@naylence/runtime 0.3.5-test.923 → 0.3.5-test.925

package/dist/browser/index.mjs

@@ -96,12 +96,12 @@ installProcessEnvShim();
 // --- END ENV SHIM ---
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.5-test.923
+// Generated from package.json version: 0.3.5-test.925
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.5-test.923';
+const VERSION = '0.3.5-test.925';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -3167,7 +3167,7 @@ class EnvCredentialProviderFactory extends CredentialProviderFactory {
         return new EnvCredentialProvider(resolved.varName);
     }
 }
-const FACTORY_META$17 = {
+const FACTORY_META$18 = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'EnvCredentialProvider',
 };
@@ -3175,7 +3175,7 @@ const FACTORY_META$17 = {
 var envCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     EnvCredentialProviderFactory: EnvCredentialProviderFactory,
-    FACTORY_META: FACTORY_META$17,
+    FACTORY_META: FACTORY_META$18,
     default: EnvCredentialProviderFactory,
     normalizeEnvConfig: normalizeEnvConfig
 });
@@ -3273,14 +3273,14 @@ class PromptCredentialProviderFactory extends CredentialProviderFactory {
         return new PromptCredentialProvider(resolved.credentialName);
     }
 }
-const FACTORY_META$16 = {
+const FACTORY_META$17 = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'PromptCredentialProvider',
 };
 
 var promptCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$16,
+    FACTORY_META: FACTORY_META$17,
     PromptCredentialProviderFactory: PromptCredentialProviderFactory,
     default: PromptCredentialProviderFactory,
     normalizePromptConfig: normalizePromptConfig
@@ -3334,14 +3334,14 @@ class SecretStoreCredentialProviderFactory extends CredentialProviderFactory {
         return new SecretStoreCredentialProvider(resolved.secretName);
     }
 }
-const FACTORY_META$15 = {
+const FACTORY_META$16 = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'SecretStoreCredentialProvider',
 };
 
 var secretStoreCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$15,
+    FACTORY_META: FACTORY_META$16,
     SecretStoreCredentialProviderFactory: SecretStoreCredentialProviderFactory,
     default: SecretStoreCredentialProviderFactory,
     normalizeSecretStoreConfig: normalizeSecretStoreConfig
@@ -3390,14 +3390,14 @@ class StaticCredentialProviderFactory extends CredentialProviderFactory {
         return new StaticCredentialProvider(resolved.credentialValue);
     }
 }
-const FACTORY_META$14 = {
+const FACTORY_META$15 = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'StaticCredentialProvider',
 };
 
 var staticCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$14,
+    FACTORY_META: FACTORY_META$15,
     StaticCredentialProviderFactory: StaticCredentialProviderFactory,
     default: StaticCredentialProviderFactory,
     normalizeStaticConfig: normalizeStaticConfig
@@ -13503,6 +13503,7 @@ const MODULES = [
     "./security/policy/no-security-policy-factory.js",
     "./security/signing/eddsa-envelope-signer-factory.js",
     "./security/signing/eddsa-envelope-verifier-factory.js",
+    "./security/trust-store/noop-trust-store-provider-factory.js",
     "./sentinel/capability-aware-routing-policy-factory.js",
     "./sentinel/composite-routing-policy-factory.js",
     "./sentinel/hybrid-path-routing-policy-factory.js",
@@ -13577,6 +13578,7 @@ const MODULE_LOADERS = {
     "./security/policy/no-security-policy-factory.js": () => Promise.resolve().then(function () { return noSecurityPolicyFactory; }),
     "./security/signing/eddsa-envelope-signer-factory.js": () => Promise.resolve().then(function () { return eddsaEnvelopeSignerFactory; }),
     "./security/signing/eddsa-envelope-verifier-factory.js": () => Promise.resolve().then(function () { return eddsaEnvelopeVerifierFactory; }),
+    "./security/trust-store/noop-trust-store-provider-factory.js": () => Promise.resolve().then(function () { return noopTrustStoreProviderFactory; }),
     "./sentinel/capability-aware-routing-policy-factory.js": () => Promise.resolve().then(function () { return capabilityAwareRoutingPolicyFactory; }),
     "./sentinel/composite-routing-policy-factory.js": () => Promise.resolve().then(function () { return compositeRoutingPolicyFactory; }),
     "./sentinel/hybrid-path-routing-policy-factory.js": () => Promise.resolve().then(function () { return hybridPathRoutingPolicyFactory; }),
@@ -13881,7 +13883,7 @@ class NodeLikeFactory extends AbstractResourceFactory {
 //   registerFactory(NODE_LIKE_FACTORY_BASE_TYPE, type, factory);
 // }
 
-const FACTORY_META$13 = {
+const FACTORY_META$14 = {
     base: NODE_LIKE_FACTORY_BASE_TYPE,
     key: 'Node',
 };
@@ -13922,7 +13924,7 @@ class NodeFactory extends NodeLikeFactory {
 
 var nodeFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$13,
+    FACTORY_META: FACTORY_META$14,
     NodeFactory: NodeFactory,
     default: NodeFactory
 });
@@ -15363,7 +15365,7 @@ class RouteStoreFactory extends AbstractResourceFactory {
         return store ?? null;
     }
 }
-const FACTORY_META$12 = {
+const FACTORY_META$13 = {
     base: ROUTE_STORE_FACTORY_BASE_TYPE,
     key: 'InMemoryRouteStore',
 };
@@ -15381,7 +15383,7 @@ class InMemoryRouteStoreFactory extends RouteStoreFactory {
 
 var routeStoreFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$12,
+    FACTORY_META: FACTORY_META$13,
     InMemoryRouteStoreFactory: InMemoryRouteStoreFactory,
     ROUTE_STORE_FACTORY_BASE_TYPE: ROUTE_STORE_FACTORY_BASE_TYPE,
     RouteStoreFactory: RouteStoreFactory,
@@ -19197,7 +19199,7 @@ function isPlainRecord(value) {
     return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
 }
 
-const FACTORY_META$11 = {
+const FACTORY_META$12 = {
     base: NODE_LIKE_FACTORY_BASE_TYPE,
     key: 'Sentinel',
 };
@@ -19381,7 +19383,7 @@ class SentinelFactory extends NodeLikeFactory {
 
 var sentinelFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$11,
+    FACTORY_META: FACTORY_META$12,
     SentinelFactory: SentinelFactory,
     default: SentinelFactory
 });
@@ -20532,6 +20534,45 @@ class CertificateManagerFactory extends AbstractResourceFactory {
     }
 }
 
+const DEFAULT_UNCONFIGURED_MESSAGE = "Trust store is not configured. Set FAME_CA_CERTS to a PEM value, a file path, a data URI, or an HTTPS bundle URL.";
+const TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE = "TrustStoreProviderFactory";
+class TrustStoreProviderFactory extends AbstractResourceFactory {
+    createUnconfiguredProvider(reason) {
+        return new NoopTrustStoreProvider(reason ?? DEFAULT_UNCONFIGURED_MESSAGE);
+    }
+    static async createTrustStoreProvider(config, options = {}) {
+        const { dependencies, factoryArgs, ...restOptions } = options;
+        const mergedFactoryArgs = [
+            ...(dependencies ? [dependencies] : []),
+            ...(factoryArgs ?? []),
+        ];
+        const creationOptions = {
+            ...restOptions,
+            factoryArgs: mergedFactoryArgs,
+        };
+        if (config) {
+            const instance = await createResource$1(TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, config, creationOptions);
+            return instance ?? new NoopTrustStoreProvider();
+        }
+        const instance = await createDefaultResource(TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, null, creationOptions);
+        return instance ?? new NoopTrustStoreProvider();
+    }
+}
+class NoopTrustStoreProvider {
+    constructor(reason = DEFAULT_UNCONFIGURED_MESSAGE) {
+        this.reason = reason;
+    }
+    async getTrustStorePem() {
+        throw new Error(this.reason);
+    }
+    async getRoots() {
+        return [];
+    }
+    async initialize() {
+        // No-op for the placeholder provider.
+    }
+}
+
 const ENCRYPTION_MANAGER_FACTORY_BASE_TYPE = 'EncryptionManagerFactory';
 class EncryptionManagerFactory extends AbstractResourceFactory {
     getPriority() {
@@ -27091,7 +27132,7 @@ const PROFILE_MAP$4 = {
     [PROFILE_NAME_GATED_CALLBACK]: GATED_CALLBACK_PROFILE,
     [PROFILE_NAME_OPEN$1]: OPEN_PROFILE$1,
 };
-const FACTORY_META$10 = {
+const FACTORY_META$11 = {
     base: SECURITY_MANAGER_FACTORY_BASE_TYPE,
     key: 'SecurityProfile',
 };
@@ -27217,7 +27258,7 @@ var nodeSecurityProfileFactory = /*#__PURE__*/Object.freeze({
     ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE: ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE,
     ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER: ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER,
     ENV_VAR_JWT_TRUSTED_ISSUER: ENV_VAR_JWT_TRUSTED_ISSUER,
-    FACTORY_META: FACTORY_META$10,
+    FACTORY_META: FACTORY_META$11,
     NodeSecurityProfileFactory: NodeSecurityProfileFactory,
     PROFILE_NAME_GATED: PROFILE_NAME_GATED,
     PROFILE_NAME_GATED_CALLBACK: PROFILE_NAME_GATED_CALLBACK,
@@ -27346,7 +27387,7 @@ class SimpleLoadBalancerStickinessManager extends BaseNodeEventListener {
     }
 }
 
-const FACTORY_META$$ = {
+const FACTORY_META$10 = {
     base: LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE,
     key: 'SimpleLoadBalancerStickinessManager',
 };
@@ -27370,7 +27411,7 @@ class SimpleLoadBalancerStickinessManagerFactory extends LoadBalancerStickinessM
 
 var simpleLoadBalancerStickinessManagerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$$,
+    FACTORY_META: FACTORY_META$10,
     SimpleLoadBalancerStickinessManagerFactory: SimpleLoadBalancerStickinessManagerFactory,
     default: SimpleLoadBalancerStickinessManagerFactory
 });
@@ -27848,7 +27889,7 @@ class WelcomeServiceFactory extends AbstractResourceFactory {
     }
 }
 
-const FACTORY_META$_ = {
+const FACTORY_META$$ = {
     base: WELCOME_SERVICE_FACTORY_BASE_TYPE,
     key: 'DefaultWelcomeService',
 };
@@ -27929,7 +27970,7 @@ function resolveConfigEntry(source, keys) {
 var defaultWelcomeServiceFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DefaultWelcomeServiceFactory: DefaultWelcomeServiceFactory,
-    FACTORY_META: FACTORY_META$_,
+    FACTORY_META: FACTORY_META$$,
     default: DefaultWelcomeServiceFactory
 });
 
@@ -28080,7 +28121,7 @@ class InPageConnectionGrantImpl {
         this.purpose = 'connection';
     }
 }
-const FACTORY_META$Z = {
+const FACTORY_META$_ = {
     base: CONNECTOR_FACTORY_BASE_TYPE,
     key: INPAGE_CONNECTOR_TYPE,
 };
@@ -28229,7 +28270,7 @@ class InPageConnectorFactory extends ConnectorFactory {
 
 var inpageConnectorFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$Z,
+    FACTORY_META: FACTORY_META$_,
     InPageConnectorFactory: InPageConnectorFactory,
     default: InPageConnectorFactory
 });
@@ -28242,7 +28283,7 @@ class BroadcastChannelConnectionGrantImpl {
         this.purpose = 'connection';
     }
 }
-const FACTORY_META$Y = {
+const FACTORY_META$Z = {
     base: CONNECTOR_FACTORY_BASE_TYPE,
     key: BROADCAST_CHANNEL_CONNECTOR_TYPE,
 };
@@ -28390,7 +28431,7 @@ class BroadcastChannelConnectorFactory extends ConnectorFactory {
 var broadcastChannelConnectorFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     BroadcastChannelConnectorFactory: BroadcastChannelConnectorFactory,
-    FACTORY_META: FACTORY_META$Y,
+    FACTORY_META: FACTORY_META$Z,
     default: BroadcastChannelConnectorFactory
 });
 
@@ -29141,7 +29182,7 @@ function normalizeConfig$r(config) {
         inboxCapacity,
     };
 }
-const FACTORY_META$X = {
+const FACTORY_META$Y = {
     base: TRANSPORT_LISTENER_FACTORY_BASE_TYPE,
     key: 'InPageListener',
 };
@@ -29166,7 +29207,7 @@ class InPageListenerFactory extends TransportListenerFactory {
 
 var inpageListenerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$X,
+    FACTORY_META: FACTORY_META$Y,
     InPageListenerFactory: InPageListenerFactory,
     default: InPageListenerFactory
 });
@@ -29680,7 +29721,7 @@ function normalizeConfig$q(config) {
         inboxCapacity,
     };
 }
-const FACTORY_META$W = {
+const FACTORY_META$X = {
     base: TRANSPORT_LISTENER_FACTORY_BASE_TYPE,
     key: 'BroadcastChannelListener',
 };
@@ -29706,7 +29747,7 @@ class BroadcastChannelListenerFactory extends TransportListenerFactory {
 var broadcastChannelListenerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     BroadcastChannelListenerFactory: BroadcastChannelListenerFactory,
-    FACTORY_META: FACTORY_META$W,
+    FACTORY_META: FACTORY_META$X,
     default: BroadcastChannelListenerFactory
 });
 
@@ -30002,7 +30043,7 @@ class NoopTraceEmitter extends BaseTraceEmitter {
     }
 }
 
-const FACTORY_META$V = {
+const FACTORY_META$W = {
     base: TRACE_EMITTER_FACTORY_BASE_TYPE,
     key: 'NoopTraceEmitter',
 };
@@ -30020,7 +30061,7 @@ class NoopTraceEmitterFactory extends TraceEmitterFactory {
 
 var noopTraceEmitterFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$V,
+    FACTORY_META: FACTORY_META$W,
     NoopTraceEmitterFactory: NoopTraceEmitterFactory,
     default: NoopTraceEmitterFactory
 });
@@ -30275,7 +30316,7 @@ function getOtelApiModule() {
     }
     return otelApiModulePromise;
 }
-const FACTORY_META$U = {
+const FACTORY_META$V = {
     base: TRACE_EMITTER_FACTORY_BASE_TYPE,
     key: 'OpenTelemetryTraceEmitter',
 };
@@ -30445,7 +30486,7 @@ function extractHeaders(value) {
 
 var openTelemetryTraceEmitterFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$U,
+    FACTORY_META: FACTORY_META$V,
     OpenTelemetryTraceEmitterFactory: OpenTelemetryTraceEmitterFactory,
     default: OpenTelemetryTraceEmitterFactory
 });
@@ -30466,7 +30507,7 @@ const PROFILE_MAP$3 = {
     [PROFILE_NAME_NOOP$1]: NOOP_PROFILE$1,
     [PROFILE_NAME_OPEN_TELEMETRY]: OPEN_TELEMETRY_PROFILE,
 };
-const FACTORY_META$T = {
+const FACTORY_META$U = {
     base: TRACE_EMITTER_FACTORY_BASE_TYPE,
     key: 'TraceEmitterProfile',
 };
@@ -30546,7 +30587,7 @@ function deepClone$2(value) {
 
 var traceEmitterProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$T,
+    FACTORY_META: FACTORY_META$U,
     PROFILE_NAME_NOOP: PROFILE_NAME_NOOP$1,
     PROFILE_NAME_OPEN_TELEMETRY: PROFILE_NAME_OPEN_TELEMETRY,
     TraceEmitterProfileFactory: TraceEmitterProfileFactory,
@@ -30614,7 +30655,7 @@ function normalizeConfig$o(config) {
         authorizer: authorizerValue,
     };
 }
-const FACTORY_META$S = {
+const FACTORY_META$T = {
     base: TRANSPORT_LISTENER_FACTORY_BASE_TYPE,
     key: 'HttpListener',
 };
@@ -30661,7 +30702,7 @@ class HttpListenerFactory extends TransportListenerFactory {
 
 var httpListenerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$S,
+    FACTORY_META: FACTORY_META$T,
     HttpListenerFactory: HttpListenerFactory,
     default: HttpListenerFactory
 });
@@ -30786,7 +30827,7 @@ class HttpConnectionGrantImpl {
         this.purpose = 'connection';
     }
 }
-const FACTORY_META$R = {
+const FACTORY_META$S = {
     base: CONNECTOR_FACTORY_BASE_TYPE,
     key: HTTP_STATELESS_CONNECTOR_TYPE,
 };
@@ -30955,7 +30996,7 @@ class HttpStatelessConnectorFactory extends ConnectorFactory {
 
 var httpStatelessConnectorFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$R,
+    FACTORY_META: FACTORY_META$S,
     HttpStatelessConnectorFactory: HttpStatelessConnectorFactory,
     default: HttpStatelessConnectorFactory
 });
@@ -30971,7 +31012,7 @@ class WebSocketConnectionGrantImpl {
         this.purpose = 'connection';
     }
 }
-const FACTORY_META$Q = {
+const FACTORY_META$R = {
     base: CONNECTOR_FACTORY_BASE_TYPE,
     key: 'WebSocketConnector',
 };
@@ -31342,7 +31383,7 @@ class WebSocketConnectorFactory extends ConnectorFactory {
 
 var websocketConnectorFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$Q,
+    FACTORY_META: FACTORY_META$R,
     WebSocketConnectorFactory: WebSocketConnectorFactory,
     default: WebSocketConnectorFactory,
     setWebSocketConnectorSslLoader: setWebSocketConnectorSslLoader
@@ -31412,7 +31453,7 @@ function normalizeConfig$n(config) {
         authorizer: authorizerValue,
     };
 }
-const FACTORY_META$P = {
+const FACTORY_META$Q = {
     base: TRANSPORT_LISTENER_FACTORY_BASE_TYPE,
     key: 'WebSocketListener',
 };
@@ -31456,7 +31497,7 @@ class WebSocketListenerFactory extends TransportListenerFactory {
 
 var websocketListenerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$P,
+    FACTORY_META: FACTORY_META$Q,
     WebSocketListenerFactory: WebSocketListenerFactory,
     default: WebSocketListenerFactory
 });
@@ -31624,7 +31665,7 @@ function withOption(source, keys) {
         [camelKey]: value,
     };
 }
-const FACTORY_META$O = {
+const FACTORY_META$P = {
     base: DELIVERY_POLICY_FACTORY_BASE_TYPE,
     key: 'AtLeastOnceDeliveryPolicy',
 };
@@ -31632,7 +31673,7 @@ const FACTORY_META$O = {
 var atLeastOnceDeliveryPolicyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AtLeastOnceDeliveryPolicyFactory: AtLeastOnceDeliveryPolicyFactory,
-    FACTORY_META: FACTORY_META$O,
+    FACTORY_META: FACTORY_META$P,
     default: AtLeastOnceDeliveryPolicyFactory
 });
 
@@ -31659,7 +31700,7 @@ class AtMostOnceDeliveryPolicyFactory extends DeliveryPolicyFactory {
 }
 registerDeliveryPolicyFactory('AtMostOnceDeliveryPolicy', AtMostOnceDeliveryPolicyFactory);
 registerDeliveryPolicyFactory('AtMostOnceMessageDeliveryPolicy', AtMostOnceDeliveryPolicyFactory);
-const FACTORY_META$N = {
+const FACTORY_META$O = {
     base: DELIVERY_POLICY_FACTORY_BASE_TYPE,
     key: 'AtMostOnceDeliveryPolicy',
 };
@@ -31667,7 +31708,7 @@ const FACTORY_META$N = {
 var atMostOnceDeliveryPolicyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AtMostOnceDeliveryPolicyFactory: AtMostOnceDeliveryPolicyFactory,
-    FACTORY_META: FACTORY_META$N,
+    FACTORY_META: FACTORY_META$O,
     default: AtMostOnceDeliveryPolicyFactory
 });
 
@@ -31760,7 +31801,7 @@ function resolveProfileConfig$1(profileName) {
 function deepClone$1(value) {
     return JSON.parse(JSON.stringify(value));
 }
-const FACTORY_META$M = {
+const FACTORY_META$N = {
     base: DELIVERY_POLICY_FACTORY_BASE_TYPE,
     key: 'DeliveryProfile',
 };
@@ -31768,7 +31809,7 @@ const FACTORY_META$M = {
 var deliveryProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DeliveryProfileFactory: DeliveryProfileFactory,
-    FACTORY_META: FACTORY_META$M,
+    FACTORY_META: FACTORY_META$N,
     PROFILE_NAME_AT_LEAST_ONCE: PROFILE_NAME_AT_LEAST_ONCE,
     PROFILE_NAME_AT_MOST_ONCE: PROFILE_NAME_AT_MOST_ONCE,
     default: DeliveryProfileFactory
@@ -31958,7 +31999,7 @@ function normalizeServiceName(value) {
 
 // import { registerRuntimeFactories } from "../util/register-runtime-factories.js";
 const FAME_FABRIC_FACTORY_BASE_TYPE = 'FameFabricFactory';
-const FACTORY_META$L = {
+const FACTORY_META$M = {
     base: FAME_FABRIC_FACTORY_BASE_TYPE,
     key: 'InProcessFameFabric',
 };
@@ -31978,7 +32019,7 @@ class InProcessFameFabricFactory extends FameFabricFactory {
 
 var inProcessFameFabricFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$L,
+    FACTORY_META: FACTORY_META$M,
     FAME_FABRIC_FACTORY_BASE_TYPE: FAME_FABRIC_FACTORY_BASE_TYPE,
     InProcessFameFabricFactory: InProcessFameFabricFactory,
     default: InProcessFameFabricFactory
@@ -32207,7 +32248,7 @@ const PROFILE_MAP$1 = {
     [PROFILE_NAME_NOOP]: NOOP_PROFILE,
     [PROFILE_NAME_NONE]: NOOP_PROFILE,
 };
-const FACTORY_META$K = {
+const FACTORY_META$L = {
     base: ADMISSION_CLIENT_FACTORY_BASE_TYPE,
     key: 'AdmissionProfile',
 };
@@ -32254,7 +32295,7 @@ function deepClone(value) {
 var admissionProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AdmissionProfileFactory: AdmissionProfileFactory,
-    FACTORY_META: FACTORY_META$K,
+    FACTORY_META: FACTORY_META$L,
     default: AdmissionProfileFactory
 });
 
@@ -32336,7 +32377,7 @@ function cloneGrant(grant) {
     return JSON.parse(JSON.stringify(grant));
 }
 
-const FACTORY_META$J = {
+const FACTORY_META$K = {
     base: ADMISSION_CLIENT_FACTORY_BASE_TYPE,
     key: 'DirectAdmissionClient',
 };
@@ -32388,11 +32429,11 @@ function normalizeConfig$l(config) {
 var directAdmissionClientFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DirectAdmissionClientFactory: DirectAdmissionClientFactory,
-    FACTORY_META: FACTORY_META$J,
+    FACTORY_META: FACTORY_META$K,
     default: DirectAdmissionClientFactory
 });
 
-const FACTORY_META$I = {
+const FACTORY_META$J = {
     base: ADMISSION_CLIENT_FACTORY_BASE_TYPE,
     key: 'NoopAdmissionClient',
 };
@@ -32441,7 +32482,7 @@ function normalizeConfig$k(config, factoryArgs) {
 
 var noopAdmissionClientFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$I,
+    FACTORY_META: FACTORY_META$J,
     NoopAdmissionClientFactory: NoopAdmissionClientFactory,
     default: NoopAdmissionClientFactory
 });
@@ -32456,7 +32497,7 @@ class NoAuthInjectionStrategy {
     }
 }
 
-const FACTORY_META$H = {
+const FACTORY_META$I = {
     base: AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE,
     key: 'NoAuth',
 };
@@ -32485,7 +32526,7 @@ function normalizeConfig$j(config) {
 
 var noAuthInjectionStrategyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$H,
+    FACTORY_META: FACTORY_META$I,
     NoAuthInjectionStrategyFactory: NoAuthInjectionStrategyFactory,
     default: NoAuthInjectionStrategyFactory
 });
@@ -32634,7 +32675,7 @@ function convertKeysToCamelCase(value) {
     return result;
 }
 
-const FACTORY_META$G = {
+const FACTORY_META$H = {
     base: ADMISSION_CLIENT_FACTORY_BASE_TYPE,
     key: 'WelcomeServiceClient',
 };
@@ -32704,7 +32745,7 @@ async function createAuthStrategy(config) {
 
 var welcomeServiceClientFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$G,
+    FACTORY_META: FACTORY_META$H,
     WelcomeServiceClientFactory: WelcomeServiceClientFactory,
     default: WelcomeServiceClientFactory
 });
@@ -32822,7 +32863,7 @@ class StaticNodePlacementStrategyFactory extends NodePlacementStrategyFactory {
         });
     }
 }
-const FACTORY_META$F = {
+const FACTORY_META$G = {
     base: NODE_PLACEMENT_STRATEGY_FACTORY_BASE_TYPE,
     key: 'StaticNodePlacementStrategy',
 };
@@ -32832,7 +32873,7 @@ registerNodePlacementStrategyFactory('StaticNodePlacementStrategy', StaticNodePl
 
 var staticNodePlacementStrategyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$F,
+    FACTORY_META: FACTORY_META$G,
     StaticNodePlacementStrategyFactory: StaticNodePlacementStrategyFactory,
     default: StaticNodePlacementStrategyFactory
 });
@@ -32991,7 +33032,7 @@ function connectorTypeName(connector) {
     return typeof connector;
 }
 
-const FACTORY_META$E = {
+const FACTORY_META$F = {
     base: AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE,
     key: 'BearerTokenHeaderAuth',
 };
@@ -33032,7 +33073,7 @@ function normalizeConfig$g(config) {
 var bearerTokenHeaderAuthInjectionStrategyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     BearerTokenHeaderAuthInjectionStrategyFactory: BearerTokenHeaderAuthInjectionStrategyFactory,
-    FACTORY_META: FACTORY_META$E,
+    FACTORY_META: FACTORY_META$F,
     default: BearerTokenHeaderAuthInjectionStrategyFactory
 });
 
@@ -33059,7 +33100,7 @@ function normalizeConfig$f(config) {
 function isTokenVerifier(candidate) {
     return Boolean(candidate && typeof candidate.verify === 'function');
 }
-const FACTORY_META$D = {
+const FACTORY_META$E = {
     base: AUTHORIZER_FACTORY_BASE_TYPE,
     key: 'DefaultAuthorizer',
 };
@@ -33089,7 +33130,7 @@ class DefaultAuthorizerFactory extends AuthorizerFactory {
 var defaultAuthorizerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DefaultAuthorizerFactory: DefaultAuthorizerFactory,
-    FACTORY_META: FACTORY_META$D,
+    FACTORY_META: FACTORY_META$E,
     default: DefaultAuthorizerFactory
 });
 
@@ -33100,7 +33141,7 @@ function getJwksJwtTokenVerifierModule() {
     }
     return jwksJwtTokenVerifierModulePromise;
 }
-const FACTORY_META$C = {
+const FACTORY_META$D = {
     base: TOKEN_VERIFIER_FACTORY_BASE_TYPE,
     key: 'JWKSJWTTokenVerifier',
 };
@@ -33162,12 +33203,12 @@ function normalizeConfig$e(config) {
 
 var jwksJwtTokenVerifierFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$C,
+    FACTORY_META: FACTORY_META$D,
     JWKSTokenVerifierFactory: JWKSTokenVerifierFactory,
     default: JWKSTokenVerifierFactory
 });
 
-const FACTORY_META$B = {
+const FACTORY_META$C = {
     base: TOKEN_ISSUER_FACTORY_BASE_TYPE,
     key: 'JWTTokenIssuer',
 };
@@ -33364,12 +33405,12 @@ function getProviderKeyId(provider) {
 
 var jwtTokenIssuerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$B,
+    FACTORY_META: FACTORY_META$C,
     JWTTokenIssuerFactory: JWTTokenIssuerFactory,
     default: JWTTokenIssuerFactory
 });
 
-const FACTORY_META$A = {
+const FACTORY_META$B = {
     base: TOKEN_VERIFIER_FACTORY_BASE_TYPE,
     key: 'JWTTokenVerifier',
 };
@@ -33537,7 +33578,7 @@ function getProviderVerificationKey(provider) {
 
 var jwtTokenVerifierFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$A,
+    FACTORY_META: FACTORY_META$B,
     JWTTokenVerifierFactory: JWTTokenVerifierFactory,
     default: JWTTokenVerifierFactory
 });
@@ -33553,7 +33594,7 @@ class NoneTokenProvider {
     }
 }
 
-const FACTORY_META$z = {
+const FACTORY_META$A = {
     base: TOKEN_PROVIDER_FACTORY_BASE_TYPE,
     key: 'NoneTokenProvider',
 };
@@ -33570,7 +33611,7 @@ class NoneTokenProviderFactory extends TokenProviderFactory {
 
 var noneTokenProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$z,
+    FACTORY_META: FACTORY_META$A,
     NoneTokenProviderFactory: NoneTokenProviderFactory,
     default: NoneTokenProviderFactory
 });
@@ -33622,7 +33663,7 @@ class NoopAuthorizer {
     }
 }
 
-const FACTORY_META$y = {
+const FACTORY_META$z = {
     base: AUTHORIZER_FACTORY_BASE_TYPE,
     key: 'NoopAuthorizer',
 };
@@ -33638,7 +33679,7 @@ class NoopAuthorizerFactory extends AuthorizerFactory {
 
 var noopAuthorizerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$y,
+    FACTORY_META: FACTORY_META$z,
     NoopAuthorizerFactory: NoopAuthorizerFactory,
     default: NoopAuthorizerFactory
 });
@@ -33652,7 +33693,7 @@ class NoopTokenIssuer {
     }
 }
 
-const FACTORY_META$x = {
+const FACTORY_META$y = {
     base: TOKEN_ISSUER_FACTORY_BASE_TYPE,
     key: 'NoopTokenIssuer',
 };
@@ -33668,7 +33709,7 @@ class NoopTokenIssuerFactory extends TokenIssuerFactory {
 
 var noopTokenIssuerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$x,
+    FACTORY_META: FACTORY_META$y,
     NoopTokenIssuerFactory: NoopTokenIssuerFactory,
     default: NoopTokenIssuerFactory
 });
@@ -33690,7 +33731,7 @@ class NoopTokenVerifier {
     }
 }
 
-const FACTORY_META$w = {
+const FACTORY_META$x = {
     base: TOKEN_VERIFIER_FACTORY_BASE_TYPE,
     key: 'NoopTokenVerifier',
 };
@@ -33706,7 +33747,7 @@ class NoopTokenVerifierFactory extends TokenVerifierFactory {
 
 var noopTokenVerifierFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$w,
+    FACTORY_META: FACTORY_META$x,
     NoopTokenVerifierFactory: NoopTokenVerifierFactory,
     default: NoopTokenVerifierFactory
 });
@@ -33719,7 +33760,7 @@ function getOAuth2AuthorizerModule() {
     }
     return oauth2AuthorizerModulePromise;
 }
-const FACTORY_META$v = {
+const FACTORY_META$w = {
     base: AUTHORIZER_FACTORY_BASE_TYPE,
     key: 'OAuth2Authorizer',
 };
@@ -33864,7 +33905,7 @@ function normalizeTokenVerifierConfig({ config, issuer, jwksUrl, algorithm, }) {
 
 var oauth2AuthorizerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$v,
+    FACTORY_META: FACTORY_META$w,
     OAuth2AuthorizerFactory: OAuth2AuthorizerFactory,
     default: OAuth2AuthorizerFactory
 });
@@ -33904,7 +33945,7 @@ function normalizeConfig$a(config) {
     }
     return normalized;
 }
-const FACTORY_META$u = {
+const FACTORY_META$v = {
     base: TOKEN_PROVIDER_FACTORY_BASE_TYPE,
     key: 'OAuth2ClientCredentialsTokenProvider',
 };
@@ -33935,7 +33976,7 @@ class OAuth2ClientCredentialsTokenProviderFactory extends TokenProviderFactory {
 
 var oauth2ClientCredentialsTokenProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$u,
+    FACTORY_META: FACTORY_META$v,
     OAuth2ClientCredentialsTokenProviderFactory: OAuth2ClientCredentialsTokenProviderFactory,
     default: OAuth2ClientCredentialsTokenProviderFactory
 });
@@ -34017,7 +34058,7 @@ function normalizeConfig$9(config) {
     }
     return normalized;
 }
-const FACTORY_META$t = {
+const FACTORY_META$u = {
     base: TOKEN_PROVIDER_FACTORY_BASE_TYPE,
     key: 'OAuth2PkceTokenProvider',
 };
@@ -34072,7 +34113,7 @@ class OAuth2PkceTokenProviderFactory extends TokenProviderFactory {
 
 var oauth2PkceTokenProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$t,
+    FACTORY_META: FACTORY_META$u,
     OAuth2PkceTokenProviderFactory: OAuth2PkceTokenProviderFactory,
     default: OAuth2PkceTokenProviderFactory
 });
@@ -34122,7 +34163,7 @@ class QueryParamAuthInjectionStrategy {
     }
 }
 
-const FACTORY_META$s = {
+const FACTORY_META$t = {
     base: AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE,
     key: 'QueryParamAuth',
 };
@@ -34162,7 +34203,7 @@ function normalizeConfig$8(config) {
 
 var queryParamAuthInjectionStrategyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$s,
+    FACTORY_META: FACTORY_META$t,
     QueryParamAuthInjectionStrategyFactory: QueryParamAuthInjectionStrategyFactory,
     default: QueryParamAuthInjectionStrategyFactory
 });
@@ -34198,7 +34239,7 @@ function normalizeConfig$7(config) {
         secretConfig: normalizeSecretSource(secretSource),
     };
 }
-const FACTORY_META$r = {
+const FACTORY_META$s = {
     base: AUTHORIZER_FACTORY_BASE_TYPE,
     key: 'SharedSecretAuthorizer',
 };
@@ -34217,7 +34258,7 @@ class SharedSecretAuthorizerFactory extends AuthorizerFactory {
 
 var sharedSecretAuthorizerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$r,
+    FACTORY_META: FACTORY_META$s,
     SharedSecretAuthorizerFactory: SharedSecretAuthorizerFactory,
     default: SharedSecretAuthorizerFactory
 });
@@ -34253,7 +34294,7 @@ function normalizeConfig$6(config) {
         secretConfig: normalizeSecretSource(secretSource),
     };
 }
-const FACTORY_META$q = {
+const FACTORY_META$r = {
     base: TOKEN_PROVIDER_FACTORY_BASE_TYPE,
     key: 'SharedSecretTokenProvider',
 };
@@ -34272,7 +34313,7 @@ class SharedSecretTokenProviderFactory extends TokenProviderFactory {
 
 var sharedSecretTokenProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$q,
+    FACTORY_META: FACTORY_META$r,
     SharedSecretTokenProviderFactory: SharedSecretTokenProviderFactory,
     default: SharedSecretTokenProviderFactory
 });
@@ -34316,7 +34357,7 @@ function normalizeConfig$5(config) {
     }
     return normalized;
 }
-const FACTORY_META$p = {
+const FACTORY_META$q = {
     base: TOKEN_VERIFIER_FACTORY_BASE_TYPE,
     key: 'SharedSecretTokenVerifier',
 };
@@ -34341,7 +34382,7 @@ class SharedSecretTokenVerifierFactory extends TokenVerifierFactory {
 
 var sharedSecretTokenVerifierFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$p,
+    FACTORY_META: FACTORY_META$q,
     SharedSecretTokenVerifierFactory: SharedSecretTokenVerifierFactory,
     default: SharedSecretTokenVerifierFactory
 });
@@ -34456,7 +34497,7 @@ function normalizeConfig$4(config) {
     }
     return options;
 }
-const FACTORY_META$o = {
+const FACTORY_META$p = {
     base: TOKEN_PROVIDER_FACTORY_BASE_TYPE,
     key: 'StaticTokenProvider',
 };
@@ -34473,7 +34514,7 @@ class StaticTokenProviderFactory extends TokenProviderFactory {
 
 var staticTokenProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$o,
+    FACTORY_META: FACTORY_META$p,
     StaticTokenProviderFactory: StaticTokenProviderFactory,
     default: StaticTokenProviderFactory
 });
@@ -34524,7 +34565,7 @@ class WebSocketSubprotocolAuthInjectionStrategy {
     }
 }
 
-const FACTORY_META$n = {
+const FACTORY_META$o = {
     base: AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE,
     key: 'WebSocketSubprotocolAuth',
 };
@@ -34566,7 +34607,7 @@ function normalizeConfig$3(config) {
 
 var websocketSubprotocolAuthInjectionStrategyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$n,
+    FACTORY_META: FACTORY_META$o,
     WebSocketSubprotocolAuthInjectionStrategyFactory: WebSocketSubprotocolAuthInjectionStrategyFactory,
     default: WebSocketSubprotocolAuthInjectionStrategyFactory
 });
@@ -34614,7 +34655,7 @@ class DevFixedKeyCredentialProviderFactory extends CredentialProviderFactory {
         throw new Error('DevFixedKeyCredentialProvider requires keyHex or keyBase64');
     }
 }
-const FACTORY_META$m = {
+const FACTORY_META$n = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'DevFixedKeyCredentialProvider',
 };
@@ -34622,7 +34663,7 @@ const FACTORY_META$m = {
 var devFixedKeyCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DevFixedKeyCredentialProviderFactory: DevFixedKeyCredentialProviderFactory,
-    FACTORY_META: FACTORY_META$m,
+    FACTORY_META: FACTORY_META$n,
     default: DevFixedKeyCredentialProviderFactory,
     normalizeDevFixedConfig: normalizeDevFixedConfig
 });
@@ -34638,14 +34679,14 @@ class NoneCredentialProviderFactory extends CredentialProviderFactory {
         return new NoneCredentialProvider();
     }
 }
-const FACTORY_META$l = {
+const FACTORY_META$m = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'NoneCredentialProvider',
 };
 
 var noneCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$l,
+    FACTORY_META: FACTORY_META$m,
     NoneCredentialProviderFactory: NoneCredentialProviderFactory,
     default: NoneCredentialProviderFactory
 });
@@ -34683,14 +34724,14 @@ class SessionKeyCredentialProviderFactory extends CredentialProviderFactory {
         return new SessionKeyCredentialProvider(resolved.length);
     }
 }
-const FACTORY_META$k = {
+const FACTORY_META$l = {
     base: CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE,
     key: 'SessionKeyCredentialProvider',
 };
 
 var sessionKeyCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$k,
+    FACTORY_META: FACTORY_META$l,
     SessionKeyCredentialProviderFactory: SessionKeyCredentialProviderFactory,
     default: SessionKeyCredentialProviderFactory,
     normalizeSessionKeyConfig: normalizeSessionKeyConfig
@@ -34728,9 +34769,10 @@ function normalizeDefaultSecurityManagerConfig(config) {
     ensureAlias('keyValidator', 'key_validator');
     ensureAlias('eventListeners', 'event_listeners');
     ensureAlias('cryptoProvider', 'crypto_provider');
+    ensureAlias('trustStoreProvider', 'trust_store_provider');
     return normalized;
 }
-const FACTORY_META$j = {
+const FACTORY_META$k = {
     base: SECURITY_MANAGER_FACTORY_BASE_TYPE,
     key: 'DefaultSecurityManager',
 };
@@ -34776,6 +34818,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
         const certificateManager = DefaultSecurityManagerFactory.extractInstance(config, 'certificateManager', 'certificate_manager');
         const secureChannelManager = DefaultSecurityManagerFactory.extractInstance(config, 'secureChannelManager', 'secure_channel_manager');
         const cryptoProvider = DefaultSecurityManagerFactory.extractInstance(config, 'cryptoProvider', 'crypto_provider');
+        const trustStoreProvider = DefaultSecurityManagerFactory.extractInstance(config, 'trustStoreProvider', 'trust_store_provider');
         const listenersSource = overrides?.eventListeners ??
             config.eventListeners ??
             config.event_listeners;
@@ -34795,10 +34838,11 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             secureChannelManager,
             eventListeners,
             cryptoProvider: cryptoProvider ?? null,
+            trustStoreProvider: trustStoreProvider ?? null,
         };
     }
     static async buildSecurityManager(options) {
-        let { config, createOptions, policy, envelopeSigner, envelopeVerifier, encryptionManager, keyStore, keyManager, keyValidator, authorizer, certificateManager, secureChannelManager, eventListeners, cryptoProvider, } = options;
+        let { config, createOptions, policy, envelopeSigner, envelopeVerifier, encryptionManager, keyStore, keyManager, keyValidator, authorizer, certificateManager, secureChannelManager, eventListeners, cryptoProvider, trustStoreProvider, } = options;
         if (!keyStore) {
             keyStore = await DefaultSecurityManagerFactory.getOrCreateKeyStore(config, createOptions ?? null);
         }
@@ -34811,6 +34855,10 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
         if (!policy) {
             throw new Error('DefaultSecurityManagerFactory could not resolve a SecurityPolicy');
         }
+        if (!trustStoreProvider) {
+            trustStoreProvider =
+                await TrustStoreProviderFactory.createTrustStoreProvider();
+        }
         if (!keyManager) {
             keyManager =
                 await DefaultSecurityManagerFactory.createKeyManagerFromConfig(config, policy, keyStore, createOptions ?? null);
@@ -34821,7 +34869,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
         }
         if (!envelopeVerifier) {
             envelopeVerifier =
-                await DefaultSecurityManagerFactory.createEnvelopeVerifierFromConfig(config, policy, keyManager);
+                await DefaultSecurityManagerFactory.createEnvelopeVerifierFromConfig(config, policy, keyManager, trustStoreProvider);
         }
         if (!encryptionManager || !secureChannelManager) {
             const encryptionResult = await DefaultSecurityManagerFactory.createEncryptionManagerFromConfig(config, policy, keyManager, secureChannelManager, cryptoProvider ?? null);
@@ -34841,7 +34889,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
         }
         if (!certificateManager) {
             certificateManager =
-                await DefaultSecurityManagerFactory.createCertificateManagerFromConfig(config, policy);
+                await DefaultSecurityManagerFactory.createCertificateManagerFromConfig(config, policy, trustStoreProvider);
         }
         return new DefaultSecurityManager(policy, envelopeSigner, envelopeVerifier, encryptionManager, keyManager, authorizer, certificateManager, secureChannelManager, keyValidator ?? null);
     }
@@ -34921,7 +34969,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             throw error instanceof Error ? error : new Error(String(error));
         }
     }
-    static async createEnvelopeVerifierFromConfig(config, policy, keyManager) {
+    static async createEnvelopeVerifierFromConfig(config, policy, keyManager, trustStoreProvider) {
         const verifierConfig = config.envelope_verifier ?? config.envelopeVerifier ?? null;
         if (verifierConfig &&
             DefaultSecurityManagerFactory.isConfigLike(verifierConfig)) {
@@ -34945,7 +34993,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             }
             const signing = policy.signing ?? null;
             return await EnvelopeVerifierFactory.createEnvelopeVerifier(null, {
-                factoryArgs: [keyManager, signing ?? null],
+                factoryArgs: [keyManager, signing ?? null, { trustStoreProvider }],
             });
         }
         catch (error) {
@@ -35097,7 +35145,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             throw error instanceof Error ? error : new Error(String(error));
         }
     }
-    static async createCertificateManagerFromConfig(config, policy) {
+    static async createCertificateManagerFromConfig(config, policy, trustStoreProvider) {
         const certificateConfig = config.certificate_manager ?? null;
         if (certificateConfig &&
             DefaultSecurityManagerFactory.isConfigLike(certificateConfig)) {
@@ -35110,8 +35158,12 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
                 return null;
             }
             const signing = policy.signing ?? null;
+            const trustStorePem = trustStoreProvider
+                ? async () => await trustStoreProvider.getTrustStorePem()
+                : null;
             return await CertificateManagerFactory.createCertificateManager(null, {
                 signing: signing ?? null,
+                factoryArgs: trustStorePem ? [trustStorePem] : [],
             });
         }
         catch (error) {
@@ -35186,11 +35238,11 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
 var defaultSecurityManagerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DefaultSecurityManagerFactory: DefaultSecurityManagerFactory,
-    FACTORY_META: FACTORY_META$j,
+    FACTORY_META: FACTORY_META$k,
     default: DefaultSecurityManagerFactory
 });
 
-const FACTORY_META$i = {
+const FACTORY_META$j = {
     base: ENCRYPTION_MANAGER_FACTORY_BASE_TYPE,
     key: 'NoopEncryptionManager',
 };
@@ -35247,7 +35299,7 @@ class NoopEncryptionManagerFactory extends EncryptionManagerFactory {
 
 var noopEncryptionManagerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$i,
+    FACTORY_META: FACTORY_META$j,
     NoopEncryptionManagerFactory: NoopEncryptionManagerFactory,
     default: NoopEncryptionManagerFactory
 });
@@ -35319,7 +35371,7 @@ class NoopSecureChannelManager {
     }
 }
 
-const FACTORY_META$h = {
+const FACTORY_META$i = {
     base: SECURE_CHANNEL_MANAGER_FACTORY_BASE_TYPE,
     key: 'NoopSecureChannelManager',
 };
@@ -35336,12 +35388,12 @@ class NoopSecureChannelManagerFactory extends SecureChannelManagerFactory {
 
 var noopSecureChannelManagerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$h,
+    FACTORY_META: FACTORY_META$i,
     NoopSecureChannelManagerFactory: NoopSecureChannelManagerFactory,
     default: NoopSecureChannelManagerFactory
 });
 
-const FACTORY_META$g = {
+const FACTORY_META$h = {
     base: KEY_MANAGER_FACTORY_BASE_TYPE,
     key: 'DefaultKeyManager',
 };
@@ -35369,7 +35421,7 @@ class DefaultKeyManagerFactory extends KeyManagerFactory {
 var defaultKeyManagerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DefaultKeyManagerFactory: DefaultKeyManagerFactory,
-    FACTORY_META: FACTORY_META$g,
+    FACTORY_META: FACTORY_META$h,
     default: DefaultKeyManagerFactory
 });
 
@@ -35554,7 +35606,7 @@ class InMemoryKeyStore extends KeyStore {
 }
 registerDefaultKeyStoreFactory(() => new InMemoryKeyStore());
 
-const FACTORY_META$f = {
+const FACTORY_META$g = {
     base: KEY_STORE_FACTORY_BASE_TYPE,
     key: 'InMemoryKeyStore',
 };
@@ -35589,12 +35641,12 @@ class InMemoryKeyStoreFactory extends KeyStoreFactory {
 
 var inMemoryKeyStoreFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$f,
+    FACTORY_META: FACTORY_META$g,
     InMemoryKeyStoreFactory: InMemoryKeyStoreFactory,
     default: InMemoryKeyStoreFactory
 });
 
-const FACTORY_META$e = {
+const FACTORY_META$f = {
     base: ATTACHMENT_KEY_VALIDATOR_FACTORY_BASE_TYPE,
     key: 'NoopKeyValidator',
 };
@@ -35612,12 +35664,12 @@ class NoopKeyValidatorFactory extends AttachmentKeyValidatorFactory {
 
 var noopKeyValidatorFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$e,
+    FACTORY_META: FACTORY_META$f,
     NoopKeyValidatorFactory: NoopKeyValidatorFactory,
     default: NoopKeyValidatorFactory
 });
 
-const FACTORY_META$d = {
+const FACTORY_META$e = {
     base: SECURITY_POLICY_FACTORY_BASE_TYPE,
     key: 'DefaultSecurityPolicy',
 };
@@ -35678,11 +35730,11 @@ function normalizeConfig$2(config) {
 var defaultSecurityPolicyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     DefaultSecurityPolicyFactory: DefaultSecurityPolicyFactory,
-    FACTORY_META: FACTORY_META$d,
+    FACTORY_META: FACTORY_META$e,
     default: DefaultSecurityPolicyFactory
 });
 
-const FACTORY_META$c = {
+const FACTORY_META$d = {
     base: SECURITY_POLICY_FACTORY_BASE_TYPE,
     key: 'NoSecurityPolicy',
 };
@@ -35710,7 +35762,7 @@ function normalizeConfig$1(config) {
 
 var noSecurityPolicyFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    FACTORY_META: FACTORY_META$c,
+    FACTORY_META: FACTORY_META$d,
     NoSecurityPolicyFactory: NoSecurityPolicyFactory,
     default: NoSecurityPolicyFactory
 });
@@ -35725,7 +35777,7 @@ async function getEdDSAEnvelopeSignerModule() {
     }
     return eddsaEnvelopeSignerModulePromise;
 }
-const FACTORY_META$b = {
+const FACTORY_META$c = {
     base: ENVELOPE_SIGNER_FACTORY_BASE_TYPE,
     key: 'EdDSAEnvelopeSigner',
 };
@@ -35754,7 +35806,7 @@ class EdDSAEnvelopeSignerFactory extends EnvelopeSignerFactory {
 var eddsaEnvelopeSignerFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     EdDSAEnvelopeSignerFactory: EdDSAEnvelopeSignerFactory,
-    FACTORY_META: FACTORY_META$b,
+    FACTORY_META: FACTORY_META$c,
     default: EdDSAEnvelopeSignerFactory
 });
 
@@ -35768,7 +35820,7 @@ async function getEdDSAEnvelopeVerifierModule() {
     }
     return eddsaEnvelopeVerifierModulePromise;
 }
-const FACTORY_META$a = {
+const FACTORY_META$b = {
     base: ENVELOPE_VERIFIER_FACTORY_BASE_TYPE,
     key: 'EdDSAEnvelopeVerifier',
 };
@@ -35794,10 +35846,35 @@ class EdDSAEnvelopeVerifierFactory extends EnvelopeVerifierFactory {
 var eddsaEnvelopeVerifierFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     EdDSAEnvelopeVerifierFactory: EdDSAEnvelopeVerifierFactory,
-    FACTORY_META: FACTORY_META$a,
+    FACTORY_META: FACTORY_META$b,
     default: EdDSAEnvelopeVerifierFactory
 });
 
+const FACTORY_META$a = {
+    base: TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE,
+    key: "NoopTrustStoreProvider",
+    isDefault: true,
+    priority: 10,
+};
+class NoopTrustStoreProviderFactory extends TrustStoreProviderFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "NoopTrustStoreProvider";
+        this.isDefault = true;
+        this.priority = 10;
+    }
+    async create(_config, ..._factoryArgs) {
+        return new NoopTrustStoreProvider();
+    }
+}
+
+var noopTrustStoreProviderFactory = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    FACTORY_META: FACTORY_META$a,
+    NoopTrustStoreProviderFactory: NoopTrustStoreProviderFactory,
+    default: NoopTrustStoreProviderFactory
+});
+
 const FACTORY_META$9 = {
     base: ROUTING_POLICY_FACTORY_BASE,
     key: 'CapabilityAwareRoutingPolicy',
@@ -39832,4 +39909,4 @@ var websocketTransportProvisioner = /*#__PURE__*/Object.freeze({
     WebSocketTransportProvisionerFactory: WebSocketTransportProvisionerFactory
 });
 
-export { ADMISSION_CLIENT_FACTORY_BASE_TYPE, ATTACHMENT_KEY_VALIDATOR_FACTORY_BASE_TYPE, AUTHORIZER_FACTORY_BASE_TYPE, AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE, AnsiColor, AsyncLock, AttachmentKeyValidator, AuthInjectionStrategyFactory, AuthorizerFactory, BROADCAST_CHANNEL_CONNECTION_GRANT_TYPE, FACTORY_META$Y as BROADCAST_CHANNEL_CONNECTOR_FACTORY_META, BROADCAST_CHANNEL_CONNECTOR_TYPE, FACTORY_META$W as BROADCAST_CHANNEL_LISTENER_FACTORY_META, BackPressureFull, BaseAsyncConnector, BaseNodeEventListener, BindingManager, BindingStoreEntryRecord, BroadcastChannelConnector, BroadcastChannelConnectorFactory, BroadcastChannelListener, BroadcastChannelListenerFactory, BrowserAutoKeyCredentialProvider, BrowserWrappedKeyCredentialProvider, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE, CRYPTO_LEVEL_SECURITY_ORDER, CertificateManagerFactory, ConnectorConfigDefaults, ConnectorFactory, ConsoleMetricsEmitter, CryptoLevel, FACTORY_META$_ as DEFAULT_WELCOME_FACTORY_META, DefaultCryptoProvider, DefaultKeyManager, DefaultSecurityManager, DefaultSecurityPolicy, DefaultWelcomeService, DefaultWelcomeServiceFactory, DevFixedKeyCredentialProvider, ENCRYPTION_MANAGER_FACTORY_BASE_TYPE, ENVELOPE_SIGNER_FACTORY_BASE_TYPE, ENVELOPE_VERIFIER_FACTORY_BASE_TYPE, ENV_VAR_DEFAULT_ENCRYPTION_LEVEL, ENV_VAR_HMAC_SECRET, ENV_VAR_JWKS_URL, ENV_VAR_JWT_ALGORITHM, ENV_VAR_JWT_AUDIENCE$1 as ENV_VAR_JWT_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER, ENV_VAR_JWT_TRUSTED_ISSUER, ENV_VAR_SHOW_ENVELOPES$1 as ENV_VAR_SHOW_ENVELOPES, EdDSAEnvelopeSigner, EncryptedKeyValueStore, EncryptedStorageProviderBase, EncryptedValue, EncryptionConfiguration, EncryptionManagerFactory, EncryptionResult, EncryptionStatus, EnvCredentialProvider, EnvelopeContext, EnvelopeListenerManager, EnvelopeSecurityHandler, EnvelopeSignerFactory, EnvelopeVerifierFactory, FACTORY_META$$ as FACTORY_META, FIXED_PREFIX_LEN, FameAuthorizedDeliveryContextSchema, FameConnectError, FameEnvironmentContext, FameError, FameMessageTooLarge, FameNode, FameNodeAuthorizationContextSchema, FameProtocolError, FameTransportClose, FlowController, GRANT_PURPOSE_NODE_ATTACH, HTTP_CONNECTION_GRANT_TYPE, HTTP_STATELESS_CONNECTOR_TYPE, INPAGE_CONNECTION_GRANT_TYPE, FACTORY_META$Z as INPAGE_CONNECTOR_FACTORY_META, INPAGE_CONNECTOR_TYPE, FACTORY_META$X as INPAGE_LISTENER_FACTORY_META, InMemoryBinding, InMemoryFanoutBroker, InMemoryKeyValueStore, InMemoryReadWriteChannel, InMemoryStorageProvider, InPageConnector, InPageConnectorFactory, InPageListener, InPageListenerFactory, IndexedDBKeyValueStore, IndexedDBStorageProvider, InvalidPassphraseError, JWKValidationError, KEY_MANAGER_FACTORY_BASE_TYPE, KEY_STORE_FACTORY_BASE_TYPE, KeyInfo, KeyManagementHandler, KeyManagerFactory, KeyStore, KeyStoreFactory, KeyValidationError, LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE, LoadBalancerStickinessManagerFactory, LogLevel, LogLevelNames, MemoryMetricsEmitter, NODE_LIKE_FACTORY_BASE_TYPE, NODE_PLACEMENT_STRATEGY_FACTORY_BASE_TYPE, NoOpMetricsEmitter, NoSecurityPolicy, NodeFactory, NodePlacementStrategyFactory, NoneCredentialProvider, NoopEncryptionManager, NoopKeyValidator, NotAuthorized, PROFILE_NAME_GATED, PROFILE_NAME_GATED_CALLBACK, PROFILE_NAME_OPEN$1 as PROFILE_NAME_OPEN, PROFILE_NAME_OVERLAY, PROFILE_NAME_OVERLAY_CALLBACK, PROFILE_NAME_STRICT_OVERLAY, PromptCredentialProvider, REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE, REQUIRED_FIELDS_BY_KTY, ReplicaStickinessManagerFactory, RootSessionManager, RouteManager, RpcMixin, RpcProxy, SEALED_ENVELOPE_NONCE_LENGTH, SEALED_ENVELOPE_OVERHEAD, SEALED_ENVELOPE_PRIVATE_KEY_LENGTH, SEALED_ENVELOPE_PUBLIC_KEY_LENGTH, SEALED_ENVELOPE_TAG_LENGTH, SECURE_CHANNEL_MANAGER_FACTORY_BASE_TYPE, SECURITY_MANAGER_FACTORY_BASE_TYPE, SECURITY_POLICY_FACTORY_BASE_TYPE, STORAGE_PROVIDER_FACTORY_BASE_TYPE, SecretSource, SecretStoreCredentialProvider, SecureChannelFrameHandler, SecureChannelManagerFactory, SecurityAction, SecurityRequirements, Sentinel, SentinelFactory, SessionKeyCredentialProvider, SignaturePolicy, SigningConfig as SigningConfigClass, SigningConfiguration, SimpleLoadBalancerStickinessManager, SimpleLoadBalancerStickinessManagerFactory, StaticCredentialProvider, StorageAESEncryptionManager, TOKEN_ISSUER_FACTORY_BASE_TYPE, TOKEN_PROVIDER_FACTORY_BASE_TYPE, TOKEN_VERIFIER_FACTORY_BASE_TYPE, TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, TaskSpawner, TokenIssuerFactory, TokenProviderFactory, TokenVerifierFactory, TransportProvisionerFactory, TtlValidationError, UpstreamSessionManager, VALID_CURVES_BY_KTY, VALID_KEY_USES, VERSION, WEBSOCKET_CONNECTION_GRANT_TYPE, WELCOME_SERVICE_FACTORY_BASE_TYPE, WebSocketCloseCode, WebSocketConnector, WebSocketState, WelcomeServiceFactory, _NoopFlowController, __runtimePluginLoader, addEnvelopeFields, addLogLevel, addTimestamp, assertConnectionGrant, assertGrant, basicConfig, broadcastChannelGrantToConnectorConfig, camelToSnakeCase, canonicalJson, capitalizeFirstLetter, color, compareCryptoLevels, compiledPathPattern, consoleTransport, convertWildcardLogicalToDnsConstraint, createConnectorConfig, createEd25519Keypair, createHostLogicalUri, createLogicalUri, createNodeDeliveryContext, createResource, createRpcProxy, createRsaKeypair, createTransportCloseError, createX25519Keypair, credentialToString, currentTraceId$1 as currentTraceId, debounce, decodeBase64Url, decodeFameDataPayload, deepMerge, defaultJsonEncoder, delay, dropEmpty, enableLogging, encodeUtf8, ensureRuntimeFactoriesRegistered, extractId, extractPoolAddressBase, extractPoolBase, filterKeysByUse, formatTimestamp, formatTimestampForConsole$1 as formatTimestampForConsole, frameDigest, getCurrentEnvelope, getFameRoot, getKeyProvider, getKeyStore, getLogger, hasCryptoSupport, hostnameToLogical, hostnamesToLogicals, httpGrantToConnectorConfig, immutableHeaders, inPageGrantToConnectorConfig, isAuthInjectionStrategy, isBroadcastChannelConnectionGrant, isConnectionGrant, isConnectorConfig, isEnvelopeLoggingEnabled, isFameError, isFameErrorType, isGrant, isHttpConnectionGrant, isInPageConnectionGrant, isNodeLike, isPlainObject$3 as isPlainObject, isPoolAddress, isPoolLogical, isRegisterable, isTokenExpired, isTokenProvider, isTokenValid, isWebSocketConnectionGrant, jsonDumps, logicalPatternsToDnsConstraints, logicalToHostname, logicalsToHostnames, matchesPoolAddress, matchesPoolLogical, maybeAwait, nodeWelcomeRouter, nodeWelcomeRouterPlugin, normalizeBroadcastChannelConnectionGrant, normalizeEncryptionConfig, normalizeEnvelopeSnapshot, normalizeHttpConnectionGrant, normalizeInPageConnectionGrant, normalizeInboundCryptoRules, normalizeInboundSigningRules, normalizeOutboundCryptoRules, normalizeOutboundSigningRules, normalizePath, normalizeResponseCryptoRules, normalizeResponseSigningRules, normalizeSecretSource, normalizeSecurityRequirements, normalizeSigningConfig, normalizeWebSocketConnectionGrant, objectToBytes, operation, parseSealedEnvelope, pinoTransport, prettyModel$1 as prettyModel, registerDefaultFactories, registerDefaultKeyStoreFactory, registerNodePlacementStrategyFactory, registerRuntimeFactories, requireCryptoSupport, retryWithBackoff, safeColor, sealedDecrypt, sealedEncrypt, secureDigest, setKeyStore, showEnvelopes$1 as showEnvelopes, sleep, snakeToCamelCase, stringifyNonPrimitives, supportsColor, throttle, urlsafeBase64Decode, urlsafeBase64Encode, validateCacheTtlSec, validateEncryptionKey, validateHostLogical, validateHostLogicals, validateJwkComplete, validateJwkStructure, validateJwkUseField, validateJwtTokenTtlSec, validateKeyCorrelationTtlSec, validateLogical, validateLogicalSegment, validateOAuth2TtlSec, validateSigningKey, validateTtlSec, waitForAll, waitForAllSettled, waitForAny, websocketGrantToConnectorConfig, withEnvelopeContext, withEnvelopeContextAsync, withLegacySnakeCaseKeys, withLock, withTimeout };
+export { ADMISSION_CLIENT_FACTORY_BASE_TYPE, ATTACHMENT_KEY_VALIDATOR_FACTORY_BASE_TYPE, AUTHORIZER_FACTORY_BASE_TYPE, AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE, AnsiColor, AsyncLock, AttachmentKeyValidator, AuthInjectionStrategyFactory, AuthorizerFactory, BROADCAST_CHANNEL_CONNECTION_GRANT_TYPE, FACTORY_META$Z as BROADCAST_CHANNEL_CONNECTOR_FACTORY_META, BROADCAST_CHANNEL_CONNECTOR_TYPE, FACTORY_META$X as BROADCAST_CHANNEL_LISTENER_FACTORY_META, BackPressureFull, BaseAsyncConnector, BaseNodeEventListener, BindingManager, BindingStoreEntryRecord, BroadcastChannelConnector, BroadcastChannelConnectorFactory, BroadcastChannelListener, BroadcastChannelListenerFactory, BrowserAutoKeyCredentialProvider, BrowserWrappedKeyCredentialProvider, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE, CRYPTO_LEVEL_SECURITY_ORDER, CertificateManagerFactory, ConnectorConfigDefaults, ConnectorFactory, ConsoleMetricsEmitter, CryptoLevel, FACTORY_META$$ as DEFAULT_WELCOME_FACTORY_META, DefaultCryptoProvider, DefaultKeyManager, DefaultSecurityManager, DefaultSecurityPolicy, DefaultWelcomeService, DefaultWelcomeServiceFactory, DevFixedKeyCredentialProvider, ENCRYPTION_MANAGER_FACTORY_BASE_TYPE, ENVELOPE_SIGNER_FACTORY_BASE_TYPE, ENVELOPE_VERIFIER_FACTORY_BASE_TYPE, ENV_VAR_DEFAULT_ENCRYPTION_LEVEL, ENV_VAR_HMAC_SECRET, ENV_VAR_JWKS_URL, ENV_VAR_JWT_ALGORITHM, ENV_VAR_JWT_AUDIENCE$1 as ENV_VAR_JWT_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER, ENV_VAR_JWT_TRUSTED_ISSUER, ENV_VAR_SHOW_ENVELOPES$1 as ENV_VAR_SHOW_ENVELOPES, EdDSAEnvelopeSigner, EncryptedKeyValueStore, EncryptedStorageProviderBase, EncryptedValue, EncryptionConfiguration, EncryptionManagerFactory, EncryptionResult, EncryptionStatus, EnvCredentialProvider, EnvelopeContext, EnvelopeListenerManager, EnvelopeSecurityHandler, EnvelopeSignerFactory, EnvelopeVerifierFactory, FACTORY_META$10 as FACTORY_META, FIXED_PREFIX_LEN, FameAuthorizedDeliveryContextSchema, FameConnectError, FameEnvironmentContext, FameError, FameMessageTooLarge, FameNode, FameNodeAuthorizationContextSchema, FameProtocolError, FameTransportClose, FlowController, GRANT_PURPOSE_NODE_ATTACH, HTTP_CONNECTION_GRANT_TYPE, HTTP_STATELESS_CONNECTOR_TYPE, INPAGE_CONNECTION_GRANT_TYPE, FACTORY_META$_ as INPAGE_CONNECTOR_FACTORY_META, INPAGE_CONNECTOR_TYPE, FACTORY_META$Y as INPAGE_LISTENER_FACTORY_META, InMemoryBinding, InMemoryFanoutBroker, InMemoryKeyValueStore, InMemoryReadWriteChannel, InMemoryStorageProvider, InPageConnector, InPageConnectorFactory, InPageListener, InPageListenerFactory, IndexedDBKeyValueStore, IndexedDBStorageProvider, InvalidPassphraseError, JWKValidationError, KEY_MANAGER_FACTORY_BASE_TYPE, KEY_STORE_FACTORY_BASE_TYPE, KeyInfo, KeyManagementHandler, KeyManagerFactory, KeyStore, KeyStoreFactory, KeyValidationError, LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE, LoadBalancerStickinessManagerFactory, LogLevel, LogLevelNames, MemoryMetricsEmitter, NODE_LIKE_FACTORY_BASE_TYPE, NODE_PLACEMENT_STRATEGY_FACTORY_BASE_TYPE, NoOpMetricsEmitter, NoSecurityPolicy, NodeFactory, NodePlacementStrategyFactory, NoneCredentialProvider, NoopEncryptionManager, NoopKeyValidator, NoopTrustStoreProvider, NotAuthorized, PROFILE_NAME_GATED, PROFILE_NAME_GATED_CALLBACK, PROFILE_NAME_OPEN$1 as PROFILE_NAME_OPEN, PROFILE_NAME_OVERLAY, PROFILE_NAME_OVERLAY_CALLBACK, PROFILE_NAME_STRICT_OVERLAY, PromptCredentialProvider, REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE, REQUIRED_FIELDS_BY_KTY, ReplicaStickinessManagerFactory, RootSessionManager, RouteManager, RpcMixin, RpcProxy, SEALED_ENVELOPE_NONCE_LENGTH, SEALED_ENVELOPE_OVERHEAD, SEALED_ENVELOPE_PRIVATE_KEY_LENGTH, SEALED_ENVELOPE_PUBLIC_KEY_LENGTH, SEALED_ENVELOPE_TAG_LENGTH, SECURE_CHANNEL_MANAGER_FACTORY_BASE_TYPE, SECURITY_MANAGER_FACTORY_BASE_TYPE, SECURITY_POLICY_FACTORY_BASE_TYPE, STORAGE_PROVIDER_FACTORY_BASE_TYPE, SecretSource, SecretStoreCredentialProvider, SecureChannelFrameHandler, SecureChannelManagerFactory, SecurityAction, SecurityRequirements, Sentinel, SentinelFactory, SessionKeyCredentialProvider, SignaturePolicy, SigningConfig as SigningConfigClass, SigningConfiguration, SimpleLoadBalancerStickinessManager, SimpleLoadBalancerStickinessManagerFactory, StaticCredentialProvider, StorageAESEncryptionManager, TOKEN_ISSUER_FACTORY_BASE_TYPE, TOKEN_PROVIDER_FACTORY_BASE_TYPE, TOKEN_VERIFIER_FACTORY_BASE_TYPE, TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, TaskSpawner, TokenIssuerFactory, TokenProviderFactory, TokenVerifierFactory, TransportProvisionerFactory, TrustStoreProviderFactory, TtlValidationError, UpstreamSessionManager, VALID_CURVES_BY_KTY, VALID_KEY_USES, VERSION, WEBSOCKET_CONNECTION_GRANT_TYPE, WELCOME_SERVICE_FACTORY_BASE_TYPE, WebSocketCloseCode, WebSocketConnector, WebSocketState, WelcomeServiceFactory, _NoopFlowController, __runtimePluginLoader, addEnvelopeFields, addLogLevel, addTimestamp, assertConnectionGrant, assertGrant, basicConfig, broadcastChannelGrantToConnectorConfig, camelToSnakeCase, canonicalJson, capitalizeFirstLetter, color, compareCryptoLevels, compiledPathPattern, consoleTransport, convertWildcardLogicalToDnsConstraint, createConnectorConfig, createEd25519Keypair, createHostLogicalUri, createLogicalUri, createNodeDeliveryContext, createResource, createRpcProxy, createRsaKeypair, createTransportCloseError, createX25519Keypair, credentialToString, currentTraceId$1 as currentTraceId, debounce, decodeBase64Url, decodeFameDataPayload, deepMerge, defaultJsonEncoder, delay, dropEmpty, enableLogging, encodeUtf8, ensureRuntimeFactoriesRegistered, extractId, extractPoolAddressBase, extractPoolBase, filterKeysByUse, formatTimestamp, formatTimestampForConsole$1 as formatTimestampForConsole, frameDigest, getCurrentEnvelope, getFameRoot, getKeyProvider, getKeyStore, getLogger, hasCryptoSupport, hostnameToLogical, hostnamesToLogicals, httpGrantToConnectorConfig, immutableHeaders, inPageGrantToConnectorConfig, isAuthInjectionStrategy, isBroadcastChannelConnectionGrant, isConnectionGrant, isConnectorConfig, isEnvelopeLoggingEnabled, isFameError, isFameErrorType, isGrant, isHttpConnectionGrant, isInPageConnectionGrant, isNodeLike, isPlainObject$3 as isPlainObject, isPoolAddress, isPoolLogical, isRegisterable, isTokenExpired, isTokenProvider, isTokenValid, isWebSocketConnectionGrant, jsonDumps, logicalPatternsToDnsConstraints, logicalToHostname, logicalsToHostnames, matchesPoolAddress, matchesPoolLogical, maybeAwait, nodeWelcomeRouter, nodeWelcomeRouterPlugin, normalizeBroadcastChannelConnectionGrant, normalizeEncryptionConfig, normalizeEnvelopeSnapshot, normalizeHttpConnectionGrant, normalizeInPageConnectionGrant, normalizeInboundCryptoRules, normalizeInboundSigningRules, normalizeOutboundCryptoRules, normalizeOutboundSigningRules, normalizePath, normalizeResponseCryptoRules, normalizeResponseSigningRules, normalizeSecretSource, normalizeSecurityRequirements, normalizeSigningConfig, normalizeWebSocketConnectionGrant, objectToBytes, operation, parseSealedEnvelope, pinoTransport, prettyModel$1 as prettyModel, registerDefaultFactories, registerDefaultKeyStoreFactory, registerNodePlacementStrategyFactory, registerRuntimeFactories, requireCryptoSupport, retryWithBackoff, safeColor, sealedDecrypt, sealedEncrypt, secureDigest, setKeyStore, showEnvelopes$1 as showEnvelopes, sleep, snakeToCamelCase, stringifyNonPrimitives, supportsColor, throttle, urlsafeBase64Decode, urlsafeBase64Encode, validateCacheTtlSec, validateEncryptionKey, validateHostLogical, validateHostLogicals, validateJwkComplete, validateJwkStructure, validateJwkUseField, validateJwtTokenTtlSec, validateKeyCorrelationTtlSec, validateLogical, validateLogicalSegment, validateOAuth2TtlSec, validateSigningKey, validateTtlSec, waitForAll, waitForAllSettled, waitForAny, websocketGrantToConnectorConfig, withEnvelopeContext, withEnvelopeContextAsync, withLegacySnakeCaseKeys, withLock, withTimeout };