@dotdo/postgres 0.1.0

package/dist/middleware/rate-limit.d.ts

@@ -0,0 +1,397 @@
+/**
+ * Rate Limiting Middleware for Cloudflare Workers
+ * Task: postgres-k06 - Add rate limiting middleware to Worker entry points
+ *
+ * Implements sliding window rate limiting using DO storage or KV.
+ * Supports rate limiting by IP, user, or custom key.
+ */
+import type { MiddlewareHandler } from 'hono';
+/**
+ * Generic storage backend interface for rate limit data.
+ *
+ * @typeParam T - The type of data stored (defaults to RateLimitWindow for backwards compatibility)
+ */
+export interface GenericRateLimitStorage<T = RateLimitWindow> {
+    /**
+     * Get the stored data for a key
+     */
+    get(key: string): Promise<T | null>;
+    /**
+     * Store data for a key
+     */
+    set(key: string, data: T, ttlMs: number): Promise<void>;
+}
+/**
+ * Storage backend interface for rate limit data.
+ * This is the default storage interface for sliding window rate limiting.
+ */
+export interface RateLimitStorage extends GenericRateLimitStorage<RateLimitWindow> {
+}
+/**
+ * Sliding window data structure
+ */
+export interface RateLimitWindow {
+    /** Request counts per sub-window */
+    counts: number[];
+    /** Timestamp of the start of the current window (ms) */
+    windowStart: number;
+    /** Total requests in the current window */
+    total: number;
+}
+/**
+ * Rate limit key extraction modes
+ */
+export type RateLimitKeyMode = 'ip' | 'user' | 'custom';
+/**
+ * Rate limit options
+ */
+export interface RateLimitOptions {
+    /**
+     * Maximum number of requests allowed in the window
+     * @default 60
+     */
+    requests?: number;
+    /**
+     * Window duration in milliseconds
+     * @default 60000 (1 minute)
+     */
+    windowMs?: number;
+    /**
+     * Number of sub-windows for sliding window algorithm
+     * More sub-windows = more accuracy but more storage
+     * @default 10
+     */
+    subWindows?: number;
+    /**
+     * Key extraction mode
+     * - 'ip': Rate limit by client IP address
+     * - 'user': Rate limit by user ID from request context
+     * - 'custom': Use custom key extractor function
+     * @default 'ip'
+     */
+    keyMode?: RateLimitKeyMode;
+    /**
+     * Custom key extractor function
+     * Required when keyMode is 'custom'
+     */
+    keyExtractor?: (c: HonoContext) => string | null;
+    /**
+     * Key prefix for storage
+     * @default 'ratelimit:'
+     */
+    keyPrefix?: string;
+    /**
+     * Header to extract IP from (e.g., 'CF-Connecting-IP', 'X-Forwarded-For')
+     * @default 'CF-Connecting-IP'
+     */
+    ipHeader?: string;
+    /**
+     * Header or context key for user ID
+     * @default 'X-User-ID'
+     */
+    userHeader?: string;
+    /**
+     * Whether to skip rate limiting for certain requests
+     */
+    skip?: (c: HonoContext) => boolean | Promise<boolean>;
+    /**
+     * Custom response handler when rate limit is exceeded
+     */
+    onRateLimited?: (c: HonoContext, info: RateLimitInfo) => Response | Promise<Response>;
+    /**
+     * Storage backend (DO storage or KV)
+     * If not provided, will use in-memory storage (not recommended for production)
+     */
+    storage?: RateLimitStorage;
+}
+/**
+ * Rate limit status information
+ */
+export interface RateLimitInfo {
+    /** Total requests allowed in window */
+    limit: number;
+    /** Remaining requests in current window */
+    remaining: number;
+    /** Time in seconds until the rate limit resets */
+    resetAfterSeconds: number;
+    /** Whether the request was rate limited */
+    limited: boolean;
+}
+/**
+ * Hono context interface (minimal)
+ */
+interface HonoContext {
+    req: {
+        header(name: string): string | undefined;
+        raw: Request;
+    };
+    header(name: string, value: string): void;
+    json(data: unknown, status?: number): Response;
+    set(key: string, value: unknown): void;
+    get(key: string): unknown;
+}
+/**
+ * Generic in-memory storage for rate limiting (for testing/development only).
+ *
+ * @typeParam T - The type of data stored
+ */
+export declare class GenericInMemoryStorage<T> implements GenericRateLimitStorage<T> {
+    private store;
+    get(key: string): Promise<T | null>;
+    set(key: string, data: T, ttlMs: number): Promise<void>;
+    /** Clear all entries (for testing) */
+    clear(): void;
+}
+/**
+ * In-memory storage for rate limiting (for testing/development only).
+ * Alias for GenericInMemoryStorage<RateLimitWindow> for backwards compatibility.
+ */
+export declare class InMemoryRateLimitStorage extends GenericInMemoryStorage<RateLimitWindow> implements RateLimitStorage {
+}
+/**
+ * In-memory storage for token bucket rate limiting (for testing/development only).
+ */
+export declare class InMemoryTokenBucketStorage extends GenericInMemoryStorage<TokenBucket> implements TokenBucketStorage {
+}
+/**
+ * Generic Durable Object storage adapter for rate limiting.
+ *
+ * @typeParam T - The type of data stored
+ */
+export declare class GenericDOStorage<T> implements GenericRateLimitStorage<T> {
+    private storage;
+    constructor(storage: DurableObjectStorage);
+    get(key: string): Promise<T | null>;
+    set(key: string, data: T, _ttlMs: number): Promise<void>;
+}
+/**
+ * Durable Object storage adapter for rate limiting.
+ * Alias for GenericDOStorage<RateLimitWindow> for backwards compatibility.
+ */
+export declare class DurableObjectRateLimitStorage extends GenericDOStorage<RateLimitWindow> implements RateLimitStorage {
+}
+/**
+ * Durable Object storage adapter for token bucket rate limiting.
+ */
+export declare class DurableObjectTokenBucketStorage extends GenericDOStorage<TokenBucket> implements TokenBucketStorage {
+}
+/**
+ * Generic KV storage adapter for rate limiting.
+ *
+ * @typeParam T - The type of data stored
+ */
+export declare class GenericKVStorage<T> implements GenericRateLimitStorage<T> {
+    private kv;
+    constructor(kv: KVNamespace);
+    get(key: string): Promise<T | null>;
+    set(key: string, data: T, ttlMs: number): Promise<void>;
+}
+/**
+ * KV storage adapter for rate limiting.
+ * Alias for GenericKVStorage<RateLimitWindow> for backwards compatibility.
+ */
+export declare class KVRateLimitStorage extends GenericKVStorage<RateLimitWindow> implements RateLimitStorage {
+}
+/**
+ * KV storage adapter for token bucket rate limiting.
+ */
+export declare class KVTokenBucketStorage extends GenericKVStorage<TokenBucket> implements TokenBucketStorage {
+}
+/**
+ * Sliding window rate limiter implementation
+ *
+ * Uses a sliding window log algorithm with sub-windows for efficiency:
+ * - Divides the main window into N sub-windows
+ * - Each sub-window tracks request counts
+ * - Calculates weighted sum based on current position in window
+ * - More accurate than fixed window, more efficient than per-request logging
+ */
+export declare class SlidingWindowRateLimiter {
+    private requests;
+    private windowMs;
+    private subWindows;
+    private subWindowMs;
+    private storage;
+    constructor(options: Required<Pick<RateLimitOptions, 'requests' | 'windowMs' | 'subWindows' | 'storage'>>);
+    /**
+     * Check if a request should be rate limited
+     */
+    check(key: string): Promise<RateLimitInfo>;
+    /**
+     * Rotate window if needed (handles time progression)
+     */
+    private rotateWindow;
+    /**
+     * Calculate weighted request count using sliding window
+     *
+     * For a proper sliding window, we count all requests in all sub-windows.
+     * The sliding window effect is achieved through the rotation logic which
+     * removes old sub-windows as time passes.
+     */
+    private calculateWeightedCount;
+    /**
+     * Get the current sub-window index
+     */
+    private getCurrentSubWindowIndex;
+}
+/**
+ * Create rate limiting middleware for Hono
+ *
+ * @example
+ * ```typescript
+ * import { Hono } from 'hono'
+ * import { rateLimit, KVRateLimitStorage } from '@dotdo/postgres/middleware'
+ *
+ * const app = new Hono<{ Bindings: { RATE_LIMIT_KV: KVNamespace } }>()
+ *
+ * // Rate limit by IP: 100 requests per minute
+ * app.use('*', rateLimit({
+ *   requests: 100,
+ *   windowMs: 60000,
+ *   storage: new KVRateLimitStorage(env.RATE_LIMIT_KV),
+ * }))
+ *
+ * // Rate limit by user: 1000 requests per minute
+ * app.use('/api/*', rateLimit({
+ *   requests: 1000,
+ *   windowMs: 60000,
+ *   keyMode: 'user',
+ *   userHeader: 'Authorization',
+ * }))
+ * ```
+ */
+export declare function rateLimit(options?: RateLimitOptions): MiddlewareHandler;
+/**
+ * Create rate limit middleware with Durable Object storage
+ */
+export declare function rateLimitWithDO(storage: DurableObjectStorage, options?: Omit<RateLimitOptions, 'storage'>): MiddlewareHandler;
+/**
+ * Create rate limit middleware with KV storage
+ */
+export declare function rateLimitWithKV(kv: KVNamespace, options?: Omit<RateLimitOptions, 'storage'>): MiddlewareHandler;
+/**
+ * Token bucket data structure
+ */
+export interface TokenBucket {
+    /** Current number of tokens */
+    tokens: number;
+    /** Last refill timestamp (ms) */
+    lastRefill: number;
+}
+/**
+ * Token bucket options
+ */
+export interface TokenBucketOptions {
+    /**
+     * Maximum tokens in the bucket (burst capacity)
+     * @default 10
+     */
+    bucketSize?: number;
+    /**
+     * Tokens added per second (refill rate)
+     * @default 1
+     */
+    tokensPerSecond?: number;
+    /**
+     * Tokens consumed per request
+     * @default 1
+     */
+    tokensPerRequest?: number;
+    /**
+     * Key extraction mode
+     * @default 'ip'
+     */
+    keyMode?: RateLimitKeyMode;
+    /**
+     * Custom key extractor
+     */
+    keyExtractor?: (c: HonoContext) => string | null;
+    /**
+     * Key prefix for storage
+     * @default 'tokenbucket:'
+     */
+    keyPrefix?: string;
+    /**
+     * Header to extract IP from
+     * @default 'CF-Connecting-IP'
+     */
+    ipHeader?: string;
+    /**
+     * Header for user ID
+     * @default 'X-User-ID'
+     */
+    userHeader?: string;
+    /**
+     * Skip function
+     */
+    skip?: (c: HonoContext) => boolean | Promise<boolean>;
+    /**
+     * Custom response handler
+     */
+    onRateLimited?: (c: HonoContext, info: TokenBucketInfo) => Response | Promise<Response>;
+    /**
+     * Storage backend for token bucket data.
+     * Use TokenBucketStorage implementations (InMemoryTokenBucketStorage, DurableObjectTokenBucketStorage, KVTokenBucketStorage)
+     * for type-safe storage, or GenericRateLimitStorage<TokenBucket> for custom implementations.
+     */
+    storage?: TokenBucketStorage;
+}
+/**
+ * Token bucket status information
+ */
+export interface TokenBucketInfo {
+    /** Maximum tokens (bucket size) */
+    bucketSize: number;
+    /** Current available tokens */
+    tokens: number;
+    /** Tokens consumed per request */
+    tokensPerRequest: number;
+    /** Seconds until bucket is full */
+    refillsInSeconds: number;
+    /** Whether the request was rate limited */
+    limited: boolean;
+}
+/**
+ * Token bucket storage type
+ */
+export type TokenBucketStorage = GenericRateLimitStorage<TokenBucket>;
+/**
+ * Token bucket rate limiter implementation
+ *
+ * Classic token bucket algorithm:
+ * - Bucket starts full with N tokens
+ * - Each request consumes tokens
+ * - Tokens are added at a constant rate
+ * - Allows bursts up to bucket size
+ */
+export declare class TokenBucketRateLimiter {
+    private bucketSize;
+    private tokensPerSecond;
+    private tokensPerRequest;
+    private storage;
+    constructor(options: Required<Pick<TokenBucketOptions, 'bucketSize' | 'tokensPerSecond' | 'tokensPerRequest'>> & {
+        storage: TokenBucketStorage;
+    });
+    /**
+     * Check if a request should be rate limited
+     */
+    check(key: string): Promise<TokenBucketInfo>;
+}
+/**
+ * Create token bucket rate limiting middleware
+ *
+ * @example
+ * ```typescript
+ * import { tokenBucket, KVRateLimitStorage } from '@dotdo/postgres/middleware'
+ *
+ * // Allow bursts of 10 requests, refill at 1/second
+ * app.use('*', tokenBucket({
+ *   bucketSize: 10,
+ *   tokensPerSecond: 1,
+ *   storage: new KVRateLimitStorage(env.RATE_LIMIT_KV),
+ * }))
+ * ```
+ */
+export declare function tokenBucket(options?: TokenBucketOptions): MiddlewareHandler;
+export {};
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAM7C;;;;GAIG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,GAAG,eAAe;IAC1D;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAEnC;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,uBAAuB,CAAC,eAAe,CAAC;CAAG;AAErF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEvD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAE1B;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,MAAM,GAAG,IAAI,CAAA;IAEhD;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;OAEG;IACH,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAErD;;OAEG;IACH,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAErF;;;OAGG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAA;IACb,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,iBAAiB,EAAE,MAAM,CAAA;IACzB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;GAEG;AACH,UAAU,WAAW;IACnB,GAAG,EAAE;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;QACxC,GAAG,EAAE,OAAO,CAAA;KACb,CAAA;IACD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;IACtC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAC1B;AAMD;;;;GAIG;AACH,qBAAa,sBAAsB,CAAC,CAAC,CAAE,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,CAAoD;IAE3D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAUnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,sCAAsC;IACtC,KAAK,IAAI,IAAI;CAGd;AAED;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,sBAAsB,CAAC,eAAe,CAAE,YAAW,gBAAgB;CAAG;AAEpH;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,sBAAsB,CAAC,WAAW,CAAE,YAAW,kBAAkB;CAAG;AAEpH;;;;GAIG;AACH,qBAAa,gBAAgB,CAAC,CAAC,CAAE,YAAW,uBAAuB,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,oBAAoB;IAE3C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAKnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAM/D;AAED;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,gBAAgB,CAAC,eAAe,CAAE,YAAW,gBAAgB;CAAG;AAEnH;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,gBAAgB,CAAC,WAAW,CAAE,YAAW,kBAAkB;CAAG;AAEnH;;;;GAIG;AACH,qBAAa,gBAAgB,CAAC,CAAC,CAAE,YAAW,uBAAuB,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,WAAW;IAE7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAKnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK9D;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,gBAAgB,CAAC,eAAe,CAAE,YAAW,gBAAgB;CAAG;AAExG;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,gBAAgB,CAAC,WAAW,CAAE,YAAW,kBAAkB;CAAG;AAMxG;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,OAAO,CAAkB;gBAErB,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC,CAAC;IAQzG;;OAEG;IACG,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAuChD;;OAEG;IACH,OAAO,CAAC,YAAY;IAuCpB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAM9B;;OAEG;IACH,OAAO,CAAC,wBAAwB;CAIjC;AA+CD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,iBAAiB,CAyE3E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,oBAAoB,EAC7B,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAM,GAC9C,iBAAiB,CAKnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAM,GAC9C,iBAAiB,CAKnB;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;;OAGG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,MAAM,GAAG,IAAI,CAAA;IAEhD;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;OAEG;IACH,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAErD;;OAEG;IACH,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAEvF;;;;OAIG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,kCAAkC;IAClC,gBAAgB,EAAE,MAAM,CAAA;IACxB,mCAAmC;IACnC,gBAAgB,EAAE,MAAM,CAAA;IACxB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAA;AAErE;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,OAAO,CAAoB;gBAEvB,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,kBAAkB,CAAA;KAAE;IAOhJ;;OAEG;IACG,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CAyCnD;AAaD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,iBAAiB,CAwE/E"}