capsium

Capsium is a framework-agnostic Lua library that provides Package
manipulation and HTTP serving (Reactor) for Capsium packages (.cap files).

Features:
- Package layer for .cap file manipulation (canonical + legacy schemas)
- SHA-256 integrity verification (security.json, reject on mismatch)
- RSA-SHA256 digital signature verification (section 6a)
- Encrypted packages: RSA-OAEP-SHA256 DEK + AES-256-GCM (section 6b)
- Layered storage with tombstones (section 5a)
- Composite packages: store resolution + route inheritance (section 4a)
- Authentication: basicAuth, OAuth2+PKCE, dataset accessControl (4b)
- Static registry pull: capsium:// mount sources resolved via
index.json (newest satisfying semver, sha256-verified install)
- Reactor + per-package introspection: /introspect/status|config|
metrics and /package/<name>/status|metadata|logs (07-reactor)
- Manifest-driven route auto-generation
- Reactor layer for HTTP serving with introspection API
- Nginx/OpenResty adapter included
- Multi-package deployment support
- Flexible routing and configuration