@naylence/runtime 0.3.12 → 0.3.13

package/dist/types/naylence/fame/factory-manifest.d.ts

@@ -4,7 +4,7 @@
  *
  * Provides the list of runtime factory modules for registration.
  */
-export declare const MODULES: readonly ["./connector/broadcast-channel-connector-factory.js", "./connector/broadcast-channel-listener-factory.js", "./connector/http-listener-factory.js", "./connector/http-stateless-connector-factory.js", "./connector/inpage-connector-factory.js", "./connector/inpage-listener-factory.js", "./connector/websocket-connector-factory.js", "./connector/websocket-listener-factory.js", "./delivery/at-least-once-delivery-policy-factory.js", "./delivery/at-most-once-delivery-policy-factory.js", "./delivery/delivery-profile-factory.js", "./fabric/in-process-fame-fabric-factory.js", "./node/admission/admission-profile-factory.js", "./node/admission/direct-admission-client-factory.js", "./node/admission/noop-admission-client-factory.js", "./node/admission/welcome-service-client-factory.js", "./node/node-factory.js", "./placement/static-node-placement-strategy-factory.js", "./security/auth/bearer-token-header-auth-injection-strategy-factory.js", "./security/auth/default-authorizer-factory.js", "./security/auth/jwks-jwt-token-verifier-factory.js", "./security/auth/jwt-token-issuer-factory.js", "./security/auth/jwt-token-verifier-factory.js", "./security/auth/no-auth-injection-strategy-factory.js", "./security/auth/none-token-provider-factory.js", "./security/auth/noop-authorizer-factory.js", "./security/auth/noop-token-issuer-factory.js", "./security/auth/noop-token-verifier-factory.js", "./security/auth/oauth2-authorizer-factory.js", "./security/auth/oauth2-client-credentials-token-provider-factory.js", "./security/auth/oauth2-pkce-token-provider-factory.js", "./security/auth/query-param-auth-injection-strategy-factory.js", "./security/auth/shared-secret-authorizer-factory.js", "./security/auth/shared-secret-token-provider-factory.js", "./security/auth/shared-secret-token-verifier-factory.js", "./security/auth/static-token-provider-factory.js", "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js", "./security/credential/dev-fixed-key-credential-provider-factory.js", "./security/credential/env-credential-provider-factory.js", "./security/credential/none-credential-provider-factory.js", "./security/credential/prompt-credential-provider-factory.js", "./security/credential/secret-store-credential-provider-factory.js", "./security/credential/session-key-credential-provider-factory.js", "./security/credential/static-credential-provider-factory.js", "./security/default-security-manager-factory.js", "./security/encryption/noop-encryption-manager-factory.js", "./security/encryption/noop-secure-channel-manager-factory.js", "./security/keys/default-key-manager-factory.js", "./security/keys/in-memory-key-store-factory.js", "./security/keys/noop-key-validator-factory.js", "./security/node-security-profile-factory.js", "./security/policy/default-security-policy-factory.js", "./security/policy/no-security-policy-factory.js", "./security/signing/eddsa-envelope-signer-factory.js", "./security/signing/eddsa-envelope-verifier-factory.js", "./security/trust-store/noop-trust-store-provider-factory.js", "./sentinel/capability-aware-routing-policy-factory.js", "./sentinel/composite-routing-policy-factory.js", "./sentinel/hybrid-path-routing-policy-factory.js", "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js", "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js", "./sentinel/load-balancing/load-balancing-profile-factory.js", "./sentinel/load-balancing/random-load-balancing-strategy-factory.js", "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js", "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js", "./sentinel/routing-profile-factory.js", "./sentinel/sentinel-factory.js", "./sentinel/store/route-store-factory.js", "./stickiness/simple-load-balancer-stickiness-manager-factory.js", "./telemetry/noop-trace-emitter-factory.js", "./telemetry/open-telemetry-trace-emitter-factory.js", "./telemetry/trace-emitter-profile-factory.js", "./welcome/default-welcome-service-factory.js"];
+export declare const MODULES: readonly ["./connector/broadcast-channel-connector-factory.js", "./connector/broadcast-channel-listener-factory.js", "./connector/http-listener-factory.js", "./connector/http-stateless-connector-factory.js", "./connector/inpage-connector-factory.js", "./connector/inpage-listener-factory.js", "./connector/websocket-connector-factory.js", "./connector/websocket-listener-factory.js", "./delivery/at-least-once-delivery-policy-factory.js", "./delivery/at-most-once-delivery-policy-factory.js", "./delivery/delivery-profile-factory.js", "./fabric/in-process-fame-fabric-factory.js", "./node/admission/admission-profile-factory.js", "./node/admission/direct-admission-client-factory.js", "./node/admission/noop-admission-client-factory.js", "./node/admission/welcome-service-client-factory.js", "./node/default-node-identity-policy-factory.js", "./node/node-factory.js", "./node/node-identity-policy-profile-factory.js", "./node/token-subject-node-identity-policy-factory.js", "./placement/static-node-placement-strategy-factory.js", "./security/auth/bearer-token-header-auth-injection-strategy-factory.js", "./security/auth/default-authorizer-factory.js", "./security/auth/jwks-jwt-token-verifier-factory.js", "./security/auth/jwt-token-issuer-factory.js", "./security/auth/jwt-token-verifier-factory.js", "./security/auth/no-auth-injection-strategy-factory.js", "./security/auth/none-token-provider-factory.js", "./security/auth/noop-authorizer-factory.js", "./security/auth/noop-token-issuer-factory.js", "./security/auth/noop-token-verifier-factory.js", "./security/auth/oauth2-authorizer-factory.js", "./security/auth/oauth2-client-credentials-token-provider-factory.js", "./security/auth/oauth2-pkce-token-provider-factory.js", "./security/auth/query-param-auth-injection-strategy-factory.js", "./security/auth/shared-secret-authorizer-factory.js", "./security/auth/shared-secret-token-provider-factory.js", "./security/auth/shared-secret-token-verifier-factory.js", "./security/auth/static-token-provider-factory.js", "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js", "./security/credential/dev-fixed-key-credential-provider-factory.js", "./security/credential/env-credential-provider-factory.js", "./security/credential/none-credential-provider-factory.js", "./security/credential/prompt-credential-provider-factory.js", "./security/credential/secret-store-credential-provider-factory.js", "./security/credential/session-key-credential-provider-factory.js", "./security/credential/static-credential-provider-factory.js", "./security/default-security-manager-factory.js", "./security/encryption/noop-encryption-manager-factory.js", "./security/encryption/noop-secure-channel-manager-factory.js", "./security/keys/default-key-manager-factory.js", "./security/keys/in-memory-key-store-factory.js", "./security/keys/noop-key-validator-factory.js", "./security/node-security-profile-factory.js", "./security/policy/default-security-policy-factory.js", "./security/policy/no-security-policy-factory.js", "./security/signing/eddsa-envelope-signer-factory.js", "./security/signing/eddsa-envelope-verifier-factory.js", "./security/trust-store/noop-trust-store-provider-factory.js", "./sentinel/capability-aware-routing-policy-factory.js", "./sentinel/composite-routing-policy-factory.js", "./sentinel/hybrid-path-routing-policy-factory.js", "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js", "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js", "./sentinel/load-balancing/load-balancing-profile-factory.js", "./sentinel/load-balancing/random-load-balancing-strategy-factory.js", "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js", "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js", "./sentinel/routing-profile-factory.js", "./sentinel/sentinel-factory.js", "./sentinel/store/route-store-factory.js", "./stickiness/simple-load-balancer-stickiness-manager-factory.js", "./telemetry/noop-trace-emitter-factory.js", "./telemetry/open-telemetry-trace-emitter-factory.js", "./telemetry/trace-emitter-profile-factory.js", "./welcome/default-welcome-service-factory.js"];
 export type FactoryModuleSpec = (typeof MODULES)[number];
 export type FactoryModuleLoader = () => Promise<Record<string, unknown>>;
 export declare const MODULE_LOADERS: Record<FactoryModuleSpec, FactoryModuleLoader>;

package/dist/types/naylence/fame/grants/grant-materializer.d.ts

@@ -0,0 +1,4 @@
+import type { ConnectionGrantLike } from './connection-grant.js';
+export declare class GrantMaterializer {
+    static materialize(grant: ConnectionGrantLike): Promise<ConnectionGrantLike>;
+}

package/dist/types/naylence/fame/node/admission/admission-profile-factory.d.ts

@@ -10,6 +10,6 @@ export declare const FACTORY_META: {
 };
 export declare class AdmissionProfileFactory extends AdmissionClientFactory<AdmissionProfileConfig> {
     readonly type = "AdmissionProfile";
-    create(config?: AdmissionProfileConfig | Record<string, unknown> | null): Promise<AdmissionClient>;
+    create(config?: AdmissionProfileConfig | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<AdmissionClient>;
 }
 export default AdmissionProfileFactory;

package/dist/types/naylence/fame/node/admission/direct-admission-client-factory.d.ts

@@ -11,6 +11,6 @@ export declare const FACTORY_META: {
 };
 export declare class DirectAdmissionClientFactory extends AdmissionClientFactory<DirectAdmissionClientConfig> {
     readonly type = "DirectAdmissionClient";
-    create(config?: DirectAdmissionClientConfig | Record<string, unknown> | null): Promise<AdmissionClient>;
+    create(config?: DirectAdmissionClientConfig | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<AdmissionClient>;
 }
 export default DirectAdmissionClientFactory;

package/dist/types/naylence/fame/node/admission/direct-admission-client.d.ts

@@ -1,15 +1,18 @@
 import { type FameEnvelopeWith, type NodeWelcomeFrame } from '@naylence/core';
 import type { AdmissionClient } from './admission-client.js';
+import type { NodeIdentityPolicy } from '../node-identity-policy.js';
 export interface DirectAdmissionClientOptions {
     readonly connectionGrants?: Array<Record<string, unknown>>;
     readonly connection_grants?: Array<Record<string, unknown>>;
     readonly ttlSec?: number | null;
     readonly ttl_sec?: number | null;
+    readonly nodeIdentityPolicy?: NodeIdentityPolicy;
 }
 export declare class DirectAdmissionClient implements AdmissionClient {
     readonly hasUpstream = true;
     private readonly connectionGrants;
     private readonly ttlSec;
+    private readonly nodeIdentityPolicy?;
     constructor(options: DirectAdmissionClientOptions);
     hello(systemId: string, instanceId: string, requestedLogicals?: string[]): Promise<FameEnvelopeWith<NodeWelcomeFrame>>;
     close(): Promise<void>;

package/dist/types/naylence/fame/node/default-node-identity-policy-factory.d.ts

@@ -0,0 +1,15 @@
+import { NodeIdentityPolicyFactory, type NodeIdentityPolicyConfig } from './node-identity-policy-factory.js';
+import type { NodeIdentityPolicy } from './node-identity-policy.js';
+export interface DefaultNodeIdentityPolicyConfig extends NodeIdentityPolicyConfig {
+    type: 'DefaultNodeIdentityPolicy';
+}
+export declare const FACTORY_META: {
+    readonly base: "NodeIdentityPolicyFactory";
+    readonly key: "DefaultNodeIdentityPolicy";
+};
+export declare class DefaultNodeIdentityPolicyFactory extends NodeIdentityPolicyFactory<DefaultNodeIdentityPolicyConfig> {
+    readonly type = "DefaultNodeIdentityPolicy";
+    readonly isDefault = true;
+    create(_config?: DefaultNodeIdentityPolicyConfig | Record<string, unknown> | null): Promise<NodeIdentityPolicy>;
+}
+export default DefaultNodeIdentityPolicyFactory;

package/dist/types/naylence/fame/node/default-node-identity-policy.d.ts

@@ -0,0 +1,5 @@
+import type { InitialIdentityContext, NodeIdentityPolicy, NodeIdentityPolicyContext } from './node-identity-policy.js';
+export declare class DefaultNodeIdentityPolicy implements NodeIdentityPolicy {
+    resolveInitialNodeId(context: InitialIdentityContext): Promise<string>;
+    resolveAdmissionNodeId(context: NodeIdentityPolicyContext): Promise<string>;
+}

package/dist/types/naylence/fame/node/factory-commons.d.ts

@@ -1,4 +1,5 @@
 import type { AdmissionClient } from './admission/admission-client.js';
+import type { NodeIdentityPolicy } from './node-identity-policy.js';
 import { DefaultNodeAttachClient } from './admission/default-node-attach-client.js';
 import type { FameNodeConfig } from './node-config.js';
 import type { NodeEventListener } from './node-event-listener.js';
@@ -38,5 +39,6 @@ export interface CommonNodeComponents {
     eventListeners: NodeEventListener[];
     transportListeners: TransportListener[];
     traceEmitter: TraceEmitter | null;
+    identityPolicy?: NodeIdentityPolicy;
 }
 export declare function makeCommonOptions(config: FameNodeConfig, rawConfig?: Record<string, unknown> | null): Promise<CommonNodeComponents>;

package/dist/types/naylence/fame/node/index.d.ts

@@ -19,3 +19,10 @@ export * from './fame-environment-context.js';
 export * from './session-manager.js';
 export * from './upstream-session-manager.js';
 export * from './root-session-manager.js';
+export * from './node-identity-policy.js';
+export * from './node-identity-policy-factory.js';
+export * from './default-node-identity-policy.js';
+export { DefaultNodeIdentityPolicyFactory, DefaultNodeIdentityPolicyConfig, } from './default-node-identity-policy-factory.js';
+export * from './token-subject-node-identity-policy.js';
+export { TokenSubjectNodeIdentityPolicyFactory, TokenSubjectNodeIdentityPolicyConfig, } from './token-subject-node-identity-policy-factory.js';
+export { NodeIdentityPolicyProfileFactory, NodeIdentityPolicyProfileConfig, } from './node-identity-policy-profile-factory.js';

package/dist/types/naylence/fame/node/node-config.d.ts

@@ -1,4 +1,5 @@
 import type { AdmissionConfig } from './admission/admission-client-factory.js';
+import type { NodeIdentityPolicyConfig } from './node-identity-policy-factory.js';
 import type { NodeLikeConfig } from './node-like-factory.js';
 import type { DeliveryPolicyConfig } from '../delivery/delivery-policy-config.js';
 import type { TransportListenerConfig } from '../connector/transport-listener-config.js';
@@ -27,5 +28,6 @@ export type FameNodeConfig = NodeLikeConfig & {
     attachmentKeyValidator?: AttachmentKeyValidatorConfig | Record<string, unknown> | null;
     telemetry?: TraceEmitterConfig | Record<string, unknown> | null;
     requestedCapabilities?: string[];
+    identityPolicy?: NodeIdentityPolicyConfig | Record<string, unknown> | null;
 };
 export declare function normalizeFameNodeConfig(input?: Partial<FameNodeConfig> | Record<string, unknown> | null): FameNodeConfig;

package/dist/types/naylence/fame/node/node-identity-policy-factory.d.ts

@@ -0,0 +1,12 @@
+import type { CreateResourceOptions, ResourceConfig } from '@naylence/factory';
+import { AbstractResourceFactory } from '@naylence/factory';
+import type { NodeIdentityPolicy } from './node-identity-policy.js';
+export declare const NODE_IDENTITY_POLICY_FACTORY_BASE_TYPE = "NodeIdentityPolicyFactory";
+export interface NodeIdentityPolicyConfig extends ResourceConfig {
+    type: string;
+    [key: string]: unknown;
+}
+export declare abstract class NodeIdentityPolicyFactory<C extends NodeIdentityPolicyConfig = NodeIdentityPolicyConfig> extends AbstractResourceFactory<NodeIdentityPolicy, C> {
+    abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<NodeIdentityPolicy>;
+    static createNodeIdentityPolicy<C extends NodeIdentityPolicyConfig = NodeIdentityPolicyConfig>(config?: C | Record<string, unknown> | null, options?: CreateResourceOptions): Promise<NodeIdentityPolicy>;
+}

package/dist/types/naylence/fame/node/node-identity-policy-profile-factory.d.ts

@@ -0,0 +1,15 @@
+import { NodeIdentityPolicyFactory, type NodeIdentityPolicyConfig } from './node-identity-policy-factory.js';
+import type { NodeIdentityPolicy } from './node-identity-policy.js';
+export interface NodeIdentityPolicyProfileConfig extends NodeIdentityPolicyConfig {
+    type: 'NodeIdentityPolicyProfile';
+    profile?: string | null;
+}
+export declare const FACTORY_META: {
+    readonly base: "NodeIdentityPolicyFactory";
+    readonly key: "NodeIdentityPolicyProfile";
+};
+export declare class NodeIdentityPolicyProfileFactory extends NodeIdentityPolicyFactory<NodeIdentityPolicyProfileConfig> {
+    readonly type = "NodeIdentityPolicyProfile";
+    create(config?: NodeIdentityPolicyProfileConfig | Record<string, unknown> | null): Promise<NodeIdentityPolicy>;
+}
+export default NodeIdentityPolicyProfileFactory;

package/dist/types/naylence/fame/node/node-identity-policy.d.ts

@@ -0,0 +1,26 @@
+import type { AuthIdentity } from '../security/auth/auth-identity.js';
+export interface NodeIdentityPolicyContext {
+    /**
+     * The node ID determined so far (e.g. provided by caller, or generated
+     * via fingerprint/random).
+     */
+    currentNodeId: string;
+    identities: AuthIdentity[];
+    grants?: Record<string, any>[];
+}
+export interface InitialIdentityContext {
+    readonly configuredId?: string | null;
+    readonly persistedId?: string | null;
+}
+export interface NodeIdentityPolicy {
+    /**
+     * Determines the initial node ID for the node.
+     * This is called during node initialization, before any admission attempts.
+     */
+    resolveInitialNodeId(context: InitialIdentityContext): Promise<string>;
+    /**
+     * Optionally adjusts the node ID based on the provided context.
+     * Returns the final node ID to use.
+     */
+    resolveAdmissionNodeId(context: NodeIdentityPolicyContext): Promise<string>;
+}

package/dist/types/naylence/fame/node/node-like.d.ts

@@ -19,8 +19,10 @@ import { CryptoProvider } from '../security/index.js';
  * routing, and service invocation.
  */
 export interface NodeLike {
-    /** Unique node identifier */
+    /** Unique node identifier (confirmed) */
     readonly id: string;
+    /** Provisional node identifier (used during bootstrapping) */
+    readonly provisionalId: string;
     /** System identifier (may be null for standalone nodes) */
     readonly sid: string | null;
     /** Physical path in the Fame network hierarchy */

package/dist/types/naylence/fame/node/node.d.ts

@@ -42,7 +42,8 @@ export interface FameNodeOptions {
 }
 type FameNodeOptionsInput = FameNodeOptions & Record<string, unknown>;
 export declare class FameNode extends TaskSpawner implements NodeLike {
-    private _id;
+    private _provisionalId;
+    private _confirmedId;
     private _sid;
     private _physicalPath;
     private _acceptedLogicals;
@@ -76,6 +77,7 @@ export declare class FameNode extends TaskSpawner implements NodeLike {
     private initializeRootSessionManager;
     private initializeUpstreamSessionManager;
     private handleInboundFromUpstream;
+    private confirmIdentity;
     private handleWelcome;
     private handleAttach;
     private handleEpochChange;
@@ -84,6 +86,7 @@ export declare class FameNode extends TaskSpawner implements NodeLike {
     private handleDeliveryAck;
     protected onDeliveryNack(frame: DeliveryAckFrame, envelope: FameEnvelope, _context?: FameDeliveryContext): Promise<void>;
     get id(): string;
+    get provisionalId(): string;
     get sid(): string | null;
     get physicalPath(): string;
     get acceptedLogicals(): Set<string>;

package/dist/types/naylence/fame/node/root-session-manager.d.ts

@@ -61,7 +61,6 @@ export declare class RootSessionManager extends TaskSpawner implements SessionMa
     private startExpiryGuard;
     private waitForExpiryOrStop;
     private expiryGuard;
-    private initializeRootIdentityIfNeeded;
     private consumeTask;
     private waitForAbort;
     private waitWithTimeout;

package/dist/types/naylence/fame/node/rpc-client-manager.d.ts

@@ -32,6 +32,8 @@ export declare class RPCClientManager {
     private rpcBound;
     private trackerEventHandler;
     private trackerWithEvents;
+    private boundPhysicalPath;
+    private rpcRecipient;
     constructor(getPhysicalPath: () => string, getId: () => string, deliverWrapper: DeliverWrapper, envelopeFactory: EnvelopeFactory, listenCallback: ListenCallback, deliveryTracker?: StreamCapableDeliveryTracker | undefined);
     private setupTrackerEventHandler;
     invoke(optionsInput: InvokeOptionsInput): Promise<unknown>;

package/dist/types/naylence/fame/node/token-subject-node-identity-policy-factory.d.ts

@@ -0,0 +1,14 @@
+import { NodeIdentityPolicyFactory, type NodeIdentityPolicyConfig } from './node-identity-policy-factory.js';
+import type { NodeIdentityPolicy } from './node-identity-policy.js';
+export interface TokenSubjectNodeIdentityPolicyConfig extends NodeIdentityPolicyConfig {
+    type: 'TokenSubjectNodeIdentityPolicy';
+}
+export declare const FACTORY_META: {
+    readonly base: "NodeIdentityPolicyFactory";
+    readonly key: "TokenSubjectNodeIdentityPolicy";
+};
+export declare class TokenSubjectNodeIdentityPolicyFactory extends NodeIdentityPolicyFactory<TokenSubjectNodeIdentityPolicyConfig> {
+    readonly type = "TokenSubjectNodeIdentityPolicy";
+    create(_config?: TokenSubjectNodeIdentityPolicyConfig | Record<string, unknown> | null): Promise<NodeIdentityPolicy>;
+}
+export default TokenSubjectNodeIdentityPolicyFactory;

package/dist/types/naylence/fame/node/token-subject-node-identity-policy.d.ts

@@ -0,0 +1,5 @@
+import type { InitialIdentityContext, NodeIdentityPolicy, NodeIdentityPolicyContext } from './node-identity-policy.js';
+export declare class TokenSubjectNodeIdentityPolicy implements NodeIdentityPolicy {
+    resolveInitialNodeId(context: InitialIdentityContext): Promise<string>;
+    resolveAdmissionNodeId(context: NodeIdentityPolicyContext): Promise<string>;
+}

package/dist/types/naylence/fame/node/upstream-session-manager.d.ts

@@ -56,6 +56,7 @@ export declare class UpstreamSessionManager extends TaskSpawner implements Sessi
     private readonly wrappedHandler;
     private readonly readyEvent;
     private readonly stopEvent;
+    private readonly wakeEvent;
     private readonly queueEvent;
     private currentStopSubtasks;
     private readonly messageQueue;
@@ -67,8 +68,11 @@ export declare class UpstreamSessionManager extends TaskSpawner implements Sessi
     private hadSuccessfulAttach;
     private lastConnectorState;
     private connectEpoch;
+    private _visibilityHandler;
     constructor(optionsInput: UpstreamSessionManagerOptionsInput);
     get systemId(): string | null;
+    private setupVisibilityListener;
+    private teardownVisibilityListener;
     start(options?: {
         waitUntilReady?: boolean;
     }): Promise<void>;

package/dist/types/naylence/fame/security/auth/auth-identity.d.ts

@@ -0,0 +1,6 @@
+export interface AuthIdentity {
+    /** The unique subject identifier (e.g. JWT 'sub') */
+    subject: string;
+    /** Optional additional claims/attributes */
+    claims?: Record<string, unknown>;
+}

package/dist/types/naylence/fame/security/auth/materializable-token-provider.d.ts

@@ -0,0 +1,12 @@
+import type { TokenProvider } from './token-provider.js';
+import type { TokenProviderConfig } from './token-provider-factory.js';
+export interface MaterializableTokenProvider extends TokenProvider {
+    /**
+     * Performs any necessary work to obtain a token (e.g. PKCE flow) and returns
+     * a configuration for a TokenProvider that can supply that token statically.
+     *
+     * Returns undefined if materialization is not possible or not necessary.
+     */
+    materialize(): Promise<TokenProviderConfig | undefined>;
+}
+export declare function isMaterializableTokenProvider(candidate: unknown): candidate is MaterializableTokenProvider;

package/dist/types/naylence/fame/security/auth/oauth2-pkce-token-provider.d.ts

@@ -1,6 +1,7 @@
 import { type CredentialProvider } from '../credential/credential-provider.js';
 import type { Token } from './token.js';
-import type { TokenProvider } from './token-provider.js';
+import type { TokenProviderConfig } from './token-provider-factory.js';
+import type { MaterializableTokenProvider } from './materializable-token-provider.js';
 interface FetchLike {
     (input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
 }
@@ -23,10 +24,11 @@ export interface OAuth2PkceTokenProviderOptions {
 export declare class OAuth2PkceRedirectInitiatedError extends Error {
     constructor(message?: string);
 }
-export declare class OAuth2PkceTokenProvider implements TokenProvider {
+export declare class OAuth2PkceTokenProvider implements MaterializableTokenProvider {
     private cachedToken;
     private readonly options;
     constructor(rawOptions: OAuth2PkceTokenProviderOptions | Record<string, unknown>);
+    materialize(): Promise<TokenProviderConfig | undefined>;
     getToken(): Promise<Token>;
     private isTokenFresh;
     private beginBrowserAuthorization;

package/dist/types/naylence/fame/security/auth/static-token-provider.d.ts

@@ -1,13 +1,15 @@
 import type { Token } from './token.js';
-import type { TokenProvider } from './token-provider.js';
+import type { IdentityExposingTokenProvider } from './token-provider.js';
+import type { AuthIdentity } from './auth-identity.js';
 export interface StaticTokenProviderOptions {
     token: string;
     expiresAt?: number | string | Date | null;
 }
 type StaticTokenProviderOptionsInput = StaticTokenProviderOptions | string | (StaticTokenProviderOptions & Record<string, unknown>) | Record<string, unknown>;
-export declare class StaticTokenProvider implements TokenProvider {
+export declare class StaticTokenProvider implements IdentityExposingTokenProvider {
     private readonly token;
     constructor(input: StaticTokenProviderOptionsInput);
     getToken(): Promise<Token>;
+    getIdentity(): Promise<AuthIdentity | undefined>;
 }
 export {};

package/dist/types/naylence/fame/security/auth/token-provider.d.ts

@@ -1,5 +1,10 @@
 import type { Token } from './token.js';
+import type { AuthIdentity } from './auth-identity.js';
 export interface TokenProvider {
     getToken(): Promise<Token>;
 }
+export interface IdentityExposingTokenProvider extends TokenProvider {
+    getIdentity(): Promise<AuthIdentity | undefined>;
+}
 export declare function isTokenProvider(candidate: unknown): candidate is TokenProvider;
+export declare function isIdentityExposingTokenProvider(candidate: unknown): candidate is IdentityExposingTokenProvider;

package/dist/types/naylence/fame/security/index.d.ts

@@ -1,4 +1,5 @@
 export * from './auth/authorizer.js';
+export * from './auth/auth-identity.js';
 export { AUTHORIZER_FACTORY_BASE_TYPE, AuthorizerFactory, } from './auth/authorizer-factory.js';
 export type * from './auth/authorizer-factory.js';
 export * from './auth/auth-injection-strategy.js';

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * The package version, injected at build time.
  * @internal
  */
-export declare const VERSION = "0.3.12";
+export declare const VERSION = "0.3.13";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naylence/runtime",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "type": "module",
   "description": "Naylence Runtime - Complete TypeScript runtime",
   "author": "Naylence Dev <naylencedev@gmail.com>",