narai-primitives 2.0.0-rc.1

package/dist/connectors/db/connector.js

@@ -0,0 +1,175 @@
+/**
+ * Framework wrapper for `db-agent-connector`.
+ *
+ * Wraps the internal `fetch(action, params)` dispatcher (see `dispatcher.ts`)
+ * in a `@narai/connector-toolkit` `createConnector` shell. The toolkit
+ * provides the CLI harness, `--curate` slash-command entry, hardship logging,
+ * and SessionStart reminder helper; the internal dispatcher still owns all
+ * DB-specific work (SQL classification, policy gate, per-server config
+ * merging, driver lazy-loading, audit JSONL, approval grants).
+ *
+ * Envelope translation at the boundary: the internal dispatcher emits
+ * `{status: "ok"|"denied"|"escalate"|"present_only"|"error", ...}`; the
+ * framework's canonical envelope uses `success` in place of `ok`. The
+ * handler unwraps `ok` into the success envelope's `data` and uses the
+ * toolkit's `EnvelopeOverride` escape hatch to emit `denied` / `escalate`
+ * / `present_only` envelopes verbatim (with their rich shape intact).
+ *
+ * The toolkit's own policy gate runs over `{kind: "read"}` for every call
+ * — a pass-through — because the real, SQL-aware policy logic lives in the
+ * dispatcher. The YAML config shape (V2.0: under `connectors.db.*` with
+ * `servers` + `policy` + `unbounded_select` etc.) is owned by the
+ * dispatcher's call into `@narai/connector-config`.
+ */
+import { createConnector, EnvelopeOverride } from "narai-primitives/toolkit";
+import { z } from "zod";
+import { fetch as dispatcherFetch } from "./dispatcher.js";
+// ───────────────────────────────────────────────────────────────────────────
+// Param schemas
+// ───────────────────────────────────────────────────────────────────────────
+// Toolkit 3.0.0-rc.1 fixed ZodError identity mismatches (structural duck-type
+// in `isZodErrorLike()` replaces `instanceof z.ZodError`). It is now safe to
+// enforce `.min(1)` here so empty-SQL is caught at the toolkit boundary and
+// returned as VALIDATION_ERROR rather than reaching the dispatcher.
+const queryParams = z.object({
+    sqlite_path: z.string().optional(),
+    env: z.string().optional(),
+    config_path: z.string().optional(),
+    sql: z.string().min(1, "sql is required"),
+    approval_mode: z.string().optional(),
+    max_rows: z.coerce.number().int().positive().default(1000),
+    timeout_ms: z.coerce.number().int().positive().default(30000),
+});
+const schemaParams = z.object({
+    sqlite_path: z.string().optional(),
+    env: z.string().optional(),
+    config_path: z.string().optional(),
+    filter: z.string().optional(),
+});
+// ───────────────────────────────────────────────────────────────────────────
+// Envelope translation
+// ───────────────────────────────────────────────────────────────────────────
+/**
+ * Take the internal dispatcher's result and translate it into what
+ * `createConnector`'s handler is expected to return (or throw).
+ *
+ *   internal status        → framework behavior
+ *   -----------------------  ---------------------------------------------
+ *   ok                     → return data (stripped of the internal status)
+ *   denied/escalate/       → throw EnvelopeOverride with
+ *     present_only           {status, reason, [formatted_sql],
+ *                             execution_time_ms}
+ *   error                  → throw with error_code in the message, picked up
+ *                            by mapError
+ */
+function translateOrThrow(action, result) {
+    const status = result["status"];
+    if (status === "ok") {
+        // Drop the internal status; the framework wraps the rest in a success envelope.
+        const { status: _status, ...body } = result;
+        return body;
+    }
+    if (status === "denied" || status === "escalate") {
+        const reason = typeof result["reason"] === "string" ? result["reason"] : undefined;
+        const envelope = {
+            status,
+            ...(reason !== undefined ? { message: reason } : {}),
+            extension: {},
+        };
+        throw new EnvelopeOverride(envelope);
+    }
+    if (status === "present_only") {
+        const ext = {};
+        if (typeof result["formatted_sql"] === "string")
+            ext["formatted_sql"] = result["formatted_sql"];
+        if (typeof result["execution_time_ms"] === "number")
+            ext["execution_time_ms"] = result["execution_time_ms"];
+        const reason = typeof result["reason"] === "string" ? result["reason"] : undefined;
+        const envelope = {
+            status: "present_only",
+            ...(reason !== undefined ? { message: reason } : {}),
+            extension: ext,
+        };
+        throw new EnvelopeOverride(envelope);
+    }
+    // status === "error" or unknown: bubble up as a thrown error so mapError
+    // produces a canonical error envelope.
+    const errorCode = typeof result["error_code"] === "string" ? result["error_code"] : "";
+    const errorMsg = typeof result["error"] === "string" ? result["error"] : `db-agent ${action} failed`;
+    throw new DbError(errorCode || "CONNECTION_ERROR", errorMsg);
+}
+class DbError extends Error {
+    errorCode;
+    constructor(errorCode, message) {
+        super(message);
+        this.name = "DbError";
+        this.errorCode = errorCode;
+    }
+}
+export function buildDbConnector(overrides = {}) {
+    const dispatch = overrides.dispatch ?? dispatcherFetch;
+    return createConnector({
+        name: "db",
+        version: "2.0.0",
+        // The new `~/.connectors/config.yaml` uses the V2.0 vocab
+        // (`allow`/`deny` + `read`/`write`/`delete`/`admin`/`privilege`) and a
+        // connector-specific `servers:` section under options. Skip the
+        // toolkit's YAML discovery — the dispatcher loads and gates against
+        // the resolved config internally.
+        disablePolicyDiscovery: true,
+        credentials: async () => ({}),
+        // No SDK to preload — drivers are lazy-loaded via `getConnection` inside
+        // the dispatcher on the allow path only.
+        actions: {
+            query: {
+                description: "Execute SQL against a configured DB. WRITE/DELETE/ADMIN return status=present_only or escalate per policy; PRIVILEGE returns denied.",
+                params: queryParams,
+                // Classify is pass-through — the real SQL-aware gate lives in the
+                // dispatcher; we hand { kind: "read" } to the toolkit so its gate
+                // always allows and the dispatcher's decision wins.
+                classify: { kind: "read" },
+                handler: async (p) => {
+                    const result = await dispatch("query", p);
+                    return translateOrThrow("query", result);
+                },
+            },
+            schema: {
+                description: "Introspect table/column schema for a configured DB",
+                params: schemaParams,
+                classify: { kind: "read" },
+                handler: async (p) => {
+                    const result = await dispatch("schema", p);
+                    return translateOrThrow("schema", result);
+                },
+            },
+        },
+        mapError: (err) => {
+            if (err instanceof DbError) {
+                const code = mapDbErrorCode(err.errorCode);
+                return { error_code: code, message: err.message, retriable: false };
+            }
+            return undefined;
+        },
+    });
+}
+function mapDbErrorCode(internal) {
+    const upper = internal.toUpperCase();
+    if (upper === "VALIDATION_ERROR")
+        return "VALIDATION_ERROR";
+    if (upper === "CONFIG_ERROR")
+        return "CONFIG_ERROR";
+    if (upper === "CONNECTION_ERROR")
+        return "CONNECTION_ERROR";
+    if (upper === "AUTH_ERROR" || upper === "UNAUTHORIZED")
+        return "AUTH_ERROR";
+    if (upper === "NOT_FOUND")
+        return "NOT_FOUND";
+    if (upper === "TIMEOUT")
+        return "TIMEOUT";
+    if (upper === "RATE_LIMITED")
+        return "RATE_LIMITED";
+    if (upper === "SCHEMA_ERROR" || upper.endsWith("_ERROR"))
+        return "CONNECTION_ERROR";
+    return "CONNECTION_ERROR";
+}
+//# sourceMappingURL=connector.js.map

package/dist/connectors/db/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/connectors/db/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAyC,MAAM,0BAA0B,CAAC;AACpH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,IAAI,eAAe,EAAoB,MAAM,iBAAiB,CAAC;AAE7E,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAmB;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,gFAAgF;QAChF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAsD,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,QAAQ,GAAqC;YACjD,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,SAAS,EAAE,EAAE;SACd,CAAC;QACF,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAChG,IAAI,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,QAAQ,GAAqC;YACjD,MAAM,EAAE,cAAc;YACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,SAAS,EAAE,GAAG;SACf,CAAC;QACF,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,yEAAyE;IACzE,uCAAuC;IACvC,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,MAAM,SAAS,CAAC;IACrG,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,OAAQ,SAAQ,KAAK;IAChB,SAAS,CAAS;IAC3B,YAAY,SAAiB,EAAE,OAAe;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAWD,MAAM,UAAU,gBAAgB,CAAC,YAA0B,EAAE;IAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,eAAe,CAAC;IAEvD,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,OAAO;QAChB,0DAA0D;QAC1D,uEAAuE;QACvE,gEAAgE;QAChE,oEAAoE;QACpE,kCAAkC;QAClC,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7B,yEAAyE;QACzE,yCAAyC;QACzC,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,WAAW,EACT,sIAAsI;gBACxI,MAAM,EAAE,WAAW;gBACnB,kEAAkE;gBAClE,kEAAkE;gBAClE,oDAAoD;gBACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAA8B,EAAE,EAAE;oBAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAA4B,CAAC,CAAC;oBACrE,OAAO,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3C,CAAC;aACF;YACD,MAAM,EAAE;gBACN,WAAW,EAAE,oDAAoD;gBACjE,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAA+B,EAAE,EAAE;oBACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAA4B,CAAC,CAAC;oBACtE,OAAO,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC5C,CAAC;aACF;SACF;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,IAAI,GAAG,YAAY,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC5D,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IACpD,IAAI,KAAK,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC5D,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,YAAY,CAAC;IAC5E,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IACpD,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACpF,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/dist/connectors/db/dispatcher.d.ts

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { type QueryableDriver } from "./lib/query.js";
+import type { DatabaseDriver } from "./lib/drivers/base.js";
+import { type PolicyRules } from "./lib/plugin_config.js";
+export declare const VALID_ACTIONS: ReadonlySet<string>;
+export type FetchResult = Record<string, unknown>;
+type Params = Record<string, unknown>;
+/**
+ * Classify `sql` and short-circuit if the strictest rule for any op in the
+ * statement is not `allow`. Returns `null` on allow; returns a ready-to-emit
+ * envelope otherwise. The strength of this check: it runs BEFORE
+ * `getConnection()`, so a DROP TABLE against an unreachable production host
+ * returns denied in ~1ms without any network traffic.
+ */
+export declare function _preCheckPolicy(sql: string, approvalMode: string, rules: PolicyRules): {
+    response: FetchResult;
+    exitCode: number;
+} | null;
+export declare function adaptDriver(driver: DatabaseDriver, conn: unknown): QueryableDriver;
+export declare function runSchema(driver: DatabaseDriver, conn: unknown, filter: string | null, envName?: string): FetchResult;
+export interface ResolvedEnv {
+    name: string;
+    driver: string;
+    approval_mode: string;
+    grant_duration_hours: number | undefined;
+}
+export declare function resolveEnv(envName: string, configPath: string): ResolvedEnv;
+export interface FetchOptions {
+    /** Reserved for future use (client injection for testing). */
+    _reserved?: undefined;
+}
+export declare function fetch(action: string, params?: Params | null, _options?: FetchOptions): Promise<FetchResult>;
+export declare const HELP_TEXT = "usage: db-agent-connector [-h] --action {query,schema} [--params PARAMS]\n\nSafe, read-only database query connector with guard-rail policy enforcement.\n\noptions:\n  -h, --help      show this help message and exit\n  --action {query,schema}\n                  Action to perform\n  --params PARAMS\n                  JSON string of action parameters\n\naction 'query' params:\n  {\"env\": \"dev\", \"sql\": \"SELECT 1\"}  or\n  {\"sqlite_path\": \"./test.db\", \"sql\": \"SELECT 1\"}\n  optional: max_rows (default 1000), timeout_ms (default 30000),\n           approval_mode, config_path\n\naction 'schema' params:\n  {\"env\": \"dev\"}  or  {\"sqlite_path\": \"./test.db\"}\n  optional: filter, config_path\n\nWrites/deletes (INSERT/UPDATE/DELETE/TRUNCATE/\u2026) follow the configured\npolicy. By default, WRITE escalates and DELETE/ADMIN return status=\"present_only\"\nwith a formatted_sql payload; PRIVILEGE statements return status=\"denied\".\nPolicy classification runs BEFORE the driver loads or any connection opens.\n";
+export declare function main(argv?: readonly string[]): Promise<number>;
+export {};
+//# sourceMappingURL=dispatcher.d.ts.map

package/dist/connectors/db/dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../../src/connectors/db/dispatcher.ts"],"names":[],"mappings":";AA+BA,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,KAAK,EACV,cAAc,EAEf,MAAM,uBAAuB,CAAC;AAS/B,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAAgC,CAAC;AAE/E,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClD,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA+FtC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,WAAW,GACjB;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA8CpD;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,OAAO,GACZ,eAAe,CAiDjB;AAED,wBAAgB,SAAS,CACvB,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,OAAO,GAAE,MAAW,GACnB,WAAW,CAyBb;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,WAAW,CA0E3E;AA6ND,MAAM,WAAW,YAAY;IAC3B,8DAA8D;IAC9D,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,wBAAsB,KAAK,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAAM,GAAG,IAAW,EAC5B,QAAQ,GAAE,YAAiB,GAC1B,OAAO,CAAC,WAAW,CAAC,CA+BtB;AAQD,eAAO,MAAM,SAAS,2gCAyBrB,CAAC;AAEF,wBAAsB,IAAI,CACxB,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,MAAM,CAAC,CAsDjB"}