@naylence/advanced-security 0.3.7-test.114 → 0.3.7-test.115

package/dist/cjs/naylence/fame/security/encryption/sealed/x25519-encryption-manager.js

@@ -0,0 +1,542 @@
+import { createFameEnvelope, localDeliveryContext, } from "@naylence/core";
+import { EncryptionResult, FIXED_PREFIX_LEN, } from "@naylence/runtime";
+import { sealedEncrypt, sealedDecrypt } from "@naylence/runtime";
+import { urlsafeBase64Encode, urlsafeBase64Decode } from "@naylence/runtime";
+import { getLogger } from "@naylence/runtime";
+const logger = getLogger("naylence.fame.security.encryption.sealed.x25519_encryption_manager");
+export class X25519EncryptionManager {
+    constructor({ keyProvider, nodeLike = null, cryptoProvider = null, }) {
+        this.pendingEnvelopes = new Map();
+        this.keyRequestsInProgress = new Set();
+        this.keyProvider = keyProvider;
+        this.nodeLike = nodeLike;
+        this.cryptoProvider = cryptoProvider;
+    }
+    async encryptEnvelope(envelope, opts = null) {
+        if (!this.isDataFrameEnvelope(envelope) || !this.hasPayload(envelope)) {
+            return EncryptionResult.skipped(envelope);
+        }
+        // When requestAddress is provided, SecurityPolicy couldn't find the key.
+        // KeyManagementHandler will queue the envelope and send KeyRequest.
+        // X25519 should NOT queue here to avoid dual queueing.
+        if (opts?.requestAddress) {
+            logger.debug("key_not_found_delegating_to_key_management", {
+                envelope_id: envelope.id,
+                request_address: String(opts.requestAddress),
+            });
+            return EncryptionResult.queued();
+        }
+        const { recipPub, recipKid } = await this.resolveRecipientKey(opts);
+        if (!recipPub || !recipKid) {
+            // This path is for when we have a kid but don't have the key yet
+            await this.queueEnvelopeForKey(envelope, opts, recipKid ?? this.deriveTemporaryKeyId(opts));
+            return EncryptionResult.queued();
+        }
+        try {
+            return await this.encryptWithKey(envelope, recipPub, recipKid);
+        }
+        catch (error) {
+            logger.error("x25519_encryption_failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return EncryptionResult.skipped(envelope);
+        }
+    }
+    async decryptEnvelope(envelope, opts = null) {
+        if (!this.isDecryptableEnvelope(envelope)) {
+            return envelope;
+        }
+        if (!("payload" in envelope.frame) ||
+            typeof envelope.frame.payload !== "string") {
+            return envelope;
+        }
+        try {
+            const prefix = urlsafeBase64Decode(envelope.sec.enc.val);
+            const ciphertext = urlsafeBase64Decode(envelope.frame.payload);
+            const blob = new Uint8Array(prefix.length + ciphertext.length);
+            blob.set(prefix, 0);
+            blob.set(ciphertext, prefix.length);
+            const privateKey = await this.resolvePrivateKey(envelope, opts);
+            if (!privateKey) {
+                throw new Error("Private key material is not available");
+            }
+            const plaintext = sealedDecrypt(blob, privateKey);
+            const payloadWithCodec = JSON.parse(new TextDecoder().decode(plaintext));
+            const frame = envelope.frame;
+            frame.payload = payloadWithCodec.payload;
+            frame.codec = payloadWithCodec.original_codec ?? undefined;
+            if (envelope.sec) {
+                envelope.sec.enc = undefined;
+                if (!envelope.sec.sig) {
+                    envelope.sec = undefined;
+                }
+            }
+            return envelope;
+        }
+        catch (error) {
+            logger.error("x25519_decryption_failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return envelope;
+        }
+    }
+    async notifyKeyAvailable(keyId) {
+        logger.debug("x25519_notify_key_available_called", {
+            key_id: keyId,
+            pending_keys: Array.from(this.pendingEnvelopes.keys()),
+        });
+        const queued = this.pendingEnvelopes.get(keyId);
+        if (!queued || queued.length === 0) {
+            logger.debug("no_queued_envelopes_for_key", {
+                key_id: keyId,
+                has_queue: this.pendingEnvelopes.has(keyId),
+                queue_length: queued?.length ?? 0,
+            });
+            this.keyRequestsInProgress.delete(keyId);
+            return;
+        }
+        this.pendingEnvelopes.delete(keyId);
+        this.keyRequestsInProgress.delete(keyId);
+        const node = this.nodeLike;
+        if (!node) {
+            logger.debug("discarding_queued_envelopes_no_node", {
+                key_id: keyId,
+                count: queued.length,
+            });
+            return;
+        }
+        logger.debug("replaying_envelopes_for_key", {
+            key_id: keyId,
+            count: queued.length,
+        });
+        for (const envelope of queued) {
+            try {
+                await node.deliver(envelope);
+            }
+            catch (error) {
+                logger.error("failed_to_replay_envelope", {
+                    key_id: keyId,
+                    envelope_id: envelope.id,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+    }
+    async encryptWithKey(envelope, recipientPublicKey, recipientKeyId) {
+        if (!this.isDataFrameEnvelope(envelope)) {
+            return EncryptionResult.skipped(envelope);
+        }
+        const frame = envelope.frame;
+        if (frame.payload === undefined || frame.payload === null) {
+            return EncryptionResult.skipped(envelope);
+        }
+        const payloadWithCodec = {
+            original_codec: frame.codec ?? null,
+            payload: this.makeJsonSerializable(frame.payload),
+        };
+        const payloadBytes = new TextEncoder().encode(JSON.stringify(payloadWithCodec));
+        const sealedBlob = sealedEncrypt(payloadBytes, recipientPublicKey);
+        const prefix = sealedBlob.subarray(0, FIXED_PREFIX_LEN);
+        const ciphertext = sealedBlob.subarray(FIXED_PREFIX_LEN);
+        frame.codec = "b64";
+        frame.payload = urlsafeBase64Encode(ciphertext);
+        const encryptionHeader = {
+            alg: "ECDH-ES+A256GCM",
+            kid: recipientKeyId,
+            val: urlsafeBase64Encode(prefix),
+        };
+        if (envelope.sec) {
+            envelope.sec.enc = encryptionHeader;
+        }
+        else {
+            envelope.sec = { enc: encryptionHeader };
+        }
+        return EncryptionResult.ok(envelope);
+    }
+    async resolveRecipientKey(opts) {
+        if (opts) {
+            const directKey = this.extractKeyFromOptions(opts);
+            if (directKey) {
+                const kid = this.extractRecipientKeyId(opts) ?? "recip-kid-stub";
+                return { recipPub: directKey, recipKid: kid };
+            }
+            const kid = this.extractRecipientKeyId(opts);
+            if (kid) {
+                const resolved = await this.lookupKeyById(kid);
+                if (resolved) {
+                    return { recipPub: resolved, recipKid: kid };
+                }
+            }
+            if (opts.requestAddress) {
+                const addressPath = String(opts.requestAddress);
+                // Don't try to resolve locally - this indicates we should request the key
+                // The SecurityPolicy is responsible for looking up keys by address
+                // This matches Python's design (lines 119-124 in x25519_encryption_manager.py)
+                const temporaryKid = `request-${addressPath}`;
+                return { recipPub: null, recipKid: temporaryKid };
+            }
+        }
+        return { recipPub: null, recipKid: null };
+    }
+    async resolvePrivateKey(envelope, opts) {
+        const header = envelope.sec?.enc;
+        const candidateKeys = [
+            opts?.privKey,
+            opts?.priv_key,
+            opts?.privateKey,
+            opts?.channelKey,
+        ];
+        for (const candidate of candidateKeys) {
+            const normalized = this.toUint8Array(candidate);
+            if (normalized) {
+                return normalized;
+            }
+        }
+        const kid = header?.kid && header.kid !== "recip-kid-stub" ? header.kid : null;
+        if (!kid) {
+            const fallback = this.cryptoProvider?.encryptionPrivatePem;
+            if (!fallback) {
+                return null;
+            }
+            return this.decodePemToRawKey(fallback, "private");
+        }
+        const record = await this.safeGetKeyRecord(kid);
+        const fromRecord = record ? this.extractPrivateKeyFromRecord(record) : null;
+        if (fromRecord) {
+            return fromRecord;
+        }
+        const providerKeyId = this.cryptoProvider?.encryptionKeyId ?? null;
+        const providerPem = this.cryptoProvider?.encryptionPrivatePem ?? null;
+        if (providerKeyId) {
+            const providerRecord = kid === providerKeyId
+                ? record
+                : await this.safeGetKeyRecord(providerKeyId);
+            const providerRecordKey = providerRecord
+                ? this.extractPrivateKeyFromRecord(providerRecord)
+                : null;
+            if (providerRecordKey) {
+                logger.debug("using_provider_key_record_private_key", {
+                    kid,
+                    provider_key_id: providerKeyId,
+                    mismatched_kid: kid && providerKeyId !== kid ? kid : null,
+                });
+                return providerRecordKey;
+            }
+        }
+        if (!providerPem) {
+            if (kid && providerKeyId && providerKeyId !== kid) {
+                logger.debug("crypto_provider_key_id_mismatch_no_private_key", {
+                    kid,
+                    provider_key_id: providerKeyId,
+                });
+            }
+            return null;
+        }
+        const fallbackKey = this.decodePemToRawKey(providerPem, "private");
+        if (!fallbackKey) {
+            return null;
+        }
+        if (!kid || providerKeyId === kid) {
+            logger.debug("using_crypto_provider_private_key_fallback", {
+                kid: kid ?? null,
+                provider_key_id: providerKeyId,
+            });
+        }
+        else {
+            logger.warning("crypto_provider_key_id_mismatch_using_private_key", {
+                kid,
+                provider_key_id: providerKeyId,
+                key_record_present: Boolean(record),
+            });
+        }
+        return fallbackKey;
+    }
+    async queueEnvelopeForKey(envelope, opts, recipientKeyId) {
+        logger.debug("queueing_envelope_for_sealed_encryption", {
+            envelope_id: envelope.id,
+            recipient_key_id: recipientKeyId,
+            request_address: opts?.requestAddress
+                ? String(opts.requestAddress)
+                : undefined,
+        });
+        const queue = this.pendingEnvelopes.get(recipientKeyId) ?? [];
+        queue.push(envelope);
+        this.pendingEnvelopes.set(recipientKeyId, queue);
+        if (!opts?.requestAddress) {
+            return;
+        }
+        const node = this.nodeLike;
+        if (!node) {
+            return;
+        }
+        if (this.keyRequestsInProgress.has(recipientKeyId)) {
+            return;
+        }
+        this.keyRequestsInProgress.add(recipientKeyId);
+        try {
+            // Convert FameAddress to string for the frame schema
+            const requestAddressString = typeof opts.requestAddress === "string"
+                ? opts.requestAddress
+                : opts.requestAddress.toString();
+            const requestFrame = {
+                type: "KeyRequest",
+                address: requestAddressString,
+                kid: this.extractRecipientKeyId(opts) ?? undefined,
+                physicalPath: node.physicalPath ?? undefined,
+            };
+            const context = node.sid
+                ? localDeliveryContext(node.sid)
+                : localDeliveryContext();
+            const envelopeFactory = node.envelopeFactory;
+            const keyRequestEnvelope = envelopeFactory
+                ? envelopeFactory.createEnvelope({
+                    to: opts.requestAddress,
+                    frame: requestFrame,
+                })
+                : createFameEnvelope({
+                    to: opts.requestAddress,
+                    frame: requestFrame,
+                });
+            await node.deliver(keyRequestEnvelope, context);
+        }
+        catch (error) {
+            logger.error("failed_to_request_recipient_key", {
+                recipient_key_id: recipientKeyId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            this.keyRequestsInProgress.delete(recipientKeyId);
+        }
+    }
+    async lookupKeyById(kid) {
+        try {
+            const record = await this.keyProvider.getKey(kid);
+            return this.extractPublicKeyFromRecord(record);
+        }
+        catch (error) {
+            logger.debug("recipient_key_lookup_failed", {
+                kid,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return null;
+        }
+    }
+    async safeGetKeyRecord(kid) {
+        if (!kid) {
+            return null;
+        }
+        try {
+            return await this.keyProvider.getKey(kid);
+        }
+        catch (error) {
+            logger.debug("private_key_lookup_failed", {
+                kid,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return null;
+        }
+    }
+    extractPublicKeyFromRecord(record) {
+        const candidates = [
+            this.getRecordValue(record, "encryption_public_pem"),
+            this.getRecordValue(record, "encryptionPublicPem"),
+            this.getRecordValue(record, "public_key"),
+            this.getRecordValue(record, "publicKey"),
+            this.getRecordValue(record, "encryption_public_key"),
+            this.getRecordValue(record, "encryptionPublicKey"),
+            this.getRecordValue(record, "x"),
+        ];
+        for (const candidate of candidates) {
+            const normalized = this.decodeKeyMaterial(candidate, "public");
+            if (normalized) {
+                return normalized;
+            }
+        }
+        return null;
+    }
+    extractPrivateKeyFromRecord(record) {
+        const candidates = [
+            this.getRecordValue(record, "encryption_private_pem"),
+            this.getRecordValue(record, "encryptionPrivatePem"),
+            this.getRecordValue(record, "private_key"),
+            this.getRecordValue(record, "privateKey"),
+            this.getRecordValue(record, "d"),
+        ];
+        for (const candidate of candidates) {
+            const normalized = this.decodeKeyMaterial(candidate, "private");
+            if (normalized) {
+                return normalized;
+            }
+        }
+        return null;
+    }
+    decodeKeyMaterial(value, keyType) {
+        if (!value) {
+            return null;
+        }
+        if (value instanceof Uint8Array) {
+            return value;
+        }
+        if (ArrayBuffer.isView(value)) {
+            return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+        }
+        if (value instanceof ArrayBuffer) {
+            return new Uint8Array(value);
+        }
+        if (typeof value === "string") {
+            if (value.includes("BEGIN")) {
+                return this.decodePemToRawKey(value, keyType);
+            }
+            return this.decodeBase64Flexible(value);
+        }
+        return null;
+    }
+    decodePemToRawKey(pem, keyType) {
+        const lines = pem.replace(/\r/g, "").split("\n");
+        const base64Lines = lines.filter((line) => !line.startsWith("---") && line.trim().length > 0);
+        if (base64Lines.length === 0) {
+            return null;
+        }
+        const base64 = base64Lines.join("");
+        const der = this.decodeBase64Flexible(base64);
+        if (!der) {
+            logger.debug("pem_decode_failed", {
+                key_type: keyType,
+            });
+            return null;
+        }
+        if (der.length < 32) {
+            return null;
+        }
+        return der.subarray(der.length - 32);
+    }
+    extractKeyFromOptions(opts) {
+        const candidates = [opts.recipPub, opts.recipientPublicKey, opts.recip_pub];
+        for (const candidate of candidates) {
+            const normalized = this.toUint8Array(candidate);
+            if (normalized) {
+                return normalized;
+            }
+        }
+        return null;
+    }
+    toUint8Array(value) {
+        if (!value) {
+            return null;
+        }
+        if (value instanceof Uint8Array) {
+            return value;
+        }
+        if (ArrayBuffer.isView(value)) {
+            return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+        }
+        if (value instanceof ArrayBuffer) {
+            return new Uint8Array(value);
+        }
+        if (Array.isArray(value)) {
+            return Uint8Array.from(value);
+        }
+        if (typeof value === "string") {
+            return this.decodeBase64Flexible(value);
+        }
+        return null;
+    }
+    deriveTemporaryKeyId(opts) {
+        if (opts?.requestAddress) {
+            return `request-${String(opts.requestAddress)}`;
+        }
+        return "pending-recipient-key";
+    }
+    extractRecipientKeyId(opts) {
+        return opts.recipKid ?? opts.recip_kid ?? opts.recipientKeyId ?? null;
+    }
+    isDataFrameEnvelope(envelope) {
+        return Boolean(envelope.frame && envelope.frame.type === "Data");
+    }
+    hasPayload(envelope) {
+        const frame = envelope.frame;
+        if (!frame || !("payload" in frame)) {
+            return false;
+        }
+        const payload = frame.payload;
+        return payload !== undefined && payload !== null && payload !== "";
+    }
+    isDecryptableEnvelope(envelope) {
+        if (!this.isDataFrameEnvelope(envelope)) {
+            return false;
+        }
+        const header = envelope.sec?.enc;
+        const frame = envelope.frame;
+        if (!header?.val || !frame || !("payload" in frame) || !frame.payload) {
+            return false;
+        }
+        return header.alg === "ECDH-ES+A256GCM";
+    }
+    makeJsonSerializable(value) {
+        if (value === null || value === undefined) {
+            return null;
+        }
+        if (Array.isArray(value)) {
+            return value.map((item) => this.makeJsonSerializable(item));
+        }
+        if (typeof value === "object") {
+            if (typeof value.toJSON === "function") {
+                return value.toJSON();
+            }
+            if (typeof value.model_dump === "function") {
+                return value.model_dump();
+            }
+            if (typeof value.dict === "function") {
+                return value.dict();
+            }
+            if (value.__proto__ ||
+                Object.getPrototypeOf(value) !== Object.prototype) {
+                return { ...value };
+            }
+            return value;
+        }
+        return value;
+    }
+    decodeBase64Flexible(value) {
+        const normalized = value.replace(/\s+/g, "");
+        const candidates = [
+            normalized,
+            normalized.replace(/\+/g, "-").replace(/\//g, "_"),
+        ];
+        for (const candidate of candidates) {
+            try {
+                return urlsafeBase64Decode(candidate);
+            }
+            catch {
+                continue;
+            }
+        }
+        if (typeof Buffer !== "undefined") {
+            try {
+                return Uint8Array.from(Buffer.from(normalized, "base64"));
+            }
+            catch {
+                // fall through
+            }
+        }
+        if (typeof atob === "function") {
+            try {
+                const padded = normalized.padEnd(Math.ceil(normalized.length / 4) * 4, "=");
+                const binary = atob(padded);
+                const bytes = new Uint8Array(binary.length);
+                for (let i = 0; i < binary.length; i += 1) {
+                    bytes[i] = binary.charCodeAt(i);
+                }
+                return bytes;
+            }
+            catch {
+                return null;
+            }
+        }
+        return null;
+    }
+    getRecordValue(record, key) {
+        const container = record;
+        return container[key];
+    }
+}
+//# sourceMappingURL=x25519-encryption-manager.js.map

package/dist/cjs/naylence/fame/security/encryption/sealed/x25519-encryption-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519-encryption-manager.js","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/encryption/sealed/x25519-encryption-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAGhB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,MAAM,MAAM,GAAG,SAAS,CACtB,oEAAoE,CACrE,CAAC;AAgBF,MAAM,OAAO,uBAAuB;IAOlC,YAAY,EACV,WAAW,EACX,QAAQ,GAAG,IAAI,EACf,cAAc,GAAG,IAAI,GACe;QAPrB,qBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;QACrD,0BAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;QAOzD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAsB,EACtB,OAAiC,IAAI;QAErC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,OAAO,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,uDAAuD;QACvD,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBACzD,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;aAC7C,CAAC,CAAC;YACH,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEpE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,iEAAiE;YACjE,MAAM,IAAI,CAAC,mBAAmB,CAC5B,QAAQ,EACR,IAAI,EACJ,QAAQ,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAC5C,CAAC;YACF,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACvC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAsB,EACtB,OAAiC,IAAI;QAErC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IACE,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC;YAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,EAC1C,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,GAAI,CAAC,GAAI,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAEpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAIpC,CAAC;YAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAGtB,CAAC;YACF,KAAK,CAAC,OAAO,GAAG,gBAAgB,CAAC,OAAuB,CAAC;YACzD,KAAK,CAAC,KAAK,GAAG,gBAAgB,CAAC,cAAc,IAAI,SAAS,CAAC;YAE3D,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACtB,QAAQ,CAAC,GAAG,GAAG,SAAS,CAAC;gBAC3B,CAAC;YACH,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACvC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC3C,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;YACjD,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;SACvD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC1C,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC3C,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAClD,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACxC,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,QAAQ,CAAC,EAAE;oBACxB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,QAAsB,EACtB,kBAA8B,EAC9B,cAAsB;QAEtB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAkB,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1D,OAAO,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,gBAAgB,GAAG;YACvB,cAAc,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YACnC,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;SAClD,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAC3C,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CACjC,CAAC;QACF,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAEzD,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,CAAC,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEhD,MAAM,gBAAgB,GAAqB;YACzC,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,cAAc;YACnB,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC;SACjC,CAAC;QAEF,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,gBAAgB,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAoB,CAAC;QAC7D,CAAC;QAED,OAAO,gBAAgB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAA8B;QAE9B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;gBACjE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YAChD,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;gBAC/C,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAEhD,0EAA0E;gBAC1E,mEAAmE;gBACnE,+EAA+E;gBAC/E,MAAM,YAAY,GAAG,WAAW,WAAW,EAAE,CAAC;gBAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YACpD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAAsB,EACtB,IAA8B;QAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;QACjC,MAAM,aAAa,GAAG;YACpB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,UAAU;SACjB,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GACP,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,oBAAoB,CAAC;YAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,eAAe,IAAI,IAAI,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,oBAAoB,IAAI,IAAI,CAAC;QAEtE,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,cAAc,GAClB,GAAG,KAAK,aAAa;gBACnB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,iBAAiB,GAAG,cAAc;gBACtC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,cAAc,CAAC;gBAClD,CAAC,CAAC,IAAI,CAAC;YAET,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;oBACpD,GAAG;oBACH,eAAe,EAAE,aAAa;oBAC9B,cAAc,EAAE,GAAG,IAAI,aAAa,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;iBAC1D,CAAC,CAAC;gBACH,OAAO,iBAAiB,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,GAAG,IAAI,aAAa,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;gBAClD,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC7D,GAAG;oBACH,eAAe,EAAE,aAAa;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBACzD,GAAG,EAAE,GAAG,IAAI,IAAI;gBAChB,eAAe,EAAE,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,CAAC,mDAAmD,EAAE;gBAClE,GAAG;gBACH,eAAe,EAAE,aAAa;gBAC9B,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,QAAsB,EACtB,IAA8B,EAC9B,cAAsB;QAEtB,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACtD,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,gBAAgB,EAAE,cAAc;YAChC,eAAe,EAAE,IAAI,EAAE,cAAc;gBACnC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC7B,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAEjD,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,oBAAoB,GACxB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;gBACrC,CAAC,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;YAErC,MAAM,YAAY,GAAoB;gBACpC,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,oBAAoB;gBAC7B,GAAG,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,SAAS;gBAClD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;aAC7C,CAAC;YAEF,MAAM,OAAO,GAAwB,IAAI,CAAC,GAAG;gBAC3C,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChC,CAAC,CAAC,oBAAoB,EAAE,CAAC;YAE3B,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;YAC7C,MAAM,kBAAkB,GAAG,eAAe;gBACxC,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC;oBAC7B,EAAE,EAAE,IAAI,CAAC,cAAc;oBACvB,KAAK,EAAE,YAAY;iBACpB,CAAC;gBACJ,CAAC,CAAC,kBAAkB,CAAC;oBACjB,EAAE,EAAE,IAAI,CAAC,cAAc;oBACvB,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC;YAEP,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,gBAAgB,EAAE,cAAc;gBAChC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAW;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC1C,GAAG;gBACH,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,GAAkB;QAElB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACxC,GAAG;gBACH,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,0BAA0B,CAAC,MAAiB;QAClD,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,uBAAuB,CAAC;YACpD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,qBAAqB,CAAC;YAClD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC;YACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,uBAAuB,CAAC;YACpD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,qBAAqB,CAAC;YAClD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;SACjC,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,2BAA2B,CAAC,MAAiB;QACnD,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,CAAC;YACrD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,sBAAsB,CAAC;YACnD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC;YACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;SACjC,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CACvB,KAAc,EACd,OAA6B;QAE7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CACvB,GAAW,EACX,OAA6B;QAE7B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC5D,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAChC,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IAEO,qBAAqB,CAAC,IAAuB;QACnD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,oBAAoB,CAAC,IAA8B;QACzD,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,OAAO,WAAW,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAClD,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAEO,qBAAqB,CAAC,IAAuB;QACnD,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;IACxE,CAAC;IAEO,mBAAmB,CAAC,QAAsB;QAChD,OAAO,OAAO,CACZ,QAAQ,CAAC,KAAK,IAAK,QAAQ,CAAC,KAA2B,CAAC,IAAI,KAAK,MAAM,CACxE,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,QAAsB;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,CAAC;IACrE,CAAC;IAEO,qBAAqB,CAAC,QAAsB;QAClD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC,GAAG,KAAK,iBAAiB,CAAC;IAC1C,CAAC;IAEO,oBAAoB,CAAC,KAAc;QACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,OAAQ,KAAa,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAChD,OAAQ,KAAa,CAAC,MAAM,EAAE,CAAC;YACjC,CAAC;YAED,IAAI,OAAQ,KAAa,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpD,OAAQ,KAAa,CAAC,UAAU,EAAE,CAAC;YACrC,CAAC;YAED,IAAI,OAAQ,KAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9C,OAAQ,KAAa,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAED,IACG,KAAiC,CAAC,SAAS;gBAC5C,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EACjD,CAAC;gBACD,OAAO,EAAE,GAAI,KAAiC,EAAE,CAAC;YACnD,CAAC;YAED,OAAO,KAAgC,CAAC;QAC1C,CAAC;QAED,OAAO,KAAqB,CAAC;IAC/B,CAAC;IAEO,oBAAoB,CAAC,KAAa;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG;YACjB,UAAU;YACV,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnD,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EACpC,GAAG,CACJ,CAAC;gBACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CAAC,MAAiB,EAAE,GAAW;QACnD,MAAM,SAAS,GAAG,MAAiC,CAAC;QACpD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;CACF"}

package/dist/cjs/naylence/fame/security/index.js

@@ -0,0 +1,6 @@
+export * from "./cert/index.js";
+export * from "./encryption/index.js";
+export * from "./keys/index.js";
+export * from "./signing/eddsa-envelope-verifier.js";
+export { registerAdvancedSecurityFactories } from "./register-advanced-security-factories.js";
+//# sourceMappingURL=index.js.map

package/dist/cjs/naylence/fame/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sCAAsC,CAAC;AACrD,OAAO,EAAE,iCAAiC,EAAE,MAAM,2CAA2C,CAAC"}

package/dist/cjs/naylence/fame/security/keys/index.js

@@ -0,0 +1,3 @@
+export { X5CKeyManager } from "./x5c-key-manager.js";
+export { X5CKeyManagerFactory, FACTORY_META as X5C_KEY_MANAGER_FACTORY_META, } from "./x5c-key-manager-factory.js";
+//# sourceMappingURL=index.js.map

package/dist/cjs/naylence/fame/security/keys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/keys/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA6B,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,YAAY,IAAI,4BAA4B,GAE7C,MAAM,8BAA8B,CAAC"}

package/dist/cjs/naylence/fame/security/keys/x5c-key-manager-factory.js

@@ -0,0 +1,36 @@
+import { getKeyStore, KeyStoreFactory, KeyManagerFactory, KEY_MANAGER_FACTORY_BASE_TYPE, } from "@naylence/runtime";
+import { X5CKeyManager } from "./x5c-key-manager.js";
+export const FACTORY_META = {
+    base: KEY_MANAGER_FACTORY_BASE_TYPE,
+    key: "X5CKeyManager",
+};
+export class X5CKeyManagerFactory extends KeyManagerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "X5CKeyManager";
+        this.isDefault = true;
+        this.priority = 100;
+    }
+    async create(config, keyStore) {
+        const resolvedConfig = {
+            type: "X5CKeyManager",
+            ...(config ?? {}),
+        };
+        let resolvedKeyStore = keyStore ?? null;
+        if (!resolvedKeyStore && resolvedConfig.keyStore) {
+            resolvedKeyStore = await KeyStoreFactory.createKeyStore(resolvedConfig.keyStore);
+        }
+        if (!resolvedKeyStore) {
+            resolvedKeyStore = getKeyStore();
+        }
+        const options = typeof resolvedConfig.certPurgeIntervalSeconds === "number"
+            ? {
+                keyStore: resolvedKeyStore,
+                certPurgeIntervalSeconds: resolvedConfig.certPurgeIntervalSeconds,
+            }
+            : { keyStore: resolvedKeyStore };
+        return new X5CKeyManager(options);
+    }
+}
+export default X5CKeyManagerFactory;
+//# sourceMappingURL=x5c-key-manager-factory.js.map

package/dist/cjs/naylence/fame/security/keys/x5c-key-manager-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x5c-key-manager-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/keys/x5c-key-manager-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,eAAe,EAEf,iBAAiB,EACjB,6BAA6B,GAE9B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,aAAa,EAA6B,MAAM,sBAAsB,CAAC;AAQhF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,6BAA6B;IACnC,GAAG,EAAE,eAAe;CACZ,CAAC;AAEX,MAAM,OAAO,oBAAqB,SAAQ,iBAAsC;IAAhF;;QACkB,SAAI,GAAG,eAAe,CAAC;QACvB,cAAS,GAAG,IAAI,CAAC;QACjB,aAAQ,GAAG,GAAG,CAAC;IAiCjC,CAAC;IA/BQ,KAAK,CAAC,MAAM,CACjB,MAA6D,EAC7D,QAA0B;QAE1B,MAAM,cAAc,GAAwB;YAC1C,IAAI,EAAE,eAAe;YACrB,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;SACK,CAAC;QAEzB,IAAI,gBAAgB,GAAoB,QAAQ,IAAI,IAAI,CAAC;QAEzD,IAAI,CAAC,gBAAgB,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;YACjD,gBAAgB,GAAG,MAAM,eAAe,CAAC,cAAc,CACrD,cAAc,CAAC,QAAQ,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,gBAAgB,GAAG,WAAW,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,OAAO,GACX,OAAO,cAAc,CAAC,wBAAwB,KAAK,QAAQ;YACzD,CAAC,CAAC;gBACE,QAAQ,EAAE,gBAAgB;gBAC1B,wBAAwB,EAAE,cAAc,CAAC,wBAAwB;aAClE;YACH,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAErC,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;CACF;AAED,eAAe,oBAAoB,CAAC"}