crewly 1.20.192 → 1.20.194

package/dist/backend/backend/src/services/people/grant-sharing.js

@@ -0,0 +1,143 @@
+/**
+ * Connector grant ownership and sharing (issue #968) — the shapes the
+ * backend exchanges with Cloud, their validation, and the message an agent
+ * gets when the person it acts for may not use a grant.
+ *
+ * Cloud holds each grant's `authorizedBy` (the person who connected it) and
+ * `sharing`, and decides on every credential request. A grant with neither
+ * was connected before per-person access: it is the owner's, shared with all
+ * members (what it was before). The owner is `owner` or any of their Slack ids.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/grant-sharing
+ */
+import { PEOPLE_CONSTANTS } from '../../constants.js';
+import { getPeopleDirectory, isPersonId } from './people-directory.service.js';
+/** A sharing/ownership edit is invalid. */
+export class GrantSharingError extends Error {
+}
+/**
+ * Validate a sharing setting from the dashboard.
+ *
+ * @param raw - Candidate (untrusted)
+ * @returns Clean sharing
+ * @throws GrantSharingError when invalid
+ */
+export function validateSharing(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        throw new GrantSharingError('sharing must be an object');
+    const r = raw;
+    if (typeof r.mode !== 'string' || !PEOPLE_CONSTANTS.SHARING_MODES.includes(r.mode)) {
+        throw new GrantSharingError('sharing.mode must be owner, people or members');
+    }
+    if (r.mode !== 'people')
+        return { mode: r.mode };
+    if (!Array.isArray(r.people))
+        throw new GrantSharingError('sharing.people must be a list of people');
+    const people = [];
+    for (const id of r.people) {
+        if (!isPersonId(id))
+            throw new GrantSharingError(`Not a person: ${String(id)}`);
+        if (!people.includes(id))
+            people.push(id);
+    }
+    return { mode: 'people', people };
+}
+/**
+ * Validate an owner change (a person id).
+ *
+ * @param raw - Candidate
+ * @returns The person id
+ * @throws GrantSharingError when invalid
+ */
+export function validateAuthorizedBy(raw) {
+    if (!isPersonId(raw))
+        throw new GrantSharingError('authorizedBy must be a person (a Slack user id, or owner)');
+    // The owner is always sent as `owner`, whichever Slack id named them.
+    try {
+        return getPeopleDirectory().canonicalId(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+/**
+ * Whether a person may use a grant — the same rule Cloud applies (used for
+ * the dashboard's preview and tests).
+ *
+ * @param grant - Ownership (missing fields = the owner's alone)
+ * @param actor - The person
+ * @param isOwner - Whether a person id is the instance owner
+ * @returns True when allowed
+ */
+export function mayUseGrant(grant, actor, isOwner) {
+    const legacy = grant.authorizedBy === undefined && grant.sharing === undefined;
+    const authorizedBy = grant.authorizedBy ?? PEOPLE_CONSTANTS.OWNER_ID;
+    if (actor.id === authorizedBy)
+        return true;
+    if (isOwner(authorizedBy) && (actor.role === 'owner' || isOwner(actor.id)))
+        return true;
+    const sharing = grant.sharing ?? { mode: legacy ? 'members' : 'owner' };
+    if (sharing.mode === 'members')
+        return actor.role === 'owner' || actor.role === 'member';
+    if (sharing.mode === 'people')
+        return (sharing.people ?? []).includes(actor.id);
+    return false;
+}
+/**
+ * The message an agent gets when the person it acts for may not use a grant,
+ * e.g. "Info's Google Calendar isn't shared with you. Ask Info for what you
+ * need, or ask the Crewly owner to share it in Connections."
+ *
+ * @param what - What was asked for ("Google Calendar", "Canva")
+ * @param authorizedBy - Person who owns the grant, when Cloud said
+ * @returns English message
+ */
+export function notPermittedMessage(what, authorizedBy) {
+    let name = null;
+    let ownerGrant = false;
+    if (authorizedBy) {
+        try {
+            const people = getPeopleDirectory();
+            ownerGrant = people.isOwner(authorizedBy);
+            const display = people.displayName(authorizedBy);
+            name = display === 'the owner' ? null : display;
+        }
+        catch {
+            name = null;
+        }
+    }
+    if (ownerGrant) {
+        const who = name ?? 'the owner';
+        return `${name ? `${name}'s` : "The owner's"} ${what} isn't shared with you. Ask ${who} to share it in Connections.`;
+    }
+    if (name)
+        return `${name}'s ${what} isn't shared with you. Ask ${name} for what you need, or ask the Crewly owner to share it in Connections.`;
+    return `This ${what} isn't shared with you. Ask the Crewly owner to share it in Connections.`;
+}
+/** Display names of Google products, for refusals. */
+export const GOOGLE_PRODUCT_LABELS = {
+    gmail: 'Gmail',
+    calendar: 'Google Calendar',
+    drive: 'Google Drive',
+    docs: 'Google Docs',
+    sheets: 'Google Sheets',
+    slides: 'Google Slides',
+};
+/**
+ * Read Cloud's refusal from a failed response body.
+ *
+ * @param body - Parsed body (untrusted)
+ * @returns `{ authorizedBy }` when it is a `not_permitted` refusal, else null
+ */
+export function readNotPermitted(body) {
+    if (!body || typeof body !== 'object')
+        return null;
+    const b = body;
+    if (b.code !== PEOPLE_CONSTANTS.NOT_PERMITTED_CODE && b.error !== PEOPLE_CONSTANTS.NOT_PERMITTED_CODE)
+        return null;
+    const details = b.details && typeof b.details === 'object' ? b.details : {};
+    return typeof details.authorizedBy === 'string' ? { authorizedBy: details.authorizedBy } : {};
+}
+//# sourceMappingURL=grant-sharing.js.map

package/dist/backend/backend/src/services/people/grant-sharing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-sharing.js","sourceRoot":"","sources":["../../../../../../backend/src/services/people/grant-sharing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAkB/E,2CAA2C;AAC3C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC3C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;IACpH,MAAM,CAAC,GAAG,GAA2C,CAAC;IACtD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,iBAAiB,CAAC,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAA4B,EAAE,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,CAAC,CAAC;IACrG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,2DAA2D,CAAC,CAAC;IAC/G,sEAAsE;IACtE,IAAI,CAAC;QACJ,OAAO,kBAAkB,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAC;IACZ,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,KAAqB,EAAE,KAAiC,EAAE,OAAgC;IACrH,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;IAC/E,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IACrE,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,OAAO,GAAiB,KAAK,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACtF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;IACzF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,YAA4B;IAC7E,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,YAAY,EAAE,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,GAAG,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,GAAG,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,+BAA+B,GAAG,8BAA8B,CAAC;IACtH,CAAC;IACD,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,MAAM,IAAI,+BAA+B,IAAI,yEAAyE,CAAC;IAC/I,OAAO,QAAQ,IAAI,0EAA0E,CAAC;AAC/F,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAqC;IACtE,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,iBAAiB;IAC3B,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,eAAe;CACvB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAA8D,CAAC;IACzE,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,kBAAkB,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACnH,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,OAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5G,OAAO,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/F,CAAC"}

package/dist/backend/backend/src/services/people/people-directory.service.d.ts

@@ -0,0 +1,239 @@
+/**
+ * People directory — the humans who use this Crewly instance, keyed by their
+ * Slack user id, with a role (issue #968).
+ *
+ * - **owner**: the instance owner. Their person id is always `owner` —
+ *   what this backend stores and sends Cloud. Any Slack id known to be the
+ *   owner maps to it: the Slack installer (Cloud's workspace config, i.e. the
+ *   Cloud account's Slack identity), `SLACK_OWNER_USER_ID` (installs whose
+ *   Slack credentials come from env), and Slack ids the owner marked as their
+ *   own in Settings › People. Always shown, never removable.
+ * - **member**: a person in the workspace. A Slack user who messages an agent
+ *   is added as a member automatically.
+ * - **guest**: someone the owner marked as a guest. Guests are not included
+ *   when a connector is shared with "all members".
+ *
+ * Bots (the master bot, agent bots) are never people: they are not added,
+ * and rows a bot left in `people.json` are removed when the file is loaded.
+ *
+ * Stored in `<CREWLY_HOME>/people.json`. Writes are atomic.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/people-directory.service
+ */
+/** A person's role on this instance. */
+export type PersonRole = 'owner' | 'member' | 'guest';
+/** One person. */
+export interface Person {
+    /** Slack user id (`U0123…`), or `owner` for the instance owner */
+    id: string;
+    /** The owner's known Slack user ids (owner row only, for display) */
+    slackUserIds?: string[];
+    /** Display name */
+    name?: string;
+    role: PersonRole;
+    /** `auto`: added when they first messaged an agent; `owner`: added or edited by the owner */
+    source: 'auto' | 'owner';
+    createdAt: string;
+    updatedAt: string;
+}
+/** An invalid edit. */
+export declare class PeopleDirectoryError extends Error {
+}
+/** Injectable dependencies. */
+export interface PeopleDirectoryDeps {
+    /** Store file (default `<CREWLY_HOME>/people.json`) */
+    filePath?: string;
+    /** The instance owner's Slack user id, when known (the Slack installer) */
+    getOwnerSlackUserId?: () => string | null | undefined;
+    /** Whether a Slack user id is a bot (the master bot or an agent's bot) */
+    isBot?: (slackUserId: string) => boolean;
+    /** Environment (default `process.env`), for `SLACK_OWNER_USER_ID` */
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+}
+/**
+ * Whether a value is a valid role.
+ *
+ * @param value - Candidate
+ * @returns True for owner / member / guest
+ */
+export declare function isPersonRole(value: unknown): value is PersonRole;
+/**
+ * Whether a value is a person id this directory accepts: a Slack user id, or
+ * the owner placeholder.
+ *
+ * @param value - Candidate
+ * @returns True when valid
+ */
+export declare function isPersonId(value: unknown): value is string;
+/** The people directory. */
+export declare class PeopleDirectoryService {
+    private readonly filePathOverride?;
+    private readonly installerSlackUserId;
+    private readonly botCheck;
+    private readonly env;
+    private readonly now;
+    /**
+     * @param deps - Store path, owner and bot lookups, environment, clock
+     */
+    constructor(deps?: PeopleDirectoryDeps);
+    /** @returns Store path (resolved per call so CREWLY_HOME changes apply) */
+    private filePath;
+    /**
+     * The owner's person id. Always `owner` — what is stored and sent Cloud.
+     *
+     * @returns `owner`
+     */
+    ownerId(): string;
+    /**
+     * Every Slack id known to be the owner: the Slack installer,
+     * `SLACK_OWNER_USER_ID`, and ids the owner marked as their own.
+     *
+     * @returns Slack user ids (deduplicated, maybe empty)
+     */
+    ownerSlackUserIds(): string[];
+    /**
+     * Whether a person id is the instance owner.
+     *
+     * @param id - Person id
+     * @returns True for `owner` or any Slack id known to be the owner
+     */
+    isOwner(id: string | null | undefined): boolean;
+    /**
+     * The id to store and send for a person: `owner` for the owner (by either
+     * spelling), else the id as given.
+     *
+     * @param id - Person id
+     * @returns Canonical person id
+     */
+    canonicalId(id: string): string;
+    /**
+     * Whether a Slack user id is a bot (never a person).
+     *
+     * @param id - Slack user id
+     * @returns True for the master bot or an agent's bot
+     */
+    isBot(id: string | null | undefined): boolean;
+    /**
+     * Everyone, owner first, then by name.
+     *
+     * @returns People (copies)
+     */
+    list(): Person[];
+    /**
+     * One person.
+     *
+     * @param id - Person id
+     * @returns The person, or null when unknown
+     */
+    get(id: string): Person | null;
+    /**
+     * A person's role. Unknown people are members (the default for a Slack
+     * user in the workspace).
+     *
+     * @param id - Person id
+     * @returns Role
+     */
+    roleOf(id: string): PersonRole;
+    /**
+     * How to name a person to others.
+     *
+     * @param id - Person id
+     * @returns Their name, "the owner" for an owner without one, else the id
+     */
+    displayName(id: string): string;
+    /**
+     * Record a Slack user who messaged an agent (added as a member the first
+     * time; a missing name is filled in). Never changes a role.
+     *
+     * @param id - Slack user id
+     * @param name - Their display name, when known
+     */
+    noteSeen(id: string, name?: string): void;
+    /**
+     * Add or edit a person (owner action). Giving a Slack id the `owner` role
+     * marks it as the owner's own Slack account (for installs that cannot
+     * tell, e.g. Slack credentials from env): it then maps to `owner`.
+     *
+     * @param id - Slack user id
+     * @param patch - Name and/or role
+     * @returns The person
+     * @throws PeopleDirectoryError on an invalid id or role, a bot, or when changing the owner's role
+     */
+    upsert(id: string, patch: {
+        name?: unknown;
+        role?: unknown;
+    }): Person;
+    /**
+     * Remove a person (they come back as a member if they message an agent again).
+     *
+     * @param id - Person id
+     * @returns True when removed
+     * @throws PeopleDirectoryError for the owner
+     */
+    remove(id: string): boolean;
+    /**
+     * Record a Slack id as the owner's own and drop any member row it had.
+     *
+     * @param id - Slack user id
+     */
+    private markOwnerSlackId;
+    /**
+     * The stored file, without bots. Bot rows found on disk (written by an
+     * earlier version that recorded agent posts as people) are removed from
+     * the file here (best effort).
+     *
+     * @returns The stored file (empty when missing or unreadable)
+     */
+    private read;
+    /** @returns The stored file as on disk (valid rows only; empty when missing or unreadable) */
+    private readRaw;
+    /**
+     * Write atomically.
+     *
+     * @param file - Contents
+     */
+    private write;
+}
+/**
+ * Trim and bound a display name.
+ *
+ * @param name - Raw name
+ * @returns Clean name, or undefined when empty
+ */
+export declare function cleanPersonName(name: string | null | undefined): string | undefined;
+/**
+ * Record a Slack user who messaged an agent, with their name (best effort,
+ * never throws).
+ *
+ * @param slackUserId - Slack user id
+ * @param name - Display name, when known
+ */
+export declare function notePerson(slackUserId: string, name?: string | null): void;
+/**
+ * Tell the directory how to find the owner's Slack id (wired once Slack is up).
+ *
+ * @param lookup - Lookup, or null
+ */
+export declare function setPeopleOwnerLookup(lookup: (() => string | null | undefined) | null): void;
+/**
+ * Tell the directory how to recognise Crewly's bots (wired once Slack is up).
+ *
+ * @param lookup - Whether a Slack user id is a bot, or null
+ */
+export declare function setPeopleBotLookup(lookup: ((slackUserId: string) => boolean) | null): void;
+/**
+ * The backend's people directory.
+ *
+ * @returns Singleton
+ */
+export declare function getPeopleDirectory(): PeopleDirectoryService;
+/**
+ * Replace the singleton (tests).
+ *
+ * @param service - Instance, or null to reset
+ */
+export declare function setPeopleDirectoryForTesting(service: PeopleDirectoryService | null): void;
+//# sourceMappingURL=people-directory.service.d.ts.map

package/dist/backend/backend/src/services/people/people-directory.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"people-directory.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/people/people-directory.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH,wCAAwC;AACxC,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtD,kBAAkB;AAClB,MAAM,WAAW,MAAM;IACtB,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,6FAA6F;IAC7F,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAUD,uBAAuB;AACvB,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAElD,+BAA+B;AAC/B,MAAM,WAAW,mBAAmB;IACnC,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACtD,0EAA0E;IAC1E,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE1D;AAED,4BAA4B;AAC5B,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAsB;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC;;OAEG;gBACS,IAAI,GAAE,mBAAwB;IAqB1C,2EAA2E;IAC3E,OAAO,CAAC,QAAQ;IAIhB;;;;OAIG;IACH,OAAO,IAAI,MAAM;IAIjB;;;;;OAKG;IACH,iBAAiB,IAAI,MAAM,EAAE;IAY7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAK/C;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAI/B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAI7C;;;;OAIG;IACH,IAAI,IAAI,MAAM,EAAE;IAuBhB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAK9B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAO9B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAM/B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAiCzC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM;IA+BrE;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAU3B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;;;;OAMG;IACH,OAAO,CAAC,IAAI;IAaZ,8FAA8F;IAC9F,OAAO,CAAC,OAAO;IAkBf;;;;OAIG;IACH,OAAO,CAAC,KAAK;CAOb;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAInF;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAM1E;AAMD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,IAAI,CAE3F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,CAE1F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,sBAAsB,CAM3D;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAEzF"}