appsec-agent 2.8.0 → 3.0.1

package/dist/src/agent_options.d.ts

@@ -5,52 +5,14 @@
  */
 import { Options, CanUseTool } from '@anthropic-ai/claude-agent-sdk';
 import { ConfigDict } from './utils';
+import type { RoleSpec } from './providers/role_spec';
+import { DEFAULT_MCP_SERVER_NAME, MCP_INTERNAL_SERVER_NAME, MCP_INTERNAL_TOOL_NAMES, buildMcpInternalToolNames } from './mcp_internal';
+export { DEFAULT_MCP_SERVER_NAME, MCP_INTERNAL_SERVER_NAME, MCP_INTERNAL_TOOL_NAMES, buildMcpInternalToolNames, };
 export interface ToolUsageLog {
     tool: string;
     input: any;
     suggestions: string;
 }
-/**
- * Default identifier the agent uses to register a parent-app-managed MCP
- * server with the Claude Agent SDK. The resulting tool names exposed to
- * the LLM follow the SDK convention `mcp__<server>__<tool>`, so this
- * value becomes the literal prefix the model sees on its tool list.
- *
- * The default is intentionally generic (`appsec-internal`) so the
- * `appsec-agent` package is reusable across parent apps. Callers that
- * need a different identifier — e.g. to keep an existing prompt-nudge or
- * counter contract stable — pass `--mcp-server-name <name>` on the CLI
- * (or `mcpServerName` to the role builders directly), and the override
- * threads through to both `Options.mcpServers[<name>]` and the namespaced
- * tool names in the subagent whitelist.
- */
-export declare const DEFAULT_MCP_SERVER_NAME = "appsec-internal";
-/**
- * @deprecated since v2.4.2 — historical alias for the default server name.
- * Kept exported so existing imports keep type-checking; new code should
- * read `DEFAULT_MCP_SERVER_NAME` (and pass an override via
- * `mcpServerName` when a specific identifier is required).
- */
-export declare const MCP_INTERNAL_SERVER_NAME = "appsec-internal";
-/**
- * Tools exposed by the per-scan in-process MCP server the parent app
- * stands up. Pinned at this set (`queryFindingsHistory`,
- * `queryImportGraph`, `queryRuntimeEnrichment`, `queryCodebaseGraph`) so
- * the agent's tool whitelist is deterministic at the current version;
- * parent apps that expose a different surface should fork or extend this
- * list rather than rely on dynamic discovery (the SDK would otherwise have
- * to round-trip the server before constructing the whitelist).
- */
-export declare const MCP_INTERNAL_TOOL_NAMES: readonly ["queryFindingsHistory", "queryImportGraph", "queryRuntimeEnrichment", "queryCodebaseGraph"];
-/**
- * SDK-namespaced tool names the LLM sees on its tool list when the server
- * is wired up. Exposed as a helper rather than a constant so callers in
- * `agent_options.ts` and the test suite share one source of truth.
- *
- * @param serverName - Override for the MCP server identifier. Defaults
- *   to `DEFAULT_MCP_SERVER_NAME` (`appsec-internal`).
- */
-export declare function buildMcpInternalToolNames(serverName?: string): string[];
 /**
  * System-prompt suffix for `pr_reviewer` / `code_reviewer` when
  * `--mcp-server-url` is set. Steers the model toward all live parent-app
@@ -90,6 +52,7 @@ export declare class AgentOptions {
     /**
      * Get options for simple query agent
      */
+    getSimpleQueryAgentRoleSpec(role?: string, srcDir?: string | null): RoleSpec;
     getSimpleQueryAgentOptions(role?: string, srcDir?: string | null): Options;
     /**
      * Get options for security code reviewer
@@ -110,7 +73,12 @@ export declare class AgentOptions {
      * @param mcpServerName - Override for the MCP server identifier
      * @param mcpServerBearer - Bearer token for MCP HTTP requests
      */
+    getCodeReviewerRoleSpec(role?: string, outputFormat?: string, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string, workingDirectory?: string): RoleSpec;
     getCodeReviewerOptions(role?: string, outputFormat?: string, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): Options;
+    /**
+     * Provider-neutral spec for threat modeler (Phase 3 RoleSpec spike).
+     */
+    getThreatModelerRoleSpec(role?: string, outputFormat?: string, workingDirectory?: string): RoleSpec;
     /**
      * Get options for threat modeler
      * @param role - The role configuration key
@@ -125,65 +93,21 @@ export declare class AgentOptions {
      * @param srcDir - Optional source directory path
      * @param outputFormat - Output format (json, markdown, etc.)
      */
+    getDiffReviewerRoleSpec(role?: string, srcDir?: string | null, outputFormat?: string, maxTurns?: number, noTools?: boolean, experimentEnabled?: boolean, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): RoleSpec;
     getDiffReviewerOptions(role?: string, srcDir?: string | null, outputFormat?: string, maxTurns?: number, noTools?: boolean, experimentEnabled?: boolean, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): Options;
-    /**
-     * Get options for code fixer agent
-     * Uses structured JSON output to guarantee a well-formed fix response.
-     * Has Read and Grep tools to explore the source directory for additional context.
-     * @param role - The role configuration key
-     * @param srcDir - Optional source directory path for additional context
-     */
+    getCodeFixerRoleSpec(role?: string, srcDir?: string | null, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): RoleSpec;
     getCodeFixerOptions(role?: string, srcDir?: string | null, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): Options;
-    /**
-     * Get options for the QA verifier agent
-     * Uses Read, Grep, and Bash tools for test execution and analysis
-     */
+    getQaVerifierRoleSpec(role?: string, srcDir?: string | null): RoleSpec;
     getQaVerifierOptions(role?: string, srcDir?: string | null): Options;
-    /**
-     * Get options for the finding validator agent
-     * Uses Read and Grep tools (read-only) to analyze code for vulnerability presence.
-     */
+    getContextExtractorRoleSpec(role?: string): RoleSpec;
     getContextExtractorOptions(role?: string): Options;
+    getFindingValidatorRoleSpec(role?: string, srcDir?: string | null, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): RoleSpec;
     getFindingValidatorOptions(role?: string, srcDir?: string | null, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): Options;
-    /**
-     * learned_guidance_synthesizer (v2.5.0 / parent-app plan §3.8): pure-transform
-     * role that condenses bucketed dismissal/outcome/feedback signals into a short
-     * list of class-level policy bullets the pr_reviewer reads next scan.
-     *
-     * Tools: NONE — the agent must work from the provided buckets only. No
-     * source-tree access, no MCP server. The parent app's `runSynthesizerAgent`
-     * spawns this from a temp working directory anyway, so even if a tool were
-     * attached it would have nothing to read.
-     *
-     * Output schema (LEARNED_GUIDANCE_OUTPUT_SCHEMA):
-     *   { bullets: [{ cwe, bullet (≤300 chars), confidence (0..1) }] }
-     *
-     * Confidence floor and active-bullet cap are enforced by the parent app
-     * (`MIN_CONFIDENCE = 0.6`, `MAX_ACTIVE_BULLETS_PER_PROJECT = 12`); this
-     * role is allowed to return up to 50 bullets and the parent ranks +
-     * truncates.
-     */
+    getLearnedGuidanceSynthesizerRoleSpec(role?: string): RoleSpec;
     getLearnedGuidanceSynthesizerOptions(role?: string): Options;
-    /**
-     * pr_adversary: second pass that filters pr_reviewer findings using failure-path skepticism.
-     * Output: same SECURITY_REPORT_SCHEMA with only surviving findings.
-     */
+    getPrAdversaryRoleSpec(role?: string, srcDir?: string | null, maxTurns?: number, experimentEnabled?: boolean, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): RoleSpec;
     getPrAdversaryOptions(role?: string, srcDir?: string | null, maxTurns?: number, experimentEnabled?: boolean, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): Options;
-    /**
-     * fp_adversary (v2.8.0 / parent app full-repo Phase 2.5): second pass that
-     * filters first-pass `code_reviewer` findings on full-repo scans by emitting
-     * per-finding `(fingerprint, verdict, confidence, rationale)` verdicts. Output
-     * is constrained to FP_ADVERSARY_REPORT_SCHEMA so the verdict contract stays
-     * model-independent across Claude upgrades.
-     *
-     * Differences from `getPrAdversaryOptions`:
-     * - Output schema is the dedicated `fp_adversary_report` (not
-     *   SECURITY_REPORT_SCHEMA) — verdicts round-trip on `fingerprint`, not `id`.
-     * - No `experiment_enabled` plumbing (Lane-2 deliberately omits A/B per M4).
-     * - System prompt references the four structured posture fields and
-     *   `similar_dismissed` precedent that the parent app threads in via
-     *   `--adversarial-context`.
-     */
+    getFpAdversaryRoleSpec(role?: string, srcDir?: string | null, maxTurns?: number, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): RoleSpec;
     getFpAdversaryOptions(role?: string, srcDir?: string | null, maxTurns?: number, mcpServerUrl?: string, mcpServerName?: string, mcpServerBearer?: string): Options;
 }
 //# sourceMappingURL=agent_options.d.ts.map

package/dist/src/agent_options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent_options.d.ts","sourceRoot":"","sources":["../../src/agent_options.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAqC,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACxG,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAmBrC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,oBAA0B,CAAC;AAEhE;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,uGAK1B,CAAC;AAEX;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,GAAE,MAAgC,GAC3C,MAAM,EAAE,CAIV;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yCAAyC,CACvD,aAAa,GAAE,MAAgC,GAC9C,MAAM,CAUR;AA8CD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,YAAY,CAAsB;gBAE9B,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,GAAE,MAAe;IAM7E;;;OAGG;IACH,eAAe,IAAI,YAAY,EAAE;IAIjC;;OAEG;IACH,iBAAiB,IAAI,IAAI;IAIzB;;OAEG;IACH,sBAAsB,EAAE,UAAU,CAqBjC;IAED;;OAEG;IACH,0BAA0B,CAAC,IAAI,GAAE,MAA6B,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAgBhG;;;;;;;;;;;;;;;;;;OAkBG;IACH,sBAAsB,CACpB,IAAI,GAAE,MAAwB,EAC9B,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IA+CV;;;;OAIG;IACH,uBAAuB,CAAC,IAAI,GAAE,MAAyB,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO;IAgCxF;;;;;;;OAOG;IACH,sBAAsB,CACpB,IAAI,GAAE,MAAwB,EAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,OAAO,EACjB,iBAAiB,CAAC,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAkHV;;;;;;OAMG;IACH,mBAAmB,CACjB,IAAI,GAAE,MAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IA0CV;;;OAGG;IACH,oBAAoB,CAAC,IAAI,GAAE,MAAsB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAmCnF;;;OAGG;IACH,0BAA0B,CAAC,IAAI,GAAE,MAA4B,GAAG,OAAO;IAmCvE,0BAA0B,CACxB,IAAI,GAAE,MAA4B,EAClC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IA0CV;;;;;;;;;;;;;;;;;OAiBG;IACH,oCAAoC,CAAC,IAAI,GAAE,MAAuC,GAAG,OAAO;IAqC5F;;;OAGG;IACH,qBAAqB,CACnB,IAAI,GAAE,MAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IA+CV;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CACnB,IAAI,GAAE,MAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;CAmDX"}
+{"version":3,"file":"agent_options.d.ts","sourceRoot":"","sources":["../../src/agent_options.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAqC,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACxG,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AASrC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,EAE1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,GAC1B,CAAC;AAWF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yCAAyC,CACvD,aAAa,GAAE,MAAgC,GAC9C,MAAM,CAUR;AAmCD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,YAAY,CAAsB;gBAE9B,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,GAAE,MAAe;IAM7E;;;OAGG;IACH,eAAe,IAAI,YAAY,EAAE;IAIjC;;OAEG;IACH,iBAAiB,IAAI,IAAI;IAIzB;;OAEG;IACH,sBAAsB,EAAE,UAAU,CAqBjC;IAED;;OAEG;IACH,2BAA2B,CAAC,IAAI,GAAE,MAA6B,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,QAAQ;IAqBlG,0BAA0B,CAAC,IAAI,GAAE,MAA6B,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAIhG;;;;;;;;;;;;;;;;;;OAkBG;IACH,uBAAuB,CACrB,IAAI,GAAE,MAAwB,EAC9B,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,EACxB,gBAAgB,CAAC,EAAE,MAAM,GACxB,QAAQ;IAiCX,sBAAsB,CACpB,IAAI,GAAE,MAAwB,EAC9B,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAUV;;OAEG;IACH,wBAAwB,CACtB,IAAI,GAAE,MAAyB,EAC/B,YAAY,CAAC,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,GACxB,QAAQ;IA8BX;;;;OAIG;IACH,uBAAuB,CAAC,IAAI,GAAE,MAAyB,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO;IAIxF;;;;;;;OAOG;IACH,uBAAuB,CACrB,IAAI,GAAE,MAAwB,EAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,OAAO,EACjB,iBAAiB,CAAC,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,QAAQ;IAkGX,sBAAsB,CACpB,IAAI,GAAE,MAAwB,EAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,OAAO,EACjB,iBAAiB,CAAC,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAcV,oBAAoB,CAClB,IAAI,GAAE,MAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,QAAQ;IA8BX,mBAAmB,CACjB,IAAI,GAAE,MAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAUV,qBAAqB,CAAC,IAAI,GAAE,MAAsB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,QAAQ;IA4BrF,oBAAoB,CAAC,IAAI,GAAE,MAAsB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAInF,2BAA2B,CAAC,IAAI,GAAE,MAA4B,GAAG,QAAQ;IA8BzE,0BAA0B,CAAC,IAAI,GAAE,MAA4B,GAAG,OAAO;IAIvE,2BAA2B,CACzB,IAAI,GAAE,MAA4B,EAClC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,QAAQ;IA+BX,0BAA0B,CACxB,IAAI,GAAE,MAA4B,EAClC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAUV,qCAAqC,CAAC,IAAI,GAAE,MAAuC,GAAG,QAAQ;IA6B9F,oCAAoC,CAAC,IAAI,GAAE,MAAuC,GAAG,OAAO;IAI5F,sBAAsB,CACpB,IAAI,GAAE,MAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,QAAQ;IAkCX,qBAAqB,CACnB,IAAI,GAAE,MAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;IAYV,sBAAsB,CACpB,IAAI,GAAE,MAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,QAAQ;IAuCX,qBAAqB,CACnB,IAAI,GAAE,MAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO;CAUX"}