@6thbridge/utils 1.10.2 → 1.10.4

package/lib/middlewares/index.d.ts

@@ -1,3 +1,4 @@
 import * as express from './express';
 import { unless } from './common';
+export { Ratelimiter, type RateLimiterProps } from './rate-limiter';
 export { express, unless };

package/lib/middlewares/index.js

@@ -33,9 +33,11 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.unless = exports.express = void 0;
+exports.unless = exports.express = exports.Ratelimiter = void 0;
 const express = __importStar(require("./express"));
 exports.express = express;
 const common_1 = require("./common");
 Object.defineProperty(exports, "unless", { enumerable: true, get: function () { return common_1.unless; } });
+var rate_limiter_1 = require("./rate-limiter");
+Object.defineProperty(exports, "Ratelimiter", { enumerable: true, get: function () { return rate_limiter_1.Ratelimiter; } });
 //# sourceMappingURL=index.js.map

package/lib/middlewares/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAqC;AAE5B,0BAAO;AADhB,qCAAkC;AAChB,uFADT,eAAM,OACS"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAqC;AAG5B,0BAAO;AAFhB,qCAAkC;AAEhB,uFAFT,eAAM,OAES;AADxB,+CAAoE;AAA3D,2GAAA,WAAW,OAAA"}

package/lib/middlewares/rate-limiter.d.ts

@@ -0,0 +1,13 @@
+import type { Request, Response } from 'express';
+import { type RateLimitRequestHandler } from 'express-rate-limit';
+import type Redis from 'ioredis';
+export type RateLimiterProps = {
+    redisClient: Redis;
+    keyPrefix?: string;
+    skipSuccessfulRequests?: boolean;
+    numberOfTries?: number;
+    keyGenerator?: (req: Request, res: Response) => string;
+};
+export declare class Ratelimiter {
+    static limit(config: RateLimiterProps): RateLimitRequestHandler;
+}

package/lib/middlewares/rate-limiter.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Ratelimiter = void 0;
+const express_rate_limit_1 = require("express-rate-limit");
+const rate_limit_redis_1 = require("rate-limit-redis");
+class Ratelimiter {
+    static limit(config) {
+        var _a;
+        return (0, express_rate_limit_1.rateLimit)({
+            legacyHeaders: false,
+            windowMs: 60 * 30 * 1000,
+            store: new rate_limit_redis_1.RedisStore({
+                sendCommand: (command, ...args) => config.redisClient.call(command, ...args),
+            }),
+            limit: config.numberOfTries || 5,
+            skipSuccessfulRequests: config.skipSuccessfulRequests || false,
+            message: {
+                error: 'Resource has been accessed too many times. Please try again after 30 minutes.',
+                statusCode: 429,
+                errorCode: 'RateLimitExceeded',
+            },
+            keyGenerator: (_a = config.keyGenerator) !== null && _a !== void 0 ? _a : function (req, res) {
+                var _a, _b, _c, _d;
+                const ip = ((_d = (_c = (_b = (_a = res.locals.ip) !== null && _a !== void 0 ? _a : req.headers['cf-connecting-ip']) !== null && _b !== void 0 ? _b : req.headers['x-forwarded-for']) !== null && _c !== void 0 ? _c : req.headers['ip']) !== null && _d !== void 0 ? _d : req.ip);
+                return `${config.keyPrefix || 'rate-limit-key'}:${(0, express_rate_limit_1.ipKeyGenerator)(ip)}`;
+            },
+        });
+    }
+}
+exports.Ratelimiter = Ratelimiter;
+//# sourceMappingURL=rate-limiter.js.map

package/lib/middlewares/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/middlewares/rate-limiter.ts"],"names":[],"mappings":";;;AACA,2DAA6F;AAE7F,uDAA+D;AAU/D,MAAa,WAAW;IACtB,MAAM,CAAC,KAAK,CAAC,MAAwB;;QACnC,OAAO,IAAA,8BAAS,EAAC;YACf,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;YACxB,KAAK,EAAE,IAAI,6BAAU,CAAC;gBACpB,WAAW,EAAE,CAAC,OAAe,EAAE,GAAG,IAAc,EAAE,EAAE,CAClD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAwB;aACnE,CAAC;YACF,KAAK,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;YAChC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;YAC9D,OAAO,EAAE;gBACP,KAAK,EAAE,+EAA+E;gBACtF,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,mBAAmB;aAC/B;YACD,YAAY,EACV,MAAA,MAAM,CAAC,YAAY,mCACnB,UAAU,GAAG,EAAE,GAAG;;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAA,MAAA,MAAA,MAAA,GAAG,CAAC,MAAM,CAAC,EAAE,mCACvB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,mCAC/B,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,mCAC9B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,mCACjB,GAAG,CAAC,EAAE,CAAW,CAAC;gBACpB,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,IAAI,IAAA,mCAAc,EAAC,EAAE,CAAC,EAAE,CAAC;YACzE,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;CACF;AA5BD,kCA4BC"}

package/lib/middlewares/rate-limiter.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/middlewares/rate-limiter.test.js

@@ -0,0 +1,170 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_events_1 = require("node:events");
+const ioredis_1 = __importDefault(require("ioredis"));
+const rate_limiter_1 = require("./rate-limiter");
+describe('Ratelimiter.limit', () => {
+    let redisClient;
+    let call;
+    let counters;
+    beforeEach(() => {
+        jest.useFakeTimers();
+        redisClient = new ioredis_1.default({ lazyConnect: true });
+        counters = new Map();
+        // Keep the real middleware and Redis store; replace only Redis I/O.
+        call = jest.spyOn(redisClient, 'call').mockImplementation((command, ...args) => __awaiter(void 0, void 0, void 0, function* () {
+            if (command === 'SCRIPT' && args[0] === 'LOAD') {
+                return args[1].includes('"INCR"') ? 'increment-sha' : 'get-sha';
+            }
+            if (command === 'EVALSHA') {
+                const [script, , key, windowMs] = args;
+                let counter = counters.get(key);
+                if (script === 'increment-sha') {
+                    if (!counter || counter.expiresAt <= Date.now()) {
+                        counter = { hits: 0, expiresAt: Date.now() + Number(windowMs) };
+                        counters.set(key, counter);
+                    }
+                    counter.hits++;
+                }
+                return counter ? [counter.hits, counter.expiresAt - Date.now()] : [false, -2];
+            }
+            if (command === 'DECR') {
+                const counter = counters.get(args[0]);
+                if (counter)
+                    return --counter.hits;
+                return -1;
+            }
+            throw new Error(`Unexpected Redis command: ${command}`);
+        }));
+    });
+    afterEach(() => {
+        redisClient.disconnect();
+        jest.restoreAllMocks();
+        jest.useRealTimers();
+    });
+    function request(overrides = {}) {
+        return Object.assign({ ip: '203.0.113.10', headers: {} }, overrides);
+    }
+    function run(limiter_1) {
+        return __awaiter(this, arguments, void 0, function* (limiter, req = request(), locals = {}) {
+            const res = Object.assign(new node_events_1.EventEmitter(), {
+                locals,
+                statusCode: 200,
+                headersSent: false,
+                setHeader: jest.fn(),
+                status: jest.fn().mockReturnThis(),
+                send: jest.fn().mockReturnThis(),
+            });
+            const next = jest.fn();
+            yield limiter(req, res, next);
+            return { res, next };
+        });
+    }
+    function limiter(options = {}) {
+        return rate_limiter_1.Ratelimiter.limit(Object.assign({ redisClient }, options));
+    }
+    it('allows five requests by default and blocks the sixth with the existing error response', () => __awaiter(void 0, void 0, void 0, function* () {
+        const middleware = limiter();
+        for (let attempt = 0; attempt < 5; attempt++) {
+            const { res, next } = yield run(middleware);
+            expect(next).toHaveBeenCalledWith();
+            expect(res.send).not.toHaveBeenCalled();
+            expect(res.setHeader).not.toHaveBeenCalled();
+        }
+        const { res, next } = yield run(middleware);
+        expect(next).not.toHaveBeenCalled();
+        expect(res.status).toHaveBeenCalledWith(429);
+        expect(res.send).toHaveBeenCalledWith({
+            error: 'Resource has been accessed too many times. Please try again after 30 minutes.',
+            statusCode: 429,
+            errorCode: 'RateLimitExceeded',
+        });
+    }));
+    it('uses the configured attempt limit and resets after 30 minutes', () => __awaiter(void 0, void 0, void 0, function* () {
+        const middleware = limiter({ numberOfTries: 1 });
+        expect((yield run(middleware)).next).toHaveBeenCalledWith();
+        jest.advanceTimersByTime(30 * 60 * 1000 - 1);
+        expect((yield run(middleware)).res.status).toHaveBeenCalledWith(429);
+        jest.advanceTimersByTime(1);
+        expect((yield run(middleware)).next).toHaveBeenCalledWith();
+    }));
+    it.each([
+        { skipSuccessfulRequests: false, statusCode: 200, blocked: true },
+        { skipSuccessfulRequests: true, statusCode: 200, blocked: false },
+        { skipSuccessfulRequests: true, statusCode: 400, blocked: true },
+    ])('counts finished requests with $skipSuccessfulRequests and status $statusCode', (_a) => __awaiter(void 0, [_a], void 0, function* ({ skipSuccessfulRequests, statusCode, blocked }) {
+        const middleware = limiter({ numberOfTries: 1, skipSuccessfulRequests });
+        const { res } = yield run(middleware);
+        res.statusCode = statusCode;
+        res.emit('finish');
+        yield jest.advanceTimersByTimeAsync(0);
+        const result = yield run(middleware);
+        if (blocked) {
+            expect(result.res.status).toHaveBeenCalledWith(429);
+        }
+        else {
+            expect(result.next).toHaveBeenCalledWith();
+        }
+    }));
+    it.each([
+        { locals: { ip: '203.0.113.11' }, headers: { 'cf-connecting-ip': '203.0.113.12', 'x-forwarded-for': '203.0.113.13', ip: '203.0.113.14' }, expectedIp: '203.0.113.11' },
+        { locals: {}, headers: { 'cf-connecting-ip': '203.0.113.12', 'x-forwarded-for': '203.0.113.13', ip: '203.0.113.14' }, expectedIp: '203.0.113.12' },
+        { locals: {}, headers: { 'x-forwarded-for': '203.0.113.13', ip: '203.0.113.14' }, expectedIp: '203.0.113.13' },
+        { locals: {}, headers: { ip: '203.0.113.14' }, expectedIp: '203.0.113.14' },
+        { locals: {}, headers: {}, expectedIp: '203.0.113.10' },
+    ])('selects $expectedIp using IP precedence', (_a) => __awaiter(void 0, [_a], void 0, function* ({ locals, headers, expectedIp }) {
+        const middleware = limiter({ numberOfTries: 1 });
+        yield run(middleware, request({ headers }), locals);
+        const { res } = yield run(middleware, request({ ip: expectedIp }));
+        expect(res.status).toHaveBeenCalledWith(429);
+    }));
+    it('normalizes IPv6 addresses to the same subnet key', () => __awaiter(void 0, void 0, void 0, function* () {
+        const middleware = limiter({ numberOfTries: 1 });
+        yield run(middleware, request({ ip: '2001:db8:abcd:1200::1' }));
+        const { res } = yield run(middleware, request({ ip: '2001:db8:abcd:12ff::2' }));
+        expect(res.status).toHaveBeenCalledWith(429);
+        expect(call).toHaveBeenCalledWith('EVALSHA', 'increment-sha', '1', 'rl:rate-limit-key:2001:db8:abcd:1200::/56', '1800000');
+    }));
+    it('isolates default and custom prefixes on a shared client', () => __awaiter(void 0, void 0, void 0, function* () {
+        const defaultLimiter = limiter({ numberOfTries: 1 });
+        const loginLimiter = limiter({ numberOfTries: 1, keyPrefix: 'login' });
+        yield run(defaultLimiter);
+        expect((yield run(loginLimiter)).next).toHaveBeenCalledWith();
+        expect((yield run(defaultLimiter)).res.status).toHaveBeenCalledWith(429);
+        expect((yield run(loginLimiter)).res.status).toHaveBeenCalledWith(429);
+    }));
+    it('lets custom keys replace the prefix and IP key generation', () => __awaiter(void 0, void 0, void 0, function* () {
+        const middleware = limiter({
+            numberOfTries: 1,
+            keyPrefix: 'ignored',
+            keyGenerator: (req, res) => `${res.locals.clientId}:${req.body.email}`,
+        });
+        yield run(middleware, request({ body: { email: 'user@example.com' } }), { clientId: 'client-1' });
+        const { res } = yield run(middleware, request({ ip: '203.0.113.99', body: { email: 'user@example.com' } }), { clientId: 'client-1' });
+        expect(res.status).toHaveBeenCalledWith(429);
+        expect(call).toHaveBeenCalledWith('EVALSHA', 'increment-sha', '1', 'rl:client-1:user@example.com', '1800000');
+    }));
+    it('forwards Redis failures to next without allowing the request', () => __awaiter(void 0, void 0, void 0, function* () {
+        const middleware = limiter();
+        yield run(middleware);
+        const error = new Error('Redis unavailable');
+        call.mockRejectedValueOnce(error);
+        const { res, next } = yield run(middleware);
+        expect(next).toHaveBeenCalledTimes(1);
+        expect(next).toHaveBeenCalledWith(error);
+        expect(res.send).not.toHaveBeenCalled();
+    }));
+});
+//# sourceMappingURL=rate-limiter.test.js.map

package/lib/middlewares/rate-limiter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.test.js","sourceRoot":"","sources":["../../src/middlewares/rate-limiter.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,6CAA2C;AAE3C,sDAA4B;AAC5B,iDAAoE;AAEpE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,WAAkB,CAAC;IACvB,IAAI,IAAsB,CAAC;IAC3B,IAAI,QAA0D,CAAC;IAE/D,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,WAAW,GAAG,IAAI,iBAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;QACrB,oEAAoE;QACpE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAO,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE;YACnF,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC/C,OAAQ,IAAI,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,CAAC,MAAM,EAAE,AAAD,EAAG,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAgB,CAAC;gBACnD,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBAChD,OAAO,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAChE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC7B,CAAC;oBACD,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,CAAC;gBACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC;gBAChD,IAAI,OAAO;oBAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;gBACnC,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAA,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,WAAW,CAAC,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,OAAO,CAAC,YAA8B,EAAE;QAC/C,OAAO,gBAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,IAAK,SAAS,CAAa,CAAC;IACtE,CAAC;IAED,SAAe,GAAG;6DAChB,OAA6C,EAC7C,GAAG,GAAG,OAAO,EAAE,EACf,SAA6B,EAAE;YAE/B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,0BAAY,EAAE,EAAE;gBAC5C,MAAM;gBACN,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;gBAClB,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE;gBACpB,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;aACjC,CAAwB,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACvB,CAAC;KAAA;IAED,SAAS,OAAO,CAAC,UAAiD,EAAE;QAClE,OAAO,0BAAW,CAAC,KAAK,iBAAG,WAAW,IAAK,OAAO,EAAG,CAAC;IACxD,CAAC;IAED,EAAE,CAAC,uFAAuF,EAAE,GAAS,EAAE;QACrG,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC;QAC7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACpC,KAAK,EAAE,+EAA+E;YACtF,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,mBAAmB;SAC/B,CAAC,CAAC;IACL,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAS,EAAE;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5D,IAAI,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAC9D,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;QACjE,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACjE,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;KACjE,CAAC,CAAC,8EAA8E,EAAE,KAAwD,EAAE,4CAAnD,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,EAAE;QACvI,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;QACtK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;QAClJ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;QAC9G,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;QAC3E,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;KACxD,CAAC,CAAC,yCAAyC,EAAE,KAAwC,EAAE,4CAAnC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;QAClF,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAS,EAAE;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,2CAA2C,EAAE,SAAS,CAAC,CAAC;IAC7H,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAS,EAAE;QACvE,MAAM,cAAc,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC9D,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAS,EAAE;QACzE,MAAM,UAAU,GAAG,OAAO,CAAC;YACzB,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE;SAC1F,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAClG,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACtI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,8BAA8B,EAAE,SAAS,CAAC,CAAC;IAChH,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAS,EAAE;QAC5E,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAElC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}