raffel 0.1.2

package/dist/middleware/interceptors/rate-limit.int.test.js

@@ -0,0 +1,221 @@
+/**
+ * Rate Limit Interceptor Tests
+ */
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { createRateLimitInterceptor, createAuthRateLimiter } from './rate-limit.js';
+import { createContext } from '../../types/index.js';
+import { RaffelError } from '../../core/router.js';
+function createEnvelope(procedure, metadata = {}) {
+    return {
+        id: `test-${Date.now()}`,
+        procedure,
+        payload: {},
+        type: 'request',
+        metadata,
+        context: createContext('test-id'),
+    };
+}
+function createTestContext(auth) {
+    const ctx = createContext('test');
+    if (auth) {
+        ctx.auth = auth;
+    }
+    return ctx;
+}
+describe('createRateLimitInterceptor', () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+    });
+    it('should allow requests under the limit', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 10,
+        });
+        const results = [];
+        const next = async () => {
+            results.push('called');
+            return 'done';
+        };
+        // Make 10 requests (should all succeed)
+        for (let i = 0; i < 10; i++) {
+            const envelope = createEnvelope('test.procedure', { 'x-client-id': 'client-1' });
+            await rateLimiter(envelope, createTestContext(), next);
+        }
+        expect(results).toHaveLength(10);
+    });
+    it('should block requests over the limit', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 3,
+        });
+        const next = async () => 'done';
+        // Make 3 requests (all succeed)
+        for (let i = 0; i < 3; i++) {
+            const envelope = createEnvelope('test.procedure', { 'x-client-id': 'client-1' });
+            await rateLimiter(envelope, createTestContext(), next);
+        }
+        // 4th request should fail
+        const envelope = createEnvelope('test.procedure', { 'x-client-id': 'client-1' });
+        await expect(rateLimiter(envelope, createTestContext(), next)).rejects.toThrow(RaffelError);
+        try {
+            await rateLimiter(envelope, createTestContext(), next);
+        }
+        catch (error) {
+            expect(error).toBeInstanceOf(RaffelError);
+            expect(error.code).toBe('RATE_LIMITED');
+        }
+    });
+    it('should reset after window expires', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 1000, // 1 second window
+            maxRequests: 2,
+        });
+        const next = async () => 'done';
+        const envelope = () => createEnvelope('test', { 'x-client-id': 'client-1' });
+        // Use up the limit
+        await rateLimiter(envelope(), createTestContext(), next);
+        await rateLimiter(envelope(), createTestContext(), next);
+        // This should fail
+        await expect(rateLimiter(envelope(), createTestContext(), next)).rejects.toThrow();
+        // Advance time past the window
+        vi.advanceTimersByTime(1100);
+        // Now it should work again
+        await expect(rateLimiter(envelope(), createTestContext(), next)).resolves.toBe('done');
+    });
+    it('should track different keys separately', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 2,
+        });
+        const next = async () => 'done';
+        // Client 1 uses up their limit
+        for (let i = 0; i < 2; i++) {
+            const envelope = createEnvelope('test', { 'x-client-id': 'client-1' });
+            await rateLimiter(envelope, createTestContext(), next);
+        }
+        // Client 2 should still be able to make requests
+        const envelope2 = createEnvelope('test', { 'x-client-id': 'client-2' });
+        await expect(rateLimiter(envelope2, createTestContext(), next)).resolves.toBe('done');
+        // Client 1 should still be blocked
+        const envelope1 = createEnvelope('test', { 'x-client-id': 'client-1' });
+        await expect(rateLimiter(envelope1, createTestContext(), next)).rejects.toThrow();
+    });
+    it('should use authenticated user principal as key', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 2,
+        });
+        const next = async () => 'done';
+        const authCtx = createTestContext({ authenticated: true, principal: 'user-123' });
+        // Use up the limit for user-123
+        for (let i = 0; i < 2; i++) {
+            const envelope = createEnvelope('test');
+            await rateLimiter(envelope, authCtx, next);
+        }
+        // Same user should be blocked
+        await expect(rateLimiter(createEnvelope('test'), authCtx, next)).rejects.toThrow();
+        // Different user should succeed
+        const otherCtx = createTestContext({ authenticated: true, principal: 'user-456' });
+        await expect(rateLimiter(createEnvelope('test'), otherCtx, next)).resolves.toBe('done');
+    });
+    it('should add rate limit metadata to envelope', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 10,
+        });
+        const envelope = createEnvelope('test', { 'x-client-id': 'client-1' });
+        await rateLimiter(envelope, createTestContext(), async () => 'done');
+        expect(envelope.metadata['x-ratelimit-limit']).toBe('10');
+        expect(envelope.metadata['x-ratelimit-remaining']).toBe('9');
+        expect(envelope.metadata['x-ratelimit-reset']).toBeDefined();
+    });
+    it('should support path-specific rules', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 100,
+            rules: [
+                { id: 'auth', pattern: 'auth.*', maxRequests: 3 },
+                { id: 'admin', pattern: 'admin.**', maxRequests: 5 },
+            ],
+        });
+        const next = async () => 'done';
+        // Auth routes have stricter limits
+        for (let i = 0; i < 3; i++) {
+            const envelope = createEnvelope('auth.login', { 'x-client-id': 'client-1' });
+            await rateLimiter(envelope, createTestContext(), next);
+        }
+        // 4th auth request should fail
+        await expect(rateLimiter(createEnvelope('auth.login', { 'x-client-id': 'client-1' }), createTestContext(), next)).rejects.toThrow();
+        // But other routes should still work
+        await expect(rateLimiter(createEnvelope('users.list', { 'x-client-id': 'client-1' }), createTestContext(), next)).resolves.toBe('done');
+    });
+    it('should match double wildcard patterns', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 100,
+            rules: [
+                { id: 'admin', pattern: 'admin.**', maxRequests: 2 },
+            ],
+        });
+        const next = async () => 'done';
+        // All admin paths should match
+        await rateLimiter(createEnvelope('admin.users.create', { 'x-client-id': 'c1' }), createTestContext(), next);
+        await rateLimiter(createEnvelope('admin.settings.update', { 'x-client-id': 'c1' }), createTestContext(), next);
+        // Should be blocked now
+        await expect(rateLimiter(createEnvelope('admin.other.action', { 'x-client-id': 'c1' }), createTestContext(), next)).rejects.toThrow();
+    });
+    it('should use custom key generator', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 2,
+            keyGenerator: (envelope) => `custom:${envelope.metadata['custom-key']}`,
+        });
+        const next = async () => 'done';
+        // Use up limit for key-a
+        for (let i = 0; i < 2; i++) {
+            await rateLimiter(createEnvelope('test', { 'custom-key': 'key-a' }), createTestContext(), next);
+        }
+        // key-a should be blocked
+        await expect(rateLimiter(createEnvelope('test', { 'custom-key': 'key-a' }), createTestContext(), next)).rejects.toThrow();
+        // key-b should work
+        await expect(rateLimiter(createEnvelope('test', { 'custom-key': 'key-b' }), createTestContext(), next)).resolves.toBe('done');
+    });
+    it('should skip counting successful requests when configured', async () => {
+        const rateLimiter = createRateLimitInterceptor({
+            windowMs: 60000,
+            maxRequests: 3,
+            skipSuccessfulRequests: true,
+        });
+        const envelope = () => createEnvelope('test', { 'x-client-id': 'client-1' });
+        // Successful requests don't count
+        for (let i = 0; i < 5; i++) {
+            await rateLimiter(envelope(), createTestContext(), async () => 'success');
+        }
+        // Should not be rate limited (successful requests were not counted)
+        await expect(rateLimiter(envelope(), createTestContext(), async () => 'success')).resolves.toBe('success');
+    });
+});
+describe('createAuthRateLimiter', () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+    });
+    it('should use different limits for authenticated vs anonymous', async () => {
+        const rateLimiter = createAuthRateLimiter({
+            authenticated: { maxRequests: 5 },
+            anonymous: { maxRequests: 2 },
+        });
+        const next = async () => 'done';
+        const authCtx = createTestContext({ authenticated: true, principal: 'user-1' });
+        const anonCtx = createTestContext();
+        // Anonymous hits limit at 2
+        await rateLimiter(createEnvelope('test', { 'x-client-id': 'anon' }), anonCtx, next);
+        await rateLimiter(createEnvelope('test', { 'x-client-id': 'anon' }), anonCtx, next);
+        await expect(rateLimiter(createEnvelope('test', { 'x-client-id': 'anon' }), anonCtx, next)).rejects.toThrow();
+        // Authenticated can do 5
+        for (let i = 0; i < 5; i++) {
+            await rateLimiter(createEnvelope('test'), authCtx, next);
+        }
+        await expect(rateLimiter(createEnvelope('test'), authCtx, next)).rejects.toThrow();
+    });
+});
+//# sourceMappingURL=rate-limit.int.test.js.map

package/dist/middleware/interceptors/rate-limit.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.int.test.js","sourceRoot":"","sources":["../../../src/middleware/interceptors/rate-limit.int.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAElD,SAAS,cAAc,CAAC,SAAiB,EAAE,WAAmC,EAAE;IAC9E,OAAO;QACL,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;QACxB,SAAS;QACT,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,SAAS;QACf,QAAQ;QACR,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC;KAClC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqD;IAC9E,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,EAAE;SAChB,CAAC,CAAA;QAEF,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QAED,wCAAwC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,cAAc,CAAC,gBAAgB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;YAChF,MAAM,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,CAAC;SACf,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAE/B,gCAAgC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,gBAAgB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;YAChF,MAAM,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QAED,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,gBAAgB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;QAEhF,MAAM,MAAM,CACV,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CACjD,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAE9B,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;YACzC,MAAM,CAAE,KAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,IAAI,EAAE,kBAAkB;YAClC,WAAW,EAAE,CAAC;SACf,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAC/B,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;QAE5E,mBAAmB;QACnB,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACxD,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QAExD,mBAAmB;QACnB,MAAM,MAAM,CACV,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CACnD,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QAEnB,+BAA+B;QAC/B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAE5B,2BAA2B;QAC3B,MAAM,MAAM,CACV,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CACnD,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,CAAC;SACf,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAE/B,+BAA+B;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;YACtE,MAAM,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QAED,iDAAiD;QACjD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;QACvE,MAAM,MAAM,CACV,WAAW,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAClD,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEvB,mCAAmC;QACnC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;QACvE,MAAM,MAAM,CACV,WAAW,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAClD,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,CAAC;SACf,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAC/B,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QAEjF,gCAAgC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;YACvC,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAC5C,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CACnD,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QAEnB,gCAAgC;QAChC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QAClF,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CACpD,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,EAAE;SAChB,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;QACtE,MAAM,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,CAAA;QAEpE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,GAAG;YAChB,KAAK,EAAE;gBACL,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE;gBACjD,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE;aACrD;SACF,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAE/B,mCAAmC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;YAC5E,MAAM,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QAED,+BAA+B;QAC/B,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CACpG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QAEnB,qCAAqC;QACrC,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CACpG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,GAAG;YAChB,KAAK,EAAE;gBACL,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE;aACrD;SACF,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAE/B,+BAA+B;QAC/B,MAAM,WAAW,CAAC,cAAc,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QAC3G,MAAM,WAAW,CAAC,cAAc,CAAC,uBAAuB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QAE9G,wBAAwB;QACxB,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CACtG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;SACxE,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAE/B,yBAAyB;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,WAAW,CACf,cAAc,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EACjD,iBAAiB,EAAE,EACnB,IAAI,CACL,CAAA;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAC1F,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QAEnB,oBAAoB;QACpB,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAC1F,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,CAAC;YACd,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;QAE5E,kCAAkC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3E,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,CACV,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CACpE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,WAAW,GAAG,qBAAqB,CAAC;YACxC,aAAa,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;YACjC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;SAC9B,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;QAC/B,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;QAEnC,4BAA4B;QAC5B,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACnF,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACnF,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAC9E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QAEnB,yBAAyB;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,MAAM,CACV,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CACnD,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/middleware/interceptors/rate-limit.js

@@ -0,0 +1,376 @@
+/**
+ * Rate Limiting Interceptor
+ *
+ * Protocol-agnostic rate limiting that works across all transports.
+ * Uses sliding window algorithm with in-memory storage.
+ *
+ * Features:
+ * - Sliding window rate limiting
+ * - Token bucket with burst support
+ * - Adaptive rate limit parsing for proxied responses
+ * - Rate limit event hooks for observability
+ */
+import { createDriver, createDriverFromConfig } from '../../rate-limit/factory.js';
+import { RaffelError } from '../../core/router.js';
+/**
+ * Parse rate limit headers from metadata or response headers
+ *
+ * Parses standard x-ratelimit-* headers and retry-after.
+ * Useful when Raffel acts as a proxy or for client-side logic.
+ *
+ * @example
+ * ```typescript
+ * const info = parseRateLimitHeaders({
+ *   'x-ratelimit-limit': '100',
+ *   'x-ratelimit-remaining': '42',
+ *   'x-ratelimit-reset': '1699876543000',
+ *   'retry-after': '30',
+ * })
+ *
+ * console.log(info)
+ * // { limit: 100, remaining: 42, resetAt: 1699876543000, retryAfter: 30 }
+ * ```
+ */
+export function parseRateLimitHeaders(headers) {
+    const result = {};
+    // Parse x-ratelimit-limit
+    const limit = headers['x-ratelimit-limit'];
+    if (limit) {
+        const parsed = parseInt(limit, 10);
+        if (!isNaN(parsed) && parsed >= 0) {
+            result.limit = parsed;
+        }
+    }
+    // Parse x-ratelimit-remaining
+    const remaining = headers['x-ratelimit-remaining'];
+    if (remaining) {
+        const parsed = parseInt(remaining, 10);
+        if (!isNaN(parsed) && parsed >= 0) {
+            result.remaining = parsed;
+        }
+    }
+    // Parse x-ratelimit-reset (could be timestamp or seconds)
+    const reset = headers['x-ratelimit-reset'];
+    if (reset) {
+        const parsed = parseInt(reset, 10);
+        if (!isNaN(parsed) && parsed > 0) {
+            // If the value is small, assume it's seconds; otherwise, it's a timestamp
+            if (parsed < 1000000000000) {
+                // Seconds - convert to ms timestamp
+                result.resetAt = Date.now() + parsed * 1000;
+            }
+            else {
+                // Already a millisecond timestamp
+                result.resetAt = parsed;
+            }
+        }
+    }
+    // Parse retry-after (can be seconds or HTTP-date)
+    const retryAfter = headers['retry-after'];
+    if (retryAfter) {
+        // Try as seconds first
+        const seconds = parseInt(retryAfter, 10);
+        if (!isNaN(seconds) && seconds >= 0) {
+            result.retryAfter = seconds;
+        }
+        else {
+            // Try as HTTP-date
+            const date = Date.parse(retryAfter);
+            if (!isNaN(date)) {
+                const secondsUntil = Math.ceil((date - Date.now()) / 1000);
+                result.retryAfter = Math.max(0, secondsUntil);
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Check if rate limit is exceeded based on parsed headers
+ */
+export function isRateLimitExceeded(info) {
+    if (info.remaining !== undefined && info.remaining <= 0) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Calculate delay before next request based on rate limit info
+ */
+export function calculateRateLimitDelay(info) {
+    if (info.retryAfter !== undefined) {
+        return info.retryAfter * 1000;
+    }
+    if (info.resetAt !== undefined) {
+        return Math.max(0, info.resetAt - Date.now());
+    }
+    return 0;
+}
+/**
+ * Match a procedure name against a glob pattern
+ */
+function matchPattern(pattern, procedure) {
+    const regex = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*\*/g, '{{DOUBLE_STAR}}')
+        .replace(/\*/g, '[^.]*')
+        .replace(/{{DOUBLE_STAR}}/g, '.*');
+    return new RegExp(`^${regex}$`).test(procedure);
+}
+/**
+ * Find the best matching rule for a procedure
+ */
+function findMatchingRule(rules, procedure) {
+    // Sort by specificity (longer patterns first)
+    const sorted = [...rules].sort((a, b) => b.pattern.length - a.pattern.length);
+    for (const rule of sorted) {
+        if (matchPattern(rule.pattern, procedure)) {
+            return rule;
+        }
+    }
+    return null;
+}
+/**
+ * Default key generator - uses requestId or 'unknown'
+ */
+function defaultKeyGenerator(envelope, ctx) {
+    // Try to get client identifier from various sources
+    const auth = ctx.auth;
+    if (auth?.principal) {
+        return `user:${auth.principal}`;
+    }
+    // Try metadata for API key or client ID
+    const apiKey = envelope.metadata['x-api-key'] || envelope.metadata['authorization'];
+    if (apiKey) {
+        return `key:${apiKey.substring(0, 32)}`;
+    }
+    // Fall back to request ID (unique per request, not ideal for rate limiting)
+    // In real scenarios, adapters should inject client IP or other identifiers
+    const clientId = envelope.metadata['x-client-id'] || envelope.metadata['x-forwarded-for'];
+    if (clientId) {
+        return `client:${clientId}`;
+    }
+    return `req:${ctx.requestId}`;
+}
+function resolveRateLimitDriver(config) {
+    const driver = config.driver;
+    const memoryOptions = config.maxUniqueKeys ? { maxKeys: config.maxUniqueKeys } : undefined;
+    if (!driver) {
+        return createDriver('memory', memoryOptions);
+    }
+    if (typeof driver === 'string') {
+        if (driver === 'memory') {
+            return createDriver('memory', memoryOptions);
+        }
+        if (driver === 'filesystem') {
+            return createDriver('filesystem');
+        }
+        // Redis requires options - caller should use driver config object
+        throw new Error(`Rate limit driver '${driver}' requires configuration. Use { driver: '${driver}', options: {...} } instead.`);
+    }
+    if (typeof driver.increment === 'function') {
+        return driver;
+    }
+    if (driver.driver === 'memory') {
+        const configOptions = driver.options ?? {};
+        return createDriver('memory', { ...configOptions, ...memoryOptions });
+    }
+    return createDriverFromConfig(driver);
+}
+/**
+ * Create a rate limiting interceptor
+ *
+ * @example
+ * ```typescript
+ * // Basic usage
+ * const rateLimit = createRateLimitInterceptor({
+ *   windowMs: 60000,  // 1 minute
+ *   maxRequests: 100,
+ * })
+ *
+ * // With path-specific rules
+ * const rateLimit = createRateLimitInterceptor({
+ *   windowMs: 60000,
+ *   maxRequests: 100,
+ *   rules: [
+ *     { id: 'auth', pattern: 'auth.*', maxRequests: 10 },
+ *     { id: 'admin', pattern: 'admin.**', maxRequests: 50 },
+ *   ]
+ * })
+ *
+ * server.use(rateLimit)
+ * ```
+ */
+export function createRateLimitInterceptor(config = {}) {
+    const { windowMs = 60000, maxRequests = 100, skipSuccessfulRequests = false, keyGenerator = defaultKeyGenerator, rules = [], } = config;
+    const driver = resolveRateLimitDriver(config);
+    return async (envelope, ctx, next) => {
+        const procedure = envelope.procedure;
+        const matchedRule = rules.length > 0 ? findMatchingRule(rules, procedure) : null;
+        const effectiveWindow = matchedRule?.windowMs ?? windowMs;
+        const effectiveLimit = matchedRule?.maxRequests ?? maxRequests;
+        const rulePrefix = matchedRule ? `rule:${matchedRule.id}:` : 'default:';
+        // Generate the rate limit key
+        const effectiveKeyGenerator = matchedRule?.keyGenerator ?? keyGenerator;
+        const key = `${rulePrefix}${effectiveKeyGenerator(envelope, ctx)}`;
+        const now = Date.now();
+        const record = await driver.increment(key, effectiveWindow);
+        const remaining = Math.max(0, effectiveLimit - record.count);
+        const retryAfter = Math.max(0, Math.ceil((record.resetAt - now) / 1000));
+        const info = {
+            limit: effectiveLimit,
+            remaining,
+            resetAt: record.resetAt,
+            retryAfter,
+        };
+        ctx.rateLimitInfo = info;
+        envelope.context.rateLimitInfo = info;
+        // Add rate limit headers to metadata
+        envelope.metadata['x-ratelimit-limit'] = effectiveLimit.toString();
+        envelope.metadata['x-ratelimit-remaining'] = remaining.toString();
+        envelope.metadata['x-ratelimit-reset'] = record.resetAt.toString();
+        envelope.metadata['retry-after'] = retryAfter.toString();
+        if (record.count > effectiveLimit) {
+            throw new RaffelError('RATE_LIMITED', 'Rate limit exceeded', { ...info });
+        }
+        try {
+            const result = await next();
+            // Optionally skip counting successful requests
+            if (skipSuccessfulRequests && driver.decrement) {
+                await driver.decrement(key);
+            }
+            return result;
+        }
+        catch (error) {
+            // Always count failed requests
+            throw error;
+        }
+    };
+}
+/**
+ * Create a rate limiter with authentication-aware defaults
+ *
+ * @example
+ * ```typescript
+ * const authRateLimit = createAuthRateLimiter({
+ *   authenticated: { windowMs: 60000, maxRequests: 1000 },
+ *   anonymous: { windowMs: 60000, maxRequests: 100 },
+ * })
+ * ```
+ */
+export function createAuthRateLimiter(config) {
+    const authenticatedLimiter = createRateLimitInterceptor({
+        windowMs: 60000,
+        maxRequests: 1000,
+        ...config.authenticated,
+    });
+    const anonymousLimiter = createRateLimitInterceptor({
+        windowMs: 60000,
+        maxRequests: 100,
+        ...config.anonymous,
+    });
+    return async (envelope, ctx, next) => {
+        const isAuthenticated = ctx.auth?.authenticated === true;
+        if (isAuthenticated) {
+            return authenticatedLimiter(envelope, ctx, next);
+        }
+        return anonymousLimiter(envelope, ctx, next);
+    };
+}
+/**
+ * Create a token bucket rate limiter
+ *
+ * Token bucket allows bursts while maintaining an average rate.
+ * This is more flexible than sliding window for bursty traffic.
+ *
+ * @example
+ * ```typescript
+ * // Allow bursts of 10 requests, sustained rate of 1 req/sec
+ * const rateLimit = createTokenBucketLimiter({
+ *   bucketSize: 10,    // Max burst
+ *   refillRate: 1,     // 1 token per second
+ * })
+ *
+ * // Allow bursts of 100 requests, sustained rate of 10 req/sec
+ * const rateLimit = createTokenBucketLimiter({
+ *   bucketSize: 100,
+ *   refillRate: 10,
+ *   onRateLimited: ({ key, procedure }) => {
+ *     console.warn(`Rate limited: ${key} on ${procedure}`)
+ *   }
+ * })
+ *
+ * server.use(rateLimit)
+ * ```
+ */
+export function createTokenBucketLimiter(config) {
+    const { bucketSize, refillRate, maxUniqueKeys = 10000, keyGenerator = defaultKeyGenerator, onRateLimited, } = config;
+    const buckets = new Map();
+    // Cleanup old entries periodically (1 minute)
+    const cleanupInterval = setInterval(() => {
+        const now = Date.now();
+        const staleThreshold = 60000; // Remove buckets not used in last minute
+        for (const [key, bucket] of buckets) {
+            if (now - bucket.lastRefill > staleThreshold) {
+                buckets.delete(key);
+            }
+        }
+    }, 60000);
+    cleanupInterval.unref?.();
+    return async (envelope, ctx, next) => {
+        const key = keyGenerator(envelope, ctx);
+        const now = Date.now();
+        let bucket = buckets.get(key);
+        if (!bucket) {
+            bucket = { tokens: bucketSize, lastRefill: now };
+            buckets.set(key, bucket);
+            // Evict oldest if too many keys
+            if (buckets.size > maxUniqueKeys) {
+                const oldestKey = buckets.keys().next().value;
+                if (oldestKey) {
+                    buckets.delete(oldestKey);
+                }
+            }
+        }
+        else {
+            // Refill tokens based on time elapsed
+            const elapsed = (now - bucket.lastRefill) / 1000; // seconds
+            const tokensToAdd = elapsed * refillRate;
+            bucket.tokens = Math.min(bucketSize, bucket.tokens + tokensToAdd);
+            bucket.lastRefill = now;
+        }
+        // Check if we have enough tokens
+        if (bucket.tokens < 1) {
+            // Calculate when we'll have a token
+            const tokensNeeded = 1 - bucket.tokens;
+            const waitSeconds = tokensNeeded / refillRate;
+            const retryAfter = Math.ceil(waitSeconds);
+            // Callback for monitoring
+            if (onRateLimited) {
+                onRateLimited({
+                    key,
+                    procedure: envelope.procedure,
+                    requestId: ctx.requestId,
+                    tokensNeeded: 1,
+                    tokensAvailable: bucket.tokens,
+                });
+            }
+            // Add rate limit headers
+            envelope.metadata['x-ratelimit-limit'] = bucketSize.toString();
+            envelope.metadata['x-ratelimit-remaining'] = '0';
+            envelope.metadata['retry-after'] = retryAfter.toString();
+            throw new RaffelError('RATE_LIMITED', 'Rate limit exceeded', {
+                limit: bucketSize,
+                remaining: 0,
+                retryAfter,
+                tokensAvailable: bucket.tokens,
+            });
+        }
+        // Consume a token
+        bucket.tokens -= 1;
+        // Add rate limit headers
+        envelope.metadata['x-ratelimit-limit'] = bucketSize.toString();
+        envelope.metadata['x-ratelimit-remaining'] = Math.floor(bucket.tokens).toString();
+        return next();
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/middleware/interceptors/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/middleware/interceptors/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAwBlD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA2C;IAE3C,MAAM,MAAM,GAAwB,EAAE,CAAA;IAEtC,0BAA0B;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAA;QACvB,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAClD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,0EAA0E;YAC1E,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;gBAC3B,oCAAoC;gBACpC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA;YAC7C,CAAC;iBAAM,CAAC;gBACN,kCAAkC;gBAClC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACzC,IAAI,UAAU,EAAE,CAAC;QACf,uBAAuB;QACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,UAAU,GAAG,OAAO,CAAA;QAC7B,CAAC;aAAM,CAAC;YACN,mBAAmB;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;gBAC1D,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,OAAe,EAAE,SAAiB;IACtD,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC;SACnC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAA;IAEpC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAsB,EAAE,SAAiB;IACjE,8CAA8C;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAE7E,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,QAAkB,EAAE,GAAY;IAC3D,oDAAoD;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACrB,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;QACpB,OAAO,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAA;IACjC,CAAC;IAED,wCAAwC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IACnF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IACzC,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IACzF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,UAAU,QAAQ,EAAE,CAAA;IAC7B,CAAC;IAED,OAAO,OAAO,GAAG,CAAC,SAAS,EAAE,CAAA;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAuB;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAE1F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAC9C,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC9C,CAAC;QACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,OAAO,YAAY,CAAC,YAAY,CAAC,CAAA;QACnC,CAAC;QACD,kEAAkE;QAClE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,4CAA4C,MAAM,8BAA8B,CAAC,CAAA;IAC/H,CAAC;IACD,IAAI,OAAQ,MAA0B,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAChE,OAAO,MAAyB,CAAA;IAClC,CAAC;IACD,IAAK,MAAgC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,aAAa,GAAI,MAAgC,CAAC,OAAO,IAAI,EAAE,CAAA;QACrE,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,GAAG,aAAa,EAAE,GAAG,aAAa,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,sBAAsB,CAAC,MAA+B,CAAC,CAAA;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAA0B,EAAE;IACrE,MAAM,EACJ,QAAQ,GAAG,KAAK,EAChB,WAAW,GAAG,GAAG,EACjB,sBAAsB,GAAG,KAAK,EAC9B,YAAY,GAAG,mBAAmB,EAClC,KAAK,GAAG,EAAE,GACX,GAAG,MAAM,CAAA;IAEV,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAE7C,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAY,EAAE,IAA4B,EAAE,EAAE;QAC9E,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAEhF,MAAM,eAAe,GAAG,WAAW,EAAE,QAAQ,IAAI,QAAQ,CAAA;QACzD,MAAM,cAAc,GAAG,WAAW,EAAE,WAAW,IAAI,WAAW,CAAA;QAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;QAEvE,8BAA8B;QAC9B,MAAM,qBAAqB,GAAG,WAAW,EAAE,YAAY,IAAI,YAAY,CAAA;QACvE,MAAM,GAAG,GAAG,GAAG,UAAU,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAA;QAElE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;QAExE,MAAM,IAAI,GAAkB;YAC1B,KAAK,EAAE,cAAc;YACrB,SAAS;YACT,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU;SACX,CAEA;QAAC,GAAW,CAAC,aAAa,GAAG,IAAI,CACjC;QAAC,QAAQ,CAAC,OAAe,CAAC,aAAa,GAAG,IAAI,CAAA;QAE/C,qCAAqC;QACrC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAA;QAClE,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAA;QACjE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;QAClE,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAA;QAExD,IAAI,MAAM,CAAC,KAAK,GAAG,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,qBAAqB,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAE3B,+CAA+C;YAC/C,IAAI,sBAAsB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC;YAED,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,+BAA+B;YAC/B,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAGrC;IACC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;QACtD,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,GAAG,MAAM,CAAC,aAAa;KACxB,CAAC,CAAA;IAEF,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;QAClD,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,GAAG;QAChB,GAAG,MAAM,CAAC,SAAS;KACpB,CAAC,CAAA;IAEF,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACnC,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAA;QAExD,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAClD,CAAC;QAED,OAAO,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAA;AACH,CAAC;AA+BD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAyB;IAChE,MAAM,EACJ,UAAU,EACV,UAAU,EACV,aAAa,GAAG,KAAK,EACrB,YAAY,GAAG,mBAAmB,EAClC,aAAa,GACd,GAAG,MAAM,CAAA;IAEV,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAA;IAEpD,8CAA8C;IAC9C,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,cAAc,GAAG,KAAK,CAAA,CAAC,yCAAyC;QAEtE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAA;IAET,eAAe,CAAC,KAAK,EAAE,EAAE,CAAA;IAEzB,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAY,EAAE,IAA4B,EAAE,EAAE;QAC9E,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAE7B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;YAChD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAExB,gCAAgC;YAChC,IAAI,OAAO,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;gBAC7C,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA,CAAC,UAAU;YAC3D,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,CAAA;YACxC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAA;YACjE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAA;QACzB,CAAC;QAED,iCAAiC;QACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,oCAAoC;YACpC,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAA;YACtC,MAAM,WAAW,GAAG,YAAY,GAAG,UAAU,CAAA;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAEzC,0BAA0B;YAC1B,IAAI,aAAa,EAAE,CAAC;gBAClB,aAAa,CAAC;oBACZ,GAAG;oBACH,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,YAAY,EAAE,CAAC;oBACf,eAAe,EAAE,MAAM,CAAC,MAAM;iBAC/B,CAAC,CAAA;YACJ,CAAC;YAED,yBAAyB;YACzB,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAA;YAC9D,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAA;YAChD,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAA;YAExD,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,qBAAqB,EAAE;gBAC3D,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,CAAC;gBACZ,UAAU;gBACV,eAAe,EAAE,MAAM,CAAC,MAAM;aAC/B,CAAC,CAAA;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;QAElB,yBAAyB;QACzB,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAA;QAC9D,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEjF,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC"}