration={integration}\n                />\n              ))\n            )}\n          </CardList.Root>\n        </PipesSection>\n      )}\n      <PipesSection\n        title={\n          <Translation\n            defaultMessage=\"Provider settings\"\n            id=\"Zq7Lr3\"\n            description=\"Heading for the section of provider settings governing members' own connections\"\n          />\n        }\n        description={\n          <Translation\n            defaultMessage=\"What members of this organization can connect to, and with which scopes.\"\n            id=\"c3Vb8N\"\n            description=\"Description of the provider settings section\"\n          />\n        }\n      >\n        <CardList.Root>\n          {integrations.length > 0 ? (\n            integrations.map((integration) => (\n              <ProviderSettingsItem\n                key={integration.id}\n                integration={integration}\n              />\n            ))\n          ) : (\n            <PipesEmptyItem isFiltered={false} />\n          )}\n        </CardList.Root>\n      </PipesSection>\n    </Flex>\n  );\n};\n\nfunction PipesAdminSkeletonItems({ count }: { count: number }) {\n  return Array.from({ length: count }).map((_, index) => (\n    <CardList.Item key={index}>\n      <Flex direction=\"row\" justify=\"between\" align=\"center\" gap=\"2\">\n        <Flex gap=\"4\" align=\"center\">\n          <Skeleton>\n            <IconPanel>\n              <ProviderIcon provider=\"google\" size=\"2\" />\n            </IconPanel>\n          </Skeleton>\n          <Skeleton>\n            <Text size=\"2\" weight=\"bold\">\n              <Translation\n                defaultMessage=\"Google Drive\"\n                id=\"g11OOu\"\n                description=\"Placeholder text for loading state\"\n              />\n            </Text>\n          </Skeleton>\n        </Flex>\n        <Skeleton>\n          <Button variant=\"secondary\" disabled>\n            <Translation\n              defaultMessage=\"Configure\"\n              id=\"ADidi3\"\n              description=\"Button to configure organization credentials\"\n            />\n          </Button>\n        </Skeleton>\n      </Flex>\n    </CardList.Item>\n  ));\n}\n\ninterface PipesAdminLoadingProps extends WidgetRootDomProps {\n  count: number;\n}\n\nconst PipesAdminLoading: React.FC<PipesAdminLoadingProps> = ({\n  count,\n  ...domProps\n}) => {\n  return (\n    <CardList.Root {...getWidgetRootDomProps(\"loading\", domProps)}>\n      <PipesAdminSkeletonItems count={count} />\n    </CardList.Root>\n  );\n};\n\ninterface PipesAdminErrorProps extends WidgetRootDomProps {\n  error: unknown;\n}\n\nconst PipesAdminError: React.FC<PipesAdminErrorProps> = ({\n  error,\n  ...domProps\n}) => {\n  return (\n    <Card size=\"2\" {...getWidgetRootDomProps(\"error\", domProps)}>\n      <GenericError error={error} />\n    </Card>\n  );\n};\n\nexport type {\n  PipesAdminProps,\n  PipesAdminSectionsProps,\n  PipesAdminLoadingProps,\n  PipesAdminErrorProps,\n};\nexport {\n  PipesAdmin,\n  PipesAdminSections,\n  PipesAdminLoading,\n  PipesAdminError,\n  useManageableIntegrations,\n  useOrganizationOwnedIntegrations,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoEI;AAnEJ,oBAA2D;AAE3D,mBAAoC;AACpC,yBAIO;AACP,eAA0B;AAC1B,uBAAyB;AACzB,mCAAoC;AACpC,2BAA6B;AAC7B,sBAUO;AACP,wBAA0B;AAC1B,oCAAqC;AACrC,oBAAuB;AACvB,sBAaO;AACP,yBAA+B;AAC/B,2BAA6B;AAC7B,mBAQO;AACP,6BAA+B;AAC/B,mBAAiE;AACjE,yBAA4B;AAC5B,6BAA+B;AAC/B,6BAAsD;AAEtD,SAAS,iBAAiB,EAAE,MAAM,GAAsB;AACtD,QAAM,gBAAY,uCAAe;AAEjC,QAAM,YAAY,UAAU;AAAA,IAC1B,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AAED,SACE,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,gDAAC,yBACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,IACA,4CAAC,6BAAS,OAAc,OAAO,WAAW;AAAA,KAC5C;AAEJ;AA4BA,SAAS,uBAAuB,OAAwB,WAAuB;AAC7E,QAAM,kBAAc,mCAAe;AACnC,QAAM,WAAO,uDAAsC;AAAA,IACjD,UAAU;AAAA,MACR,WAAW,MAAM;AACf,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,8DAA6C;AAAA,QACzD,CAAC;AAGD,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,+CAA8B;AAAA,QAC1C,CAAC;AACD,kBAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC;AACD,QAAM,mBAAe,mEAAkD;AAAA,IACrE,UAAU;AAAA,MACR,WAAW,MAAM;AACf,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,yDAAwC;AAAA,QACpD,CAAC;AACD,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,kDAAiC;AAAA,QAC7C,CAAC;AACD,kBAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,UAAU,iBAAiB,eAAe;AACnD;AAEA,SAAS,qBAAqB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAKG;AACD,QAAM,cAAc,YAAY;AAChC,QAAM,iBAAiB,YAAY;AACnC,QAAM,mBAAmB,YAAY,oBAAoB;AAMzD,QAAM,qBAAiB,4CAAoB,YAAY,oBAAoB;AAC3E,QAAM,CAAC,UAAU,WAAW,QAAI,uBAAS,YAAY,aAAa,EAAE;AACpE,QAAM,CAAC,cAAc,eAAe,QAAI,uBAAS,cAAc;AAC/D,QAAM,CAAC,SAAS,UAAU,QAAI,uBAAS,YAAY,OAAO;AAC1D,QAAM,CAAC,QAAQ,SAAS,QAAI,uBAAmB,YAAY,UAAU,CAAC,CAAC;AAGvE,QAAM,CAAC,MAAM,OAAO,QAAI,uBAAmC,aAAa;AACxE,QAAM,CAAC,eAAe,gBAAgB,QAAI,uBAAwB,IAAI;AACtE,QAAM,CAAC,mBAAmB,oBAAoB,QAAI;AAAA,IAChD;AAAA,EACF;AASA,QAAM,eAAe,oBAChB,YAAY,gBAAgB,CAAC,GAC3B,OAAO,CAAC,UAAU,MAAM,UAAU,iBAAiB,CAAC,MAAM,MAAM,EAChE,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,MAAM,EAAE,SAAS,EAAE,IACjD,CAAC;AACL,QAAM,CAAC,cAAc,eAAe,QAAI;AAAA,IACtC,MAAM;AACJ,YAAM,OAA+B,CAAC;AACtC,iBAAW,SAAS,YAAY,gBAAgB,CAAC,GAAG;AAClD,YAAI,MAAM,UAAU,cAAe;AAGnC,YAAI,MAAM,OAAQ;AAClB,cAAM,QAAQ,YAAY,SAAS,MAAM,GAAG;AAC5C,YAAI,OAAO,UAAU,UAAU;AAC7B,eAAK,MAAM,GAAG,IAAI;AAAA,QACpB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,CAAC,cAAc,eAAe,QAAI,uBAEtC,CAAC,CAAC;AAEJ,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF,IAAI,uBAAuB,OAAO,MAAM,aAAa,KAAK,CAAC;AAE3D,QAAM,gBAAY,uCAAe;AAOjC,QAAM,gBAAgB,YAAY;AAClC,QAAM,kBAAkB,YAAY,UAAU,CAAC;AAC/C,QAAM,YAAY,mBACd;AAAA,IACE,GAAG,oBAAI,IAAI;AAAA,MACT,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG,YAAY;AAAA,IACjB,CAAC;AAAA,EACH,IACA,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,iBAAiB,GAAG,aAAa,CAAC,CAAC;AAEvD,QAAM,uBAAuB,cAAc;AAAA,IACzC,CAAC,UAAU,CAAC,OAAO,SAAS,KAAK;AAAA,EACnC;AAEA,QAAM,eAAe,UAAU;AAAA,IAC7B,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,gBAAgB,UAAU;AAAA,IAC9B,gBACE;AAAA,IACF,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AAED,QAAM,sBAAsB,UAAU;AAAA,IACpC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA,EAC3C,CAAC;AACD,QAAM,0BAA0B,UAAU;AAAA,IACxC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA,EAC3C,CAAC;AACD,QAAM,yBAAyB,UAAU;AAAA,IACvC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,kBAAkB,UAAU;AAAA,IAChC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,wBAAwB,UAAU;AAAA,IACtC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aACE;AAAA,EACJ,CAAC;AACD,QAAM,uBAAuB,UAAU;AAAA,IACrC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aACE;AAAA,EACJ,CAAC;AACD,QAAM,wBAAwB,UAAU;AAAA,IACtC,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aACE;AAAA,EACJ,CAAC;AAGD,QAAM,uBAAuB,MAAe;AAC1C,UAAM,aAA4C,CAAC;AACnD,QAAI,QAAQ;AACZ,eAAW,SAAS,cAAc;AAChC,YAAM,SAAS,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AACnD,UAAI,MAAM,YAAY,CAAC,OAAO;AAC5B,mBAAW,MAAM,GAAG,IAAI;AACxB,gBAAQ;AACR;AAAA,MACF;AACA,UAAI,SAAS,MAAM,SAAS;AAC1B,YAAI,UAAU;AACd,YAAI;AACF,oBAAU,IAAI,OAAO,MAAM,OAAO,EAAE,KAAK,KAAK;AAAA,QAChD,QAAQ;AAEN,oBAAU;AAAA,QACZ;AACA,YAAI,CAAC,SAAS;AACZ,qBAAW,MAAM,GAAG,IAAI;AACxB,kBAAQ;AACR;AAAA,QACF;AAAA,MACF;AACA,iBAAW,MAAM,GAAG,IAAI;AAAA,IAC1B;AACA,oBAAgB,UAAU;AAC1B,WAAO;AAAA,EACT;AAMA,QAAM,mBAAmB,IAAI;AAAA,KAC1B,YAAY,gBAAgB,CAAC,GAC3B,OAAO,CAAC,UAAU,MAAM,MAAM,EAC9B,IAAI,CAAC,UAAU,MAAM,GAAG;AAAA,EAC7B;AAEA,QAAM,qBAAqB,MAAM;AAG/B,UAAM,SAAiC,CAAC;AACxC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAY,UAAU,CAAC,CAAC,GAAG;AACnE,UAAI,OAAO,UAAU,YAAY,CAAC,iBAAiB,IAAI,GAAG,GAAG;AAC3D,eAAO,GAAG,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,eAAW,SAAS,cAAc;AAChC,YAAM,SAAS,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AACnD,UAAI,OAAO;AACT,eAAO,MAAM,GAAG,IAAI;AAAA,MACtB,OAAO;AACL,eAAO,OAAO,MAAM,GAAG;AAAA,MACzB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAMA,QAAM,sBAAsB,MAAe;AACzC,qBAAiB,IAAI;AACrB,yBAAqB,IAAI;AACzB,UAAM,YAAY,SAAS,KAAK;AAChC,UAAM,kBAAkB,sBAAkB,yCAAiB,YAAY;AACvE,QAAI,QAAQ;AACZ,QAAI,CAAC,WAAW;AACd,uBAAiB,qBAAqB;AACtC,cAAQ;AAAA,IACV;AACA,QAAI,iBAAiB;AAEnB,UAAI,aAAa,eAAe,YAAY,aAAa,KAAK;AAC5D,6BAAqB,qBAAqB;AAC1C,gBAAQ;AAAA,MACV;AAAA,IACF,WAAW,CAAC,aAAa,KAAK,GAAG;AAC/B,2BAAqB,qBAAqB;AAC1C,cAAQ;AAAA,IACV;AACA,WAAO;AAAA,EACT;AAIA,QAAM,eAAe,EAAE,YAAY,eAAe,CAAC,OAAO,GAAG;AAAA,IAC3D;AAAA,EACF;AAEA,QAAM,eAAe,MAAM;AAGzB,QAAI,CAAC,oBAAoB,CAAC,qBAAqB,GAAG;AAChD;AAAA,IACF;AACA,UAAM,gBACJ,aAAa,SAAS,IAAI,EAAE,QAAQ,mBAAmB,EAAE,IAAI;AAE/D,QAAI,cAAc;AAChB,qBAAe;AAAA,QACb,MAAM,YAAY;AAAA,QAClB,MAAM,EAAE,SAAS,GAAG,cAAc;AAAA,MACpC,CAAC;AACD;AAAA,IACF;AACA,QAAI,CAAC,kBAAkB;AAErB,qBAAe;AAAA,QACb,MAAM,YAAY;AAAA,QAClB,MAAM,EAAE,SAAS,QAAQ,GAAG,cAAc;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AAEA,UAAM,kBAAkB,sBAAkB,yCAAiB,YAAY;AACvE,QAAI,iBAAiB;AACnB,qBAAe;AAAA,QACb,MAAM,YAAY;AAAA,QAClB,MAAM,EAAE,SAAS,QAAQ,GAAG,cAAc;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AACA,mBAAe;AAAA,MACb,MAAM,YAAY;AAAA,MAClB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW,SAAS,KAAK;AAAA,QACzB,eAAe,aAAa,KAAK;AAAA,QACjC;AAAA,QACA,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,sBACJ,CAAC,gBAAgB,oBAAoB,SAAS;AAChD,QAAM,iBACJ,CAAC,iBAAiB,CAAC,oBAAoB,SAAS;AAMlD,QAAM,gBAAgB,YAAY,UAAU,CAAC;AAC7C,QAAM,gBACJ,OAAO,WAAW,cAAc,UAChC,OAAO,KAAK,CAAC,UAAU,CAAC,cAAc,SAAS,KAAK,CAAC;AACvD,QAAM,iBAAiB,YAAY,YAAY;AAC/C,QAAM,qBACJ,qBACC,SAAS,KAAK,OAAO,YAAY,aAAa,OAC5C,aAAa,KAAK,MAAM,MAAM,KAAC,yCAAiB,YAAY;AACjE,QAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAM,WAAW,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AAGrD,UAAM,WACJ,OAAO,YAAY,SAAS,MAAM,GAAG,MAAM,WACtC,YAAY,OAAO,MAAM,GAAG,EAAa,KAAK,IAC/C;AACN,WAAO,YAAY;AAAA,EACrB,CAAC;AACD,QAAM,oBACJ,kBAAkB,iBAAiB,sBAAsB;AAK3D,QAAM,wBAAwB,aAAa;AAAA,IACzC,CAAC,UAAU,MAAM,YAAY,EAAE,aAAa,MAAM,GAAG,KAAK,IAAI,KAAK;AAAA,EACrE;AACA,QAAM,qBACJ,qBAAqB,CAAC,SAAS,KAAK,KAAK,CAAC,aAAa,KAAK;AAC9D,QAAM,eAAe,sBAAsB;AAE3C,QAAM,eACJ,6CAAC,sBAAK,OAAM,UAAS,KAAI,KACvB;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,SAAS;AAAA,QACT,iBAAiB;AAAA,QACjB,cAAY;AAAA;AAAA,IACd;AAAA,IACA,4CAAC,sBAAK,MAAK,KAAI,QAAO,QACpB;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,IACA,4CAAC,yBAAQ,SAAS,eAChB,sDAAC,sCAAgB,eAAW,MAAC,OAAO,EAAE,OAAO,gBAAgB,GAAG,GAClE;AAAA,KACF;AAGF,QAAM,sBACJ,aAAa,SAAS,IAClB,aAAa,IAAI,CAAC,UAAU;AAC1B,UAAM,UAAU,sBAAsB,MAAM,GAAG;AAC/C,UAAM,UAAU,GAAG,OAAO;AAC1B,UAAM,gBAAgB,GAAG,OAAO;AAChC,UAAMA,SAAQ,aAAa,MAAM,GAAG;AACpC,UAAM,UAAU,MAAM,SAAS,gCAAgB;AAC/C,UAAM,cACJ,CAAC,MAAM,cAAc,gBAAgB,MAAMA,SAAQ,UAAU,IAAI,EAC9D,OAAO,OAAO,EACd,KAAK,GAAG,KAAK;AAClB,WACE,6CAAC,sBAAqB,WAAU,UAAS,KAAI,KAC3C;AAAA,kDAAC,yBAAM,SAAS,SAAU,gBAAM,OAAM;AAAA,MACrC,MAAM,cACL,4CAAC,sBAAK,OAAM,QAAO,MAAK,KAAI,IAAI,eAAe,IAAG,KAC/C,gBAAM,aACT,IACE;AAAA,MACJ;AAAA,QAAC;AAAA;AAAA,UACC,IAAI;AAAA,UACJ,OAAO,aAAa,MAAM,GAAG,KAAK;AAAA,UAClC,aAAa,MAAM;AAAA,UACnB,cAAa;AAAA,UACb,UAAU,MAAM,YAAY;AAAA,UAC5B,gBAAc,CAAC,CAACA,UAAS;AAAA,UACzB,oBAAkB;AAAA,UAClB,UAAU,CAAC,UAAU;AACnB,4BAAgB,CAAC,UAAU;AAAA,cACzB,GAAG;AAAA,cACH,CAAC,MAAM,GAAG,GAAG,MAAM,OAAO;AAAA,YAC5B,EAAE;AACF,gBAAIA,QAAO;AACT,8BAAgB,CAAC,UAAU;AAAA,gBACzB,GAAG;AAAA,gBACH,CAAC,MAAM,GAAG,GAAG;AAAA,cACf,EAAE;AAAA,YACJ;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACCA,SACC,4CAAC,sBAAK,OAAM,OAAM,MAAK,KAAI,IAAI,SAC5B,UAAAA,QACH,IACE;AAAA,SAhCK,MAAM,GAiCjB;AAAA,EAEJ,CAAC,IACD;AAEN,SACE,4CAAC,uBAAO,MAAP,EAAY,MAAY,cACvB,uDAAC,uBAAO,SAAP,EACC;AAAA,gDAAC,uBAAO,OAAP,EAAa,MAAK,KAAI,QAAO,QAC5B;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA,QACZ,QAAQ,EAAE,iBAAiB,YAAY,KAAK;AAAA;AAAA,IAC9C,GACF;AAAA,IACC,YAAY,eACX,4CAAC,sBAAK,MAAK,KAAI,OAAM,QAAO,IAAG,KAAI,IAAG,KACnC,sBAAY,aACf;AAAA,IAGD,SACC,4CAAC,sBAAQ,MAAR,EAAa,IAAG,KAAI,OAAM,OAAM,MAAK,SACpC,sDAAC,sBAAQ,MAAR,EACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF,GACF;AAAA,IAGF,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAAI,IAAG,KACjC;AAAA,sBACC,4EACG;AAAA;AAAA,QACA;AAAA,SACH;AAAA,MAGD,uBACC,4EACG;AAAA;AAAA,QAED,4CAAC,oBAAiB,OAAO,YAAY,aAAa;AAAA,QAElD,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,sDAAC,yBACC;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA,cACZ,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA;AAAA,UAC3C,GACF;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,cAAa;AAAA,cACb,aAAa;AAAA,cACb,gBAAc,CAAC,CAAC,iBAAiB;AAAA,cACjC,oBACE,gBAAgB,gCAAgC;AAAA,cAElD,UAAU,CAAC,UAAU;AACnB,4BAAY,MAAM,OAAO,KAAK;AAC9B,iCAAiB,IAAI;AAAA,cACvB;AAAA;AAAA,UACF;AAAA,UACC,gBACC,4CAAC,sBAAK,OAAM,OAAM,MAAK,KAAI,IAAG,+BAC3B,yBACH,IACE;AAAA,WACN;AAAA,QAEA,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,sDAAC,yBACC;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA,cACZ,QAAQ,EAAE,cAAc,YAAY,KAAK;AAAA;AAAA,UAC3C,GACF;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,cAAa;AAAA,cAGb,UAAM,yCAAiB,YAAY,IAAI,SAAS;AAAA,cAChD,aAAa;AAAA,cACb,gBAAc,CAAC,CAAC,qBAAqB;AAAA,cACrC,oBACE,oBACI,oCACA;AAAA,cAEN,UAAU,CAAC,UAAU;AACnB,gCAAgB,MAAM,OAAO,KAAK;AAClC,qCAAqB,IAAI;AAAA,cAC3B;AAAA,cACA,SAAS,MAAM;AACb,wBAAI,yCAAiB,YAAY,GAAG;AAClC,kCAAgB,EAAE;AAAA,gBACpB;AAAA,cACF;AAAA,cACA,QAAQ,MAAM;AACZ,oBAAI,iBAAiB,IAAI;AACvB,kCAAgB,cAAc;AAAA,gBAChC;AAAA,cACF;AAAA;AAAA,UACF;AAAA,UACC,oBACC;AAAA,YAAC;AAAA;AAAA,cACC,OAAM;AAAA,cACN,MAAK;AAAA,cACL,IAAG;AAAA,cAEF;AAAA;AAAA,UACH,IACE;AAAA,WACN;AAAA,QAEC;AAAA,SACH;AAAA,MAGD,kBACC,4EACG;AAAA,SAAC,oBAAoB;AAAA,QAErB,CAAC,oBAAoB;AAAA,QAErB,UAAU,SAAS,KAClB,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,uDAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,wDAAC,yBACC;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd,GACF;AAAA,YACA,4CAAC,sBAAK,MAAK,KAAI,OAAM,QACnB;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd,GACF;AAAA,aACF;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAS;AAAA,cACT,UAAU;AAAA,cACV,QAAQ,CAAC,UAAU;AAAA,cACnB,UAAU,CAAC,UAAU;AAAA,cACrB,UAAU;AAAA,cACV,mBAAmB;AAAA,cACnB,YAAY;AAAA;AAAA,UACd;AAAA,UACC,qBAAqB,SAAS,KAC7B,6CAAC,sBAAQ,MAAR,EAAa,OAAM,SAAQ,MAAK,UAC/B;AAAA,wDAAC,sBAAQ,MAAR,EACC,sDAAC,sCAAgB,GACnB;AAAA,YACA,4CAAC,sBAAQ,MAAR,EACC;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA,gBACZ,QAAQ,EAAE,QAAQ,qBAAqB,KAAK,IAAI,EAAE;AAAA;AAAA,YACpD,GACF;AAAA,aACF;AAAA,WAEJ;AAAA,SAEJ;AAAA,OAEJ;AAAA,IAEA,6CAAC,sBAAK,SAAQ,OAAM,KAAI,KAAI,IAAG,KAC7B;AAAA,kDAAC,uBAAO,OAAP,EACC,sDAAC,0BAAO,SAAQ,aACd;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd,GACF,GACF;AAAA,MACC,sBACC;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU;AAAA,UACV,SAAS,MAAM;AAEb,kBAAM,mBAAmB,oBAAoB;AAC7C,kBAAM,cAAc,qBAAqB;AACzC,gBAAI,oBAAoB,aAAa;AACnC,sBAAQ,QAAQ;AAAA,YAClB;AAAA,UACF;AAAA,UAEA;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA;AAAA,UACd;AAAA;AAAA,MACF,IAEA,4EACG;AAAA,4BAAoB,CAAC,gBACpB;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,SAAS,MAAM,QAAQ,aAAa;AAAA,YAEpC;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA;AAAA,QACF;AAAA,QAEF;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UACE,aAAa,CAAC,qBAAqB;AAAA,YAErC,SAAS;AAAA,YACT,SAAS;AAAA,YAET;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA;AAAA,QACF;AAAA,SACF;AAAA,OAEJ;AAAA,KACF,GACF;AAEJ;AAEA,SAAS,qBAAqB;AAAA,EAC5B;AACF,GAEG;AACD,QAAM,CAAC,MAAM,OAAO,QAAI,uBAAS,KAAK;AAEtC,SACE,4EACG;AAAA,YACC;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,cAAc;AAAA;AAAA,IAChB;AAAA,IAEF,4CAAC,0BAAO,SAAQ,aAAY,SAAS,MAAM,QAAQ,IAAI,GACrD;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,KACF;AAEJ;AAUA,SAAS,4BAKP;AACA,QAAM,iBAAa,uCAAe,sBAAsB;AACxD,QAAM,qBAAiB,sDAAqC;AAAA,IAC1D,OAAO,EAAE,SAAS,WAAW,UAAU;AAAA,EACzC,CAAC;AAED,MAAI,WAAW,SAAS;AACtB,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO,WAAW;AAAA,IACpB;AAAA,EACF;AACA,MAAI,eAAe,SAAS;AAC1B,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO,eAAe;AAAA,IACxB;AAAA,EACF;AAEA,MAAI,CAAC,WAAW,aAAa,CAAC,eAAe,WAAW;AACtD,WAAO;AAAA,MACL,MAAM,CAAC;AAAA,MACP,WAAW,WAAW,aAAa,eAAe;AAAA,MAClD,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAIA,SAAO;AAAA,IACL,MAAM,eAAe,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AACF;AAUA,SAAS,mCAGP;AACA,QAAM,iBAAa,uCAAe,sBAAsB;AACxD,QAAM,mBAAe,iDAAgC;AAAA,IACnD,OAAO,EAAE,SAAS,WAAW,UAAU;AAAA,EACzC,CAAC;AAED,MAAI,aAAa,WAAW;AAC1B,WAAO,EAAE,MAAM,aAAa,KAAK,MAAM,WAAW,MAAM;AAAA,EAC1D;AACA,SAAO;AAAA,IACL,MAAM,CAAC;AAAA,IACP,WACE,WAAW,aACV,WAAW,aACV,aAAa,aACb,aAAa,iBAAiB;AAAA,EACpC;AACF;AAOA,SAAS,0BACP,aACyB;AACzB,QAAM,EAAE,cAAc,IAAI;AAC1B,SAAO;AAAA,IACL,MAAM,YAAY;AAAA,IAClB,aAAa,YAAY;AAAA,IACzB,MAAM,YAAY;AAAA,IAClB,aAAa,YAAY,eAAe,CAAC,OAAO;AAAA,IAChD,SAAS,cAAc;AAAA,IACvB,QAAQ,cAAc;AAAA,IACtB,eAAe,cAAc;AAAA,IAC7B,iBAAiB,cAAc;AAAA,IAC/B,aAAa,cAAc;AAAA,IAC3B,cAAc,cAAc;AAAA,IAC5B,QAAQ,cAAc;AAAA,EACxB;AACF;AAEA,SAAS,iCAAiC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKG;AACD,QAAM,kBAAc,mCAAe;AACnC,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,EACF,QAAI,uDAAsC;AAAA,IACxC,UAAU;AAAA,MACR,WAAW,MAAM;AACf,qBAAa,KAAK;AAClB,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,yDAAwC;AAAA,QACpD,CAAC;AACD,oBAAY,kBAAkB;AAAA,UAC5B,cAAU,kDAAiC;AAAA,QAC7C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AAED,8BAAU,MAAM;AACd,QAAI,MAAM;AACR,YAAM;AAAA,IACR;AAAA,EACF,GAAG,CAAC,MAAM,KAAK,CAAC;AAEhB,SACE,4CAAC,4BAAY,MAAZ,EAAiB,MAAY,cAC5B,uDAAC,4BAAY,SAAZ,EAAoB,OAAO,EAAE,OAAO,QAAQ,UAAU,QAAQ,GAC7D;AAAA,gDAAC,4BAAY,OAAZ,EACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF;AAAA,IACC,SACC,4CAAC,sBAAQ,MAAR,EAAa,IAAG,KAAI,OAAM,OAAM,MAAK,SACpC,sDAAC,sBAAQ,MAAR,EACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF,GACF;AAAA,IAEF,4CAAC,4BAAY,aAAZ,EACC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA,QACZ,QAAQ;AAAA,UACN,iBACE,4CAAC,sBAAK,IAAG,QAAO,QAAO,QACpB,2BACH;AAAA,QAEJ;AAAA;AAAA,IACF,GACF;AAAA,IACA,6CAAC,sBAAK,KAAI,KAAI,SAAQ,OAAM,IAAG,KAC7B;AAAA,kDAAC,4BAAY,QAAZ,EACC,sDAAC,0BAAO,SAAQ,aACd;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd,GACF,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,UAAU;AAAA,UACV,SAAS;AAAA,UACT,SAAS,MAAM,mBAAmB,EAAE,eAAe,CAAC;AAAA,UAEpD;AAAA,YAAC;AAAA;AAAA,cACC,gBAAe;AAAA,cACf,IAAG;AAAA,cACH,aAAY;AAAA;AAAA,UACd;AAAA;AAAA,MACF;AAAA,OACF;AAAA,KACF,GACF;AAEJ;AAmBA,SAAS,SAAS;AAAA,EAChB;AAAA,EACA;AAAA,EACA,cAAc,YAAY;AAAA,EAC1B,SAAS;AAAA,EACT;AACF,GAMG;AACD,QAAM,gBAAY,uCAAe;AACjC,QAAM,eAAe,UAAU;AAAA,IAC7B,gBAAgB;AAAA,IAChB,IAAI;AAAA,IACJ,aAAa;AAAA,EACf,CAAC;AACD,QAAM,WAAW,QAAQ,KAAK,CAAC,WAAW,OAAO,QAAQ;AACzD,QAAM,WAAW,QAAQ,OAAO,CAAC,WAAW,WAAW,QAAQ;AAE/D,SACE,4CAAC,SAAS,MAAT,EACC,uDAAC,sBAAK,WAAU,OAAM,SAAQ,WAAU,OAAM,UAAS,KAAI,KACzD;AAAA,iDAAC,sBAAK,KAAI,KAAI,OAAM,UAAS,OAAO,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,GAC/D;AAAA,kDAAC,+BAAU,OAAM,SACf,sDAAC,oDAAoB,aAA0B,MAAK,KAAI,GAC1D;AAAA,MACA,6CAAC,sBAAK,WAAU,UAAS,KAAI,KAC3B;AAAA,qDAAC,sBAAK,OAAM,UAAS,KAAI,KAAI,MAAK,QAChC;AAAA,sDAAC,sBAAK,MAAK,KAAI,QAAO,QAAO,OAAO,SAAS,SAAS,QACnD,sBAAY,MACf;AAAA,UACC;AAAA,WACH;AAAA,QACC,eACC,4CAAC,sBAAK,MAAK,KAAI,OAAM,QAClB,uBACH;AAAA,SAEJ;AAAA,OACF;AAAA,KACE,YAAY,SAAS,SAAS,MAC9B,6CAAC,sBAAK,OAAM,UAAS,KAAI,KAAI,YAAW,KACrC;AAAA,kBACC;AAAA,QAAC;AAAA;AAAA,UACC,SAAS,SAAS,cAAc,gBAAgB;AAAA,UAChD,SAAS,SAAS;AAAA,UAEjB,mBAAS;AAAA;AAAA,MACZ;AAAA,MAED,SAAS,SAAS,KACjB,6CAAC,6BAAa,MAAb,EACC;AAAA,oDAAC,6BAAa,SAAb,EACC,sDAAC,8BAAW,OAAO,cACjB,sDAAC,yCAAmB,GACtB,GACF;AAAA,QACA,4CAAC,6BAAa,SAAb,EAAqB,OAAM,OACzB,mBAAS,IAAI,CAAC,WACb;AAAA,UAAC,6BAAa;AAAA,UAAb;AAAA,YAEC,SAAS,OAAO,cAAc,gBAAgB;AAAA,YAC9C,SAAS,OAAO;AAAA,YAEf,iBAAO,WACN;AAAA,cAAC;AAAA;AAAA,gBACC,KAAI;AAAA,gBACJ,OAAM;AAAA,gBACN,SAAQ;AAAA,gBACR,OAAM;AAAA,gBAEL;AAAA,yBAAO;AAAA,kBACR,4CAAC,uCAAiB,eAAW,MAAC;AAAA;AAAA;AAAA,YAChC,IAEA,OAAO;AAAA;AAAA,UAfJ,OAAO;AAAA,QAiBd,CACD,GACH;AAAA,SACF;AAAA,OAEJ;AAAA,KAEJ,GACF;AAEJ;AAEA,SAAS,mBAAmB;AAAA,EAC1B;AACF,GAEG;AACD,SACE,4CAAC,wBAAO,OAAM,WACX,qBAAW,YACV;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,IACE,WAAW,uBACb;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,IAEA;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,GAEJ;AAEJ;AAEA,SAAS,gCAAgC;AACvC,SACE,4CAAC,wBAAO,OAAM,WACZ;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,GACF;AAEJ;AAEA,SAAS,4BAA4B;AAAA,EACnC;AAAA,EACA;AACF,GAGG;AACD,QAAM,EAAE,cAAc,IAAI;AAC1B,QAAM,UAAU,YAAY,mBAAmB,CAAC;AAEhD,MAAI,CAAC,cAAc,SAAS;AAC1B,WAAO,cAAc,mBAAmB,cACtC,4CAAC,wBAAO,OAAM,WACZ;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF,IAEA,4CAAC,iCAA8B;AAAA,EAEnC;AACA,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,UAAU,cACvB,4CAAC,sBAAmB,QAAgB,IAEpC,4CAAC,wBAAO,OAAM,WACZ;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,GACF;AAEJ;AAUA,SAAS,0BAA0B;AAAA,EACjC;AACF,GAEG;AACD,QAAM,CAAC,eAAe,gBAAgB,QAAI,uBAAS,KAAK;AACxD,QAAM,CAAC,aAAa,cAAc,QAAI,uBAAS,KAAK;AACpD,QAAM,CAAC,gBAAgB,iBAAiB,QAAI,uBAAS,KAAK;AAC1D,QAAM,EAAE,cAAc,cAAc,IAAI;AACxC,QAAM,UAAU,YAAY,mBAAmB,CAAC;AAIhD,QAAM,cAAc,YAAY,eAAe,CAAC;AAChD,QAAM,SACJ,SAAS,gBACR,YAAY,SAAS,OAAO,KAAK,cAAc,aAC5C,UACA,YAAY,SAAS,oBAAoB,IACvC,uBACA,YAAY,SAAS,SAAS,IAC5B,YACA;AACV,QAAM,iBAAiB,YAAY,UAAa,QAAQ,UAAU;AAElE,QAAM,cAAc,UAChB,WAAW,UACT,aAAa,iBACb,aAAa,uBACf,aAAa;AACjB,QAAM,iBAAiB,YAAY,UAAa,aAAa;AAE7D,QAAM,eAAe,CAAC,UACpB;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,IACE,WAAW,YACb,iBACE;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,IAEA;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,IAEA,WAAW,uBACb;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA;AAAA,EACd,IAEA;AAAA,IAAC;AAAA;AAAA,MACC,gBAAe;AAAA,MACf,IAAG;AAAA,MACH,aAAY;AAAA,MACZ,eAAa;AAAA;AAAA,EACf;AAGF,QAAM,UAA4B,CAAC;AACnC,MAAI,aAAa;AACf,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA,MACL,OAAO;AAAA,MACP,UAAU,MAAM,eAAe,IAAI;AAAA,MACnC,UAAU,CAAC,WAAW;AAAA,MACtB,UAAU,WAAW;AAAA,IACvB,CAAC;AAAA,EACH;AACA,MAAI,aAAa,cAAc;AAC7B,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA,MACL,OACE;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd;AAAA,MAEF,UAAU,MAAM,iBAAiB,IAAI;AAAA,MACrC,UAAU,CAAC,WAAW,CAAC,eAAe,cAAc;AAAA,IACtD,CAAC;AAAA,EACH;AACA,MAAI,gBAAgB;AAClB,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA,MACL,OACE;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd;AAAA,MAEF,UAAU,MAAM,kBAAkB,IAAI;AAAA,MACtC,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAEA,QAAM,+BACJ,cAAc,WACd,CAAC,WACD,cAAc,YAAY,oBAAoB,kBAC9C,CAAC,cAAc;AAEjB,SACE,4EACG;AAAA,qBACC;AAAA,MAAC;AAAA;AAAA,QACC,aAAa,0BAA0B,WAAW;AAAA,QAClD,OAAM;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA;AAAA,IAChB;AAAA,IAED,WAAW,YACV,eACE;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,cAAc;AAAA,QACd,OAAM;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA;AAAA,IAChB,IAEA,WAAW,uBACb,eACE;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,cAAc;AAAA,QACd,YAAQ,4CAA8B,WAAW;AAAA,QACjD,OAAM;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA;AAAA,IAChB,IAGF;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,YAAQ,4CAA8B,WAAW;AAAA,QACjD,OAAM;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA;AAAA,IAChB;AAAA,IAED,WACC;AAAA,MAAC;AAAA;AAAA,QACC,iBAAiB,YAAY;AAAA,QAC7B,gBAAgB,QAAQ;AAAA,QACxB,MAAM;AAAA,QACN,cAAc;AAAA;AAAA,IAChB;AAAA,IAEF;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,QACE;AAAA,UAAC;AAAA;AAAA,YACC;AAAA,YACA;AAAA;AAAA,QACF;AAAA,QAEF,aACE,+BACE;AAAA,UAAC;AAAA;AAAA,YACC,gBAAe;AAAA,YACf,IAAG;AAAA,YACH,aAAY;AAAA;AAAA,QACd,IAEA,YAAY;AAAA,QAGhB,QAAQ,CAAC,cAAc;AAAA,QACvB;AAAA;AAAA,IACF;AAAA,KACF;AAEJ;AAOA,SAAS,qBAAqB;AAAA,EAC5B;AACF,GAEG;AACD,QAAM,CAAC,eAAe,gBAAgB,QAAI,uBAAS,KAAK;AACxD,QAAM,YAAY,uBAAuB,WAAW;AACpD,QAAM,SAAS,CAAC,YAAY;AAE5B,SACE,4EACG;AAAA,qBACC;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,MAAM;AAAA,QACN,cAAc;AAAA;AAAA,IAChB;AAAA,IAEF;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,QACE,CAAC,YAAY,UACX,4CAAC,iCAA8B,IAC7B,CAAC,YACH,4CAAC,wBAAO,OAAM,WACZ;AAAA,UAAC;AAAA;AAAA,YACC,gBAAe;AAAA,YACf,IAAG;AAAA,YACH,aAAY;AAAA;AAAA,QACd,GACF,IACE;AAAA,QAEN;AAAA,QACA,SAAS;AAAA,UACP;AAAA,YACE,KAAK;AAAA,YACL,OACE;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA,YAEF,UAAU,MAAM,iBAAiB,IAAI;AAAA,YACrC,UAAU;AAAA,UACZ;AAAA,QACF;AAAA;AAAA,IACF;AAAA,KACF;AAEJ;AAQA,SAAS,uBACP,aACS;AAGT,MAAI,EAAE,YAAY,eAAe,CAAC,OAAO,GAAG,SAAS,OAAO,GAAG;AAC7D,WAAO,YAAY;AAAA,EACrB;AACA,QAAM,cAAc,YAAY;AAIhC,MAAI,YAAY,oBAAoB,gBAAgB;AAClD,WAAO,YAAY,kBAAkB,YAAY;AAAA,EACnD;AACA,SAAO,YAAY;AACrB;AAEA,SAAS,sBACP,OACA,UACA;AACA,aAAO,0BAAY;AAAA,IACjB,GAAG;AAAA,IACH,cAAc;AAAA,IACd,UAAU;AAAA,IACV,aAAa;AAAA,EACf,CAAC;AACH;AAWA,MAAM,aAAwC,CAAC;AAAA,EAC7C;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE,4CAAC,SAAS,MAAT,EAAe,GAAG,sBAAsB,YAAY,QAAQ,GAC3D,sDAAC,mBAAgB,cAA4B,GAC/C;AAEJ;AAGA,SAAS,gBAAgB;AAAA,EACvB;AACF,GAEG;AACD,SACE,2EACG,uBAAa,IAAI,CAAC,gBAAgB;AACjC,UAAM,YAAY,uBAAuB,WAAW;AAEpD,WACE,4CAAC,SAAS,MAAT,EACC,uDAAC,sBAAK,WAAU,OAAM,SAAQ,WAAU,OAAM,UAAS,KAAI,KACzD;AAAA,mDAAC,sBAAK,KAAI,KAAI,OAAM,UAClB;AAAA,oDAAC,+BAAU,OAAM,SACf,sDAAC,oDAAoB,aAA0B,MAAK,KAAI,GAC1D;AAAA,QACA,4CAAC,sBAAK,MAAK,KAAI,QAAO,QACnB,sBAAY,MACf;AAAA,SACF;AAAA,MACA,6CAAC,sBAAK,OAAM,UAAS,KAAI,KACvB;AAAA,oDAAC,wBAAO,OAAO,YAAY,YAAY,WACpC,sBACC;AAAA,UAAC;AAAA;AAAA,YACC,gBAAe;AAAA,YACf,IAAG;AAAA,YACH,aAAY;AAAA;AAAA,QACd,IAEA;AAAA,UAAC;AAAA;AAAA,YACC,gBAAe;AAAA,YACf,IAAG;AAAA,YACH,aAAY;AAAA;AAAA,QACd,GAEJ;AAAA,QACA,4CAAC,wBAAqB,aAA0B;AAAA,SAClD;AAAA,OACF,KA5BkB,YAAY,EA6BhC;AAAA,EAEJ,CAAC,GACH;AAEJ;AA0BA,MAAM,qBAAwD,CAAC;AAAA,EAC7D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,KAAI;AAAA,MACH,GAAG,sBAAsB,YAAY,QAAQ;AAAA,MAE5C;AAAA,4BAAmB,mBAAmB,SAAS,MAC/C;AAAA,UAAC;AAAA;AAAA,YACC,OACE;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA,YAEF,aACE,mBACE;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA,gBACZ,QAAQ,EAAE,iBAAiB;AAAA;AAAA,YAC7B,IAEA;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA,YAIJ,sDAAC,SAAS,MAAT,EACE,4BACC,4CAAC,2BAAwB,OAAO,GAAG,IAEnC,mBAAmB,IAAI,CAAC,gBACtB;AAAA,cAAC;AAAA;AAAA,gBAEC;AAAA;AAAA,cADK,YAAY;AAAA,YAEnB,CACD,GAEL;AAAA;AAAA,QACF;AAAA,QAEF;AAAA,UAAC;AAAA;AAAA,YACC,OACE;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA,YAEF,aACE;AAAA,cAAC;AAAA;AAAA,gBACC,gBAAe;AAAA,gBACf,IAAG;AAAA,gBACH,aAAY;AAAA;AAAA,YACd;AAAA,YAGF,sDAAC,SAAS,MAAT,EACE,uBAAa,SAAS,IACrB,aAAa,IAAI,CAAC,gBAChB;AAAA,cAAC;AAAA;AAAA,gBAEC;AAAA;AAAA,cADK,YAAY;AAAA,YAEnB,CACD,IAED,4CAAC,+BAAe,YAAY,OAAO,GAEvC;AAAA;AAAA,QACF;AAAA;AAAA;AAAA,EACF;AAEJ;AAEA,SAAS,wBAAwB,EAAE,MAAM,GAAsB;AAC7D,SAAO,MAAM,KAAK,EAAE,QAAQ,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,UAC3C,4CAAC,SAAS,MAAT,EACC,uDAAC,sBAAK,WAAU,OAAM,SAAQ,WAAU,OAAM,UAAS,KAAI,KACzD;AAAA,iDAAC,sBAAK,KAAI,KAAI,OAAM,UAClB;AAAA,kDAAC,4BACC,sDAAC,+BACC,sDAAC,qCAAa,UAAS,UAAS,MAAK,KAAI,GAC3C,GACF;AAAA,MACA,4CAAC,4BACC,sDAAC,sBAAK,MAAK,KAAI,QAAO,QACpB;AAAA,QAAC;AAAA;AAAA,UACC,gBAAe;AAAA,UACf,IAAG;AAAA,UACH,aAAY;AAAA;AAAA,MACd,GACF,GACF;AAAA,OACF;AAAA,IACA,4CAAC,4BACC,sDAAC,0BAAO,SAAQ,aAAY,UAAQ,MAClC;AAAA,MAAC;AAAA;AAAA,QACC,gBAAe;AAAA,QACf,IAAG;AAAA,QACH,aAAY;AAAA;AAAA,IACd,GACF,GACF;AAAA,KACF,KA3BkB,KA4BpB,CACD;AACH;AAMA,MAAM,oBAAsD,CAAC;AAAA,EAC3D;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE,4CAAC,SAAS,MAAT,EAAe,GAAG,sBAAsB,WAAW,QAAQ,GAC1D,sDAAC,2BAAwB,OAAc,GACzC;AAEJ;AAMA,MAAM,kBAAkD,CAAC;AAAA,EACvD;AAAA,EACA,GAAG;AACL,MAAM;AACJ,SACE,4CAAC,sBAAK,MAAK,KAAK,GAAG,sBAAsB,SAAS,QAAQ,GACxD,sDAAC,qCAAa,OAAc,GAC9B;AAEJ;","names":["error"]}

package/dist/cjs/lib/pipes-admin.d.cts

@@ -1,9 +1,9 @@
-import { DataIntegrationConfiguration } from '../api/endpoint.cjs';
+import * as React from 'react';
+import { DataIntegrationConfiguration, OrganizationDataIntegration } from '../api/endpoint.cjs';
 import { WidgetRootDomProps } from './utils.cjs';
 import '@tanstack/react-query';
 import '../api/widgets-api-client.cjs';
 import './elements.cjs';
-import 'react';
 import '@radix-ui/themes';
 import '@radix-ui/themes/props';
 import '../dialog-CGXwsXVe.cjs';
@@ -29,6 +29,18 @@ declare function useManageableIntegrations(): {
     isError: boolean;
     error: unknown;
 };
+/**
+ * Integrations the organization owns and shares with everyone, with the
+ * organization's configuration and the actions the server allows on them.
+ * Gated on the same manage permission as provider settings, but cached
+ * separately so the two sections resolve independently. Like the member
+ * widget, a failed attempt drops the section rather than leaving skeletons up
+ * for the whole retry sequence.
+ */
+declare function useOrganizationOwnedIntegrations(): {
+    data: OrganizationDataIntegration[];
+    isLoading: boolean;
+};
 interface PipesAdminProps extends WidgetRootDomProps {
     integrations: DataIntegrationConfiguration[];
 }
@@ -38,6 +50,30 @@ interface PipesAdminProps extends WidgetRootDomProps {
  * Presentational — the client wrapper fetches via `useManageableIntegrations`.
  */
 declare const PipesAdmin: React.FC<PipesAdminProps>;
+interface PipesAdminSectionsProps extends PipesAdminProps {
+    /**
+     * Organization-owned integrations, as returned by the organization
+     * endpoint. Empty while loading, when the organization owns nothing, and
+     * when the request failed.
+     */
+    sharedIntegrations: OrganizationDataIntegration[];
+    /** Renders the shared section as skeleton rows while it resolves. */
+    isSharedLoading?: boolean;
+    /** Names the owning organization in the shared section's description. */
+    organizationName?: string;
+}
+/**
+ * The sectioned administrator experience: the connections the organization
+ * owns and shares with everyone, then the provider settings governing what
+ * members may connect on their own. The two lanes come from different
+ * endpoints and are never merged — the same provider can legitimately appear
+ * in both, once as the organization's own account and once as the policy for
+ * members' personal accounts.
+ *
+ * The shared section is omitted when the organization owns nothing or the
+ * request failed, leaving provider settings on their own.
+ */
+declare const PipesAdminSections: React.FC<PipesAdminSectionsProps>;
 interface PipesAdminLoadingProps extends WidgetRootDomProps {
     count: number;
 }
@@ -47,4 +83,4 @@ interface PipesAdminErrorProps extends WidgetRootDomProps {
 }
 declare const PipesAdminError: React.FC<PipesAdminErrorProps>;
 
-export { PipesAdmin, PipesAdminError, type PipesAdminErrorProps, PipesAdminLoading, type PipesAdminLoadingProps, type PipesAdminProps, useManageableIntegrations };
+export { PipesAdmin, PipesAdminError, type PipesAdminErrorProps, PipesAdminLoading, type PipesAdminLoadingProps, type PipesAdminProps, PipesAdminSections, type PipesAdminSectionsProps, useManageableIntegrations, useOrganizationOwnedIntegrations };