bulletin-deploy 0.16.1 → 0.17.0-rc.2

package/README.md

@@ -71,13 +71,27 @@ Key options:
 | `--no-transfer-to-signedin-user` | When signed in, sign every DotNS tx with your mobile session instead of the default register-as-worker-then-hand-over flow. |
 | `--to <0xH160>` | Recipient address for the `transfer` subcommand. Defaults to the signed-in account. |
 | `--js-merkle` | Use pure-JS merkleization (no IPFS Kubo binary required). |
-| `--publish` | List the domain in the on-chain Publisher registry after deploy. |
 | `--config <path>` | Explicit path to `bulletin-deploy.config.ts` for product deploys. |
 | `--tag "..."` | Label the deploy in telemetry. |
 | `--version` | Print the installed version and exit. |
 
 Subcommands: `login`, `logout`, `whoami` (session management, above) and `transfer <domain.dot>` (hand a name you registered to the signed-in account or `--to`).
 
+## Naming
+
+A DotNS label is 3-63 lowercase letters, digits, and hyphens, and it must satisfy the on-chain registration rules (PopRules) to be self-registrable:
+
+- **Trailing digits:** the label's trailing digit run must be exactly **0 or 2** digits. `myapp1` (one trailing digit) is rejected; `myapp01` or `myapp` both work.
+- **Base length:** the label minus its trailing digit run must be **more than 5 characters**. Shorter base names are reserved for governance.
+
+If a name violates either rule, the deploy fails with a message that offers a compliant alternative derived from your own input — no name gets silently substituted.
+
+**PR-preview labels** are the case this trips up most often: a bare PR number gives exactly one trailing digit for PRs 1-9 (`myapp-pr7`), which always fails. Zero-pad the PR number instead — `myapp-pr07` — so it stays valid across the full PR range:
+
+```sh
+bulletin-deploy ./dist "myapp-pr$(printf '%02d' "$PR_NUMBER")"
+```
+
 ## Environments
 
 bulletin-deploy ships with built-in environment presets (RPC endpoints, contract addresses). The default is `paseo-next-v2`, a Polkadot testnet. Use `--list-environments` to print the table; override individual fields with `--environment-file <path>` or `--contract KEY=0x...`. For what a starting account needs on a given network — funding, a `.dot` name, authorization — see **[DEPLOYMENT.md](DEPLOYMENT.md)**.

package/assets/environments.json

@@ -163,8 +163,7 @@
         "POP_RULES": "0x2181a14081fF2D4477BAA8FB1aEB4C9c44F5F2b0",
         "STORE_FACTORY": "0xD81DC23FAa69B311C1FC553Ea63798772e7D253D",
         "LABEL_STORE_BEACON": "0xc7E86B8DE97AF57F937201d8d372F75ED4BE6633",
-        "USER_STORE_BEACON": "0x5924A0dDBb550514A744407F4Ec4b4B7BB6CD736",
-        "PUBLISHER": "0xaab42efbe8ea4d4228c3a11e973f94c17b9a0f2c"
+        "USER_STORE_BEACON": "0x5924A0dDBb550514A744407F4Ec4b4B7BB6CD736"
       }
     },
     {

package/bin/bulletin-bootstrap

@@ -117,6 +117,14 @@ if (flags.env) {
 
   bootstrapOpts.bulletinAuthorizeV2 = envEntry.bulletinAuthorizeV2 ?? false;
 
+  // #1095: route the //Alice-authorizer-default decision through the env's
+  // declared network instead of a live spec_name read — a network:"mainnet"
+  // env must never default to signing as //Alice. Once --env resolved an
+  // entry, a missing `network` field is a config gap (fail CLOSED via the
+  // "unknown" sentinel), not "no env context" (which would fall back to
+  // spec_name) — see detectTestnet()'s doc comment in src/pool.ts.
+  bootstrapOpts.network = envEntry.network ?? "unknown";
+
   // #1209: which key holds TransactionStorage authorizer rights on this env's
   // Bulletin chain. Not always //Alice — previewnet's sole AllowedAuthorizers
   // entry is //Eve. An explicit --authorizer still wins (set above).

package/bin/bulletin-deploy

@@ -6,9 +6,9 @@
 // SDK modules that trigger the "@parity/product-sdk-logger" localStorage warning.
 import "../dist/suppress-localstorage-warning.js";
 
-import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, NonRetryableError, EXIT_CODE_NO_RETRY, isConnectionError, isBenignTeardownError, unpublish, resolveEffectiveMnemonic, resolveEnvId, shouldPublishManifest, validateNoManifestFlags } from "../dist/deploy.js";
-import { VERSION, setDeployAttribute, captureWarning, closeTelemetry, setRunStateActive, markRelaunchOomHintShown } from "../dist/telemetry.js";
-import { handleFailedDeploy, handlePreflightVersionCheck, fetchVersionInfo, preReleaseWarning, checkNodeVersion } from "../dist/version-check.js";
+import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, NonRetryableError, EXIT_CODE_NO_RETRY, isConnectionError, isBenignTeardownError, resolveEffectiveMnemonic, resolveEnvId, shouldPublishManifest, nonInteractivePhoneConfirmationError } from "../dist/deploy.js";
+import { VERSION, setDeployAttribute, captureWarning, closeTelemetry, setRunStateActive, markRelaunchOomHintShown, setVersionFreshness } from "../dist/telemetry.js";
+import { handleFailedDeploy, handlePreflightVersionCheck, fetchVersionInfo, preReleaseWarning, checkNodeVersion, classifyVersionFreshness, isInteractive } from "../dist/version-check.js";
 import { setDeployContext, installLogCapture, buildCliFlagsSummary } from "../dist/bug-report.js";
 import { loadRunState, writeRunState, shouldSkipStaleWarning, shouldShowOomHint, probablyOomRssMb } from "../dist/run-state.js";
 import { loadEnvironments, listEnvironments, formatEnvironmentTable, DEFAULT_ENV_ID } from "../dist/environments.js";
@@ -36,6 +36,7 @@ for (let i = 0; i < args.length; i++) {
   else if (args[i] === "--pool-size") { flags.poolSize = parseInt(args[++i], 10); }
   else if (args[i] === "--mnemonic") { flags.mnemonic = args[++i]; }
   else if (args[i] === "--derivation-path") { flags.derivationPath = args[++i]; }
+  else if (args[i] === "--product-name") { flags.productName = args[++i]; }
   else if (args[i] === "--rpc") { flags.rpc = args[++i]; }
   else if (args[i] === "--env") { flags.env = args[++i]; }
   else if (args[i] === "--contract") {
@@ -62,9 +63,6 @@ for (let i = 0; i < args.length; i++) {
   else if (args[i].startsWith("--reproducible=")) { flags.reproducibleSource = args[i].slice("--reproducible=".length); }
   else if (args[i] === "--dump-car") { flags.dumpCar = true; }
   else if (args[i].startsWith("--dump-car=")) { flags.dumpCar = args[i].slice("--dump-car=".length); }
-  else if (args[i] === "--publish") { flags.publish = true; }
-  else if (args[i] === "--unpublish") { flags.unpublish = true; }
-  else if (args[i] === "--fail-on-publish-error") { flags.failOnPublishError = true; }
   else if (args[i] === "--suri") { flags.suri = args[++i]; }
   else if (args[i] === "--no-transfer-to-signedin-user") { flags.noTransferToSignedinUser = true; }
   else if (args[i] === "--to") { flags.to = args[++i]; }
@@ -73,23 +71,8 @@ for (let i = 0; i < args.length; i++) {
   else { positional.push(args[i]); }
 }
 
-if (flags.publish && flags.unpublish) {
-  console.error("Error: --publish and --unpublish are mutually exclusive.");
-  process.exit(1);
-}
-
-// #1163: --no-manifest (--content-only) skips manifest publishing even when a
-// bulletin-deploy.config.* is discoverable; --publish depends on those
-// manifest records (Publisher listing → Browse), so the combination is
-// rejected up front rather than silently publishing a domain with no manifest.
-const noManifestErr = validateNoManifestFlags({ noManifest: !!flags.noManifest, publish: !!flags.publish });
-if (noManifestErr) {
-  console.error(noManifestErr);
-  process.exit(1);
-}
-
 // #1107: the mnemonic actually used to sign — --mnemonic flag > MNEMONIC env
-// var > DOTNS_MNEMONIC env var. Used everywhere deploy/publish/unpublish need
+// var > DOTNS_MNEMONIC env var. Used everywhere a deploy needs
 // a signer identity (existence guards below intentionally keep checking
 // flags.mnemonic / process.env.MNEMONIC directly — only the VALUE forwarded
 // to options.mnemonic changes here).
@@ -135,32 +118,6 @@ if (flags.listEnvironments) {
   }
 }
 
-if (flags.unpublish) {
-  if (!flags.mnemonic && !process.env.MNEMONIC) {
-    console.error("Error: --unpublish requires --mnemonic (or MNEMONIC env var).");
-    process.exit(1);
-  }
-  const [domain] = positional;
-  if (!domain) {
-    console.error("Error: --unpublish requires a domain (e.g. my-app.dot)");
-    process.exit(1);
-  }
-  try {
-    const result = await unpublish(domain, {
-      mnemonic: effectiveMnemonic,
-      derivationPath: flags.derivationPath,
-      rpc: flags.rpc,
-      env: effectiveEnvId,
-    });
-    console.log(`Domain: ${result.domainName}`);
-    console.log(`Status: ${result.status}`);
-    process.exit(0);
-  } catch (e) {
-    console.error(`Unpublish failed:`, e?.message ?? e);
-    process.exit(1);
-  }
-}
-
 // The SSO adapter's polkadot-api client fires a benign `DestroyedError: Client
 // destroyed` on orphaned pending-response promises during WS teardown, AFTER an
 // SSO subcommand has done its work. The deploy path's handlers (below) aren't
@@ -246,11 +203,6 @@ if (positional[0] === "product") {
   process.exit(2);
 }
 
-if (flags.publish && !flags.mnemonic && !process.env.MNEMONIC) {
-  console.error("Error: --publish requires --mnemonic (or MNEMONIC env var).");
-  process.exit(1);
-}
-
 if (flags.help || positional.length === 0) {
   console.log(`bulletin-deploy v${VERSION}
 
@@ -284,6 +236,7 @@ Options:
                            --contract DOTNS_REGISTRY=0x.. --contract DOTNS_CONTENT_RESOLVER=0x..
   --mnemonic "..."         DotNS owner mnemonic (or set MNEMONIC env var)
   --derivation-path "..."  Optional Substrate-style path applied to --mnemonic (e.g. //deploy/3)
+  --product-name "..."     Deploy as this product's host-derived account (RFC-0022, index 0), so the name is owned by the account the product signs with at runtime
   --no-transfer-to-signedin-user
                            When signed in, sign every DotNS tx with your mobile
                            session (today's behavior) instead of the default:
@@ -310,18 +263,7 @@ Options:
                       Skip manifest publishing entirely, even when a
                       bulletin-deploy.config.* is discoverable — plain content
                       deploy (storage + root contenthash), same as having no
-                      config at all. Mutually exclusive with --publish.
-  --publish           After deploy, list <domain> in the on-chain Publisher
-                      registry (Publisher.publish). Only takes effect on envs
-                      with a deployed Publisher (currently: PCF-devnet).
-                      Requires --mnemonic (the signer must own the label).
-  --unpublish         Standalone mode: removes <domain> from the Publisher
-                      registry (Publisher.unpublish). Skips the deploy.
-                      Usage: bulletin-deploy --unpublish <domain.dot>
-                      Requires --mnemonic. Mutually exclusive with --publish.
-  --fail-on-publish-error
-                      Exit non-zero if --publish fails after a successful deploy.
-                      Default: non-fatal (warning logged, exit 0).
+                      config at all.
   --version           Show version
   --help              Show this help`);
   process.exit(0);
@@ -488,6 +430,10 @@ try {
 
   // Await the background version check started at startup.
   const _versionInfo = await _versionCheckPromise;
+  // Telemetry (#1346): record the same live npm-registry comparison as a span
+  // attribute, before deploy() creates the root span, so getDeployAttributes
+  // picks up the resolved value rather than the "unknown" default.
+  setVersionFreshness(classifyVersionFreshness(VERSION, _versionInfo));
   if (handlePreflightVersionCheck(_versionInfo) === "abort") process.exit(1);
 
   // Frontloaded manifest preflight (paritytech/polkadot-app-deploy#125): when a
@@ -516,6 +462,7 @@ try {
   const result = await deploy(buildDir, domain, {
     mnemonic: effectiveMnemonic,
     derivationPath: flags.derivationPath,
+    productName: flags.productName,
     suri: flags.suri,
     rpc: flags.rpc,
     env: effectiveEnvId,
@@ -528,8 +475,6 @@ try {
     allowLargeDeploy: flags.allowLargeDeploy,
     reproducibleSource: flags.reproducibleSource,
     dumpCar: flags.dumpCar,
-    publish: flags.publish,
-    failOnPublishError: flags.failOnPublishError,
     transferToSignedInUser: !flags.noTransferToSignedinUser,
     // Human-first phone signing hooks (spec: 2026-06-13-human-first-phone-signing-design).
     onPhoneSignaturePlan: (steps) => {
@@ -549,42 +494,59 @@ try {
     // `reason: "silence"` marks a watcher-silence re-arm (no response within
     // the budget) as distinct from the pre-existing verifyEffect-false-negative
     // re-sign case (undefined/"resign", still rendered off `attempt`).
-    confirmPhoneReady: ({ label, attempt, approvalBudgetMs, reason }) => new Promise((resolve, reject) => {
-      const budgetSeconds = Math.round(approvalBudgetMs / 1000);
-      if (reason === "silence") {
-        console.log(`\n   still nothing from your phone — press Y to re-send, Ctrl-C to abort`);
-      } else if (attempt >= 2) {
-        console.log(`\n   Re-sign needed (attempt ${attempt}) — approve on your phone, then press Y to continue (Ctrl-C to abort).`);
-      } else {
-        console.log(`\n   Check your phone → ${label}`);
-        console.log(`   Press Y when ready — you'll have ~${budgetSeconds}s to approve on your phone (Ctrl-C to abort):`);
-      }
-      const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-      let settled = false;
-      const settle = (fn) => { if (!settled) { settled = true; rl.close(); fn(); } };
-      rl.on("close", () => settle(reject.bind(null, new Error("aborted by user"))));
-      const ask = () => {
-        rl.question("   > ", (line) => {
-          const answer = line.trim().toLowerCase();
-          // #194: require an EXPLICIT y/yes — bare Enter is the input most
-          // likely to come from something other than a deliberate keypress
-          // (buffered newline, stray Enter, piped stdin), and accepting it
-          // starts a fatal clock with nobody watching.
-          if (answer === "y" || answer === "yes") {
-            settle(resolve);
-          } else {
-            ask();
-          }
-        });
-      };
-      ask();
-    }),
+    confirmPhoneReady: ({ label, attempt, approvalBudgetMs, reason }) => {
+      // #1257: a non-interactive caller (CI, no TTY) can reach this gate — e.g.
+      // a stale login session left on the runner's $HOME resolves the signer to
+      // "phone required" even though nobody set out to run interactively. Fail
+      // fast with an actionable message BEFORE creating readline: readline's
+      // "close" fires immediately on a closed/non-TTY stdin, and the old
+      // unconditional rl.on("close", ...) below rejected with "aborted by
+      // user" for that case too — indistinguishable from a real Ctrl-C, and
+      // wrong (nobody aborted anything). Reuses isInteractive() (TTY + !CI)
+      // rather than adding a second interactivity check.
+      if (!isInteractive()) return Promise.reject(nonInteractivePhoneConfirmationError(label));
+      return new Promise((resolve, reject) => {
+        const budgetSeconds = Math.round(approvalBudgetMs / 1000);
+        if (reason === "silence") {
+          console.log(`\n   still nothing from your phone — press Y to re-send, Ctrl-C to abort`);
+        } else if (attempt >= 2) {
+          console.log(`\n   Re-sign needed (attempt ${attempt}) — approve on your phone, then press Y to continue (Ctrl-C to abort).`);
+        } else {
+          console.log(`\n   Check your phone → ${label}`);
+          console.log(`   Press Y when ready — you'll have ~${budgetSeconds}s to approve on your phone (Ctrl-C to abort):`);
+        }
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        let settled = false;
+        const settle = (fn) => { if (!settled) { settled = true; rl.close(); fn(); } };
+        rl.on("close", () => settle(reject.bind(null, new Error("aborted by user"))));
+        const ask = () => {
+          rl.question("   > ", (line) => {
+            const answer = line.trim().toLowerCase();
+            // #194: require an EXPLICIT y/yes — bare Enter is the input most
+            // likely to come from something other than a deliberate keypress
+            // (buffered newline, stray Enter, piped stdin), and accepting it
+            // starts a fatal clock with nobody watching.
+            if (answer === "y" || answer === "yes") {
+              settle(resolve);
+            } else {
+              ask();
+            }
+          });
+        };
+        ask();
+      });
+    },
   });
 
   const output = process.env.GITHUB_OUTPUT;
   if (output) {
     fs.appendFileSync(output, `cid=${result.cid}\n`);
     fs.appendFileSync(output, `domain=${result.domainName}\n`);
+    // #1157: same env-aware URL as the "Check it out here" console line —
+    // lets the reusable workflow's PR-comment/summary step reuse this
+    // resolution instead of recomputing a gateway URL from its own
+    // hardcoded-dot.li default.
+    fs.appendFileSync(output, `browserUrl=${result.browserUrl}\n`);
   }
 
   console.log(`CID: ${result.cid}`);

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-4FIJGSCK.js";
+} from "./chunk-QUKV6GUM.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-7CHUI4JX.js";
+import "./chunk-ESJC25OU.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-PPC5SPAP.js";
-import "./chunk-IFZCCNIV.js";
+import "./chunk-EVRNPBNJ.js";
+import "./chunk-LXTYOFFI.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-DB5U6SLK.js";
-import "./chunk-KZKU7RSW.js";
-import "./chunk-PPC5SPAP.js";
-import "./chunk-IFZCCNIV.js";
+} from "./chunk-L3KGTKOD.js";
+import "./chunk-QAPUBDTU.js";
+import "./chunk-EVRNPBNJ.js";
+import "./chunk-LXTYOFFI.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-ZYICAJKW.js";
-import "./chunk-PPC5SPAP.js";
-import "./chunk-IFZCCNIV.js";
+} from "./chunk-KXMHP4C2.js";
+import "./chunk-EVRNPBNJ.js";
+import "./chunk-LXTYOFFI.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-J3NIXHZZ.js → chunk-3MAIF2SF.js}

@@ -2,7 +2,7 @@ import {
   MANIFEST_DIR,
   MANIFEST_FILENAME,
   parseManifest
-} from "./chunk-S7EM5VMW.js";
+} from "./chunk-WPC2PUCV.js";
 
 // src/manifest-fetch.ts
 import * as fs from "fs";

package/dist/{chunk-C7CZK4IE.js → chunk-4I734GPQ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-4FIJGSCK.js";
+} from "./chunk-QUKV6GUM.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-KJVRJOKC.js → chunk-AYAVRPAP.js}

@@ -85,7 +85,7 @@ function accountsNeedingReauthorization(auths, currentBlock, bufferBlocks = BULL
   return auths.filter((a) => !isAuthorizationSufficient(a, deadline));
 }
 function isAutoReauthorizeAllowed(env) {
-  return env?.network !== "mainnet" && env?.bulletinAutoAuthorize === true;
+  return env?.network === "testnet" && env?.bulletinAutoAuthorize === true;
 }
 function selectAccount(authorizations, random = Math.random, pinnedIndex) {
   if (pinnedIndex != null) {
@@ -126,8 +126,15 @@ function isTestnetSpecName(specName) {
   if (/-test$|-testnet$|-dev$/.test(s)) return true;
   return false;
 }
+function testnetFromNetworkField(network) {
+  if (network === "testnet") return true;
+  if (network != null && network !== "") return false;
+  return void 0;
+}
 var _testnetDetectionCache = null;
-async function detectTestnet(api) {
+async function detectTestnet(api, network) {
+  const override = testnetFromNetworkField(network);
+  if (override !== void 0) return override;
   if (_testnetDetectionCache !== null) return _testnetDetectionCache;
   try {
     const version = await api.constants.System.Version();
@@ -177,7 +184,7 @@ async function ensureAuthorized(api, address, label, opts = {}) {
     console.log(`   Authorized: ${grant}`);
     return;
   }
-  const isTestnet = await detectTestnet(api);
+  const isTestnet = await detectTestnet(api, opts.network);
   if (isTestnet) {
     throw new Error(
       `Bulletin storage account ${who} is not authorized (or its authorization expired). bulletin-deploy self-authorizes only on allow-listed testnets (environments.json bulletinAutoAuthorize) \u2014 request authorization for this account from the chain's authorizer (testnet faucet / personhood / pool bootstrap), then retry.`
@@ -293,7 +300,7 @@ ${details}`
       console.log(`Using environment authorizer ${opts.envAuthorizer} (${authKey.address})
 `);
     } else {
-      const isTestnet = await detectTestnet(api);
+      const isTestnet = await detectTestnet(api, opts.network);
       if (isTestnet) {
         const alice = keyring.addFromUri("//Alice");
         authorizerSigner = getPolkadotSigner(alice.publicKey, "Sr25519", (data) => alice.sign(data));
@@ -356,6 +363,7 @@ export {
   selectAccount,
   fetchPoolAuthorizations,
   isTestnetSpecName,
+  testnetFromNetworkField,
   detectTestnet,
   _resetTestnetCacheForTests,
   ensureAuthorized,

package/dist/{chunk-TZYNQJ7P.js → chunk-CB6YGAAB.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-PPC5SPAP.js";
+} from "./chunk-EVRNPBNJ.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/chunk-DSCPTDCZ.js

@@ -0,0 +1,11 @@
+// src/personhood/ring-proof.ts
+function makeOneShotBuildRingProof(oneShot, memberEntropy) {
+  return async ({ ringExponent, members, context, msg }) => {
+    const r = oneShot(ringExponent, memberEntropy, members, context, msg);
+    return { proof: r.proof, alias: r.alias };
+  };
+}
+
+export {
+  makeOneShotBuildRingProof
+};

package/dist/{chunk-7CHUI4JX.js → chunk-ESJC25OU.js}

@@ -172,8 +172,7 @@ var environments_default = {
         POP_RULES: "0x2181a14081fF2D4477BAA8FB1aEB4C9c44F5F2b0",
         STORE_FACTORY: "0xD81DC23FAa69B311C1FC553Ea63798772e7D253D",
         LABEL_STORE_BEACON: "0xc7E86B8DE97AF57F937201d8d372F75ED4BE6633",
-        USER_STORE_BEACON: "0x5924A0dDBb550514A744407F4Ec4b4B7BB6CD736",
-        PUBLISHER: "0xaab42efbe8ea4d4228c3a11e973f94c17b9a0f2c"
+        USER_STORE_BEACON: "0x5924A0dDBb550514A744407F4Ec4b4B7BB6CD736"
       }
     },
     {