hridoy-ultimate 0.0.0-stage → 8.0.1

package/ANALYSIS.md

@@ -0,0 +1,31 @@
+# Analysis of the packages reviewed for toru-fca v1.2.1
+
+## Lineages
+| Group | Packages | Notes |
+|---|---|---|
+| A (toru line) | HRIDOY-FCA 2.0.0, ST-FCA 1.2.29, toru-fca 1.1.0 / 1.2.0 | ST ≈ HRIDOY (only index/config/checkUpdate differ). toru 1.2.0 rewrote listenMqtt, refreshFb_dtsg, logout, sendMessage, stopListenMqtt, sendTypingIndicator, index. **Used as base.** |
+| B (eryxenx line) | @eryxenx/fca 1.0.0 / 1.0.4 / 1.1.9, fca-eryxenx-merged, fca-abalcdiokay | ~75% identical files. TypeScript-free but different architecture (src/api/*, E2EE via Signal/koffi). |
+| C (native line) | fca-native 5.0.0, Metachat 1.2.2 | Nearly the same code; adds ErrorHandler, SessionRecovery, rate limiter, etc. |
+| D | shadowx-fca 10.8.0 | B-like plus extra helpers (unsendOnReaction, listenSpeed, reaction v2...). |
+| E | xtreme-fca 1.0.2 | Single bundled dist (TS source not included). No anti-logout, no E2EE. |
+
+## Security findings (NOT merged)
+- **Third-party login API:** group B (`module/loginHelper.js`, default `apiServer: https://minhdong.site`) and the fca-native example config (`https://donixdev.com`) can POST **email, password and the 2FA secret** to that server (`loginViaAPI` / `tokensViaAPI`). It only runs when `autoLogin:true`, but it is a credential-leak risk. Not included. toru-fca logs in only directly to facebook.com.
+- **ST-FCA / HRIDOY `checkUpdate.js`** runs `npm install` automatically. Not included (toru's version only prints a notice).
+- **remoteClient.js** (group B) opens a WebSocket to an arbitrary configured URL and accepts remote commands. Opt-in, but not included.
+- **fca-abalcdiokay and fca-eryxenx-merged ship `Fca_Database/database.sqlite` containing `app_state_backups` rows** — most likely a saved Facebook session (cookies). I did not read it. If it is your account, treat it as exposed and log that session out / change the password. It is NOT in toru-fca.
+- ST/HRIDOY `getUID` uses id.traodoisub.com / api.findids.net (username → uid). Present in toru base already; sends only a public username/URL.
+
+## Ideas ported into 1.2.1
+- shadowx `setMessageReactionv2` → `setMessageReactionSafe` (MQTT first, HTTP retry fallback).
+- Stale-MQTT-client guard (eryxenx `isActiveClient` idea) → `ctx.mqttClient !== mqttClient` guards.
+- Reconnect backoff + old-client teardown (eryxenx/native CriticalBugFixes idea).
+
+## Not ported (and why)
+- E2EE native binaries (messagix .so/.dll, ~17 MB each) — platform-specific, unverified; toru keeps its optional bridge, off by default.
+- fca-native resilience classes (ConnectionPool, RateLimit, Monitoring...) — large, overlapping with what toru already has; would add risk.
+- Theme/AI-theme, broadcast, scheduler, spy, bypassScrap modules — not needed for your goals; "spy/bypassScrap" are scraping-oriented.
+- xtreme — compiled bundle only, cannot be reviewed line by line.
+
+## Limits of this review
+No network, no real Facebook cookie: nothing was run against Facebook. Code was syntax-checked and key functions stub-tested.

package/AUDIT_REPORT.md

@@ -0,0 +1,57 @@
+# TORU-FCA 1.2.4 — Defect Fix Addendum
+
+Found by a static review of the 1.2.3 archive (syntax check, require-resolution, TypeScript `checkJs` undefined-name scan, manual reading) and fixed in 1.2.4:
+
+| # | File | Defect | Status |
+|---|---|---|---|
+| 1 | src/listenMqtt.js | `getSeqID` not in scope inside `scheduleReconnect` -> ReferenceError, auto-reconnect dead | Fixed + regression test |
+| 2 | src/changeCover.js | `log` never required | Fixed + test |
+| 3 | src/createCommentPost.js | `calback` typo; `image` undefined; errors resolved as success | Fixed + tests |
+| 4 | package.json | `form-data`, `https-proxy-agent` undeclared; 3 unused deps | Fixed |
+| 5 | checkUpdate.js | version hard-coded 1.2.1 | Fixed + test |
+| 6 | fca-config.example.json | stale version 1.1.0 | Fixed |
+| 7 | 5 src files | CRLF line endings | Normalised |
+
+Not changed / still open: `yumi-json-bigint` is pinned to `*` (could not look up a safe version offline); no live Facebook/MQTT test was possible; the 1.2.3 limitations below still apply.
+
+---
+
+# (previous) TORU-FCA 1.2.3 — Comparative Audit and Second-Stage Patch Report
+
+## Scope
+This is a static source review and local unit-test run using the supplied TORU-FCA and HRIDOY-FCA archives. No Facebook account, live session, or production Messenger traffic was used. Other FCA archives were used as comparison references, not as proof of runtime correctness.
+
+## Changes carried into 1.2.3
+
+### MQTT lifecycle
+- Clear an existing reconnect timer and dead-connection watchdog when `listenMqtt()` replaces/restarts the listener.
+- Reject and remove pending `ctx.reqCallbacks` on current MQTT transport errors and close events, instead of leaving callbacks waiting until their individual timeout.
+- On explicit `stopListenMqtt()`, clear pending request callbacks with an error and empty the callback map, including when no client is currently present.
+- Added a unit test for pending callback cleanup on explicit stop.
+
+### E2EE bridge lifecycle
+- Track the E2EE reconnect timer in bridge state and ensure repeated `disconnected` events do not create multiple reconnect timers.
+- Use bounded exponential backoff with jitter and `unref()` the timer so it does not keep the Node process alive by itself.
+- Clear reconnect timers on successful connect and explicit disconnect.
+- Disable the native client's own auto-reconnect option and let TORU's wrapper manage retries, avoiding two competing retry managers.
+
+## Local verification
+- `node --check` passed for `index.js`, `e2ee.js`, all `src/*.js` and all `test/*.js` files.
+- `npm test`: 3 tests passed, 0 failed.
+- `npm run check`: passed.
+- `npm pack --dry-run`: package contents validated for `toru-fca@1.2.3`.
+- The publishable source archive excludes obvious session filenames (`cookie.txt`, `appstate.json`, `*.session`). This does not prove every file is free of secrets; review before publishing.
+
+## Important limitations / not verified
+1. No live MQTT integration test was run. Reconnect timing, subscription restoration, sequence ID refresh, and callback cleanup still need a controlled integration test.
+2. No E2EE native bridge was loaded. The package archive does not bundle the required native `build/messagix` runtime binary, so E2EE connection, key persistence, and message delivery remain unverified.
+3. No multi-hour memory/listener soak test was run.
+4. `api.logout()` intentionally blocks logout and invokes its callback as success in the existing design. This remains misleading API behavior and should be redesigned in a separately documented breaking-change-safe patch.
+5. Reaction MQTT acknowledgment may confirm a transport/task response rather than proving the final reaction is visible to recipients. Timeout delivery remains unknown.
+6. No patch can guarantee Facebook session persistence or prevent server-side account restrictions.
+
+## Recommended next steps
+- Test MQTT disconnect/reconnect and manual stop in a sandbox using mocked sockets before using a live account.
+- Confirm that the native E2EE client supports repeated `connect()` calls on the same instance after a disconnect; if not, recreate the client safely during retries and detach old listeners.
+- Add GoatBot API compatibility tests and run a controlled 2–6 hour heap/RSS/listener soak test.
+- Inspect all archive contents for credentials/session data before publishing.

package/CHANGELOG.md

@@ -0,0 +1,43 @@
+# Changelog
+
+## 8.0.1
+- Rename: package/branding is now `hridoy-ultimate` (was `toru-fca`) in banner, logs, update check, README, examples and config comments.
+- Update check env var `HRIDOY_ULTIMATE_NO_UPDATE_CHECK` added (old `TORU_FCA_NO_UPDATE_CHECK` still honoured).
+- Internal globals (`global._toruFcaConfig`, `_toruFcaInitDone`) intentionally unchanged for backward compatibility.
+
+## 1.2.4
+- Fix (critical): `scheduleReconnect()` called `getSeqID()` which is only defined inside the module factory, so every MQTT reconnect threw `ReferenceError` in a timer. Now exposed as `ctx._getSeqID` and called with a try/catch.
+- Fix: `changeCover` used `log` without requiring `npmlog`.
+- Fix: `createCommentPost` typo `calback`, undefined `image` in attachment error, and `cb(null, err)` resolving errors as success (now rejects).
+- Fix: `package.json` declares `form-data` and `https-proxy-agent` (were required but undeclared); removed unused `chalk`, `tough-cookie`, `protobufjs`.
+- Fix: `checkUpdate.js` hard-coded version 1.2.1; now read from `package.json`.
+- Chore: example config version synced; CRLF -> LF in `reply.js`, `getUID.js`, `httpGet.js`, `httpPost.js`, `changeAvt.js`.
+- Add: `scripts/check.js` (`npm run check`) and `test/fixes-1_2_4.test.js` (6 regression tests, incl. a reconnect test verified to fail on the old code).
+
+## 1.2.3
+- Fix: E2EE reconnect timers are tracked, deduplicated, bounded with exponential backoff, and cleared on explicit disconnect.
+- Fix: TORU owns E2EE reconnect scheduling to avoid competing reconnect managers.
+- Fix: MQTT listener replacement clears stale reconnect/watchdog timers.
+- Fix: pending MQTT request callbacks are failed and cleaned up on transport error/close or explicit stop.
+- Add: regression test for pending MQTT callback cleanup on stop.
+
+## 1.2.2
+- Fix: reaction MQTT requests now reject on missing acknowledgement instead of assuming success.
+- Fix: reaction MQTT callback and Promise settle once and share the same result.
+- Fix: forward explicit MQTT response errors to request callbacks.
+- Fix: callback type checks no longer execute user callbacks as a test (pin/edit/block helpers).
+- Fix: atomic session writes use unique temporary names and restrictive file permissions.
+- Add: Node.js syntax-check script and focused MQTT reaction tests.
+
+
+## 1.2.1
+- Fix: setMessageReactionMqtt invoked the user callback prematurely / threw synchronously; now Promise+callback, real ack.
+- Add: `/ls_resp` dispatch to `ctx.reqCallbacks` (reaction/pin/block helpers finally get acks).
+- Add: richer `message_reaction` event (off, action, isGroup, isSingleUser, null-safe).
+- Fix: stale MQTT client events caused duplicate reconnects; old client is now torn down first.
+- Fix: getSeqID transient failure during reconnect no longer kills the listener (backoff retry).
+- Fix: cookie expiry extension edited a copy; now updates the live jar.
+- Fix: login callback double-fire guard.
+- Change: uncaughtException logs stack for non-network errors.
+- Change: e2ee disabled by default; spinner TTY-only; update check opt-out.
+

package/README.md

@@ -1,3 +1,134 @@
-# Temporary Holding Version
+# hridoy-ultimate v8.0.1
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Ultimate Merged, Fixed & Advanced Facebook Chat API**
+
+> Cookie-based login, session persistence, and MQTT reconnection are best-effort. Server-side logout, checkpoints, and platform restrictions cannot be prevented or guaranteed against by this library.
+
+---
+
+## ✅ Features
+
+| Feature | Status |
+|---|---|
+| Session refresh helper (best-effort) | ⚠️ Best-effort only |
+| Conservative presence/delay options | ⚠️ No guarantee |
+| Inbox Smooth (bot inbox reply) | ✅ Active |
+| GoatBot Compatible | ✅ Ready |
+| Session Guard (auto-save) | ✅ Every 3min |
+| fb_dtsg Auto-Refresh | ✅ Every 20min |
+| MQTT Stable Reconnect | ✅ Active |
+| Error reporting | ✅ Host process handlers preserved |
+| E2EE Labyrinth Bridge | ✅ Active |
+| Facebook Protection | ✅ New in v1.0.6 |
+| Human-like Delay | ✅ New in v1.0.6 |
+
+---
+
+## 📦 Install
+
+```bash
+npm install
+```
+
+---
+
+## 🚀 Usage (GoatBot / Goat-Bot)
+
+```js
+const login = require("hridoy-ultimate");
+const fs = require("fs");
+
+login({ appState: JSON.parse(fs.readFileSync("appstate.json", "utf8")) }, {
+  listenEvents: true,
+  selfListen: false,
+  autoReconnect: true,
+  online: false
+}, (err, api) => {
+  if (err) return console.error(err);
+
+  // Session guard — auto-save appstate
+  api.sessionGuard("appstate.json");
+
+  api.listenMqtt((err, event) => {
+    if (event.type === "message") {
+      api.sendMessage("Hello!", event.threadID);
+    }
+  });
+});
+```
+
+---
+
+## ⚙️ config.json Options
+
+```json
+{
+  "antiLogout": { "enabled": true, "refreshIntervalMs": 1200000 },
+  "sessionGuard": { "enabled": true, "intervalMs": 180000 },
+  "automation": { "enabled": false },
+  "smooth": { "enabled": true, "messageDelay": 300 },
+  "facebookProtection": { "enabled": true, "blockAutomationDetection": true, "humanLikeDelay": true },
+  "inbox": { "enabled": true, "replyToInbox": true }
+}
+```
+
+---
+
+## 🔐 Anti-Logout System
+
+Cookie login করলে `api.logout()` automatically blocked হয়।
+- Session refresh does not guarantee that Facebook will preserve a login session
+- `api.logout()` is currently overridden; use `api.forceLogout()` only when you explicitly intend to terminate the session
+- Force logout দরকার হলে: `api.forceLogout()`
+- Anti-logout বন্ধ করতে: `api.stopAntiLogout()`
+
+---
+
+## 📊 API Methods
+
+| Method | Description |
+|---|---|
+| `api.sendMessage(msg, threadID)` | Message পাঠাও |
+| `api.listenMqtt(callback)` | Message শোনো |
+| `api.sessionGuard(path, opts)` | Appstate auto-save |
+| `api.saveSession(path)` | Manual session save |
+| `api.getHealth()` | MQTT + session health |
+| `api.forceLogout()` | Force logout (opt-in) |
+| `api.stopAntiLogout()` | Anti-logout timer বন্ধ |
+| `api.refreshFb_dtsg()` | Manual fb_dtsg refresh |
+| `api.sendTypingIndicatorV2(typing, threadID)` | MQTT typing indicator |
+
+---
+
+## 🛡️ Facebook Protection (v1.0.6)
+
+- `humanLikeDelay: true` — প্রতিটি message এ random 50-200ms delay, bot traffic pattern unpredictable
+- `blockAutomationDetection: true` — online=false, presence update বন্ধ
+- ফলে Facebook account এ restriction বা ban আসে না
+
+---
+
+**hridoy-ultimate v8.0.1** — Built on toru-fca 1.2.0 (itself derived from HRIDOY-FCA / ST-FCA). Other packages were analysed and only selected ideas were ported — see ANALYSIS.md
+
+
+## What's new in v1.2.4
+- **Critical fix:** MQTT auto-reconnect crashed with `ReferenceError: getSeqID is not defined` (the reconnect timer called a function that lives in another scope). The factory now exposes it as `ctx._getSeqID` and the timer uses that, guarded by try/catch.
+- `changeCover`: missing `npmlog` import (ReferenceError on every error path) fixed.
+- `createCommentPost`: fixed `calback` typo (crash whenever a callback was passed), undefined `image` in the attachment error, and failures that *resolved* with the error object instead of rejecting.
+- `package.json`: declared `form-data` and `https-proxy-agent` (both were required but missing); removed unused `chalk`, `tough-cookie`, `protobufjs`.
+- `checkUpdate` now reads its version from `package.json` (was hard-coded 1.2.1). Example config version synced. CRLF line endings normalised to LF.
+- New `npm run check` (syntax + relative/undeclared require check on every file) and regression tests in `test/fixes-1_2_4.test.js`.
+
+## Earlier: v1.2.3
+- **Reactions:** `message_reaction` events now carry `off`, `action` ("add"/"remove"), `userID` (reactor), `isGroup`, `isSingleUser` (inbox vs group) and are null-safe. `selfListen:false` also ignores the bot's own reactions.
+- **api.setMessageReactionSafe(reaction, messageID, threadID, opts):** MQTT first, HTTP fallback with retry (idea from shadowx `setMessageReactionv2`). `setMessageReaction` now accepts any real emoji and no longer crashes on retry/redirect (it passed `ctx.jar` instead of `ctx` to `parseAndCheckLogin`; same bug fixed in `forwardAttachment`).
+- **api.setMessageReactionMqtt:** the old `isCallable()` helper *called* your callback with no arguments and the call could throw synchronously. Fixed; supports callbacks and Promises; real ack via `/ls_resp`.
+- **MQTT stability:** events from replaced clients are ignored (no double-reconnect loops), a failed `getSeqID` during reconnect now retries with backoff instead of silently killing the listener, spinner only draws on a TTY.
+- **Session safety:** cookie-expiry extension now really works (v1.2.0 edited a throw-away copy). Login callback can no longer fire twice.
+- **Errors:** uncaught exceptions are still non-fatal but now print the stack instead of hiding it.
+- E2EE is off by default (needs the native `messagix` binary which is not bundled).
+- Update check never installs anything; disable with `HRIDOY_ULTIMATE_NO_UPDATE_CHECK=1` (old `TORU_FCA_NO_UPDATE_CHECK` still works).
+
+## Honest notes
+- Login: use `appState` (cookie array / cookie string). `api.logout()` is blocked on purpose; use `api.forceLogout()` if you really want to log out.
+- "Facebook protection" (online=false, small delays) only lowers noise. No library can guarantee Facebook will not flag or checkpoint an account that is driven by a bot.

package/advancedSystem.js

@@ -0,0 +1,95 @@
+"use strict";
+
+/**
+ * AdvancedSystem — minimal queue + health monitor for alpha-fca.
+ * Automation is OFF by default. No background polling, no aggressive requests.
+ * Only runs tasks you explicitly enqueue.
+ */
+
+const EventEmitter = require("events");
+
+class AdvancedSystem extends EventEmitter {
+  constructor(options) {
+    super();
+    options = options || {};
+    this.options = Object.assign({
+      automationEnabled: false,
+      minDelayMs: 1000,
+      maxDelayMs: 30000,
+      maxQueue: 50
+    }, options);
+    this.startedAt = Date.now();
+    this._queue = [];
+    this._running = false;
+    this._stats = { enqueued: 0, completed: 0, failed: 0 };
+  }
+
+  /** @returns {boolean} */
+  isAutomationEnabled() {
+    return this.options.automationEnabled === true;
+  }
+
+  /** Explicit opt-in only — no background automation started automatically. */
+  setAutomationEnabled(enabled) {
+    this.options.automationEnabled = Boolean(enabled);
+    this.emit("automation", this.options.automationEnabled);
+    return this.options.automationEnabled;
+  }
+
+  /** Health snapshot — safe to call anytime. */
+  health(api) {
+    const mqttClient = api && (api.mqttClient || (api.ctx && api.ctx.mqttClient));
+    return {
+      version: "1.0.0",
+      uptimeMs: Date.now() - this.startedAt,
+      automationEnabled: this.isAutomationEnabled(),
+      inboxEnabled: true,
+      mqtt: mqttClient ? {
+        connected: Boolean(mqttClient.connected),
+        reconnecting: Boolean(mqttClient.reconnecting)
+      } : null,
+      queue: { size: this._queue.length, running: this._running },
+      stats: Object.assign({}, this._stats)
+    };
+  }
+
+  /**
+   * Enqueue a task function. Runs sequentially.
+   * @param {Function} task  async () => result
+   * @returns {Promise<any>}
+   */
+  enqueue(task) {
+    if (typeof task !== "function") return Promise.reject(new TypeError("task must be a function"));
+    if (this._queue.length >= this.options.maxQueue) {
+      return Promise.reject(new Error("AdvancedSystem queue is full (" + this.options.maxQueue + ")"));
+    }
+    this._stats.enqueued++;
+    return new Promise((resolve, reject) => {
+      this._queue.push({ task, resolve, reject });
+      this._drain();
+    });
+  }
+
+  async _drain() {
+    if (this._running || this._queue.length === 0) return;
+    this._running = true;
+    while (this._queue.length > 0) {
+      const { task, resolve, reject } = this._queue.shift();
+      try {
+        const result = await task();
+        this._stats.completed++;
+        resolve(result);
+      } catch (err) {
+        this._stats.failed++;
+        reject(err);
+      }
+      // Small throttle between tasks to avoid burst requests
+      if (this._queue.length > 0) {
+        await new Promise(r => setTimeout(r, this.options.minDelayMs));
+      }
+    }
+    this._running = false;
+  }
+}
+
+module.exports = AdvancedSystem;

package/checkUpdate.js

@@ -0,0 +1,47 @@
+"use strict";
+
+// v1.2.4: read from package.json so the notice can never drift from the real version.
+const CURRENT_VERSION = (function () {
+  try { return require("./package.json").version; } catch (_) { return "0.0.0"; }
+})();
+
+async function checkForFCAUpdate() {
+  try {
+    if (process.env.HRIDOY_ULTIMATE_NO_UPDATE_CHECK || process.env.TORU_FCA_NO_UPDATE_CHECK) return; // v1.2.1: opt-out, never auto-installs anything
+    const https = require("https");
+
+    const data = await new Promise(function(resolve) {
+      var req = https.get(
+        "https://registry.npmjs.org/hridoy-ultimate/latest",
+        { timeout: 5000 },
+        function(res) {
+          var body = "";
+          res.on("data", function(c) { body += c; });
+          res.on("end", function() {
+            try { resolve(JSON.parse(body)); } catch (_) { resolve(null); }
+          });
+          res.on("error", function() { resolve(null); });
+        }
+      );
+      req.on("error", function() { resolve(null); });
+      // Destroy on timeout to avoid hanging socket
+      req.on("timeout", function() { req.destroy(); resolve(null); });
+      // Hard abort after 8s as a belt-and-suspenders guard
+      var hard = setTimeout(function() { try { req.destroy(); } catch (_) {} resolve(null); }, 8000);
+      if (hard.unref) hard.unref();
+    });
+
+    if (data && data.version && data.version !== CURRENT_VERSION) {
+      var log = require("npmlog");
+      log.warn(
+        "hridoy-ultimate",
+        "Update available: v" + CURRENT_VERSION + " \u2192 v" + data.version +
+          " \u2014 npm update hridoy-ultimate"
+      );
+    }
+  } catch (_) {
+    // Non-fatal; version check is best-effort only
+  }
+}
+
+module.exports = { checkForFCAUpdate, CURRENT_VERSION };

package/config.json

@@ -0,0 +1,51 @@
+{
+  "_info": "hridoy-ultimate v8.0.1 \u2014 Main Config",
+  "version": "1.2.4",
+  "antiLogout": {
+    "enabled": true,
+    "refreshIntervalMs": 1200000,
+    "_note": "Periodically refreshes fb_dtsg when supported; this cannot guarantee session persistence or prevent server-side logout."
+  },
+  "sessionGuard": {
+    "enabled": true,
+    "intervalMs": 180000,
+    "debounceMs": 20000,
+    "backupEnabled": true,
+    "_note": "Periodically saves valid appstate and a backup. Cookie expiry changes cannot override server-side session expiry."
+  },
+  "automation": {
+    "enabled": false,
+    "_note": "KEEP FALSE. Disables background automation. Protects against Facebook restrictions."
+  },
+  "smooth": {
+    "enabled": true,
+    "messageDelay": 300,
+    "_note": "Shows typing indicator before sending. 300ms delay for human-like behavior."
+  },
+  "connection": {
+    "minDelayMs": 3000,
+    "maxDelayMs": 60000,
+    "_note": "MQTT reconnect exponential backoff range."
+  },
+  "e2ee": {
+    "enable": false,
+    "saveType": "memory",
+    "devicePath": "./data/e2ee-device.json",
+    "autoReconnect": true,
+    "logLevel": "none",
+    "_note": "E2EE Labyrinth bridge. Needs the native build/messagix binary (not bundled). Keep false unless you add it."
+  },
+  "facebookProtection": {
+    "enabled": true,
+    "blockAutomationDetection": true,
+    "humanLikeDelay": true,
+    "_note": "Optional request delays and conservative presence settings; no method can guarantee avoidance of platform restrictions."
+  },
+  "inbox": {
+    "enabled": true,
+    "replyToInbox": true,
+    "_note": "Bot replies in both inbox/DM and group threads."
+  },
+  "enableTypingIndicator": false,
+  "typingDuration": 4000
+}