@naylence/advanced-security 0.3.5-test.101 → 0.3.5-test.102

package/dist/types/naylence/fame/security/cert/browser-csr.d.ts

@@ -0,0 +1,9 @@
+import { CreatedEd25519Csr } from "./csr-types.js";
+export interface CreateEd25519CsrOptions {
+    readonly privateKey: CryptoKey;
+    readonly publicKey: CryptoKey;
+    readonly commonName: string;
+    readonly logicals?: readonly string[];
+}
+export declare function createEd25519Csr(options: CreateEd25519CsrOptions): Promise<CreatedEd25519Csr>;
+//# sourceMappingURL=browser-csr.d.ts.map

package/dist/types/naylence/fame/security/cert/browser-csr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-csr.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/browser-csr.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMnD,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAyDD,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAyE5B"}

package/dist/types/naylence/fame/security/cert/ca-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ca-server.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-server.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AA6H/C;;;GAGG;AACH,iBAAe,SAAS,IAAI,OAAO,CAAC;IAClC,GAAG,EAAE,eAAe,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC,CAmBD;AA2CD,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"ca-server.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-server.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EAAE,SAAS,EAAuB,MAAM,eAAe,CAAC;AA0JpE;;;GAGG;AACH,iBAAe,SAAS,IAAI,OAAO,CAAC;IAClC,GAAG,EAAE,eAAe,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC,CAmBD;AA2CD,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/types/naylence/fame/security/cert/ca-service-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ca-service-client.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAarD,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IAEvB,2CAA2C;IAC3C,mBAAmB,EAAE,MAAM,CAAC;IAE5B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAyBxE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAsB,GAC/B,MAAM,CA4DR;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsB;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,UAAU,CAAuB;IAEzC;;;;;OAKG;gBAED,eAAe,EAAE,mBAAmB,EACpC,cAAc,GAAE,MAAa;IAU/B;;;;OAIG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;;;;OASG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAyJ7B"}
+{"version":3,"file":"ca-service-client.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-service-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAcrD,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IAEvB,2CAA2C;IAC3C,mBAAmB,EAAE,MAAM,CAAC;IAE5B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CA6HxE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAsB,GAC/B,MAAM,CAmER;AA+QD;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsB;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,UAAU,CAAuB;IAEzC;;;;;OAKG;gBAED,eAAe,EAAE,mBAAmB,EACpC,cAAc,GAAE,MAAa;IAU/B;;;;OAIG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;;;;OASG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAyJ7B"}

package/dist/types/naylence/fame/security/cert/ca-types.d.ts

@@ -34,6 +34,32 @@ export interface CertificateIssuanceResponse {
     /** Certificate expiration time in ISO format */
     expiresAt: string;
 }
+/**
+ * Trust bundle certificate entry.
+ */
+export interface TrustBundleRoot {
+    /** Certificate in PEM format */
+    pem: string;
+    /** Optional key identifier */
+    kid?: string;
+    /** Optional notBefore timestamp */
+    notBefore?: string;
+    /** Optional notAfter timestamp */
+    notAfter?: string;
+}
+/**
+ * Trust bundle document served by the CA.
+ */
+export interface TrustBundleDocument {
+    /** Monotonic version number that changes when bundle contents rotate */
+    version: number;
+    /** Time the bundle was generated */
+    issuedAt: string;
+    /** Earliest expiration among the bundled roots */
+    validUntil: string | null;
+    /** Trust anchors */
+    roots: TrustBundleRoot[];
+}
 /**
  * Abstract CA signing service interface.
  *
@@ -52,6 +78,12 @@ export declare abstract class CAService {
      * @returns Certificate issuance response with the signed certificate
      */
     abstract issueCertificate(csr: CertificateSigningRequest): Promise<CertificateIssuanceResponse>;
+    /**
+     * Retrieve the current trust bundle served by this CA service.
+     *
+     * Default implementation returns null if the service does not expose a bundle.
+     */
+    getTrustBundle(): Promise<TrustBundleDocument | null>;
 }
 /**
  * Error thrown when a certificate request fails.

package/dist/types/naylence/fame/security/cert/ca-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ca-types.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,WAAW,UAAU;CAE1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IAEf,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IAEvB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,8BAAsB,SAAS;IAC7B;;OAEG;IACH,IAAI,UAAU,IAAI,UAAU,GAAG,IAAI,CAElC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CACvB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;CACxC;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,iBAAiB;IACjB,OAAO,EAAE,MAAM,CAAC;IAEhB,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IAEf,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAElB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IAEnB,gCAAgC;IAChC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC,kCAAkC;IAClC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAC;IAE1D,8BAA8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"ca-types.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/ca-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,WAAW,UAAU;CAE1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IAEf,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IAEvB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IAEZ,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAEhB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IAEjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,oBAAoB;IACpB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,8BAAsB,SAAS;IAC7B;;OAEG;IACH,IAAI,UAAU,IAAI,UAAU,GAAG,IAAI,CAElC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CACvB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAEvC;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAG5D;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,iBAAiB;IACjB,OAAO,EAAE,MAAM,CAAC;IAEhB,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IAEf,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAElB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IAEnB,gCAAgC;IAChC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC,kCAAkC;IAClC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAC;IAE1D,8BAA8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/types/naylence/fame/security/cert/csr-types.d.ts

@@ -0,0 +1,5 @@
+export interface CreatedEd25519Csr {
+    readonly csrPem: string;
+    readonly csrDer: ArrayBuffer;
+}
+//# sourceMappingURL=csr-types.d.ts.map

package/dist/types/naylence/fame/security/cert/csr-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csr-types.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/csr-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B"}

package/dist/types/naylence/fame/security/cert/default-ca-service.d.ts

@@ -4,7 +4,7 @@
  * Wraps InternalCAService (CASigningService) with automatic credential
  * loading from environment variables and test CA fallback.
  */
-import type { Authorizer, CertificateIssuanceResponse, CertificateSigningRequest } from "./ca-types.js";
+import type { Authorizer, CertificateIssuanceResponse, CertificateSigningRequest, TrustBundleDocument } from "./ca-types.js";
 import { CAService } from "./ca-types.js";
 /**
  * Environment variable names for CA credentials.
@@ -80,5 +80,6 @@ export declare class DefaultCAService extends CAService {
      * @returns Certificate issuance response with the signed certificate
      */
     issueCertificate(csr: CertificateSigningRequest): Promise<CertificateIssuanceResponse>;
+    getTrustBundle(): Promise<TrustBundleDocument | null>;
 }
 //# sourceMappingURL=default-ca-service.d.ts.map

package/dist/types/naylence/fame/security/cert/default-ca-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-ca-service.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C;;GAEG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AACrD,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAC/E,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAC7E,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAaD;;;;;;;GAOG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAa;gBAErC,OAAO,GAAE,uBAA4B;IAWjD,IAAI,UAAU,IAAI,UAAU,GAAG,IAAI,CAElC;IAED;;;;OAIG;YACW,gBAAgB;IAwF9B;;;;;OAKG;YACW,gBAAgB;IAsB9B;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;;;;OAKG;IACG,gBAAgB,CACpB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;CAqGxC"}
+{"version":3,"file":"default-ca-service.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,UAAU,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C;;GAEG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AACrD,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAC/E,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAC7E,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAaD;;;;;;;GAOG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAa;gBAErC,OAAO,GAAE,uBAA4B;IAWjD,IAAI,UAAU,IAAI,UAAU,GAAG,IAAI,CAElC;IAED;;;;OAIG;YACW,gBAAgB;IAwF9B;;;;;OAKG;YACW,gBAAgB;IAsB9B;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;;;;OAKG;IACG,gBAAgB,CACpB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAsGjB,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAkC5E"}

package/dist/types/naylence/fame/security/cert/default-certificate-manager.d.ts

@@ -1,5 +1,5 @@
 import type { NodeWelcomeFrame, SecuritySettings } from "@naylence/core";
-import { SigningConfigClass, type SigningConfigOptions, type CertificateManager, type NodeLike, type SigningConfig } from "@naylence/runtime/node";
+import { SigningConfigClass, type SigningConfigOptions, type CertificateManager, type NodeLike, type SigningConfig } from "@naylence/runtime";
 export type SigningConfigInstance = InstanceType<typeof SigningConfigClass>;
 export interface DefaultCertificateManagerOptions {
     readonly signing?: SigningConfigInstance | SigningConfigOptions | SigningConfig | null;
@@ -7,13 +7,39 @@ export interface DefaultCertificateManagerOptions {
     readonly caServiceUrl?: string | null;
     readonly cryptoProvider?: unknown | null;
     readonly crypto_provider?: unknown | null;
+    /**
+     * Optional certificate material source that is preferred before falling back to environment variables.
+     * Accepts either a static material object or a function that resolves it lazily for browser runtimes.
+     */
+    readonly certificateMaterial?: CertificateMaterialSource | null;
+    /**
+     * Optional trust-store PEM source used when validating x509 chains outside of Node environments.
+     */
+    readonly trustStorePem?: TrustStorePemSource | null;
+    /**
+     * Optional hook invoked after certificate material is stored, enabling custom persistence (e.g., IndexedDB).
+     */
+    readonly persistCertificateMaterial?: CertificatePersistenceHook | null;
 }
+type CertificateMaterial = {
+    readonly certificatePem: string;
+    readonly certificateChainPem: string | null;
+};
+type MaybePromise<T> = T | Promise<T>;
+type CertificateMaterialSource = CertificateMaterial | (() => MaybePromise<CertificateMaterial | null>);
+type TrustStorePemSource = string | (() => MaybePromise<string | null>);
+type CertificatePersistenceHook = (material: CertificateMaterial, context: {
+    nodeId: string | null;
+}) => MaybePromise<void>;
 export declare class DefaultCertificateManager implements CertificateManager {
     readonly priority = 1500;
     private signing;
     private securitySettings;
     private readonly caServiceUrl;
     private readonly cryptoProviderOverride;
+    private readonly certificateMaterialResolver;
+    private readonly trustStorePemResolver;
+    private readonly certificatePersistenceHook;
     private node;
     private pendingWelcomeFrame;
     constructor(options?: DefaultCertificateManagerOptions);
@@ -29,10 +55,16 @@ export declare class DefaultCertificateManager implements CertificateManager {
     private prepareProviderForWelcome;
     private resolveCryptoProvider;
     private ensureExistingCertificateIsTrusted;
+    private resolveCertificateMaterialFromInjectedSources;
+    private resolveCertificateMaterialFromProvider;
     private getCaSignGrant;
     private requestCertificateFromCa;
     private createAuthStrategyForGrant;
     private validateProviderCertificate;
+    private resolveTrustStorePemValue;
+    private resolveTrustStorePemFromProvider;
+    private storeCertificateMaterial;
+    private buildCertificateSigningRequest;
 }
 export default DefaultCertificateManager;
 //# sourceMappingURL=default-certificate-manager.d.ts.map

package/dist/types/naylence/fame/security/cert/default-certificate-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-certificate-manager.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAGL,kBAAkB,EAGlB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAahC,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5E,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EACb,qBAAqB,GACrB,oBAAoB,GACpB,aAAa,GACb,IAAI,CAAC;IACT,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3C;AA8CD,qBAAa,yBAA0B,YAAW,kBAAkB;IAClE,SAAgB,QAAQ,QAAQ;IAEhC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiB;IACxD,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,mBAAmB,CAAiC;gBAEzC,OAAO,GAAE,gCAAqC;IAQ1D,UAAU,CACf,OAAO,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,IAAI,GAC3D,IAAI;IAIA,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAI9D,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAuC5C,SAAS,CAAC,YAAY,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCxD,iBAAiB,CAC5B,YAAY,EAAE,gBAAgB,EAC9B,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACzC,OAAO,CAAC,OAAO,CAAC;IAoHnB,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,sBAAsB;IAsB9B,OAAO,CAAC,yBAAyB;IAwBjC,OAAO,CAAC,qBAAqB;YAcf,kCAAkC;IAsBhD,OAAO,CAAC,cAAc;YAoCR,wBAAwB;YA+HxB,0BAA0B;YAkB1B,2BAA2B;CAmF1C;AAwPD,eAAe,yBAAyB,CAAC"}
+{"version":3,"file":"default-certificate-manager.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAGL,kBAAkB,EAGlB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAc3B,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5E,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EACb,qBAAqB,GACrB,oBAAoB,GACpB,aAAa,GACb,IAAI,CAAC;IACT,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAChE;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACpD;;OAEG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;CACzE;AAED,KAAK,mBAAmB,GAAG;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7C,CAAC;AAEF,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,KAAK,yBAAyB,GAC1B,mBAAmB,GACnB,CAAC,MAAM,YAAY,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC,CAAC;AAErD,KAAK,mBAAmB,GAAG,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;AAExE,KAAK,0BAA0B,GAAG,CAChC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAC/B,YAAY,CAAC,IAAI,CAAC,CAAC;AA+CxB,qBAAa,yBAA0B,YAAW,kBAAkB;IAClE,SAAgB,QAAQ,QAAQ;IAEhC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiB;IACxD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAqC;IACjF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+B;IACrE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAoC;IAC/E,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,mBAAmB,CAAiC;gBAEzC,OAAO,GAAE,gCAAqC;IAkB1D,UAAU,CACf,OAAO,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,IAAI,GAC3D,IAAI;IAIA,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAI9D,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAuC5C,SAAS,CAAC,YAAY,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCxD,iBAAiB,CAC5B,YAAY,EAAE,gBAAgB,EAC9B,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACzC,OAAO,CAAC,OAAO,CAAC;IA+HnB,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,sBAAsB;IAsB9B,OAAO,CAAC,yBAAyB;IAwBjC,OAAO,CAAC,qBAAqB;YAcf,kCAAkC;YAsBlC,6CAA6C;YAmC7C,sCAAsC;IAoBpD,OAAO,CAAC,cAAc;YAoCR,wBAAwB;YAsHxB,0BAA0B;YAkB1B,2BAA2B;YAqF3B,yBAAyB;YAwCzB,gCAAgC;YAoBhC,wBAAwB;YA8CxB,8BAA8B;CAmD7C;AA+SD,eAAe,yBAAyB,CAAC"}

package/dist/types/naylence/fame/security/cert/index.d.ts

@@ -1,10 +1,14 @@
 export { validateJwkX5cCertificate, type ValidateJwkX5cCertificateOptions, type ValidateJwkX5cCertificateResult, publicKeyFromX5c, type PublicKeyFromX5cOptions, } from "./util.js";
 export { GRANT_PURPOSE_CA_SIGN } from "./grants.js";
+export { createEd25519CsrFromPem, type CreateEd25519CsrFromPemOptions, } from "./node-ed25519-csr.js";
+export { createEd25519Csr, type CreateEd25519CsrOptions, } from "./browser-csr.js";
+export { type CreatedEd25519Csr } from "./csr-types.js";
 export { DefaultCertificateManager, type DefaultCertificateManagerOptions, type SigningConfigInstance as DefaultCertificateManagerSigningConfigInstance, } from "./default-certificate-manager.js";
 export { DefaultCertificateManagerFactory, FACTORY_META as DEFAULT_CERTIFICATE_MANAGER_FACTORY_META, type DefaultCertificateManagerConfig, } from "./default-certificate-manager-factory.js";
 export { type Authorizer, type CertificateSigningRequest, type CertificateIssuanceResponse, CAService, CertificateRequestError, type CertificateInfo, } from "./ca-types.js";
 export { CAServiceClient, extractCertificateInfo, formatCertificateInfo, type HttpConnectionGrant, type CertificateRequestResponse, ENV_VAR_FAME_CA_SERVICE_URL, } from "./ca-service-client.js";
-export { CASigningService, type CASigningServiceOptions, SID_OID, LOGICALS_OID, NODE_ID_OID, createTestCA, extractSpiffeIdFromCert, extractSidFromCert, extractNodeIdFromCert, extractLogicalHostsFromCert, extractSidFromSpiffeId, verifyCertSidIntegrity, } from "./internal-ca-service.js";
+export { CASigningService, type CASigningServiceOptions, createTestCA, extractSpiffeIdFromCert, extractSidFromCert, extractNodeIdFromCert, extractLogicalHostsFromCert, extractSidFromSpiffeId, verifyCertSidIntegrity, } from "./internal-ca-service.js";
+export { SID_OID, LOGICALS_OID, NODE_ID_OID } from "./oid-constants.js";
 export { DefaultCAService, type DefaultCAServiceOptions, ENV_FAME_CA_CERT_FILE, ENV_FAME_CA_CERT_PEM, ENV_FAME_CA_KEY_FILE, ENV_FAME_CA_KEY_PEM, ENV_FAME_INTERMEDIATE_CHAIN_FILE, ENV_FAME_INTERMEDIATE_CHAIN_PEM, ENV_FAME_SIGNING_CERT_FILE, ENV_FAME_SIGNING_CERT_PEM, ENV_FAME_SIGNING_KEY_FILE, ENV_FAME_SIGNING_KEY_PEM, } from "./default-ca-service.js";
 export { CAServiceFactory, type CAServiceConfig, CA_SERVICE_FACTORY_BASE_TYPE, } from "./ca-service-factory.js";
 export { DefaultCAServiceFactory, type DefaultCAServiceConfig, } from "./default-ca-service-factory.js";

package/dist/types/naylence/fame/security/cert/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,gBAAgB,EAChB,KAAK,uBAAuB,GAC7B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,IAAI,8CAA8C,GAC7E,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gCAAgC,EAChC,YAAY,IAAI,wCAAwC,EACxD,KAAK,+BAA+B,GACrC,MAAM,0CAA0C,CAAC;AAGlD,OAAO,EACL,KAAK,UAAU,EACf,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,SAAS,EACT,uBAAuB,EACvB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,OAAO,EACP,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,gCAAgC,EAChC,+BAA+B,EAC/B,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,gBAAgB,EAChB,KAAK,uBAAuB,GAC7B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,IAAI,8CAA8C,GAC7E,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gCAAgC,EAChC,YAAY,IAAI,wCAAwC,EACxD,KAAK,+BAA+B,GACrC,MAAM,0CAA0C,CAAC;AAGlD,OAAO,EACL,KAAK,UAAU,EACf,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,SAAS,EACT,uBAAuB,EACvB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,gCAAgC,EAChC,+BAA+B,EAC/B,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,iCAAiC,CAAC"}

package/dist/types/naylence/fame/security/cert/internal-ca-service.d.ts

@@ -6,9 +6,6 @@
  */
 import type { CertificateIssuanceResponse, CertificateSigningRequest } from "./ca-types.js";
 import { CAService } from "./ca-types.js";
-export declare const SID_OID = "1.3.6.1.4.1.58530.1";
-export declare const LOGICALS_OID = "1.3.6.1.4.1.58530.2";
-export declare const NODE_ID_OID = "1.3.6.1.4.1.58530.4";
 /**
  * Options for CASigningService.
  */

package/dist/types/naylence/fame/security/cert/internal-ca-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal-ca-service.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/internal-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,eAAO,MAAM,OAAO,wBAAwB,CAAC;AAC7C,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAClD,eAAO,MAAM,WAAW,wBAAwB,CAAC;AAoejD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IAEpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IAEnB,yDAAyD;IACzD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,yDAAyD;IACzD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAS;IAE7C,OAAO,CAAC,QAAQ,CAAC,CAA0B;IAC3C,OAAO,CAAC,OAAO,CAAC,CAAY;IAC5B,OAAO,CAAC,WAAW,CAAC,CAA0B;IAC9C,OAAO,CAAC,UAAU,CAAC,CAAY;gBAEnB,OAAO,EAAE,uBAAuB;YAS9B,mBAAmB;YAiBnB,sBAAsB;IAuBpC,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,aAAa;IAOrB;;;;;;;;OAQG;IACG,gBAAgB,CACpB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAuCvC;;;;;;;;;;;OAWG;IACG,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,OAAO,GAAE,MAAY,EACrB,iBAAiB,GAAE,MAAwB,GAC1C,OAAO,CAAC,MAAM,CAAC;IAyDlB;;;;;;;;OAQG;IACG,oBAAoB,CACxB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,EACxB,OAAO,GAAE,MAAa,GACrB,OAAO,CAAC,MAAM,CAAC;CA2CnB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CA8CtE;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBxB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAoB5B;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,EAAE,CAAC,CAsBnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYtE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAqBlB"}
+{"version":3,"file":"internal-ca-service.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/internal-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAqe1C;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IAEpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IAEnB,yDAAyD;IACzD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,yDAAyD;IACzD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAS;IAE7C,OAAO,CAAC,QAAQ,CAAC,CAA0B;IAC3C,OAAO,CAAC,OAAO,CAAC,CAAY;IAC5B,OAAO,CAAC,WAAW,CAAC,CAA0B;IAC9C,OAAO,CAAC,UAAU,CAAC,CAAY;gBAEnB,OAAO,EAAE,uBAAuB;YAS9B,mBAAmB;YAiBnB,sBAAsB;IAuBpC,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,aAAa;IAOrB;;;;;;;;OAQG;IACG,gBAAgB,CACpB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAuCvC;;;;;;;;;;;OAWG;IACG,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,OAAO,GAAE,MAAY,EACrB,iBAAiB,GAAE,MAAwB,GAC1C,OAAO,CAAC,MAAM,CAAC;IAyDlB;;;;;;;;OAQG;IACG,oBAAoB,CACxB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,EACxB,OAAO,GAAE,MAAa,GACrB,OAAO,CAAC,MAAM,CAAC;CA2CnB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CA8CtE;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBxB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAoB5B;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,EAAE,CAAC,CAsBnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYtE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAqBlB"}

package/dist/types/naylence/fame/security/cert/node-ed25519-csr.d.ts

@@ -0,0 +1,9 @@
+import { CreatedEd25519Csr } from "./csr-types.js";
+export interface CreateEd25519CsrFromPemOptions {
+    readonly privateKeyPem: string;
+    readonly publicKeyPem: string;
+    readonly commonName: string;
+    readonly logicals?: readonly string[];
+}
+export declare function createEd25519CsrFromPem(options: CreateEd25519CsrFromPemOptions): Promise<CreatedEd25519Csr>;
+//# sourceMappingURL=node-ed25519-csr.d.ts.map

package/dist/types/naylence/fame/security/cert/node-ed25519-csr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-ed25519-csr.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/node-ed25519-csr.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAQnD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,iBAAiB,CAAC,CA+C5B"}

package/dist/types/naylence/fame/security/cert/oid-constants.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Common certificate extension OIDs shared across server and client logic.
+ */
+export declare const SID_OID = "1.3.6.1.4.1.58530.1";
+export declare const LOGICALS_OID = "1.3.6.1.4.1.58530.2";
+export declare const NODE_ID_OID = "1.3.6.1.4.1.58530.4";
+//# sourceMappingURL=oid-constants.d.ts.map

package/dist/types/naylence/fame/security/cert/oid-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oid-constants.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/oid-constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,OAAO,wBAAwB,CAAC;AAC7C,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAClD,eAAO,MAAM,WAAW,wBAAwB,CAAC"}

package/dist/types/naylence/fame/security/cert/trust-store/anchor-utils.d.ts

@@ -0,0 +1,12 @@
+import type { TrustAnchor } from "./trust-store-provider.js";
+export declare function isPem(value: string | null | undefined): value is string;
+export declare function extractPemBlocks(value: string): string[];
+export declare function pemChainToAnchors(pem: string): TrustAnchor[];
+export declare function anchorsToPem(anchors: Iterable<TrustAnchor>): string;
+export declare function normalizePem(pem: string): string;
+export declare function computeSpkiSha256(pem: string): string | null;
+export declare function withComputedSpki(anchors: readonly TrustAnchor[]): TrustAnchor[];
+export declare function dataUriToPem(dataUri: string): string | null;
+export declare function toBase64Url(data: Uint8Array): string;
+export declare function parsePemOrThrow(pem: string): string;
+//# sourceMappingURL=anchor-utils.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/anchor-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-utils.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/anchor-utils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAQ7D,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,MAAM,CAEvE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAaxD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAM5D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,MAAM,CAQnE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiB5D;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,WAAW,EAAE,GAC9B,WAAW,EAAE,CAaf;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAQpD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMnD"}

package/dist/types/naylence/fame/security/cert/trust-store/env-provider.d.ts

@@ -0,0 +1,7 @@
+import type { TrustStoreProvider } from "./trust-store-provider.js";
+export interface CreateTrustStoreProviderOptions {
+    readonly env?: Record<string, unknown> | null;
+    readonly requirePinsInBrowser?: boolean;
+}
+export declare function createTrustStoreProviderFromEnv(options?: CreateTrustStoreProviderOptions): Promise<TrustStoreProvider | null>;
+//# sourceMappingURL=env-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/env-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/env-provider.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAOV,kBAAkB,EACnB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,wBAAsB,+BAA+B,CACnD,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA6BpC"}

package/dist/types/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.d.ts

@@ -0,0 +1,9 @@
+import type { TrustBundleSource } from "./trust-store-provider.js";
+export interface ParseFameCaCertsOptions {
+    readonly hashPins?: string | string[] | null;
+    readonly allowedSpkis?: string | string[] | null;
+    readonly allowTofu?: string | boolean | null;
+    readonly refreshIntervalMs?: string | number | null;
+}
+export declare function parseFameCaCerts(rawSources: unknown, options?: ParseFameCaCertsOptions): TrustBundleSource[];
+//# sourceMappingURL=fame-ca-certs-parser.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fame-ca-certs-parser.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/fame-ca-certs-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAKV,iBAAiB,EAElB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACrD;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,OAAO,EACnB,OAAO,GAAE,uBAA4B,GACpC,iBAAiB,EAAE,CAmDrB"}

package/dist/types/naylence/fame/security/cert/trust-store/http-bundle-provider.d.ts

@@ -0,0 +1,31 @@
+import type { TrustAnchor, TrustStoreProvider, TrustBundlePins } from "./trust-store-provider.js";
+export interface HttpBundleProviderOptions extends TrustBundlePins {
+    readonly url: string;
+    readonly cacheKey?: string;
+    readonly enforcePinsInBrowser?: boolean;
+}
+export declare class HttpBundleProvider implements TrustStoreProvider {
+    private readonly url;
+    private readonly refreshIntervalMs;
+    private readonly hashPins;
+    private readonly allowedSpkis;
+    private readonly allowTofu;
+    private readonly enforceBrowserPins;
+    private readonly cacheKey;
+    private lastFetched;
+    private etag;
+    private lastKnownHash;
+    private version;
+    private anchors;
+    private inflight;
+    private readonly listeners;
+    private initialized;
+    constructor(options: HttpBundleProviderOptions);
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    onUpdate(callback: () => void): () => void;
+    private initialize;
+    private applyCachedEntry;
+    private fetchLatest;
+    private notifyListeners;
+}
+//# sourceMappingURL=http-bundle-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/http-bundle-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-bundle-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/http-bundle-provider.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EAChB,MAAM,2BAA2B,CAAC;AAUnC,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAgBD,qBAAa,kBAAmB,YAAW,kBAAkB;IAC3D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,WAAW,CAAS;gBAET,OAAO,EAAE,yBAAyB;IA8BxC,QAAQ,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IA6BjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;YAOnC,UAAU;IAgBxB,OAAO,CAAC,gBAAgB;YAQV,WAAW;IAiFzB,OAAO,CAAC,eAAe;CASxB"}

package/dist/types/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.d.ts

@@ -0,0 +1,2 @@
+export { HttpBundleProvider } from "./http-bundle-provider.js";
+//# sourceMappingURL=http-signed-bundle-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-signed-bundle-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/http-signed-bundle-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/types/naylence/fame/security/cert/trust-store/static-bundle-provider.d.ts

@@ -0,0 +1,13 @@
+import type { TrustAnchor, TrustStoreProvider } from "./trust-store-provider.js";
+export interface StaticBundleProviderOptions {
+    readonly label?: string;
+}
+export declare class StaticBundleProvider implements TrustStoreProvider {
+    private readonly anchors;
+    constructor(anchors: Iterable<TrustAnchor>);
+    getRoots(): Promise<readonly TrustAnchor[]>;
+}
+export declare function loadPemFromFile(path: string): Promise<string>;
+export declare function createProviderFromPem(pem: string): StaticBundleProvider;
+export declare function createProviderFromDataUri(dataUri: string): StaticBundleProvider;
+//# sourceMappingURL=static-bundle-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/static-bundle-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-bundle-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/static-bundle-provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEjF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAE9B,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;IAQpC,QAAQ,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;CAGzD;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAM/E"}

package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider.d.ts

@@ -0,0 +1,37 @@
+export interface TrustAnchor {
+    readonly pem: string;
+    readonly kid?: string;
+    readonly notBefore?: string;
+    readonly notAfter?: string;
+    readonly spkiSha256?: string;
+    readonly version?: number;
+}
+export interface TrustStoreProvider {
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    onUpdate?(callback: () => void): () => void;
+}
+export type TrustBundleSourceType = "INLINE_PEM" | "DATA_PEM" | "FILE" | "HTTPS_BUNDLE";
+export interface TrustBundlePins {
+    readonly hashPins?: readonly string[];
+    readonly allowedSpkis?: readonly string[];
+    readonly allowTofu?: boolean;
+    readonly refreshIntervalMs?: number;
+}
+export interface InlinePemSource {
+    readonly type: "INLINE_PEM";
+    readonly pem: string;
+}
+export interface DataPemSource {
+    readonly type: "DATA_PEM";
+    readonly dataUri: string;
+}
+export interface FilePemSource {
+    readonly type: "FILE";
+    readonly path: string;
+}
+export interface HttpsBundleSource extends TrustBundlePins {
+    readonly type: "HTTPS_BUNDLE";
+    readonly url: string;
+}
+export type TrustBundleSource = InlinePemSource | DataPemSource | FilePemSource | HttpsBundleSource;
+//# sourceMappingURL=trust-store-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-store-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/trust-store-provider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAC5C,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;CAC7C;AAED,MAAM,MAAM,qBAAqB,GAC7B,YAAY,GACZ,UAAU,GACV,MAAM,GACN,cAAc,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,aAAa,GACb,aAAa,GACb,iBAAiB,CAAC"}

package/dist/types/naylence/fame/security/cert/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/util.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAQZ,MAAM,qBAAqB,CAAC;AA4B7B,MAAM,WAAW,gCAAgC;IAC/C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,UAAU,CAAC;AACd,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,EAAE,uBAAuB,GAAG;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,GAC7D;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC;AA+DvD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,+BAA+B,CAgDjC"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/util.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAQZ,MAAM,qBAAqB,CAAC;AA2B7B,MAAM,WAAW,gCAAgC;IAC/C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,UAAU,CAAC;AACd,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,EAAE,uBAAuB,GAAG;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,GAC7D;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC;AA+DvD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,+BAA+B,CAgDjC"}

package/dist/types/version.d.ts

@@ -2,5 +2,5 @@
  * The package version, injected at build time.
  * @internal
  */
-export declare const VERSION = "0.3.5-test.101";
+export declare const VERSION = "0.3.5-test.102";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@naylence/advanced-security",
-  "version": "0.3.5-test.101",
+  "version": "0.3.5-test.102",
   "type": "module",
   "description": "Advanced security utilities for the Naylence Fame runtime implemented in TypeScript.",
   "author": "Naylence Dev <naylencedev@gmail.com>",
-  "license": "Apache-2.0",
+  "license": "BUSL-1.1",
   "keywords": [
     "naylence",
     "fame",
@@ -62,6 +62,7 @@
     "test": "jest --passWithNoTests",
     "test:watch": "jest --watch",
     "test:coverage": "jest --coverage --passWithNoTests",
+  "test:vitest": "vitest run",
     "lint": "eslint src/**/*.ts",
     "lint:fix": "eslint src/**/*.ts --fix",
     "format": "prettier --write \"src/**/*.ts\"",
@@ -71,13 +72,14 @@
     "prepublishOnly": "npm run build && npm test"
   },
   "dependencies": {
-    "@naylence/runtime": "^0.3.5-test.907",
+    "@naylence/runtime": "^0.3.5-test.911",
     "@noble/ciphers": "^2.0.1",
     "@noble/curves": "^1.4.0",
     "@noble/ed25519": "^2.1.0",
     "@noble/hashes": "^1.4.0",
-    "@peculiar/asn1-schema": "^2.5.0",
-    "@peculiar/asn1-x509": "^2.5.0",
+  "@peculiar/asn1-csr": "^2.5.0",
+  "@peculiar/asn1-schema": "^2.5.0",
+  "@peculiar/asn1-x509": "^2.5.0",
     "@peculiar/x509": "^1.14.0",
     "fastify": "^5.6.1",
     "jose": "^6.1.0",
@@ -123,6 +125,7 @@
     "ts-jest": "^29.4.4",
     "tslib": "^2.6.2",
     "typescript": "^5.3.2",
+    "vitest": "^2.1.4",
     "ws": "^8.18.0"
   },
   "engines": {