@naylence/advanced-security 0.3.0

package/dist/esm/naylence/fame/security/cert/default-certificate-manager.js

@@ -0,0 +1,638 @@
+import { SigningMaterial } from "@naylence/core";
+import { AuthInjectionStrategyFactory, getLogger, SigningConfigClass, } from "@naylence/runtime";
+import { CAServiceClient, } from "./ca-service-client.js";
+import { CertificateRequestError } from "./ca-types.js";
+import { GRANT_PURPOSE_CA_SIGN } from "./grants.js";
+import { validateJwkX5cCertificate } from "./util.js";
+const logger = getLogger("naylence.fame.security.cert.default_certificate_manager");
+const ENV_VAR_FAME_CA_CERTS = "FAME_CA_CERTS";
+const CONNECTION_GRANTS_CAMEL = "connectionGrants";
+const CONNECTION_GRANTS_SNAKE = "connection_grants";
+export class DefaultCertificateManager {
+    constructor(options = {}) {
+        this.priority = 1500;
+        this.node = null;
+        this.pendingWelcomeFrame = null;
+        this.signing = normalizeSigningConfig(options.signing ?? null);
+        this.securitySettings = options.securitySettings ?? null;
+        this.caServiceUrl = options.caServiceUrl ?? null;
+        this.cryptoProviderOverride =
+            options.cryptoProvider ?? options.crypto_provider ?? null;
+    }
+    setSigning(signing) {
+        this.signing = normalizeSigningConfig(signing);
+    }
+    setSecuritySettings(securitySettings) {
+        this.securitySettings = securitySettings ?? null;
+    }
+    async onNodeStarted(node) {
+        this.node = node;
+        this.prepareProviderContext(node);
+        const requiresCertificate = this.requiresCertificates();
+        if (requiresCertificate) {
+            logger.debug("node_certificate_required_on_start", {
+                node_id: node.id,
+                physical_path: node.physicalPath,
+                has_parent: node.hasParent,
+            });
+            const fallbackWelcome = {
+                security_settings: this.securitySettings ?? undefined,
+                system_id: node.id,
+                assigned_path: node.physicalPath,
+                accepted_logicals: Array.from(node.acceptedLogicals),
+            };
+            const welcomeFrame = this.pendingWelcomeFrame ?? fallbackWelcome;
+            const success = await this.ensureCertificate(welcomeFrame, this.caServiceUrl ? { caServiceUrl: this.caServiceUrl } : undefined);
+            if (!success) {
+                logger.warning("node_certificate_unavailable_on_start", {
+                    node_id: node.id,
+                    physical_path: node.physicalPath,
+                    message: "Certificate provisioning was requested but did not complete",
+                });
+            }
+        }
+        else {
+            this.pendingWelcomeFrame = null;
+        }
+    }
+    async onWelcome(welcomeFrame) {
+        const requiresCertificate = this.requiresCertificates(welcomeFrame);
+        if (!requiresCertificate) {
+            logger.debug("welcome_does_not_require_certificate", {
+                system_id: welcomeFrame.systemId ?? null,
+            });
+            this.pendingWelcomeFrame = null;
+            return;
+        }
+        const success = await this.ensureCertificate(welcomeFrame, this.caServiceUrl ? { caServiceUrl: this.caServiceUrl } : undefined);
+        if (success) {
+            return;
+        }
+        if (!this.node) {
+            logger.debug("certificate_provisioning_deferred_until_node_start", {
+                system_id: welcomeFrame.systemId ?? null,
+                assigned_path: welcomeFrame.assignedPath ?? null,
+            });
+            return;
+        }
+        const nodeId = welcomeFrame.systemId ?? "unknown";
+        logger.warning("certificate_provisioning_not_completed", {
+            node_id: nodeId,
+            assigned_path: welcomeFrame.assignedPath ?? null,
+            message: "Continuing without a provisioned certificate (development mode)",
+        });
+    }
+    async ensureCertificate(welcomeFrame, options) {
+        const requiresCertificate = this.requiresCertificates(welcomeFrame);
+        if (!requiresCertificate) {
+            this.pendingWelcomeFrame = null;
+            return true;
+        }
+        this.pendingWelcomeFrame = welcomeFrame;
+        const cryptoProvider = this.resolveCryptoProvider();
+        if (!cryptoProvider) {
+            if (!this.node) {
+                logger.debug("crypto_provider_pending_node_start", {
+                    system_id: welcomeFrame.systemId ?? null,
+                    assigned_path: welcomeFrame.assignedPath ?? null,
+                });
+            }
+            else {
+                logger.error("crypto_provider_unavailable_for_certificate", {
+                    system_id: welcomeFrame.systemId ?? null,
+                    assigned_path: welcomeFrame.assignedPath ?? null,
+                });
+            }
+            return false;
+        }
+        const nodeId = readFrameString(welcomeFrame, "systemId", "system_id") ??
+            (typeof cryptoProvider.signatureKeyId === "string"
+                ? cryptoProvider.signatureKeyId
+                : null);
+        if (await this.ensureExistingCertificateIsTrusted(cryptoProvider, nodeId)) {
+            this.pendingWelcomeFrame = null;
+            return true;
+        }
+        this.prepareProviderForWelcome(cryptoProvider, welcomeFrame);
+        const connectionGrants = readFrameValue(welcomeFrame, CONNECTION_GRANTS_CAMEL, CONNECTION_GRANTS_SNAKE);
+        const caSignGrant = this.getCaSignGrant(connectionGrants);
+        if (!caSignGrant) {
+            logger.warning("welcome_frame_missing_ca_sign_grant", {
+                system_id: nodeId,
+                grant_count: Array.isArray(connectionGrants)
+                    ? connectionGrants.length
+                    : 0,
+            });
+        }
+        let material = null;
+        if (caSignGrant) {
+            material = await this.requestCertificateFromCa(cryptoProvider, welcomeFrame, caSignGrant, options);
+            if (!material) {
+                logger.warning("ca_certificate_request_failed_falling_back_to_env", {
+                    system_id: nodeId,
+                    ca_service_url: options?.caServiceUrl ?? this.caServiceUrl ?? caSignGrant.url,
+                });
+            }
+        }
+        if (!material) {
+            logger.debug("attempting_certificate_resolution_from_environment", {
+                system_id: nodeId,
+            });
+            material = await resolveCertificateMaterial();
+        }
+        if (!material) {
+            logger.warning("certificate_material_not_found", {
+                system_id: nodeId,
+                assigned_path: readFrameString(welcomeFrame, "assignedPath", "assigned_path"),
+                ca_service_url: options?.caServiceUrl ?? this.caServiceUrl,
+            });
+            return false;
+        }
+        const stored = storeCertificateMaterial(cryptoProvider, material);
+        if (!stored) {
+            logger.warning("certificate_storage_not_supported", {
+                system_id: nodeId,
+            });
+            return false;
+        }
+        const validated = await this.validateProviderCertificate(cryptoProvider, nodeId);
+        if (!validated) {
+            return false;
+        }
+        logger.debug("certificate_material_applied", {
+            system_id: nodeId,
+            has_chain: Boolean(material.certificateChainPem),
+        });
+        this.pendingWelcomeFrame = null;
+        return true;
+    }
+    requiresCertificates(welcomeFrame) {
+        const frameMaterial = welcomeFrame?.securitySettings?.signing_material ?? null;
+        if (frameMaterial === SigningMaterial.X509_CHAIN) {
+            return true;
+        }
+        if (this.securitySettings?.signing_material === SigningMaterial.X509_CHAIN) {
+            return true;
+        }
+        if (this.signing.signingMaterial === SigningMaterial.X509_CHAIN) {
+            return true;
+        }
+        return false;
+    }
+    prepareProviderContext(node) {
+        const provider = this.resolveCryptoProvider();
+        if (!provider) {
+            return;
+        }
+        const awareProvider = provider;
+        if (typeof awareProvider.setNodeContextFromNodeLike === "function") {
+            awareProvider.setNodeContextFromNodeLike(node);
+            return;
+        }
+        if (typeof awareProvider.setNodeContext === "function") {
+            awareProvider.setNodeContext(node.id, node.physicalPath, Array.from(node.acceptedLogicals), null);
+        }
+    }
+    prepareProviderForWelcome(provider, welcomeFrame) {
+        const logicals = Array.isArray(welcomeFrame.acceptedLogicals)
+            ? welcomeFrame.acceptedLogicals.filter((value) => typeof value === "string")
+            : [];
+        if (typeof provider.prepareForAttach === "function" &&
+            typeof welcomeFrame.systemId === "string") {
+            provider.prepareForAttach(welcomeFrame.systemId, typeof welcomeFrame.assignedPath === "string"
+                ? welcomeFrame.assignedPath
+                : undefined, logicals);
+        }
+    }
+    resolveCryptoProvider() {
+        // First check if we have a crypto provider override
+        if (this.cryptoProviderOverride) {
+            return this.cryptoProviderOverride;
+        }
+        // Otherwise, try to get from the node
+        const candidate = this.node?.cryptoProvider ?? null;
+        if (!candidate) {
+            return null;
+        }
+        return candidate;
+    }
+    async ensureExistingCertificateIsTrusted(provider, nodeId) {
+        if (!providerHasCertificate(provider)) {
+            return false;
+        }
+        const validated = await this.validateProviderCertificate(provider, nodeId);
+        if (!validated) {
+            logger.error("existing_certificate_validation_failed", {
+                node_id: nodeId,
+            });
+            return false;
+        }
+        logger.debug("existing_certificate_validated", {
+            node_id: nodeId,
+        });
+        return true;
+    }
+    getCaSignGrant(connectionGrants) {
+        if (!Array.isArray(connectionGrants)) {
+            return null;
+        }
+        for (const candidate of connectionGrants) {
+            if (!candidate || typeof candidate !== "object") {
+                continue;
+            }
+            const grantRecord = candidate;
+            const purpose = readRecordString(grantRecord, "purpose");
+            if (purpose !== GRANT_PURPOSE_CA_SIGN) {
+                continue;
+            }
+            const url = readRecordString(grantRecord, "url", "baseUrl", "base_url");
+            if (!url) {
+                logger.warning("ca_sign_grant_missing_url", {
+                    grant_keys: Object.keys(grantRecord),
+                });
+                continue;
+            }
+            const authConfig = readGrantAuthConfig(grantRecord);
+            return {
+                url,
+                ...(authConfig ? { auth: authConfig } : {}),
+            };
+        }
+        return null;
+    }
+    async requestCertificateFromCa(provider, welcomeFrame, grant, options) {
+        const nodeId = readFrameString(welcomeFrame, "systemId", "system_id") ??
+            (typeof provider.signatureKeyId === "string"
+                ? provider.signatureKeyId
+                : null);
+        if (!nodeId) {
+            logger.warning("certificate_request_missing_node_id");
+            return null;
+        }
+        const physicalPath = readFrameString(welcomeFrame, "assignedPath", "assigned_path");
+        if (!physicalPath) {
+            logger.warning("certificate_request_missing_physical_path", {
+                node_id: nodeId,
+            });
+            return null;
+        }
+        const logicals = Array.isArray(welcomeFrame.acceptedLogicals)
+            ? welcomeFrame.acceptedLogicals.filter((value) => typeof value === "string")
+            : [];
+        if (typeof provider.createCsr !== "function") {
+            logger.warning("crypto_provider_missing_create_csr", {
+                node_id: nodeId,
+            });
+            return null;
+        }
+        let csrPem;
+        try {
+            const result = provider.createCsr(nodeId, physicalPath, logicals);
+            csrPem = typeof result === "string" ? result : await result;
+        }
+        catch (error) {
+            logger.error("csr_generation_failed", {
+                node_id: nodeId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return null;
+        }
+        const caServiceUrl = options?.caServiceUrl ?? this.caServiceUrl ?? grant.url;
+        if (!caServiceUrl) {
+            logger.error("ca_service_url_unavailable", {
+                node_id: nodeId,
+            });
+            return null;
+        }
+        const connectionGrant = {
+            url: caServiceUrl,
+        };
+        let authStrategy = null;
+        try {
+            authStrategy = await this.createAuthStrategyForGrant(grant);
+        }
+        catch (error) {
+            logger.error("ca_sign_auth_strategy_creation_failed", {
+                node_id: nodeId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return null;
+        }
+        const client = new CAServiceClient(connectionGrant);
+        try {
+            if (authStrategy) {
+                await authStrategy.apply(client);
+            }
+            const [certificatePem, certificateChainPem] = await client.requestCertificate(csrPem, nodeId, physicalPath, logicals);
+            logger.debug("certificate_received_from_ca_service", {
+                node_id: nodeId,
+                has_chain: Boolean(certificateChainPem),
+                ca_service_url: caServiceUrl,
+            });
+            return {
+                certificatePem,
+                certificateChainPem: certificateChainPem ?? null,
+            };
+        }
+        catch (error) {
+            if (error instanceof CertificateRequestError) {
+                logger.error("certificate_request_failed", {
+                    node_id: nodeId,
+                    error: error.message,
+                });
+            }
+            else {
+                logger.error("certificate_request_unhandled_error", {
+                    node_id: nodeId,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+            return null;
+        }
+        finally {
+            if (authStrategy) {
+                try {
+                    await authStrategy.cleanup();
+                }
+                catch (cleanupError) {
+                    logger.debug("auth_strategy_cleanup_failed", {
+                        error: cleanupError instanceof Error
+                            ? cleanupError.message
+                            : String(cleanupError),
+                    });
+                }
+            }
+        }
+    }
+    async createAuthStrategyForGrant(grant) {
+        const authConfig = grant.auth ?? null;
+        if (!authConfig) {
+            return null;
+        }
+        const normalizedConfig = normalizeAuthConfig(authConfig);
+        if (!normalizedConfig) {
+            return null;
+        }
+        return AuthInjectionStrategyFactory.createAuthInjectionStrategy(normalizedConfig);
+    }
+    async validateProviderCertificate(provider, nodeId) {
+        const trustStorePem = await resolveTrustStorePem();
+        if (!trustStorePem) {
+            logger.error("trust_anchor_validation_failed", {
+                node_id: nodeId,
+                reason: `${ENV_VAR_FAME_CA_CERTS}_not_set`,
+            });
+            return false;
+        }
+        if (typeof provider.nodeJwk !== "function") {
+            logger.error("trust_anchor_validation_failed", {
+                node_id: nodeId,
+                reason: "crypto_provider_lacks_node_jwk",
+            });
+            return false;
+        }
+        let jwk;
+        try {
+            jwk = provider.nodeJwk() ?? null;
+        }
+        catch (error) {
+            logger.error("trust_anchor_validation_failed", {
+                node_id: nodeId,
+                reason: "node_jwk_retrieval_failed",
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return false;
+        }
+        if (!jwk) {
+            logger.error("trust_anchor_validation_failed", {
+                node_id: nodeId,
+                reason: "node_jwk_missing",
+            });
+            return false;
+        }
+        const x5c = jwk.x5c;
+        if (!Array.isArray(x5c) ||
+            x5c.length === 0 ||
+            x5c.some((entry) => typeof entry !== "string")) {
+            logger.error("trust_anchor_validation_failed", {
+                node_id: nodeId,
+                reason: "invalid_certificate_chain",
+            });
+            return false;
+        }
+        try {
+            const result = validateJwkX5cCertificate({
+                jwk,
+                trustStorePem,
+                enforceNameConstraints: true,
+                strict: false,
+            });
+            if (!result.isValid) {
+                logger.error("trust_anchor_validation_failed", {
+                    node_id: nodeId,
+                    reason: result.error ?? "validation_failed",
+                });
+                return false;
+            }
+            logger.debug("certificate_chain_validation_successful", {
+                node_id: nodeId,
+            });
+            return true;
+        }
+        catch (error) {
+            logger.error("trust_anchor_validation_failed", {
+                node_id: nodeId,
+                reason: "validation_error",
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return false;
+        }
+    }
+}
+function normalizeSigningConfig(value) {
+    if (value instanceof SigningConfigClass) {
+        return value;
+    }
+    if (value && typeof value === "object") {
+        return new SigningConfigClass(value);
+    }
+    return new SigningConfigClass();
+}
+async function resolveCertificateMaterial() {
+    const certificatePem = await resolvePemFromEnvironment("FAME_NODE_CERT_PEM", "FAME_NODE_CERT_FILE");
+    if (!certificatePem) {
+        return null;
+    }
+    const certificateChainPem = await resolvePemFromEnvironment("FAME_NODE_CERT_CHAIN_PEM", "FAME_NODE_CERT_CHAIN_FILE");
+    return {
+        certificatePem,
+        certificateChainPem,
+    };
+}
+async function resolvePemFromEnvironment(envVar, fileVar) {
+    if (!hasProcessEnv()) {
+        return null;
+    }
+    const inlineValue = process.env?.[envVar];
+    if (inlineValue && inlineValue.trim().length > 0) {
+        return normalizePem(inlineValue);
+    }
+    const filePath = process.env?.[fileVar];
+    if (!filePath || filePath.trim().length === 0) {
+        return null;
+    }
+    if (!isNodeProcess()) {
+        logger.debug("pem_file_unavailable_in_browser", {
+            env_var: fileVar,
+        });
+        return null;
+    }
+    try {
+        const fs = await import("node:fs/promises");
+        const content = await fs.readFile(filePath, "utf8");
+        return normalizePem(content);
+    }
+    catch (error) {
+        logger.warning("failed_to_read_certificate_file", {
+            file: filePath,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return null;
+    }
+}
+function normalizePem(value) {
+    return value.replace(/\r/g, "").trim();
+}
+function hasProcessEnv() {
+    return typeof process !== "undefined" && !!process?.env;
+}
+function isNodeProcess() {
+    return (typeof process !== "undefined" &&
+        typeof process.versions === "object" &&
+        typeof process.versions?.node === "string");
+}
+function providerHasCertificate(provider) {
+    if (typeof provider.hasCertificate === "function") {
+        try {
+            return Boolean(provider.hasCertificate());
+        }
+        catch (error) {
+            logger.debug("has_certificate_check_failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    if (typeof provider.nodeCertificatePem === "function") {
+        try {
+            return Boolean(provider.nodeCertificatePem());
+        }
+        catch (error) {
+            logger.debug("node_certificate_check_failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return false;
+}
+function storeCertificateMaterial(provider, material) {
+    if (typeof provider.storeSignedCertificate !== "function") {
+        return false;
+    }
+    try {
+        provider.storeSignedCertificate(material.certificatePem, material.certificateChainPem);
+        return true;
+    }
+    catch (error) {
+        logger.warning("failed_to_store_certificate", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return false;
+    }
+}
+function readFrameValue(frame, ...keys) {
+    const record = frame;
+    for (const key of keys) {
+        if (Object.prototype.hasOwnProperty.call(record, key)) {
+            const value = record[key];
+            if (value !== undefined && value !== null) {
+                return value;
+            }
+        }
+    }
+    return null;
+}
+function readFrameString(frame, ...keys) {
+    const value = readFrameValue(frame, ...keys);
+    if (typeof value === "string" && value.length > 0) {
+        return value;
+    }
+    return null;
+}
+function readRecordString(source, ...keys) {
+    for (const key of keys) {
+        const value = source[key];
+        if (typeof value === "string" && value.length > 0) {
+            return value;
+        }
+    }
+    return null;
+}
+function readGrantAuthConfig(source) {
+    const candidate = source.auth ??
+        source.authConfig ??
+        source.auth_config ??
+        source.authentication ??
+        source.authenticationConfig ??
+        source.authentication_config ??
+        null;
+    if (!candidate || typeof candidate !== "object") {
+        return null;
+    }
+    return candidate;
+}
+function normalizeAuthConfig(candidate) {
+    if (!candidate || typeof candidate !== "object") {
+        return null;
+    }
+    const normalized = candidate;
+    if (!normalized.type || typeof normalized.type !== "string") {
+        logger.warning("auth_strategy_missing_type", {
+            provided_keys: Object.keys(candidate),
+        });
+        return null;
+    }
+    return normalized;
+}
+async function resolveTrustStorePem() {
+    if (!hasProcessEnv()) {
+        return null;
+    }
+    const rawValue = process.env?.[ENV_VAR_FAME_CA_CERTS];
+    if (!rawValue || rawValue.trim().length === 0) {
+        return null;
+    }
+    if (rawValue.trim().startsWith("-----BEGIN")) {
+        return rawValue.replace(/\r/g, "").trim();
+    }
+    if (!isNodeProcess()) {
+        logger.debug("trust_store_file_unavailable_in_browser", {
+            env_var: ENV_VAR_FAME_CA_CERTS,
+        });
+        return null;
+    }
+    const filePath = rawValue.trim();
+    try {
+        const fs = await import("node:fs/promises");
+        const content = await fs.readFile(filePath, "utf8");
+        return content.replace(/\r/g, "").trim();
+    }
+    catch (error) {
+        logger.error("failed_to_read_trust_store", {
+            file: filePath,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return null;
+    }
+}
+export default DefaultCertificateManager;
+//# sourceMappingURL=default-certificate-manager.js.map

package/dist/esm/naylence/fame/security/cert/default-certificate-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-certificate-manager.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,kBAAkB,GAOnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,GAEhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,MAAM,GAAG,SAAS,CACtB,yDAAyD,CAC1D,CAAC;AAqBF,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAE9C,MAAM,uBAAuB,GAAG,kBAA2B,CAAC;AAC5D,MAAM,uBAAuB,GAAG,mBAA4B,CAAC;AAoC7D,MAAM,OAAO,yBAAyB;IAUpC,YAAmB,UAA4C,EAAE;QATjD,aAAQ,GAAG,IAAI,CAAC;QAMxB,SAAI,GAAoB,IAAI,CAAC;QAC7B,wBAAmB,GAA4B,IAAI,CAAC;QAG1D,IAAI,CAAC,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,sBAAsB;YACzB,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IAC9D,CAAC;IAEM,UAAU,CACf,OAA4D;QAE5D,IAAI,CAAC,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAEM,mBAAmB,CAAC,gBAAyC;QAClE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,IAAI,IAAI,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,IAAc;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxD,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,UAAU,EAAE,IAAI,CAAC,SAAS;aAC3B,CAAC,CAAC;YAEH,MAAM,eAAe,GAAqB;gBACxC,iBAAiB,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS;gBACrD,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;aACtB,CAAC;YAEjC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,IAAI,eAAe,CAAC;YAEjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC1C,YAAY,EACZ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CACpE,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,OAAO,CAAC,uCAAuC,EAAE;oBACtD,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,aAAa,EAAE,IAAI,CAAC,YAAY;oBAChC,OAAO,EACL,6DAA6D;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,YAA8B;QACnD,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACnD,SAAS,EAAE,YAAY,CAAC,QAAQ,IAAI,IAAI;aACzC,CAAC,CAAC;YACH,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC1C,YAAY,EACZ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CACpE,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACjE,SAAS,EAAE,YAAY,CAAC,QAAQ,IAAI,IAAI;gBACxC,aAAa,EAAE,YAAY,CAAC,YAAY,IAAI,IAAI;aACjD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,IAAI,SAAS,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,wCAAwC,EAAE;YACvD,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,YAAY,CAAC,YAAY,IAAI,IAAI;YAChD,OAAO,EACL,iEAAiE;SACpE,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC5B,YAA8B,EAC9B,OAA0C;QAE1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;QAExC,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACpD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;oBACjD,SAAS,EAAE,YAAY,CAAC,QAAQ,IAAI,IAAI;oBACxC,aAAa,EAAE,YAAY,CAAC,YAAY,IAAI,IAAI;iBACjD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBAC1D,SAAS,EAAE,YAAY,CAAC,QAAQ,IAAI,IAAI;oBACxC,aAAa,EAAE,YAAY,CAAC,YAAY,IAAI,IAAI;iBACjD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GACV,eAAe,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;YACtD,CAAC,OAAO,cAAc,CAAC,cAAc,KAAK,QAAQ;gBAChD,CAAC,CAAC,cAAc,CAAC,cAAc;gBAC/B,CAAC,CAAC,IAAI,CAAC,CAAC;QAEZ,IAAI,MAAM,IAAI,CAAC,kCAAkC,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,yBAAyB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAE7D,MAAM,gBAAgB,GAAG,cAAc,CACrC,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,CACxB,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;gBACpD,SAAS,EAAE,MAAM;gBACjB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;oBAC1C,CAAC,CAAC,gBAAgB,CAAC,MAAM;oBACzB,CAAC,CAAC,CAAC;aACN,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,GAA+B,IAAI,CAAC;QAChD,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC5C,cAAc,EACd,YAAY,EACZ,WAAW,EACX,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,OAAO,CAAC,mDAAmD,EAAE;oBAClE,SAAS,EAAE,MAAM;oBACjB,cAAc,EACZ,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,GAAG;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACjE,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,QAAQ,GAAG,MAAM,0BAA0B,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,OAAO,CAAC,gCAAgC,EAAE;gBAC/C,SAAS,EAAE,MAAM;gBACjB,aAAa,EAAE,eAAe,CAC5B,YAAY,EACZ,cAAc,EACd,eAAe,CAChB;gBACD,cAAc,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY;aAC3D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,mCAAmC,EAAE;gBAClD,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,2BAA2B,CACtD,cAAc,EACd,MAAM,CACP,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;YAC3C,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,oBAAoB,CAC1B,YAAsC;QAEtC,MAAM,aAAa,GACjB,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,IAAI,CAAC;QAC3D,IAAI,aAAa,KAAK,eAAe,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,KAAK,eAAe,CAAC,UAAU,EACtE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,sBAAsB,CAAC,IAAc;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,QAAoC,CAAC;QAC3D,IAAI,OAAO,aAAa,CAAC,0BAA0B,KAAK,UAAU,EAAE,CAAC;YACnE,aAAa,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,OAAO,aAAa,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YACvD,aAAa,CAAC,cAAc,CAC1B,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,YAAY,EACjB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EACjC,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,yBAAyB,CAC/B,QAAkC,EAClC,YAA8B;QAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC;YAC3D,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAClC,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAC/D;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,IACE,OAAO,QAAQ,CAAC,gBAAgB,KAAK,UAAU;YAC/C,OAAO,YAAY,CAAC,QAAQ,KAAK,QAAQ,EACzC,CAAC;YACD,QAAQ,CAAC,gBAAgB,CACvB,YAAY,CAAC,QAAQ,EACrB,OAAO,YAAY,CAAC,YAAY,KAAK,QAAQ;gBAC3C,CAAC,CAAC,YAAY,CAAC,YAAY;gBAC3B,CAAC,CAAC,SAAS,EACb,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,qBAAqB;QAC3B,oDAAoD;QACpD,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAkD,CAAC;QACjE,CAAC;QAED,sCAAsC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAqC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,kCAAkC,CAC9C,QAAkC,EAClC,MAAqB;QAErB,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBACrD,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC7C,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CACpB,gBAAmC;QAEnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChD,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,SAAoC,CAAC;YACzD,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACzD,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;oBAC1C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;iBACrC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO;gBACL,GAAG;gBACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,QAAkC,EAClC,YAA8B,EAC9B,KAAkB,EAClB,OAA0C;QAE1C,MAAM,MAAM,GACV,eAAe,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;YACtD,CAAC,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;gBAC1C,CAAC,CAAC,QAAQ,CAAC,cAAc;gBACzB,CAAC,CAAC,IAAI,CAAC,CAAC;QAEZ,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAClC,YAAY,EACZ,cAAc,EACd,eAAe,CAChB,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,2CAA2C,EAAE;gBAC1D,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC;YAC3D,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAClC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7C,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE;gBACnD,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAChB,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,GAAG,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBACzC,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAwB;YAC3C,GAAG,EAAE,YAAY;SAClB,CAAC;QAEF,IAAI,YAAY,GAAiC,IAAI,CAAC;QACtD,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACpD,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,eAAe,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,GACzC,MAAM,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YAE1E,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACnD,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,OAAO,CAAC,mBAAmB,CAAC;gBACvC,cAAc,EAAE,YAAY;aAC7B,CAAC,CAAC;YAEH,OAAO;gBACL,cAAc;gBACd,mBAAmB,EAAE,mBAAmB,IAAI,IAAI;aACjD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBACzC,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;oBAClD,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC/B,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;wBAC3C,KAAK,EACH,YAAY,YAAY,KAAK;4BAC3B,CAAC,CAAC,YAAY,CAAC,OAAO;4BACtB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,KAAkB;QAElB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,4BAA4B,CAAC,2BAA2B,CAC7D,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,QAAkC,EAClC,MAAqB;QAErB,MAAM,aAAa,GAAG,MAAM,oBAAoB,EAAE,CAAC;QACnD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,GAAG,qBAAqB,UAAU;aAC3C,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,gCAAgC;aACzC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,GAAmC,CAAC;QACxC,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,2BAA2B;gBACnC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;QAC3C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACnB,GAAG,CAAC,MAAM,KAAK,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAC9C,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,2BAA2B;aACpC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,yBAAyB,CAAC;gBACvC,GAAG;gBACH,aAAa;gBACb,sBAAsB,EAAE,IAAI;gBAC5B,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;oBAC7C,OAAO,EAAE,MAAM;oBACf,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,mBAAmB;iBAC5C,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACtD,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,SAAS,sBAAsB,CAC7B,KAA0E;IAE1E,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,kBAAkB,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,0BAA0B;IACvC,MAAM,cAAc,GAAG,MAAM,yBAAyB,CACpD,oBAAoB,EACpB,qBAAqB,CACtB,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,yBAAyB,CACzD,0BAA0B,EAC1B,2BAA2B,CAC5B,CAAC;IAEF,OAAO;QACL,cAAc;QACd,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAAc,EACd,OAAe;IAEf,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YAC9C,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;YAChD,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,OAAO,KAAK,WAAW;QAC9B,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAkC;IAChE,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,OAAO,QAAQ,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC5C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAkC,EAClC,QAA6B;IAE7B,IAAI,OAAO,QAAQ,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,CAAC,sBAAsB,CAC7B,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,mBAAmB,CAC7B,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;YAC5C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,KAAuB,EACvB,GAAG,IAAc;IAEjB,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,OAAO,KAAU,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACtB,KAAuB,EACvB,GAAG,IAAc;IAEjB,MAAM,KAAK,GAAG,cAAc,CAAU,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA+B,EAC/B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA+B;IAE/B,MAAM,SAAS,GACb,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,cAAc;QACrB,MAAM,CAAC,oBAAoB;QAC3B,MAAM,CAAC,qBAAqB;QAC5B,IAAI,CAAC;IAEP,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAoC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAgE;IAEhE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,SAAwC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE;YAC3C,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAoC,CAAC;SACjE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACtD,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YACzC,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,eAAe,yBAAyB,CAAC"}

package/dist/esm/naylence/fame/security/cert/grants.js

@@ -0,0 +1,2 @@
+export const GRANT_PURPOSE_CA_SIGN = "ca_sign";
+//# sourceMappingURL=grants.js.map

package/dist/esm/naylence/fame/security/cert/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/grants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAkB,CAAC"}