@sdux-vault/engine 0.9.0 → 0.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdux-vault/engine",
-  "version": "0.9.0",
+  "version": "0.13.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -11,8 +11,8 @@
   },
   "homepage": "https://www.sdux-vault.com",
   "dependencies": {
-    "@sdux-vault/devtools": "0.5.0",
-    "@sdux-vault/shared": "0.4.0",
+    "@sdux-vault/devtools": "0.6.0",
+    "@sdux-vault/shared": "0.5.0",
     "tslib": "^2.3.0"
   },
   "peerDependencies": {

package/types/sdux-vault-engine.d.ts

@@ -325,6 +325,34 @@ declare class FeatureCellClass<T> extends FeatureCellBuilder<T> {
     build(): FeatureCellShape<T>;
 }
 
+/**
+ * Static license verification utility used to validate signed license tokens
+ * against tier-specific public keys. Tokens use a dot-separated format:
+ * `base64(payload).base64(signature)`.
+ *
+ * The verification process:
+ *  - Splits the token on `.` to extract the encoded payload and signature
+ *  - Decodes the payload from base64 to determine the license tier
+ *  - Rejects tokens with missing or unrecognized tier
+ *  - Loads the appropriate PEM-encoded public key for the tier
+ *  - Uses `crypto.subtle.verify()` (RSA-SHA256) to validate the signature
+ *    against the raw base64-encoded payload string
+ *
+ * Verification failures return `false` rather than throwing.
+ */
+declare const VerifyLicenseToken: {
+    /**
+     * Verifies the supplied signed license token using the public key associated
+     * with its declared tier.
+     *
+     * @param token - A dot-separated token in the format
+     * `base64(payload).base64(signature)`.
+     * @returns A promise resolving to `true` if the signature validates;
+     * otherwise `false`.
+     */
+    verify: (token: string) => Promise<boolean>;
+};
+
 interface RegisteredFeatureCellShape {
     key: string;
 }
@@ -344,6 +372,7 @@ declare function resetVaultForTests(): void;
 declare function resetFeatureCellRegistry(): void;
 declare function getVaultRegistryForTests(): ReadonlyMap<string, VaultRegistrationShape> | undefined;
 declare function isAuthorizedKey(key: string): boolean;
+declare function isBypassLicensing(): boolean;
 declare function hasVaultLicense(): boolean;
 
 declare abstract class LicensingAbstract<T> {
@@ -386,5 +415,5 @@ declare function getFeatureCellToken(key: string): FeatureCellToken;
  */
 declare const isPipelineTerminal: <T>(current: FinalState<T>) => boolean;
 
-export { Conductor, FeatureCellClass, LicensingAbstract, VAULT_LICENSE_ID, VaultCore, createFeatureCellToken, getFeatureCellToken, getLicensePayload, getVaultRegistryForTests, hasVaultLicense, isAuthorizedKey, isPipelineTerminal, registerFeatureCell, registerVaultSettled, resetFeatureCellRegistry, resetVaultForTests, vaultAllSettled, vaultSettled };
+export { Conductor, FeatureCellClass, LicensingAbstract, VAULT_LICENSE_ID, VaultCore, VerifyLicenseToken, createFeatureCellToken, getFeatureCellToken, getLicensePayload, getVaultRegistryForTests, hasVaultLicense, isAuthorizedKey, isBypassLicensing, isPipelineTerminal, registerFeatureCell, registerVaultSettled, resetFeatureCellRegistry, resetVaultForTests, vaultAllSettled, vaultSettled };
 export type { ConductorConfig, FeatureCellConfig, FeatureCellShape, VaultStateRef };