tabby-rdp 0.3.4 → 0.4.1

package/CHANGELOG.md

@@ -1,5 +1,71 @@
 # Changelog
 
+## 0.4.1
+
+Fixes from a review of 0.4.0.
+
+**Fixed**
+- **Two desktops saving a password at the same moment** could lose one of them: Tabby's Vault rewrites its whole
+  contents per change. The plugin's Vault changes now go one after another.
+- **A saved account took the desktop's old domain:** an account with a plain user name and no domain was signed in with
+  the domain the desktop had been given before, a field the form hides once an account is chosen. The account's domain
+  (also none) is what is used.
+- **A profile group's account didn't reach profiles reached through an SSH profile** in that host's tab menu; it does
+  now, as it did when opening the profile itself.
+- **"Ask for the account" on a new profile from the settings page** could be overridden by the "Remote desktops"
+  group's default, since the group was assigned after the editor closed. The profile is in the group before the editor
+  opens.
+- **Removing an account** also clears a profile group default that named it, and says so when the password itself
+  couldn't be removed. A desktop whose account is gone asks for one, rather than signing in with a login of its own
+  saved earlier. A sign-in prompt left open while its account was removed or renamed no longer saves under it.
+- **Editing an account's user name** keeps the old name when the old password couldn't be removed, so the two never
+  disagree; a password kept for an account's earlier user name isn't used for the new one. A new account whose password
+  couldn't be saved isn't added.
+- **Hotkey collisions** are found among all of Tabby's bindings, per-profile and per-group hotkeys included, and named
+  by the profile or group; the note says only one of the two would act.
+- The settings page checks the accounts' passwords one after another, and not at all once the keychain has stopped
+  answering, so a Linux keyring that doesn't answer can't hold every keychain worker.
+- Cancelling or finishing **New account…** brings the user name fields back; the Vault lists a saved account's
+  password by the account's name, as intended.
+
+## 0.4.0
+
+**New**
+- **Saved accounts** ([#11](https://github.com/meanaverage/tabby-rdp/issues/11)): a user name and domain under a
+  name, with the password kept once, for desktops that share an account. Chosen in a remote desktop profile's
+  **Account** field or in the form for a desktop behind an SSH host (**New account…** there adds one), or for a whole
+  profile group through the group's defaults. Listed, added, edited and removed in **Settings › Remote Desktop ›
+  Accounts**, which names the desktops using each account. A password a server refuses is asked for again and saved
+  for every desktop; **Sign in again…** asks anew.
+- **Passwords in Tabby's Vault** when it is enabled, as Tabby keeps SSH passwords: encrypted, and carried by config
+  sync. The system keychain as before otherwise, and still read for what was saved before the Vault was turned on.
+- **Configurable shortcuts** ([#15](https://github.com/meanaverage/tabby-rdp/issues/15)): view only, a screenshot,
+  Ctrl+Alt+Del, typing into all desktops of a tab, pasting to all of them, the connection status and Disconnect join
+  the desktop/console switch as Tabby hotkeys, set on the settings page in the look of Tabby's Hotkeys page (or
+  there). A key another hotkey already has is refused, and collisions made elsewhere are shown.
+- **The settings page in tabs** — Getting started, Settings, Overlay, Desktops, Accounts, Troubleshooting — as
+  Tabby's Profiles & connections page is, with the settings grouped (Picture, Sound, Keyboard, SSH hosts, Updates)
+  and the detail behind ⓘ tooltips. The Desktops tab lists remote desktop profiles as well as desktops behind SSH
+  hosts, and adds, edits and removes both; profiles the plugin makes go into a "Remote desktops" group.
+- **A clearer reason when a connection fails** before it is up ("10.3.0.5:3389 did not answer"), in place of
+  IronRDP's "general error (code 1)".
+- The **name overlay preview** says which desktop resolution it stands for, and lets you pick one
+  ([#16](https://github.com/meanaverage/tabby-rdp/issues/16)).
+
+**Fixed**
+- **The window could not be moved by its tab bar while a dialog was open**
+  ([#19](https://github.com/meanaverage/tabby-rdp/issues/19)), the plugin's and Tabby's alike. Each dialog keeps a
+  strip the height of the tab bar draggable. Submitted to Tabby as well.
+- **A stale update notice** in a Tabby left open across several releases
+  ([#17](https://github.com/meanaverage/tabby-rdp/issues/17)): opening the settings page with an update known asks
+  npm again.
+- Opening the settings page no longer prompts for the Vault passphrase.
+
+**Docs**
+- README: saved accounts, shortcuts, and where passwords are kept. Tabby's Vault page labels the plugin's secrets
+  generically until Tabby ships [#11765](https://github.com/Eugeny/tabby/pull/11765)
+  ([#18](https://github.com/meanaverage/tabby-rdp/issues/18)).
+
 ## 0.3.4
 
 **Fixed**

package/README.md

@@ -40,8 +40,8 @@ nothing is opened on the network, and nothing has to be installed on the remote
 - **`desk`:** type `desk` in the console and the same shell, with its history and running programs, moves into a
   terminal on the desktop.
 
-Everything is in **Settings › Remote Desktop**: getting started, every setting with a line on what it does, the keys,
-the desktops and certificates the plugin keeps, and troubleshooting.
+Everything is in **Settings › Remote Desktop**, in tabs: getting started and the shortcuts, the settings, the name
+overlay, the desktops and certificates the plugin keeps, saved accounts, and troubleshooting.
 
 The remote desktop itself is [IronRDP](https://github.com/Devolutions/IronRDP)'s web client, running inside Tabby.
 Making it work with GNOME took fixes in IronRDP, which we contribute upstream ([below](#built-on-ironrdp)).
@@ -53,6 +53,7 @@ Making it work with GNOME took fixes in IronRDP, which we contribute upstream ([
 - [Features](#features)
 - [Windows and other desktops behind a host](#windows-and-other-desktops-behind-a-host)
 - [Remote desktop profiles](#remote-desktop-profiles)
+- [Saved accounts](#saved-accounts)
 - [Several desktops in one tab](#several-desktops-in-one-tab)
 - [VMs on a host](#vms-on-a-host)
 - [desk: the console on the desktop](#desk-the-console-on-the-desktop)
@@ -120,7 +121,8 @@ connecting again.
 | **Screenshots** | **Save a screenshot** in the desktop's menus saves the remote screen at its full resolution as a PNG in Downloads, and copies it to the clipboard. |
 | **Connection status** | Optionally, a small line in the corner of the desktop with the throughput each way, frames per second, the SSH round trip, and how it is connected (desktop, host, resolution, graphics mode, sharpness). |
 | **Reconnecting** | After sleep or a network change, the desktop reconnects by itself once the connection is back. |
-| **Sign-in** | GNOME desktops need none: the plugin manages their credentials. Windows and xrdp desktops ask for the account once and can remember it in the system keychain; **Sign in again…** in the menu replaces it. |
+| **Sign-in** | GNOME desktops need none: the plugin manages their credentials. Windows and xrdp desktops ask for the account once and can remember it, in Tabby's Vault when that is on and in the system keychain otherwise; **Sign in again…** in the menu replaces it. Desktops that share an account can use a [saved account](#saved-accounts), whose password is kept once. |
+| **Shortcuts** | Switching between the desktop and the console, view only, a screenshot, Ctrl+Alt+Del, typing into or pasting to all desktops of a tab, the connection status and Disconnect each have a hotkey, set on the settings page or in Tabby's Hotkeys. They work while the desktop has the keyboard; a key another hotkey has is refused. |
 | **Certificates** | GNOME desktops accept only the certificate the plugin made for them. Windows and xrdp desktops remember theirs on first use and ask before accepting a different one. |
 
 <p align="center"><img src="docs/images/files.png" width="760" alt="A file copied on the remote desktop, offered for saving"></p>
@@ -217,6 +219,25 @@ A direct connection is a plain TCP connection from this computer, encrypted with
 server's certificate is remembered on the first connection and checked on every later one, as for desktops behind a
 host (above).
 
+## Saved accounts
+
+Several desktops often share one account: a domain admin, a lab user. A saved account keeps that user name (and
+domain) under a name, with its password stored once, so when the password changes it is entered once for all of them.
+
+**Settings › Remote Desktop › Accounts** lists them, with the desktops that use each one (click a name to open its
+settings), and adds, edits and removes them. A desktop picks its account in its profile's **Account** field, or in the
+form that adds a desktop behind an SSH host; **New account…** there adds one on the spot. A profile group's defaults
+for **Remote desktop (RDP)** can pick an account for every profile in the group (**Profiles & connections**, the group's
+menu), which is how to give a whole group of servers one sign-in.
+
+Signing in with a saved account that has no password yet, or whose password a server refused, asks for it, and the
+form saves what you enter as the account's new password for every desktop. A refused password is not dropped by
+itself: one server refusing it doesn't make it wrong for the others. **Sign in again…** on such a desktop asks anew.
+
+The accounts' names and user names are in Tabby's config (`remoteDesktop.accounts`); the passwords are in Tabby's
+Vault when it is enabled (encrypted, and carried by Tabby's config sync), else in the system keychain. Removing an
+account removes its password and sets its desktops back to asking.
+
 ## Several desktops in one tab
 
 Split a tab (Tabby's **Split** in the tab's menu, or drag one tab onto another) and each pane can show a desktop: one
@@ -285,12 +306,14 @@ They are stored in Tabby's config under `remoteDesktop`:
 | Microphone (`microphone`) | Off | Send your microphone while an app on the remote desktop records. Applies on the next connection. |
 | Show connection status (`connectionStatus`) | Off | The indicator in the desktop's corner; fades when the pointer comes near. |
 | Mac shortcuts (`macShortcuts`) | On | macOS. Off: ⌘ is the Windows key. |
+| Shortcuts (`hotkeys.remote-desktop-*`) | ⌘⇧G / Ctrl+Shift+G for the switch; the rest unbound | Tabby's hotkeys: the switch between desktop and console, view only, screenshot, Ctrl+Alt+Del, type into all, paste to all, connection status, disconnect. Changed on the settings page (Getting started › Shortcuts) or in Settings › Hotkeys. |
+| Saved accounts (`accounts`) | None | `[{ id, name, username, domain }]`; see [Saved accounts](#saved-accounts). The passwords are in the Vault (encrypted, part of the config) or the keychain, never in plaintext in the config. |
 | Bring the console along with `desk` (`desk`) | Off | Installs `desk` and a login line on each machine you open a desktop on; applies on the next connection there. |
 | Session backend (`sessionBackend`) | `native` | For `desk`: `native` (trd-pty) or `tmux`. Config file only. |
 | Find virtual machines on SSH hosts (`discoverVMs`) | On | Lists a host's libvirt VMs with a desktop in its menu ([VMs on a host](#vms-on-a-host)). |
 | Shut down VMs it started (`shutDownIdle`) | Never | 5, 15 or 60: minutes without a desktop open after which a VM the plugin started is shut down again ([VMs on a host](#vms-on-a-host)). |
 | Tell me about new versions (`checkUpdates`) | On | Once a day, asks npm for the latest tabby-rdp (nothing else is sent), and says so in a note, the menus and the settings page when there's a newer one: Tabby itself shows plugin upgrades only on its Plugins page. |
-| Desktop name overlay (`osd`) | When it helps | `show` (`auto`, `always`, `off`), `font`, `size`, `position`, `color` (empty: white) and `seconds`; the settings page previews it. |
+| Desktop name overlay (`osd`) | When it helps | `show` (`auto`, `always`, `off`), `font`, `size`, `position`, `color` (empty: white) and `seconds`; the settings page previews it, at a resolution you pick. |
 
 ## Requirements
 

package/dist/accountForm.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STYLE = exports.NEW_ACCOUNT = void 0;
+exports.newAccountOption = newAccountOption;
+exports.NEW_ACCOUNT = '__new__';
+exports.STYLE = `
+.trd-new-account { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; margin-top: 8px; padding: 10px; border-radius: 6px;
+    border: 1px solid rgba(128, 128, 128, 0.35); }
+.trd-new-account .trd-new-account-error { grid-column: 1 / -1; color: #f08080; font-size: 12px; }
+.trd-new-account .trd-new-account-error:empty { display: none; }
+.trd-new-account .trd-new-account-buttons { grid-column: 1 / -1; display: flex; gap: 8px; justify-content: flex-end; }
+`;
+/**
+ * Wires an account `<select>` that ends with "New account…": choosing it opens the form under the select; "Add" hands
+ * the fields to `save`, which returns the saved account, and the select then offers and shows it. `onChange` is told
+ * the chosen id ('' for none) whenever it changes, the new account included.
+ */
+function newAccountOption(select, label, save, onChange) {
+    select.append(new Option('New account…', exports.NEW_ACCOUNT));
+    let last = select.value;
+    let form = null;
+    const close = () => {
+        form?.remove();
+        form = null;
+    };
+    select.addEventListener('change', () => {
+        if (select.value !== exports.NEW_ACCOUNT) {
+            close();
+            last = select.value;
+            onChange(select.value);
+            return;
+        }
+        if (form) {
+            return;
+        }
+        form = document.createElement('form');
+        form.className = 'trd-new-account';
+        form.autocomplete = 'off';
+        form.innerHTML = `
+            <input class="form-control form-control-sm" name="name" placeholder="Name, e.g. Domain A admin" spellcheck="false">
+            <input class="form-control form-control-sm" name="username" placeholder="User name, or DOMAIN\\user" spellcheck="false">
+            <input class="form-control form-control-sm" name="domain" placeholder="Domain (optional)" spellcheck="false">
+            <input class="form-control form-control-sm" name="password" type="password" autocomplete="new-password" placeholder="Password (optional; asked on the first connection)">
+            <div class="trd-new-account-error"></div>
+            <div class="trd-new-account-buttons">
+                <button type="button" class="btn btn-secondary btn-sm" name="cancel">Cancel</button>
+                <button type="submit" class="btn btn-primary btn-sm">Add account</button>
+            </div>`;
+        const field = (name) => form.querySelector(`[name="${name}"]`);
+        const error = form.querySelector('.trd-new-account-error');
+        // Keys typed in it are its own (the forms around it act on Enter and Escape).
+        form.addEventListener('keydown', event => {
+            event.stopPropagation();
+            if (event.key === 'Escape') {
+                event.preventDefault();
+                field('cancel').click();
+            }
+        });
+        field('cancel').addEventListener('click', () => {
+            close();
+            select.value = last;
+            // As a choice made by hand: the form around it follows (its user name fields show again).
+            select.dispatchEvent(new Event('change'));
+        });
+        form.addEventListener('submit', async (event) => {
+            event.preventDefault();
+            event.stopPropagation();
+            const username = field('username').value.trim();
+            if (!username) {
+                error.textContent = 'Give it a user name.';
+                field('username').focus();
+                return;
+            }
+            try {
+                const account = await save({ name: field('name').value.trim(), username, domain: field('domain').value.trim(), password: field('password').value });
+                const option = new Option(label(account), account.id);
+                select.insertBefore(option, select.querySelector(`option[value="${exports.NEW_ACCOUNT}"]`));
+                close();
+                select.value = account.id;
+                select.dispatchEvent(new Event('change'));
+            }
+            catch (e) {
+                error.textContent = `Couldn't save it: ${e?.message ?? e}`;
+            }
+        });
+        select.insertAdjacentElement('afterend', form);
+        field('name').focus();
+    });
+}
+//# sourceMappingURL=accountForm.js.map

package/dist/accountForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountForm.js","sourceRoot":"","sources":["../src/accountForm.ts"],"names":[],"mappings":";;;AAyBA,4CA2EC;AAjGY,QAAA,WAAW,GAAG,SAAS,CAAA;AAEvB,QAAA,KAAK,GAAG;;;;;;CAMpB,CAAA;AASD;;;;GAIG;AACH,SAAgB,gBAAgB,CAC5B,MAAyB,EACzB,KAAkC,EAClC,IAAuD,EACvD,QAA8B;IAE9B,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,mBAAW,CAAC,CAAC,CAAA;IACtD,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAA;IACvB,IAAI,IAAI,GAA2B,IAAI,CAAA;IACvC,MAAM,KAAK,GAAG,GAAG,EAAE;QACf,IAAI,EAAE,MAAM,EAAE,CAAA;QACd,IAAI,GAAG,IAAI,CAAA;IACf,CAAC,CAAA;IACD,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE;QACnC,IAAI,MAAM,CAAC,KAAK,KAAK,mBAAW,EAAE,CAAC;YAC/B,KAAK,EAAE,CAAA;YACP,IAAI,GAAG,MAAM,CAAC,KAAK,CAAA;YACnB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtB,OAAM;QACV,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACP,OAAM;QACV,CAAC;QACD,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAA;QAClC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;QACzB,IAAI,CAAC,SAAS,GAAG;;;;;;;;;mBASN,CAAA;QACX,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAK,CAAC,aAAa,CAAC,UAAU,IAAI,IAAI,CAAqB,CAAA;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAE,CAAA;QAC3D,8EAA8E;QAC9E,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE;YACrC,KAAK,CAAC,eAAe,EAAE,CAAA;YACvB,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACzB,KAAK,CAAC,cAAc,EAAE,CAAA;gBACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAA;YAC3B,CAAC;QACL,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3C,KAAK,EAAE,CAAA;YACP,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;YACnB,0FAA0F;YAC1F,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YAC1C,KAAK,CAAC,cAAc,EAAE,CAAA;YACtB,KAAK,CAAC,eAAe,EAAE,CAAA;YACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,KAAK,CAAC,WAAW,GAAG,sBAAsB,CAAA;gBAC1C,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAA;gBACzB,OAAM;YACV,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;gBACnJ,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;gBACrD,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,iBAAiB,mBAAW,IAAI,CAAC,CAAC,CAAA;gBACnF,KAAK,EAAE,CAAA;gBACP,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,EAAE,CAAA;gBACzB,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC7C,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,KAAK,CAAC,WAAW,GAAG,qBAAqB,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAA;YAC9D,CAAC;QACL,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAC9C,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/accounts.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.accountsOf = accountsOf;
+exports.newAccountId = newAccountId;
+exports.signInName = signInName;
+exports.accountKey = accountKey;
+/** The usable entries of `remoteDesktop.accounts` (hand-written ones may lack fields). */
+function accountsOf(store) {
+    const list = Array.isArray(store?.accounts) ? store.accounts : [];
+    const seen = new Set();
+    return list.flatMap((a) => {
+        const id = typeof a?.id === 'string' ? a.id.trim() : '';
+        const username = typeof a?.username === 'string' ? a.username.trim() : '';
+        if (!/^[A-Za-z0-9_-]+$/.test(id) || !username || seen.has(id)) {
+            return [];
+        }
+        seen.add(id);
+        const domain = typeof a.domain === 'string' && a.domain.trim() ? a.domain.trim() : undefined;
+        return [{ id, name: typeof a.name === 'string' && a.name.trim() ? a.name.trim() : signInName({ username, domain }), username, ...domain ? { domain } : {} }];
+    });
+}
+/** A new account's id: nothing in it but that it is unused. */
+function newAccountId(taken) {
+    for (;;) {
+        const id = Math.random().toString(36).slice(2, 10).padEnd(8, '0');
+        if (!taken.some(a => a.id === id)) {
+            return id;
+        }
+    }
+}
+/** What the account signs in as: DOMAIN\user, or the user name as typed when it names its domain itself. */
+function signInName(account) {
+    return account.domain && !/[\\@]/.test(account.username) ? `${account.domain}\\${account.username}` : account.username;
+}
+/** Where the keychain keeps an account's password (next to the desktops' own entries, which are session keys). */
+function accountKey(id) {
+    return `account#${id}`;
+}
+//# sourceMappingURL=accounts.js.map

package/dist/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../src/accounts.ts"],"names":[],"mappings":";;AAoBA,gCAaC;AAGD,oCAOC;AAGD,gCAEC;AAGD,gCAEC;AAlCD,0FAA0F;AAC1F,SAAgB,UAAU,CAAE,KAAU;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAM,EAAkB,EAAE;QAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,CAAA;QACb,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5F,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChK,CAAC,CAAC,CAAA;AACN,CAAC;AAED,+DAA+D;AAC/D,SAAgB,YAAY,CAAE,KAAqB;IAC/C,SAAS,CAAC;QACN,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACjE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;AACL,CAAC;AAED,4GAA4G;AAC5G,SAAgB,UAAU,CAAE,OAAkD;IAC1E,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAA;AAC1H,CAAC;AAED,kHAAkH;AAClH,SAAgB,UAAU,CAAE,EAAU;IAClC,OAAO,WAAW,EAAE,EAAE,CAAA;AAC1B,CAAC"}