@cyanheads/mcp-ts-core 0.1.0-beta.12

package/dist/utils/security/rateLimiter.js

@@ -0,0 +1,294 @@
+/**
+ * @fileoverview Provides a generic `RateLimiter` class for implementing rate limiting logic.
+ * It supports configurable time windows, request limits, and automatic cleanup of expired entries.
+ * @module src/utils/security/rateLimiter
+ */
+import { trace } from '@opentelemetry/api';
+import { JsonRpcErrorCode, McpError } from '../../types-global/errors.js';
+import { requestContextService } from '../../utils/internal/requestContext.js';
+/**
+ * A configurable, in-process rate limiter that enforces request quotas per key within a sliding
+ * time window. Tracks request counts in a `Map`, evicts least-recently-used entries when the
+ * tracked-key cap is reached, and periodically cleans up expired windows via a background timer.
+ *
+ * Throws {@link McpError} with {@link JsonRpcErrorCode.RateLimited} when the limit is exceeded.
+ * Integrates with OpenTelemetry by annotating the active span with rate-limit attributes.
+ *
+ * @example
+ * ```ts
+ * const limiter = new RateLimiter(config, logger);
+ * limiter.configure({ maxRequests: 60, windowMs: 60_000 });
+ *
+ * // In a request handler:
+ * limiter.check(clientId, requestContext); // throws McpError if over limit
+ * ```
+ */
+export class RateLimiter {
+    config;
+    logger;
+    limits;
+    cleanupTimer = null;
+    effectiveConfig;
+    /**
+     * Creates a new `RateLimiter` instance with sensible defaults:
+     * - 100 requests per 15-minute window
+     * - 5-minute cleanup interval
+     * - Up to 10,000 tracked keys (LRU eviction beyond that)
+     *
+     * Call {@link configure} to override any of these defaults before first use.
+     *
+     * @param config - Application config, used to check `environment` when `skipInDevelopment` is set.
+     * @param logger - Logger instance for debug output on cleanup and eviction events.
+     */
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+        const defaultConfig = {
+            windowMs: 15 * 60 * 1000,
+            maxRequests: 100,
+            errorMessage: 'Rate limit exceeded. Please try again in {waitTime} seconds.',
+            skipInDevelopment: false,
+            cleanupInterval: 5 * 60 * 1000,
+            maxTrackedKeys: 10000,
+        };
+        this.effectiveConfig = { ...defaultConfig };
+        this.limits = new Map();
+        this.startCleanupTimer();
+    }
+    /**
+     * Evicts the least recently used entry from the limits Map.
+     * This prevents unbounded memory growth in high-traffic scenarios.
+     * @private
+     */
+    evictLRUEntry() {
+        if (this.limits.size === 0)
+            return;
+        let oldestKey = null;
+        let oldestTime = Infinity;
+        // Find the entry with the oldest lastAccess time
+        for (const [key, entry] of this.limits.entries()) {
+            if (entry.lastAccess < oldestTime) {
+                oldestTime = entry.lastAccess;
+                oldestKey = key;
+            }
+        }
+        if (oldestKey) {
+            this.limits.delete(oldestKey);
+            const logContext = requestContextService.createRequestContext({
+                operation: 'RateLimiter.evictLRUEntry',
+                additionalContext: {
+                    evictedKey: oldestKey,
+                    remainingEntries: this.limits.size,
+                },
+            });
+            this.logger.debug('Evicted LRU entry from rate limiter', logContext);
+        }
+    }
+    /**
+     * Starts (or restarts) the periodic cleanup interval using the current `cleanupInterval` config.
+     * Clears any existing timer first. The timer is unref'd so it does not prevent Node.js from exiting.
+     * No-ops if `cleanupInterval` is 0 or unset.
+     * @private
+     */
+    startCleanupTimer() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+        }
+        const interval = this.effectiveConfig.cleanupInterval;
+        if (interval && interval > 0) {
+            this.cleanupTimer = setInterval(() => {
+                this.cleanupExpiredEntries();
+            }, interval);
+            if (this.cleanupTimer.unref) {
+                this.cleanupTimer.unref();
+            }
+        }
+    }
+    /**
+     * Iterates all tracked entries and deletes any whose `resetTime` has passed.
+     * Called automatically by the cleanup timer. Logs the number of removed entries at debug level.
+     * @private
+     */
+    cleanupExpiredEntries() {
+        const now = Date.now();
+        let expiredCount = 0;
+        for (const [key, entry] of this.limits.entries()) {
+            if (now >= entry.resetTime) {
+                this.limits.delete(key);
+                expiredCount++;
+            }
+        }
+        if (expiredCount > 0) {
+            const logContext = requestContextService.createRequestContext({
+                operation: 'RateLimiter.cleanupExpiredEntries',
+                additionalContext: {
+                    cleanedCount: expiredCount,
+                    totalRemainingAfterClean: this.limits.size,
+                },
+            });
+            this.logger.debug(`Cleaned up ${expiredCount} expired rate limit entries`, logContext);
+        }
+    }
+    /**
+     * Merges the provided partial config into the current effective configuration.
+     * If `cleanupInterval` is included, the background timer is restarted with the new interval.
+     *
+     * @param config - Partial {@link RateLimitConfig} fields to apply.
+     *
+     * @example
+     * ```ts
+     * limiter.configure({ maxRequests: 30, windowMs: 60_000, skipInDevelopment: true });
+     * ```
+     */
+    configure(config) {
+        Object.assign(this.effectiveConfig, config);
+        if (config.cleanupInterval !== undefined) {
+            this.startCleanupTimer();
+        }
+    }
+    /**
+     * Returns a shallow copy of the current effective {@link RateLimitConfig}.
+     *
+     * @returns A copy of the active rate limit configuration.
+     */
+    getConfig() {
+        return { ...this.effectiveConfig };
+    }
+    /**
+     * Clears all tracked rate limit entries, effectively resetting every key's counter.
+     * Useful for testing or emergency bypass scenarios.
+     */
+    reset() {
+        this.limits.clear();
+        const logContext = requestContextService.createRequestContext({
+            operation: 'RateLimiter.reset',
+        });
+        this.logger.debug('Rate limiter reset, all limits cleared', logContext);
+    }
+    /**
+     * Checks whether the given key has exceeded its rate limit and throws if so.
+     *
+     * On each call:
+     * 1. No-ops if `skipInDevelopment` is `true` and `config.environment === 'development'`.
+     * 2. Resolves the effective key via `keyGenerator` if configured, otherwise uses `key` as-is.
+     * 3. Creates a new window entry on first call or after the previous window expired.
+     *    If the tracked-key cap is reached, the least-recently-used entry is evicted first.
+     * 4. Increments the count and updates the LRU timestamp.
+     * 5. If count exceeds `maxRequests`, throws {@link McpError} with {@link JsonRpcErrorCode.RateLimited}
+     *    and error data containing `waitTimeSeconds`, `key`, `limit`, and `windowMs`.
+     *
+     * The active OpenTelemetry span is annotated with rate-limit attributes on every call.
+     *
+     * @param key - The identifier to rate-limit (e.g., a client ID, IP address, or tool name).
+     * @param context - Optional request context passed to the `keyGenerator`, if configured.
+     * @throws {McpError} With code {@link JsonRpcErrorCode.RateLimited} when the limit is exceeded.
+     *
+     * @example
+     * ```ts
+     * // Basic usage
+     * rateLimiter.check('client-abc');
+     *
+     * // With request context for custom key generation
+     * rateLimiter.check('client-abc', requestContext);
+     * ```
+     */
+    check(key, context) {
+        const activeSpan = trace.getActiveSpan();
+        activeSpan?.setAttribute('mcp.rate_limit.checked', true);
+        if (this.effectiveConfig.skipInDevelopment && this.config.environment === 'development') {
+            activeSpan?.setAttribute('mcp.rate_limit.skipped', 'development');
+            return;
+        }
+        const limitKey = this.effectiveConfig.keyGenerator
+            ? this.effectiveConfig.keyGenerator(key, context)
+            : key;
+        activeSpan?.setAttribute('mcp.rate_limit.key', limitKey);
+        const now = Date.now();
+        let entry = this.limits.get(limitKey);
+        if (!entry || now >= entry.resetTime) {
+            // Check if we need to evict an entry before adding a new one
+            const maxKeys = this.effectiveConfig.maxTrackedKeys ?? 10000;
+            if (!entry && this.limits.size >= maxKeys) {
+                this.evictLRUEntry();
+                activeSpan?.addEvent('rate_limit_lru_eviction', {
+                    'mcp.rate_limit.size_before_eviction': this.limits.size + 1,
+                    'mcp.rate_limit.max_keys': maxKeys,
+                });
+            }
+            entry = {
+                count: 1,
+                resetTime: now + this.effectiveConfig.windowMs,
+                lastAccess: now,
+            };
+            this.limits.set(limitKey, entry);
+        }
+        else {
+            entry.count++;
+            entry.lastAccess = now; // Update LRU timestamp
+        }
+        const remaining = Math.max(0, this.effectiveConfig.maxRequests - entry.count);
+        activeSpan?.setAttributes({
+            'mcp.rate_limit.limit': this.effectiveConfig.maxRequests,
+            'mcp.rate_limit.count': entry.count,
+            'mcp.rate_limit.remaining': remaining,
+            'mcp.rate_limit.tracked_keys': this.limits.size,
+        });
+        if (entry.count > this.effectiveConfig.maxRequests) {
+            const waitTime = Math.ceil((entry.resetTime - now) / 1000);
+            const errorMessage = (this.effectiveConfig.errorMessage ||
+                'Rate limit exceeded. Please try again in {waitTime} seconds.').replace('{waitTime}', waitTime.toString());
+            activeSpan?.addEvent('rate_limit_exceeded', {
+                'mcp.rate_limit.wait_time_seconds': waitTime,
+            });
+            throw new McpError(JsonRpcErrorCode.RateLimited, errorMessage, {
+                waitTimeSeconds: waitTime,
+                key: limitKey,
+                limit: this.effectiveConfig.maxRequests,
+                windowMs: this.effectiveConfig.windowMs,
+            });
+        }
+    }
+    /**
+     * Returns the current rate limit status for a given key, or `null` if the key is not tracked
+     * (i.e., no requests have been made in the current window).
+     *
+     * Note: This method does **not** apply the `keyGenerator` — pass the already-resolved key
+     * if a custom generator is configured.
+     *
+     * @param key - The rate limit key to query.
+     * @returns An object with `current` count, configured `limit`, `remaining` requests, and
+     *   `resetTime` (ms epoch when the window resets), or `null` if the key has no active entry.
+     *
+     * @example
+     * ```ts
+     * const status = rateLimiter.getStatus('client-abc');
+     * if (status) {
+     *   console.log(`${status.remaining} requests remaining, resets at ${new Date(status.resetTime)}`);
+     * }
+     * ```
+     */
+    getStatus(key) {
+        const entry = this.limits.get(key);
+        if (!entry)
+            return null;
+        return {
+            current: entry.count,
+            limit: this.effectiveConfig.maxRequests,
+            remaining: Math.max(0, this.effectiveConfig.maxRequests - entry.count),
+            resetTime: entry.resetTime,
+        };
+    }
+    /**
+     * Stops the background cleanup timer and clears all tracked entries.
+     * Should be called during application shutdown to allow the process to exit cleanly
+     * (even though the timer is unref'd, explicit disposal is good practice).
+     */
+    dispose() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+        this.limits.clear();
+    }
+}
+//# sourceMappingURL=rateLimiter.js.map

package/dist/utils/security/rateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.js","sourceRoot":"","sources":["../../../src/utils/security/rateLimiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAuB,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAkChG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,WAAW;IAiBZ;IACA;IAjBO,MAAM,CAA8B;IAC7C,YAAY,GAA0B,IAAI,CAAC;IAClC,eAAe,CAAkB;IAElD;;;;;;;;;;OAUG;IACH,YACU,MAAyB,EACzB,MAAyB;QADzB,WAAM,GAAN,MAAM,CAAmB;QACzB,WAAM,GAAN,MAAM,CAAmB;QAEjC,MAAM,aAAa,GAAoB;YACrC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;YACxB,WAAW,EAAE,GAAG;YAChB,YAAY,EAAE,8DAA8D;YAC5E,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;YAC9B,cAAc,EAAE,KAAK;SACtB,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,aAAa;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAEnC,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAE1B,iDAAiD;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBAClC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC9B,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,MAAM,UAAU,GAAG,qBAAqB,CAAC,oBAAoB,CAAC;gBAC5D,SAAS,EAAE,2BAA2B;gBACtC,iBAAiB,EAAE;oBACjB,UAAU,EAAE,SAAS;oBACrB,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC;QACtD,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;gBACnC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,CAAC,EAAE,QAAQ,CAAC,CAAC;YACb,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,qBAAqB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxB,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,qBAAqB,CAAC,oBAAoB,CAAC;gBAC5D,SAAS,EAAE,mCAAmC;gBAC9C,iBAAiB,EAAE;oBACjB,YAAY,EAAE,YAAY;oBAC1B,wBAAwB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;iBAC3C;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,YAAY,6BAA6B,EAAE,UAAU,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACI,SAAS,CAAC,MAAgC;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,SAAS;QACd,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;IACrC,CAAC;IAED;;;OAGG;IACI,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,qBAAqB,CAAC,oBAAoB,CAAC;YAC5D,SAAS,EAAE,mBAAmB;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACI,KAAK,CAAC,GAAW,EAAE,OAAwB;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QACzC,UAAU,EAAE,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAEzD,IAAI,IAAI,CAAC,eAAe,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;YACxF,UAAU,EAAE,YAAY,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY;YAChD,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC;YACjD,CAAC,CAAC,GAAG,CAAC;QACR,UAAU,EAAE,YAAY,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,6DAA6D;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,IAAI,KAAK,CAAC;YAC7D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,UAAU,EAAE,QAAQ,CAAC,yBAAyB,EAAE;oBAC9C,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;oBAC3D,yBAAyB,EAAE,OAAO;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ;gBAC9C,UAAU,EAAE,GAAG;aAChB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,uBAAuB;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9E,UAAU,EAAE,aAAa,CAAC;YACxB,sBAAsB,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW;YACxD,sBAAsB,EAAE,KAAK,CAAC,KAAK;YACnC,0BAA0B,EAAE,SAAS;YACrC,6BAA6B,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;SAChD,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3D,MAAM,YAAY,GAAG,CACnB,IAAI,CAAC,eAAe,CAAC,YAAY;gBACjC,8DAA8D,CAC/D,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAE7C,UAAU,EAAE,QAAQ,CAAC,qBAAqB,EAAE;gBAC1C,kCAAkC,EAAE,QAAQ;aAC7C,CAAC,CAAC;YAEH,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,WAAW,EAAE,YAAY,EAAE;gBAC7D,eAAe,EAAE,QAAQ;gBACzB,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW;gBACvC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,SAAS,CAAC,GAAW;QAM1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW;YACvC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;YACtE,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,OAAO;QACZ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}