create-ailk 0.32.0 → 0.33.0

package/templates/apps/web/lib/auth-email.ts

@@ -319,13 +319,30 @@ export function makeSendResetPassword(deps: ResetPasswordDeps) {
   };
 }
 
-/** Better Auth's `sendVerificationEmail` (§ D9). */
-export function makeSendVerificationEmail(deps: DispatchDeps) {
-  const { send } = deps;
+interface VerificationDeps extends DispatchDeps {
+  /**
+   * The site's own confirm page — `new URL("/verify-email", BETTER_AUTH_URL)`
+   * — which the API's email-verification service appends its single-use nonce
+   * to (#10820 D4).
+   */
+  confirmBase: string;
+}
+
+/**
+ * Better Auth's `sendVerificationEmail` (§ D9, #10820 D4).
+ *
+ * Keeps the library's signature and IGNORES its `url`: that link is Better
+ * Auth's stateless JWT, which is neither single-use nor revocable, and its
+ * `/verify-email` endpoint is disabled in `auth.ts`. The relay's
+ * `email-verification` kind mints the service's own nonce for this user and
+ * mails `confirmBase?verify=<nonce>`; a click on that page confirms through
+ * `confirmSignUpEmail` below.
+ */
+export function makeSendVerificationEmail(deps: VerificationDeps) {
+  const { send, confirmBase } = deps;
   const log = deps.log ?? defaultLog;
   return async function sendVerificationEmail({
     user,
-    url,
   }: {
     user: { id: string; email: string };
     url: string;
@@ -335,7 +352,7 @@ export function makeSendVerificationEmail(deps: DispatchDeps) {
         kind: "email-verification",
         userId: user.id,
         to: user.email,
-        url,
+        url: confirmBase,
         expiresInMinutes: 24 * 60,
       },
       { send, log },
@@ -343,6 +360,71 @@ export function makeSendVerificationEmail(deps: DispatchDeps) {
   };
 }
 
+/** The confirm hop's answer, as the `/verify-email` action reads it. */
+export type SignUpConfirmOutcome =
+  | "verified"
+  | "already_verified"
+  | "expired"
+  | "invalid"
+  | "failed";
+
+/** The confirm hop's transport seam — `authEmail.confirm`'s shape. */
+export type ConfirmTransport = (
+  rawBody: string,
+  headers: Record<string, string>,
+) => Promise<{ ok: boolean; body?: unknown }>;
+
+const CONFIRM_OUTCOMES = new Set(["verified", "already_verified", "expired", "invalid"]);
+
+/**
+ * Confirm a sign-up link's nonce through the API's signed hop,
+ * `POST /v1/auth/email-verification/confirm` (#10820 D2, D7).
+ *
+ * ONE serialization of `{ nonce }`, signed over the DOMAIN-SEPARATED base
+ * string `email-verification-confirm.<timestamp>.<rawBody>` — so a body signed
+ * for the mail relay can never be replayed to the confirm route, or the
+ * reverse — and the same bytes handed to the transport.
+ *
+ * NEVER THROWS, and logs only `{ kind, outcome | errorKind }`: never the
+ * nonce, which is the credential. Anything but a 2xx carrying a known outcome
+ * is `failed`.
+ */
+export async function confirmSignUpEmail(
+  nonce: string,
+  deps: { confirm?: ConfirmTransport; log?: AuthEmailLog } = {},
+): Promise<SignUpConfirmOutcome> {
+  const confirm: ConfirmTransport =
+    deps.confirm ?? ((rawBody, headers) => authEmail.confirm(rawBody, headers));
+  const log = deps.log ?? defaultLog;
+  const base = { kind: "email-verification-confirm" };
+  const secret = process.env.AUTH_EMAIL_WEBHOOK_SECRET;
+  if (!secret) {
+    log.warn({ ...base, errorKind: "not_configured" });
+    return "failed";
+  }
+  try {
+    const rawBody = JSON.stringify({ nonce });
+    const timestamp = String(Math.floor(Date.now() / 1000));
+    const signature = `sha256=${createHmac("sha256", secret)
+      .update(`email-verification-confirm.${timestamp}.${rawBody}`, "utf8")
+      .digest("hex")}`;
+    const result = await confirm(rawBody, {
+      "x-ailk-auth-email-signature": signature,
+      "x-ailk-auth-email-timestamp": timestamp,
+    });
+    const outcome = (result.body as { outcome?: unknown } | null | undefined)?.outcome;
+    if (!result.ok || typeof outcome !== "string" || !CONFIRM_OUTCOMES.has(outcome)) {
+      log.warn({ ...base, errorKind: "relay_rejected" });
+      return "failed";
+    }
+    log.info({ ...base, outcome });
+    return outcome as SignUpConfirmOutcome;
+  } catch {
+    log.warn({ ...base, errorKind: "transport_error" });
+    return "failed";
+  }
+}
+
 /**
  * The completed-reset notice (§ D17).
  *

package/templates/apps/web/lib/telemetry-scrub.ts

@@ -19,12 +19,18 @@
 // Mirrored (duplicated, not shared) in packages/analytics/src/scrub.ts,
 // since apps/* must not import @working-theory/* packages — keep both lists
 // in sync (#5613).
+// `verify` joined by #10820 (D2): the email-verification nonce on a
+// `/verify-email` or listing resume link.
+// `lead` joined by #10826 (D5, SEC-10826-7): a magnet Lead's id on its
+// `/flows/<slug>/verify?lead=…&verify=…` confirm link.
 export const TOKEN_QUERY_PARAMS = [
   "g",
   "session_id",
   "email",
   "login_hint",
   "ref",
+  "verify",
+  "lead",
 ];
 
 // The same grant id rides a PATH too: `deliverables.openGrant` fetches

package/templates/apps/web/messages/en.json

@@ -80,6 +80,7 @@
     "heading": "Blog",
     "emptyState": "No posts yet. Drop MDX files into",
     "emptyStateTrailing": "to populate this list.",
+    "emptyStateLive": "No posts yet.",
     "allTopics": "All",
     "topicsNav": "Blog topics",
     "latestPosts": "Latest posts",
@@ -254,6 +255,20 @@
     },
     "questions": {}
   },
+  "flowVerify": {
+    "title": "Confirm your email",
+    "confirmHeading": "Confirm your email",
+    "confirmSubhead": "One click and your address is confirmed.",
+    "confirmBody": "Select the button below to confirm this email address.",
+    "confirmButton": "Confirm my email",
+    "confirmedHeading": "Your email is confirmed",
+    "confirmedSubhead": "Thanks — your address is verified.",
+    "confirmedBody": "You can close this tab once you're done.",
+    "errorHeading": "This confirmation link has expired",
+    "errorSubhead": "Confirmation links last 24 hours.",
+    "errorBody": "Answer the form again and we'll send you a fresh confirmation email.",
+    "back": "Back to the form"
+  },
   "how-to": {
     "heading": "How-To Guides",
     "description": "Step-by-step guides for building with this site.",
@@ -665,6 +680,13 @@
     "verifyExpiredHeading": "This confirmation link has expired",
     "verifyExpiredSubhead": "Confirmation links last 24 hours.",
     "verifyExpiredBody": "Sign in again and we'll send you a fresh confirmation email.",
+    "confirmHeading": "Confirm your email",
+    "confirmSubhead": "One click and your address is confirmed.",
+    "confirmBody": "Select the button below to confirm this email address for your account.",
+    "confirmButton": "Confirm my email",
+    "verifiedHeading": "Your email is confirmed",
+    "verifiedSubhead": "Thanks — your address is verified.",
+    "verifiedBody": "You can sign in now. You can close this tab once you're done.",
     "sentHeading": "Check your email",
     "sentSubhead": "Follow the link we just sent to continue.",
     "sentBody": "Check your inbox and follow the link to continue. You can close this tab once you're done.",
@@ -969,7 +991,10 @@
       "tier": "Tier",
       "score": "Score",
       "completedAt": "Completed",
-      "unavailable": "—"
+      "unavailable": "—",
+      "magnet": "Form",
+      "submittedAt": "Submitted",
+      "open": "Open"
     },
     "purchases": {
       "heading": "My purchases",

package/templates/database/seed.ts

@@ -149,8 +149,8 @@ export async function provisionDefaultWorkspace(
       kind: "contact",
       title: REQUEST_QUOTE_FLOW_TITLE,
       status: "draft",
-      customersEnabled: true,
-      completion: "invite",
+      who: "user",
+      completion: "user",
       tags: [STANDARD_MAGNET_TAGS[REQUEST_QUOTE_FLOW_SLUG]!],
     },
     update: {},
@@ -171,7 +171,7 @@ export async function provisionDefaultWorkspace(
       kind: "contact",
       title: CONTACT_FORM_FLOW_TITLE,
       status: "live",
-      customersEnabled: false,
+      who: "visitor",
       completion: "lead",
       tags: [STANDARD_MAGNET_TAGS[CONTACT_FORM_FLOW_SLUG]!],
       landingPage: CONTACT_FORM_LANDING_PAGE,
@@ -194,8 +194,8 @@ export async function provisionDefaultWorkspace(
       kind: "diagnostic",
       title: JOB_APPLICATION_FLOW_TITLE,
       status: "live",
-      customersEnabled: false,
-      completion: "invite",
+      who: "visitor",
+      completion: "user",
       tags: [STANDARD_MAGNET_TAGS[JOB_APPLICATION_FLOW_SLUG]!],
       landingPage: JOB_APPLICATION_LANDING_PAGE,
     },
@@ -218,7 +218,7 @@ export async function provisionDefaultWorkspace(
       kind: "newsletter",
       title: NEWSLETTER_FLOW_TITLE,
       status: "live",
-      customersEnabled: false,
+      who: "visitor",
       completion: "lead",
       tags: [STANDARD_MAGNET_TAGS[NEWSLETTER_FLOW_SLUG]!],
       landingPage: NEWSLETTER_LANDING_PAGE,
@@ -242,7 +242,7 @@ export async function provisionDefaultWorkspace(
       kind: "diagnostic",
       title: TRIAL_FLOW_TITLE,
       status: "live",
-      customersEnabled: false,
+      who: "visitor",
       completion: "lead",
       tags: [STANDARD_MAGNET_TAGS[TRIAL_FLOW_SLUG]!],
       landingPage: TRIAL_FLOW_LANDING_PAGE,

package/versions.json

@@ -1,66 +1,66 @@
 {
-  "@working-theory/admin-ui": "0.55.0",
-  "@working-theory/aeo": "0.55.0",
-  "@working-theory/agent-context": "0.55.0",
+  "@working-theory/admin-ui": "0.56.0",
+  "@working-theory/aeo": "0.56.0",
+  "@working-theory/agent-context": "0.56.0",
   "@working-theory/agent-contract": "0.1.0",
   "@working-theory/agent-memory": "0.0.0",
   "@working-theory/ai": "0.1.0",
-  "@working-theory/analytics": "0.55.0",
-  "@working-theory/api": "0.55.0",
-  "@working-theory/api-client": "0.55.0",
+  "@working-theory/analytics": "0.56.0",
+  "@working-theory/api": "0.56.0",
+  "@working-theory/api-client": "0.56.0",
   "@working-theory/cda-filesystem": "0.0.0",
-  "@working-theory/cli": "0.55.0",
-  "@working-theory/common": "0.55.0",
+  "@working-theory/cli": "0.56.0",
+  "@working-theory/common": "0.56.0",
   "@working-theory/consent": "0.1.0",
-  "@working-theory/content-adapters": "0.55.0",
-  "@working-theory/content-projection": "0.55.0",
-  "@working-theory/email": "0.55.0",
+  "@working-theory/content-adapters": "0.56.0",
+  "@working-theory/content-projection": "0.56.0",
+  "@working-theory/email": "0.56.0",
   "@working-theory/env": "0.0.0",
-  "@working-theory/eslint-config": "0.55.0",
-  "@working-theory/fumadocs-schema": "0.55.0",
-  "@working-theory/ids": "0.19.0",
-  "@working-theory/jsonld": "0.55.0",
-  "@working-theory/license": "0.55.0",
-  "@working-theory/mcp-server": "0.55.0",
-  "@working-theory/metadata": "0.55.0",
-  "@working-theory/observability": "0.55.0",
-  "@working-theory/page-renderer": "0.55.0",
+  "@working-theory/eslint-config": "0.56.0",
+  "@working-theory/fumadocs-schema": "0.56.0",
+  "@working-theory/ids": "0.20.0",
+  "@working-theory/jsonld": "0.56.0",
+  "@working-theory/license": "0.56.0",
+  "@working-theory/mcp-server": "0.56.0",
+  "@working-theory/metadata": "0.56.0",
+  "@working-theory/observability": "0.56.0",
+  "@working-theory/page-renderer": "0.56.0",
   "@working-theory/plugin-mcp": "0.1.3",
-  "@working-theory/schema": "0.55.0",
-  "@working-theory/schema-pack-registry": "0.55.0",
-  "@working-theory/schema-validator": "0.55.0",
-  "@working-theory/sections-registry": "0.55.0",
-  "@working-theory/site-config": "0.55.0",
-  "@working-theory/spoke-checkout": "0.7.11",
-  "@working-theory/stripe-client": "0.55.0",
-  "@working-theory/templates": "0.55.0",
-  "@working-theory/theme": "0.55.0",
-  "@working-theory/ui": "0.55.0",
-  "@working-theory/validation": "0.55.0",
-  "@working-theory/web-i18n": "0.55.0",
-  "@working-theory/admin": "0.10.1",
-  "@working-theory/api-commerce": "0.1.9",
-  "@working-theory/api-content-write": "0.5.1",
-  "@working-theory/api-hub": "0.4.1",
-  "@working-theory/api-multi-tenant": "0.2.4",
-  "@working-theory/api-scheduling": "0.4.6",
-  "@working-theory/api-signal-collectors": "0.3.2",
-  "@working-theory/api-workspace": "0.5.1",
+  "@working-theory/schema": "0.56.0",
+  "@working-theory/schema-pack-registry": "0.56.0",
+  "@working-theory/schema-validator": "0.56.0",
+  "@working-theory/sections-registry": "0.56.0",
+  "@working-theory/site-config": "0.56.0",
+  "@working-theory/spoke-checkout": "0.7.12",
+  "@working-theory/stripe-client": "0.56.0",
+  "@working-theory/templates": "0.56.0",
+  "@working-theory/theme": "0.56.0",
+  "@working-theory/ui": "0.56.0",
+  "@working-theory/validation": "0.56.0",
+  "@working-theory/web-i18n": "0.56.0",
+  "@working-theory/admin": "0.11.0",
+  "@working-theory/api-commerce": "0.1.10",
+  "@working-theory/api-content-write": "0.6.0",
+  "@working-theory/api-hub": "0.4.2",
+  "@working-theory/api-multi-tenant": "0.2.5",
+  "@working-theory/api-scheduling": "0.4.7",
+  "@working-theory/api-signal-collectors": "0.4.0",
+  "@working-theory/api-workspace": "0.6.0",
   "@working-theory/billing-client": "0.0.0",
   "@working-theory/branding": "0.0.0",
   "@working-theory/license-client": "0.0.0",
   "@working-theory/license-manifest": "0.0.0",
-  "@working-theory/mcp-scheduling": "0.3.8",
-  "@working-theory/mcp-signal-collectors": "0.2.9",
-  "@working-theory/mcp-workspace": "0.6.1",
+  "@working-theory/mcp-scheduling": "0.3.9",
+  "@working-theory/mcp-signal-collectors": "0.2.10",
+  "@working-theory/mcp-workspace": "0.6.2",
   "@working-theory/partner-session": "0.0.0",
   "@working-theory/preview-protocol": "0.0.0",
-  "@working-theory/ui-commerce": "0.23.33",
-  "@working-theory/ui-docs-blog": "0.23.33",
-  "@working-theory/ui-scheduling": "0.25.7",
-  "@working-theory/ui-signal-collectors": "0.27.11",
+  "@working-theory/ui-commerce": "0.23.34",
+  "@working-theory/ui-docs-blog": "0.23.34",
+  "@working-theory/ui-scheduling": "0.25.8",
+  "@working-theory/ui-signal-collectors": "0.28.0",
   "@working-theory/web": "0.0.0",
   "@working-theory/app-api": "1.0.0",
   "@working-theory/mcp": "0.0.0",
-  "@working-theory/database": "0.55.0"
+  "@working-theory/database": "0.56.0"
 }

package/templates/apps/web/app/[locale]/thanks/[slug]/AccountInviteLink.tsx

@@ -1,89 +0,0 @@
-"use client"; // Reads sessionStorage (a browser API) once on mount — a server page cannot.
-
-/**
- * AccountInviteLink — the /thanks page's "Track this in your account" link
- * (#8771 D6). The magnet walk writes one `sessionStorage` item,
- * `ailk:account-invite`, before it navigates here; this shows the link only
- * for the thank-you page that walk was headed to, and only if the stored href
- * is a same-site sign-in path. It reads the item once and removes it, so the
- * email in the href does not stay in the tab. A refresh shows no link (the
- * invite email still carries it).
- *
- * Base tree: it imports nothing from `flows/**`, so a build without the walk
- * still compiles this page.
- */
-import { Button, Container, Link } from "@working-theory/ui";
-import type { ReactElement } from "react";
-import { useEffect, useState } from "react";
-
-/** Must equal `ACCOUNT_INVITE_STORAGE_KEY` in the walk's `FlowStepperClient`. */
-const STORAGE_KEY = "ailk:account-invite";
-/** A reserved name that never resolves: only used to test an href stays on-site. */
-const PLACEHOLDER_ORIGIN = "https://placeholder.invalid";
-const HUB_SIGN_IN_PATH = "/api/hub-session/sign-in";
-
-interface Props {
-  /** The route's `[slug]` — the hand-off must have been written for this page. */
-  thanksSlug: string;
-  /** `contact.trackInAccount`, read on the server. */
-  label: string;
-}
-
-/** The stored href when it is a same-site sign-in path, else `null`. */
-function safeSignInHref(raw: unknown, thanks: unknown, thanksSlug: string): string | null {
-  if (typeof raw !== "string" || thanks !== thanksSlug) return null;
-  let url: URL;
-  try {
-    url = new URL(raw, PLACEHOLDER_ORIGIN);
-  } catch {
-    return null;
-  }
-  if (url.origin !== PLACEHOLDER_ORIGIN) return null;
-  if (url.pathname !== HUB_SIGN_IN_PATH && !url.pathname.endsWith("/sign-in")) {
-    return null;
-  }
-  return raw;
-}
-
-/** Read the hand-off once, remove it, and answer the link to show (or `null`). */
-function takeHandOff(thanksSlug: string): string | null {
-  try {
-    const stored = window.sessionStorage.getItem(STORAGE_KEY);
-    if (stored === null) return null;
-    window.sessionStorage.removeItem(STORAGE_KEY);
-    const parsed: unknown = JSON.parse(stored);
-    if (typeof parsed !== "object" || parsed === null) return null;
-    const { thanks, href } = parsed as { thanks?: unknown; href?: unknown };
-    return safeSignInHref(href, thanks, thanksSlug);
-  } catch {
-    return null;
-  }
-}
-
-export function AccountInviteLink({ thanksSlug, label }: Props): ReactElement | null {
-  const [href, setHref] = useState<string | null>(null);
-
-  useEffect(() => {
-    // Only ever sets the link: React's development double-mount runs this
-    // twice, and the second run finds the item already removed.
-    const found = takeHandOff(thanksSlug);
-    if (found !== null) setHref(found);
-  }, [thanksSlug]);
-
-  if (href === null) return null;
-  return (
-    // Session Replay records the DOM, so the link (it carries the email) is
-    // blocked from it; `Link` does not forward an undeclared data-* attribute.
-    // The page shell sets no gutters, so the link sits in its own Container,
-    // lined up with the thank-you content above it.
-    <Container className="pb-section">
-      <div data-sentry-block>
-        <Button asChild variant="outline" className="min-h-11">
-          <Link href={href} variant="bare" data-testid="thanks-account-invite">
-            {label}
-          </Link>
-        </Button>
-      </div>
-    </Container>
-  );
-}

package/templates/apps/web/app/[locale]/thanks/[slug]/__tests__/AccountInviteLink.test.tsx

@@ -1,104 +0,0 @@
-/**
- * #8771 AC-5 — /thanks shows only its own hand-off: the walk's sessionStorage
- * item, for this page's slug, when its href is a same-site sign-in path.
- */
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-
-import { render, screen } from "@testing-library/react";
-import React, { StrictMode } from "react";
-
-import { AccountInviteLink } from "../AccountInviteLink";
-
-const KEY = "ailk:account-invite";
-const LABEL = "Track this in your account";
-const SITE_HREF = "/sign-in?next=%2Faccount&email=jane%40example.com";
-const HUB_HREF = "/api/hub-session/sign-in?next=%2Faccount&email=x%40y.example";
-const WALK = join(__dirname, "..", "..", "..", "flows", "[slug]", "FlowStepperClient.tsx");
-// A Free scaffold ships no magnet walk, and the scaffold matrix runs this suite
-// inside one (#8799), so the key check skips where the walk does not exist.
-const itWithWalk = existsSync(WALK) ? it : it.skip;
-
-function store(value: unknown): void {
-  window.sessionStorage.setItem(KEY, typeof value === "string" ? value : JSON.stringify(value));
-}
-
-function show(slug = "flow-thanks") {
-  return render(<AccountInviteLink thanksSlug={slug} label={LABEL} />);
-}
-
-beforeEach(() => window.sessionStorage.clear());
-
-describe("AccountInviteLink", () => {
-  it("renders the stored link for its own slug, blocked from Replay, and removes the item", () => {
-    store({ thanks: "flow-thanks", href: SITE_HREF });
-
-    show();
-
-    const link = screen.getByTestId("thanks-account-invite");
-    expect(link).toHaveAttribute("href", SITE_HREF);
-    expect(link).toHaveTextContent(LABEL);
-    expect(link.closest("[data-sentry-block]")).not.toBeNull();
-    expect(window.sessionStorage.getItem(KEY)).toBeNull();
-  });
-
-  it("renders a hub spoke's sign-in path under the matching slug", () => {
-    store({ thanks: "flow-thanks", href: HUB_HREF });
-    show();
-    expect(screen.getByTestId("thanks-account-invite")).toHaveAttribute("href", HUB_HREF);
-  });
-
-  it("renders a locale-prefixed site sign-in path", () => {
-    store({ thanks: "flow-thanks", href: "/fr/sign-in?email=a%40b.example" });
-    show();
-    expect(screen.getByTestId("thanks-account-invite")).toBeInTheDocument();
-  });
-
-  it.each([
-    ["another slug", { thanks: "other", href: SITE_HREF }, "flow-thanks"],
-    ["an off-site href", { thanks: "flow-thanks", href: "https://evil.example/sign-in" }, "flow-thanks"],
-    ["a protocol-relative href", { thanks: "flow-thanks", href: "//evil.example/sign-in" }, "flow-thanks"],
-    ["a non-sign-in path", { thanks: "flow-thanks", href: "/account" }, "flow-thanks"],
-    ["a hub href under another thanks", { thanks: "flow-thanks-qualified", href: HUB_HREF }, "flow-thanks"],
-    ["a value that is not JSON", "not json", "flow-thanks"],
-    ["a JSON null", "null", "flow-thanks"],
-  ])("renders nothing for %s", (_name, value, slug) => {
-    store(value);
-    show(slug);
-    expect(screen.queryByTestId("thanks-account-invite")).toBeNull();
-  });
-
-  it("renders nothing when sessionStorage throws", () => {
-    const spy = jest.spyOn(Storage.prototype, "getItem").mockImplementation(() => {
-      throw new Error("denied");
-    });
-    show();
-    expect(screen.queryByTestId("thanks-account-invite")).toBeNull();
-    spy.mockRestore();
-  });
-
-  it("shows the link once: a fresh mount after it (a refresh) renders nothing", () => {
-    store({ thanks: "flow-thanks", href: SITE_HREF });
-    const first = show();
-    expect(screen.getByTestId("thanks-account-invite")).toBeInTheDocument();
-    first.unmount();
-
-    show();
-    expect(screen.queryByTestId("thanks-account-invite")).toBeNull();
-  });
-
-  it("keeps the link under React.StrictMode's double effect", () => {
-    store({ thanks: "flow-thanks", href: SITE_HREF });
-    render(
-      <StrictMode>
-        <AccountInviteLink thanksSlug="flow-thanks" label={LABEL} />
-      </StrictMode>,
-    );
-    expect(screen.getByTestId("thanks-account-invite")).toBeInTheDocument();
-  });
-
-  itWithWalk("reads the same storage key the walk writes (the two constants are tied only by this test)", () => {
-    const walk = readFileSync(WALK, "utf8");
-    expect(walk).toContain(`ACCOUNT_INVITE_STORAGE_KEY = "${KEY}"`);
-  });
-});