@naylence/advanced-security 0.3.6 → 0.3.7-test.111

package/dist/types/naylence/fame/security/cert/trust-store/static-bundle-provider.d.ts

@@ -0,0 +1,15 @@
+import type { TrustAnchor, TrustStoreProvider } from "./trust-store-provider.js";
+export interface StaticBundleProviderOptions {
+    readonly label?: string;
+}
+export declare class StaticBundleProvider implements TrustStoreProvider {
+    private readonly anchors;
+    private readonly pemChain;
+    constructor(anchors: Iterable<TrustAnchor>);
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    getTrustStorePem(): Promise<string>;
+}
+export declare function loadPemFromFile(path: string): Promise<string>;
+export declare function createProviderFromPem(pem: string): StaticBundleProvider;
+export declare function createProviderFromDataUri(dataUri: string): StaticBundleProvider;
+//# sourceMappingURL=static-bundle-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/static-bundle-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-bundle-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/static-bundle-provider.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEjF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEf,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;IASpC,QAAQ,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAI3C,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;CAMjD;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAM/E"}

package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider-factory.d.ts

@@ -0,0 +1,28 @@
+import type { CreateResourceOptions, ResourceConfig } from "@naylence/factory";
+import { AbstractResourceFactory } from "@naylence/factory";
+import type { TrustAnchor, TrustStoreProvider } from "./trust-store-provider.js";
+export interface TrustStoreProviderConfig extends ResourceConfig {
+    readonly type: string;
+}
+export interface TrustStoreProviderDependencies {
+    readonly env?: Record<string, unknown> | null;
+    readonly [key: string]: unknown;
+}
+export interface CreateTrustStoreProviderOptions extends Omit<CreateResourceOptions, "factoryArgs"> {
+    readonly factoryArgs?: unknown[];
+    readonly dependencies?: TrustStoreProviderDependencies;
+}
+export declare const TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE = "TrustStoreProviderFactory";
+export declare abstract class TrustStoreProviderFactory<C extends TrustStoreProviderConfig = TrustStoreProviderConfig> extends AbstractResourceFactory<TrustStoreProvider, C> {
+    abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<TrustStoreProvider>;
+    protected createUnconfiguredProvider(reason?: string): TrustStoreProvider;
+    static createTrustStoreProvider<C extends TrustStoreProviderConfig = TrustStoreProviderConfig>(config?: C | Record<string, unknown> | null, options?: CreateTrustStoreProviderOptions): Promise<TrustStoreProvider>;
+}
+export declare class NullTrustStoreProvider implements TrustStoreProvider {
+    private readonly reason;
+    constructor(reason?: string);
+    getTrustStorePem(): Promise<string>;
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    initialize(): Promise<void>;
+}
+//# sourceMappingURL=trust-store-provider-factory.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-store-provider-factory.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/trust-store-provider-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EACL,uBAAuB,EAGxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEjF,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,+BACf,SAAQ,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACxD;AAKD,eAAO,MAAM,sCAAsC,8BAA8B,CAAC;AAElF,8BAAsB,yBAAyB,CAC7C,CAAC,SAAS,wBAAwB,GAAG,wBAAwB,CAC7D,SAAQ,uBAAuB,CAAC,kBAAkB,EAAE,CAAC,CAAC;aACtC,MAAM,CACpB,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EAC3C,GAAG,WAAW,EAAE,OAAO,EAAE,GACxB,OAAO,CAAC,kBAAkB,CAAC;IAE9B,SAAS,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB;WAIrD,wBAAwB,CAC1C,CAAC,SAAS,wBAAwB,GAAG,wBAAwB,EAE7D,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EAC3C,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,kBAAkB,CAAC;CA6B/B;AAED,qBAAa,sBAAuB,YAAW,kBAAkB;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEb,MAAM,GAAE,MAAqC;IAInD,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAInC,QAAQ,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAI3C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGzC"}

package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider.d.ts

@@ -0,0 +1,43 @@
+export interface TrustAnchor {
+    readonly pem: string;
+    readonly kid?: string;
+    readonly notBefore?: string;
+    readonly notAfter?: string;
+    readonly spkiSha256?: string;
+    readonly version?: number;
+}
+export interface TrustStoreProvider {
+    /**
+     * Resolve the PEM-encoded trust bundle used for certificate verification. Implementations
+     * should normalize line endings and return the same material they expose via {@link getRoots}.
+     */
+    getTrustStorePem(): Promise<string>;
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    onUpdate?(callback: () => void): () => void;
+    initialize?(): Promise<void> | void;
+}
+export type TrustBundleSourceType = "INLINE_PEM" | "DATA_PEM" | "FILE" | "HTTPS_BUNDLE";
+export interface TrustBundlePins {
+    readonly hashPins?: readonly string[];
+    readonly allowedSpkis?: readonly string[];
+    readonly allowTofu?: boolean;
+    readonly refreshIntervalMs?: number;
+}
+export interface InlinePemSource {
+    readonly type: "INLINE_PEM";
+    readonly pem: string;
+}
+export interface DataPemSource {
+    readonly type: "DATA_PEM";
+    readonly dataUri: string;
+}
+export interface FilePemSource {
+    readonly type: "FILE";
+    readonly path: string;
+}
+export interface HttpsBundleSource extends TrustBundlePins {
+    readonly type: "HTTPS_BUNDLE";
+    readonly url: string;
+}
+export type TrustBundleSource = InlinePemSource | DataPemSource | FilePemSource | HttpsBundleSource;
+//# sourceMappingURL=trust-store-provider.d.ts.map

package/dist/types/naylence/fame/security/cert/trust-store/trust-store-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-store-provider.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/cert/trust-store/trust-store-provider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAC5C,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAC5C,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,MAAM,qBAAqB,GAC7B,YAAY,GACZ,UAAU,GACV,MAAM,GACN,cAAc,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,aAAa,GACb,aAAa,GACb,iBAAiB,CAAC"}

package/dist/types/naylence/fame/security/cert/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/util.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAQZ,MAAM,qBAAqB,CAAC;AA4B7B,MAAM,WAAW,gCAAgC;IAC/C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,UAAU,CAAC;AACd,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,EAAE,uBAAuB,GAAG;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,GAC7D;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC;AA+DvD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,+BAA+B,CAgDjC"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/util.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAQZ,MAAM,qBAAqB,CAAC;AA2B7B,MAAM,WAAW,gCAAgC;IAC/C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,UAAU,CAAC;AACd,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,EAAE,uBAAuB,GAAG;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,GAC7D;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC;AA+DvD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,+BAA+B,CAgDjC"}

package/dist/types/naylence/fame/security/encryption/channel/channel-encryption-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-encryption-manager.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/encryption/channel/channel-encryption-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,YAAY,EAOlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAclD,KAAK,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAiJlD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/C;AAED,qBAAa,wBAAyB,YAAW,iBAAiB;IAChE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAA8B;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IACtE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;gBAEhD,EACV,oBAA2B,EAC3B,QAAe,EACf,WAAkB,GACnB,GAAE,oCAAyC;IAO/B,eAAe,CAC1B,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,iBAAiB,GAAG,IAAW,GACpC,OAAO,CAAC,gBAAgB,CAAC;IAiDf,eAAe,CAC1B,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,iBAAiB,GAAG,IAAW,GACpC,OAAO,CAAC,YAAY,CAAC;IA8FX,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+D1D,mBAAmB,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAA2B,GAClC,OAAO,CAAC,IAAI,CAAC;IAqDhB;;;;OAIG;IACI,+BAA+B,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAWjE,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,mBAAmB;YA0Bb,yBAAyB;YAsCzB,6BAA6B;YAyC7B,wBAAwB;YA4CxB,eAAe;IAe7B,OAAO,CAAC,kBAAkB;IAuD1B,OAAO,CAAC,gBAAgB;IA2BxB,OAAO,CAAC,iBAAiB;IA0BzB,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,+BAA+B;YAQzB,oBAAoB;YAiCpB,gBAAgB;IA4C9B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,gBAAgB;CA6CzB"}
+{"version":3,"file":"channel-encryption-manager.d.ts","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/encryption/channel/channel-encryption-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,YAAY,EAOlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAclD,KAAK,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAuKlD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/C;AAED,qBAAa,wBAAyB,YAAW,iBAAiB;IAChE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAA8B;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IACtE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;gBAEhD,EACV,oBAA2B,EAC3B,QAAe,EACf,WAAkB,GACnB,GAAE,oCAAyC;IAO/B,eAAe,CAC1B,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,iBAAiB,GAAG,IAAW,GACpC,OAAO,CAAC,gBAAgB,CAAC;IAiDf,eAAe,CAC1B,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,iBAAiB,GAAG,IAAW,GACpC,OAAO,CAAC,YAAY,CAAC;IA8FX,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+D1D,mBAAmB,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAA2B,GAClC,OAAO,CAAC,IAAI,CAAC;IAqDhB;;;;OAIG;IACI,+BAA+B,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAWjE,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,mBAAmB;YA0Bb,yBAAyB;YAsCzB,6BAA6B;YAyC7B,wBAAwB;YA4CxB,eAAe;IAe7B,OAAO,CAAC,kBAAkB;IAuD1B,OAAO,CAAC,gBAAgB;IA2BxB,OAAO,CAAC,iBAAiB;IA0BzB,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,+BAA+B;YAQzB,oBAAoB;YAiCpB,gBAAgB;IA4C9B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,gBAAgB;CA6CzB"}

package/dist/types/naylence/fame/security/register-advanced-security-factories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-advanced-security-factories.d.ts","sourceRoot":"","sources":["../../../../../src/naylence/fame/security/register-advanced-security-factories.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAK7C,KAAK,gBAAgB,GAAG,IAAI,CAAC,OAAO,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAgJjE,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAsB,iCAAiC,CACrD,SAAS,GAAE,gBAA2B,EACtC,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"register-advanced-security-factories.d.ts","sourceRoot":"","sources":["../../../../../src/naylence/fame/security/register-advanced-security-factories.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAU7C,KAAK,gBAAgB,GAAG,IAAI,CAAC,OAAO,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AA0YjE,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAsB,iCAAiC,CACrD,SAAS,GAAE,gBAA2B,EACtC,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/types/naylence/fame/security/signing/eddsa-envelope-verifier-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eddsa-envelope-verifier-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/signing/eddsa-envelope-verifier-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAEL,uBAAuB,EAEvB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;CACxC;AAED,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,KAAK,aAAa,GAAG,qBAAqB,CAAC;AAE3C,qBAAa,oCAAqC,SAAQ,uBAAuB,CAAC,2BAA2B,CAAC;IAC5G,SAAgB,IAAI,2BAA2B;IAC/C,SAAgB,SAAS,QAAQ;IACjC,SAAgB,QAAQ,OAAO;IAElB,MAAM,CACjB,OAAO,CAAC,EAAE,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,EAChC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,EACpC,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,gBAAgB,CAAC;CAY7B;AAED,eAAe,oCAAoC,CAAC"}
+{"version":3,"file":"eddsa-envelope-verifier-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/signing/eddsa-envelope-verifier-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAEL,uBAAuB,EAEvB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAGtC,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;CACxC;AAED,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,KAAK,aAAa,GAAG,qBAAqB,CAAC;AAE3C,qBAAa,oCAAqC,SAAQ,uBAAuB,CAAC,2BAA2B,CAAC;IAC5G,SAAgB,IAAI,2BAA2B;IAC/C,SAAgB,SAAS,QAAQ;IACjC,SAAgB,QAAQ,OAAO;IAElB,MAAM,CACjB,OAAO,CAAC,EAAE,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,EAChC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,EACpC,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,gBAAgB,CAAC;CAkB7B;AAED,eAAe,oCAAoC,CAAC"}

package/dist/types/naylence/fame/security/signing/eddsa-envelope-verifier.d.ts

@@ -1,13 +1,18 @@
 import type { FameEnvelope } from "@naylence/core";
 import { SigningConfigClass, type KeyProvider } from "@naylence/runtime";
+import type { TrustStoreProvider } from "../cert/trust-store/trust-store-provider.js";
 type SigningConfig = InstanceType<typeof SigningConfigClass>;
 export interface EdDSAEnvelopeVerifierOptions {
     readonly signingConfig?: SigningConfig | null;
+    readonly trustStoreProvider?: TrustStoreProvider | null;
 }
 export declare class EdDSAEnvelopeVerifier {
     private readonly keyProvider;
     private readonly signingConfig;
+    private readonly trustStoreProvider;
     constructor(keyProvider: KeyProvider, options?: EdDSAEnvelopeVerifierOptions);
+    private loadTrustStorePem;
+    private resolveVerificationKey;
     verifyEnvelope(envelope: FameEnvelope, options?: {
         checkPayload?: boolean;
         logical?: string;

package/dist/types/naylence/fame/security/signing/eddsa-envelope-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eddsa-envelope-verifier.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/signing/eddsa-envelope-verifier.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EACL,kBAAkB,EAElB,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAW3B,KAAK,aAAa,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAwK7D,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CAC/C;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAE1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;gBAG5C,WAAW,EAAE,WAAW,EACxB,OAAO,GAAE,4BAAiC;IAO/B,cAAc,CACzB,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,OAAO,CAAC,OAAO,CAAC;CAsGpB;AAED,YAAY,EAAE,aAAa,IAAI,qBAAqB,EAAE,CAAC"}
+{"version":3,"file":"eddsa-envelope-verifier.d.ts","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/signing/eddsa-envelope-verifier.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EACL,kBAAkB,EAElB,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAU3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAEtF,KAAK,aAAa,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAmG7D,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAE1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;gBAG7D,WAAW,EAAE,WAAW,EACxB,OAAO,GAAE,4BAAiC;YAQ9B,iBAAiB;YAcjB,sBAAsB;IA2CvB,cAAc,CACzB,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,OAAO,CAAC,OAAO,CAAC;CA+FpB;AAED,YAAY,EAAE,aAAa,IAAI,qBAAqB,EAAE,CAAC"}

package/dist/types/node.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Node-centric entry point for Naylence Advanced Security.
+ *
+ * Includes the full factory surface area, including certificate authority
+ * helpers that rely on Node.js built-ins.
+ */
+export * from "./advanced-security-isomorphic.js";
+export * from "./naylence/fame/security/index.js";
+export * from "./naylence/fame/stickiness/index.js";
+export * from "./naylence/fame/welcome/index.js";
+//# sourceMappingURL=node.d.ts.map

package/dist/types/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,mCAAmC,CAAC;AAElD,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC"}

package/dist/types/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/plugin.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,KAAK,gBAAgB,GAAG,IAAI,CAAC,OAAO,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAEjE,wBAAsB,uCAAuC,CAC3D,SAAS,GAAE,gBAA2B,GACrC,OAAO,CAAC,IAAI,CAAC,CAEf;AAKD,QAAA,MAAM,sBAAsB,EAAE,UA8B7B,CAAC;AAEF,eAAe,sBAAsB,CAAC;AAEtC,eAAO,MAAM,kCAAkC,QAA8B,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/plugin.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAK7C,KAAK,gBAAgB,GAAG,IAAI,CAAC,OAAO,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAEjE,wBAAsB,uCAAuC,CAC3D,SAAS,GAAE,gBAA2B,GACrC,OAAO,CAAC,IAAI,CAAC,CAEf;AAKD,QAAA,MAAM,sBAAsB,EAAE,UA+B7B,CAAC;AAEF,eAAe,sBAAsB,CAAC;AAEtC,eAAO,MAAM,kCAAkC,QAA8B,CAAC"}

package/dist/types/version.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The package version, injected at build time.
+ * @internal
+ */
+export declare const VERSION = "0.3.7-test.111";
+//# sourceMappingURL=version.d.ts.map

package/dist/types/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,eAAO,MAAM,OAAO,mBAAmB,CAAC"}

package/package.json

@@ -1,11 +1,10 @@
 {
   "name": "@naylence/advanced-security",
-  "version": "0.3.6",
+  "version": "0.3.7-test.111",
   "type": "module",
   "description": "Advanced security utilities for the Naylence Fame runtime implemented in TypeScript.",
   "author": "Naylence Dev <naylencedev@gmail.com>",
   "license": "BUSL-1.1",
-  "licenseText": "See LICENSE file for terms",
   "keywords": [
     "naylence",
     "fame",
@@ -23,27 +22,97 @@
     "url": "https://github.com/naylence/naylence-advanced-security-ts/issues"
   },
   "homepage": "https://github.com/naylence/naylence-advanced-security-ts#readme",
-  "main": "dist/cjs/index.js",
-  "module": "dist/esm/index.js",
+  "main": "dist/node/node.cjs",
+  "module": "dist/node/node.mjs",
   "types": "dist/types/index.d.ts",
   "exports": {
     ".": {
-      "import": "./dist/esm/index.js",
-      "require": "./dist/cjs/index.js",
-      "types": "./dist/types/index.d.ts"
+      "types": "./dist/types/index.d.ts",
+      "import": {
+        "browser": "./dist/browser/index.mjs",
+        "default": "./dist/node/node.mjs"
+      },
+      "require": {
+        "browser": "./dist/browser/index.cjs",
+        "default": "./dist/node/node.cjs"
+      }
+    },
+    "./node": {
+      "types": "./dist/types/node.d.ts",
+      "import": "./dist/node/node.mjs",
+      "require": "./dist/node/node.cjs"
     },
     "./browser": {
-      "import": "./dist/browser/index.js",
-      "types": "./dist/types/index.d.ts"
+      "types": "./dist/types/browser.d.ts",
+      "import": "./dist/browser/index.mjs",
+      "require": "./dist/browser/index.cjs"
+    },
+    "./install-env": {
+      "types": "./dist/types/install-env.d.ts",
+      "import": "./dist/esm/install-env.js",
+      "require": "./dist/cjs/install-env.js",
+      "default": "./dist/esm/install-env.js"
+    },
+    "./factory-manifest": {
+      "types": "./dist/types/naylence/fame/factory-manifest.d.ts",
+      "import": "./dist/esm/naylence/fame/factory-manifest.js",
+      "require": "./dist/cjs/naylence/fame/factory-manifest.js",
+      "default": "./dist/esm/naylence/fame/factory-manifest.js"
+    },
+    "./register-advanced-security-factories": {
+      "types": "./dist/types/naylence/fame/security/register-advanced-security-factories.d.ts",
+      "import": "./dist/esm/naylence/fame/security/register-advanced-security-factories.js",
+      "require": "./dist/cjs/naylence/fame/security/register-advanced-security-factories.js",
+      "default": "./dist/esm/naylence/fame/security/register-advanced-security-factories.js"
     },
     "./plugin": {
+      "types": "./dist/types/plugin.d.ts",
       "import": "./dist/esm/plugin.js",
-      "default": "./dist/esm/plugin.js",
-      "types": "./dist/types/plugin.d.ts"
+      "require": "./dist/cjs/plugin.js",
+      "default": "./dist/esm/plugin.js"
+    },
+    "./*": {
+      "types": "./dist/types/*",
+      "import": "./dist/esm/*",
+      "require": "./dist/cjs/*",
+      "default": "./dist/esm/*"
     }
   },
+  "browser": {
+    "./dist/node/index.mjs": "./dist/browser/index.mjs",
+    "./dist/node/index.cjs": "./dist/browser/index.cjs",
+    "fastify": false,
+    "@fastify/websocket": false,
+    "@fastify/formbody": false,
+    "better-sqlite3": false,
+    "express": false,
+    "pino": false,
+    "pino-pretty": false,
+    "fs": false,
+    "readline": false,
+    "crypto": false,
+    "ws": false,
+    "node:net": false,
+    "node:module": false,
+    "node:fs": false,
+    "node:fs/promises": false,
+    "node:path": false,
+    "node:crypto": false,
+    "node:url": false,
+    "node:http": false,
+    "node:https": false,
+    "node:os": false
+  },
+  "sideEffects": [
+    "**/*-factory.ts",
+    "**/*-factory.js",
+    "**/storage/index.ts",
+    "**/storage/index.js",
+    "dist/browser/index.mjs",
+    "dist/browser/index.cjs"
+  ],
   "bin": {
-    "naylence-ca-server": "./dist/esm/naylence/fame/security/cert/ca-server.js"
+    "naylence-ca-server": "./dist/esm/naylence/fame/security/cert/ca-server-cli.js"
   },
   "files": [
     "dist",
@@ -59,23 +128,26 @@
     "build:browser": "rollup -c rollup.config.js",
     "clean": "rimraf dist",
     "generate:factory-manifest": "node ./scripts/generate-factory-manifest.mjs",
+    "inject-version": "node ./scripts/inject-version.js",
     "test": "jest --passWithNoTests",
     "test:watch": "jest --watch",
     "test:coverage": "jest --coverage --passWithNoTests",
+    "test:vitest": "vitest run",
     "lint": "eslint src/**/*.ts",
     "lint:fix": "eslint src/**/*.ts --fix",
     "format": "prettier --write \"src/**/*.ts\"",
     "dev": "tsc --watch --outDir dist/esm",
-    "prebuild": "npm run generate:factory-manifest",
-    "predev": "npm run generate:factory-manifest",
+    "prebuild": "npm run inject-version && npm run generate:factory-manifest",
+    "predev": "npm run inject-version && npm run generate:factory-manifest",
     "prepublishOnly": "npm run build && npm test"
   },
   "dependencies": {
-    "@naylence/runtime": "^0.3.3",
+    "@naylence/runtime": "^0.3.5-test.918",
     "@noble/ciphers": "^2.0.1",
     "@noble/curves": "^1.4.0",
     "@noble/ed25519": "^2.1.0",
     "@noble/hashes": "^1.4.0",
+    "@peculiar/asn1-csr": "^2.5.0",
     "@peculiar/asn1-schema": "^2.5.0",
     "@peculiar/asn1-x509": "^2.5.0",
     "@peculiar/x509": "^1.14.0",
@@ -123,6 +195,7 @@
     "ts-jest": "^29.4.4",
     "tslib": "^2.6.2",
     "typescript": "^5.3.2",
+    "vitest": "^2.1.4",
     "ws": "^8.18.0"
   },
   "engines": {