@naylence/advanced-security 0.3.7-test.112 → 0.3.7-test.114

package/dist/types/advanced-security-isomorphic.d.ts

@@ -1,24 +0,0 @@
-/**
- * Isomorphic entry point for Naylence Advanced Security.
- *
- * Exposes browser-safe security helpers alongside the factory registrar while
- * installing the shared dynamic importer shim used by Naylence plugins.
- */
-export { VERSION } from "./version.js";
-export { validateJwkX5cCertificate, type ValidateJwkX5cCertificateOptions, type ValidateJwkX5cCertificateResult, publicKeyFromX5c, type PublicKeyFromX5cOptions, } from "./naylence/fame/security/cert/util.js";
-export { GRANT_PURPOSE_CA_SIGN } from "./naylence/fame/security/cert/grants.js";
-export { createEd25519Csr, type CreateEd25519CsrOptions, } from "./naylence/fame/security/cert/browser-csr.js";
-export { type CreatedEd25519Csr } from "./naylence/fame/security/cert/csr-types.js";
-export { CAServiceClient, type HttpConnectionGrant, type CertificateRequestResponse, ENV_VAR_FAME_CA_SERVICE_URL, extractCertificateInfo, formatCertificateInfo, } from "./naylence/fame/security/cert/ca-service-client.js";
-export * from "./naylence/fame/security/encryption/index.js";
-export { AdvancedEdDSAEnvelopeSignerFactory, FACTORY_META as ADVANCED_EDDSA_ENVELOPE_SIGNER_FACTORY_META, type EdDSAEnvelopeSignerConfig, } from "./naylence/fame/security/signing/eddsa-envelope-signer-factory.js";
-export { AdvancedEdDSAEnvelopeVerifierFactory, FACTORY_META as ADVANCED_EDDSA_ENVELOPE_VERIFIER_FACTORY_META, type EdDSAEnvelopeVerifierConfig, } from "./naylence/fame/security/signing/eddsa-envelope-verifier-factory.js";
-export { EdDSAEnvelopeVerifier, type EdDSAEnvelopeVerifierOptions, type SigningConfigInstance, } from "./naylence/fame/security/signing/eddsa-envelope-verifier.js";
-export * from "./naylence/fame/security/keys/index.js";
-export * from "./naylence/fame/stickiness/index.js";
-export * from "./naylence/fame/welcome/index.js";
-export { registerAdvancedSecurityFactories, type RegisterAdvancedSecurityFactoriesOptions, } from "./naylence/fame/security/register-advanced-security-factories.js";
-type PluginModule = Record<string, unknown>;
-type PluginModuleLoader = (specifier: string) => Promise<PluginModule>;
-export declare const __advancedSecurityPluginLoader: PluginModuleLoader;
-//# sourceMappingURL=advanced-security-isomorphic.d.ts.map

package/dist/types/advanced-security-isomorphic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"advanced-security-isomorphic.d.ts","sourceRoot":"","sources":["../../src/advanced-security-isomorphic.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,gBAAgB,EAChB,KAAK,uBAAuB,GAC7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,GAC7B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oDAAoD,CAAC;AAE5D,cAAc,8CAA8C,CAAC;AAE7D,OAAO,EACL,kCAAkC,EAClC,YAAY,IAAI,2CAA2C,EAC3D,KAAK,yBAAyB,GAC/B,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EACL,oCAAoC,EACpC,YAAY,IAAI,6CAA6C,EAC7D,KAAK,2BAA2B,GACjC,MAAM,qEAAqE,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,GAC3B,MAAM,6DAA6D,CAAC;AAErE,cAAc,wCAAwC,CAAC;AAEvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AAEjD,OAAO,EACL,iCAAiC,EACjC,KAAK,wCAAwC,GAC9C,MAAM,kEAAkE,CAAC;AAE1E,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC5C,KAAK,kBAAkB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AA2FvE,eAAO,MAAM,8BAA8B,oBACL,CAAC"}

package/dist/types/browser.d.ts

@@ -1,19 +0,0 @@
-/**
- * Browser-friendly entry point that exposes only modules compatible with
- * runtimes lacking Node.js built-ins. Node-specific certificate authority
- * helpers and Fastify bindings are intentionally excluded.
- */
-export { VERSION } from './version.js';
-export { validateJwkX5cCertificate, type ValidateJwkX5cCertificateOptions, type ValidateJwkX5cCertificateResult, publicKeyFromX5c, type PublicKeyFromX5cOptions, } from "./naylence/fame/security/cert/util.js";
-export { createEd25519Csr, type CreateEd25519CsrOptions, } from "./naylence/fame/security/cert/browser-csr.js";
-export { type CreatedEd25519Csr } from "./naylence/fame/security/cert/csr-types.js";
-export { GRANT_PURPOSE_CA_SIGN } from "./naylence/fame/security/cert/grants.js";
-export { CAServiceClient, type HttpConnectionGrant, type CertificateRequestResponse, ENV_VAR_FAME_CA_SERVICE_URL, extractCertificateInfo, formatCertificateInfo, } from "./naylence/fame/security/cert/ca-service-client.js";
-export * from "./naylence/fame/security/encryption/index.js";
-export { AdvancedEdDSAEnvelopeSignerFactory, FACTORY_META as ADVANCED_EDDSA_ENVELOPE_SIGNER_FACTORY_META, type EdDSAEnvelopeSignerConfig, } from "./naylence/fame/security/signing/eddsa-envelope-signer-factory.js";
-export { AdvancedEdDSAEnvelopeVerifierFactory, FACTORY_META as ADVANCED_EDDSA_ENVELOPE_VERIFIER_FACTORY_META, type EdDSAEnvelopeVerifierConfig, } from "./naylence/fame/security/signing/eddsa-envelope-verifier-factory.js";
-export { EdDSAEnvelopeVerifier, type EdDSAEnvelopeVerifierOptions, type SigningConfigInstance, } from "./naylence/fame/security/signing/eddsa-envelope-verifier.js";
-export * from "./naylence/fame/security/keys/index.js";
-export * from "./naylence/fame/stickiness/index.js";
-export * from "./naylence/fame/welcome/index.js";
-//# sourceMappingURL=browser.d.ts.map

package/dist/types/browser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACN,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,gBAAgB,EAChB,KAAK,uBAAuB,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,gBAAgB,EAChB,KAAK,uBAAuB,GAC5B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACN,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,GACrB,MAAM,oDAAoD,CAAC;AAE5D,cAAc,8CAA8C,CAAC;AAE7D,OAAO,EACN,kCAAkC,EAClC,YAAY,IAAI,2CAA2C,EAC3D,KAAK,yBAAyB,GAC9B,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EACN,oCAAoC,EACpC,YAAY,IAAI,6CAA6C,EAC7D,KAAK,2BAA2B,GAChC,MAAM,qEAAqE,CAAC;AAC7E,OAAO,EACN,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,GAC1B,MAAM,6DAA6D,CAAC;AAErE,cAAc,wCAAwC,CAAC;AAEvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC"}

package/dist/types/index.d.ts

@@ -1,2 +0,0 @@
-export * from './advanced-security-isomorphic.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC"}

package/dist/types/install-env.d.ts

@@ -1,3 +0,0 @@
-import "@naylence/runtime/install-env";
-export {};
-//# sourceMappingURL=install-env.d.ts.map

package/dist/types/install-env.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"install-env.d.ts","sourceRoot":"","sources":["../../src/install-env.ts"],"names":[],"mappings":"AAAA,OAAO,+BAA+B,CAAC;AAEvC,OAAO,EAAE,CAAC"}

package/dist/types/naylence/fame/factory-manifest.d.ts

@@ -1,11 +0,0 @@
-/**
- * AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
- * Generated by scripts/generate-factory-manifest.mjs
- *
- * Provides the list of advanced security factory modules for registration.
- */
-export declare const MODULES: readonly ["./security/cert/default-ca-service-factory.js", "./security/cert/default-certificate-manager-factory.js", "./security/cert/trust-store/browser-trust-store-provider-factory.js", "./security/cert/trust-store/node-trust-store-provider-factory.js", "./security/encryption/channel/channel-encryption-manager-factory.js", "./security/encryption/composite-encryption-manager-factory.js", "./security/encryption/default-secure-channel-manager-factory.js", "./security/encryption/sealed/x25519-encryption-manager-factory.js", "./security/keys/x5c-key-manager-factory.js", "./security/signing/eddsa-envelope-signer-factory.js", "./security/signing/eddsa-envelope-verifier-factory.js", "./stickiness/aft-load-balancer-stickiness-manager-factory.js", "./stickiness/aft-replica-stickiness-manager-factory.js", "./welcome/advanced-welcome-service-factory.js"];
-export type FactoryModuleSpec = (typeof MODULES)[number];
-export type FactoryModuleLoader = () => Promise<Record<string, unknown>>;
-export declare const MODULE_LOADERS: Record<FactoryModuleSpec, FactoryModuleLoader>;
-//# sourceMappingURL=factory-manifest.d.ts.map

package/dist/types/naylence/fame/factory-manifest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"factory-manifest.d.ts","sourceRoot":"","sources":["../../../../src/naylence/fame/factory-manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,OAAO,01BAeV,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEzE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAezE,CAAC"}

package/dist/types/naylence/fame/security/cert/browser-csr.d.ts

@@ -1,9 +0,0 @@
-import { CreatedEd25519Csr } from "./csr-types.js";
-export interface CreateEd25519CsrOptions {
-    readonly privateKey: CryptoKey;
-    readonly publicKey: CryptoKey;
-    readonly commonName: string;
-    readonly logicals?: readonly string[];
-}
-export declare function createEd25519Csr(options: CreateEd25519CsrOptions): Promise<CreatedEd25519Csr>;
-//# sourceMappingURL=browser-csr.d.ts.map

package/dist/types/naylence/fame/security/cert/browser-csr.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-csr.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/browser-csr.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMnD,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAyDD,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAyE5B"}

package/dist/types/naylence/fame/security/cert/ca-server-cli.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=ca-server-cli.d.ts.map

package/dist/types/naylence/fame/security/cert/ca-server-cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ca-server-cli.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-server-cli.ts"],"names":[],"mappings":""}

package/dist/types/naylence/fame/security/cert/ca-server.d.ts

@@ -1,19 +0,0 @@
-/**
- * CA Server - Certificate Authority HTTP endpoint
- *
- * Provides certificate issuance via HTTP using Fastify.
- * Mirrors the Python ca_server.py implementation.
- */
-import type { FastifyInstance } from "fastify";
-import type { CAService } from "./ca-types.js";
-/**
- * Create Fastify application with CA service lifespan management.
- * Mirrors Python's FastAPI lifespan pattern.
- */
-declare function createApp(): Promise<{
-    app: FastifyInstance;
-    caService: CAService;
-}>;
-declare function main(): Promise<void>;
-export { createApp, main };
-//# sourceMappingURL=ca-server.d.ts.map

package/dist/types/naylence/fame/security/cert/ca-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ca-server.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EAAE,SAAS,EAAuB,MAAM,eAAe,CAAC;AA0JpE;;;GAGG;AACH,iBAAe,SAAS,IAAI,OAAO,CAAC;IAClC,GAAG,EAAE,eAAe,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC,CAmBD;AAED,iBAAe,IAAI,kBAoBlB;AAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC"}

package/dist/types/naylence/fame/security/cert/ca-service-client.d.ts

@@ -1,75 +0,0 @@
-/**
- * Certificate client for requesting certificates from a CA signing service.
- *
- * Provides async HTTP client to request certificates from the CA signing service.
- */
-import type { CertificateInfo } from "./ca-types.js";
-export declare const ENV_VAR_FAME_CA_SERVICE_URL = "FAME_CA_SERVICE_URL";
-/**
- * HTTP connection grant for CA service.
- */
-export interface HttpConnectionGrant {
-    /** Base URL for the CA service */
-    url: string;
-}
-/**
- * Certificate request response from CA service.
- */
-export interface CertificateRequestResponse {
-    /** Issued certificate in PEM format */
-    certificatePem: string;
-    /** Full certificate chain in PEM format */
-    certificateChainPem: string;
-    /** Certificate expiration time in ISO format */
-    expiresAt?: string;
-}
-/**
- * Extract certificate information from a PEM certificate.
- *
- * Uses node-forge to parse X.509 certificates and extract metadata.
- *
- * @param _certPem - Certificate in PEM format (prefixed with underscore as currently unused)
- * @returns Certificate information object
- */
-export declare function extractCertificateInfo(_certPem: string): CertificateInfo;
-/**
- * Format certificate information in human-readable format.
- *
- * @param certPem - Certificate in PEM format
- * @param certType - Type description for logging (e.g., "Certificate", "CA Certificate")
- * @returns Formatted string with certificate details
- */
-export declare function formatCertificateInfo(certPem: string, certType?: string): string;
-/**
- * Client for requesting certificates from a CA signing service.
- */
-export declare class CAServiceClient {
-    private readonly connectionGrant;
-    private readonly timeoutSeconds;
-    private authHeader;
-    /**
-     * Create a new CA service client.
-     *
-     * @param connectionGrant - HTTP connection grant with CA service URL
-     * @param timeoutSeconds - Request timeout in seconds (default: 30)
-     */
-    constructor(connectionGrant: HttpConnectionGrant, timeoutSeconds?: number);
-    /**
-     * Set the authorization header for outbound requests.
-     *
-     * @param authHeader - Authorization header value (e.g., "Bearer token")
-     */
-    setAuthHeader(authHeader: string): void;
-    /**
-     * Request a certificate from the CA service.
-     *
-     * @param csrPem - Certificate Signing Request in PEM format
-     * @param requesterId - ID of the node requesting the certificate
-     * @param physicalPath - Physical path for the node (optional)
-     * @param logicals - Logicals the node will serve (optional)
-     * @returns Tuple of [certificatePem, certificateChainPem]
-     * @throws {CertificateRequestError} If the request fails
-     */
-    requestCertificate(csrPem: string, requesterId: string, physicalPath?: string, logicals?: string[]): Promise<[string, string]>;
-}
-//# sourceMappingURL=ca-service-client.d.ts.map

package/dist/types/naylence/fame/security/cert/ca-service-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ca-service-client.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAcrD,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IAEvB,2CAA2C;IAC3C,mBAAmB,EAAE,MAAM,CAAC;IAE5B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CA6HxE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAsB,GAC/B,MAAM,CAmER;AA+QD;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsB;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,UAAU,CAAuB;IAEzC;;;;;OAKG;gBAED,eAAe,EAAE,mBAAmB,EACpC,cAAc,GAAE,MAAa;IAU/B;;;;OAIG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;;;;OASG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAyJ7B"}

package/dist/types/naylence/fame/security/cert/ca-service-factory.d.ts

@@ -1,43 +0,0 @@
-/**
- * Factory pattern for creating CA service instances.
- *
- * Provides a unified way to create CAService implementations from configuration.
- */
-import type { CreateResourceOptions, ResourceConfig } from "@naylence/factory";
-import { AbstractResourceFactory } from "@naylence/factory";
-import type { CAService } from "./ca-types.js";
-/**
- * Configuration for CAService instances.
- */
-export interface CAServiceConfig extends ResourceConfig {
-    type: string;
-}
-/**
- * Factory for creating CAService instances.
- *
- * Supports multiple CAService implementations through the factory pattern.
- */
-export declare abstract class CAServiceFactory<C extends CAServiceConfig = CAServiceConfig> extends AbstractResourceFactory<CAService, C> {
-    /**
-     * Create a CAService instance from configuration.
-     *
-     * @param config - Optional CAService configuration or dictionary
-     * @param options - Additional creation options
-     * @returns Configured CAService instance
-     */
-    static createCAService(config?: CAServiceConfig | Record<string, unknown>, options?: CreateResourceOptions): Promise<CAService>;
-}
-/**
- * Base type for CA service factories.
- */
-export declare const CA_SERVICE_FACTORY_BASE_TYPE = "CAServiceFactory";
-/**
- * Factory metadata for CAServiceFactory.
- */
-export declare const FACTORY_META: {
-    factoryId: string;
-    factoryType: typeof CAServiceFactory;
-    resourceType: string;
-    description: string;
-};
-//# sourceMappingURL=ca-service-factory.d.ts.map

package/dist/types/naylence/fame/security/cert/ca-service-factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ca-service-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EACL,uBAAuB,EAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,8BAAsB,gBAAgB,CACpC,CAAC,SAAS,eAAe,GAAG,eAAe,CAC3C,SAAQ,uBAAuB,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7C;;;;;;OAMG;WACU,eAAe,CAC1B,MAAM,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClD,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,SAAS,CAAC;CA6CtB;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,qBAAqB,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;CAMxB,CAAC"}

package/dist/types/naylence/fame/security/cert/ca-types.d.ts

@@ -1,129 +0,0 @@
-/**
- * Certificate Authority (CA) types and interfaces.
- *
- * Provides type definitions for CA service operations, certificate signing requests,
- * and certificate issuance responses.
- */
-/**
- * Authorizer interface placeholder (from runtime package).
- * TODO: Import from naylence-runtime-ts once dependency is established.
- */
-export interface Authorizer {
-}
-/**
- * Certificate Signing Request payload.
- */
-export interface CertificateSigningRequest {
-    /** Certificate Signing Request in PEM format */
-    csrPem: string;
-    /** ID of the node requesting the certificate */
-    requesterId: string;
-    /** Physical path for the node (optional) */
-    physicalPath?: string;
-    /** Host-like logical addresses the node will serve */
-    logicals?: string[];
-}
-/**
- * Certificate issuance response.
- */
-export interface CertificateIssuanceResponse {
-    /** Issued certificate in PEM format */
-    certificatePem: string;
-    /** Full certificate chain in PEM format (optional) */
-    certificateChainPem?: string;
-    /** Certificate expiration time in ISO format */
-    expiresAt: string;
-}
-/**
- * Trust bundle certificate entry.
- */
-export interface TrustBundleRoot {
-    /** Certificate in PEM format */
-    pem: string;
-    /** Optional key identifier */
-    kid?: string;
-    /** Optional notBefore timestamp */
-    notBefore?: string;
-    /** Optional notAfter timestamp */
-    notAfter?: string;
-}
-/**
- * Trust bundle document served by the CA.
- */
-export interface TrustBundleDocument {
-    /** Monotonic version number that changes when bundle contents rotate */
-    version: number;
-    /** Time the bundle was generated */
-    issuedAt: string;
-    /** Earliest expiration among the bundled roots */
-    validUntil: string | null;
-    /** Trust anchors */
-    roots: TrustBundleRoot[];
-}
-/**
- * Abstract CA signing service interface.
- *
- * Defines the contract for certificate authority services that can issue
- * certificates from certificate signing requests.
- */
-export declare abstract class CAService {
-    /**
-     * Optional authorizer for request authentication.
-     */
-    get authorizer(): Authorizer | null;
-    /**
-     * Issue a certificate from a CSR.
-     *
-     * @param csr - Certificate signing request
-     * @returns Certificate issuance response with the signed certificate
-     */
-    abstract issueCertificate(csr: CertificateSigningRequest): Promise<CertificateIssuanceResponse>;
-    /**
-     * Retrieve the current trust bundle served by this CA service.
-     *
-     * Default implementation returns null if the service does not expose a bundle.
-     */
-    getTrustBundle(): Promise<TrustBundleDocument | null>;
-}
-/**
- * Error thrown when a certificate request fails.
- */
-export declare class CertificateRequestError extends Error {
-    constructor(message: string);
-}
-/**
- * Certificate information extracted from a certificate.
- */
-export interface CertificateInfo {
-    /** Subject DN */
-    subject: string;
-    /** Issuer DN */
-    issuer: string;
-    /** Serial number (hex format) */
-    serialNumber: string;
-    /** Valid from timestamp */
-    validFrom: string;
-    /** Valid until timestamp */
-    validUntil: string;
-    /** Subject Alternative Names */
-    subjectAlternativeNames?: string[];
-    /** Certificate validity status */
-    status: "valid" | "expired" | "not_yet_valid" | "unknown";
-    /** Days remaining if valid */
-    daysRemaining?: number;
-    /** Hours remaining if valid */
-    hoursRemaining?: number;
-    /** Minutes remaining if valid */
-    minutesRemaining?: number;
-    /** SPIFFE ID (if present) */
-    spiffeId?: string;
-    /** Node SID (if present - Fame extension) */
-    nodeSid?: string;
-    /** Node ID (if present - Fame extension) */
-    nodeId?: string;
-    /** Logical hosts (if present - Fame extension) */
-    logicalHosts?: string[];
-    /** Error message if parsing failed */
-    error?: string;
-}
-//# sourceMappingURL=ca-types.d.ts.map

package/dist/types/naylence/fame/security/cert/ca-types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ca-types.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,WAAW,UAAU;CAE1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IAEf,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IAEvB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IAEZ,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAEhB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IAEjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,oBAAoB;IACpB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,8BAAsB,SAAS;IAC7B;;OAEG;IACH,IAAI,UAAU,IAAI,UAAU,GAAG,IAAI,CAElC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CACvB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAEvC;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAG5D;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,iBAAiB;IACjB,OAAO,EAAE,MAAM,CAAC;IAEhB,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IAEf,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAElB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IAEnB,gCAAgC;IAChC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC,kCAAkC;IAClC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAC;IAE1D,8BAA8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/types/naylence/fame/security/cert/csr-types.d.ts

@@ -1,5 +0,0 @@
-export interface CreatedEd25519Csr {
-    readonly csrPem: string;
-    readonly csrDer: ArrayBuffer;
-}
-//# sourceMappingURL=csr-types.d.ts.map

package/dist/types/naylence/fame/security/cert/csr-types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"csr-types.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/csr-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B"}

package/dist/types/naylence/fame/security/cert/default-ca-service-factory.d.ts

@@ -1,55 +0,0 @@
-/**
- * Factory for creating DefaultCAService instances.
- *
- * Provides the default CA service implementation with environment variable support.
- */
-import type { ResourceConfig } from "@naylence/factory";
-import { AbstractResourceFactory } from "@naylence/factory";
-import type { CAService } from "./ca-types.js";
-/**
- * Configuration for DefaultCAService.
- */
-export interface DefaultCAServiceConfig extends ResourceConfig {
-    type: "DefaultCAService";
-    /** Root CA certificate in PEM format (optional, can use environment variables) */
-    caCertPem?: string;
-    ca_cert_pem?: string;
-    /** Root CA private key in PEM format (optional, can use environment variables) */
-    caKeyPem?: string;
-    ca_key_pem?: string;
-    /** Complete intermediate CA chain in PEM format (optional) */
-    intermediateChainPem?: string;
-    intermediate_chain_pem?: string;
-    /** Certificate to use for signing (leaf of the chain, optional) */
-    signingCertPem?: string;
-    signing_cert_pem?: string;
-    /** Private key for the signing certificate (optional) */
-    signingKeyPem?: string;
-    signing_key_pem?: string;
-    /** Authorizer configuration (optional) */
-    authorizer?: unknown;
-}
-/**
- * Factory metadata for DefaultCAServiceFactory.
- */
-export declare const FACTORY_META: {
-    readonly base: "CAServiceFactory";
-    readonly key: "DefaultCAService";
-};
-/**
- * Factory for creating DefaultCAService instances.
- */
-export declare class DefaultCAServiceFactory extends AbstractResourceFactory<CAService, DefaultCAServiceConfig> {
-    readonly type = "DefaultCAService";
-    readonly isDefault = true;
-    readonly priority = 100;
-    /**
-     * Create a DefaultCAService instance.
-     *
-     * @param config - DefaultCAService configuration
-     * @returns Configured DefaultCAService instance
-     */
-    create(config?: DefaultCAServiceConfig | Record<string, unknown> | null, ..._factoryArgs: unknown[]): Promise<CAService>;
-}
-export default DefaultCAServiceFactory;
-//# sourceMappingURL=default-ca-service-factory.d.ts.map

package/dist/types/naylence/fame/security/cert/default-ca-service-factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default-ca-service-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service-factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG/C;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,IAAI,EAAE,kBAAkB,CAAC;IAEzB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAmBX;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,uBAAuB,CAClE,SAAS,EACT,sBAAsB,CACvB;IACC,SAAgB,IAAI,sBAAsB;IAC1C,SAAgB,SAAS,QAAQ;IACjC,SAAgB,QAAQ,OAAO;IAE/B;;;;;OAKG;IACU,MAAM,CACjB,MAAM,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EAChE,GAAG,YAAY,EAAE,OAAO,EAAE,GACzB,OAAO,CAAC,SAAS,CAAC;CA2BtB;AAED,eAAe,uBAAuB,CAAC"}

package/dist/types/naylence/fame/security/cert/default-ca-service.d.ts

@@ -1,85 +0,0 @@
-/**
- * Default CA service implementation with environment variable support.
- *
- * Wraps InternalCAService (CASigningService) with automatic credential
- * loading from environment variables and test CA fallback.
- */
-import type { Authorizer, CertificateIssuanceResponse, CertificateSigningRequest, TrustBundleDocument } from "./ca-types.js";
-import { CAService } from "./ca-types.js";
-/**
- * Environment variable names for CA credentials.
- */
-export declare const ENV_FAME_CA_CERT_FILE = "FAME_CA_CERT_FILE";
-export declare const ENV_FAME_CA_CERT_PEM = "FAME_CA_CERT_PEM";
-export declare const ENV_FAME_CA_KEY_FILE = "FAME_CA_KEY_FILE";
-export declare const ENV_FAME_CA_KEY_PEM = "FAME_CA_KEY_PEM";
-export declare const ENV_FAME_INTERMEDIATE_CHAIN_FILE = "FAME_INTERMEDIATE_CHAIN_FILE";
-export declare const ENV_FAME_INTERMEDIATE_CHAIN_PEM = "FAME_INTERMEDIATE_CHAIN_PEM";
-export declare const ENV_FAME_SIGNING_CERT_FILE = "FAME_SIGNING_CERT_FILE";
-export declare const ENV_FAME_SIGNING_CERT_PEM = "FAME_SIGNING_CERT_PEM";
-export declare const ENV_FAME_SIGNING_KEY_FILE = "FAME_SIGNING_KEY_FILE";
-export declare const ENV_FAME_SIGNING_KEY_PEM = "FAME_SIGNING_KEY_PEM";
-/**
- * Options for DefaultCAService.
- */
-export interface DefaultCAServiceOptions {
-    /** Root CA certificate in PEM format */
-    caCertPem?: string;
-    /** Root CA private key in PEM format */
-    caKeyPem?: string;
-    /** Complete intermediate CA chain in PEM format (optional) */
-    intermediateChainPem?: string;
-    /** Certificate to use for signing (leaf of the chain, optional) */
-    signingCertPem?: string;
-    /** Private key for the signing certificate (optional) */
-    signingKeyPem?: string;
-    /** Authorizer for access control (optional) */
-    authorizer?: Authorizer;
-}
-/**
- * Default CA service with environment variable support and test CA fallback.
- *
- * Provides automatic credential loading from:
- * 1. Constructor options
- * 2. Environment variables (FAME_CA_CERT_PEM, FAME_CA_KEY_PEM, etc.)
- * 3. Test CA generation (development only)
- */
-export declare class DefaultCAService extends CAService {
-    private readonly caCertPem?;
-    private readonly caKeyPem?;
-    private readonly intermediateChainPem?;
-    private readonly signingCertPem?;
-    private readonly signingKeyPem?;
-    private readonly authorizerInstance?;
-    constructor(options?: DefaultCAServiceOptions);
-    get authorizer(): Authorizer | null;
-    /**
-     * Get CA credentials from environment or configuration.
-     *
-     * @returns CA credentials loaded from config or environment
-     */
-    private getCACredentials;
-    /**
-     * Read file contents if the file exists.
-     *
-     * @param filePath - Path to the file
-     * @returns File contents or undefined if file doesn't exist
-     */
-    private readFileIfExists;
-    /**
-     * Parse a PEM certificate chain into individual certificates.
-     *
-     * @param chainPem - Certificate chain in PEM format
-     * @returns List of individual certificate PEM strings, ordered from leaf to root
-     */
-    private parseCertificateChain;
-    /**
-     * Issue a certificate from a CSR using the local CA service.
-     *
-     * @param csr - Certificate signing request
-     * @returns Certificate issuance response with the signed certificate
-     */
-    issueCertificate(csr: CertificateSigningRequest): Promise<CertificateIssuanceResponse>;
-    getTrustBundle(): Promise<TrustBundleDocument | null>;
-}
-//# sourceMappingURL=default-ca-service.d.ts.map

package/dist/types/naylence/fame/security/cert/default-ca-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default-ca-service.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,UAAU,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C;;GAEG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AACrD,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAC/E,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAC7E,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAaD;;;;;;;GAOG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAa;gBAErC,OAAO,GAAE,uBAA4B;IAWjD,IAAI,UAAU,IAAI,UAAU,GAAG,IAAI,CAElC;IAED;;;;OAIG;YACW,gBAAgB;IAwF9B;;;;;OAKG;YACW,gBAAgB;IAsB9B;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;;;;OAKG;IACG,gBAAgB,CACpB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAsGjB,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAkC5E"}

package/dist/types/naylence/fame/security/cert/default-certificate-manager-factory.d.ts

@@ -1,25 +0,0 @@
-import type { SecuritySettings } from "@naylence/core";
-import { CertificateManagerFactory, type CertificateManagerConfig } from "@naylence/runtime/node";
-import type { SigningConfig } from "@naylence/runtime";
-import type { CertificateManager } from "@naylence/runtime";
-export interface DefaultCertificateManagerConfig extends CertificateManagerConfig {
-    type: "DefaultCertificateManager";
-    caServiceUrl?: string | null;
-    ca_service_url?: string | null;
-    securitySettings?: SecuritySettings | null;
-    security_settings?: SecuritySettings | null;
-    cryptoProvider?: unknown | null;
-    crypto_provider?: unknown | null;
-}
-export declare const FACTORY_META: {
-    readonly base: "CertificateManagerFactory";
-    readonly key: "DefaultCertificateManager";
-};
-export declare class DefaultCertificateManagerFactory extends CertificateManagerFactory<DefaultCertificateManagerConfig> {
-    readonly type = "DefaultCertificateManager";
-    readonly isDefault = true;
-    readonly priority = 100;
-    create(config?: DefaultCertificateManagerConfig | Record<string, unknown> | null, securitySettings?: SecuritySettings | null, signing?: SigningConfig | null, ..._factoryArgs: unknown[]): Promise<CertificateManager>;
-}
-export default DefaultCertificateManagerFactory;
-//# sourceMappingURL=default-certificate-manager-factory.d.ts.map

package/dist/types/naylence/fame/security/cert/default-certificate-manager-factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default-certificate-manager-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EACL,yBAAyB,EAEzB,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAOhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,WAAW,+BACf,SAAQ,wBAAwB;IAChC,IAAI,EAAE,2BAA2B,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC5C,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAClC;AAED,eAAO,MAAM,YAAY;;;CAGf,CAAC;AA6EX,qBAAa,gCAAiC,SAAQ,yBAAyB,CAAC,+BAA+B,CAAC;IAC9G,SAAgB,IAAI,+BAA+B;IACnD,SAAgB,SAAS,QAAQ;IACjC,SAAgB,QAAQ,OAAO;IAElB,MAAM,CACjB,MAAM,CAAC,EAAE,+BAA+B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACzE,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,EAC1C,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,EAC9B,GAAG,YAAY,EAAE,OAAO,EAAE,GACzB,OAAO,CAAC,kBAAkB,CAAC;CAe/B;AAED,eAAe,gCAAgC,CAAC"}