edockit 0.2.4 → 0.4.0-dev.0

package/dist/loader-1ac52e12.js

@@ -0,0 +1,217 @@
+/*!
+ * MIT License
+ * Copyright (c) 2025 Edgars Jēkabsons, ZenomyTech SIA
+ */
+import { Z as base64UrlToHex, X as normalizeDistinguishedName, a3 as normalizeHex, a0 as getTrustListPurposeMaskForServiceType, a1 as hexToBase64Url, a2 as isTrustedServiceStatus } from './normalize-70da6516.js';
+
+function addToIndex(index, key, service) {
+    if (!key) {
+        return;
+    }
+    const normalizedKey = key.trim();
+    if (!normalizedKey) {
+        return;
+    }
+    const existing = index.get(normalizedKey);
+    if (existing) {
+        existing.push(service);
+        return;
+    }
+    index.set(normalizedKey, [service]);
+}
+function buildIndexes(services) {
+    const indexes = {
+        bySki: new Map(),
+        bySpkiSha256: new Map(),
+        bySubjectDn: new Map(),
+    };
+    for (const service of services) {
+        addToIndex(indexes.bySki, normalizeHex(service.skiHex), service);
+        addToIndex(indexes.bySpkiSha256, normalizeHex(service.spkiSha256Hex), service);
+        addToIndex(indexes.bySubjectDn, service.subjectDn, service);
+    }
+    return indexes;
+}
+function dedupeHistory(history) {
+    const deduped = [];
+    for (const item of history) {
+        const previous = deduped[deduped.length - 1];
+        if (previous &&
+            previous.status === item.status &&
+            previous.from === item.from &&
+            previous.to === item.to) {
+            continue;
+        }
+        deduped.push(item);
+    }
+    return deduped;
+}
+function parseTimestampToUnixSeconds(input) {
+    const parsedDate = new Date(input);
+    if (Number.isNaN(parsedDate.getTime())) {
+        throw new Error(`Invalid trusted-list timestamp "${input}"`);
+    }
+    return Math.floor(parsedDate.getTime() / 1000);
+}
+function mergeCompactIntervals(intervals) {
+    const merged = [];
+    for (const [fromUnix, toUnix] of intervals) {
+        const previous = merged[merged.length - 1];
+        if (!previous) {
+            merged.push([fromUnix, toUnix]);
+            continue;
+        }
+        const previousToUnix = previous[1];
+        if (previousToUnix === null || fromUnix <= previousToUnix) {
+            previous[1] =
+                previousToUnix === null || toUnix === null ? null : Math.max(previousToUnix, toUnix);
+            continue;
+        }
+        merged.push([fromUnix, toUnix]);
+    }
+    return merged;
+}
+function collapseTrustedIntervals(history) {
+    const trustedIntervals = history
+        .filter((entry) => isTrustedServiceStatus(entry.status))
+        .map((entry) => [
+        parseTimestampToUnixSeconds(entry.from),
+        entry.to ? parseTimestampToUnixSeconds(entry.to) : null,
+    ]);
+    return mergeCompactIntervals(trustedIntervals);
+}
+function hydrateTrustIntervals(trustIntervals) {
+    return trustIntervals.map(([fromUnix, toUnix]) => ({
+        fromUnix,
+        toUnix,
+    }));
+}
+function sortCompactServices(left, right) {
+    const leftKey = JSON.stringify(left);
+    const rightKey = JSON.stringify(right);
+    return leftKey.localeCompare(rightKey);
+}
+function createEmptyTrustedListBundle() {
+    return {
+        v: 2,
+        generatedAt: new Date(0).toISOString(),
+        sources: [],
+        dns: [],
+        services: [],
+    };
+}
+function buildTrustedListData(bundle) {
+    const services = bundle.services.map((serviceRecord) => {
+        const [spkiSha256Base64Url, skiBase64Url, subjectDnIdx, country, purposeMask, trustIntervals] = serviceRecord;
+        const subjectDn = bundle.dns[subjectDnIdx];
+        if (subjectDn === undefined) {
+            throw new Error(`Trusted list bundle contains unknown DN code ${subjectDnIdx}`);
+        }
+        return {
+            skiHex: base64UrlToHex(skiBase64Url),
+            spkiSha256Hex: base64UrlToHex(spkiSha256Base64Url),
+            subjectDn: normalizeDistinguishedName(subjectDn),
+            country,
+            purposeMask,
+            trustIntervals: hydrateTrustIntervals(trustIntervals),
+        };
+    });
+    return {
+        version: bundle.v,
+        generatedAt: bundle.generatedAt,
+        sources: bundle.sources.map(([id, label, lotlUrl]) => ({
+            id,
+            label,
+            lotlUrl,
+        })),
+        services,
+        indexes: buildIndexes(services),
+    };
+}
+function buildCompactTrustedListBundle(services, sources, generatedAt = new Date().toISOString()) {
+    const dedupedServices = dedupeTrustedServices(services);
+    const distinguishedNameCodebook = new Map();
+    const dns = [];
+    const compactServiceMap = new Map();
+    const getDistinguishedNameCode = (value) => {
+        const existing = distinguishedNameCodebook.get(value);
+        if (existing !== undefined) {
+            return existing;
+        }
+        const nextIndex = dns.length;
+        dns.push(value);
+        distinguishedNameCodebook.set(value, nextIndex);
+        return nextIndex;
+    };
+    for (const service of dedupedServices) {
+        const purposeMask = getTrustListPurposeMaskForServiceType(service.serviceType);
+        if (!purposeMask) {
+            continue;
+        }
+        const subjectDn = normalizeDistinguishedName(service.subjectDn);
+        if (!subjectDn) {
+            continue;
+        }
+        const trustIntervals = collapseTrustedIntervals(service.history);
+        if (trustIntervals.length === 0) {
+            continue;
+        }
+        const compactServiceKey = JSON.stringify([
+            hexToBase64Url(service.spkiSha256Hex),
+            hexToBase64Url(service.skiHex),
+            subjectDn,
+            service.country,
+            trustIntervals,
+        ]);
+        const existingService = compactServiceMap.get(compactServiceKey);
+        if (existingService) {
+            existingService[4] = (existingService[4] | purposeMask);
+            continue;
+        }
+        compactServiceMap.set(compactServiceKey, [
+            hexToBase64Url(service.spkiSha256Hex),
+            hexToBase64Url(service.skiHex),
+            getDistinguishedNameCode(subjectDn),
+            service.country,
+            purposeMask,
+            trustIntervals,
+        ]);
+    }
+    return {
+        v: 2,
+        generatedAt,
+        sources: sources.map((source) => [source.id, source.label, source.lotlUrl]),
+        dns,
+        services: Array.from(compactServiceMap.values()).sort(sortCompactServices),
+    };
+}
+function dedupeTrustedServices(services) {
+    const serviceMap = new Map();
+    for (const service of services) {
+        const normalizedService = {
+            ...service,
+            skiHex: normalizeHex(service.skiHex),
+            spkiSha256Hex: normalizeHex(service.spkiSha256Hex) || "",
+            subjectDn: normalizeDistinguishedName(service.subjectDn),
+            history: dedupeHistory([...service.history].sort((left, right) => left.from.localeCompare(right.from))),
+        };
+        const key = JSON.stringify([
+            normalizedService.skiHex,
+            normalizedService.spkiSha256Hex,
+            normalizedService.subjectDn,
+            normalizedService.country,
+            normalizedService.tspName,
+            normalizedService.serviceType,
+            normalizedService.source,
+            normalizedService.sourceLabel,
+            normalizedService.history,
+        ]);
+        if (!serviceMap.has(key)) {
+            serviceMap.set(key, normalizedService);
+        }
+    }
+    return Array.from(serviceMap.values());
+}
+
+export { buildCompactTrustedListBundle as a, buildTrustedListData as b, createEmptyTrustedListBundle as c, dedupeTrustedServices as d };
+//# sourceMappingURL=loader-1ac52e12.js.map

package/dist/loader-1ac52e12.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader-1ac52e12.js","sources":["../src/core/trustedlist/loader.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAqBA,SAAS,UAAU,CACjB,KAAsC,EACtC,GAAkB,EAClB,OAAyB,EAAA;IAEzB,IAAI,CAAC,GAAG,EAAE;QACR,OAAO;KACR;AAED,IAAA,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,aAAa,EAAE;QAClB,OAAO;KACR;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE;AACZ,QAAA,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO;KACR;IAED,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,QAA4B,EAAA;AAChD,IAAA,MAAM,OAAO,GAAuB;QAClC,KAAK,EAAE,IAAI,GAAG,EAA8B;QAC5C,YAAY,EAAE,IAAI,GAAG,EAA8B;QACnD,WAAW,EAAE,IAAI,GAAG,EAA8B;KACnD,CAAC;AAEF,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,QAAA,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/E,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;KAC7D;AAED,IAAA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,OAA8B,EAAA;IACnD,MAAM,OAAO,GAA0B,EAAE,CAAC;AAE1C,IAAA,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7C,QAAA,IACE,QAAQ;AACR,YAAA,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;AAC/B,YAAA,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;AAC3B,YAAA,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EACvB;YACA,SAAS;SACV;AAED,QAAA,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KACpB;AAED,IAAA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAA;AAChD,IAAA,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE;AACtC,QAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAA,CAAA,CAAG,CAAC,CAAC;KAC9D;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAmC,EAAA;IAChE,MAAM,MAAM,GAA6B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE;YACb,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAChC,SAAS;SACV;AAED,QAAA,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,cAAc,KAAK,IAAI,IAAI,QAAQ,IAAI,cAAc,EAAE;YACzD,QAAQ,CAAC,CAAC,CAAC;gBACT,cAAc,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YACvF,SAAS;SACV;QAED,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;KACjC;AAED,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA8B,EAAA;IAC9D,MAAM,gBAAgB,GAAG,OAAO;AAC7B,SAAA,MAAM,CAAC,CAAC,KAAK,KAAK,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACvD,SAAA,GAAG,CAAyB,CAAC,KAAK,KAAK;AACtC,QAAA,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC;AACvC,QAAA,KAAK,CAAC,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI;AACxD,KAAA,CAAC,CAAC;AAEL,IAAA,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,cAAwC,EAAA;AACrE,IAAA,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM;QACjD,QAAQ;QACR,MAAM;AACP,KAAA,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA2B,EAAE,KAA4B,EAAA;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACvC,IAAA,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;SAEe,4BAA4B,GAAA;IAC1C,OAAO;AACL,QAAA,CAAC,EAAE,CAAC;QACJ,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;AACtC,QAAA,OAAO,EAAE,EAAE;AACX,QAAA,GAAG,EAAE,EAAE;AACP,QAAA,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAEK,SAAU,oBAAoB,CAAC,MAAgC,EAAA;IACnE,MAAM,QAAQ,GAAuB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,aAAa,KAAI;AACzE,QAAA,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,GAC3F,aAAa,CAAC;QAEhB,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC3C,QAAA,IAAI,SAAS,KAAK,SAAS,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,CAAA,CAAE,CAAC,CAAC;SACjF;QAED,OAAO;AACL,YAAA,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC;AACpC,YAAA,aAAa,EAAE,cAAc,CAAC,mBAAmB,CAAC;AAClD,YAAA,SAAS,EAAE,0BAA0B,CAAC,SAAS,CAAC;YAChD,OAAO;YACP,WAAW;AACX,YAAA,cAAc,EAAE,qBAAqB,CAAC,cAAc,CAAC;SACtD,CAAC;AACJ,KAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;AAC/B,QAAA,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM;YACrD,EAAE;YACF,KAAK;YACL,OAAO;AACR,SAAA,CAAC,CAAC;QACH,QAAQ;AACR,QAAA,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC;KAChC,CAAC;AACJ,CAAC;AAEe,SAAA,6BAA6B,CAC3C,QAA0B,EAC1B,OAA4B,EAC5B,WAAA,GAAsB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAA;AAE9C,IAAA,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AACxD,IAAA,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5D,MAAM,GAAG,GAAa,EAAE,CAAC;AACzB,IAAA,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAiC,CAAC;AAEnE,IAAA,MAAM,wBAAwB,GAAG,CAAC,KAAa,KAAI;QACjD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACtD,QAAA,IAAI,QAAQ,KAAK,SAAS,EAAE;AAC1B,YAAA,OAAO,QAAQ,CAAC;SACjB;AAED,QAAA,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;AAC7B,QAAA,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChB,QAAA,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAChD,QAAA,OAAO,SAAS,CAAC;AACnB,KAAC,CAAC;AAEF,IAAA,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE;QACrC,MAAM,WAAW,GAAG,qCAAqC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,EAAE;YAChB,SAAS;SACV;QAED,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE;YACd,SAAS;SACV;QAED,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACjE,QAAA,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;YAC/B,SAAS;SACV;AAED,QAAA,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;AACvC,YAAA,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC;AACrC,YAAA,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,SAAS;AACT,YAAA,OAAO,CAAC,OAAO;YACf,cAAc;AACf,SAAA,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjE,IAAI,eAAe,EAAE;AACnB,YAAA,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,WAAW,CAAgC,CAAC;YACvF,SAAS;SACV;AAED,QAAA,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,EAAE;AACvC,YAAA,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC;AACrC,YAAA,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,wBAAwB,CAAC,SAAS,CAAC;AACnC,YAAA,OAAO,CAAC,OAAO;YACf,WAAW;YACX,cAAc;AACf,SAAA,CAAC,CAAC;KACJ;IAED,OAAO;AACL,QAAA,CAAC,EAAE,CAAC;QACJ,WAAW;QACX,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3E,GAAG;AACH,QAAA,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;KAC3E,CAAC;AACJ,CAAC;AAEK,SAAU,qBAAqB,CAAC,QAA0B,EAAA;AAC9D,IAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;AAErD,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,MAAM,iBAAiB,GAAmB;AACxC,YAAA,GAAG,OAAO;AACV,YAAA,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE;AACxD,YAAA,SAAS,EAAE,0BAA0B,CAAC,OAAO,CAAC,SAAS,CAAC;AACxD,YAAA,OAAO,EAAE,aAAa,CACpB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAChF;SACF,CAAC;AAEF,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;AACzB,YAAA,iBAAiB,CAAC,MAAM;AACxB,YAAA,iBAAiB,CAAC,aAAa;AAC/B,YAAA,iBAAiB,CAAC,SAAS;AAC3B,YAAA,iBAAiB,CAAC,OAAO;AACzB,YAAA,iBAAiB,CAAC,OAAO;AACzB,YAAA,iBAAiB,CAAC,WAAW;AAC7B,YAAA,iBAAiB,CAAC,MAAM;AACxB,YAAA,iBAAiB,CAAC,WAAW;AAC7B,YAAA,iBAAiB,CAAC,OAAO;AAC1B,SAAA,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACxB,YAAA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;SACxC;KACF;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC;;;;"}

package/dist/loader-43d8e17a.js

@@ -0,0 +1,222 @@
+/*!
+ * MIT License
+ * Copyright (c) 2025 Edgars Jēkabsons, ZenomyTech SIA
+ */
+'use strict';
+
+var normalize = require('./normalize-60f2d7e6.js');
+
+function addToIndex(index, key, service) {
+    if (!key) {
+        return;
+    }
+    const normalizedKey = key.trim();
+    if (!normalizedKey) {
+        return;
+    }
+    const existing = index.get(normalizedKey);
+    if (existing) {
+        existing.push(service);
+        return;
+    }
+    index.set(normalizedKey, [service]);
+}
+function buildIndexes(services) {
+    const indexes = {
+        bySki: new Map(),
+        bySpkiSha256: new Map(),
+        bySubjectDn: new Map(),
+    };
+    for (const service of services) {
+        addToIndex(indexes.bySki, normalize.normalizeHex(service.skiHex), service);
+        addToIndex(indexes.bySpkiSha256, normalize.normalizeHex(service.spkiSha256Hex), service);
+        addToIndex(indexes.bySubjectDn, service.subjectDn, service);
+    }
+    return indexes;
+}
+function dedupeHistory(history) {
+    const deduped = [];
+    for (const item of history) {
+        const previous = deduped[deduped.length - 1];
+        if (previous &&
+            previous.status === item.status &&
+            previous.from === item.from &&
+            previous.to === item.to) {
+            continue;
+        }
+        deduped.push(item);
+    }
+    return deduped;
+}
+function parseTimestampToUnixSeconds(input) {
+    const parsedDate = new Date(input);
+    if (Number.isNaN(parsedDate.getTime())) {
+        throw new Error(`Invalid trusted-list timestamp "${input}"`);
+    }
+    return Math.floor(parsedDate.getTime() / 1000);
+}
+function mergeCompactIntervals(intervals) {
+    const merged = [];
+    for (const [fromUnix, toUnix] of intervals) {
+        const previous = merged[merged.length - 1];
+        if (!previous) {
+            merged.push([fromUnix, toUnix]);
+            continue;
+        }
+        const previousToUnix = previous[1];
+        if (previousToUnix === null || fromUnix <= previousToUnix) {
+            previous[1] =
+                previousToUnix === null || toUnix === null ? null : Math.max(previousToUnix, toUnix);
+            continue;
+        }
+        merged.push([fromUnix, toUnix]);
+    }
+    return merged;
+}
+function collapseTrustedIntervals(history) {
+    const trustedIntervals = history
+        .filter((entry) => normalize.isTrustedServiceStatus(entry.status))
+        .map((entry) => [
+        parseTimestampToUnixSeconds(entry.from),
+        entry.to ? parseTimestampToUnixSeconds(entry.to) : null,
+    ]);
+    return mergeCompactIntervals(trustedIntervals);
+}
+function hydrateTrustIntervals(trustIntervals) {
+    return trustIntervals.map(([fromUnix, toUnix]) => ({
+        fromUnix,
+        toUnix,
+    }));
+}
+function sortCompactServices(left, right) {
+    const leftKey = JSON.stringify(left);
+    const rightKey = JSON.stringify(right);
+    return leftKey.localeCompare(rightKey);
+}
+function createEmptyTrustedListBundle() {
+    return {
+        v: 2,
+        generatedAt: new Date(0).toISOString(),
+        sources: [],
+        dns: [],
+        services: [],
+    };
+}
+function buildTrustedListData(bundle) {
+    const services = bundle.services.map((serviceRecord) => {
+        const [spkiSha256Base64Url, skiBase64Url, subjectDnIdx, country, purposeMask, trustIntervals] = serviceRecord;
+        const subjectDn = bundle.dns[subjectDnIdx];
+        if (subjectDn === undefined) {
+            throw new Error(`Trusted list bundle contains unknown DN code ${subjectDnIdx}`);
+        }
+        return {
+            skiHex: normalize.base64UrlToHex(skiBase64Url),
+            spkiSha256Hex: normalize.base64UrlToHex(spkiSha256Base64Url),
+            subjectDn: normalize.normalizeDistinguishedName(subjectDn),
+            country,
+            purposeMask,
+            trustIntervals: hydrateTrustIntervals(trustIntervals),
+        };
+    });
+    return {
+        version: bundle.v,
+        generatedAt: bundle.generatedAt,
+        sources: bundle.sources.map(([id, label, lotlUrl]) => ({
+            id,
+            label,
+            lotlUrl,
+        })),
+        services,
+        indexes: buildIndexes(services),
+    };
+}
+function buildCompactTrustedListBundle(services, sources, generatedAt = new Date().toISOString()) {
+    const dedupedServices = dedupeTrustedServices(services);
+    const distinguishedNameCodebook = new Map();
+    const dns = [];
+    const compactServiceMap = new Map();
+    const getDistinguishedNameCode = (value) => {
+        const existing = distinguishedNameCodebook.get(value);
+        if (existing !== undefined) {
+            return existing;
+        }
+        const nextIndex = dns.length;
+        dns.push(value);
+        distinguishedNameCodebook.set(value, nextIndex);
+        return nextIndex;
+    };
+    for (const service of dedupedServices) {
+        const purposeMask = normalize.getTrustListPurposeMaskForServiceType(service.serviceType);
+        if (!purposeMask) {
+            continue;
+        }
+        const subjectDn = normalize.normalizeDistinguishedName(service.subjectDn);
+        if (!subjectDn) {
+            continue;
+        }
+        const trustIntervals = collapseTrustedIntervals(service.history);
+        if (trustIntervals.length === 0) {
+            continue;
+        }
+        const compactServiceKey = JSON.stringify([
+            normalize.hexToBase64Url(service.spkiSha256Hex),
+            normalize.hexToBase64Url(service.skiHex),
+            subjectDn,
+            service.country,
+            trustIntervals,
+        ]);
+        const existingService = compactServiceMap.get(compactServiceKey);
+        if (existingService) {
+            existingService[4] = (existingService[4] | purposeMask);
+            continue;
+        }
+        compactServiceMap.set(compactServiceKey, [
+            normalize.hexToBase64Url(service.spkiSha256Hex),
+            normalize.hexToBase64Url(service.skiHex),
+            getDistinguishedNameCode(subjectDn),
+            service.country,
+            purposeMask,
+            trustIntervals,
+        ]);
+    }
+    return {
+        v: 2,
+        generatedAt,
+        sources: sources.map((source) => [source.id, source.label, source.lotlUrl]),
+        dns,
+        services: Array.from(compactServiceMap.values()).sort(sortCompactServices),
+    };
+}
+function dedupeTrustedServices(services) {
+    const serviceMap = new Map();
+    for (const service of services) {
+        const normalizedService = {
+            ...service,
+            skiHex: normalize.normalizeHex(service.skiHex),
+            spkiSha256Hex: normalize.normalizeHex(service.spkiSha256Hex) || "",
+            subjectDn: normalize.normalizeDistinguishedName(service.subjectDn),
+            history: dedupeHistory([...service.history].sort((left, right) => left.from.localeCompare(right.from))),
+        };
+        const key = JSON.stringify([
+            normalizedService.skiHex,
+            normalizedService.spkiSha256Hex,
+            normalizedService.subjectDn,
+            normalizedService.country,
+            normalizedService.tspName,
+            normalizedService.serviceType,
+            normalizedService.source,
+            normalizedService.sourceLabel,
+            normalizedService.history,
+        ]);
+        if (!serviceMap.has(key)) {
+            serviceMap.set(key, normalizedService);
+        }
+    }
+    return Array.from(serviceMap.values());
+}
+
+exports.buildCompactTrustedListBundle = buildCompactTrustedListBundle;
+exports.buildTrustedListData = buildTrustedListData;
+exports.createEmptyTrustedListBundle = createEmptyTrustedListBundle;
+exports.dedupeTrustedServices = dedupeTrustedServices;
+//# sourceMappingURL=loader-43d8e17a.js.map

package/dist/loader-43d8e17a.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader-43d8e17a.js","sources":["../src/core/trustedlist/loader.ts"],"sourcesContent":[null],"names":["normalizeHex","isTrustedServiceStatus","base64UrlToHex","normalizeDistinguishedName","getTrustListPurposeMaskForServiceType","hexToBase64Url"],"mappings":";;;;;;;;AAqBA,SAAS,UAAU,CACjB,KAAsC,EACtC,GAAkB,EAClB,OAAyB,EAAA;IAEzB,IAAI,CAAC,GAAG,EAAE;QACR,OAAO;KACR;AAED,IAAA,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,aAAa,EAAE;QAClB,OAAO;KACR;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE;AACZ,QAAA,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO;KACR;IAED,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,QAA4B,EAAA;AAChD,IAAA,MAAM,OAAO,GAAuB;QAClC,KAAK,EAAE,IAAI,GAAG,EAA8B;QAC5C,YAAY,EAAE,IAAI,GAAG,EAA8B;QACnD,WAAW,EAAE,IAAI,GAAG,EAA8B;KACnD,CAAC;AAEF,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,UAAU,CAAC,OAAO,CAAC,KAAK,EAAEA,sBAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,QAAA,UAAU,CAAC,OAAO,CAAC,YAAY,EAAEA,sBAAY,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/E,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;KAC7D;AAED,IAAA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,OAA8B,EAAA;IACnD,MAAM,OAAO,GAA0B,EAAE,CAAC;AAE1C,IAAA,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7C,QAAA,IACE,QAAQ;AACR,YAAA,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;AAC/B,YAAA,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;AAC3B,YAAA,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EACvB;YACA,SAAS;SACV;AAED,QAAA,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KACpB;AAED,IAAA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAA;AAChD,IAAA,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE;AACtC,QAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAA,CAAA,CAAG,CAAC,CAAC;KAC9D;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAmC,EAAA;IAChE,MAAM,MAAM,GAA6B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE;YACb,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAChC,SAAS;SACV;AAED,QAAA,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,cAAc,KAAK,IAAI,IAAI,QAAQ,IAAI,cAAc,EAAE;YACzD,QAAQ,CAAC,CAAC,CAAC;gBACT,cAAc,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YACvF,SAAS;SACV;QAED,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;KACjC;AAED,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA8B,EAAA;IAC9D,MAAM,gBAAgB,GAAG,OAAO;AAC7B,SAAA,MAAM,CAAC,CAAC,KAAK,KAAKC,gCAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACvD,SAAA,GAAG,CAAyB,CAAC,KAAK,KAAK;AACtC,QAAA,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC;AACvC,QAAA,KAAK,CAAC,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI;AACxD,KAAA,CAAC,CAAC;AAEL,IAAA,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,cAAwC,EAAA;AACrE,IAAA,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM;QACjD,QAAQ;QACR,MAAM;AACP,KAAA,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA2B,EAAE,KAA4B,EAAA;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACvC,IAAA,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;SAEe,4BAA4B,GAAA;IAC1C,OAAO;AACL,QAAA,CAAC,EAAE,CAAC;QACJ,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;AACtC,QAAA,OAAO,EAAE,EAAE;AACX,QAAA,GAAG,EAAE,EAAE;AACP,QAAA,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAEK,SAAU,oBAAoB,CAAC,MAAgC,EAAA;IACnE,MAAM,QAAQ,GAAuB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,aAAa,KAAI;AACzE,QAAA,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,GAC3F,aAAa,CAAC;QAEhB,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC3C,QAAA,IAAI,SAAS,KAAK,SAAS,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,CAAA,CAAE,CAAC,CAAC;SACjF;QAED,OAAO;AACL,YAAA,MAAM,EAAEC,wBAAc,CAAC,YAAY,CAAC;AACpC,YAAA,aAAa,EAAEA,wBAAc,CAAC,mBAAmB,CAAC;AAClD,YAAA,SAAS,EAAEC,oCAA0B,CAAC,SAAS,CAAC;YAChD,OAAO;YACP,WAAW;AACX,YAAA,cAAc,EAAE,qBAAqB,CAAC,cAAc,CAAC;SACtD,CAAC;AACJ,KAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;AAC/B,QAAA,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM;YACrD,EAAE;YACF,KAAK;YACL,OAAO;AACR,SAAA,CAAC,CAAC;QACH,QAAQ;AACR,QAAA,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC;KAChC,CAAC;AACJ,CAAC;AAEe,SAAA,6BAA6B,CAC3C,QAA0B,EAC1B,OAA4B,EAC5B,WAAA,GAAsB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAA;AAE9C,IAAA,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AACxD,IAAA,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5D,MAAM,GAAG,GAAa,EAAE,CAAC;AACzB,IAAA,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAiC,CAAC;AAEnE,IAAA,MAAM,wBAAwB,GAAG,CAAC,KAAa,KAAI;QACjD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACtD,QAAA,IAAI,QAAQ,KAAK,SAAS,EAAE;AAC1B,YAAA,OAAO,QAAQ,CAAC;SACjB;AAED,QAAA,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;AAC7B,QAAA,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChB,QAAA,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAChD,QAAA,OAAO,SAAS,CAAC;AACnB,KAAC,CAAC;AAEF,IAAA,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE;QACrC,MAAM,WAAW,GAAGC,+CAAqC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,EAAE;YAChB,SAAS;SACV;QAED,MAAM,SAAS,GAAGD,oCAA0B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE;YACd,SAAS;SACV;QAED,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACjE,QAAA,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;YAC/B,SAAS;SACV;AAED,QAAA,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;AACvC,YAAAE,wBAAc,CAAC,OAAO,CAAC,aAAa,CAAC;AACrC,YAAAA,wBAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,SAAS;AACT,YAAA,OAAO,CAAC,OAAO;YACf,cAAc;AACf,SAAA,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjE,IAAI,eAAe,EAAE;AACnB,YAAA,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,WAAW,CAAgC,CAAC;YACvF,SAAS;SACV;AAED,QAAA,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,EAAE;AACvC,YAAAA,wBAAc,CAAC,OAAO,CAAC,aAAa,CAAC;AACrC,YAAAA,wBAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,wBAAwB,CAAC,SAAS,CAAC;AACnC,YAAA,OAAO,CAAC,OAAO;YACf,WAAW;YACX,cAAc;AACf,SAAA,CAAC,CAAC;KACJ;IAED,OAAO;AACL,QAAA,CAAC,EAAE,CAAC;QACJ,WAAW;QACX,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3E,GAAG;AACH,QAAA,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;KAC3E,CAAC;AACJ,CAAC;AAEK,SAAU,qBAAqB,CAAC,QAA0B,EAAA;AAC9D,IAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;AAErD,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,MAAM,iBAAiB,GAAmB;AACxC,YAAA,GAAG,OAAO;AACV,YAAA,MAAM,EAAEL,sBAAY,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,aAAa,EAAEA,sBAAY,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE;AACxD,YAAA,SAAS,EAAEG,oCAA0B,CAAC,OAAO,CAAC,SAAS,CAAC;AACxD,YAAA,OAAO,EAAE,aAAa,CACpB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAChF;SACF,CAAC;AAEF,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;AACzB,YAAA,iBAAiB,CAAC,MAAM;AACxB,YAAA,iBAAiB,CAAC,aAAa;AAC/B,YAAA,iBAAiB,CAAC,SAAS;AAC3B,YAAA,iBAAiB,CAAC,OAAO;AACzB,YAAA,iBAAiB,CAAC,OAAO;AACzB,YAAA,iBAAiB,CAAC,WAAW;AAC7B,YAAA,iBAAiB,CAAC,MAAM;AACxB,YAAA,iBAAiB,CAAC,WAAW;AAC7B,YAAA,iBAAiB,CAAC,OAAO;AAC1B,SAAA,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACxB,YAAA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;SACxC;KACF;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC;;;;;;;"}