@vorionsys/platform-core 0.1.0

package/dist/auth/piv-cac/crl-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crl-validator.js","sourceRoot":"","sources":["../../../src/auth/piv-cac/crl-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAML,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEhE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,kCAAkC;AAClC,MAAM,gBAAgB,GAA2B;IAC/C,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,cAAc;IACjB,CAAC,EAAE,oBAAoB;IACvB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,sBAAsB;IACzB,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,oBAAoB;IACvB,EAAE,EAAE,cAAc;CACnB,CAAC;AAEF,gCAAgC;AAChC,MAAM,kBAAkB,GAAc;IACpC,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,KAAK;IACd,aAAa,EAAE,MAAM,EAAE,YAAY;IACnC,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IAClC,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IAHlB,YACE,OAAe,EACC,OAAqB,YAAY,CAAC,gBAAgB,EAClD,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAA8C;QAClD,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,QAAQ;IAC5C,YAAY,iBAAyB,EAAE,aAAqB;QAC1D,KAAK,CAAC,gCAAgC,iBAAiB,EAAE,EAAE,YAAY,CAAC,gBAAgB,EAAE;YACxF,iBAAiB;YACjB,aAAa,EAAE,aAAa,EAAE,OAAO;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,QAAQ;IAChD,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,YAAY,IAAI,oBAAoB,OAAO,EAAE,EAAE,YAAY,CAAC,gBAAgB,EAAE;YAClF,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAY;IAClB,KAAK,GAAoE,IAAI,GAAG,EAAE,CAAC;IACnF,gBAAgB,GAAkC,IAAI,GAAG,EAAE,CAAC;IAC5D,aAAa,GAAgC,IAAI,GAAG,EAAE,CAAC;IAE/D,YAAY,SAA6B,EAAE;QACzC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,WAA8B,EAC9B,iBAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QACjD,CAAC;QAED,6BAA6B;QAC7B,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QAED,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;QAEpE,2CAA2C;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,mBAAmB,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE,CAC/E,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CACT;gBACE,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,oCAAoC,CACrC,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACvC,CAAC;QAED,2CAA2C;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACpD,oDAAoD;YACpD,+CAA+C;QACjD,CAAC;QAED,MAAM,CAAC,KAAK,CACV,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,EAC1C,4CAA4C,CAC7C,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,WAA8B;QACzD,qCAAqC;QACrC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1C,CAAC;QAED,6CAA6C;QAC7C,OAAO,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAM,CAClB,iBAAyB,EACzB,iBAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;QAExE,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,6BAA6B;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,EAAE,kCAAkC,CAAC,CAAC;YACxE,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,eAAe;QACf,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,OAAO,MAAM,eAAe,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,iBAAyB,EAAE,QAAgB;QACnE,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,iBAAiB,CAAC,CAAC;YAEtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE5E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;oBAC9C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,+CAA+C;qBACxD;oBACD,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,EACjB,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CACrC,CAAC;gBACJ,CAAC;gBAED,uBAAuB;gBACvB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC7D,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;oBACzC,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC/B,MAAM,IAAI,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAE1C,oBAAoB;gBACpB,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC1C,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvE,CAAC;gBAED,YAAY;gBACZ,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAEhE,gBAAgB;gBAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAE7B,mBAAmB;gBACnB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBAEvD,MAAM,CAAC,IAAI,CACT;oBACE,iBAAiB;oBACjB,YAAY,EAAE,GAAG,CAAC,mBAAmB,CAAC,MAAM;oBAC5C,UAAU,EAAE,GAAG,CAAC,UAAU;iBAC3B,EACD,2BAA2B,CAC5B,CAAC;gBAEF,OAAO,GAAG,CAAC;YACb,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,wCAAwC,CAAC,CAAC;gBAEpF,iCAAiC;gBACjC,MAAM,QAAQ,GAAY;oBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;oBAC7B,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,mBAAmB,EAAE,EAAE;oBACvB,OAAO,EAAE,KAAK;oBACd,iBAAiB;oBACjB,SAAS,EAAE,KAAK;iBACjB,CAAC;gBAEF,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CAAC,IAAY,EAAE,iBAAyB;QACtD,IAAI,CAAC;YACH,mCAAmC;YACnC,IAAI,OAAO,GAAG,IAAI,CAAC;YAEnB,sBAAsB;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACnG,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnE,CAAC;YAED,sBAAsB;YACtB,iCAAiC;YACjC,6BAA6B;YAC7B,4CAA4C;YAC5C,yBAAyB;YACzB,IAAI;YAEJ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;YACzD,CAAC;YAED,oBAAoB;YACpB,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAEnD,OAAO;gBACL,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;gBACpD,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,iBAAiB;gBACjB,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAAY;QAQnC,6BAA6B;QAC7B,wDAAwD;QACxD,mCAAmC;QACnC,iBAAiB;QACjB,qBAAqB;QACrB,8BAA8B;QAC9B,+DAA+D;QAC/D,mDAAmD;QACnD,IAAI;QAEJ,8BAA8B;QAC9B,MAAM,mBAAmB,GAAe,EAAE,CAAC;QAC3C,IAAI,MAAM,GAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACpD,IAAI,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,UAA4B,CAAC;QACjC,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,kEAAkE;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QAED,gBAAgB;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAC1D,mBAAmB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QAEzC,8CAA8C;QAC9C,qCAAqC;QACrC,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY;QACpD,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAE9C,qCAAqC;QACrC,6BAA6B;QAC7B,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAExC,OAAO;YACL,MAAM;YACN,UAAU;YACV,UAAU;YACV,mBAAmB;YACnB,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,IAAY;QAC9B,qEAAqE;QACrE,oEAAoE;QAEpE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,gEAAgE;QAChE,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvD,oCAAoC;gBACpC,gCAAgC;gBAChC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC;gBAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;gBAEpC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;oBACzD,yBAAyB;oBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC;oBACjF,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;wBACnB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;wBAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC;wBAC1F,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;4BACrB,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;4BAC7D,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;gCACjB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gCACjC,IAAI,IAAI,EAAE,CAAC;oCACT,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;gCACjC,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,EAAE,CAAC;QACX,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,gDAAgD;QAChD,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAEjF,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,aAAa;wBACxB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;wBACpC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;gBAED,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC;YACX,CAAC;YAED,qDAAqD;YACrD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM;QAC/B,CAAC;QAED,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACpB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,IAAY;QAC7C,MAAM,OAAO,GAAe,EAAE,CAAC;QAE/B,4CAA4C;QAC5C,iGAAiG;QAEjG,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,yCAAyC;QACzC,uDAAuD;QACvD,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACjC,wDAAwD;YACxD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;gBACnD,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;gBAEzE,IAAI,aAAa,GAAG,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpD,uDAAuD;oBACvD,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;wBACjC,0BAA0B;wBAC1B,aAAa,GAAG,IAAI,CAAC;wBAErB,wBAAwB;wBACxB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAE,CAAC;wBAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;wBACvF,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;6BACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;6BAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;wBAEb,0BAA0B;wBAC1B,MAAM,UAAU,GAAG,aAAa,GAAG,CAAC,GAAG,YAAY,CAAC;wBACpD,IAAI,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;wBAEhC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;4BAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;4BAChD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAE,CAAC;4BACzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;4BAE7F,IAAI,CAAC;gCACH,cAAc,GAAG,aAAa;oCAC5B,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;oCACpC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;4BACjC,CAAC;4BAAC,MAAM,CAAC;gCACP,+BAA+B;4BACjC,CAAC;wBACH,CAAC;wBAED,iCAAiC;wBACjC,IAAI,UAA8B,CAAC;wBACnC,IAAI,MAA0B,CAAC;wBAE/B,6CAA6C;wBAC7C,MAAM,SAAS,GAAG,UAAU,GAAG,EAAE,CAAC,CAAC,cAAc;wBACjD,IAAI,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;4BAC7E,uCAAuC;4BACvC,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;4BACrC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;gCAC5F,wBAAwB;gCACxB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gCACzF,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;oCACpB,UAAU,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;oCAClC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;wCAC7B,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;oCACxC,CAAC;gCACH,CAAC;4BACH,CAAC;wBACH,CAAC;wBAED,OAAO,CAAC,IAAI,CAAC;4BACX,YAAY;4BACZ,cAAc;4BACd,UAAU;4BACV,MAAM;yBACP,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,EAAE,CAAC;QACX,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,IAAY,EAAE,GAAa;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrB,UAAU;gBACV,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;gBAC5B,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC1B,IAAI,KAAK,GAAG,IAAI,CAAC;oBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACpC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC/B,KAAK,GAAG,KAAK,CAAC;4BACd,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,KAAK;wBAAE,OAAO,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAAY;QACnC,6BAA6B;QAC7B,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;gBAC5B,IAAI,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;oBACnC,IAAI,KAAK,GAAG,IAAI,CAAC;oBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC7C,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;4BACxC,KAAK,GAAG,KAAK,CAAC;4BACd,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,KAAK,EAAE,CAAC;wBACV,+BAA+B;wBAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;wBACnE,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;4BACnB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAE,CAAC;4BACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;4BACzE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;iCACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iCAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;wBACd,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa,EAAE,GAAW;QACnE,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;QAClE,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,8DAA8D;YAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7D,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,IAAY,EAAE,MAAc;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAEhE,aAAa;QACb,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,0CAA0C;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,yDAAyD;QACzD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YAC1B,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAY,EAAE,MAAc;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAEnE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAW;QAC3B,MAAM,MAAM,GAA2B;YACrC,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,cAAc;YACzB,sBAAsB,EAAE,GAAG;SAC5B,CAAC;QACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,IAAY,EAAE,MAAc;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;QAEhC,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC;QACjD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,IAAY,EAAE,MAAc;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;QAChC,IAAI,SAAS,GAAG,GAAG;YAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,GAAW;QAC9B,wBAAwB;QACxB,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,+CAA+C;QAC/C,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QAE7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,GAAW;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,iBAAyB,EAAE,iBAAoC;QACjF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;aACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAgB;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,QAAgB,EAAE,GAAY;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,uBAAuB;QACvB,IAAI,SAAe,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC1B,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB;QACtE,CAAC;QAED,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE5E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,QAAgB,EAAE,iBAAyB,EAAE,GAAY;QAC/E,uBAAuB;QACvB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;QAED,yBAAyB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC;QAElE,qDAAqD;QACrD,IAAI,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACvC,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,qBAAqB,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,EAAE,YAAY,CAAC,CAAC;QAEjB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAEnB,2BAA2B;QAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAA0B;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa;QAIX,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG;YACH,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM;SACnD,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,IAAI,gBAAgB,GAAwB,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA2B;IACzD,IAAI,CAAC,gBAAgB,IAAI,MAAM,EAAE,CAAC;QAChC,gBAAgB,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAA6B,EAAE;IAChE,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,EAAE,CAAC;QACrB,gBAAgB,CAAC,QAAQ,EAAE,CAAC;QAC5B,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/auth/piv-cac/index.d.ts

@@ -0,0 +1,72 @@
+/**
+ * PIV/CAC Smart Card Authentication Module
+ *
+ * Comprehensive support for Personal Identity Verification (PIV) and
+ * Common Access Card (CAC) smart card authentication.
+ *
+ * Features:
+ * - X.509 certificate authentication
+ * - OCSP certificate revocation checking
+ * - CRL certificate revocation checking
+ * - Certificate-to-user mapping (UPN/SAN)
+ * - Card removal session termination
+ * - PKCS#11 smart card integration
+ * - Fastify middleware and routes
+ * - DoD PKI compatibility
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   pivAuthPlugin,
+ *   registerPIVRoutes,
+ *   requirePIVAuth,
+ *   type PIVCACConfig,
+ * } from '@vorionsys/platform-core/auth/piv-cac';
+ *
+ * // Configure PIV authentication
+ * const config: Partial<PIVCACConfig> = {
+ *   enabled: true,
+ *   trustedCAs: [
+ *     { name: 'DoD Root CA', certificate: '...', isRoot: true }
+ *   ],
+ *   revocationMethod: 'ocsp_with_crl_fallback',
+ *   dodPkiCompatibility: true,
+ * };
+ *
+ * // Register plugin
+ * await fastify.register(pivAuthPlugin, { config });
+ *
+ * // Register routes
+ * await registerPIVRoutes(fastify, { prefix: '/auth/piv' });
+ *
+ * // Protect routes
+ * fastify.get('/protected', { preHandler: [requirePIVAuth()] }, handler);
+ * ```
+ *
+ * @packageDocumentation
+ */
+export { CertificateValidationStatus, RevocationCheckMethod, PIVKeyUsage, CertificateMappingStrategy, CardEventType, PIVErrorCode, type X509Extension, type SubjectAltName, type DistinguishedName, type ParsedCertificate, type CertificateChain, type OCSPResponse, type CRLEntry, type CRLData, type CertificateValidationResult, type MappedUserIdentity, type CertificateMappingRule, type CardEvent, type CardSessionBinding, type TrustedCAConfig, type OCSPConfig, type CRLConfig, type PKCS11Config, type CardRemovalPolicy, type PIVCACConfig, type PIVAuthRequest, type PIVAuthResult, type PIVAuthContext, type PIVMiddlewareOptions, certificateValidationStatusSchema, revocationCheckMethodSchema, pivKeyUsageSchema, certificateMappingStrategySchema, cardEventTypeSchema, pivErrorCodeSchema, x509ExtensionSchema, subjectAltNameSchema, distinguishedNameSchema, parsedCertificateSchema, certificateChainSchema, ocspResponseSchema, crlEntrySchema, crlDataSchema, certificateValidationResultSchema, mappedUserIdentitySchema, certificateMappingRuleSchema, cardEventSchema, cardSessionBindingSchema, trustedCAConfigSchema, ocspConfigSchema, crlConfigSchema, pkcs11ConfigSchema, cardRemovalPolicySchema, pivCacConfigSchema, pivAuthRequestSchema, pivAuthResultSchema, pivAuthContextSchema, pivMiddlewareOptionsSchema, DEFAULT_PIVCAC_CONFIG, DOD_PKI_CONFIG, } from './types.js';
+export { CertificateAuthService, getCertificateAuthService, createCertificateAuthService, resetCertificateAuthService, parseCertificate, parseCertificateChain, buildCertificateChain, CertificateAuthError, CertificateParseError, CertificateValidationError, } from './certificate-auth.js';
+export { OCSPValidator, getOCSPValidator, createOCSPValidator, resetOCSPValidator, OCSPError, OCSPResponderUnavailableError, OCSPResponseError, } from './ocsp-validator.js';
+export { CRLValidator, getCRLValidator, createCRLValidator, resetCRLValidator, CRLError, CRLDownloadError, CRLParseError, CRLSizeExceededError, } from './crl-validator.js';
+export { CertificateMapper, getCertificateMapper, createCertificateMapper, resetCertificateMapper, DOD_CAC_RULE, PIV_RULE, EMAIL_FALLBACK_RULE, CN_FALLBACK_RULE, DEFAULT_MAPPING_RULES, CertificateMappingError, NoMatchingRuleError, AttributeNotFoundError, } from './certificate-mapper.js';
+export { CardRemovalHandler, getCardRemovalHandler, createCardRemovalHandler, resetCardRemovalHandler, SessionState, type CardRemovalEvent, type SessionTerminationEvent, type CardRemovalHandlerEvents, CardRemovalError, SessionNotFoundError, ReauthenticationRequiredError, } from './card-removal-handler.js';
+export { PKCS11Provider, getPKCS11Provider, createPKCS11Provider, resetPKCS11Provider, PIV_SLOTS, PKCS11_LIBRARY_PATHS, detectPKCS11Library, type ReaderInfo, type TokenInfo, type SmartCardCertificate, type SignRequest, type PKCS11ProviderEvents, PKCS11Error, LibraryNotFoundError, PINError, CardNotPresentError, } from './pkcs11-provider.js';
+export { pivAuthPlugin, pivAuthMiddleware, requirePIVAuth, requireCertificateAttribute, requireEDIPI, getPIVAuth, hasPIVAuth, getPIVUser, getPIVUserId, getCertificateFingerprint, getEDIPI, type PIVAuthServices, type PIVPluginOptions, } from './piv-middleware.js';
+export { registerPIVRoutes, pivRoutesPlugin, } from './piv-routes.js';
+/**
+ * Initialize PIV/CAC authentication services with configuration
+ */
+export declare function initializePIVAuth(config?: Partial<import('./types.js').PIVCACConfig>): {
+    certAuth: any;
+    ocspValidator: any;
+    crlValidator: any;
+    certificateMapper: any;
+    cardRemovalHandler: any;
+    config: any;
+};
+/**
+ * Reset all PIV/CAC singletons (for testing)
+ */
+export declare function resetAllPIVServices(): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/piv-cac/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/piv-cac/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAMH,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,WAAW,EACX,0BAA0B,EAC1B,aAAa,EACb,YAAY,EAGZ,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAGrB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,OAAO,EACZ,KAAK,2BAA2B,EAGhC,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAG3B,KAAK,SAAS,EACd,KAAK,kBAAkB,EAGvB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAGjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAGzB,iCAAiC,EACjC,2BAA2B,EAC3B,iBAAiB,EACjB,gCAAgC,EAChC,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iCAAiC,EACjC,wBAAwB,EACxB,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAG1B,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAMpB,OAAO,EAEL,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAG3B,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EAGrB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAEL,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAGlB,SAAS,EACT,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EAEL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EAGjB,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EAEL,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EAGtB,YAAY,EACZ,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EAGrB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAMjC,OAAO,EAEL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EAGvB,YAAY,EAGZ,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAG7B,gBAAgB,EAChB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAEL,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EAGnB,SAAS,EACT,oBAAoB,EAGpB,mBAAmB,EAGnB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAGzB,WAAW,EACX,oBAAoB,EACpB,QAAQ,EACR,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAEL,aAAa,EAGb,iBAAiB,EACjB,cAAc,EACd,2BAA2B,EAC3B,YAAY,EAGZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,yBAAyB,EACzB,QAAQ,EAGR,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EAEL,iBAAiB,EACjB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAMzB;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,OAAO,CAAC,OAAO,YAAY,EAAE,YAAY,CAAM;;;;;;;EAkBxF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAc1C"}

package/dist/auth/piv-cac/index.js

@@ -0,0 +1,172 @@
+/**
+ * PIV/CAC Smart Card Authentication Module
+ *
+ * Comprehensive support for Personal Identity Verification (PIV) and
+ * Common Access Card (CAC) smart card authentication.
+ *
+ * Features:
+ * - X.509 certificate authentication
+ * - OCSP certificate revocation checking
+ * - CRL certificate revocation checking
+ * - Certificate-to-user mapping (UPN/SAN)
+ * - Card removal session termination
+ * - PKCS#11 smart card integration
+ * - Fastify middleware and routes
+ * - DoD PKI compatibility
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   pivAuthPlugin,
+ *   registerPIVRoutes,
+ *   requirePIVAuth,
+ *   type PIVCACConfig,
+ * } from '@vorionsys/platform-core/auth/piv-cac';
+ *
+ * // Configure PIV authentication
+ * const config: Partial<PIVCACConfig> = {
+ *   enabled: true,
+ *   trustedCAs: [
+ *     { name: 'DoD Root CA', certificate: '...', isRoot: true }
+ *   ],
+ *   revocationMethod: 'ocsp_with_crl_fallback',
+ *   dodPkiCompatibility: true,
+ * };
+ *
+ * // Register plugin
+ * await fastify.register(pivAuthPlugin, { config });
+ *
+ * // Register routes
+ * await registerPIVRoutes(fastify, { prefix: '/auth/piv' });
+ *
+ * // Protect routes
+ * fastify.get('/protected', { preHandler: [requirePIVAuth()] }, handler);
+ * ```
+ *
+ * @packageDocumentation
+ */
+// =============================================================================
+// Types
+// =============================================================================
+export { 
+// Enums
+CertificateValidationStatus, RevocationCheckMethod, PIVKeyUsage, CertificateMappingStrategy, CardEventType, PIVErrorCode, 
+// Schemas
+certificateValidationStatusSchema, revocationCheckMethodSchema, pivKeyUsageSchema, certificateMappingStrategySchema, cardEventTypeSchema, pivErrorCodeSchema, x509ExtensionSchema, subjectAltNameSchema, distinguishedNameSchema, parsedCertificateSchema, certificateChainSchema, ocspResponseSchema, crlEntrySchema, crlDataSchema, certificateValidationResultSchema, mappedUserIdentitySchema, certificateMappingRuleSchema, cardEventSchema, cardSessionBindingSchema, trustedCAConfigSchema, ocspConfigSchema, crlConfigSchema, pkcs11ConfigSchema, cardRemovalPolicySchema, pivCacConfigSchema, pivAuthRequestSchema, pivAuthResultSchema, pivAuthContextSchema, pivMiddlewareOptionsSchema, 
+// Default configuration
+DEFAULT_PIVCAC_CONFIG, DOD_PKI_CONFIG, } from './types.js';
+// =============================================================================
+// Certificate Authentication
+// =============================================================================
+export { 
+// Service
+CertificateAuthService, getCertificateAuthService, createCertificateAuthService, resetCertificateAuthService, 
+// Functions
+parseCertificate, parseCertificateChain, buildCertificateChain, 
+// Errors
+CertificateAuthError, CertificateParseError, CertificateValidationError, } from './certificate-auth.js';
+// =============================================================================
+// OCSP Validation
+// =============================================================================
+export { 
+// Service
+OCSPValidator, getOCSPValidator, createOCSPValidator, resetOCSPValidator, 
+// Errors
+OCSPError, OCSPResponderUnavailableError, OCSPResponseError, } from './ocsp-validator.js';
+// =============================================================================
+// CRL Validation
+// =============================================================================
+export { 
+// Service
+CRLValidator, getCRLValidator, createCRLValidator, resetCRLValidator, 
+// Errors
+CRLError, CRLDownloadError, CRLParseError, CRLSizeExceededError, } from './crl-validator.js';
+// =============================================================================
+// Certificate Mapping
+// =============================================================================
+export { 
+// Service
+CertificateMapper, getCertificateMapper, createCertificateMapper, resetCertificateMapper, 
+// Default rules
+DOD_CAC_RULE, PIV_RULE, EMAIL_FALLBACK_RULE, CN_FALLBACK_RULE, DEFAULT_MAPPING_RULES, 
+// Errors
+CertificateMappingError, NoMatchingRuleError, AttributeNotFoundError, } from './certificate-mapper.js';
+// =============================================================================
+// Card Removal Handler
+// =============================================================================
+export { 
+// Service
+CardRemovalHandler, getCardRemovalHandler, createCardRemovalHandler, resetCardRemovalHandler, 
+// Enum
+SessionState, 
+// Errors
+CardRemovalError, SessionNotFoundError, ReauthenticationRequiredError, } from './card-removal-handler.js';
+// =============================================================================
+// PKCS#11 Provider
+// =============================================================================
+export { 
+// Service
+PKCS11Provider, getPKCS11Provider, createPKCS11Provider, resetPKCS11Provider, 
+// Constants
+PIV_SLOTS, PKCS11_LIBRARY_PATHS, 
+// Functions
+detectPKCS11Library, 
+// Errors
+PKCS11Error, LibraryNotFoundError, PINError, CardNotPresentError, } from './pkcs11-provider.js';
+// =============================================================================
+// Middleware
+// =============================================================================
+export { 
+// Plugin
+pivAuthPlugin, 
+// Middleware factories
+pivAuthMiddleware, requirePIVAuth, requireCertificateAttribute, requireEDIPI, 
+// Request helpers
+getPIVAuth, hasPIVAuth, getPIVUser, getPIVUserId, getCertificateFingerprint, getEDIPI, } from './piv-middleware.js';
+// =============================================================================
+// Routes
+// =============================================================================
+export { 
+// Route registration
+registerPIVRoutes, pivRoutesPlugin, } from './piv-routes.js';
+// =============================================================================
+// Convenience Exports
+// =============================================================================
+/**
+ * Initialize PIV/CAC authentication services with configuration
+ */
+export function initializePIVAuth(config = {}) {
+    const { getCertificateAuthService } = require('./certificate-auth.js');
+    const { getOCSPValidator } = require('./ocsp-validator.js');
+    const { getCRLValidator } = require('./crl-validator.js');
+    const { getCertificateMapper } = require('./certificate-mapper.js');
+    const { getCardRemovalHandler } = require('./card-removal-handler.js');
+    const { DEFAULT_PIVCAC_CONFIG } = require('./types.js');
+    const mergedConfig = { ...DEFAULT_PIVCAC_CONFIG, ...config };
+    return {
+        certAuth: getCertificateAuthService(mergedConfig),
+        ocspValidator: getOCSPValidator(mergedConfig.ocsp),
+        crlValidator: getCRLValidator(mergedConfig.crl),
+        certificateMapper: getCertificateMapper(mergedConfig.mappingRules),
+        cardRemovalHandler: getCardRemovalHandler(mergedConfig.cardRemovalPolicy),
+        config: mergedConfig,
+    };
+}
+/**
+ * Reset all PIV/CAC singletons (for testing)
+ */
+export function resetAllPIVServices() {
+    const { resetCertificateAuthService } = require('./certificate-auth.js');
+    const { resetOCSPValidator } = require('./ocsp-validator.js');
+    const { resetCRLValidator } = require('./crl-validator.js');
+    const { resetCertificateMapper } = require('./certificate-mapper.js');
+    const { resetCardRemovalHandler } = require('./card-removal-handler.js');
+    const { resetPKCS11Provider } = require('./pkcs11-provider.js');
+    resetCertificateAuthService();
+    resetOCSPValidator();
+    resetCRLValidator();
+    resetCertificateMapper();
+    resetCardRemovalHandler();
+    resetPKCS11Provider();
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/piv-cac/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/piv-cac/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,gFAAgF;AAChF,QAAQ;AACR,gFAAgF;AAEhF,OAAO;AACL,QAAQ;AACR,2BAA2B,EAC3B,qBAAqB,EACrB,WAAW,EACX,0BAA0B,EAC1B,aAAa,EACb,YAAY;AAqCZ,UAAU;AACV,iCAAiC,EACjC,2BAA2B,EAC3B,iBAAiB,EACjB,gCAAgC,EAChC,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iCAAiC,EACjC,wBAAwB,EACxB,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B;AAE1B,wBAAwB;AACxB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF,OAAO;AACL,UAAU;AACV,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B;AAE3B,YAAY;AACZ,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB;AAErB,SAAS;AACT,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,OAAO;AACL,UAAU;AACV,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB;AAElB,SAAS;AACT,SAAS,EACT,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,OAAO;AACL,UAAU;AACV,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,iBAAiB;AAEjB,SAAS;AACT,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,OAAO;AACL,UAAU;AACV,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB;AAEtB,gBAAgB;AAChB,YAAY,EACZ,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB;AAErB,SAAS;AACT,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF,OAAO;AACL,UAAU;AACV,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB;AAEvB,OAAO;AACP,YAAY;AAOZ,SAAS;AACT,gBAAgB,EAChB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAEnC,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,OAAO;AACL,UAAU;AACV,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB;AAEnB,YAAY;AACZ,SAAS,EACT,oBAAoB;AAEpB,YAAY;AACZ,mBAAmB;AASnB,SAAS;AACT,WAAW,EACX,oBAAoB,EACpB,QAAQ,EACR,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAE9B,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,OAAO;AACL,SAAS;AACT,aAAa;AAEb,uBAAuB;AACvB,iBAAiB,EACjB,cAAc,EACd,2BAA2B,EAC3B,YAAY;AAEZ,kBAAkB;AAClB,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,yBAAyB,EACzB,QAAQ,GAKT,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,OAAO;AACL,qBAAqB;AACrB,iBAAiB,EACjB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAqD,EAAE;IACvF,MAAM,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvE,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5D,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpE,MAAM,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvE,MAAM,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAExD,MAAM,YAAY,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7D,OAAO;QACL,QAAQ,EAAE,yBAAyB,CAAC,YAAY,CAAC;QACjD,aAAa,EAAE,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC;QAClD,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC;QAC/C,iBAAiB,EAAE,oBAAoB,CAAC,YAAY,CAAC,YAAY,CAAC;QAClE,kBAAkB,EAAE,qBAAqB,CAAC,YAAY,CAAC,iBAAiB,CAAC;QACzE,MAAM,EAAE,YAAY;KACrB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,EAAE,2BAA2B,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5D,MAAM,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtE,MAAM,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACzE,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAEhE,2BAA2B,EAAE,CAAC;IAC9B,kBAAkB,EAAE,CAAC;IACrB,iBAAiB,EAAE,CAAC;IACpB,sBAAsB,EAAE,CAAC;IACzB,uBAAuB,EAAE,CAAC;IAC1B,mBAAmB,EAAE,CAAC;AACxB,CAAC"}

package/dist/auth/piv-cac/ocsp-validator.d.ts

@@ -0,0 +1,183 @@
+/**
+ * OCSP Certificate Validation
+ *
+ * Online Certificate Status Protocol (OCSP) validation for
+ * real-time certificate revocation checking.
+ *
+ * Features:
+ * - OCSP request generation
+ * - Response parsing and validation
+ * - Response caching
+ * - Nonce support
+ * - Soft-fail mode
+ *
+ * @packageDocumentation
+ */
+import { type ParsedCertificate, type OCSPResponse, type OCSPConfig, PIVErrorCode } from './types.js';
+/**
+ * OCSP validation error
+ */
+export declare class OCSPError extends Error {
+    readonly code: PIVErrorCode;
+    readonly details?: Record<string, unknown>;
+    constructor(message: string, code?: PIVErrorCode, details?: Record<string, unknown>);
+}
+/**
+ * OCSP responder unavailable error
+ */
+export declare class OCSPResponderUnavailableError extends OCSPError {
+    constructor(responderUrl: string, originalError?: Error);
+}
+/**
+ * OCSP response error
+ */
+export declare class OCSPResponseError extends OCSPError {
+    constructor(message: string, status?: number);
+}
+/**
+ * OCSP validation service
+ */
+export declare class OCSPValidator {
+    private config;
+    private cache;
+    private pendingRequests;
+    constructor(config?: Partial<OCSPConfig>);
+    /**
+     * Check certificate revocation status via OCSP
+     */
+    checkRevocationStatus(certificate: ParsedCertificate, issuerCertificate: ParsedCertificate): Promise<OCSPResponse>;
+    /**
+     * Execute OCSP request
+     */
+    private executeOCSPRequest;
+    /**
+     * Get OCSP responder URL from certificate
+     */
+    private getResponderUrl;
+    /**
+     * Build OCSP request
+     *
+     * This is a simplified implementation. Production code should use
+     * a proper ASN.1 library for OCSP request generation.
+     */
+    private buildOCSPRequest;
+    /**
+     * Build CertID structure
+     */
+    private buildCertId;
+    /**
+     * Build Request structure
+     */
+    private buildRequest;
+    /**
+     * Build TBSRequest structure
+     */
+    private buildTBSRequest;
+    /**
+     * Build nonce extension
+     */
+    private buildNonceExtension;
+    /**
+     * Wrap OCSP request
+     */
+    private wrapOCSPRequest;
+    /**
+     * ASN.1 SEQUENCE wrapper
+     */
+    private wrapSequence;
+    /**
+     * ASN.1 OCTET STRING wrapper
+     */
+    private wrapOctetString;
+    /**
+     * ASN.1 INTEGER wrapper
+     */
+    private wrapInteger;
+    /**
+     * Generic ASN.1 tag wrapper
+     */
+    private wrapTag;
+    /**
+     * Parse OCSP response
+     *
+     * This is a simplified implementation. Production code should use
+     * a proper ASN.1 library for full response parsing.
+     */
+    private parseOCSPResponse;
+    /**
+     * Find ASN.1 tag in buffer
+     */
+    private findTag;
+    /**
+     * Extract certificate status from response
+     */
+    private extractCertStatus;
+    /**
+     * Parse RevokedInfo structure
+     */
+    private parseRevokedInfo;
+    /**
+     * Parse GeneralizedTime
+     */
+    private parseGeneralizedTime;
+    /**
+     * Extract timestamps from response
+     */
+    private extractTimestamps;
+    /**
+     * Extract responder ID from response
+     */
+    private extractResponderId;
+    /**
+     * Extract nonce from response
+     */
+    private extractNonce;
+    /**
+     * Get cache key for certificate
+     */
+    private getCacheKey;
+    /**
+     * Get cached response if valid
+     */
+    private getCachedResponse;
+    /**
+     * Cache OCSP response
+     */
+    private cacheResponse;
+    /**
+     * Clean up expired cache entries
+     */
+    private cleanupCache;
+    /**
+     * Clear cache
+     */
+    clearCache(): void;
+    /**
+     * Update configuration
+     */
+    updateConfig(config: Partial<OCSPConfig>): void;
+    /**
+     * Get current configuration
+     */
+    getConfig(): OCSPConfig;
+    /**
+     * Get cache statistics
+     */
+    getCacheStats(): {
+        size: number;
+        entries: string[];
+    };
+}
+/**
+ * Get the default OCSP validator
+ */
+export declare function getOCSPValidator(config?: Partial<OCSPConfig>): OCSPValidator;
+/**
+ * Create a new OCSP validator
+ */
+export declare function createOCSPValidator(config?: Partial<OCSPConfig>): OCSPValidator;
+/**
+ * Reset the default validator (for testing)
+ */
+export declare function resetOCSPValidator(): void;
+//# sourceMappingURL=ocsp-validator.d.ts.map

package/dist/auth/piv-cac/ocsp-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocsp-validator.d.ts","sourceRoot":"","sources":["../../../src/auth/piv-cac/ocsp-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AAsDpB;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;aAGhB,IAAI,EAAE,YAAY;aAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjD,OAAO,EAAE,MAAM,EACC,IAAI,GAAE,YAA6C,EACnD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpD;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,SAAS;gBAC9C,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK;CAOxD;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAI7C;AAMD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,KAAK,CAAuE;IACpF,OAAO,CAAC,eAAe,CAAiD;gBAE5D,MAAM,GAAE,OAAO,CAAC,UAAU,CAAM;IAI5C;;OAEG;IACG,qBAAqB,CACzB,WAAW,EAAE,iBAAiB,EAC9B,iBAAiB,EAAE,iBAAiB,GACnC,OAAO,CAAC,YAAY,CAAC;IA8CxB;;OAEG;YACW,kBAAkB;IAsFhC;;OAEG;IACH,OAAO,CAAC,eAAe;IAUvB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IA0BxB;;OAEG;IACH,OAAO,CAAC,WAAW;IA0BnB;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2BvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,YAAY;IAIpB;;OAEG;IACH,OAAO,CAAC,eAAe;IAIvB;;OAEG;IACH,OAAO,CAAC,WAAW;IAQnB;;OAEG;IACH,OAAO,CAAC,OAAO;IAef;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAqEzB;;OAEG;IACH,OAAO,CAAC,OAAO;IASf;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAuCzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAkCxB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;OAEG;IACH,OAAO,CAAC,YAAY;IA4BpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACH,OAAO,CAAC,YAAY;IASpB;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI;IAI/C;;OAEG;IACH,SAAS,IAAI,UAAU;IAIvB;;OAEG;IACH,aAAa,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;CAMrD;AAQD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CAK5E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,OAAO,CAAC,UAAU,CAAM,GAAG,aAAa,CAEnF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}