@naylence/advanced-security 0.3.7-test.114 → 0.3.7-test.116

package/dist/cjs/naylence/fame/security/cert/ca-service-client.js

@@ -0,0 +1,585 @@
+/**
+ * Certificate client for requesting certificates from a CA signing service.
+ *
+ * Provides async HTTP client to request certificates from the CA signing service.
+ */
+import { AsnConvert } from "@peculiar/asn1-schema";
+import { Certificate, SubjectAlternativeName } from "@peculiar/asn1-x509";
+import { X509Certificate } from "@peculiar/x509";
+import { CertificateRequestError } from "./ca-types.js";
+import { LOGICALS_OID, NODE_ID_OID, SID_OID } from "./oid-constants.js";
+// Simple logger for now - TODO: integrate with runtime logging
+const logger = {
+    debug: (_event, _meta) => {
+        // console.log(`[DEBUG] ${event}`, meta);
+    },
+    error: (_event, _meta) => {
+        console.error(`[ERROR] ${_event}`, _meta);
+    },
+};
+export const ENV_VAR_FAME_CA_SERVICE_URL = "FAME_CA_SERVICE_URL";
+/**
+ * Extract certificate information from a PEM certificate.
+ *
+ * Uses node-forge to parse X.509 certificates and extract metadata.
+ *
+ * @param _certPem - Certificate in PEM format (prefixed with underscore as currently unused)
+ * @returns Certificate information object
+ */
+export function extractCertificateInfo(_certPem) {
+    try {
+        const pemBlock = extractFirstCertificatePem(_certPem);
+        if (!pemBlock) {
+            throw new Error("certificate PEM block not found");
+        }
+        const certDer = pemToArrayBuffer(pemBlock);
+        const certificate = new X509Certificate(certDer);
+        const certificateRecord = certificate;
+        const parsedCertificate = AsnConvert.parse(certDer, Certificate);
+        const subject = readOptionalStringProperty(certificateRecord, "subject") ??
+            formatDistinguishedName(parsedCertificate.tbsCertificate.subject);
+        const issuer = readOptionalStringProperty(certificateRecord, "issuer") ??
+            formatDistinguishedName(parsedCertificate.tbsCertificate.issuer);
+        const serialNumber = readOptionalStringProperty(certificateRecord, "serialNumber") ??
+            bytesToHex(parsedCertificate.tbsCertificate.serialNumber);
+        const validFromDate = readOptionalDateProperty(certificateRecord, "notBefore") ??
+            readValidityDate(parsedCertificate.tbsCertificate.validity.notBefore);
+        const validUntilDate = readOptionalDateProperty(certificateRecord, "notAfter") ??
+            readValidityDate(parsedCertificate.tbsCertificate.validity.notAfter);
+        if (!validFromDate || !validUntilDate) {
+            throw new Error("certificate validity period is missing");
+        }
+        const info = {
+            subject,
+            issuer,
+            serialNumber,
+            validFrom: validFromDate.toISOString(),
+            validUntil: validUntilDate.toISOString(),
+            status: "unknown",
+        };
+        const now = new Date();
+        if (now < validFromDate) {
+            info.status = "not_yet_valid";
+        }
+        else if (now > validUntilDate) {
+            info.status = "expired";
+        }
+        else {
+            info.status = "valid";
+            const diffMs = validUntilDate.getTime() - now.getTime();
+            info.daysRemaining = Math.floor(diffMs / (24 * 60 * 60 * 1000));
+            const hoursRemainder = diffMs % (24 * 60 * 60 * 1000);
+            info.hoursRemaining = Math.floor(hoursRemainder / (60 * 60 * 1000));
+            const minutesRemainder = hoursRemainder % (60 * 60 * 1000);
+            info.minutesRemaining = Math.floor(minutesRemainder / (60 * 1000));
+        }
+        const sanExtension = getExtensionValue(certificate, "2.5.29.17");
+        if (sanExtension && toUint8Array(sanExtension).length > 0) {
+            const san = AsnConvert.parse(sanExtension, SubjectAlternativeName);
+            const altNames = [];
+            for (const generalName of san) {
+                const name = generalName;
+                if (typeof name.uniformResourceIdentifier === "string") {
+                    altNames.push(name.uniformResourceIdentifier);
+                }
+                else if (typeof name.dNSName === "string") {
+                    altNames.push(name.dNSName);
+                }
+                else if (typeof name.rfc822Name === "string") {
+                    altNames.push(name.rfc822Name);
+                }
+                else if (name.iPAddress instanceof ArrayBuffer) {
+                    altNames.push(formatIpAddress(toUint8Array(name.iPAddress)));
+                }
+                else if (name.iPAddress && ArrayBuffer.isView(name.iPAddress)) {
+                    const view = name.iPAddress;
+                    altNames.push(formatIpAddress(new Uint8Array(view.buffer, view.byteOffset, view.byteLength)));
+                }
+            }
+            if (altNames.length > 0) {
+                info.subjectAlternativeNames = altNames;
+                const spiffe = altNames.find((value) => value.startsWith("spiffe://"));
+                if (spiffe) {
+                    info.spiffeId = spiffe;
+                }
+            }
+        }
+        const sidExtension = getExtensionValue(certificate, SID_OID);
+        if (sidExtension) {
+            info.nodeSid = decodeUtf8(sidExtension);
+        }
+        const nodeIdExtension = getExtensionValue(certificate, NODE_ID_OID);
+        if (nodeIdExtension) {
+            info.nodeId = decodeUtf8(nodeIdExtension);
+        }
+        const logicalsExtension = getExtensionValue(certificate, LOGICALS_OID);
+        if (logicalsExtension) {
+            try {
+                const logicalsJson = decodeUtf8(logicalsExtension);
+                const parsed = JSON.parse(logicalsJson);
+                if (Array.isArray(parsed)) {
+                    info.logicalHosts = parsed.filter((entry) => typeof entry === "string");
+                }
+            }
+            catch {
+                // Ignore malformed extension payload – certificate remains valid.
+            }
+        }
+        return info;
+    }
+    catch (error) {
+        return {
+            subject: "",
+            issuer: "",
+            serialNumber: "",
+            validFrom: "",
+            validUntil: "",
+            status: "unknown",
+            error: `Failed to parse certificate: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}
+/**
+ * Format certificate information in human-readable format.
+ *
+ * @param certPem - Certificate in PEM format
+ * @param certType - Type description for logging (e.g., "Certificate", "CA Certificate")
+ * @returns Formatted string with certificate details
+ */
+export function formatCertificateInfo(certPem, certType = "Certificate") {
+    const info = extractCertificateInfo(certPem);
+    if (info.error) {
+        return `=== ${certType} Information ===\n${info.error}`;
+    }
+    const lines = [
+        `=== ${certType} Information ===`,
+        `Subject: ${info.subject}`,
+        `Issuer: ${info.issuer}`,
+        `Serial Number: ${info.serialNumber}`,
+        `Valid From: ${info.validFrom}`,
+        `Valid Until: ${info.validUntil}`,
+    ];
+    if (info.subjectAlternativeNames?.length) {
+        lines.push(`Subject Alternative Names: ${info.subjectAlternativeNames.join(", ")}`);
+    }
+    if (info.spiffeId) {
+        lines.push(`SPIFFE ID: ${info.spiffeId}`);
+    }
+    if (info.nodeSid) {
+        lines.push(`Node SID: ${info.nodeSid}`);
+    }
+    if (info.nodeId) {
+        lines.push(`Node ID: ${info.nodeId}`);
+    }
+    if (info.logicalHosts?.length) {
+        lines.push(`Logical Hosts: ${info.logicalHosts.join(", ")}`);
+    }
+    if (info.status === "valid") {
+        const pieces = [];
+        if (typeof info.daysRemaining === "number" && info.daysRemaining > 0) {
+            pieces.push(`${info.daysRemaining} days`);
+        }
+        if (typeof info.hoursRemaining === "number" && info.hoursRemaining > 0) {
+            pieces.push(`${info.hoursRemaining} hours`);
+        }
+        if (typeof info.minutesRemaining === "number" &&
+            info.minutesRemaining > 0 &&
+            pieces.length === 0) {
+            pieces.push(`${info.minutesRemaining} minutes`);
+        }
+        if (pieces.length > 0) {
+            lines.push(`Status: Valid (${pieces.join(", ")})`);
+        }
+        else {
+            lines.push("Status: Valid");
+        }
+    }
+    else if (info.status === "expired") {
+        lines.push("Status: Expired");
+    }
+    else if (info.status === "not_yet_valid") {
+        lines.push("Status: Not yet valid");
+    }
+    else {
+        lines.push("Status: Unknown");
+    }
+    return lines.join("\n");
+}
+function extractFirstCertificatePem(pem) {
+    const match = pem.match(/-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/);
+    return match ? match[0] : null;
+}
+function pemToArrayBuffer(pem) {
+    const base64 = pem
+        .replace(/-----BEGIN CERTIFICATE-----/g, "")
+        .replace(/-----END CERTIFICATE-----/g, "")
+        .replace(/\s+/g, "");
+    if (typeof Buffer !== "undefined") {
+        const buffer = Buffer.from(base64, "base64");
+        const array = buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
+        return array;
+    }
+    if (typeof globalThis.atob === "function") {
+        const binary = globalThis.atob(base64);
+        const length = binary.length;
+        const bytes = new Uint8Array(length);
+        for (let index = 0; index < length; index += 1) {
+            bytes[index] = binary.charCodeAt(index);
+        }
+        return bytes.buffer;
+    }
+    throw new Error("Base64 decoding not supported in this environment");
+}
+function formatIpAddress(bytes) {
+    if (bytes.length === 4) {
+        return Array.from(bytes).join(".");
+    }
+    if (bytes.length === 16) {
+        const hextets = [];
+        for (let index = 0; index < 16; index += 2) {
+            const value = (bytes[index] << 8) | bytes[index + 1];
+            hextets.push(value.toString(16));
+        }
+        return hextets.join(":");
+    }
+    return Array.from(bytes)
+        .map((value) => value.toString(16).padStart(2, "0"))
+        .join("");
+}
+function toUint8Array(source) {
+    if (source instanceof ArrayBuffer) {
+        return new Uint8Array(source);
+    }
+    return new Uint8Array(source.buffer, source.byteOffset, source.byteLength);
+}
+function decodeUtf8(data) {
+    if (typeof TextDecoder !== "undefined") {
+        return new TextDecoder().decode(data);
+    }
+    if (typeof Buffer !== "undefined") {
+        const buffer = Buffer.from(data);
+        return buffer.toString("utf8");
+    }
+    throw new Error("TextDecoder not available in this environment");
+}
+function getExtensionValue(certificate, oid) {
+    const candidate = certificate;
+    if (typeof candidate.getExtension === "function") {
+        const result = candidate.getExtension(oid);
+        const buffer = tryExtractExtensionBuffer(result);
+        if (buffer) {
+            return buffer;
+        }
+    }
+    const { extensions } = candidate;
+    if (extensions) {
+        const iterable = toIterable(extensions);
+        for (const entry of iterable) {
+            const extensionRecord = entry;
+            if (!extensionRecord || extensionRecord.oid !== oid) {
+                continue;
+            }
+            const buffer = tryExtractExtensionBuffer(entry);
+            if (buffer) {
+                return buffer;
+            }
+        }
+    }
+    return null;
+}
+function readOptionalStringProperty(source, key) {
+    const value = source[key];
+    if (typeof value === "string" && value.length > 0) {
+        return value;
+    }
+    return undefined;
+}
+function readOptionalDateProperty(source, key) {
+    const value = source[key];
+    if (value instanceof Date) {
+        return value;
+    }
+    if (typeof value === "number" || typeof value === "string") {
+        const date = new Date(value);
+        if (!Number.isNaN(date.getTime())) {
+            return date;
+        }
+    }
+    return undefined;
+}
+function readValidityDate(candidate) {
+    if (!candidate) {
+        return undefined;
+    }
+    if (candidate instanceof Date) {
+        return candidate;
+    }
+    if (typeof candidate === "object" &&
+        candidate !== null &&
+        candidate) {
+        const timeObject = candidate;
+        if (timeObject.utcTime instanceof Date) {
+            return timeObject.utcTime;
+        }
+        if (timeObject.generalizedTime instanceof Date) {
+            return timeObject.generalizedTime;
+        }
+    }
+    return undefined;
+}
+function formatDistinguishedName(name) {
+    const rdns = Array.from(name);
+    if (rdns.length === 0) {
+        return "";
+    }
+    return rdns
+        .map((rdn) => Array.from(rdn)
+        .map((attribute) => `${oidToLabel(attribute.type)}=${attribute.value.toString()}`)
+        .join("+"))
+        .join(",");
+}
+function oidToLabel(oid) {
+    switch (oid) {
+        case "2.5.4.3":
+            return "CN";
+        case "2.5.4.6":
+            return "C";
+        case "2.5.4.7":
+            return "L";
+        case "2.5.4.8":
+            return "ST";
+        case "2.5.4.10":
+            return "O";
+        case "2.5.4.11":
+            return "OU";
+        default:
+            return oid;
+    }
+}
+function bytesToHex(data) {
+    const view = toUint8Array(data);
+    if (view.length === 0) {
+        return "";
+    }
+    return Array.from(view)
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+function tryExtractExtensionBuffer(source) {
+    if (!source) {
+        return null;
+    }
+    if (isArrayBufferLike(source)) {
+        return cloneArrayBuffer(source);
+    }
+    if (typeof source === "object") {
+        const record = source;
+        const directValue = record.value;
+        if (isArrayBufferLike(directValue)) {
+            return cloneArrayBuffer(directValue);
+        }
+        const asn = record.asn;
+        if (asn) {
+            const extnValue = asn.extnValue;
+            if (isArrayBufferLike(extnValue)) {
+                return cloneArrayBuffer(extnValue);
+            }
+            if (extnValue &&
+                typeof extnValue === "object" &&
+                isArrayBufferLike(extnValue.buffer)) {
+                return cloneArrayBuffer(extnValue.buffer);
+            }
+        }
+    }
+    return null;
+}
+function isArrayBufferLike(value) {
+    return value instanceof ArrayBuffer || ArrayBuffer.isView(value);
+}
+function cloneArrayBuffer(value) {
+    const view = toUint8Array(value);
+    if (view.byteOffset === 0 &&
+        view.byteLength === view.buffer.byteLength &&
+        view.buffer instanceof ArrayBuffer) {
+        return view.buffer;
+    }
+    return view.slice().buffer;
+}
+function toIterable(value) {
+    if (typeof value === "object" && value && Symbol.iterator in value) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value;
+    }
+    return [];
+}
+/**
+ * Client for requesting certificates from a CA signing service.
+ */
+export class CAServiceClient {
+    /**
+     * Create a new CA service client.
+     *
+     * @param connectionGrant - HTTP connection grant with CA service URL
+     * @param timeoutSeconds - Request timeout in seconds (default: 30)
+     */
+    constructor(connectionGrant, timeoutSeconds = 30.0) {
+        this.authHeader = null;
+        if (!connectionGrant || typeof connectionGrant.url !== "string") {
+            throw new Error("connectionGrant must have a valid url property");
+        }
+        this.connectionGrant = connectionGrant;
+        this.timeoutSeconds = timeoutSeconds;
+    }
+    /**
+     * Set the authorization header for outbound requests.
+     *
+     * @param authHeader - Authorization header value (e.g., "Bearer token")
+     */
+    setAuthHeader(authHeader) {
+        this.authHeader = authHeader;
+    }
+    /**
+     * Request a certificate from the CA service.
+     *
+     * @param csrPem - Certificate Signing Request in PEM format
+     * @param requesterId - ID of the node requesting the certificate
+     * @param physicalPath - Physical path for the node (optional)
+     * @param logicals - Logicals the node will serve (optional)
+     * @returns Tuple of [certificatePem, certificateChainPem]
+     * @throws {CertificateRequestError} If the request fails
+     */
+    async requestCertificate(csrPem, requesterId, physicalPath, logicals) {
+        const requestData = {
+            csr_pem: csrPem,
+            requester_id: requesterId,
+            physical_path: physicalPath,
+            logicals: logicals || [],
+        };
+        const url = `${this.connectionGrant.url.replace(/\/$/, "")}/sign`;
+        logger.debug("requesting_certificate", {
+            requester_id: requesterId,
+            ca_service_url: url,
+            physical_path: physicalPath,
+            logicals,
+        });
+        // Prepare headers
+        const headers = {
+            "Content-Type": "application/json",
+        };
+        if (this.authHeader) {
+            headers["Authorization"] = this.authHeader;
+        }
+        try {
+            // Create abort controller for timeout
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), this.timeoutSeconds * 1000);
+            try {
+                const response = await fetch(url, {
+                    method: "POST",
+                    headers,
+                    body: JSON.stringify(requestData),
+                    signal: controller.signal,
+                });
+                clearTimeout(timeoutId);
+                if (response.ok) {
+                    const result = await response.json();
+                    const certificatePem = result.certificate_pem;
+                    const certificateChainPem = result.certificate_chain_pem || certificatePem;
+                    logger.debug("certificate_request_successful", {
+                        requester_id: requesterId,
+                        expires_at: result.expires_at,
+                    });
+                    // Extract and log certificate information with structured logging
+                    const certInfo = extractCertificateInfo(certificatePem);
+                    logger.debug("certificate_details", {
+                        requester_id: requesterId,
+                        certificate_type: "issued_certificate",
+                        ...certInfo,
+                    });
+                    // If we have a separate certificate chain, also log its details
+                    if (certificateChainPem !== certificatePem) {
+                        // Extract individual certificates from the chain
+                        const chainCerts = certificateChainPem
+                            .split("-----END CERTIFICATE-----\n")
+                            .slice(0, -1);
+                        for (let i = 0; i < chainCerts.length; i++) {
+                            const certBlock = chainCerts[i];
+                            if (certBlock && certBlock.trim()) {
+                                const certPemBlock = certBlock + "-----END CERTIFICATE-----\n";
+                                if (i === 0) {
+                                    // First cert in chain is usually the issued certificate
+                                    if (certPemBlock.trim() !== certificatePem.trim()) {
+                                        const chainCertInfo = extractCertificateInfo(certPemBlock);
+                                        logger.debug("certificate_chain_details", {
+                                            requester_id: requesterId,
+                                            certificate_type: "certificate_chain",
+                                            chain_index: i,
+                                            ...chainCertInfo,
+                                        });
+                                    }
+                                }
+                                else {
+                                    // Subsequent certs are intermediate/root CAs
+                                    const caCertInfo = extractCertificateInfo(certPemBlock);
+                                    logger.debug("certificate_chain_details", {
+                                        requester_id: requesterId,
+                                        certificate_type: "ca_certificate",
+                                        chain_index: i,
+                                        ...caCertInfo,
+                                    });
+                                }
+                            }
+                        }
+                    }
+                    return [certificatePem, certificateChainPem];
+                }
+                else {
+                    let errorDetail = "Unknown error";
+                    try {
+                        const bodyText = await response.text();
+                        try {
+                            const errorData = JSON.parse(bodyText);
+                            errorDetail = errorData.detail || bodyText;
+                        }
+                        catch {
+                            errorDetail = bodyText;
+                        }
+                    }
+                    catch {
+                        // Body read failed entirely
+                        errorDetail = `HTTP ${response.status}`;
+                    }
+                    logger.error("certificate_request_failed", {
+                        requester_id: requesterId,
+                        status_code: response.status,
+                        error: errorDetail,
+                    });
+                    throw new CertificateRequestError(`Certificate request failed (HTTP ${response.status}): ${errorDetail}`);
+                }
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+        }
+        catch (error) {
+            if (error instanceof CertificateRequestError) {
+                throw error;
+            }
+            if (error instanceof Error && error.name === "AbortError") {
+                logger.error("certificate_request_timeout", {
+                    requester_id: requesterId,
+                    timeout_seconds: this.timeoutSeconds,
+                });
+                throw new CertificateRequestError(`Certificate request timed out after ${this.timeoutSeconds} seconds`);
+            }
+            logger.error("certificate_request_network_error", {
+                requester_id: requesterId,
+                error: String(error),
+            });
+            throw new CertificateRequestError(`Network error requesting certificate: ${error}`);
+        }
+    }
+}
+//# sourceMappingURL=ca-service-client.js.map

package/dist/cjs/naylence/fame/security/cert/ca-service-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca-service-client.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAQ,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAExE,+DAA+D;AAC/D,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,CAAC,MAAc,EAAE,KAA+B,EAAE,EAAE;QACzD,yCAAyC;IAC3C,CAAC;IACD,KAAK,EAAE,CAAC,MAAc,EAAE,KAA+B,EAAE,EAAE;QACzD,OAAO,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAwBjE;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,iBAAiB,GAAG,WAAiD,CAAC;QAC5E,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAEjE,MAAM,OAAO,GACX,0BAA0B,CAAC,iBAAiB,EAAE,SAAS,CAAC;YACxD,uBAAuB,CAAC,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GACV,0BAA0B,CAAC,iBAAiB,EAAE,QAAQ,CAAC;YACvD,uBAAuB,CAAC,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,YAAY,GAChB,0BAA0B,CAAC,iBAAiB,EAAE,cAAc,CAAC;YAC7D,UAAU,CAAC,iBAAiB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC5D,MAAM,aAAa,GACjB,wBAAwB,CAAC,iBAAiB,EAAE,WAAW,CAAC;YACxD,gBAAgB,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,cAAc,GAClB,wBAAwB,CAAC,iBAAiB,EAAE,UAAU,CAAC;YACvD,gBAAgB,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvE,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAoB;YAC5B,OAAO;YACP,MAAM;YACN,YAAY;YACZ,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,cAAc,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,GAAG,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;YACxD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACpE,MAAM,gBAAgB,GAAG,cAAc,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,YAAY,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,WAAW,IAAI,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,WAAsC,CAAC;gBACpD,IAAI,OAAO,IAAI,CAAC,yBAAyB,KAAK,QAAQ,EAAE,CAAC;oBACvD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAChD,CAAC;qBAAM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;qBAAM,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,YAAY,WAAW,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAA4B,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CACX,eAAe,CACb,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAC9D,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC;gBACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvE,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,eAAe,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAC/D,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAChG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,WAAmB,aAAa;IAEhC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,QAAQ,qBAAqB,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,OAAO,QAAQ,kBAAkB;QACjC,YAAY,IAAI,CAAC,OAAO,EAAE;QAC1B,WAAW,IAAI,CAAC,MAAM,EAAE;QACxB,kBAAkB,IAAI,CAAC,YAAY,EAAE;QACrC,eAAe,IAAI,CAAC,SAAS,EAAE;QAC/B,gBAAgB,IAAI,CAAC,UAAU,EAAE;KAClC,CAAC;IAEF,IAAI,IAAI,CAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,8BAA8B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,IACE,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;YACzC,IAAI,CAAC,gBAAgB,GAAG,CAAC;YACzB,MAAM,CAAC,MAAM,KAAK,CAAC,EACnB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,UAAU,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CACrB,8DAA8D,CAC/D,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,MAAM,GAAG,GAAG;SACf,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;SAC3C,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/B,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CACtC,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACnD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAqC;IACzD,IAAI,MAAM,YAAY,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB;IACnC,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;QACvC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CACxB,WAA4B,EAC5B,GAAW;IAEX,MAAM,SAAS,GAAG,WAGjB,CAAC;IAEF,IAAI,OAAO,SAAS,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;IACjC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,eAAe,GAAG,KAA4C,CAAC;YACrE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA+B,EAC/B,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA+B,EAC/B,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAkB;IAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,YAAY,IAAI,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,KAAK,IAAI;QACjB,SAA8D,EAC/D,CAAC;QACD,MAAM,UAAU,GAAG,SAGlB,CAAC;QACF,IAAI,UAAU,CAAC,OAAO,YAAY,IAAI,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,eAAe,YAAY,IAAI,EAAE,CAAC;YAC/C,OAAO,UAAU,CAAC,eAAe,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAU;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAC9D;SACA,IAAI,CAAC,GAAG,CAAC,CACb;SACA,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;QACb,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAmC;IACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAe;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QACjC,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAA0C,CAAC;QAC9D,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,SAAS,GAAG,GAAG,CAAC,SAAoB,CAAC;YAC3C,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YACD,IACE,SAAS;gBACT,OAAO,SAAS,KAAK,QAAQ;gBAC7B,iBAAiB,CAAE,SAAqC,CAAC,MAAM,CAAC,EAChE,CAAC;gBACD,OAAO,gBAAgB,CACpB,SAAqC,CAAC,MAAqB,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IACE,IAAI,CAAC,UAAU,KAAK,CAAC;QACrB,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;QAC1C,IAAI,CAAC,MAAM,YAAY,WAAW,EAClC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC;QACnE,OAAO,KAA0B,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IAK1B;;;;;OAKG;IACH,YACE,eAAoC,EACpC,iBAAyB,IAAI;QAVvB,eAAU,GAAkB,IAAI,CAAC;QAYvC,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,WAAmB,EACnB,YAAqB,EACrB,QAAmB;QAEnB,MAAM,WAAW,GAAG;YAClB,OAAO,EAAE,MAAM;YACf,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,YAAY;YAC3B,QAAQ,EAAE,QAAQ,IAAI,EAAE;SACzB,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;QAElE,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YACrC,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,GAAG;YACnB,aAAa,EAAE,YAAY;YAC3B,QAAQ;SACT,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAC1B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAC3B,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACrC,MAAM,cAAc,GAAW,MAAM,CAAC,eAAe,CAAC;oBACtD,MAAM,mBAAmB,GACvB,MAAM,CAAC,qBAAqB,IAAI,cAAc,CAAC;oBAEjD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;wBAC7C,YAAY,EAAE,WAAW;wBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;qBAC9B,CAAC,CAAC;oBAEH,kEAAkE;oBAClE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;oBACxD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;wBAClC,YAAY,EAAE,WAAW;wBACzB,gBAAgB,EAAE,oBAAoB;wBACtC,GAAG,QAAQ;qBACZ,CAAC,CAAC;oBAEH,gEAAgE;oBAChE,IAAI,mBAAmB,KAAK,cAAc,EAAE,CAAC;wBAC3C,iDAAiD;wBACjD,MAAM,UAAU,GAAG,mBAAmB;6BACnC,KAAK,CAAC,6BAA6B,CAAC;6BACpC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;4BAChC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gCAClC,MAAM,YAAY,GAAG,SAAS,GAAG,6BAA6B,CAAC;gCAE/D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oCACZ,wDAAwD;oCACxD,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;wCAClD,MAAM,aAAa,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;wCAC3D,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;4CACxC,YAAY,EAAE,WAAW;4CACzB,gBAAgB,EAAE,mBAAmB;4CACrC,WAAW,EAAE,CAAC;4CACd,GAAG,aAAa;yCACjB,CAAC,CAAC;oCACL,CAAC;gCACH,CAAC;qCAAM,CAAC;oCACN,6CAA6C;oCAC7C,MAAM,UAAU,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;oCACxD,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;wCACxC,YAAY,EAAE,WAAW;wCACzB,gBAAgB,EAAE,gBAAgB;wCAClC,WAAW,EAAE,CAAC;wCACd,GAAG,UAAU;qCACd,CAAC,CAAC;gCACL,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,IAAI,WAAW,GAAG,eAAe,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACvC,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BACvC,WAAW,GAAG,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC;wBAC7C,CAAC;wBAAC,MAAM,CAAC;4BACP,WAAW,GAAG,QAAQ,CAAC;wBACzB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,4BAA4B;wBAC5B,WAAW,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC1C,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wBACzC,YAAY,EAAE,WAAW;wBACzB,WAAW,EAAE,QAAQ,CAAC,MAAM;wBAC5B,KAAK,EAAE,WAAW;qBACnB,CAAC,CAAC;oBAEH,MAAM,IAAI,uBAAuB,CAC/B,oCAAoC,QAAQ,CAAC,MAAM,MAAM,WAAW,EAAE,CACvE,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;oBAC1C,YAAY,EAAE,WAAW;oBACzB,eAAe,EAAE,IAAI,CAAC,cAAc;iBACrC,CAAC,CAAC;gBACH,MAAM,IAAI,uBAAuB,CAC/B,uCAAuC,IAAI,CAAC,cAAc,UAAU,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,uBAAuB,CAC/B,yCAAyC,KAAK,EAAE,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/cjs/naylence/fame/security/cert/ca-service-factory.js

@@ -0,0 +1,61 @@
+/**
+ * Factory pattern for creating CA service instances.
+ *
+ * Provides a unified way to create CAService implementations from configuration.
+ */
+import { AbstractResourceFactory, createDefaultResource, createResource, } from "@naylence/factory";
+/**
+ * Factory for creating CAService instances.
+ *
+ * Supports multiple CAService implementations through the factory pattern.
+ */
+export class CAServiceFactory extends AbstractResourceFactory {
+    /**
+     * Create a CAService instance from configuration.
+     *
+     * @param config - Optional CAService configuration or dictionary
+     * @param options - Additional creation options
+     * @returns Configured CAService instance
+     */
+    static async createCAService(config, options) {
+        if (!config) {
+            // Use default CA service
+            const service = await createDefaultResource("CAServiceFactory", config, options);
+            if (!service) {
+                throw new Error("No default CA service factory registered");
+            }
+            return service;
+        }
+        if (typeof config === "object" && !("type" in config)) {
+            // No type specified, use default
+            const service = await createDefaultResource("CAServiceFactory", config, options);
+            if (!service) {
+                throw new Error("No default CA service factory registered");
+            }
+            return service;
+        }
+        // Create from specific type
+        const configObj = config instanceof Object && "type" in config
+            ? config
+            : { type: "CAService", ...config };
+        const service = await createResource("CAServiceFactory", configObj, options);
+        if (!service) {
+            throw new Error(`Failed to create CA service of type "${configObj.type}"`);
+        }
+        return service;
+    }
+}
+/**
+ * Base type for CA service factories.
+ */
+export const CA_SERVICE_FACTORY_BASE_TYPE = "CAServiceFactory";
+/**
+ * Factory metadata for CAServiceFactory.
+ */
+export const FACTORY_META = {
+    factoryId: "CAServiceFactory",
+    factoryType: CAServiceFactory,
+    resourceType: "CAService",
+    description: "Factory for creating Certificate Authority (CA) service instances",
+};
+//# sourceMappingURL=ca-service-factory.js.map