@decaf-ts/for-fabric 0.9.0 → 0.10.0

package/lib/types/client/fabric-fs.d.mts

@@ -0,0 +1,92 @@
+import { User } from "fabric-common";
+import { Identity, Signer } from "@hyperledger/fabric-gateway";
+/**
+ * @description Loads content from a file or returns the content if already loaded
+ * @summary Determines if the input is already content or a path to a file, and loads the file if needed
+ * @param {string | Uint8Array} contentOrPath - The content or path to load
+ * @param {Function} fileReader - Function to read the file if contentOrPath is a path
+ * @return {Promise<string | Uint8Array | Buffer>} The content
+ * @function contentOfLoadFile
+ * @memberOf module:for-fabric.client
+ */
+export declare function contentOfLoadFile(contentOrPath: string | Uint8Array, fileReader: (path: string) => Promise<string | Uint8Array | Buffer>): Promise<string | Uint8Array<ArrayBufferLike> | Buffer<ArrayBufferLike>>;
+/**
+ * @description Reads a file from the file system
+ * @summary Loads a file using the Node.js file system module
+ * @param {string | Buffer} contentOrPath - The content or path to load
+ * @return {Promise<Buffer>} The file content as a Buffer
+ * @function readFile
+ * @memberOf module:for-fabric.client
+ */
+export declare function readFile(contentOrPath: string | Buffer): Promise<Buffer<ArrayBufferLike>>;
+/**
+ * @description Creates a Certificate Authority user
+ * @summary Initializes a user with the given credentials for interacting with a Fabric CA
+ * @param {string} userName - The user name
+ * @param {string} privateKey - The private key as a string
+ * @param {string} certificate - The certificate as a string
+ * @param {string} mspId - The Membership Service Provider ID
+ * @return {Promise<User>} Promise resolving to the created user
+ * @function getCAUser
+ * @memberOf module:for-fabric.client
+ */
+export declare function getCAUser(userName: string, privateKey: string, certificate: string, mspId: string): Promise<User>;
+/**
+ * @description Gets an identity from a certificate directory
+ * @summary Loads a certificate from a directory and creates an Identity object
+ * @param {string} mspId - The Membership Service Provider ID
+ * @param {string} certDirectoryPath - Path to the directory containing the certificate
+ * @return {Promise<Identity>} Promise resolving to the identity
+ * @function getIdentity
+ * @memberOf module:for-fabric.client
+ */
+export declare function getIdentity(mspId: string, certDirectoryPath: string): Promise<Identity>;
+/**
+ * @description Gets the full path of the first file in a directory
+ * @summary Reads a directory and returns the path to the first file found
+ * @param {string} dirPath - Path to the directory
+ * @return {Promise<string>} Promise resolving to the full path of the first file
+ * @function getFirstDirFileName
+ * @memberOf module:for-fabric.client
+ */
+export declare function getFirstDirFileName(dirPath: string): Promise<string>;
+/**
+ * @description Gets the content of the first file in a directory
+ * @summary Reads a directory, finds the first file, and returns its content as a string
+ * @param {string} dirPath - Path to the directory
+ * @return {Promise<string>} Promise resolving to the content of the first file
+ * @function getFirstDirFileNameContent
+ * @memberOf module:for-fabric.client
+ */
+export declare function getFirstDirFileNameContent(dirPath: string): Promise<string>;
+/**
+ * @description Gets a signer from a key directory
+ * @summary Loads a private key from a directory and creates a Signer for Fabric transactions
+ * @param {string} keyDirectoryPath - Path to the directory containing the private key
+ * @return {Promise<Signer>} Promise resolving to the signer
+ * @function getSigner
+ * @memberOf module:for-fabric.client
+ */
+export declare function getSigner(keyDirectoryPath: string): Promise<Signer>;
+/**
+ * @description Extracts a private key from a PEM buffer
+ * @summary Converts a PEM-encoded private key to a CryptoKey object
+ * @param {Buffer} pem - The PEM-encoded private key
+ * @return {Promise<CryptoKey>} Promise resolving to the CryptoKey
+ * @function extractPrivateKey
+ * @memberOf module:for-fabric.client
+ * @mermaid
+ * sequenceDiagram
+ *   participant Caller
+ *   participant ExtractPrivateKey
+ *   participant SubtleCrypto
+ *
+ *   Caller->>ExtractPrivateKey: extractPrivateKey(pem)
+ *   ExtractPrivateKey->>ExtractPrivateKey: Get SubtleCrypto implementation
+ *   ExtractPrivateKey->>ExtractPrivateKey: Parse PEM format
+ *   ExtractPrivateKey->>ExtractPrivateKey: Convert to binary DER
+ *   ExtractPrivateKey->>SubtleCrypto: importKey(pkcs8, binaryDer, options)
+ *   SubtleCrypto-->>ExtractPrivateKey: CryptoKey
+ *   ExtractPrivateKey-->>Caller: CryptoKey
+ */
+export declare function extractPrivateKey(pem: Buffer): Promise<any>;

package/lib/types/client/fabric-hsm.d.cts

@@ -0,0 +1,24 @@
+export declare class HSMSignerFactoryCustom {
+    #private;
+    constructor(library: string);
+    private findHSMPKCS11Lib;
+    dispose(): void;
+    private sanitizeOptions;
+    private assertNotEmpty;
+    private findSlotForLabel;
+    private login;
+    private findObjectInHSM;
+    newSigner(hsmSignerOptions: HSMConfig): {
+        signer: (digest: any) => Promise<Uint8Array<ArrayBufferLike>>;
+        close: () => void;
+    };
+    private assertDefined;
+    private getUncompressedPointOnCurve;
+    getSKIFromCertificatePath(certPath: string): Buffer<ArrayBufferLike>;
+    getSKIFromCertificate(cert: string | NonSharedBuffer): Buffer;
+}
+export interface HSMConfig {
+    label: string;
+    identifier: Buffer<ArrayBufferLike>;
+    pin: string;
+}

package/lib/types/client/fabric-hsm.d.mts

@@ -0,0 +1,24 @@
+export declare class HSMSignerFactoryCustom {
+    #private;
+    constructor(library: string);
+    private findHSMPKCS11Lib;
+    dispose(): void;
+    private sanitizeOptions;
+    private assertNotEmpty;
+    private findSlotForLabel;
+    private login;
+    private findObjectInHSM;
+    newSigner(hsmSignerOptions: HSMConfig): {
+        signer: (digest: any) => Promise<Uint8Array<ArrayBufferLike>>;
+        close: () => void;
+    };
+    private assertDefined;
+    private getUncompressedPointOnCurve;
+    getSKIFromCertificatePath(certPath: string): Buffer<ArrayBufferLike>;
+    getSKIFromCertificate(cert: string | NonSharedBuffer): Buffer;
+}
+export interface HSMConfig {
+    label: string;
+    identifier: Buffer<ArrayBufferLike>;
+    pin: string;
+}

package/lib/types/client/ids/id-extraction.d.cts

@@ -0,0 +1,4 @@
+import { Model } from "@decaf-ts/decorator-validation";
+import { PrimaryKeyType } from "@decaf-ts/db-decorators";
+import { Constructor } from "@decaf-ts/decoration";
+export declare function extractIds<M extends Model>(clazz: Constructor<M>, models: M | M[] | Record<string, any> | Record<string, any>[], ids: PrimaryKeyType | PrimaryKeyType[]): any;

package/lib/types/client/ids/id-extraction.d.mts

@@ -0,0 +1,4 @@
+import { Model } from "@decaf-ts/decorator-validation";
+import { PrimaryKeyType } from "@decaf-ts/db-decorators";
+import { Constructor } from "@decaf-ts/decoration";
+export declare function extractIds<M extends Model>(clazz: Constructor<M>, models: M | M[] | Record<string, any> | Record<string, any>[], ids: PrimaryKeyType | PrimaryKeyType[]): any;

package/lib/types/client/ids/index.d.cts

@@ -0,0 +1 @@
+export * from "./id-extraction.cjs";

package/lib/types/client/ids/index.d.mts

@@ -0,0 +1 @@
+export * from "./id-extraction.js";

package/lib/types/client/index.d.cts

@@ -0,0 +1,23 @@
+/**
+ * @description Hyperledger Fabric Client Module for Decaf-ts
+ * @summary This module provides client-side utilities and adapters to interact with Hyperledger Fabric networks using Decaf-ts. It exposes the Fabric client adapter, event dispatch utilities, and filesystem helpers for loading identities and keys.
+ * @module client
+ * @memberOf module:for-fabric
+ * @example
+ * // Create a client adapter and submit a transaction
+ * // See also: {@link module:for-fabric~FabricClientAdapter} and {@link module:for-fabric~FabricClientDispatch}
+ */
+export * from "./collections/index.cjs";
+export * from "./erc20/index.cjs";
+export * from "./ids/index.cjs";
+export * from "./indexes/index.cjs";
+export * from "./services/index.cjs";
+export * from "./constants.cjs";
+export * from "./crypto.cjs";
+export * from "./services/index.cjs";
+export * from "./FabricClientDispatch.cjs";
+export * from "./fabric-fs.cjs";
+export * from "./FabricClientAdapter.cjs";
+export * from "./FabricClientRepository.cjs";
+export * from "../shared/types.cjs";
+export * from "./utils.cjs";

package/lib/types/client/index.d.mts

@@ -0,0 +1,23 @@
+/**
+ * @description Hyperledger Fabric Client Module for Decaf-ts
+ * @summary This module provides client-side utilities and adapters to interact with Hyperledger Fabric networks using Decaf-ts. It exposes the Fabric client adapter, event dispatch utilities, and filesystem helpers for loading identities and keys.
+ * @module client
+ * @memberOf module:for-fabric
+ * @example
+ * // Create a client adapter and submit a transaction
+ * // See also: {@link module:for-fabric~FabricClientAdapter} and {@link module:for-fabric~FabricClientDispatch}
+ */
+export * from "./collections/index.js";
+export * from "./erc20/index.js";
+export * from "./ids/index.js";
+export * from "./indexes/index.js";
+export * from "./services/index.js";
+export * from "./constants.js";
+export * from "./crypto.js";
+export * from "./services/index.js";
+export * from "./FabricClientDispatch.js";
+export * from "./fabric-fs.js";
+export * from "./FabricClientAdapter.js";
+export * from "./FabricClientRepository.js";
+export * from "../shared/types.js";
+export * from "./utils.js";

package/lib/types/client/indexes/generation.d.cts

@@ -0,0 +1,10 @@
+import { Constructor } from "@decaf-ts/decoration";
+import { CreateIndexRequest, CouchDBDesignDoc } from "@decaf-ts/for-couchdb";
+import { Model, ModelConstructor } from "@decaf-ts/decorator-validation";
+export type Index = CreateIndexRequest;
+export declare function generateModelIndexes<M extends Model>(m: Constructor<M>): Index[];
+export declare function generateModelDesignDocs<M extends Model>(m: Constructor<M>, accum?: Record<string, CouchDBDesignDoc>): CouchDBDesignDoc[];
+export declare function readModelFile(file: any): ModelConstructor<any>[];
+export declare function readModelFolders(...folders: string[]): Promise<ModelConstructor<any>[]>;
+export declare function writeIndexes(indexes: Index[], p?: string, collection?: string): void;
+export declare function writeDesignDocs(designDocs: CouchDBDesignDoc[], p?: string, collection?: string): void;

package/lib/types/client/indexes/generation.d.mts

@@ -0,0 +1,10 @@
+import { Constructor } from "@decaf-ts/decoration";
+import { CreateIndexRequest, CouchDBDesignDoc } from "@decaf-ts/for-couchdb";
+import { Model, ModelConstructor } from "@decaf-ts/decorator-validation";
+export type Index = CreateIndexRequest;
+export declare function generateModelIndexes<M extends Model>(m: Constructor<M>): Index[];
+export declare function generateModelDesignDocs<M extends Model>(m: Constructor<M>, accum?: Record<string, CouchDBDesignDoc>): CouchDBDesignDoc[];
+export declare function readModelFile(file: any): ModelConstructor<any>[];
+export declare function readModelFolders(...folders: string[]): Promise<ModelConstructor<any>[]>;
+export declare function writeIndexes(indexes: Index[], p?: string, collection?: string): void;
+export declare function writeDesignDocs(designDocs: CouchDBDesignDoc[], p?: string, collection?: string): void;

package/lib/types/client/indexes/index.d.cts

@@ -0,0 +1 @@
+export * from "./generation.cjs";

package/lib/types/client/indexes/index.d.mts

@@ -0,0 +1 @@
+export * from "./generation.js";

package/lib/types/client/logging.d.cts

@@ -0,0 +1,60 @@
+import { Logger, LogLevel, MiniLogger, StringLike } from "@decaf-ts/logging";
+import { LoggingConfig } from "@decaf-ts/logging";
+/**
+ * @description Logger implementation tailored for Hyperledger Fabric clients.
+ * @summary Adapts the decaf-ts MiniLogger to route messages through a per-context Fabric logger, honoring configured log levels and formatting.
+ * @param {string} context - The logging context name used to scope the logger instance.
+ * @param {Partial<LoggingConfig> | undefined} conf - Optional logging configuration to override defaults for this context.
+ * @class FabricLogger
+ * @example
+ * ```typescript
+ * // In a Fabric client/service
+ * const logger = new FabricLogger('MyFabricService', { level: 'info' });
+ * logger.info('Processing transaction');
+ * logger.debug('Transaction details', { txId: '123' });
+ * logger.error('Something went wrong');
+ * ```
+ * @mermaid
+ * sequenceDiagram
+ *   autonumber
+ *   participant C as Caller
+ *   participant FL as FabricLogger
+ *   participant ML as MiniLogger (delegate)
+ *   C->>FL: info('Processing transaction')
+ *   FL->>FL: createLog(level,msg,stack)
+ *   FL->>ML: info(log)
+ *   C->>FL: error(new Error('x'))
+ *   FL->>FL: createLog(level,msg,stack)
+ *   FL->>ML: error(log)
+ */
+export declare class FabricLogger extends MiniLogger {
+    /**
+     * @description The underlying Fabric logger instance
+     */
+    protected logger: Logger;
+    constructor(context: string, conf: Partial<LoggingConfig> | undefined);
+    /**
+     * @description Logs a message at the specified level.
+     * @summary Overrides the base MiniLogger.log to forward to the internal Fabric-aware logger, enforcing configured thresholds.
+     * @param {LogLevel} level - The log level to use for this message.
+     * @param {StringLike | Error} msg - The message or error to log.
+     * @param {string} [stack] - Optional stack trace string for errors.
+     * @return {void}
+     * @mermaid
+     * sequenceDiagram
+     *   autonumber
+     *   participant C as Caller
+     *   participant FL as FabricLogger
+     *   participant ML as MiniLogger (delegate)
+     *   C->>FL: log(level, msg, stack?)
+     *   FL->>FL: check configured level
+     *   alt below threshold
+     *     FL-->>C: return
+     *   else above threshold
+     *     FL->>FL: createLog(level, msg, stack)
+     *     FL->>ML: method.call(logger, log)
+     *     ML-->>FL: void
+     *   end
+     */
+    protected log(level: LogLevel, msg: StringLike | Error, stack?: Error): void;
+}

package/lib/types/client/logging.d.mts

@@ -0,0 +1,60 @@
+import { Logger, LogLevel, MiniLogger, StringLike } from "@decaf-ts/logging";
+import { LoggingConfig } from "@decaf-ts/logging";
+/**
+ * @description Logger implementation tailored for Hyperledger Fabric clients.
+ * @summary Adapts the decaf-ts MiniLogger to route messages through a per-context Fabric logger, honoring configured log levels and formatting.
+ * @param {string} context - The logging context name used to scope the logger instance.
+ * @param {Partial<LoggingConfig> | undefined} conf - Optional logging configuration to override defaults for this context.
+ * @class FabricLogger
+ * @example
+ * ```typescript
+ * // In a Fabric client/service
+ * const logger = new FabricLogger('MyFabricService', { level: 'info' });
+ * logger.info('Processing transaction');
+ * logger.debug('Transaction details', { txId: '123' });
+ * logger.error('Something went wrong');
+ * ```
+ * @mermaid
+ * sequenceDiagram
+ *   autonumber
+ *   participant C as Caller
+ *   participant FL as FabricLogger
+ *   participant ML as MiniLogger (delegate)
+ *   C->>FL: info('Processing transaction')
+ *   FL->>FL: createLog(level,msg,stack)
+ *   FL->>ML: info(log)
+ *   C->>FL: error(new Error('x'))
+ *   FL->>FL: createLog(level,msg,stack)
+ *   FL->>ML: error(log)
+ */
+export declare class FabricLogger extends MiniLogger {
+    /**
+     * @description The underlying Fabric logger instance
+     */
+    protected logger: Logger;
+    constructor(context: string, conf: Partial<LoggingConfig> | undefined);
+    /**
+     * @description Logs a message at the specified level.
+     * @summary Overrides the base MiniLogger.log to forward to the internal Fabric-aware logger, enforcing configured thresholds.
+     * @param {LogLevel} level - The log level to use for this message.
+     * @param {StringLike | Error} msg - The message or error to log.
+     * @param {string} [stack] - Optional stack trace string for errors.
+     * @return {void}
+     * @mermaid
+     * sequenceDiagram
+     *   autonumber
+     *   participant C as Caller
+     *   participant FL as FabricLogger
+     *   participant ML as MiniLogger (delegate)
+     *   C->>FL: log(level, msg, stack?)
+     *   FL->>FL: check configured level
+     *   alt below threshold
+     *     FL-->>C: return
+     *   else above threshold
+     *     FL->>FL: createLog(level, msg, stack)
+     *     FL->>ML: method.call(logger, log)
+     *     ML-->>FL: void
+     *   end
+     */
+    protected log(level: LogLevel, msg: StringLike | Error, stack?: Error): void;
+}

package/lib/types/client/services/FabricEnrollmentService.d.cts

@@ -0,0 +1,176 @@
+import FabricCAServices from "fabric-ca-client";
+import { IEnrollResponse } from "fabric-ca-client";
+import { User } from "fabric-common";
+import { CAConfig, Credentials } from "../../shared/types.cjs";
+import { Identity } from "../../shared/model/Identity.cjs";
+import { AuthorizationError } from "@decaf-ts/core";
+import { ConflictError } from "@decaf-ts/db-decorators";
+import { CA_ROLE } from "./constants.cjs";
+import { CertificateResponse, FabricIdentity, GetCertificatesRequest } from "../../shared/fabric-types.cjs";
+import { LoggedClass } from "@decaf-ts/logging";
+/**
+ * @description Hyperledger Fabric CA identity types.
+ * @summary Enumerates the supported identity types recognized by Fabric CA for registration and identity management.
+ * @enum {string}
+ * @readonly
+ * @memberOf module:for-fabric.client
+ */
+export declare enum HFCAIdentityType {
+    PEER = "peer",
+    ORDERER = "orderer",
+    CLIENT = "client",
+    USER = "user",
+    ADMIN = "admin"
+}
+/**
+ * @description Key/value attribute used during CA registration.
+ * @summary Represents an attribute entry that can be attached to a Fabric CA identity during registration, optionally marking it for inclusion in ecert.
+ * @interface IKeyValueAttribute
+ * @template T
+ * @param {string} name - Attribute name.
+ * @param {string} value - Attribute value.
+ * @param {boolean} [ecert] - Whether the attribute should be included in the enrollment certificate (ECert).
+ * @memberOf module:for-fabric.client
+ */
+export interface IKeyValueAttribute {
+    name: string;
+    value: string;
+    ecert?: boolean;
+}
+/**
+ * @description Standard Fabric CA identity attribute keys.
+ * @summary Enumerates well-known Fabric CA attribute keys that can be assigned to identities for delegations and permissions.
+ * @enum {string}
+ * @readonly
+ * @memberOf module:for-fabric.client
+ */
+export declare enum HFCAIdentityAttributes {
+    HFREGISTRARROLES = "hf.Registrar.Roles",
+    HFREGISTRARDELEGATEROLES = "hf.Registrar.DelegateRoles",
+    HFREGISTRARATTRIBUTES = "hf.Registrar.Attributes",
+    HFINTERMEDIATECA = "hf.IntermediateCA",
+    HFREVOKER = "hf.Revoker",
+    HFAFFILIATIONMGR = "hf.AffiliationMgr",
+    HFGENCRL = "hf.GenCRL"
+}
+/**
+ * @description Service wrapper for interacting with a Fabric CA.
+ * @summary Provides high-level operations for managing identities against a Hyperledger Fabric Certificate Authority, including registration, enrollment, revocation, and administrative queries. Encapsulates lower-level Fabric CA client calls with consistent logging and error mapping.
+ * @param {CAConfig} caConfig - Connection and TLS configuration for the target CA.
+ * @class FabricEnrollmentService
+ * @example
+ * // Register and enroll a new user
+ * const svc = new FabricEnrollmentService({
+ *   url: 'https://localhost:7054',
+ *   caName: 'Org1CA',
+ *   tls: { trustedRoots: ['/path/to/ca.pem'], verify: false },
+ *   caCert: '/path/to/admin/certDir',
+ *   caKey: '/path/to/admin/keyDir'
+ * });
+ * await svc.register({ userName: 'alice', password: 's3cr3t' }, false, 'org1.department1', CA_ROLE.USER);
+ * const id = await svc.enroll('alice', 's3cr3t');
+ * @mermaid
+ * sequenceDiagram
+ *   autonumber
+ *   participant App
+ *   participant Svc as FabricEnrollmentService
+ *   participant CA as Fabric CA
+ *   App->>Svc: register(credentials, ...)
+ *   Svc->>CA: register(request, adminUser)
+ *   CA-->>Svc: enrollmentSecret
+ *   Svc-->>App: secret
+ *   App->>Svc: enroll(enrollmentId, secret)
+ *   Svc->>CA: enroll({enrollmentID, secret})
+ *   CA-->>Svc: certificates
+ *   Svc-->>App: Identity
+ */
+export declare class FabricEnrollmentService extends LoggedClass {
+    private caConfig;
+    private ca?;
+    private certificateService?;
+    private affiliationService?;
+    private identityService?;
+    private client?;
+    private user?;
+    constructor(caConfig: CAConfig);
+    protected User(): Promise<User>;
+    protected CA(): Promise<FabricCAServices>;
+    protected Client(): Promise<{
+        newCertificateService: any;
+    }>;
+    protected Certificate(): Promise<any>;
+    protected Affiliations(): Promise<FabricCAServices.AffiliationService>;
+    protected Identities(): Promise<FabricCAServices.IdentityService>;
+    /**
+     * @description Retrieve certificates from the CA.
+     * @summary Calls the CA certificate service to list certificates, optionally mapping to PEM strings only.
+     * @param {GetCertificatesRequest} [request] - Optional filter request for certificate lookup.
+     * @param {boolean} [doMap=true] - When true, returns array of PEM strings; otherwise returns full response object.
+     * @return {Promise<string[] | CertificateResponse>} Array of PEM strings or the full certificate response.
+     */
+    getCertificates(request?: GetCertificatesRequest, doMap?: boolean): Promise<string[] | CertificateResponse>;
+    /**
+     * @description List identities registered in the CA.
+     * @summary Queries the CA identity service to fetch all identities and returns the list as FabricIdentity objects.
+     * @return {Promise<FabricIdentity[]>} The list of identities registered in the CA.
+     */
+    getIdentities(): Promise<FabricIdentity[]>;
+    protected parseError(e: Error): AuthorizationError | ConflictError;
+    /**
+     * @description Retrieve affiliations from the CA.
+     * @summary Queries the CA for the list of affiliations available under the configured CA.
+     * @return {string} The affiliations result payload.
+     */
+    getAffiliations(): Promise<any>;
+    /**
+     * @description Read identity details from the CA by enrollment ID.
+     * @summary Retrieves and validates a single identity, throwing NotFoundError when missing.
+     * @param {string} enrollmentId - Enrollment ID to lookup.
+     * @return {Promise<FabricIdentity>} The identity details stored in the CA.
+     */
+    read(enrollmentId: string): Promise<FabricIdentity>;
+    /**
+     * @description Register a new identity with the CA.
+     * @summary Submits a registration request for a new enrollment ID, returning the enrollment secret upon success.
+     * @param {Credentials} model - Credentials containing userName and password for the new identity.
+     * @param {boolean} [isSuperUser=false] - Whether to register the identity as a super user.
+     * @param {string} [affiliation=""] - Affiliation string (e.g., org1.department1).
+     * @param {CA_ROLE | string} [userRole] - Role to assign to the identity.
+     * @param {IKeyValueAttribute} [attrs] - Optional attributes to attach to the identity.
+     * @param {number} [maxEnrollments] - Maximum number of enrollments allowed for the identity.
+     * @return {Promise<string>} The enrollment secret for the registered identity.
+     */
+    register(model: Credentials, isSuperUser?: boolean, affiliation?: string, userRole?: CA_ROLE | string, attrs?: IKeyValueAttribute, maxEnrollments?: number): Promise<string>;
+    protected static identityFromEnrollment(enrollment: IEnrollResponse, mspId: string): Identity;
+    /**
+     * @description Enroll an identity with the CA using a registration secret.
+     * @summary Exchanges the enrollment ID and secret for certificates, returning a constructed Identity model.
+     * @param {string} enrollmentId - Enrollment ID to enroll.
+     * @param {string} registration - Enrollment secret returned at registration time.
+     * @return {Promise<Identity>} The enrolled identity object with credentials.
+     */
+    enroll(enrollmentId: string, registration: string): Promise<Identity>;
+    /**
+     * @description Register and enroll a new identity in one step.
+     * @summary Registers a new enrollment ID with the CA and immediately exchanges the secret to enroll, returning the created Identity.
+     * @param {Credentials} model - Credentials for the new identity containing userName and password.
+     * @param {boolean} [isSuperUser=false] - Whether to register the identity as a super user.
+     * @param {string} [affiliation=""] - Affiliation string (e.g., org1.department1).
+     * @param {CA_ROLE | string} [userRole] - Role to assign to the identity.
+     * @param {IKeyValueAttribute} [attrs] - Optional attributes to attach to the identity.
+     * @param {number} [maxEnrollments] - Maximum number of enrollments allowed for the identity.
+     * @return {Promise<Identity>} The enrolled identity.
+     */
+    registerAndEnroll(model: Credentials, isSuperUser?: boolean, affiliation?: string, userRole?: CA_ROLE | string, attrs?: IKeyValueAttribute, maxEnrollments?: number): Promise<Identity>;
+    /**
+     * Revokes the enrollment of an identity with the specified enrollment ID.
+     *
+     * @param enrollmentId - The enrollment ID of the identity to be revoked.
+     *
+     * @returns A Promise that resolves to the result of the revocation operation.
+     *
+     * @throws {NotFoundError} If the enrollment with the specified ID does not exist.
+     * @throws {InternalError} If there is an error during the revocation process.
+     */
+    revoke(enrollmentId: string): Promise<FabricCAServices.IServiceResponse>;
+}