@project-chip/matter.js 0.2.1 → 0.4.0

package/dist/es/certificate/CertificateManager.js

@@ -0,0 +1,333 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { AuthorityKeyIdentifier_X509, BasicConstraints_X509, BitByteArray, BYTES_KEY, ContextTagged, ContextTaggedBytes, DerCodec, DerObject, EcdsaWithSHA256_X962, ELEMENTS_KEY, ExtendedKeyUsage_X509, KeyUsage_Signature_ContentCommited_X509, KeyUsage_Signature_X509, OBJECT_ID_KEY, OrganisationName_X520, Pkcs7Data, Pkcs7SignedData, PublicKeyEcPrime256v1_X962, SHA256_CMS, SubjectKeyIdentifier_X509 } from "../codec/DerCodec.js";
+import { Crypto } from "../crypto/Crypto.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { TlvNodeId } from "../datatype/NodeId.js";
+import { TlvVendorId } from "../datatype/VendorId.js";
+import { TlvField, TlvList, TlvObject, TlvOptionalField } from "../tlv/TlvObject.js";
+import { TlvByteString, TlvString } from "../tlv/TlvString.js";
+import { TlvUInt16, TlvUInt32, TlvUInt64, TlvUInt8 } from "../tlv/TlvNumber.js";
+import { TlvArray } from "../tlv/TlvArray.js";
+import { TlvBoolean } from "../tlv/TlvBoolean.js";
+const YEAR_S = 365 * 24 * 60 * 60;
+const EPOCH_OFFSET_S = 10957 * 24 * 60 * 60;
+// TODO replace usage of Date by abstraction
+export function matterToJsDate(date) {
+    return new Date((date + EPOCH_OFFSET_S) * 1000);
+}
+export function jsToMatterDate(date, addYears = 0) {
+    return Math.floor(date.getTime() / 1000) - EPOCH_OFFSET_S + addYears * YEAR_S;
+}
+function intTo16Chars(value) {
+    const byteArray = new ByteArray(8);
+    const dataView = byteArray.getDataView();
+    dataView.setBigUint64(0, typeof value === "bigint" ? value : BigInt(value));
+    return byteArray.toHex().toUpperCase();
+}
+function uInt16To4Chars(value) {
+    const byteArray = new ByteArray(2);
+    const dataView = byteArray.getDataView();
+    dataView.setUint16(0, value);
+    return byteArray.toHex().toUpperCase();
+}
+/** commonName = ASN.1 OID 2.5.4.3 */
+export const CommonName_X520 = (name) => [DerObject("550403", { value: name })];
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export const NodeId_Matter = (nodeId) => [DerObject("2b0601040182a27c0101", { value: intTo16Chars(nodeId.id) })];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export const RcacId_Matter = (id) => [DerObject("2b0601040182a27c0104", { value: intTo16Chars(id) })];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export const FabricId_Matter = (id) => [DerObject("2b0601040182a27c0105", { value: intTo16Chars(id) })];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export const VendorId_Matter = (vendorId) => [DerObject("2b0601040182a27c0201", { value: uInt16To4Chars(vendorId.id) })];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.3724 4.2.2 */
+export const ProductId_Matter = (id) => [DerObject("2b0601040182a27c0202", { value: uInt16To4Chars(id) })];
+export const TlvRootCertificate = TlvObject({
+    serialNumber: TlvField(1, TlvByteString.bound({ maxLength: 20 })),
+    signatureAlgorithm: TlvField(2, TlvUInt8),
+    issuer: TlvField(3, TlvList({
+        issuerRcacId: TlvOptionalField(20, TlvUInt64),
+    })),
+    notBefore: TlvField(4, TlvUInt32),
+    notAfter: TlvField(5, TlvUInt32),
+    subject: TlvField(6, TlvList({
+        rcacId: TlvField(20, TlvUInt64),
+    })),
+    publicKeyAlgorithm: TlvField(7, TlvUInt8),
+    ellipticCurveIdentifier: TlvField(8, TlvUInt8),
+    ellipticCurvePublicKey: TlvField(9, TlvByteString),
+    extensions: TlvField(10, TlvList({
+        basicConstraints: TlvField(1, TlvObject({
+            isCa: TlvField(1, TlvBoolean),
+            pathLen: TlvOptionalField(2, TlvUInt8),
+        })),
+        keyUsage: TlvField(2, TlvUInt16),
+        extendedKeyUsage: TlvOptionalField(3, TlvArray(TlvUInt8)),
+        subjectKeyIdentifier: TlvField(4, TlvByteString.bound({ length: 20 })),
+        authorityKeyIdentifier: TlvField(5, TlvByteString.bound({ length: 20 })),
+        futureExtension: TlvOptionalField(6, TlvByteString),
+    })),
+    signature: TlvField(11, TlvByteString),
+});
+export const TlvOperationalCertificate = TlvObject({
+    serialNumber: TlvField(1, TlvByteString.bound({ maxLength: 20 })),
+    signatureAlgorithm: TlvField(2, TlvUInt8),
+    issuer: TlvField(3, TlvList({
+        issuerRcacId: TlvOptionalField(20, TlvUInt64),
+    })),
+    notBefore: TlvField(4, TlvUInt32),
+    notAfter: TlvField(5, TlvUInt32),
+    subject: TlvField(6, TlvList({
+        fabricId: TlvField(21, TlvUInt64),
+        nodeId: TlvField(17, TlvNodeId),
+    })),
+    publicKeyAlgorithm: TlvField(7, TlvUInt8),
+    ellipticCurveIdentifier: TlvField(8, TlvUInt8),
+    ellipticCurvePublicKey: TlvField(9, TlvByteString),
+    extensions: TlvField(10, TlvList({
+        basicConstraints: TlvField(1, TlvObject({
+            isCa: TlvField(1, TlvBoolean),
+            pathLen: TlvOptionalField(2, TlvUInt8),
+        })),
+        keyUsage: TlvField(2, TlvUInt16),
+        extendedKeyUsage: TlvOptionalField(3, TlvArray(TlvUInt8)),
+        subjectKeyIdentifier: TlvField(4, TlvByteString.bound({ length: 20 })),
+        authorityKeyIdentifier: TlvField(5, TlvByteString.bound({ length: 20 })),
+        futureExtension: TlvOptionalField(6, TlvByteString),
+    })),
+    signature: TlvField(11, TlvByteString),
+});
+export const TlvCertificationDeclaration = TlvObject({
+    formatVersion: TlvField(0, TlvUInt16),
+    vendorId: TlvField(1, TlvVendorId),
+    produceIdArray: TlvField(2, TlvArray(TlvUInt16, { minLength: 1, maxLength: 100 })),
+    deviceTypeId: TlvField(3, TlvUInt32),
+    certificateId: TlvField(4, TlvString.bound({ length: 19 })),
+    securityLevel: TlvField(5, TlvUInt8),
+    securityInformation: TlvField(6, TlvUInt16),
+    versionNumber: TlvField(7, TlvUInt16),
+    certificationType: TlvField(8, TlvUInt8),
+    dacOriginVendorId: TlvOptionalField(9, TlvVendorId),
+    dacOriginProductId: TlvOptionalField(10, TlvUInt16),
+    authorizedPaaList: TlvOptionalField(11, TlvArray(TlvByteString.bound({ length: 20 }), { minLength: 1, maxLength: 10 })),
+});
+export class CertificateManager {
+    static rootCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { rcacId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }) {
+        return DerCodec.encode({
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                issuerRcacId: issuerRcacId === undefined ? undefined : RcacId_Matter(issuerRcacId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                rcacId: RcacId_Matter(rcacId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({ isCa: true }),
+                keyUsage: KeyUsage_Signature_ContentCommited_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        });
+    }
+    static nocCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { fabricId, nodeId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }) {
+        return DerCodec.encode({
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                issuerRcacId: issuerRcacId === undefined ? undefined : RcacId_Matter(issuerRcacId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                fabricId: FabricId_Matter(fabricId),
+                nodeId: NodeId_Matter(nodeId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({}),
+                keyUsage: KeyUsage_Signature_X509,
+                extendedKeyUsage: ExtendedKeyUsage_X509({ serverAuth: true, clientAuth: true }),
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        });
+    }
+    static daCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName: subjectCommonName, vendorId: subjectVendorId, productId: subjectProductId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }, keys) {
+        const certificate = {
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                commonName: CommonName_X520(issuerCommonName),
+                vendorId: VendorId_Matter(issuerVendorId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                commonName: CommonName_X520(subjectCommonName),
+                vendorId: VendorId_Matter(subjectVendorId),
+                productId: ProductId_Matter(subjectProductId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({
+                    isCa: false,
+                }),
+                keyUsage: KeyUsage_Signature_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        };
+        return DerCodec.encode({
+            certificate,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(certificate), "der")),
+        });
+    }
+    static paiCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId, productId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }, keys) {
+        const certificate = {
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                commonName: CommonName_X520(issuerCommonName),
+                vendorId: issuerVendorId === undefined ? undefined : VendorId_Matter(issuerVendorId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                commonName: CommonName_X520(commonName),
+                vendorId: VendorId_Matter(vendorId),
+                productId: productId === undefined ? undefined : ProductId_Matter(productId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({
+                    isCa: true,
+                    pathLen: 0,
+                }),
+                keyUsage: KeyUsage_Signature_ContentCommited_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        };
+        return DerCodec.encode({
+            certificate,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(certificate), "der")),
+        });
+    }
+    static paaCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }, keys) {
+        const certificate = {
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                commonName: CommonName_X520(issuerCommonName),
+                vendorId: issuerVendorId === undefined ? undefined : VendorId_Matter(issuerVendorId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                commonName: CommonName_X520(commonName),
+                vendorId: vendorId === undefined ? undefined : VendorId_Matter(vendorId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({
+                    isCa: false,
+                }),
+                keyUsage: KeyUsage_Signature_ContentCommited_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: authorityKeyIdentifier === undefined ? undefined : AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        };
+        return DerCodec.encode({
+            certificate,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(certificate), "der")),
+        });
+    }
+    static CertificationDeclarationToAsn1(eContent, subjectKeyIdentifier, privateKey) {
+        const certificate = {
+            version: 3,
+            digestAlgorithm: [SHA256_CMS],
+            encapContentInfo: Pkcs7Data(eContent),
+            signerInfo: [{
+                    version: 3,
+                    subjectKeyIdentifier: ContextTaggedBytes(0, subjectKeyIdentifier),
+                    digestAlgorithm: SHA256_CMS,
+                    signatureAlgorithm: EcdsaWithSHA256_X962,
+                    signature: Crypto.signSec1(privateKey, eContent, "der")
+                }]
+        };
+        return DerCodec.encode(Pkcs7SignedData(certificate));
+    }
+    static validateRootCertificate(rootCert) {
+        Crypto.verifySpki(rootCert.ellipticCurvePublicKey, this.rootCertToAsn1(rootCert), rootCert.signature);
+    }
+    static validateNocCertificate(rootCert, nocCert) {
+        Crypto.verifySpki(rootCert.ellipticCurvePublicKey, this.nocCertToAsn1(nocCert), nocCert.signature);
+    }
+    static createCertificateSigningRequest(keys) {
+        const request = {
+            version: 0,
+            subject: { organization: OrganisationName_X520("CSR") },
+            publicKey: PublicKeyEcPrime256v1_X962(keys.publicKey),
+            endSignedBytes: ContextTagged(0),
+        };
+        return DerCodec.encode({
+            request,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(request), "der")),
+        });
+    }
+    static getPublicKeyFromCsr(csr) {
+        var _a, _b;
+        const { [ELEMENTS_KEY]: rootElements } = DerCodec.decode(csr);
+        if ((rootElements === null || rootElements === void 0 ? void 0 : rootElements.length) !== 3)
+            throw new Error("Invalid CSR data");
+        const [requestNode, signAlgorithmNode, signatureNode] = rootElements;
+        // Extract the public key
+        const { [ELEMENTS_KEY]: requestElements } = requestNode;
+        if ((requestElements === null || requestElements === void 0 ? void 0 : requestElements.length) !== 4)
+            throw new Error("Invalid CSR data");
+        const [versionNode, _subjectNode, publicKeyNode] = requestElements;
+        const requestVersion = versionNode[BYTES_KEY][0];
+        if (requestVersion !== 0)
+            throw new Error(`Unsupported request version${requestVersion}`);
+        // TODO: verify subject = { OrganisationName: "CSR" }
+        const { [ELEMENTS_KEY]: publicKeyElements } = publicKeyNode;
+        if ((publicKeyElements === null || publicKeyElements === void 0 ? void 0 : publicKeyElements.length) !== 2)
+            throw new Error("Invalid CSR data");
+        const [_publicKeyTypeNode, publicKeyBytesNode] = publicKeyElements;
+        // TODO: verify publicKey algorithm
+        const publicKey = publicKeyBytesNode[BYTES_KEY];
+        // Verify the CSR signature
+        if (!EcdsaWithSHA256_X962[OBJECT_ID_KEY][BYTES_KEY].equals((_b = (_a = signAlgorithmNode[ELEMENTS_KEY]) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b[BYTES_KEY]))
+            throw new Error("Unsupported signature type");
+        Crypto.verifySpki(publicKey, DerCodec.encode(requestNode), signatureNode[BYTES_KEY], "der");
+        return publicKey;
+    }
+}
+//# sourceMappingURL=CertificateManager.js.map

package/dist/es/certificate/CertificateManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateManager.js","sourceRoot":"","sources":["../../../src/certificate/CertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACH,2BAA2B,EAAE,qBAAqB,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAC9G,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAC9E,uCAAuC,EAAE,uBAAuB,EAAE,aAAa,EAAE,qBAAqB,EAAE,SAAS,EACjH,eAAe,EAAE,0BAA0B,EAAE,UAAU,EAAE,yBAAyB,EACrF,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAW,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAU,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAY,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAMlD,MAAM,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE5C,4CAA4C;AAE5C,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAU,EAAE,QAAQ,GAAG,CAAC;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,cAAc,GAAG,QAAQ,GAAG,MAAM,CAAC;AAClF,CAAC;AAED,SAAS,YAAY,CAAC,KAAsB;IACxC,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACjC,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAExF,uDAAuD;AACvD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEzH,uDAAuD;AACvD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAmB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEvH,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAmB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEzH,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,QAAkB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnI,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnH,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACxC,YAAY,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IACzC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC;KAChD,CAAC,CAAC;IACH,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IAChC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;QACzB,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;KAClC,CAAC,CAAC;IACH,kBAAkB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IACzC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IAC9C,sBAAsB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;IAClD,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;QAC7B,gBAAgB,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;YACpC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC;YAC7B,OAAO,EAAE,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC;SACzC,CAAC,CAAC;QACH,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;QAChC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzD,oBAAoB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,sBAAsB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,eAAe,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC;KACtD,CAAC,CAAC;IACH,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;IAC/C,YAAY,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IACzC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC;KAChD,CAAC,CAAC;IACH,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IAChC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;QACzB,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;QACjC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;KAClC,CAAC,CAAC;IACH,kBAAkB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IACzC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IAC9C,sBAAsB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;IAClD,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;QAC7B,gBAAgB,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;YACpC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC;YAC7B,OAAO,EAAE,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC;SACzC,CAAC,CAAC;QACH,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;QAChC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzD,oBAAoB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,sBAAsB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,eAAe,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC;KACtD,CAAC,CAAC;IACH,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;CACzC,CAAC,CAAC;AA+FH,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC;IACjD,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACrC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC;IAClC,cAAc,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,YAAY,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACpC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IACpC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IAC3C,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACrC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;IACxC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC;IACnD,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC;IACnD,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;CAC1H,CAAC,CAAC;AAMH,MAAM,OAAO,kBAAkB;IAC3B,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAA6B;QACvN,OAAO,QAAQ,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7B,kBAAkB,EAAE,oBAAoB;YACxC,MAAM,EAAE;gBACJ,YAAY,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC;aACrF;YACD,QAAQ,EAAE;gBACN,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;aACrC;YACD,OAAO,EAAE;gBACL,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAChC;YACD,SAAS,EAAE,0BAA0B,CAAC,sBAAsB,CAAC;YAC7D,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE;gBACzB,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACvD,QAAQ,EAAE,uCAAuC;gBACjD,oBAAoB,EAAE,yBAAyB,CAAC,oBAAoB,CAAC;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,sBAAsB,CAAC;aAC9E,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAoC;QACvO,OAAO,QAAQ,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7B,kBAAkB,EAAE,oBAAoB;YACxC,MAAM,EAAE;gBACJ,YAAY,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC;aACrF;YACD,QAAQ,EAAE;gBACN,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;aACrC;YACD,OAAO,EAAE;gBACL,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;gBACnC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAChC;YACD,SAAS,EAAE,0BAA0B,CAAC,sBAAsB,CAAC;YAC7D,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE;gBACzB,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,CAAC;gBAC3C,QAAQ,EAAE,uBAAuB;gBACjC,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC/E,oBAAoB,EAAE,yBAAyB,CAAC,oBAAoB,CAAC;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,sBAAsB,CAAC;aAC9E,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAA0C,EAAE,IAAa;QAC1W,MAAM,WAAW,GAAG;YAChB,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7B,kBAAkB,EAAE,oBAAoB;YACxC,MAAM,EAAE;gBACJ,UAAU,EAAE,eAAe,CAAC,gBAAgB,CAAC;gBAC7C,QAAQ,EAAE,eAAe,CAAC,cAAc,CAAC;aAC5C;YACD,QAAQ,EAAE;gBACN,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;aACrC;YACD,OAAO,EAAE;gBACL,UAAU,EAAE,eAAe,CAAC,iBAAiB,CAAC;gBAC9C,QAAQ,EAAE,eAAe,CAAC,eAAe,CAAC;gBAC1C,SAAS,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;aAChD;YACD,SAAS,EAAE,0BAA0B,CAAC,sBAAsB,CAAC;YAC7D,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE;gBACzB,gBAAgB,EAAE,qBAAqB,CAAC;oBACpC,IAAI,EAAE,KAAK;iBACd,CAAC;gBACF,QAAQ,EAAE,uBAAuB;gBACjC,oBAAoB,EAAE,yBAAyB,CAAC,oBAAoB,CAAC;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,sBAAsB,CAAC;aAC9E,CAAC;SACL,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,CAAC;YACnB,WAAW;YACX,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;SAClG,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAuD,EAAE,IAAa;QAClU,MAAM,WAAW,GAAG;YAChB,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7B,kBAAkB,EAAE,oBAAoB;YACxC,MAAM,EAAE;gBACJ,UAAU,EAAE,eAAe,CAAC,gBAAgB,CAAC;gBAC7C,QAAQ,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC;aACvF;YACD,QAAQ,EAAE;gBACN,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;aACrC;YACD,OAAO,EAAE;gBACL,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC;gBACvC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;gBACnC,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC;aAC/E;YACD,SAAS,EAAE,0BAA0B,CAAC,sBAAsB,CAAC;YAC7D,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE;gBACzB,gBAAgB,EAAE,qBAAqB,CAAC;oBACpC,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,CAAC;iBACb,CAAC;gBACF,QAAQ,EAAE,uCAAuC;gBACjD,oBAAoB,EAAE,yBAAyB,CAAC,oBAAoB,CAAC;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,sBAAsB,CAAC;aAC9E,CAAC;SACL,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,CAAC;YACnB,WAAW;YACX,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;SAClG,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAoD,EAAE,IAAa;QACpT,MAAM,WAAW,GAAG;YAChB,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7B,kBAAkB,EAAE,oBAAoB;YACxC,MAAM,EAAE;gBACJ,UAAU,EAAE,eAAe,CAAC,gBAAgB,CAAC;gBAC7C,QAAQ,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC;aACvF;YACD,QAAQ,EAAE;gBACN,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;aACrC;YACD,OAAO,EAAE;gBACL,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC;gBACvC,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;aAC3E;YACD,SAAS,EAAE,0BAA0B,CAAC,sBAAsB,CAAC;YAC7D,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE;gBACzB,gBAAgB,EAAE,qBAAqB,CAAC;oBACpC,IAAI,EAAE,KAAK;iBACd,CAAC;gBACF,QAAQ,EAAE,uCAAuC;gBACjD,oBAAoB,EAAE,yBAAyB,CAAC,oBAAoB,CAAC;gBACrE,sBAAsB,EAAE,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,sBAAsB,CAAC;aACjI,CAAC;SACL,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,CAAC;YACnB,WAAW;YACX,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;SAClG,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,8BAA8B,CAAC,QAAmB,EAAE,oBAA+B,EAAE,UAAqB;QAC7G,MAAM,WAAW,GAAG;YAChB,OAAO,EAAE,CAAC;YACV,eAAe,EAAE,CAAC,UAAU,CAAC;YAC7B,gBAAgB,EAAE,SAAS,CAAC,QAAQ,CAAC;YACrC,UAAU,EAAE,CAAC;oBACT,OAAO,EAAE,CAAC;oBACV,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,EAAE,oBAAoB,CAAC;oBACjE,eAAe,EAAE,UAAU;oBAC3B,kBAAkB,EAAE,oBAAoB;oBACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC;iBAC1D,CAAC;SACL,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,uBAAuB,CAAC,QAAyB;QACpD,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,CAAC,sBAAsB,CAAC,QAAyB,EAAE,OAA+B;QACpF,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,CAAC,+BAA+B,CAAC,IAAa;QAChD,MAAM,OAAO,GAAG;YACZ,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,EAAE,YAAY,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE;YACvD,SAAS,EAAE,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;YACrD,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;SACnC,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,CAAC;YACnB,OAAO;YACP,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;SAC9F,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,GAAc;;QACrC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,MAAM,MAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAC,GAAG,YAAY,CAAC;QAErE,yBAAyB;QACzB,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,GAAG,WAAW,CAAC;QACxD,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,MAAM,MAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,GAAG,eAAe,CAAC;QACnE,MAAM,cAAc,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,cAAc,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,EAAE,CAAC,CAAC;QAC1F,qDAAqD;QAErD,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,iBAAiB,EAAE,GAAG,aAAa,CAAC;QAC5D,IAAI,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,MAAM,MAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;QACnE,mCAAmC;QACnC,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAEhD,2BAA2B;QAC3B,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAA,MAAA,iBAAiB,CAAC,YAAY,CAAC,0CAAG,CAAC,CAAC,0CAAG,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC7J,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QAE5F,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ"}

package/dist/es/certificate/CertificationDeclarationManager.d.ts

@@ -0,0 +1,5 @@
+import { VendorId } from "../datatype/VendorId.js";
+export declare class CertificationDeclarationManager {
+    static generate(vendorId: VendorId, productId: number): Uint8Array;
+}
+//# sourceMappingURL=CertificationDeclarationManager.d.ts.map

package/dist/es/certificate/CertificationDeclarationManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificationDeclarationManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/CertificationDeclarationManager.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAQnD,qBAAa,+BAA+B;IACxC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;CAexD"}

package/dist/es/certificate/CertificationDeclarationManager.js

@@ -0,0 +1,27 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CertificateManager, TlvCertificationDeclaration } from "./CertificateManager.js";
+import { ByteArray } from "../util/ByteArray.js";
+// CD Signer Certificate and Key taken from Chip-Tool repository
+const TestCMS_SignerPrivateKey = ByteArray.fromHex("30770201010420aef3484116e9481ec57be0472df41bf499064e5024ad869eca5e889802d48075a00a06082a8648ce3d030107a144034200043c398922452b55caf389c25bd1bca4656952ccb90e8869249ad8474653014cbf95d687965e036b521c51037e6b8cedefca1eb44046694fa08882eed6519decba");
+const TestCMS_SignerSubjectKeyIdentifier = ByteArray.fromHex("62FA823359ACFAA9963E1CFA140ADDF504F37160");
+export class CertificationDeclarationManager {
+    static generate(vendorId, productId) {
+        const certificationElements = TlvCertificationDeclaration.encode({
+            formatVersion: 1,
+            vendorId,
+            produceIdArray: [productId],
+            deviceTypeId: 22,
+            certificateId: "CSA00000SWC00000-00",
+            securityLevel: 0,
+            securityInformation: 0,
+            versionNumber: 1,
+            certificationType: 0,
+        });
+        return CertificateManager.CertificationDeclarationToAsn1(certificationElements, TestCMS_SignerSubjectKeyIdentifier, TestCMS_SignerPrivateKey);
+    }
+}
+//# sourceMappingURL=CertificationDeclarationManager.js.map

package/dist/es/certificate/CertificationDeclarationManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificationDeclarationManager.js","sourceRoot":"","sources":["../../../src/certificate/CertificationDeclarationManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,gEAAgE;AAEhE,MAAM,wBAAwB,GAAG,SAAS,CAAC,OAAO,CAAC,oPAAoP,CAAC,CAAC;AAEzS,MAAM,kCAAkC,GAAG,SAAS,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;AAEzG,MAAM,OAAO,+BAA+B;IACxC,MAAM,CAAC,QAAQ,CAAC,QAAkB,EAAE,SAAiB;QACjD,MAAM,qBAAqB,GAAG,2BAA2B,CAAC,MAAM,CAAC;YAC7D,aAAa,EAAE,CAAC;YAChB,QAAQ;YACR,cAAc,EAAE,CAAC,SAAS,CAAC;YAC3B,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,qBAAqB;YACpC,aAAa,EAAE,CAAC;YAChB,mBAAmB,EAAE,CAAC;YACtB,aAAa,EAAE,CAAC;YAChB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,OAAO,kBAAkB,CAAC,8BAA8B,CAAC,qBAAqB,EAAE,kCAAkC,EAAE,wBAAwB,CAAC,CAAC;IAClJ,CAAC;CACJ"}

package/dist/es/certificate/ChipPAAuthorities.d.ts

@@ -0,0 +1,9 @@
+export declare const TestCert_PAA_NoVID_PublicKey: Uint8Array;
+export declare const TestCert_PAA_NoVID_PrivateKey: Uint8Array;
+export declare const TestCert_PAA_NoVID_SKID: Uint8Array;
+export declare const TestCert_PAA_NoVID_Cert: Uint8Array;
+export declare const TestCert_PAA_FFF1_PrivateKey: Uint8Array;
+export declare const TestCert_PAA_FFF1_PublicKey: Uint8Array;
+export declare const TestCert_PAA_FFF1_SKID: Uint8Array;
+export declare const TestCert_PAA_FFF1_Cert: Uint8Array;
+//# sourceMappingURL=ChipPAAuthorities.d.ts.map

package/dist/es/certificate/ChipPAAuthorities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChipPAAuthorities.d.ts","sourceRoot":"","sources":["../../../src/certificate/ChipPAAuthorities.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,4BAA4B,YAA0J,CAAC;AACpM,eAAO,MAAM,6BAA6B,YAAwF,CAAC;AACnI,eAAO,MAAM,uBAAuB,YAAgE,CAAC;AACrG,eAAO,MAAM,uBAAuB,YAAk0B,CAAC;AAIv2B,eAAO,MAAM,4BAA4B,YAAwF,CAAC;AAClI,eAAO,MAAM,2BAA2B,YAA0J,CAAC;AACnM,eAAO,MAAM,sBAAsB,YAAgE,CAAC;AACpG,eAAO,MAAM,sBAAsB,YAA05B,CAAC"}

package/dist/es/certificate/ChipPAAuthorities.js

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ByteArray } from "../util/ByteArray.js";
+// from CHIPAttCert_test_vectors.h ...
+// PAA without Vendor ID
+export const TestCert_PAA_NoVID_PublicKey = ByteArray.fromHex("0410ef02a81a87b68121fba8d31978f807a317e50aa8a828446828914b933de8edd4a5c39c9ff71a4ce3647fd7f62653b7d2495fcba4c0f47f876880039e07204a");
+export const TestCert_PAA_NoVID_PrivateKey = ByteArray.fromHex("e1f073c934853baffb38bf7e8bdad7a0a674107c7769892a0ff2e06c1a2ef7a7");
+export const TestCert_PAA_NoVID_SKID = ByteArray.fromHex("785CE705B86B8F4E6FC793AA60CB43EA696882D5");
+export const TestCert_PAA_NoVID_Cert = ByteArray.fromHex("3082019130820137a00302010202070b8fbaa8dd86ee300a06082a8648ce3d040302301a3118301606035504030c0f4d61747465722054657374205041413020170d3231303632383134323334335a180f39393939313233313233353935395a301a3118301606035504030c0f4d61747465722054657374205041413059301306072a8648ce3d020106082a8648ce3d0301070342000410ef02a81a87b68121fba8d31978f807a317e50aa8a828446828914b933de8edd4a5c39c9ff71a4ce3647fd7f62653b7d2495fcba4c0f47f876880039e07204aa366306430120603551d130101ff040830060101ff020101300e0603551d0f0101ff040403020106301d0603551d0e04160414785ce705b86b8f4e6fc793aa60cb43ea696882d5301f0603551d23041830168014785ce705b86b8f4e6fc793aa60cb43ea696882d5300a06082a8648ce3d0403020348003045022100b9efdb3ea06a52ec0bf01e61daed2c2d156ddb6cf014101dab798fac05fa47e5022060061d3e35d60d9d4b0d448dad7612f7e85c582e3fc312dc18794dd373715e5d");
+// PAA with Vendor ID 0xFFF1
+export const TestCert_PAA_FFF1_PrivateKey = ByteArray.fromHex("6512caecaecfc543d60623161597162f014684c565a129b62fd28c27ab1ccc50");
+export const TestCert_PAA_FFF1_PublicKey = ByteArray.fromHex("04b6cb6372887f2928f5bac81aa9d93ae2431cada9d79e242f65177ef9ced932a28ecd03baaf6a8fca184a1a503542960d453f303f1f19421d751e8f8f1a9a9b75");
+export const TestCert_PAA_FFF1_SKID = ByteArray.fromHex("6AFD22771F511FECBF1641976710DCDC31A1717E");
+export const TestCert_PAA_FFF1_Cert = ByteArray.fromHex("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");
+//# sourceMappingURL=ChipPAAuthorities.js.map

package/dist/es/certificate/ChipPAAuthorities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChipPAAuthorities.js","sourceRoot":"","sources":["../../../src/certificate/ChipPAAuthorities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,sCAAsC;AAEtC,wBAAwB;AAExB,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAS,CAAC,OAAO,CAAC,oIAAoI,CAAC,CAAC;AACpM,MAAM,CAAC,MAAM,6BAA6B,GAAG,SAAS,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC;AACnI,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;AACrG,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC,OAAO,CAAC,4yBAA4yB,CAAC,CAAC;AAEv2B,4BAA4B;AAE5B,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAS,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC;AAClI,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC,OAAO,CAAC,oIAAoI,CAAC,CAAC;AACnM,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC,OAAO,CAAC,o4BAAo4B,CAAC,CAAC"}

package/dist/es/certificate/RootCertificateManager.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2022 The node-matter Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+import { StorageManager } from "../storage/StorageManager.js";
+export declare class RootCertificateManager {
+    private rootCertId;
+    private rootKeyPair;
+    private rootKeyIdentifier;
+    private rootCertBytes;
+    private nextCertificateId;
+    constructor(storageManager: StorageManager);
+    getRootCert(): Uint8Array;
+    private generateRootCert;
+    generateNoc(publicKey: ByteArray, fabricId: bigint, nodeId: NodeId): Uint8Array;
+}
+//# sourceMappingURL=RootCertificateManager.d.ts.map

package/dist/es/certificate/RootCertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RootCertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/RootCertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,qBAAa,sBAAsB;IAC/B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,iBAAiB,CAAwD;IACjF,OAAO,CAAC,aAAa,CAA2B;IAChD,OAAO,CAAC,iBAAiB,CAAK;gBAElB,cAAc,EAAE,cAAc;IA8B1C,WAAW;IAIX,OAAO,CAAC,gBAAgB;IAuBxB,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAwBrE"}

package/dist/es/certificate/RootCertificateManager.js

@@ -0,0 +1,95 @@
+/**
+ * @license
+ * Copyright 2022 The node-matter Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CertificateManager, jsToMatterDate, TlvOperationalCertificate, TlvRootCertificate } from "./CertificateManager.js";
+import { Crypto } from "../crypto/Crypto.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { Time } from "../time/Time.js";
+export class RootCertificateManager {
+    constructor(storageManager) {
+        this.rootCertId = BigInt(0);
+        this.rootKeyPair = Crypto.createKeyPair();
+        this.rootKeyIdentifier = Crypto.hash(this.rootKeyPair.publicKey).slice(0, 20);
+        this.rootCertBytes = this.generateRootCert();
+        this.nextCertificateId = 1;
+        const storage = storageManager.createContext("RootCertificateManager");
+        // Read from storage if we have them stored, else store the just generated data
+        if (storage.has("rootCertId")) {
+            try {
+                // Read and set the values from storage,
+                // if one fail we use the pre-generated values, else we overwrite them
+                const rootCertId = storage.get("rootCertId");
+                const rootKeyPair = storage.get("rootKeyPair");
+                const rootKeyIdentifier = storage.get("rootKeyIdentifier");
+                const rootCertBytes = storage.get("rootCertBytes");
+                const nextCertificateId = storage.get("nextCertificateId");
+                this.rootCertId = rootCertId;
+                this.rootKeyPair = rootKeyPair;
+                this.rootKeyIdentifier = rootKeyIdentifier;
+                this.rootCertBytes = rootCertBytes;
+                this.nextCertificateId = nextCertificateId;
+                return;
+            }
+            catch (error) {
+                console.error("Failed to load root certificate from storage, generating new one", error);
+            }
+        }
+        storage.set("rootCertId", this.rootCertId);
+        storage.set("rootKeyPair", this.rootKeyPair);
+        storage.set("rootKeyIdentifier", this.rootKeyIdentifier);
+        storage.set("rootCertBytes", this.rootCertBytes);
+        storage.set("nextCertificateId", this.nextCertificateId);
+    }
+    getRootCert() {
+        return this.rootCertBytes;
+    }
+    generateRootCert() {
+        const now = Time.get().now();
+        const unsignedCertificate = {
+            serialNumber: ByteArray.of(Number(this.rootCertId)),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            issuer: { issuerRcacId: this.rootCertId },
+            notBefore: jsToMatterDate(now, -1),
+            notAfter: jsToMatterDate(now, 10),
+            subject: { rcacId: this.rootCertId },
+            ellipticCurvePublicKey: this.rootKeyPair.publicKey,
+            extensions: {
+                basicConstraints: { isCa: true },
+                keyUsage: 96,
+                subjectKeyIdentifier: this.rootKeyIdentifier,
+                authorityKeyIdentifier: this.rootKeyIdentifier,
+            },
+        };
+        const signature = Crypto.signPkcs8(this.rootKeyPair.privateKey, CertificateManager.rootCertToAsn1(unsignedCertificate));
+        return TlvRootCertificate.encode(Object.assign(Object.assign({}, unsignedCertificate), { signature }));
+    }
+    generateNoc(publicKey, fabricId, nodeId) {
+        const now = Time.get().now();
+        const certId = this.nextCertificateId++;
+        const unsignedCertificate = {
+            serialNumber: ByteArray.of(certId),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            issuer: { issuerRcacId: this.rootCertId },
+            notBefore: jsToMatterDate(now, -1),
+            notAfter: jsToMatterDate(now, 10),
+            subject: { fabricId, nodeId },
+            ellipticCurvePublicKey: publicKey,
+            extensions: {
+                basicConstraints: { isCa: false },
+                keyUsage: 1,
+                extendedKeyUsage: [2, 1],
+                subjectKeyIdentifier: Crypto.hash(publicKey).slice(0, 20),
+                authorityKeyIdentifier: this.rootKeyIdentifier,
+            },
+        };
+        const signature = Crypto.signPkcs8(this.rootKeyPair.privateKey, CertificateManager.nocCertToAsn1(unsignedCertificate));
+        return TlvOperationalCertificate.encode(Object.assign(Object.assign({}, unsignedCertificate), { signature }));
+    }
+}
+//# sourceMappingURL=RootCertificateManager.js.map

package/dist/es/certificate/RootCertificateManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RootCertificateManager.js","sourceRoot":"","sources":["../../../src/certificate/RootCertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC5H,OAAO,EAAE,MAAM,EAAW,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC,MAAM,OAAO,sBAAsB;IAO/B,YAAY,cAA8B;QANlC,eAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,gBAAW,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QACrC,sBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,kBAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxC,sBAAiB,GAAG,CAAC,CAAC;QAG1B,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;QAEvE,+EAA+E;QAC/E,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;YAC3B,IAAI;gBACA,wCAAwC;gBACxC,sEAAsE;gBACtE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAS,YAAY,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAU,aAAa,CAAC,CAAC;gBACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAY,mBAAmB,CAAC,CAAC;gBACtE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAY,eAAe,CAAC,CAAC;gBAC9D,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAS,mBAAmB,CAAC,CAAC;gBACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;gBAC/B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;gBAC3C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;gBACnC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;gBAC3C,OAAO;aACV;YAAC,OAAO,KAAK,EAAE;gBACZ,OAAO,CAAC,KAAK,CAAC,kEAAkE,EAAE,KAAK,CAAC,CAAC;aAC5F;SACJ;QACD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IAED,WAAW;QACP,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAEO,gBAAgB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,mBAAmB,GAAG;YACxB,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,kBAAkB,EAAE,CAAC,CAAC,qBAAqB;YAC3C,kBAAkB,EAAE,CAAC,CAAC,QAAQ;YAC9B,uBAAuB,EAAE,CAAC,CAAC,YAAY;YACvC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE;YACzC,SAAS,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,QAAQ,EAAE,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YACpC,sBAAsB,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;YAClD,UAAU,EAAE;gBACR,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBAChC,QAAQ,EAAE,EAAE;gBACZ,oBAAoB,EAAE,IAAI,CAAC,iBAAiB;gBAC5C,sBAAsB,EAAE,IAAI,CAAC,iBAAiB;aACjD;SACJ,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,kBAAkB,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxH,OAAO,kBAAkB,CAAC,MAAM,iCAAM,mBAAmB,KAAE,SAAS,IAAG,CAAC;IAC5E,CAAC;IAED,WAAW,CAAC,SAAoB,EAAE,QAAgB,EAAE,MAAc;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,mBAAmB,GAAG;YACxB,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC;YAClC,kBAAkB,EAAE,CAAC,CAAC,qBAAqB;YAC3C,kBAAkB,EAAE,CAAC,CAAC,QAAQ;YAC9B,uBAAuB,EAAE,CAAC,CAAC,YAAY;YACvC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE;YACzC,SAAS,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,QAAQ,EAAE,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC7B,sBAAsB,EAAE,SAAS;YACjC,UAAU,EAAE;gBACR,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACjC,QAAQ,EAAE,CAAC;gBACX,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxB,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACzD,sBAAsB,EAAE,IAAI,CAAC,iBAAiB;aACjD;SACJ,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,kBAAkB,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACvH,OAAO,yBAAyB,CAAC,MAAM,iCAAM,mBAAmB,KAAE,SAAS,IAAG,CAAC;IACnF,CAAC;CACJ"}

package/dist/es/certificate/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./AttestationCertificateManager.js";
+export * from "./CertificateManager.js";
+export * from "./CertificationDeclarationManager.js";
+export * from "./ChipPAAuthorities.js";
+export * from "./RootCertificateManager.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/es/certificate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/certificate/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AACxC,cAAc,sCAAsC,CAAC;AACrD,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC"}

package/dist/es/certificate/index.js

@@ -0,0 +1,11 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./AttestationCertificateManager.js";
+export * from "./CertificateManager.js";
+export * from "./CertificationDeclarationManager.js";
+export * from "./ChipPAAuthorities.js";
+export * from "./RootCertificateManager.js";
+//# sourceMappingURL=index.js.map

package/dist/es/certificate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/certificate/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AACxC,cAAc,sCAAsC,CAAC;AACrD,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC"}