@virtru/dsp-sdk 0.3.1 → 0.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@virtru/dsp-sdk",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "license": "SEE LICENSE IN LICENSE",
   "main": "dist/src/index.js",
   "exports": {
@@ -19,23 +19,28 @@
     "node": ">=18.0.0"
   },
   "devDependencies": {
+    "@eslint/js": "~9.39.2",
     "@types/node": "^22.0.0",
     "@vitest/browser": "~3.1.3",
+    "eslint": "^9.17.0",
+    "eslint-plugin-prettier": "^5.2.1",
     "globals": "^16.3.0",
     "jsdom": "^22.1.0",
     "msw": "^2.8.4",
     "playwright": "^1.52.0",
+    "typescript": "5.8.2",
+    "typescript-eslint": "^8.39.1",
     "vite": "^5.4.21",
     "vite-plugin-dts": "^4.5.4",
-    "vitest": "~3.1.3",
-    "typescript": "5.8.2"
+    "vitest": "~3.1.3"
   },
   "dependencies": {
     "@bufbuild/protobuf": "^2.7.0",
     "@connectrpc/connect": "~2.0.2",
     "@connectrpc/connect-web": "~2.0.2",
     "@opentdf/sdk": "0.9.0-rc.82",
-    "@rushstack/heft": "^0.50.0",
+    "@rushstack/heft": "^1.1.14",
+    "@rushstack/heft-web-rig": "^1.3.0",
     "asn1js": "^3.0.5",
     "pkijs": "^3.0.19"
   },
@@ -43,8 +48,9 @@
     "build": "heft build --clean",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
-    "test": "npx vitest --run",
+    "test": "vitest --run",
+    "update-protos": "./update-protos.sh",
     "_phase:build": "heft build --clean",
-    "_phase:test": "npm run test && heft test --no-build"
+    "_phase:test": "npm run test && heft test"
   }
 }

package/src/gen/config/formatters/testdata/v1/test_pb.ts

@@ -3,6 +3,7 @@
  *
  * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
  */
+
 // @generated by protoc-gen-es v2.3.0 with parameter "target=ts"
 // @generated from file config/formatters/testdata/v1/test.proto (package config.formatters.testdata.v1, syntax proto3)
 /* eslint-disable */

package/src/gen/config/v1/config_connect.ts

@@ -0,0 +1,111 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file config/v1/config.proto (package config.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+
+import {
+  GetKASConfigRequest,
+  GetKASConfigResponse,
+  GetOutlookConfigRequest,
+  GetOutlookConfigResponse,
+  GetSecureViewerConfigRequest,
+  GetSecureViewerConfigResponse,
+  GetTaggingPDPConfigRequest,
+  GetTaggingPDPConfigResponse,
+  SetKASConfigRequest,
+  SetKASConfigResponse,
+  SetOutlookConfigRequest,
+  SetOutlookConfigResponse,
+  SetSecureViewerConfigRequest,
+  SetSecureViewerConfigResponse,
+  SetTaggingPDPConfigRequest,
+  SetTaggingPDPConfigResponse,
+} from './config_pb.js';
+import { MethodKind } from '@bufbuild/protobuf';
+
+/**
+ * @generated from service config.v1.ConfigService
+ */
+export const ConfigService = {
+  typeName: 'config.v1.ConfigService',
+  methods: {
+    /**
+     * @generated from rpc config.v1.ConfigService.GetTaggingPDPConfig
+     */
+    getTaggingPDPConfig: {
+      name: 'GetTaggingPDPConfig',
+      I: GetTaggingPDPConfigRequest,
+      O: GetTaggingPDPConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.SetTaggingPDPConfig
+     */
+    setTaggingPDPConfig: {
+      name: 'SetTaggingPDPConfig',
+      I: SetTaggingPDPConfigRequest,
+      O: SetTaggingPDPConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.GetSecureViewerConfig
+     */
+    getSecureViewerConfig: {
+      name: 'GetSecureViewerConfig',
+      I: GetSecureViewerConfigRequest,
+      O: GetSecureViewerConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.SetSecureViewerConfig
+     */
+    setSecureViewerConfig: {
+      name: 'SetSecureViewerConfig',
+      I: SetSecureViewerConfigRequest,
+      O: SetSecureViewerConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.GetOutlookConfig
+     */
+    getOutlookConfig: {
+      name: 'GetOutlookConfig',
+      I: GetOutlookConfigRequest,
+      O: GetOutlookConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.SetOutlookConfig
+     */
+    setOutlookConfig: {
+      name: 'SetOutlookConfig',
+      I: SetOutlookConfigRequest,
+      O: SetOutlookConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.GetKASConfig
+     */
+    getKASConfig: {
+      name: 'GetKASConfig',
+      I: GetKASConfigRequest,
+      O: GetKASConfigResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc config.v1.ConfigService.SetKASConfig
+     */
+    setKASConfig: {
+      name: 'SetKASConfig',
+      I: SetKASConfigRequest,
+      O: SetKASConfigResponse,
+      kind: MethodKind.Unary,
+    },
+  },
+} as const;

package/src/gen/config/v1/tagging_pb.ts

@@ -24,7 +24,7 @@ import type { Message } from '@bufbuild/protobuf';
 export const file_config_v1_tagging: GenFile =
   /*@__PURE__*/
   fileDesc(
-    'Chdjb25maWcvdjEvdGFnZ2luZy5wcm90bxIJY29uZmlnLnYxIlEKEFRhZ2dpbmdQRFBDb25maWcSKwoCdjEYASABKAsyHS5jb25maWcudjEuVGFnZ2luZ1BEUENvbmZpZ1YxSABCEAoHdmVyc2lvbhIFukgCCAEi5wEKElRhZ2dpbmdQRFBDb25maWdWMRI3ChJjb250ZW50X2V4dHJhY3RvcnMYASADKAsyGy5jb25maWcudjEuQ29udGVudEV4dHJhY3RvchI6ChR0YWdfZXh0cmFjdGlvbl9ydWxlcxgCIAMoCzIcLmNvbmZpZy52MS5UYWdFeHRyYWN0aW9uUnVsZRIvCg50YWdfcHJvY2Vzc29ycxgDIAMoCzIXLmNvbmZpZy52MS5UYWdQcm9jZXNzb3ISKwoMcm9sbHVwX3J1bGVzGAQgAygLMhUuY29uZmlnLnYxLlJvbGx1cFJ1bGUimgIKEENvbnRlbnRFeHRyYWN0b3ISUQoCaWQYASABKAlCRbpIA8gBAYK1GDsKDEV4dHJhY3RvciBJRBIrVW5pcXVlIGlkZW50aWZpZXIgZm9yIHRoZSBjb250ZW50IGV4dHJhY3RvchJJCgR0eXBlGAIgASgOMh8uY29uZmlnLnYxLkNvbnRlbnRFeHRyYWN0b3JUeXBlQhq6SAPIAQGCtRgQCg5FeHRyYWN0b3IgVHlwZRJoCgdvcHRpb25zGAMgASgJQle6SAPIAQGCtRhNChFFeHRyYWN0b3IgT3B0aW9ucxI4T3B0aW9ucyBmb3IgdGhlIGNvbnRlbnQgZXh0cmFjdG9yIGluIEpTT04gb3IgWUFNTCBmb3JtYXQi3gIKEVRhZ0V4dHJhY3Rpb25SdWxlEksKAmlkGAEgASgJQj+6SAPIAQGCtRg1CgdSdWxlIElEEipVbmlxdWUgaWRlbnRpZmllciBmb3IgdGhpcyBleHRyYWN0aW9uIHJ1bGUSRQoEdHlwZRgCIAEoDjIgLmNvbmZpZy52MS5UYWdFeHRyYWN0aW9uUnVsZVR5cGVCFbpIA8gBAYK1GAsKCVJ1bGUgVHlwZRJcCgRkZXNjGAMgASgJQk66SAPIAQGCtRhEChBSdWxlIERlc2NyaXB0aW9uEjBIdW1hbi1yZWFkYWJsZSBkZXNjcmlwdGlvbiBvZiB0aGUgcnVsZSdzIHB1cnBvc2USVwoHb3B0aW9ucxgEIAEoCUJGukgDyAEBgrUYPAoMUnVsZSBPcHRpb25zEixPcHRpb25zIGZvciB0aGUgcnVsZXMgaW4gSlNPTiBvciBZQU1MIGZvcm1hdCKHAgoMVGFnUHJvY2Vzc29yEk4KAmlkGAEgASgJQkK6SAPIAQGCtRg4CgxQcm9jZXNzb3IgSUQSKFVuaXF1ZSBpZGVudGlmaWVyIGZvciB0aGlzIHRhZyBwcm9jZXNzb3ISRQoEdHlwZRgCIAEoDjIbLmNvbmZpZy52MS5UYWdQcm9jZXNzb3JUeXBlQhq6SAPIAQGCtRgQCg5Qcm9jZXNzb3IgVHlwZRJgCgdvcHRpb25zGAMgASgJQk+6SAPIAQGCtRhFChFQcm9jZXNzb3IgT3B0aW9ucxIwT3B0aW9ucyBmb3IgdGhlIHByb2Nlc3NvciBpbiBKU09OIG9yIFlBTUwgZm9ybWF0IvQBCgpSb2xsdXBSdWxlEkcKAmlkGAEgASgJQju6SAPIAQGCtRgxCgdSdWxlIElEEiZVbmlxdWUgaWRlbnRpZmllciBmb3IgdGhpcyByb2xsdXAgcnVsZRI+CgR0eXBlGAIgASgOMhkuY29uZmlnLnYxLlJvbGx1cFJ1bGVUeXBlQhW6SAPIAQGCtRgLCglSdWxlIFR5cGUSXQoHb3B0aW9ucxgDIAEoCUJMukgDyAEBgrUYQgoMUnVsZSBPcHRpb25zEjJPcHRpb25zIGZvciB0aGUgcm9sbHVwIHJ1bGUgaW4gSlNPTiBvciBZQU1MIGZvcm1hdCpoChdUYWdnaW5nUERQQ29uZmlnVmVyc2lvbhIqCiZUQUdHSU5HX1BEUF9DT05GSUdfVkVSU0lPTl9VTlNQRUNJRklFRBAAEiEKHVRBR0dJTkdfUERQX0NPTkZJR19WRVJTSU9OX1YxEAEq3wEKFENvbnRlbnRFeHRyYWN0b3JUeXBlEjcKIkNPTlRFTlRfRVhUUkFDVE9SX1RZUEVfVU5TUEVDSUZJRUQQABoPgrUYC1Vuc3BlY2lmaWVkEk8KLkNPTlRFTlRfRVhUUkFDVE9SX1RZUEVfVElLQV9DT05URU5UX0VYVFJBQ1RJT04QARobgrUYF1Rpa2EgQ29udGVudCBFeHRyYWN0aW9uEj0KJUNPTlRFTlRfRVhUUkFDVE9SX1RZUEVfVElUVVNfTUVUQURBVEEQAhoSgrUYDlRpdHVzIE1ldGFkYXRhKqwCChVUYWdFeHRyYWN0aW9uUnVsZVR5cGUSOQokVEFHX0VYVFJBQ1RJT05fUlVMRV9UWVBFX1VOU1BFQ0lGSUVEEAAaD4K1GAtVbnNwZWNpZmllZBJHCitUQUdfRVhUUkFDVElPTl9SVUxFX1RZUEVfVERGM19UQUdfUFJPQ0VTU09SEAEaFoK1GBJUREYzIFRhZyBQcm9jZXNzb3ISLwofVEFHX0VYVFJBQ1RJT05fUlVMRV9UWVBFX1RERlhNTBACGgqCtRgGVERGWE1MEi8KH1RBR19FWFRSQUNUSU9OX1JVTEVfVFlQRV9JQ19FREgQAxoKgrUYBklDIEVESBItCh5UQUdfRVhUUkFDVElPTl9SVUxFX1RZUEVfUkVHRVgQBBoJgrUYBVJlZ2V4KrcBChBUYWdQcm9jZXNzb3JUeXBlEjMKHlRBR19QUk9DRVNTT1JfVFlQRV9VTlNQRUNJRklFRBAAGg+CtRgLVW5zcGVjaWZpZWQSNwogVEFHX1BST0NFU1NPUl9UWVBFX1JFUVVJUkVEX1RBR1MQARoRgrUYDVJlcXVpcmVkIFRhZ3MSNQofVEFHX1BST0NFU1NPUl9UWVBFX1RBR19NSVNNQVRDSBACGhCCtRgMVGFnIE1pc21hdGNoKrkCCg5Sb2xsdXBSdWxlVHlwZRIxChxST0xMVVBfUlVMRV9UWVBFX1VOU1BFQ0lGSUVEEAAaD4K1GAtVbnNwZWNpZmllZBI0ChtST0xMVVBfUlVMRV9UWVBFX1NURF9ST0xMVVAQARoTgrUYD1N0YW5kYXJkIFJvbGx1cBI5CiBST0xMVVBfUlVMRV9UWVBFX0RST1BfRFVQTElDQVRFUxACGhOCtRgPRHJvcCBEdXBsaWNhdGVzEkYKJlJPTExVUF9SVUxFX1RZUEVfU1RBTkFHNTYzNl9BU1NFUlRJT05TEAMaGoK1GBZTVEFOQUcgNTYzNiBBc3NlcnRpb25zEjsKIVJPTExVUF9SVUxFX1RZUEVfSUNFREhfQVNTRVJUSU9OUxAEGhSCtRgQSUNFREggQXNzZXJ0aW9uc0KvAQoNY29tLmNvbmZpZy52MUIMVGFnZ2luZ1Byb3RvUAFaS2dpdGh1Yi5jb20vdmlydHJ1LWNvcnAvZGF0YS1zZWN1cml0eS1wbGF0Zm9ybS9zZGsvdjIvZ2VuL2NvbmZpZy92MTtjb25maWd2MaICA0NYWKoCCUNvbmZpZy5WMcoCCUNvbmZpZ1xWMeICFUNvbmZpZ1xWMVxHUEJNZXRhZGF0YeoCCkNvbmZpZzo6VjFiBnByb3RvMw',
+    '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',
     [file_buf_validate_validate, file_config_v1_meta]
   );
 
@@ -55,6 +55,8 @@ export const TaggingPDPConfigSchema: GenMessage<TaggingPDPConfig> =
   messageDesc(file_config_v1_tagging, 0);
 
 /**
+ * Tagging PDP configuration, mirroring the FlowDescr Go struct.
+ *
  * @generated from message config.v1.TaggingPDPConfigV1
  */
 export type TaggingPDPConfigV1 = Message<'config.v1.TaggingPDPConfigV1'> & {
@@ -77,6 +79,20 @@ export type TaggingPDPConfigV1 = Message<'config.v1.TaggingPDPConfigV1'> & {
    * @generated from field: repeated config.v1.RollupRule rollup_rules = 4;
    */
   rollupRules: RollupRule[];
+
+  /**
+   * Matches FlowDescr.AttributeProtocol.
+   *
+   * @generated from field: string attribute_protocol = 5;
+   */
+  attributeProtocol: string;
+
+  /**
+   * Matches FlowDescr.ResourceMappingSets.
+   *
+   * @generated from field: repeated config.v1.ResourceMappingSet resource_mapping_sets = 6;
+   */
+  resourceMappingSets: ResourceMappingSet[];
 };
 
 /**
@@ -87,6 +103,31 @@ export const TaggingPDPConfigV1Schema: GenMessage<TaggingPDPConfigV1> =
   /*@__PURE__*/
   messageDesc(file_config_v1_tagging, 1);
 
+/**
+ * Represents a synonym dictionary for a set of attribute groups.
+ *
+ * @generated from message config.v1.ResourceMappingSet
+ */
+export type ResourceMappingSet = Message<'config.v1.ResourceMappingSet'> & {
+  /**
+   * @generated from field: repeated string group_fqns = 1;
+   */
+  groupFqns: string[];
+
+  /**
+   * @generated from field: map<string, string> mappings = 2;
+   */
+  mappings: { [key: string]: string };
+};
+
+/**
+ * Describes the message config.v1.ResourceMappingSet.
+ * Use `create(ResourceMappingSetSchema)` to create a new message.
+ */
+export const ResourceMappingSetSchema: GenMessage<ResourceMappingSet> =
+  /*@__PURE__*/
+  messageDesc(file_config_v1_tagging, 2);
+
 /**
  * @generated from message config.v1.ContentExtractor
  */
@@ -113,7 +154,7 @@ export type ContentExtractor = Message<'config.v1.ContentExtractor'> & {
  */
 export const ContentExtractorSchema: GenMessage<ContentExtractor> =
   /*@__PURE__*/
-  messageDesc(file_config_v1_tagging, 2);
+  messageDesc(file_config_v1_tagging, 3);
 
 /**
  * @generated from message config.v1.TagExtractionRule
@@ -146,7 +187,7 @@ export type TagExtractionRule = Message<'config.v1.TagExtractionRule'> & {
  */
 export const TagExtractionRuleSchema: GenMessage<TagExtractionRule> =
   /*@__PURE__*/
-  messageDesc(file_config_v1_tagging, 3);
+  messageDesc(file_config_v1_tagging, 4);
 
 /**
  * @generated from message config.v1.TagProcessor
@@ -174,7 +215,7 @@ export type TagProcessor = Message<'config.v1.TagProcessor'> & {
  */
 export const TagProcessorSchema: GenMessage<TagProcessor> =
   /*@__PURE__*/
-  messageDesc(file_config_v1_tagging, 4);
+  messageDesc(file_config_v1_tagging, 5);
 
 /**
  * @generated from message config.v1.RollupRule
@@ -202,7 +243,7 @@ export type RollupRule = Message<'config.v1.RollupRule'> & {
  */
 export const RollupRuleSchema: GenMessage<RollupRule> =
   /*@__PURE__*/
-  messageDesc(file_config_v1_tagging, 5);
+  messageDesc(file_config_v1_tagging, 6);
 
 /**
  * @generated from enum config.v1.TaggingPDPConfigVersion
@@ -244,6 +285,16 @@ export enum ContentExtractorType {
    * @generated from enum value: CONTENT_EXTRACTOR_TYPE_TITUS_METADATA = 2;
    */
   TITUS_METADATA = 2,
+
+  /**
+   * @generated from enum value: CONTENT_EXTRACTOR_TYPE_GRPC_CONTENT_EXTRACTION = 3;
+   */
+  GRPC_CONTENT_EXTRACTION = 3,
+
+  /**
+   * @generated from enum value: CONTENT_EXTRACTOR_TYPE_HTTP_CONTENT_EXTRACTION = 4;
+   */
+  HTTP_CONTENT_EXTRACTION = 4,
 }
 
 /**
@@ -281,6 +332,31 @@ export enum TagExtractionRuleType {
    * @generated from enum value: TAG_EXTRACTION_RULE_TYPE_REGEX = 4;
    */
   REGEX = 4,
+
+  /**
+   * @generated from enum value: TAG_EXTRACTION_RULE_TYPE_STANAG4774_EXTRACTOR = 5;
+   */
+  STANAG4774_EXTRACTOR = 5,
+
+  /**
+   * @generated from enum value: TAG_EXTRACTION_RULE_TYPE_STANAG5636_EXTRACTOR = 6;
+   */
+  STANAG5636_EXTRACTOR = 6,
+
+  /**
+   * @generated from enum value: TAG_EXTRACTION_RULE_TYPE_GRPC_TAG_EXTRACTOR = 7;
+   */
+  GRPC_TAG_EXTRACTOR = 7,
+
+  /**
+   * @generated from enum value: TAG_EXTRACTION_RULE_TYPE_HTTP_TAG_EXTRACTOR = 8;
+   */
+  HTTP_TAG_EXTRACTOR = 8,
+
+  /**
+   * @generated from enum value: TAG_EXTRACTION_RULE_TYPE_TITUS_METADATA = 9;
+   */
+  TITUS_METADATA = 9,
 }
 
 /**
@@ -308,6 +384,21 @@ export enum TagProcessorType {
    * @generated from enum value: TAG_PROCESSOR_TYPE_TAG_MISMATCH = 2;
    */
   TAG_MISMATCH = 2,
+
+  /**
+   * @generated from enum value: TAG_PROCESSOR_TYPE_DEFAULT_VALUES = 3;
+   */
+  DEFAULT_VALUES = 3,
+
+  /**
+   * @generated from enum value: TAG_PROCESSOR_TYPE_GRPC_TAG_PROCESSOR = 4;
+   */
+  GRPC_TAG_PROCESSOR = 4,
+
+  /**
+   * @generated from enum value: TAG_PROCESSOR_TYPE_HTTP_TAG_PROCESSOR = 5;
+   */
+  HTTP_TAG_PROCESSOR = 5,
 }
 
 /**
@@ -345,6 +436,16 @@ export enum RollupRuleType {
    * @generated from enum value: ROLLUP_RULE_TYPE_ICEDH_ASSERTIONS = 4;
    */
   ICEDH_ASSERTIONS = 4,
+
+  /**
+   * @generated from enum value: ROLLUP_RULE_TYPE_GRPC_ROLLUP = 5;
+   */
+  GRPC_ROLLUP = 5,
+
+  /**
+   * @generated from enum value: ROLLUP_RULE_TYPE_HTTP_ROLLUP = 6;
+   */
+  HTTP_ROLLUP = 6,
 }
 
 /**

package/src/gen/helloworld/v1/helloworld_connect.ts

@@ -0,0 +1,49 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+
+// Copyright 2015 gRPC authors.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file helloworld/v1/helloworld.proto (package helloworld.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+
+import { SayHelloRequest, SayHelloResponse } from './helloworld_pb.js';
+import { MethodKind } from '@bufbuild/protobuf';
+
+/**
+ * The greeting service definition.
+ *
+ * @generated from service helloworld.v1.GreeterService
+ */
+export const GreeterService = {
+  typeName: 'helloworld.v1.GreeterService',
+  methods: {
+    /**
+     * Sends a greeting
+     *
+     * @generated from rpc helloworld.v1.GreeterService.SayHello
+     */
+    sayHello: {
+      name: 'SayHello',
+      I: SayHelloRequest,
+      O: SayHelloResponse,
+      kind: MethodKind.Unary,
+    },
+  },
+} as const;

package/src/gen/helloworld/v1/helloworld_pb.ts

@@ -1,3 +1,9 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+
 // Copyright 2015 gRPC authors.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");

package/src/gen/kas/nanotdf/v1/nanotdf_rewrap_connect.ts

@@ -0,0 +1,39 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file kas/nanotdf/v1/nanotdf_rewrap.proto (package kas.nanotdf.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+
+import { RewrapRequest, RewrapResponse } from './nanotdf_rewrap_pb.js';
+import { MethodKind } from '@bufbuild/protobuf';
+
+/**
+ * NanoTDF-specific rewrap surface area.
+ *
+ * The request contains a Signed Request Token (SRT). The SRT `requestBody` claim
+ * must contain a JSON-encoded NanoTDFRewrapRequestBody (protojson).
+ *
+ * @generated from service kas.nanotdf.v1.NanoTDFRewrapService
+ */
+export const NanoTDFRewrapService = {
+  typeName: 'kas.nanotdf.v1.NanoTDFRewrapService',
+  methods: {
+    /**
+     * Rewrap accepts a signed request token and returns KAS-wrapped keys for
+     * each requested NanoTDF header.
+     *
+     * @generated from rpc kas.nanotdf.v1.NanoTDFRewrapService.Rewrap
+     */
+    rewrap: {
+      name: 'Rewrap',
+      I: RewrapRequest,
+      O: RewrapResponse,
+      kind: MethodKind.Unary,
+    },
+  },
+} as const;

package/src/gen/kas/nanotdf/v1/nanotdf_rewrap_pb.ts

@@ -0,0 +1,207 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+
+// @generated by protoc-gen-es v2.3.0 with parameter "target=ts"
+// @generated from file kas/nanotdf/v1/nanotdf_rewrap.proto (package kas.nanotdf.v1, syntax proto3)
+/* eslint-disable */
+
+import type {
+  GenFile,
+  GenMessage,
+  GenService,
+} from '@bufbuild/protobuf/codegenv1';
+import {
+  fileDesc,
+  messageDesc,
+  serviceDesc,
+} from '@bufbuild/protobuf/codegenv1';
+import type { Message } from '@bufbuild/protobuf';
+
+/**
+ * Describes the file kas/nanotdf/v1/nanotdf_rewrap.proto.
+ */
+export const file_kas_nanotdf_v1_nanotdf_rewrap: GenFile =
+  /*@__PURE__*/
+  fileDesc(
+    'CiNrYXMvbmFub3RkZi92MS9uYW5vdGRmX3Jld3JhcC5wcm90bxIOa2FzLm5hbm90ZGYudjEiOwoNUmV3cmFwUmVxdWVzdBIcChRzaWduZWRfcmVxdWVzdF90b2tlbhgBIAEoCUoECAIQA1IGYmVhcmVyIlsKDlJld3JhcFJlc3BvbnNlEhoKEnNlc3Npb25fcHVibGljX2tleRgBIAEoCRItCgdyZXN1bHRzGAIgAygLMhwua2FzLm5hbm90ZGYudjEuUmV3cmFwUmVzdWx0ImAKDFJld3JhcFJlc3VsdBIKCgJpZBgBIAEoCRIOCgZzdGF0dXMYAiABKAkSGQoPa2FzX3dyYXBwZWRfa2V5GAMgASgMSAASDwoFZXJyb3IYBCABKAlIAEIICgZyZXN1bHQiZwoYTmFub1RERlJld3JhcFJlcXVlc3RCb2R5EhkKEWNsaWVudF9wdWJsaWNfa2V5GAEgASgJEjAKBWl0ZW1zGAIgAygLMiEua2FzLm5hbm90ZGYudjEuTmFub1RERlJld3JhcEl0ZW0iLwoRTmFub1RERlJld3JhcEl0ZW0SCgoCaWQYASABKAkSDgoGaGVhZGVyGAIgASgMMmEKFE5hbm9UREZSZXdyYXBTZXJ2aWNlEkkKBlJld3JhcBIdLmthcy5uYW5vdGRmLnYxLlJld3JhcFJlcXVlc3QaHi5rYXMubmFub3RkZi52MS5SZXdyYXBSZXNwb25zZSIAQtUBChJjb20ua2FzLm5hbm90ZGYudjFCEk5hbm90ZGZSZXdyYXBQcm90b1ABWlFnaXRodWIuY29tL3ZpcnRydS1jb3JwL2RhdGEtc2VjdXJpdHktcGxhdGZvcm0vc2RrL3YyL2dlbi9rYXMvbmFub3RkZi92MTtuYW5vdGRmdjGiAgNLTliqAg5LYXMuTmFub3RkZi5WMcoCDkthc1xOYW5vdGRmXFYx4gIaS2FzXE5hbm90ZGZcVjFcR1BCTWV0YWRhdGHqAhBLYXM6Ok5hbm90ZGY6OlYxYgZwcm90bzM'
+  );
+
+/**
+ * @generated from message kas.nanotdf.v1.RewrapRequest
+ */
+export type RewrapRequest = Message<'kas.nanotdf.v1.RewrapRequest'> & {
+  /**
+   * Signed Request Token (SRT) that carries the requestBody claim as protojson.
+   *
+   * @generated from field: string signed_request_token = 1;
+   */
+  signedRequestToken: string;
+};
+
+/**
+ * Describes the message kas.nanotdf.v1.RewrapRequest.
+ * Use `create(RewrapRequestSchema)` to create a new message.
+ */
+export const RewrapRequestSchema: GenMessage<RewrapRequest> =
+  /*@__PURE__*/
+  messageDesc(file_kas_nanotdf_v1_nanotdf_rewrap, 0);
+
+/**
+ * @generated from message kas.nanotdf.v1.RewrapResponse
+ */
+export type RewrapResponse = Message<'kas.nanotdf.v1.RewrapResponse'> & {
+  /**
+   * KAS session public key used by the client to derive the shared secret.
+   *
+   * @generated from field: string session_public_key = 1;
+   */
+  sessionPublicKey: string;
+
+  /**
+   * Per-item rewrap outcomes aligned to the request items.
+   *
+   * @generated from field: repeated kas.nanotdf.v1.RewrapResult results = 2;
+   */
+  results: RewrapResult[];
+};
+
+/**
+ * Describes the message kas.nanotdf.v1.RewrapResponse.
+ * Use `create(RewrapResponseSchema)` to create a new message.
+ */
+export const RewrapResponseSchema: GenMessage<RewrapResponse> =
+  /*@__PURE__*/
+  messageDesc(file_kas_nanotdf_v1_nanotdf_rewrap, 1);
+
+/**
+ * @generated from message kas.nanotdf.v1.RewrapResult
+ */
+export type RewrapResult = Message<'kas.nanotdf.v1.RewrapResult'> & {
+  /**
+   * Client-provided correlation id (or server-generated fallback).
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * Status is one of: "permit", "fail".
+   *
+   * @generated from field: string status = 2;
+   */
+  status: string;
+
+  /**
+   * @generated from oneof kas.nanotdf.v1.RewrapResult.result
+   */
+  result:
+    | {
+        /**
+         * KAS-wrapped symmetric key for the corresponding NanoTDF item.
+         *
+         * @generated from field: bytes kas_wrapped_key = 3;
+         */
+        value: Uint8Array;
+        case: 'kasWrappedKey';
+      }
+    | {
+        /**
+         * Error message when status is "fail".
+         *
+         * @generated from field: string error = 4;
+         */
+        value: string;
+        case: 'error';
+      }
+    | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message kas.nanotdf.v1.RewrapResult.
+ * Use `create(RewrapResultSchema)` to create a new message.
+ */
+export const RewrapResultSchema: GenMessage<RewrapResult> =
+  /*@__PURE__*/
+  messageDesc(file_kas_nanotdf_v1_nanotdf_rewrap, 2);
+
+/**
+ * NanoTDFRewrapRequestBody is the canonical requestBody schema for NanoTDF rewrap.
+ *
+ * @generated from message kas.nanotdf.v1.NanoTDFRewrapRequestBody
+ */
+export type NanoTDFRewrapRequestBody =
+  Message<'kas.nanotdf.v1.NanoTDFRewrapRequestBody'> & {
+    /**
+     * Client public key used for key agreement (e.g., X25519).
+     *
+     * @generated from field: string client_public_key = 1;
+     */
+    clientPublicKey: string;
+
+    /**
+     * Items to be rewrapped by the KAS.
+     *
+     * @generated from field: repeated kas.nanotdf.v1.NanoTDFRewrapItem items = 2;
+     */
+    items: NanoTDFRewrapItem[];
+  };
+
+/**
+ * Describes the message kas.nanotdf.v1.NanoTDFRewrapRequestBody.
+ * Use `create(NanoTDFRewrapRequestBodySchema)` to create a new message.
+ */
+export const NanoTDFRewrapRequestBodySchema: GenMessage<NanoTDFRewrapRequestBody> =
+  /*@__PURE__*/
+  messageDesc(file_kas_nanotdf_v1_nanotdf_rewrap, 3);
+
+/**
+ * @generated from message kas.nanotdf.v1.NanoTDFRewrapItem
+ */
+export type NanoTDFRewrapItem = Message<'kas.nanotdf.v1.NanoTDFRewrapItem'> & {
+  /**
+   * Client-provided correlation id (optional).
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * Raw NanoTDF header bytes (Magic+Version..Ephemeral Key).
+   *
+   * @generated from field: bytes header = 2;
+   */
+  header: Uint8Array;
+};
+
+/**
+ * Describes the message kas.nanotdf.v1.NanoTDFRewrapItem.
+ * Use `create(NanoTDFRewrapItemSchema)` to create a new message.
+ */
+export const NanoTDFRewrapItemSchema: GenMessage<NanoTDFRewrapItem> =
+  /*@__PURE__*/
+  messageDesc(file_kas_nanotdf_v1_nanotdf_rewrap, 4);
+
+/**
+ * NanoTDF-specific rewrap surface area.
+ *
+ * The request contains a Signed Request Token (SRT). The SRT `requestBody` claim
+ * must contain a JSON-encoded NanoTDFRewrapRequestBody (protojson).
+ *
+ * @generated from service kas.nanotdf.v1.NanoTDFRewrapService
+ */
+export const NanoTDFRewrapService: GenService<{
+  /**
+   * Rewrap accepts a signed request token and returns KAS-wrapped keys for
+   * each requested NanoTDF header.
+   *
+   * @generated from rpc kas.nanotdf.v1.NanoTDFRewrapService.Rewrap
+   */
+  rewrap: {
+    methodKind: 'unary';
+    input: typeof RewrapRequestSchema;
+    output: typeof RewrapResponseSchema;
+  };
+}> = /*@__PURE__*/ serviceDesc(file_kas_nanotdf_v1_nanotdf_rewrap, 0);