@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/session-name.js

@@ -0,0 +1,60 @@
+/**
+ * DOD-SESSION-NAME-1 — validation for a session's human-readable name.
+ *
+ * This lives in the DAEMON, not in protocol-types, and that is deliberate: a session name is local
+ * and cosmetic. protocol-types holds the wire encoders and the TBS builders — putting a validator
+ * there would say the name is protocol, and the next reader would reasonably wire it into a frame.
+ * It is a sticky note on your own copy of the folder.
+ *
+ * It is NOT handle-shaped. Do not reach for MONIKER_RE: a moniker is a handle a counterparty sees,
+ * so it is deliberately narrow; this is a DESCRIPTION ("Q3 budget review with Bob") that only its
+ * author reads. Letters, digits, spaces, punctuation, accents, CJK and emoji are all legal.
+ */
+/** Free text, but bounded: long enough for a sentence, short enough to list in a terminal. */
+export const SESSION_NAME_MAX_LENGTH = 200;
+/** C0 (including \n, \r, \t, \0), DEL, and C1. Rejected, never stripped. */
+const CONTROL_CHARS = /[\u0000-\u001F\u007F-\u009F]/;
+/**
+ * Validate a session name.
+ *
+ * Returns the trimmed name, or `null` for "no name" — which is a legal, meaningful value, not a
+ * failure. `null`, `undefined` and an all-whitespace string all mean CLEAR.
+ *
+ * Rejects rather than repairs. A 201-character name is refused, not truncated, and a name carrying
+ * a newline is refused, not stripped: silently altering what the operator typed and then storing it
+ * under their name is worse than telling them it was wrong. Each refusal names its own cause, so
+ * "why was my name rejected" never requires reading the daemon log.
+ */
+export function validateSessionName(raw) {
+    if (raw === null || raw === undefined)
+        return { ok: true, value: null };
+    if (typeof raw !== "string") {
+        return {
+            ok: false,
+            reason: "session_name_not_a_string",
+            guidance: "A session name must be a string (or null to clear it).",
+        };
+    }
+    // Control characters are checked BEFORE trimming: trim() would silently eat a leading \n or \t
+    // and let a name through that the operator never meant to type — and a name that renders across
+    // two lines corrupts every listing it appears in.
+    if (CONTROL_CHARS.test(raw)) {
+        return {
+            ok: false,
+            reason: "session_name_control_chars",
+            guidance: "A session name cannot contain control characters (newlines, tabs, NUL). It is a single-line label — spaces, punctuation, accents and emoji are all fine.",
+        };
+    }
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return { ok: true, value: null };
+    if (trimmed.length > SESSION_NAME_MAX_LENGTH) {
+        return {
+            ok: false,
+            reason: "session_name_too_long",
+            guidance: `A session name is at most ${SESSION_NAME_MAX_LENGTH} characters (this one is ${trimmed.length}). It is refused rather than truncated — a half-name is a name you did not choose.`,
+        };
+    }
+    return { ok: true, value: trimmed };
+}
+//# sourceMappingURL=session-name.js.map

package/dist/session-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-name.js","sourceRoot":"","sources":["../src/session-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,4EAA4E;AAC5E,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAMrD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAExE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B;YACnC,QAAQ,EAAE,wDAAwD;SACnE,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,kDAAkD;IAClD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,0JAA0J;SACrK,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE3D,IAAI,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,6BAA6B,uBAAuB,4BAA4B,OAAO,CAAC,MAAM,oFAAoF;SAC7L,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC"}

package/dist/session-node-factory.d.ts

@@ -0,0 +1,18 @@
+import type { ISessionNodeFactory, SessionNodeConfig } from "./session-node-manager.js";
+import type { Logger } from "./types.js";
+export declare class ProductionSessionNodeFactory implements ISessionNodeFactory {
+    private readonly logger?;
+    /**
+     * DOD-M15-IDLE-CONNS-1 — OPTIONAL, and optional for one reason only: this factory is constructed
+     * with no arguments in four existing tests, and requiring a logger would turn them into type
+     * errors for a unit that has nothing to do with them.
+     *
+     * The cost is stated rather than hidden: with no logger, a reaped connection is silent, which is
+     * exactly the "guard nobody hears" this milestone has found four times. `startDaemon` passes one
+     * — that is the production path — and the sweep only runs on nodes this factory builds as
+     * receivers, so the silent case is a test-only fixture.
+     */
+    constructor(logger?: Logger | undefined);
+    createNode(config: SessionNodeConfig): Promise<import("@cello-protocol/transport").CelloNode>;
+}
+//# sourceMappingURL=session-node-factory.d.ts.map

package/dist/session-node-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-node-factory.d.ts","sourceRoot":"","sources":["../src/session-node-factory.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAYzC,qBAAa,4BAA6B,YAAW,mBAAmB;IAW1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAVpC;;;;;;;;;OASG;gBAC0B,MAAM,CAAC,EAAE,MAAM,YAAA;IAEtC,UAAU,CAAC,MAAM,EAAE,iBAAiB;CAsJ3C"}

package/dist/session-node-factory.js

@@ -0,0 +1,182 @@
+/**
+ * The production session-node factory, and the key stub session nodes are built with.
+ *
+ * A session node needs no signing key — libp2p generates its own transport keypair — but the
+ * `createNode` interface requires a provider, so the stub exists to satisfy a type rather than to
+ * hold a secret. That is worth saying out loud in a repository where a key provider usually does.
+ *
+ * Moved out of daemon.ts by 040-DAEMONROOT unit 8: it is a class, not composition, and it had simply
+ * always lived at the top of the boot file. `daemon.ts` re-exports it, so every existing importer —
+ * including the tests that construct one directly — is unchanged.
+*/
+import { createNode, } from "@cello-protocol/transport";
+// Minimal no-op KeyProvider stub for session nodes.
+// Session nodes don't need signing keys — libp2p generates its own fresh
+// transport keypair internally. The KeyProvider interface is required by
+// createNode but is never called on session nodes.
+const SESSION_NODE_KEY_STUB = {
+    getPublicKey: () => Promise.resolve(new Uint8Array(32)),
+    sign: (_data) => Promise.resolve(new Uint8Array(64)),
+};
+// Production session node factory — wraps createNode from @cello-protocol/transport
+export class ProductionSessionNodeFactory {
+    logger;
+    /**
+     * DOD-M15-IDLE-CONNS-1 — OPTIONAL, and optional for one reason only: this factory is constructed
+     * with no arguments in four existing tests, and requiring a logger would turn them into type
+     * errors for a unit that has nothing to do with them.
+     *
+     * The cost is stated rather than hidden: with no logger, a reaped connection is silent, which is
+     * exactly the "guard nobody hears" this milestone has found four times. `startDaemon` passes one
+     * — that is the production path — and the sweep only runs on nodes this factory builds as
+     * receivers, so the silent case is a test-only fixture.
+     */
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async createNode(config) {
+        // DOD-NAT-REACHABILITY-1: the STANDING RECEIVER — the node that accepts every
+        // inbound session — must bind a ROUTABLE interface by default. The old
+        // loopback default meant a node announced 127.0.0.1 and was dialable by
+        // nobody unless the operator hand-set CELLO_LISTEN_ADDR (only the EC2 demo
+        // agent ever did). CELLO_LISTEN_ADDR / CELLO_ANNOUNCE_ADDRS remain as
+        // overrides for publicly-hosted agents (M6 parity). Ephemeral session nodes
+        // (which dial OUT and need no inbound reachability) stay on loopback.
+        // DOD-M12B-SESSION-SEED-1 (case B review HIGH-1): `inboundReachable` is the REVIVED session
+        // node. Every production session node reached its role by promotion and so inherited the
+        // receiver's routable bind; a rebuilt one inherits nothing and would come back on loopback,
+        // preserving an identity nobody can dial.
+        const isReceiver = config.nodeType === "standing_receiver" || config.inboundReachable === true;
+        const listenAddr = isReceiver
+            ? (process.env["CELLO_LISTEN_ADDR"] ?? "/ip4/0.0.0.0/tcp/0")
+            : "/ip4/127.0.0.1/tcp/0";
+        const announce = isReceiver && process.env["CELLO_ANNOUNCE_ADDRS"]
+            ? process.env["CELLO_ANNOUNCE_ADDRS"].split(",").map((s) => s.trim()).filter(Boolean)
+            : undefined;
+        return createNode({
+            keyProvider: SESSION_NODE_KEY_STUB,
+            // ⚠️ NO CIRCUIT ADDRESSES — 056-SLOTDEAD. A node used to be BUILT already asking relays for
+            // slots (`circuitRelayListenAddrs`). Nothing sets that now: it starts on TCP/WS and takes a
+            // reservation, if it needs one, via `listenOnCircuit` after proving (DOD-M15-RELAYPROVE-ORDER-1).
+            listenAddresses: [listenAddr],
+            ...(announce ? { announceAddresses: announce } : {}),
+            connectionGater: config.connectionGater,
+            // DOD-M15-RELAYONLY-1: an agent that asked never to be directly reachable must not hole-punch
+            // its way to a direct connection. dcutr's job is to UPGRADE a relayed connection, and the
+            // INBOUND side starts that upgrade — which is precisely the standing receiver. So filtering
+            // what the directory publishes is not enough on its own: the address a peer cannot be TOLD, a
+            // hole-punch still REVEALS, and it happens inside libp2p after every assertion has passed.
+            ...(config.relayOnly === true ? { holePunch: { enabled: false } } : {}),
+            // Forward the role. After DOD-NAT-REACHABILITY-1, dcutr is on every node
+            // type unless relay-only turns it off above; nodeType's remaining transport effect is the HOP
+            // gate (client types never advertise circuit-relay HOP).
+            nodeType: config.nodeType,
+            // DOD-M12B-SESSION-SEED-1: forward the caller's transport seed when it supplied one, so a
+            // rebuilt session node returns at the peer id the counterparty already holds. Omitted (rather
+            // than passed as undefined) when absent, keeping createNode's "generate a fresh key" default
+            // for every node that is not session-scoped.
+            ...(config.transportPrivateKey ? { transportPrivateKey: config.transportPrivateKey } : {}),
+            /**
+             * DOD-M15-IDLE-CONNS-1 — the idle sweep is armed on the node that STARTS as a standing
+             * receiver.
+             *
+             * **It is NOT "the standing receiver only", and an earlier version of this comment said so
+             * and was false.** `acceptSession` does not build a new node: it moves this same `CelloNode`
+             * from `#standingReceivers` into `#activeNodes`, so the interval keeps running after
+             * promotion, against the session's own counterparty. Review measured the consequence — the
+             * counterparty was hung up mid-conversation and the next send failed with `no_connection`,
+             * with nothing anywhere naming the local sweep.
+             *
+             * That is survivable only because the spared predicate below names the counterparty. The
+             * arrangement is deliberate now rather than accidental: one node, one interval, and the gate
+             * decides who is off-limits as it narrows.
+             */
+            ...(isReceiver
+                ? {
+                    idleConnectionReaper: {
+                        /**
+                         * C3 — THE GUARD IS HEARD. A hang-up that tells nobody is indistinguishable from the
+                         * thing simply not happening, and review measured what that costs: the operator's
+                         * next send returns `no_connection`, `session.transport.redial.unavailable` says
+                         * "every send parks until they re-establish", and not one word in that chain names a
+                         * `setInterval` on their own machine.
+                         *
+                         * WARN and CONTINUE, deliberately: this is resource bounding, not a security event.
+                         * Nothing is refused and no session state changes — so it is loud, and it does not
+                         * block (Invariant 2's own distinction).
+                         */
+                        onReaped: (e) => {
+                            if (e.reason === "never_carried_a_stream") {
+                                this.logger?.warn("session.node.connection.reaped", {
+                                    sessionId: config.sessionId,
+                                    peerId: e.peerId,
+                                    ageMs: e.ageMs,
+                                    observation: "an inbound connection was hung up after never carrying a stream since it opened",
+                                    impact: "no session state changed and nothing was refused; if this peer returns it must dial again",
+                                });
+                                return;
+                            }
+                            // A sweep that cannot do its job is a different event and must not read as one that
+                            // did. `hangUp`'s `invalid_peer_id` is a NAMED reason written so a malformed id is
+                            // not read as a connection problem — preserved here rather than flattened.
+                            this.logger?.error("session.node.connection.reap_failed", {
+                                sessionId: config.sessionId,
+                                peerId: e.peerId,
+                                reason: e.reason,
+                                error: e.error,
+                                impact: "an idle connection was NOT closed; it continues to hold a slot against the connection cap",
+                            });
+                        },
+                        /**
+                         * C4 — THE COUNT THE DoD ASKS FOR, and the reason this callback exists at all.
+                         *
+                         * The line says *"measure a healthy daemon's connection count first"*, and nothing in
+                         * the tree reported one — not `cello_status`, not the CLI, not the log. Exposing the
+                         * CAPS without the COUNT would have been a capability nothing reads, which is this
+                         * milestone's own "no consumer, no ship". DEBUG because it is a census on a timer,
+                         * not an event: it exists to be greppable when a cap is finally tuned.
+                         */
+                        onObserved: (c) => {
+                            this.logger?.debug("transport.connections.observed", {
+                                sessionId: config.sessionId,
+                                total: c.total,
+                                inbound: c.inbound,
+                                neverSpoke: c.neverSpoke,
+                                maxConnections: c.maxConnections,
+                            });
+                        },
+                    },
+                }
+                : {}),
+        }).then((node) => {
+            /**
+             * SPARE WHAT REACHABILITY DEPENDS ON — two things, and the second was missing.
+             *
+             * **The reserved relay.** The same list `DOD-M15-FRAME-1`'s eviction sweep spares, for the
+             * reason its comment gives: reservation refreshes ride those peers, and hanging one up costs
+             * the agent its inbound reachability. A reservation is IDLE BY NATURE between refreshes,
+             * which is exactly the shape the sweep hunts.
+             *
+             * **The peer the gate currently names.** `getAllowedPeerId()` is the admitted dialer before
+             * promotion and the counterparty after it. Without this the sweep reaps the one peer the
+             * session exists for.
+             *
+             * READ LIVE on every sweep, never captured: reservations are lost and retaken constantly
+             * (2,675 `reservation.lost` in one daemon's log) and `#allowedPeerId` changes at offer,
+             * promotion and refusal. A set frozen at build time is wrong within minutes.
+             *
+             * WHAT IS LEFT TO REAP, stated because a guard with no population is theatre: a peer that was
+             * admitted by an offer which was then refused or expired. `closeInbound()` returns
+             * `#allowedPeerId` to null, and libp2p never re-runs a gater against a connection that
+             * already exists — so that peer stays attached, named by nobody, speaking nothing. That is
+             * the connection this unit removes.
+             */
+            const gater = config.connectionGater;
+            if (isReceiver && gater) {
+                node.setIdleReaperSpared((peerId) => gater.isAllowedOutboundPeer(peerId) || gater.getAllowedPeerId() === peerId);
+            }
+            return node;
+        });
+    }
+}
+//# sourceMappingURL=session-node-factory.js.map

package/dist/session-node-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-node-factory.js","sourceRoot":"","sources":["../src/session-node-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;EAUE;AACF,OAAO,EACL,UAAU,GAIX,MAAM,2BAA2B,CAAC;AAKnC,oDAAoD;AACpD,yEAAyE;AACzE,yEAAyE;AACzE,mDAAmD;AACnD,MAAM,qBAAqB,GAAG;IAC5B,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,KAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;CACjE,CAAC;AAEF,oFAAoF;AACpF,MAAM,OAAO,4BAA4B;IAWV;IAV7B;;;;;;;;;OASG;IACH,YAA6B,MAAe;QAAf,WAAM,GAAN,MAAM,CAAS;IAAG,CAAC;IAEhD,KAAK,CAAC,UAAU,CAAC,MAAyB;QACxC,8EAA8E;QAC9E,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,sEAAsE;QACtE,4FAA4F;QAC5F,yFAAyF;QACzF,4FAA4F;QAC5F,0CAA0C;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,KAAK,mBAAmB,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC;QAC/F,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,oBAAoB,CAAC;YAC5D,CAAC,CAAC,sBAAsB,CAAC;QAC3B,MAAM,QAAQ,GACZ,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,UAAU,CAAC;YAChB,WAAW,EAAE,qBAAqB;YAClC,4FAA4F;YAC5F,4FAA4F;YAC5F,kGAAkG;YAClG,eAAe,EAAE,CAAC,UAAU,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,8FAA8F;YAC9F,0FAA0F;YAC1F,4FAA4F;YAC5F,8FAA8F;YAC9F,2FAA2F;YAC3F,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,yEAAyE;YACzE,8FAA8F;YAC9F,yDAAyD;YACzD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,0FAA0F;YAC1F,8FAA8F;YAC9F,6FAA6F;YAC7F,6CAA6C;YAC7C,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F;;;;;;;;;;;;;;eAcG;YACH,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACE,oBAAoB,EAAE;wBACpB;;;;;;;;;;2BAUG;wBACH,QAAQ,EAAE,CAAC,CAAgB,EAAE,EAAE;4BAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;gCAC1C,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gCAAgC,EAAE;oCAClD,SAAS,EAAE,MAAM,CAAC,SAAS;oCAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;oCAChB,KAAK,EAAE,CAAC,CAAC,KAAK;oCACd,WAAW,EACT,iFAAiF;oCACnF,MAAM,EACJ,2FAA2F;iCAC9F,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;4BACD,oFAAoF;4BACpF,mFAAmF;4BACnF,2EAA2E;4BAC3E,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qCAAqC,EAAE;gCACxD,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;gCAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gCAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gCACd,MAAM,EACJ,2FAA2F;6BAC9F,CAAC,CAAC;wBACL,CAAC;wBACD;;;;;;;;2BAQG;wBACH,UAAU,EAAE,CAAC,CAAmB,EAAE,EAAE;4BAClC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,gCAAgC,EAAE;gCACnD,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;gCACd,OAAO,EAAE,CAAC,CAAC,OAAO;gCAClB,UAAU,EAAE,CAAC,CAAC,UAAU;gCACxB,cAAc,EAAE,CAAC,CAAC,cAAc;6BACjC,CAAC,CAAC;wBACL,CAAC;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACf;;;;;;;;;;;;;;;;;;;;;eAqBG;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC;YACrC,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,mBAAmB,CACtB,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,KAAK,MAAM,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}