@naylence/advanced-security 0.3.7-test.114 → 0.3.7-test.115

package/dist/esm/naylence/fame/security/cert/ca-service-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-service-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAU3B;;;;GAIG;AACH,MAAM,OAAgB,gBAEpB,SAAQ,uBAAqC;IAC7C;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,MAAkD,EAClD,OAA+B;QAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,yBAAyB;YACzB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CACzC,kBAAkB,EAClB,MAAM,EACN,OAAO,CACR,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,OAAoB,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YACtD,iCAAiC;YACjC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CACzC,kBAAkB,EAClB,MAAM,EACN,OAAO,CACR,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,OAAoB,CAAC;QAC9B,CAAC;QAED,4BAA4B;QAC5B,MAAM,SAAS,GACb,MAAM,YAAY,MAAM,IAAI,MAAM,IAAI,MAAM;YAC1C,CAAC,CAAE,MAA0B;YAC7B,CAAC,CAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,EAAsB,CAAC;QAE5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,kBAAkB,EAClB,SAAS,EACT,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,CAAC,IAAI,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,OAAoB,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS,EAAE,kBAAkB;IAC7B,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,WAAW;IACzB,WAAW,EACT,mEAAmE;CACtE,CAAC"}

package/dist/esm/naylence/fame/security/cert/ca-types.js

@@ -0,0 +1,39 @@
+/**
+ * Certificate Authority (CA) types and interfaces.
+ *
+ * Provides type definitions for CA service operations, certificate signing requests,
+ * and certificate issuance responses.
+ */
+/**
+ * Abstract CA signing service interface.
+ *
+ * Defines the contract for certificate authority services that can issue
+ * certificates from certificate signing requests.
+ */
+export class CAService {
+    /**
+     * Optional authorizer for request authentication.
+     */
+    get authorizer() {
+        return null;
+    }
+    /**
+     * Retrieve the current trust bundle served by this CA service.
+     *
+     * Default implementation returns null if the service does not expose a bundle.
+     */
+    async getTrustBundle() {
+        return null;
+    }
+}
+/**
+ * Error thrown when a certificate request fails.
+ */
+export class CertificateRequestError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CertificateRequestError";
+        Object.setPrototypeOf(this, CertificateRequestError.prototype);
+    }
+}
+//# sourceMappingURL=ca-types.js.map

package/dist/esm/naylence/fame/security/cert/ca-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-types.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2EH;;;;;GAKG;AACH,MAAM,OAAgB,SAAS;IAC7B;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAYD;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/esm/naylence/fame/security/cert/csr-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=csr-types.js.map

package/dist/esm/naylence/fame/security/cert/csr-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csr-types.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/csr-types.ts"],"names":[],"mappings":""}

package/dist/esm/naylence/fame/security/cert/default-ca-service-factory.js

@@ -0,0 +1,66 @@
+/**
+ * Factory for creating DefaultCAService instances.
+ *
+ * Provides the default CA service implementation with environment variable support.
+ */
+import { AbstractResourceFactory } from "@naylence/factory";
+import { DefaultCAService } from "./default-ca-service.js";
+/**
+ * Factory metadata for DefaultCAServiceFactory.
+ */
+export const FACTORY_META = {
+    base: "CAServiceFactory",
+    key: "DefaultCAService",
+};
+/**
+ * Normalize configuration from snake_case or camelCase to standard format.
+ */
+function normalizeConfig(config) {
+    if (!config) {
+        return { type: "DefaultCAService" };
+    }
+    const { type: _ignoredType, ...rest } = config;
+    return {
+        ...rest,
+        type: "DefaultCAService",
+    };
+}
+/**
+ * Factory for creating DefaultCAService instances.
+ */
+export class DefaultCAServiceFactory extends AbstractResourceFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "DefaultCAService";
+        this.isDefault = true;
+        this.priority = 100;
+    }
+    /**
+     * Create a DefaultCAService instance.
+     *
+     * @param config - DefaultCAService configuration
+     * @returns Configured DefaultCAService instance
+     */
+    async create(config, ..._factoryArgs) {
+        const normalizedConfig = normalizeConfig(config);
+        // Extract configuration with snake_case fallbacks
+        const caCertPem = normalizedConfig.caCertPem ?? normalizedConfig.ca_cert_pem;
+        const caKeyPem = normalizedConfig.caKeyPem ?? normalizedConfig.ca_key_pem;
+        const intermediateChainPem = normalizedConfig.intermediateChainPem ??
+            normalizedConfig.intermediate_chain_pem;
+        const signingCertPem = normalizedConfig.signingCertPem ?? normalizedConfig.signing_cert_pem;
+        const signingKeyPem = normalizedConfig.signingKeyPem ?? normalizedConfig.signing_key_pem;
+        // TODO: Create authorizer from config when AuthorizerFactory is available
+        const authorizer = undefined;
+        return new DefaultCAService({
+            caCertPem,
+            caKeyPem,
+            intermediateChainPem,
+            signingCertPem,
+            signingKeyPem,
+            authorizer,
+        });
+    }
+}
+export default DefaultCAServiceFactory;
+//# sourceMappingURL=default-ca-service-factory.js.map

package/dist/esm/naylence/fame/security/cert/default-ca-service-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-ca-service-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service-factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgC3D;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,kBAAkB;CACf,CAAC;AAEX;;GAEG;AACH,SAAS,eAAe,CACtB,MAAgE;IAEhE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;IAC1E,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,kBAAkB;KACC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,uBAG5C;IAHD;;QAIkB,SAAI,GAAG,kBAAkB,CAAC;QAC1B,cAAS,GAAG,IAAI,CAAC;QACjB,aAAQ,GAAG,GAAG,CAAC;IAsCjC,CAAC;IApCC;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CACjB,MAAgE,EAChE,GAAG,YAAuB;QAE1B,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEjD,kDAAkD;QAClD,MAAM,SAAS,GACb,gBAAgB,CAAC,SAAS,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,IAAI,gBAAgB,CAAC,UAAU,CAAC;QAC1E,MAAM,oBAAoB,GACxB,gBAAgB,CAAC,oBAAoB;YACrC,gBAAgB,CAAC,sBAAsB,CAAC;QAC1C,MAAM,cAAc,GAClB,gBAAgB,CAAC,cAAc,IAAI,gBAAgB,CAAC,gBAAgB,CAAC;QACvE,MAAM,aAAa,GACjB,gBAAgB,CAAC,aAAa,IAAI,gBAAgB,CAAC,eAAe,CAAC;QAErE,0EAA0E;QAC1E,MAAM,UAAU,GAA2B,SAAS,CAAC;QAErD,OAAO,IAAI,gBAAgB,CAAC;YAC1B,SAAS;YACT,QAAQ;YACR,oBAAoB;YACpB,cAAc;YACd,aAAa;YACb,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,uBAAuB,CAAC"}

package/dist/esm/naylence/fame/security/cert/default-ca-service.js

@@ -0,0 +1,364 @@
+/**
+ * Default CA service implementation with environment variable support.
+ *
+ * Wraps InternalCAService (CASigningService) with automatic credential
+ * loading from environment variables and test CA fallback.
+ */
+import { sha256 } from "@noble/hashes/sha256.js";
+import { X509Certificate } from "@peculiar/x509";
+import { CAService } from "./ca-types.js";
+import { CASigningService, createTestCA } from "./internal-ca-service.js";
+/**
+ * Environment variable names for CA credentials.
+ */
+export const ENV_FAME_CA_CERT_FILE = "FAME_CA_CERT_FILE";
+export const ENV_FAME_CA_CERT_PEM = "FAME_CA_CERT_PEM";
+export const ENV_FAME_CA_KEY_FILE = "FAME_CA_KEY_FILE";
+export const ENV_FAME_CA_KEY_PEM = "FAME_CA_KEY_PEM";
+export const ENV_FAME_INTERMEDIATE_CHAIN_FILE = "FAME_INTERMEDIATE_CHAIN_FILE";
+export const ENV_FAME_INTERMEDIATE_CHAIN_PEM = "FAME_INTERMEDIATE_CHAIN_PEM";
+export const ENV_FAME_SIGNING_CERT_FILE = "FAME_SIGNING_CERT_FILE";
+export const ENV_FAME_SIGNING_CERT_PEM = "FAME_SIGNING_CERT_PEM";
+export const ENV_FAME_SIGNING_KEY_FILE = "FAME_SIGNING_KEY_FILE";
+export const ENV_FAME_SIGNING_KEY_PEM = "FAME_SIGNING_KEY_PEM";
+/**
+ * Default CA service with environment variable support and test CA fallback.
+ *
+ * Provides automatic credential loading from:
+ * 1. Constructor options
+ * 2. Environment variables (FAME_CA_CERT_PEM, FAME_CA_KEY_PEM, etc.)
+ * 3. Test CA generation (development only)
+ */
+export class DefaultCAService extends CAService {
+    constructor(options = {}) {
+        super();
+        this.caCertPem = options.caCertPem;
+        this.caKeyPem = options.caKeyPem;
+        this.intermediateChainPem = options.intermediateChainPem;
+        this.signingCertPem = options.signingCertPem;
+        this.signingKeyPem = options.signingKeyPem;
+        this.authorizerInstance = options.authorizer;
+    }
+    get authorizer() {
+        return this.authorizerInstance ?? null;
+    }
+    /**
+     * Get CA credentials from environment or configuration.
+     *
+     * @returns CA credentials loaded from config or environment
+     */
+    async getCACredentials() {
+        let caCertPem = this.caCertPem;
+        let caKeyPem = this.caKeyPem;
+        let intermediateChainPem = this.intermediateChainPem;
+        let signingCertPem = this.signingCertPem;
+        let signingKeyPem = this.signingKeyPem;
+        // Try environment variables if not provided
+        if (!caCertPem) {
+            const caCertFile = process.env[ENV_FAME_CA_CERT_FILE];
+            if (caCertFile) {
+                caCertPem = await this.readFileIfExists(caCertFile);
+            }
+            if (!caCertPem) {
+                caCertPem = process.env[ENV_FAME_CA_CERT_PEM];
+            }
+        }
+        if (!caKeyPem) {
+            const caKeyFile = process.env[ENV_FAME_CA_KEY_FILE];
+            if (caKeyFile) {
+                caKeyPem = await this.readFileIfExists(caKeyFile);
+            }
+            if (!caKeyPem) {
+                caKeyPem = process.env[ENV_FAME_CA_KEY_PEM];
+            }
+        }
+        // Load intermediate chain
+        if (!intermediateChainPem) {
+            const intermediateChainFile = process.env[ENV_FAME_INTERMEDIATE_CHAIN_FILE];
+            if (intermediateChainFile) {
+                intermediateChainPem = await this.readFileIfExists(intermediateChainFile);
+            }
+            if (!intermediateChainPem) {
+                intermediateChainPem = process.env[ENV_FAME_INTERMEDIATE_CHAIN_PEM];
+            }
+        }
+        // Load signing certificate
+        if (!signingCertPem) {
+            const signingCertFile = process.env[ENV_FAME_SIGNING_CERT_FILE];
+            if (signingCertFile) {
+                signingCertPem = await this.readFileIfExists(signingCertFile);
+            }
+            if (!signingCertPem) {
+                signingCertPem = process.env[ENV_FAME_SIGNING_CERT_PEM];
+            }
+        }
+        // Load signing key
+        if (!signingKeyPem) {
+            const signingKeyFile = process.env[ENV_FAME_SIGNING_KEY_FILE];
+            if (signingKeyFile) {
+                signingKeyPem = await this.readFileIfExists(signingKeyFile);
+            }
+            if (!signingKeyPem) {
+                signingKeyPem = process.env[ENV_FAME_SIGNING_KEY_PEM];
+            }
+        }
+        // Fallback to test CA if nothing configured
+        if (!caCertPem || !caKeyPem) {
+            console.warn("No CA credentials configured, using test CA (not for production!)");
+            const [rootCert, rootKey] = await createTestCA();
+            return {
+                rootCaCertPem: rootCert,
+                rootCaKeyPem: rootKey,
+                intermediateChainPem,
+                signingCertPem,
+                signingKeyPem,
+            };
+        }
+        return {
+            rootCaCertPem: caCertPem,
+            rootCaKeyPem: caKeyPem,
+            intermediateChainPem,
+            signingCertPem,
+            signingKeyPem,
+        };
+    }
+    /**
+     * Read file contents if the file exists.
+     *
+     * @param filePath - Path to the file
+     * @returns File contents or undefined if file doesn't exist
+     */
+    async readFileIfExists(filePath) {
+        // Browser environment - files not supported
+        if (typeof require === "undefined" && typeof window !== "undefined") {
+            return undefined;
+        }
+        // Node.js environment
+        try {
+            const fs = await import("node:fs/promises");
+            const stats = await fs.stat(filePath);
+            if (stats.isFile()) {
+                return await fs.readFile(filePath, "utf-8");
+            }
+        }
+        catch {
+            // File doesn't exist or can't be read
+        }
+        return undefined;
+    }
+    /**
+     * Parse a PEM certificate chain into individual certificates.
+     *
+     * @param chainPem - Certificate chain in PEM format
+     * @returns List of individual certificate PEM strings, ordered from leaf to root
+     */
+    parseCertificateChain(chainPem) {
+        const certificates = [];
+        let currentCert = "";
+        let inCert = false;
+        for (const line of chainPem.split("\n")) {
+            if (line.includes("-----BEGIN CERTIFICATE-----")) {
+                inCert = true;
+                currentCert = line + "\n";
+            }
+            else if (line.includes("-----END CERTIFICATE-----")) {
+                currentCert += line + "\n";
+                certificates.push(currentCert.trim());
+                currentCert = "";
+                inCert = false;
+            }
+            else if (inCert) {
+                currentCert += line + "\n";
+            }
+        }
+        return certificates;
+    }
+    /**
+     * Issue a certificate from a CSR using the local CA service.
+     *
+     * @param csr - Certificate signing request
+     * @returns Certificate issuance response with the signed certificate
+     */
+    async issueCertificate(csr) {
+        // Get CA credentials including intermediate chain
+        const credentials = await this.getCACredentials();
+        // Determine which certificate and key to use for signing
+        let signingService;
+        if (credentials.signingCertPem && credentials.signingKeyPem) {
+            // Use specific signing certificate (leaf of intermediate chain)
+            signingService = new CASigningService({
+                rootCertPem: credentials.signingCertPem,
+                rootKeyPem: credentials.signingKeyPem,
+            });
+            console.debug("Using signing certificate for signing:", csr.requesterId);
+        }
+        else if (credentials.intermediateChainPem) {
+            // Extract the leaf certificate from the intermediate chain
+            const intermediateCerts = this.parseCertificateChain(credentials.intermediateChainPem);
+            if (intermediateCerts.length > 0 && credentials.signingKeyPem) {
+                // Use the first certificate in the chain (should be the leaf/signing certificate)
+                const leafCertPem = intermediateCerts[0];
+                signingService = new CASigningService({
+                    rootCertPem: leafCertPem,
+                    rootKeyPem: credentials.signingKeyPem,
+                });
+                console.debug("Using intermediate leaf CA for signing:", csr.requesterId);
+            }
+            else {
+                // Fall back to root CA if no signing key provided
+                signingService = new CASigningService({
+                    rootCertPem: credentials.rootCaCertPem,
+                    rootKeyPem: credentials.rootCaKeyPem,
+                });
+                console.warn("No signing key for intermediate, falling back to root:", csr.requesterId);
+            }
+        }
+        else {
+            // Sign with root CA
+            signingService = new CASigningService({
+                rootCertPem: credentials.rootCaCertPem,
+                rootKeyPem: credentials.rootCaKeyPem,
+            });
+            console.debug("Using root CA for signing:", csr.requesterId);
+        }
+        // Issue the certificate using the configured signing service
+        try {
+            const { certificatePem, expiresAt } = await signingService.issueCertificate(csr);
+            const chainParts = [certificatePem.trim()];
+            const rootCertPem = credentials.rootCaCertPem?.trim();
+            const signingCertPem = credentials.signingCertPem?.trim();
+            const normalizeCert = (pem) => pem?.trim();
+            if (credentials.intermediateChainPem) {
+                const intermediateCerts = this.parseCertificateChain(credentials.intermediateChainPem);
+                for (const certPem of intermediateCerts) {
+                    const normalized = normalizeCert(certPem);
+                    if (!normalized) {
+                        continue;
+                    }
+                    if (normalized === chainParts[0]) {
+                        continue;
+                    }
+                    if (rootCertPem && normalized === rootCertPem) {
+                        continue;
+                    }
+                    chainParts.push(normalized);
+                }
+            }
+            else if (signingCertPem && signingCertPem !== rootCertPem) {
+                if (signingCertPem !== chainParts[0]) {
+                    chainParts.push(signingCertPem);
+                }
+            }
+            const certificateChainPem = chainParts.join("\n");
+            return {
+                certificatePem,
+                certificateChainPem,
+                expiresAt,
+            };
+        }
+        catch (error) {
+            console.error("Certificate issuance failed:", csr.requesterId, error);
+            throw error;
+        }
+    }
+    async getTrustBundle() {
+        const credentials = await this.getCACredentials();
+        const rootCandidates = [];
+        if (credentials.rootCaCertPem) {
+            rootCandidates.push(credentials.rootCaCertPem);
+        }
+        if (credentials.signingCertPem) {
+            rootCandidates.push(credentials.signingCertPem);
+        }
+        if (credentials.intermediateChainPem) {
+            rootCandidates.push(...this.parseCertificateChain(credentials.intermediateChainPem));
+        }
+        if (rootCandidates.length === 0) {
+            return null;
+        }
+        const roots = buildTrustBundleRoots(rootCandidates);
+        if (roots.length === 0) {
+            return null;
+        }
+        const issuedAt = new Date().toISOString();
+        const validUntil = computeEarliestExpiry(roots);
+        const version = computeBundleVersion(roots);
+        return {
+            version,
+            issuedAt,
+            validUntil,
+            roots,
+        };
+    }
+}
+function normalizeCertificatePem(pem) {
+    const trimmed = pem.trim();
+    return trimmed.endsWith("\n") ? trimmed : `${trimmed}\n`;
+}
+function analyseCertificate(pem) {
+    try {
+        const cert = new X509Certificate(pem);
+        const details = cert;
+        const notBefore = details.notBefore instanceof Date
+            ? details.notBefore.toISOString()
+            : undefined;
+        const notAfter = details.notAfter instanceof Date
+            ? details.notAfter.toISOString()
+            : undefined;
+        return {
+            notBefore,
+            notAfter,
+        };
+    }
+    catch {
+        return {};
+    }
+}
+function buildTrustBundleRoots(candidates) {
+    const seen = new Set();
+    const roots = [];
+    for (const candidate of candidates) {
+        if (!candidate) {
+            continue;
+        }
+        const normalized = normalizeCertificatePem(candidate);
+        if (seen.has(normalized)) {
+            continue;
+        }
+        seen.add(normalized);
+        const metadata = analyseCertificate(normalized);
+        roots.push({
+            pem: normalized,
+            ...metadata,
+        });
+    }
+    return roots;
+}
+function computeEarliestExpiry(roots) {
+    let earliest = null;
+    for (const root of roots) {
+        if (!root.notAfter) {
+            continue;
+        }
+        const timestamp = Date.parse(root.notAfter);
+        if (Number.isNaN(timestamp)) {
+            continue;
+        }
+        if (earliest === null || timestamp < earliest) {
+            earliest = timestamp;
+        }
+    }
+    return earliest === null ? null : new Date(earliest).toISOString();
+}
+function computeBundleVersion(roots) {
+    const encoder = new TextEncoder();
+    const serialized = roots.map((root) => root.pem).join("\n");
+    const digest = sha256(encoder.encode(serialized));
+    const hex = Array.from(digest)
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+    const versionHex = hex.slice(0, 12);
+    const value = Number.parseInt(versionHex, 16);
+    return Number.isNaN(value) ? 1 : Math.max(1, value);
+}
+//# sourceMappingURL=default-ca-service.js.map

package/dist/esm/naylence/fame/security/cert/default-ca-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-ca-service.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASjD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACrD,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAoC/D;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAQ7C,YAAY,UAAmC,EAAE;QAC/C,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACrD,IAAI,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QACzC,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAEvC,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACtD,IAAI,UAAU,EAAE,CAAC;gBACf,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACpD,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAChD,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,oBAAoB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAChD,qBAAqB,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAChE,IAAI,eAAe,EAAE,CAAC;gBACpB,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC9D,IAAI,cAAc,EAAE,CAAC;gBACnB,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,mEAAmE,CACpE,CAAC;YACF,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACjD,OAAO;gBACL,aAAa,EAAE,QAAQ;gBACvB,YAAY,EAAE,OAAO;gBACrB,oBAAoB;gBACpB,cAAc;gBACd,aAAa;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,QAAQ;YACtB,oBAAoB;YACpB,cAAc;YACd,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,QAAgB;QAEhB,4CAA4C;QAC5C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC;YACP,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,QAAgB;QAC5C,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBACjD,MAAM,GAAG,IAAI,CAAC;gBACd,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;YAC5B,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBACtD,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtC,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA8B;QAE9B,kDAAkD;QAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAElD,yDAAyD;QACzD,IAAI,cAAgC,CAAC;QAErC,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;YAC5D,gEAAgE;YAChE,cAAc,GAAG,IAAI,gBAAgB,CAAC;gBACpC,WAAW,EAAE,WAAW,CAAC,cAAc;gBACvC,UAAU,EAAE,WAAW,CAAC,aAAa;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;YAC5C,2DAA2D;YAC3D,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAClD,WAAW,CAAC,oBAAoB,CACjC,CAAC;YACF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC9D,kFAAkF;gBAClF,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBACzC,cAAc,GAAG,IAAI,gBAAgB,CAAC;oBACpC,WAAW,EAAE,WAAY;oBACzB,UAAU,EAAE,WAAW,CAAC,aAAa;iBACtC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CACX,yCAAyC,EACzC,GAAG,CAAC,WAAW,CAChB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,kDAAkD;gBAClD,cAAc,GAAG,IAAI,gBAAgB,CAAC;oBACpC,WAAW,EAAE,WAAW,CAAC,aAAa;oBACtC,UAAU,EAAE,WAAW,CAAC,YAAY;iBACrC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CACV,wDAAwD,EACxD,GAAG,CAAC,WAAW,CAChB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,cAAc,GAAG,IAAI,gBAAgB,CAAC;gBACpC,WAAW,EAAE,WAAW,CAAC,aAAa;gBACtC,UAAU,EAAE,WAAW,CAAC,YAAY;aACrC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/D,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GACjC,MAAM,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAE7C,MAAM,UAAU,GAAa,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;YACtD,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;YAE1D,MAAM,aAAa,GAAG,CAAC,GAAuB,EAAsB,EAAE,CACpE,GAAG,EAAE,IAAI,EAAE,CAAC;YAEd,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;gBACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAClD,WAAW,CAAC,oBAAoB,CACjC,CAAC;gBAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;oBACxC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,SAAS;oBACX,CAAC;oBAED,IAAI,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,SAAS;oBACX,CAAC;oBAED,IAAI,WAAW,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;wBAC9C,SAAS;oBACX,CAAC;oBAED,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;iBAAM,IAAI,cAAc,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;gBAC5D,IAAI,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAElD,OAAO;gBACL,cAAc;gBACd,mBAAmB;gBACnB,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,cAAc;QAClC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAElD,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;YAC9B,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;YACrC,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE5C,OAAO;YACL,OAAO;YACP,QAAQ;YACR,UAAU;YACV,KAAK;SACN,CAAC;IACJ,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAGf,CAAC;QAEF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,YAAY,IAAI;YAC/B,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;YACjC,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,YAAY,IAAI;YAC9B,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE;YAChC,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO;YACL,SAAS;YACT,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA4B;IACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,UAAU;YACf,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAiC;IAC9D,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;YAC9C,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAiC;IAC7D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;SAC3B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/dist/esm/naylence/fame/security/cert/default-certificate-manager-factory.js

@@ -0,0 +1,73 @@
+import { SigningConfigClass } from "@naylence/runtime/node";
+import { CertificateManagerFactory, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, } from "@naylence/runtime/node";
+import { DefaultCertificateManager, } from "./default-certificate-manager.js";
+export const FACTORY_META = {
+    base: CERTIFICATE_MANAGER_FACTORY_BASE_TYPE,
+    key: "DefaultCertificateManager",
+};
+function normalizeConfig(config) {
+    if (!config) {
+        return { type: "DefaultCertificateManager" };
+    }
+    const { type: _ignoredType, ...rest } = config;
+    const normalized = {
+        ...rest,
+        type: "DefaultCertificateManager",
+    };
+    return normalized;
+}
+function normalizeSecuritySettings(config, explicit) {
+    if (explicit) {
+        return explicit;
+    }
+    if (config.securitySettings) {
+        return config.securitySettings;
+    }
+    if (config.security_settings) {
+        return config.security_settings;
+    }
+    return null;
+}
+function normalizeSigning(config, explicit) {
+    if (explicit instanceof SigningConfigClass) {
+        return explicit;
+    }
+    if (explicit && typeof explicit === "object") {
+        return new SigningConfigClass(explicit);
+    }
+    const candidate = config.signing ?? null;
+    if (candidate instanceof SigningConfigClass) {
+        return candidate;
+    }
+    if (candidate && typeof candidate === "object") {
+        return new SigningConfigClass(candidate);
+    }
+    return null;
+}
+function normalizeOptions(config, securitySettings, signing) {
+    const caServiceUrl = config.caServiceUrl ?? config.ca_service_url ?? null;
+    const cryptoProvider = config.cryptoProvider ?? config.crypto_provider ?? null;
+    return {
+        securitySettings,
+        signing,
+        caServiceUrl,
+        cryptoProvider,
+    };
+}
+export class DefaultCertificateManagerFactory extends CertificateManagerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "DefaultCertificateManager";
+        this.isDefault = true;
+        this.priority = 100;
+    }
+    async create(config, securitySettings, signing, ..._factoryArgs) {
+        const normalizedConfig = normalizeConfig(config);
+        const resolvedSecuritySettings = normalizeSecuritySettings(normalizedConfig, securitySettings ?? null);
+        const resolvedSigning = normalizeSigning(normalizedConfig, signing ?? null);
+        const options = normalizeOptions(normalizedConfig, resolvedSecuritySettings, resolvedSigning);
+        return new DefaultCertificateManager(options);
+    }
+}
+export default DefaultCertificateManagerFactory;
+//# sourceMappingURL=default-certificate-manager-factory.js.map

package/dist/esm/naylence/fame/security/cert/default-certificate-manager-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-certificate-manager-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager-factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,yBAAyB,EACzB,qCAAqC,GAEtC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yBAAyB,GAG1B,MAAM,kCAAkC,CAAC;AAe1C,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,qCAAqC;IAC3C,GAAG,EAAE,2BAA2B;CACxB,CAAC;AAEX,SAAS,eAAe,CACtB,MAAyE;IAEzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;IAC1E,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI;QACP,IAAI,EAAE,2BAA2B;KACC,CAAC;IACrC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAuC,EACvC,QAAkC;IAElC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACjC,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC,EACvC,QAA+B;IAE/B,IAAI,QAAQ,YAAY,kBAAkB,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAI,MAAgC,CAAC,OAAO,IAAI,IAAI,CAAC;IACpE,IAAI,SAAS,YAAY,kBAAkB,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC,EACvC,gBAAyC,EACzC,OAAqC;IAErC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;IAC1E,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IAE1D,OAAO;QACL,gBAAgB;QAChB,OAAO;QACP,YAAY;QACZ,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gCAAiC,SAAQ,yBAA0D;IAAhH;;QACkB,SAAI,GAAG,2BAA2B,CAAC;QACnC,cAAS,GAAG,IAAI,CAAC;QACjB,aAAQ,GAAG,GAAG,CAAC;IAsBjC,CAAC;IApBQ,KAAK,CAAC,MAAM,CACjB,MAAyE,EACzE,gBAA0C,EAC1C,OAA8B,EAC9B,GAAG,YAAuB;QAE1B,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,wBAAwB,GAAG,yBAAyB,CACxD,gBAAgB,EAChB,gBAAgB,IAAI,IAAI,CACzB,CAAC;QACF,MAAM,eAAe,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,gBAAgB,CAC9B,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,CAChB,CAAC;QAEF,OAAO,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAED,eAAe,gCAAgC,CAAC"}