@koda-sl/baker-bridge 0.119.0 → 0.121.0-dev.ba3f112da

package/dist/hono/credential-input.js

@@ -1,78 +0,0 @@
-/**
- * `request_credential` — the `baker_ui` blocking tool the agent uses when it
- * needs a secret the user owns (an API key, a token, a password).
- *
- * The value never passes through the model or this bridge: the dashboard
- * seals it straight into the company's Credentials, and the resolution that
- * comes back is only the placeholder the agent writes into requests
- * (`{{credential:<name>}}`), which the sandbox's credential broker swaps for the
- * value on the way out — and only toward the websites the user allowed.
- */
-import { tool } from "@anthropic-ai/claude-agent-sdk";
-import { z } from "zod";
-import { answeredInTheCard } from "./blocking-card.js";
-export const CREDENTIAL_INPUT_TOOL_NAME = "mcp__baker_ui__request_credential";
-const credentialRequestShape = z.object({
-    label: z
-        .string()
-        .trim()
-        .min(1)
-        .max(80)
-        .describe("What the credential is, in the user's words: 'Shopify admin API token', 'Klaviyo private key'"),
-    reason: z
-        .string()
-        .trim()
-        .min(1)
-        .max(500)
-        .describe("One short sentence, in the user's terms, saying what you'll do with it"),
-    allowedHosts: z
-        .array(z.string().max(253))
-        .max(20)
-        .describe("The websites the credential will be sent to, e.g. ['api.stripe.com'] or ['acme-store.myshopify.com']. Only these will ever receive it."),
-    name: z
-        .string()
-        .regex(/^[a-z0-9][a-z0-9_-]{0,63}$/)
-        .optional()
-        .describe("The name you want to use in {{credential:<name>}}; Baker picks a free one if it is taken"),
-});
-export const credentialInputToolShape = {
-    ...credentialRequestShape.shape,
-    resolution: z
-        .object({})
-        .catchall(z.unknown())
-        .optional()
-        .describe("Internal — injected by the bridge after the user answers. Never set this yourself."),
-};
-export const credentialInputResultSchema = z.discriminatedUnion("status", [
-    z.object({
-        status: z.literal("stored"),
-        name: z.string(),
-        placeholder: z.string(),
-        allowedHosts: z.array(z.string()),
-    }),
-    z.object({ status: z.literal("declined"), reason: z.string().optional() }),
-]);
-/** Parse-at-boundary for the result posted to `POST /credential-input-decision`. */
-export function parseCredentialInputResult(value) {
-    const parsed = credentialInputResultSchema.safeParse(value);
-    return parsed.success ? parsed.data : null;
-}
-/** `canUseTool` sees the raw model input, before MCP validation. */
-export function normalizeCredentialInputToolInput(input) {
-    const parsed = credentialRequestShape.safeParse(input);
-    return parsed.success ? parsed.data : null;
-}
-const CREDENTIAL_INPUT_TOOL_DESCRIPTION = [
-    "Ask the user for a credential they own — an API key, access token or password — through a secure field in the dashboard. BLOCKS until they answer.",
-    "Use it whenever a task needs a secret you do not have. Never ask the user to paste a secret in the chat, and never ask for one Baker already connects (use request_connection for ad and data platforms).",
-    "`reason` is shown to the user: say what you will do with it in their terms. `allowedHosts` are the only websites it will ever be sent to — name the API host(s) the task calls.",
-    "You never see the value. A stored result gives you a placeholder such as {{credential:shopify-admin}}: put it exactly where the secret goes in an HTTPS request (header, URL, JSON body, or inside `-u user:{{credential:x}}`), and it is filled in on the way out. Never print, echo, save or try to read a credential.",
-    "A declined result is not an error: carry on with what you can do without it and tell the user what stays unavailable.",
-].join(" ");
-export function createCredentialInputTool() {
-    return answeredInTheCard(tool("request_credential", CREDENTIAL_INPUT_TOOL_DESCRIPTION, credentialInputToolShape, (args) => {
-        const resolution = args.resolution ?? { status: "declined", reason: "No answer" };
-        return Promise.resolve({ content: [{ type: "text", text: JSON.stringify(resolution) }] });
-    }));
-}
-//# sourceMappingURL=credential-input.js.map

package/dist/hono/credential-input.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-input.js","sourceRoot":"","sources":["../../src/hono/credential-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,mCAAmC,CAAC;AAE9E,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,+FAA+F,CAAC;IAC5G,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CAAC,wEAAwE,CAAC;IACrF,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAC1B,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CACP,wIAAwI,CACzI;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,KAAK,CAAC,4BAA4B,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CAAC,0FAA0F,CAAC;CACxG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,GAAG,sBAAsB,CAAC,KAAK;IAC/B,UAAU,EAAE,CAAC;SACV,MAAM,CAAC,EAAE,CAAC;SACV,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACrB,QAAQ,EAAE;SACV,QAAQ,CAAC,oFAAoF,CAAC;CAClG,CAAC;AAIF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACxE,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC3E,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,iCAAiC,GAAG;IACxC,oJAAoJ;IACpJ,2MAA2M;IAC3M,iLAAiL;IACjL,0TAA0T;IAC1T,uHAAuH;CACxH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,UAAU,yBAAyB;IACvC,OAAO,iBAAiB,CACtB,IAAI,CACF,oBAAoB,EACpB,iCAAiC,EACjC,wBAAwB,EACxB,CAAC,IAAI,EAA+D,EAAE;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/hono/credential-scrub.d.ts

@@ -1,41 +0,0 @@
-/**
- * The last line between a credential value and the model: every tool result is
- * passed through the credential broker's scrub before the model reads it.
- *
- * The broker already swaps values out of HTTP responses; this catches what did
- * not travel through it (a value echoed by a tool that ignored the proxy, a
- * response too large to rewrite). The bridge never holds values — the broker
- * scrubs, over its socket. Without a broker (local dev, a company without
- * Credentials) it is a no-op.
- */
-import type { HookCallbackMatcher, HookEvent } from "@anthropic-ai/claude-agent-sdk";
-type Scrub = (text: string) => Promise<string>;
-/** Well under the broker socket's 2 MB cap, even after JSON escaping. */
-export declare const MAX_SCRUB_BATCH_BYTES: number;
-/**
- * The tool result with every credential value replaced by its placeholder,
- * walking every string in it. Long pure-base64 leaves are skipped; the rest go
- * to the broker in calls of at most 1 MB, and a text over 1 MB on its own is
- * withheld. Throws — so the caller withholds the result — when the broker fails.
- */
-export declare function scrubToolResponse(response: unknown, scrub: Scrub): Promise<{
-    changed: boolean;
-    response: unknown;
-}>;
-/**
- * The result with every text that could hold a value withheld, in the tool's
- * own shape: the SDK checks a rewrite against the tool's output schema and
- * falls back to the original — unscrubbed — output when it does not fit.
- */
-export declare function withheldToolResponse(response: unknown): unknown;
-/**
- * PostToolUse for every tool. The SDK runs PostToolUse hooks in parallel on
- * the original output and the last `updatedToolOutput` written wins; no other
- * hook sets `updatedToolOutput`, so this one's is the output the model reads.
- */
-export declare function credentialScrubHooks({ scrub, brokerRunning: running, }?: {
-    scrub?: Scrub;
-    brokerRunning?: () => boolean;
-}): Partial<Record<HookEvent, HookCallbackMatcher[]>>;
-export {};
-//# sourceMappingURL=credential-scrub.d.ts.map

package/dist/hono/credential-scrub.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-scrub.d.ts","sourceRoot":"","sources":["../../src/hono/credential-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAGrF,KAAK,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AA2B/C,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,QAAc,CAAC;AA6CjD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,KAAK,GACX,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAkBlD;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAS/D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,KAAsC,EACtC,aAAa,EAAE,OAA+B,GAC/C,GAAE;IACD,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC,CA2BzD"}

package/dist/hono/credential-scrub.js

@@ -1,152 +0,0 @@
-import { brokerRunning, scrubViaBroker } from "../broker/broker-client.js";
-/** Joins string leaves for one broker call; a leaf that itself contains it is sent alone. */
-const SEPARATOR = "\u0000";
-function collectLeaves(value, key, into) {
-    if (typeof value === "string")
-        into.push({ text: value, key });
-    else if (Array.isArray(value))
-        for (const item of value)
-            collectLeaves(item, key, into);
-    else if (typeof value === "object" && value !== null)
-        for (const [name, item] of Object.entries(value))
-            collectLeaves(item, name, into);
-}
-/** `value` with its string leaves replaced in the order `collectLeaves` read them. */
-function replaceLeaves(value, next) {
-    if (typeof value === "string")
-        return next();
-    if (Array.isArray(value))
-        return value.map((item) => replaceLeaves(item, next));
-    if (typeof value === "object" && value !== null) {
-        return Object.fromEntries(Object.entries(value).map(([name, item]) => [name, replaceLeaves(item, next)]));
-    }
-    return value;
-}
-/** Media (a PDF or image read as base64): long and pure base64, so it cannot hold a value verbatim. */
-const MEDIA_MIN_LENGTH = 64 * 1024;
-const PURE_BASE64 = /^[A-Za-z0-9+/=\r\n]+$/;
-/** Well under the broker socket's 2 MB cap, even after JSON escaping. */
-export const MAX_SCRUB_BATCH_BYTES = 1024 * 1024;
-function isMedia(leaf) {
-    if (!PURE_BASE64.test(leaf.text))
-        return false;
-    return leaf.text.length >= MEDIA_MIN_LENGTH || leaf.key === "base64";
-}
-const WITHHELD = "This output was withheld: Baker could not check it for saved credentials. Run the step again in a moment.";
-const TOO_LARGE = "This text was withheld: it is too large for Baker to check for saved credentials. Read it in smaller parts.";
-function cost(text) {
-    return Buffer.byteLength(JSON.stringify(text));
-}
-/** Indexes of the leaves to scrub, grouped so each group fits one broker call, and those too large to check. */
-function batches(leaves) {
-    const groups = [];
-    const tooLarge = [];
-    let current = [];
-    let size = 0;
-    leaves.forEach((leaf, index) => {
-        if (leaf.text.length === 0 || (leaf.text.length >= MEDIA_MIN_LENGTH && isMedia(leaf)))
-            return;
-        const bytes = cost(leaf.text) + cost(SEPARATOR);
-        if (bytes > MAX_SCRUB_BATCH_BYTES) {
-            tooLarge.push(index);
-            return;
-        }
-        if (leaf.text.includes(SEPARATOR)) {
-            groups.push([index]);
-            return;
-        }
-        if (size + bytes > MAX_SCRUB_BATCH_BYTES && current.length > 0) {
-            groups.push(current);
-            current = [];
-            size = 0;
-        }
-        current.push(index);
-        size += bytes;
-    });
-    if (current.length > 0)
-        groups.push(current);
-    return { groups, tooLarge };
-}
-/**
- * The tool result with every credential value replaced by its placeholder,
- * walking every string in it. Long pure-base64 leaves are skipped; the rest go
- * to the broker in calls of at most 1 MB, and a text over 1 MB on its own is
- * withheld. Throws — so the caller withholds the result — when the broker fails.
- */
-export async function scrubToolResponse(response, scrub) {
-    const leaves = [];
-    collectLeaves(response, undefined, leaves);
-    const scrubbed = leaves.map((leaf) => leaf.text);
-    const { groups, tooLarge } = batches(leaves);
-    for (const index of tooLarge)
-        scrubbed[index] = TOO_LARGE;
-    for (const group of groups) {
-        const joined = group.map((index) => leaves[index]?.text ?? "").join(SEPARATOR);
-        const result = await scrub(joined);
-        const parts = group.length === 1 ? [result] : result.split(SEPARATOR);
-        if (parts.length !== group.length)
-            throw new Error("scrubbed text no longer lines up with the tool result");
-        group.forEach((index, position) => {
-            scrubbed[index] = parts[position] ?? "";
-        });
-    }
-    if (scrubbed.every((text, index) => text === leaves[index]?.text))
-        return { changed: false, response };
-    let index = 0;
-    return { changed: true, response: replaceLeaves(response, () => scrubbed[index++] ?? "") };
-}
-/** Fields that name what a result is (`type: "text"`), never what it says; a tool's output schema requires them as-is. */
-const STRUCTURAL_KEYS = new Set(["type", "media_type", "mimeType", "status", "kind", "mode"]);
-/**
- * The result with every text that could hold a value withheld, in the tool's
- * own shape: the SDK checks a rewrite against the tool's output schema and
- * falls back to the original — unscrubbed — output when it does not fit.
- */
-export function withheldToolResponse(response) {
-    const leaves = [];
-    collectLeaves(response, undefined, leaves);
-    let index = 0;
-    return replaceLeaves(response, () => {
-        const leaf = leaves[index++];
-        if (leaf === undefined)
-            return WITHHELD;
-        return STRUCTURAL_KEYS.has(leaf.key ?? "") || isMedia(leaf) ? leaf.text : WITHHELD;
-    });
-}
-/**
- * PostToolUse for every tool. The SDK runs PostToolUse hooks in parallel on
- * the original output and the last `updatedToolOutput` written wins; no other
- * hook sets `updatedToolOutput`, so this one's is the output the model reads.
- */
-export function credentialScrubHooks({ scrub = (text) => scrubViaBroker(text), brokerRunning: running = () => brokerRunning(), } = {}) {
-    return {
-        PostToolUse: [
-            {
-                hooks: [
-                    async (input) => {
-                        if (input.hook_event_name !== "PostToolUse" || !running())
-                            return {};
-                        try {
-                            const result = await scrubToolResponse(input.tool_response, scrub);
-                            if (!result.changed)
-                                return {};
-                            return {
-                                hookSpecificOutput: { hookEventName: "PostToolUse", updatedToolOutput: result.response },
-                            };
-                        }
-                        catch (error) {
-                            console.error("[credentials] could not scrub a tool result — withholding it", error);
-                            return {
-                                hookSpecificOutput: {
-                                    hookEventName: "PostToolUse",
-                                    updatedToolOutput: withheldToolResponse(input.tool_response),
-                                },
-                            };
-                        }
-                    },
-                ],
-            },
-        ],
-    };
-}
-//# sourceMappingURL=credential-scrub.js.map

package/dist/hono/credential-scrub.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-scrub.js","sourceRoot":"","sources":["../../src/hono/credential-scrub.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAI3E,6FAA6F;AAC7F,MAAM,SAAS,GAAG,QAAQ,CAAC;AAI3B,SAAS,aAAa,CAAC,KAAc,EAAE,GAAuB,EAAE,IAAY;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;SAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;SACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACtF,CAAC;AAED,sFAAsF;AACtF,SAAS,aAAa,CAAC,KAAc,EAAE,IAAkB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uGAAuG;AACvG,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,SAAS,OAAO,CAAC,IAAU;IACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED,MAAM,QAAQ,GACZ,2GAA2G,CAAC;AAC9G,MAAM,SAAS,GACb,6GAA6G,CAAC;AAEhH,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,gHAAgH;AAChH,SAAS,OAAO,CAAC,MAAuB;IACtC,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO;QAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK,GAAG,qBAAqB,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,GAAG,KAAK,GAAG,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,IAAI,KAAK,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAiB,EACjB,KAAY;IAEZ,MAAM,MAAM,GAAW,EAAE,CAAC;IAC1B,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC5G,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YAChC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACvG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,0HAA0H;AAC1H,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAiB;IACpD,MAAM,MAAM,GAAW,EAAE,CAAC;IAC1B,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QACxC,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EACtC,aAAa,EAAE,OAAO,GAAG,GAAG,EAAE,CAAC,aAAa,EAAE,GAC/C,GAGG,EAAE;IACJ,OAAO;QACL,WAAW,EAAE;YACX;gBACE,KAAK,EAAE;oBACL,KAAK,EAAE,KAAK,EAAE,EAAE;wBACd,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa,IAAI,CAAC,OAAO,EAAE;4BAAE,OAAO,EAAE,CAAC;wBACrE,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;4BACnE,IAAI,CAAC,MAAM,CAAC,OAAO;gCAAE,OAAO,EAAE,CAAC;4BAC/B,OAAO;gCACL,kBAAkB,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,CAAC,QAAQ,EAAE;6BACzF,CAAC;wBACJ,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,8DAA8D,EAAE,KAAK,CAAC,CAAC;4BACrF,OAAO;gCACL,kBAAkB,EAAE;oCAClB,aAAa,EAAE,aAAa;oCAC5B,iBAAiB,EAAE,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC;iCAC7D;6BACF,CAAC;wBACJ,CAAC;oBACH,CAAC;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/hono/credential-scrub.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=credential-scrub.test.d.ts.map

package/dist/hono/credential-scrub.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-scrub.test.d.ts","sourceRoot":"","sources":["../../src/hono/credential-scrub.test.ts"],"names":[],"mappings":""}

package/dist/hono/credential-scrub.test.js

@@ -1,105 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { credentialScrubHooks, scrubToolResponse } from "./credential-scrub.js";
-const fakeScrub = (text) => Promise.resolve(text.split("shpat_secret_value").join("{{credential:shop}}"));
-/** The broker socket refuses a body over 2 MB. */
-const socketScrub = (text) => Buffer.byteLength(JSON.stringify({ text })) > 2 * 1024 * 1024
-    ? Promise.reject(new Error("credential broker /scrub answered 413"))
-    : fakeScrub(text);
-describe("scrubToolResponse", () => {
-    it("replaces a credential value anywhere in a tool result, keeping its shape", async () => {
-        const response = { stdout: "token=shpat_secret_value\n", stderr: "", nested: [{ body: "x shpat_secret_value" }] };
-        await expect(scrubToolResponse(response, fakeScrub)).resolves.toEqual({
-            changed: true,
-            response: { stdout: "token={{credential:shop}}\n", stderr: "", nested: [{ body: "x {{credential:shop}}" }] },
-        });
-    });
-    it("reports no change when nothing in the result was a credential", async () => {
-        await expect(scrubToolResponse({ stdout: "ok" }, fakeScrub)).resolves.toEqual({
-            changed: false,
-            response: { stdout: "ok" },
-        });
-    });
-    it("leaves large media untouched instead of withholding the whole result", async () => {
-        const media = Buffer.alloc(3 * 1024 * 1024, 7).toString("base64");
-        const response = [
-            { type: "image", source: { data: media } },
-            { type: "text", text: "shpat_secret_value" },
-        ];
-        const result = await scrubToolResponse(response, socketScrub);
-        expect(result).toEqual({
-            changed: true,
-            response: [
-                { type: "image", source: { data: media } },
-                { type: "text", text: "{{credential:shop}}" },
-            ],
-        });
-    });
-    it("checks a result larger than one broker call in several calls", async () => {
-        const chunk = `${"log line\n".repeat(80_000)}shpat_secret_value`;
-        const response = { outputs: [chunk, chunk, chunk] };
-        const result = await scrubToolResponse(response, socketScrub);
-        const scrubbedChunk = `${"log line\n".repeat(80_000)}{{credential:shop}}`;
-        expect(result).toEqual({ changed: true, response: { outputs: [scrubbedChunk, scrubbedChunk, scrubbedChunk] } });
-    });
-    it("withholds only a text over 1 MB, and still checks the rest", async () => {
-        const response = { stdout: "word ".repeat(210_000), stderr: "shpat_secret_value" };
-        const result = await scrubToolResponse(response, socketScrub);
-        expect(result).toEqual({
-            changed: true,
-            response: { stdout: expect.stringContaining("withheld"), stderr: "{{credential:shop}}" },
-        });
-    });
-    it("scrubs a text that contains the separator byte without misaligning the others", async () => {
-        const response = { stdout: "bin\u0000ary shpat_secret_value", stderr: "shpat_secret_value" };
-        await expect(scrubToolResponse(response, fakeScrub)).resolves.toEqual({
-            changed: true,
-            response: { stdout: "bin\u0000ary {{credential:shop}}", stderr: "{{credential:shop}}" },
-        });
-    });
-});
-async function runHook(response, options) {
-    const hook = credentialScrubHooks(options).PostToolUse?.[0]?.hooks[0];
-    if (hook === undefined)
-        throw new Error("no PostToolUse hook");
-    const output = await hook({
-        hook_event_name: "PostToolUse",
-        tool_name: "Read",
-        tool_input: {},
-        tool_response: response,
-        tool_use_id: "t1",
-        session_id: "s",
-        transcript_path: "",
-        cwd: "/",
-    }, "t1", { signal: new AbortController().signal });
-    return "hookSpecificOutput" in output && output.hookSpecificOutput?.hookEventName === "PostToolUse"
-        ? output.hookSpecificOutput.updatedToolOutput
-        : undefined;
-}
-describe("credentialScrubHooks", () => {
-    it("withholds a result it could not check in the tool's own shape, which the SDK only accepts", async () => {
-        const read = {
-            type: "text",
-            file: { filePath: "/repo/.env", content: "TOKEN=shpat_secret_value", numLines: 1, startLine: 1, totalLines: 1 },
-        };
-        const output = await runHook(read, {
-            scrub: () => Promise.reject(new Error("credential broker /scrub timed out")),
-            brokerRunning: () => true,
-        });
-        expect(output).toEqual({
-            type: "text",
-            file: {
-                filePath: expect.stringContaining("withheld"),
-                content: expect.stringContaining("withheld"),
-                numLines: 1,
-                startLine: 1,
-                totalLines: 1,
-            },
-        });
-    });
-    it("leaves a result alone when no broker runs, however large", async () => {
-        const response = { stdout: "word ".repeat(210_000) };
-        const output = await runHook(response, { scrub: fakeScrub, brokerRunning: () => false });
-        expect(output).toBeUndefined();
-    });
-});
-//# sourceMappingURL=credential-scrub.test.js.map

package/dist/hono/credential-scrub.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-scrub.test.js","sourceRoot":"","sources":["../../src/hono/credential-scrub.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAElH,kDAAkD;AAClD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;IAC3D,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAEtB,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC;QAElH,MAAM,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpE,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,EAAE;SAC7G,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5E,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG;YACf,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE;SAC7C,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE;aAC9C;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,KAAK,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACjE,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,aAAa,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE;SACzF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,iCAAiC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAE7F,MAAM,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpE,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,MAAM,EAAE,qBAAqB,EAAE;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,OAAO,CAAC,QAAiB,EAAE,OAAmD;IAC3F,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB;QACE,eAAe,EAAE,aAAa;QAC9B,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,GAAG;QACf,eAAe,EAAE,EAAE;QACnB,GAAG,EAAE,GAAG;KACT,EACD,IAAI,EACJ,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,CACzC,CAAC;IACF,OAAO,oBAAoB,IAAI,MAAM,IAAI,MAAM,CAAC,kBAAkB,EAAE,aAAa,KAAK,aAAa;QACjG,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB;QAC7C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;SAChH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;YACjC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC5E,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC;gBAC7C,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC;aACd;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}