defense-mcp-server 0.9.2 → 0.9.3

package/build/tools/encryption.js

@@ -174,8 +174,8 @@ export function registerEncryptionTools(server) {
                 try {
                     const validHost = validateTarget(host);
                     const sections = [];
-                    sections.push(`🔐 TLS/SSL Audit: ${validHost}:${port}`);
-                    sections.push("=".repeat(50));
+                    sections.push(`TLS/SSL Audit: ${validHost}:${port}`);
+                    sections.push("");
                     // Basic connection test
                     const connResult = await executeCommand({
                         command: "openssl",
@@ -200,7 +200,7 @@ export function registerEncryptionTools(server) {
                             isError: true,
                         };
                     }
-                    sections.push("\n📡 Connection Info:");
+                    sections.push("\nConnection Info:");
                     const protocolMatch = fullOutput.match(/Protocol\s*:\s*(\S+)/);
                     const cipherMatch = fullOutput.match(/Cipher\s*:\s*(\S+)/);
                     if (protocolMatch)
@@ -222,7 +222,7 @@ export function registerEncryptionTools(server) {
                     });
                     const detailOutput = detailResult.stdout + "\n" + detailResult.stderr;
                     if (check_certificate) {
-                        sections.push("\n📜 Certificate Details:");
+                        sections.push("\nCertificate Details:");
                         const subjectMatch = detailOutput.match(/subject=([^\n]+)/);
                         const issuerMatch = detailOutput.match(/issuer=([^\n]+)/);
                         const datesMatch = detailOutput.match(/Not Before:\s*([^\n]+)[\s\S]*?Not After\s*:\s*([^\n]+)/);
@@ -238,48 +238,48 @@ export function registerEncryptionTools(server) {
                             const now = new Date();
                             const daysLeft = Math.floor((expiryDate.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
                             if (daysLeft < 0) {
-                                sections.push(`  ⛔ EXPIRED ${Math.abs(daysLeft)} days ago`);
+                                sections.push(`  CRITICAL: EXPIRED ${Math.abs(daysLeft)} days ago`);
                             }
                             else if (daysLeft < 30) {
-                                sections.push(`  ⚠️ WARNING: Expires in ${daysLeft} days`);
+                                sections.push(`  WARNING: Expires in ${daysLeft} days`);
                             }
                             else {
-                                sections.push(`  ✅ Valid for ${daysLeft} more days`);
+                                sections.push(`  Valid for ${daysLeft} more days`);
                             }
                         }
                         if (verifyMatch) {
                             const code = parseInt(verifyMatch[1], 10);
                             const reason = verifyMatch[2];
                             if (code === 0) {
-                                sections.push(`  ✅ Verification: OK`);
+                                sections.push(`  Verification: OK`);
                             }
                             else {
-                                sections.push(`  ⛔ Verification FAILED: ${reason} (code ${code})`);
+                                sections.push(`  CRITICAL: Verification FAILED: ${reason} (code ${code})`);
                             }
                         }
                         if (detailOutput.includes("self signed certificate") ||
                             detailOutput.includes("self-signed")) {
-                            sections.push(`  ⚠️ Self-signed certificate detected`);
+                            sections.push(`  WARNING: Self-signed certificate detected`);
                         }
                     }
                     if (check_ciphers) {
-                        sections.push("\n🔑 Cipher Analysis:");
+                        sections.push("\nCipher Analysis:");
                         const weakFound = checkWeakCiphers(detailOutput);
                         if (weakFound.length > 0) {
-                            sections.push(`  ⛔ Weak ciphers detected: ${weakFound.join(", ")}`);
+                            sections.push(`  Weak ciphers detected: ${weakFound.join(", ")}`);
                         }
                         else {
-                            sections.push(`  ✅ No known weak ciphers detected in connection`);
+                            sections.push(`  No known weak ciphers detected in connection`);
                         }
                     }
                     if (check_protocols) {
-                        sections.push("\n🔒 Protocol Analysis:");
+                        sections.push("\nProtocol Analysis:");
                         const weakProtos = checkWeakProtocols(detailOutput);
                         if (weakProtos.length > 0) {
-                            sections.push(`  ⛔ Weak protocols detected: ${weakProtos.join(", ")}`);
+                            sections.push(`  Weak protocols detected: ${weakProtos.join(", ")}`);
                         }
                         else {
-                            sections.push(`  ✅ No weak protocols detected in connection`);
+                            sections.push(`  No weak protocols detected in connection`);
                         }
                         const testProtocols = [
                             { name: "TLSv1", arg: "-tls1" },
@@ -308,18 +308,18 @@ export function registerEncryptionTools(server) {
                                     !protoOutput.includes("no protocols available"));
                             if (proto.name === "TLSv1" || proto.name === "TLSv1.1") {
                                 if (connected) {
-                                    sections.push(`  ⚠️ ${proto.name}: Supported (deprecated, should be disabled)`);
+                                    sections.push(`  WARNING: ${proto.name}: Supported (deprecated, should be disabled)`);
                                 }
                                 else {
-                                    sections.push(`  ✅ ${proto.name}: Not supported (good)`);
+                                    sections.push(`  ${proto.name}: Not supported (good)`);
                                 }
                             }
                             else {
                                 if (connected) {
-                                    sections.push(`  ✅ ${proto.name}: Supported`);
+                                    sections.push(`  ${proto.name}: Supported`);
                                 }
                                 else {
-                                    sections.push(`  ℹ️ ${proto.name}: Not supported`);
+                                    sections.push(`  INFO: ${proto.name}: Not supported`);
                                 }
                             }
                         }
@@ -344,8 +344,8 @@ export function registerEncryptionTools(server) {
                         };
                     }
                     const sections = [];
-                    sections.push("📅 Certificate Expiry Check");
-                    sections.push("=".repeat(40));
+                    sections.push("Certificate Expiry Check");
+                    sections.push("");
                     let endDate = "";
                     let subject = "";
                     let issuer = "";
@@ -433,15 +433,15 @@ export function registerEncryptionTools(server) {
                     let status;
                     if (daysLeft < 0) {
                         status = "CRITICAL";
-                        sections.push(`\n⛔ Status: ${status} - Certificate EXPIRED ${Math.abs(daysLeft)} days ago`);
+                        sections.push(`\nCRITICAL: Status: ${status} - Certificate EXPIRED ${Math.abs(daysLeft)} days ago`);
                     }
                     else if (daysLeft <= warn_days) {
                         status = "WARNING";
-                        sections.push(`\n⚠️ Status: ${status} - Certificate expires in ${daysLeft} days (threshold: ${warn_days})`);
+                        sections.push(`\nWARNING: Status: ${status} - Certificate expires in ${daysLeft} days (threshold: ${warn_days})`);
                     }
                     else {
                         status = "OK";
-                        sections.push(`\n✅ Status: ${status} - Certificate valid for ${daysLeft} more days`);
+                        sections.push(`\nStatus: ${status} - Certificate valid for ${daysLeft} more days`);
                     }
                     return { content: [createTextContent(sections.join("\n"))] };
                 }
@@ -455,8 +455,8 @@ export function registerEncryptionTools(server) {
                 const { service } = params;
                 try {
                     const sections = [];
-                    sections.push("🔍 TLS Configuration Audit");
-                    sections.push("=".repeat(40));
+                    sections.push("TLS Configuration Audit");
+                    sections.push("");
                     const findings = [];
                     if (service === "apache" || service === "all") {
                         sections.push("\n── Apache TLS Configuration ──");
@@ -591,18 +591,18 @@ export function registerEncryptionTools(server) {
                     }
                     sections.push("\n── Findings Summary ──");
                     if (findings.length === 0) {
-                        sections.push("  ✅ No critical TLS configuration issues found.");
+                        sections.push("  No critical TLS configuration issues found.");
                     }
                     else {
                         const criticals = findings.filter((f) => f.level === "CRITICAL");
                         const warnings = findings.filter((f) => f.level === "WARNING");
                         if (criticals.length > 0) {
-                            sections.push(`\n  ⛔ Critical (${criticals.length}):`);
+                            sections.push(`\n  CRITICAL: Critical (${criticals.length}):`);
                             for (const f of criticals)
                                 sections.push(`    - ${f.msg}`);
                         }
                         if (warnings.length > 0) {
-                            sections.push(`\n  ⚠️ Warnings (${warnings.length}):`);
+                            sections.push(`\n  WARNING: Warnings (${warnings.length}):`);
                             for (const f of warnings)
                                 sections.push(`    - ${f.msg}`);
                         }
@@ -618,8 +618,8 @@ export function registerEncryptionTools(server) {
             case "gpg_list": {
                 try {
                     const sections = [];
-                    sections.push(`🔑 GPG Key Management: list`);
-                    sections.push("=".repeat(40));
+                    sections.push(`GPG Key Management: list`);
+                    sections.push("");
                     const result = await executeCommand({
                         command: "gpg",
                         args: ["--list-keys", "--keyid-format", "long"],
@@ -656,8 +656,8 @@ export function registerEncryptionTools(server) {
                 const { dry_run } = params;
                 try {
                     const sections = [];
-                    sections.push(`🔑 GPG Key Management: generate`);
-                    sections.push("=".repeat(40));
+                    sections.push(`GPG Key Management: generate`);
+                    sections.push("");
                     if (dry_run ?? getConfig().dryRun) {
                         sections.push("\n[DRY RUN] Would generate a new GPG key pair.");
                         sections.push("Command: gpg --full-generate-key");
@@ -675,7 +675,7 @@ export function registerEncryptionTools(server) {
                         sections.push("  %commit");
                     }
                     else {
-                        sections.push("⚠️ Interactive GPG key generation cannot be run in non-interactive mode.");
+                        sections.push("Interactive GPG key generation cannot be run in non-interactive mode.");
                         sections.push("Use 'gpg --batch --gen-key <batch_file>' for non-interactive generation.");
                     }
                     return { content: [createTextContent(sections.join("\n"))] };
@@ -697,8 +697,8 @@ export function registerEncryptionTools(server) {
                     }
                     sanitizeArgs([key_id]);
                     const sections = [];
-                    sections.push(`🔑 GPG Key Management: export`);
-                    sections.push("=".repeat(40));
+                    sections.push(`GPG Key Management: export`);
+                    sections.push("");
                     const result = await executeCommand({
                         command: "gpg",
                         args: ["--export", "--armor", key_id],
@@ -734,8 +734,8 @@ export function registerEncryptionTools(server) {
                     // TOOL-023: Validate key file path with containment check
                     validateKeyPath(file_path);
                     const sections = [];
-                    sections.push(`🔑 GPG Key Management: import`);
-                    sections.push("=".repeat(40));
+                    sections.push(`GPG Key Management: import`);
+                    sections.push("");
                     if (dry_run ?? getConfig().dryRun) {
                         sections.push(`\n[DRY RUN] Would import GPG key from: ${file_path}`);
                         sections.push(`Command: gpg --import ${file_path}`);
@@ -753,7 +753,7 @@ export function registerEncryptionTools(server) {
                                 isError: true,
                             };
                         }
-                        sections.push(`\n✅ Key imported from: ${file_path}`);
+                        sections.push(`\nKey imported from: ${file_path}`);
                         sections.push(result.stderr || result.stdout);
                         logChange(createChangeEntry({
                             tool: "crypto",
@@ -785,8 +785,8 @@ export function registerEncryptionTools(server) {
                     // TOOL-023: Validate key file path with containment check
                     validateKeyPath(file_path);
                     const sections = [];
-                    sections.push(`🔑 GPG Key Management: verify`);
-                    sections.push("=".repeat(40));
+                    sections.push(`GPG Key Management: verify`);
+                    sections.push("");
                     const result = await executeCommand({
                         command: "gpg",
                         args: ["--verify", file_path],
@@ -795,10 +795,10 @@ export function registerEncryptionTools(server) {
                     });
                     const output = result.stderr || result.stdout;
                     if (result.exitCode !== 0) {
-                        sections.push(`\n⛔ Signature verification FAILED for: ${file_path}`);
+                        sections.push(`\nCRITICAL: Signature verification FAILED for: ${file_path}`);
                     }
                     else {
-                        sections.push(`\n✅ Signature verification PASSED for: ${file_path}`);
+                        sections.push(`\nSignature verification PASSED for: ${file_path}`);
                     }
                     sections.push(output);
                     return { content: [createTextContent(sections.join("\n"))] };
@@ -820,8 +820,8 @@ export function registerEncryptionTools(server) {
                     }
                     sanitizeArgs([name]);
                     const sections = [];
-                    sections.push(`🔐 LUKS Volume Management: status`);
-                    sections.push("=".repeat(40));
+                    sections.push(`LUKS Volume Management: status`);
+                    sections.push("");
                     const result = await executeCommand({
                         command: "sudo",
                         args: ["cryptsetup", "status", name],
@@ -829,7 +829,7 @@ export function registerEncryptionTools(server) {
                         timeout: getToolTimeout("crypto_luks_manage"),
                     });
                     if (result.exitCode !== 0) {
-                        sections.push(`\n⚠️ Device mapper '${name}' not found or not active.`);
+                        sections.push(`\nWARNING: Device mapper '${name}' not found or not active.`);
                         sections.push(result.stderr || result.stdout);
                     }
                     else {
@@ -856,8 +856,8 @@ export function registerEncryptionTools(server) {
                     sanitizeArgs([device]);
                     assertNoTraversal(device);
                     const sections = [];
-                    sections.push(`🔐 LUKS Volume Management: dump`);
-                    sections.push("=".repeat(40));
+                    sections.push(`LUKS Volume Management: dump`);
+                    sections.push("");
                     const result = await executeCommand({
                         command: "sudo",
                         args: ["cryptsetup", "luksDump", device],
@@ -892,8 +892,8 @@ export function registerEncryptionTools(server) {
                     sanitizeArgs([device, name]);
                     assertNoTraversal(device);
                     const sections = [];
-                    sections.push(`🔐 LUKS Volume Management: open`);
-                    sections.push("=".repeat(40));
+                    sections.push(`LUKS Volume Management: open`);
+                    sections.push("");
                     if (dry_run ?? getConfig().dryRun) {
                         sections.push(`\n[DRY RUN] Would open LUKS volume:`);
                         sections.push(`  Device: ${device}`);
@@ -902,7 +902,7 @@ export function registerEncryptionTools(server) {
                         sections.push("\nNote: This operation requires a passphrase and cannot be run non-interactively without a key file.");
                     }
                     else {
-                        sections.push("⚠️ Interactive LUKS open requires a passphrase.");
+                        sections.push("Interactive LUKS open requires a passphrase.");
                         sections.push("Use a key file with: sudo cryptsetup luksOpen --key-file <keyfile> <device> <name>");
                         logChange(createChangeEntry({
                             tool: "crypto",
@@ -932,8 +932,8 @@ export function registerEncryptionTools(server) {
                     }
                     sanitizeArgs([name]);
                     const sections = [];
-                    sections.push(`🔐 LUKS Volume Management: close`);
-                    sections.push("=".repeat(40));
+                    sections.push(`LUKS Volume Management: close`);
+                    sections.push("");
                     if (dry_run ?? getConfig().dryRun) {
                         sections.push(`\n[DRY RUN] Would close LUKS volume: /dev/mapper/${name}`);
                         sections.push(`  Command: sudo cryptsetup luksClose ${name}`);
@@ -951,7 +951,7 @@ export function registerEncryptionTools(server) {
                                 isError: true,
                             };
                         }
-                        sections.push(`\n✅ LUKS volume '${name}' closed successfully.`);
+                        sections.push(`\nLUKS volume '${name}' closed successfully.`);
                         logChange(createChangeEntry({
                             tool: "crypto",
                             action: "close",
@@ -972,15 +972,15 @@ export function registerEncryptionTools(server) {
             case "luks_list": {
                 try {
                     const sections = [];
-                    sections.push(`🔐 LUKS Volume Management: list`);
-                    sections.push("=".repeat(40));
+                    sections.push(`LUKS Volume Management: list`);
+                    sections.push("");
                     const mapperResult = await executeCommand({
                         command: "ls",
                         args: ["-la", "/dev/mapper/"],
                         toolName: "crypto_luks_manage",
                         timeout: getToolTimeout("crypto_luks_manage"),
                     });
-                    sections.push("\n📁 Device Mapper Entries:");
+                    sections.push("\nDevice Mapper Entries:");
                     sections.push(mapperResult.stdout || "No entries found");
                     const lsblkResult = await executeCommand({
                         command: "lsblk",
@@ -988,13 +988,13 @@ export function registerEncryptionTools(server) {
                         toolName: "crypto_luks_manage",
                         timeout: getToolTimeout("crypto_luks_manage"),
                     });
-                    sections.push("\n💾 Block Devices (with filesystem info):");
+                    sections.push("\nBlock Devices (with filesystem info):");
                     sections.push(lsblkResult.stdout || "No block devices found");
                     const cryptoLines = (lsblkResult.stdout || "")
                         .split("\n")
                         .filter((l) => l.includes("crypto_LUKS") || l.includes("crypt"));
                     if (cryptoLines.length > 0) {
-                        sections.push("\n🔐 LUKS Encrypted Devices:");
+                        sections.push("\nLUKS Encrypted Devices:");
                         for (const line of cryptoLines) {
                             sections.push(`  ${line.trim()}`);
                         }
@@ -1023,8 +1023,8 @@ export function registerEncryptionTools(server) {
                     assertNoTraversal(path);
                     const sections = [];
                     const hashCmd = `${algorithm}sum`;
-                    sections.push(`#️⃣ File Integrity Hash (${algorithm.toUpperCase()})`);
-                    sections.push("=".repeat(40));
+                    sections.push(`File Integrity Hash (${algorithm.toUpperCase()})`);
+                    sections.push("");
                     if (recursive) {
                         const result = await executeCommand({
                             command: "find",
@@ -1154,12 +1154,12 @@ export function registerEncryptionTools(server) {
                         return { content: [formatToolOutput(output)] };
                     }
                     const sections = [];
-                    sections.push("📜 Certificate Inventory");
-                    sections.push("=".repeat(50));
+                    sections.push("Certificate Inventory");
+                    sections.push("");
                     sections.push(`\nTotal certificates found: ${certDetails.length}`);
-                    sections.push(`  ✅ Valid: ${validCount}`);
-                    sections.push(`  ⚠️ Expiring soon (< 30 days): ${expiringSoonCount}`);
-                    sections.push(`  ⛔ Expired: ${expiredCount}`);
+                    sections.push(`  Valid: ${validCount}`);
+                    sections.push(`  WARNING: Expiring soon (< 30 days): ${expiringSoonCount}`);
+                    sections.push(`  CRITICAL: Expired: ${expiredCount}`);
                     if (expiredCount > 0) {
                         sections.push("\n── Expired Certificates ──");
                         for (const cert of certDetails.filter((c) => c.status === "expired")) {
@@ -1197,9 +1197,9 @@ export function registerEncryptionTools(server) {
                             return { content: [formatToolOutput(findings)] };
                         }
                         const sections = [];
-                        sections.push("🔄 Auto-Renewal Check");
-                        sections.push("=".repeat(50));
-                        sections.push("\n⚠️ Certbot is not installed.");
+                        sections.push("Auto-Renewal Check");
+                        sections.push("");
+                        sections.push("\nCertbot is not installed.");
                         sections.push("  Install with: apt install certbot");
                         return { content: [createTextContent(sections.join("\n"))] };
                     }
@@ -1229,10 +1229,10 @@ export function registerEncryptionTools(server) {
                         return { content: [formatToolOutput(findings)] };
                     }
                     const sections = [];
-                    sections.push("🔄 Auto-Renewal Check");
-                    sections.push("=".repeat(50));
+                    sections.push("Auto-Renewal Check");
+                    sections.push("");
                     sections.push(`\nCertbot: installed at ${certbotCheck.stdout.trim()}`);
-                    sections.push(`Timer: ${timerActive ? "✅ Active" : "⚠️ Not active"}`);
+                    sections.push(`Timer: ${timerActive ? "Active" : "WARNING: Not active"}`);
                     sections.push("\nManaged Certificates:");
                     sections.push(certsResult.stdout.trim() || "  No certificates found");
                     sections.push(`\nRenewal Configs (${renewalConfigs.length}):`);
@@ -1300,8 +1300,8 @@ export function registerEncryptionTools(server) {
                         return { content: [formatToolOutput(findings)] };
                     }
                     const sections = [];
-                    sections.push("🏛️ CA Trust Store Audit");
-                    sections.push("=".repeat(50));
+                    sections.push("CA Trust Store Audit");
+                    sections.push("");
                     sections.push(`\nTrust store path: ${trustStorePath}`);
                     sections.push(`Total trusted CAs: ${caFiles.length}`);
                     sections.push(`Recently added (last 30 days): ${recentlyAdded.length}`);
@@ -1312,13 +1312,13 @@ export function registerEncryptionTools(server) {
                         }
                     }
                     if (suspiciousFindings.length > 0) {
-                        sections.push(`\n⚠️ Suspicious CAs Found (${suspiciousFindings.length}):`);
+                        sections.push(`\nWARNING: Suspicious CAs Found (${suspiciousFindings.length}):`);
                         for (const ca of suspiciousFindings.slice(0, 20)) {
                             sections.push(`  ${ca}`);
                         }
                     }
                     else {
-                        sections.push("\n✅ No suspicious CA names detected.");
+                        sections.push("\nNo suspicious CA names detected.");
                     }
                     return { content: [createTextContent(sections.join("\n"))] };
                 }
@@ -1383,8 +1383,7 @@ export function registerEncryptionTools(server) {
                         }
                         return {
                             content: [
-                                createTextContent("🔍 OCSP Check\n" + "=".repeat(50) +
-                                    "\n\n⚠️ Certificate does not contain an OCSP responder URI."),
+                                createTextContent("OCSP Check\n\nWARNING: Certificate does not contain an OCSP responder URI."),
                             ],
                         };
                     }
@@ -1421,12 +1420,12 @@ export function registerEncryptionTools(server) {
                         return { content: [formatToolOutput(findings)] };
                     }
                     const sections = [];
-                    sections.push("🔍 OCSP Check");
-                    sections.push("=".repeat(50));
+                    sections.push("OCSP Check");
+                    sections.push("");
                     sections.push(`\nOCSP Responder: ${ocspUri}`);
                     sections.push(`Revocation Status: ${String(findings.revocationStatus)}`);
                     if (findings.ocspStapling !== undefined) {
-                        sections.push(`OCSP Stapling: ${findings.ocspStapling ? "✅ Supported" : "⚠️ Not supported"}`);
+                        sections.push(`OCSP Stapling: ${findings.ocspStapling ? "Supported" : "WARNING: Not supported"}`);
                     }
                     if (findings.message) {
                         sections.push(`\nNote: ${String(findings.message)}`);
@@ -1464,8 +1463,8 @@ export function registerEncryptionTools(server) {
                         }
                         return {
                             content: [
-                                createTextContent("🔍 CT Log Monitor\n" + "=".repeat(50) +
-                                    `\n\n⚠️ Failed to query crt.sh for ${validDomain}.\n` +
+                                createTextContent("CT Log Monitor\n" +
+                                    `\nWARNING: Failed to query crt.sh for ${validDomain}.\n` +
                                     `Error: ${crtshResult.stderr}`),
                             ],
                         };
@@ -1523,8 +1522,8 @@ export function registerEncryptionTools(server) {
                         return { content: [formatToolOutput(findings)] };
                     }
                     const sections = [];
-                    sections.push("🔍 CT Log Monitor");
-                    sections.push("=".repeat(50));
+                    sections.push("CT Log Monitor");
+                    sections.push("");
                     sections.push(`\nDomain: ${validDomain}`);
                     sections.push(`Total certificates in CT logs: ${ctEntries.length}`);
                     sections.push(`Unique issuers: ${issuers.size}`);
@@ -1543,7 +1542,7 @@ export function registerEncryptionTools(server) {
                         }
                     }
                     if (unexpectedFindings.length > 0) {
-                        sections.push("\n⚠️ Findings:");
+                        sections.push("\nWARNING: Findings:");
                         for (const finding of unexpectedFindings) {
                             sections.push(`  ${finding}`);
                         }

package/build/tools/firewall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firewall.d.ts","sourceRoot":"","sources":["../../src/tools/firewall.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkEpE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAiiD7D"}
+{"version":3,"file":"firewall.d.ts","sourceRoot":"","sources":["../../src/tools/firewall.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgNpE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA2tD7D"}