@unifiedcommerce/core 0.0.1

package/dist/modules/webhooks/tasks.d.ts

@@ -0,0 +1,16 @@
+import type { TaskDefinition } from "../../kernel/jobs/types";
+/**
+ * Background task for async webhook delivery.
+ *
+ * Instead of blocking the HTTP response with inline webhook HTTP calls,
+ * the deliverWebhooks hook enqueues this task. The job runner picks it up
+ * and delivers asynchronously with retries.
+ */
+export declare const webhookDeliveryTask: TaskDefinition<{
+    endpointId: string;
+    endpointUrl: string;
+    endpointSecret: string;
+    eventName: string;
+    payload: unknown;
+}>;
+//# sourceMappingURL=tasks.d.ts.map

package/dist/modules/webhooks/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../../src/modules/webhooks/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAI9D;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,cAAc,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB,CAkCA,CAAC"}

package/dist/modules/webhooks/tasks.js

@@ -0,0 +1,35 @@
+import { WebhookDeliveryWorker } from "./worker";
+/**
+ * Background task for async webhook delivery.
+ *
+ * Instead of blocking the HTTP response with inline webhook HTTP calls,
+ * the deliverWebhooks hook enqueues this task. The job runner picks it up
+ * and delivers asynchronously with retries.
+ */
+export const webhookDeliveryTask = {
+    slug: "webhooks/deliver",
+    async handler({ input, ctx }) {
+        const webhooksService = ctx.services.webhooks;
+        // Build a minimal worker — the repository is needed for delivery tracking
+        const repository = webhooksService?.repository;
+        if (!repository) {
+            ctx.logger.warn("Webhook delivery skipped: no webhooks repository available");
+            return { output: {} };
+        }
+        const worker = new WebhookDeliveryWorker({ repository });
+        await worker.deliver({
+            endpoint: {
+                id: input.endpointId,
+                url: input.endpointUrl,
+                secret: input.endpointSecret,
+            },
+            eventName: input.eventName,
+            payload: input.payload,
+        });
+        return { output: {} };
+    },
+    retries: {
+        attempts: 5,
+        backoff: { type: "exponential", delay: 2000 },
+    },
+};

package/dist/modules/webhooks/worker.d.ts

@@ -0,0 +1,21 @@
+import type { WebhooksRepository } from "./repository";
+interface WorkerDeps {
+    repository: WebhooksRepository;
+    fetchImpl?: typeof fetch;
+}
+export declare class WebhookDeliveryWorker {
+    private deps;
+    private fetchImpl;
+    constructor(deps: WorkerDeps);
+    deliver(args: {
+        endpoint: {
+            id: string;
+            url: string;
+            secret: string;
+        };
+        eventName: string;
+        payload: unknown;
+    }): Promise<void>;
+}
+export {};
+//# sourceMappingURL=worker.d.ts.map

package/dist/modules/webhooks/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../../src/modules/webhooks/worker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AA+DvD,UAAU,UAAU;IAClB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,qBAAqB;IAGpB,OAAO,CAAC,IAAI;IAFxB,OAAO,CAAC,SAAS,CAAe;gBAEZ,IAAI,EAAE,UAAU;IAI9B,OAAO,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC;CAoDlB"}

package/dist/modules/webhooks/worker.js

@@ -0,0 +1,113 @@
+import { signWebhookPayload } from "./signing";
+import { isPrivateIp } from "./ssrf-guard";
+/**
+ * SSRF prevention: reject webhook URLs targeting private/internal hosts.
+ * Blocks RFC 1918, loopback, link-local, and common internal domains.
+ */
+const PRIVATE_HOST_PATTERNS = [
+    /^127\./, // loopback
+    /^10\./, // RFC 1918 class A
+    /^172\.(1[6-9]|2[0-9]|3[01])\./, // RFC 1918 class B
+    /^192\.168\./, // RFC 1918 class C
+    /^169\.254\./, // link-local / AWS IMDS
+    /^0\.0\.0\.0/, // unspecified
+    /^localhost$/i,
+    /\.local$/i,
+    /\.internal$/i,
+];
+function validateWebhookUrl(url) {
+    const parsed = new URL(url);
+    if (process.env.NODE_ENV === "production" && parsed.protocol !== "https:") {
+        throw new Error("Webhook URLs must use HTTPS in production.");
+    }
+    const hostname = parsed.hostname;
+    for (const pattern of PRIVATE_HOST_PATTERNS) {
+        if (pattern.test(hostname)) {
+            throw new Error(`Webhook URLs cannot target private hosts: ${hostname}`);
+        }
+    }
+}
+/**
+ * Resolve the webhook URL hostname via DNS and verify the resolved IP is not
+ * private. This closes the DNS rebinding gap where a hostname initially
+ * resolves to a public IP but later rebinds to an internal address.
+ */
+async function validateResolvedIp(url) {
+    const { lookup } = await import("node:dns/promises");
+    const parsed = new URL(url);
+    const hostname = parsed.hostname.replace(/^\[|\]$/g, "");
+    // Skip DNS resolution for raw IP addresses — they are already checked
+    // by validateWebhookUrl via PRIVATE_HOST_PATTERNS.
+    const isIpLiteral = /^[\d.]+$/.test(hostname) || hostname.includes(":");
+    if (isIpLiteral)
+        return;
+    try {
+        const { address } = await lookup(hostname);
+        if (isPrivateIp(address)) {
+            throw new Error(`Webhook URL hostname "${hostname}" resolved to private IP ${address}`);
+        }
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.includes("resolved to private")) {
+            throw err;
+        }
+        throw new Error(`Failed to resolve webhook URL hostname "${hostname}": ${err}`);
+    }
+}
+export class WebhookDeliveryWorker {
+    deps;
+    fetchImpl;
+    constructor(deps) {
+        this.deps = deps;
+        this.fetchImpl = deps.fetchImpl ?? fetch;
+    }
+    async deliver(args) {
+        // SSRF prevention: validate URL string patterns + resolved DNS IP
+        validateWebhookUrl(args.endpoint.url);
+        await validateResolvedIp(args.endpoint.url);
+        let attempt = 0;
+        const maxAttempts = 3;
+        while (attempt < maxAttempts) {
+            attempt += 1;
+            const signature = signWebhookPayload(args.endpoint.secret, args.payload);
+            try {
+                const response = await this.fetchImpl(args.endpoint.url, {
+                    method: "POST",
+                    headers: {
+                        "content-type": "application/json",
+                        "x-commerce-signature": signature,
+                        "x-commerce-event": args.eventName,
+                    },
+                    body: JSON.stringify(args.payload),
+                    signal: AbortSignal.timeout(10_000),
+                });
+                await this.deps.repository.createDelivery({
+                    endpointId: args.endpoint.id,
+                    eventName: args.eventName,
+                    payload: args.payload,
+                    statusCode: response.status,
+                    attemptCount: attempt,
+                    ...(response.ok ? { deliveredAt: new Date() } : {}),
+                    ...(!response.ok ? { failedAt: new Date() } : {}),
+                    ...(!response.ok && attempt < maxAttempts
+                        ? { nextRetryAt: new Date(Date.now() + 2 ** attempt * 1000) }
+                        : {}),
+                });
+                if (response.ok)
+                    return;
+            }
+            catch {
+                await this.deps.repository.createDelivery({
+                    endpointId: args.endpoint.id,
+                    eventName: args.eventName,
+                    payload: args.payload,
+                    attemptCount: attempt,
+                    failedAt: new Date(),
+                    ...(attempt < maxAttempts
+                        ? { nextRetryAt: new Date(Date.now() + 2 ** attempt * 1000) }
+                        : {}),
+                });
+            }
+        }
+    }
+}

package/dist/runtime/commerce.d.ts

@@ -0,0 +1,110 @@
+import type { Actor } from "../auth/types";
+import type { CommerceConfig } from "../config/types";
+import type { Kernel } from "./kernel";
+import { type AuthInstance } from "../auth/setup";
+import { type Logger } from "./logger";
+import { type CommerceLocalAPI } from "../kernel/local-api";
+/**
+ * The commerce instance returned by `createCommerce()`.
+ *
+ * This is the headless, framework-agnostic entry point.
+ * No HTTP server, no Hono — just typed services and a local API.
+ *
+ * ## Usage with Next.js App Router:
+ *
+ * ```typescript
+ * // lib/commerce.ts
+ * import { createCommerce } from "@unifiedcommerce/core";
+ * import config from "../commerce.config";
+ *
+ * export const commerce = await createCommerce(config);
+ *
+ * // app/products/page.tsx (Server Component)
+ * import { commerce } from "@/lib/commerce";
+ *
+ * export default async function ProductsPage() {
+ *   const products = await commerce.api.catalog.list({ limit: 20 });
+ *   if (!products.ok) return <div>Error</div>;
+ *   return <ProductGrid items={products.value.items} />;
+ * }
+ * ```
+ *
+ * ## Usage with TanStack Start:
+ *
+ * ```typescript
+ * // app/routes/products.tsx
+ * import { createServerFn } from "@tanstack/start";
+ * import { commerce } from "../lib/commerce";
+ *
+ * const getProducts = createServerFn("GET", async () => {
+ *   return commerce.api.catalog.list({ limit: 20 });
+ * });
+ * ```
+ *
+ * ## Usage with SvelteKit:
+ *
+ * ```typescript
+ * // src/lib/server/commerce.ts
+ * import { createCommerce } from "@unifiedcommerce/core";
+ * import config from "./commerce.config";
+ * export const commerce = await createCommerce(config);
+ *
+ * // src/routes/products/+page.server.ts
+ * import { commerce } from "$lib/server/commerce";
+ * export async function load() {
+ *   const products = await commerce.api.catalog.list({ limit: 20 });
+ *   return { products: products.ok ? products.value : { items: [] } };
+ * }
+ * ```
+ */
+export interface CommerceInstance {
+    /** Proxy-based local API — auto-injects actor/tx to every service call */
+    api: CommerceLocalAPI;
+    /** Raw kernel for advanced usage (hooks, database, config) */
+    kernel: Kernel;
+    /** Drizzle database instance for direct queries */
+    db: unknown;
+    /** Auth instance (Better Auth) for session management */
+    auth: AuthInstance;
+    /** Logger */
+    logger: Logger;
+    /**
+     * Create a scoped API for a specific user/actor.
+     * Use this in authenticated routes to scope data access.
+     *
+     * ```typescript
+     * // In a Next.js server action:
+     * const userApi = commerce.withActor({
+     *   type: "user", userId: session.userId, ...
+     * });
+     * const orders = await userApi.orders.list({ limit: 10 });
+     * // Only returns orders for this user's org
+     * ```
+     */
+    withActor(actor: Actor): CommerceLocalAPI;
+    /**
+     * Create a scoped API within a database transaction.
+     *
+     * ```typescript
+     * await commerce.kernel.database.transaction(async (tx) => {
+     *   const txApi = commerce.withTransaction(tx, actor);
+     *   await txApi.inventory.adjust({ entityId, adjustment: -1, reason: "sold" });
+     *   await txApi.orders.create({ ... });
+     * });
+     * ```
+     */
+    withTransaction(tx: unknown, actor?: Actor | null): CommerceLocalAPI;
+}
+/**
+ * Create a headless commerce instance.
+ *
+ * This is the primary entry point for using UnifiedCommerce without an HTTP server.
+ * It initializes the kernel, database, auth, and returns a local API that works
+ * exactly like the REST API but without HTTP overhead.
+ *
+ * The Hono server (`createServer`) is optional — use it only when you need
+ * a standalone HTTP API. For Next.js, TanStack Start, SvelteKit, Nuxt, etc.,
+ * use `createCommerce()` directly.
+ */
+export declare function createCommerce(config: CommerceConfig): Promise<CommerceInstance>;
+//# sourceMappingURL=commerce.d.ts.map

package/dist/runtime/commerce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commerce.d.ts","sourceRoot":"","sources":["../../src/runtime/commerce.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAkB,KAAK,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AAElG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,GAAG,EAAE,gBAAgB,CAAC;IAEtB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IAEf,mDAAmD;IACnD,EAAE,EAAE,OAAO,CAAC;IAEZ,yDAAyD;IACzD,IAAI,EAAE,YAAY,CAAC;IAEnB,aAAa;IACb,MAAM,EAAE,MAAM,CAAC;IAEf;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAE1C;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,gBAAgB,CAAC;CACtE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAwB3B"}

package/dist/runtime/commerce.js

@@ -0,0 +1,37 @@
+import { createKernel } from "./kernel";
+import { ensureDefaultOrg } from "../auth/org";
+import { createAuth } from "../auth/setup";
+import { createLogger } from "./logger";
+import { createLocalAPI } from "../kernel/local-api";
+/**
+ * Create a headless commerce instance.
+ *
+ * This is the primary entry point for using UnifiedCommerce without an HTTP server.
+ * It initializes the kernel, database, auth, and returns a local API that works
+ * exactly like the REST API but without HTTP overhead.
+ *
+ * The Hono server (`createServer`) is optional — use it only when you need
+ * a standalone HTTP API. For Next.js, TanStack Start, SvelteKit, Nuxt, etc.,
+ * use `createCommerce()` directly.
+ */
+export async function createCommerce(config) {
+    const kernel = createKernel(config);
+    await ensureDefaultOrg(kernel.database.db);
+    const auth = createAuth(kernel.database, config);
+    const logger = createLogger(config);
+    // Default API: no actor (public access), no transaction
+    const api = createLocalAPI(kernel);
+    return {
+        api,
+        kernel,
+        db: kernel.database.db,
+        auth,
+        logger,
+        withActor(actor) {
+            return createLocalAPI(kernel, { actor });
+        },
+        withTransaction(tx, actor) {
+            return createLocalAPI(kernel, { actor: actor ?? null, tx });
+        },
+    };
+}

package/dist/runtime/kernel.d.ts

@@ -0,0 +1,72 @@
+import type { CommerceConfig, MCPResource, MCPTool } from "../config/types";
+import { HookRegistry } from "../kernel/hooks/registry";
+import { type DatabaseAdapter } from "../kernel/database/adapter";
+import { CatalogServiceImpl } from "../modules/catalog/service";
+import { InventoryService } from "../modules/inventory/service";
+import { MediaService } from "../modules/media/service";
+import { CartService } from "../modules/cart/service";
+import { OrderService } from "../modules/orders/service";
+import { PaymentsService } from "../modules/payments/service";
+import { FulfillmentService } from "../modules/fulfillment/service";
+import { CustomerService } from "../modules/customers/service";
+import { WebhookService } from "../modules/webhooks/service";
+import { AnalyticsService } from "../modules/analytics/service";
+import { PricingService } from "../modules/pricing/service";
+import { PromotionService } from "../modules/promotions/service";
+import { TaxService } from "../modules/tax/service";
+import { ShippingService } from "../modules/shipping/service";
+import { SearchService } from "../modules/search/service";
+import { type AuditService } from "../modules/audit/service";
+import { OrganizationService } from "../modules/organization/service";
+import { createLogger } from "../utils/logger";
+export interface WebhookDeliveryPayload {
+    endpoint: {
+        id: string;
+        url: string;
+        secret: string;
+    };
+    eventName: string;
+    payload: unknown;
+}
+export interface Kernel {
+    config: CommerceConfig;
+    hooks: HookRegistry;
+    database: DatabaseAdapter;
+    services: {
+        catalog: CatalogServiceImpl;
+        inventory: InventoryService;
+        media: MediaService;
+        cart: CartService;
+        orders: OrderService;
+        payments: PaymentsService;
+        fulfillment: FulfillmentService;
+        customers: CustomerService;
+        webhooks: WebhookService & {
+            enqueueDelivery(payload: WebhookDeliveryPayload): Promise<void>;
+        };
+        analytics: AnalyticsService;
+        pricing: PricingService;
+        promotions: PromotionService;
+        tax: TaxService;
+        shipping: ShippingService;
+        search: SearchService;
+        audit: AuditService;
+        email: CommerceConfig["email"];
+        organization: OrganizationService;
+    };
+    mcpTools: MCPTool[];
+    mcpResources: MCPResource[];
+    logger: ReturnType<typeof createLogger>;
+    getMCPActor(): {
+        type: "api_key";
+        userId: string;
+        email: null;
+        name: string;
+        vendorId: null;
+        organizationId: string;
+        role: string;
+        permissions: string[];
+    };
+}
+export declare function createKernel(config: CommerceConfig): Kernel;
+//# sourceMappingURL=kernel.d.ts.map

package/dist/runtime/kernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/runtime/kernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,OAAO,EACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAoB,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAYhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAGhE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAY/C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE;QACR,OAAO,EAAE,kBAAkB,CAAC;QAC5B,SAAS,EAAE,gBAAgB,CAAC;QAC5B,KAAK,EAAE,YAAY,CAAC;QACpB,IAAI,EAAE,WAAW,CAAC;QAClB,MAAM,EAAE,YAAY,CAAC;QACrB,QAAQ,EAAE,eAAe,CAAC;QAC1B,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,eAAe,CAAC;QAC3B,QAAQ,EAAE,cAAc,GAAG;YACzB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SACjE,CAAC;QACF,SAAS,EAAE,gBAAgB,CAAC;QAC5B,OAAO,EAAE,cAAc,CAAC;QACxB,UAAU,EAAE,gBAAgB,CAAC;QAC7B,GAAG,EAAE,UAAU,CAAC;QAChB,QAAQ,EAAE,eAAe,CAAC;QAC1B,MAAM,EAAE,aAAa,CAAC;QACtB,KAAK,EAAE,YAAY,CAAC;QACpB,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/B,YAAY,EAAE,mBAAmB,CAAC;KACnC,CAAC;IACF,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,WAAW,IAAI;QACb,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,IAAI,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,IAAI,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,EAAE,CAAC;KACvB,CAAC;CACH;AAgGD,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CA2N3D"}