visus-mcp 0.6.2 → 0.8.0

package/lambda-package/package.json

@@ -1,74 +0,0 @@
-{
-  "name": "visus-mcp",
-  "version": "0.6.1",
-  "mcpName": "io.github.leochong/visus-mcp",
-  "description": "Security-first MCP server. Sanitizes web content before it reaches your LLM — strips prompt injection, redacts PII, and reduces token consumption by up to 70%.",
-  "main": "dist/index.js",
-  "bin": {
-    "visus-mcp": "dist/index.js"
-  },
-  "type": "module",
-  "scripts": {
-    "build": "tsc",
-    "test": "jest",
-    "test:integration": "jest --testMatch='**/tests/**/*.integration.test.ts' --forceExit",
-    "lint": "tsc --noEmit",
-    "dev": "tsc --watch",
-    "cdk": "cdk",
-    "cdk:synth": "cdk synth",
-    "cdk:deploy": "npm run build && cdk deploy",
-    "cdk:deploy:dev": "npm run build && cdk deploy VisusStack-dev",
-    "cdk:deploy:prod": "npm run build && cdk deploy VisusStack-prod",
-    "cdk:diff": "cdk diff",
-    "cdk:destroy": "cdk destroy",
-    "cdk:bootstrap": "cdk bootstrap"
-  },
-  "keywords": [
-    "mcp",
-    "claude",
-    "web-fetch",
-    "security",
-    "prompt-injection",
-    "pii-redaction",
-    "anthropic"
-  ],
-  "author": "Roongrunchai Chongolnee <contact@lateos.ai>",
-  "homepage": "https://github.com/visus-mcp/visus-mcp",
-  "license": "MIT",
-  "engines": {
-    "node": ">=18"
-  },
-  "dependencies": {
-    "@aws-sdk/client-dynamodb": "^3.1014.0",
-    "@aws-sdk/lib-dynamodb": "^3.1014.0",
-    "@modelcontextprotocol/sdk": "^1.0.4",
-    "@mozilla/readability": "^0.6.0",
-    "@playwright/test": "^1.58.2",
-    "@toon-format/toon": "^2.1.0",
-    "cheerio": "^1.2.0",
-    "fast-xml-parser": "^5.5.8",
-    "jsdom": "^29.0.1",
-    "playwright": "^1.58.2",
-    "undici": "^7.24.5"
-  },
-  "devDependencies": {
-    "@types/aws-lambda": "^8.10.161",
-    "@types/jest": "^29.5.14",
-    "@types/jsdom": "^28.0.1",
-    "@types/node": "^20.19.37",
-    "aws-cdk": "^2.1112.0",
-    "aws-cdk-lib": "^2.244.0",
-    "constructs": "^10.5.1",
-    "jest": "^29.7.0",
-    "ts-jest": "^29.2.5",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.7.2"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/visus-mcp/visus-mcp.git"
-  },
-  "bugs": {
-    "url": "https://github.com/visus-mcp/visus-mcp/issues"
-  }
-}

package/lambda-package/runtime.d.ts

@@ -1,50 +0,0 @@
-/**
- * Runtime Detection - Dual-Mode Support
- *
- * Detects execution environment and provides appropriate entry points:
- * - stdio MCP server (npx visus-mcp)
- * - AWS Lambda function (API Gateway + Lambda)
- *
- * This enables a unified codebase for both open-source and hosted tiers.
- */
-/**
- * Runtime environment types
- */
-export type RuntimeEnvironment = 'stdio' | 'lambda' | 'unknown';
-/**
- * Runtime configuration
- */
-export interface RuntimeConfig {
-    environment: RuntimeEnvironment;
-    isLambda: boolean;
-    isStdio: boolean;
-    region?: string;
-    functionName?: string;
-}
-/**
- * Detect current runtime environment
- *
- * Detection logic:
- * 1. AWS_LAMBDA_FUNCTION_NAME exists → Lambda
- * 2. VISUS_MCP_MODE=stdio → stdio (explicit override)
- * 3. stdin is a TTY → unknown/error
- * 4. Default → stdio (MCP server mode)
- *
- * @returns Runtime configuration
- */
-export declare function detectRuntime(): RuntimeConfig;
-/**
- * Log runtime configuration to stderr
- * (MCP protocol uses stdout for JSON-RPC, so logs go to stderr)
- *
- * @param config Runtime configuration
- */
-export declare function logRuntimeConfig(config: RuntimeConfig): void;
-/**
- * Validate runtime environment is appropriate for operation
- *
- * @param config Runtime configuration
- * @throws Error if runtime is unknown or invalid
- */
-export declare function validateRuntime(config: RuntimeConfig): void;
-//# sourceMappingURL=runtime.d.ts.map

package/lambda-package/runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAgC7C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAY5D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAa3D"}

package/lambda-package/runtime.js

@@ -1,86 +0,0 @@
-/**
- * Runtime Detection - Dual-Mode Support
- *
- * Detects execution environment and provides appropriate entry points:
- * - stdio MCP server (npx visus-mcp)
- * - AWS Lambda function (API Gateway + Lambda)
- *
- * This enables a unified codebase for both open-source and hosted tiers.
- */
-/**
- * Detect current runtime environment
- *
- * Detection logic:
- * 1. AWS_LAMBDA_FUNCTION_NAME exists → Lambda
- * 2. VISUS_MCP_MODE=stdio → stdio (explicit override)
- * 3. stdin is a TTY → unknown/error
- * 4. Default → stdio (MCP server mode)
- *
- * @returns Runtime configuration
- */
-export function detectRuntime() {
-    // Check for AWS Lambda environment
-    const lambdaFunctionName = process.env.AWS_LAMBDA_FUNCTION_NAME;
-    const lambdaRegion = process.env.AWS_REGION;
-    if (lambdaFunctionName) {
-        return {
-            environment: 'lambda',
-            isLambda: true,
-            isStdio: false,
-            region: lambdaRegion,
-            functionName: lambdaFunctionName,
-        };
-    }
-    // Check for explicit stdio mode (for testing or edge cases)
-    const explicitMode = process.env.VISUS_MCP_MODE;
-    if (explicitMode === 'stdio') {
-        return {
-            environment: 'stdio',
-            isLambda: false,
-            isStdio: true,
-        };
-    }
-    // Default to stdio mode (MCP server)
-    // This is the open-source tier default
-    return {
-        environment: 'stdio',
-        isLambda: false,
-        isStdio: true,
-    };
-}
-/**
- * Log runtime configuration to stderr
- * (MCP protocol uses stdout for JSON-RPC, so logs go to stderr)
- *
- * @param config Runtime configuration
- */
-export function logRuntimeConfig(config) {
-    const logEntry = {
-        timestamp: new Date().toISOString(),
-        event: 'runtime_detected',
-        environment: config.environment,
-        lambda: config.isLambda ? {
-            function_name: config.functionName,
-            region: config.region,
-        } : undefined,
-    };
-    console.error(JSON.stringify(logEntry));
-}
-/**
- * Validate runtime environment is appropriate for operation
- *
- * @param config Runtime configuration
- * @throws Error if runtime is unknown or invalid
- */
-export function validateRuntime(config) {
-    if (config.environment === 'unknown') {
-        throw new Error('Unknown runtime environment. Set VISUS_MCP_MODE=stdio or run in AWS Lambda.');
-    }
-    // In Lambda, ensure required environment variables are set
-    if (config.isLambda) {
-        if (!process.env.AWS_REGION) {
-            throw new Error('AWS_REGION must be set in Lambda environment');
-        }
-    }
-}
-//# sourceMappingURL=runtime.js.map

package/lambda-package/runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa;IAC3B,mCAAmC;IACnC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAE5C,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY;YACpB,YAAY,EAAE,kBAAkB;SACjC,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAChD,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,WAAW,EAAE,OAAO;YACpB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,uCAAuC;IACvC,OAAO;QACL,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;AACH,CAAC"}

package/lambda-package/sanitizer/elicit-runner.d.ts

@@ -1,48 +0,0 @@
-/**
- * Elicitation Runner
- *
- * Executes MCP elicitation requests with comprehensive error handling
- * and fail-safe behavior. If elicitation fails for ANY reason, the
- * sanitized content is delivered — security is never compromised.
- *
- * Error handling includes:
- * - Client doesn't support elicitation
- * - Client timeout
- * - Network errors
- * - Unexpected responses
- *
- * Fail-safe principle: Elicitation is UX. Sanitization is security.
- * Never block content delivery due to elicitation failures.
- */
-import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import type { ThreatReport } from './threat-reporter.js';
-/**
- * Result of elicitation execution
- */
-export interface ElicitationResult {
-    /** Whether user chose to proceed with sanitized content */
-    proceed: boolean;
-    /** Whether to include threat report in response */
-    includeReport: boolean;
-}
-/**
- * Runs MCP elicitation for CRITICAL threat confirmation
- *
- * Three possible outcomes:
- * 1. User accepts → proceed: true, includeReport: user's choice
- * 2. User declines → proceed: false, includeReport: false
- * 3. User cancels → proceed: false, includeReport: false
- *
- * Fail-safe: Any error → proceed: true, includeReport: true
- * (Content reaches user in sanitized form, security maintained)
- *
- * CRITICAL: Only ONE elicitation per tool call is allowed per MCP spec.
- * Calling this function twice in the same request will cause timeout.
- *
- * @param server The MCP server instance
- * @param threatReport The CRITICAL threat report
- * @param url The source URL
- * @returns Elicitation result with proceed and includeReport flags
- */
-export declare function runElicitation(server: Server, threatReport: ThreatReport, url: string): Promise<ElicitationResult>;
-//# sourceMappingURL=elicit-runner.d.ts.map

package/lambda-package/sanitizer/elicit-runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"elicit-runner.d.ts","sourceRoot":"","sources":["../../src/sanitizer/elicit-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,mDAAmD;IACnD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,iBAAiB,CAAC,CAsE5B"}

package/lambda-package/sanitizer/elicit-runner.js

@@ -1,100 +0,0 @@
-/**
- * Elicitation Runner
- *
- * Executes MCP elicitation requests with comprehensive error handling
- * and fail-safe behavior. If elicitation fails for ANY reason, the
- * sanitized content is delivered — security is never compromised.
- *
- * Error handling includes:
- * - Client doesn't support elicitation
- * - Client timeout
- * - Network errors
- * - Unexpected responses
- *
- * Fail-safe principle: Elicitation is UX. Sanitization is security.
- * Never block content delivery due to elicitation failures.
- */
-import { buildElicitMessage, ElicitSchema } from './hitl-gate.js';
-/**
- * Runs MCP elicitation for CRITICAL threat confirmation
- *
- * Three possible outcomes:
- * 1. User accepts → proceed: true, includeReport: user's choice
- * 2. User declines → proceed: false, includeReport: false
- * 3. User cancels → proceed: false, includeReport: false
- *
- * Fail-safe: Any error → proceed: true, includeReport: true
- * (Content reaches user in sanitized form, security maintained)
- *
- * CRITICAL: Only ONE elicitation per tool call is allowed per MCP spec.
- * Calling this function twice in the same request will cause timeout.
- *
- * @param server The MCP server instance
- * @param threatReport The CRITICAL threat report
- * @param url The source URL
- * @returns Elicitation result with proceed and includeReport flags
- */
-export async function runElicitation(server, threatReport, url) {
-    try {
-        // Build user-facing message
-        const message = buildElicitMessage(threatReport, url);
-        // Execute elicitation
-        const result = await server.elicitInput({
-            mode: 'form',
-            message,
-            requestedSchema: ElicitSchema // Type cast due to SDK's strict schema definition
-        });
-        // Handle user response
-        if (result.action === 'accept') {
-            // User explicitly accepted
-            // Content values can be string | number | boolean | string[]
-            const proceed = result.content?.proceed === true || result.content?.proceed === 'true';
-            const includeReport = result.content?.view_report === true || result.content?.view_report === 'true' || result.content?.view_report === undefined;
-            return {
-                proceed,
-                includeReport: proceed ? includeReport : false // Only include report if proceeding
-            };
-        }
-        if (result.action === 'decline') {
-            // User explicitly declined
-            return {
-                proceed: false,
-                includeReport: false
-            };
-        }
-        if (result.action === 'cancel') {
-            // User canceled or dismissed dialog
-            return {
-                proceed: false,
-                includeReport: false
-            };
-        }
-        // Unknown action (should never happen)
-        console.error(JSON.stringify({
-            timestamp: new Date().toISOString(),
-            event: 'elicitation_unknown_action',
-            action: result.action,
-            message: 'Unexpected elicitation action, proceeding with sanitized content (fail-safe)'
-        }));
-        return {
-            proceed: true,
-            includeReport: true
-        };
-    }
-    catch (error) {
-        // Elicitation failed — FAIL SAFE
-        // Client may not support elicitation, or timeout occurred
-        // Proceed with sanitized content + include report
-        console.error(JSON.stringify({
-            timestamp: new Date().toISOString(),
-            event: 'elicitation_failed',
-            error: error instanceof Error ? error.message : String(error),
-            message: 'Elicitation not supported or timed out, proceeding with sanitized content (fail-safe)'
-        }));
-        return {
-            proceed: true,
-            includeReport: true
-        };
-    }
-}
-//# sourceMappingURL=elicit-runner.js.map

package/lambda-package/sanitizer/elicit-runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"elicit-runner.js","sourceRoot":"","sources":["../../src/sanitizer/elicit-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAYlE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,YAA0B,EAC1B,GAAW;IAEX,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAEtD,sBAAsB;QACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,MAAe;YACrB,OAAO;YACP,eAAe,EAAE,YAAmB,CAAC,kDAAkD;SACxF,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,2BAA2B;YAC3B,6DAA6D;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;YACvF,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC;YAElJ,OAAO;gBACL,OAAO;gBACP,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,oCAAoC;aACpF,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,2BAA2B;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,KAAK;aACrB,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,oCAAoC;YACpC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,KAAK;aACrB,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,4BAA4B;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,8EAA8E;SACxF,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,IAAI;SACpB,CAAC;IAEJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iCAAiC;QACjC,0DAA0D;QAC1D,kDAAkD;QAClD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,oBAAoB;YAC3B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,OAAO,EAAE,uFAAuF;SACjG,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/lambda-package/sanitizer/framework-mapper.d.ts

@@ -1,24 +0,0 @@
-/**
- * Compliance Framework Mapper
- *
- * Maps injection pattern categories to compliance framework identifiers:
- * - OWASP LLM Top 10 (2025)
- * - NIST AI 600-1 (Generative AI Profile)
- * - MITRE ATLAS (Adversarial Threat Landscape for AI Systems)
- * - ISO/IEC 42001:2023 (AI Management System - Annex A Controls)
- */
-export interface FrameworkMappings {
-    owasp_llm: string;
-    nist_ai_600_1: string;
-    mitre_atlas: string;
-    iso_42001: string;
-}
-/**
- * Get framework mappings for a pattern category
- */
-export declare function getFrameworkMappings(patternCategory: string): FrameworkMappings;
-/**
- * Get all supported frameworks
- */
-export declare function getSupportedFrameworks(): string[];
-//# sourceMappingURL=framework-mapper.d.ts.map

package/lambda-package/sanitizer/framework-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"framework-mapper.d.ts","sourceRoot":"","sources":["../../src/sanitizer/framework-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAyWD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,GAAG,iBAAiB,CAE/E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAOjD"}