@antseed/cli 0.1.132 → 0.1.134

package/dist/proxy/service-api-adapter.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-api-adapter.test.js","sourceRoot":"","sources":["../../src/proxy/service-api-adapter.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,6CAA6C,EAC7C,6CAA6C,GAC9C,MAAM,0BAA0B,CAAA;AAGjC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAC7B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B,SAAS,WAAW,CAAC,IAAa,EAAE,IAAI,GAAG,cAAc;IACvD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,YAAY,EAAE;QAClF,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KACvC,CAAA;AACH,CAAC;AAED,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,MAAM,GAAG,6CAA6C,CAC1D,WAAW,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CACrH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA6C,CAAA;IACrG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,uEAAuE;IACvE,MAAM,MAAM,GAAG,6CAA6C,CAC1D,WAAW,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE;SACpE;QACD,UAAU,EAAE,GAAG;KAChB,CAAC,CACH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA2D,CAAA;IACnH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAC9C,MAAM,CAAC,QAAQ,CAAC,OAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;AACtD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,MAAM,GAAG,6CAA6C,CAC1D,WAAW,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;oBAClC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;iBACnC;aACF;SACF;QACD,UAAU,EAAE,GAAG;KAChB,CAAC,CACH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA2D,CAAA;IACnH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;IACpD,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,MAAM,GAAG,6CAA6C,CAC1D,WAAW,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;YAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE;YACxE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SAClC;QACD,UAAU,EAAE,GAAG;KAChB,CAAC,CACH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA2D,CAAA;IACnH,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;IACtE,MAAM,CAAC,KAAK,CAAC,YAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IACnD,MAAM,CAAC,QAAQ,CAAC,YAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;AAC3D,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAC5C,MAAM,MAAM,GAAG,6CAA6C,CAC1D,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC7E,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,CAAA;AACvE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,MAAM,GAAG,6CAA6C,CAC1D,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC7E,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;AAC5D,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAA;IAC3D,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAA;AACxE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACvF,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE;KACnD,CAAA;IACD,MAAM,IAAI,GAA2B;QACnC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;KAC1C,CAAA;IACD,MAAM,MAAM,GAAG,6CAA6C,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAG9C,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC/C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACnF,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE;KAClD,CAAA;IACD,MAAM,IAAI,GAA2B;QACnC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;KAC1C,CAAA;IACD,MAAM,MAAM,GAAG,6CAA6C,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAA;IAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;AAC5C,CAAC,CAAC,CAAA"}
+{"version":3,"file":"service-api-adapter.test.js","sourceRoot":"","sources":["../../src/proxy/service-api-adapter.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,0BAA0B,CAAA;AAGjC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAC7B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B,SAAS,WAAW,CAAC,IAAa,EAAE,IAAI,GAAG,cAAc;IACvD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,YAAY,EAAE;QAClF,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KACvC,CAAA;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA8B;IAC9D,OAAO,gBAAgB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAA;AACjG,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAwB,EACxB,EAAsB,EACtB,QAAgC,EAChC,UAAwE,EAAE;IAE1E,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IACzE,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IAClC,OAAO,WAAY,CAAA;AACrB,CAAC;AAED,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,MAAM,GAAG,wBAAwB,CACrC,WAAW,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CACrH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA6C,CAAA;IACrG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,uEAAuE;IACvE,MAAM,MAAM,GAAG,wBAAwB,CACrC,WAAW,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE;SACpE;QACD,UAAU,EAAE,GAAG;KAChB,CAAC,CACH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA2D,CAAA;IACnH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAC9C,MAAM,CAAC,QAAQ,CAAC,OAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;AACtD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,MAAM,GAAG,wBAAwB,CACrC,WAAW,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;oBAClC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;iBACnC;aACF;SACF;QACD,UAAU,EAAE,GAAG;KAChB,CAAC,CACH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA2D,CAAA;IACnH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;IACpD,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,MAAM,GAAG,wBAAwB,CACrC,WAAW,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;YAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE;YACxE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SAClC;QACD,UAAU,EAAE,GAAG;KAChB,CAAC,CACH,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA2D,CAAA;IACnH,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;IACtE,MAAM,CAAC,KAAK,CAAC,YAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IACnD,MAAM,CAAC,QAAQ,CAAC,YAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;AAC3D,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAC5C,MAAM,MAAM,GAAG,wBAAwB,CACrC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC7E,CAAA;IACD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,CAAA;AACvE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,MAAM,GAAG,wBAAwB,CACrC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC7E,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;AAC5D,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,cAAc,CAAC,CAAA;IACzD,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAA;AACnD,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACvF,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE;KACnD,CAAA;IACD,MAAM,IAAI,GAA2B;QACnC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;KAC1C,CAAA;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,yBAAyB,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;IACtH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAG9C,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC/C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACnF,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE;KAClD,CAAA;IACD,MAAM,IAAI,GAA2B;QACnC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;KAC1C,CAAA;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,yBAAyB,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;IACtH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAA;IAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;AAC5C,CAAC,CAAC,CAAA"}

package/dist/system-proxy/ca-manager.d.ts

@@ -0,0 +1,21 @@
+import 'reflect-metadata';
+export interface CAKeys {
+    certPem: string;
+    privateKeyPem: string;
+}
+export interface CAInstallResult {
+    target: 'system-keychain' | 'login-keychain' | 'windows-root' | 'linux-system';
+    warning?: string;
+}
+export declare class CAManager {
+    private readonly dir;
+    constructor(dataDir: string);
+    private get certPath();
+    private get keyPath();
+    get certFilePath(): string;
+    exists(): Promise<boolean>;
+    load(): Promise<CAKeys>;
+    generate(): Promise<CAKeys>;
+    installToSystemKeychain(): Promise<CAInstallResult>;
+}
+//# sourceMappingURL=ca-manager.d.ts.map

package/dist/system-proxy/ca-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-manager.d.ts","sourceRoot":"","sources":["../../src/system-proxy/ca-manager.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAA;AAezB,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,CAAA;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAgBD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;gBAEhB,OAAO,EAAE,MAAM;IAI3B,OAAO,KAAK,QAAQ,GAA8C;IAClE,OAAO,KAAK,OAAO,GAA8C;IAEjE,IAAI,YAAY,IAAI,MAAM,CAAyB;IAE7C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAI1B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAQvB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAgC3B,uBAAuB,IAAI,OAAO,CAAC,eAAe,CAAC;CA+C1D"}

package/dist/system-proxy/ca-manager.js

@@ -0,0 +1,112 @@
+import 'reflect-metadata';
+import * as x509 from '@peculiar/x509';
+import { webcrypto } from 'node:crypto';
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { execSync, execFileSync } from 'node:child_process';
+import { homedir } from 'node:os';
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+x509.cryptoProvider.set(webcrypto);
+const KEY_ALG = { name: 'ECDSA', namedCurve: 'P-256' };
+const SIGN_ALG = { name: 'ECDSA', hash: 'SHA-256' };
+function pemEncode(label, der) {
+    const b64 = Buffer.from(der).toString('base64');
+    const lines = b64.match(/.{1,64}/g) ?? [];
+    return `-----BEGIN ${label}-----\n${lines.join('\n')}\n-----END ${label}-----\n`;
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+export class CAManager {
+    dir;
+    constructor(dataDir) {
+        this.dir = join(dataDir, 'system-proxy');
+    }
+    get certPath() { return join(this.dir, 'ca.crt'); }
+    get keyPath() { return join(this.dir, 'ca.key'); }
+    get certFilePath() { return this.certPath; }
+    async exists() {
+        return existsSync(this.certPath) && existsSync(this.keyPath);
+    }
+    async load() {
+        const [certPem, privateKeyPem] = await Promise.all([
+            readFile(this.certPath, 'utf8'),
+            readFile(this.keyPath, 'utf8'),
+        ]);
+        return { certPem, privateKeyPem };
+    }
+    async generate() {
+        await mkdir(this.dir, { recursive: true });
+        const keyPair = await webcrypto.subtle.generateKey(KEY_ALG, true, ['sign', 'verify']);
+        const cert = await x509.X509CertificateGenerator.createSelfSigned({
+            serialNumber: '01',
+            name: 'CN=AntSeed Local CA, O=AntSeed',
+            notBefore: new Date(),
+            notAfter: new Date(Date.now() + 10 * 365 * 24 * 60 * 60 * 1000),
+            signingAlgorithm: SIGN_ALG,
+            keys: keyPair,
+            extensions: [
+                new x509.BasicConstraintsExtension(true, undefined, true),
+                new x509.KeyUsagesExtension(x509.KeyUsageFlags.keyCertSign | x509.KeyUsageFlags.cRLSign, true),
+                await x509.SubjectKeyIdentifierExtension.create(keyPair.publicKey),
+            ],
+        });
+        const certPem = cert.toString('pem');
+        const keyDer = await webcrypto.subtle.exportKey('pkcs8', keyPair.privateKey);
+        const privateKeyPem = pemEncode('PRIVATE KEY', keyDer);
+        await writeFile(this.certPath, certPem, 'utf8');
+        await writeFile(this.keyPath, privateKeyPem, { encoding: 'utf8', mode: 0o600 });
+        return { certPem, privateKeyPem };
+    }
+    async installToSystemKeychain() {
+        const platform = process.platform;
+        if (platform === 'darwin') {
+            const systemCommand = `security add-trusted-cert -d -r trustRoot -p ssl -k ${shellQuote('/Library/Keychains/System.keychain')} ${shellQuote(this.certPath)}`;
+            try {
+                execSync(systemCommand, { stdio: 'pipe' });
+                return { target: 'system-keychain' };
+            }
+            catch (systemErr) {
+                try {
+                    execSync(`osascript -e ${shellQuote(`do shell script ${JSON.stringify(systemCommand)} with administrator privileges`)}`, { stdio: 'pipe' });
+                    return { target: 'system-keychain' };
+                }
+                catch (adminErr) {
+                    const keychainPath = join(homedir(), 'Library', 'Keychains', 'login.keychain-db');
+                    try {
+                        execSync(`security add-trusted-cert -d -r trustRoot -p ssl -k ${shellQuote(keychainPath)} ${shellQuote(this.certPath)}`, { stdio: 'pipe' });
+                        return {
+                            target: 'login-keychain',
+                            warning: [
+                                'CA certificate was trusted in the login keychain only.',
+                                'Some GUI apps may require System keychain trust and a restart.',
+                                `System keychain install failed: ${errorMessage(adminErr)}`,
+                            ].join(' '),
+                        };
+                    }
+                    catch (loginErr) {
+                        throw new Error([
+                            `System keychain install failed: ${errorMessage(systemErr)}`,
+                            `Admin install failed: ${errorMessage(adminErr)}`,
+                            `Login keychain install failed: ${errorMessage(loginErr)}`,
+                        ].join(' '));
+                    }
+                }
+            }
+        }
+        else if (platform === 'win32') {
+            execFileSync('certutil', ['-addstore', '-f', 'Root', this.certPath], { stdio: 'pipe' });
+            return { target: 'windows-root' };
+        }
+        else {
+            execFileSync('sudo', ['cp', this.certPath, '/usr/local/share/ca-certificates/antseed-ca.crt'], { stdio: 'pipe' });
+            execFileSync('sudo', ['update-ca-certificates'], { stdio: 'pipe' });
+            return { target: 'linux-system' };
+        }
+    }
+}
+//# sourceMappingURL=ca-manager.js.map

package/dist/system-proxy/ca-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-manager.js","sourceRoot":"","sources":["../../src/system-proxy/ca-manager.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAA;AACzB,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,8DAA8D;AAC9D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAgB,CAAC,CAAA;AAEzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAA;AAC/D,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,CAAA;AAY5D,SAAS,SAAS,CAAC,KAAa,EAAE,GAAgB;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACzC,OAAO,cAAc,KAAK,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAA;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAA;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,OAAO,SAAS;IACH,GAAG,CAAQ;IAE5B,YAAY,OAAe;QACzB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAC1C,CAAC;IAED,IAAY,QAAQ,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA,CAAC,CAAC;IAClE,IAAY,OAAO,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA,CAAC,CAAC;IAEjE,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAA,CAAC,CAAC;IAEnD,KAAK,CAAC,MAAM;QACV,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;SAC/B,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QAErF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC;YAChE,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE,gCAAgC;YACtC,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC/D,gBAAgB,EAAE,QAAQ;YAC1B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;gBACzD,IAAI,IAAI,CAAC,kBAAkB,CACzB,IAAI,CAAC,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAC3D,IAAI,CACL;gBACD,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;aACnE;SACF,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QAC5E,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QAEtD,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAE/E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QACjC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,uDAAuD,UAAU,CAAC,oCAAoC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAA;YAC5J,IAAI,CAAC;gBACH,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;gBAC1C,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;YACtC,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,QAAQ,CACN,gBAAgB,UAAU,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,gCAAgC,CAAC,EAAE,EAC9G,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAA;oBACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;gBACtC,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAA;oBACjF,IAAI,CAAC;wBACH,QAAQ,CACN,uDAAuD,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAC9G,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAA;wBACD,OAAO;4BACL,MAAM,EAAE,gBAAgB;4BACxB,OAAO,EAAE;gCACP,wDAAwD;gCACxD,gEAAgE;gCAChE,mCAAmC,YAAY,CAAC,QAAQ,CAAC,EAAE;6BAC5D,CAAC,IAAI,CAAC,GAAG,CAAC;yBACZ,CAAA;oBACH,CAAC;oBAAC,OAAO,QAAQ,EAAE,CAAC;wBAClB,MAAM,IAAI,KAAK,CAAC;4BACd,mCAAmC,YAAY,CAAC,SAAS,CAAC,EAAE;4BAC5D,yBAAyB,YAAY,CAAC,QAAQ,CAAC,EAAE;4BACjD,kCAAkC,YAAY,CAAC,QAAQ,CAAC,EAAE;yBAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;YACvF,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QACnC,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,iDAAiD,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;YACjH,YAAY,CAAC,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;YACnE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QACnC,CAAC;IACH,CAAC;CACF"}

package/dist/system-proxy/ca-manager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ca-manager.test.d.ts.map

package/dist/system-proxy/ca-manager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-manager.test.d.ts","sourceRoot":"","sources":["../../src/system-proxy/ca-manager.test.ts"],"names":[],"mappings":""}

package/dist/system-proxy/ca-manager.test.js

@@ -0,0 +1,64 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { CAManager } from './ca-manager.js';
+test('CAManager.exists() returns false before generation', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-ca-test-'));
+    try {
+        const mgr = new CAManager(tmpDir);
+        assert.equal(await mgr.exists(), false);
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+test('CAManager.generate() creates cert and key files', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-ca-test-'));
+    try {
+        const mgr = new CAManager(tmpDir);
+        const keys = await mgr.generate();
+        assert.ok(keys.certPem.includes('BEGIN CERTIFICATE'), 'cert should be PEM');
+        assert.ok(keys.privateKeyPem.includes('BEGIN PRIVATE KEY'), 'key should be PKCS8 PEM');
+        assert.equal(await mgr.exists(), true);
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+test('CAManager.load() returns the same PEM that was generated', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-ca-test-'));
+    try {
+        const mgr = new CAManager(tmpDir);
+        const generated = await mgr.generate();
+        const loaded = await mgr.load();
+        assert.equal(loaded.certPem, generated.certPem);
+        assert.equal(loaded.privateKeyPem, generated.privateKeyPem);
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+test('CAManager.certFilePath points into the system-proxy subdirectory', () => {
+    const mgr = new CAManager('/some/data/dir');
+    assert.ok(mgr.certFilePath.includes('system-proxy'), 'cert path should be under system-proxy/');
+    assert.ok(mgr.certFilePath.endsWith('.crt'), 'cert file should have .crt extension');
+});
+test('CAManager.generate() is idempotent — second call overwrites cleanly', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-ca-test-'));
+    try {
+        const mgr = new CAManager(tmpDir);
+        const first = await mgr.generate();
+        const second = await mgr.generate();
+        // Both should be valid PEMs; they won't be identical (fresh keys each time)
+        assert.ok(second.certPem.includes('BEGIN CERTIFICATE'));
+        assert.ok(second.privateKeyPem.includes('BEGIN PRIVATE KEY'));
+        // Different runs produce different keys
+        assert.notEqual(first.certPem, second.certPem);
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=ca-manager.test.js.map

package/dist/system-proxy/ca-manager.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-manager.test.js","sourceRoot":"","sources":["../../src/system-proxy/ca-manager.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAA;IACzC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;QACjC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,oBAAoB,CAAC,CAAA;QAC3E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC,CAAA;QACtF,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,CAAA;IAC7D,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAA;IAC3C,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,yCAAyC,CAAC,CAAA;IAC/F,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,sCAAsC,CAAC,CAAA;AACtF,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;QACnC,4EAA4E;QAC5E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAA;QAC7D,wCAAwC;QACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/system-proxy/cert-cache.d.ts

@@ -0,0 +1,16 @@
+import 'reflect-metadata';
+export interface LeafCert {
+    certPem: string;
+    privateKeyPem: string;
+}
+export declare class CertCache {
+    private readonly cache;
+    private readonly caKeys;
+    constructor(caKeys: {
+        certPem: string;
+        privateKeyPem: string;
+    });
+    get(hostname: string): Promise<LeafCert>;
+    private generate;
+}
+//# sourceMappingURL=cert-cache.d.ts.map

package/dist/system-proxy/cert-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-cache.d.ts","sourceRoot":"","sources":["../../src/system-proxy/cert-cache.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAA;AAUzB,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB;AAcD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;gBAEvD,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAIxD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;YAkBhC,QAAQ;CAqCvB"}

package/dist/system-proxy/cert-cache.js

@@ -0,0 +1,69 @@
+import 'reflect-metadata';
+import * as x509 from '@peculiar/x509';
+import { webcrypto, randomBytes } from 'node:crypto';
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+x509.cryptoProvider.set(webcrypto);
+const KEY_ALG = { name: 'ECDSA', namedCurve: 'P-256' };
+const SIGN_ALG = { name: 'ECDSA', hash: 'SHA-256' };
+function pemEncode(label, der) {
+    const b64 = Buffer.from(der).toString('base64');
+    const lines = b64.match(/.{1,64}/g) ?? [];
+    return `-----BEGIN ${label}-----\n${lines.join('\n')}\n-----END ${label}-----\n`;
+}
+function pemDecode(pem) {
+    return Buffer.from(pem.replace(/-----[^-]+-----/g, '').replace(/\s/g, ''), 'base64');
+}
+const MAX_CACHED_CERTS = 200;
+export class CertCache {
+    cache = new Map();
+    caKeys;
+    constructor(caKeys) {
+        this.caKeys = caKeys;
+    }
+    async get(hostname) {
+        const cached = this.cache.get(hostname);
+        if (cached) {
+            // Move to end for LRU ordering
+            this.cache.delete(hostname);
+            this.cache.set(hostname, cached);
+            return cached;
+        }
+        const leaf = await this.generate(hostname);
+        this.cache.set(hostname, leaf);
+        // Evict oldest entry if over cap
+        if (this.cache.size > MAX_CACHED_CERTS) {
+            const oldest = this.cache.keys().next().value;
+            if (oldest !== undefined)
+                this.cache.delete(oldest);
+        }
+        return leaf;
+    }
+    async generate(hostname) {
+        const caCert = new x509.X509Certificate(this.caKeys.certPem);
+        const caPrivateKey = await webcrypto.subtle.importKey('pkcs8', pemDecode(this.caKeys.privateKeyPem), KEY_ALG, false, ['sign']);
+        const leafKeys = await webcrypto.subtle.generateKey(KEY_ALG, true, ['sign', 'verify']);
+        const serialNum = BigInt(Date.now()).toString(16).padStart(12, '0') + randomBytes(4).toString('hex');
+        const cert = await x509.X509CertificateGenerator.create({
+            serialNumber: serialNum,
+            issuer: caCert.subject,
+            subject: `CN=${hostname}`,
+            notBefore: new Date(),
+            notAfter: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000),
+            signingAlgorithm: SIGN_ALG,
+            publicKey: leafKeys.publicKey,
+            signingKey: caPrivateKey,
+            extensions: [
+                new x509.BasicConstraintsExtension(false),
+                new x509.KeyUsagesExtension(x509.KeyUsageFlags.digitalSignature),
+                new x509.ExtendedKeyUsageExtension(['1.3.6.1.5.5.7.3.1']),
+                new x509.SubjectAlternativeNameExtension([{ type: 'dns', value: hostname }]),
+                await x509.SubjectKeyIdentifierExtension.create(leafKeys.publicKey),
+            ],
+        });
+        const certPem = cert.toString('pem');
+        const keyDer = await webcrypto.subtle.exportKey('pkcs8', leafKeys.privateKey);
+        const privateKeyPem = pemEncode('PRIVATE KEY', keyDer);
+        return { certPem, privateKeyPem };
+    }
+}
+//# sourceMappingURL=cert-cache.js.map

package/dist/system-proxy/cert-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-cache.js","sourceRoot":"","sources":["../../src/system-proxy/cert-cache.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAA;AACzB,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEpD,8DAA8D;AAC9D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAgB,CAAC,CAAA;AAEzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAA;AAC/D,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,CAAA;AAO5D,SAAS,SAAS,CAAC,KAAa,EAAE,GAAgB;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACzC,OAAO,cAAc,KAAK,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAA;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;AACtF,CAAC;AAED,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,MAAM,OAAO,SAAS;IACH,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAA;IACnC,MAAM,CAA4C;IAEnE,YAAY,MAAkD;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,+BAA+B;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAChC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC9B,iCAAiC;QACjC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YAC7C,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CACnD,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EACpC,OAAO,EACP,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEpG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;YACtD,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,OAAO,EAAE,MAAM,QAAQ,EAAE;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC1D,gBAAgB,EAAE,QAAQ;YAC1B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,YAAY;YACxB,UAAU,EAAE;gBACV,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;gBACzC,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC;gBAChE,IAAI,IAAI,CAAC,yBAAyB,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC5E,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;aACpE;SACF,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC7E,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QAEtD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACnC,CAAC;CACF"}

package/dist/system-proxy/cert-cache.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cert-cache.test.d.ts.map

package/dist/system-proxy/cert-cache.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-cache.test.d.ts","sourceRoot":"","sources":["../../src/system-proxy/cert-cache.test.ts"],"names":[],"mappings":""}

package/dist/system-proxy/cert-cache.test.js

@@ -0,0 +1,52 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { CAManager } from './ca-manager.js';
+import { CertCache } from './cert-cache.js';
+async function makeCA(tmpDir) {
+    const mgr = new CAManager(tmpDir);
+    return { mgr, keys: await mgr.generate() };
+}
+test('CertCache.get() returns PEM cert and key for a hostname', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-cert-test-'));
+    try {
+        const { keys } = await makeCA(tmpDir);
+        const cache = new CertCache(keys);
+        const leaf = await cache.get('api-a.example.test');
+        assert.ok(leaf.certPem.includes('BEGIN CERTIFICATE'), 'should be PEM cert');
+        assert.ok(leaf.privateKeyPem.includes('BEGIN PRIVATE KEY'), 'should be PKCS8 PEM key');
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+test('CertCache.get() returns the same cert on repeated calls (cached)', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-cert-test-'));
+    try {
+        const { keys } = await makeCA(tmpDir);
+        const cache = new CertCache(keys);
+        const first = await cache.get('api-b.example.test');
+        const second = await cache.get('api-b.example.test');
+        assert.equal(first.certPem, second.certPem, 'cached cert should be identical');
+        assert.equal(first.privateKeyPem, second.privateKeyPem, 'cached key should be identical');
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+test('CertCache.get() generates different certs for different hostnames', async () => {
+    const tmpDir = await mkdtemp(join(tmpdir(), 'antseed-cert-test-'));
+    try {
+        const { keys } = await makeCA(tmpDir);
+        const cache = new CertCache(keys);
+        const apiA = await cache.get('api-a.example.test');
+        const apiB = await cache.get('api-b.example.test');
+        assert.notEqual(apiA.certPem, apiB.certPem, 'different hostnames should get different certs');
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=cert-cache.test.js.map

package/dist/system-proxy/cert-cache.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-cache.test.js","sourceRoot":"","sources":["../../src/system-proxy/cert-cache.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,KAAK,UAAU,MAAM,CAAC,MAAc;IAClC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAA;AAC5C,CAAC;AAED,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QAClD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,oBAAoB,CAAC,CAAA;QAC3E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC,CAAA;IACxF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAA;QAC9E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAA;IAC3F,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QAClD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAA;IAC/F,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/system-proxy/index.d.ts

@@ -0,0 +1,11 @@
+export type { SystemProxyProfile, SystemProxyState } from './types.js';
+export { CONFIGURED_PROFILES, findProfile, resolveProxiedDomains } from './profiles.js';
+export type { CAInstallResult, CAKeys } from './ca-manager.js';
+export { CAManager } from './ca-manager.js';
+export type { LeafCert } from './cert-cache.js';
+export { CertCache } from './cert-cache.js';
+export type { SystemProxyConfig } from './proxy-server.js';
+export { SystemProxyServer } from './proxy-server.js';
+export { setSystemProxy, clearSystemProxy } from './system-proxy.js';
+export { writeNodeProxyHook, hookPath } from './node-hook.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/system-proxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/system-proxy/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACtE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACvF,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/system-proxy/index.js

@@ -0,0 +1,7 @@
+export { CONFIGURED_PROFILES, findProfile, resolveProxiedDomains } from './profiles.js';
+export { CAManager } from './ca-manager.js';
+export { CertCache } from './cert-cache.js';
+export { SystemProxyServer } from './proxy-server.js';
+export { setSystemProxy, clearSystemProxy } from './system-proxy.js';
+export { writeNodeProxyHook, hookPath } from './node-hook.js';
+//# sourceMappingURL=index.js.map

package/dist/system-proxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/system-proxy/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAEvF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/system-proxy/node-hook.d.ts

@@ -0,0 +1,3 @@
+export declare function hookPath(dataDir: string): string;
+export declare function writeNodeProxyHook(dataDir: string, port: number): Promise<string>;
+//# sourceMappingURL=node-hook.d.ts.map

package/dist/system-proxy/node-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-hook.d.ts","sourceRoot":"","sources":["../../src/system-proxy/node-hook.ts"],"names":[],"mappings":"AAGA,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBvF"}

package/dist/system-proxy/node-hook.js

@@ -0,0 +1,27 @@
+import { writeFile, mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+export function hookPath(dataDir) {
+    return join(dataDir, 'system-proxy', 'node-proxy-hook.cjs');
+}
+export async function writeNodeProxyHook(dataDir, port) {
+    await mkdir(join(dataDir, 'system-proxy'), { recursive: true });
+    const path = hookPath(dataDir);
+    const caPath = join(dataDir, 'system-proxy', 'ca.crt').replace(/\\/g, '\\\\');
+    // CJS — --require only supports CommonJS
+    const content = `'use strict';
+// AntSeed System Proxy hook - auto-generated
+try {
+  const { setGlobalDispatcher, ProxyAgent } = require('undici');
+  const fs = require('node:fs');
+  let ca;
+  try { ca = fs.readFileSync(${JSON.stringify(caPath)}); } catch (_) {}
+  setGlobalDispatcher(new ProxyAgent({
+    uri: 'http://127.0.0.1:${port}',
+    connect: ca ? { ca } : undefined,
+  }));
+} catch (_) { /* undici unavailable or old Node.js — skip */ }
+`;
+    await writeFile(path, content, 'utf8');
+    return path;
+}
+//# sourceMappingURL=node-hook.js.map

package/dist/system-proxy/node-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-hook.js","sourceRoot":"","sources":["../../src/system-proxy/node-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAY;IACpE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAE7E,yCAAyC;IACzC,MAAM,OAAO,GAAG;;;;;;+BAMa,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;6BAExB,IAAI;;;;CAIhC,CAAA;IACC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IACtC,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/system-proxy/profiles.d.ts

@@ -0,0 +1,13 @@
+import type { SystemProxyForwardRule, SystemProxyProfile } from './types.js';
+export declare function loadSystemProxyProfiles(env?: NodeJS.ProcessEnv): readonly SystemProxyProfile[];
+export declare const CONFIGURED_PROFILES: readonly SystemProxyProfile[];
+export declare function findProfile(name: string): SystemProxyProfile | undefined;
+export declare function isConfigPatchProfile(name: string): boolean;
+export declare function partitionProfiles(profileNames: string[]): {
+    proxy: string[];
+    configPatch: string[];
+};
+export declare function resolveProxiedDomains(profileNames: string[]): Set<string>;
+export declare function resolveProxiedPathPrefixes(profileNames: string[]): Map<string, Set<string>>;
+export declare function resolveSystemProxyForwardRules(profileNames: string[]): Map<string, SystemProxyForwardRule>;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/system-proxy/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/system-proxy/profiles.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA0B,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAKpG,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,kBAAkB,EAAE,CAY3G;AAED,eAAO,MAAM,mBAAmB,EAAE,SAAS,kBAAkB,EAA8B,CAAA;AAiF3F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAExE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAQpG;AAED,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAUzE;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAc3F;AAED,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAU1G"}