@virtru/dsp-sdk 0.2.4 → 0.3.1

package/dist/src/gen/virtru/policy/certificates/v1/certificates_pb.d.ts

@@ -0,0 +1,215 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { MetadataMutable, PageRequest, PageResponse } from "../../../common/common_pb";
+import type { Algorithm, Certificate, KeyMode, KeyStatus } from "../../objects_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file virtru/policy/certificates/v1/certificates.proto.
+ */
+export declare const file_virtru_policy_certificates_v1_certificates: GenFile;
+/**
+ * Maps a namespace to a certificate (similar to NamespaceKey pattern)
+ *
+ * @generated from message virtru.policy.certificates.v1.NamespaceCertificate
+ */
+export type NamespaceCertificate = Message<"virtru.policy.certificates.v1.NamespaceCertificate"> & {
+    /**
+     * Required - namespace id
+     *
+     * @generated from field: string namespace_id = 1;
+     */
+    namespaceId: string;
+    /**
+     * Required (The id from the Certificate object)
+     *
+     * @generated from field: string certificate_id = 2;
+     */
+    certificateId: string;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.NamespaceCertificate.
+ * Use `create(NamespaceCertificateSchema)` to create a new message.
+ */
+export declare const NamespaceCertificateSchema: GenMessage<NamespaceCertificate>;
+/**
+ * @generated from message virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest
+ */
+export type ListCertificatesByNamespaceRequest = Message<"virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest"> & {
+    /**
+     * Required - namespace id
+     *
+     * @generated from field: string namespace_id = 1;
+     */
+    namespaceId: string;
+    /**
+     * Optional pagination information
+     *
+     * @generated from field: virtru.common.PageRequest pagination = 10;
+     */
+    pagination?: PageRequest;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest.
+ * Use `create(ListCertificatesByNamespaceRequestSchema)` to create a new message.
+ */
+export declare const ListCertificatesByNamespaceRequestSchema: GenMessage<ListCertificatesByNamespaceRequest>;
+/**
+ * ListCertificatesByNamespaceResponse is the response message for the ListCertificatesByNamespace method.
+ *
+ * @generated from message virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse
+ */
+export type ListCertificatesByNamespaceResponse = Message<"virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse"> & {
+    /**
+     * The list of certificates for the specified namespace.
+     *
+     * @generated from field: repeated virtru.policy.Certificate certificates = 1;
+     */
+    certificates: Certificate[];
+    /**
+     * Pagination information
+     *
+     * @generated from field: virtru.common.PageResponse pagination = 10;
+     */
+    pagination?: PageResponse;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse.
+ * Use `create(ListCertificatesByNamespaceResponseSchema)` to create a new message.
+ */
+export declare const ListCertificatesByNamespaceResponseSchema: GenMessage<ListCertificatesByNamespaceResponse>;
+/**
+ * @generated from message virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest
+ */
+export type AssignCertificateToNamespaceRequest = Message<"virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest"> & {
+    /**
+     * Required - namespace id
+     *
+     * @generated from field: string namespace_id = 1;
+     */
+    namespaceId: string;
+    /**
+     * Required - PEM format certificate
+     *
+     * @generated from field: string pem = 2;
+     */
+    pem: string;
+    /**
+     * @generated from field: string key_id = 3;
+     */
+    keyId: string;
+    /**
+     * The algorithm to be used for the key
+     *
+     * @generated from field: virtru.policy.Algorithm key_algorithm = 4;
+     */
+    keyAlgorithm: Algorithm;
+    /**
+     * @generated from field: string name = 5;
+     */
+    name: string;
+    /**
+     * The status of the key
+     *
+     * @generated from field: virtru.policy.KeyStatus key_status = 6;
+     */
+    keyStatus: KeyStatus;
+    /**
+     * The mode of the key
+     *
+     * @generated from field: virtru.policy.KeyMode key_mode = 7;
+     */
+    keyMode: KeyMode;
+    /**
+     * Optional
+     *
+     * @generated from field: virtru.common.MetadataMutable metadata = 100;
+     */
+    metadata?: MetadataMutable;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest.
+ * Use `create(AssignCertificateToNamespaceRequestSchema)` to create a new message.
+ */
+export declare const AssignCertificateToNamespaceRequestSchema: GenMessage<AssignCertificateToNamespaceRequest>;
+/**
+ * @generated from message virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse
+ */
+export type AssignCertificateToNamespaceResponse = Message<"virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse"> & {
+    /**
+     * The mapping of the namespace to the certificate.
+     *
+     * @generated from field: virtru.policy.certificates.v1.NamespaceCertificate namespace_certificate = 1;
+     */
+    namespaceCertificate?: NamespaceCertificate;
+    /**
+     * Return the full certificate object for convenience
+     *
+     * @generated from field: virtru.policy.Certificate certificate = 2;
+     */
+    certificate?: Certificate;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse.
+ * Use `create(AssignCertificateToNamespaceResponseSchema)` to create a new message.
+ */
+export declare const AssignCertificateToNamespaceResponseSchema: GenMessage<AssignCertificateToNamespaceResponse>;
+/**
+ * @generated from message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest
+ */
+export type RemoveCertificateFromNamespaceRequest = Message<"virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest"> & {
+    /**
+     * The namespace and certificate to unassign.
+     *
+     * @generated from field: virtru.policy.certificates.v1.NamespaceCertificate namespace_certificate = 1;
+     */
+    namespaceCertificate?: NamespaceCertificate;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest.
+ * Use `create(RemoveCertificateFromNamespaceRequestSchema)` to create a new message.
+ */
+export declare const RemoveCertificateFromNamespaceRequestSchema: GenMessage<RemoveCertificateFromNamespaceRequest>;
+/**
+ * @generated from message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse
+ */
+export type RemoveCertificateFromNamespaceResponse = Message<"virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse"> & {
+    /**
+     * The unassigned namespace and certificate.
+     *
+     * @generated from field: virtru.policy.certificates.v1.NamespaceCertificate namespace_certificate = 1;
+     */
+    namespaceCertificate?: NamespaceCertificate;
+};
+/**
+ * Describes the message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse.
+ * Use `create(RemoveCertificateFromNamespaceResponseSchema)` to create a new message.
+ */
+export declare const RemoveCertificateFromNamespaceResponseSchema: GenMessage<RemoveCertificateFromNamespaceResponse>;
+/**
+ * @generated from service virtru.policy.certificates.v1.CertificateService
+ */
+export declare const CertificateService: GenService<{
+    /**
+     * @generated from rpc virtru.policy.certificates.v1.CertificateService.ListCertificatesByNamespace
+     */
+    listCertificatesByNamespace: {
+        methodKind: "unary";
+        input: typeof ListCertificatesByNamespaceRequestSchema;
+        output: typeof ListCertificatesByNamespaceResponseSchema;
+    };
+    /**
+     * @generated from rpc virtru.policy.certificates.v1.CertificateService.AssignCertificateToNamespace
+     */
+    assignCertificateToNamespace: {
+        methodKind: "unary";
+        input: typeof AssignCertificateToNamespaceRequestSchema;
+        output: typeof AssignCertificateToNamespaceResponseSchema;
+    };
+    /**
+     * @generated from rpc virtru.policy.certificates.v1.CertificateService.RemoveCertificateFromNamespace
+     */
+    removeCertificateFromNamespace: {
+        methodKind: "unary";
+        input: typeof RemoveCertificateFromNamespaceRequestSchema;
+        output: typeof RemoveCertificateFromNamespaceResponseSchema;
+    };
+}>;

package/dist/src/gen/virtru/policy/certificates/v1/certificates_pb.js

@@ -0,0 +1,50 @@
+// @generated by protoc-gen-es v2.3.0 with parameter "target=ts"
+// @generated from file virtru/policy/certificates/v1/certificates.proto (package virtru.policy.certificates.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../../../buf/validate/validate_pb";
+import { file_virtru_common_common } from "../../../common/common_pb";
+import { file_virtru_policy_objects } from "../../objects_pb";
+/**
+ * Describes the file virtru/policy/certificates/v1/certificates.proto.
+ */
+export const file_virtru_policy_certificates_v1_certificates = /*@__PURE__*/ fileDesc("CjB2aXJ0cnUvcG9saWN5L2NlcnRpZmljYXRlcy92MS9jZXJ0aWZpY2F0ZXMucHJvdG8SHXZpcnRydS5wb2xpY3kuY2VydGlmaWNhdGVzLnYxIl4KFE5hbWVzcGFjZUNlcnRpZmljYXRlEiEKDG5hbWVzcGFjZV9pZBgBIAEoCUILukgIyAEBcgOwAQESIwoOY2VydGlmaWNhdGVfaWQYAiABKAlCC7pICMgBAXIDsAEBIncKIkxpc3RDZXJ0aWZpY2F0ZXNCeU5hbWVzcGFjZVJlcXVlc3QSIQoMbmFtZXNwYWNlX2lkGAEgASgJQgu6SAjIAQFyA7ABARIuCgpwYWdpbmF0aW9uGAogASgLMhoudmlydHJ1LmNvbW1vbi5QYWdlUmVxdWVzdCKIAQojTGlzdENlcnRpZmljYXRlc0J5TmFtZXNwYWNlUmVzcG9uc2USMAoMY2VydGlmaWNhdGVzGAEgAygLMhoudmlydHJ1LnBvbGljeS5DZXJ0aWZpY2F0ZRIvCgpwYWdpbmF0aW9uGAogASgLMhsudmlydHJ1LmNvbW1vbi5QYWdlUmVzcG9uc2UiugMKI0Fzc2lnbkNlcnRpZmljYXRlVG9OYW1lc3BhY2VSZXF1ZXN0EiEKDG5hbWVzcGFjZV9pZBgBIAEoCUILukgIyAEBcgOwAQESEwoDcGVtGAIgASgJQga6SAPIAQESGwoGa2V5X2lkGAMgASgJQgu6SAjIAQFyA7ABARKdAQoNa2V5X2FsZ29yaXRobRgEIAEoDjIYLnZpcnRydS5wb2xpY3kuQWxnb3JpdGhtQmy6SGm6AWYKFWtleV9hbGdvcml0aG1fZGVmaW5lZBI0VGhlIGtleV9hbGdvcml0aG0gbXVzdCBiZSBvbmUgb2YgdGhlIGRlZmluZWQgdmFsdWVzLhoXdGhpcyBpbiBbMSwgMiwgMywgNCwgNV0SFAoEbmFtZRgFIAEoCUIGukgDyAEBEiwKCmtleV9zdGF0dXMYBiABKA4yGC52aXJ0cnUucG9saWN5LktleVN0YXR1cxIoCghrZXlfbW9kZRgHIAEoDjIWLnZpcnRydS5wb2xpY3kuS2V5TW9kZRIwCghtZXRhZGF0YRhkIAEoCzIeLnZpcnRydS5jb21tb24uTWV0YWRhdGFNdXRhYmxlIqsBCiRBc3NpZ25DZXJ0aWZpY2F0ZVRvTmFtZXNwYWNlUmVzcG9uc2USUgoVbmFtZXNwYWNlX2NlcnRpZmljYXRlGAEgASgLMjMudmlydHJ1LnBvbGljeS5jZXJ0aWZpY2F0ZXMudjEuTmFtZXNwYWNlQ2VydGlmaWNhdGUSLwoLY2VydGlmaWNhdGUYAiABKAsyGi52aXJ0cnUucG9saWN5LkNlcnRpZmljYXRlIoMBCiVSZW1vdmVDZXJ0aWZpY2F0ZUZyb21OYW1lc3BhY2VSZXF1ZXN0EloKFW5hbWVzcGFjZV9jZXJ0aWZpY2F0ZRgBIAEoCzIzLnZpcnRydS5wb2xpY3kuY2VydGlmaWNhdGVzLnYxLk5hbWVzcGFjZUNlcnRpZmljYXRlQga6SAPIAQEifAomUmVtb3ZlQ2VydGlmaWNhdGVGcm9tTmFtZXNwYWNlUmVzcG9uc2USUgoVbmFtZXNwYWNlX2NlcnRpZmljYXRlGAEgASgLMjMudmlydHJ1LnBvbGljeS5jZXJ0aWZpY2F0ZXMudjEuTmFtZXNwYWNlQ2VydGlmaWNhdGUymwQKEkNlcnRpZmljYXRlU2VydmljZRKmAQobTGlzdENlcnRpZmljYXRlc0J5TmFtZXNwYWNlEkEudmlydHJ1LnBvbGljeS5jZXJ0aWZpY2F0ZXMudjEuTGlzdENlcnRpZmljYXRlc0J5TmFtZXNwYWNlUmVxdWVzdBpCLnZpcnRydS5wb2xpY3kuY2VydGlmaWNhdGVzLnYxLkxpc3RDZXJ0aWZpY2F0ZXNCeU5hbWVzcGFjZVJlc3BvbnNlIgASqQEKHEFzc2lnbkNlcnRpZmljYXRlVG9OYW1lc3BhY2USQi52aXJ0cnUucG9saWN5LmNlcnRpZmljYXRlcy52MS5Bc3NpZ25DZXJ0aWZpY2F0ZVRvTmFtZXNwYWNlUmVxdWVzdBpDLnZpcnRydS5wb2xpY3kuY2VydGlmaWNhdGVzLnYxLkFzc2lnbkNlcnRpZmljYXRlVG9OYW1lc3BhY2VSZXNwb25zZSIAEq8BCh5SZW1vdmVDZXJ0aWZpY2F0ZUZyb21OYW1lc3BhY2USRC52aXJ0cnUucG9saWN5LmNlcnRpZmljYXRlcy52MS5SZW1vdmVDZXJ0aWZpY2F0ZUZyb21OYW1lc3BhY2VSZXF1ZXN0GkUudmlydHJ1LnBvbGljeS5jZXJ0aWZpY2F0ZXMudjEuUmVtb3ZlQ2VydGlmaWNhdGVGcm9tTmFtZXNwYWNlUmVzcG9uc2UiAELNAQohY29tLnZpcnRydS5wb2xpY3kuY2VydGlmaWNhdGVzLnYxQhFDZXJ0aWZpY2F0ZXNQcm90b1ABogIDVlBDqgIdVmlydHJ1LlBvbGljeS5DZXJ0aWZpY2F0ZXMuVjHKAh1WaXJ0cnVcUG9saWN5XENlcnRpZmljYXRlc1xWMeICKVZpcnRydVxQb2xpY3lcQ2VydGlmaWNhdGVzXFYxXEdQQk1ldGFkYXRh6gIgVmlydHJ1OjpQb2xpY3k6OkNlcnRpZmljYXRlczo6VjFiBnByb3RvMw", [file_buf_validate_validate, file_virtru_common_common, file_virtru_policy_objects]);
+/**
+ * Describes the message virtru.policy.certificates.v1.NamespaceCertificate.
+ * Use `create(NamespaceCertificateSchema)` to create a new message.
+ */
+export const NamespaceCertificateSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 0);
+/**
+ * Describes the message virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest.
+ * Use `create(ListCertificatesByNamespaceRequestSchema)` to create a new message.
+ */
+export const ListCertificatesByNamespaceRequestSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 1);
+/**
+ * Describes the message virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse.
+ * Use `create(ListCertificatesByNamespaceResponseSchema)` to create a new message.
+ */
+export const ListCertificatesByNamespaceResponseSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 2);
+/**
+ * Describes the message virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest.
+ * Use `create(AssignCertificateToNamespaceRequestSchema)` to create a new message.
+ */
+export const AssignCertificateToNamespaceRequestSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 3);
+/**
+ * Describes the message virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse.
+ * Use `create(AssignCertificateToNamespaceResponseSchema)` to create a new message.
+ */
+export const AssignCertificateToNamespaceResponseSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 4);
+/**
+ * Describes the message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest.
+ * Use `create(RemoveCertificateFromNamespaceRequestSchema)` to create a new message.
+ */
+export const RemoveCertificateFromNamespaceRequestSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 5);
+/**
+ * Describes the message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse.
+ * Use `create(RemoveCertificateFromNamespaceResponseSchema)` to create a new message.
+ */
+export const RemoveCertificateFromNamespaceResponseSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_certificates_v1_certificates, 6);
+/**
+ * @generated from service virtru.policy.certificates.v1.CertificateService
+ */
+export const CertificateService = /*@__PURE__*/ serviceDesc(file_virtru_policy_certificates_v1_certificates, 0);

package/dist/src/gen/virtru/policy/objects_pb.d.ts

@@ -0,0 +1,188 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Metadata } from "../common/common_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file virtru/policy/objects.proto.
+ */
+export declare const file_virtru_policy_objects: GenFile;
+/**
+ * @generated from message virtru.policy.Certificate
+ */
+export type Certificate = Message<"virtru.policy.Certificate"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string key_id = 2;
+     */
+    keyId: string;
+    /**
+     * @generated from field: virtru.policy.Algorithm key_algorithm = 3;
+     */
+    keyAlgorithm: Algorithm;
+    /**
+     * @generated from field: virtru.policy.KeyStatus key_status = 4;
+     */
+    keyStatus: KeyStatus;
+    /**
+     * @generated from field: string pem = 5;
+     */
+    pem: string;
+    /**
+     * The name of the certificate.
+     *
+     * @generated from field: string name = 6;
+     */
+    name: string;
+    /**
+     * The key mode of the certificate.
+     *
+     * @generated from field: virtru.policy.KeyMode key_mode = 7;
+     */
+    keyMode: KeyMode;
+    /**
+     * The fingerprint of the certificate.
+     *
+     * @generated from field: string fingerprint = 8;
+     */
+    fingerprint: string;
+    /**
+     * @generated from field: virtru.common.Metadata metadata = 100;
+     */
+    metadata?: Metadata;
+};
+/**
+ * Describes the message virtru.policy.Certificate.
+ * Use `create(CertificateSchema)` to create a new message.
+ */
+export declare const CertificateSchema: GenMessage<Certificate>;
+/**
+ * @generated from message virtru.policy.CertificateMapping
+ */
+export type CertificateMapping = Message<"virtru.policy.CertificateMapping"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string certificate_id = 2;
+     */
+    certificateId: string;
+    /**
+     * @generated from field: string namespace_id = 3;
+     */
+    namespaceId: string;
+    /**
+     * @generated from field: virtru.common.Metadata metadata = 100;
+     */
+    metadata?: Metadata;
+};
+/**
+ * Describes the message virtru.policy.CertificateMapping.
+ * Use `create(CertificateMappingSchema)` to create a new message.
+ */
+export declare const CertificateMappingSchema: GenMessage<CertificateMapping>;
+/**
+ * @generated from enum virtru.policy.Algorithm
+ */
+export declare enum Algorithm {
+    /**
+     * @generated from enum value: ALGORITHM_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: ALGORITHM_RSA_2048 = 1;
+     */
+    RSA_2048 = 1,
+    /**
+     * @generated from enum value: ALGORITHM_RSA_4096 = 2;
+     */
+    RSA_4096 = 2,
+    /**
+     * @generated from enum value: ALGORITHM_EC_P256 = 3;
+     */
+    EC_P256 = 3,
+    /**
+     * @generated from enum value: ALGORITHM_EC_P384 = 4;
+     */
+    EC_P384 = 4,
+    /**
+     * @generated from enum value: ALGORITHM_EC_P521 = 5;
+     */
+    EC_P521 = 5
+}
+/**
+ * Describes the enum virtru.policy.Algorithm.
+ */
+export declare const AlgorithmSchema: GenEnum<Algorithm>;
+/**
+ * @generated from enum virtru.policy.KeyStatus
+ */
+export declare enum KeyStatus {
+    /**
+     * @generated from enum value: KEY_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: KEY_STATUS_ACTIVE = 1;
+     */
+    ACTIVE = 1,
+    /**
+     * @generated from enum value: KEY_STATUS_ROTATED = 2;
+     */
+    ROTATED = 2
+}
+/**
+ * Describes the enum virtru.policy.KeyStatus.
+ */
+export declare const KeyStatusSchema: GenEnum<KeyStatus>;
+/**
+ * Describes the management and operational mode of a cryptographic key.
+ *
+ * @generated from enum virtru.policy.KeyMode
+ */
+export declare enum KeyMode {
+    /**
+     * KEY_MODE_UNSPECIFIED: Default, unspecified key mode. Indicates an uninitialized or error state.
+     *
+     * @generated from enum value: KEY_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * KEY_MODE_CONFIG_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
+     * sourced from local configuration. Unwrapping and all cryptographic operations are performed locally.
+     *
+     * @generated from enum value: KEY_MODE_CONFIG_ROOT_KEY = 1;
+     */
+    CONFIG_ROOT_KEY = 1,
+    /**
+     * KEY_MODE_PROVIDER_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
+     * managed by an external provider (e.g., a Hardware Security Module or Cloud KMS).
+     * Key unwrapping is delegated to the external provider; subsequent cryptographic operations
+     * are performed locally using the unwrapped key.
+     *
+     * @generated from enum value: KEY_MODE_PROVIDER_ROOT_KEY = 2;
+     */
+    PROVIDER_ROOT_KEY = 2,
+    /**
+     * KEY_MODE_REMOTE: Remote key management where the private key is stored in, and all cryptographic
+     * operations are performed by, a remote Key Management Service (KMS) or HSM.
+     * The private key material never leaves the secure boundary of the remote system.
+     *
+     * @generated from enum value: KEY_MODE_REMOTE = 3;
+     */
+    REMOTE = 3,
+    /**
+     * KEY_MODE_PUBLIC_KEY_ONLY: Public key only mode. Used when only a public key is available or required,
+     * typically for wrapping operations (e.g., encrypting a Data Encryption Key (DEK) for an external KAS).
+     * The corresponding private key is not managed or accessible by this system.
+     *
+     * @generated from enum value: KEY_MODE_PUBLIC_KEY_ONLY = 4;
+     */
+    PUBLIC_KEY_ONLY = 4
+}
+/**
+ * Describes the enum virtru.policy.KeyMode.
+ */
+export declare const KeyModeSchema: GenEnum<KeyMode>;

package/dist/src/gen/virtru/policy/objects_pb.js

@@ -0,0 +1,126 @@
+// @generated by protoc-gen-es v2.3.0 with parameter "target=ts"
+// @generated from file virtru/policy/objects.proto (package virtru.policy, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../buf/validate/validate_pb";
+import { file_virtru_common_common } from "../common/common_pb";
+/**
+ * Describes the file virtru/policy/objects.proto.
+ */
+export const file_virtru_policy_objects = /*@__PURE__*/ fileDesc("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", [file_buf_validate_validate, file_virtru_common_common]);
+/**
+ * Describes the message virtru.policy.Certificate.
+ * Use `create(CertificateSchema)` to create a new message.
+ */
+export const CertificateSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_objects, 0);
+/**
+ * Describes the message virtru.policy.CertificateMapping.
+ * Use `create(CertificateMappingSchema)` to create a new message.
+ */
+export const CertificateMappingSchema = /*@__PURE__*/ messageDesc(file_virtru_policy_objects, 1);
+/**
+ * @generated from enum virtru.policy.Algorithm
+ */
+export var Algorithm;
+(function (Algorithm) {
+    /**
+     * @generated from enum value: ALGORITHM_UNSPECIFIED = 0;
+     */
+    Algorithm[Algorithm["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * @generated from enum value: ALGORITHM_RSA_2048 = 1;
+     */
+    Algorithm[Algorithm["RSA_2048"] = 1] = "RSA_2048";
+    /**
+     * @generated from enum value: ALGORITHM_RSA_4096 = 2;
+     */
+    Algorithm[Algorithm["RSA_4096"] = 2] = "RSA_4096";
+    /**
+     * @generated from enum value: ALGORITHM_EC_P256 = 3;
+     */
+    Algorithm[Algorithm["EC_P256"] = 3] = "EC_P256";
+    /**
+     * @generated from enum value: ALGORITHM_EC_P384 = 4;
+     */
+    Algorithm[Algorithm["EC_P384"] = 4] = "EC_P384";
+    /**
+     * @generated from enum value: ALGORITHM_EC_P521 = 5;
+     */
+    Algorithm[Algorithm["EC_P521"] = 5] = "EC_P521";
+})(Algorithm || (Algorithm = {}));
+/**
+ * Describes the enum virtru.policy.Algorithm.
+ */
+export const AlgorithmSchema = /*@__PURE__*/ enumDesc(file_virtru_policy_objects, 0);
+/**
+ * @generated from enum virtru.policy.KeyStatus
+ */
+export var KeyStatus;
+(function (KeyStatus) {
+    /**
+     * @generated from enum value: KEY_STATUS_UNSPECIFIED = 0;
+     */
+    KeyStatus[KeyStatus["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * @generated from enum value: KEY_STATUS_ACTIVE = 1;
+     */
+    KeyStatus[KeyStatus["ACTIVE"] = 1] = "ACTIVE";
+    /**
+     * @generated from enum value: KEY_STATUS_ROTATED = 2;
+     */
+    KeyStatus[KeyStatus["ROTATED"] = 2] = "ROTATED";
+})(KeyStatus || (KeyStatus = {}));
+/**
+ * Describes the enum virtru.policy.KeyStatus.
+ */
+export const KeyStatusSchema = /*@__PURE__*/ enumDesc(file_virtru_policy_objects, 1);
+/**
+ * Describes the management and operational mode of a cryptographic key.
+ *
+ * @generated from enum virtru.policy.KeyMode
+ */
+export var KeyMode;
+(function (KeyMode) {
+    /**
+     * KEY_MODE_UNSPECIFIED: Default, unspecified key mode. Indicates an uninitialized or error state.
+     *
+     * @generated from enum value: KEY_MODE_UNSPECIFIED = 0;
+     */
+    KeyMode[KeyMode["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * KEY_MODE_CONFIG_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
+     * sourced from local configuration. Unwrapping and all cryptographic operations are performed locally.
+     *
+     * @generated from enum value: KEY_MODE_CONFIG_ROOT_KEY = 1;
+     */
+    KeyMode[KeyMode["CONFIG_ROOT_KEY"] = 1] = "CONFIG_ROOT_KEY";
+    /**
+     * KEY_MODE_PROVIDER_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
+     * managed by an external provider (e.g., a Hardware Security Module or Cloud KMS).
+     * Key unwrapping is delegated to the external provider; subsequent cryptographic operations
+     * are performed locally using the unwrapped key.
+     *
+     * @generated from enum value: KEY_MODE_PROVIDER_ROOT_KEY = 2;
+     */
+    KeyMode[KeyMode["PROVIDER_ROOT_KEY"] = 2] = "PROVIDER_ROOT_KEY";
+    /**
+     * KEY_MODE_REMOTE: Remote key management where the private key is stored in, and all cryptographic
+     * operations are performed by, a remote Key Management Service (KMS) or HSM.
+     * The private key material never leaves the secure boundary of the remote system.
+     *
+     * @generated from enum value: KEY_MODE_REMOTE = 3;
+     */
+    KeyMode[KeyMode["REMOTE"] = 3] = "REMOTE";
+    /**
+     * KEY_MODE_PUBLIC_KEY_ONLY: Public key only mode. Used when only a public key is available or required,
+     * typically for wrapping operations (e.g., encrypting a Data Encryption Key (DEK) for an external KAS).
+     * The corresponding private key is not managed or accessible by this system.
+     *
+     * @generated from enum value: KEY_MODE_PUBLIC_KEY_ONLY = 4;
+     */
+    KeyMode[KeyMode["PUBLIC_KEY_ONLY"] = 4] = "PUBLIC_KEY_ONLY";
+})(KeyMode || (KeyMode = {}));
+/**
+ * Describes the enum virtru.policy.KeyMode.
+ */
+export const KeyModeSchema = /*@__PURE__*/ enumDesc(file_virtru_policy_objects, 2);

package/dist/src/index.d.ts

@@ -7,7 +7,7 @@ export { platformConnect as dspConnect, platformConnectWeb as dspConnectWeb, } f
  */
 export { type DSPClientServicesV1 as DSPServicesV1, type DSPClientServicesV2 as DSPServicesV2, type DSPClientOptions, DSPClient, } from './lib/client';
 export { PlatformClient } from '@opentdf/sdk/platform';
-export { createAuthInterceptor, type Interceptor } from './lib/utils';
+export { createAuthInterceptor, type Interceptor, createAuthProvider, createOpenTDFClient, getObligations, getUserEntitlements, flattenObligations, getTrustedCertificates, validateJWSCertificateChain, type JWSValidationResult, type ObligationFeatureMap, type SupportedObligations, type GetUserEntitlementsResponse, } from './lib/utils';
 /**
  * Exports the DSP wrapper of OpenTDF
  */
@@ -18,4 +18,3 @@ export { DSP, createDSP } from './lib/dsp';
 export { version, clientType, tdfSpecVersion, type DecoratedStream, type CreateZTDFOptions, } from '@opentdf/sdk';
 export { AuthProviders, type AuthProvider } from '@opentdf/sdk';
 export * as singlecontainer from '@opentdf/sdk/singlecontainer';
-export * as nano from '@opentdf/sdk/nano';

package/dist/src/index.js

@@ -12,7 +12,7 @@ export { platformConnect as dspConnect, platformConnectWeb as dspConnectWeb, } f
  */
 export { DSPClient, } from './lib/client';
 export { PlatformClient } from '@opentdf/sdk/platform';
-export { createAuthInterceptor } from './lib/utils';
+export { createAuthInterceptor, createAuthProvider, createOpenTDFClient, getObligations, getUserEntitlements, flattenObligations, getTrustedCertificates, validateJWSCertificateChain, } from './lib/utils';
 /**
  * Exports the DSP wrapper of OpenTDF
  */
@@ -25,4 +25,3 @@ export { version, clientType, tdfSpecVersion, } from '@opentdf/sdk';
 // TODO: remove this export once the SDK is updated to deprecate the AuthProvider
 export { AuthProviders } from '@opentdf/sdk';
 export * as singlecontainer from '@opentdf/sdk/singlecontainer';
-export * as nano from '@opentdf/sdk/nano';

package/dist/src/lib/client.d.ts

@@ -5,11 +5,13 @@ import { PolicyArtifactService } from '../gen/policyimportexport/v1/policy_impor
 import { SharedService } from '../gen/shared/v1/shared_pb';
 import { TaggingPDPService } from '../gen/tagging/pdp/v2/tagging_pb';
 import { VersionService } from '../gen/version/v1/version_pb';
+import { CertificateService } from '../gen/virtru/policy/certificates/v1/certificates_pb';
 export interface DSPClientServicesV1 {
     configService: Client<typeof ConfigService>;
     policyArtifactService: Client<typeof PolicyArtifactService>;
     sharedService: Client<typeof SharedService>;
     versionService: Client<typeof VersionService>;
+    certificateService: Client<typeof CertificateService>;
 }
 export interface DSPClientServicesV2 {
     taggingPDPService: Client<typeof TaggingPDPService>;

package/dist/src/lib/client.js

@@ -10,6 +10,7 @@ import { PolicyArtifactService } from '../gen/policyimportexport/v1/policy_impor
 import { SharedService } from '../gen/shared/v1/shared_pb';
 import { TaggingPDPService } from '../gen/tagging/pdp/v2/tagging_pb';
 import { VersionService } from '../gen/version/v1/version_pb';
+import { CertificateService } from '../gen/virtru/policy/certificates/v1/certificates_pb';
 import { createAuthInterceptor } from './utils';
 /**
  * A client for interacting with the DSP using the Connect RPC framework.
@@ -52,6 +53,7 @@ export class DSPClient {
             policyArtifactService: createClient(PolicyArtifactService, transport),
             sharedService: createClient(SharedService, transport),
             versionService: createClient(VersionService, transport),
+            certificateService: createClient(CertificateService, transport),
         };
         this.v2 = {
             taggingPDPService: createClient(TaggingPDPService, transport),

package/dist/src/lib/consts.d.ts

@@ -0,0 +1,2 @@
+export declare const MAX_CERTS = 10;
+export declare const MAX_CERT_BYTES: number;

package/dist/src/lib/consts.js

@@ -0,0 +1,7 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+export const MAX_CERTS = 10; // reasonable upper bound for chain depth
+export const MAX_CERT_BYTES = 64 * 1024; // 64KB per certificate