From 2f045be8a4a448f63173c998d195a4c874a065f0 Mon Sep 17 00:00:00 2001
From: Aashish-Upadhyay-101 <boysmall300@gmail.com>
Date: Tue, 28 Feb 2023 09:37:47 +0545
Subject: [PATCH] missing break statement

---
 .env.example                                  |   2 +
 backend/environment.d.ts                      |   2 +
 backend/src/config/index.ts                   |   4 +
 backend/src/integrations/apps.ts              |  65 ++++++++-
 backend/src/integrations/exchange.ts          |  65 ++++++++-
 backend/src/integrations/revoke.ts            |   5 +-
 backend/src/integrations/sync.ts              | 103 ++++++++++++++-
 backend/src/models/integration.ts             |   5 +-
 backend/src/models/integrationAuth.ts         |   4 +-
 backend/src/variables/index.ts                |   6 +
 backend/src/variables/integration.ts          |  19 +++
 frontend/public/data/frequentConstants.ts     |   1 +
 .../public/images/integrations/GitLab.png     | Bin 0 -> 17927 bytes
 frontend/src/pages/integrations/[id].tsx      |   6 +
 .../src/pages/integrations/gitlab/create.tsx  | 125 ++++++++++++++++++
 .../integrations/gitlab/oauth2/callback.tsx   |  39 ++++++
 16 files changed, 442 insertions(+), 9 deletions(-)
 create mode 100644 frontend/public/images/integrations/GitLab.png
 create mode 100644 frontend/src/pages/integrations/gitlab/create.tsx
 create mode 100644 frontend/src/pages/integrations/gitlab/oauth2/callback.tsx

diff --git a/.env.example b/.env.example
index e8f9b747b..c893713f4 100644
--- a/.env.example
+++ b/.env.example
@@ -48,10 +48,12 @@ CLIENT_ID_HEROKU=
 CLIENT_ID_VERCEL=
 CLIENT_ID_NETLIFY=
 CLIENT_ID_GITHUB=
+CLIENT_ID_GITLAB=
 CLIENT_SECRET_HEROKU=
 CLIENT_SECRET_VERCEL=
 CLIENT_SECRET_NETLIFY=
 CLIENT_SECRET_GITHUB=
+CLIENT_SECRET_GITLAB=
 CLIENT_SLUG_VERCEL=
 
 # Sentry (optional) for monitoring errors
diff --git a/backend/environment.d.ts b/backend/environment.d.ts
index 8012416f6..497902def 100644
--- a/backend/environment.d.ts
+++ b/backend/environment.d.ts
@@ -22,10 +22,12 @@ declare global {
       CLIENT_ID_VERCEL: string;
       CLIENT_ID_NETLIFY: string;
       CLIENT_ID_GITHUB: string;
+      CLIENT_ID_GITLAB: string;
       CLIENT_SECRET_HEROKU: string;
       CLIENT_SECRET_VERCEL: string;
       CLIENT_SECRET_NETLIFY: string;
       CLIENT_SECRET_GITHUB: string;
+      CLIENT_SECRET_GITLAB: string;
       CLIENT_SLUG_VERCEL: string;
 			POSTHOG_HOST: string;
 			POSTHOG_PROJECT_API_KEY: string;
diff --git a/backend/src/config/index.ts b/backend/src/config/index.ts
index c0c9988f0..898da805e 100644
--- a/backend/src/config/index.ts
+++ b/backend/src/config/index.ts
@@ -22,11 +22,13 @@ const CLIENT_ID_HEROKU = process.env.CLIENT_ID_HEROKU!;
 const CLIENT_ID_VERCEL = process.env.CLIENT_ID_VERCEL!;
 const CLIENT_ID_NETLIFY = process.env.CLIENT_ID_NETLIFY!;
 const CLIENT_ID_GITHUB = process.env.CLIENT_ID_GITHUB!;
+const CLIENT_ID_GITLAB = process.env.CLIENT_ID_GITLAB!;
 const CLIENT_SECRET_AZURE = process.env.CLIENT_SECRET_AZURE!;
 const CLIENT_SECRET_HEROKU = process.env.CLIENT_SECRET_HEROKU!;
 const CLIENT_SECRET_VERCEL = process.env.CLIENT_SECRET_VERCEL!;
 const CLIENT_SECRET_NETLIFY = process.env.CLIENT_SECRET_NETLIFY!;
 const CLIENT_SECRET_GITHUB = process.env.CLIENT_SECRET_GITHUB!;
+const CLIENT_SECRET_GITLAB = process.env.CLIENT_SECRET_GITLAB;
 const CLIENT_SLUG_VERCEL = process.env.CLIENT_SLUG_VERCEL!;
 const POSTHOG_HOST = process.env.POSTHOG_HOST! || 'https://app.posthog.com';
 const POSTHOG_PROJECT_API_KEY =
@@ -75,11 +77,13 @@ export {
   CLIENT_ID_VERCEL,
   CLIENT_ID_NETLIFY,
   CLIENT_ID_GITHUB,
+  CLIENT_ID_GITLAB,
   CLIENT_SECRET_AZURE,
   CLIENT_SECRET_HEROKU,
   CLIENT_SECRET_VERCEL,
   CLIENT_SECRET_NETLIFY,
   CLIENT_SECRET_GITHUB,
+  CLIENT_SECRET_GITLAB,
   CLIENT_SLUG_VERCEL,
   POSTHOG_HOST,
   POSTHOG_PROJECT_API_KEY,
diff --git a/backend/src/integrations/apps.ts b/backend/src/integrations/apps.ts
index f18734805..90889b623 100644
--- a/backend/src/integrations/apps.ts
+++ b/backend/src/integrations/apps.ts
@@ -10,11 +10,13 @@ import {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
   INTEGRATION_TRAVISCI,
   INTEGRATION_HEROKU_API_URL,
+  INTEGRATION_GITLAB_API_URL,
   INTEGRATION_VERCEL_API_URL,
   INTEGRATION_NETLIFY_API_URL,
   INTEGRATION_RENDER_API_URL,
@@ -77,6 +79,11 @@ const getApps = async ({
           accessToken,
         });
         break;
+      case INTEGRATION_GITLAB:
+        apps = await getAppsGitlab({
+          accessToken,
+        });
+        break;
       case INTEGRATION_RENDER:
         apps = await getAppsRender({
           accessToken,
@@ -217,9 +224,9 @@ const getAppsNetlify = async ({ accessToken }: { accessToken: string }) => {
 /**
  * Return list of repositories for Github integration
  * @param {Object} obj
- * @param {String} obj.accessToken - access token for Netlify API
- * @returns {Object[]} apps - names of Netlify sites
- * @returns {String} apps.name - name of Netlify site
+ * @param {String} obj.accessToken - access token for Github API
+ * @returns {Object[]} apps - names of Github sites
+ * @returns {String} apps.name - name of Github site
  */
 const getAppsGithub = async ({ accessToken }: { accessToken: string }) => {
   let apps;
@@ -406,4 +413,56 @@ const getAppsTravisCI = async ({ accessToken }: { accessToken: string }) => {
   return apps;
 }
 
+/**
+ * Return list of repositories for GitLab integration
+ * @param {Object} obj
+ * @param {String} obj.accessToken - access token for GitLab API
+ * @returns {Object[]} apps - names of GitLab sites
+ * @returns {String} apps.name - name of GitLab site
+ */
+const getAppsGitlab = async ({ accessToken }: {accessToken: string}) => {
+  let apps;
+  console.log(accessToken);
+  
+  try {
+    const { id } = (
+      await axios.get(
+        `${INTEGRATION_GITLAB_API_URL}/v4/user`,
+        {
+          headers: {
+            "Authorization": `Bearer ${accessToken}`,
+            "Accept-Encoding": "application/json",
+          },
+        }
+      )
+    ).data;
+
+    const res = (
+      await axios.get(
+        `${INTEGRATION_GITLAB_API_URL}/v4/users/${id}/projects`,
+        {
+          headers: {
+            "Authorization": `Bearer ${accessToken}`,
+            "Accept-Encoding": "application/json",
+          },
+        }
+      )
+    ).data;
+
+    apps = res?.map((a: any) => {
+      return {
+        name: a?.name,
+        appId: `${a?.id}`,
+      }
+    });
+  }catch (err) {
+    Sentry.setUser(null);
+    Sentry.captureException(err);
+    throw new Error("Failed to get GitLab repos");
+  }
+  
+  console.log(apps);
+  return apps;
+}
+
 export { getApps };
diff --git a/backend/src/integrations/exchange.ts b/backend/src/integrations/exchange.ts
index 301259198..f84001512 100644
--- a/backend/src/integrations/exchange.ts
+++ b/backend/src/integrations/exchange.ts
@@ -6,11 +6,13 @@ import {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_AZURE_TOKEN_URL,
   INTEGRATION_HEROKU_TOKEN_URL,
   INTEGRATION_VERCEL_TOKEN_URL,
   INTEGRATION_NETLIFY_TOKEN_URL,
-  INTEGRATION_GITHUB_TOKEN_URL
+  INTEGRATION_GITHUB_TOKEN_URL,
+  INTEGRATION_GITLAB_TOKEN_URL,
 } from '../variables';
 import {
   SITE_URL,
@@ -18,11 +20,13 @@ import {
   CLIENT_ID_VERCEL,
   CLIENT_ID_NETLIFY,
   CLIENT_ID_GITHUB,
+  CLIENT_ID_GITLAB,
   CLIENT_SECRET_AZURE,
   CLIENT_SECRET_HEROKU,
   CLIENT_SECRET_VERCEL,
   CLIENT_SECRET_NETLIFY,
-  CLIENT_SECRET_GITHUB
+  CLIENT_SECRET_GITHUB,
+  CLIENT_SECRET_GITLAB,
 } from '../config';
 
 interface ExchangeCodeAzureResponse {
@@ -66,6 +70,15 @@ interface ExchangeCodeGithubResponse {
   token_type: string;
 }
 
+interface ExchangeCodeGitlabResponse {
+  access_token: string;
+  token_type: string;
+  expires_in: string;
+  refresh_token: string;
+  scope: string;
+  created_at: number;
+}
+
 /**
  * Return [accessToken], [accessExpiresAt], and [refreshToken] for OAuth2
  * code-token exchange for integration named [integration]
@@ -114,6 +127,10 @@ const exchangeCode = async ({
           code
         });
         break;
+      case INTEGRATION_GITLAB:
+        obj = await exchangeCodeGitlab({
+          code
+        });
     }
   } catch (err) {
     Sentry.setUser(null);
@@ -341,4 +358,48 @@ const exchangeCodeGithub = async ({ code }: { code: string }) => {
   };
 };
 
+/**
+ * Return [accessToken], [accessExpiresAt], and [refreshToken] for Gitlab
+ * code-token exchange
+ * @param {Object} obj1
+ * @param {Object} obj1.code - code for code-token exchange
+ * @returns {Object} obj2
+ * @returns {String} obj2.accessToken - access token for Github API
+ * @returns {String} obj2.refreshToken - refresh token for Github API
+ * @returns {Date} obj2.accessExpiresAt - date of expiration for access token
+ */
+const exchangeCodeGitlab = async ({ code }: { code: string }) => {
+  let res: ExchangeCodeGitlabResponse; 
+  
+  try {
+    res = (
+      await axios.post(
+        INTEGRATION_GITLAB_TOKEN_URL,
+        new URLSearchParams({
+          grant_type: 'authorization_code',
+          code: code,
+          client_id: CLIENT_ID_GITLAB,
+          client_secret: CLIENT_SECRET_GITLAB,
+          redirect_uri: `${SITE_URL}/integrations/gitlab/oauth2/callback`
+        } as any),
+        {
+          headers: {
+            "Accept-Encoding": "application/json",
+          }
+        }
+      )
+    ).data;
+  }catch (err) {
+    Sentry.setUser(null);
+    Sentry.captureException(err);
+    throw new Error('Failed OAuth2 code-token exchange with Gitlab');
+  }
+
+  return {
+    accessToken: res.access_token,
+    refreshToken: null,
+    accessExpiresAt: null
+  };
+}
+
 export { exchangeCode };
diff --git a/backend/src/integrations/revoke.ts b/backend/src/integrations/revoke.ts
index 25ec70313..188b166a7 100644
--- a/backend/src/integrations/revoke.ts
+++ b/backend/src/integrations/revoke.ts
@@ -10,7 +10,8 @@ import {
   INTEGRATION_HEROKU,
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
-  INTEGRATION_GITHUB
+  INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
 } from '../variables';
 
 const revokeAccess = async ({
@@ -32,6 +33,8 @@ const revokeAccess = async ({
         break;
       case INTEGRATION_GITHUB:
         break;
+      case INTEGRATION_GITLAB:
+        break;
     }
 
     deletedIntegrationAuth = await IntegrationAuth.findOneAndDelete({
diff --git a/backend/src/integrations/sync.ts b/backend/src/integrations/sync.ts
index 70b60dd9f..a2d48f7aa 100644
--- a/backend/src/integrations/sync.ts
+++ b/backend/src/integrations/sync.ts
@@ -20,11 +20,13 @@ import {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
   INTEGRATION_TRAVISCI,
   INTEGRATION_HEROKU_API_URL,
+  INTEGRATION_GITLAB_API_URL,
   INTEGRATION_VERCEL_API_URL,
   INTEGRATION_NETLIFY_API_URL,
   INTEGRATION_RENDER_API_URL,
@@ -57,6 +59,7 @@ const syncSecrets = async ({
   accessToken: string;
 }) => {
   try {
+    console.log(integration); // aashish 
     switch (integration.integration) {
       case INTEGRATION_AZURE_KEY_VAULT:
         await syncSecretsAzureKeyVault({
@@ -111,6 +114,13 @@ const syncSecrets = async ({
           accessToken,
         });
         break;
+      case INTEGRATION_GITLAB:
+        await syncSecretsGitLab({
+          integration,
+          secrets,
+          accessToken,
+        });
+        break;
       case INTEGRATION_RENDER:
         await syncSecretsRender({
           integration,
@@ -1407,7 +1417,7 @@ const syncSecretsTravisCI = async ({
     }
 
     // delete secret 
-    for (const sec of getSecretsRes) {
+    for (let sec of getSecretsRes) {
       if (!(sec.name in secrets)){
         await axios.delete(
           `${INTEGRATION_TRAVISCI_API_URL}/settings/env_vars/${sec.id}?repository_id=${sec.repository_id}`,
@@ -1428,4 +1438,95 @@ const syncSecretsTravisCI = async ({
   }
 }
 
+/**
+ * Sync/push [secrets] to GitLab repo with name [integration.app]
+ * @param {Object} obj
+ * @param {IIntegration} obj.integration - integration details
+ * @param {IIntegrationAuth} obj.integrationAuth - integration auth details
+ * @param {Object} obj.secrets - secrets to push to integration (object where keys are secret keys and values are secret values)
+ * @param {String} obj.accessToken - access token for GitLab integration
+ */
+const syncSecretsGitLab = async ({
+  integration,
+  secrets,
+  accessToken,
+}: {
+  integration: IIntegration;
+  secrets: any;
+  accessToken: string;
+}) => {
+  try {
+    // get secrets from gitlab
+    const getSecretsRes = (
+      await axios.get(
+        `${INTEGRATION_GITLAB_API_URL}/v4/projects/${integration?.appId}/variables`,
+        { 
+          headers: {
+            "Authorization": `Bearer ${accessToken}`,
+            "Accept-Encoding": "application/json",
+          },
+        }
+      )
+    ).data;
+
+    for (const key of Object.keys(secrets)) {
+      const existingSecret = getSecretsRes.find((s: any) => s.key == key);
+      if (!existingSecret) {
+        await axios.post(
+          `${INTEGRATION_GITLAB_API_URL}/v4/projects/${integration?.appId}/variables`,
+          {
+            key: key,
+            value: secrets[key],
+            protected: false,
+            masked: false,
+            raw: false,
+            environment_scope:'*'
+          },
+          {
+            headers: {
+              "Authorization": `Bearer ${accessToken}`,
+              "Content-Type": "application/json",
+              "Accept-Encoding": "application/json",
+            },
+          }
+        )
+      }else {
+        // udpate secret 
+        await axios.put(
+          `${INTEGRATION_GITLAB_API_URL}/v4/projects/${integration?.appId}/variables/${existingSecret.key}`,
+          {
+            ...existingSecret,
+            value: secrets[existingSecret.key]
+          },
+          {
+            headers: {
+              "Authorization": `Bearer ${accessToken}`,
+              "Content-Type": "application/json",
+              "Accept-Encoding": "application/json",
+            },
+          }
+        )
+      }
+    }
+
+    // delete secrets 
+    for (let sec of getSecretsRes) {
+      if (!(sec.key in secrets)) {
+        await axios.delete(
+          `${INTEGRATION_GITLAB_API_URL}/v4/projects/${integration?.appId}/variables/${sec.key}`,
+          {
+            headers: {
+              "Authorization": `Bearer ${accessToken}`,
+            },
+          }
+        );
+      }
+    }
+  }catch (err) {
+    Sentry.setUser(null);
+    Sentry.captureException(err);
+    throw new Error("Failed to sync secrets to GitLab");
+  }
+}
+
 export { syncSecrets };
diff --git a/backend/src/models/integration.ts b/backend/src/models/integration.ts
index 35ef6106b..d5d9b80ce 100644
--- a/backend/src/models/integration.ts
+++ b/backend/src/models/integration.ts
@@ -7,6 +7,7 @@ import {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
@@ -31,7 +32,8 @@ export interface IIntegration {
     | 'heroku' 
     | 'vercel' 
     | 'netlify' 
-    | 'github' 
+    | 'github'
+    | 'gitlab'
     | 'render' 
     | 'flyio'
     | 'circleci'
@@ -96,6 +98,7 @@ const integrationSchema = new Schema<IIntegration>(
         INTEGRATION_VERCEL,
         INTEGRATION_NETLIFY,
         INTEGRATION_GITHUB,
+        INTEGRATION_GITLAB,
         INTEGRATION_RENDER,
         INTEGRATION_FLYIO,
         INTEGRATION_CIRCLECI,
diff --git a/backend/src/models/integrationAuth.ts b/backend/src/models/integrationAuth.ts
index c68fdd336..8f4aed663 100644
--- a/backend/src/models/integrationAuth.ts
+++ b/backend/src/models/integrationAuth.ts
@@ -7,6 +7,7 @@ import {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
@@ -16,7 +17,7 @@ import {
 export interface IIntegrationAuth {
   _id: Types.ObjectId;
   workspace: Types.ObjectId;
-  integration: 'heroku' | 'vercel' | 'netlify' | 'github' | 'render' | 'flyio' | 'azure-key-vault' | 'circleci' | 'travisci' | 'aws-parameter-store' | 'aws-secret-manager';
+  integration: 'heroku' | 'vercel' | 'netlify' | 'github' | 'gitlab' | 'render' | 'flyio' | 'azure-key-vault' | 'circleci' | 'travisci' | 'aws-parameter-store' | 'aws-secret-manager';
   teamId: string;
   accountId: string;
   refreshCiphertext?: string;
@@ -48,6 +49,7 @@ const integrationAuthSchema = new Schema<IIntegrationAuth>(
         INTEGRATION_VERCEL,
         INTEGRATION_NETLIFY,
         INTEGRATION_GITHUB,
+        INTEGRATION_GITLAB,
         INTEGRATION_RENDER,
         INTEGRATION_FLYIO,
         INTEGRATION_CIRCLECI,
diff --git a/backend/src/variables/index.ts b/backend/src/variables/index.ts
index 2be394971..269f0d778 100644
--- a/backend/src/variables/index.ts
+++ b/backend/src/variables/index.ts
@@ -13,6 +13,7 @@ import {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
@@ -24,7 +25,9 @@ import {
   INTEGRATION_VERCEL_TOKEN_URL,
   INTEGRATION_NETLIFY_TOKEN_URL,
   INTEGRATION_GITHUB_TOKEN_URL,
+  INTEGRATION_GITLAB_TOKEN_URL,
   INTEGRATION_HEROKU_API_URL,
+  INTEGRATION_GITLAB_API_URL,
   INTEGRATION_VERCEL_API_URL,
   INTEGRATION_NETLIFY_API_URL,
   INTEGRATION_RENDER_API_URL,
@@ -80,6 +83,7 @@ export {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
@@ -91,7 +95,9 @@ export {
   INTEGRATION_VERCEL_TOKEN_URL,
   INTEGRATION_NETLIFY_TOKEN_URL,
   INTEGRATION_GITHUB_TOKEN_URL,
+  INTEGRATION_GITLAB_TOKEN_URL,
   INTEGRATION_HEROKU_API_URL,
+  INTEGRATION_GITLAB_API_URL,
   INTEGRATION_VERCEL_API_URL,
   INTEGRATION_NETLIFY_API_URL,
   INTEGRATION_RENDER_API_URL,
diff --git a/backend/src/variables/integration.ts b/backend/src/variables/integration.ts
index a6e2029e2..77e43e688 100644
--- a/backend/src/variables/integration.ts
+++ b/backend/src/variables/integration.ts
@@ -1,5 +1,6 @@
 import {
     CLIENT_ID_AZURE,
+    CLIENT_ID_GITLAB,
     TENANT_ID_AZURE
 } from '../config';
 import {
@@ -7,6 +8,7 @@ import {
   CLIENT_ID_NETLIFY,
   CLIENT_ID_GITHUB,
   CLIENT_SLUG_VERCEL,
+  CLIENT_SECRET_GITLAB,
 } from "../config";
 
 // integrations
@@ -17,6 +19,7 @@ const INTEGRATION_HEROKU = "heroku";
 const INTEGRATION_VERCEL = "vercel";
 const INTEGRATION_NETLIFY = "netlify";
 const INTEGRATION_GITHUB = "github";
+const INTEGRATION_GITLAB = "gitlab";
 const INTEGRATION_RENDER = "render";
 const INTEGRATION_FLYIO = "flyio";
 const INTEGRATION_CIRCLECI = "circleci";
@@ -27,6 +30,7 @@ const INTEGRATION_SET = new Set([
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
@@ -44,9 +48,12 @@ const INTEGRATION_VERCEL_TOKEN_URL =
 const INTEGRATION_NETLIFY_TOKEN_URL = "https://api.netlify.com/oauth/token";
 const INTEGRATION_GITHUB_TOKEN_URL =
   "https://github.com/login/oauth/access_token";
+const INTEGRATION_GITLAB_TOKEN_URL = "https://gitlab.com/oauth/token";
+
 
 // integration apps endpoints
 const INTEGRATION_HEROKU_API_URL = "https://api.heroku.com";
+const INTEGRATION_GITLAB_API_URL = "https://gitlab.com/api";
 const INTEGRATION_VERCEL_API_URL = "https://api.vercel.com";
 const INTEGRATION_NETLIFY_API_URL = "https://api.netlify.com";
 const INTEGRATION_RENDER_API_URL = "https://api.render.com";
@@ -92,6 +99,15 @@ const INTEGRATION_OPTIONS = [
         clientId: CLIENT_ID_GITHUB,
         docsLink: ''
     },
+    {
+        name: 'GitLab',
+        slug: 'gitlab',
+        image: 'GitLab.png',
+        isAvailable: true,
+        type: 'oauth',
+        clientId: CLIENT_ID_GITLAB, 
+        docsLink: ''
+    },
     {
         name: 'Render',
         slug: 'render',
@@ -175,6 +191,7 @@ export {
   INTEGRATION_VERCEL,
   INTEGRATION_NETLIFY,
   INTEGRATION_GITHUB,
+  INTEGRATION_GITLAB,
   INTEGRATION_RENDER,
   INTEGRATION_FLYIO,
   INTEGRATION_CIRCLECI,
@@ -186,7 +203,9 @@ export {
   INTEGRATION_VERCEL_TOKEN_URL,
   INTEGRATION_NETLIFY_TOKEN_URL,
   INTEGRATION_GITHUB_TOKEN_URL,
+  INTEGRATION_GITLAB_API_URL,
   INTEGRATION_HEROKU_API_URL,
+  INTEGRATION_GITLAB_TOKEN_URL,
   INTEGRATION_VERCEL_API_URL,
   INTEGRATION_NETLIFY_API_URL,
   INTEGRATION_RENDER_API_URL,
diff --git a/frontend/public/data/frequentConstants.ts b/frontend/public/data/frequentConstants.ts
index 0a6733b25..8a69465ac 100644
--- a/frontend/public/data/frequentConstants.ts
+++ b/frontend/public/data/frequentConstants.ts
@@ -10,6 +10,7 @@ const integrationSlugNameMapping: Mapping = {
   'vercel': 'Vercel',
   'netlify': 'Netlify',
   'github': 'GitHub',
+  'gitlab': 'GitLab',
   'render': 'Render',
   'flyio': 'Fly.io',
   'circleci': 'CircleCI',
diff --git a/frontend/public/images/integrations/GitLab.png b/frontend/public/images/integrations/GitLab.png
new file mode 100644
index 0000000000000000000000000000000000000000..ffe9e244a13d0182db0ac27ab040903ae8fa36e6
GIT binary patch
literal 17927
zcmY(q1AHaHvnYIWV%xTD+qP|IV{dGn*tVUGH?}w2*vZD+c)$Gbz2ANB&HQ@0rl!!<
zJu_WZJrk{>B#j7%2L}KE5M^Z~)V}J$uhIeo^>y4R7}ETzAgo0dMFD`OMEG}8$ggt}
za~U;70Kk_D00;^L0A9aPL8kzK2MYl3#{>Z2%LD+hU2?lr1->qXS?b7IDJlZ!zF-&t
zBp4b1{0jp6+5upAfd5GQf&g-0`2P#5fzkXA4G;i`v;{!?4~^be{hv+dtNe%OziaS9
zu>T{m5ct2;gN5M#3%C4-ZAsY(^{aw)k<oPn0N~O8Q@{Y(xj0|abZs?s+;tQc_{^Oh
znM^I5%`BO`9bNvz1rYG&`vM&;-Azfn9UYw9_`C(l{)>X|3;qw9nT+JWNZjoO$#fJ|
zNW`68ElIeTSeRJIgy2X>NCaFhtoYO<r2dEf>r9Z$#@*e8kD1xa%Ztg2oypnNnwgcC
zmzSA^jhT&&@r#1d&Bw{z)SJ=Cjr_lb{Qq(!EZxjqZC%`Lot;SjBiGc-*~49sjO;&(
z{&)NDcDmbI{U1$EZvSJ}mx0Xxxx&oK#KQc)vcFgb{)6RHcD1$q()=I!LaYM+Mfv~W
z{zs1h^M928Uyb>1OaBY|WvURI0Q3KLn-CnX(H=AaAOet;5Y_MoyA1G3B^dLu*7Q(b
z>jA)kNN`X*u}QEfEQ84uSxr!3lgVh`a39vmM9w}zbJpv9yZ4lDt*+kf9(``!NOJ8I
z$*v@G=>_gecV{pg)^F=nR|=|y5GGmdnT<YP<=y9jKmS~9ZLepo!)~#+tkI(JvlG(!
zYZ@<S2-9X8JXET<YIrvg;r>4IUI7=2ooWT`WV#+XBNqq=KAy6gZvD%2$=RIoy!Q|x
z$vyZrG<4QCa}_Db=!~IfjI#LlQPUUrL@XVy@_e$qAhFdj*=1i@5;7(&b@4&1%*RaB
za~xWEjJ#ULaArrUCKvVNIL}#Lp19`^^K1_uusNapcLNtJaBox4&Bo7oa_aphBF;md
zNZ!cwXr?Pa^V=5j=F`tPe>q})tBElp``;0fl&iTRk4(`JbMX$B(#S%qmb5QU+j%)I
zo9`REUY_byZSoy|G8C?ri0$bHxuC_crE92_6EZoi&ZnuFrhapqI-QKNj%A+v5P_v@
z{Jh-{7UYkDkchB~@3M^|k&>D&O#9POF{XuIZs<%@BM2{2dc*vtHH)ei({04Z(mDd2
zY=Z~N=H#vE-EwL1`xy5y%-pyR<iCdV|NWdX_)}r_SEtZMvL4SE&x-n-&_?UyT5H6}
zXnYWQ%+g=E5a^uH@4?33G+};hXl?0L4)wVFS?`@Wr{|w%(iGpdXk4G+>C|tQGtBzi
z8tKzE6vJ{p38@}Mc<p4=y|+{)@ICx5{>ysmh$K{I_j~6C6c-ToX)Z`>_{w+<drlg~
zhZ(H-Z@#((aW=42N@;v#X+?$wNB_@TbNXSj@gTU%?93+ow_h!9URNB6iCoqR@Yu%U
z$EJRb-PVg$;A@ZEJbK-D`rli>U17BlRm#vl?b&QeOeEW&fr>xuzBeEMtqP!#y{~42
z5s=<WEaF%z<j3`Ac@v`izfXo_N^DJJD+hR7CtK6m*L_x`GxWXI)Ko&fTs*1wRVtkO
zF@6WX`7Uh)O~N?#3+XxXk(c{>|0Wzx!?^in10!6py5C<sG@7)Q?E+OZKPCIw+vZ28
zL(m$GEb8W1(S@Lg-9*(w<sRd?&LW~)MWNAdxPF6SWCQecy)lHy1$6#0MIxZ$n(YJb
zC8m^rz5b^Y%*Ex|z=Nq-Ti1^vwcH`g9Kvh2A#$HE*ZWv#C{F;Z0ODd6Hl8kC0*pza
zLJr%}_O@ls6bbJxl8XE88YKd#bP3w1%iOy+i6~7ZTMAgWrR4(?XO=)QPKGF$g!OtV
za7xT@qb3QIC6GyE6Dz;k6`w(g;~+p4v#~h}$Uv-v^9(EIhb#aO!gz^fn(C71xC%5H
zO47%$^=>fK0|ycdAD;&pX*TR+s@Y+`fM30r`Hqzg36KH@#;eqk>eB}D)Hs&|dyAs_
z2UMdy11&o6O9U)%Xf9sq-HkVR@NTM=#hrGH(7tI^Rs?jbqIlmcwnVY2E}^2r-sSeQ
z&D7{lLWK7{E{hLo?}>h_H66W6Wc@wwTUL>P!L9T;+uAnO)fd6~My^wZoa_&w6d8Ig
zqUbzcvVgf$h0k&cXBQbn8ryio`2g-Fq}#ekaDV9K>sT|joWFoi=;u~Su)nn3iRN6t
zG=SEy?CHa1QrIuLl~LX#i`z`I7(zDauJ`9omN|gGA=2(`oc(KffndKAo9LMd3AzT7
z@APtCH~(n!J-)yd3=umj1vcH5zRcLi(;$jN;29?|_&(<M<~0fluwBc;(GB>PSW@lF
zoTW&|0~EUBf0N9!^WsidS&ow}sa5eTMPwloWxVD8Jjk9wOO~w9`t7Uwp^s=!vpI6#
z!hU_-c&J5?HT)d&8`^^L4xJ`4T1JAV#{d>h6FKP#pHtif<6f3Mx-g{sTk-)t#cmpA
zG^J>-YQr?_PHlPcWLpfDndJe^za<&(jbDGQXtl8h2g>AvCGN(<1zzc_Jzu%hHBH9Q
zv^G8+gdm<Ei*HYmFF%nUj(hu9hGqEZ{tzrg_>%XCw!BAVFLOYkcKG2#*<EjAjOUcN
zflvV8)pqzE-VqHqzYkR<YpP+9;~^Xeo%WeB6<u1U)FF%{wZ&SpH^f`ArDPMU&nz$x
zbYE?3!k^W4re}1fL*25aBrsW3;4x9Z9m^2O20;7cG($B>)d26r3@@2sMRyM;K*Sx;
z$E*&ei|E1^ps;Ydx&-e2S}S2@E;-*Nl&`yh23ac#^r^yu0%U;bk0}7ughZ%Sr2S^n
zJpMQiZ@*lKaj{<lA1%gVe;XVK-dd~OK4I@$cJw@@ha@K|RWu++Oe3O9fHCMFoy{#@
z72B5e;Fn{(boKfcB_mhmr!yh@X`7KABx0jlYx(EuGqsLoik@~M<_SNAAbXjhR4_Y<
zNb`F$MqT&jh#r<j=WF^7JWeI{_O=H)PMAILOj+>~D3csj+SZri$>4al;OfGC0Eg8Z
zwoDUFtb!WtC%V0xQ*WD~E4h8YsWkPwba56YFm^s?!C(1Qxh}7+i=XFG2=F`cdbw5o
zMlxu%JcNpIc^3P~p8GbN$FtVdoaM6ZA44d>M+A+%p}!N#%{|3gmEk-S+jiQH#G7-m
zBxOo3?w=T8o?$2ZChhproh;xFlX1NPCwN;a>C#!h9p+mETfY6wgPY-E6X!emAsAs<
z!qbKp9JCl`@vRx?zD&AN+V5>P*vRcJaYaH2yQcfJO#)REB0`<{Vh1wP+$X@q%P6|5
z*T&i>iN@qYyR{=WYDGbKH95~foSO$4wfU52Cnh!0%TRJL3EH=0s>1c@vX<6%?n?-1
zD}AKLFtjgtC);S)P|*_*2A`GA`&f|qdMBWys;bVQhOqFlk5}#^V}6c!y%Vu?nvuQF
z+Q%@5uuJ02pIh9IgD}&I+QB0ihb*j{a}VL{pCCmnOD)fDaxzg&<nZ_<Vv~={MFE&F
z{x;WPLYMl9!54u<NrEAPa}j5Xg!x)3m&yH2YBjS{m*_yq?uVAQ$ofbwA7{bEVlzgZ
z35b27+kDmfWuHY1`;q`hOBj}}C?B~=WGD+&g;-5JlHgvXvijM%>CHhdv5||(-s;cj
zVU#@$lW-ea%<7GE%fjLk_z#1fx4XT)znS=mo`+GMR&{~ga;>U+y{;B>X={;AoEEBS
zSm5;ivz9nGCh18;@wGQDf<Mqj!)SCNs9wP1)KJ`#NPgfzNqE;=kC%XmqdW6FJuFF3
z=oSQ41%WjSOnQm?x0y;1zg%oQ{Go>iDSYmzLtu)EmhK~;3_|xdZAvAlz`fJJZYO{A
zD=v_w`G*h#7*tMc->u%Fc}V(am=Jn_|B~N2oX7gMf-6cNU=;3=BEn67iZhS#jH1+$
zqe{Sd!4>6ozpACjKjNW-V_tSWXx>I)JnxTl`ZXe+SwSVmKRGD+6LT(-UB7J9uOrOw
zSSi#W2qGfjh$_s#=bM_w=_=w-Q90p!wd)@{%wm|~zK|ZNS<<MFfs|<w3yI6+5C8Jc
zI)m5{s=e#rff5BjXg~F8;(Rst^lEK~uG(J){G&pOF(tkbU|~gtgz?g^9i??^sKEnS
z^QzZnNrd1y!-}n93P2G8$fj6P3)=jn>vq?86&n@Ukh);#9^`*4@VD$C1hA_}%J>dm
zt3B18xV@@4OjNT;qX{sizy4G$<$>rcSV0}QmEpG~PUsR?*iOZHv7HO)M2!8^Rm>$p
z{70`12?&NE_n#sruDvKne8--)*?ARtdL4VwBnAq(m%}kIr#B&8gcygt!3MmupI9p+
zB+W={m!-KRQMEQMIG{nKy6_!hn2=iDbPp7GcfnMfXh+X5YNf!};$3%;l$gvNjT6sU
z3`{GdSjD3~d3XE%{l}N2ZLS!R{;<XL-yrFz$B_6E!{o63ZI&o@f;#_Znu!&KEs8{r
zWV%bA+uiv$Z%PDwbnU5IrbQEOPseW%7OK{b>cbnOcS-s}#AMDsd-L<2B!v~y2P(JB
z&Xoa@Fv33|LwI%qF8S(?f_c5SfXC0mxBF~%L^@C{d*N6O-`eo5$p~+~%(0Q4NK$k{
zkpD@GeMf~FMkb?g^GJ0Jdt!!d`%zwl7!Y-o+k)(K%@ocAz3V(YT2i)v58DJXwB{J~
zG#7^ehE515%(BxuDQ5=jHRE&=CJ_gpWZ$}#J!5^?4l}it65H>OiP;1S>yhp%=$8ze
zBKmRSp3-gOhsC0rK4<dm65*4DsaBhMd*ev!cr7AmxZkk+3x9xNlz;iOMmBJJq`57=
z?8JgpW!UNLRMC65)c1TU92{!J=?BI*BBq^F3=I|rm}`}^S~s7^rTP_3`ZXbvwTemX
zt|H^HSJCmStsVf-LdHTOTDy|!Z$VY`V5s_r0X;ZINDMJ8wjTKYF}TB7)Xo=jt!#y6
z9oPiIY#4FR=?#`fl@D4BQ6iLh6U8S|5zL|Uf1mo%8PmJy31PVC$r*v?$B|&L&uNo8
z&ceF15IE6Hk}o96+oM?KTHuG>x8b2f-3#D~$ASq=!!0`Cwn>az;9In92@`_zox^9N
zUjc6Ux-apiaa3jrB40cF>o?WUQi_B-KfVbQtHewb`*=Y_80`{+(B&qzMRtYzrp!g8
zu@IO<NYWlbi5e>xDia2;7%B3Q=%$@9l4jZh0XR%y?4wDCn?f;Jf;<bp)E+!ICIz>l
zlgtvS4s7#z)7k_{g>{cVQV=3T6wv-JyY+~thhWK){Xsej^a)+*Ax|G9&9HBsD~mst
zUzIX9fUt84DAsZ0s*bL>JmIKJP8Lp9(`^YuZgox)Frmx?&yK>Sk{K+N3{a}ydo4*+
z|6n1JlM4c=5_(20jzKQNlH%!hZj1&eRzHX>7S8teI1Z(}<~PCMQT}n4h543n)V9QL
z(;yw`ZNWbs0vQgWN&6h4pd5=PLYOg{l7!FNmtOt(JU~CN{mJ3-9skt=fx$FgUMcn=
zJij)<#uuj5cjkDpUTL0{bUjF|45LJ#V)(-+9LtXeTzOM!0DirRzKybbftEJoB%MBn
zBGo^{Yd${a=fFh?t}QQgNkm)5$%s>_E?J%-s+@g3pYk?XI`QnA>UrzoQN^I_CKcn|
z$*kEjGp$%A!p{+K@fHvnk#eP+tf;t87L1-%-n=YPNG{?EpodfSYP!GrDz?1dLtS^u
zGM~+tJTFpROKUy7Ag6Qog3kld#(6xB?A?q++bLqL6~zn-Q?NDkY|`(|8+}^C@PNU=
zMDYVD)rKmn1+Ck}V%4FU20|D^T0(v9G+r#+$-CwETsHPNjVB~qNktMnZamS`(Ils|
zNPYVbz2G%#7OzhF@K8|gQc~<uALWvuD9XuNYp2H`lrK3+2<XSx{4<uegs<A9Z=c6W
zE@pGHWY7C!u=7<;22CV!2_39+g%rbQZXP5R=XbiP2;Qp!@$H)C&f-lC7Y4<O^rH1)
zkYv_!+vb#!T+j>$ceMq%<!GM2Io)U}4u)LRz7YS~JWdW!hdEC6Q#+L?SisEb*xd_7
z!t;8&)Bx5#`0bB3wToYXt;LCv3`7IGg0<bY#{m(?vfXGs<9N;34O^R&Hz%oBhdN6J
z?$bIy@O~{F3<WGf$nK7@T2$2HApbDEl9?qhNp5><N~gu+uwBMXfM-8oAS(3-ehZ!+
zN8F0%-D((&DTtDi-+92c(UC|rlVv{pj~q}$G%s0pMsRIJz~``w>5d)aFV)(%q&DXS
z8Il}5F2pw{T%!4YyeL~y=i$xi53S$)CQMMKR?~m!K9^cqutFGU=d^$1MA2!s{?3%n
zk{12NRK7ElLt|^Yct6VVvr8W~w5&IdWR?f+>D2<2Or}j|Z$kN}txK2`3mFzcWc9ht
za#T=6JSN%lW#L@HVgOQrt)x_HdJIxZj`*yVgai5VfR&;!;n(DDxf5>_9v03^sE0zs
z)l1rh^_RT|LHTn5uQH_?l{9tYuR*yp5K&0N!*5C^7S0MbR6H)AxSq%N6$j-9qaa<7
z%56ce3f;nc_wPdmr;$9S(_Z)8RLF&^h#p7c-8Q}2gc_-^q(Tpui@zeal2Fy1f1V13
zM}+3NV<%>CCED*5SE&<$kg8258>>JVh<3>@M^6v|q9eGR-96IL@L5Kjh%`>b#KS*E
zz+SWL&p>!L9l%}NBwWXXQ1h{IJ93DmdGfD8?2ua1HdEXCTX0T|#`Xe9R7)sfgXIaX
zy((KRLRi?FamOQFN=~O<%|SI3Hk78>6`OvHX#qpEVa{qHq-ip8NTMjpIx2ruqTX@`
z{?gov?eU?ku^+;M8?cknjF>vw_@<hOCUwf9+@2U8W@uL9w~i(}*`^|AspJ-jzND27
z9Fy?p#7LT&-Kv<=ar>nzhLC)p`fwbf)=v&LfgngvH<a{>qf$wEzIb%70FNqe;Di$d
zIW;_y&YAT{6boFfzDZ$g$3_NL+toK*T%O})WHR{BV9&b&7?YR)M8+6Y>_eqzs0tHP
z>GCWVhqI7y2cTF<N#xwnr{njukffL|=a$iI)?!$%Yde##<TgD*X`UA_CLuc%Vd}~r
z=|5|C>PP+-W#~Z~#ojT4%yuYbx;iej^c(BdsWt)E%1X-jM~-hbN}NUyNP3Wn&h&87
z##{3O<AN&~A{+&y^iNj?()Ff&#3B+g@$Bh7b*ZGzBb7B9gO_vuBcm6c5qT^o=VcCS
zO|Wbf@nS`clZHdosA1}(*tc&#WG}ncU{-Xeuzy<}k=QFK^H9C)qMNIOw_}-Ov`i?s
z`v1jW9;ldr?`Wq+_FC5(D?Ru&>*L5d%^Hjm7QPf|-1QQJRJ*P_bl)$L!#$N2gA!a!
z<Lle&?tbF2h{`?a9!#J~SJ|=q5H}cCLH9kfz*PG=hti*`hdA)n>*Md>^<K-Kb0C%w
zaqo}kJe?qvRNII|>6BE?M5NENHUArlrWkBvBk>(6V*b1X7uMdLnMMIXPIJFbFc@MX
z${_zcLNNO0F}3`2&p-RKof};vM*qGWuZNkNUe`Go`b6G{<=ghG&#R4_r`6rGaP&(H
zfv8>n{sPx6?!%&KD2KZIz96Z^XY4htR6K8Q!FL2`tv_B>=X-wP1+jDY`Y^>u%E2om
z4ob&@Hh`mk_8%8Lreiy~J|W$sn4R)@6(`5(y<Pk{%OmyJD>FNfLiho~uY$j^8t%E@
zFaoIFiF%0x8rJ^a<lPW`Pjtl7-XzF>n>ExIRPH<3%H>ad%yp}((W4>l8JfG1dj2w{
zfjRIl0omdo?mw>w{({Hv%zc<2SljTzC4b+!b%haH?p1sr{G4OSpI_Qi<caBD?AL)b
z{%A9<&Mb9v0j@Xnz6wO)Z!-+_wa-qbhKm1Y2G-ORjZv7Ddx{Bc;qjwX37QqJ9nAR)
z8#fIPg)Y|*`L;4n9jO!~%)3#v?TG};`5w4#k=NgP#a&$xMi+F3=pl4;vpDbwn}$zi
ztv`Q2dv4_2!KgSX2{QXhLcjLz2cxg9nbktGrg<cG_^za{BQ$qq5CT<8ak?Ta)h~#;
z@%pd>vCaecdei<OoL3%qHhvFx4EG2x=uqAn6v#YCFcK`dLcu+-!rV4yED-1x+4Rvq
z{njSF{pUUJS;^o<{x&noDcytB5Eqq88P7#df2)X1Yjk~|Z#%57a69RP53)6AkC=$%
zm$-L51iR4G$>3aCKC|b~-(Eu}FR=0&w${7at9yzH%2PzPw#x0Lw+>B7)Nb*S#j~>T
zE?Ej5Fh@s_B&iny;ckPdl0P%>O`A>z?Kf}J$V)dUsYbNMANl(aP88age_~u;LB{0L
z#llopxbGzmb~{k~yV*VPT*3QxV!E^!g?n2H(lT=I{7h1B&tGKZ*h6YmA^q|P?p@9H
zHEWcUj<{_$!}?m~QZfY*O}$sCoXxh5jJVsOuIg&4KuJk1gW1cgw$h&CMDP{8DZh5w
zTde<%ztPguDifs<-%!72JYqw6nymKV8Z?teYDl@C8)j46A}x}W4cO_)t^F&zI34&_
zB@y^&;^KO~s8G1%)E>!Spdrw#ttu*qlndb_VM2`NR;~UNw7tv}R|<*^%wYd{PQ{*{
zLUKEm+8pI#cW-pxY#qyA>y#G!Pn-y}zd$R2EK>r;dU>>qD2rXBsTKv9d#WK-v6$zZ
z-<Ny({wMpj!!-V5MlRN%D|EPCxq5g@!tBxX(iAIvlWJ_lcMJQ5t5n?}Y2<Dtzd*wx
z94S>YtheFCJ*{F7>clPWGb9p4EqFgUN8(3^K^(l?p*AdCV~#szNRU80;k?JUT2x-G
zpkI=HITp-OhDn#pH}*-bjQa-lNZy6la5>G}m185A#qy@|Qh#}YKUty@QM~pWBrweJ
z7Sjo|WhLelUv*s`GTIH}e>g9@L7~4NKw>tFzRN_{@s+$iK%j!pFnA7L%gKKpS%faB
z6AD5>uJHK`>yqnApbZ^UHOaxn6%Jrq47U=bB6#J9?ySGLH0keJL;8=^&k46~ao60I
zNlQj*qoMjM;gfMPdqghVdH@hBosjWOEzwGowc0P1LQg?u*1-uqJ9mYLOgJFvGmS{9
zZ$I2E2)2IH9P?<{=1m1Lu#x`O8hAIgGvSWltPqV2($=(HxLgo(Ib(2TJhsGkKlsh1
zHC7S#Q29KJB?;jc24R7UE}p3!%j_&`kFiYY_kfZcMz9C^HgG>uz_cA{Wk897=mXK|
zvt9CS9giWCexS)306xXVPnUsq(ohEPqs9z9HVr1j>}Of9r<*}0I{zIe<u2F86lE`h
z80Mof1G#~QOa*K}Cz;)t;5RUB)6s03A$1?HuSpV0QPQlb0Qx36G*V!=9e7{=TpK({
zX5yT;a_vG^n9Kty-~dGuTd1mw_y$HDWA6}4kdYDNwAP2}A^%{2cL&pOF(Vk)$U#H#
z@}jE~Lq0f)+QPIbN6^Zr$;^-`i-lPigjtMTxEfSpqBGtB3Z~uS?OOmsk{=FRlL$7q
z02n98*;BDj^})OP_uTet<MOF>mx8Fyoq_QAJ(X8u5#5-iHLWt=E{n|AeJJr<YMENt
za}GmECybvRzDaoBQ_x%AhElyKM13!NHcrOF<BLPU#b#kq#}c1ueHw(DC{bu%bwluJ
zg&Pmq-);D;MkO~_wd|7IRua{NpaPYu!DA~DrS{PHsL@O}Bh&|freAYjs}0h&ktR}%
zlZ(G%Be>&|ovMN)=Z6)ATFue(31P>J(-c|f)8Qk+<KR;rQ{`rV^fWV)Bv#4*dA>%d
zBRoe0tdgm|z<_wIr^kV~lQN0zyS`VHl&utz#zm@1b~MoeZ4(-ri@*)eJcvkC>a*`f
z8p<<=6f22{Q5*u5W`VDi&&H$D158(g=o|}-W};)<2<J$3T`Hs``~|Xw-VE1*PXh07
z;VTJ=YcbYQmpX3A4+%`p#9Z#e2PoOy<m)+v6E5)G6o=nUjXY{!<N%XT>X@dq^1FTs
zpnyIXA~VPbyI6S8Qf<Oi+IEXZgmE+FB^&yR+tM5fh`hwsh|1Un^OK17sF{s7A<36m
z(5Bqa2|&SE-~=A_2|4~?X;wK8VI6AjOzPR1T<R?BP==U?%jo3PRgZdV=_Dbl#S0>5
zvEx~_BY{an&6Qk@>V*#Ag4R=xd^K<S`s-2=xc2=(pW(8gqb4f2Qpw*SNt}kQ=0!3R
zFdxMRafN8G34mC*T#Fp_)SZ9$&CKf_A-D((6|q6{Q^q^WK++za7lg%v6b@U`QJtlu
z3>%x=1QKi1G9=WPovI~1ly#~-D0fY3G=u0?uMEY=aW1RL)P48JHH(Rds;KqUJ6@93
zN0Da6AlJa~Q1s(U3(@0uhN^EWu<j~F`YRq?X~jUrDwVu5!qGty6A-&8D>qAZY(}R;
zX5py^XDmq6sB0Uarxqs?ErPfk7p?F4Ep33FiT9Sw%$Q8JCAmSCRNe~1Zg5UOz4D@B
zO9eH;(Fz%W$v#%*JB(^p+n94tZs7m0l<aN>A0?8M+_VvBQHb3@fOXi~RFzTvqxjq*
zHx3bppjT4?H=+VF%UULJo)JF6T7dA6=x0p-;&kM+ugErxOss%|LSK?0JHJM)qi3>Q
z3%!YI7c4%l_3&^G)00d1s?5H*Vkn*OzYFp4nK<VC1<5;`Z$;2gzw1Fi^l>|J18r>j
zK8I1(jN_XXLl#go#MVc7U@s)#(^Py@!_6i_wq_*j48RZf;v{TQ=ls*tv*GIz>1KKY
z4{XyZ8zwlz{)Jq<=GE^t0JDzfosg8G-7m0JH%cTWVC<iUy&!>{M6lm5jMt&0q%T0U
zY(jPA4(#0&g^ufN@#>`5An8Y-5YpO+9yAohs-8I3(M6ohulKI2BTRebU<jR?{5tDh
z3vv{d!V<DF-Le1@z9JIV;-&)lEre;#PgXgO-}b`phS(-<YcjEunHo2Fbg}LtWTw=A
z&{l0KFw-1^4~J(}d?D^mi-&*;ILbmc^PC)K62Tnnq^VlCc9k4c;IOXM;Bqa$v&`8W
z$-dW$i283#TSM0u3L4S~-YJI#g?b)7I9A1VH6z)oCbfUa7fytkdUsg}<B~WNC0}6e
zV|VDgN?LTA3@Y7?8&gn@wZJ)N_H#}`=`Ja<2ZVyvvCGv$(wKyAL#dwe(O4Am-*npu
z9lVy9+=-m2CgvqYDwGZU{)@WD`5Om?WknE}?nyH|^6Ujiw=w?g5aM}5$7_mH{H$;K
zuZGF$$FPvBo5k-Pl|2ib>S}wt8SD;JMv&wgWOF5FVWJVpD>dT}yequmOeQAJdL4}S
z$;JXCoW-QJ;tl!7OP%hj+;{Z2JEUBgX^>iUfGT4P(nkoY?re<nAX1>%Qx{B28qB`t
zI)Ab>Rx6kKf!TZBNiETMy><?{-vlZ;szI*Xhqf<zZ^o$+h_H^7gVIf*OczUS#J&w!
zu!2i(+(<x%2j$lod(Wh!^ojS9bYfgVrW-w$kVW3Fnw3+>0RkW)d;ch%c)ati>HB(w
zY&yk}2UM8Ltj9@;(#wf|orWnB4SY(KVU3rR|E;lu!S(|y5wZB`-<~sT*tkXeq;SxH
zTZZeM<|7DErpxz@VizVFg2_Vqqu!C2Lp<UnoA2?e1qwCw;R-VgVxqWABweME6b4<)
z`6BgxE$@!ev`Ws3jU-V-`UH4qV>_q4$4tiagInTqyi5e^_RyYdU0MPm)vBK8&Wa+<
zYT^b`(h9+J`(5+e&p7ZQwdS<1oS0aY!o?>eTE7%s5D|-iggt1oJ#YaU$`&mSO_QkS
z_mUaLl#5v;j;2W5<gcc)fNE?K(tn|>q9R2BO|~gxmfl!&Gxe$HuH+YK2P)Z`2s8u|
zH(kTSR|U@;uIxh;bJVd$fsa;UcQ`=Z;qGI-5s#Hy5>Lp*NI3^A!A7lKk%)<TDvu@H
zu^NMyb*4r(?C6K61JUPfgGkcY4u~9uh-Btnst%*X^O`-|;{nCgfIC@>O_{F#aCA6x
zNWZRGCg-p^$XKJD77;AUt;n*+$b3iIXXaAWAFh-8v!KRd6I*P!K+`OoJDB5%zK8LL
ziru2+d-Nezy(ElrvJwe)4q0_&USr$zh(!k#I{krP)7tK+qWC(%yC~Lf6^%lb4s`}r
zQ9G0GjTf|(ER$R;3Wbu#L3xTBZEG$fL}hGSL~<!!bG{Wof8;I5A{zIvtdRJ{vcC1@
z^_!`VNf4~4tdf-kvX5jc6nU^MyGs2;=<C8|fSdz<7nn|G<N%1}NLDUZ;hggGIp5JF
z^FfI<R)w&rIsQ$12;OQ$#fDHrV1TJYQ-XmLd=Tvg#9#*}GL-Np$Ij>(CEKZ_b#9Bb
zg0@;g=3`;GY<cBiC&3G+G?Qobkz(x(W%UaFHD$Y&oGzFY0xk93UeRR|W#sw|eDY%|
zt>ks>vIERGWE2ni$Jcdpq54D0<G}-xI65}tZsK-fO?Ad>-W5mWAI5iH%l?Wo{rrev
zu%kkANgtpAqiYptrNp6eCS=g`ao~d0i4YjX3o%S64@fxsN~2D~z2qSjyNfuZ^PO@B
zx(yHv&Z~Lvf{l1)0neuTT7e4j4=~+BLOA=;j9_FO3VIq=jJU_R`Hs4*6lv0y_=@Av
zREjhXYimaklbr8Pa>90md~b;_9(<-UQS9+pA2X*vO%uMc%zTYgXq~!tzgLsr4AUgI
zbDZN9oE`3of5`ZS@5~j>#@`_sD^j&BNK1UN1#Zc8sQw#`#-boOkKj&l9|<3SdO+o%
zkO(R;TqZJKnu<Uii?ir2Ok3Pb*ikysl3TO-z5`pYGa`?x+yc7)^gx%WFr(T9_ONW7
z+B~6^OK@|Yu`_ncsAl=VB$rqi8WxFZ%-%tff&HkH-dh}KF1QsYz{^B<nIOe}7MD@Z
z)I@f>p-HX<PDJ`Tj)PTHD8BxWu-%|ilPhy@xkV)f4t+pYK1&>ywzWBYne?KJ0f~<;
z<0ARPx=b%i15$|_M>xa&yD9tqiuqMNm#Ge3EeHKimG?4;C5SQLv%jvcx%PWL`=wBP
zCFXQG+s<>FR`Zb1PrxV~6^?C#z5<uQI+O`WKn`+|JQ>fxg3@o3j+-Z%XXXNlwP5zO
zT@sP%+&@;0W(EbQv9D3bi6BpgLdhE@JFQQf<yo<LFE<k?C0m*>l7DOJwepK)V0IS_
zu2Zk<IlY?p&}6Nu$bhAlprTVXb^&J(%w@X%fb`E!^)5Pq03>PhfSNYc+?IreYJ*7E
zw>TZXu+QY39lUB!+xPV)RZ=X=Gn*w1DWedX@WXz043yUy^z0{j(2u#iRcG>754^c#
zF=xztQW$u0zobyp^f+u>mIUa3Xv~`eH_Q}?t^*-<G8=73vk$6r&`B3ESezW2-KGgy
z-6qg%>kp7vWnlAmgvxQ(-?m*<ipzH0*so{LuG^J!KhOpFfO%{IX~76p2iE_5wK}@D
zaIfb;JS>nfuAMIefpLOWRdn?d7cOW>lqNl+j|6tC8ghzlnt#!LvwroUbmM9fH+$lW
z7UL;isU%5kGhPy1YqXhlJ!kPyE;XK#6BhcN>q0p10Ylq(x#%((fn!%)EC0zy?~%{Y
zQ>gV%1qu?)R+h5YUw-NcSu>Gakx<_W!nT-YWKv9$vWHB@g&72<tg}_7ljO&~zc7Mi
zup2ix=3C-rwa4b@53RHq^Kx)yszqbQuj03P+^EQXRn4cZfO`?L&%MxDhK%b2OJ+LM
zGe+DOB1rmv*~Ym(*C|!#C!d0=&h9hJGz$uw-W|2Ufypb;ZUycFA9*4n)={E;`qIB-
zDTf5e0ag)Ou?l3Xm5nSIx%=J^6D2EiGYWg@u?ixYUL>OCsWyF*RU!2zGWPR3bs-QG
z*Z0-(Wm`R7+Y{0J*q|V4QHr!BAQ_4{&RK$vxPoi}&)>gVR>yi?ivc*INeq>zFSWd^
z&kiXu*XvMF2-9vuX!+<A5>UrhN|vY%4U%Qj7Zs$jC_|j+Ygpfe(3v7o!Diyac3j)T
zQ>~^?DsZlsvYtM10w;&Q#_jV0w${<<i6XMtg%-B_v}sR(?SVw(oi<9R1;nIUJ***4
zxf9O?8uudVAX#~+*$)w*el?k`LE~mVt}?N|9z3^m-EYI9OpJnEtLEeOML%c$+Xcd9
z^l6UTAou3#)$D=CZxWIv=DCBMp)7L)1(lnQDC{H?%jfaD?Q|fO*k}JNDZ4ORDdB<i
z1ov}Mn+^zkE3{lsToYW02leic?-8v7M5O(?pSQ3VWOG&KqG(^}ifhzXBq3z0P3($_
z(%9L}_Uqi%&@NVD@#Uz90)Jk;US7FtH=Ig7oLb=e-9he37jocZugXMNJJk0DosjM~
z>uj|jDRfx}#}dmG@Z3Wv15!v*FqEU!uuuoR9!iF6eg4^&7`qS?y_d?>d><oU^XQiu
z5@YwTA1I(=K*&|H8c~n3<t6tMC?Ko1QCNOT;~6z6S~ESK6%OT5y|0cHIdM{PG?W#b
zOE3}6-{Ls6JCr=<NZP0QAzO?BixWW^ZnL~<o+2{ILP9i<s^CYTNSYW=H_~Bn754^t
zj`qQPXlQ<K(7nHAD`m#qt;n>8D%U1SQJ5M1x9;F1kl<n0P$Yy~^!tKZsK5BSl-#oZ
ziN}}MJgRVEaZzoN=9p_3qpIkcXB1W!_FO&i`*-s$+alS8m+hef6dI0lE5sXigy}@E
zwp*c(9TD0yynyl)%rIJ>$4TzNQ?wf~s|=tGuzDpYBhs%G2ID_(Qz%N8G}}zf^H!lX
zitky`E37)td&Bj~Xe#uq1TL3()1!SI*37sUcJleejESMiVQic#$Zb-H$uVH!NW`(b
znd(61sHWednmu#CvFVg*HPb><mJfdrX2E_m+xb0m=1lJ`xJmk<WQ^v6gRdEG*NUhL
zR!g;<{40x=XsY?H4Uz|5<tvh=O*_Tw?CeWY6a^~Ph6ZtFvBO0IN*;p6vjv5r(iD(<
z%Irf-%6_Tex?MmC^gV1^iq~fVbuGqIzdl^!3e#QDAMQ4byya+_U@5LZ42QsrJ%xIh
z3nl$b3`-9LzBc0f2k4B<4~1eDz%0mNyCd<Cs*TNkkOc*%uwUo1^FbTq8z$36ub{7b
zO#=lA3xN_yPyw<b`Hng|o3@M;#1C%l<`9T^pZh37XNT0#7r`$8#EC|>g@$K8sXhSv
z`QsniFjLk}`0OAE0>estZ}9W0Qy`iOw+c8KN;M}b(3pcSGEv-JB5x?v`rp9Uid1LH
zEVjv*ss5x)3SO1le>|m@32K4Ay5LmAhi3MecQEhCPkgT=ERebuQRGT$JtKcPN){0W
zaMP^fA2{F}eMPx<mAZ}dvXcDNs7F6@?OiZ(T#K9vv-ifD?ImQ(Hi!6?Wa@+*z4VrN
zQE<mC#uk+z!GEFH%Xt|jPE}Yyhv+SkQeK&Fa6jHWT;QKH9^dhV`$yENnj1ht{bCs}
zmX8!zeM-3+VdUbJV~<-#9f}fZ0^7HnbugDk*aC12N41CWesG_mTYrxZimLCm4651}
zo1qqKMNF1UToeG8R)2kFM_ym-Udi(Km#={EHkrr%>L0T6(Z~{@;9Xx)s3J?Y=OaQy
z$|J%2)w3M3Aks7-Z0v$WwFr%0SSxZ0xYnzu<y<gxh>+oF%^qWiQ6>vR{6Rbq9|TN9
zRU-RIz=rx2q69D=y}wjEAyZa^D|26YB;l7TLf*gqUFu)Drv#1E;)j!hVNppA16K&<
z_*IM~JM3${M$yLWQj4K`2i8<Y27X$k6@KQ5c_jdf@BJ><=Rdm8x6UPuH|02(yy4kT
z42zljBYR2)<k(N4cDVthf|ap5&1_ZQZ6#hv!izn{RK1s81wAE9q&bd$uv{N|oy3ZJ
z0lj_#{K^zrZmHN*E{UgPhhOC}grP$#tRK_|+bS#*@k^THTd~sYQC4SqSfS8$K+-&z
zQN+>xEyFl7mRwOIeBaj#bCkpH-aC|N*v2%n%i<TOOF!A<x(>%=QPjCXP(X$5!MEV)
z+a~63{R{EwKM&}l8DtI)`VF)ABBAF#X*07;J3>F3mLanuh%I<*seWm<>#~4tM8|2$
zcoSJ8LA5-yXzq%JY))ITauLBs`Lh5dP}pQ*O}0@QTE}T-3b`NBtab&HrGUgis6T^s
zubmkg8z|907gW3$e`Qg~)b>-bM|R)E#s6WsJ{y+`;qflHu1zFAy6s{inkoDw-(KDc
zo94$XD4qaGqkt>0ch9!CTe4AIkQ(6M;U-I-xBH?Cj$0C9>kePy+*9BjAivNvk*K}+
z4jobU>G|I>2cPh~o~R+`eki{O;#r{$1xF))r&dMdMJ*;YEOraRENnh}%jFHw3Vs1I
zKqODa@z-UAZGDu{>s3?$?S*P_q=!^1y7nP_EvoGu_%NnV(pL_*j;K!@Dy)<)nbAwI
zphsB7W&+TjJK<ekhgbUVV!YE?Cy3vn9?q4v`O(P0ltW6Bg0`Y<bs30tAK*NYTrt#`
z*?4!nj$z+Iyz=;u{EbvkOa^?ZMTMc46e&UB-hqZPW;n)3Q1g2l1`G9(omqRbc>+fS
zV023AvduKhkQ>D$yoI{`N!E6+F_3dMq+P_OI_;#oBAGY*oePj%U{euJyYwbed)zKp
z%pF=Tf0*v^D{U1pdoWI<)I{9?E@1~=MC&hr=_8>~e=S1TH(nbaEY{WgR)4gpB=jvE
z@y)$I_`-@zCfS05q@z25P!rI<P~a&#oux?Q@`r}WuMUIySo6X_d%kC61PaLGb+3CE
zmw)%YR&pww09Pq%Nk>1M6AE51w-f4<M#fS;w06WQo186tvEB*#SQ^1eA&A<2FLL%y
z0K4-eRH(wx#_L?c809-GlkHuOC%h@8vLbV{J>QUa1at<?03G=}2I~L}`A&K0Edwfi
zo$o8ujCv~BXQqN>D^r1oT8dT_s6WA+CqJ-C#gI!A6F+uNyF{iC8KaeTIu|592=0st
zUVSKnxs;X*(NkEr4<;c)Yj%RTmvQI&a9KJ^mCk9Pg5-Fddn>I@w$lX14Wgm`R5pfa
zFHof?r&c*R-z7U5LHVX|WLwm<%~3}m@-8)jkGg9|1xgeK9k%Af$s<{)a<iQHuVi1n
zk=`X)M0siNa;r42@HumYNz*KkRThZ<8EE-uDs(~=p7Mxqk$r>Yf#kvTD<pl003l=W
z#3wc%!IcF=Kx0c8Z_o5`z46}kkEn{l1oj>DLu62>&^&2GM>z?4)=wn^IOP_`VtgFH
zO3<HZ9eC8`XT-wmUsttnA1qm)m8j(+*Afvp=6mdlw2G1t32V>15PXpg2$fbnxX-*D
z#_@j$%t8@11|U+vQcWPf-1*{d0t6ifs{xh>&~oNsXt`jn02MC@H7KAGSIQ!xh{KJ)
zh-1Ul6?@pJ08%R^f@ajYKkM;x)OCsI?YVQOY=8L_3V38cV;;3Pl9|-kM<kh5y7~14
z<FT^;<Ik+3cqfSa$2#1Ra#sK%k{ha9Fji>m4~0)z^2tA3c!yl3H;t8!mJXPw`Q-9a
zl&O@#QgqxrE(33_d>*1Vehm0&NTJ_rG^Z;Vg=uMEXm;7nifFB!oBOu~rs59$ohZ-#
z)5+8JH5vs{MB_wch;GiqIY?qJ?$(V3>u*_JL&>AYO#ta0ufWD}()?@{IdmxN;1E#J
z(iDm?EKwN(Hso9Q-nJnnr(|3k))2uj7FA^57FddRD%~7pckl+@`_~&F+PpIfm3gNg
zwDGf%JSmX>$L<N>nD%4OT4_BC!yW0$S#%gKUOX-k$)Fk(BZE^tacNeZA9hkX38E*=
z<FQ%X6?h-feM4i+Ejx8yl53{HKUApiL>;GB>^Py{TmB*I5z1SxRdxKQ*l^g3%Inq~
zPSNMPMOCNiP0+vCihdf3h{tC{j8^oGISQ}(F8<D8@9Uz0>quWnKImo3xW6C-D8!|W
ze=H0NO5gS8^qhk^3KygiE#l8$#!I-3HQYMk;TB7tC&<YNz|+^pCEIOt><=)i8KqgX
z%p*+C#0Rgp$iStm9paR@e4y4LnMFiCX@Daibl74wNn+u#Ek{aWHqhV)f`=hQO{iJB
zUN%9HfPah{+I_rUAAv}H*7)L!2r?VzB7<%W9PiqXvo@*FB#FBvL1r-NzDXQ#aQB2`
z2@6)_oBTsIFH)Y%&QO8gqa1^~B<@txx#nUakUxV{*-wNJ$!>ckfFfjCKZ7krqR+(S
z$$?{0hI8!6lzf(7{xw0d=MGSQr69B{IgB_cepzb3STH;`_M1=F0~6u|(cs{7Yz>{o
z?$B4pO6k}tf~d6m2mN{907EXHC>FtIZ9C>a2#G=GFzejVSLXUn$azFSg-9Qn#HsZq
zeY-(Hpv%R-EOkIm45=4AzS*yQJ0A%cQt=9he1vz!(ApQ>zeo_Yfq7s?->QuAhRg=t
zj!i1RZm2TeCE7LH_|0h+!*Z#C+D#XT$ADrwx&;ZiqBB$d)V-`B^x|s00c;TV;zkc`
zN<o53O?|}Raa2^1lL_43%0JvYME|AS!`O0;WioqHe8iVtJCxvgonp7=o3+(ihnPSl
z<6w*8K;cN0^>)~GfdLUbOMKkP$=HedQ1WSu)oA{gLekhmiE|Mb))Yu+wk$io$jE@Q
zb<3NR?U2h7DYW_N(0|Yd5e@i3d27Zent{msh97~8f#7M%(jLlMkW+uEm7dOM?!#G9
zh5y*TOnI)X@|wUGM|&}j{B;2Lp-_tT;WV;Df^vzBOU%wePiYjC8#>J4=k^-L>u%wJ
z$mM})qP@$3+U!hVS~w7y9J0s6BmrZPE88HY8u0)f>lDWxl5E$tMhseIexJUvokx5}
z7%mo`fVPXL)zI-_4{WGLCxt7loCPzb`7SB%%$(c(Q!)?ym~d)%)k<ooYPb8=!F<qd
zh5$jq`$`@}$G<IFJug2!8->t2YBp6rbR^eYDSo)9D-5p$X%0(#D>ze{`D@&;KWxW?
zM6?p$<WHHliG#Nd7;GheC2P6L+JaSJy`BWgd~qOBt5K`9Uw!24-dBcuyk`$pZD1J-
zU1||Xj!UyqE$6Ky1oq~T?J08DGt*$_r*i1?8;g~fWJ^3gKpoPr(>8aUH!*BSJVdU=
zcaUA}%*Gv@CHSTJ=<q2>`;AZ8Dz4cy5L{9OeX0zuA6K3~S{scrEteS~kocmc%I&m%
zeJ;2LCh+AI^Uwqb+&*jM?l`bRY;RFoi<p(0x_mZNU~r!m?EG7&l}-wTnZYU||7KRb
z(}F&$?yzG*CwzTK+a(vGGCS;<%Q7J;1@I>rc17$v>iP4!F*!~#%gOb!fn9#C76Auh
zM;H!kw*1G7p+4b;-|$tt6YK{;Bkv-9{bF;a1AmQm?R_)xB-eD{%c@U~5S)(7y|Ylo
z-3#ry<GyF@jZv1~9va<1$a&Tj6aj2=9XK`6o?h6?BB6>Sv;x;(7$pnqHAHS(e-Sk~
zBYD&{o%_fi-2v(yYF5a0m*8+l=kA&AQ<W&Q#@$5K`ubfwRM@;?`TMbo-HjVdz9USq
zFnNA*eRlX}Z*n7xPPvQ7@_}=8^sV-v>H1JyGl|N2`6L3DmPm&=OdrFyd@HQiFN4!W
zf7blvxc`94RB>JTNPWEMB#!8=GrvRJO!Nn*cY>|4zpb?+D#EC=-RLWH3u+_J;-juG
zhJPnG_0j}OGPmQN<btuzx*_;uAd^gIo=<z3I!ZK-X6kgTw#DeTb)hkyr9g@2`6y=~
zDqg0mw3L36GwRKIxS<5*l+tPY(L4X=U!iCS%TB*!1VnC7EE+0LW94kHLf+-EC;8Wp
zIAFNDxOSt8VU?xNuyfrYAwL-f?bMsx4N9f()QK5{8Ey)pwu{1J!XA54Yqk<gjX_^@
z{WvgEw7?<ghPf~e_BD+Gm4Fn?=(PY_>(LMTMoK?6Vxjxf5T`=OcPKg>NyS7BxZ-R&
z=d_Gs1;eYN0b($+_vW;w(uos56$Q=JoeQA%GBPRb;mC)V)c7l`90F$G?veR$Al+3G
zn`&3@NJqnx#PV_bpyPuGTt;#yyp8sJ{;EA&B2O~q8dcFf19zMOAD(xw6)1Ke2Ly&o
zdF|6S+8=dy@FvU1&ffqCIQ03WAw=PGZy8WK;1g5VYl2UlF!bOt(DZ}?SNp#tf4)#e
z&bz(Zf{?IDVi+=R1XSv0W<)x<tSl7+nGMAGF^2>|Se^Lo-Rd$(YmqbrWob4R316?O
z)D9$HL5lbK`QlWIV(3H>{6=rcQP(kbWTAT=Qj?I2blHAw47r+zeMxyd%vtHv6A>xB
zz|&1(LEa7dydmoj3Hk@O8%E6{hao5X{owQi>~RW+Lsh!1=y|iYVL>v_!H*OR)J{Ai
zl<)(%KxjF3L1r&9SNEe%c(I>g!x*lgfZ+E%?wjcY0nr7o6vZ|PKkTie7_W+0+e7(x
z0wUa3BZb!!2jdgKpc$kvw9^^O$1fQ8l7iHzW4-)$m2tqw6~3L_9p|z>qEFZ_5&N*d
zKWn=Q4LkcD853CqzS*5-KXO&@>1Pc=p*w((i>_(ThoKd4>+hj%1eD~=<zGu24EDzo
zQNTeRX|WTLu)?BD@KDxg-gnN!qte69$8@XGPR4sC997;z>WR!`QO;}3_r2(#P*K)y
zBrGn;gk_9I%HQEhga%!^StsX!^q-0CiZoL-{oMv+zUyweQkF5Sg0T090+5*NUMR5h
ztD1Y<Dpn>QTXgWvU3Ny4%+g*Wrv!n&m8uGMn~g+IQ0O-9d=(U`R-53l%_Ew;Lk~m8
zXB;|3@D8nvvXn*cB}m8Hdvqag7Te<wgP^M5g5>&w<XSwa_P7TLYEPTmEAcbkzW<sO
z;RX-|jk@kfsK==!XsuZ3rcjHySI6HPot^;bCp&!tqM$67cuh<}8g%7uEbqXe473e*
zDX(+cQTQXW#Fd!?fEvE=3&}-TreS2yP_lK*`!2gb)|1?H$iW5{rjRs65N%sVaHhLT
z$O3IF#D(_uDU^X=QjW*fSCmV!1^CK`0L(kv;vgU{v!x+`q}6Vx&o}E0%7cXnfeYVZ
zYCbdy-AKeRu!Nz(QypczuXxMQ@((m%#>tCCBz;JuXc4fXl4C|Or*RE*{Eyebi?5b^
zY!bRni)Wf4CPIi~1Hsv^Cj7UzQg~UPa8N};1t_v~bYAq{dm&uxQ32uR3CVJu%t!$U
z5C0kl=R^nJV#asxQ5G^9Wo)yqdm)F~D<qNou&LgjCTJX!k;%AQAbf@!rRA|5Tjkhk
zMP2(-3kX2j3E`b$1th~GXD#S^xZL6uNr~I>D-f*CdgVUlJ_$tOO`Fu-+<c>y$_;zO
z@co8EEIM57C2swi$w-}%k@aI;A877KLrc8R$kHJgp%S_(?Y)4A$8eH8A23nK1DNZr
z)up8ed>DXMTmg(Ps$4AF$JH>U_8AhxUkp%$b%?O`^HkW*w$&jAe(Dy<L=5G-)%iRk
z%_&q*#@!<S!Z-g5ik!mqOlp#!Kc>haewQwgF<|wff+2h$`0&*+URuxfQVSpXXY)Z%
zG2OWJ8_k4Q3y_Ry%5Zjr!Or=3N<2e4{cA-JxkRm>N*gB!8HmnWSW2{9Xh%T=UWFJ@
z$Zk?CvXmKyKn&D>z4q5gu8Huqw~4-DX0QkI<u^nI1+{5o;M$16xuk|+YMcwvwvTXB
z_S|}2HT0M7eYLPAH>!w^%TzI(qVwo;NMPR2fW`^GNG|9XIK47%-@iFM0>?b`M~~#|
z?~L+{WXZ4W`FzW(pnGPdm0y)4tuo>$h8UjKs;1Zn%N^o76@GL=kxt2_{hrdV2nk&n
zP!&c|!O-<p$D+s5kk*f0<ZN3p6#wSNPPmy_<fWU;&^_Aq=oWKX5ks2QO)n!zA9tfi
zO!7prW||G;jp7;<%L(e(HSQ9Q(5<8rFLJMeh>=amVd~wiv#4wC-9T_7cw`Hr=O=Yl
zw8XSld0QBaoeVkQpXJvKk8U`x5Q|bD*v0=}0Ivj4`-nS_B}(Hx7GQ)1GRW7(JK`+z
z3}m3FBE^o?3Q?$^U5CjB?d8b_fe6fk<E`7~PImW4awe02g{PU=jykW>eITx)4n`2M
zl0}E#z`XbC*4Wt}k)uJHt`>_giV?JIY4ZqGOik$LKuVw1nU3S`cXQs$fkv975`&}&
z7{4Lc0DPV=hj$pmj|JNe5rTF@R;EOJR8-91U<?wrutQN_z?zZ&4GBED6x=O&`k?T`
z*9|z{cy7-99%#uwMkIIw{6MP(*)=_G;XiFesB&_Q#05)`bax6&=){b>#~7?p=K#VS
z)j2+MEK+hSGTHR%38QSo9V*vw68O29DYuD;M2Rd63YPB1;$BP+xTrMSA?ZgEgn2Y(
zQGN(s000AgNkl<Z5|Rk$OnZ;#Jvp2?e(n#9ZU8*V4egVl%2{35tEzsl{Q@8mWkQk9
z;fD~W{a4`UU>QFL@C~qBQtk{+g?|z$NR2vhAQ+R2873br%*_l$0Q;@iUFlBrY!H29
zglV3E&m7FEXCQR#4{{d(QJ@=u&4uH5A5Wba`zcPwTJal5YT>m{ggPK=%rj`L24))h
z9Dd#P)O)>o?<wrmh|CHOHV-jur|d=2?m0%Gz%?UOHRKVq>)-?k3uUl4EfDTKAd83u
zctUT72}KW(07!yojj<dM?Ij#L`-lX%D1E<y)Ah!H4ZE@?Kih~<=d@#Sdtwv<BltOF
z9z636l{xzzP`v#na!5nx0D2w>AlB<Xu~jn%1MMxq2gr09c0|w@m@}D3L$WA?pkO#f
zGUTnPG$W58H;Zl%TP{xr*a|^G=00lmso~Uz&ixfnB%%j(9(4|5&A-05C9Qc-)DHk-
zz!uo<IFAf`4~QEiI8nXOIl$T(-UZ(hbMkGNZ)b&=e%FvkJqTe8(jQyB$(ig<^lsF>
zaQBxUcnduYJ_CVV5FN<^Qw}k${urYAeVRRul4bSxyj?^4M2K+>EciLVi~$)V|A!^L
zVK}~=gc~G0CuK(Ozyi*SDFoWW?hm6>kVhnm%&u-T+&hp0mPww?+yx+<5W~pov@E30
zdeU{g_Yet427wt@ZK+U<6NjqWCqlgNT&OL|yyhPs`nYXDunC8M_bu-{VkGq=qmKRd
zi)wQ2g6iWeq`LIvrtKc$RcH$*!CUqwwTW~TPJ&;vo;mxY6pNZ%#1~;qp#`8d@k<*K
z5(K`_#QOAm{-J?=@U(fv>bI_N#+)~;b7K9}oSc3K(j#<1^+8(H*Q>kTtAPYV)+Qv}
z7)Q3ik7OP=`(<`9N_HjK<uzM%n>0#r>W$$Zjq<2-I5GB@;}^VP=YsPG_Eu}7w?)om
zu??vXNRv`<$xOim;Sw=z?@*hZN$>IbyxL79X!{K$I6;xB+b2Q<7)gGOGPf}8{umhF
zUr=X+_2wyS-pNa~d9P!6!!VVwyq``z5a<Tl8sa3Uq+NHjAYd3>##chg{oc^^-sgw@
z&xL=!bN21;+d1ogcJRskqXYYRkLJ>0$V&chmo@}0N(dNdd5nzGpPA92pPT;4p<mbM
nhsi4#u_zJYq8xY&59<E|2;j(}$MeT700000NkvXXu0mjfDTa1t

literal 0
HcmV?d00001

diff --git a/frontend/src/pages/integrations/[id].tsx b/frontend/src/pages/integrations/[id].tsx
index 60cb102ac..370723afa 100644
--- a/frontend/src/pages/integrations/[id].tsx
+++ b/frontend/src/pages/integrations/[id].tsx
@@ -192,6 +192,9 @@ export default function Integrations() {
         case 'github':
           link = `https://github.com/login/oauth/authorize?client_id=${integrationOption.clientId}&response_type=code&scope=repo&redirect_uri=${window.location.origin}/integrations/github/oauth2/callback&state=${state}`;
           break;
+        case 'gitlab':
+          link = `https://gitlab.com/oauth/authorize?client_id=${integrationOption.clientId}&redirect_uri=${window.location.origin}/integrations/gitlab/oauth2/callback&response_type=code&state=${state}`;
+          break;
         case 'render':
           link = `${window.location.origin}/integrations/render/authorize`
           break;
@@ -241,6 +244,9 @@ export default function Integrations() {
         case 'github':
           link = `${window.location.origin}/integrations/github/create?integrationAuthId=${integrationAuth._id}`;
           break;
+        case 'gitlab':
+          link = `${window.location.origin}/integrations/gitlab/create?integrationAuthId=${integrationAuth._id}`;
+          break;
         case 'render':
           link = `${window.location.origin}/integrations/render/create?integrationAuthId=${integrationAuth._id}`;
           break;
diff --git a/frontend/src/pages/integrations/gitlab/create.tsx b/frontend/src/pages/integrations/gitlab/create.tsx
new file mode 100644
index 000000000..f1b747ba7
--- /dev/null
+++ b/frontend/src/pages/integrations/gitlab/create.tsx
@@ -0,0 +1,125 @@
+import { useEffect, useState } from 'react';
+import { useRouter } from 'next/router';
+import queryString from 'query-string';
+
+import { getTranslatedServerSideProps } from '../../../components/utilities/withTranslateProps';
+import {
+    Button, 
+    Card, 
+    CardTitle, 
+    FormControl, 
+    Select, 
+    SelectItem 
+} from '../../../components/v2';
+import { useGetIntegrationAuthApps,useGetIntegrationAuthById } from '../../../hooks/api/integrationAuth';
+import { useGetWorkspaceById } from '../../../hooks/api/workspace';
+import createIntegration from "../../api/integrations/createIntegration";
+
+export default function GitLabCreateIntegrationPage() {
+    const router = useRouter();
+
+    const { integrationAuthId } = queryString.parse(router.asPath.split('?')[1]);
+
+    const { data: workspace } = useGetWorkspaceById(localStorage.getItem('projectData.id') ?? '');
+    const { data: integrationAuth } = useGetIntegrationAuthById(integrationAuthId as string ?? '');
+    const { data: integrationAuthApps } = useGetIntegrationAuthApps(integrationAuthId as string ?? '');
+    
+    const [selectedSourceEnvironment, setSelectedSourceEnvironment] = useState('');
+    const [owner, setOwner] = useState<string | null>(null);
+    const [targetApp, setTargetApp] = useState('');
+    
+    const [isLoading, setIsLoading] = useState(false);
+    
+    useEffect(() => {
+        if (workspace) {
+            setSelectedSourceEnvironment(workspace.environments[0].slug);
+        }
+        
+    }, [workspace]);
+    
+    useEffect(() => {
+        // TODO: handle case where apps can be empty
+        if (integrationAuthApps) {
+            setTargetApp(integrationAuthApps[0].name);
+            setOwner(integrationAuthApps[0]?.owner ?? null);
+        }
+    }, [integrationAuthApps]);
+        
+    const handleButtonClick = async () => {
+        try {
+            setIsLoading(true);
+            if (!integrationAuth?._id) return;
+            
+            await createIntegration({
+                integrationAuthId: integrationAuth?._id,
+                isActive: true,
+                app: targetApp,
+                appId: (integrationAuthApps?.find((integrationAuthApp) => integrationAuthApp.name === targetApp))?.appId ?? null,
+                sourceEnvironment: selectedSourceEnvironment,
+                targetEnvironment: null,
+                owner,
+                path: null,
+                region: null
+            }); 
+            
+            setIsLoading(false);
+            router.push(
+                `/integrations/${localStorage.getItem('projectData.id')}`
+            );
+        } catch (err) {
+            console.error(err);
+        }
+    }
+    
+    return (integrationAuth && workspace && selectedSourceEnvironment && integrationAuthApps && targetApp) ? (
+    <div className="h-full w-full flex justify-center items-center">
+      <Card className="max-w-md p-8 rounded-md">
+        <CardTitle className='text-center'>GitLab Integration</CardTitle>
+        <FormControl
+          label="Project Environment"
+          className='mt-4'
+        >
+          <Select
+            value={selectedSourceEnvironment}
+            onValueChange={(val) => setSelectedSourceEnvironment(val)}
+            className='w-full border border-mineshaft-500'
+          >
+            {workspace?.environments.map((sourceEnvironment) => (
+              <SelectItem value={sourceEnvironment.slug} key={`azure-key-vault-environment-${sourceEnvironment.slug}`}>
+                {sourceEnvironment.name}
+              </SelectItem>
+            ))}
+          </Select>
+        </FormControl>
+        <FormControl
+          label="GitLab Repo"
+          className='mt-4'
+        >
+          <Select
+            value={targetApp}
+            onValueChange={(val) => setTargetApp(val)}
+            className='w-full border border-mineshaft-500'
+          >
+            {integrationAuthApps.map((integrationAuthApp) => (
+              <SelectItem value={integrationAuthApp.name} key={`gitlab-environment-${integrationAuthApp.name}`}>
+                {integrationAuthApp.name}
+              </SelectItem>
+            ))}
+          </Select>
+        </FormControl>
+        <Button 
+            onClick={handleButtonClick}
+            color="mineshaft" 
+            className='mt-4'
+            isLoading={isLoading}
+        >
+            Create Integration
+        </Button>
+      </Card>
+    </div>
+  ) : <div />
+}
+
+GitLabCreateIntegrationPage.requireAuth = true;
+
+export const getServerSideProps = getTranslatedServerSideProps(['integrations']);
\ No newline at end of file
diff --git a/frontend/src/pages/integrations/gitlab/oauth2/callback.tsx b/frontend/src/pages/integrations/gitlab/oauth2/callback.tsx
new file mode 100644
index 000000000..0612ee82e
--- /dev/null
+++ b/frontend/src/pages/integrations/gitlab/oauth2/callback.tsx
@@ -0,0 +1,39 @@
+import { useEffect } from 'react';
+import { useRouter } from 'next/router';
+import queryString from 'query-string';
+
+import { getTranslatedServerSideProps } from '../../../../components/utilities/withTranslateProps';
+import AuthorizeIntegration from "../../../api/integrations/authorizeIntegration";
+
+export default function GitLabOAuth2CallbackPage() {
+    const router = useRouter();
+    const { code, state } = queryString.parse(router.asPath.split('?')[1]);
+    useEffect(() => {
+        (async () => {
+            try {
+                // validate state
+                if (state !== localStorage.getItem('latestCSRFToken')) return;
+                localStorage.removeItem('latestCSRFToken');
+                
+                const integrationAuth = await AuthorizeIntegration({
+                    workspaceId: localStorage.getItem('projectData.id') as string,
+                    code: code as string,
+                    integration: 'gitlab'
+                });
+
+                router.push(
+                    `/integrations/gitlab/create?integrationAuthId=${integrationAuth._id}`
+                );
+
+            } catch (err) {
+                console.error(err);
+            }
+        })();
+    }, []);
+    
+    return <div />
+}
+
+GitLabOAuth2CallbackPage.requireAuth = true;
+
+export const getServerSideProps = getTranslatedServerSideProps(['integrations']);
\ No newline at end of file