@naylence/advanced-security 0.3.0

package/dist/cjs/naylence/fame/welcome/advanced-welcome-service.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdvancedWelcomeService = void 0;
+const core_1 = require("@naylence/core");
+const runtime_1 = require("@naylence/runtime");
+const grants_js_1 = require("../security/cert/grants.js");
+const logger = (0, runtime_1.getLogger)("naylence.fame.welcome.advanced_welcome_service");
+const ENV_VAR_SHOW_ENVELOPES = "FAME_SHOW_ENVELOPES";
+const DEFAULT_TTL_SEC = 3600;
+const showEnvelopes = typeof process !== "undefined" &&
+    process.env?.[ENV_VAR_SHOW_ENVELOPES] === "true";
+function nowUtc() {
+    return new Date();
+}
+function formatTimestampForConsole() {
+    return (0, runtime_1.color)((0, runtime_1.formatTimestamp)(), runtime_1.AnsiColor.GRAY);
+}
+function prettyModel(value) {
+    try {
+        return (0, runtime_1.jsonDumps)(value);
+    }
+    catch (error) {
+        return String(error);
+    }
+}
+function coercePlacementMetadataValue(metadata, camelCaseKey, snakeCaseKey) {
+    if (!metadata) {
+        return undefined;
+    }
+    const record = metadata;
+    if (record[camelCaseKey] !== undefined) {
+        return record[camelCaseKey];
+    }
+    if (record[snakeCaseKey] !== undefined) {
+        return record[snakeCaseKey];
+    }
+    return undefined;
+}
+class AdvancedWelcomeService {
+    constructor(options) {
+        this.placementStrategy = options.placementStrategy;
+        this.transportProvisioner = options.transportProvisioner;
+        this.tokenIssuer = options.tokenIssuer;
+        this.authorizer = options.authorizer ?? null;
+        this.caServiceUrl = options.caServiceUrl;
+        this.ttlSec =
+            typeof options.ttlSec === "number" && Number.isFinite(options.ttlSec)
+                ? Math.max(0, options.ttlSec)
+                : DEFAULT_TTL_SEC;
+        logger.debug("initialized_advanced_welcome_service", {
+            ca_service_url: this.caServiceUrl,
+            ttl_sec: this.ttlSec,
+        });
+    }
+    async handleHello(hello, metadata) {
+        const fullMetadata = metadata
+            ? { ...metadata }
+            : {};
+        const trimmedSystemId = typeof hello.systemId === "string" ? hello.systemId.trim() : "";
+        const systemId = trimmedSystemId.length > 0 ? trimmedSystemId : (0, core_1.generateId)();
+        const wasAssigned = trimmedSystemId.length === 0;
+        const normalizedHello = {
+            ...hello,
+            systemId,
+        };
+        if (showEnvelopes) {
+            // eslint-disable-next-line no-console
+            console.log(`\n${formatTimestampForConsole()} - ${(0, runtime_1.color)("Received envelope 📨", runtime_1.AnsiColor.BLUE)}\n${prettyModel(normalizedHello)}`);
+        }
+        logger.debug("starting_hello_frame_processing", {
+            instanceId: normalizedHello.instanceId,
+            systemId,
+            logicals: normalizedHello.logicals,
+            capabilities: normalizedHello.capabilities,
+            ttlSec: this.ttlSec,
+        });
+        const now = nowUtc();
+        const expiry = new Date(now.getTime() + this.ttlSec * 1000);
+        if (normalizedHello.instanceId) {
+            if (fullMetadata.instanceId === undefined) {
+                fullMetadata.instanceId = normalizedHello.instanceId;
+            }
+            if (fullMetadata.instance_id === undefined) {
+                fullMetadata.instance_id = normalizedHello.instanceId;
+            }
+        }
+        logger.debug("system_id_assignment_completed", {
+            systemId,
+            wasAssigned,
+        });
+        if (normalizedHello.logicals?.length) {
+            logger.debug("validating_logicals_for_dns_compatibility", {
+                logicals: normalizedHello.logicals,
+            });
+            const [pathsValid, pathError] = (0, runtime_1.validateHostLogicals)(normalizedHello.logicals);
+            if (!pathsValid) {
+                logger.error("logical_validation_failed", {
+                    error: pathError,
+                    logicals: normalizedHello.logicals,
+                });
+                throw new Error(`Invalid logical format: ${pathError}`);
+            }
+            logger.debug("logicals_validation_successful");
+        }
+        logger.debug("requesting_node_placement", { systemId });
+        const placementResult = await this.placementStrategy.place(normalizedHello);
+        if (!placementResult.accept) {
+            logger.error("node_placement_rejected", {
+                systemId,
+                reason: placementResult.reason,
+            });
+            throw new Error(placementResult.reason || "Node not accepted");
+        }
+        const assignedPath = placementResult.assignedPath;
+        logger.debug("node_placement_accepted", {
+            systemId,
+            assignedPath,
+            targetPhysicalPath: placementResult.targetPhysicalPath ?? null,
+            targetSystemId: placementResult.targetSystemId ?? null,
+        });
+        const acceptedCapabilities = coercePlacementMetadataValue(placementResult.metadata, "acceptedCapabilities", "accepted_capabilities") ??
+            normalizedHello.capabilities ??
+            null;
+        const acceptedLogicals = coercePlacementMetadataValue(placementResult.metadata, "acceptedLogicals", "accepted_logicals") ??
+            normalizedHello.logicals ??
+            null;
+        logger.debug("processing_placement_result_metadata", {
+            acceptedCapabilities,
+            acceptedLogicals,
+            hasPlacementMetadata: placementResult.metadata !== undefined &&
+                placementResult.metadata !== null,
+        });
+        const connectionGrants = [];
+        const metadataInstanceId = (typeof fullMetadata.instanceId === "string" &&
+            fullMetadata.instanceId) ||
+            (typeof fullMetadata.instance_id === "string" &&
+                fullMetadata.instance_id) ||
+            normalizedHello.instanceId ||
+            (0, core_1.generateId)();
+        if (placementResult.targetSystemId) {
+            logger.debug("issuing_node_attach_token", {
+                systemId,
+                assignedPath,
+            });
+            const nodeAttachToken = await this.tokenIssuer.issue({
+                aud: placementResult.targetPhysicalPath,
+                system_id: systemId,
+                parent_path: placementResult.targetPhysicalPath,
+                assigned_path: placementResult.assignedPath,
+                accepted_logicals: acceptedLogicals,
+                instance_id: metadataInstanceId,
+            });
+            logger.debug("token_issued_successfully");
+            logger.debug("provisioning_transport", { systemId });
+            const transportInfo = await this.transportProvisioner.provision(placementResult, normalizedHello, fullMetadata, nodeAttachToken);
+            logger.debug("transport_provisioned_successfully", {
+                systemId,
+                directiveType: transportInfo.connectionGrant &&
+                    typeof transportInfo.connectionGrant === "object"
+                    ? (transportInfo.connectionGrant.type ??
+                        "Unknown")
+                    : "Unknown",
+            });
+            connectionGrants.push(transportInfo.connectionGrant);
+        }
+        const caSignToken = await this.tokenIssuer.issue({
+            aud: "ca",
+            system_id: systemId,
+            assigned_path: assignedPath,
+            accepted_logicals: acceptedLogicals,
+            instance_id: metadataInstanceId,
+        });
+        const caGrant = {
+            type: runtime_1.HTTP_CONNECTION_GRANT_TYPE,
+            purpose: grants_js_1.GRANT_PURPOSE_CA_SIGN,
+            url: this.caServiceUrl,
+            auth: {
+                type: "BearerTokenHeaderAuth",
+                tokenProvider: {
+                    type: "StaticTokenProvider",
+                    token: caSignToken,
+                },
+            },
+        };
+        connectionGrants.push(caGrant);
+        const welcomeFrame = {
+            type: "NodeWelcome",
+            systemId,
+            targetSystemId: placementResult.targetSystemId ?? undefined,
+            targetPhysicalPath: placementResult.targetPhysicalPath ?? undefined,
+            instanceId: normalizedHello.instanceId,
+            assignedPath,
+            acceptedCapabilities: acceptedCapabilities ?? undefined,
+            acceptedLogicals: acceptedLogicals ?? undefined,
+            rejectedLogicals: undefined,
+            connectionGrants,
+            metadata: Object.keys(fullMetadata).length > 0 ? fullMetadata : undefined,
+            expiresAt: expiry.toISOString(),
+        };
+        logger.debug("hello_frame_processing_completed_successfully", {
+            systemId,
+            assignedPath,
+            acceptedLogicals,
+            acceptedCapabilities,
+            expiresAt: welcomeFrame.expiresAt,
+            instanceId: normalizedHello.instanceId,
+        });
+        if (showEnvelopes) {
+            // eslint-disable-next-line no-console
+            console.log(`\n${formatTimestampForConsole()} - ${(0, runtime_1.color)("Sent envelope", runtime_1.AnsiColor.BLUE)} 🚀\n${prettyModel(welcomeFrame)}`);
+        }
+        return welcomeFrame;
+    }
+}
+exports.AdvancedWelcomeService = AdvancedWelcomeService;
+//# sourceMappingURL=advanced-welcome-service.js.map

package/dist/cjs/naylence/fame/welcome/advanced-welcome-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced-welcome-service.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/welcome/advanced-welcome-service.ts"],"names":[],"mappings":";;;AAAA,yCAIwB;AACxB,+CAmB2B;AAE3B,0DAAmE;AAEnE,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,gDAAgD,CAAC,CAAC;AAE3E,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AACrD,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,MAAM,aAAa,GACjB,OAAO,OAAO,KAAK,WAAW;IAC9B,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,MAAM,CAAC;AAEnD,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO,IAAA,eAAK,EAAC,IAAA,yBAAe,GAAE,EAAE,mBAAS,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC;QACH,OAAO,IAAA,mBAAS,EAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,QAAuC,EACvC,YAAoB,EACpB,YAAoB;IAEpB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,YAAY,CAAM,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,YAAY,CAAM,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAiBD,MAAa,sBAAsB;IASjC,YAAmB,OAAsC;QACvD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,MAAM;YACT,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;gBACnE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;gBAC7B,CAAC,CAAC,eAAe,CAAC;QAEtB,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YACnD,cAAc,EAAE,IAAI,CAAC,YAAY;YACjC,OAAO,EAAE,IAAI,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,KAAqB,EACrB,QAAiC;QAEjC,MAAM,YAAY,GAA4B,QAAQ;YACpD,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE;YACjB,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,eAAe,GACnB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,QAAQ,GACZ,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,iBAAU,GAAE,CAAC;QAC9D,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC;QAEjD,MAAM,eAAe,GAAmB;YACtC,GAAG,KAAK;YACR,QAAQ;SACT,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAClB,sCAAsC;YACtC,OAAO,CAAC,GAAG,CACT,KAAK,yBAAyB,EAAE,MAAM,IAAA,eAAK,EAAC,sBAAsB,EAAE,mBAAS,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,eAAe,CAAC,EAAE,CACvH,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YAC9C,UAAU,EAAE,eAAe,CAAC,UAAU;YACtC,QAAQ;YACR,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,YAAY,EAAE,eAAe,CAAC,YAAY;YAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAE5D,IAAI,eAAe,CAAC,UAAU,EAAE,CAAC;YAC/B,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC1C,YAAY,CAAC,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;YACvD,CAAC;YACD,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3C,YAAY,CAAC,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC;YACxD,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC7C,QAAQ;YACR,WAAW;SACZ,CAAC,CAAC;QAEH,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBACxD,QAAQ,EAAE,eAAe,CAAC,QAAQ;aACnC,CAAC,CAAC;YACH,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,IAAA,8BAAoB,EAClD,eAAe,CAAC,QAAQ,CACzB,CAAC;YACF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACxC,KAAK,EAAE,SAAS;oBAChB,QAAQ,EAAE,eAAe,CAAC,QAAQ;iBACnC,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAE5E,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,QAAQ;gBACR,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YACtC,QAAQ;YACR,YAAY;YACZ,kBAAkB,EAAE,eAAe,CAAC,kBAAkB,IAAI,IAAI;YAC9D,cAAc,EAAE,eAAe,CAAC,cAAc,IAAI,IAAI;SACvD,CAAC,CAAC;QAEH,MAAM,oBAAoB,GACxB,4BAA4B,CAC1B,eAAe,CAAC,QAAQ,EACxB,sBAAsB,EACtB,uBAAuB,CACxB;YACD,eAAe,CAAC,YAAY;YAC5B,IAAI,CAAC;QAEP,MAAM,gBAAgB,GACpB,4BAA4B,CAC1B,eAAe,CAAC,QAAQ,EACxB,kBAAkB,EAClB,mBAAmB,CACpB;YACD,eAAe,CAAC,QAAQ;YACxB,IAAI,CAAC;QAEP,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YACnD,oBAAoB;YACpB,gBAAgB;YAChB,oBAAoB,EAClB,eAAe,CAAC,QAAQ,KAAK,SAAS;gBACtC,eAAe,CAAC,QAAQ,KAAK,IAAI;SACpC,CAAC,CAAC;QAEH,MAAM,gBAAgB,GACpB,EAAE,CAAC;QAEL,MAAM,kBAAkB,GACtB,CAAC,OAAO,YAAY,CAAC,UAAU,KAAK,QAAQ;YAC1C,YAAY,CAAC,UAAU,CAAC;YAC1B,CAAC,OAAO,YAAY,CAAC,WAAW,KAAK,QAAQ;gBAC3C,YAAY,CAAC,WAAW,CAAC;YAC3B,eAAe,CAAC,UAAU;YAC1B,IAAA,iBAAU,GAAE,CAAC;QAEf,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACxC,QAAQ;gBACR,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBACnD,GAAG,EAAE,eAAe,CAAC,kBAAkB;gBACvC,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,eAAe,CAAC,kBAAkB;gBAC/C,aAAa,EAAE,eAAe,CAAC,YAAY;gBAC3C,iBAAiB,EAAE,gBAAgB;gBACnC,WAAW,EAAE,kBAAkB;aAChC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAE1C,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAC7D,eAAe,EACf,eAAe,EACf,YAAY,EACZ,eAAe,CAChB,CAAC;YAEF,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,QAAQ;gBACR,aAAa,EACX,aAAa,CAAC,eAAe;oBAC7B,OAAO,aAAa,CAAC,eAAe,KAAK,QAAQ;oBAC/C,CAAC,CAAC,CAAE,aAAa,CAAC,eAAsC,CAAC,IAAI;wBAC3D,SAAS,CAAC;oBACZ,CAAC,CAAC,SAAS;aAChB,CAAC,CAAC;YAEH,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAC/C,GAAG,EAAE,IAAI;YACT,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,iBAAiB,EAAE,gBAAgB;YACnC,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAwB;YACnC,IAAI,EAAE,oCAA0B;YAChC,OAAO,EAAE,iCAAqB;YAC9B,GAAG,EAAE,IAAI,CAAC,YAAY;YACtB,IAAI,EAAE;gBACJ,IAAI,EAAE,uBAAuB;gBAC7B,aAAa,EAAE;oBACb,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,WAAW;iBACnB;aACoC;SACxC,CAAC;QAEF,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,YAAY,GAAqB;YACrC,IAAI,EAAE,aAAa;YACnB,QAAQ;YACR,cAAc,EAAE,eAAe,CAAC,cAAc,IAAI,SAAS;YAC3D,kBAAkB,EAAE,eAAe,CAAC,kBAAkB,IAAI,SAAS;YACnE,UAAU,EAAE,eAAe,CAAC,UAAU;YACtC,YAAY;YACZ,oBAAoB,EAAE,oBAAoB,IAAI,SAAS;YACvD,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;YAC/C,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB;YAChB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACzE,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE;SAChC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAC5D,QAAQ;YACR,YAAY;YACZ,gBAAgB;YAChB,oBAAoB;YACpB,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,UAAU,EAAE,eAAe,CAAC,UAAU;SACvC,CAAC,CAAC;QAEH,IAAI,aAAa,EAAE,CAAC;YAClB,sCAAsC;YACtC,OAAO,CAAC,GAAG,CACT,KAAK,yBAAyB,EAAE,MAAM,IAAA,eAAK,EAAC,eAAe,EAAE,mBAAS,CAAC,IAAI,CAAC,QAAQ,WAAW,CAAC,YAAY,CAAC,EAAE,CAChH,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AApPD,wDAoPC"}

package/dist/cjs/naylence/fame/welcome/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ADVANCED_WELCOME_FACTORY_META = exports.AdvancedWelcomeServiceFactory = exports.AdvancedWelcomeService = void 0;
+var advanced_welcome_service_js_1 = require("./advanced-welcome-service.js");
+Object.defineProperty(exports, "AdvancedWelcomeService", { enumerable: true, get: function () { return advanced_welcome_service_js_1.AdvancedWelcomeService; } });
+var advanced_welcome_service_factory_js_1 = require("./advanced-welcome-service-factory.js");
+Object.defineProperty(exports, "AdvancedWelcomeServiceFactory", { enumerable: true, get: function () { return advanced_welcome_service_factory_js_1.AdvancedWelcomeServiceFactory; } });
+Object.defineProperty(exports, "ADVANCED_WELCOME_FACTORY_META", { enumerable: true, get: function () { return advanced_welcome_service_factory_js_1.FACTORY_META; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/naylence/fame/welcome/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/welcome/index.ts"],"names":[],"mappings":";;;AAAA,6EAGuC;AAFrC,qIAAA,sBAAsB,OAAA;AAGxB,6FAI+C;AAH7C,oJAAA,6BAA6B,OAAA;AAC7B,oJAAA,YAAY,OAAiC"}

package/dist/cjs/plugin.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ADVANCED_SECURITY_PLUGIN_SPECIFIER = void 0;
+exports.registerAdvancedSecurityPluginFactories = registerAdvancedSecurityPluginFactories;
+const factory_1 = require("@naylence/factory");
+const register_advanced_security_factories_js_1 = require("./naylence/fame/security/register-advanced-security-factories.js");
+async function registerAdvancedSecurityPluginFactories(registrar = factory_1.Registry) {
+    await (0, register_advanced_security_factories_js_1.registerAdvancedSecurityFactories)(registrar, { includeExtras: true });
+}
+let initialized = false;
+let initializing = null;
+const advancedSecurityPlugin = {
+    name: "naylence:advanced-security",
+    async register() {
+        // console.log('[naylence:advanced-security] register() called, initialized=', initialized);
+        if (initialized) {
+            // console.log('[naylence:advanced-security] already initialized, skipping');
+            return;
+        }
+        if (initializing) {
+            console.log("[naylence:advanced-security] already initializing, awaiting...");
+            await initializing;
+            return;
+        }
+        initializing = (async () => {
+            try {
+                // console.log('[naylence:advanced-security] registering advanced security factories...');
+                await registerAdvancedSecurityPluginFactories();
+                // console.log('[naylence:advanced-security] advanced security factories registered');
+                initialized = true;
+            }
+            finally {
+                initializing = null;
+            }
+        })();
+        await initializing;
+    },
+};
+exports.default = advancedSecurityPlugin;
+exports.ADVANCED_SECURITY_PLUGIN_SPECIFIER = advancedSecurityPlugin.name;
+//# sourceMappingURL=plugin.js.map

package/dist/cjs/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/plugin.ts"],"names":[],"mappings":";;;AAUA,0FAIC;AAVD,+CAA6C;AAE7C,8HAAqH;AAI9G,KAAK,UAAU,uCAAuC,CAC3D,YAA8B,kBAAQ;IAEtC,MAAM,IAAA,2EAAiC,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,YAAY,GAAyB,IAAI,CAAC;AAE9C,MAAM,sBAAsB,GAAe;IACzC,IAAI,EAAE,4BAA4B;IAClC,KAAK,CAAC,QAAQ;QACZ,4FAA4F;QAC5F,IAAI,WAAW,EAAE,CAAC;YAChB,6EAA6E;YAC7E,OAAO;QACT,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,gEAAgE,CACjE,CAAC;YACF,MAAM,YAAY,CAAC;YACnB,OAAO;QACT,CAAC;QAED,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,CAAC;gBACH,0FAA0F;gBAC1F,MAAM,uCAAuC,EAAE,CAAC;gBAChD,sFAAsF;gBACtF,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,YAAY,CAAC;IACrB,CAAC;CACF,CAAC;AAEF,kBAAe,sBAAsB,CAAC;AAEzB,QAAA,kCAAkC,GAAG,sBAAsB,CAAC,IAAI,CAAC"}

package/dist/esm/browser.js

@@ -0,0 +1,3 @@
+// Browser-friendly entry point. Limit exports to APIs that are safe for browser usage.
+export * from "./index.js";
+//# sourceMappingURL=browser.js.map

package/dist/esm/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,cAAc,YAAY,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,4 @@
+export * from "./naylence/fame/security/index.js";
+export * from "./naylence/fame/stickiness/index.js";
+export * from "./naylence/fame/welcome/index.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC"}

package/dist/esm/naylence/fame/factory-manifest.js

@@ -0,0 +1,21 @@
+/**
+ * AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
+ * Generated by scripts/generate-factory-manifest.mjs
+ *
+ * Provides the list of advanced security factory modules for registration.
+ */
+export const MODULES = [
+    "./security/cert/default-ca-service-factory.js",
+    "./security/cert/default-certificate-manager-factory.js",
+    "./security/encryption/channel/channel-encryption-manager-factory.js",
+    "./security/encryption/composite-encryption-manager-factory.js",
+    "./security/encryption/default-secure-channel-manager-factory.js",
+    "./security/encryption/sealed/x25519-encryption-manager-factory.js",
+    "./security/keys/x5c-key-manager-factory.js",
+    "./security/signing/eddsa-envelope-signer-factory.js",
+    "./security/signing/eddsa-envelope-verifier-factory.js",
+    "./stickiness/aft-load-balancer-stickiness-manager-factory.js",
+    "./stickiness/aft-replica-stickiness-manager-factory.js",
+    "./welcome/advanced-welcome-service-factory.js"
+];
+//# sourceMappingURL=factory-manifest.js.map

package/dist/esm/naylence/fame/factory-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory-manifest.js","sourceRoot":"","sources":["../../../../src/naylence/fame/factory-manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,+CAA+C;IAC/C,wDAAwD;IACxD,qEAAqE;IACrE,+DAA+D;IAC/D,iEAAiE;IACjE,mEAAmE;IACnE,4CAA4C;IAC5C,qDAAqD;IACrD,uDAAuD;IACvD,8DAA8D;IAC9D,wDAAwD;IACxD,+CAA+C;CACvC,CAAC"}

package/dist/esm/naylence/fame/security/cert/ca-server.js

@@ -0,0 +1,153 @@
+#!/usr/bin/env node
+/**
+ * CA Server - Certificate Authority HTTP endpoint
+ *
+ * Provides certificate issuance via HTTP using Fastify.
+ * Mirrors the Python ca_server.py implementation.
+ */
+import Fastify from "fastify";
+import { CAServiceFactory } from "./ca-service-factory.js";
+// Simple console logger for CA server
+const logger = {
+    info: (event, meta) => {
+        console.log(`[INFO] ${event}`, meta || "");
+    },
+    warning: (event, meta) => {
+        console.warn(`[WARNING] ${event}`, meta || "");
+    },
+    error: (event, meta) => {
+        console.error(`[ERROR] ${event}`, meta || "");
+    },
+    debug: (event, meta) => {
+        const logLevel = (process.env.FAME_LOG_LEVEL || "info").toLowerCase();
+        if (logLevel === "debug" || logLevel === "trace") {
+            console.log(`[DEBUG] ${event}`, meta || "");
+        }
+    },
+};
+const ENV_VAR_FAME_APP_HOST = "FAME_APP_HOST";
+const ENV_VAR_FAME_APP_PORT = "FAME_APP_PORT";
+/**
+ * Create CA router with certificate signing endpoint.
+ * Mirrors Python's create_ca_router functionality.
+ */
+function createCaRouter(fastify, caService, prefix = "/fame/v1/ca") {
+    // Certificate signing endpoint
+    fastify.post(`${prefix}/sign`, {
+        schema: {
+            body: {
+                type: "object",
+                required: ["csr_pem", "requester_id"],
+                properties: {
+                    csr_pem: { type: "string" },
+                    requester_id: { type: "string" },
+                    physical_path: { type: "string" },
+                    logicals: { type: "array", items: { type: "string" } },
+                },
+            },
+        },
+    }, async (request, reply) => {
+        try {
+            const csrRequest = request.body;
+            if (!csrRequest || !csrRequest.requester_id) {
+                return reply.status(400).send({
+                    error: "invalid_request",
+                    message: "CSR must include requester_id",
+                });
+            }
+            logger.debug("ca_cert_request_received", {
+                requester_id: csrRequest.requester_id,
+                physical_path: csrRequest.physical_path,
+                logicals: csrRequest.logicals,
+            });
+            // Authenticate if authorizer is configured
+            if (caService.authorizer) {
+                // TODO: Implement authentication when authorizer interface is defined
+                logger.warning("authentication_not_yet_implemented", {
+                    authorizer_configured: true,
+                });
+            }
+            // Convert snake_case request to camelCase for TypeScript interface
+            const csrForService = {
+                csrPem: csrRequest.csr_pem,
+                requesterId: csrRequest.requester_id,
+                physicalPath: csrRequest.physical_path,
+                logicals: csrRequest.logicals,
+            };
+            // Issue certificate
+            const result = await caService.issueCertificate(csrForService);
+            const response = {
+                certificate_pem: result.certificatePem,
+                certificate_chain_pem: result.certificateChainPem,
+                expires_at: result.expiresAt,
+            };
+            return reply.send(response);
+        }
+        catch (error) {
+            logger.error("ca_cert_issuance_failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return reply.status(500).send({
+                error: "issuance_failed",
+                message: error instanceof Error ? error.message : "Unknown error",
+            });
+        }
+    });
+    // Health check
+    fastify.get("/health", async () => {
+        return { status: "healthy", service: "ca-server" };
+    });
+}
+/**
+ * Create Fastify application with CA service lifespan management.
+ * Mirrors Python's FastAPI lifespan pattern.
+ */
+async function createApp() {
+    // Disable Fastify's built-in logger to avoid configuration conflicts
+    const fastify = Fastify({
+        logger: false,
+    });
+    // Register advanced security factories (including CA service factory)
+    const { registerAdvancedSecurityPluginFactories } = await import("../../../../plugin.js");
+    await registerAdvancedSecurityPluginFactories();
+    // Create CA service (mirrors Python's lifespan startup)
+    const caService = await CAServiceFactory.createCAService();
+    // Register CA router
+    createCaRouter(fastify, caService);
+    return { app: fastify, caService };
+}
+async function main() {
+    try {
+        const { app } = await createApp();
+        const host = process.env[ENV_VAR_FAME_APP_HOST] || "0.0.0.0";
+        const port = parseInt(process.env[ENV_VAR_FAME_APP_PORT] || "8098", 10);
+        await app.listen({ host, port });
+        logger.info("ca_server_started", { host, port });
+        console.log(`\n📍 CA Server listening on http://${host}:${port}`);
+        console.log(`🔐 Certificate endpoint: http://${host}:${port}/fame/v1/ca/sign\n`);
+    }
+    catch (error) {
+        logger.error("ca_server_startup_failed", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        process.exit(1);
+    }
+}
+// Signal handlers
+process.on("SIGTERM", () => {
+    logger.info("ca_server_shutting_down", { signal: "SIGTERM" });
+    process.exit(0);
+});
+process.on("SIGINT", () => {
+    logger.info("ca_server_shutting_down", { signal: "SIGINT" });
+    process.exit(0);
+});
+// Run if executed directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+    main().catch((error) => {
+        console.error("Fatal error:", error);
+        process.exit(1);
+    });
+}
+export { createApp };
+//# sourceMappingURL=ca-server.js.map

package/dist/esm/naylence/fame/security/cert/ca-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-server.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-server.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,sCAAsC;AACtC,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACtD,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACzD,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACvD,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAC9C,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAe9C;;;GAGG;AACH,SAAS,cAAc,CACrB,OAAwB,EACxB,SAAoB,EACpB,SAAiB,aAAa;IAE9B,+BAA+B;IAC/B,OAAO,CAAC,IAAI,CACV,GAAG,MAAM,OAAO,EAChB;QACE,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;gBACrC,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAChC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACvD;aACF;SACF;KACF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;YAEhC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,+BAA+B;iBACzC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACvC,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CAAC;YAEH,2CAA2C;YAC3C,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACzB,sEAAsE;gBACtE,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE;oBACnD,qBAAqB,EAAE,IAAI;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,mEAAmE;YACnE,MAAM,aAAa,GAAG;gBACpB,MAAM,EAAE,UAAU,CAAC,OAAO;gBAC1B,WAAW,EAAE,UAAU,CAAC,YAAY;gBACpC,YAAY,EAAE,UAAU,CAAC,aAAa;gBACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC;YAEF,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAE/D,MAAM,QAAQ,GAAgC;gBAC5C,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,qBAAqB,EAAE,MAAM,CAAC,mBAAmB;gBACjD,UAAU,EAAE,MAAM,CAAC,SAAS;aAC7B,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;IAEF,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS;IAItB,qEAAqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,EAAE,uCAAuC,EAAE,GAAG,MAAM,MAAM,CAC9D,uBAAuB,CACxB,CAAC;IACF,MAAM,uCAAuC,EAAE,CAAC;IAEhD,wDAAwD;IACxD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,CAAC;IAE3D,qBAAqB;IACrB,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEnC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;QAElC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CAAC;QAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAExE,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CACT,mCAAmC,IAAI,IAAI,IAAI,oBAAoB,CACpE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACvC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,kBAAkB;AAClB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;IACzB,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;IACxB,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,2BAA2B;AAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}