@openzeppelin/guardian-operator-client 0.14.6 → 0.14.7

package/README.md

@@ -57,6 +57,10 @@ if (page.nextCursor !== null) {
   });
   console.log(next.items.length);
 }
+
+// Filter by pause state. Omit `paused` for all accounts.
+const pausedOnly = await client.listAccounts({ paused: true });
+const activeOnly = await client.listAccounts({ paused: false });
 ```
 
 ### Fetch One Account
@@ -101,13 +105,59 @@ if (info.serviceStatus === 'degraded') {
 
 ### Per-Account Delta Feed
 
+Each entry carries the dashboard-ready activity fields spread directly
+at L1 (feature 007). `category` is the server-curated coarse
+classification; `assets` (array) / `counterparty` / `noteCounts` are
+derived from the on-chain `TransactionSummary`; `proposalType` echoes
+the operator's intent label for multisig commits. All five fields are
+optional — absent fields mean "not derivable from this row" (EVM
+deltas, pre-feature-007 historical rows whose proposal was already
+deleted, or undecodable payloads).
+
 ```typescript
 const page = await client.listAccountDeltas('0x...', { limit: 50 });
 for (const entry of page.items) {
   console.log(entry.nonce, entry.status, entry.statusTimestamp);
+  if (entry.category) {
+    console.log('category:', entry.category);
+    console.log('notes:', entry.noteCounts);
+    if (entry.proposalType) {
+      console.log('proposal type:', entry.proposalType);
+    }
+    if (entry.assets && entry.assets.length > 0) {
+      for (const a of entry.assets) {
+        console.log('asset:', a.assetId, a.amount);
+      }
+    }
+  } else {
+    // No dashboard fields → render as "metadata unavailable", not as
+    // zero-valued defaults. Reasons listed above.
+    console.log('metadata unavailable');
+  }
 }
 ```
 
+For the full structured projection of a single delta (decoded input /
+output notes, vault changes, storage changes, plus the full
+`proposal` intent block), call `getAccountDeltaDetail`:
+
+```typescript
+const detail = await client.getAccountDeltaDetail('0x...', entry.nonce);
+console.log('input notes:', detail.inputNotes.length);
+console.log('vault changes:', detail.vaultChanges);
+if (detail.proposal) {
+  console.log('proposal intent:', detail.proposal);
+}
+
+// Debug: include the raw base64 TransactionSummary blob in the
+// response so you can sanity-check the server's projection against
+// the on-disk bytes.
+const debug = await client.getAccountDeltaDetail('0x...', entry.nonce, {
+  includeRaw: true,
+});
+console.log('raw bytes (base64):', debug.rawTransactionSummary);
+```
+
 ### Per-Account In-Flight Proposals
 
 Single-key Miden accounts and EVM accounts always return an empty
@@ -125,6 +175,30 @@ for (const entry of page.items) {
 }
 ```
 
+### Pause / Unpause Account
+
+Both endpoints require the `accounts:pause` permission and are
+idempotent. Re-pausing an already-paused account returns success with
+the original `pausedAt` and `pausedReason` preserved (first-writer
+wins). `reason` is required on pause (non-empty, ≤ 512 chars) and
+optional on unpause.
+
+```typescript
+const paused = await client.pauseAccount('0x...', 'compliance review');
+console.log(paused.pausedAt, paused.pausedReason);
+
+await client.unpauseAccount('0x...', 'cleared by legal');
+```
+
+While an account is paused, mutating endpoints (delta submission,
+proposal creation, proposal signing) reject with HTTP 409 and code
+`account_paused` (normalized by the client from the server wire code
+`GUARDIAN_ACCOUNT_PAUSED`). Account setup paths (`configureAccount`,
+EVM register) are admin operations and remain available while paused.
+Read endpoints — including `listAccounts({ paused: true })` and
+`getAccount()` — continue to work and surface `pausedAt` /
+`pausedReason` on the response.
+
 ### Cross-Account Delta Feed
 
 Paginated newest-first by `status_timestamp DESC`. The optional
@@ -249,8 +323,80 @@ FR-028) is:
 | HTTP | Body `code` | When |
 |------|-------------|------|
 | 401 | `authentication_failed` | missing / tampered / expired operator session |
+| 403 | `GUARDIAN_INSUFFICIENT_OPERATOR_PERMISSION` | operator session is valid but lacks one or more route-required permissions (feature `006-operator-authz`) |
 | 404 | `account_not_found` | path-addressed account does not exist |
 | 400 | `invalid_cursor` | tampered, malformed, or stale cursor |
 | 400 | `invalid_limit` | `limit` outside `[1, 500]` |
 | 400 | `invalid_status_filter` | global delta feed `status` filter is unknown or malformed |
+| 409 | `account_paused` | mutating call against a paused account; error details carry `pausedAt` and `pausedReason`. Wire code `GUARDIAN_ACCOUNT_PAUSED` is normalized by the client. |
 | 503 | `data_unavailable` | metadata exists but underlying records cannot be read |
+
+### Operator Authorization (feature `006-operator-authz`)
+
+The dashboard now enforces per-operator permissions on every route. The
+allowlist JSON consumed by `GUARDIAN_OPERATOR_PUBLIC_KEYS_JSON` /
+`_FILE` / `_SECRET_ID` accepts a **heterogeneous** array of two element
+shapes:
+
+```jsonc
+[
+  // Legacy element: bare hex string → `{dashboard:read}` only.
+  "0x094f145ec43583db3ca443f43a67545c...",
+
+  // Structured element: explicit permission set.
+  {
+    "public_key": "0x0944089753530e9104cc9fc4...",
+    "permissions": ["dashboard:read", "accounts:pause"]
+  },
+
+  // Explicit-deny element: loads, but denies every authorization
+  // check (different from omitting the operator entirely).
+  {
+    "public_key": "0x0a11...",
+    "permissions": []
+  }
+]
+```
+
+Recognized permissions in v1: `dashboard:read`, `accounts:pause`,
+`policies:write`.
+
+When the server denies a request for insufficient permissions, the
+response body extends the existing flat envelope additively:
+
+```json
+{
+  "success": false,
+  "code": "GUARDIAN_INSUFFICIENT_OPERATOR_PERMISSION",
+  "error": "Operator lacks required permissions: accounts:pause",
+  "missing_permissions": ["accounts:pause"],
+  "retryable": false
+}
+```
+
+`parseErrorBody` and the `GuardianOperatorHttpErrorData` shape both
+expose `missingPermissions` and `retryable` for this code; the fields
+are `undefined` for every other code.
+
+For UI gating, call `getSession()` to read the authenticated
+operator's live permission set and compare entries against the
+exported wire-string constants:
+
+```typescript
+import {
+  ACCOUNTS_PAUSE,
+  DASHBOARD_READ,
+  GuardianOperatorHttpClient,
+} from '@openzeppelin/guardian-operator-client';
+
+const client = new GuardianOperatorHttpClient('https://guardian.example');
+const { permissions } = await client.getSession();
+
+const canPause = permissions.includes(ACCOUNTS_PAUSE);
+const canRead = permissions.includes(DASHBOARD_READ);
+```
+
+The session endpoint re-reads permissions from the allowlist on every
+call, so allowlist edits take effect without re-login. The server is
+still the source of truth on every mutating endpoint — the client
+MUST NOT short-circuit a request based on its own capability check.

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-import type { DashboardAccountResponse, DashboardAccountSnapshot, DashboardAccountSummary, DashboardDeltaEntry, DashboardErrorCode, DashboardGlobalDeltaEntry, DashboardGlobalProposalEntry, DashboardInfoResponse, DashboardProposalEntry, GlobalDeltasOptions, GuardianOperatorHttpClientOptions, GuardianOperatorHttpErrorData, LogoutOperatorResponse, OperatorChallengeResponse, PagedResult, VerifyOperatorRequest, VerifyOperatorResponse } from './types.js';
+import type { DashboardAccountResponse, DashboardAccountSnapshot, DashboardAccountSummary, DashboardDeltaDetail, DashboardDeltaEntry, DashboardErrorCode, DashboardGlobalDeltaEntry, DashboardGlobalProposalEntry, DashboardInfoResponse, DashboardProposalEntry, GlobalDeltasOptions, DeltaDetailOptions, GuardianOperatorHttpClientOptions, GuardianOperatorHttpErrorData, LogoutOperatorResponse, OperatorChallengeResponse, PagedResult, PauseAccountResponse, SessionInfoResponse, UnpauseAccountResponse, VerifyOperatorRequest, VerifyOperatorResponse } from './types.js';
 /**
  * Common pagination query options for the new dashboard feeds
  * endpoints. Spec reference: `005-operator-dashboard-metrics` FR-001.
@@ -9,6 +9,14 @@ export interface PaginationOptions {
     /** Opaque cursor token from a prior page's `nextCursor`. */
     cursor?: string;
 }
+/**
+ * Options for {@link GuardianOperatorHttpClient.listAccounts}. Extends
+ * {@link PaginationOptions} with a tri-state pause filter: `true` for
+ * paused accounts only, `false` for active only, omitted for all.
+ */
+export interface ListAccountsOptions extends PaginationOptions {
+    paused?: boolean;
+}
 /**
  * Result of parsing an error response body. The {@link code} field is
  * narrowed to {@link DashboardErrorCode} when the server emitted one of
@@ -19,6 +27,29 @@ export interface ParsedErrorBody {
     code: DashboardErrorCode | string | null;
     message: string | null;
     retryAfterSecs?: number;
+    /**
+     * Populated only when `code === 'insufficient_operator_permission'`.
+     * Lists the permission strings the route required that the
+     * authenticated operator does not hold, lexicographically sorted by
+     * the server (feature 006-operator-authz FR-017).
+     */
+    missingPermissions?: readonly string[];
+    /**
+     * `false` for permission denials and account-paused rejections;
+     * absent for every other code.
+     */
+    retryable?: boolean;
+    /**
+     * Populated only when `code === 'account_paused'`. RFC 3339 UTC
+     * timestamp of the original pause.
+     */
+    pausedAt?: string;
+    /**
+     * Populated only when `code === 'account_paused'`. May be `null`
+     * for forward compatibility (the v1 server always emits a
+     * non-null reason).
+     */
+    pausedReason?: string | null;
 }
 /**
  * Parse an error response body into a typed `{ code, message }` shape.
@@ -67,12 +98,30 @@ export declare class GuardianOperatorHttpClient {
      * {@link GuardianOperatorHttpClient.getDashboardInfo}. Callers that
      * relied on `listAccounts()` must migrate to this method.
      */
-    listAccounts(options?: PaginationOptions): Promise<PagedResult<DashboardAccountSummary>>;
+    listAccounts(options?: ListAccountsOptions): Promise<PagedResult<DashboardAccountSummary>>;
+    /**
+     * Return the authenticated operator's identity and effective
+     * permission set. Succeeds for any valid session, including
+     * operators with `permissions: []` (returns an empty array).
+     */
+    getSession(): Promise<SessionInfoResponse>;
     /**
      * Inventory and lifecycle health snapshot per feature
      * `005-operator-dashboard-metrics` US2 / FR-008..FR-012.
      */
     getDashboardInfo(): Promise<DashboardInfoResponse>;
+    /**
+     * Pause mutating actions for the given account. Requires
+     * `accounts:pause`. Idempotent: re-pausing an already-paused account
+     * returns success with the original `pausedAt` preserved.
+     */
+    pauseAccount(accountId: string, reason: string): Promise<PauseAccountResponse>;
+    /**
+     * Clear pause state for the given account. Requires `accounts:pause`.
+     * Idempotent: unpausing an already-active account returns success
+     * with no state change.
+     */
+    unpauseAccount(accountId: string, reason?: string): Promise<UnpauseAccountResponse>;
     getAccount(accountId: string): Promise<DashboardAccountResponse>;
     /**
      * Return a decoded snapshot of `accountId`'s stored state at the
@@ -99,6 +148,13 @@ export declare class GuardianOperatorHttpClient {
      * `005-operator-dashboard-metrics` US3.
      */
     listAccountDeltas(accountId: string, options?: PaginationOptions): Promise<PagedResult<DashboardDeltaEntry>>;
+    /**
+     * Fetch the full detail projection of one canonical delta. The
+     * nonce is serialized as a canonical base-10 `u64` URL segment;
+     * unknown account and unknown nonce both surface as
+     * `404 delta_not_found`.
+     */
+    getAccountDeltaDetail(accountId: string, nonce: number, options?: DeltaDetailOptions): Promise<DashboardDeltaDetail>;
     /**
      * List the per-account in-flight multisig proposal queue for
      * `accountId`, paginated newest-first by `(nonce DESC, commitment

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,wBAAwB,EACxB,wBAAwB,EAExB,uBAAuB,EACvB,mBAAmB,EAEnB,kBAAkB,EAClB,yBAAyB,EACzB,4BAA4B,EAC5B,qBAAqB,EACrB,sBAAsB,EAItB,mBAAmB,EACnB,iCAAiC,EACjC,6BAA6B,EAC7B,sBAAsB,EAEtB,yBAAyB,EACzB,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAC3B,OAAO,CAAC,eAAe,CAAC,CAiD1B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,kBAAkB,CAE7B;AAED,qBAAa,yBAA0B,SAAQ,KAAK;aAIhC,MAAM,EAAE,MAAM;aACd,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,6BAA6B,GAAG,IAAI;IAN5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;gBAGf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,6BAA6B,GAAG,IAAI;CAU7D;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAEpC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM,EAC/B,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAM;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;gBAE7B,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,iCAAiC;IAahD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAMjE,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAcvE,MAAM,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAQ/C;;;;;;;;;;OAUG;IACG,YAAY,CAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAMhD;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAQlD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAStE;;;;;;;;;;;;;;;;;OAiBG;IACG,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAS9E;;;;OAIG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAU5C;;;;;;OAMG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAU/C;;;;;;OAMG;IACG,gBAAgB,CACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAmBlD;;;;;;OAMG;IACG,mBAAmB,CACvB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;YAMvC,OAAO;YA4BP,WAAW;CAU1B"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,wBAAwB,EACxB,wBAAwB,EAExB,uBAAuB,EAQvB,oBAAoB,EACpB,mBAAmB,EASnB,kBAAkB,EAClB,yBAAyB,EACzB,4BAA4B,EAC5B,qBAAqB,EACrB,sBAAsB,EAItB,mBAAmB,EACnB,kBAAkB,EAClB,iCAAiC,EACjC,6BAA6B,EAC7B,sBAAsB,EAEtB,yBAAyB,EACzB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAGpB;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAiDD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAC3B,OAAO,CAAC,eAAe,CAAC,CA4F1B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,kBAAkB,CAE7B;AAED,qBAAa,yBAA0B,SAAQ,KAAK;aAIhC,MAAM,EAAE,MAAM;aACd,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,6BAA6B,GAAG,IAAI;IAN5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;gBAGf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,6BAA6B,GAAG,IAAI;CAU7D;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAEpC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM,EAC/B,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAM;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;gBAE7B,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,iCAAiC;IAahD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAMjE,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAcvE,MAAM,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAQ/C;;;;;;;;;;OAUG;IACG,YAAY,CAChB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAShD;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAQhD;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAQxD;;;;OAIG;IACG,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC;IAShC;;;;OAIG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,CAAC;IAa5B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAStE;;;;;;;;;;;;;;;;;OAiBG;IACG,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAS9E;;;;OAIG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAU5C;;;;;OAKG;IACG,qBAAqB,CACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,oBAAoB,CAAC;IAkBhC;;;;;;OAMG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAU/C;;;;;;OAMG;IACG,gBAAgB,CACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAmBlD;;;;;;OAMG;IACG,mBAAmB,CACvB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;YAMvC,OAAO;YA4BP,WAAW;CAU1B"}