@plumix/core 0.1.0

package/dist/db/schema/api_tokens.d.ts

@@ -0,0 +1,497 @@
+export declare const apiTokens: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "api_tokens";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "id";
+            tableName: "api_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        userId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "userId";
+            tableName: "api_tokens";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "name";
+            tableName: "api_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        prefix: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "prefix";
+            tableName: "api_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        expiresAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "expiresAt";
+            tableName: "api_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        scopes: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "scopes";
+            tableName: "api_tokens";
+            dataType: "json";
+            columnType: "SQLiteTextJson";
+            data: readonly string[];
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: readonly string[];
+        }>;
+        lastUsedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "lastUsedAt";
+            tableName: "api_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        revokedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "revokedAt";
+            tableName: "api_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "createdAt";
+            tableName: "api_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;
+export type ApiToken = typeof apiTokens.$inferSelect;
+export type NewApiToken = typeof apiTokens.$inferInsert;
+export declare const apiTokenInsertSchema: import("drizzle-valibot").BuildSchema<"insert", {
+    id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "id";
+        tableName: "api_tokens";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: undefined;
+    }>;
+    userId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "userId";
+        tableName: "api_tokens";
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    name: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "name";
+        tableName: "api_tokens";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: undefined;
+    }>;
+    prefix: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "prefix";
+        tableName: "api_tokens";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: undefined;
+    }>;
+    expiresAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "expiresAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    scopes: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "scopes";
+        tableName: "api_tokens";
+        dataType: "json";
+        columnType: "SQLiteTextJson";
+        data: readonly string[];
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        $type: readonly string[];
+    }>;
+    lastUsedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "lastUsedAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    revokedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "revokedAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "createdAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+}, undefined>;
+export declare const apiTokenSelectSchema: import("drizzle-valibot").BuildSchema<"select", {
+    id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "id";
+        tableName: "api_tokens";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: undefined;
+    }>;
+    userId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "userId";
+        tableName: "api_tokens";
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    name: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "name";
+        tableName: "api_tokens";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: undefined;
+    }>;
+    prefix: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "prefix";
+        tableName: "api_tokens";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: undefined;
+    }>;
+    expiresAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "expiresAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    scopes: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "scopes";
+        tableName: "api_tokens";
+        dataType: "json";
+        columnType: "SQLiteTextJson";
+        data: readonly string[];
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        $type: readonly string[];
+    }>;
+    lastUsedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "lastUsedAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    revokedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "revokedAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "createdAt";
+        tableName: "api_tokens";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+}, undefined>;
+//# sourceMappingURL=api_tokens.d.ts.map

package/dist/db/schema/api_tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_tokens.d.ts","sourceRoot":"","sources":["../../../src/db/schema/api_tokens.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDrB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACrD,MAAM,MAAM,WAAW,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AAExD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAgC,CAAC;AAClE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAgC,CAAC"}

package/dist/db/schema/api_tokens.js

@@ -0,0 +1,72 @@
+import { sql } from "drizzle-orm";
+import { index, sqliteTable } from "drizzle-orm/sqlite-core";
+import { createInsertSchema, createSelectSchema } from "drizzle-valibot";
+import { users } from "./users.js";
+// Personal access tokens. Stored as the SHA-256 hash of the raw token
+// secret (the secret itself is shown to the user exactly once, never
+// recoverable). Format on the wire: `pl_pat_<32-byte base64url>`.
+//
+// `prefix` keeps a short readable fragment of the secret (e.g.
+// `pl_pat_abc1`) so the admin's token list can identify which row is
+// which without ever storing the full secret. GitHub does this with
+// `ghp_xxxxxxxxxxxxxxxx_xxxx`; we keep the displayed fragment short
+// and human-friendly.
+//
+// `scopes` constrains what the token may do. Stored as a JSON array of
+// capability strings (`"entry:post:read"`, `"settings:manage"`, …) or
+// null. null = inherit unrestricted from the user's current role caps;
+// non-null array = intersection of the array with role caps (so a token
+// can never exceed the user's role even if it requests a cap the user
+// no longer has). Empty array `[]` is legal and means "no caps" — a
+// token kept around for revocation timing without granting access.
+// `auth.can()` is the single chokepoint that consults this — every
+// capability check in core + plugins goes through it.
+export const apiTokens = sqliteTable("api_tokens", (t) => ({
+    /** SHA-256 hash of the raw token. Looked up on every authed request. */
+    id: t.text().primaryKey(),
+    userId: t
+        .integer()
+        .notNull()
+        .references(() => users.id, { onDelete: "cascade" }),
+    /** Human-readable label set by the user — "GitHub Actions deploy", "MCP server". */
+    name: t.text().notNull(),
+    /**
+     * Short readable fragment of the secret (e.g. `pl_pat_abc1`). The
+     * token list shows this so the user can identify the token without
+     * the full secret being recoverable. Shown alongside `lastUsedAt`
+     * so a user with three tokens can tell which is which.
+     */
+    prefix: t.text().notNull(),
+    /**
+     * Optional expiry. Null = never expires. Operators are nudged to
+     * set one; the create form defaults to 90 days but allows "never"
+     * for tokens used by long-lived infra (CI bots, MCP servers).
+     */
+    expiresAt: t.integer({ mode: "timestamp" }),
+    /**
+     * Capability scope whitelist. null = unrestricted (inherits the
+     * user's current role caps). Non-null = intersection of this list
+     * with the user's role caps — so the token can never escalate even
+     * if it lists a cap the user no longer has. See header comment.
+     */
+    scopes: t.text({ mode: "json" }).$type(),
+    /** Updated on every successful auth. Helps spot dead tokens for cleanup. */
+    lastUsedAt: t.integer({ mode: "timestamp" }),
+    /**
+     * Soft-delete: revoke marks the row instead of removing it so a
+     * future audit-log surface can attribute past actions to a now-
+     * revoked token. The auth path treats `revokedAt != null` as
+     * "token doesn't exist" — same shape as expired.
+     */
+    revokedAt: t.integer({ mode: "timestamp" }),
+    createdAt: t
+        .integer({ mode: "timestamp" })
+        .notNull()
+        .default(sql `(unixepoch())`),
+}), (table) => [
+    index("api_tokens_user_id_idx").on(table.userId),
+    index("api_tokens_revoked_at_idx").on(table.revokedAt),
+]);
+export const apiTokenInsertSchema = createInsertSchema(apiTokens);
+export const apiTokenSelectSchema = createSelectSchema(apiTokens);
+//# sourceMappingURL=api_tokens.js.map

package/dist/db/schema/api_tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_tokens.js","sourceRoot":"","sources":["../../../src/db/schema/api_tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,EAAE;AACF,+DAA+D;AAC/D,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,sBAAsB;AACtB,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AACnE,mEAAmE;AACnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACN,wEAAwE;IACxE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE;IACzB,MAAM,EAAE,CAAC;SACN,OAAO,EAAE;SACT,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtD,oFAAoF;IACpF,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE;IAC1B;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC3C;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAqB;IAC3D,4EAA4E;IAC5E,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5C;;;;;OAKG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC3C,SAAS,EAAE,CAAC;SACT,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;SAC9B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,eAAe,CAAC;CAC/B,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAChD,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACvD,CACF,CAAC;AAKF,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC"}