toolhome 0.5.0

package/dist/server/security/secure-action.js

@@ -0,0 +1,69 @@
+import { createHash, createHmac, timingSafeEqual } from 'node:crypto';
+import { AppError } from '../domain/errors.js';
+const ACTION_TTL_MS = 15 * 60 * 1000;
+/**
+ * One-time, short-lived, principal-bound actions used for URL-mode secret
+ * elicitation. The URL only ever carries the action id + an HMAC signature;
+ * the secret itself never leaves the user's browser/control session and never
+ * travels through tool arguments or results.
+ */
+export class SecureActionService {
+    #store;
+    #key;
+    #publicUrl;
+    constructor(store, masterKey, publicUrl) {
+        this.#store = store;
+        this.#key = createHash('sha256').update(masterKey).digest();
+        this.#publicUrl = publicUrl;
+    }
+    create(kind, target, principalId, ttlMs = ACTION_TTL_MS) {
+        const action = this.#store.createSecureAction({
+            kind,
+            target,
+            principalId,
+            status: 'pending',
+            valuesJson: '{}',
+            expiresAt: new Date(Date.now() + ttlMs).toISOString(),
+            completedAt: null,
+        });
+        const token = this.#mint(action);
+        return { action, token, url: this.#url(action, token) };
+    }
+    /** Verify token + expiry + one-time use; the token carries the principal binding. */
+    verify(id, token, principalId) {
+        const action = this.#store.getSecureAction(id);
+        if (!action)
+            throw new AppError('secure_action_not_found', 'Secure action not found', 404);
+        if (action.status !== 'pending') {
+            throw new AppError('secure_action_used', 'Secure action was already used', 400);
+        }
+        if (Date.parse(action.expiresAt) < Date.now()) {
+            throw new AppError('secure_action_expired', 'Secure action has expired', 400);
+        }
+        this.#verifyToken(action, token, principalId);
+        return action;
+    }
+    complete(id, token, principalId, values) {
+        this.verify(id, token, principalId);
+        return this.#store.completeSecureAction(id, JSON.stringify(values), new Date().toISOString());
+    }
+    #verifyToken(action, token, principalId) {
+        if (principalId !== undefined && action.principalId !== principalId) {
+            throw new AppError('forbidden', 'Secure action belongs to another principal', 403);
+        }
+        const expected = this.#mint(action);
+        const actual = Buffer.from(token);
+        const check = Buffer.from(expected);
+        if (actual.length !== check.length || !timingSafeEqual(actual, check)) {
+            throw new AppError('secure_action_invalid', 'Invalid secure action token', 400);
+        }
+    }
+    #mint(action) {
+        const payload = `${action.id}.${action.kind}.${action.target}.${action.principalId}.${action.expiresAt}`;
+        return createHmac('sha256', this.#key).update(payload).digest('hex');
+    }
+    #url(action, token) {
+        return new URL(`/market/actions/${action.id}?token=${encodeURIComponent(token)}`, this.#publicUrl).toString();
+    }
+}
+//# sourceMappingURL=secure-action.js.map

package/dist/server/security/secure-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-action.js","sourceRoot":"","sources":["../../../src/security/secure-action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAI/C,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IACrB,MAAM,CAAQ;IACd,IAAI,CAAS;IACb,UAAU,CAAM;IAEzB,YAAY,KAAY,EAAE,SAAiB,EAAE,SAAc;QACzD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,MAAM,CACJ,IAAsB,EACtB,MAAc,EACd,WAAmB,EACnB,KAAK,GAAG,aAAa;QAErB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC5C,IAAI;YACJ,MAAM;YACN,WAAW;YACX,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;YACrD,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,qFAAqF;IACrF,MAAM,CAAC,EAAU,EAAE,KAAa,EAAE,WAAoB;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CACN,EAAU,EACV,KAAa,EACb,WAA+B,EAC/B,MAA8B;QAE9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,YAAY,CAAC,MAA0B,EAAE,KAAa,EAAE,WAAoB;QAC1E,IAAI,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACpE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,4CAA4C,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAA0B;QAC9B,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACzG,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,MAA0B,EAAE,KAAa;QAC5C,OAAO,IAAI,GAAG,CACZ,mBAAmB,MAAM,CAAC,EAAE,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACjE,IAAI,CAAC,UAAU,CAChB,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC;CACF"}

package/dist/server/storage/sqlite-store.d.ts

@@ -0,0 +1,70 @@
+import { type CliRecord, type CreateCliInput, type UpdateCliInput } from '../cli-plane/models.js';
+import { type ApiKeyKind, type ApiKeyRecord, type CapabilitySnapshot, type CreateCredentialInput, type CreateServerInput, type CredentialPayload, type CredentialRecord, type EventRecord, type InstallJobRecord, type MarketInstallation, type RuntimeState, type SecureActionRecord, type ServerProjection, type ServerRecord, type ToolCallDraft, type ToolCallFilter, type ToolCallRecord, type ToolCallSeriesBucket, type ToolCallSeriesQuery, type ToolCallStats, type ToolProjection, type UpdateCredentialInput, type UpdateServerInput, type Visibility } from '../domain/models.js';
+import type { SecretBox } from '../security/secret-box.js';
+import type { CreateKeyInput, ProjectionIndex, Store, StoredApiKey } from './store.js';
+export declare class SqliteStore implements Store {
+    #private;
+    constructor(databasePath: string, secrets: SecretBox);
+    close(): void;
+    transaction<T>(operation: () => T): T;
+    listServers(): ServerRecord[];
+    getServer(id: string): ServerRecord | null;
+    getServerBySlug(slug: string): ServerRecord | null;
+    createServer(input: CreateServerInput): ServerRecord;
+    updateServer(id: string, input: UpdateServerInput): ServerRecord;
+    deleteServer(id: string): void;
+    listClis(): CliRecord[];
+    getCli(id: string): CliRecord | null;
+    getCliBySlug(slug: string): CliRecord | null;
+    createCli(input: CreateCliInput): CliRecord;
+    updateCli(id: string, input: UpdateCliInput): CliRecord;
+    deleteCli(id: string): void;
+    listCredentials(): CredentialRecord[];
+    getCredential(id: string): CredentialRecord | null;
+    getCredentialPayload(id: string): CredentialPayload | null;
+    createCredential(input: CreateCredentialInput): CredentialRecord;
+    updateCredential(id: string, input: UpdateCredentialInput): CredentialRecord;
+    deleteCredential(id: string): void;
+    listApiKeys(kind: ApiKeyKind): ApiKeyRecord[];
+    createApiKey(input: CreateKeyInput): ApiKeyRecord;
+    getApiKey(id: string, kind: ApiKeyKind): ApiKeyRecord | null;
+    getApiKeyByDigest(kind: ApiKeyKind, digest: string): StoredApiKey | null;
+    revokeApiKey(id: string, kind: ApiKeyKind): void;
+    touchApiKey(id: string): void;
+    getSnapshot(serverId: string): CapabilitySnapshot | null;
+    saveSnapshot(snapshot: CapabilitySnapshot): CapabilitySnapshot;
+    deleteSnapshot(serverId: string): void;
+    getRuntimeState(serverId: string): RuntimeState | null;
+    saveRuntimeState(state: RuntimeState): RuntimeState;
+    appendEvent(event: Omit<EventRecord, 'id' | 'createdAt'>): EventRecord;
+    listEvents(options?: {
+        serverId?: string;
+        limit?: number;
+        level?: EventRecord['level'];
+        plane?: 'mcp' | 'cli';
+    }): EventRecord[];
+    getServerProjection(serverId: string): ServerProjection | null;
+    setServerProjection(serverId: string, defaultVisibility: Visibility): ServerProjection;
+    listToolProjections(serverId?: string): ToolProjection[];
+    setToolProjection(serverId: string, toolName: string, visibility: ToolProjection['visibility']): void;
+    getProjectionIndex(): ProjectionIndex;
+    insertToolCalls(calls: ToolCallDraft[]): number;
+    listToolCalls(filter: ToolCallFilter): ToolCallRecord[];
+    countToolCalls(filter: ToolCallFilter): number;
+    toolCallStats(filter: Omit<ToolCallFilter, 'limit' | 'offset'>): ToolCallStats;
+    toolCallSeries(query: ToolCallSeriesQuery): ToolCallSeriesBucket[];
+    deleteOldToolCalls(before: string): number;
+    listInstallations(): MarketInstallation[];
+    getInstallation(entryId: string): MarketInstallation | null;
+    createInstallation(input: Omit<MarketInstallation, 'id' | 'installedAt'>): MarketInstallation;
+    updateInstallation(id: string, patch: Partial<Pick<MarketInstallation, 'entryVersion' | 'recipeRevision'>>): MarketInstallation;
+    deleteInstallation(id: string): void;
+    createInstallJob(input: Omit<InstallJobRecord, 'id' | 'createdAt' | 'updatedAt'>): InstallJobRecord;
+    getInstallJob(id: string): InstallJobRecord | null;
+    updateInstallJob(id: string, patch: Partial<InstallJobRecord>): InstallJobRecord;
+    markInterruptedInstallJobs(): number;
+    createSecureAction(input: Omit<SecureActionRecord, 'id' | 'createdAt'>): SecureActionRecord;
+    getSecureAction(id: string): SecureActionRecord | null;
+    completeSecureAction(id: string, valuesJson: string, completedAt: string): SecureActionRecord;
+}
+//# sourceMappingURL=sqlite-store.d.ts.map

package/dist/server/storage/sqlite-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-store.d.ts","sourceRoot":"","sources":["../../../src/storage/sqlite-store.ts"],"names":[],"mappings":"AAkBA,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAcL,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAElB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAqOvF,qBAAa,WAAY,YAAW,KAAK;;IAIvC,YAAY,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAWnD;IAED,KAAK,IAAI,IAAI,CAEZ;IAED,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAUpC;IAiYD,WAAW,IAAI,YAAY,EAAE,CAG5B;IAED,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAGzC;IAED,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAGjD;IAED,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAyCnD;IAED,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,CA2C/D;IAED,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7B;IAED,QAAQ,IAAI,SAAS,EAAE,CAKtB;IAED,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAGnC;IAED,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG3C;IAED,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CA2C1C;IAED,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,SAAS,CAqCtD;IAED,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAG1B;IAED,eAAe,IAAI,gBAAgB,EAAE,CAKpC;IAED,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGjD;IAED,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAKzD;IAED,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CA8B/D;IAED,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CA+B3E;IAED,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAIjC;IAED,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,EAAE,CAO5C;IAED,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG,YAAY,CAchD;IAED,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CAG3D;IAED,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAUvE;IAED,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAO/C;IAED,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE5B;IAED,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAKvD;IAED,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAiD7D;IAED,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAErC;IAED,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAGrD;IAED,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CA8BlD;IAED,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,WAAW,CAiBrE;IAED,UAAU,CACR,OAAO,GAAE;QACP,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;KAClB,GACL,WAAW,EAAE,CAmBf;IAID,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAK7D;IAED,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU,GAAG,gBAAgB,CAgBrF;IAED,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CASvD;IAED,iBAAiB,CACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC,GACvC,IAAI,CAgBN;IAED,kBAAkB,IAAI,eAAe,CAoBpC;IAID,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,CA2B9C;IAED,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,EAAE,CAWtD;IAED,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAI7C;IAED,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,aAAa,CAuE7E;IAED,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,EAAE,CAwCjE;IAED,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYzC;IAID,iBAAiB,IAAI,kBAAkB,EAAE,CAKxC;IAED,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAO1D;IAED,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,aAAa,CAAC,GAAG,kBAAkB,CAwB5F;IAED,kBAAkB,CAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,GAAG,gBAAgB,CAAC,CAAC,GAC1E,kBAAkB,CAapB;IAED,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAEnC;IAED,gBAAgB,CACd,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,GAC9D,gBAAgB,CA8BlB;IAED,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGjD;IAED,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CA+B/E;IAED,0BAA0B,IAAI,MAAM,CASnC;IAID,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,kBAAkB,CAwB1F;IAED,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAGrD;IAED,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAsB5F;CAkQF"}