@venturekit/runtime 0.0.0-dev.20260312012510 → 0.0.0-dev.20260329093916

package/dist/logging/tracing.js

@@ -0,0 +1,77 @@
+/**
+ * VentureKit Distributed Tracing
+ *
+ * Correlation ID / trace ID propagation across Lambda invocations.
+ * Integrates with X-Ray trace IDs and custom trace context.
+ */
+/**
+ * Trace headers used for propagation
+ */
+export const TRACE_HEADERS = {
+    TRACE_ID: 'x-trace-id',
+    SPAN_ID: 'x-span-id',
+    PARENT_SPAN_ID: 'x-parent-span-id',
+    BAGGAGE: 'x-trace-baggage',
+};
+/**
+ * Generate a random ID (16 hex chars)
+ */
+export function generateId() {
+    const bytes = new Uint8Array(8);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Extract trace context from request headers
+ */
+export function extractTraceContext(headers) {
+    const traceId = headers[TRACE_HEADERS.TRACE_ID] || generateId();
+    const parentSpanId = headers[TRACE_HEADERS.SPAN_ID]; // caller's span becomes our parent
+    const spanId = generateId(); // new span for this request
+    let baggage = {};
+    const baggageHeader = headers[TRACE_HEADERS.BAGGAGE];
+    if (baggageHeader) {
+        try {
+            baggage = JSON.parse(baggageHeader);
+        }
+        catch {
+            // Invalid baggage header, ignore
+        }
+    }
+    return { traceId, spanId, parentSpanId, baggage };
+}
+/**
+ * Serialize trace context into headers for outbound requests
+ */
+export function injectTraceHeaders(trace) {
+    const headers = {
+        [TRACE_HEADERS.TRACE_ID]: trace.traceId,
+        [TRACE_HEADERS.SPAN_ID]: trace.spanId,
+    };
+    if (trace.parentSpanId) {
+        headers[TRACE_HEADERS.PARENT_SPAN_ID] = trace.parentSpanId;
+    }
+    if (Object.keys(trace.baggage).length > 0) {
+        headers[TRACE_HEADERS.BAGGAGE] = JSON.stringify(trace.baggage);
+    }
+    return headers;
+}
+/**
+ * Create a child trace context (for outbound calls)
+ */
+export function createChildTrace(parent) {
+    return {
+        traceId: parent.traceId,
+        spanId: generateId(),
+        parentSpanId: parent.spanId,
+        baggage: { ...parent.baggage },
+    };
+}
+/**
+ * Extract trace context from a RequestContext
+ * (reads from rawEvent headers)
+ */
+export function traceFromRequest(ctx) {
+    return extractTraceContext(ctx.rawEvent.headers || {});
+}
+//# sourceMappingURL=tracing.js.map

package/dist/logging/tracing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../../src/logging/tracing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,WAAW;IACpB,cAAc,EAAE,kBAAkB;IAClC,OAAO,EAAE,iBAAiB;CAClB,CAAC;AAEX;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA2C;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC;IACxF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,CAAC,4BAA4B;IAEzD,IAAI,OAAO,GAA2B,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAmB;IACpD,MAAM,OAAO,GAA2B;QACtC,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,OAAO;QACvC,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM;KACtC,CAAC;IAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,UAAU,EAAE;QACpB,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,OAAO,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/middleware/middleware.d.ts

@@ -0,0 +1,120 @@
+/**
+ * VentureKit Middleware
+ *
+ * Composable middleware for request processing.
+ * Extensible for auth, tenancy, rate limiting, etc.
+ */
+import type { APIGatewayProxyResultV2 } from 'aws-lambda';
+import { BaseContext, RequestContext } from '../handler/context.js';
+import { Logger } from '../logging/logger.js';
+/**
+ * Middleware function signature.
+ *
+ * Generic over the context type so the same interface works for both
+ * HTTP route handlers (`RequestContext`) and task handlers (`TaskContext`).
+ * Middleware written against `BaseContext` is reusable across all handler types.
+ */
+export type MiddlewareFn<TCtx extends BaseContext = BaseContext> = (ctx: TCtx, next: () => Promise<any>) => Promise<any>;
+/**
+ * Middleware with configuration.
+ *
+ * Use without a type parameter to write middleware that works everywhere:
+ * ```typescript
+ * const timing: Middleware = {
+ *   name: 'timing',
+ *   fn: async (ctx, next) => {
+ *     const start = Date.now();
+ *     const result = await next();
+ *     console.log(`${ctx.requestId} took ${Date.now() - start}ms`);
+ *     return result;
+ *   },
+ * };
+ * ```
+ */
+export interface Middleware<TCtx extends BaseContext = BaseContext> {
+    name: string;
+    fn: MiddlewareFn<TCtx>;
+}
+/**
+ * Compose multiple middleware into a single function
+ */
+export declare function compose(middlewares: Middleware<RequestContext>[]): MiddlewareFn<RequestContext>;
+/**
+ * Logging middleware - logs request/response
+ */
+export declare function loggingMiddleware(logger: Logger): Middleware<RequestContext>;
+/**
+ * CORS middleware - adds CORS headers
+ */
+export declare function corsMiddleware(options: {
+    allowOrigins: string[];
+    allowMethods: string[];
+    allowHeaders: string[];
+    allowCredentials: boolean;
+    maxAge: number;
+}): Middleware<RequestContext>;
+/**
+ * Timeout middleware - enforces request timeout
+ */
+export declare function timeoutMiddleware(timeoutMs: number): Middleware<RequestContext>;
+/**
+ * Error boundary middleware - catches and formats errors
+ */
+export declare function errorBoundaryMiddleware(errorHandler: (error: unknown, ctx: RequestContext) => APIGatewayProxyResultV2): Middleware<RequestContext>;
+/**
+ * Rate limit check function type.
+ * Returns { allowed, remaining, resetAt } for the given key.
+ */
+export interface RateLimitCheck {
+    (key: string): Promise<{
+        allowed: boolean;
+        remaining: number;
+        limit: number;
+        resetAt: number;
+    }>;
+}
+/**
+ * Rate limiting middleware options
+ */
+export interface RateLimitOptions {
+    /** Function that checks and increments the rate limit counter */
+    check: RateLimitCheck;
+    /** Extract the rate limit key from the request (default: sourceIp) */
+    keyExtractor?: (ctx: RequestContext) => string;
+}
+/**
+ * Rate limiting middleware
+ *
+ * Uses an external check function so the storage backend is pluggable
+ * (DynamoDB, Redis, in-memory, etc.).
+ */
+export declare function rateLimitMiddleware(options: RateLimitOptions): Middleware<RequestContext>;
+/**
+ * Request ID propagation middleware
+ *
+ * Ensures every response includes an X-Request-Id header.
+ * Uses the existing requestId from context (from API Gateway)
+ * or an incoming X-Request-Id header for distributed tracing.
+ */
+export declare function requestIdMiddleware(): Middleware<RequestContext>;
+/**
+ * Timing/metrics middleware
+ *
+ * Adds Server-Timing header with total request duration.
+ * Optionally calls a metrics callback for custom reporting.
+ */
+export declare function timingMiddleware(options?: {
+    onMetrics?: (ctx: RequestContext, durationMs: number, statusCode?: number) => void;
+}): Middleware<RequestContext>;
+/**
+ * API Key authentication middleware
+ *
+ * Validates an API key from a configurable header against a validation function.
+ */
+export declare function apiKeyAuthMiddleware(options: {
+    /** Header name to read the API key from (default: x-api-key) */
+    headerName?: string;
+    /** Validate the API key. Return true if valid. */
+    validate: (apiKey: string) => Promise<boolean> | boolean;
+}): Middleware<RequestContext>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAA0B,uBAAuB,EAAqC,MAAM,YAAY,CAAC;AACrH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,CAAC,IAAI,SAAS,WAAW,GAAG,WAAW,IAAI,CACjE,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,KACrB,OAAO,CAAC,GAAG,CAAC,CAAC;AAElB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,UAAU,CAAC,IAAI,SAAS,WAAW,GAAG,WAAW;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,CAoB/F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,CAsC5E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,UAAU,CAAC,cAAc,CAAC,CA2C7B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,CAa/E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,KAAK,uBAAuB,GAC7E,UAAU,CAAC,cAAc,CAAC,CAW5B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,KAAK,EAAE,cAAc,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC;CAChD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,UAAU,CAAC,cAAc,CAAC,CAwCzF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CAAC,cAAc,CAAC,CAwBhE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IACzC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACpF,GAAG,UAAU,CAAC,cAAc,CAAC,CAsB7B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC1D,GAAG,UAAU,CAAC,cAAc,CAAC,CA+B7B"}

package/dist/middleware/middleware.js

@@ -0,0 +1,270 @@
+/**
+ * VentureKit Middleware
+ *
+ * Composable middleware for request processing.
+ * Extensible for auth, tenancy, rate limiting, etc.
+ */
+/**
+ * Compose multiple middleware into a single function
+ */
+export function compose(middlewares) {
+    return async (ctx, finalHandler) => {
+        let index = -1;
+        const dispatch = async (i) => {
+            if (i <= index) {
+                throw new Error('next() called multiple times');
+            }
+            index = i;
+            if (i >= middlewares.length) {
+                return finalHandler();
+            }
+            const middleware = middlewares[i];
+            return middleware.fn(ctx, () => dispatch(i + 1));
+        };
+        return dispatch(0);
+    };
+}
+/**
+ * Logging middleware - logs request/response
+ */
+export function loggingMiddleware(logger) {
+    return {
+        name: 'logging',
+        fn: async (ctx, next) => {
+            const start = Date.now();
+            logger.info('Request started', {
+                method: ctx.method,
+                path: ctx.path,
+                sourceIp: ctx.sourceIp,
+            });
+            try {
+                const response = await next();
+                const duration = Date.now() - start;
+                logger.info('Request completed', {
+                    method: ctx.method,
+                    path: ctx.path,
+                    statusCode: typeof response === 'object' ? response.statusCode : undefined,
+                    duration,
+                });
+                return response;
+            }
+            catch (error) {
+                const duration = Date.now() - start;
+                logger.error('Request failed', {
+                    method: ctx.method,
+                    path: ctx.path,
+                    duration,
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                throw error;
+            }
+        },
+    };
+}
+/**
+ * CORS middleware - adds CORS headers
+ */
+export function corsMiddleware(options) {
+    return {
+        name: 'cors',
+        fn: async (ctx, next) => {
+            const origin = ctx.rawEvent.headers?.origin || '';
+            const allowedOrigin = options.allowOrigins.includes('*')
+                ? '*'
+                : options.allowOrigins.includes(origin)
+                    ? origin
+                    : '';
+            // Handle preflight
+            if (ctx.method === 'OPTIONS') {
+                return {
+                    statusCode: 204,
+                    headers: {
+                        'Access-Control-Allow-Origin': allowedOrigin,
+                        'Access-Control-Allow-Methods': options.allowMethods.join(', '),
+                        'Access-Control-Allow-Headers': options.allowHeaders.join(', '),
+                        'Access-Control-Allow-Credentials': String(options.allowCredentials),
+                        'Access-Control-Max-Age': String(options.maxAge),
+                    },
+                    body: '',
+                };
+            }
+            const response = await next();
+            // Add CORS headers to response
+            if (typeof response !== 'object' || response === null) {
+                return response;
+            }
+            const resp = response;
+            const corsHeaders = {
+                'Access-Control-Allow-Origin': allowedOrigin,
+            };
+            if (options.allowCredentials) {
+                corsHeaders['Access-Control-Allow-Credentials'] = 'true';
+            }
+            resp.headers = { ...resp.headers, ...corsHeaders };
+            return resp;
+        },
+    };
+}
+/**
+ * Timeout middleware - enforces request timeout
+ */
+export function timeoutMiddleware(timeoutMs) {
+    return {
+        name: 'timeout',
+        fn: async (ctx, next) => {
+            const timeoutPromise = new Promise((_, reject) => {
+                setTimeout(() => {
+                    reject(new Error(`Request timeout after ${timeoutMs}ms`));
+                }, timeoutMs);
+            });
+            return Promise.race([next(), timeoutPromise]);
+        },
+    };
+}
+/**
+ * Error boundary middleware - catches and formats errors
+ */
+export function errorBoundaryMiddleware(errorHandler) {
+    return {
+        name: 'errorBoundary',
+        fn: async (ctx, next) => {
+            try {
+                return await next();
+            }
+            catch (error) {
+                return errorHandler(error, ctx);
+            }
+        },
+    };
+}
+/**
+ * Rate limiting middleware
+ *
+ * Uses an external check function so the storage backend is pluggable
+ * (DynamoDB, Redis, in-memory, etc.).
+ */
+export function rateLimitMiddleware(options) {
+    const { check, keyExtractor = (ctx) => ctx.sourceIp } = options;
+    return {
+        name: 'rateLimit',
+        fn: async (ctx, next) => {
+            const key = keyExtractor(ctx);
+            const result = await check(key);
+            if (!result.allowed) {
+                return {
+                    statusCode: 429,
+                    headers: {
+                        'Retry-After': String(Math.ceil((result.resetAt - Date.now()) / 1000)),
+                        'X-RateLimit-Limit': String(result.limit),
+                        'X-RateLimit-Remaining': '0',
+                        'X-RateLimit-Reset': String(result.resetAt),
+                    },
+                    body: JSON.stringify({
+                        error: { code: 'RATE_LIMITED', message: 'Too many requests' },
+                    }),
+                };
+            }
+            const response = await next();
+            // Add rate limit headers to response
+            if (typeof response === 'object' && response !== null) {
+                const resp = response;
+                resp.headers = {
+                    ...resp.headers,
+                    'X-RateLimit-Limit': String(result.limit),
+                    'X-RateLimit-Remaining': String(result.remaining),
+                    'X-RateLimit-Reset': String(result.resetAt),
+                };
+            }
+            return response;
+        },
+    };
+}
+/**
+ * Request ID propagation middleware
+ *
+ * Ensures every response includes an X-Request-Id header.
+ * Uses the existing requestId from context (from API Gateway)
+ * or an incoming X-Request-Id header for distributed tracing.
+ */
+export function requestIdMiddleware() {
+    return {
+        name: 'requestId',
+        fn: async (ctx, next) => {
+            // Prefer incoming header for distributed tracing, fall back to API Gateway request ID
+            const incomingId = ctx.rawEvent.headers?.['x-request-id'];
+            if (incomingId) {
+                ctx.requestId = incomingId;
+            }
+            const response = await next();
+            // Inject X-Request-Id into response
+            if (typeof response === 'object' && response !== null) {
+                const resp = response;
+                resp.headers = {
+                    ...resp.headers,
+                    'X-Request-Id': ctx.requestId,
+                };
+            }
+            return response;
+        },
+    };
+}
+/**
+ * Timing/metrics middleware
+ *
+ * Adds Server-Timing header with total request duration.
+ * Optionally calls a metrics callback for custom reporting.
+ */
+export function timingMiddleware(options) {
+    return {
+        name: 'timing',
+        fn: async (ctx, next) => {
+            const start = Date.now();
+            const response = await next();
+            const duration = Date.now() - start;
+            // Add Server-Timing header
+            if (typeof response === 'object' && response !== null) {
+                const resp = response;
+                resp.headers = {
+                    ...resp.headers,
+                    'Server-Timing': `total;dur=${duration}`,
+                };
+                options?.onMetrics?.(ctx, duration, resp.statusCode);
+            }
+            return response;
+        },
+    };
+}
+/**
+ * API Key authentication middleware
+ *
+ * Validates an API key from a configurable header against a validation function.
+ */
+export function apiKeyAuthMiddleware(options) {
+    const headerName = (options.headerName ?? 'x-api-key').toLowerCase();
+    return {
+        name: 'apiKeyAuth',
+        fn: async (ctx, next) => {
+            // Read API key from header (headers are lowercased in API Gateway V2)
+            const apiKey = ctx.rawEvent.headers?.[headerName];
+            if (!apiKey) {
+                return {
+                    statusCode: 401,
+                    body: JSON.stringify({
+                        error: { code: 'UNAUTHORIZED', message: 'API key is required' },
+                    }),
+                };
+            }
+            const isValid = await options.validate(apiKey);
+            if (!isValid) {
+                return {
+                    statusCode: 401,
+                    body: JSON.stringify({
+                        error: { code: 'UNAUTHORIZED', message: 'Invalid API key' },
+                    }),
+                };
+            }
+            return next();
+        },
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/middleware/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuCH;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,WAAyC;IAC/D,OAAO,KAAK,EAAE,GAAmB,EAAE,YAAoD,EAAE,EAAE;QACzF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAS,EAAoC,EAAE;YACrE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,YAAY,EAAE,CAAC;YACxB,CAAC;YAED,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC;QAEF,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO;QACL,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEzB,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBAEpC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,UAAU,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAE,QAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;oBACnF,QAAQ;iBACT,CAAC,CAAC;gBAEH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBAEpC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;oBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,QAAQ;oBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAM9B;IACC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;YAClD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACtD,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACrC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,EAAE,CAAC;YAET,mBAAmB;YACnB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO;oBACL,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,6BAA6B,EAAE,aAAa;wBAC5C,8BAA8B,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC/D,8BAA8B,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC/D,kCAAkC,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;wBACpE,wBAAwB,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;qBACjD;oBACD,IAAI,EAAE,EAAE;iBACT,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAE9B,+BAA+B;YAC/B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,GAAG,QAA6C,CAAC;YAC3D,MAAM,WAAW,GAA2B;gBAC1C,6BAA6B,EAAE,aAAa;aAC7C,CAAC;YACF,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,WAAW,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,SAAS,IAAI,CAAC,CAAC,CAAC;gBAC5D,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAA8E;IAE9E,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAyBD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;wBACtE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;wBACzC,uBAAuB,EAAE,GAAG;wBAC5B,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;qBAC5C;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE;qBAC9D,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAE9B,qCAAqC;YACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,QAA6C,CAAC;gBAC3D,IAAI,CAAC,OAAO,GAAG;oBACb,GAAG,IAAI,CAAC,OAAO;oBACf,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;oBACzC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;oBACjD,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC5C,CAAC;YACJ,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,sFAAsF;YACtF,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;YAC1D,IAAI,UAAU,EAAE,CAAC;gBACd,GAAW,CAAC,SAAS,GAAG,UAAU,CAAC;YACtC,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAE9B,oCAAoC;YACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,QAA6C,CAAC;gBAC3D,IAAI,CAAC,OAAO,GAAG;oBACb,GAAG,IAAI,CAAC,OAAO;oBACf,cAAc,EAAE,GAAG,CAAC,SAAS;iBAC9B,CAAC;YACJ,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAEhC;IACC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAEpC,2BAA2B;YAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,QAA6C,CAAC;gBAC3D,IAAI,CAAC,OAAO,GAAG;oBACb,GAAG,IAAI,CAAC,OAAO;oBACf,eAAe,EAAE,aAAa,QAAQ,EAAE;iBACzC,CAAC;gBAEF,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAKpC;IACC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAErE,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,sEAAsE;YACtE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;YAElD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE;qBAChE,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,EAAE;qBAC5D,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/middleware/rate-limit-store.d.ts

@@ -0,0 +1,153 @@
+/**
+ * VentureKit Rate Limit Stores
+ *
+ * Pluggable backends for the rateLimitMiddleware.
+ *
+ * - `createDynamoDBRateLimitStore()` — production-ready, distributed
+ * - `createMemoryRateLimitStore()` — for local dev/testing only
+ * - `createDefaultRateLimiter()` — zero-config rate limiter with sensible defaults
+ */
+import type { RateLimitCheck } from './middleware.js';
+/**
+ * Rate limit preset name.
+ */
+export type RateLimitPreset = 'relaxed' | 'standard' | 'strict' | 'api-key';
+/**
+ * Rate limit preset configuration.
+ */
+export interface RateLimitPresetConfig {
+    /** Max requests per window */
+    limit: number;
+    /** Window size in milliseconds */
+    windowMs: number;
+}
+/**
+ * Built-in rate limit presets covering common requirements.
+ *
+ * | Preset     | Limit   | Window | Use Case                              |
+ * |------------|---------|--------|---------------------------------------|
+ * | `relaxed`  | 200/min | 60s    | Internal APIs, dev environments       |
+ * | `standard` | 100/min | 60s    | Public APIs, most production needs    |
+ * | `strict`   | 20/min  | 60s    | Auth endpoints, sensitive operations  |
+ * | `api-key`  | 1000/min| 60s    | Authenticated API-key consumers       |
+ */
+export declare const RATE_LIMIT_PRESETS: Record<RateLimitPreset, RateLimitPresetConfig>;
+/**
+ * Create an in-memory rate limit check function.
+ *
+ * **WARNING:** This stores counters in the Lambda process memory.
+ * It does NOT work correctly with multiple Lambda instances.
+ * Use only for local development and testing.
+ *
+ * For production, use `createDynamoDBRateLimitStore()`.
+ */
+export declare function createMemoryRateLimitStore(options?: {
+    /** Max requests per window (default: 100) */
+    limit?: number;
+    /** Window size in ms (default: 60000 = 1 minute) */
+    windowMs?: number;
+    /** Or use a preset */
+    preset?: RateLimitPreset;
+}): RateLimitCheck;
+/**
+ * DynamoDB rate limit store options.
+ */
+export interface DynamoDBRateLimitStoreOptions {
+    /** DynamoDB table name (default: 'venturekit-rate-limits') */
+    tableName?: string;
+    /** Max requests per window (default: 100) */
+    limit?: number;
+    /** Window size in ms (default: 60000 = 1 minute) */
+    windowMs?: number;
+    /** Or use a preset */
+    preset?: RateLimitPreset;
+    /** AWS region (default: process.env.AWS_REGION) */
+    region?: string;
+}
+/**
+ * Create a DynamoDB-backed rate limit check function.
+ *
+ * Uses atomic `UpdateItem` with `ADD` to safely increment counters
+ * across multiple Lambda instances. Expired entries are automatically
+ * cleaned up via DynamoDB TTL.
+ *
+ * ### DynamoDB Table Schema
+ *
+ * The table must have:
+ * - **Partition key:** `pk` (String) — the rate limit key
+ * - **TTL attribute:** `ttl` (Number) — epoch seconds for auto-cleanup
+ *
+ * You can create this table via infrastructure intents or manually:
+ *
+ * ```bash
+ * aws dynamodb create-table \
+ *   --table-name venturekit-rate-limits \
+ *   --attribute-definitions AttributeName=pk,AttributeType=S \
+ *   --key-schema AttributeName=pk,KeyType=HASH \
+ *   --billing-mode PAY_PER_REQUEST
+ *
+ * aws dynamodb update-time-to-live \
+ *   --table-name venturekit-rate-limits \
+ *   --time-to-live-specification "Enabled=true, AttributeName=ttl"
+ * ```
+ *
+ * @example
+ * ```typescript
+ * import { rateLimitMiddleware } from '@venturekit/runtime';
+ * import { createDynamoDBRateLimitStore } from '@venturekit/runtime';
+ *
+ * const rateLimit = rateLimitMiddleware({
+ *   check: await createDynamoDBRateLimitStore({ preset: 'standard' }),
+ * });
+ * ```
+ */
+export declare function createDynamoDBRateLimitStore(options?: DynamoDBRateLimitStoreOptions): Promise<RateLimitCheck>;
+/**
+ * Options for the default rate limiter.
+ *
+ * Resolution order for `limit` and `windowMs`:
+ * 1. Explicit value (`limit` / `windowMs`) — highest priority
+ * 2. Preset values (if `preset` is provided)
+ * 3. Built-in defaults (100 req / 60 000 ms)
+ *
+ * This means you can use a preset as a base and selectively override
+ * individual values, e.g. `{ preset: 'strict', limit: 50 }`.
+ */
+export interface DefaultRateLimiterOptions {
+    /** Preset to use (no default — uses built-in 100 req/min when omitted) */
+    preset?: RateLimitPreset;
+    /** Custom limit (overrides preset if both are provided) */
+    limit?: number;
+    /** Custom window in ms (overrides preset if both are provided) */
+    windowMs?: number;
+    /** DynamoDB table name (default: 'venturekit-rate-limits') */
+    tableName?: string;
+    /** Force in-memory store even in production (NOT recommended) */
+    forceMemory?: boolean;
+}
+/**
+ * Create a rate limit check function with sensible defaults.
+ *
+ * - In production (Lambda): uses DynamoDB for distributed rate limiting
+ * - In local dev: uses in-memory store
+ *
+ * This is the recommended way to add rate limiting with minimal configuration.
+ *
+ * @example
+ * ```typescript
+ * import { rateLimitMiddleware } from '@venturekit/runtime';
+ * import { createDefaultRateLimiter } from '@venturekit/runtime';
+ *
+ * // Zero-config — uses 'standard' preset (100 req/min)
+ * const rateLimit = rateLimitMiddleware({
+ *   check: await createDefaultRateLimiter(),
+ * });
+ *
+ * // Strict for auth endpoints
+ * const authRateLimit = rateLimitMiddleware({
+ *   check: await createDefaultRateLimiter({ preset: 'strict' }),
+ * });
+ * ```
+ */
+export declare function createDefaultRateLimiter(options?: DefaultRateLimiterOptions): Promise<RateLimitCheck>;
+//# sourceMappingURL=rate-limit-store.d.ts.map

package/dist/middleware/rate-limit-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAMtD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAK7E,CAAC;AAMF;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACnD,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B,GAAG,cAAc,CAwBjB;AAMD;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,cAAc,CAAC,CAqDzB;AAMD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,cAAc,CAAC,CAiBzB"}