@zincapp/trust-provider-sdk

NestJS SDK for implementing a ZincApp Trust evidence provider. Mounts the read-only /trust/* contract Trust pulls from — /trust/manifest, /trust/evidence, /trust/status — plus an mTLS guard and the outbound webhook emitter, and ships a Jest conformance harness so your provider is verified against the contract.

Install

npm i @zincapp/trust-provider-sdk @zincapp/trust-shared-types
# NestJS is a peer dependency (^10 || ^11) — bring your own

Usage

import { Module } from '@nestjs/common';
import { TrustProviderModule } from '@zincapp/trust-provider-sdk';

@Module({
  imports: [
    TrustProviderModule.register({
      manifest,                       // your declared evidence types + control mappings
      manifestSigningSecret,          // from vault
      webhook: { url, secret, providerId },
      evidenceCollectors: [/* EvidenceCollector implementations */],
      statusCheckers: [/* StatusChecker implementations */],
      mtls: { /* optional: pull-side client-cert validation */ },
    }),
  ],
})
export class ProviderModule {}

Dual CJS + ESM, ships .d.ts. Conformance harness: setupTrustConformance (import its jest-preset). See @zincapp/trust-shared-types for the contract schemas.