@naylence/runtime 0.3.5-test.923 → 0.3.5-test.924

package/dist/types/naylence/fame/factory-manifest.d.ts

@@ -4,7 +4,7 @@
  *
  * Provides the list of runtime factory modules for registration.
  */
-export declare const MODULES: readonly ["./connector/broadcast-channel-connector-factory.js", "./connector/broadcast-channel-listener-factory.js", "./connector/http-listener-factory.js", "./connector/http-stateless-connector-factory.js", "./connector/inpage-connector-factory.js", "./connector/inpage-listener-factory.js", "./connector/websocket-connector-factory.js", "./connector/websocket-listener-factory.js", "./delivery/at-least-once-delivery-policy-factory.js", "./delivery/at-most-once-delivery-policy-factory.js", "./delivery/delivery-profile-factory.js", "./fabric/in-process-fame-fabric-factory.js", "./node/admission/admission-profile-factory.js", "./node/admission/direct-admission-client-factory.js", "./node/admission/noop-admission-client-factory.js", "./node/admission/welcome-service-client-factory.js", "./node/node-factory.js", "./placement/static-node-placement-strategy-factory.js", "./security/auth/bearer-token-header-auth-injection-strategy-factory.js", "./security/auth/default-authorizer-factory.js", "./security/auth/jwks-jwt-token-verifier-factory.js", "./security/auth/jwt-token-issuer-factory.js", "./security/auth/jwt-token-verifier-factory.js", "./security/auth/no-auth-injection-strategy-factory.js", "./security/auth/none-token-provider-factory.js", "./security/auth/noop-authorizer-factory.js", "./security/auth/noop-token-issuer-factory.js", "./security/auth/noop-token-verifier-factory.js", "./security/auth/oauth2-authorizer-factory.js", "./security/auth/oauth2-client-credentials-token-provider-factory.js", "./security/auth/oauth2-pkce-token-provider-factory.js", "./security/auth/query-param-auth-injection-strategy-factory.js", "./security/auth/shared-secret-authorizer-factory.js", "./security/auth/shared-secret-token-provider-factory.js", "./security/auth/shared-secret-token-verifier-factory.js", "./security/auth/static-token-provider-factory.js", "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js", "./security/credential/dev-fixed-key-credential-provider-factory.js", "./security/credential/env-credential-provider-factory.js", "./security/credential/none-credential-provider-factory.js", "./security/credential/prompt-credential-provider-factory.js", "./security/credential/secret-store-credential-provider-factory.js", "./security/credential/session-key-credential-provider-factory.js", "./security/credential/static-credential-provider-factory.js", "./security/default-security-manager-factory.js", "./security/encryption/noop-encryption-manager-factory.js", "./security/encryption/noop-secure-channel-manager-factory.js", "./security/keys/default-key-manager-factory.js", "./security/keys/in-memory-key-store-factory.js", "./security/keys/noop-key-validator-factory.js", "./security/node-security-profile-factory.js", "./security/policy/default-security-policy-factory.js", "./security/policy/no-security-policy-factory.js", "./security/signing/eddsa-envelope-signer-factory.js", "./security/signing/eddsa-envelope-verifier-factory.js", "./sentinel/capability-aware-routing-policy-factory.js", "./sentinel/composite-routing-policy-factory.js", "./sentinel/hybrid-path-routing-policy-factory.js", "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js", "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js", "./sentinel/load-balancing/load-balancing-profile-factory.js", "./sentinel/load-balancing/random-load-balancing-strategy-factory.js", "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js", "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js", "./sentinel/routing-profile-factory.js", "./sentinel/sentinel-factory.js", "./sentinel/store/route-store-factory.js", "./stickiness/simple-load-balancer-stickiness-manager-factory.js", "./telemetry/noop-trace-emitter-factory.js", "./telemetry/open-telemetry-trace-emitter-factory.js", "./telemetry/trace-emitter-profile-factory.js", "./welcome/default-welcome-service-factory.js"];
+export declare const MODULES: readonly ["./connector/broadcast-channel-connector-factory.js", "./connector/broadcast-channel-listener-factory.js", "./connector/http-listener-factory.js", "./connector/http-stateless-connector-factory.js", "./connector/inpage-connector-factory.js", "./connector/inpage-listener-factory.js", "./connector/websocket-connector-factory.js", "./connector/websocket-listener-factory.js", "./delivery/at-least-once-delivery-policy-factory.js", "./delivery/at-most-once-delivery-policy-factory.js", "./delivery/delivery-profile-factory.js", "./fabric/in-process-fame-fabric-factory.js", "./node/admission/admission-profile-factory.js", "./node/admission/direct-admission-client-factory.js", "./node/admission/noop-admission-client-factory.js", "./node/admission/welcome-service-client-factory.js", "./node/node-factory.js", "./placement/static-node-placement-strategy-factory.js", "./security/auth/bearer-token-header-auth-injection-strategy-factory.js", "./security/auth/default-authorizer-factory.js", "./security/auth/jwks-jwt-token-verifier-factory.js", "./security/auth/jwt-token-issuer-factory.js", "./security/auth/jwt-token-verifier-factory.js", "./security/auth/no-auth-injection-strategy-factory.js", "./security/auth/none-token-provider-factory.js", "./security/auth/noop-authorizer-factory.js", "./security/auth/noop-token-issuer-factory.js", "./security/auth/noop-token-verifier-factory.js", "./security/auth/oauth2-authorizer-factory.js", "./security/auth/oauth2-client-credentials-token-provider-factory.js", "./security/auth/oauth2-pkce-token-provider-factory.js", "./security/auth/query-param-auth-injection-strategy-factory.js", "./security/auth/shared-secret-authorizer-factory.js", "./security/auth/shared-secret-token-provider-factory.js", "./security/auth/shared-secret-token-verifier-factory.js", "./security/auth/static-token-provider-factory.js", "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js", "./security/credential/dev-fixed-key-credential-provider-factory.js", "./security/credential/env-credential-provider-factory.js", "./security/credential/none-credential-provider-factory.js", "./security/credential/prompt-credential-provider-factory.js", "./security/credential/secret-store-credential-provider-factory.js", "./security/credential/session-key-credential-provider-factory.js", "./security/credential/static-credential-provider-factory.js", "./security/default-security-manager-factory.js", "./security/encryption/noop-encryption-manager-factory.js", "./security/encryption/noop-secure-channel-manager-factory.js", "./security/keys/default-key-manager-factory.js", "./security/keys/in-memory-key-store-factory.js", "./security/keys/noop-key-validator-factory.js", "./security/node-security-profile-factory.js", "./security/policy/default-security-policy-factory.js", "./security/policy/no-security-policy-factory.js", "./security/signing/eddsa-envelope-signer-factory.js", "./security/signing/eddsa-envelope-verifier-factory.js", "./security/trust-store/noop-trust-store-provider-factory.js", "./sentinel/capability-aware-routing-policy-factory.js", "./sentinel/composite-routing-policy-factory.js", "./sentinel/hybrid-path-routing-policy-factory.js", "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js", "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js", "./sentinel/load-balancing/load-balancing-profile-factory.js", "./sentinel/load-balancing/random-load-balancing-strategy-factory.js", "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js", "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js", "./sentinel/routing-profile-factory.js", "./sentinel/sentinel-factory.js", "./sentinel/store/route-store-factory.js", "./stickiness/simple-load-balancer-stickiness-manager-factory.js", "./telemetry/noop-trace-emitter-factory.js", "./telemetry/open-telemetry-trace-emitter-factory.js", "./telemetry/trace-emitter-profile-factory.js", "./welcome/default-welcome-service-factory.js"];
 export type FactoryModuleSpec = (typeof MODULES)[number];
 export type FactoryModuleLoader = () => Promise<Record<string, unknown>>;
 export declare const MODULE_LOADERS: Record<FactoryModuleSpec, FactoryModuleLoader>;

package/dist/types/naylence/fame/security/default-security-manager-factory.d.ts

@@ -14,6 +14,7 @@ import { SecurityManagerFactory, type SecurityManagerComponentOverrides } from '
 import type { SecurityManagerConfig } from './security-manager-config.js';
 import type { NodeEventListener } from '../node/node-event-listener.js';
 import type { CryptoProvider } from './crypto/providers/crypto-provider.js';
+import type { TrustStoreProvider } from './trust-store/trust-store-provider.js';
 export interface DefaultSecurityManagerConfig extends SecurityManagerConfig {
     type: 'DefaultSecurityManager';
     policy?: SecurityPolicy | Record<string, unknown> | null;
@@ -37,6 +38,8 @@ export interface DefaultSecurityManagerConfig extends SecurityManagerConfig {
     event_listeners?: NodeEventListener[] | null;
     cryptoProvider?: CryptoProvider | null;
     crypto_provider?: CryptoProvider | null;
+    trustStoreProvider?: TrustStoreProvider | null;
+    trust_store_provider?: TrustStoreProvider | null;
     [key: string]: unknown;
 }
 export declare const FACTORY_META: {

package/dist/types/naylence/fame/security/index.d.ts

@@ -18,6 +18,9 @@ export * from './auth/token.js';
 export * from './cert/certificate-manager.js';
 export { CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, CertificateManagerFactory, } from './cert/certificate-manager-factory.js';
 export type * from './cert/certificate-manager-factory.js';
+export * from './trust-store/trust-store-provider.js';
+export { TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, TrustStoreProviderFactory, NoopTrustStoreProvider, } from './trust-store/trust-store-provider-factory.js';
+export type * from './trust-store/trust-store-provider-factory.js';
 export * from './encryption/encryption-manager.js';
 export { ENCRYPTION_MANAGER_FACTORY_BASE_TYPE } from './encryption/encryption-manager-factory.js';
 export * from './encryption/encryption-manager-factory.js';

package/dist/types/naylence/fame/security/security-manager-factory.d.ts

@@ -12,6 +12,7 @@ import type { CertificateManager } from './cert/certificate-manager.js';
 import type { SecureChannelManager } from './encryption/secure-channel-manager.js';
 import type { NodeEventListener } from '../node/node-event-listener.js';
 import type { CryptoProvider } from './crypto/providers/crypto-provider.js';
+import type { TrustStoreProvider } from './trust-store/trust-store-provider.js';
 export declare const SECURITY_MANAGER_FACTORY_BASE_TYPE = "SecurityManagerFactory";
 export interface SecurityManagerComponentOverrides {
     policy?: SecurityPolicy | null;
@@ -25,6 +26,7 @@ export interface SecurityManagerComponentOverrides {
     secureChannelManager?: SecureChannelManager | null;
     eventListeners?: NodeEventListener[] | null;
     cryptoProvider?: CryptoProvider | null;
+    trustStoreProvider?: TrustStoreProvider | null;
 }
 export declare abstract class SecurityManagerFactory<C extends SecurityManagerConfig = SecurityManagerConfig> extends AbstractResourceFactory<SecurityManager, C> {
     abstract create(config?: C | Record<string, unknown> | null, overrides?: SecurityManagerComponentOverrides | null): Promise<SecurityManager>;

package/dist/types/naylence/fame/security/trust-store/noop-trust-store-provider-factory.d.ts

@@ -0,0 +1,18 @@
+import { TrustStoreProviderFactory, type TrustStoreProviderConfig } from "./trust-store-provider-factory.js";
+import type { TrustStoreProvider } from "./trust-store-provider.js";
+export interface NoopTrustStoreProviderConfig extends TrustStoreProviderConfig {
+    readonly type: "NoopTrustStoreProvider";
+}
+export declare const FACTORY_META: {
+    readonly base: "TrustStoreProviderFactory";
+    readonly key: "NoopTrustStoreProvider";
+    readonly isDefault: true;
+    readonly priority: 10;
+};
+export declare class NoopTrustStoreProviderFactory extends TrustStoreProviderFactory<NoopTrustStoreProviderConfig> {
+    readonly type = "NoopTrustStoreProvider";
+    readonly isDefault = true;
+    readonly priority = 10;
+    create(_config?: NoopTrustStoreProviderConfig | Record<string, unknown> | null, ..._factoryArgs: unknown[]): Promise<TrustStoreProvider>;
+}
+export default NoopTrustStoreProviderFactory;

package/dist/types/naylence/fame/security/trust-store/trust-store-provider-factory.d.ts

@@ -0,0 +1,27 @@
+import type { CreateResourceOptions, ResourceConfig } from "@naylence/factory";
+import { AbstractResourceFactory } from "@naylence/factory";
+import type { TrustAnchor, TrustStoreProvider } from "./trust-store-provider.js";
+export interface TrustStoreProviderConfig extends ResourceConfig {
+    readonly type: string;
+}
+export interface TrustStoreProviderDependencies {
+    readonly env?: Record<string, unknown> | null;
+    readonly [key: string]: unknown;
+}
+export interface CreateTrustStoreProviderOptions extends Omit<CreateResourceOptions, "factoryArgs"> {
+    readonly factoryArgs?: unknown[];
+    readonly dependencies?: TrustStoreProviderDependencies;
+}
+export declare const TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE = "TrustStoreProviderFactory";
+export declare abstract class TrustStoreProviderFactory<C extends TrustStoreProviderConfig = TrustStoreProviderConfig> extends AbstractResourceFactory<TrustStoreProvider, C> {
+    abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<TrustStoreProvider>;
+    protected createUnconfiguredProvider(reason?: string): TrustStoreProvider;
+    static createTrustStoreProvider<C extends TrustStoreProviderConfig = TrustStoreProviderConfig>(config?: C | Record<string, unknown> | null, options?: CreateTrustStoreProviderOptions): Promise<TrustStoreProvider>;
+}
+export declare class NoopTrustStoreProvider implements TrustStoreProvider {
+    private readonly reason;
+    constructor(reason?: string);
+    getTrustStorePem(): Promise<string>;
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    initialize(): Promise<void>;
+}

package/dist/types/naylence/fame/security/trust-store/trust-store-provider.d.ts

@@ -0,0 +1,42 @@
+export interface TrustAnchor {
+    readonly pem: string;
+    readonly kid?: string;
+    readonly notBefore?: string;
+    readonly notAfter?: string;
+    readonly spkiSha256?: string;
+    readonly version?: number;
+}
+export interface TrustStoreProvider {
+    /**
+     * Resolve the PEM-encoded trust bundle used for certificate verification. Implementations
+     * should normalize line endings and return the same material they expose via {@link getRoots}.
+     */
+    getTrustStorePem(): Promise<string>;
+    getRoots(): Promise<readonly TrustAnchor[]>;
+    onUpdate?(callback: () => void): () => void;
+    initialize?(): Promise<void> | void;
+}
+export type TrustBundleSourceType = "INLINE_PEM" | "DATA_PEM" | "FILE" | "HTTPS_BUNDLE";
+export interface TrustBundlePins {
+    readonly hashPins?: readonly string[];
+    readonly allowedSpkis?: readonly string[];
+    readonly allowTofu?: boolean;
+    readonly refreshIntervalMs?: number;
+}
+export interface InlinePemSource {
+    readonly type: "INLINE_PEM";
+    readonly pem: string;
+}
+export interface DataPemSource {
+    readonly type: "DATA_PEM";
+    readonly dataUri: string;
+}
+export interface FilePemSource {
+    readonly type: "FILE";
+    readonly path: string;
+}
+export interface HttpsBundleSource extends TrustBundlePins {
+    readonly type: "HTTPS_BUNDLE";
+    readonly url: string;
+}
+export type TrustBundleSource = InlinePemSource | DataPemSource | FilePemSource | HttpsBundleSource;

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * The package version, injected at build time.
  * @internal
  */
-export declare const VERSION = "0.3.5-test.923";
+export declare const VERSION = "0.3.5-test.924";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naylence/runtime",
-  "version": "0.3.5-test.923",
+  "version": "0.3.5-test.924",
   "type": "module",
   "description": "Naylence Runtime - Complete TypeScript runtime",
   "author": "Naylence Dev <naylencedev@gmail.com>",