@tempoxyz/id 0.0.0-stage → 0.0.0

package/dist/app/db/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/app/db/schema.ts"],"names":[],"mappings":"AAkBA,cAAc,WAAW,CAAA;AAEzB;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBrB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBzB,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYzB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBhB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBvB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMxB,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOrB,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKzB,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUlB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc3B,CAAA"}

package/dist/app/db/schema.js

@@ -0,0 +1,171 @@
+/**
+ * Tempo ID's tables, as Drizzle declares them: the Better Auth tables, then Tempo ID's own.
+ * @module
+ */
+import { sql } from 'drizzle-orm';
+import { check, index, integer, jsonb, pgTable, primaryKey, text, timestamp, unique, } from 'drizzle-orm/pg-core';
+import { oauthClient, user } from './auth.js';
+export * from './auth.js';
+/**
+ * The realms of each OAuth app, in order. The first realm holds a user's first account. An app
+ * without rows reaches the `default` realm.
+ */
+export const appRealms = pgTable('app_realms', {
+    clientId: text('client_id')
+        .notNull()
+        .references(() => oauthClient.clientId, { onDelete: 'cascade' }),
+    position: integer('position').notNull(),
+    // A realm that an app names cannot be deleted.
+    realmId: text('realm_id')
+        .notNull()
+        .references(() => realms.id),
+}, (table) => [
+    check('app_realms_position_check', sql `${table.position} >= 0`),
+    primaryKey({ columns: [table.clientId, table.position] }),
+    unique('app_realms_client_id_realm_id_unique').on(table.clientId, table.realmId),
+]);
+/**
+ * What a CLI reported with each device grant request, where it came from, and the key that it
+ * requested, which the device page shows beside the user code. Each row shares the ID of its `device_code` row. It has no foreign key, so it outlives the
+ * redemption that deletes that row, and the cleanup cron deletes it once it expires.
+ */
+export const deviceRequests = pgTable('device_requests', {
+    // The Tempo Account that the signed key acts for. Null until approval signs the key.
+    account: text('account'),
+    // The message whose hash is the key's witness. Null for a request without one.
+    challenge: text('challenge'),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    // The name that the CLI reported, such as its hostname. Null for a code from `POST /device/code`.
+    device: text('device'),
+    expiresAt: timestamp('expires_at').notNull(),
+    // The ID of the `device_code` row.
+    id: text('id').primaryKey(),
+    // The CLI's IP address. Null when it is unknown.
+    ip: text('ip'),
+    // The key that the CLI requested, as JSON with every default filled. Null for a request without one.
+    key: jsonb('key'),
+    // The signed key authorization, in the node's RPC format. Null until approval signs the key, and
+    // again once the first redemption of the device code takes it.
+    keyAuthorization: jsonb('key_authorization'),
+    // The CLI's city and country, from its IP address. Null when they are unknown.
+    location: text('location'),
+});
+/**
+ * The realm of each user's first created account, claimed before an owner kind, such as Privy,
+ * creates the key. A request that finds a claim in its realms completes that account instead of
+ * creating another, so the kind's calls hold no database connection.
+ */
+export const firstAccounts = pgTable('first_accounts', {
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    realmId: text('realm_id')
+        .notNull()
+        .references(() => realms.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+        .notNull()
+        .references(() => user.id, { onDelete: 'cascade' }),
+}, (table) => [primaryKey({ columns: [table.userId, table.realmId] })]);
+/**
+ * The keys that users sign in with: for now, passkeys. Each row is one WebAuthn credential of one
+ * relying party, linked to one user.
+ */
+export const keys = pgTable('keys', {
+    // The address that the public key derives, in lowercase.
+    address: text('address').notNull().unique(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    // The WebAuthn credential ID, base64url, as the browser returns it.
+    id: text('id').primaryKey(),
+    // The uncompressed P256 public key, hex.
+    publicKey: text('public_key').notNull(),
+    rpId: text('rp_id').notNull(),
+    // `tempo-id` for a passkey that Tempo ID stored, `wallet` for one that wallet.tempo created.
+    source: text('source').notNull(),
+    type: text('type').notNull(),
+    userId: text('user_id')
+        .notNull()
+        .references(() => user.id, { onDelete: 'cascade' }),
+}, (table) => [
+    check('keys_source_check', sql `${table.source} in ('tempo-id', 'wallet')`),
+    check('keys_type_check', sql `${table.type} = 'passkey'`),
+    index('keys_user_id_idx').on(table.userId),
+]);
+/**
+ * The key authorizations that the approval page signed, each held for the code that the same
+ * approval returned, by the app's client ID and the request's PKCE challenge. The first redemption
+ * of a code with the challenge's verifier deletes the row and returns the key beside the tokens.
+ */
+export const pendingKeys = pgTable('pending_keys', {
+    // The Tempo Account that the key acts for.
+    account: text('account').notNull(),
+    clientId: text('client_id')
+        .notNull()
+        .references(() => oauthClient.clientId, { onDelete: 'cascade' }),
+    codeChallenge: text('code_challenge').notNull(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    expiresAt: timestamp('expires_at').notNull(),
+    // The signed key authorization, in the node's RPC format.
+    keyAuthorization: jsonb('key_authorization').notNull(),
+    userId: text('user_id')
+        .notNull()
+        .references(() => user.id, { onDelete: 'cascade' }),
+}, (table) => [primaryKey({ columns: [table.clientId, table.codeChallenge] })]);
+/**
+ * The passkey relying party of each realm that holds passkey owners. Two realms cannot share one,
+ * since a passkey belongs to exactly one relying party.
+ */
+export const realmPasskeys = pgTable('realm_passkeys', {
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    realmId: text('realm_id')
+        .primaryKey()
+        .references(() => realms.id, { onDelete: 'cascade' }),
+    rpId: text('rp_id').notNull().unique(),
+});
+/**
+ * The Privy app of each realm that holds Privy owners. `app_secret` holds the Privy app secret,
+ * encrypted with the `SECRET` variable, never the secret itself.
+ */
+export const realmPrivy = pgTable('realm_privy', {
+    appId: text('app_id').notNull().unique(),
+    appSecret: text('app_secret').notNull(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    realmId: text('realm_id')
+        .primaryKey()
+        .references(() => realms.id, { onDelete: 'cascade' }),
+});
+/**
+ * The realms whose secp256k1 owners Tempo ID holds itself, which the suites and local development
+ * turn on. A production realm never has a row, since such a key stays in Tempo ID's database.
+ */
+export const realmSecp256k1 = pgTable('realm_secp256k1', {
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    realmId: text('realm_id')
+        .primaryKey()
+        .references(() => realms.id, { onDelete: 'cascade' }),
+});
+/**
+ * The realms: each a set of Tempo Accounts. A realm's owner configurations, such as `realm_privy`
+ * and `realm_passkeys`, live in their own tables. A migration adds the `default` realm.
+ */
+export const realms = pgTable('realms', {
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+}, (table) => [
+    check('realms_id_check', sql `${table.id} ~ '^[a-z0-9]+(-[a-z0-9]+)*$'`),
+]);
+/**
+ * The secp256k1 owner key of each user in each realm that `realm_secp256k1` names, which Tempo ID
+ * creates and signs with. `private_key` holds the key encrypted with the `SECRET` variable, never
+ * the key itself.
+ */
+export const secp256k1Owners = pgTable('secp256k1_owners', {
+    address: text('address').notNull().unique(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    privateKey: text('private_key').notNull(),
+    realmId: text('realm_id')
+        .notNull()
+        .references(() => realms.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+        .notNull()
+        .references(() => user.id, { onDelete: 'cascade' }),
+}, (table) => [primaryKey({ columns: [table.userId, table.realmId] })]);
+//# sourceMappingURL=schema.js.map

package/dist/app/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/app/db/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EACL,KAAK,EACL,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,UAAU,EACV,IAAI,EACJ,SAAS,EACT,MAAM,GACP,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE7C,cAAc,WAAW,CAAA;AAEzB;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAC9B,YAAY,EACZ;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACvC,+CAA+C;IAC/C,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;CAC/B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAA,GAAG,KAAK,CAAC,QAAQ,OAAO,CAAC;IAC/D,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzD,MAAM,CAAC,sCAAsC,CAAC,CAAC,EAAE,CAC/C,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,CACd;CACF,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,EAAE;IACvD,qFAAqF;IACrF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;IACxB,+EAA+E;IAC/E,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;IAC5B,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,kGAAkG;IAClG,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC5C,mCAAmC;IACnC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,iDAAiD;IACjD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,qGAAqG;IACrG,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC;IACjB,iGAAiG;IACjG,+DAA+D;IAC/D,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,CAAC;IAC5C,+EAA+E;IAC/E,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;CAC3B,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAClC,gBAAgB,EAChB;IACE,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACvD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACpE,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CACzB,MAAM,EACN;IACE,yDAAyD;IACzD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC3C,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,oEAAoE;IACpE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,yCAAyC;IACzC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC7B,6FAA6F;IAC7F,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAA,GAAG,KAAK,CAAC,MAAM,4BAA4B,CAAC;IAC1E,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAA,GAAG,KAAK,CAAC,IAAI,cAAc,CAAC;IACxD,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;CAC3C,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAChC,cAAc,EACd;IACE,2CAA2C;IAC3C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC5C,0DAA0D;IAC1D,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;IACtD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAC5E,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE;IACrD,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACvD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;CACvC,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE;IAC/C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACxC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;CACxD,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,EAAE;IACvD,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;CACxD,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,OAAO,CAC3B,QAAQ,EACR;IACE,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;CAC7B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAA,GAAG,KAAK,CAAC,EAAE,+BAA+B,CAAC;CACxE,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CACpC,kBAAkB,EAClB;IACE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC3C,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACzD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACvD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACpE,CAAA"}