@agentic-qe/v3 3.0.0-alpha.10

package/dist/mcp/security/rate-limiter.d.ts

@@ -0,0 +1,191 @@
+/**
+ * Agentic QE v3 - MCP Security: Rate Limiter
+ * Token bucket algorithm implementation (ADR-012)
+ *
+ * Features:
+ * - Token bucket rate limiting (100 req/s, 200 burst)
+ * - Per-client and global rate limiting
+ * - Sliding window for smooth rate limiting
+ * - Configurable limits per endpoint
+ */
+/**
+ * Rate limiter configuration
+ */
+export interface RateLimiterConfig {
+    /** Tokens per second (refill rate) */
+    tokensPerSecond: number;
+    /** Maximum burst capacity */
+    maxBurst: number;
+    /** Enable per-client limiting */
+    perClient?: boolean;
+    /** Cleanup interval in ms for expired buckets */
+    cleanupInterval?: number;
+    /** Maximum age for inactive buckets in ms */
+    maxBucketAge?: number;
+}
+/**
+ * Token bucket state
+ */
+export interface TokenBucket {
+    /** Current token count */
+    tokens: number;
+    /** Last update timestamp */
+    lastUpdate: number;
+    /** Total requests made */
+    totalRequests: number;
+    /** Requests in current window */
+    windowRequests: number;
+    /** Window start time */
+    windowStart: number;
+}
+/**
+ * Rate limit result
+ */
+export interface RateLimitResult {
+    /** Whether the request is allowed */
+    allowed: boolean;
+    /** Remaining tokens */
+    remaining: number;
+    /** Time until next token in ms */
+    retryAfter?: number;
+    /** Current request rate */
+    currentRate?: number;
+    /** Limit info for headers */
+    headers: RateLimitHeaders;
+}
+/**
+ * Rate limit headers for HTTP responses
+ */
+export interface RateLimitHeaders {
+    'X-RateLimit-Limit': number;
+    'X-RateLimit-Remaining': number;
+    'X-RateLimit-Reset': number;
+    'Retry-After'?: number;
+}
+/**
+ * Rate limiter statistics
+ */
+export interface RateLimiterStats {
+    totalRequests: number;
+    allowedRequests: number;
+    deniedRequests: number;
+    activeBuckets: number;
+    averageTokens: number;
+}
+/**
+ * Endpoint-specific rate limit configuration
+ */
+export interface EndpointRateLimit {
+    pattern: RegExp | string;
+    tokensPerSecond: number;
+    maxBurst: number;
+}
+/**
+ * Token Bucket Rate Limiter
+ * Implements the token bucket algorithm for rate limiting
+ */
+export declare class RateLimiter {
+    private readonly config;
+    private readonly globalBucket;
+    private readonly clientBuckets;
+    private readonly endpointLimits;
+    private cleanupTimer;
+    private stats;
+    constructor(config: RateLimiterConfig);
+    /**
+     * Check if a request is allowed
+     */
+    check(clientId?: string, endpoint?: string): RateLimitResult;
+    /**
+     * Consume tokens (blocks if not available in sync mode)
+     */
+    consume(clientId?: string, endpoint?: string, tokens?: number): RateLimitResult;
+    /**
+     * Wait until tokens are available (async)
+     */
+    wait(clientId?: string, endpoint?: string, tokens?: number): Promise<RateLimitResult>;
+    /**
+     * Add endpoint-specific rate limit
+     */
+    addEndpointLimit(limit: EndpointRateLimit): void;
+    /**
+     * Remove all endpoint limits
+     */
+    clearEndpointLimits(): void;
+    /**
+     * Reset a client's bucket
+     */
+    resetClient(clientId: string): void;
+    /**
+     * Reset all buckets
+     */
+    reset(): void;
+    /**
+     * Get rate limiter statistics
+     */
+    getStats(): RateLimiterStats;
+    /**
+     * Get client-specific statistics
+     */
+    getClientStats(clientId: string): TokenBucket | null;
+    /**
+     * Dispose the rate limiter
+     */
+    dispose(): void;
+    private createBucket;
+    private getBucket;
+    private getEndpointKey;
+    private getConfig;
+    private refillBucket;
+    private buildHeaders;
+    private calculateRate;
+    private startCleanup;
+    private cleanup;
+    private sleep;
+}
+/**
+ * Sliding window log for more accurate rate limiting
+ */
+export interface SlidingWindowEntry {
+    timestamp: number;
+    weight: number;
+}
+/**
+ * Sliding Window Rate Limiter
+ * More accurate but uses more memory
+ */
+export declare class SlidingWindowRateLimiter {
+    private readonly windowMs;
+    private readonly maxRequests;
+    private readonly windows;
+    private readonly cleanupInterval;
+    constructor(windowMs?: number, maxRequests?: number);
+    check(clientId: string): RateLimitResult;
+    reset(clientId?: string): void;
+    dispose(): void;
+    private getEntries;
+    private cleanup;
+}
+/**
+ * Create a new rate limiter with default configuration
+ * Default: 100 requests/second, 200 burst capacity
+ */
+export declare function createRateLimiter(config?: Partial<RateLimiterConfig>): RateLimiter;
+/**
+ * Create a strict rate limiter for sensitive endpoints
+ * Default: 10 requests/second, 20 burst capacity
+ */
+export declare function createStrictRateLimiter(config?: Partial<RateLimiterConfig>): RateLimiter;
+/**
+ * Create a sliding window rate limiter
+ */
+export declare function createSlidingWindowLimiter(windowMs?: number, maxRequests?: number): SlidingWindowRateLimiter;
+/**
+ * Get the default rate limiter instance
+ */
+export declare function getRateLimiter(): RateLimiter;
+/**
+ * Reset the default rate limiter
+ */
+export declare function resetDefaultRateLimiter(): void;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/mcp/security/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/mcp/security/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,KAAK,CAAmB;gBAEpB,MAAM,EAAE,iBAAiB;IAwBrC;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe;IA2C5D;;OAEG;IACH,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,eAAe;IAuC1E;;OAEG;IACG,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,OAAO,CAAC,eAAe,CAAC;IAWtF;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI;IAIhD;;OAEG;IACH,mBAAmB,IAAI,IAAI;IAI3B;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAInC;;OAEG;IACH,KAAK,IAAI,IAAI;IAYb;;OAEG;IACH,QAAQ,IAAI,gBAAgB;IAa5B;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAKpD;;OAEG;IACH,OAAO,IAAI,IAAI;IAYf,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,SAAS;IA6BjB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,KAAK;CAGd;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiC;gBAErD,QAAQ,SAAO,EAAE,WAAW,SAAM;IAS9C,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IA6CxC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAQ9B,OAAO,IAAI,IAAI;IAKf,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,OAAO;CAWhB;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,WAAW,CAOlF;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,WAAW,CAOxF;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,SAAO,EACf,WAAW,SAAM,GAChB,wBAAwB,CAE1B;AAQD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAK9C"}

package/dist/mcp/security/rate-limiter.js

@@ -0,0 +1,437 @@
+/**
+ * Agentic QE v3 - MCP Security: Rate Limiter
+ * Token bucket algorithm implementation (ADR-012)
+ *
+ * Features:
+ * - Token bucket rate limiting (100 req/s, 200 burst)
+ * - Per-client and global rate limiting
+ * - Sliding window for smooth rate limiting
+ * - Configurable limits per endpoint
+ */
+// ============================================================================
+// Token Bucket Implementation
+// ============================================================================
+/**
+ * Token Bucket Rate Limiter
+ * Implements the token bucket algorithm for rate limiting
+ */
+export class RateLimiter {
+    config;
+    globalBucket;
+    clientBuckets;
+    endpointLimits;
+    cleanupTimer = null;
+    stats;
+    constructor(config) {
+        this.config = {
+            tokensPerSecond: config.tokensPerSecond || 100,
+            maxBurst: config.maxBurst || 200,
+            perClient: config.perClient ?? true,
+            cleanupInterval: config.cleanupInterval || 60000, // 1 minute
+            maxBucketAge: config.maxBucketAge || 300000, // 5 minutes
+        };
+        this.globalBucket = this.createBucket();
+        this.clientBuckets = new Map();
+        this.endpointLimits = [];
+        this.stats = {
+            totalRequests: 0,
+            allowedRequests: 0,
+            deniedRequests: 0,
+            activeBuckets: 1,
+            averageTokens: this.config.maxBurst,
+        };
+        // Start cleanup timer
+        this.startCleanup();
+    }
+    /**
+     * Check if a request is allowed
+     */
+    check(clientId, endpoint) {
+        this.stats.totalRequests++;
+        const now = Date.now();
+        // Get configuration (endpoint-specific or default)
+        const { tokensPerSecond, maxBurst } = this.getConfig(endpoint);
+        // Get the appropriate bucket (separate buckets for different endpoint limits)
+        const bucket = this.getBucket(clientId, tokensPerSecond, maxBurst, endpoint);
+        // Refill tokens based on elapsed time
+        this.refillBucket(bucket, tokensPerSecond, maxBurst, now);
+        // Check if request is allowed
+        if (bucket.tokens >= 1) {
+            bucket.tokens -= 1;
+            bucket.totalRequests++;
+            bucket.windowRequests++;
+            this.stats.allowedRequests++;
+            return {
+                allowed: true,
+                remaining: Math.floor(bucket.tokens),
+                headers: this.buildHeaders(bucket, maxBurst, now),
+            };
+        }
+        // Request denied
+        this.stats.deniedRequests++;
+        const retryAfter = Math.ceil((1 - bucket.tokens) / tokensPerSecond * 1000);
+        return {
+            allowed: false,
+            remaining: 0,
+            retryAfter,
+            currentRate: this.calculateRate(bucket, now),
+            headers: {
+                ...this.buildHeaders(bucket, maxBurst, now),
+                'Retry-After': Math.ceil(retryAfter / 1000),
+            },
+        };
+    }
+    /**
+     * Consume tokens (blocks if not available in sync mode)
+     */
+    consume(clientId, endpoint, tokens = 1) {
+        this.stats.totalRequests++;
+        const now = Date.now();
+        // Get configuration (endpoint-specific or default)
+        const { tokensPerSecond, maxBurst } = this.getConfig(endpoint);
+        // Get the appropriate bucket (separate buckets for different endpoint limits)
+        const bucket = this.getBucket(clientId, tokensPerSecond, maxBurst, endpoint);
+        // Refill tokens based on elapsed time
+        this.refillBucket(bucket, tokensPerSecond, maxBurst, now);
+        if (bucket.tokens >= tokens) {
+            bucket.tokens -= tokens;
+            bucket.totalRequests += tokens;
+            bucket.windowRequests += tokens;
+            this.stats.allowedRequests++;
+            return {
+                allowed: true,
+                remaining: Math.floor(bucket.tokens),
+                headers: this.buildHeaders(bucket, maxBurst, now),
+            };
+        }
+        this.stats.deniedRequests++;
+        const retryAfter = Math.ceil((tokens - bucket.tokens) / tokensPerSecond * 1000);
+        return {
+            allowed: false,
+            remaining: Math.floor(bucket.tokens),
+            retryAfter,
+            headers: {
+                ...this.buildHeaders(bucket, maxBurst, now),
+                'Retry-After': Math.ceil(retryAfter / 1000),
+            },
+        };
+    }
+    /**
+     * Wait until tokens are available (async)
+     */
+    async wait(clientId, endpoint, tokens = 1) {
+        let result = this.consume(clientId, endpoint, tokens);
+        while (!result.allowed && result.retryAfter) {
+            await this.sleep(result.retryAfter);
+            result = this.consume(clientId, endpoint, tokens);
+        }
+        return result;
+    }
+    /**
+     * Add endpoint-specific rate limit
+     */
+    addEndpointLimit(limit) {
+        this.endpointLimits.push(limit);
+    }
+    /**
+     * Remove all endpoint limits
+     */
+    clearEndpointLimits() {
+        this.endpointLimits.length = 0;
+    }
+    /**
+     * Reset a client's bucket
+     */
+    resetClient(clientId) {
+        this.clientBuckets.delete(clientId);
+    }
+    /**
+     * Reset all buckets
+     */
+    reset() {
+        this.clientBuckets.clear();
+        Object.assign(this.globalBucket, this.createBucket());
+        this.stats = {
+            totalRequests: 0,
+            allowedRequests: 0,
+            deniedRequests: 0,
+            activeBuckets: 1,
+            averageTokens: this.config.maxBurst,
+        };
+    }
+    /**
+     * Get rate limiter statistics
+     */
+    getStats() {
+        // Calculate average tokens
+        let totalTokens = this.globalBucket.tokens;
+        this.clientBuckets.forEach(bucket => {
+            totalTokens += bucket.tokens;
+        });
+        this.stats.activeBuckets = 1 + this.clientBuckets.size;
+        this.stats.averageTokens = totalTokens / this.stats.activeBuckets;
+        return { ...this.stats };
+    }
+    /**
+     * Get client-specific statistics
+     */
+    getClientStats(clientId) {
+        const bucket = this.clientBuckets.get(clientId);
+        return bucket ? { ...bucket } : null;
+    }
+    /**
+     * Dispose the rate limiter
+     */
+    dispose() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+        this.clientBuckets.clear();
+    }
+    // ============================================================================
+    // Private Methods
+    // ============================================================================
+    createBucket() {
+        const now = Date.now();
+        return {
+            tokens: this.config.maxBurst,
+            lastUpdate: now,
+            totalRequests: 0,
+            windowRequests: 0,
+            windowStart: now,
+        };
+    }
+    getBucket(clientId, tokensPerSecond, maxBurst, endpoint) {
+        if (!this.config.perClient || !clientId) {
+            return this.globalBucket;
+        }
+        // Create a composite key for client + endpoint-specific limits
+        const endpointKey = this.getEndpointKey(endpoint);
+        const bucketKey = endpointKey ? `${clientId}:${endpointKey}` : clientId;
+        let bucket = this.clientBuckets.get(bucketKey);
+        if (!bucket) {
+            bucket = {
+                tokens: maxBurst,
+                lastUpdate: Date.now(),
+                totalRequests: 0,
+                windowRequests: 0,
+                windowStart: Date.now(),
+            };
+            this.clientBuckets.set(bucketKey, bucket);
+        }
+        return bucket;
+    }
+    getEndpointKey(endpoint) {
+        if (!endpoint)
+            return null;
+        for (let i = 0; i < this.endpointLimits.length; i++) {
+            const limit = this.endpointLimits[i];
+            const pattern = typeof limit.pattern === 'string'
+                ? new RegExp(limit.pattern)
+                : limit.pattern;
+            if (pattern.test(endpoint)) {
+                return `ep${i}`;
+            }
+        }
+        return null;
+    }
+    getConfig(endpoint) {
+        if (endpoint) {
+            for (const limit of this.endpointLimits) {
+                const pattern = typeof limit.pattern === 'string'
+                    ? new RegExp(limit.pattern)
+                    : limit.pattern;
+                if (pattern.test(endpoint)) {
+                    return {
+                        tokensPerSecond: limit.tokensPerSecond,
+                        maxBurst: limit.maxBurst,
+                    };
+                }
+            }
+        }
+        return {
+            tokensPerSecond: this.config.tokensPerSecond,
+            maxBurst: this.config.maxBurst,
+        };
+    }
+    refillBucket(bucket, tokensPerSecond, maxBurst, now) {
+        const elapsed = (now - bucket.lastUpdate) / 1000;
+        const newTokens = elapsed * tokensPerSecond;
+        bucket.tokens = Math.min(maxBurst, bucket.tokens + newTokens);
+        bucket.lastUpdate = now;
+        // Reset window if over 1 second
+        if (now - bucket.windowStart >= 1000) {
+            bucket.windowRequests = 0;
+            bucket.windowStart = now;
+        }
+    }
+    buildHeaders(bucket, maxBurst, now) {
+        return {
+            'X-RateLimit-Limit': maxBurst,
+            'X-RateLimit-Remaining': Math.floor(bucket.tokens),
+            'X-RateLimit-Reset': Math.ceil((now + 1000) / 1000), // Unix timestamp
+        };
+    }
+    calculateRate(bucket, now) {
+        const elapsed = (now - bucket.windowStart) / 1000;
+        if (elapsed < 0.001)
+            return 0;
+        return bucket.windowRequests / elapsed;
+    }
+    startCleanup() {
+        this.cleanupTimer = setInterval(() => {
+            this.cleanup();
+        }, this.config.cleanupInterval);
+    }
+    cleanup() {
+        const now = Date.now();
+        const maxAge = this.config.maxBucketAge;
+        for (const [clientId, bucket] of this.clientBuckets) {
+            if (now - bucket.lastUpdate > maxAge) {
+                this.clientBuckets.delete(clientId);
+            }
+        }
+    }
+    sleep(ms) {
+        return new Promise(resolve => setTimeout(resolve, ms));
+    }
+}
+/**
+ * Sliding Window Rate Limiter
+ * More accurate but uses more memory
+ */
+export class SlidingWindowRateLimiter {
+    windowMs;
+    maxRequests;
+    windows;
+    cleanupInterval;
+    constructor(windowMs = 1000, maxRequests = 100) {
+        this.windowMs = windowMs;
+        this.maxRequests = maxRequests;
+        this.windows = new Map();
+        // Cleanup old entries every minute
+        this.cleanupInterval = setInterval(() => this.cleanup(), 60000);
+    }
+    check(clientId) {
+        const now = Date.now();
+        const entries = this.getEntries(clientId);
+        // Remove old entries
+        const cutoff = now - this.windowMs;
+        const validEntries = entries.filter(e => e.timestamp > cutoff);
+        // Simple count for this window (no weighting for predictable behavior)
+        const count = validEntries.length;
+        const remaining = Math.max(0, this.maxRequests - count - 1);
+        if (count < this.maxRequests) {
+            validEntries.push({ timestamp: now, weight: 1 });
+            this.windows.set(clientId, validEntries);
+            return {
+                allowed: true,
+                remaining,
+                headers: {
+                    'X-RateLimit-Limit': this.maxRequests,
+                    'X-RateLimit-Remaining': remaining,
+                    'X-RateLimit-Reset': Math.ceil((now + this.windowMs) / 1000),
+                },
+            };
+        }
+        const oldestValid = validEntries[0];
+        const retryAfter = oldestValid
+            ? Math.ceil((oldestValid.timestamp + this.windowMs - now) / 1000)
+            : 1;
+        return {
+            allowed: false,
+            remaining: 0,
+            retryAfter: retryAfter * 1000,
+            headers: {
+                'X-RateLimit-Limit': this.maxRequests,
+                'X-RateLimit-Remaining': 0,
+                'X-RateLimit-Reset': Math.ceil((now + retryAfter * 1000) / 1000),
+                'Retry-After': retryAfter,
+            },
+        };
+    }
+    reset(clientId) {
+        if (clientId) {
+            this.windows.delete(clientId);
+        }
+        else {
+            this.windows.clear();
+        }
+    }
+    dispose() {
+        clearInterval(this.cleanupInterval);
+        this.windows.clear();
+    }
+    getEntries(clientId) {
+        return this.windows.get(clientId) || [];
+    }
+    cleanup() {
+        const cutoff = Date.now() - this.windowMs * 2;
+        for (const [clientId, entries] of this.windows) {
+            const valid = entries.filter(e => e.timestamp > cutoff);
+            if (valid.length === 0) {
+                this.windows.delete(clientId);
+            }
+            else {
+                this.windows.set(clientId, valid);
+            }
+        }
+    }
+}
+// ============================================================================
+// Factory Functions
+// ============================================================================
+/**
+ * Create a new rate limiter with default configuration
+ * Default: 100 requests/second, 200 burst capacity
+ */
+export function createRateLimiter(config) {
+    return new RateLimiter({
+        tokensPerSecond: 100,
+        maxBurst: 200,
+        perClient: true,
+        ...config,
+    });
+}
+/**
+ * Create a strict rate limiter for sensitive endpoints
+ * Default: 10 requests/second, 20 burst capacity
+ */
+export function createStrictRateLimiter(config) {
+    return new RateLimiter({
+        tokensPerSecond: 10,
+        maxBurst: 20,
+        perClient: true,
+        ...config,
+    });
+}
+/**
+ * Create a sliding window rate limiter
+ */
+export function createSlidingWindowLimiter(windowMs = 1000, maxRequests = 100) {
+    return new SlidingWindowRateLimiter(windowMs, maxRequests);
+}
+// ============================================================================
+// Default Instance
+// ============================================================================
+let defaultRateLimiter = null;
+/**
+ * Get the default rate limiter instance
+ */
+export function getRateLimiter() {
+    if (!defaultRateLimiter) {
+        defaultRateLimiter = createRateLimiter();
+    }
+    return defaultRateLimiter;
+}
+/**
+ * Reset the default rate limiter
+ */
+export function resetDefaultRateLimiter() {
+    if (defaultRateLimiter) {
+        defaultRateLimiter.dispose();
+        defaultRateLimiter = null;
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/mcp/security/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/mcp/security/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoFH,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,OAAO,WAAW;IACL,MAAM,CAA8B;IACpC,YAAY,CAAc;IAC1B,aAAa,CAA2B;IACxC,cAAc,CAAsB;IAC7C,YAAY,GAA0C,IAAI,CAAC;IAC3D,KAAK,CAAmB;IAEhC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,GAAG;YAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK,EAAE,WAAW;YAC7D,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY;SAC1D,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG;YACX,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SACpC,CAAC;QAEF,sBAAsB;QACtB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAiB,EAAE,QAAiB;QACxC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,mDAAmD;QACnD,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE/D,8EAA8E;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE7E,sCAAsC;QACtC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAE1D,8BAA8B;QAC9B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAE7B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;aAClD,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC;QAE3E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC;YACZ,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC;YAC5C,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;gBAC3C,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;aAC5C;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAiB,EAAE,QAAiB,EAAE,MAAM,GAAG,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,mDAAmD;QACnD,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE/D,8EAA8E;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE7E,sCAAsC;QACtC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAE1D,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;YACxB,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC;YAC/B,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAE7B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;aAClD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,UAAU;YACV,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;gBAC3C,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;aAC5C;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,QAAiB,EAAE,QAAiB,EAAE,MAAM,GAAG,CAAC;QACzD,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEtD,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAwB;QACvC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG;YACX,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,2BAA2B;QAC3B,IAAI,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAC3C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YAClC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAElE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;IAClB,+EAA+E;IAEvE,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC5B,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,WAAW,EAAE,GAAG;SACjB,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,QAA4B,EAC5B,eAAuB,EACvB,QAAgB,EAChB,QAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,+DAA+D;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAExE,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;gBACtB,aAAa,EAAE,CAAC;gBAChB,cAAc,EAAE,CAAC;gBACjB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC;YACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,QAAiB;QACtC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAC/C,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAElB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,QAAiB;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBAC/C,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC3B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBAElB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3B,OAAO;wBACL,eAAe,EAAE,KAAK,CAAC,eAAe;wBACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACzB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAEO,YAAY,CAClB,MAAmB,EACnB,eAAuB,EACvB,QAAgB,EAChB,GAAW;QAEX,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,GAAG,eAAe,CAAC;QAE5C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC9D,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAExB,gCAAgC;QAChC,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;YAC1B,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAmB,EAAE,QAAgB,EAAE,GAAW;QACrE,OAAO;YACL,mBAAmB,EAAE,QAAQ;YAC7B,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAClD,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,iBAAiB;SACvE,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAAmB,EAAE,GAAW;QACpD,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QAClD,IAAI,OAAO,GAAG,KAAK;YAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC;IACzC,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAExC,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAcD;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,OAAO,CAAoC;IAC3C,eAAe,CAAiC;IAEjE,YAAY,QAAQ,GAAG,IAAI,EAAE,WAAW,GAAG,GAAG;QAC5C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QAEzB,mCAAmC;QACnC,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE1C,qBAAqB;QACrB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;QAE/D,uEAAuE;QACvE,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAE5D,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS;gBACT,OAAO,EAAE;oBACP,mBAAmB,EAAE,IAAI,CAAC,WAAW;oBACrC,uBAAuB,EAAE,SAAS;oBAClC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;iBAC7D;aACF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,WAAW;YAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;YACjE,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC;YACZ,UAAU,EAAE,UAAU,GAAG,IAAI;YAC7B,OAAO,EAAE;gBACP,mBAAmB,EAAE,IAAI,CAAC,WAAW;gBACrC,uBAAuB,EAAE,CAAC;gBAC1B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;gBAChE,aAAa,EAAE,UAAU;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAiB;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAEO,OAAO;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmC;IACnE,OAAO,IAAI,WAAW,CAAC;QACrB,eAAe,EAAE,GAAG;QACpB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,IAAI;QACf,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAmC;IACzE,OAAO,IAAI,WAAW,CAAC;QACrB,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,IAAI;QACf,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAQ,GAAG,IAAI,EACf,WAAW,GAAG,GAAG;IAEjB,OAAO,IAAI,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC7D,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,IAAI,kBAAkB,GAAuB,IAAI,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,kBAAkB,EAAE,CAAC;QACvB,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC7B,kBAAkB,GAAG,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC"}