@dotdo/postgres 0.1.0

package/dist/middleware/rate-limit.js

@@ -0,0 +1,507 @@
+// ============================================================================
+// Storage Implementations
+// ============================================================================
+/**
+ * Generic in-memory storage for rate limiting (for testing/development only).
+ *
+ * @typeParam T - The type of data stored
+ */
+export class GenericInMemoryStorage {
+    store = new Map();
+    async get(key) {
+        const entry = this.store.get(key);
+        if (!entry)
+            return null;
+        if (Date.now() > entry.expiresAt) {
+            this.store.delete(key);
+            return null;
+        }
+        return entry.data;
+    }
+    async set(key, data, ttlMs) {
+        this.store.set(key, {
+            data,
+            expiresAt: Date.now() + ttlMs,
+        });
+    }
+    /** Clear all entries (for testing) */
+    clear() {
+        this.store.clear();
+    }
+}
+/**
+ * In-memory storage for rate limiting (for testing/development only).
+ * Alias for GenericInMemoryStorage<RateLimitWindow> for backwards compatibility.
+ */
+export class InMemoryRateLimitStorage extends GenericInMemoryStorage {
+}
+/**
+ * In-memory storage for token bucket rate limiting (for testing/development only).
+ */
+export class InMemoryTokenBucketStorage extends GenericInMemoryStorage {
+}
+/**
+ * Generic Durable Object storage adapter for rate limiting.
+ *
+ * @typeParam T - The type of data stored
+ */
+export class GenericDOStorage {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    async get(key) {
+        const data = await this.storage.get(key);
+        return data ?? null;
+    }
+    async set(key, data, _ttlMs) {
+        // Use alarm for TTL cleanup
+        await this.storage.put(key, data);
+        // Schedule cleanup - DO storage doesn't have native TTL
+        // The sliding window algorithm handles stale data naturally
+    }
+}
+/**
+ * Durable Object storage adapter for rate limiting.
+ * Alias for GenericDOStorage<RateLimitWindow> for backwards compatibility.
+ */
+export class DurableObjectRateLimitStorage extends GenericDOStorage {
+}
+/**
+ * Durable Object storage adapter for token bucket rate limiting.
+ */
+export class DurableObjectTokenBucketStorage extends GenericDOStorage {
+}
+/**
+ * Generic KV storage adapter for rate limiting.
+ *
+ * @typeParam T - The type of data stored
+ */
+export class GenericKVStorage {
+    kv;
+    constructor(kv) {
+        this.kv = kv;
+    }
+    async get(key) {
+        const data = await this.kv.get(key, 'json');
+        return data ?? null;
+    }
+    async set(key, data, ttlMs) {
+        // KV TTL is in seconds, minimum 60 seconds
+        const ttlSeconds = Math.max(60, Math.ceil(ttlMs / 1000));
+        await this.kv.put(key, JSON.stringify(data), { expirationTtl: ttlSeconds });
+    }
+}
+/**
+ * KV storage adapter for rate limiting.
+ * Alias for GenericKVStorage<RateLimitWindow> for backwards compatibility.
+ */
+export class KVRateLimitStorage extends GenericKVStorage {
+}
+/**
+ * KV storage adapter for token bucket rate limiting.
+ */
+export class KVTokenBucketStorage extends GenericKVStorage {
+}
+// ============================================================================
+// Sliding Window Algorithm
+// ============================================================================
+/**
+ * Sliding window rate limiter implementation
+ *
+ * Uses a sliding window log algorithm with sub-windows for efficiency:
+ * - Divides the main window into N sub-windows
+ * - Each sub-window tracks request counts
+ * - Calculates weighted sum based on current position in window
+ * - More accurate than fixed window, more efficient than per-request logging
+ */
+export class SlidingWindowRateLimiter {
+    requests;
+    windowMs;
+    subWindows;
+    subWindowMs;
+    storage;
+    constructor(options) {
+        this.requests = options.requests;
+        this.windowMs = options.windowMs;
+        this.subWindows = options.subWindows;
+        this.subWindowMs = options.windowMs / options.subWindows;
+        this.storage = options.storage;
+    }
+    /**
+     * Check if a request should be rate limited
+     */
+    async check(key) {
+        const now = Date.now();
+        const currentWindow = await this.storage.get(key);
+        // Initialize or rotate window
+        let window = this.rotateWindow(currentWindow, now);
+        // Calculate weighted request count using sliding window
+        const weightedCount = this.calculateWeightedCount(window, now);
+        // Check if rate limited - we need to check if adding this request would exceed
+        // The current count + 1 (this request) must not exceed the limit
+        const limited = weightedCount + 1 > this.requests;
+        if (!limited) {
+            // Increment current sub-window
+            const currentSubWindowIndex = this.getCurrentSubWindowIndex(window, now);
+            window.counts[currentSubWindowIndex]++;
+            window.total++;
+            // Save updated window
+            await this.storage.set(key, window, this.windowMs * 2);
+        }
+        // Calculate time until reset
+        const windowEnd = window.windowStart + this.windowMs;
+        const resetAfterSeconds = Math.max(0, Math.ceil((windowEnd - now) / 1000));
+        // Remaining is: limit - (current weighted count + this request if allowed)
+        const currentCount = limited ? Math.ceil(weightedCount) : Math.ceil(weightedCount) + 1;
+        return {
+            limit: this.requests,
+            remaining: Math.max(0, this.requests - currentCount),
+            resetAfterSeconds,
+            limited,
+        };
+    }
+    /**
+     * Rotate window if needed (handles time progression)
+     */
+    rotateWindow(existing, now) {
+        if (!existing) {
+            // Create new window
+            return {
+                counts: new Array(this.subWindows).fill(0),
+                windowStart: now - (now % this.subWindowMs),
+                total: 0,
+            };
+        }
+        const windowAge = now - existing.windowStart;
+        const subWindowsElapsed = Math.floor(windowAge / this.subWindowMs);
+        if (subWindowsElapsed >= this.subWindows) {
+            // Entire window has elapsed, start fresh
+            return {
+                counts: new Array(this.subWindows).fill(0),
+                windowStart: now - (now % this.subWindowMs),
+                total: 0,
+            };
+        }
+        if (subWindowsElapsed > 0) {
+            // Rotate: shift out old sub-windows, add new ones
+            const newCounts = new Array(this.subWindows).fill(0);
+            for (let i = 0; i < this.subWindows - subWindowsElapsed; i++) {
+                newCounts[i] = existing.counts[i + subWindowsElapsed];
+            }
+            return {
+                counts: newCounts,
+                windowStart: existing.windowStart + subWindowsElapsed * this.subWindowMs,
+                total: newCounts.reduce((a, b) => a + b, 0),
+            };
+        }
+        return existing;
+    }
+    /**
+     * Calculate weighted request count using sliding window
+     *
+     * For a proper sliding window, we count all requests in all sub-windows.
+     * The sliding window effect is achieved through the rotation logic which
+     * removes old sub-windows as time passes.
+     */
+    calculateWeightedCount(window, _now) {
+        // Simply sum all requests in all sub-windows
+        // The rotation logic already handles removing expired sub-windows
+        return window.total;
+    }
+    /**
+     * Get the current sub-window index
+     */
+    getCurrentSubWindowIndex(window, now) {
+        const elapsed = now - window.windowStart;
+        return Math.min(this.subWindows - 1, Math.floor(elapsed / this.subWindowMs));
+    }
+}
+// ============================================================================
+// Middleware Factory
+// ============================================================================
+/** Default rate limit options */
+const DEFAULT_OPTIONS = {
+    requests: 60,
+    windowMs: 60000,
+    subWindows: 10,
+    keyMode: 'ip',
+    keyPrefix: 'ratelimit:',
+    ipHeader: 'CF-Connecting-IP',
+    userHeader: 'X-User-ID',
+};
+/**
+ * Extract client IP from request
+ */
+function extractIP(c, header) {
+    const ip = c.req.header(header) ?? c.req.header('X-Forwarded-For')?.split(',')[0]?.trim() ?? 'unknown';
+    return ip;
+}
+/**
+ * Extract user ID from request
+ */
+function extractUser(c, header) {
+    return c.req.header(header) ?? null;
+}
+/**
+ * Create default rate limited response
+ */
+function createRateLimitedResponse(c, info) {
+    return c.json({
+        error: true,
+        code: 'RATE_LIMITED',
+        message: 'Too many requests. Please try again later.',
+        retryAfter: info.resetAfterSeconds,
+    }, 429);
+}
+/**
+ * Create rate limiting middleware for Hono
+ *
+ * @example
+ * ```typescript
+ * import { Hono } from 'hono'
+ * import { rateLimit, KVRateLimitStorage } from '@dotdo/postgres/middleware'
+ *
+ * const app = new Hono<{ Bindings: { RATE_LIMIT_KV: KVNamespace } }>()
+ *
+ * // Rate limit by IP: 100 requests per minute
+ * app.use('*', rateLimit({
+ *   requests: 100,
+ *   windowMs: 60000,
+ *   storage: new KVRateLimitStorage(env.RATE_LIMIT_KV),
+ * }))
+ *
+ * // Rate limit by user: 1000 requests per minute
+ * app.use('/api/*', rateLimit({
+ *   requests: 1000,
+ *   windowMs: 60000,
+ *   keyMode: 'user',
+ *   userHeader: 'Authorization',
+ * }))
+ * ```
+ */
+export function rateLimit(options = {}) {
+    const opts = {
+        ...DEFAULT_OPTIONS,
+        ...options,
+    };
+    // Use in-memory storage if none provided (not recommended for production)
+    const storage = opts.storage ?? new InMemoryRateLimitStorage();
+    const limiter = new SlidingWindowRateLimiter({
+        requests: opts.requests,
+        windowMs: opts.windowMs,
+        subWindows: opts.subWindows,
+        storage,
+    });
+    return async (c, next) => {
+        // Check if should skip rate limiting
+        if (options.skip) {
+            const shouldSkip = await options.skip(c);
+            if (shouldSkip) {
+                return next();
+            }
+        }
+        // Extract rate limit key
+        let key = null;
+        switch (opts.keyMode) {
+            case 'ip':
+                key = extractIP(c, opts.ipHeader);
+                break;
+            case 'user':
+                key = extractUser(c, opts.userHeader);
+                break;
+            case 'custom':
+                if (options.keyExtractor) {
+                    key = options.keyExtractor(c);
+                }
+                break;
+        }
+        // If no key could be extracted, skip rate limiting
+        if (!key) {
+            return next();
+        }
+        // Add prefix to key
+        const fullKey = `${opts.keyPrefix}${key}`;
+        // Check rate limit
+        const info = await limiter.check(fullKey);
+        // Set rate limit headers
+        c.header('X-RateLimit-Limit', String(info.limit));
+        c.header('X-RateLimit-Remaining', String(info.remaining));
+        c.header('X-RateLimit-Reset', String(info.resetAfterSeconds));
+        // Store rate limit info in context for downstream use
+        c.set('rateLimitInfo', info);
+        if (info.limited) {
+            // Set Retry-After header (required for 429 responses)
+            c.header('Retry-After', String(info.resetAfterSeconds));
+            // Return rate limited response
+            if (options.onRateLimited) {
+                return options.onRateLimited(c, info);
+            }
+            return createRateLimitedResponse(c, info);
+        }
+        return next();
+    };
+}
+/**
+ * Create rate limit middleware with Durable Object storage
+ */
+export function rateLimitWithDO(storage, options = {}) {
+    return rateLimit({
+        ...options,
+        storage: new DurableObjectRateLimitStorage(storage),
+    });
+}
+/**
+ * Create rate limit middleware with KV storage
+ */
+export function rateLimitWithKV(kv, options = {}) {
+    return rateLimit({
+        ...options,
+        storage: new KVRateLimitStorage(kv),
+    });
+}
+/**
+ * Token bucket rate limiter implementation
+ *
+ * Classic token bucket algorithm:
+ * - Bucket starts full with N tokens
+ * - Each request consumes tokens
+ * - Tokens are added at a constant rate
+ * - Allows bursts up to bucket size
+ */
+export class TokenBucketRateLimiter {
+    bucketSize;
+    tokensPerSecond;
+    tokensPerRequest;
+    storage;
+    constructor(options) {
+        this.bucketSize = options.bucketSize;
+        this.tokensPerSecond = options.tokensPerSecond;
+        this.tokensPerRequest = options.tokensPerRequest;
+        this.storage = options.storage;
+    }
+    /**
+     * Check if a request should be rate limited
+     */
+    async check(key) {
+        const now = Date.now();
+        const existing = await this.storage.get(key);
+        let bucket;
+        if (existing) {
+            // Refill tokens based on time elapsed
+            const elapsed = (now - existing.lastRefill) / 1000;
+            const refilled = elapsed * this.tokensPerSecond;
+            bucket = {
+                tokens: Math.min(this.bucketSize, existing.tokens + refilled),
+                lastRefill: now,
+            };
+        }
+        else {
+            // New bucket starts full
+            bucket = {
+                tokens: this.bucketSize,
+                lastRefill: now,
+            };
+        }
+        const limited = bucket.tokens < this.tokensPerRequest;
+        if (!limited) {
+            // Consume tokens
+            bucket.tokens -= this.tokensPerRequest;
+            await this.storage.set(key, bucket, 3600000); // 1 hour TTL
+        }
+        // Calculate time until bucket is full
+        const tokensNeeded = this.bucketSize - bucket.tokens;
+        const refillsInSeconds = Math.ceil(tokensNeeded / this.tokensPerSecond);
+        return {
+            bucketSize: this.bucketSize,
+            tokens: Math.floor(bucket.tokens),
+            tokensPerRequest: this.tokensPerRequest,
+            refillsInSeconds,
+            limited,
+        };
+    }
+}
+/** Default token bucket options */
+const DEFAULT_TOKEN_BUCKET_OPTIONS = {
+    bucketSize: 10,
+    tokensPerSecond: 1,
+    tokensPerRequest: 1,
+    keyMode: 'ip',
+    keyPrefix: 'tokenbucket:',
+    ipHeader: 'CF-Connecting-IP',
+    userHeader: 'X-User-ID',
+};
+/**
+ * Create token bucket rate limiting middleware
+ *
+ * @example
+ * ```typescript
+ * import { tokenBucket, KVRateLimitStorage } from '@dotdo/postgres/middleware'
+ *
+ * // Allow bursts of 10 requests, refill at 1/second
+ * app.use('*', tokenBucket({
+ *   bucketSize: 10,
+ *   tokensPerSecond: 1,
+ *   storage: new KVRateLimitStorage(env.RATE_LIMIT_KV),
+ * }))
+ * ```
+ */
+export function tokenBucket(options = {}) {
+    const opts = {
+        ...DEFAULT_TOKEN_BUCKET_OPTIONS,
+        ...options,
+    };
+    // Use provided token bucket storage or default in-memory storage
+    const storage = opts.storage ?? new InMemoryTokenBucketStorage();
+    const limiter = new TokenBucketRateLimiter({
+        bucketSize: opts.bucketSize,
+        tokensPerSecond: opts.tokensPerSecond,
+        tokensPerRequest: opts.tokensPerRequest,
+        storage,
+    });
+    return async (c, next) => {
+        if (options.skip) {
+            const shouldSkip = await options.skip(c);
+            if (shouldSkip) {
+                return next();
+            }
+        }
+        let key = null;
+        switch (opts.keyMode) {
+            case 'ip':
+                key = extractIP(c, opts.ipHeader);
+                break;
+            case 'user':
+                key = extractUser(c, opts.userHeader);
+                break;
+            case 'custom':
+                if (options.keyExtractor) {
+                    key = options.keyExtractor(c);
+                }
+                break;
+        }
+        if (!key) {
+            return next();
+        }
+        const fullKey = `${opts.keyPrefix}${key}`;
+        const info = await limiter.check(fullKey);
+        c.header('X-RateLimit-Limit', String(info.bucketSize));
+        c.header('X-RateLimit-Remaining', String(info.tokens));
+        c.header('X-RateLimit-Reset', String(info.refillsInSeconds));
+        c.set('tokenBucketInfo', info);
+        if (info.limited) {
+            c.header('Retry-After', String(Math.ceil(info.tokensPerRequest / opts.tokensPerSecond)));
+            if (options.onRateLimited) {
+                return options.onRateLimited(c, info);
+            }
+            return c.json({
+                error: true,
+                code: 'RATE_LIMITED',
+                message: 'Too many requests. Please try again later.',
+                retryAfter: Math.ceil(info.tokensPerRequest / opts.tokensPerSecond),
+            }, 429);
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AA0JA,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACzB,KAAK,GAAG,IAAI,GAAG,EAA0C,CAAA;IAEjE,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAO,EAAE,KAAa;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED,sCAAsC;IACtC,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,sBAAuC;CAA+B;AAEpH;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,sBAAmC;CAAiC;AAEpH;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IACP;IAApB,YAAoB,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAErD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAI,GAAG,CAAC,CAAA;QAC3C,OAAO,IAAI,IAAI,IAAI,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAO,EAAE,MAAc;QAC5C,4BAA4B;QAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACjC,wDAAwD;QACxD,4DAA4D;IAC9D,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,6BAA8B,SAAQ,gBAAiC;CAA+B;AAEnH;;GAEG;AACH,MAAM,OAAO,+BAAgC,SAAQ,gBAA6B;CAAiC;AAEnH;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IACP;IAApB,YAAoB,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAEvC,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAI,GAAG,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,IAAI,IAAI,IAAI,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAO,EAAE,KAAa;QAC3C,2CAA2C;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;IAC7E,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAmB,SAAQ,gBAAiC;CAA+B;AAExG;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,gBAA6B;CAAiC;AAExG,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAC3B,QAAQ,CAAQ;IAChB,QAAQ,CAAQ;IAChB,UAAU,CAAQ;IAClB,WAAW,CAAQ;IACnB,OAAO,CAAkB;IAEjC,YAAY,OAA6F;QACvG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAA;QACxD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEjD,8BAA8B;QAC9B,IAAI,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;QAElD,wDAAwD;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAE9D,+EAA+E;QAC/E,iEAAiE;QACjE,MAAM,OAAO,GAAG,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAA;QAEjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,+BAA+B;YAC/B,MAAM,qBAAqB,GAAG,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACxE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAE,EAAE,CAAA;YACvC,MAAM,CAAC,KAAK,EAAE,CAAA;YAEd,sBAAsB;YACtB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAA;QACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;QAE1E,2EAA2E;QAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAEtF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;YACpD,iBAAiB;YACjB,OAAO;SACR,CAAA;IACH,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAgC,EAAE,GAAW;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,oBAAoB;YACpB,OAAO;gBACL,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1C,WAAW,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;gBAC3C,KAAK,EAAE,CAAC;aACT,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAA;QAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;QAElE,IAAI,iBAAiB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,yCAAyC;YACzC,OAAO;gBACL,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1C,WAAW,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;gBAC3C,KAAK,EAAE,CAAC;aACT,CAAA;QACH,CAAC;QAED,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1B,kDAAkD;YAClD,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7D,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAA;YACvD,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,QAAQ,CAAC,WAAW,GAAG,iBAAiB,GAAG,IAAI,CAAC,WAAW;gBACxE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAC5C,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAAC,MAAuB,EAAE,IAAY;QAClE,6CAA6C;QAC7C,kEAAkE;QAClE,OAAO,MAAM,CAAC,KAAK,CAAA;IACrB,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,MAAuB,EAAE,GAAW;QACnE,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,WAAW,CAAA;QACxC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;IAC9E,CAAC;CACF;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,iCAAiC;AACjC,MAAM,eAAe,GAA4F;IAC/G,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,kBAAkB;IAC5B,UAAU,EAAE,WAAW;CACxB,CAAA;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,CAAc,EAAE,MAAc;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;IACtG,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,CAAc,EAAE,MAAc;IACjD,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAA;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,CAAc,EAAE,IAAmB;IACpE,OAAO,CAAC,CAAC,IAAI,CACX;QACE,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,4CAA4C;QACrD,UAAU,EAAE,IAAI,CAAC,iBAAiB;KACnC,EACD,GAAG,CACJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE;IACtD,MAAM,IAAI,GAAG;QACX,GAAG,eAAe;QAClB,GAAG,OAAO;KACX,CAAA;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,wBAAwB,EAAE,CAAA;IAE9D,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO;KACR,CAAC,CAAA;IAEF,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,qCAAqC;QACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAgB,CAAC,CAAA;YACvD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,IAAI,EAAE,CAAA;YACf,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,GAAG,GAAkB,IAAI,CAAA;QAC7B,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,IAAI;gBACP,GAAG,GAAG,SAAS,CAAC,CAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAChD,MAAK;YACP,KAAK,MAAM;gBACT,GAAG,GAAG,WAAW,CAAC,CAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBACpD,MAAK;YACP,KAAK,QAAQ;gBACX,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;oBACzB,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAgB,CAAC,CAAA;gBAC9C,CAAC;gBACD,MAAK;QACT,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAA;QAEzC,mBAAmB;QACnB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEzC,yBAAyB;QACzB,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACjD,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QACzD,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAE7D,sDAAsD;QACtD,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;QAE5B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,sDAAsD;YACtD,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;YAEvD,+BAA+B;YAC/B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC,aAAa,CAAC,CAAgB,EAAE,IAAI,CAAC,CAAA;YACtD,CAAC;YACD,OAAO,yBAAyB,CAAC,CAAgB,EAAE,IAAI,CAAC,CAAA;QAC1D,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA6B,EAC7B,UAA6C,EAAE;IAE/C,OAAO,SAAS,CAAC;QACf,GAAG,OAAO;QACV,OAAO,EAAE,IAAI,6BAA6B,CAAC,OAAO,CAAC;KACpD,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAe,EACf,UAA6C,EAAE;IAE/C,OAAO,SAAS,CAAC;QACf,GAAG,OAAO;QACV,OAAO,EAAE,IAAI,kBAAkB,CAAC,EAAE,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC;AA0GD;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IACzB,UAAU,CAAQ;IAClB,eAAe,CAAQ;IACvB,gBAAgB,CAAQ;IACxB,OAAO,CAAoB;IAEnC,YAAY,OAAoI;QAC9I,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAA;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAE5C,IAAI,MAAmB,CAAA;QACvB,IAAI,QAAQ,EAAE,CAAC;YACb,sCAAsC;YACtC,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;YAClD,MAAM,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC,eAAe,CAAA;YAC/C,MAAM,GAAG;gBACP,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC7D,UAAU,EAAE,GAAG;aAChB,CAAA;QACH,CAAC;aAAM,CAAC;YACN,yBAAyB;YACzB,MAAM,GAAG;gBACP,MAAM,EAAE,IAAI,CAAC,UAAU;gBACvB,UAAU,EAAE,GAAG;aAChB,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAA;QAErD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iBAAiB;YACjB,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAA;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA,CAAC,aAAa;QAC5D,CAAC;QAED,sCAAsC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAA;QACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,CAAA;QAEvE,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,gBAAgB;YAChB,OAAO;SACR,CAAA;IACH,CAAC;CACF;AAED,mCAAmC;AACnC,MAAM,4BAA4B,GAA8F;IAC9H,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,CAAC;IAClB,gBAAgB,EAAE,CAAC;IACnB,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,UAAU,EAAE,WAAW;CACxB,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IAC1D,MAAM,IAAI,GAAG;QACX,GAAG,4BAA4B;QAC/B,GAAG,OAAO;KACX,CAAA;IAED,iEAAiE;IACjE,MAAM,OAAO,GAAuB,IAAI,CAAC,OAAO,IAAI,IAAI,0BAA0B,EAAE,CAAA;IAEpF,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,OAAO;KACR,CAAC,CAAA;IAEF,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAgB,CAAC,CAAA;YACvD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,IAAI,EAAE,CAAA;YACf,CAAC;QACH,CAAC;QAED,IAAI,GAAG,GAAkB,IAAI,CAAA;QAC7B,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,IAAI;gBACP,GAAG,GAAG,SAAS,CAAC,CAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAChD,MAAK;YACP,KAAK,MAAM;gBACT,GAAG,GAAG,WAAW,CAAC,CAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBACpD,MAAK;YACP,KAAK,QAAQ;gBACX,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;oBACzB,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAgB,CAAC,CAAA;gBAC9C,CAAC;gBACD,MAAK;QACT,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAA;QACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEzC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;QACtD,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QACtD,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAE5D,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;QAE9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAExF,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC,aAAa,CAAC,CAAgB,EAAE,IAAI,CAAC,CAAA;YACtD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,4CAA4C;gBACrD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC;aACpE,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC"}