@blamejs/core 0.9.16 → 0.9.18

package/lib/log-stream-local.js

@@ -23,9 +23,9 @@
  *     fileNamePrefix:     'blamejs'
  *   }
  */
-var nodeFs = require("fs");
-var nodePath = require("path");
-var zlib = require("zlib");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
+var zlib = require("node:zlib");
 var atomicFile = require("./atomic-file");
 var C = require("./constants");
 var { boot } = require("./log");

package/lib/log-stream-syslog.js

@@ -27,10 +27,10 @@
  *   reconnect and replay them on the new connection. UDP is best-effort
  *   (datagrams that race a closed socket are dropped to onDrop).
  */
-var dgram = require("dgram");
-var net   = require("net");
-var os    = require("os");
-var nodeTls   = require("tls");
+var dgram = require("node:dgram");
+var net   = require("node:net");
+var os    = require("node:os");
+var nodeTls   = require("node:tls");
 var C = require("./constants");
 var { boot } = require("./log");
 var safeAsync = require("./safe-async");

package/lib/mail-arc-sign.js

@@ -48,7 +48,7 @@
  * hop: `dkim.arc.signed`.
  */
 
-var nodeCrypto = require("crypto");
+var nodeCrypto = require("node:crypto");
 var lazyRequire = require("./lazy-require");
 var validateOpts = require("./validate-opts");
 var safeBuffer = require("./safe-buffer");

package/lib/mail-dkim.js

@@ -40,7 +40,7 @@
  */
 var lazyRequire = require("./lazy-require");
 var audit       = lazyRequire(function () { return require("./audit"); });
-var nodeCrypto  = require("crypto");
+var nodeCrypto  = require("node:crypto");
 var safeBuffer  = require("./safe-buffer");
 var validateOpts = require("./validate-opts");
 var { FrameworkError } = require("./framework-error");

package/lib/mail.js

@@ -68,11 +68,11 @@ var dkim = require("./mail-dkim");
 var mailAuth = require("./mail-auth");
 var mailBimi = require("./mail-bimi");
 var mailUnsubscribe = require("./mail-unsubscribe");
-var net = lazyRequire(function () { return require("net"); });
+var net = lazyRequire(function () { return require("node:net"); });
 var networkDns = lazyRequire(function () { return require("./network-dns"); });
-var nodeUrl = require("url");
+var nodeUrl = require("node:url");
 var numericBounds = require("./numeric-bounds");
-var nodeTls = lazyRequire(function () { return require("tls"); });
+var nodeTls = lazyRequire(function () { return require("node:tls"); });
 var safeJson = require("./safe-json");
 var safeSchema = require("./safe-schema");
 var validateOpts = require("./validate-opts");
@@ -221,7 +221,7 @@ async function reverseDns(ip) {
   // the original input. RFC 8601 §3 says the forward query must use
   // the same family as the source; mismatched families don't count
   // as confirmation.
-  var net = require("net");
+  var net = require("node:net");
   var forwardAddrs = [];
   try {
     if (net.isIPv6(ip)) {
@@ -916,7 +916,7 @@ function _messageRequires8BitMime(message) {
 // resultOrder applies).
 function _autoDetectFamily() {
   try {
-    var os = require("os");
+    var os = require("node:os");
     var ifaces = os.networkInterfaces();
     var hasV6 = false;
     var hasV4 = false;

package/lib/middleware/asyncapi-serve.js

@@ -19,7 +19,7 @@
  * paths / methods.
  */
 
-var nodeCrypto    = require("crypto");
+var nodeCrypto    = require("node:crypto");
 var validateOpts  = require("../validate-opts");
 var lazyRequire   = require("../lazy-require");
 var { defineClass } = require("../framework-error");

package/lib/middleware/body-parser.js

@@ -100,7 +100,7 @@
  *     dots collapsed, control characters stripped, length capped at 255.
  *     Tmp file path is generated by the framework, never derived from
  *     the operator-supplied filename — so a malicious filename can't
- *     collide with a sensitive nodePath.
+ *     collide with a sensitive path.
  *   - Multipart parser refuses fields whose `name` is in POISONED_KEYS
  *     (consistent with the JSON path).
  *   - Tmp files set with mode 0o600, parent dir created with 0o700.
@@ -108,9 +108,9 @@
  *     error) so a crashing handler doesn't leak files.
  */
 
-var nodeFs = require("fs");
-var os = require("os");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var os = require("node:os");
+var nodePath = require("node:path");
 var nodeCrypto = require("node:crypto");
 var atomicFile      = require("../atomic-file");
 var bCrypto         = require("../crypto");

package/lib/middleware/openapi-serve.js

@@ -25,7 +25,7 @@
  * which omits the CORS header.
  */
 
-var nodeCrypto    = require("crypto");
+var nodeCrypto    = require("node:crypto");
 var validateOpts  = require("../validate-opts");
 var lazyRequire   = require("../lazy-require");
 var { defineClass } = require("../framework-error");

package/lib/middleware/tus-upload.js

@@ -40,7 +40,7 @@
  * cannot satisfy.
  */
 
-var nodeCrypto       = require("crypto");                                          // for createHash() in checksum extension
+var nodeCrypto       = require("node:crypto");                                          // for createHash() in checksum extension
 var C                = require("../constants");
 var bCrypto          = require("../crypto");
 var lazyRequire      = require("../lazy-require");

package/lib/migrations.js

@@ -38,7 +38,7 @@
  * down() succeeds.
  */
 
-var nodePath = require("path");
+var nodePath = require("node:path");
 var atomicFile = require("./atomic-file");
 var dbSchema = require("./db-schema");
 var lazyRequire = require("./lazy-require");

package/lib/mtls-ca.js

@@ -52,8 +52,8 @@
  *   Mutual TLS Certificate Authority — internal CA cert issuance, mTLS gate setup, fingerprint pinning.
  */
 
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var nodeCrypto = require("node:crypto");
 var atomicFile = require("./atomic-file");
 var C = require("./constants");
@@ -324,9 +324,9 @@ function create(opts) {
       // so a genuinely-broken filesystem state surfaces in operator logs
       // rather than getting silently swallowed.
       try { if (nodeFs.existsSync(keyTmp))  nodeFs.unlinkSync(keyTmp); }
-      catch (cleanupErr) { caLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: keyTmp, error: cleanupErr.message }); }
+      catch (cleanupErr) { caLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: keyTmp, error: cleanupErr.message }); }
       try { if (nodeFs.existsSync(certTmp)) nodeFs.unlinkSync(certTmp); }
-      catch (cleanupErr) { caLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: certTmp, error: cleanupErr.message }); }
+      catch (cleanupErr) { caLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: certTmp, error: cleanupErr.message }); }
       throw new MtlsCaError("mtls-ca/commit-failed",
         "atomic CA commit failed: " + ((e && e.message) || String(e)));
     }

package/lib/network-smtp-policy.js

@@ -53,7 +53,7 @@
 
 var dns = require("node:dns");
 var dnsPromises = dns.promises;
-var nodeCrypto = require("crypto");
+var nodeCrypto = require("node:crypto");
 var zlib = require("node:zlib");
 var asn1 = require("./asn1-der");
 var lazyRequire = require("./lazy-require");

package/lib/ntp-check.js

@@ -44,7 +44,7 @@
  * @card
  *   Boot-time clock-drift verification against an external NTP / NTS-KE reference.
  */
-var dgram = require("dgram");
+var dgram = require("node:dgram");
 var C = require("./constants");
 var lazyRequire = require("./lazy-require");
 var safeAsync = require("./safe-async");

package/lib/object-store/azure-blob.js

@@ -30,9 +30,9 @@
  *   - PutBlock + PutBlockList (multipart for >256MB blobs) is not
  *     implemented; uploads above that ceiling will fail at the API.
  */
-var nodeCrypto = require("crypto");
-var { URL } = require("url");
-var { Readable } = require("stream");
+var nodeCrypto = require("node:crypto");
+var { URL } = require("node:url");
+var { Readable } = require("node:stream");
 var safeXml = require("../parsers/safe-xml");
 var sharedRequest = require("./http-request");
 var C = require("../constants");

package/lib/object-store/gcs.js

@@ -22,9 +22,9 @@
  *   https://cloud.google.com/storage/docs/json_api/v1
  *   https://developers.google.com/identity/protocols/oauth2/service-account
  */
-var nodeFs = require("fs");
-var nodeCrypto = require("crypto");
-var { Readable } = require("stream");
+var nodeFs = require("node:fs");
+var nodeCrypto = require("node:crypto");
+var { Readable } = require("node:stream");
 var safeJson = require("../safe-json");
 var C = require("../constants");
 var numericBounds = require("../numeric-bounds");

package/lib/object-store/http-put.js

@@ -16,7 +16,7 @@
  * Errors are surfaced as object-store errors with statusCode set so the
  * retry layer can classify retryable vs permanent.
  */
-var { Readable } = require("stream");
+var { Readable } = require("node:stream");
 var { ObjectStoreError } = require("../framework-error");
 var safeUrl = require("../safe-url");
 var sharedRequest = require("./http-request");

package/lib/object-store/local.js

@@ -4,15 +4,15 @@
  *
  * Implements the uniform protocol surface (put / get / getStream / delete /
  * head / list) against a directory tree. Streaming is via Node's native
- * nodeFs.createReadStream / createWriteStream — no in-memory buffering of
+ * fs.createReadStream / createWriteStream — no in-memory buffering of
  * full files.
  *
  * Path safety: every key resolves under the configured rootDir, with an
  * alphanumeric + `_-./` charset whitelist and explicit rejection of any
  * path that escapes rootDir after resolution.
  */
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var atomicFile = require("../atomic-file");
 var cluster = require("../cluster");
 var { ObjectStoreError } = require("../framework-error");

package/lib/object-store/sigv4-bucket-ops.js

@@ -49,7 +49,7 @@
  * with codes (BUCKET_INVALID_NAME, INVALID_LIFECYCLE, INVALID_CORS_RULE,
  * BUCKET_ALREADY_OWNED, BUCKET_NOT_EMPTY, etc.).
  */
-var nodeCrypto = require("crypto");
+var nodeCrypto = require("node:crypto");
 var C = require("../constants");
 var requestHelpers = require("../request-helpers");
 var sigv4 = require("./sigv4");

package/lib/object-store/sigv4.js

@@ -23,9 +23,9 @@
  * Reference:
  *   https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html
  */
-var nodeCrypto = require("crypto");
-var { URL } = require("url");
-var { Readable } = require("stream");
+var nodeCrypto = require("node:crypto");
+var { URL } = require("node:url");
+var { Readable } = require("node:stream");
 var safeXml = require("../parsers/safe-xml");
 var sharedRequest = require("./http-request");
 var C = require("../constants");

package/lib/observability.js

@@ -469,7 +469,7 @@ function _buildTraceparent(opts) {
   return "00-" + traceId + "-" + parentId + "-" + flags;
 }
 
-var _nodeCryptoForTrace = require("crypto");
+var _nodeCryptoForTrace = require("node:crypto");
 
 function _newTraceId() {
   var hex = _nodeCryptoForTrace.randomBytes(_TRACE_ID_BYTES).toString("hex");

package/lib/process-spawn.js

@@ -171,8 +171,8 @@ function spawn(command, args, opts) {
     filtered = built.filtered;
   }
   delete spawnOpts.allowEnv;
-  var nodeChild = require("node:child_process");
-  var child = nodeChild.spawn(command, args || [], spawnOpts);
+  var childProcess = require("node:child_process");
+  var child = childProcess.spawn(command, args || [], spawnOpts);
   try {
     audit().safeEmit({
       action:  "process.spawn",

package/lib/restore-bundle.js

@@ -45,8 +45,8 @@
  *   Backup-bundle reader — verify the manifest signature, list bundle contents without decrypting, and cherry-pick a restore subset to a staging directory the caller atomically swaps into place.
  */
 
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var atomicFile = require("./atomic-file");
 var backupCrypto = require("./backup/crypto");
 var backupManifest = require("./backup/manifest");

package/lib/restore-rollback.js

@@ -6,7 +6,7 @@
  *
  * @intro
  *   Backup-restore safety net — atomic dataDir swap with a versioned
- *   rollback nodePath. The primitive `b.restore` calls to put a
+ *   rollback path. The primitive `b.restore` calls to put a
  *   freshly-decrypted bundle into place: filesystem rename is atomic
  *   on POSIX (and on Windows when nothing has the dir open), so the
  *   swap either fully completes or the previous `dataDir` is
@@ -39,11 +39,11 @@
  *   corrupting state.
  *
  * @card
- *   Backup-restore safety net — atomic dataDir swap with a versioned rollback nodePath.
+ *   Backup-restore safety net — atomic dataDir swap with a versioned rollback path.
  */
 
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var atomicFile = require("./atomic-file");
 var C = require("./constants");
 var numericBounds = require("./numeric-bounds");

package/lib/restore.js

@@ -51,9 +51,9 @@
  *     manual recovery)
  */
 
-var nodeFs = require("fs");
-var os = require("os");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var os = require("node:os");
+var nodePath = require("node:path");
 var C = require("./constants");
 var bCrypto = require("./crypto");
 var numericChecks = require("./numeric-checks");

package/lib/retry.js

@@ -39,7 +39,7 @@
 
 var C = require("./constants");
 var lazyRequire = require("./lazy-require");
-var nodeCrypto = require("crypto");
+var nodeCrypto = require("node:crypto");
 var numericChecks = require("./numeric-checks");
 // safe-async re-exports withRetry + CircuitBreaker from this module, so a
 // direct top-level require would create a cycle. Lazy-require defers the

package/lib/router.js

@@ -32,10 +32,10 @@
  * @card
  *   HTTP route registration + dispatch.
  */
-var http  = require("http");
-var http2 = require("http2");
-var nodeFs = require("fs");
-var nodePath = require("path");
+var http  = require("node:http");
+var http2 = require("node:http2");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var C = require("./constants");
 var requestHelpers = require("./request-helpers");
 var lazyRequire = require("./lazy-require");

package/lib/safe-url.js

@@ -49,8 +49,8 @@ var codepointClass = require("./codepoint-class");
 var lazyRequire = require("./lazy-require");
 var numericBounds = require("./numeric-bounds");
 var { FrameworkError } = require("./framework-error");
-var nodeUrl = require("url");
-var { URL } = require("url");
+var nodeUrl = require("node:url");
+var { URL } = require("node:url");
 
 var audit = lazyRequire(function () { return require("./audit"); });
 

package/lib/sandbox.js

@@ -78,7 +78,7 @@
  * arbitrary source from the public internet.
  */
 
-var nodePath = require("path");
+var nodePath = require("node:path");
 var lazyRequire = require("./lazy-require");
 var validateOpts = require("./validate-opts");
 var numericBounds = require("./numeric-bounds");

package/lib/security-assert.js

@@ -67,7 +67,7 @@
  * non-function extra entry, etc.) so the operator catches typos at
  * boot, not at the moment they were trying to gate the boot.
  */
-var nodeFs = require("fs");
+var nodeFs = require("node:fs");
 var nodeTls = require("node:tls");
 var lazyRequire = require("./lazy-require");
 var safeEnv = require("./parsers/safe-env");

package/lib/seeders.js

@@ -15,7 +15,7 @@
  *
  *   module.exports = {
  *     description: "Create default admin user for local dev",
- *     // Optional — when omitted, the env is inferred from the nodePath.
+ *     // Optional — when omitted, the env is inferred from the path.
  *     // When present, this seed only applies under one of these envs.
  *     envs:        ["dev", "test"],
  *     // Default false — applied once and recorded in registry.
@@ -54,7 +54,7 @@
  *     applied state)
  */
 
-var nodePath = require("path");
+var nodePath = require("node:path");
 var atomicFile = require("./atomic-file");
 var C = require("./constants");
 var dbSchema = require("./db-schema");

package/lib/self-update-standalone-verifier.js

@@ -83,8 +83,8 @@
  *   or systemd `install.sh`. node:crypto + node:fs only.
  */
 
-var nodeCrypto = require("crypto");
-var nodeFs     = require("fs");
+var nodeCrypto = require("node:crypto");
+var nodeFs     = require("node:fs");
 
 // _streamHashAndVerify — read the asset in 64 KiB chunks, feed each
 // chunk into sha256, sha3-512, AND the signature verifier in parallel.

package/lib/self-update.js

@@ -47,16 +47,16 @@
  *   Framework / vendored-deps integrity check plus version pinning — refuses to install a new build when the asset's detached signature does not verify against the operator-supplied public key, or when the vendored SHA the new build would ship does not match the manifest the opera...
  */
 
-var nodeFs = require("fs");
-var nodePath = require("path");
-var nodeCrypto = require("crypto");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
+var nodeCrypto = require("node:crypto");
 var numericBounds = require("./numeric-bounds");
 var atomicFile = require("./atomic-file");
 var validateOpts = require("./validate-opts");
 var bCrypto = require("./crypto");
 var httpClient = require("./http-client");
 var safeJson = require("./safe-json");
-var { URL: NodeUrl } = require("url");
+var { URL: NodeUrl } = require("node:url");
 var lazyRequire = require("./lazy-require");
 var C = require("./constants");
 var standaloneVerifier = require("./self-update-standalone-verifier");
@@ -178,7 +178,7 @@ function _matchAsset(name, pattern, fallback) {
  * Fetch a releases feed and report whether a newer tag is available.
  * Tags are compared semver-style with a leading `v` stripped. When
  * `opts.etag` is supplied an `If-None-Match` header makes a 304 a fast
- * "no update" nodePath. The match against asset and signature URLs uses
+ * "no update" path. The match against asset and signature URLs uses
  * `opts.assetPattern` and `opts.signaturePattern` (RegExp or substring)
  * with conservative fallbacks. Throws SelfUpdateError on a non-2xx
  * upstream, malformed JSON, or unexpected shape.

package/lib/session-device-binding.js

@@ -70,7 +70,7 @@
 
 var C            = require("./constants");
 var bCrypto = require("./crypto");
-var nodeCrypto   = require("crypto");
+var nodeCrypto   = require("node:crypto");
 var lazyRequire  = require("./lazy-require");
 var requestHelpers = require("./request-helpers");
 var validateOpts = require("./validate-opts");

package/lib/storage.js

@@ -399,7 +399,7 @@ async function getFileStream(key, sealedKey, opts) {
   // to the consumer. Chunked-encryption with per-chunk AEAD would let us
   // stream end-to-end, but at the cost of finer-grained tampering windows.
   var buf = await getFileBuffer(key, sealedKey, opts);
-  return require("stream").Readable.from(buf);
+  return require("node:stream").Readable.from(buf);
 }
 
 /**

package/lib/template.js

@@ -89,8 +89,8 @@
  * is the second line: even if a template loaded, it can't execute
  * arbitrary JS — only the limited expression grammar above.
  */
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var lazyRequire = require("./lazy-require");
 var validateOpts = require("./validate-opts");
 

package/lib/totp.js

@@ -59,7 +59,7 @@
  * operators should choose an authenticator that does (Authy,
  * 1Password, Bitwarden, Aegis, Microsoft Authenticator all do).
  */
-var nodeCrypto = require("crypto");
+var nodeCrypto = require("node:crypto");
 var C = require("./constants");
 var { generateBytes, generateToken, timingSafeEqual } = require("./crypto");
 var { AuthError } = require("./framework-error");

package/lib/vault/index.js

@@ -62,8 +62,8 @@
  * @card
  *   Sealed keystore that anchors every other framework subsystem holding secrets at rest: db field encryption, encrypted session storage, audit-log signing keys, OAuth refresh tokens, anything that flows through `b.vault.seal` / `b.vault.unseal`.
  */
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var atomicFile = require("../atomic-file");
 var C = require("../constants");
 var { generateEncryptionKeyPair, encrypt, decrypt } = require("../crypto");

package/lib/vault/passphrase-ops.js

@@ -35,8 +35,8 @@
  * with the original file untouched.
  */
 
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var atomicFile = require("../atomic-file");
 var vaultWrap = require("./wrap");
 var { defineClass } = require("../framework-error");

package/lib/vault/passphrase-source.js

@@ -23,8 +23,8 @@
  * exposure to later env-dump surfaces. This doesn't zero the memory
  * (JavaScript can't) but does remove the env-object reference.
  */
-var nodeFs = require("fs");
-var readline = require("readline");
+var nodeFs = require("node:fs");
+var readline = require("node:readline");
 var safeEnv = require("../parsers/safe-env");
 var safeBuffer = require("../safe-buffer");
 

package/lib/vault/rotate.js

@@ -48,8 +48,8 @@
  * sampler skips them.
  */
 
-var nodeFs = require("fs");
-var nodePath = require("path");
+var nodeFs = require("node:fs");
+var nodePath = require("node:path");
 var { DatabaseSync } = require("node:sqlite");
 var atomicFile = require("../atomic-file");
 var safeSql = require("../safe-sql");
@@ -709,9 +709,9 @@ async function rotate(opts) {
     // one for this run); log at debug so the cleanup attempt isn't
     // silently swallowed when something genuinely unexpected fails.
     try { nodeFs.unlinkSync(tmpDbPath + "-wal"); }
-    catch (e) { rotateLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: tmpDbPath + "-wal", error: e.message }); }
+    catch (e) { rotateLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: tmpDbPath + "-wal", error: e.message }); }
     try { nodeFs.unlinkSync(tmpDbPath + "-shm"); }
-    catch (e) { rotateLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: tmpDbPath + "-shm", error: e.message }); }
+    catch (e) { rotateLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: tmpDbPath + "-shm", error: e.message }); }
 
     var rotatedBytes = nodeFs.readFileSync(tmpDbPath);
     nodeFs.writeFileSync(nodePath.join(stagingDir, paths.encryptedDb),
@@ -729,11 +729,11 @@ async function rotate(opts) {
     } finally {
       vdb.close();
       try { nodeFs.unlinkSync(verifyTmp); }
-      catch (e) { rotateLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: verifyTmp, error: e.message }); }
+      catch (e) { rotateLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: verifyTmp, error: e.message }); }
       try { nodeFs.unlinkSync(verifyTmp + "-wal"); }
-      catch (e) { rotateLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: verifyTmp + "-wal", error: e.message }); }
+      catch (e) { rotateLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: verifyTmp + "-wal", error: e.message }); }
       try { nodeFs.unlinkSync(verifyTmp + "-shm"); }
-      catch (e) { rotateLog.debug("cleanup-failed", { op: "nodeFs.unlinkSync", path: verifyTmp + "-shm", error: e.message }); }
+      catch (e) { rotateLog.debug("cleanup-failed", { op: "fs.unlinkSync", path: verifyTmp + "-shm", error: e.message }); }
     }
     if (!verifyResult.ok) {
       throw new VaultRotateError("vault-rotate/verify-failed",