@cello-protocol/daemon 0.0.225 → 0.0.227

package/dist/session-name.js

@@ -1,60 +0,0 @@
-/**
- * DOD-SESSION-NAME-1 — validation for a session's human-readable name.
- *
- * This lives in the DAEMON, not in protocol-types, and that is deliberate: a session name is local
- * and cosmetic. protocol-types holds the wire encoders and the TBS builders — putting a validator
- * there would say the name is protocol, and the next reader would reasonably wire it into a frame.
- * It is a sticky note on your own copy of the folder.
- *
- * It is NOT handle-shaped. Do not reach for MONIKER_RE: a moniker is a handle a counterparty sees,
- * so it is deliberately narrow; this is a DESCRIPTION ("Q3 budget review with Bob") that only its
- * author reads. Letters, digits, spaces, punctuation, accents, CJK and emoji are all legal.
- */
-/** Free text, but bounded: long enough for a sentence, short enough to list in a terminal. */
-export const SESSION_NAME_MAX_LENGTH = 200;
-/** C0 (including \n, \r, \t, \0), DEL, and C1. Rejected, never stripped. */
-const CONTROL_CHARS = /[\u0000-\u001F\u007F-\u009F]/;
-/**
- * Validate a session name.
- *
- * Returns the trimmed name, or `null` for "no name" — which is a legal, meaningful value, not a
- * failure. `null`, `undefined` and an all-whitespace string all mean CLEAR.
- *
- * Rejects rather than repairs. A 201-character name is refused, not truncated, and a name carrying
- * a newline is refused, not stripped: silently altering what the operator typed and then storing it
- * under their name is worse than telling them it was wrong. Each refusal names its own cause, so
- * "why was my name rejected" never requires reading the daemon log.
- */
-export function validateSessionName(raw) {
-    if (raw === null || raw === undefined)
-        return { ok: true, value: null };
-    if (typeof raw !== "string") {
-        return {
-            ok: false,
-            reason: "session_name_not_a_string",
-            guidance: "A session name must be a string (or null to clear it).",
-        };
-    }
-    // Control characters are checked BEFORE trimming: trim() would silently eat a leading \n or \t
-    // and let a name through that the operator never meant to type — and a name that renders across
-    // two lines corrupts every listing it appears in.
-    if (CONTROL_CHARS.test(raw)) {
-        return {
-            ok: false,
-            reason: "session_name_control_chars",
-            guidance: "A session name cannot contain control characters (newlines, tabs, NUL). It is a single-line label — spaces, punctuation, accents and emoji are all fine.",
-        };
-    }
-    const trimmed = raw.trim();
-    if (trimmed.length === 0)
-        return { ok: true, value: null };
-    if (trimmed.length > SESSION_NAME_MAX_LENGTH) {
-        return {
-            ok: false,
-            reason: "session_name_too_long",
-            guidance: `A session name is at most ${SESSION_NAME_MAX_LENGTH} characters (this one is ${trimmed.length}). It is refused rather than truncated — a half-name is a name you did not choose.`,
-        };
-    }
-    return { ok: true, value: trimmed };
-}
-//# sourceMappingURL=session-name.js.map

package/dist/session-name.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-name.js","sourceRoot":"","sources":["../src/session-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,4EAA4E;AAC5E,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAMrD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAExE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B;YACnC,QAAQ,EAAE,wDAAwD;SACnE,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,kDAAkD;IAClD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,0JAA0J;SACrK,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE3D,IAAI,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,6BAA6B,uBAAuB,4BAA4B,OAAO,CAAC,MAAM,oFAAoF;SAC7L,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC"}

package/dist/session-node-factory.d.ts

@@ -1,18 +0,0 @@
-import type { ISessionNodeFactory, SessionNodeConfig } from "./session-node-manager.js";
-import type { Logger } from "./types.js";
-export declare class ProductionSessionNodeFactory implements ISessionNodeFactory {
-    private readonly logger?;
-    /**
-     * DOD-M15-IDLE-CONNS-1 — OPTIONAL, and optional for one reason only: this factory is constructed
-     * with no arguments in four existing tests, and requiring a logger would turn them into type
-     * errors for a unit that has nothing to do with them.
-     *
-     * The cost is stated rather than hidden: with no logger, a reaped connection is silent, which is
-     * exactly the "guard nobody hears" this milestone has found four times. `startDaemon` passes one
-     * — that is the production path — and the sweep only runs on nodes this factory builds as
-     * receivers, so the silent case is a test-only fixture.
-     */
-    constructor(logger?: Logger | undefined);
-    createNode(config: SessionNodeConfig): Promise<import("@cello-protocol/transport").CelloNode>;
-}
-//# sourceMappingURL=session-node-factory.d.ts.map

package/dist/session-node-factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-node-factory.d.ts","sourceRoot":"","sources":["../src/session-node-factory.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAYzC,qBAAa,4BAA6B,YAAW,mBAAmB;IAW1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAVpC;;;;;;;;;OASG;gBAC0B,MAAM,CAAC,EAAE,MAAM,YAAA;IAEtC,UAAU,CAAC,MAAM,EAAE,iBAAiB;CAsJ3C"}

package/dist/session-node-factory.js

@@ -1,182 +0,0 @@
-/**
- * The production session-node factory, and the key stub session nodes are built with.
- *
- * A session node needs no signing key — libp2p generates its own transport keypair — but the
- * `createNode` interface requires a provider, so the stub exists to satisfy a type rather than to
- * hold a secret. That is worth saying out loud in a repository where a key provider usually does.
- *
- * Moved out of daemon.ts by 040-DAEMONROOT unit 8: it is a class, not composition, and it had simply
- * always lived at the top of the boot file. `daemon.ts` re-exports it, so every existing importer —
- * including the tests that construct one directly — is unchanged.
-*/
-import { createNode, } from "@cello-protocol/transport";
-// Minimal no-op KeyProvider stub for session nodes.
-// Session nodes don't need signing keys — libp2p generates its own fresh
-// transport keypair internally. The KeyProvider interface is required by
-// createNode but is never called on session nodes.
-const SESSION_NODE_KEY_STUB = {
-    getPublicKey: () => Promise.resolve(new Uint8Array(32)),
-    sign: (_data) => Promise.resolve(new Uint8Array(64)),
-};
-// Production session node factory — wraps createNode from @cello-protocol/transport
-export class ProductionSessionNodeFactory {
-    logger;
-    /**
-     * DOD-M15-IDLE-CONNS-1 — OPTIONAL, and optional for one reason only: this factory is constructed
-     * with no arguments in four existing tests, and requiring a logger would turn them into type
-     * errors for a unit that has nothing to do with them.
-     *
-     * The cost is stated rather than hidden: with no logger, a reaped connection is silent, which is
-     * exactly the "guard nobody hears" this milestone has found four times. `startDaemon` passes one
-     * — that is the production path — and the sweep only runs on nodes this factory builds as
-     * receivers, so the silent case is a test-only fixture.
-     */
-    constructor(logger) {
-        this.logger = logger;
-    }
-    async createNode(config) {
-        // DOD-NAT-REACHABILITY-1: the STANDING RECEIVER — the node that accepts every
-        // inbound session — must bind a ROUTABLE interface by default. The old
-        // loopback default meant a node announced 127.0.0.1 and was dialable by
-        // nobody unless the operator hand-set CELLO_LISTEN_ADDR (only the EC2 demo
-        // agent ever did). CELLO_LISTEN_ADDR / CELLO_ANNOUNCE_ADDRS remain as
-        // overrides for publicly-hosted agents (M6 parity). Ephemeral session nodes
-        // (which dial OUT and need no inbound reachability) stay on loopback.
-        // DOD-M12B-SESSION-SEED-1 (case B review HIGH-1): `inboundReachable` is the REVIVED session
-        // node. Every production session node reached its role by promotion and so inherited the
-        // receiver's routable bind; a rebuilt one inherits nothing and would come back on loopback,
-        // preserving an identity nobody can dial.
-        const isReceiver = config.nodeType === "standing_receiver" || config.inboundReachable === true;
-        const listenAddr = isReceiver
-            ? (process.env["CELLO_LISTEN_ADDR"] ?? "/ip4/0.0.0.0/tcp/0")
-            : "/ip4/127.0.0.1/tcp/0";
-        const announce = isReceiver && process.env["CELLO_ANNOUNCE_ADDRS"]
-            ? process.env["CELLO_ANNOUNCE_ADDRS"].split(",").map((s) => s.trim()).filter(Boolean)
-            : undefined;
-        return createNode({
-            keyProvider: SESSION_NODE_KEY_STUB,
-            // ⚠️ NO CIRCUIT ADDRESSES — 056-SLOTDEAD. A node used to be BUILT already asking relays for
-            // slots (`circuitRelayListenAddrs`). Nothing sets that now: it starts on TCP/WS and takes a
-            // reservation, if it needs one, via `listenOnCircuit` after proving (DOD-M15-RELAYPROVE-ORDER-1).
-            listenAddresses: [listenAddr],
-            ...(announce ? { announceAddresses: announce } : {}),
-            connectionGater: config.connectionGater,
-            // DOD-M15-RELAYONLY-1: an agent that asked never to be directly reachable must not hole-punch
-            // its way to a direct connection. dcutr's job is to UPGRADE a relayed connection, and the
-            // INBOUND side starts that upgrade — which is precisely the standing receiver. So filtering
-            // what the directory publishes is not enough on its own: the address a peer cannot be TOLD, a
-            // hole-punch still REVEALS, and it happens inside libp2p after every assertion has passed.
-            ...(config.relayOnly === true ? { holePunch: { enabled: false } } : {}),
-            // Forward the role. After DOD-NAT-REACHABILITY-1, dcutr is on every node
-            // type unless relay-only turns it off above; nodeType's remaining transport effect is the HOP
-            // gate (client types never advertise circuit-relay HOP).
-            nodeType: config.nodeType,
-            // DOD-M12B-SESSION-SEED-1: forward the caller's transport seed when it supplied one, so a
-            // rebuilt session node returns at the peer id the counterparty already holds. Omitted (rather
-            // than passed as undefined) when absent, keeping createNode's "generate a fresh key" default
-            // for every node that is not session-scoped.
-            ...(config.transportPrivateKey ? { transportPrivateKey: config.transportPrivateKey } : {}),
-            /**
-             * DOD-M15-IDLE-CONNS-1 — the idle sweep is armed on the node that STARTS as a standing
-             * receiver.
-             *
-             * **It is NOT "the standing receiver only", and an earlier version of this comment said so
-             * and was false.** `acceptSession` does not build a new node: it moves this same `CelloNode`
-             * from `#standingReceivers` into `#activeNodes`, so the interval keeps running after
-             * promotion, against the session's own counterparty. Review measured the consequence — the
-             * counterparty was hung up mid-conversation and the next send failed with `no_connection`,
-             * with nothing anywhere naming the local sweep.
-             *
-             * That is survivable only because the spared predicate below names the counterparty. The
-             * arrangement is deliberate now rather than accidental: one node, one interval, and the gate
-             * decides who is off-limits as it narrows.
-             */
-            ...(isReceiver
-                ? {
-                    idleConnectionReaper: {
-                        /**
-                         * C3 — THE GUARD IS HEARD. A hang-up that tells nobody is indistinguishable from the
-                         * thing simply not happening, and review measured what that costs: the operator's
-                         * next send returns `no_connection`, `session.transport.redial.unavailable` says
-                         * "every send parks until they re-establish", and not one word in that chain names a
-                         * `setInterval` on their own machine.
-                         *
-                         * WARN and CONTINUE, deliberately: this is resource bounding, not a security event.
-                         * Nothing is refused and no session state changes — so it is loud, and it does not
-                         * block (Invariant 2's own distinction).
-                         */
-                        onReaped: (e) => {
-                            if (e.reason === "never_carried_a_stream") {
-                                this.logger?.warn("session.node.connection.reaped", {
-                                    sessionId: config.sessionId,
-                                    peerId: e.peerId,
-                                    ageMs: e.ageMs,
-                                    observation: "an inbound connection was hung up after never carrying a stream since it opened",
-                                    impact: "no session state changed and nothing was refused; if this peer returns it must dial again",
-                                });
-                                return;
-                            }
-                            // A sweep that cannot do its job is a different event and must not read as one that
-                            // did. `hangUp`'s `invalid_peer_id` is a NAMED reason written so a malformed id is
-                            // not read as a connection problem — preserved here rather than flattened.
-                            this.logger?.error("session.node.connection.reap_failed", {
-                                sessionId: config.sessionId,
-                                peerId: e.peerId,
-                                reason: e.reason,
-                                error: e.error,
-                                impact: "an idle connection was NOT closed; it continues to hold a slot against the connection cap",
-                            });
-                        },
-                        /**
-                         * C4 — THE COUNT THE DoD ASKS FOR, and the reason this callback exists at all.
-                         *
-                         * The line says *"measure a healthy daemon's connection count first"*, and nothing in
-                         * the tree reported one — not `cello_status`, not the CLI, not the log. Exposing the
-                         * CAPS without the COUNT would have been a capability nothing reads, which is this
-                         * milestone's own "no consumer, no ship". DEBUG because it is a census on a timer,
-                         * not an event: it exists to be greppable when a cap is finally tuned.
-                         */
-                        onObserved: (c) => {
-                            this.logger?.debug("transport.connections.observed", {
-                                sessionId: config.sessionId,
-                                total: c.total,
-                                inbound: c.inbound,
-                                neverSpoke: c.neverSpoke,
-                                maxConnections: c.maxConnections,
-                            });
-                        },
-                    },
-                }
-                : {}),
-        }).then((node) => {
-            /**
-             * SPARE WHAT REACHABILITY DEPENDS ON — two things, and the second was missing.
-             *
-             * **The reserved relay.** The same list `DOD-M15-FRAME-1`'s eviction sweep spares, for the
-             * reason its comment gives: reservation refreshes ride those peers, and hanging one up costs
-             * the agent its inbound reachability. A reservation is IDLE BY NATURE between refreshes,
-             * which is exactly the shape the sweep hunts.
-             *
-             * **The peer the gate currently names.** `getAllowedPeerId()` is the admitted dialer before
-             * promotion and the counterparty after it. Without this the sweep reaps the one peer the
-             * session exists for.
-             *
-             * READ LIVE on every sweep, never captured: reservations are lost and retaken constantly
-             * (2,675 `reservation.lost` in one daemon's log) and `#allowedPeerId` changes at offer,
-             * promotion and refusal. A set frozen at build time is wrong within minutes.
-             *
-             * WHAT IS LEFT TO REAP, stated because a guard with no population is theatre: a peer that was
-             * admitted by an offer which was then refused or expired. `closeInbound()` returns
-             * `#allowedPeerId` to null, and libp2p never re-runs a gater against a connection that
-             * already exists — so that peer stays attached, named by nobody, speaking nothing. That is
-             * the connection this unit removes.
-             */
-            const gater = config.connectionGater;
-            if (isReceiver && gater) {
-                node.setIdleReaperSpared((peerId) => gater.isAllowedOutboundPeer(peerId) || gater.getAllowedPeerId() === peerId);
-            }
-            return node;
-        });
-    }
-}
-//# sourceMappingURL=session-node-factory.js.map

package/dist/session-node-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-node-factory.js","sourceRoot":"","sources":["../src/session-node-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;EAUE;AACF,OAAO,EACL,UAAU,GAIX,MAAM,2BAA2B,CAAC;AAKnC,oDAAoD;AACpD,yEAAyE;AACzE,yEAAyE;AACzE,mDAAmD;AACnD,MAAM,qBAAqB,GAAG;IAC5B,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,KAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;CACjE,CAAC;AAEF,oFAAoF;AACpF,MAAM,OAAO,4BAA4B;IAWV;IAV7B;;;;;;;;;OASG;IACH,YAA6B,MAAe;QAAf,WAAM,GAAN,MAAM,CAAS;IAAG,CAAC;IAEhD,KAAK,CAAC,UAAU,CAAC,MAAyB;QACxC,8EAA8E;QAC9E,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,sEAAsE;QACtE,4FAA4F;QAC5F,yFAAyF;QACzF,4FAA4F;QAC5F,0CAA0C;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,KAAK,mBAAmB,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC;QAC/F,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,oBAAoB,CAAC;YAC5D,CAAC,CAAC,sBAAsB,CAAC;QAC3B,MAAM,QAAQ,GACZ,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,UAAU,CAAC;YAChB,WAAW,EAAE,qBAAqB;YAClC,4FAA4F;YAC5F,4FAA4F;YAC5F,kGAAkG;YAClG,eAAe,EAAE,CAAC,UAAU,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,8FAA8F;YAC9F,0FAA0F;YAC1F,4FAA4F;YAC5F,8FAA8F;YAC9F,2FAA2F;YAC3F,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,yEAAyE;YACzE,8FAA8F;YAC9F,yDAAyD;YACzD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,0FAA0F;YAC1F,8FAA8F;YAC9F,6FAA6F;YAC7F,6CAA6C;YAC7C,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F;;;;;;;;;;;;;;eAcG;YACH,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACE,oBAAoB,EAAE;wBACpB;;;;;;;;;;2BAUG;wBACH,QAAQ,EAAE,CAAC,CAAgB,EAAE,EAAE;4BAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;gCAC1C,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gCAAgC,EAAE;oCAClD,SAAS,EAAE,MAAM,CAAC,SAAS;oCAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;oCAChB,KAAK,EAAE,CAAC,CAAC,KAAK;oCACd,WAAW,EACT,iFAAiF;oCACnF,MAAM,EACJ,2FAA2F;iCAC9F,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;4BACD,oFAAoF;4BACpF,mFAAmF;4BACnF,2EAA2E;4BAC3E,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qCAAqC,EAAE;gCACxD,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;gCAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gCAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gCACd,MAAM,EACJ,2FAA2F;6BAC9F,CAAC,CAAC;wBACL,CAAC;wBACD;;;;;;;;2BAQG;wBACH,UAAU,EAAE,CAAC,CAAmB,EAAE,EAAE;4BAClC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,gCAAgC,EAAE;gCACnD,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;gCACd,OAAO,EAAE,CAAC,CAAC,OAAO;gCAClB,UAAU,EAAE,CAAC,CAAC,UAAU;gCACxB,cAAc,EAAE,CAAC,CAAC,cAAc;6BACjC,CAAC,CAAC;wBACL,CAAC;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACf;;;;;;;;;;;;;;;;;;;;;eAqBG;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC;YACrC,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,mBAAmB,CACtB,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,KAAK,MAAM,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}