ilpanich / axiam-typescript-sdk / 29638212052

94%

Build Type

push

github

Committed by web-flow

Commit Message

feat(tls): add client-certificate mTLS support for Node (CONTRACT §6.1) (#16)

Adds an optional client-certificate (mTLS) identity to the Node transport per
CONTRACT.md §6.1. New config `clientCert`/`clientKey` (PEM strings, Node-only;
browser validates then ignores). REST passes `{cert,key}` on the https.Agent
alongside `{ca}` with rejectUnauthorized untouched; gRPC uses
createSsl(rootCerts, key, cert). Both are all-or-nothing and PEM-validated at
construction; the private key is wrapped in Sensitive<T> (§7).

Tests: config validation, gRPC credential forwarding, and a real Node TLS-socket
end-to-end handshake with runtime-generated PKI (no key material committed —
fixtures for marker-validation are non-secret placeholders). CONTRACT.md
re-vendored; README mTLS section; CHANGELOG Added entry.


Claude-Session: https://claude.ai/code/session_01FM1xTLBaGvfUv8X3bPw6oj

Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

362 of 405 branches covered (89.38%)

Branch coverage included in aggregate %.

26 of 0 new or added lines in 0 files covered. (NaN%)

2 existing lines in 1 file now uncovered.

689 of 714 relevant lines covered (96.5%)

17.18 hits per line