veryfront 0.1.1239 → 0.1.1241

package/esm/src/fs/index.d.ts

@@ -1,8 +1,36 @@
 /**
- * Public filesystem, path, and cwd utilities.
+ * Runtime-native filesystem, path, and cwd utilities.
  *
  * @module fs
  *
+ * @remarks
+ * ## Runtime boundary
+ *
+ * `veryfront/fs` uses the native process filesystem selected for Deno, Node, or Bun.
+ * It does not delegate to the `runtime.get().fs` adapter. Custom adapters
+ * configured with `runtime.set()` affect adapter-consuming APIs, not these
+ * compatibility functions.
+ *
+ * `veryfront/fs` does not add a project-root sandbox, block `.env` or other
+ * secret-file names, or validate paths from untrusted input. Relative paths
+ * resolve from `cwd()`. Absolute paths and `..` segments can reach any location
+ * that the runtime permits.
+ *
+ * Runtime permissions remain the outer boundary. Hosted project secrets are
+ * supplied through request-owned environment data rather than `.env` files.
+ * Isolated Pages route `ctx.fs` is a separate, read-only, project-confined
+ * capability. Those protections do not change the contract of `veryfront/fs`.
+ *
+ * Canonicalize a trusted root and candidate with `realPath`, then use
+ * `validateLexicalPath` from `veryfront/security` before reading a
+ * user-influenced path. Canonicalization follows existing symlinks before the
+ * containment check.
+ *
+ * Path admission is not an operating-system sandbox.
+ * The trusted root must not be writable by untrusted or project code while a
+ * validated path is in use. Otherwise, concurrent filesystem changes can
+ * create a time-of-check/time-of-use race between validation and reading.
+ *
  * @example File operations
  * ```ts
  * import { exists, mkdir, readTextFile, writeTextFile } from "veryfront/fs";
@@ -26,6 +54,27 @@
  *
  * const configPath = resolve(cwd(), "veryfront.config.ts");
  * ```
+ *
+ * @example Confine an untrusted path
+ * ```ts
+ * import { cwd, readTextFile, realPath, resolve } from "veryfront/fs";
+ * import { validateLexicalPath } from "veryfront/security";
+ *
+ * const publicFilesDir = await realPath(resolve(cwd(), "public-data"));
+ *
+ * export async function readPublicFile(requestedPath: string): Promise<string> {
+ *   const candidate = resolve(publicFilesDir, requestedPath);
+ *   const canonicalPath = await realPath(candidate);
+ *   const admitted = validateLexicalPath(canonicalPath, {
+ *     baseDir: publicFilesDir,
+ *     allowAbsolute: true,
+ *   });
+ *   if (!admitted.valid || !admitted.canonicalPath) {
+ *     throw new Error("Invalid path");
+ *   }
+ *   return await readTextFile(admitted.canonicalPath);
+ * }
+ * ```
  */
 import "../../_dnt.polyfills.js";
 export { createFileSystem, exists, type FileSystem, isNotFoundError, lstat, mkdir, readDir, readTextFile, realPath, remove, writeTextFile, } from "../platform/compat/fs.js";

package/esm/src/fs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/fs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,EACL,gBAAgB,EAChB,MAAM,EACN,KAAK,UAAU,EACf,eAAe,EACf,KAAK,EACL,KAAK,EACL,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,OAAO,EACP,IAAI,EACJ,OAAO,GACR,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAC;AAEpD,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,6CAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/fs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,EACL,gBAAgB,EAChB,MAAM,EACN,KAAK,UAAU,EACf,eAAe,EACf,KAAK,EACL,KAAK,EACL,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,OAAO,EACP,IAAI,EACJ,OAAO,GACR,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAC;AAEpD,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,6CAA6C,CAAC"}

package/esm/src/fs/index.js

@@ -1,8 +1,36 @@
 /**
- * Public filesystem, path, and cwd utilities.
+ * Runtime-native filesystem, path, and cwd utilities.
  *
  * @module fs
  *
+ * @remarks
+ * ## Runtime boundary
+ *
+ * `veryfront/fs` uses the native process filesystem selected for Deno, Node, or Bun.
+ * It does not delegate to the `runtime.get().fs` adapter. Custom adapters
+ * configured with `runtime.set()` affect adapter-consuming APIs, not these
+ * compatibility functions.
+ *
+ * `veryfront/fs` does not add a project-root sandbox, block `.env` or other
+ * secret-file names, or validate paths from untrusted input. Relative paths
+ * resolve from `cwd()`. Absolute paths and `..` segments can reach any location
+ * that the runtime permits.
+ *
+ * Runtime permissions remain the outer boundary. Hosted project secrets are
+ * supplied through request-owned environment data rather than `.env` files.
+ * Isolated Pages route `ctx.fs` is a separate, read-only, project-confined
+ * capability. Those protections do not change the contract of `veryfront/fs`.
+ *
+ * Canonicalize a trusted root and candidate with `realPath`, then use
+ * `validateLexicalPath` from `veryfront/security` before reading a
+ * user-influenced path. Canonicalization follows existing symlinks before the
+ * containment check.
+ *
+ * Path admission is not an operating-system sandbox.
+ * The trusted root must not be writable by untrusted or project code while a
+ * validated path is in use. Otherwise, concurrent filesystem changes can
+ * create a time-of-check/time-of-use race between validation and reading.
+ *
  * @example File operations
  * ```ts
  * import { exists, mkdir, readTextFile, writeTextFile } from "veryfront/fs";
@@ -26,6 +54,27 @@
  *
  * const configPath = resolve(cwd(), "veryfront.config.ts");
  * ```
+ *
+ * @example Confine an untrusted path
+ * ```ts
+ * import { cwd, readTextFile, realPath, resolve } from "veryfront/fs";
+ * import { validateLexicalPath } from "veryfront/security";
+ *
+ * const publicFilesDir = await realPath(resolve(cwd(), "public-data"));
+ *
+ * export async function readPublicFile(requestedPath: string): Promise<string> {
+ *   const candidate = resolve(publicFilesDir, requestedPath);
+ *   const canonicalPath = await realPath(candidate);
+ *   const admitted = validateLexicalPath(canonicalPath, {
+ *     baseDir: publicFilesDir,
+ *     allowAbsolute: true,
+ *   });
+ *   if (!admitted.valid || !admitted.canonicalPath) {
+ *     throw new Error("Invalid path");
+ *   }
+ *   return await readTextFile(admitted.canonicalPath);
+ * }
+ * ```
  */
 import "../../_dnt.polyfills.js";
 export { createFileSystem, exists, isNotFoundError, lstat, mkdir, readDir, readTextFile, realPath, remove, writeTextFile, } from "../platform/compat/fs.js";

package/esm/src/html/html-injection.d.ts

@@ -42,6 +42,8 @@ export interface InjectHTMLContentOptions {
     dependencyPinningCacheKey?: string;
     /** Ready release asset manifest used to hydrate full HTML client pages */
     releaseAssetManifest?: ReleaseAssetManifest | null;
+    /** Production hydration runtime selected from the rendered artifact set */
+    prodHydrationModulePath?: string;
     /** Configured route directories used to map physical page paths to route keys */
     directories?: ConfiguredRouteDirectories;
 }

package/esm/src/html/html-injection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"html-injection.d.ts","sourceRoot":"","sources":["../../../src/src/html/html-injection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAuB/D,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAuBjF,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,gDAAgD;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IACvC,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,iFAAiF;IACjF,WAAW,CAAC,EAAE,0BAA0B,CAAC;CAC1C;AAsCD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,wBAAwB,GAChC,MAAM,CAuIR"}
+{"version":3,"file":"html-injection.d.ts","sourceRoot":"","sources":["../../../src/src/html/html-injection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAwB/D,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAuBjF,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,gDAAgD;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IACvC,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,iFAAiF;IACjF,WAAW,CAAC,EAAE,0BAA0B,CAAC;CAC1C;AAsCD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,wBAAwB,GAChC,MAAM,CAyIR"}

package/esm/src/html/html-injection.js

@@ -4,6 +4,7 @@ import { generateLinkTags, generateMetaTags, generateScriptTags, generateStyleTa
 import { buildNonceAttribute, escapeHTML } from "./html-escape.js";
 import { escapeInlineJsonText, jsonForInlineScript, } from "../security/client/html-sanitizer.js";
 import { getDevScripts, getDevStyles, getPreviewStylesheetLink, getProdScripts, getStudioScripts, } from "./dev-scripts.js";
+import { getProdScriptsForPath } from "./hydration-script-builder/prod-scripts.js";
 import { PROJECT_STYLESHEET_IDS } from "./project-stylesheet-ids.js";
 import { buildReleaseAssetModules } from "../release-assets/client-module-map.js";
 import { routeForConfiguredPage, } from "../release-assets/route-path.js";
@@ -135,7 +136,9 @@ export function injectHTMLContent(template, content, metadata, options) {
     else {
         html = html.replace(/{{\s*devScripts\s*}}/gi, "");
         html = html.replace(/{{\s*devStyles\s*}}/gi, "");
-        const prodScripts = getProdScripts(options.slug, options.nonce);
+        const prodScripts = options.prodHydrationModulePath
+            ? getProdScriptsForPath(options.prodHydrationModulePath, options.nonce)
+            : getProdScripts(options.slug, options.nonce);
         const hasProdScriptsPlaceholder = /{{\s*prodScripts\s*}}/i.test(html);
         if (hasProdScriptsPlaceholder) {
             html = html.replace(/{{\s*prodScripts\s*}}/gi, prodScripts);

package/esm/src/html/html-shell-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"html-shell-generator.d.ts","sourceRoot":"","sources":["../../../src/src/html/html-shell-generator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA+BxE,OAAO,EAGL,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA4DxD,KAAK,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,GAAG,IAAI,CAAC;AAgFzE,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,qBAAqB,EAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAC1C,KAAK,CAAC,EAAE,cAAc,EACtB,kBAAkB,CAAC,EAAE,MAAM,EAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAC7C,sBAAsB,CAAC,EAAE;IAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBzC;AAgSD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,qBAAqB,EAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAC1C,KAAK,CAAC,EAAE,cAAc,EACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAC5C,OAAO,CAAC,MAAM,CAAC,CAoBjB"}
+{"version":3,"file":"html-shell-generator.d.ts","sourceRoot":"","sources":["../../../src/src/html/html-shell-generator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgCxE,OAAO,EAGL,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA4DxD,KAAK,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,GAAG,IAAI,CAAC;AAgFzE,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,qBAAqB,EAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAC1C,KAAK,CAAC,EAAE,cAAc,EACtB,kBAAkB,CAAC,EAAE,MAAM,EAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAC7C,sBAAsB,CAAC,EAAE;IAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBzC;AAwSD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,qBAAqB,EAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAC1C,KAAK,CAAC,EAAE,cAAc,EACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAC5C,OAAO,CAAC,MAAM,CAAC,CAoBjB"}

package/esm/src/html/html-shell-generator.js

@@ -1,3 +1,4 @@
+import { RENDER_ERROR } from "../errors/index.js";
 import { isAbsolute, resolve } from "../platform/compat/path/index.js";
 import { profilePhase, SpanNames } from "../observability/index.js";
 import { withSpan } from "../observability/tracing/otlp-setup.js";
@@ -10,7 +11,8 @@ import { routeForPage } from "../release-assets/route-path.js";
 import { VERSION } from "../utils/version.js";
 import { buildNonceAttribute, escapeHTML } from "./html-escape.js";
 import { HEAD_SHELL_PROVENANCE_ATTRIBUTE } from "./managed-head-protocol.js";
-import { generateHydrationData, getDevScripts, getProdHydrationModulePath, getProdScripts, } from "./hydration-script-builder/index.js";
+import { generateHydrationData, getDevScripts, getProdHydrationModulePath, } from "./hydration-script-builder/index.js";
+import { getProdScriptsForPath } from "./hydration-script-builder/prod-scripts.js";
 import { getPreviewStylesheetLink, getStudioScripts } from "./dev-scripts.js";
 import { processMetadata } from "./metadata-builder.js";
 import { extractCandidates, getDevStyles as getErrorOverlayStyles, getProjectCSS, } from "./styles-builder/index.js";
@@ -166,6 +168,12 @@ async function generateHTMLShellPartsImpl(meta, options, params, props, contentF
         managedHeadPayload: hydrationDataOverrides?.managedHeadPayload ?? managedHeadPayload,
     });
     const nonce = options.nonce ?? "";
+    const prodHydrationModulePath = options.prodHydrationModulePath;
+    if (!useDevScripts && options.releaseId && !prodHydrationModulePath) {
+        throw RENDER_ERROR.create({
+            detail: "Release hydration runtime must be selected before HTML generation",
+        });
+    }
     const modeScripts = useDevScripts
         ? getDevScripts(meta.slug || "", options.config, params, props, nonce, {
             skipDevHMR,
@@ -174,7 +182,7 @@ async function generateHTMLShellPartsImpl(meta, options, params, props, contentF
             // development render even though it serves the dev scripts for HMR.
             skipDevFlag: isPreviewMode,
         })
-        : getProdScripts(meta.slug || "", params, props, nonce);
+        : getProdScriptsForPath(prodHydrationModulePath ?? getProdHydrationModulePath(), nonce);
     const modeStyles = useDevScripts ? getErrorOverlayStyles(nonce) : "";
     const modulePreloadHints = generateModulePreloadHints(options, releaseManifest);
     const importMap = await profilePhase("html.import_map", () => importMapPromise);
@@ -187,7 +195,7 @@ async function generateHTMLShellPartsImpl(meta, options, params, props, contentF
         : "";
     const prodHydrationModulePreload = useDevScripts
         ? ""
-        : `<link rel="modulepreload" href="${getProdHydrationModulePath()}">`;
+        : `<link rel="modulepreload" href="${prodHydrationModulePath ?? getProdHydrationModulePath()}">`;
     const nonceAttr = buildNonceAttribute(nonce);
     // Expose project slug for runtime error overlay "Fix in Veryfront" button
     const overlaySlug = options.projectId || meta.slug;

package/esm/src/html/hydration-script-builder/hydration-runtime.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hydration-runtime.generated.d.ts","sourceRoot":"","sources":["../../../../src/src/html/hydration-script-builder/hydration-runtime.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,wBAAwB,EAAE,MAC044E,CAAC"}
+{"version":3,"file":"hydration-runtime.generated.d.ts","sourceRoot":"","sources":["../../../../src/src/html/hydration-script-builder/hydration-runtime.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,wBAAwB,EAAE,MACig5E,CAAC"}