@lattices/cli 0.4.14 → 0.5.0

package/apps/mac/Sources/Core/Companion/CompanionActivityLog.swift

@@ -1,70 +0,0 @@
-import DeckKit
-import Foundation
-
-final class CompanionActivityLog {
-    static let shared = CompanionActivityLog()
-
-    private let lock = NSLock()
-    private var entries: [DeckActivityLogEntry] = []
-    private let maxEntries = 120
-
-    private init() {
-        EventBus.shared.subscribe { [weak self] event in
-            self?.record(event)
-        }
-    }
-
-    func record(tag: String, tint: String?, text: String) {
-        let entry = DeckActivityLogEntry(
-            id: UUID().uuidString,
-            createdAt: Date(),
-            tag: tag,
-            tint: tint,
-            text: text
-        )
-
-        lock.lock()
-        entries.append(entry)
-        if entries.count > maxEntries {
-            entries.removeFirst(entries.count - maxEntries)
-        }
-        lock.unlock()
-    }
-
-    func snapshot(limit: Int = 80) -> [DeckActivityLogEntry] {
-        lock.lock()
-        let copy = entries
-        lock.unlock()
-
-        return Array(copy.suffix(limit).reversed())
-    }
-}
-
-private extension CompanionActivityLog {
-    func record(_ event: ModelEvent) {
-        switch event {
-        case .windowsChanged(let windows, let added, let removed):
-            let delta = [added.isEmpty ? nil : "+\(added.count)", removed.isEmpty ? nil : "-\(removed.count)"]
-                .compactMap { $0 }
-                .joined(separator: " ")
-            let suffix = delta.isEmpty ? "" : " (\(delta))"
-            record(tag: "WIN", tint: "blue", text: "\(windows.count) desktop windows\(suffix)")
-
-        case .tmuxChanged(let sessions):
-            record(tag: "TMUX", tint: "green", text: "\(sessions.count) tmux sessions indexed")
-
-        case .layerSwitched(let index):
-            record(tag: "LAYER", tint: "violet", text: "Switched workspace layer \(index + 1)")
-
-        case .processesChanged(let interesting):
-            record(tag: "PROC", tint: "amber", text: "\(interesting.count) terminal processes changed")
-
-        case .ocrScanComplete(let windowCount, let totalBlocks):
-            record(tag: "OCR", tint: "teal", text: "Scanned \(totalBlocks) text blocks across \(windowCount) windows")
-
-        case .voiceCommand(let text, let confidence):
-            let pct = Int((confidence * 100).rounded())
-            record(tag: "VOICE", tint: "red", text: "\"\(text)\" · \(pct)%")
-        }
-    }
-}

package/apps/mac/Sources/Core/Companion/CompanionKeyboardController.swift

@@ -1,141 +0,0 @@
-import AppKit
-import Foundation
-
-enum CompanionKeyboardError: LocalizedError {
-    case unknownKey(String)
-    case eventSourceUnavailable
-
-    var errorDescription: String? {
-        switch self {
-        case .unknownKey(let key):
-            return "Unsupported key for forwarding: \(key)"
-        case .eventSourceUnavailable:
-            return "Unable to create a keyboard event source."
-        }
-    }
-}
-
-final class CompanionKeyboardController {
-    static let shared = CompanionKeyboardController()
-
-    private init() {}
-
-    func send(key rawKey: String, modifiers rawModifiers: [String]) throws -> String {
-        let parsed = parse(key: rawKey, modifiers: rawModifiers)
-        guard let keyCode = keyCode(for: parsed.key) else {
-            throw CompanionKeyboardError.unknownKey(rawKey)
-        }
-        guard let source = CGEventSource(stateID: .combinedSessionState) else {
-            throw CompanionKeyboardError.eventSourceUnavailable
-        }
-
-        let flags = eventFlags(for: parsed.modifiers)
-        guard
-            let down = CGEvent(keyboardEventSource: source, virtualKey: keyCode, keyDown: true),
-            let up = CGEvent(keyboardEventSource: source, virtualKey: keyCode, keyDown: false)
-        else {
-            throw CompanionKeyboardError.eventSourceUnavailable
-        }
-
-        down.flags = flags
-        up.flags = flags
-        down.post(tap: .cghidEventTap)
-        usleep(12_000)
-        up.post(tap: .cghidEventTap)
-
-        return displayName(key: parsed.key, modifiers: parsed.modifiers)
-    }
-}
-
-private extension CompanionKeyboardController {
-    func parse(key rawKey: String, modifiers rawModifiers: [String]) -> (key: String, modifiers: Set<String>) {
-        var modifiers = Set(rawModifiers.map(normalizeModifier).filter { !$0.isEmpty })
-        var key = rawKey
-            .trimmingCharacters(in: .whitespacesAndNewlines)
-            .lowercased()
-
-        let symbolModifiers: [(String, String)] = [
-            ("⌘", "command"),
-            ("cmd", "command"),
-            ("command", "command"),
-            ("⌥", "option"),
-            ("option", "option"),
-            ("alt", "option"),
-            ("⌃", "control"),
-            ("ctrl", "control"),
-            ("control", "control"),
-            ("⇧", "shift"),
-            ("shift", "shift"),
-        ]
-
-        for (symbol, modifier) in symbolModifiers where key.contains(symbol) {
-            modifiers.insert(modifier)
-            key = key.replacingOccurrences(of: symbol, with: "")
-        }
-
-        key = key
-            .replacingOccurrences(of: "+", with: "")
-            .replacingOccurrences(of: " ", with: "")
-            .replacingOccurrences(of: "⎋", with: "escape")
-            .replacingOccurrences(of: "⇥", with: "tab")
-            .replacingOccurrences(of: "↩", with: "enter")
-            .replacingOccurrences(of: "⏎", with: "enter")
-            .replacingOccurrences(of: "return", with: "enter")
-            .replacingOccurrences(of: "←", with: "left")
-            .replacingOccurrences(of: "→", with: "right")
-            .replacingOccurrences(of: "↑", with: "up")
-            .replacingOccurrences(of: "↓", with: "down")
-
-        if key == "esc" {
-            key = "escape"
-        }
-
-        return (key.isEmpty ? rawKey.lowercased() : key, modifiers)
-    }
-
-    func normalizeModifier(_ modifier: String) -> String {
-        switch modifier.trimmingCharacters(in: .whitespacesAndNewlines).lowercased() {
-        case "cmd", "command", "meta", "⌘":
-            return "command"
-        case "opt", "option", "alt", "⌥":
-            return "option"
-        case "ctrl", "control", "⌃":
-            return "control"
-        case "shift", "⇧":
-            return "shift"
-        default:
-            return ""
-        }
-    }
-
-    func eventFlags(for modifiers: Set<String>) -> CGEventFlags {
-        var flags: CGEventFlags = []
-        if modifiers.contains("command") { flags.insert(.maskCommand) }
-        if modifiers.contains("option") { flags.insert(.maskAlternate) }
-        if modifiers.contains("control") { flags.insert(.maskControl) }
-        if modifiers.contains("shift") { flags.insert(.maskShift) }
-        return flags
-    }
-
-    func keyCode(for key: String) -> CGKeyCode? {
-        let codes: [String: CGKeyCode] = [
-            "a": 0, "s": 1, "d": 2, "f": 3, "h": 4, "g": 5, "z": 6, "x": 7,
-            "c": 8, "v": 9, "b": 11, "q": 12, "w": 13, "e": 14, "r": 15,
-            "y": 16, "t": 17, "1": 18, "2": 19, "3": 20, "4": 21, "6": 22,
-            "5": 23, "=": 24, "9": 25, "7": 26, "-": 27, "8": 28, "0": 29,
-            "]": 30, "o": 31, "u": 32, "[": 33, "i": 34, "p": 35, "enter": 36,
-            "l": 37, "j": 38, "'": 39, "k": 40, ";": 41, "\\": 42, ",": 43,
-            "/": 44, "n": 45, "m": 46, ".": 47, "tab": 48, "space": 49,
-            "`": 50, "delete": 51, "backspace": 51, "escape": 53,
-            "command": 55, "cmd": 55, "shift": 56, "capslock": 57, "option": 58,
-            "alt": 58, "control": 59, "left": 123, "right": 124, "down": 125,
-            "up": 126,
-        ]
-        return codes[key]
-    }
-
-    func displayName(key: String, modifiers: Set<String>) -> String {
-        let ordered = ["control", "option", "shift", "command"].filter { modifiers.contains($0) }
-        return (ordered + [key]).joined(separator: "+")
-    }
-}

package/apps/mac/Sources/Core/Companion/LatticesCompanionBridgeServer.swift

@@ -1,454 +0,0 @@
-import Darwin
-import DeckKit
-import Foundation
-
-final class LatticesCompanionBridgeServer: NSObject {
-    static let shared = LatticesCompanionBridgeServer()
-
-    static let bonjourType = "_lattices-companion._tcp."
-    static let defaultPort: UInt16 = 5287
-    static let protocolVersion = "1"
-    static let maxBodyBytes = 512 * 1024
-
-    private let queue = DispatchQueue(label: "lattices.companion.bridge", qos: .userInitiated)
-    private let encoder = JSONEncoder()
-    private let decoder = JSONDecoder()
-
-    private var serverFd: Int32 = -1
-    private var acceptSource: DispatchSourceRead?
-    private var service: NetService?
-
-    private override init() {
-        super.init()
-    }
-
-    func start() {
-        guard acceptSource == nil else { return }
-
-        let diag = DiagnosticLog.shared
-        serverFd = socket(AF_INET, SOCK_STREAM, 0)
-        guard serverFd >= 0 else {
-            diag.error("CompanionBridge: socket() failed — errno \(errno)")
-            return
-        }
-
-        var yes: Int32 = 1
-        setsockopt(serverFd, SOL_SOCKET, SO_REUSEADDR, &yes, socklen_t(MemoryLayout<Int32>.size))
-
-        var addr = sockaddr_in()
-        addr.sin_len = UInt8(MemoryLayout<sockaddr_in>.size)
-        addr.sin_family = sa_family_t(AF_INET)
-        addr.sin_port = Self.defaultPort.bigEndian
-        addr.sin_addr.s_addr = INADDR_ANY.bigEndian
-
-        let bindResult = withUnsafePointer(to: &addr) {
-            $0.withMemoryRebound(to: sockaddr.self, capacity: 1) {
-                Darwin.bind(serverFd, $0, socklen_t(MemoryLayout<sockaddr_in>.size))
-            }
-        }
-        guard bindResult == 0 else {
-            diag.error("CompanionBridge: bind() failed — errno \(errno)")
-            close(serverFd)
-            serverFd = -1
-            return
-        }
-
-        guard listen(serverFd, 8) == 0 else {
-            diag.error("CompanionBridge: listen() failed — errno \(errno)")
-            close(serverFd)
-            serverFd = -1
-            return
-        }
-
-        let flags = fcntl(serverFd, F_GETFL)
-        _ = fcntl(serverFd, F_SETFL, flags | O_NONBLOCK)
-
-        let source = DispatchSource.makeReadSource(fileDescriptor: serverFd, queue: queue)
-        source.setEventHandler { [weak self] in
-            self?.acceptConnection()
-        }
-        source.setCancelHandler { [weak self] in
-            guard let self else { return }
-            if self.serverFd >= 0 {
-                close(self.serverFd)
-                self.serverFd = -1
-            }
-        }
-        source.resume()
-        acceptSource = source
-
-        publishBonjour()
-        diag.success("CompanionBridge: listening on http://0.0.0.0:\(Self.defaultPort)")
-    }
-
-    func stop() {
-        acceptSource?.cancel()
-        acceptSource = nil
-        service?.stop()
-        service = nil
-    }
-}
-
-private extension LatticesCompanionBridgeServer {
-    struct HTTPRequest {
-        let method: String
-        let path: String
-        let headers: [String: String]
-        let body: Data
-    }
-
-    struct HealthResponse: Codable {
-        let ok: Bool
-        let name: String
-        let serviceType: String
-        let hostName: String
-        let port: UInt16
-        let protocolVersion: String
-        let version: String
-        let mode: String
-        let bridgePublicKey: String
-        let bridgeFingerprint: String
-        let requestSigningRequired: Bool
-        let payloadEncryptionRequired: Bool
-        let capabilities: [String]
-    }
-
-    func publishBonjour() {
-        let advertisedName = Host.current().localizedName ?? "Lattices Companion"
-        let service = NetService(
-            domain: "local.",
-            type: Self.bonjourType,
-            name: advertisedName,
-            port: Int32(Self.defaultPort)
-        )
-        service.includesPeerToPeer = true
-        service.setTXTRecord(NetService.data(fromTXTRecord: [
-            "v": Data(Self.protocolVersion.utf8),
-            "mode": Data("local-network-secure".utf8),
-            "fp": Data(LatticesCompanionSecurityCoordinator.shared.bridgeFingerprint.utf8),
-            "sec": Data("signed,encrypted".utf8),
-            "cap": Data(DeckBridgeCapability.defaultCompanionCapabilities.joined(separator: ",").utf8),
-        ]))
-        service.publish()
-        self.service = service
-    }
-
-    func acceptConnection() {
-        while true {
-            var clientAddr = sockaddr_in()
-            var addrLen = socklen_t(MemoryLayout<sockaddr_in>.size)
-
-            let clientFd = withUnsafeMutablePointer(to: &clientAddr) {
-                $0.withMemoryRebound(to: sockaddr.self, capacity: 1) {
-                    accept(serverFd, $0, &addrLen)
-                }
-            }
-
-            if clientFd < 0 {
-                if errno != EAGAIN && errno != EWOULDBLOCK {
-                    DiagnosticLog.shared.error("CompanionBridge: accept() failed — errno \(errno)")
-                }
-                return
-            }
-
-            let clientFlags = fcntl(clientFd, F_GETFL)
-            if clientFlags >= 0 {
-                _ = fcntl(clientFd, F_SETFL, clientFlags & ~O_NONBLOCK)
-            }
-
-            queue.async { [weak self] in
-                self?.handleClient(fd: clientFd)
-            }
-        }
-    }
-
-    func handleClient(fd: Int32) {
-        defer { close(fd) }
-
-        guard let request = readRequest(from: fd) else {
-            sendError(status: 400, message: "Invalid HTTP request", to: fd)
-            return
-        }
-
-        do {
-            try route(request, to: fd)
-        } catch let error as LatticesCompanionSecurityError {
-            let status: Int
-            switch error {
-            case .untrustedDevice, .insufficientCapability:
-                status = 403
-            case .missingHeader, .staleRequest, .replayedRequest, .invalidSignature, .invalidEnvelope, .invalidDeviceKey:
-                status = 401
-            }
-            sendError(status: status, message: error.localizedDescription, to: fd)
-        } catch {
-            sendError(status: 500, message: error.localizedDescription, to: fd)
-        }
-    }
-
-    func route(_ request: HTTPRequest, to fd: Int32) throws {
-        switch (request.method, request.path) {
-        case ("GET", "/health"):
-            let security = LatticesDeckHost.shared.securityConfiguration
-            let response = HealthResponse(
-                ok: true,
-                name: Host.current().localizedName ?? "Lattices Companion",
-                serviceType: Self.bonjourType,
-                hostName: localHostName(),
-                port: Self.defaultPort,
-                protocolVersion: Self.protocolVersion,
-                version: LatticesRuntime.appVersion,
-                mode: "local-network-secure",
-                bridgePublicKey: LatticesCompanionSecurityCoordinator.shared.bridgePublicKeyBase64,
-                bridgeFingerprint: LatticesCompanionSecurityCoordinator.shared.bridgeFingerprint,
-                requestSigningRequired: security.requestSigningRequired,
-                payloadEncryptionRequired: security.payloadEncryptionRequired,
-                capabilities: DeckBridgeCapability.defaultCompanionCapabilities
-            )
-            try sendJSON(status: 200, value: response, to: fd)
-
-        case ("GET", "/deck/manifest"):
-            try sendJSON(status: 200, value: LatticesDeckHost.shared.manifestSync(), to: fd)
-
-        case ("POST", "/pairing/request"):
-            let pairingRequest = try decoder.decode(DeckPairingRequest.self, from: request.body)
-            let response = LatticesCompanionSecurityCoordinator.shared.handlePairingRequest(pairingRequest)
-            let status = response.disposition == .denied ? 403 : 200
-            try sendJSON(status: status, value: response, to: fd)
-
-        case ("GET", "/deck/snapshot"):
-            let auth = try authorizeProtectedRequest(request, requiredCapability: DeckBridgeCapability.deckRead)
-            let snapshot = try LatticesDeckHost.shared.runtimeSnapshotSync()
-            let response = try LatticesCompanionSecurityCoordinator.shared.encodeProtectedResponse(
-                snapshot,
-                auth: auth,
-                status: 200,
-                path: request.path
-            )
-            try sendJSON(status: 200, value: response, to: fd)
-
-        case ("POST", "/deck/perform"):
-            let auth = try authorizeProtectedRequest(request, requiredCapability: DeckBridgeCapability.deckPerform)
-            let action = try LatticesCompanionSecurityCoordinator.shared.decodeProtectedBody(
-                DeckActionRequest.self,
-                body: request.body,
-                auth: auth,
-                method: request.method,
-                path: request.path
-            )
-            let result = try LatticesDeckHost.shared.performSync(action)
-            let response = try LatticesCompanionSecurityCoordinator.shared.encodeProtectedResponse(
-                result,
-                auth: auth,
-                status: 200,
-                path: request.path
-            )
-            try sendJSON(status: 200, value: response, to: fd)
-
-        case ("POST", "/deck/trackpad"):
-            let auth = try authorizeProtectedRequest(request, requiredCapability: DeckBridgeCapability.inputTrackpad)
-            let eventRequest = try LatticesCompanionSecurityCoordinator.shared.decodeProtectedBody(
-                DeckTrackpadEventRequest.self,
-                body: request.body,
-                auth: auth,
-                method: request.method,
-                path: request.path
-            )
-            let result = LatticesCompanionTrackpadController.shared.perform(eventRequest)
-            let response = try LatticesCompanionSecurityCoordinator.shared.encodeProtectedResponse(
-                result,
-                auth: auth,
-                status: 200,
-                path: request.path
-            )
-            try sendJSON(status: 200, value: response, to: fd)
-
-        default:
-            sendError(status: 404, message: "Unknown route", to: fd)
-        }
-    }
-
-    func authorizeProtectedRequest(_ request: HTTPRequest, requiredCapability: String) throws -> AuthorizedBridgeRequest {
-        let security = LatticesDeckHost.shared.securityConfiguration
-        guard security.requestSigningRequired else {
-            throw LatticesCompanionSecurityError.untrustedDevice
-        }
-        let auth = try LatticesCompanionSecurityCoordinator.shared.authorize(
-            method: request.method,
-            path: request.path,
-            headers: request.headers,
-            body: request.body
-        )
-        try LatticesCompanionSecurityCoordinator.shared.requireCapability(requiredCapability, for: auth)
-        return auth
-    }
-
-    func readRequest(from fd: Int32) -> HTTPRequest? {
-        var buffer = Data()
-        let deadline = DispatchTime.now().uptimeNanoseconds + 2_000_000_000
-        let delimiterCRLF = Data([13, 10, 13, 10])
-        let delimiterLF = Data([10, 10])
-
-        var headerRange = buffer.range(of: delimiterCRLF) ?? buffer.range(of: delimiterLF)
-        while headerRange == nil {
-            guard let count = readChunk(from: fd, deadline: deadline, into: &buffer) else {
-                return nil
-            }
-            guard count > 0 else { return nil }
-            if buffer.count > 128 * 1024 {
-                return nil
-            }
-            headerRange = buffer.range(of: delimiterCRLF) ?? buffer.range(of: delimiterLF)
-        }
-
-        guard let headerRange else { return nil }
-        let headerData = buffer.subdata(in: 0..<headerRange.lowerBound)
-        guard let headerText = String(data: headerData, encoding: .utf8) else {
-            return nil
-        }
-
-        let lines = headerText
-            .replacingOccurrences(of: "\r\n", with: "\n")
-            .components(separatedBy: "\n")
-        guard let requestLine = lines.first else { return nil }
-        let requestParts = requestLine.split(separator: " ", omittingEmptySubsequences: true)
-        guard requestParts.count >= 2 else { return nil }
-
-        let method = String(requestParts[0]).uppercased()
-        let rawPath = String(requestParts[1])
-        let path = rawPath.split(separator: "?", maxSplits: 1).first.map(String.init) ?? rawPath
-
-        var headers: [String: String] = [:]
-        for line in lines.dropFirst() {
-            guard let separator = line.firstIndex(of: ":") else { continue }
-            let name = line[..<separator].trimmingCharacters(in: .whitespacesAndNewlines).lowercased()
-            let value = line[line.index(after: separator)...].trimmingCharacters(in: .whitespacesAndNewlines)
-            headers[name] = value
-        }
-
-        let contentLength = Int(headers["content-length"] ?? "") ?? 0
-        guard contentLength <= Self.maxBodyBytes else { return nil }
-        var body = Data(buffer[headerRange.upperBound...])
-        while body.count < contentLength {
-            guard let count = readChunk(
-                from: fd,
-                deadline: deadline,
-                chunkSize: min(4096, contentLength - body.count),
-                into: &body
-            ) else {
-                return nil
-            }
-            guard count > 0 else { return nil }
-        }
-        if body.count > contentLength {
-            body = body.prefix(contentLength)
-        }
-
-        return HTTPRequest(method: method, path: path, headers: headers, body: body)
-    }
-
-    func readChunk(
-        from fd: Int32,
-        deadline: UInt64,
-        chunkSize: Int = 4096,
-        into buffer: inout Data
-    ) -> Int? {
-        var chunk = [UInt8](repeating: 0, count: chunkSize)
-
-        while true {
-            let count = Darwin.read(fd, &chunk, chunk.count)
-            if count > 0 {
-                buffer.append(contentsOf: chunk[..<count])
-                return count
-            }
-            if count == 0 {
-                return 0
-            }
-
-            if errno == EINTR {
-                continue
-            }
-            if (errno == EAGAIN || errno == EWOULDBLOCK) &&
-                DispatchTime.now().uptimeNanoseconds < deadline {
-                usleep(10_000)
-                continue
-            }
-
-            DiagnosticLog.shared.error("CompanionBridge: read() failed — errno \(errno)")
-            return nil
-        }
-    }
-
-    func sendJSON<T: Encodable>(status: Int, value: T, to fd: Int32) throws {
-        let body = try encoder.encode(value)
-        sendResponse(status: status, contentType: "application/json; charset=utf-8", body: body, to: fd)
-    }
-
-    func sendError(status: Int, message: String, to fd: Int32) {
-        let payload: [String: Any] = ["ok": false, "error": message]
-        guard let body = try? JSONSerialization.data(withJSONObject: payload, options: []) else { return }
-        sendResponse(status: status, contentType: "application/json; charset=utf-8", body: body, to: fd)
-    }
-
-    func sendResponse(status: Int, contentType: String, body: Data, to fd: Int32) {
-        let reason = reasonPhrase(for: status)
-        let header = [
-            "HTTP/1.1 \(status) \(reason)",
-            "Content-Type: \(contentType)",
-            "Content-Length: \(body.count)",
-            "Connection: close",
-            "",
-            ""
-        ].joined(separator: "\r\n")
-        writeAll(Data(header.utf8), to: fd)
-        writeAll(body, to: fd)
-        _ = shutdown(fd, SHUT_WR)
-    }
-
-    func writeAll(_ data: Data, to fd: Int32) {
-        data.withUnsafeBytes { rawBuffer in
-            guard var pointer = rawBuffer.bindMemory(to: UInt8.self).baseAddress else { return }
-            var remaining = data.count
-            while remaining > 0 {
-                let written = write(fd, pointer, remaining)
-                guard written > 0 else { return }
-                remaining -= written
-                pointer = pointer.advanced(by: written)
-            }
-        }
-    }
-
-    func reasonPhrase(for status: Int) -> String {
-        switch status {
-        case 200: return "OK"
-        case 400: return "Bad Request"
-        case 401: return "Unauthorized"
-        case 403: return "Forbidden"
-        case 404: return "Not Found"
-        default: return "Internal Server Error"
-        }
-    }
-
-    func localHostName() -> String {
-        let process = Process()
-        process.executableURL = URL(fileURLWithPath: "/usr/sbin/scutil")
-        process.arguments = ["--get", "LocalHostName"]
-
-        let pipe = Pipe()
-        process.standardOutput = pipe
-        process.standardError = Pipe()
-
-        do {
-            try process.run()
-            process.waitUntilExit()
-            let data = pipe.fileHandleForReading.readDataToEndOfFile()
-            if let name = String(data: data, encoding: .utf8)?
-                .trimmingCharacters(in: .whitespacesAndNewlines),
-               !name.isEmpty {
-                return "\(name).local"
-            }
-        } catch { }
-
-        return Host.current().localizedName ?? "localhost"
-    }
-}