@naylence/advanced-security 0.3.5-test.101 → 0.3.5-test.102

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (127) hide show
  1. package/dist/browser/index.js +13385 -12988
  2. package/dist/browser/index.js.map +1 -1
  3. package/dist/cjs/browser.js +1 -0
  4. package/dist/cjs/browser.js.map +1 -1
  5. package/dist/cjs/naylence/fame/factory-manifest.js +14 -0
  6. package/dist/cjs/naylence/fame/factory-manifest.js.map +1 -1
  7. package/dist/cjs/naylence/fame/security/cert/browser-csr.js +103 -0
  8. package/dist/cjs/naylence/fame/security/cert/browser-csr.js.map +1 -0
  9. package/dist/cjs/naylence/fame/security/cert/ca-service-client.js +331 -24
  10. package/dist/cjs/naylence/fame/security/cert/ca-service-client.js.map +1 -1
  11. package/dist/cjs/naylence/fame/security/cert/ca-types.js +8 -0
  12. package/dist/cjs/naylence/fame/security/cert/ca-types.js.map +1 -1
  13. package/dist/cjs/naylence/fame/security/cert/csr-types.js +2 -0
  14. package/dist/cjs/naylence/fame/security/cert/csr-types.js.map +1 -0
  15. package/dist/cjs/naylence/fame/security/cert/default-ca-service.js +102 -1
  16. package/dist/cjs/naylence/fame/security/cert/default-ca-service.js.map +1 -1
  17. package/dist/cjs/naylence/fame/security/cert/default-certificate-manager.js +240 -45
  18. package/dist/cjs/naylence/fame/security/cert/default-certificate-manager.js.map +1 -1
  19. package/dist/cjs/naylence/fame/security/cert/index.js +4 -1
  20. package/dist/cjs/naylence/fame/security/cert/index.js.map +1 -1
  21. package/dist/cjs/naylence/fame/security/cert/internal-ca-service.js +2 -5
  22. package/dist/cjs/naylence/fame/security/cert/internal-ca-service.js.map +1 -1
  23. package/dist/cjs/naylence/fame/security/cert/node-ed25519-csr.js +156 -0
  24. package/dist/cjs/naylence/fame/security/cert/node-ed25519-csr.js.map +1 -0
  25. package/dist/cjs/naylence/fame/security/cert/oid-constants.js +7 -0
  26. package/dist/cjs/naylence/fame/security/cert/oid-constants.js.map +1 -0
  27. package/dist/cjs/naylence/fame/security/cert/trust-store/anchor-utils.js +119 -0
  28. package/dist/cjs/naylence/fame/security/cert/trust-store/anchor-utils.js.map +1 -0
  29. package/dist/cjs/naylence/fame/security/cert/trust-store/env-provider.js +123 -0
  30. package/dist/cjs/naylence/fame/security/cert/trust-store/env-provider.js.map +1 -0
  31. package/dist/cjs/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.js +220 -0
  32. package/dist/cjs/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.js.map +1 -0
  33. package/dist/cjs/naylence/fame/security/cert/trust-store/http-bundle-provider.js +411 -0
  34. package/dist/cjs/naylence/fame/security/cert/trust-store/http-bundle-provider.js.map +1 -0
  35. package/dist/cjs/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.js +2 -0
  36. package/dist/cjs/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.js.map +1 -0
  37. package/dist/cjs/naylence/fame/security/cert/trust-store/static-bundle-provider.js +37 -0
  38. package/dist/cjs/naylence/fame/security/cert/trust-store/static-bundle-provider.js.map +1 -0
  39. package/dist/cjs/naylence/fame/security/cert/trust-store/trust-store-provider.js +2 -0
  40. package/dist/cjs/naylence/fame/security/cert/trust-store/trust-store-provider.js.map +1 -0
  41. package/dist/cjs/naylence/fame/security/cert/util.js +1 -2
  42. package/dist/cjs/naylence/fame/security/cert/util.js.map +1 -1
  43. package/dist/cjs/version.js +2 -2
  44. package/dist/esm/browser.js +1 -0
  45. package/dist/esm/browser.js.map +1 -1
  46. package/dist/esm/naylence/fame/factory-manifest.js +14 -0
  47. package/dist/esm/naylence/fame/factory-manifest.js.map +1 -1
  48. package/dist/esm/naylence/fame/security/cert/browser-csr.js +103 -0
  49. package/dist/esm/naylence/fame/security/cert/browser-csr.js.map +1 -0
  50. package/dist/esm/naylence/fame/security/cert/ca-server.js +35 -0
  51. package/dist/esm/naylence/fame/security/cert/ca-server.js.map +1 -1
  52. package/dist/esm/naylence/fame/security/cert/ca-service-client.js +331 -24
  53. package/dist/esm/naylence/fame/security/cert/ca-service-client.js.map +1 -1
  54. package/dist/esm/naylence/fame/security/cert/ca-types.js +8 -0
  55. package/dist/esm/naylence/fame/security/cert/ca-types.js.map +1 -1
  56. package/dist/esm/naylence/fame/security/cert/csr-types.js +2 -0
  57. package/dist/esm/naylence/fame/security/cert/csr-types.js.map +1 -0
  58. package/dist/esm/naylence/fame/security/cert/default-ca-service.js +102 -1
  59. package/dist/esm/naylence/fame/security/cert/default-ca-service.js.map +1 -1
  60. package/dist/esm/naylence/fame/security/cert/default-certificate-manager.js +240 -45
  61. package/dist/esm/naylence/fame/security/cert/default-certificate-manager.js.map +1 -1
  62. package/dist/esm/naylence/fame/security/cert/index.js +4 -1
  63. package/dist/esm/naylence/fame/security/cert/index.js.map +1 -1
  64. package/dist/esm/naylence/fame/security/cert/internal-ca-service.js +2 -5
  65. package/dist/esm/naylence/fame/security/cert/internal-ca-service.js.map +1 -1
  66. package/dist/esm/naylence/fame/security/cert/node-ed25519-csr.js +156 -0
  67. package/dist/esm/naylence/fame/security/cert/node-ed25519-csr.js.map +1 -0
  68. package/dist/esm/naylence/fame/security/cert/oid-constants.js +7 -0
  69. package/dist/esm/naylence/fame/security/cert/oid-constants.js.map +1 -0
  70. package/dist/esm/naylence/fame/security/cert/trust-store/anchor-utils.js +119 -0
  71. package/dist/esm/naylence/fame/security/cert/trust-store/anchor-utils.js.map +1 -0
  72. package/dist/esm/naylence/fame/security/cert/trust-store/env-provider.js +123 -0
  73. package/dist/esm/naylence/fame/security/cert/trust-store/env-provider.js.map +1 -0
  74. package/dist/esm/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.js +220 -0
  75. package/dist/esm/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.js.map +1 -0
  76. package/dist/esm/naylence/fame/security/cert/trust-store/http-bundle-provider.js +411 -0
  77. package/dist/esm/naylence/fame/security/cert/trust-store/http-bundle-provider.js.map +1 -0
  78. package/dist/esm/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.js +2 -0
  79. package/dist/esm/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.js.map +1 -0
  80. package/dist/esm/naylence/fame/security/cert/trust-store/static-bundle-provider.js +37 -0
  81. package/dist/esm/naylence/fame/security/cert/trust-store/static-bundle-provider.js.map +1 -0
  82. package/dist/esm/naylence/fame/security/cert/trust-store/trust-store-provider.js +2 -0
  83. package/dist/esm/naylence/fame/security/cert/trust-store/trust-store-provider.js.map +1 -0
  84. package/dist/esm/naylence/fame/security/cert/util.js +1 -2
  85. package/dist/esm/naylence/fame/security/cert/util.js.map +1 -1
  86. package/dist/esm/version.js +2 -2
  87. package/dist/types/browser.d.ts +2 -0
  88. package/dist/types/browser.d.ts.map +1 -1
  89. package/dist/types/naylence/fame/factory-manifest.d.ts +2 -0
  90. package/dist/types/naylence/fame/factory-manifest.d.ts.map +1 -1
  91. package/dist/types/naylence/fame/security/cert/browser-csr.d.ts +9 -0
  92. package/dist/types/naylence/fame/security/cert/browser-csr.d.ts.map +1 -0
  93. package/dist/types/naylence/fame/security/cert/ca-server.d.ts.map +1 -1
  94. package/dist/types/naylence/fame/security/cert/ca-service-client.d.ts.map +1 -1
  95. package/dist/types/naylence/fame/security/cert/ca-types.d.ts +32 -0
  96. package/dist/types/naylence/fame/security/cert/ca-types.d.ts.map +1 -1
  97. package/dist/types/naylence/fame/security/cert/csr-types.d.ts +5 -0
  98. package/dist/types/naylence/fame/security/cert/csr-types.d.ts.map +1 -0
  99. package/dist/types/naylence/fame/security/cert/default-ca-service.d.ts +2 -1
  100. package/dist/types/naylence/fame/security/cert/default-ca-service.d.ts.map +1 -1
  101. package/dist/types/naylence/fame/security/cert/default-certificate-manager.d.ts +33 -1
  102. package/dist/types/naylence/fame/security/cert/default-certificate-manager.d.ts.map +1 -1
  103. package/dist/types/naylence/fame/security/cert/index.d.ts +5 -1
  104. package/dist/types/naylence/fame/security/cert/index.d.ts.map +1 -1
  105. package/dist/types/naylence/fame/security/cert/internal-ca-service.d.ts +0 -3
  106. package/dist/types/naylence/fame/security/cert/internal-ca-service.d.ts.map +1 -1
  107. package/dist/types/naylence/fame/security/cert/node-ed25519-csr.d.ts +9 -0
  108. package/dist/types/naylence/fame/security/cert/node-ed25519-csr.d.ts.map +1 -0
  109. package/dist/types/naylence/fame/security/cert/oid-constants.d.ts +7 -0
  110. package/dist/types/naylence/fame/security/cert/oid-constants.d.ts.map +1 -0
  111. package/dist/types/naylence/fame/security/cert/trust-store/anchor-utils.d.ts +12 -0
  112. package/dist/types/naylence/fame/security/cert/trust-store/anchor-utils.d.ts.map +1 -0
  113. package/dist/types/naylence/fame/security/cert/trust-store/env-provider.d.ts +7 -0
  114. package/dist/types/naylence/fame/security/cert/trust-store/env-provider.d.ts.map +1 -0
  115. package/dist/types/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.d.ts +9 -0
  116. package/dist/types/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.d.ts.map +1 -0
  117. package/dist/types/naylence/fame/security/cert/trust-store/http-bundle-provider.d.ts +31 -0
  118. package/dist/types/naylence/fame/security/cert/trust-store/http-bundle-provider.d.ts.map +1 -0
  119. package/dist/types/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.d.ts +2 -0
  120. package/dist/types/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.d.ts.map +1 -0
  121. package/dist/types/naylence/fame/security/cert/trust-store/static-bundle-provider.d.ts +13 -0
  122. package/dist/types/naylence/fame/security/cert/trust-store/static-bundle-provider.d.ts.map +1 -0
  123. package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider.d.ts +37 -0
  124. package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider.d.ts.map +1 -0
  125. package/dist/types/naylence/fame/security/cert/util.d.ts.map +1 -1
  126. package/dist/types/version.d.ts +1 -1
  127. package/package.json +8 -5
@@ -6,6 +6,7 @@
6
6
  // Package version
7
7
  export { VERSION } from './version.js';
8
8
  export { validateJwkX5cCertificate, publicKeyFromX5c, } from "./naylence/fame/security/cert/util.js";
9
+ export { createEd25519Csr, } from "./naylence/fame/security/cert/browser-csr.js";
9
10
  export { GRANT_PURPOSE_CA_SIGN } from "./naylence/fame/security/cert/grants.js";
10
11
  export { CAServiceClient, ENV_VAR_FAME_CA_SERVICE_URL, extractCertificateInfo, formatCertificateInfo, } from "./naylence/fame/security/cert/ca-service-client.js";
11
12
  export * from "./naylence/fame/security/encryption/index.js";
@@ -1 +1 @@
1
- {"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,kBAAkB;AAClB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACN,yBAAyB,EAGzB,gBAAgB,GAEhB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACN,eAAe,EAGf,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,GACrB,MAAM,oDAAoD,CAAC;AAE5D,cAAc,8CAA8C,CAAC;AAE7D,OAAO,EACN,kCAAkC,EAClC,YAAY,IAAI,2CAA2C,GAE3D,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EACN,oCAAoC,EACpC,YAAY,IAAI,6CAA6C,GAE7D,MAAM,qEAAqE,CAAC;AAC7E,OAAO,EACN,qBAAqB,GAGrB,MAAM,6DAA6D,CAAC;AAErE,cAAc,wCAAwC,CAAC;AAEvD,OAAO,EACN,iCAAiC,GAEjC,MAAM,kEAAkE,CAAC;AAE1E,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC"}
1
+ {"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,kBAAkB;AAClB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACN,yBAAyB,EAGzB,gBAAgB,GAEhB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,gBAAgB,GAEhB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACN,eAAe,EAGf,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,GACrB,MAAM,oDAAoD,CAAC;AAE5D,cAAc,8CAA8C,CAAC;AAE7D,OAAO,EACN,kCAAkC,EAClC,YAAY,IAAI,2CAA2C,GAE3D,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EACN,oCAAoC,EACpC,YAAY,IAAI,6CAA6C,GAE7D,MAAM,qEAAqE,CAAC;AAC7E,OAAO,EACN,qBAAqB,GAGrB,MAAM,6DAA6D,CAAC;AAErE,cAAc,wCAAwC,CAAC;AAEvD,OAAO,EACN,iCAAiC,GAEjC,MAAM,kEAAkE,CAAC;AAE1E,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC"}
@@ -18,4 +18,18 @@ export const MODULES = [
18
18
  "./stickiness/aft-replica-stickiness-manager-factory.js",
19
19
  "./welcome/advanced-welcome-service-factory.js"
20
20
  ];
21
+ export const MODULE_LOADERS = {
22
+ "./security/cert/default-ca-service-factory.js": () => import("./security/cert/default-ca-service-factory.js"),
23
+ "./security/cert/default-certificate-manager-factory.js": () => import("./security/cert/default-certificate-manager-factory.js"),
24
+ "./security/encryption/channel/channel-encryption-manager-factory.js": () => import("./security/encryption/channel/channel-encryption-manager-factory.js"),
25
+ "./security/encryption/composite-encryption-manager-factory.js": () => import("./security/encryption/composite-encryption-manager-factory.js"),
26
+ "./security/encryption/default-secure-channel-manager-factory.js": () => import("./security/encryption/default-secure-channel-manager-factory.js"),
27
+ "./security/encryption/sealed/x25519-encryption-manager-factory.js": () => import("./security/encryption/sealed/x25519-encryption-manager-factory.js"),
28
+ "./security/keys/x5c-key-manager-factory.js": () => import("./security/keys/x5c-key-manager-factory.js"),
29
+ "./security/signing/eddsa-envelope-signer-factory.js": () => import("./security/signing/eddsa-envelope-signer-factory.js"),
30
+ "./security/signing/eddsa-envelope-verifier-factory.js": () => import("./security/signing/eddsa-envelope-verifier-factory.js"),
31
+ "./stickiness/aft-load-balancer-stickiness-manager-factory.js": () => import("./stickiness/aft-load-balancer-stickiness-manager-factory.js"),
32
+ "./stickiness/aft-replica-stickiness-manager-factory.js": () => import("./stickiness/aft-replica-stickiness-manager-factory.js"),
33
+ "./welcome/advanced-welcome-service-factory.js": () => import("./welcome/advanced-welcome-service-factory.js"),
34
+ };
21
35
  //# sourceMappingURL=factory-manifest.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"factory-manifest.js","sourceRoot":"","sources":["../../../../src/naylence/fame/factory-manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,+CAA+C;IAC/C,wDAAwD;IACxD,qEAAqE;IACrE,+DAA+D;IAC/D,iEAAiE;IACjE,mEAAmE;IACnE,4CAA4C;IAC5C,qDAAqD;IACrD,uDAAuD;IACvD,8DAA8D;IAC9D,wDAAwD;IACxD,+CAA+C;CACvC,CAAC"}
1
+ {"version":3,"file":"factory-manifest.js","sourceRoot":"","sources":["../../../../src/naylence/fame/factory-manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,+CAA+C;IAC/C,wDAAwD;IACxD,qEAAqE;IACrE,+DAA+D;IAC/D,iEAAiE;IACjE,mEAAmE;IACnE,4CAA4C;IAC5C,qDAAqD;IACrD,uDAAuD;IACvD,8DAA8D;IAC9D,wDAAwD;IACxD,+CAA+C;CACvC,CAAC;AAKX,MAAM,CAAC,MAAM,cAAc,GAAmD;IAC5E,+CAA+C,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+CAA+C,CAAC;IAC9G,wDAAwD,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wDAAwD,CAAC;IAChI,qEAAqE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,qEAAqE,CAAC;IAC1J,+DAA+D,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+DAA+D,CAAC;IAC9I,iEAAiE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iEAAiE,CAAC;IAClJ,mEAAmE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mEAAmE,CAAC;IACtJ,4CAA4C,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC;IACxG,qDAAqD,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,qDAAqD,CAAC;IAC1H,uDAAuD,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uDAAuD,CAAC;IAC9H,8DAA8D,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,8DAA8D,CAAC;IAC5I,wDAAwD,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wDAAwD,CAAC;IAChI,+CAA+C,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+CAA+C,CAAC;CAC/G,CAAC"}
@@ -0,0 +1,103 @@
1
+ import { AsnConvert, OctetString } from "@peculiar/asn1-schema";
2
+ import { Attributes, CertificationRequest, CertificationRequestInfo, } from "@peculiar/asn1-csr";
3
+ import { AlgorithmIdentifier, Attribute, AttributeTypeAndValue, AttributeValue, Extension, Extensions, GeneralName, Name, RelativeDistinguishedName, SubjectAlternativeName, SubjectPublicKeyInfo, id_ce_subjectAltName, } from "@peculiar/asn1-x509";
4
+ const ED25519_OID = "1.3.101.112";
5
+ const OID_COMMON_NAME = "2.5.4.3";
6
+ const LOGICAL_URI_PREFIX = "naylence://";
7
+ function ensureSubtleCrypto() {
8
+ const instance = globalThis.crypto?.subtle;
9
+ if (!instance) {
10
+ throw new Error("WebCrypto subtle API is required to create a CSR");
11
+ }
12
+ return instance;
13
+ }
14
+ function buildSubject(commonName) {
15
+ if (!commonName || typeof commonName !== "string") {
16
+ throw new Error("commonName must be a non-empty string");
17
+ }
18
+ return new Name([
19
+ new RelativeDistinguishedName([
20
+ new AttributeTypeAndValue({
21
+ type: OID_COMMON_NAME,
22
+ value: new AttributeValue({ utf8String: commonName }),
23
+ }),
24
+ ]),
25
+ ]);
26
+ }
27
+ function arrayBufferToBase64(buffer) {
28
+ const bytes = new Uint8Array(buffer);
29
+ if (typeof globalThis.Buffer?.from === "function") {
30
+ return globalThis.Buffer.from(bytes).toString("base64");
31
+ }
32
+ let binary = "";
33
+ const chunkSize = 0x8000;
34
+ for (let offset = 0; offset < bytes.length; offset += chunkSize) {
35
+ const slice = bytes.subarray(offset, offset + chunkSize);
36
+ binary += String.fromCharCode(...slice);
37
+ }
38
+ if (typeof globalThis.btoa !== "function") {
39
+ throw new Error("Base64 encoding not available in this environment");
40
+ }
41
+ return globalThis.btoa(binary);
42
+ }
43
+ function derToPem(der, label) {
44
+ const base64 = arrayBufferToBase64(der);
45
+ const lines = [];
46
+ for (let index = 0; index < base64.length; index += 64) {
47
+ lines.push(base64.slice(index, index + 64));
48
+ }
49
+ return `-----BEGIN ${label}-----\n${lines.join("\n")}\n-----END ${label}-----\n`;
50
+ }
51
+ export async function createEd25519Csr(options) {
52
+ const subtle = ensureSubtleCrypto();
53
+ const { privateKey, publicKey, commonName } = options;
54
+ if (!(privateKey instanceof CryptoKey) || privateKey.type !== "private") {
55
+ throw new Error("privateKey must be a CryptoKey of type 'private'");
56
+ }
57
+ if (!(publicKey instanceof CryptoKey) || publicKey.type !== "public") {
58
+ throw new Error("publicKey must be a CryptoKey of type 'public'");
59
+ }
60
+ const subject = buildSubject(commonName);
61
+ const spkiDer = await subtle.exportKey("spki", publicKey);
62
+ const subjectPublicKeyInfo = AsnConvert.parse(spkiDer, SubjectPublicKeyInfo);
63
+ const attributes = new Attributes();
64
+ const sanitizedLogicals = Array.isArray(options.logicals)
65
+ ? options.logicals
66
+ .map((logical) => logical.trim())
67
+ .filter((logical) => logical.length > 0)
68
+ : [];
69
+ if (sanitizedLogicals.length > 0) {
70
+ const san = new SubjectAlternativeName(sanitizedLogicals.map((logical) => new GeneralName({
71
+ uniformResourceIdentifier: `${LOGICAL_URI_PREFIX}${logical}`,
72
+ })));
73
+ const extensions = new Extensions([
74
+ new Extension({
75
+ extnID: id_ce_subjectAltName,
76
+ critical: false,
77
+ extnValue: new OctetString(AsnConvert.serialize(san)),
78
+ }),
79
+ ]);
80
+ attributes.push(new Attribute({
81
+ type: "1.2.840.113549.1.9.14",
82
+ values: [AsnConvert.serialize(extensions)],
83
+ }));
84
+ }
85
+ const requestInfo = new CertificationRequestInfo({
86
+ subject,
87
+ subjectPKInfo: subjectPublicKeyInfo,
88
+ attributes,
89
+ });
90
+ const requestInfoDer = AsnConvert.serialize(requestInfo);
91
+ const signature = await subtle.sign("Ed25519", privateKey, requestInfoDer);
92
+ const certificationRequest = new CertificationRequest({
93
+ certificationRequestInfo: requestInfo,
94
+ signatureAlgorithm: new AlgorithmIdentifier({
95
+ algorithm: ED25519_OID,
96
+ }),
97
+ signature,
98
+ });
99
+ const csrDer = AsnConvert.serialize(certificationRequest);
100
+ const csrPem = derToPem(csrDer, "CERTIFICATE REQUEST");
101
+ return { csrPem, csrDer };
102
+ }
103
+ //# sourceMappingURL=browser-csr.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"browser-csr.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/browser-csr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EACN,UAAU,EACV,oBAAoB,EACpB,wBAAwB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,mBAAmB,EACnB,SAAS,EACT,qBAAqB,EACrB,cAAc,EACd,SAAS,EACT,UAAU,EACV,WAAW,EACX,IAAI,EACJ,yBAAyB,EACzB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACpB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AASzC,SAAS,kBAAkB;IAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACvC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,IAAI,IAAI,CAAC;QACf,IAAI,yBAAyB,CAAC;YAC7B,IAAI,qBAAqB,CAAC;gBACzB,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,IAAI,cAAc,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;aACrD,CAAC;SACF,CAAC;KACF,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAmB;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAErC,IAAI,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACnD,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,SAAS,GAAG,MAAM,CAAC;IACzB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACzD,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAgB,EAAE,KAAa;IAChD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,cAAc,KAAK,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,OAAgC;IAEhC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAEtD,IAAI,CAAC,CAAC,UAAU,YAAY,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,YAAY,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,UAAU,CAAC,KAAK,CAC5C,OAAO,EACP,oBAAoB,CACpB,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxD,CAAC,CAAC,OAAO,CAAC,QAAQ;aACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC;IAEN,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,sBAAsB,CACrC,iBAAiB,CAAC,GAAG,CACpB,CAAC,OAAO,EAAE,EAAE,CACX,IAAI,WAAW,CAAC;YACf,yBAAyB,EAAE,GAAG,kBAAkB,GAAG,OAAO,EAAE;SAC5D,CAAC,CACH,CACD,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YACjC,IAAI,SAAS,CAAC;gBACb,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aACrD,CAAC;SACF,CAAC,CAAC;QAEH,UAAU,CAAC,IAAI,CACd,IAAI,SAAS,CAAC;YACb,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;SAC1C,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC;QAChD,OAAO;QACP,aAAa,EAAE,oBAAoB;QACnC,UAAU;KACV,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAE3E,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC;QACrD,wBAAwB,EAAE,WAAW;QACrC,kBAAkB,EAAE,IAAI,mBAAmB,CAAC;YAC3C,SAAS,EAAE,WAAW;SACtB,CAAC;QACF,SAAS;KACT,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAEvD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC"}
@@ -3,7 +3,11 @@
3
3
  *
4
4
  * Provides async HTTP client to request certificates from the CA signing service.
5
5
  */
6
+ import { AsnConvert } from "@peculiar/asn1-schema";
7
+ import { Certificate, SubjectAlternativeName } from "@peculiar/asn1-x509";
8
+ import { X509Certificate } from "@peculiar/x509";
6
9
  import { CertificateRequestError } from "./ca-types.js";
10
+ import { LOGICALS_OID, NODE_ID_OID, SID_OID } from "./oid-constants.js";
7
11
  // Simple logger for now - TODO: integrate with runtime logging
8
12
  const logger = {
9
13
  debug: (_event, _meta) => {
@@ -24,16 +28,104 @@ export const ENV_VAR_FAME_CA_SERVICE_URL = "FAME_CA_SERVICE_URL";
24
28
  */
25
29
  export function extractCertificateInfo(_certPem) {
26
30
  try {
27
- // TODO: Implement using node-forge or similar library
28
- // For now, return a placeholder
29
- return {
30
- subject: "TODO: Parse certificate",
31
- issuer: "TODO: Parse certificate",
32
- serialNumber: "TODO",
33
- validFrom: new Date().toISOString(),
34
- validUntil: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString(),
31
+ const pemBlock = extractFirstCertificatePem(_certPem);
32
+ if (!pemBlock) {
33
+ throw new Error("certificate PEM block not found");
34
+ }
35
+ const certDer = pemToArrayBuffer(pemBlock);
36
+ const certificate = new X509Certificate(certDer);
37
+ const certificateRecord = certificate;
38
+ const parsedCertificate = AsnConvert.parse(certDer, Certificate);
39
+ const subject = readOptionalStringProperty(certificateRecord, "subject") ??
40
+ formatDistinguishedName(parsedCertificate.tbsCertificate.subject);
41
+ const issuer = readOptionalStringProperty(certificateRecord, "issuer") ??
42
+ formatDistinguishedName(parsedCertificate.tbsCertificate.issuer);
43
+ const serialNumber = readOptionalStringProperty(certificateRecord, "serialNumber") ??
44
+ bytesToHex(parsedCertificate.tbsCertificate.serialNumber);
45
+ const validFromDate = readOptionalDateProperty(certificateRecord, "notBefore") ??
46
+ readValidityDate(parsedCertificate.tbsCertificate.validity.notBefore);
47
+ const validUntilDate = readOptionalDateProperty(certificateRecord, "notAfter") ??
48
+ readValidityDate(parsedCertificate.tbsCertificate.validity.notAfter);
49
+ if (!validFromDate || !validUntilDate) {
50
+ throw new Error("certificate validity period is missing");
51
+ }
52
+ const info = {
53
+ subject,
54
+ issuer,
55
+ serialNumber,
56
+ validFrom: validFromDate.toISOString(),
57
+ validUntil: validUntilDate.toISOString(),
35
58
  status: "unknown",
36
59
  };
60
+ const now = new Date();
61
+ if (now < validFromDate) {
62
+ info.status = "not_yet_valid";
63
+ }
64
+ else if (now > validUntilDate) {
65
+ info.status = "expired";
66
+ }
67
+ else {
68
+ info.status = "valid";
69
+ const diffMs = validUntilDate.getTime() - now.getTime();
70
+ info.daysRemaining = Math.floor(diffMs / (24 * 60 * 60 * 1000));
71
+ const hoursRemainder = diffMs % (24 * 60 * 60 * 1000);
72
+ info.hoursRemaining = Math.floor(hoursRemainder / (60 * 60 * 1000));
73
+ const minutesRemainder = hoursRemainder % (60 * 60 * 1000);
74
+ info.minutesRemaining = Math.floor(minutesRemainder / (60 * 1000));
75
+ }
76
+ const sanExtension = getExtensionValue(certificate, "2.5.29.17");
77
+ if (sanExtension && toUint8Array(sanExtension).length > 0) {
78
+ const san = AsnConvert.parse(sanExtension, SubjectAlternativeName);
79
+ const altNames = [];
80
+ for (const generalName of san) {
81
+ const name = generalName;
82
+ if (typeof name.uniformResourceIdentifier === "string") {
83
+ altNames.push(name.uniformResourceIdentifier);
84
+ }
85
+ else if (typeof name.dNSName === "string") {
86
+ altNames.push(name.dNSName);
87
+ }
88
+ else if (typeof name.rfc822Name === "string") {
89
+ altNames.push(name.rfc822Name);
90
+ }
91
+ else if (name.iPAddress instanceof ArrayBuffer) {
92
+ altNames.push(formatIpAddress(toUint8Array(name.iPAddress)));
93
+ }
94
+ else if (name.iPAddress && ArrayBuffer.isView(name.iPAddress)) {
95
+ const view = name.iPAddress;
96
+ altNames.push(formatIpAddress(new Uint8Array(view.buffer, view.byteOffset, view.byteLength)));
97
+ }
98
+ }
99
+ if (altNames.length > 0) {
100
+ info.subjectAlternativeNames = altNames;
101
+ const spiffe = altNames.find((value) => value.startsWith("spiffe://"));
102
+ if (spiffe) {
103
+ info.spiffeId = spiffe;
104
+ }
105
+ }
106
+ }
107
+ const sidExtension = getExtensionValue(certificate, SID_OID);
108
+ if (sidExtension) {
109
+ info.nodeSid = decodeUtf8(sidExtension);
110
+ }
111
+ const nodeIdExtension = getExtensionValue(certificate, NODE_ID_OID);
112
+ if (nodeIdExtension) {
113
+ info.nodeId = decodeUtf8(nodeIdExtension);
114
+ }
115
+ const logicalsExtension = getExtensionValue(certificate, LOGICALS_OID);
116
+ if (logicalsExtension) {
117
+ try {
118
+ const logicalsJson = decodeUtf8(logicalsExtension);
119
+ const parsed = JSON.parse(logicalsJson);
120
+ if (Array.isArray(parsed)) {
121
+ info.logicalHosts = parsed.filter((entry) => typeof entry === "string");
122
+ }
123
+ }
124
+ catch {
125
+ // Ignore malformed extension payload – certificate remains valid.
126
+ }
127
+ }
128
+ return info;
37
129
  }
38
130
  catch (error) {
39
131
  return {
@@ -43,7 +135,7 @@ export function extractCertificateInfo(_certPem) {
43
135
  validFrom: "",
44
136
  validUntil: "",
45
137
  status: "unknown",
46
- error: `Failed to parse certificate: ${error}`,
138
+ error: `Failed to parse certificate: ${error instanceof Error ? error.message : String(error)}`,
47
139
  };
48
140
  }
49
141
  }
@@ -67,7 +159,7 @@ export function formatCertificateInfo(certPem, certType = "Certificate") {
67
159
  `Valid From: ${info.validFrom}`,
68
160
  `Valid Until: ${info.validUntil}`,
69
161
  ];
70
- if (info.subjectAlternativeNames && info.subjectAlternativeNames.length > 0) {
162
+ if (info.subjectAlternativeNames?.length) {
71
163
  lines.push(`Subject Alternative Names: ${info.subjectAlternativeNames.join(", ")}`);
72
164
  }
73
165
  if (info.spiffeId) {
@@ -79,24 +171,27 @@ export function formatCertificateInfo(certPem, certType = "Certificate") {
79
171
  if (info.nodeId) {
80
172
  lines.push(`Node ID: ${info.nodeId}`);
81
173
  }
82
- if (info.logicalHosts && info.logicalHosts.length > 0) {
174
+ if (info.logicalHosts?.length) {
83
175
  lines.push(`Logical Hosts: ${info.logicalHosts.join(", ")}`);
84
176
  }
85
- // Add validity status
86
- if (info.status === "valid" && info.daysRemaining !== undefined) {
87
- if (info.daysRemaining > 0) {
88
- lines.push(`Status: Valid (${info.daysRemaining} days remaining)`);
177
+ if (info.status === "valid") {
178
+ const pieces = [];
179
+ if (typeof info.daysRemaining === "number" && info.daysRemaining > 0) {
180
+ pieces.push(`${info.daysRemaining} days`);
89
181
  }
90
- else if (info.hoursRemaining !== undefined && info.hoursRemaining > 0) {
91
- if (info.minutesRemaining !== undefined && info.minutesRemaining > 0) {
92
- lines.push(`Status: Valid (${info.hoursRemaining} hours, ${info.minutesRemaining} minutes remaining)`);
93
- }
94
- else {
95
- lines.push(`Status: Valid (${info.hoursRemaining} hours remaining)`);
96
- }
182
+ if (typeof info.hoursRemaining === "number" && info.hoursRemaining > 0) {
183
+ pieces.push(`${info.hoursRemaining} hours`);
184
+ }
185
+ if (typeof info.minutesRemaining === "number" &&
186
+ info.minutesRemaining > 0 &&
187
+ pieces.length === 0) {
188
+ pieces.push(`${info.minutesRemaining} minutes`);
97
189
  }
98
- else if (info.minutesRemaining !== undefined) {
99
- lines.push(`Status: Valid (${info.minutesRemaining} minutes remaining)`);
190
+ if (pieces.length > 0) {
191
+ lines.push(`Status: Valid (${pieces.join(", ")})`);
192
+ }
193
+ else {
194
+ lines.push("Status: Valid");
100
195
  }
101
196
  }
102
197
  else if (info.status === "expired") {
@@ -105,8 +200,220 @@ export function formatCertificateInfo(certPem, certType = "Certificate") {
105
200
  else if (info.status === "not_yet_valid") {
106
201
  lines.push("Status: Not yet valid");
107
202
  }
203
+ else {
204
+ lines.push("Status: Unknown");
205
+ }
108
206
  return lines.join("\n");
109
207
  }
208
+ function extractFirstCertificatePem(pem) {
209
+ const match = pem.match(/-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/);
210
+ return match ? match[0] : null;
211
+ }
212
+ function pemToArrayBuffer(pem) {
213
+ const base64 = pem
214
+ .replace(/-----BEGIN CERTIFICATE-----/g, "")
215
+ .replace(/-----END CERTIFICATE-----/g, "")
216
+ .replace(/\s+/g, "");
217
+ if (typeof Buffer !== "undefined") {
218
+ const buffer = Buffer.from(base64, "base64");
219
+ const array = buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
220
+ return array;
221
+ }
222
+ if (typeof globalThis.atob === "function") {
223
+ const binary = globalThis.atob(base64);
224
+ const length = binary.length;
225
+ const bytes = new Uint8Array(length);
226
+ for (let index = 0; index < length; index += 1) {
227
+ bytes[index] = binary.charCodeAt(index);
228
+ }
229
+ return bytes.buffer;
230
+ }
231
+ throw new Error("Base64 decoding not supported in this environment");
232
+ }
233
+ function formatIpAddress(bytes) {
234
+ if (bytes.length === 4) {
235
+ return Array.from(bytes).join(".");
236
+ }
237
+ if (bytes.length === 16) {
238
+ const hextets = [];
239
+ for (let index = 0; index < 16; index += 2) {
240
+ const value = (bytes[index] << 8) | bytes[index + 1];
241
+ hextets.push(value.toString(16));
242
+ }
243
+ return hextets.join(":");
244
+ }
245
+ return Array.from(bytes)
246
+ .map((value) => value.toString(16).padStart(2, "0"))
247
+ .join("");
248
+ }
249
+ function toUint8Array(source) {
250
+ if (source instanceof ArrayBuffer) {
251
+ return new Uint8Array(source);
252
+ }
253
+ return new Uint8Array(source.buffer, source.byteOffset, source.byteLength);
254
+ }
255
+ function decodeUtf8(data) {
256
+ if (typeof TextDecoder !== "undefined") {
257
+ return new TextDecoder().decode(data);
258
+ }
259
+ if (typeof Buffer !== "undefined") {
260
+ const buffer = Buffer.from(data);
261
+ return buffer.toString("utf8");
262
+ }
263
+ throw new Error("TextDecoder not available in this environment");
264
+ }
265
+ function getExtensionValue(certificate, oid) {
266
+ const candidate = certificate;
267
+ if (typeof candidate.getExtension === "function") {
268
+ const result = candidate.getExtension(oid);
269
+ const buffer = tryExtractExtensionBuffer(result);
270
+ if (buffer) {
271
+ return buffer;
272
+ }
273
+ }
274
+ const { extensions } = candidate;
275
+ if (extensions) {
276
+ const iterable = toIterable(extensions);
277
+ for (const entry of iterable) {
278
+ const extensionRecord = entry;
279
+ if (!extensionRecord || extensionRecord.oid !== oid) {
280
+ continue;
281
+ }
282
+ const buffer = tryExtractExtensionBuffer(entry);
283
+ if (buffer) {
284
+ return buffer;
285
+ }
286
+ }
287
+ }
288
+ return null;
289
+ }
290
+ function readOptionalStringProperty(source, key) {
291
+ const value = source[key];
292
+ if (typeof value === "string" && value.length > 0) {
293
+ return value;
294
+ }
295
+ return undefined;
296
+ }
297
+ function readOptionalDateProperty(source, key) {
298
+ const value = source[key];
299
+ if (value instanceof Date) {
300
+ return value;
301
+ }
302
+ if (typeof value === "number" || typeof value === "string") {
303
+ const date = new Date(value);
304
+ if (!Number.isNaN(date.getTime())) {
305
+ return date;
306
+ }
307
+ }
308
+ return undefined;
309
+ }
310
+ function readValidityDate(candidate) {
311
+ if (!candidate) {
312
+ return undefined;
313
+ }
314
+ if (candidate instanceof Date) {
315
+ return candidate;
316
+ }
317
+ if (typeof candidate === "object" &&
318
+ candidate !== null &&
319
+ candidate) {
320
+ const timeObject = candidate;
321
+ if (timeObject.utcTime instanceof Date) {
322
+ return timeObject.utcTime;
323
+ }
324
+ if (timeObject.generalizedTime instanceof Date) {
325
+ return timeObject.generalizedTime;
326
+ }
327
+ }
328
+ return undefined;
329
+ }
330
+ function formatDistinguishedName(name) {
331
+ const rdns = Array.from(name);
332
+ if (rdns.length === 0) {
333
+ return "";
334
+ }
335
+ return rdns
336
+ .map((rdn) => Array.from(rdn)
337
+ .map((attribute) => `${oidToLabel(attribute.type)}=${attribute.value.toString()}`)
338
+ .join("+"))
339
+ .join(",");
340
+ }
341
+ function oidToLabel(oid) {
342
+ switch (oid) {
343
+ case "2.5.4.3":
344
+ return "CN";
345
+ case "2.5.4.6":
346
+ return "C";
347
+ case "2.5.4.7":
348
+ return "L";
349
+ case "2.5.4.8":
350
+ return "ST";
351
+ case "2.5.4.10":
352
+ return "O";
353
+ case "2.5.4.11":
354
+ return "OU";
355
+ default:
356
+ return oid;
357
+ }
358
+ }
359
+ function bytesToHex(data) {
360
+ const view = toUint8Array(data);
361
+ if (view.length === 0) {
362
+ return "";
363
+ }
364
+ return Array.from(view)
365
+ .map((byte) => byte.toString(16).padStart(2, "0"))
366
+ .join("");
367
+ }
368
+ function tryExtractExtensionBuffer(source) {
369
+ if (!source) {
370
+ return null;
371
+ }
372
+ if (isArrayBufferLike(source)) {
373
+ return cloneArrayBuffer(source);
374
+ }
375
+ if (typeof source === "object") {
376
+ const record = source;
377
+ const directValue = record.value;
378
+ if (isArrayBufferLike(directValue)) {
379
+ return cloneArrayBuffer(directValue);
380
+ }
381
+ const asn = record.asn;
382
+ if (asn) {
383
+ const extnValue = asn.extnValue;
384
+ if (isArrayBufferLike(extnValue)) {
385
+ return cloneArrayBuffer(extnValue);
386
+ }
387
+ if (extnValue &&
388
+ typeof extnValue === "object" &&
389
+ isArrayBufferLike(extnValue.buffer)) {
390
+ return cloneArrayBuffer(extnValue.buffer);
391
+ }
392
+ }
393
+ }
394
+ return null;
395
+ }
396
+ function isArrayBufferLike(value) {
397
+ return value instanceof ArrayBuffer || ArrayBuffer.isView(value);
398
+ }
399
+ function cloneArrayBuffer(value) {
400
+ const view = toUint8Array(value);
401
+ if (view.byteOffset === 0 &&
402
+ view.byteLength === view.buffer.byteLength &&
403
+ view.buffer instanceof ArrayBuffer) {
404
+ return view.buffer;
405
+ }
406
+ return view.slice().buffer;
407
+ }
408
+ function toIterable(value) {
409
+ if (typeof value === "object" && value && Symbol.iterator in value) {
410
+ return value;
411
+ }
412
+ if (Array.isArray(value)) {
413
+ return value;
414
+ }
415
+ return [];
416
+ }
110
417
  /**
111
418
  * Client for requesting certificates from a CA signing service.
112
419
  */
@@ -1 +1 @@
1
- {"version":3,"file":"ca-service-client.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,+DAA+D;AAC/D,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,CAAC,MAAc,EAAE,KAA+B,EAAE,EAAE;QACzD,yCAAyC;IAC3C,CAAC;IACD,KAAK,EAAE,CAAC,MAAc,EAAE,KAA+B,EAAE,EAAE;QACzD,OAAO,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAwBjE;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,sDAAsD;QACtD,gCAAgC;QAChC,OAAO;YACL,OAAO,EAAE,yBAAyB;YAClC,MAAM,EAAE,yBAAyB;YACjC,YAAY,EAAE,MAAM;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,IAAI,IAAI,CAClB,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACvC,CAAC,WAAW,EAAE;YACf,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,gCAAgC,KAAK,EAAE;SAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,WAAmB,aAAa;IAEhC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,QAAQ,qBAAqB,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,OAAO,QAAQ,kBAAkB;QACjC,YAAY,IAAI,CAAC,OAAO,EAAE;QAC1B,WAAW,IAAI,CAAC,MAAM,EAAE;QACxB,kBAAkB,IAAI,CAAC,YAAY,EAAE;QACrC,eAAe,IAAI,CAAC,SAAS,EAAE;QAC/B,gBAAgB,IAAI,CAAC,UAAU,EAAE;KAClC,CAAC;IAEF,IAAI,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,KAAK,CAAC,IAAI,CACR,8BAA8B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,sBAAsB;IACtB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACrE,KAAK,CAAC,IAAI,CACR,kBAAkB,IAAI,CAAC,cAAc,WAAW,IAAI,CAAC,gBAAgB,qBAAqB,CAC3F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,cAAc,mBAAmB,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,qBAAqB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IAK1B;;;;;OAKG;IACH,YACE,eAAoC,EACpC,iBAAyB,IAAI;QAVvB,eAAU,GAAkB,IAAI,CAAC;QAYvC,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,WAAmB,EACnB,YAAqB,EACrB,QAAmB;QAEnB,MAAM,WAAW,GAAG;YAClB,OAAO,EAAE,MAAM;YACf,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,YAAY;YAC3B,QAAQ,EAAE,QAAQ,IAAI,EAAE;SACzB,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;QAElE,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YACrC,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,GAAG;YACnB,aAAa,EAAE,YAAY;YAC3B,QAAQ;SACT,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAC1B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAC3B,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACrC,MAAM,cAAc,GAAW,MAAM,CAAC,eAAe,CAAC;oBACtD,MAAM,mBAAmB,GACvB,MAAM,CAAC,qBAAqB,IAAI,cAAc,CAAC;oBAEjD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;wBAC7C,YAAY,EAAE,WAAW;wBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;qBAC9B,CAAC,CAAC;oBAEH,kEAAkE;oBAClE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;oBACxD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;wBAClC,YAAY,EAAE,WAAW;wBACzB,gBAAgB,EAAE,oBAAoB;wBACtC,GAAG,QAAQ;qBACZ,CAAC,CAAC;oBAEH,gEAAgE;oBAChE,IAAI,mBAAmB,KAAK,cAAc,EAAE,CAAC;wBAC3C,iDAAiD;wBACjD,MAAM,UAAU,GAAG,mBAAmB;6BACnC,KAAK,CAAC,6BAA6B,CAAC;6BACpC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;4BAChC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gCAClC,MAAM,YAAY,GAAG,SAAS,GAAG,6BAA6B,CAAC;gCAE/D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oCACZ,wDAAwD;oCACxD,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;wCAClD,MAAM,aAAa,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;wCAC3D,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;4CACxC,YAAY,EAAE,WAAW;4CACzB,gBAAgB,EAAE,mBAAmB;4CACrC,WAAW,EAAE,CAAC;4CACd,GAAG,aAAa;yCACjB,CAAC,CAAC;oCACL,CAAC;gCACH,CAAC;qCAAM,CAAC;oCACN,6CAA6C;oCAC7C,MAAM,UAAU,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;oCACxD,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;wCACxC,YAAY,EAAE,WAAW;wCACzB,gBAAgB,EAAE,gBAAgB;wCAClC,WAAW,EAAE,CAAC;wCACd,GAAG,UAAU;qCACd,CAAC,CAAC;gCACL,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,IAAI,WAAW,GAAG,eAAe,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACvC,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BACvC,WAAW,GAAG,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC;wBAC7C,CAAC;wBAAC,MAAM,CAAC;4BACP,WAAW,GAAG,QAAQ,CAAC;wBACzB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,4BAA4B;wBAC5B,WAAW,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC1C,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wBACzC,YAAY,EAAE,WAAW;wBACzB,WAAW,EAAE,QAAQ,CAAC,MAAM;wBAC5B,KAAK,EAAE,WAAW;qBACnB,CAAC,CAAC;oBAEH,MAAM,IAAI,uBAAuB,CAC/B,oCAAoC,QAAQ,CAAC,MAAM,MAAM,WAAW,EAAE,CACvE,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;oBAC1C,YAAY,EAAE,WAAW;oBACzB,eAAe,EAAE,IAAI,CAAC,cAAc;iBACrC,CAAC,CAAC;gBACH,MAAM,IAAI,uBAAuB,CAC/B,uCAAuC,IAAI,CAAC,cAAc,UAAU,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,uBAAuB,CAC/B,yCAAyC,KAAK,EAAE,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
1
+ {"version":3,"file":"ca-service-client.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAQ,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAExE,+DAA+D;AAC/D,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,CAAC,MAAc,EAAE,KAA+B,EAAE,EAAE;QACzD,yCAAyC;IAC3C,CAAC;IACD,KAAK,EAAE,CAAC,MAAc,EAAE,KAA+B,EAAE,EAAE;QACzD,OAAO,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAwBjE;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,iBAAiB,GAAG,WAAiD,CAAC;QAC5E,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAEjE,MAAM,OAAO,GACX,0BAA0B,CAAC,iBAAiB,EAAE,SAAS,CAAC;YACxD,uBAAuB,CAAC,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GACV,0BAA0B,CAAC,iBAAiB,EAAE,QAAQ,CAAC;YACvD,uBAAuB,CAAC,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,YAAY,GAChB,0BAA0B,CAAC,iBAAiB,EAAE,cAAc,CAAC;YAC7D,UAAU,CAAC,iBAAiB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC5D,MAAM,aAAa,GACjB,wBAAwB,CAAC,iBAAiB,EAAE,WAAW,CAAC;YACxD,gBAAgB,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,cAAc,GAClB,wBAAwB,CAAC,iBAAiB,EAAE,UAAU,CAAC;YACvD,gBAAgB,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvE,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAoB;YAC5B,OAAO;YACP,MAAM;YACN,YAAY;YACZ,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,cAAc,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,GAAG,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;YACxD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACpE,MAAM,gBAAgB,GAAG,cAAc,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,YAAY,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,WAAW,IAAI,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,WAAsC,CAAC;gBACpD,IAAI,OAAO,IAAI,CAAC,yBAAyB,KAAK,QAAQ,EAAE,CAAC;oBACvD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAChD,CAAC;qBAAM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;qBAAM,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,YAAY,WAAW,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAA4B,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CACX,eAAe,CACb,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAC9D,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC;gBACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvE,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,eAAe,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAC/D,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAChG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,WAAmB,aAAa;IAEhC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,QAAQ,qBAAqB,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,OAAO,QAAQ,kBAAkB;QACjC,YAAY,IAAI,CAAC,OAAO,EAAE;QAC1B,WAAW,IAAI,CAAC,MAAM,EAAE;QACxB,kBAAkB,IAAI,CAAC,YAAY,EAAE;QACrC,eAAe,IAAI,CAAC,SAAS,EAAE;QAC/B,gBAAgB,IAAI,CAAC,UAAU,EAAE;KAClC,CAAC;IAEF,IAAI,IAAI,CAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,8BAA8B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,IACE,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;YACzC,IAAI,CAAC,gBAAgB,GAAG,CAAC;YACzB,MAAM,CAAC,MAAM,KAAK,CAAC,EACnB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,UAAU,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CACrB,8DAA8D,CAC/D,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,MAAM,GAAG,GAAG;SACf,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;SAC3C,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/B,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CACtC,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACnD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAqC;IACzD,IAAI,MAAM,YAAY,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB;IACnC,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;QACvC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CACxB,WAA4B,EAC5B,GAAW;IAEX,MAAM,SAAS,GAAG,WAGjB,CAAC;IAEF,IAAI,OAAO,SAAS,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;IACjC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,eAAe,GAAG,KAA4C,CAAC;YACrE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA+B,EAC/B,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA+B,EAC/B,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAkB;IAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,YAAY,IAAI,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,KAAK,IAAI;QACjB,SAA8D,EAC/D,CAAC;QACD,MAAM,UAAU,GAAG,SAGlB,CAAC;QACF,IAAI,UAAU,CAAC,OAAO,YAAY,IAAI,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,eAAe,YAAY,IAAI,EAAE,CAAC;YAC/C,OAAO,UAAU,CAAC,eAAe,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAU;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAC9D;SACA,IAAI,CAAC,GAAG,CAAC,CACb;SACA,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;QACb,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAmC;IACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAe;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QACjC,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAA0C,CAAC;QAC9D,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,SAAS,GAAG,GAAG,CAAC,SAAoB,CAAC;YAC3C,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YACD,IACE,SAAS;gBACT,OAAO,SAAS,KAAK,QAAQ;gBAC7B,iBAAiB,CAAE,SAAqC,CAAC,MAAM,CAAC,EAChE,CAAC;gBACD,OAAO,gBAAgB,CACpB,SAAqC,CAAC,MAAqB,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IACE,IAAI,CAAC,UAAU,KAAK,CAAC;QACrB,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;QAC1C,IAAI,CAAC,MAAM,YAAY,WAAW,EAClC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC;QACnE,OAAO,KAA0B,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IAK1B;;;;;OAKG;IACH,YACE,eAAoC,EACpC,iBAAyB,IAAI;QAVvB,eAAU,GAAkB,IAAI,CAAC;QAYvC,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,WAAmB,EACnB,YAAqB,EACrB,QAAmB;QAEnB,MAAM,WAAW,GAAG;YAClB,OAAO,EAAE,MAAM;YACf,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,YAAY;YAC3B,QAAQ,EAAE,QAAQ,IAAI,EAAE;SACzB,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;QAElE,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YACrC,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,GAAG;YACnB,aAAa,EAAE,YAAY;YAC3B,QAAQ;SACT,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAC1B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAC3B,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACrC,MAAM,cAAc,GAAW,MAAM,CAAC,eAAe,CAAC;oBACtD,MAAM,mBAAmB,GACvB,MAAM,CAAC,qBAAqB,IAAI,cAAc,CAAC;oBAEjD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;wBAC7C,YAAY,EAAE,WAAW;wBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;qBAC9B,CAAC,CAAC;oBAEH,kEAAkE;oBAClE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;oBACxD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;wBAClC,YAAY,EAAE,WAAW;wBACzB,gBAAgB,EAAE,oBAAoB;wBACtC,GAAG,QAAQ;qBACZ,CAAC,CAAC;oBAEH,gEAAgE;oBAChE,IAAI,mBAAmB,KAAK,cAAc,EAAE,CAAC;wBAC3C,iDAAiD;wBACjD,MAAM,UAAU,GAAG,mBAAmB;6BACnC,KAAK,CAAC,6BAA6B,CAAC;6BACpC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;4BAChC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gCAClC,MAAM,YAAY,GAAG,SAAS,GAAG,6BAA6B,CAAC;gCAE/D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oCACZ,wDAAwD;oCACxD,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;wCAClD,MAAM,aAAa,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;wCAC3D,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;4CACxC,YAAY,EAAE,WAAW;4CACzB,gBAAgB,EAAE,mBAAmB;4CACrC,WAAW,EAAE,CAAC;4CACd,GAAG,aAAa;yCACjB,CAAC,CAAC;oCACL,CAAC;gCACH,CAAC;qCAAM,CAAC;oCACN,6CAA6C;oCAC7C,MAAM,UAAU,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;oCACxD,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;wCACxC,YAAY,EAAE,WAAW;wCACzB,gBAAgB,EAAE,gBAAgB;wCAClC,WAAW,EAAE,CAAC;wCACd,GAAG,UAAU;qCACd,CAAC,CAAC;gCACL,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,IAAI,WAAW,GAAG,eAAe,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACvC,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BACvC,WAAW,GAAG,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC;wBAC7C,CAAC;wBAAC,MAAM,CAAC;4BACP,WAAW,GAAG,QAAQ,CAAC;wBACzB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,4BAA4B;wBAC5B,WAAW,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC1C,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wBACzC,YAAY,EAAE,WAAW;wBACzB,WAAW,EAAE,QAAQ,CAAC,MAAM;wBAC5B,KAAK,EAAE,WAAW;qBACnB,CAAC,CAAC;oBAEH,MAAM,IAAI,uBAAuB,CAC/B,oCAAoC,QAAQ,CAAC,MAAM,MAAM,WAAW,EAAE,CACvE,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;oBAC1C,YAAY,EAAE,WAAW;oBACzB,eAAe,EAAE,IAAI,CAAC,cAAc;iBACrC,CAAC,CAAC;gBACH,MAAM,IAAI,uBAAuB,CAC/B,uCAAuC,IAAI,CAAC,cAAc,UAAU,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,uBAAuB,CAC/B,yCAAyC,KAAK,EAAE,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
@@ -17,6 +17,14 @@ export class CAService {
17
17
  get authorizer() {
18
18
  return null;
19
19
  }
20
+ /**
21
+ * Retrieve the current trust bundle served by this CA service.
22
+ *
23
+ * Default implementation returns null if the service does not expose a bundle.
24
+ */
25
+ async getTrustBundle() {
26
+ return null;
27
+ }
20
28
  }
21
29
  /**
22
30
  * Error thrown when a certificate request fails.
@@ -1 +1 @@
1
- {"version":3,"file":"ca-types.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyCH;;;;;GAKG;AACH,MAAM,OAAgB,SAAS;IAC7B;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;CAWF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF"}
1
+ {"version":3,"file":"ca-types.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2EH;;;;;GAKG;AACH,MAAM,OAAgB,SAAS;IAC7B;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAYD;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=csr-types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"csr-types.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/csr-types.ts"],"names":[],"mappings":""}