@cdxgen/cdxgen 0.0.1 → 13.0.1

package/types/lib/audit/index.d.ts

@@ -0,0 +1,153 @@
+/** Default predictive audit category list applied when none are explicitly requested. */
+export declare const DEFAULT_AUDIT_CATEGORIES: string[];
+/**
+ * Read and validate a CycloneDX BOM file.
+ *
+ * @param {string} bomPath BOM file path
+ * @returns {object} parsed CycloneDX BOM
+ */
+export declare function loadBomFile(bomPath: string): object;
+/**
+ * Recursively list JSON files under a BOM directory.
+ *
+ * @param {string} bomDir directory path
+ * @returns {string[]} discovered file paths
+ */
+export declare function listBomFiles(bomDir: string): string[];
+/**
+ * Load input BOM files from either a single file or a directory.
+ *
+ * @param {object} options CLI options
+ * @returns {{ source: string, bomJson: object }[]} loaded input BOMs
+ */
+export declare function loadInputBoms(options: object): {
+    source: string;
+    bomJson: object;
+}[];
+/**
+ * Run the direct (post-generation) BOM policy audit over loaded input BOMs.
+ *
+ * Audits each supplied BOM with {@link auditBom}, collects per-BOM findings and
+ * summaries, and aggregates them into a single report keyed by `auditMode: "direct"`.
+ *
+ * @param {{ source: string, bomJson: object }[]} inputBoms Loaded CycloneDX BOM objects to audit
+ * @param {object} [options={}] CLI options including optional category, severity, and rules configuration
+ * @returns {Promise<object>} Aggregate direct audit report with per-BOM results and a rollup summary
+ */
+export declare function runDirectBomAuditFromBoms(inputBoms: {
+    source: string;
+    bomJson: object;
+}[], options?: object): Promise<object>;
+/**
+ * Build low-noise provenance-aware contextual findings from the root BOM target.
+ *
+ * These are intentionally conservative and only fire when there is explicit risk
+ * posture already present in the target metadata.
+ *
+ * @param {object} target audit target
+ * @returns {object[]} contextual findings
+ */
+export declare function buildTargetContextFindings(target: object): object[];
+/**
+ * Resolve the most specific Python package directory inside a cloned repo.
+ *
+ * @param {string} cloneDir cloned repository root
+ * @param {object} target audit target
+ * @returns {{ confidence: string, scanDir: string }} selected directory and confidence
+ */
+export declare function resolvePythonSourceDirectory(cloneDir: string, target: object): {
+    confidence: string;
+    scanDir: string;
+};
+/**
+ * Resolve the most appropriate scan directory for a cloned target repository.
+ *
+ * @param {string} cloneDir cloned repository root
+ * @param {object} target audit target
+ * @param {object} resolution repository resolution metadata
+ * @returns {{ confidence: string, scanDir: string }} selected directory and confidence
+ */
+export declare function resolveTargetSourceDirectory(cloneDir: string, target: object, resolution: object): {
+    confidence: string;
+    scanDir: string;
+};
+/**
+ * Build shallow predictive findings for suspicious Python packaging files.
+ *
+ * Phase 1 intentionally focuses on high-signal packaging surfaces (`setup.py`
+ * and package `__init__.py`) until deeper Python static analysis is added.
+ *
+ * @param {string} scanDir cloned repository scan directory
+ * @param {object} target audit target
+ * @returns {object[]} predictive findings
+ */
+export declare function buildPythonSourceHeuristicFindings(scanDir: string, target: object): object[];
+/**
+ * Analyze a single purl target by generating a child SBOM and auditing it.
+ *
+ * @param {object} target audit target
+ * @param {object} options CLI options
+ * @returns {Promise<object>} analyzed target result
+ */
+export declare function auditTarget(target: object, options: object): Promise<object>;
+/**
+ * Consolidate per-target audit results into shared repo/CI alert groups.
+ *
+ * Groups results that share a common repository/CI provenance (or cargo
+ * repository/namespace) into consolidated alert entries while preserving
+ * single-target results unchanged.
+ *
+ * @param {object[]} results Per-target audit result objects
+ * @returns {object[]} Grouped result objects with consolidated entries where applicable
+ */
+export declare function groupAuditResults(results: object[]): object[];
+/**
+ * Run the predictive audit flow from one or more already-loaded CycloneDX BOM inputs.
+ *
+ * @param {{ source: string, bomJson: object }[]} inputBoms loaded CycloneDX BOM objects
+ * @param {object} options CLI options
+ * @returns {Promise<object>} aggregate audit report
+ */
+export declare function runAuditFromBoms(inputBoms: {
+    source: string;
+    bomJson: object;
+}[], options: object): Promise<object>;
+/**
+ * Run the predictive audit flow from one or more CycloneDX BOM inputs.
+ *
+ * @param {object} options CLI options
+ * @returns {Promise<object>} aggregate audit report
+ */
+export declare function runAudit(options: object): Promise<object>;
+/**
+ * Aggregates license compliance violations onto the report. Violations come
+ * from two sources: the input BOM(s) directly, and — in predictive mode — the
+ * per-dependency child SBOMs generated from cloned upstream sources (carried on
+ * each target result). Duplicates across both are collapsed so the same
+ * component/license/alert is reported once. No-op without a policy.
+ *
+ * @param {object} report aggregate audit report (mutated)
+ * @param {object[]} inputBoms loaded input BOMs
+ * @param {object|null} policy preloaded compliance policy
+ * @returns {void}
+ */
+export declare function attachLicenseViolations(report: object, inputBoms: object[], policy: object | null): void;
+/**
+ * Render a report and compute the proper process exit code.
+ *
+ * @param {object} report aggregate report
+ * @param {object} options CLI options
+ * @returns {{ exitCode: number, output: string }} rendered output and exit code
+ */
+export declare function finalizeAuditReport(report: object, options: object): {
+    exitCode: number;
+    output: string;
+};
+/**
+ * Build a result file name for user-provided report output paths.
+ *
+ * @param {object} options CLI options
+ * @returns {string | undefined} output file path
+ */
+export declare function defaultOutputFile(options: object): string | undefined;
+//# sourceMappingURL=index.d.ts.map

package/types/lib/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"AAqEA,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAKpC,CAAC;AAuCF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAHxB,MAGwB,GAFtB,MAAM,CAclB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAHxB,MAGwB,GAFtB,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0BjD;AA+CD;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,SAAS,EAJ9C;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAIW,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAAC,MAAM,CAAC,CAmE3B;AA4bD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAHtC,MAGsC,GAFpC,MAAM,EAAE,CAqdpB;AA0JD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAJ1C,MAI0C,EAAE,MAAM,EAHlD,MAGkD,GAFhD;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CnD;AAoCD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAL1C,MAK0C,EAAE,MAAM,EAJlD,MAIkD,EAAE,UAAU,EAH9D,MAG8D,GAF5D;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CASnD;AAmGD;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAJ/C,MAI+C,EAAE,MAAM,EAHvD,MAGuD,GAFrD,MAAM,EAAE,CAkEpB;AAgKD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAJ7B,MAI6B,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAAC,MAAM,CAAC,CAwQ3B;AAoVD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAAM,EAGwB,GAF5B,MAAM,EAAE,CAgDpB;AAoBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAJrC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAIE,EAAE,OAAO,EAH9C,MAG8C,GAF5C,OAAO,CAAC,MAAM,CAAC,CAiJ3B;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAH3B,MAG2B,GAFzB,OAAO,CAAC,MAAM,CAAC,CA0B3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EALnC,MAKmC,EAAE,SAAS,EAJ9C,MAAM,EAIwC,EAAE,MAAM,EAHtD,MAAM,GAAC,IAG+C,GAFpD,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAJ/B,MAI+B,EAAE,OAAO,EAHxC,MAGwC,GAFtC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwChD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,MAAM,GAAG,SAAS,CAU9B"}

package/types/lib/audit/progress.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Build a human-readable label for an audit target.
+ *
+ * @param {object} target audit target
+ * @returns {string} formatted target label
+ */
+export declare function formatTargetLabel(target: object): string;
+/**
+ * Decide if interactive progress should be shown.
+ *
+ * @param {object} [options] progress options
+ * @returns {boolean} true when spinner-style progress is appropriate
+ */
+export declare function shouldRenderProgress(options?: object): boolean;
+/**
+ * Create a dependency-free progress renderer for cdx-audit.
+ *
+ * Progress is always written to stderr so JSON/stdout reports remain clean.
+ * The renderer delegates the live region to `lib/core/ui.js`: an interactive
+ * run shows a single spinner phase whose detail line tracks the current
+ * target, while a non-interactive run commits one plain line per state
+ * transition.
+ *
+ * @param {object} [options] progress options
+ * @returns {{ onProgress: Function, stop: Function }} progress controller
+ */
+export declare function createProgressTracker(options?: object): {
+    onProgress: Function;
+    stop: Function;
+};
+//# sourceMappingURL=progress.d.ts.map

package/types/lib/audit/progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../lib/audit/progress.js"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAH7B,MAG6B,GAF3B,MAAM,CAMlB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,AAHzC,CACA,EADQ,MAGsC,GAFpC,OAAO,CAWnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,AAH1C,CACA,EADQ,MAGuC,GAFrC;IAAE,UAAU,WAAW;IAAC,IAAI,WAAU;CAAE,CAqEpD"}

package/types/lib/audit/reporters.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Render a predictive audit report as a SARIF 2.1.0 document.
+ *
+ * Converts visible findings (filtered by the configured minimum severity) into
+ * SARIF results and derives the rule table, producing a serialised JSON string
+ * conforming to the SARIF 2.1.0 schema.
+ *
+ * @param {object} report Aggregate audit report
+ * @param {object} [options={}] Render options including optional `minSeverity`
+ * @returns {string} SARIF 2.1.0 JSON document as a string
+ */
+export declare function renderSarifReport(report: object, options?: object): string;
+/**
+ * Render an audit report as pretty JSON.
+ *
+ * @param {object} report aggregate report
+ * @returns {string} JSON output
+ */
+export declare function renderJsonReport(report: object): string;
+/**
+ * Render a direct BOM audit report for terminal output.
+ *
+ * @param {object} report aggregate direct audit report
+ * @param {object} options render options
+ * @returns {string} console report text
+ */
+export declare function renderDirectBomConsoleReport(report: object, options?: object): string;
+/**
+ * Render a direct BOM audit report as SARIF 2.1.0 output.
+ *
+ * @param {object} report aggregate direct audit report
+ * @param {object} [options] render options
+ * @returns {string} SARIF output
+ */
+export declare function renderDirectBomSarifReport(report: object, options?: object): string;
+/**
+ * Render an audit report for terminal output.
+ *
+ * @param {object} report aggregate report
+ * @param {object} options render options
+ * @returns {string} console report text
+ */
+export declare function renderConsoleReport(report: object, options?: object): string;
+/**
+ * Render the requested report format.
+ *
+ * @param {string} reportType format name
+ * @param {object} report aggregate report
+ * @param {object} options render options
+ * @returns {string} rendered report
+ */
+export declare function renderAuditReport(reportType: string, report: object, options?: object): string;
+/**
+ * Convert predictive audit results into CycloneDX annotations.
+ *
+ * @param {object} report aggregate audit report
+ * @param {object} bomJson root CycloneDX BOM
+ * @param {object} [options] annotation options
+ * @returns {object[]} annotations
+ */
+export declare function formatPredictiveAnnotations(report: object, bomJson: object, options?: object): object[];
+//# sourceMappingURL=reporters.d.ts.map

package/types/lib/audit/reporters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporters.d.ts","sourceRoot":"","sources":["../../../lib/audit/reporters.js"],"names":[],"mappings":"AAsjBA;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,CAoDlB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAH5B,MAG4B,GAF1B,MAAM,CAIlB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAJxC,MAIwC,EAAE,OAAO,GAHjD,MAGsD,GAFpD,MAAM,CAwDlB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,CAuClB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAJ/B,MAI+B,EAAE,OAAO,GAHxC,MAG6C,GAF3C,MAAM,CAoElB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EALjC,MAKiC,EAAE,MAAM,EAJzC,MAIyC,EAAE,OAAO,GAHlD,MAGuD,GAFrD,MAAM,CAmBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EALvC,MAKuC,EAAE,OAAO,EAJhD,MAIgD,EAAE,OAAO,AAHjE,CACA,EADQ,MAG8D,GAF5D,MAAM,EAAE,CAgFpB"}

package/types/lib/audit/scoring.d.ts

@@ -0,0 +1,36 @@
+/** Map of severity names to numeric ordering used for threshold comparisons. */
+export declare const SEVERITY_ORDER: {
+    none: number;
+    low: number;
+    medium: number;
+    high: number;
+    critical: number;
+};
+/**
+ * Convert a numeric confidence score into a human readable label.
+ *
+ * @param {number} confidence confidence score
+ * @returns {string} confidence label
+ */
+export declare function confidenceLabel(confidence: number): string;
+/**
+ * Check if a severity meets the given threshold.
+ *
+ * @param {string} severity severity to compare
+ * @param {string} threshold threshold severity
+ * @returns {boolean} true if severity is at or above threshold
+ */
+export declare function severityMeetsThreshold(severity: string, threshold: string): boolean;
+/**
+ * Conservatively score predictive supply-chain risk for a single target.
+ *
+ * High and critical require corroboration across categories and strong findings,
+ * which keeps false positives low.
+ *
+ * @param {object[]} findings post-generation audit findings
+ * @param {object} target target metadata
+ * @param {object} context additional scan context
+ * @returns {object} conservative risk assessment
+ */
+export declare function scoreTargetRisk(findings: object[], target: object, context?: object): object;
+//# sourceMappingURL=scoring.d.ts.map

package/types/lib/audit/scoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.d.ts","sourceRoot":"","sources":["../../../lib/audit/scoring.js"],"names":[],"mappings":"AAMA,gFAAgF;AAChF,eAAO,MAAM,cAAc;IACzB,IAAI;IACJ,GAAG;IACH,MAAM;IACN,IAAI;IACJ,QAAQ;CACT,CAAC;AAwKF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAH/B,MAG+B,GAF7B,MAAM,CAUlB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAIoC,EAAE,SAAS,EAH/C,MAG+C,GAF7C,OAAO,CAMnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAL7B,MAAM,EAKuB,EAAE,MAAM,EAJrC,MAIqC,EAAE,OAAO,GAH9C,MAGmD,GAFjD,MAAM,CAoVlB"}

package/types/lib/audit/targets.d.ts

@@ -0,0 +1,77 @@
+/** Set of purl types supported by the predictive audit (cargo, npm, pypi). */
+declare const SUPPORTED_PURL_TYPES: Set<string>;
+/**
+ * Determine whether a CycloneDX component scope should be treated as required.
+ *
+ * Missing scope is treated as required to match the main BOM filtering flow.
+ *
+ * @param {string | undefined} scope component scope
+ * @returns {boolean} true when the component is required for predictive audit selection
+ */
+export declare function isRequiredComponentScope(scope: string | undefined): boolean;
+/**
+ * Enrich input BOM components with registry provenance/trusted-publishing
+ * metadata so audit target filtering can exclude trusted packages even when the
+ * input BOM was generated without --bom-audit.
+ *
+ * @param {{ source: string, bomJson: object }[]} inputBoms loaded input BOMs
+ * @returns {Promise<void>}
+ */
+export declare function enrichInputBomsWithRegistryMetadata(inputBoms: {
+    source: string;
+    bomJson: object;
+}[]): Promise<void>;
+/**
+ * Normalize package names for safe matching and grouping.
+ *
+ * @param {string | undefined} packageName package name
+ * @returns {string} normalized package name
+ */
+export declare function normalizePackageName(packageName: string | undefined): string;
+/**
+ * Extract npm and PyPI package-url targets from a CycloneDX BOM.
+ *
+ * @param {object} bomJson CycloneDX BOM
+ * @param {string} sourceName source BOM path or label
+ * @param {number | object | undefined} [options] selector options
+ * @returns {{ targets: object[], skipped: object[] }} extracted targets and skipped components
+ */
+export declare function extractPurlTargetsFromBom(bomJson: object, sourceName: string, options?: number | object | undefined): {
+    targets: object[];
+    skipped: object[];
+};
+/**
+ * Merge targets across many BOMs by purl.
+ *
+ * @param {{ source: string, bomJson: object }[]} inputBoms input BOMs
+ * @param {number | object | undefined} [options] selector options or a legacy maxTargets value
+ * @returns {{
+ *   skipped: object[],
+ *   stats: {
+ *     availableTargets: number,
+ *     nonRequiredTargets: number,
+ *     requiredTargets: number,
+ *     trustedTargets: number,
+ *     trustedTargetsExcluded: number,
+ *     truncatedTargets: number,
+ *   },
+ *   targets: object[],
+ * }} merged targets and skipped components
+ */
+export declare function collectAuditTargets(inputBoms: {
+    source: string;
+    bomJson: object;
+}[], options?: number | object | undefined): {
+    skipped: object[];
+    stats: {
+        availableTargets: number;
+        nonRequiredTargets: number;
+        requiredTargets: number;
+        trustedTargets: number;
+        trustedTargetsExcluded: number;
+        truncatedTargets: number;
+    };
+    targets: object[];
+};
+export { SUPPORTED_PURL_TYPES };
+//# sourceMappingURL=targets.d.ts.map

package/types/lib/audit/targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../lib/audit/targets.js"],"names":[],"mappings":"AAcA,8EAA8E;AAC9E,QAAA,MAAM,oBAAoB,aAAoC,CAAC;AAsJ/D;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAHnC,MAAM,GAAG,SAG0B,GAFjC,OAAO,CAOnB;AAuOD;;;;;;;GAOG;AACH,wBAAsB,mCAAmC,CAAC,SAAS,EAHxD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAGqB,GAFtD,OAAO,CAAC,IAAI,CAAC,CA+EzB;AAkBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAAM,GAAG,SAG4B,GAFnC,MAAM,CAOlB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EALtC,MAKsC,EAAE,UAAU,EAJlD,MAIkD,EAAE,OAAO,AAHnE,CACA,EADQ,MAAM,GAAG,MAAM,GAAG,SAGyC,GAFzD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAmGpD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAflC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAeD,EAAE,OAAO,AAdnD,CACA,EADQ,MAAM,GAAG,MAAM,GAAG,SAcyB,GAbzC;IACR,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAmJH;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}