@matter/protocol 0.15.0-alpha.0-20250617-f4d4cad23 → 0.15.0-alpha.0-20250620-16e218ed3

package/dist/cjs/certificate/kinds/X509Base.js

@@ -0,0 +1,344 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var X509Base_exports = {};
+__export(X509Base_exports, {
+  X509Base: () => X509Base
+});
+module.exports = __toCommonJS(X509Base_exports);
+var import_general = require("#general");
+var import_types = require("#types");
+var import_common = require("./common.js");
+var import_asn = require("./definitions/asn.js");
+var import_base = require("./definitions/base.js");
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+class X509Base {
+  #signature;
+  #cert;
+  constructor(cert) {
+    this.#cert = cert;
+    if ("signature" in cert) {
+      this.#signature = cert.signature;
+    }
+  }
+  get cert() {
+    return this.#cert;
+  }
+  get isSigned() {
+    return this.#signature !== void 0;
+  }
+  /**
+   * Get the signature of the certificate.
+   * If the certificate is not signed, it throws a CertificateError.
+   */
+  get signature() {
+    if (this.#signature === void 0) {
+      throw new import_common.CertificateError("Certificate is not signed");
+    }
+    return this.#signature;
+  }
+  /**
+   * Set the signature of the certificate.
+   * If the certificate is already signed, it throws a CertificateError.
+   */
+  set signature(signature) {
+    if (this.isSigned) {
+      throw new import_common.CertificateError("Certificate is already signed");
+    }
+    this.#signature = signature;
+  }
+  /**
+   * Sign the certificate using the provided crypto and key.
+   * It throws a CertificateError if the certificate is already signed.
+   */
+  async sign(crypto, key) {
+    this.signature = await crypto.signEcdsa(key, this.asUnsignedAsn1());
+  }
+  /**
+   * Convert the certificate to ASN.1 DER format without signature.
+   */
+  asUnsignedAsn1() {
+    const certBytes = import_general.DerCodec.encode(this.genericBuildAsn1Structure(this.cert));
+    (0, import_common.assertCertificateDerSize)(certBytes);
+    return certBytes;
+  }
+  /**
+   * Convert the subject or issuer field of the certificate to ASN.1 DER format.
+   * Preserve order of keys from original subject and also copy potential custom elements
+   */
+  #subjectOrIssuerToAsn1(data) {
+    const asn = {};
+    Object.entries(data).forEach(([key, value]) => {
+      if (value === void 0) {
+        return;
+      }
+      switch (key) {
+        case "commonName":
+          asn.commonName = import_general.X520.CommonName(value);
+          break;
+        case "sureName":
+          asn.sureName = import_general.X520.SurName(value);
+          break;
+        case "serialNum":
+          asn.serialNum = import_general.X520.SerialNumber(value);
+          break;
+        case "countryName":
+          asn.countryName = import_general.X520.CountryName(value);
+          break;
+        case "localityName":
+          asn.localityName = import_general.X520.LocalityName(value);
+          break;
+        case "stateOrProvinceName":
+          asn.stateOrProvinceName = import_general.X520.StateOrProvinceName(value);
+          break;
+        case "orgName":
+          asn.orgName = import_general.X520.OrganisationName(value);
+          break;
+        case "orgUnitName":
+          asn.orgUnitName = import_general.X520.OrganizationalUnitName(value);
+          break;
+        case "title":
+          asn.title = import_general.X520.Title(value);
+          break;
+        case "name":
+          asn.name = import_general.X520.Name(value);
+          break;
+        case "givenName":
+          asn.givenName = import_general.X520.GivenName(value);
+          break;
+        case "initials":
+          asn.initials = import_general.X520.Initials(value);
+          break;
+        case "genQualifier":
+          asn.genQualifier = import_general.X520.GenerationQualifier(value);
+          break;
+        case "dnQualifier":
+          asn.dnQualifier = import_general.X520.DnQualifier(value);
+          break;
+        case "pseudonym":
+          asn.pseudonym = import_general.X520.Pseudonym(value);
+          break;
+        case "domainComponent":
+          asn.domainComponent = import_general.X520.DomainComponent(value);
+          break;
+        case "nodeId":
+          asn.nodeId = (0, import_asn.NodeId_Matter)(value);
+          break;
+        case "firmwareSigningId":
+          asn.firmwareSigningId = (0, import_asn.FirmwareSigningId_Matter)(value);
+          break;
+        case "icacId":
+          asn.icacId = (0, import_asn.IcacId_Matter)(value);
+          break;
+        case "rcacId":
+          asn.rcacId = (0, import_asn.RcacId_Matter)(value);
+          break;
+        case "fabricId":
+          asn.fabricId = (0, import_asn.FabricId_Matter)(value);
+          break;
+        case "caseAuthenticatedTags":
+          const caseAuthenticatedTags = value;
+          import_types.CaseAuthenticatedTag.validateNocTagList(caseAuthenticatedTags);
+          const cat0 = caseAuthenticatedTags[0];
+          const cat1 = caseAuthenticatedTags[1];
+          const cat2 = caseAuthenticatedTags[2];
+          if (cat0 !== void 0) {
+            asn.caseAuthenticatedTag0 = (0, import_asn.NocCat_Matter)(cat0);
+          }
+          if (cat1 !== void 0) {
+            asn.caseAuthenticatedTag1 = (0, import_asn.NocCat_Matter)(cat1);
+          }
+          if (cat2 !== void 0) {
+            asn.caseAuthenticatedTag2 = (0, import_asn.NocCat_Matter)(cat2);
+          }
+          break;
+        case "vendorId":
+          asn.vendorId = (0, import_asn.VendorId_Matter)(value);
+          break;
+        case "productId":
+          asn.productId = (0, import_asn.ProductId_Matter)(value);
+          break;
+        case "commonNamePs":
+          asn.commonNamePs = import_general.X520.CommonName(value, true);
+          break;
+        case "sureNamePs":
+          asn.sureNamePs = import_general.X520.SurName(value, true);
+          break;
+        case "serialNumPs":
+          asn.serialNumPs = import_general.X520.SerialNumber(value, true);
+          break;
+        case "countryNamePs":
+          asn.countryNamePs = import_general.X520.CountryName(value, true);
+          break;
+        case "localityNamePs":
+          asn.localityNamePs = import_general.X520.LocalityName(value, true);
+          break;
+        case "stateOrProvinceNamePs":
+          asn.stateOrProvinceNamePs = import_general.X520.StateOrProvinceName(value, true);
+          break;
+        case "orgNamePs":
+          asn.orgNamePs = import_general.X520.OrganisationName(value, true);
+          break;
+        case "orgUnitNamePs":
+          asn.orgUnitNamePs = import_general.X520.OrganizationalUnitName(value, true);
+          break;
+        case "titlePs":
+          asn.titlePs = import_general.X520.Title(value, true);
+          break;
+        case "namePs":
+          asn.namePs = import_general.X520.Name(value, true);
+          break;
+        case "givenNamePs":
+          asn.givenNamePs = import_general.X520.GivenName(value, true);
+          break;
+        case "initialsPs":
+          asn.initialsPs = import_general.X520.Initials(value, true);
+          break;
+        case "genQualifierPs":
+          asn.genQualifierPs = import_general.X520.GenerationQualifier(value, true);
+          break;
+        case "dnQualifierPs":
+          asn.dnQualifierPs = import_general.X520.DnQualifier(value, true);
+          break;
+        case "pseudonymPs":
+          asn.pseudonymPs = import_general.X520.Pseudonym(value, true);
+          break;
+      }
+    });
+    return asn;
+  }
+  /**
+   * Convert the extensions of the certificate to ASN.1 DER format.
+   */
+  #extensionsToAsn1(extensions) {
+    const asn = {};
+    Object.entries(extensions).forEach(([key, value]) => {
+      if (value === void 0) {
+        return;
+      }
+      switch (key) {
+        case "basicConstraints":
+          asn.basicConstraints = import_general.X509.BasicConstraints(value);
+          break;
+        case "keyUsage":
+          asn.keyUsage = import_general.X509.KeyUsage(
+            import_base.ExtensionKeyUsageSchema.encode(
+              value
+            )
+          );
+          break;
+        case "extendedKeyUsage":
+          asn.extendedKeyUsage = import_general.X509.ExtendedKeyUsage(value);
+          break;
+        case "subjectKeyIdentifier":
+          asn.subjectKeyIdentifier = import_general.X509.SubjectKeyIdentifier(value);
+          break;
+        case "authorityKeyIdentifier":
+          asn.authorityKeyIdentifier = import_general.X509.AuthorityKeyIdentifier(value);
+          break;
+        case "futureExtension":
+          asn.futureExtension = (0, import_general.RawBytes)(import_general.Bytes.concat(...value ?? []));
+          break;
+      }
+    });
+    return asn;
+  }
+  /**
+   * Build the ASN.1 DER structure for the certificate.
+   */
+  genericBuildAsn1Structure({
+    serialNumber,
+    notBefore,
+    notAfter,
+    issuer,
+    subject,
+    ellipticCurvePublicKey,
+    extensions
+  }) {
+    const {
+      basicConstraints: { isCa, pathLen }
+    } = extensions;
+    if (!isCa && pathLen !== void 0) {
+      throw new import_common.CertificateError("Path length must be undefined for non-CA certificates.");
+    }
+    return {
+      version: (0, import_general.ContextTagged)(0, 2),
+      // v3
+      serialNumber: (0, import_general.DatatypeOverride)(import_general.DerType.Integer, serialNumber),
+      signatureAlgorithm: import_general.X962.EcdsaWithSHA256,
+      issuer: this.#subjectOrIssuerToAsn1(issuer),
+      validity: {
+        notBefore: (0, import_asn.matterToJsDate)(notBefore),
+        notAfter: (0, import_asn.matterToJsDate)(notAfter)
+      },
+      subject: this.#subjectOrIssuerToAsn1(subject),
+      publicKey: import_general.X962.PublicKeyEcPrime256v1(ellipticCurvePublicKey),
+      extensions: (0, import_general.ContextTagged)(3, this.#extensionsToAsn1(extensions))
+    };
+  }
+  /**
+   * Create a Certificate Signing Request (CSR) in ASN.1 DER format.
+   */
+  static async createCertificateSigningRequest(crypto, key) {
+    const request = {
+      version: 0,
+      subject: { organization: import_general.X520.OrganisationName("CSR") },
+      publicKey: import_general.X962.PublicKeyEcPrime256v1(key.publicKey),
+      endSignedBytes: (0, import_general.ContextTagged)(0)
+    };
+    return import_general.DerCodec.encode({
+      request,
+      signAlgorithm: import_general.X962.EcdsaWithSHA256,
+      signature: (0, import_general.DerBitString)(await crypto.signEcdsa(key, import_general.DerCodec.encode(request), "der"))
+    });
+  }
+  /**
+   * Extract the public key from a Certificate Signing Request (CSR) in ASN.1 DER format.
+   */
+  static async getPublicKeyFromCsr(crypto, csr) {
+    const { [import_general.DerKey.Elements]: rootElements } = import_general.DerCodec.decode(csr);
+    if (rootElements?.length !== 3) throw new import_common.CertificateError("Invalid CSR data");
+    const [requestNode, signAlgorithmNode, signatureNode] = rootElements;
+    const { [import_general.DerKey.Elements]: requestElements } = requestNode;
+    if (requestElements?.length !== 4) throw new import_common.CertificateError("Invalid CSR data");
+    const [versionNode, _subjectNode, publicKeyNode] = requestElements;
+    const requestVersion = versionNode[import_general.DerKey.Bytes][0];
+    if (requestVersion !== 0) throw new import_common.CertificateError(`Unsupported request version ${requestVersion}`);
+    const { [import_general.DerKey.Elements]: publicKeyElements } = publicKeyNode;
+    if (publicKeyElements?.length !== 2) throw new import_common.CertificateError("Invalid CSR data");
+    const [_publicKeyTypeNode, publicKeyBytesNode] = publicKeyElements;
+    const publicKey = publicKeyBytesNode[import_general.DerKey.Bytes];
+    if (signAlgorithmNode[import_general.DerKey.Elements]?.[0]?.[import_general.DerKey.Bytes] === void 0 || !import_general.Bytes.areEqual(
+      import_general.X962.EcdsaWithSHA256[import_general.DerKey.ObjectId][import_general.DerKey.Bytes],
+      signAlgorithmNode[import_general.DerKey.Elements]?.[0]?.[import_general.DerKey.Bytes]
+    ))
+      throw new import_common.CertificateError("Unsupported signature type");
+    await crypto.verifyEcdsa(
+      (0, import_general.PublicKey)(publicKey),
+      import_general.DerCodec.encode(requestNode),
+      signatureNode[import_general.DerKey.Bytes],
+      "der"
+    );
+    return publicKey;
+  }
+}
+//# sourceMappingURL=X509Base.js.map

package/dist/cjs/certificate/kinds/X509Base.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/certificate/kinds/X509Base.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAeO;AACP,mBAA2F;AAC3F,oBAAqE;AACrE,iBAUO;AACP,kBAAkF;AAnClF;AAAA;AAAA;AAAA;AAAA;AA2CO,MAAe,SAAqC;AAAA,EACvD;AAAA,EACA;AAAA,EAEA,YAAY,MAAyB;AACjC,SAAK,QAAQ;AACb,QAAI,eAAe,MAAM;AACrB,WAAK,aAAa,KAAK;AAAA,IAC3B;AAAA,EACJ;AAAA,EAEA,IAAI,OAAqB;AACrB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,WAAW;AACX,WAAO,KAAK,eAAe;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,YAAY;AACZ,QAAI,KAAK,eAAe,QAAW;AAC/B,YAAM,IAAI,+BAAiB,2BAA2B;AAAA,IAC1D;AACA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,UAAU,WAAuB;AACjC,QAAI,KAAK,UAAU;AACf,YAAM,IAAI,+BAAiB,+BAA+B;AAAA,IAC9D;AACA,SAAK,aAAa;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAK,QAAgB,KAAiB;AACxC,SAAK,YAAY,MAAM,OAAO,UAAU,KAAK,KAAK,eAAe,CAAC;AAAA,EACtE;AAAA;AAAA;AAAA;AAAA,EAKA,iBAA8C;AAC1C,UAAM,YAAY,wBAAS,OAAO,KAAK,0BAA0B,KAAK,IAAI,CAAC;AAC3E,gDAAyB,SAAS;AAClC,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,uBAAuB,MAAgC;AACnD,UAAM,MAAM,CAAC;AACb,WAAO,QAAQ,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC3C,UAAI,UAAU,QAAW;AACrB;AAAA,MACJ;AACA,cAAQ,KAAK;AAAA,QACT,KAAK;AACD,cAAI,aAAa,oBAAK,WAAW,KAAe;AAChD;AAAA,QACJ,KAAK;AACD,cAAI,WAAW,oBAAK,QAAQ,KAAe;AAC3C;AAAA,QACJ,KAAK;AACD,cAAI,YAAY,oBAAK,aAAa,KAAe;AACjD;AAAA,QACJ,KAAK;AACD,cAAI,cAAc,oBAAK,YAAY,KAAe;AAClD;AAAA,QACJ,KAAK;AACD,cAAI,eAAe,oBAAK,aAAa,KAAe;AACpD;AAAA,QACJ,KAAK;AACD,cAAI,sBAAsB,oBAAK,oBAAoB,KAAe;AAClE;AAAA,QACJ,KAAK;AACD,cAAI,UAAU,oBAAK,iBAAiB,KAAe;AACnD;AAAA,QACJ,KAAK;AACD,cAAI,cAAc,oBAAK,uBAAuB,KAAe;AAC7D;AAAA,QACJ,KAAK;AACD,cAAI,QAAQ,oBAAK,MAAM,KAAe;AACtC;AAAA,QACJ,KAAK;AACD,cAAI,OAAO,oBAAK,KAAK,KAAe;AACpC;AAAA,QACJ,KAAK;AACD,cAAI,YAAY,oBAAK,UAAU,KAAe;AAC9C;AAAA,QACJ,KAAK;AACD,cAAI,WAAW,oBAAK,SAAS,KAAe;AAC5C;AAAA,QACJ,KAAK;AACD,cAAI,eAAe,oBAAK,oBAAoB,KAAe;AAC3D;AAAA,QACJ,KAAK;AACD,cAAI,cAAc,oBAAK,YAAY,KAAe;AAClD;AAAA,QACJ,KAAK;AACD,cAAI,YAAY,oBAAK,UAAU,KAAe;AAC9C;AAAA,QACJ,KAAK;AACD,cAAI,kBAAkB,oBAAK,gBAAgB,KAAe;AAC1D;AAAA,QACJ,KAAK;AACD,cAAI,aAAS,0BAAc,KAAe;AAC1C;AAAA,QACJ,KAAK;AACD,cAAI,wBAAoB,qCAAyB,KAAe;AAChE;AAAA,QACJ,KAAK;AACD,cAAI,aAAS,0BAAc,KAAwB;AACnD;AAAA,QACJ,KAAK;AACD,cAAI,aAAS,0BAAc,KAAwB;AACnD;AAAA,QACJ,KAAK;AACD,cAAI,eAAW,4BAAgB,KAAiB;AAChD;AAAA,QACJ,KAAK;AAID,gBAAM,wBAAwB;AAC9B,4CAAqB,mBAAmB,qBAAqB;AAE7D,gBAAM,OAAO,sBAAsB,CAAC;AACpC,gBAAM,OAAO,sBAAsB,CAAC;AACpC,gBAAM,OAAO,sBAAsB,CAAC;AACpC,cAAI,SAAS,QAAW;AACpB,gBAAI,4BAAwB,0BAAc,IAAI;AAAA,UAClD;AACA,cAAI,SAAS,QAAW;AACpB,gBAAI,4BAAwB,0BAAc,IAAI;AAAA,UAClD;AACA,cAAI,SAAS,QAAW;AACpB,gBAAI,4BAAwB,0BAAc,IAAI;AAAA,UAClD;AACA;AAAA,QACJ,KAAK;AACD,cAAI,eAAW,4BAAgB,KAAiB;AAChD;AAAA,QACJ,KAAK;AACD,cAAI,gBAAY,6BAAiB,KAAe;AAChD;AAAA,QACJ,KAAK;AACD,cAAI,eAAe,oBAAK,WAAW,OAAiB,IAAI;AACxD;AAAA,QACJ,KAAK;AACD,cAAI,aAAa,oBAAK,QAAQ,OAAiB,IAAI;AACnD;AAAA,QACJ,KAAK;AACD,cAAI,cAAc,oBAAK,aAAa,OAAiB,IAAI;AACzD;AAAA,QACJ,KAAK;AACD,cAAI,gBAAgB,oBAAK,YAAY,OAAiB,IAAI;AAC1D;AAAA,QACJ,KAAK;AACD,cAAI,iBAAiB,oBAAK,aAAa,OAAiB,IAAI;AAC5D;AAAA,QACJ,KAAK;AACD,cAAI,wBAAwB,oBAAK,oBAAoB,OAAiB,IAAI;AAC1E;AAAA,QACJ,KAAK;AACD,cAAI,YAAY,oBAAK,iBAAiB,OAAiB,IAAI;AAC3D;AAAA,QACJ,KAAK;AACD,cAAI,gBAAgB,oBAAK,uBAAuB,OAAiB,IAAI;AACrE;AAAA,QACJ,KAAK;AACD,cAAI,UAAU,oBAAK,MAAM,OAAiB,IAAI;AAC9C;AAAA,QACJ,KAAK;AACD,cAAI,SAAS,oBAAK,KAAK,OAAiB,IAAI;AAC5C;AAAA,QACJ,KAAK;AACD,cAAI,cAAc,oBAAK,UAAU,OAAiB,IAAI;AACtD;AAAA,QACJ,KAAK;AACD,cAAI,aAAa,oBAAK,SAAS,OAAiB,IAAI;AACpD;AAAA,QACJ,KAAK;AACD,cAAI,iBAAiB,oBAAK,oBAAoB,OAAiB,IAAI;AACnE;AAAA,QACJ,KAAK;AACD,cAAI,gBAAgB,oBAAK,YAAY,OAAiB,IAAI;AAC1D;AAAA,QACJ,KAAK;AACD,cAAI,cAAc,oBAAK,UAAU,OAAiB,IAAI;AACtD;AAAA,MACR;AAAA,IACJ,CAAC;AACD,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB,YAAkC;AAChD,UAAM,MAAM,CAAC;AACb,WAAO,QAAQ,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACjD,UAAI,UAAU,QAAW;AACrB;AAAA,MACJ;AACA,cAAQ,KAAK;AAAA,QACT,KAAK;AACD,cAAI,mBAAmB,oBAAK,iBAAiB,KAAK;AAClD;AAAA,QACJ,KAAK;AACD,cAAI,WAAW,oBAAK;AAAA,YAChB,oCAAwB;AAAA,cACpB;AAAA,YACJ;AAAA,UACJ;AACA;AAAA,QACJ,KAAK;AACD,cAAI,mBAAmB,oBAAK,iBAAiB,KAA6B;AAC1E;AAAA,QACJ,KAAK;AACD,cAAI,uBAAuB,oBAAK,qBAAqB,KAAmB;AACxE;AAAA,QACJ,KAAK;AACD,cAAI,yBAAyB,oBAAK,uBAAuB,KAAmB;AAC5E;AAAA,QACJ,KAAK;AACD,cAAI,sBAAkB,yBAAS,qBAAM,OAAO,GAAK,SAAsC,CAAC,CAAE,CAAC;AAC3F;AAAA,MACR;AAAA,IACJ,CAAC;AACD,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKU,0BAA0B;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,GAAiB;AACb,UAAM;AAAA,MACF,kBAAkB,EAAE,MAAM,QAAQ;AAAA,IACtC,IAAI;AACJ,QAAI,CAAC,QAAQ,YAAY,QAAW;AAChC,YAAM,IAAI,+BAAiB,wDAAwD;AAAA,IACvF;AACA,WAAO;AAAA,MACH,aAAS,8BAAc,GAAG,CAAC;AAAA;AAAA,MAC3B,kBAAc,iCAAiB,uBAAQ,SAAS,YAAY;AAAA,MAC5D,oBAAoB,oBAAK;AAAA,MACzB,QAAQ,KAAK,uBAAuB,MAAM;AAAA,MAC1C,UAAU;AAAA,QACN,eAAW,2BAAe,SAAS;AAAA,QACnC,cAAU,2BAAe,QAAQ;AAAA,MACrC;AAAA,MACA,SAAS,KAAK,uBAAuB,OAAO;AAAA,MAC5C,WAAW,oBAAK,sBAAsB,sBAAsB;AAAA,MAC5D,gBAAY,8BAAc,GAAG,KAAK,kBAAkB,UAAU,CAAC;AAAA,IACnE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,gCAAgC,QAAgB,KAAU;AACnE,UAAM,UAAU;AAAA,MACZ,SAAS;AAAA,MACT,SAAS,EAAE,cAAc,oBAAK,iBAAiB,KAAK,EAAE;AAAA,MACtD,WAAW,oBAAK,sBAAsB,IAAI,SAAS;AAAA,MACnD,oBAAgB,8BAAc,CAAC;AAAA,IACnC;AAEA,WAAO,wBAAS,OAAO;AAAA,MACnB;AAAA,MACA,eAAe,oBAAK;AAAA,MACpB,eAAW,6BAAa,MAAM,OAAO,UAAU,KAAK,wBAAS,OAAO,OAAO,GAAG,KAAK,CAAC;AAAA,IACxF,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,oBAAoB,QAAgB,KAAiB;AAC9D,UAAM,EAAE,CAAC,sBAAO,QAAQ,GAAG,aAAa,IAAI,wBAAS,OAAO,GAAG;AAC/D,QAAI,cAAc,WAAW,EAAG,OAAM,IAAI,+BAAiB,kBAAkB;AAC7E,UAAM,CAAC,aAAa,mBAAmB,aAAa,IAAI;AAGxD,UAAM,EAAE,CAAC,sBAAO,QAAQ,GAAG,gBAAgB,IAAI;AAC/C,QAAI,iBAAiB,WAAW,EAAG,OAAM,IAAI,+BAAiB,kBAAkB;AAChF,UAAM,CAAC,aAAa,cAAc,aAAa,IAAI;AACnD,UAAM,iBAAiB,YAAY,sBAAO,KAAK,EAAE,CAAC;AAClD,QAAI,mBAAmB,EAAG,OAAM,IAAI,+BAAiB,+BAA+B,cAAc,EAAE;AAGpG,UAAM,EAAE,CAAC,sBAAO,QAAQ,GAAG,kBAAkB,IAAI;AACjD,QAAI,mBAAmB,WAAW,EAAG,OAAM,IAAI,+BAAiB,kBAAkB;AAClF,UAAM,CAAC,oBAAoB,kBAAkB,IAAI;AAEjD,UAAM,YAAY,mBAAmB,sBAAO,KAAK;AAGjD,QACI,kBAAkB,sBAAO,QAAQ,IAAI,CAAC,IAAI,sBAAO,KAAK,MAAM,UAC5D,CAAC,qBAAM;AAAA,MACH,oBAAK,gBAAgB,sBAAO,QAAQ,EAAE,sBAAO,KAAK;AAAA,MAClD,kBAAkB,sBAAO,QAAQ,IAAI,CAAC,IAAI,sBAAO,KAAK;AAAA,IAC1D;AAEA,YAAM,IAAI,+BAAiB,4BAA4B;AAC3D,UAAM,OAAO;AAAA,UACT,0BAAU,SAAS;AAAA,MACnB,wBAAS,OAAO,WAAW;AAAA,MAC3B,cAAc,sBAAO,KAAK;AAAA,MAC1B;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AACJ;",
+  "names": []
+}

package/dist/cjs/certificate/kinds/common.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterError } from "#general";
+/**
+ * Matter specific Certificate Sizes
+ * @see {@link MatterSpecification.v13.Core} 6.1.3.
+ */
+export declare const MAX_DER_CERTIFICATE_SIZE = 600;
+export declare class CertificateError extends MatterError {
+}
+export type Unsigned<Type> = {
+    [Property in keyof Type as Exclude<Property, "signature">]: Type[Property];
+};
+export declare function assertCertificateDerSize(certBytes: Uint8Array): void;
+//# sourceMappingURL=common.d.ts.map

package/dist/cjs/certificate/kinds/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/certificate/kinds/common.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAuB,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,qBAAa,gBAAiB,SAAQ,WAAW;CAAG;AAEpD,MAAM,MAAM,QAAQ,CAAC,IAAI,IAAI;KAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;CAAE,CAAC;AAE5G,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,UAAU,QAM7D"}

package/dist/cjs/certificate/kinds/common.js

@@ -0,0 +1,42 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var common_exports = {};
+__export(common_exports, {
+  CertificateError: () => CertificateError,
+  MAX_DER_CERTIFICATE_SIZE: () => MAX_DER_CERTIFICATE_SIZE,
+  assertCertificateDerSize: () => assertCertificateDerSize
+});
+module.exports = __toCommonJS(common_exports);
+var import_general = require("#general");
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const MAX_DER_CERTIFICATE_SIZE = 600;
+class CertificateError extends import_general.MatterError {
+}
+function assertCertificateDerSize(certBytes) {
+  if (certBytes.length > MAX_DER_CERTIFICATE_SIZE) {
+    throw new import_general.ImplementationError(
+      `Certificate to generate is too big: ${certBytes.length} bytes instead of max ${MAX_DER_CERTIFICATE_SIZE} bytes`
+    );
+  }
+}
+//# sourceMappingURL=common.js.map

package/dist/cjs/certificate/kinds/common.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/certificate/kinds/common.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,qBAAiD;AALjD;AAAA;AAAA;AAAA;AAAA;AAWO,MAAM,2BAA2B;AAEjC,MAAM,yBAAyB,2BAAY;AAAC;AAI5C,SAAS,yBAAyB,WAAuB;AAC5D,MAAI,UAAU,SAAS,0BAA0B;AAC7C,UAAM,IAAI;AAAA,MACN,uCAAuC,UAAU,MAAM,yBAAyB,wBAAwB;AAAA,IAC5G;AAAA,EACJ;AACJ;",
+  "names": []
+}

package/dist/cjs/certificate/kinds/definitions/asn.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { FabricId, NodeId, VendorId } from "#types";
+export declare function matterToJsDate(date: number): Date;
+export declare function jsToMatterDate(date: Date, addYears?: number): number;
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export declare const NodeId_Matter: (value: NodeId) => any[];
+/** matter-firmware-signing-id = ASN.1 OID 1.3.6.1.4.1.37244.1.2 */
+export declare const FirmwareSigningId_Matter: (value: number) => any[];
+/** matter-icac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.3 */
+export declare const IcacId_Matter: (value: number | bigint) => any[];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export declare const RcacId_Matter: (value: number | bigint) => any[];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export declare const FabricId_Matter: (value: FabricId) => any[];
+/** matter-noc-cat = ASN.1 OID 1.3.6.1.4.1.37244.1.6 */
+export declare const NocCat_Matter: (value: number) => any[];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export declare const VendorId_Matter: (value: VendorId) => any[];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.37244.2.2 */
+export declare const ProductId_Matter: (value: number) => any[];
+//# sourceMappingURL=asn.d.ts.map

package/dist/cjs/certificate/kinds/definitions/asn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asn.d.ts","sourceRoot":"","sources":["../../../../../src/certificate/kinds/definitions/asn.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOpD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,SAAI,UAItD;AAoDD,uDAAuD;AACvD,eAAO,MAAM,aAAa,0BAAuC,CAAC;AAElE,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,0BAAuC,CAAC;AAE7E,uDAAuD;AACvD,eAAO,MAAM,aAAa,mCAAgD,CAAC;AAE3E,uDAAuD;AACvD,eAAO,MAAM,aAAa,mCAAgD,CAAC;AAE3E,yDAAyD;AACzD,eAAO,MAAM,eAAe,4BAAyC,CAAC;AAEtE,uDAAuD;AACvD,eAAO,MAAM,aAAa,0BAAuD,CAAC;AAElF,uDAAuD;AACvD,eAAO,MAAM,eAAe,4BAA0D,CAAC;AAEvF,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,0BAAwD,CAAC"}

package/dist/cjs/certificate/kinds/definitions/asn.js

@@ -0,0 +1,83 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var asn_exports = {};
+__export(asn_exports, {
+  FabricId_Matter: () => FabricId_Matter,
+  FirmwareSigningId_Matter: () => FirmwareSigningId_Matter,
+  IcacId_Matter: () => IcacId_Matter,
+  NocCat_Matter: () => NocCat_Matter,
+  NodeId_Matter: () => NodeId_Matter,
+  ProductId_Matter: () => ProductId_Matter,
+  RcacId_Matter: () => RcacId_Matter,
+  VendorId_Matter: () => VendorId_Matter,
+  jsToMatterDate: () => jsToMatterDate,
+  matterToJsDate: () => matterToJsDate
+});
+module.exports = __toCommonJS(asn_exports);
+var import_general = require("#general");
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const YEAR_S = 365 * 24 * 60 * 60;
+const EPOCH_OFFSET_S = 10957 * 24 * 60 * 60;
+function matterToJsDate(date) {
+  return date === 0 ? import_general.X520.NON_WELL_DEFINED_DATE : new Date((date + EPOCH_OFFSET_S) * 1e3);
+}
+function jsToMatterDate(date, addYears = 0) {
+  return date.getTime() === import_general.X520.NON_WELL_DEFINED_DATE.getTime() ? 0 : Math.floor(date.getTime() / 1e3) - EPOCH_OFFSET_S + addYears * YEAR_S;
+}
+function intTo16Chars(value) {
+  const byteArray = new Uint8Array(8);
+  const dataView = import_general.Bytes.dataViewOf(byteArray);
+  dataView.setBigUint64(0, typeof value === "bigint" ? value : BigInt(value));
+  return import_general.Bytes.toHex(byteArray).toUpperCase();
+}
+function uInt16To8Chars(value) {
+  const byteArray = new Uint8Array(4);
+  const dataView = import_general.Bytes.dataViewOf(byteArray);
+  dataView.setUint32(0, value);
+  return import_general.Bytes.toHex(byteArray).toUpperCase();
+}
+function uInt16To4Chars(value) {
+  const byteArray = new Uint8Array(2);
+  const dataView = import_general.Bytes.dataViewOf(byteArray);
+  dataView.setUint16(0, value);
+  return import_general.Bytes.toHex(byteArray).toUpperCase();
+}
+const GenericMatterOpCertObject = (id, valueConverter) => (value) => [
+  (0, import_general.DerObject)(`2b0601040182a27c01${id.toString(16).padStart(2, "0")}`, {
+    value: (valueConverter ?? intTo16Chars)(value)
+  })
+];
+const GenericMatterAttCertObject = (id, valueConverter) => (value) => [
+  (0, import_general.DerObject)(`2b0601040182a27c02${id.toString(16).padStart(2, "0")}`, {
+    value: (valueConverter ?? intTo16Chars)(value)
+  })
+];
+const NodeId_Matter = GenericMatterOpCertObject(1);
+const FirmwareSigningId_Matter = GenericMatterOpCertObject(2);
+const IcacId_Matter = GenericMatterOpCertObject(3);
+const RcacId_Matter = GenericMatterOpCertObject(4);
+const FabricId_Matter = GenericMatterOpCertObject(5);
+const NocCat_Matter = GenericMatterOpCertObject(6, uInt16To8Chars);
+const VendorId_Matter = GenericMatterAttCertObject(1, uInt16To4Chars);
+const ProductId_Matter = GenericMatterAttCertObject(2, uInt16To4Chars);
+//# sourceMappingURL=asn.js.map

package/dist/cjs/certificate/kinds/definitions/asn.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/certificate/kinds/definitions/asn.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAAuC;AANvC;AAAA;AAAA;AAAA;AAAA;AASA,MAAM,SAAS,MAAM,KAAK,KAAK;AAC/B,MAAM,iBAAiB,QAAQ,KAAK,KAAK;AAIlC,SAAS,eAAe,MAAc;AACzC,SAAO,SAAS,IAAI,oBAAK,wBAAwB,IAAI,MAAM,OAAO,kBAAkB,GAAI;AAC5F;AAEO,SAAS,eAAe,MAAY,WAAW,GAAG;AACrD,SAAO,KAAK,QAAQ,MAAM,oBAAK,sBAAsB,QAAQ,IACvD,IACA,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAI,IAAI,iBAAiB,WAAW;AAC1E;AAEA,SAAS,aAAa,OAAwB;AAC1C,QAAM,YAAY,IAAI,WAAW,CAAC;AAClC,QAAM,WAAW,qBAAM,WAAW,SAAS;AAC3C,WAAS,aAAa,GAAG,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK,CAAC;AAC1E,SAAO,qBAAM,MAAM,SAAS,EAAE,YAAY;AAC9C;AAEA,SAAS,eAAe,OAAe;AACnC,QAAM,YAAY,IAAI,WAAW,CAAC;AAClC,QAAM,WAAW,qBAAM,WAAW,SAAS;AAC3C,WAAS,UAAU,GAAG,KAAK;AAC3B,SAAO,qBAAM,MAAM,SAAS,EAAE,YAAY;AAC9C;AAEA,SAAS,eAAe,OAAe;AACnC,QAAM,YAAY,IAAI,WAAW,CAAC;AAClC,QAAM,WAAW,qBAAM,WAAW,SAAS;AAC3C,WAAS,UAAU,GAAG,KAAK;AAC3B,SAAO,qBAAM,MAAM,SAAS,EAAE,YAAY;AAC9C;AAWA,MAAM,4BACF,CAAI,IAAY,mBAChB,CAAC,UAAa;AAAA,MACV,0BAAU,qBAAqB,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI;AAAA,IAC/D,QAAQ,kBAAkB,cAAc,KAAY;AAAA,EACxD,CAAC;AACL;AAMJ,MAAM,6BACF,CAAI,IAAY,mBAChB,CAAC,UAAa;AAAA,MACV,0BAAU,qBAAqB,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI;AAAA,IAC/D,QAAQ,kBAAkB,cAAc,KAAY;AAAA,EACxD,CAAC;AACL;AAGG,MAAM,gBAAgB,0BAAkC,CAAC;AAGzD,MAAM,2BAA2B,0BAAkC,CAAC;AAGpE,MAAM,gBAAgB,0BAA2C,CAAC;AAGlE,MAAM,gBAAgB,0BAA2C,CAAC;AAGlE,MAAM,kBAAkB,0BAAoC,CAAC;AAG7D,MAAM,gBAAgB,0BAAkC,GAAG,cAAc;AAGzE,MAAM,kBAAkB,2BAAqC,GAAG,cAAc;AAG9E,MAAM,mBAAmB,2BAAmC,GAAG,cAAc;",
+  "names": []
+}

package/dist/cjs/certificate/kinds/definitions/attestation.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { VendorId } from "#types";
+import { X509Certificate } from "./base.js";
+/** Definitions for Matter Attestation certificates (PAA, PAI, DAC) */
+export declare namespace AttestationCertificate {
+    interface Dac extends X509Certificate {
+        issuer: {
+            commonName: string;
+            productId?: number;
+            vendorId: VendorId;
+        };
+        subject: {
+            commonName: string;
+            productId: number;
+            vendorId: VendorId;
+        };
+    }
+    interface Pai extends X509Certificate {
+        issuer: {
+            commonName: string;
+            vendorId?: VendorId;
+        };
+        subject: {
+            commonName: string;
+            productId?: number;
+            vendorId: VendorId;
+        };
+    }
+    interface Paa extends X509Certificate {
+        issuer: {
+            commonName: string;
+            vendorId?: VendorId;
+        };
+        subject: {
+            commonName: string;
+            vendorId?: VendorId;
+        };
+    }
+}
+//# sourceMappingURL=attestation.d.ts.map

package/dist/cjs/certificate/kinds/definitions/attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.d.ts","sourceRoot":"","sources":["../../../../../src/certificate/kinds/definitions/attestation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,sEAAsE;AACtE,yBAAiB,sBAAsB,CAAC;IACpC,UAAiB,GAAI,SAAQ,eAAe;QACxC,MAAM,EAAE;YACJ,UAAU,EAAE,MAAM,CAAC;YACnB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,QAAQ,EAAE,QAAQ,CAAC;SACtB,CAAC;QACF,OAAO,EAAE;YACL,UAAU,EAAE,MAAM,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC;YAClB,QAAQ,EAAE,QAAQ,CAAC;SACtB,CAAC;KACL;IAED,UAAiB,GAAI,SAAQ,eAAe;QACxC,MAAM,EAAE;YACJ,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACvB,CAAC;QACF,OAAO,EAAE;YACL,UAAU,EAAE,MAAM,CAAC;YACnB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,QAAQ,EAAE,QAAQ,CAAC;SACtB,CAAC;KACL;IAED,UAAiB,GAAI,SAAQ,eAAe;QACxC,MAAM,EAAE;YACJ,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACvB,CAAC;QACF,OAAO,EAAE;YACL,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACvB,CAAC;KACL;CACJ"}

package/dist/cjs/certificate/kinds/definitions/attestation.js

@@ -0,0 +1,22 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var attestation_exports = {};
+module.exports = __toCommonJS(attestation_exports);
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+//# sourceMappingURL=attestation.js.map

package/dist/cjs/certificate/kinds/definitions/attestation.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/certificate/kinds/definitions/attestation.ts"],
+  "mappings": ";;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": []
+}