@uptimizr/collector-server 0.1.0

package/dist/routes/live.js

@@ -0,0 +1,179 @@
+import { z } from "zod";
+import { mintLiveToken, verifyLiveToken } from "../liveToken.js";
+const HEARTBEAT_MS = 15_000;
+const tokenQuery = z.object({ token: z.string().min(1).optional() });
+const streamQuery = tokenQuery.extend({
+    /** Optional comma-separated event-type allow-list for the firehose. */
+    types: z.string().max(512).optional(),
+});
+/**
+ * Resolve the project for a live SSE request from a `?token=` (ADR 0032 §7).
+ * Sends a 401 and returns `null` when the token is missing/invalid/expired.
+ */
+function authLiveToken(request, reply, config) {
+    const token = request.query.token;
+    if (!token) {
+        void reply.code(401).send({ error: "missing live token" });
+        return null;
+    }
+    const projectId = verifyLiveToken(token, config.liveTokenSecret);
+    if (!projectId) {
+        void reply.code(401).send({ error: "invalid or expired live token" });
+        return null;
+    }
+    return projectId;
+}
+/**
+ * Reflect an allowed request `Origin` for a raw (hijacked) SSE response. The CORS
+ * plugin sets `Access-Control-Allow-Origin` via `reply.header`, but SSE bypasses
+ * Fastify's send path (`reply.raw.writeHead` + `reply.hijack`), so those headers
+ * are never flushed. Without this, a cross-origin `EventSource` (e.g. the
+ * dashboard on a different origin than the collector) is blocked by the browser.
+ */
+function sseCorsHeaders(request, config) {
+    const origin = request.headers.origin;
+    if (typeof origin === "string" && config.corsOrigins.includes(origin)) {
+        return { "access-control-allow-origin": origin, vary: "Origin" };
+    }
+    return {};
+}
+/** Open an SSE response on the raw socket. Returns a writer + a teardown hook. */
+function openSse(request, reply, config) {
+    reply.raw.writeHead(200, {
+        "content-type": "text/event-stream; charset=utf-8",
+        "cache-control": "no-cache, no-transform",
+        connection: "keep-alive",
+        "x-accel-buffering": "no",
+        ...sseCorsHeaders(request, config),
+    });
+    // Defeat proxy buffering and prompt the browser to open the stream.
+    reply.raw.write(": connected\n\n");
+    reply.hijack();
+    const send = (data, event) => {
+        if (reply.raw.writableEnded)
+            return;
+        if (event)
+            reply.raw.write(`event: ${event}\n`);
+        reply.raw.write(`data: ${data}\n\n`);
+    };
+    const comment = (text) => {
+        if (!reply.raw.writableEnded)
+            reply.raw.write(`: ${text}\n\n`);
+    };
+    void request;
+    return { send, comment };
+}
+/**
+ * Live SSE endpoints (ADR 0032 §3): presence (aggregate, always on), the
+ * project firehose (drives live dashboard updates), and the per-session
+ * live-follow tail (gated by raw-session retention, like replay). All fan out
+ * from the in-process bus and are bounded (ADR §6).
+ */
+export const liveRoutes = async (app, { store, config, liveBus }) => {
+    const r = app.withTypeProvider();
+    let connections = 0;
+    /** Reserve a live connection slot, or send 503 when at capacity (ADR §6). */
+    function acquireSlot(reply) {
+        if (connections >= config.liveMaxConnections) {
+            void reply.code(503).send({ error: "live connection limit reached" });
+            return false;
+        }
+        connections += 1;
+        return true;
+    }
+    // Server-to-server: exchange an API key for a short-lived live token (ADR §7).
+    r.post("/api/v1/live/token", async (req, reply) => {
+        const key = req.headers["x-api-key"];
+        if (typeof key !== "string" || key.length === 0) {
+            return reply.code(401).send({ error: "missing api key" });
+        }
+        const projectId = await store.resolveApiKey(key);
+        if (!projectId) {
+            return reply.code(401).send({ error: "invalid api key" });
+        }
+        // The live feed is a read surface — require a `query`-capable key.
+        if (projectId.capability !== "query") {
+            return reply.code(403).send({ error: "api key not permitted to read" });
+        }
+        const { token, expiresAt } = mintLiveToken(projectId.projectId, config.liveTokenSecret, config.liveTokenTtlMs);
+        return reply.send({ token, expiresAt });
+    });
+    // Aggregate presence: pushes a snapshot immediately, then on an interval that
+    // doubles as the heartbeat. Privacy-safe → not gated by raw retention (ADR §3a).
+    r.get("/api/v1/live/presence", { schema: { querystring: tokenQuery } }, (req, reply) => {
+        const projectId = authLiveToken(req, reply, config);
+        if (!projectId)
+            return;
+        if (!acquireSlot(reply))
+            return;
+        const { send } = openSse(req, reply, config);
+        const push = () => send(JSON.stringify(liveBus.presence(projectId)), "presence");
+        push();
+        const timer = setInterval(push, config.livePresenceIntervalMs);
+        req.raw.on("close", () => {
+            clearInterval(timer);
+            connections -= 1;
+        });
+    });
+    // Project firehose: every arriving event (optionally filtered by type). Drives
+    // the dashboard's in-place panel/feed updates (ADR §3). Payloads carry no more
+    // than the aggregate read API already exposes unless raw retention is on.
+    r.get("/api/v1/live/stream", { schema: { querystring: streamQuery } }, (req, reply) => {
+        const projectId = authLiveToken(req, reply, config);
+        if (!projectId)
+            return;
+        if (!acquireSlot(reply))
+            return;
+        const types = req.query.types
+            ? new Set(req.query.types
+                .split(",")
+                .map((t) => t.trim())
+                .filter(Boolean))
+            : undefined;
+        const { send, comment } = openSse(req, reply, config);
+        const sub = liveBus.subscribe({ projectId, types });
+        const heartbeat = setInterval(() => comment("ping"), HEARTBEAT_MS);
+        const pump = async () => {
+            for await (const event of sub)
+                send(JSON.stringify(event), "event");
+        };
+        void pump();
+        req.raw.on("close", () => {
+            clearInterval(heartbeat);
+            sub.close();
+            connections -= 1;
+        });
+    });
+    // Per-session live-follow tail for live replay. Gated by raw-session retention,
+    // identical to historical replay (ADR 0003/0006). Sends connect-time backfill
+    // from the bounded ring, then live events.
+    r.get("/api/v1/live/sessions/:id", { schema: { params: z.object({ id: z.string().min(1).max(128) }), querystring: tokenQuery } }, (req, reply) => {
+        const projectId = authLiveToken(req, reply, config);
+        if (!projectId)
+            return;
+        if (!config.enableRawSessionRetention) {
+            void reply.code(403).send({ error: "raw session retention is disabled" });
+            return;
+        }
+        if (!acquireSlot(reply))
+            return;
+        const sessionId = req.params.id;
+        const { send, comment } = openSse(req, reply, config);
+        const sub = liveBus.subscribe({ projectId, sessionId });
+        for (const event of liveBus.recentForSession(projectId, sessionId)) {
+            send(JSON.stringify(event), "event");
+        }
+        const heartbeat = setInterval(() => comment("ping"), HEARTBEAT_MS);
+        const pump = async () => {
+            for await (const event of sub)
+                send(JSON.stringify(event), "event");
+        };
+        void pump();
+        req.raw.on("close", () => {
+            clearInterval(heartbeat);
+            sub.close();
+            connections -= 1;
+        });
+    });
+};
+//# sourceMappingURL=live.js.map

package/dist/routes/live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../../src/routes/live.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAQjE,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACrE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC;IACpC,uEAAuE;IACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,aAAa,CACpB,OAA4D,EAC5D,KAAmB,EACnB,MAAuB;IAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACjE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,OAAuB,EAAE,MAAuB;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CACd,OAAuB,EACvB,KAAmB,EACnB,MAAuB;IAEvB,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACvB,cAAc,EAAE,kCAAkC;QAClD,eAAe,EAAE,wBAAwB;QACzC,UAAU,EAAE,YAAY;QACxB,mBAAmB,EAAE,IAAI;QACzB,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;IACH,oEAAoE;IACpE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACnC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAc,EAAQ,EAAE;QAClD,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO;QACpC,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAQ,EAAE;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,KAAK,OAAO,CAAC;IACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAgC,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;IAC/F,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,EAAmB,CAAC;IAClD,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,6EAA6E;IAC7E,SAAS,WAAW,CAAC,KAAmB;QACtC,IAAI,WAAW,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC7C,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,WAAW,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,mEAAmE;QACnE,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,aAAa,CACxC,SAAS,CAAC,SAAS,EACnB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,cAAc,CACtB,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,iFAAiF;IACjF,CAAC,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACrF,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO;QAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACvF,IAAI,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAE/D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,+EAA+E;IAC/E,0EAA0E;IAC1E,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACpF,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO;QAEhC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK;YAC3B,CAAC,CAAC,IAAI,GAAG,CACL,GAAG,CAAC,KAAK,CAAC,KAAK;iBACZ,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CACnB;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;YACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC,CAAC;QACF,KAAK,IAAI,EAAE,CAAC;QAEZ,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,8EAA8E;IAC9E,2CAA2C;IAC3C,CAAC,CAAC,GAAG,CACH,2BAA2B,EAC3B,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAC7F,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACb,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACtC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO;QAEhC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAExD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;YACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC,CAAC;QACF,KAAK,IAAI,EAAE,CAAC;QAEZ,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/routes/query.d.ts

@@ -0,0 +1,14 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { CollectorConfig } from "../config.js";
+import type { CollectorStore } from "../store.js";
+interface Options {
+    store: CollectorStore;
+    config: CollectorConfig;
+}
+/**
+ * Query API. All aggregations are computed at query time (v1). Every route is
+ * scoped to the authenticated project.
+ */
+export declare const queryRoutes: FastifyPluginAsync<Options>;
+export {};
+//# sourceMappingURL=query.d.ts.map

package/dist/routes/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/routes/query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAKhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,UAAU,OAAO;IACf,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,eAAe,CAAC;CACzB;AAgQD;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CA2hBnD,CAAC"}