latchkey 3.2.2 → 3.4.0

package/dist/src/services/ngrok.js

@@ -0,0 +1,129 @@
+/**
+ * ngrok service implementation.
+ *
+ * ngrok issues personal API keys from its dashboard, and the key value is
+ * revealed exactly once at creation time (like Linear). We sign the user into
+ * the dashboard, create a fresh API key on their behalf, and read its value
+ * from the one-time reveal dialog.
+ *
+ * Every ngrok API request must carry two headers: the bearer API key and a
+ * constant `ngrok-version` header (https://ngrok.com/docs/api/#authentication).
+ * We therefore store the credential as raw curl arguments that inject both, so
+ * a plain `latchkey curl` to the ngrok API works without the caller having to
+ * remember the version header.
+ */
+import { RawCurlCredentials } from '../apiCredentials/base.js';
+import { typeLikeHuman } from '../playwrightUtils.js';
+import { Service, BrowserFollowupServiceSession, FollowupWork, LoginFailedError, } from './core/base.js';
+const DEFAULT_TIMEOUT_MS = 8000;
+// The ngrok REST API. Every request must also send the `ngrok-version` header.
+const NGROK_API_BASE_URL = 'https://api.ngrok.com/';
+const NGROK_API_VERSION = '2';
+const NGROK_LOGIN_URL = 'https://dashboard.ngrok.com/login';
+// Navigating here opens the "New API Key" dialog directly; the secret is shown
+// once in that dialog after creation.
+const NGROK_NEW_API_KEY_URL = 'https://dashboard.ngrok.com/api-keys/new';
+// Dashboard host, and the first path segments served before the user is signed
+// in. A dashboard document response on any *other* path only happens once login
+// has succeeded, so we use it as the login-complete signal.
+const NGROK_DASHBOARD_HOST = 'dashboard.ngrok.com';
+const NGROK_PRE_LOGIN_PATH_PATTERN = /^\/(login|signup|signin|auth|sso|oauth|verify|mfa)/i;
+/**
+ * Build the stored credential: a bearer API key plus the mandatory
+ * `ngrok-version` header, expressed as raw curl arguments so both are injected
+ * into every request.
+ */
+function ngrokCredentials(apiKey) {
+    return new RawCurlCredentials([
+        '-H',
+        `Authorization: Bearer ${apiKey}`,
+        '-H',
+        `ngrok-version: ${NGROK_API_VERSION}`,
+    ]);
+}
+class NgrokServiceSession extends BrowserFollowupServiceSession {
+    followupWork = FollowupWork.CreateApiToken;
+    isLoggedIn = false;
+    onResponse(response) {
+        if (this.isLoggedIn) {
+            return;
+        }
+        // The dashboard is a client-side app; after a successful sign-in the browser
+        // lands on a dashboard document that is not one of the auth pages (works the
+        // same whether the user signs in with a password or an SSO provider, since
+        // the final redirect target is always a dashboard page).
+        if (response.request().resourceType() !== 'document') {
+            return;
+        }
+        let url;
+        try {
+            url = new URL(response.url());
+        }
+        catch {
+            return;
+        }
+        if (url.hostname !== NGROK_DASHBOARD_HOST) {
+            return;
+        }
+        if (NGROK_PRE_LOGIN_PATH_PATTERN.test(url.pathname)) {
+            return;
+        }
+        if (response.status() >= 200 && response.status() < 400) {
+            this.isLoggedIn = true;
+        }
+    }
+    isLoginComplete() {
+        return this.isLoggedIn;
+    }
+    async performBrowserFollowup(context, _oldCredentials) {
+        const page = context.pages()[0];
+        if (!page) {
+            throw new LoginFailedError('No page available in browser context.');
+        }
+        await page.goto(NGROK_NEW_API_KEY_URL);
+        // The description field comes prefilled; replace it with our own label so
+        // the user can recognize and revoke the key later.
+        const description = this.generateAppName();
+        const descriptionInput = page.locator('input[name="description"]');
+        await descriptionInput.waitFor({ timeout: DEFAULT_TIMEOUT_MS });
+        await descriptionInput.fill('');
+        await typeLikeHuman(page, descriptionInput, description);
+        const createButton = page.locator('button[type="submit"]');
+        await createButton.waitFor({ timeout: DEFAULT_TIMEOUT_MS });
+        await createButton.click();
+        // The created key is revealed exactly once, inside the success dialog's
+        // <pre> element. ngrok keys have no fixed prefix, so we read that element
+        // directly rather than matching on the token text.
+        const tokenElement = page.locator('[role="dialog"] pre');
+        await tokenElement.waitFor({ timeout: DEFAULT_TIMEOUT_MS });
+        const token = (await tokenElement.textContent())?.trim();
+        if (token === undefined || token === '') {
+            throw new LoginFailedError('Failed to extract API key from ngrok.');
+        }
+        await page.close();
+        return ngrokCredentials(token);
+    }
+}
+export class Ngrok extends Service {
+    name = 'ngrok';
+    displayName = 'ngrok';
+    baseApiUrls = [NGROK_API_BASE_URL];
+    loginUrl = NGROK_LOGIN_URL;
+    info = 'https://ngrok.com/docs/api/';
+    // Listing API keys returns 200 for any valid key; the stored credential adds
+    // the required Authorization and ngrok-version headers.
+    credentialCheckCurlArguments = ['https://api.ngrok.com/api_keys'];
+    setCredentialsExample(serviceName) {
+        return `latchkey auth set ${serviceName} -H "Authorization: Bearer <token>" -H "ngrok-version: ${NGROK_API_VERSION}"`;
+    }
+    // An ngrok API key carries no queryable identity endpoint, so the account is
+    // left as the default rather than guessed.
+    getAccount(_apiCredentials) {
+        return Promise.resolve(null);
+    }
+    getSession(appNamePrefix) {
+        return new NgrokServiceSession(this, appNamePrefix);
+    }
+}
+export const NGROK = new Ngrok();
+//# sourceMappingURL=ngrok.js.map

package/dist/src/services/ngrok.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ngrok.js","sourceRoot":"","sources":["../../../src/services/ngrok.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAkB,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,OAAO,EACP,6BAA6B,EAC7B,YAAY,EACZ,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AACpD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,eAAe,GAAG,mCAAmC,CAAC;AAE5D,+EAA+E;AAC/E,sCAAsC;AACtC,MAAM,qBAAqB,GAAG,0CAA0C,CAAC;AAEzE,+EAA+E;AAC/E,gFAAgF;AAChF,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AACnD,MAAM,4BAA4B,GAAG,qDAAqD,CAAC;AAE3F;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,IAAI,kBAAkB,CAAC;QAC5B,IAAI;QACJ,yBAAyB,MAAM,EAAE;QACjC,IAAI;QACJ,kBAAkB,iBAAiB,EAAE;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,mBAAoB,SAAQ,6BAA6B;IAC1C,YAAY,GAAG,YAAY,CAAC,cAAc,CAAC;IACtD,UAAU,GAAG,KAAK,CAAC;IAE3B,UAAU,CAAC,QAAkB;QAC3B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,6EAA6E;QAC7E,6EAA6E;QAC7E,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACxD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAES,eAAe;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAES,KAAK,CAAC,sBAAsB,CACpC,OAAuB,EACvB,eAAgC;QAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAEvC,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAEzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC3D,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5D,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAE3B,wEAAwE;QACxE,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,CAAC,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,KAAM,SAAQ,OAAO;IACvB,IAAI,GAAG,OAAO,CAAC;IACf,WAAW,GAAG,OAAO,CAAC;IACtB,WAAW,GAAG,CAAC,kBAAkB,CAAU,CAAC;IAC5C,QAAQ,GAAG,eAAe,CAAC;IAC3B,IAAI,GAAG,6BAA6B,CAAC;IAE9C,6EAA6E;IAC7E,wDAAwD;IAC/C,4BAA4B,GAAG,CAAC,gCAAgC,CAAU,CAAC;IAEpF,qBAAqB,CAAC,WAAmB;QACvC,OAAO,qBAAqB,WAAW,0DAA0D,iBAAiB,GAAG,CAAC;IACxH,CAAC;IAED,6EAA6E;IAC7E,2CAA2C;IAClC,UAAU,CAAC,eAA+B;QACjD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEQ,UAAU,CAAC,aAAqB;QACvC,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC"}

package/dist/src/services/zoom.d.ts

@@ -1,20 +1,133 @@
-import type { ApiCredentials } from '../apiCredentials/base.js';
-import { Service } from './core/base.js';
+/**
+ * Zoom service implementation.
+ *
+ * Browser login creates a Server-to-Server OAuth app in the Zoom App
+ * Marketplace. Such an app has no user context: its credentials are an account
+ * id plus a client id/secret, which are exchanged for a short-lived access
+ * token with the `account_credentials` grant whenever the previous token
+ * expires.
+ */
+import type { BrowserContext, Response } from 'playwright';
+import { z } from 'zod';
+import { ApiCredentials } from '../apiCredentials/base.js';
+import { BrowserFollowupServiceSession, FollowupWork, LoginFailedError, Service } from './core/base.js';
+/**
+ * Whether a URL names the home page Zoom sends a user to once they are signed
+ * in. Also accepts the bare path, the form a redirect to it may take.
+ */
+export declare function isZoomSignedInHomeUrl(url: string): boolean;
+export declare class ZoomCredentialError extends Error {
+    constructor(message: string);
+}
+/**
+ * Raised when the signed-in user is not allowed to create apps in their Zoom
+ * account. Extends {@link LoginFailedError} so the CLI reports the message on
+ * stderr instead of a stack trace.
+ */
+export declare class ZoomAppCreationNotPermittedError extends LoginFailedError {
+    constructor();
+}
+/**
+ * Credentials of a Zoom Server-to-Server OAuth app: the long-lived triple that
+ * identifies the app, plus the short-lived access token minted from it.
+ */
+export declare const ZoomServerToServerCredentialsSchema: z.ZodObject<{
+    objectType: z.ZodLiteral<"zoomServerToServer">;
+    accountId: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    accessToken: z.ZodOptional<z.ZodString>;
+    accessTokenExpiresAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    objectType: "zoomServerToServer";
+    clientId: string;
+    clientSecret: string;
+    accountId: string;
+    accessToken?: string | undefined;
+    accessTokenExpiresAt?: string | undefined;
+}, {
+    objectType: "zoomServerToServer";
+    clientId: string;
+    clientSecret: string;
+    accountId: string;
+    accessToken?: string | undefined;
+    accessTokenExpiresAt?: string | undefined;
+}>;
+export type ZoomServerToServerCredentialsData = z.infer<typeof ZoomServerToServerCredentialsSchema>;
+export declare class ZoomServerToServerCredentials implements ApiCredentials {
+    readonly objectType: "zoomServerToServer";
+    readonly accountId: string;
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly accessToken?: string;
+    readonly accessTokenExpiresAt?: string;
+    readonly accountEmail?: string;
+    constructor(accountId: string, clientId: string, clientSecret: string, accessToken?: string, accessTokenExpiresAt?: string, accountEmail?: string);
+    withAccessToken(accessToken: string, accessTokenExpiresAt: string): ZoomServerToServerCredentials;
+    injectIntoCurlCall(curlArguments: readonly string[]): Promise<readonly string[]>;
+    /**
+     * Missing tokens count as expired: the client id and secret are enough to
+     * mint a new one, so refreshing is always the right response.
+     */
+    isExpired(): boolean;
+    toJSON(): ZoomServerToServerCredentialsData;
+    static fromJSON(data: ZoomServerToServerCredentialsData): ZoomServerToServerCredentials;
+}
+declare class ZoomServiceSession extends BrowserFollowupServiceSession {
+    protected readonly followupWork = FollowupWork.CreateApp;
+    private isSignedIn;
+    /**
+     * Sign-in is over once Zoom sends the user to their home page, which it does
+     * after the last step of the sign-in (whatever two-factor or consent steps
+     * came before). Being sent there is enough — waiting for the home page to
+     * answer, let alone to render, would only cost a round trip, since the flow
+     * navigates away from it to the Marketplace anyway.
+     */
+    onResponse(response: Response): void;
+    protected isLoginComplete(): boolean;
+    /**
+     * Accounts that have not accepted Zoom's API License and Terms of Use yet see
+     * a dialog blocking the app creation. Accepting the terms is the user's
+     * decision, so the page is surfaced and the flow waits until the dialog is
+     * gone rather than clicking "Agree" on the user's behalf.
+     */
+    private waitForApiTermsOfUseDecision;
+    /**
+     * Open the dialog that asks what kind of app to create, letting the user
+     * accept the API terms of use on the way if the account has not signed them
+     * yet.
+     */
+    private openAppKindDialog;
+    protected performBrowserFollowup(context: BrowserContext, _oldCredentials?: ApiCredentials): Promise<ApiCredentials | null>;
+}
 export declare class Zoom extends Service {
     readonly name = "zoom";
     readonly displayName = "Zoom";
     readonly baseApiUrls: readonly ["https://api.zoom.us/v2/"];
-    readonly loginUrl = "https://zoom.us/signin";
-    readonly info = "https://developers.zoom.us/docs/api/.";
+    readonly loginUrl = "https://zoom.us/signin#/login";
+    readonly info: string;
     readonly credentialCheckCurlArguments: readonly ["-H", "Content-Type: application/json", "https://api.zoom.us/v2/users?page_size=1"];
     setCredentialsExample(serviceName: string): string;
+    /**
+     * Accept the credentials of a Server-to-Server OAuth app the user created
+     * themselves, in the order the Zoom App Marketplace shows them.
+     */
+    getCredentialsNoCurl(arguments_: readonly string[]): ApiCredentials;
+    getSession(appNamePrefix: string): ZoomServiceSession;
     /**
      * The account comes from /users/me rather than the user-list endpoint used
      * by the credential check, which carries no identity. Server-to-server
      * tokens have no user context and error on /users/me, in which case the
-     * account stays undetermined.
+     * account is named after the user the app was created by, and failing that
+     * by the app's (opaque) Zoom account id.
      */
     getAccount(apiCredentials: ApiCredentials): Promise<string | null>;
+    /**
+     * Server-to-server credentials carry no refresh token: a fresh access token
+     * is minted from the client id and secret whenever the old one expires.
+     */
+    refreshCredentials(apiCredentials: ApiCredentials): Promise<ApiCredentials | null>;
 }
 export declare const ZOOM: Zoom;
+export {};
 //# sourceMappingURL=zoom.d.ts.map

package/dist/src/services/zoom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zoom.d.ts","sourceRoot":"","sources":["../../../src/services/zoom.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,qBAAa,IAAK,SAAQ,OAAO;IAC/B,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,WAAW,UAAU;IAC9B,QAAQ,CAAC,WAAW,uCAAwC;IAC5D,QAAQ,CAAC,QAAQ,4BAA4B;IAC7C,QAAQ,CAAC,IAAI,2CAA2C;IAExD,QAAQ,CAAC,4BAA4B,gGAI1B;IAEX,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIlD;;;;;OAKG;IACM,UAAU,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAiB5E;AAED,eAAO,MAAM,IAAI,MAAa,CAAC"}
+{"version":3,"file":"zoom.d.ts","sourceRoot":"","sources":["../../../src/services/zoom.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAiB,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAA4B,MAAM,2BAA2B,CAAC;AAIrF,OAAO,EACL,6BAA6B,EAC7B,YAAY,EAGZ,gBAAgB,EAChB,OAAO,EACR,MAAM,gBAAgB,CAAC;AAcxB;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE1D;AAWD,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,SAAQ,gBAAgB;;CAQrE;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;EAO9C,CAAC;AAEH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEpG,qBAAa,6BAA8B,YAAW,cAAc;IAClE,QAAQ,CAAC,UAAU,EAAG,oBAAoB,CAAU;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAG7B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,MAAM,EACpB,oBAAoB,CAAC,EAAE,MAAM,EAC7B,YAAY,CAAC,EAAE,MAAM;IAUvB,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,GAC3B,6BAA6B;IAWhC,kBAAkB,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAUhF;;;OAGG;IACH,SAAS,IAAI,OAAO;IAQpB,MAAM,IAAI,iCAAiC;IAW3C,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,iCAAiC,GAAG,6BAA6B;CASxF;AA2gBD,cAAM,kBAAmB,SAAQ,6BAA6B;IAC5D,SAAS,CAAC,QAAQ,CAAC,YAAY,0BAA0B;IACzD,OAAO,CAAC,UAAU,CAAS;IAE3B;;;;;;OAMG;IACH,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAgBpC,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC;;;;;OAKG;YACW,4BAA4B;IAyB1C;;;;OAIG;YACW,iBAAiB;cA4Bf,sBAAsB,CACpC,OAAO,EAAE,cAAc,EACvB,eAAe,CAAC,EAAE,cAAc,GAC/B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;CA6ClC;AAED,qBAAa,IAAK,SAAQ,OAAO;IAC/B,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,WAAW,UAAU;IAC9B,QAAQ,CAAC,WAAW,uCAAwC;IAC5D,QAAQ,CAAC,QAAQ,mCAAoB;IACrC,QAAQ,CAAC,IAAI,SAGkC;IAE/C,QAAQ,CAAC,4BAA4B,gGAI1B;IAEX,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIlD;;;OAGG;IACM,oBAAoB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc;IAiBnE,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB;IAI9D;;;;;;OAMG;IACY,UAAU,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyBjF;;;OAGG;IACY,kBAAkB,CAC/B,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;CAMlC;AAED,eAAO,MAAM,IAAI,MAAa,CAAC"}