@naylence/advanced-security 0.3.7-test.112 → 0.3.7-test.114

package/dist/esm/naylence/fame/security/cert/ca-server.js

@@ -1,223 +0,0 @@
-/**
- * CA Server - Certificate Authority HTTP endpoint
- *
- * Provides certificate issuance via HTTP using Fastify.
- * Mirrors the Python ca_server.py implementation.
- */
-import { sha256 } from "@noble/hashes/sha256.js";
-import Fastify from "fastify";
-import { realpathSync } from "node:fs";
-import { resolve } from "node:path";
-import { CAServiceFactory } from "./ca-service-factory.js";
-// Simple console logger for CA server
-const logger = {
-    info: (event, meta) => {
-        console.log(`[INFO] ${event}`, meta || "");
-    },
-    warning: (event, meta) => {
-        console.warn(`[WARNING] ${event}`, meta || "");
-    },
-    error: (event, meta) => {
-        console.error(`[ERROR] ${event}`, meta || "");
-    },
-    debug: (event, meta) => {
-        const logLevel = (process.env.FAME_LOG_LEVEL || "info").toLowerCase();
-        if (logLevel === "debug" || logLevel === "trace") {
-            console.log(`[DEBUG] ${event}`, meta || "");
-        }
-    },
-};
-const ENV_VAR_FAME_APP_HOST = "FAME_APP_HOST";
-const ENV_VAR_FAME_APP_PORT = "FAME_APP_PORT";
-/**
- * Create CA router with certificate signing endpoint.
- * Mirrors Python's create_ca_router functionality.
- */
-function createCaRouter(fastify, caService, prefix = "/fame/v1/ca") {
-    // Certificate signing endpoint
-    fastify.post(`${prefix}/sign`, {
-        schema: {
-            body: {
-                type: "object",
-                required: ["csr_pem", "requester_id"],
-                properties: {
-                    csr_pem: { type: "string" },
-                    requester_id: { type: "string" },
-                    physical_path: { type: "string" },
-                    logicals: { type: "array", items: { type: "string" } },
-                },
-            },
-        },
-    }, async (request, reply) => {
-        try {
-            const csrRequest = request.body;
-            if (!csrRequest || !csrRequest.requester_id) {
-                return reply.status(400).send({
-                    error: "invalid_request",
-                    message: "CSR must include requester_id",
-                });
-            }
-            logger.debug("ca_cert_request_received", {
-                requester_id: csrRequest.requester_id,
-                physical_path: csrRequest.physical_path,
-                logicals: csrRequest.logicals,
-            });
-            // Authenticate if authorizer is configured
-            if (caService.authorizer) {
-                // TODO: Implement authentication when authorizer interface is defined
-                logger.warning("authentication_not_yet_implemented", {
-                    authorizer_configured: true,
-                });
-            }
-            // Convert snake_case request to camelCase for TypeScript interface
-            const csrForService = {
-                csrPem: csrRequest.csr_pem,
-                requesterId: csrRequest.requester_id,
-                physicalPath: csrRequest.physical_path,
-                logicals: csrRequest.logicals,
-            };
-            // Issue certificate
-            const result = await caService.issueCertificate(csrForService);
-            const response = {
-                certificate_pem: result.certificatePem,
-                certificate_chain_pem: result.certificateChainPem,
-                expires_at: result.expiresAt,
-            };
-            return reply.send(response);
-        }
-        catch (error) {
-            logger.error("ca_cert_issuance_failed", {
-                error: error instanceof Error ? error.message : String(error),
-            });
-            return reply.status(500).send({
-                error: "issuance_failed",
-                message: error instanceof Error ? error.message : "Unknown error",
-            });
-        }
-    });
-    // Health check
-    fastify.get("/health", async () => {
-        return { status: "healthy", service: "ca-server" };
-    });
-    const trustBundlePath = "/.well-known/naylence/trust-bundle.json";
-    fastify.get(trustBundlePath, async (request, reply) => {
-        const bundle = await caService.getTrustBundle();
-        if (!bundle) {
-            return reply.status(404).send({
-                error: "trust_bundle_unavailable",
-            });
-        }
-        const payload = JSON.stringify(bundle);
-        const etag = `"${computeEtag(payload)}"`;
-        const requestEtag = request.headers["if-none-match"];
-        if (typeof requestEtag === "string" && requestEtag.replace(/W\//u, "") === etag.replace(/W\//u, "")) {
-            return reply
-                .status(304)
-                .header("ETag", etag)
-                .header("Cache-Control", trustBundleCacheControl())
-                .send();
-        }
-        return reply
-            .header("Content-Type", "application/json")
-            .header("Cache-Control", trustBundleCacheControl())
-            .header("ETag", etag)
-            .send(bundle);
-    });
-}
-/**
- * Create Fastify application with CA service lifespan management.
- * Mirrors Python's FastAPI lifespan pattern.
- */
-async function createApp() {
-    // Disable Fastify's built-in logger to avoid configuration conflicts
-    const fastify = Fastify({
-        logger: false,
-    });
-    // Register advanced security factories (including CA service factory)
-    const { registerAdvancedSecurityPluginFactories } = await import("../../../../plugin.js");
-    await registerAdvancedSecurityPluginFactories();
-    // Create CA service (mirrors Python's lifespan startup)
-    const caService = await CAServiceFactory.createCAService();
-    // Register CA router
-    createCaRouter(fastify, caService);
-    return { app: fastify, caService };
-}
-async function main() {
-    try {
-        const { app } = await createApp();
-        const host = process.env[ENV_VAR_FAME_APP_HOST] || "0.0.0.0";
-        const port = parseInt(process.env[ENV_VAR_FAME_APP_PORT] || "8098", 10);
-        await app.listen({ host, port });
-        logger.info("ca_server_started", { host, port });
-        console.log(`\n📍 CA Server listening on http://${host}:${port}`);
-        console.log(`🔐 Certificate endpoint: http://${host}:${port}/fame/v1/ca/sign\n`);
-    }
-    catch (error) {
-        logger.error("ca_server_startup_failed", {
-            error: error instanceof Error ? error.message : String(error),
-        });
-        process.exit(1);
-    }
-}
-export { createApp, main };
-const isTopLevelInvocation = (() => {
-    if (typeof process === "undefined") {
-        return false;
-    }
-    const entry = process.argv[1] ?? null;
-    if (!entry) {
-        if (process.env.FAME_CA_DEBUG === "1") {
-            console.log("[CA DEBUG] missing process argv entry", JSON.stringify({ argv: process.argv }));
-        }
-        return false;
-    }
-    try {
-        const entryPath = resolveToRealPath(entry);
-        if (!entryPath) {
-            if (process.env.FAME_CA_DEBUG === "1") {
-                console.log("[CA DEBUG] failed to resolve entry path", JSON.stringify({ entry }));
-            }
-            return false;
-        }
-        if (process.env.FAME_CA_DEBUG === "1") {
-            console.log("[CA DEBUG] invocation check", JSON.stringify({
-                argv: process.argv,
-                entryPath,
-            }));
-        }
-        return /(?:^|[\\/])ca-server\.js$/u.test(entryPath);
-    }
-    catch (error) {
-        if (process.env.FAME_CA_DEBUG === "1") {
-            console.log("[CA DEBUG] invocation check error", JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
-        }
-        return false;
-    }
-})();
-if (isTopLevelInvocation) {
-    void main();
-}
-function computeEtag(payload) {
-    const encoder = new TextEncoder();
-    const digest = sha256(encoder.encode(payload));
-    return Array.from(digest)
-        .map((byte) => byte.toString(16).padStart(2, "0"))
-        .join("");
-}
-function trustBundleCacheControl() {
-    return "public, max-age=3600, stale-while-revalidate=86400";
-}
-function resolveToRealPath(pathLike) {
-    try {
-        return realpathSync(pathLike);
-    }
-    catch {
-        try {
-            return realpathSync.native?.(pathLike) ?? resolve(pathLike);
-        }
-        catch {
-            return resolve(pathLike);
-        }
-    }
-}
-//# sourceMappingURL=ca-server.js.map

package/dist/esm/naylence/fame/security/cert/ca-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ca-server.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,sCAAsC;AACtC,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACtD,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACzD,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACvD,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,EAAE,CAAC,KAAa,EAAE,IAA8B,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAC9C,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAe9C;;;GAGG;AACH,SAAS,cAAc,CACrB,OAAwB,EACxB,SAAoB,EACpB,SAAiB,aAAa;IAE9B,+BAA+B;IAC/B,OAAO,CAAC,IAAI,CACV,GAAG,MAAM,OAAO,EAChB;QACE,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;gBACrC,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAChC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACvD;aACF;SACF;KACF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;YAEhC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,+BAA+B;iBACzC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACvC,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CAAC;YAEH,2CAA2C;YAC3C,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACzB,sEAAsE;gBACtE,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE;oBACnD,qBAAqB,EAAE,IAAI;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,mEAAmE;YACnE,MAAM,aAAa,GAAG;gBACpB,MAAM,EAAE,UAAU,CAAC,OAAO;gBAC1B,WAAW,EAAE,UAAU,CAAC,YAAY;gBACpC,YAAY,EAAE,UAAU,CAAC,aAAa;gBACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC;YAEF,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAE/D,MAAM,QAAQ,GAAgC;gBAC5C,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,qBAAqB,EAAE,MAAM,CAAC,mBAAmB;gBACjD,UAAU,EAAE,MAAM,CAAC,SAAS;aAC7B,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;IAEF,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,yCAAyC,CAAC;IAElE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,0BAA0B;aAClC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAErD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACpG,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;iBACpB,MAAM,CAAC,eAAe,EAAE,uBAAuB,EAAE,CAAC;iBAClD,IAAI,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK;aACT,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC;aAC1C,MAAM,CAAC,eAAe,EAAE,uBAAuB,EAAE,CAAC;aAClD,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;aACpB,IAAI,CAAC,MAAoC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS;IAItB,qEAAqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,EAAE,uCAAuC,EAAE,GAAG,MAAM,MAAM,CAC9D,uBAAuB,CACxB,CAAC;IACF,MAAM,uCAAuC,EAAE,CAAC;IAEhD,wDAAwD;IACxD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,CAAC;IAE3D,qBAAqB;IACrB,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEnC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;QAElC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CAAC;QAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAExE,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CACT,mCAAmC,IAAI,IAAI,IAAI,oBAAoB,CACpE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACvC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAE3B,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE;IACjC,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CACvC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CACT,yCAAyC,EACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAC1B,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,6BAA6B,EAC7B,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS;aACV,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,mCAAmC,EACnC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,IAAI,oBAAoB,EAAE,CAAC;IACzB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO,oDAAoD,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC"}