@proteinjs/user-server 1.22.1 → 1.22.2

package/dist/test/RequestDigests.test.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var crypto_1 = require("crypto");
+var RequestDigests_1 = require("../src/throttle/RequestDigests");
+/**
+ * The two keyed digests the throttled doors key their windows on and write on their log lines:
+ * the account digest (a keyed hash of the lowercased address) and the coarse IP hash. Both are
+ * stable for one key (so an operator can say "one account, one device" across lines, pods and
+ * restarts) and useless without it (never the address, never a plain hash a list of addresses
+ * could reverse).
+ */
+describe('RequestDigests', function () {
+    var digests = new RequestDigests_1.RequestDigests({ secret: 'test-session-secret' });
+    it('the account digest is stable for one address whatever its case or surrounding spaces', function () {
+        var digest = digests.account('Ada.Lovelace@Example.com');
+        expect(digest).toMatch(/^[0-9a-f]{16}$/);
+        expect(digests.account('ada.lovelace@example.com')).toBe(digest);
+        expect(digests.account('  ADA.LOVELACE@EXAMPLE.COM ')).toBe(digest);
+        expect(digests.account('ada.lovelace@example.org')).not.toBe(digest);
+    });
+    it('the account digest is keyed: another key gives another digest, and it is no plain hash of the address', function () {
+        var address = 'ada.lovelace@example.com';
+        var digest = digests.account(address);
+        expect(new RequestDigests_1.RequestDigests({ secret: 'another-secret' }).account(address)).not.toBe(digest);
+        expect((0, crypto_1.createHash)('sha256').update(address).digest('hex')).not.toContain(digest);
+        expect(digest).not.toContain('ada');
+    });
+    it('the account digest and the coarse IP hash are separate: one value never reads as the other', function () {
+        expect(digests.account('203.0.113.7')).not.toBe(digests.coarseIp('203.0.113.7'));
+    });
+    it('the coarse IP hash is stable for one IPv4 address and differs for the next', function () {
+        var hash = digests.coarseIp('203.0.113.7');
+        expect(hash).toMatch(/^[0-9a-f]{16}$/);
+        expect(digests.coarseIp('203.0.113.7')).toBe(hash);
+        expect(digests.coarseIp('::ffff:203.0.113.7')).toBe(hash);
+        expect(digests.coarseIp('203.0.113.8')).not.toBe(hash);
+    });
+    it('IPv6 is coarsened to its /64 — one device rotates freely inside its own /64', function () {
+        var hash = digests.coarseIp('2001:db8:1:2:aaaa:bbbb:cccc:dddd');
+        expect(digests.coarseIp('2001:db8:1:2::1')).toBe(hash);
+        expect(digests.coarseIp('2001:0db8:0001:0002:ffff:0:0:1')).toBe(hash);
+        expect(digests.coarseIp('2001:db8:1:3::1')).not.toBe(hash);
+    });
+    it('with no key configured the digests refuse to run — never a plain hash, never a key of their own', function () {
+        var original = process.env.SESSION_SECRET;
+        delete process.env.SESSION_SECRET;
+        try {
+            expect(function () { return new RequestDigests_1.RequestDigests().account('ada.lovelace@example.com'); }).toThrow(/SESSION_SECRET/);
+            expect(function () { return new RequestDigests_1.RequestDigests({ secret: '' }).coarseIp('203.0.113.7'); }).toThrow(/SESSION_SECRET/);
+        }
+        finally {
+            if (original !== undefined) {
+                process.env.SESSION_SECRET = original;
+            }
+        }
+    });
+    it('reads the key the deployment configures (SESSION_SECRET) when none is passed', function () {
+        var original = process.env.SESSION_SECRET;
+        process.env.SESSION_SECRET = 'test-session-secret';
+        try {
+            expect(new RequestDigests_1.RequestDigests().account('ada.lovelace@example.com')).toBe(digests.account('ada.lovelace@example.com'));
+        }
+        finally {
+            if (original === undefined) {
+                delete process.env.SESSION_SECRET;
+            }
+            else {
+                process.env.SESSION_SECRET = original;
+            }
+        }
+    });
+});
+//# sourceMappingURL=RequestDigests.test.js.map

package/dist/test/RequestDigests.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestDigests.test.js","sourceRoot":"","sources":["../../test/RequestDigests.test.ts"],"names":[],"mappings":";;AAAA,iCAAoC;AACpC,iEAAgE;AAEhE;;;;;;GAMG;AACH,QAAQ,CAAC,gBAAgB,EAAE;IACzB,IAAM,OAAO,GAAG,IAAI,+BAAc,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAEtE,EAAE,CAAC,sFAAsF,EAAE;QACzF,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uGAAuG,EAAE;QAC1G,IAAM,OAAO,GAAG,0BAA0B,CAAC;QAC3C,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,+BAAc,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE;QAC/F,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE;QAC/E,IAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE;QAChF,IAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;QAElE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE;QACpG,IAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAClC,IAAI;YACF,MAAM,CAAC,cAAM,OAAA,IAAI,+BAAc,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAxD,CAAwD,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACjG,MAAM,CAAC,cAAM,OAAA,IAAI,+BAAc,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAA1D,CAA0D,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;SACpG;gBAAS;YACR,IAAI,QAAQ,KAAK,SAAS,EAAE;gBAC1B,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;aACvC;SACF;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE;QACjF,IAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QACnD,IAAI;YACF,MAAM,CAAC,IAAI,+BAAc,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CACnE,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAC5C,CAAC;SACH;gBAAS;YACR,IAAI,QAAQ,KAAK,SAAS,EAAE;gBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;aACnC;iBAAM;gBACL,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;aACvC;SACF;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/SlidingWindow.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SlidingWindow.test.d.ts.map

package/dist/test/SlidingWindow.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlidingWindow.test.d.ts","sourceRoot":"","sources":["../../test/SlidingWindow.test.ts"],"names":[],"mappings":""}

package/dist/test/SlidingWindow.test.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var SlidingWindow_1 = require("../src/throttle/SlidingWindow");
+/**
+ * The per-key sliding window every throttled door shares (the sign-in and reset doors here, the
+ * invite-request door in the consuming app): `hit` records and answers whether the key is over,
+ * `isOver` only reads, `record` only counts, `clear` forgets. Attempts refused as over the window
+ * are not counted, so a key drains exactly one window after its last counted attempt.
+ */
+describe('SlidingWindow', function () {
+    var MINUTE = 60 * 1000;
+    var now = 1700000000000;
+    var clock = function () { return now; };
+    it('admits up to the limit inside the window and refuses the next', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 3, now: clock });
+        expect([window.hit('a'), window.hit('a'), window.hit('a')]).toEqual([false, false, false]);
+        expect(window.hit('a')).toBe(true);
+        expect(window.isOver('a')).toBe(true);
+    });
+    it('keeps each key in its own window', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        window.hit('a');
+        window.hit('a');
+        expect(window.hit('a')).toBe(true);
+        expect(window.hit('b')).toBe(false);
+    });
+    it('drains: an attempt older than the window no longer counts, and refused attempts never counted', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        window.hit('a');
+        now += 4 * MINUTE;
+        window.hit('a');
+        now += 5 * MINUTE;
+        expect(window.hit('a')).toBe(true); // both counted attempts are still inside the window
+        now += 1 * MINUTE + 1; // the first counted attempt left the window; the refused one never counted
+        expect(window.hit('a')).toBe(false);
+        expect(window.hit('a')).toBe(true);
+    });
+    it('isOver reads without counting; record counts without answering; clear forgets the key', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        expect(window.isOver('a')).toBe(false);
+        expect(window.isOver('a')).toBe(false);
+        window.record('a');
+        expect(window.isOver('a')).toBe(false);
+        window.record('a');
+        expect(window.isOver('a')).toBe(true);
+        window.clear('a');
+        expect(window.isOver('a')).toBe(false);
+    });
+    it('forgive uncounts the latest attempt only', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        window.hit('a');
+        window.hit('a');
+        expect(window.isOver('a')).toBe(true);
+        window.forgive('a');
+        expect(window.isOver('a')).toBe(false);
+        expect(window.hit('a')).toBe(false);
+        expect(window.hit('a')).toBe(true);
+        window.forgive('b'); // a key never seen: nothing to uncount, nothing thrown
+        expect(window.isOver('b')).toBe(false);
+    });
+    it('bounds the keys it tracks: at the bound the oldest-touched key is forgotten first', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 1, maxKeys: 2, now: clock });
+        window.hit('a');
+        window.hit('b');
+        window.hit('a'); // refused, but 'a' is now the most recently touched
+        window.hit('c'); // at the bound: 'b' (oldest-touched) is forgotten
+        expect(window.isOver('a')).toBe(true);
+        expect(window.isOver('b')).toBe(false);
+        expect(window.isOver('c')).toBe(true);
+    });
+});
+//# sourceMappingURL=SlidingWindow.test.js.map

package/dist/test/SlidingWindow.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlidingWindow.test.js","sourceRoot":"","sources":["../../test/SlidingWindow.test.ts"],"names":[],"mappings":";;AAAA,+DAA8D;AAE9D;;;;;GAKG;AACH,QAAQ,CAAC,eAAe,EAAE;IACxB,IAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,IAAI,GAAG,GAAG,aAAiB,CAAC;IAC5B,IAAM,KAAK,GAAG,cAAM,OAAA,GAAG,EAAH,CAAG,CAAC;IAExB,EAAE,CAAC,+DAA+D,EAAE;QAClE,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE;QACrC,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE;QAClG,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD;QAExF,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,2EAA2E;QAClG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE;QAC1F,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE;QAC7C,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,uDAAuD;QAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE;QACtF,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD;QAErE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,kDAAkD;QAEnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}