@naylence/advanced-security 0.3.0

package/LICENSE

@@ -0,0 +1,33 @@
+Business Source License 1.1
+
+Copyright (c) 2025 Naylence.
+"Business Source License" and "BSL" are trademarks of MariaDB plc.
+
+Terms:
+
+The Licensor hereby grants you the right to copy, modify, create derivative works, redistribute, and make **non-production** use of the Licensed Work.
+
+Additional Use Grant:
+Production use is permitted **only for internal use by Naylence staff**; all other production usage requires a commercial license granted by Naylence Inc.
+
+Change Date:
+On 2028-10-06, in accordance with the Business Source License, this software will be licensed under the Apache License, Version 2.0 with no additional restrictions.
+
+Change License:
+Apache License, Version 2.0 (SPDX identifier: `Apache-2.0`).
+
+If your use does not comply with current terms, you must obtain a commercial license or refrain from using the software.
+
+You must conspicuously display this License on each original or modified copy. Violation terminates your rights under this License.
+
+This License does not grant you rights to any Naylence trademarks or logos.
+
+TO THE EXTENT PERMITTED BY LAW, THE LICENSED WORK IS PROVIDED “AS IS,” WITHOUT WARRANTY. LICENSOR DISCLAIMS ALL WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND TITLE.
+
+MariaDB hereby permits you to use this License’s text to license your works as long as you comply with its covenants.
+
+Covenants of Licensor:
+1. Change License is Apache-2.0.
+2. Additional Use Grant specified above.
+3. Change Date specified above.
+4. License not otherwise modified.

package/NOTICE

@@ -0,0 +1,5 @@
+Naylence Advanced Security TypeScript
+Copyright (c) 2025 Naylence
+
+This product bundles third-party open source software. Each dependency is
+licensed under its own terms as documented in its respective repository.

package/README.md

@@ -0,0 +1,101 @@
+[![Join our Discord](https://img.shields.io/badge/Discord-Join%20Chat-blue?logo=discord)](https://discord.gg/nwZAeqdv7y)
+
+# Naylence Advanced Security (TypeScript)
+
+**Naylence Advanced Security** is a high-assurance extension for the [Naylence Agentic Fabric](https://github.com/naylence) that delivers advanced cryptographic and policy-driven protections for multi-agent systems. It mirrors the capabilities of the Python reference implementation while integrating seamlessly with the Naylence TypeScript runtime.
+
+At its core, Naylence already provides a zero-trust, message-oriented backbone for federated agents. This package extends that foundation with **sealed overlay encryption**, **SPIFFE/X.509 workload identities**, **secure sticky sessions**, and **secure load balancing** that keep systems resilient in complex, federated, and regulated deployments.
+
+---
+
+## Key Features
+
+* **Overlay end-to-end encryption (E2EE) & sealed channels**  
+  Adds a cryptographic layer on top of transport (TLS). Messages remain encrypted and authenticated across multiple hops, even if intermediate sentinels or networks are compromised.
+
+* **Envelope signing & identity assurance**  
+  Uses **X.509/SPIFFE-style identities (SVIDs)** so every envelope is verifiable to its origin—enabling tamper-resistant audit trails and fine-grained policy enforcement.
+
+* **Secure sticky sessions & load balancing**  
+  Cryptographically binds long-running conversations to the initiating security context, enabling identity-aware load balancing without sacrificing end-to-end protections.
+
+* **Durable cross-domain trust**  
+  Enables secure federation across orgs or clouds, where **policies—not perimeter assumptions—** determine who can talk to whom.
+
+---
+
+## Security Profiles
+
+The **`@naylence/runtime`** package bundles the following profiles:
+
+* **`open`** – minimal controls suitable for local/dev.
+* **`gated`** – OAuth2/JWT-gated admission (authn/authz at the edge).
+* **`overlay`** – message **signing** for provenance and tamper-evidence.
+
+This Advanced Security package enables and implements:
+
+* **`strict-overlay`** – maximum assurance profile combining:
+  * **SPIFFE/X.509 workload identities (SVIDs)**
+  * **sealed overlay encryption** (true end-to-end, multi-hop confidentiality)
+  * **identity-aware, secure load balancing** and **secure sticky sessions**
+
+Install **Naylence Advanced Security** alongside the runtime to unlock **`strict-overlay`** and the capabilities above.
+
+---
+
+## Why Advanced Security?
+
+Agent orchestration introduces unique risks:
+
+* Messages often cross **multiple hops** and **administrative domains**.
+* Long-running jobs and sticky sessions can span **hours or days**.
+* Agents may be **mobile, ephemeral, or untrusted** in their deployment context.
+
+Advanced Security ensures that **security travels with the message**, not the perimeter—making zero-trust the default posture.
+
+---
+
+## Use Cases
+
+* **Federated AI agent systems** — secure orchestration across departments or partner orgs.
+* **Cross-cloud workflows** — durable, encrypted communication across cloud providers and trust boundaries.
+* **Regulated environments** — fine-grained, auditable controls for healthcare, finance, or defense.
+* **Multi-tenant platforms** — strong tenant isolation and policy-based routing in agent platforms.
+
+---
+
+## Getting Started
+
+```bash
+npm install @naylence/advanced-security
+```
+
+After installation, register the factories before bootstrapping your application:
+
+```ts
+import { registerRuntimeFactories } from '@naylence/runtime';
+import { registerAdvancedSecurityFactories } from '@naylence/advanced-security';
+
+registerRuntimeFactories();
+registerAdvancedSecurityFactories();
+
+// proceed to create channels/connectors as usual
+```
+
+For browser usage, build the browser bundle (`npm run build:browser`) or consume the prebuilt file from `dist/browser/index.js`.
+
+---
+
+## Links
+
+* **TypeScript Advanced Security (this repo):** https://github.com/naylence/naylence-advanced-security-ts
+* **Python reference implementation:** https://github.com/naylence/naylence-advanced-security-python
+* **Runtime (TypeScript):** https://github.com/naylence/naylence-runtime-ts
+* **Runtime (Python):** https://github.com/naylence/naylence-runtime-python
+* **Agent SDKs & Examples:** https://github.com/naylence
+
+---
+
+## License
+
+This package is distributed under the **Apache-2.0** license. See [`LICENSE`](./LICENSE) for full terms.