diff --git a/acouchbase_analytics/cluster.py b/acouchbase_analytics/cluster.py
index 0dafd3e..7f5bb43 100644
--- a/acouchbase_analytics/cluster.py
+++ b/acouchbase_analytics/cluster.py
@@ -161,9 +161,9 @@ def start_query(self, statement: str, *args: object, **kwargs: object) -> Awaita
     async def set_credential(self, credential: Credential) -> None:
         """Replace the credential used for subsequent HTTP requests.
 
-        Allows updating credentials (in particular, rotating a JWT) without restarting
-        the application.  The new credential must be of the same type as the current
-        credential.
+        Use this to rotate a JWT or client certificate without restarting the
+        application.  The new credential must be of the same type as the
+        current one.
 
         Args:
             credential: The new :class:`.Credential` to use.
diff --git a/acouchbase_analytics/protocol/_core/client_adapter.py b/acouchbase_analytics/protocol/_core/client_adapter.py
index 6751a76..9bce337 100644
--- a/acouchbase_analytics/protocol/_core/client_adapter.py
+++ b/acouchbase_analytics/protocol/_core/client_adapter.py
@@ -140,28 +140,26 @@ async def close_client(self) -> None:
             await self._client.aclose()
             self.log_message('Cluster HTTP client closed', LogLevel.INFO)
 
+    def _build_client(self) -> AsyncClient:
+        auth = DynamicCredentialAuth(self._credential_holder)
+        if self._conn_details.is_secure():
+            if self._conn_details.ssl_context is None:
+                raise ValueError('SSL context is required for secure connections.')
+            transport = None
+            if self._http_transport_cls is not None:
+                transport = self._http_transport_cls(verify=self._conn_details.ssl_context)
+            return AsyncClient(verify=self._conn_details.ssl_context, auth=auth, transport=transport)
+        transport = None
+        if self._http_transport_cls is not None:
+            transport = self._http_transport_cls()
+        return AsyncClient(auth=auth, transport=transport)
+
     async def create_client(self) -> None:
         """
         **INTERNAL**
         """
         if not hasattr(self, '_client'):
-            auth = DynamicCredentialAuth(self._credential_holder)
-            if self._conn_details.is_secure():
-                if self._conn_details.ssl_context is None:
-                    raise ValueError('SSL context is required for secure connections.')
-                transport = None
-                if self._http_transport_cls is not None:
-                    transport = self._http_transport_cls(verify=self._conn_details.ssl_context)
-                self._client = AsyncClient(
-                    verify=self._conn_details.ssl_context,
-                    auth=auth,
-                    transport=transport,
-                )
-            else:
-                transport = None
-                if self._http_transport_cls is not None:
-                    transport = self._http_transport_cls()
-                self._client = AsyncClient(auth=auth, transport=transport)
+            self._client = self._build_client()
             self.log_message(
                 (f'Cluster HTTP client created: connection_details={self._conn_details.get_init_details()}'),
                 LogLevel.INFO,
@@ -206,8 +204,31 @@ def reset_client(self) -> None:
             del self._client
 
     async def update_credential(self, new_credential: Credential) -> None:
-        self._credential_holder.replace(new_credential)
-        # Future mTLS: await close_client(), rebuild SSL context, await create_client().
+        if new_credential._kind == 'cert':
+            # httpx pins the SSL context to the AsyncClient at construction,
+            # and the cert chain is part of that context.  So a cert rotation
+            # needs a fresh Client.  Build it before aclosing the old one,
+            # otherwise a concurrent send_request can see self._client gone.
+            self._credential_holder.credential._check_replaceable_with(new_credential)
+            old_client = getattr(self, '_client', None)
+            old_ssl_context = self._conn_details.ssl_context
+            old_sni_hostname = self._conn_details.sni_hostname
+            try:
+                self._conn_details.validate_security_options(new_credential)
+                # If the cluster hasn't issued a request yet there's no Client
+                # to swap; we still refreshed the SSL context above.
+                new_client = self._build_client() if old_client is not None else None
+            except Exception:
+                self._conn_details.ssl_context = old_ssl_context
+                self._conn_details.sni_hostname = old_sni_hostname
+                raise
+            if new_client is not None:
+                self._client = new_client
+            self._credential_holder.replace(new_credential)
+            if old_client is not None:
+                await old_client.aclose()
+        else:
+            self._credential_holder.replace(new_credential)
         self.log_message('Cluster HTTP credential updated', LogLevel.INFO)
 
 
diff --git a/acouchbase_analytics/tests/credential_t.py b/acouchbase_analytics/tests/credential_t.py
index 623e431..f5fde9b 100644
--- a/acouchbase_analytics/tests/credential_t.py
+++ b/acouchbase_analytics/tests/credential_t.py
@@ -16,8 +16,12 @@
 
 from __future__ import annotations
 
+import pathlib
+import shutil
+import ssl
+import subprocess
 from base64 import b64encode
-from typing import Any
+from typing import Any, Tuple
 
 import pytest
 from httpx import Request
@@ -27,6 +31,70 @@
 from couchbase_analytics.protocol._core.auth import DynamicCredentialAuth
 
 _SAMPLE_JWT = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.payload.signature'
+_PKCS12_PASSWORD = 'pycbac-test-pw'
+
+
+@pytest.fixture(scope='session')
+def pkcs12_path(cert_paths: Tuple[str, str], tmp_path_factory: pytest.TempPathFactory) -> str:
+    """Bundle the session cert + key into a password-encrypted PKCS#12 file."""
+    if shutil.which('openssl') is None:
+        pytest.skip('openssl CLI not available; skipping PKCS#12 tests')
+    cert, key = cert_paths
+    tmp = tmp_path_factory.mktemp('mtls-pkcs12-async')
+    p12 = tmp / 'client.p12'
+    subprocess.run(
+        [
+            'openssl',
+            'pkcs12',
+            '-export',
+            '-out',
+            str(p12),
+            '-inkey',
+            key,
+            '-in',
+            cert,
+            '-passout',
+            f'pass:{_PKCS12_PASSWORD}',
+        ],
+        check=True,
+        capture_output=True,
+    )
+    return str(p12)
+
+
+@pytest.fixture(scope='session')
+def cert_paths(tmp_path_factory: pytest.TempPathFactory) -> Tuple[str, str]:
+    """Self-signed PEM cert + key for mTLS unit tests.
+
+    The tests don't need a real CA, just PEM that ``ssl.SSLContext.load_cert_chain``
+    can parse.  Skipped if the ``openssl`` CLI isn't on PATH.
+    """
+    if shutil.which('openssl') is None:
+        pytest.skip('openssl CLI not available; skipping mTLS cert tests')
+    tmp = tmp_path_factory.mktemp('mtls-certs-async')
+    cert = tmp / 'client.crt'
+    key = tmp / 'client.key'
+    subprocess.run(
+        [
+            'openssl',
+            'req',
+            '-x509',
+            '-newkey',
+            'rsa:2048',
+            '-keyout',
+            str(key),
+            '-out',
+            str(cert),
+            '-days',
+            '1',
+            '-nodes',
+            '-subj',
+            '/CN=pycbac-test-client',
+        ],
+        check=True,
+        capture_output=True,
+    )
+    return str(cert), str(key)
 
 
 def _authorization_header(client: Any) -> str:
@@ -35,7 +103,7 @@ def _authorization_header(client: Any) -> str:
     req = Request('POST', request_url)
     flow = auth.auth_flow(req)
     dispatched = next(flow)
-    return dispatched.headers['Authorization']
+    return dispatched.headers.get('Authorization', '')
 
 
 class CredentialTestSuite:
@@ -45,7 +113,9 @@ class CredentialTestSuite:
         'test_jwt_credential_rejects_non_string',
         'test_credential_direct_construction_with_jwt',
         'test_credential_direct_construction_with_password',
+        'test_credential_direct_construction_with_certificate',
         'test_credential_rejects_unknown_kwargs',
+        'test_credential_rejects_mixed_kwargs',
         'test_credential_hides_internal_details',
         'test_credential_from_callable_with_jwt',
         'test_jwt_credential_repr_redacts_token',
@@ -53,12 +123,30 @@ class CredentialTestSuite:
         'test_jwt_credential_accepts_https_endpoint',
         'test_password_credential_http_authorization_header',
         'test_password_credential_repr_redacts_password',
+        'test_certificate_credential_creation',
+        'test_certificate_credential_rejects_nonexistent_path',
+        'test_certificate_credential_rejects_non_string_cert_path',
+        'test_certificate_credential_rejects_non_string_key_path',
+        'test_certificate_credential_repr',
+        'test_certificate_credential_rejects_http_endpoint',
+        'test_certificate_credential_accepts_https_endpoint',
+        'test_pkcs12_credential_creation',
+        'test_pkcs12_credential_repr_redacts_password',
+        'test_pkcs12_wrong_password_fails',
+        'test_pkcs12_credential_accepts_https_endpoint',
+        'test_pkcs12_credential_rejects_http_endpoint',
+        'test_set_credential_pem_to_pkcs12_rotation',
         'test_dynamic_auth_sets_header_from_current_credential',
         'test_async_dynamic_auth_sets_header_from_current_credential',
         'test_dynamic_auth_picks_up_rotated_credential',
+        'test_async_dynamic_auth_omits_header_for_certificate',
         'test_set_credential_same_type_updates_state',
         'test_set_credential_password_to_jwt_fails',
         'test_set_credential_jwt_to_password_fails',
+        'test_set_credential_password_to_certificate_fails',
+        'test_set_credential_certificate_to_jwt_fails',
+        'test_set_credential_certificate_rotation_rebuilds_client',
+        'test_set_credential_certificate_rotation_failure_does_not_change_state',
         'test_set_credential_failure_does_not_change_state',
     ]
 
@@ -99,15 +187,31 @@ def test_credential_direct_construction_with_password(self) -> None:
         expected = 'Basic ' + b64encode(b'Administrator:password').decode('ascii')
         assert _authorization_header(client) == expected
 
+    def test_credential_direct_construction_with_certificate(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential(cert_path=cert_path, key_path=key_path)
+        client = _AsyncClientAdapter('https://localhost', cred)
+        assert _authorization_header(client) == ''
+
     def test_credential_rejects_unknown_kwargs(self) -> None:
         with pytest.raises(TypeError, match='unexpected keyword argument'):
             Credential(usernme='Administrator', password='password')  # type: ignore[call-arg]
         with pytest.raises(TypeError, match='unexpected keyword argument'):
             Credential(jwt_token=_SAMPLE_JWT, extra='ignored')  # type: ignore[call-arg]
 
+    def test_credential_rejects_mixed_kwargs(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        with pytest.raises(ValueError, match='Cannot provide both'):
+            Credential(jwt_token=_SAMPLE_JWT, cert_path=cert_path, key_path=key_path)
+
     def test_credential_hides_internal_details(self) -> None:
         public_attrs = {name for name in dir(Credential.from_jwt(_SAMPLE_JWT)) if not name.startswith('_')}
-        assert public_attrs == {'from_callable', 'from_jwt', 'from_username_and_password'}
+        assert public_attrs == {
+            'from_callable',
+            'from_certificate',
+            'from_jwt',
+            'from_username_and_password',
+        }
 
     def test_credential_from_callable_with_jwt(self) -> None:
         cred = Credential.from_callable(lambda: Credential.from_jwt(_SAMPLE_JWT))
@@ -141,6 +245,94 @@ def test_password_credential_repr_redacts_password(self) -> None:
         assert '****' in rendered
         assert 'Administrator' in rendered
 
+    def test_certificate_credential_creation(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        assert cred._kind == 'cert'
+
+    def test_certificate_credential_rejects_nonexistent_path(self, tmp_path: pathlib.Path) -> None:
+        existing = tmp_path / 'exists'
+        existing.write_text('placeholder')
+        missing = tmp_path / 'missing'
+        with pytest.raises(FileNotFoundError):
+            Credential.from_certificate(str(missing), str(existing))
+        with pytest.raises(FileNotFoundError):
+            Credential.from_certificate(str(existing), str(missing))
+
+    @pytest.mark.parametrize('bad_value', [12345, None])
+    def test_certificate_credential_rejects_non_string_cert_path(self, bad_value: object) -> None:
+        with pytest.raises((TypeError, ValueError)):
+            Credential.from_certificate(bad_value, '/tmp/key.pem')  # type: ignore[arg-type]
+
+    def test_certificate_credential_rejects_non_string_key_path(self) -> None:
+        # key_path=None is now a valid PKCS#12 signature, so only non-str/non-None
+        # values are rejected.
+        with pytest.raises(TypeError):
+            Credential.from_certificate('/tmp/cert.pem', 12345)  # type: ignore[arg-type]
+
+    def test_certificate_credential_repr(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        rendered = repr(cred)
+        assert 'Credential(cert_path=' in rendered
+        assert 'key_path=' in rendered
+
+    def test_certificate_credential_rejects_http_endpoint(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        with pytest.raises(ValueError, match='require a secure'):
+            _AsyncClientAdapter('http://localhost', Credential.from_certificate(cert_path, key_path))
+
+    def test_certificate_credential_accepts_https_endpoint(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        client = _AsyncClientAdapter('https://localhost', Credential.from_certificate(cert_path, key_path))
+        assert client.connection_details.ssl_context is not None
+
+    def test_pkcs12_credential_creation(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        # PKCS#12 still maps to _kind == 'cert'; only the storage shape differs.
+        assert cred._kind == 'cert'
+        assert cred._key_path is None
+
+    def test_pkcs12_credential_repr_redacts_password(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        rendered = repr(cred)
+        assert _PKCS12_PASSWORD not in rendered
+        assert 'cert_password=****' in rendered
+
+    def test_pkcs12_wrong_password_fails(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password='wrong-password')
+        # The decode happens lazily when the SSL context is built, i.e. inside
+        # _AsyncClientAdapter init via validate_security_options.
+        with pytest.raises(ValueError, match='Failed to load PKCS#12 file'):
+            _AsyncClientAdapter('https://localhost', cred)
+
+    def test_pkcs12_credential_accepts_https_endpoint(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        client = _AsyncClientAdapter('https://localhost', cred)
+        assert client.connection_details.ssl_context is not None
+
+    def test_pkcs12_credential_rejects_http_endpoint(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        with pytest.raises(ValueError, match='require a secure'):
+            _AsyncClientAdapter('http://localhost', cred)
+
+    @pytest.mark.anyio
+    async def test_set_credential_pem_to_pkcs12_rotation(self, cert_paths: Tuple[str, str], pkcs12_path: str) -> None:
+        # PEM and PKCS#12 are both _kind == 'cert', so cross-format rotation is
+        # allowed.  Both forms should rebuild the client + SSL context.
+        cert_path, key_path = cert_paths
+        client = _AsyncClientAdapter('https://localhost', Credential.from_certificate(cert_path, key_path))
+        await client.create_client()
+        first_client = client.client
+        first_ssl = client.connection_details.ssl_context
+        try:
+            await client.update_credential(Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD))
+            assert client.client is not first_client
+            assert client.connection_details.ssl_context is not first_ssl
+            assert client.credential_holder.credential._key_path is None  # now PKCS#12-shaped
+        finally:
+            await client.close_client()
+
     def test_dynamic_auth_sets_header_from_current_credential(self) -> None:
         cred = Credential.from_jwt(_SAMPLE_JWT)
         client = _AsyncClientAdapter('https://localhost', cred)
@@ -177,6 +369,18 @@ async def test_dynamic_auth_picks_up_rotated_credential(self) -> None:
         dispatched = next(flow)
         assert dispatched.headers['Authorization'] == f'Bearer {new_token}'
 
+    @pytest.mark.anyio
+    async def test_async_dynamic_auth_omits_header_for_certificate(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _AsyncClientAdapter('https://localhost', cred)
+        auth = DynamicCredentialAuth(client.credential_holder)
+
+        req = Request('POST', 'https://localhost/api/v1/request')
+        flow = auth.async_auth_flow(req)
+        dispatched = await flow.__anext__()
+        assert 'Authorization' not in dispatched.headers
+
     @pytest.mark.anyio
     async def test_set_credential_same_type_updates_state(self) -> None:
         cred = Credential.from_jwt(_SAMPLE_JWT)
@@ -202,6 +406,64 @@ async def test_set_credential_jwt_to_password_fails(self) -> None:
         with pytest.raises(TypeError, match='Cannot switch credential type'):
             await client.update_credential(Credential.from_username_and_password('Administrator', 'password'))
 
+    @pytest.mark.anyio
+    async def test_set_credential_password_to_certificate_fails(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_username_and_password('Administrator', 'password')
+        client = _AsyncClientAdapter('http://localhost', cred)
+        with pytest.raises(TypeError, match='Cannot switch credential type'):
+            await client.update_credential(Credential.from_certificate(cert_path, key_path))
+
+    @pytest.mark.anyio
+    async def test_set_credential_certificate_to_jwt_fails(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _AsyncClientAdapter('https://localhost', cred)
+        await client.create_client()
+        try:
+            with pytest.raises(TypeError, match='Cannot switch credential type'):
+                await client.update_credential(Credential.from_jwt(_SAMPLE_JWT))
+        finally:
+            await client.close_client()
+
+    @pytest.mark.anyio
+    async def test_set_credential_certificate_rotation_rebuilds_client(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _AsyncClientAdapter('https://localhost', cred)
+        await client.create_client()
+        first_client = client.client
+        first_ssl = client.connection_details.ssl_context
+        try:
+            await client.update_credential(Credential.from_certificate(cert_path, key_path))
+            assert client.client is not first_client
+            assert client.connection_details.ssl_context is not first_ssl
+        finally:
+            await client.close_client()
+
+    @pytest.mark.anyio
+    async def test_set_credential_certificate_rotation_failure_does_not_change_state(
+        self, cert_paths: Tuple[str, str], tmp_path: pathlib.Path
+    ) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _AsyncClientAdapter('https://localhost', cred)
+        await client.create_client()
+        first_client = client.client
+        first_ssl = client.connection_details.ssl_context
+        bad_cert = tmp_path / 'bad.crt'
+        bad_key = tmp_path / 'bad.key'
+        bad_cert.write_text('not a cert')
+        bad_key.write_text('not a key')
+        try:
+            with pytest.raises(ssl.SSLError):
+                await client.update_credential(Credential.from_certificate(str(bad_cert), str(bad_key)))
+            assert client.credential_holder.credential is cred
+            assert client.client is first_client
+            assert client.connection_details.ssl_context is first_ssl
+        finally:
+            await client.close_client()
+
     @pytest.mark.anyio
     async def test_set_credential_failure_does_not_change_state(self) -> None:
         cred = Credential.from_username_and_password('Administrator', 'password')
diff --git a/couchbase_analytics/cluster.py b/couchbase_analytics/cluster.py
index 3736f21..2283ce2 100644
--- a/couchbase_analytics/cluster.py
+++ b/couchbase_analytics/cluster.py
@@ -159,9 +159,9 @@ def start_query(self, statement: str, *args: object, **kwargs: object) -> Blocki
     def set_credential(self, credential: Credential) -> None:
         """Replace the credential used for subsequent HTTP requests.
 
-        Allows updating credentials (in particular, rotating a JWT) without restarting
-        the application.  The new credential must be of the same type as the current
-        credential.
+        Use this to rotate a JWT or client certificate without restarting the
+        application.  The new credential must be of the same type as the
+        current one.
 
         Args:
             credential: The new :class:`.Credential` to use.
diff --git a/couchbase_analytics/common/credential.py b/couchbase_analytics/common/credential.py
index 52d246a..0024b1d 100644
--- a/couchbase_analytics/common/credential.py
+++ b/couchbase_analytics/common/credential.py
@@ -17,9 +17,14 @@
 
 from __future__ import annotations
 
+import os
+import ssl
+import tempfile
 from base64 import b64encode
 from typing import TYPE_CHECKING, Callable, Dict, Literal, Optional
 
+from couchbase_analytics.common._core.utils import validate_path
+
 if TYPE_CHECKING:
     from httpx import Request
 
@@ -31,18 +36,39 @@ class Credential:
 
         Credential(username='Administrator', password='swordfish')
         Credential(jwt_token='eyJ...')
+        Credential(cert_path='/path/to/cert.pem', key_path='/path/to/key.pem')
+        Credential(cert_path='/path/to/client.p12', cert_password='secret')
         Credential.from_username_and_password('Administrator', 'swordfish')
         Credential.from_jwt('eyJ...')
+        Credential.from_certificate('/path/to/cert.pem', '/path/to/key.pem')
+        Credential.from_certificate('/path/to/client.p12', password='secret')
         Credential.from_callable(lambda: Credential.from_jwt(get_token()))
     """
 
-    __slots__ = ('_kind', '_header', '_password', '_token', '_username')
-
-    _kind: Literal['password', 'jwt']
-    _header: str
+    __slots__ = (
+        '_kind',
+        '_header',
+        '_password',
+        '_token',
+        '_username',
+        '_cert_path',
+        '_key_path',
+        '_cert_password',
+    )
+
+    # PEM and PKCS#12 share `_kind = 'cert'` because they're functionally
+    # identical from the SDK's point of view: TLS-handshake auth, https-only,
+    # client rebuild on rotation.  What differs is how cert + key are packaged
+    # on disk.  We tell the two apart by `_key_path`: set for PEM, None for
+    # PKCS#12.
+    _kind: Literal['password', 'jwt', 'cert']
+    _header: Optional[str]
     _password: Optional[str]
     _token: Optional[str]
     _username: Optional[str]
+    _cert_path: Optional[str]
+    _key_path: Optional[str]
+    _cert_password: Optional[str]
 
     def __init__(
         self,
@@ -50,10 +76,23 @@ def __init__(
         username: Optional[str] = None,
         password: Optional[str] = None,
         jwt_token: Optional[str] = None,
+        cert_path: Optional[str] = None,
+        key_path: Optional[str] = None,
+        cert_password: Optional[str] = None,
     ) -> None:
+        self._header = None
+        self._password = None
+        self._token = None
+        self._username = None
+        self._cert_path = None
+        self._key_path = None
+        self._cert_password = None
+
+        has_cert = cert_path is not None or key_path is not None or cert_password is not None
+
         if jwt_token is not None:
-            if username is not None or password is not None:
-                raise ValueError('Cannot provide both a JWT token and username/password.')
+            if username is not None or password is not None or has_cert:
+                raise ValueError('Cannot provide both a JWT token and username/password or certificate.')
             if not isinstance(jwt_token, str):
                 raise TypeError('The JWT token must be a str.')
             jwt_token = jwt_token.strip()
@@ -61,30 +100,63 @@ def __init__(
                 raise ValueError('The JWT token must not be empty.')
             self._kind = 'jwt'
             self._header = f'Bearer {jwt_token}'
-            self._password = None
             self._token = jwt_token
-            self._username = None
+        elif has_cert:
+            if username is not None or password is not None:
+                raise ValueError('Cannot provide both certificate and username/password.')
+            self._init_certificate(cert_path, key_path, cert_password)
         elif username is not None or password is not None:
-            if username is None:
-                raise ValueError('Must provide a username.')
-            if password is None:
-                raise ValueError('Must provide a password.')
-            if not isinstance(username, str):
-                raise TypeError('The username must be a str.')
-            if not isinstance(password, str):
-                raise TypeError('The password must be a str.')
-            self._kind = 'password'
-            self._header = 'Basic ' + b64encode(f'{username}:{password}'.encode()).decode('ascii')
-            self._password = password
-            self._token = None
-            self._username = username
+            self._init_password(username, password)
         else:
-            raise ValueError('Must provide either jwt_token or username and password.')
+            raise ValueError('Must provide one of: (username + password), jwt_token, or cert_path.')
+
+    def _init_password(self, username: Optional[str], password: Optional[str]) -> None:
+        if username is None:
+            raise ValueError('Must provide a username.')
+        if password is None:
+            raise ValueError('Must provide a password.')
+        if not isinstance(username, str):
+            raise TypeError('The username must be a str.')
+        if not isinstance(password, str):
+            raise TypeError('The password must be a str.')
+        self._kind = 'password'
+        self._header = 'Basic ' + b64encode(f'{username}:{password}'.encode()).decode('ascii')
+        self._password = password
+        self._username = username
+
+    def _init_certificate(
+        self,
+        cert_path: Optional[str],
+        key_path: Optional[str],
+        cert_password: Optional[str],
+    ) -> None:
+        if cert_path is None:
+            raise ValueError('Must provide a cert_path.')
+        if not isinstance(cert_path, str):
+            raise TypeError('The cert_path must be a str.')
+        if key_path is not None and not isinstance(key_path, str):
+            raise TypeError('The key_path must be a str or None.')
+        if cert_password is not None and not isinstance(cert_password, str):
+            raise TypeError('The cert_password must be a str or None.')
+
+        self._kind = 'cert'
+        self._cert_path = validate_path(cert_path)
+        self._key_path = validate_path(key_path) if key_path is not None else None
+        self._cert_password = cert_password
 
     def _asdict(self) -> Dict[str, str]:
         """**INTERNAL**"""
         if self._kind == 'jwt':
             return {'jwt_token': self._token or ''}
+        if self._kind == 'cert':
+            d: Dict[str, str] = {'cert_path': self._cert_path or ''}
+            if self._key_path is not None:
+                d['key_path'] = self._key_path
+            # Omit cert_password when None so reconstruction round-trips an
+            # unencrypted file as unencrypted, not as cert_password=''.
+            if self._cert_password is not None:
+                d['cert_password'] = self._cert_password
+            return d
         return {'username': self._username or '', 'password': self._password or ''}
 
     @classmethod
@@ -120,6 +192,55 @@ def from_jwt(cls, token: str) -> Credential:
             raise TypeError('The JWT token must be a str.')
         return cls(jwt_token=token)
 
+    @classmethod
+    def from_certificate(
+        cls,
+        cert_path: str,
+        key_path: Optional[str] = None,
+        *,
+        password: Optional[str] = None,
+    ) -> Credential:
+        """Create a :class:`.Credential` for client-certificate (mTLS) authentication.
+
+        Two file layouts are accepted:
+
+        * **PEM cert + PEM key.** Pass both paths::
+
+              Credential.from_certificate('/path/cert.pem', '/path/key.pem')
+
+          ``password`` decrypts the key file if it's encrypted.
+
+        * **PKCS#12 bundle** (``.p12`` / ``.pfx``). Pass only ``cert_path``::
+
+              Credential.from_certificate('/path/client.p12', password='secret')
+
+          Use ``password=None`` (the default) if the file is unencrypted.
+
+        Authentication happens during the TLS handshake; no HTTP
+        ``Authorization`` header is sent.  Cert credentials may only be used
+        with an ``https://`` endpoint.
+
+        .. note::
+            Rotating a cert credential via
+            :meth:`~couchbase_analytics.cluster.Cluster.set_credential` rebuilds
+            the HTTP client, since the cert is baked into the SSL context.
+
+        Args:
+            cert_path: Path to a PEM-encoded certificate (chain) or a PKCS#12
+                bundle.
+            key_path: Path to the PEM-encoded private key.  ``None`` if
+                ``cert_path`` is a PKCS#12 bundle that already contains the key.
+            password: Decryption password for the PEM key file or PKCS#12
+                bundle.  ``None`` if the file is unencrypted.
+        """
+        if not isinstance(cert_path, str):
+            raise TypeError('The cert_path must be a str.')
+        if key_path is not None and not isinstance(key_path, str):
+            raise TypeError('The key_path must be a str or None.')
+        if password is not None and not isinstance(password, str):
+            raise TypeError('The password must be a str or None.')
+        return cls(cert_path=cert_path, key_path=key_path, cert_password=password)
+
     @classmethod
     def from_callable(cls, callback: Callable[[], Credential]) -> Credential:
         """Create a :class:`.Credential` by invoking a callback.
@@ -142,15 +263,71 @@ def from_callable(cls, callback: Callable[[], Credential]) -> Credential:
         """
         return cls(**callback()._asdict())
 
-    # Internal contract for the transport layer.  Credential rotation is
-    # last-writer-wins; each request sees a fully-constructed credential.
-
     def _apply_to_request(self, request: Request) -> None:
-        request.headers['Authorization'] = self._header
+        if self._header is not None:
+            request.headers['Authorization'] = self._header
+
+    def _apply_to_ssl_context(self, ctx: ssl.SSLContext) -> None:
+        # No-op for password/JWT credentials.
+        if self._kind != 'cert':
+            return
+        assert self._cert_path is not None  # for mypy; set in _init_certificate
+        if self._key_path is None:
+            # PKCS#12 bundle: cert_path holds the .p12 file.
+            self._load_pkcs12_into_context(ctx)
+            return
+        # PEM cert + PEM key.  password is forwarded to OpenSSL so it can
+        # decrypt the key file if it's encrypted; ignored for plain keys.
+        ctx.load_cert_chain(
+            certfile=self._cert_path,
+            keyfile=self._key_path,
+            password=self._cert_password,
+        )
+
+    def _load_pkcs12_into_context(self, ctx: ssl.SSLContext) -> None:
+        from cryptography.hazmat.primitives.serialization import (
+            Encoding,
+            NoEncryption,
+            PrivateFormat,
+            pkcs12,
+        )
+
+        assert self._cert_path is not None  # for mypy; set in _init_certificate
+        with open(self._cert_path, 'rb') as f:
+            data = f.read()
+        password_bytes = self._cert_password.encode('utf-8') if self._cert_password is not None else None
+        try:
+            key, cert, additional_certs = pkcs12.load_key_and_certificates(data, password_bytes)
+        except ValueError as e:
+            # cryptography raises ValueError for both wrong password and malformed
+            # input.  Wrap with the path so the cluster log identifies which file.
+            raise ValueError(f'Failed to load PKCS#12 file at {self._cert_path}: {e}') from e
+        if key is None or cert is None:
+            raise ValueError(f'PKCS#12 file at {self._cert_path} does not contain a private key + certificate pair.')
+
+        # ssl.SSLContext.load_cert_chain only accepts file paths, so we write
+        # the chain plus the decrypted key into a single PEM tempfile, hand
+        # the path to OpenSSL, and unlink right after.  The unencrypted key is
+        # on disk only between the write and the unlink in finally.
+        tmp_fd, tmp_path = tempfile.mkstemp(suffix='.pem', prefix='pycbac-pkcs12-')
+        try:
+            with os.fdopen(tmp_fd, 'wb') as tmp:
+                tmp.write(cert.public_bytes(Encoding.PEM))
+                for ca in additional_certs or []:
+                    tmp.write(ca.public_bytes(Encoding.PEM))
+                tmp.write(key.private_bytes(Encoding.PEM, PrivateFormat.PKCS8, NoEncryption()))
+            ctx.load_cert_chain(certfile=tmp_path)
+        finally:
+            try:
+                os.unlink(tmp_path)
+            except OSError:
+                pass
 
     def _check_endpoint_compatible(self, is_secure: bool) -> None:
         if self._kind == 'jwt' and not is_secure:
             raise ValueError('JWT credentials require a secure (https) connection.')
+        if self._kind == 'cert' and not is_secure:
+            raise ValueError('Client-certificate credentials require a secure (https) connection.')
 
     def _check_replaceable_with(self, new_credential: Credential) -> None:
         if self._kind != new_credential._kind:
@@ -162,6 +339,11 @@ def _check_replaceable_with(self, new_credential: Credential) -> None:
     def __repr__(self) -> str:
         if self._kind == 'password':
             return f'Credential(username={self._username!r}, password=****)'
+        if self._kind == 'cert':
+            pw = ', cert_password=****' if self._cert_password is not None else ''
+            if self._key_path is None:
+                return f'Credential(cert_path={self._cert_path!r}{pw})'
+            return f'Credential(cert_path={self._cert_path!r}, key_path={self._key_path!r}{pw})'
         return 'Credential(jwt_token=****)'
 
 
diff --git a/couchbase_analytics/protocol/_core/client_adapter.py b/couchbase_analytics/protocol/_core/client_adapter.py
index 143a439..05ee939 100644
--- a/couchbase_analytics/protocol/_core/client_adapter.py
+++ b/couchbase_analytics/protocol/_core/client_adapter.py
@@ -140,25 +140,26 @@ def close_client(self) -> None:
             self._client.close()
             self.log_message('Cluster HTTP client closed', LogLevel.INFO)
 
+    def _build_client(self) -> Client:
+        auth = DynamicCredentialAuth(self._credential_holder)
+        if self._conn_details.is_secure():
+            if self._conn_details.ssl_context is None:
+                raise ValueError('SSL context is required for secure connections.')
+            transport = None
+            if self._http_transport_cls is not None:
+                transport = self._http_transport_cls(verify=self._conn_details.ssl_context)
+            return Client(verify=self._conn_details.ssl_context, auth=auth, transport=transport)
+        transport = None
+        if self._http_transport_cls is not None:
+            transport = self._http_transport_cls()
+        return Client(auth=auth, transport=transport)
+
     def create_client(self) -> None:
         """
         **INTERNAL**
         """
         if not hasattr(self, '_client'):
-            auth = DynamicCredentialAuth(self._credential_holder)
-            if self._conn_details.is_secure():
-                if self._conn_details.ssl_context is None:
-                    raise ValueError('SSL context is required for secure connections.')
-                transport = None
-                if self._http_transport_cls is not None:
-                    transport = self._http_transport_cls(verify=self._conn_details.ssl_context)
-                self._client = Client(verify=self._conn_details.ssl_context, auth=auth, transport=transport)
-            else:
-                transport = None
-                if self._http_transport_cls is not None:
-                    transport = self._http_transport_cls()
-                self._client = Client(auth=auth, transport=transport)
-
+            self._client = self._build_client()
             self.log_message(
                 (f'Cluster HTTP client created: connection_details={self._conn_details.get_init_details()}'),
                 LogLevel.INFO,
@@ -197,8 +198,31 @@ def reset_client(self) -> None:
             del self._client
 
     def update_credential(self, new_credential: Credential) -> None:
-        self._credential_holder.replace(new_credential)
-        # Future mTLS: rebuild SSL context + httpx Client here.
+        if new_credential._kind == 'cert':
+            # httpx pins the SSL context to the Client at construction, and
+            # the cert chain is part of that context.  So a cert rotation
+            # needs a fresh Client.  Build it before closing the old one,
+            # otherwise a concurrent send_request can see self._client gone.
+            self._credential_holder.credential._check_replaceable_with(new_credential)
+            old_client = getattr(self, '_client', None)
+            old_ssl_context = self._conn_details.ssl_context
+            old_sni_hostname = self._conn_details.sni_hostname
+            try:
+                self._conn_details.validate_security_options(new_credential)
+                # If the cluster hasn't issued a request yet there's no Client
+                # to swap; we still refreshed the SSL context above.
+                new_client = self._build_client() if old_client is not None else None
+            except Exception:
+                self._conn_details.ssl_context = old_ssl_context
+                self._conn_details.sni_hostname = old_sni_hostname
+                raise
+            if new_client is not None:
+                self._client = new_client
+            self._credential_holder.replace(new_credential)
+            if old_client is not None:
+                old_client.close()
+        else:
+            self._credential_holder.replace(new_credential)
         self.log_message('Cluster HTTP credential updated', LogLevel.INFO)
 
 
diff --git a/couchbase_analytics/protocol/connection.py b/couchbase_analytics/protocol/connection.py
index dc4255d..f573ce0 100644
--- a/couchbase_analytics/protocol/connection.py
+++ b/couchbase_analytics/protocol/connection.py
@@ -254,6 +254,11 @@ def validate_security_options(self, credential: Credential) -> None:  # noqa: C9
             self.ssl_context.check_hostname = True
             self.ssl_context.verify_mode = ssl.CERT_REQUIRED
 
+        # Cert credentials attach their chain here; no-op for password/JWT.
+        # Runs after verify_mode is set so OpenSSL has a fully configured
+        # context when load_cert_chain fires.
+        credential._apply_to_ssl_context(self.ssl_context)
+
     @classmethod
     def create(
         cls,
diff --git a/couchbase_analytics/tests/credential_t.py b/couchbase_analytics/tests/credential_t.py
index 998a265..001e454 100644
--- a/couchbase_analytics/tests/credential_t.py
+++ b/couchbase_analytics/tests/credential_t.py
@@ -16,8 +16,12 @@
 
 from __future__ import annotations
 
+import pathlib
+import shutil
+import ssl
+import subprocess
 from base64 import b64encode
-from typing import Any
+from typing import Any, Tuple
 
 import pytest
 from httpx import Request
@@ -27,6 +31,70 @@
 from couchbase_analytics.protocol._core.client_adapter import _ClientAdapter
 
 _SAMPLE_JWT = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.payload.signature'
+_PKCS12_PASSWORD = 'pycbac-test-pw'
+
+
+@pytest.fixture(scope='session')
+def pkcs12_path(cert_paths: Tuple[str, str], tmp_path_factory: pytest.TempPathFactory) -> str:
+    """Bundle the session cert + key into a password-encrypted PKCS#12 file."""
+    if shutil.which('openssl') is None:
+        pytest.skip('openssl CLI not available; skipping PKCS#12 tests')
+    cert, key = cert_paths
+    tmp = tmp_path_factory.mktemp('mtls-pkcs12')
+    p12 = tmp / 'client.p12'
+    subprocess.run(
+        [
+            'openssl',
+            'pkcs12',
+            '-export',
+            '-out',
+            str(p12),
+            '-inkey',
+            key,
+            '-in',
+            cert,
+            '-passout',
+            f'pass:{_PKCS12_PASSWORD}',
+        ],
+        check=True,
+        capture_output=True,
+    )
+    return str(p12)
+
+
+@pytest.fixture(scope='session')
+def cert_paths(tmp_path_factory: pytest.TempPathFactory) -> Tuple[str, str]:
+    """Self-signed PEM cert + key for mTLS unit tests.
+
+    The tests don't need a real CA, just PEM that ``ssl.SSLContext.load_cert_chain``
+    can parse.  Skipped if the ``openssl`` CLI isn't on PATH.
+    """
+    if shutil.which('openssl') is None:
+        pytest.skip('openssl CLI not available; skipping mTLS cert tests')
+    tmp = tmp_path_factory.mktemp('mtls-certs')
+    cert = tmp / 'client.crt'
+    key = tmp / 'client.key'
+    subprocess.run(
+        [
+            'openssl',
+            'req',
+            '-x509',
+            '-newkey',
+            'rsa:2048',
+            '-keyout',
+            str(key),
+            '-out',
+            str(cert),
+            '-days',
+            '1',
+            '-nodes',
+            '-subj',
+            '/CN=pycbac-test-client',
+        ],
+        check=True,
+        capture_output=True,
+    )
+    return str(cert), str(key)
 
 
 def _authorization_header(client: Any) -> str:
@@ -35,7 +103,7 @@ def _authorization_header(client: Any) -> str:
     req = Request('POST', request_url)
     flow = auth.auth_flow(req)
     dispatched = next(flow)
-    return dispatched.headers['Authorization']
+    return dispatched.headers.get('Authorization', '')
 
 
 class CredentialTestSuite:
@@ -45,7 +113,9 @@ class CredentialTestSuite:
         'test_jwt_credential_rejects_non_string',
         'test_credential_direct_construction_with_jwt',
         'test_credential_direct_construction_with_password',
+        'test_credential_direct_construction_with_certificate',
         'test_credential_rejects_unknown_kwargs',
+        'test_credential_rejects_mixed_kwargs',
         'test_credential_hides_internal_details',
         'test_credential_from_callable_with_jwt',
         'test_jwt_credential_repr_redacts_token',
@@ -53,11 +123,29 @@ class CredentialTestSuite:
         'test_jwt_credential_accepts_https_endpoint',
         'test_password_credential_http_authorization_header',
         'test_password_credential_repr_redacts_password',
+        'test_certificate_credential_creation',
+        'test_certificate_credential_rejects_nonexistent_path',
+        'test_certificate_credential_rejects_non_string_cert_path',
+        'test_certificate_credential_rejects_non_string_key_path',
+        'test_certificate_credential_repr',
+        'test_certificate_credential_rejects_http_endpoint',
+        'test_certificate_credential_accepts_https_endpoint',
+        'test_pkcs12_credential_creation',
+        'test_pkcs12_credential_repr_redacts_password',
+        'test_pkcs12_wrong_password_fails',
+        'test_pkcs12_credential_accepts_https_endpoint',
+        'test_pkcs12_credential_rejects_http_endpoint',
+        'test_set_credential_pem_to_pkcs12_rotation',
         'test_dynamic_auth_sets_header_from_current_credential',
         'test_dynamic_auth_picks_up_rotated_credential',
+        'test_dynamic_auth_omits_header_for_certificate',
         'test_set_credential_same_type_updates_state',
         'test_set_credential_password_to_jwt_fails',
         'test_set_credential_jwt_to_password_fails',
+        'test_set_credential_password_to_certificate_fails',
+        'test_set_credential_certificate_to_jwt_fails',
+        'test_set_credential_certificate_rotation_rebuilds_client',
+        'test_set_credential_certificate_rotation_failure_does_not_change_state',
         'test_set_credential_failure_does_not_change_state',
     ]
 
@@ -98,15 +186,31 @@ def test_credential_direct_construction_with_password(self) -> None:
         expected = 'Basic ' + b64encode(b'Administrator:password').decode('ascii')
         assert _authorization_header(client) == expected
 
+    def test_credential_direct_construction_with_certificate(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential(cert_path=cert_path, key_path=key_path)
+        client = _ClientAdapter('https://localhost', cred)
+        assert _authorization_header(client) == ''
+
     def test_credential_rejects_unknown_kwargs(self) -> None:
         with pytest.raises(TypeError, match='unexpected keyword argument'):
             Credential(usernme='Administrator', password='password')  # type: ignore[call-arg]
         with pytest.raises(TypeError, match='unexpected keyword argument'):
             Credential(jwt_token=_SAMPLE_JWT, extra='ignored')  # type: ignore[call-arg]
 
+    def test_credential_rejects_mixed_kwargs(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        with pytest.raises(ValueError, match='Cannot provide both'):
+            Credential(jwt_token=_SAMPLE_JWT, cert_path=cert_path, key_path=key_path)
+
     def test_credential_hides_internal_details(self) -> None:
         public_attrs = {name for name in dir(Credential.from_jwt(_SAMPLE_JWT)) if not name.startswith('_')}
-        assert public_attrs == {'from_callable', 'from_jwt', 'from_username_and_password'}
+        assert public_attrs == {
+            'from_callable',
+            'from_certificate',
+            'from_jwt',
+            'from_username_and_password',
+        }
 
     def test_credential_from_callable_with_jwt(self) -> None:
         cred = Credential.from_callable(lambda: Credential.from_jwt(_SAMPLE_JWT))
@@ -140,6 +244,92 @@ def test_password_credential_repr_redacts_password(self) -> None:
         assert '****' in rendered
         assert 'Administrator' in rendered
 
+    def test_certificate_credential_creation(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        assert cred._kind == 'cert'
+
+    def test_certificate_credential_rejects_nonexistent_path(self, tmp_path: pathlib.Path) -> None:
+        existing = tmp_path / 'exists'
+        existing.write_text('placeholder')
+        missing = tmp_path / 'missing'
+        with pytest.raises(FileNotFoundError):
+            Credential.from_certificate(str(missing), str(existing))
+        with pytest.raises(FileNotFoundError):
+            Credential.from_certificate(str(existing), str(missing))
+
+    @pytest.mark.parametrize('bad_value', [12345, None])
+    def test_certificate_credential_rejects_non_string_cert_path(self, bad_value: object) -> None:
+        with pytest.raises((TypeError, ValueError)):
+            Credential.from_certificate(bad_value, '/tmp/key.pem')  # type: ignore[arg-type]
+
+    def test_certificate_credential_rejects_non_string_key_path(self) -> None:
+        # key_path=None is now a valid PKCS#12 signature, so only non-str/non-None
+        # values are rejected.
+        with pytest.raises(TypeError):
+            Credential.from_certificate('/tmp/cert.pem', 12345)  # type: ignore[arg-type]
+
+    def test_certificate_credential_repr(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        rendered = repr(cred)
+        assert 'Credential(cert_path=' in rendered
+        assert 'key_path=' in rendered
+
+    def test_certificate_credential_rejects_http_endpoint(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        with pytest.raises(ValueError, match='require a secure'):
+            _ClientAdapter('http://localhost', Credential.from_certificate(cert_path, key_path))
+
+    def test_certificate_credential_accepts_https_endpoint(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        client = _ClientAdapter('https://localhost', Credential.from_certificate(cert_path, key_path))
+        assert client.connection_details.ssl_context is not None
+
+    def test_pkcs12_credential_creation(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        # PKCS#12 still maps to _kind == 'cert'; only the storage shape differs.
+        assert cred._kind == 'cert'
+        assert cred._key_path is None
+
+    def test_pkcs12_credential_repr_redacts_password(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        rendered = repr(cred)
+        assert _PKCS12_PASSWORD not in rendered
+        assert 'cert_password=****' in rendered
+
+    def test_pkcs12_wrong_password_fails(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password='wrong-password')
+        # The decode happens lazily when the SSL context is built, i.e. inside
+        # _ClientAdapter init via validate_security_options.
+        with pytest.raises(ValueError, match='Failed to load PKCS#12 file'):
+            _ClientAdapter('https://localhost', cred)
+
+    def test_pkcs12_credential_accepts_https_endpoint(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        client = _ClientAdapter('https://localhost', cred)
+        assert client.connection_details.ssl_context is not None
+
+    def test_pkcs12_credential_rejects_http_endpoint(self, pkcs12_path: str) -> None:
+        cred = Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD)
+        with pytest.raises(ValueError, match='require a secure'):
+            _ClientAdapter('http://localhost', cred)
+
+    def test_set_credential_pem_to_pkcs12_rotation(self, cert_paths: Tuple[str, str], pkcs12_path: str) -> None:
+        # PEM and PKCS#12 are both _kind == 'cert', so cross-format rotation is
+        # allowed.  Both forms should rebuild the client + SSL context.
+        cert_path, key_path = cert_paths
+        client = _ClientAdapter('https://localhost', Credential.from_certificate(cert_path, key_path))
+        client.create_client()
+        first_client = client.client
+        first_ssl = client.connection_details.ssl_context
+
+        client.update_credential(Credential.from_certificate(pkcs12_path, password=_PKCS12_PASSWORD))
+
+        assert client.client is not first_client
+        assert client.connection_details.ssl_context is not first_ssl
+        assert client.credential_holder.credential._key_path is None  # now PKCS#12-shaped
+
     def test_dynamic_auth_sets_header_from_current_credential(self) -> None:
         cred = Credential.from_jwt(_SAMPLE_JWT)
         client = _ClientAdapter('https://localhost', cred)
@@ -164,6 +354,17 @@ def test_dynamic_auth_picks_up_rotated_credential(self) -> None:
         dispatched = next(flow)
         assert dispatched.headers['Authorization'] == f'Bearer {new_token}'
 
+    def test_dynamic_auth_omits_header_for_certificate(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _ClientAdapter('https://localhost', cred)
+        auth = DynamicCredentialAuth(client.credential_holder)
+
+        req = Request('POST', 'https://localhost/api/v1/request')
+        flow = auth.auth_flow(req)
+        dispatched = next(flow)
+        assert 'Authorization' not in dispatched.headers
+
     def test_set_credential_same_type_updates_state(self) -> None:
         cred = Credential.from_jwt(_SAMPLE_JWT)
         client = _ClientAdapter('https://localhost', cred)
@@ -186,6 +387,55 @@ def test_set_credential_jwt_to_password_fails(self) -> None:
         with pytest.raises(TypeError, match='Cannot switch credential type'):
             client.update_credential(Credential.from_username_and_password('Administrator', 'password'))
 
+    def test_set_credential_password_to_certificate_fails(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_username_and_password('Administrator', 'password')
+        client = _ClientAdapter('http://localhost', cred)
+        with pytest.raises(TypeError, match='Cannot switch credential type'):
+            client.update_credential(Credential.from_certificate(cert_path, key_path))
+
+    def test_set_credential_certificate_to_jwt_fails(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _ClientAdapter('https://localhost', cred)
+        client.create_client()
+        with pytest.raises(TypeError, match='Cannot switch credential type'):
+            client.update_credential(Credential.from_jwt(_SAMPLE_JWT))
+
+    def test_set_credential_certificate_rotation_rebuilds_client(self, cert_paths: Tuple[str, str]) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _ClientAdapter('https://localhost', cred)
+        client.create_client()
+        first_client = client.client
+        first_ssl = client.connection_details.ssl_context
+
+        client.update_credential(Credential.from_certificate(cert_path, key_path))
+
+        assert client.client is not first_client
+        assert client.connection_details.ssl_context is not first_ssl
+
+    def test_set_credential_certificate_rotation_failure_does_not_change_state(
+        self, cert_paths: Tuple[str, str], tmp_path: pathlib.Path
+    ) -> None:
+        cert_path, key_path = cert_paths
+        cred = Credential.from_certificate(cert_path, key_path)
+        client = _ClientAdapter('https://localhost', cred)
+        client.create_client()
+        first_client = client.client
+        first_ssl = client.connection_details.ssl_context
+        bad_cert = tmp_path / 'bad.crt'
+        bad_key = tmp_path / 'bad.key'
+        bad_cert.write_text('not a cert')
+        bad_key.write_text('not a key')
+
+        with pytest.raises(ssl.SSLError):
+            client.update_credential(Credential.from_certificate(str(bad_cert), str(bad_key)))
+
+        assert client.credential_holder.credential is cred
+        assert client.client is first_client
+        assert client.connection_details.ssl_context is first_ssl
+
     def test_set_credential_failure_does_not_change_state(self) -> None:
         cred = Credential.from_username_and_password('Administrator', 'password')
         client = _ClientAdapter('http://localhost', cred)
diff --git a/docs/acouchbase_analytics_api/credential.rst b/docs/acouchbase_analytics_api/credential.rst
index b96a93d..7277bd4 100644
--- a/docs/acouchbase_analytics_api/credential.rst
+++ b/docs/acouchbase_analytics_api/credential.rst
@@ -13,5 +13,7 @@ Credential
         :no-index:
     .. automethod:: from_jwt
         :no-index:
+    .. automethod:: from_certificate
+        :no-index:
     .. automethod:: from_callable
         :no-index:
diff --git a/docs/couchbase_analytics_api/credential.rst b/docs/couchbase_analytics_api/credential.rst
index 80b8007..caacc92 100644
--- a/docs/couchbase_analytics_api/credential.rst
+++ b/docs/couchbase_analytics_api/credential.rst
@@ -10,4 +10,5 @@ Credential
 
     .. automethod:: from_username_and_password
     .. automethod:: from_jwt
+    .. automethod:: from_certificate
     .. automethod:: from_callable
diff --git a/pyproject.toml b/pyproject.toml
index 3e6ff08..6b865c9 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -10,6 +10,7 @@ name = "couchbase-analytics"
 version = "1.0.0.dev1"
 dependencies = [
     "anyio~=4.9.0",
+    "cryptography>=41.0",
     "httpx~=0.28.1",
     "ijson~=3.4.0",
     "sniffio~=1.3.1",
diff --git a/requirements.in b/requirements.in
index 43c2e1d..a901ef3 100644
--- a/requirements.in
+++ b/requirements.in
@@ -2,5 +2,6 @@ anyio~=4.9.0
 sniffio~=1.3.1
 httpx~=0.28.1
 ijson~=3.4.0
+cryptography>=41.0
 # Typing support
 typing-extensions~=4.11; python_version<"3.11.0"
diff --git a/requirements.txt b/requirements.txt
index a97f0ed..91ea234 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,6 +8,12 @@ certifi==2025.6.15
     # via
     #   httpcore
     #   httpx
+cffi==2.0.0 ; platform_python_implementation != 'PyPy'
+    # via cryptography
+cryptography==47.0.0 ; python_full_version <= '3.9'
+    # via -r requirements.in
+cryptography==48.0.0 ; python_full_version > '3.9'
+    # via -r requirements.in
 exceptiongroup==1.3.0 ; python_full_version < '3.11'
     # via anyio
 h11==0.16.0
@@ -22,6 +28,10 @@ idna==3.10
     #   httpx
 ijson==3.4.0
     # via -r requirements.in
+pycparser==2.23 ; python_full_version < '3.10' and implementation_name != 'PyPy' and platform_python_implementation != 'PyPy'
+    # via cffi
+pycparser==3.0 ; python_full_version >= '3.10' and implementation_name != 'PyPy' and platform_python_implementation != 'PyPy'
+    # via cffi
 sniffio==1.3.1
     # via
     #   -r requirements.in
@@ -30,4 +40,5 @@ typing-extensions==4.14.0 ; python_full_version < '3.13'
     # via
     #   -r requirements.in
     #   anyio
+    #   cryptography
     #   exceptiongroup
diff --git a/uv.lock b/uv.lock
index d9612a3..3614743 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1,11 +1,12 @@
 version = 1
-revision = 2
+revision = 3
 requires-python = ">=3.9"
 resolution-markers = [
     "python_full_version >= '3.13'",
     "python_full_version >= '3.11' and python_full_version < '3.13'",
     "python_full_version == '3.10.*'",
-    "python_full_version < '3.10'",
+    "python_full_version > '3.9' and python_full_version < '3.10'",
+    "python_full_version <= '3.9'",
 ]
 
 [[package]]
@@ -259,6 +260,101 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/4f/52/34c6cf5bb9285074dc3531c437b3919e825d976fde097a7a73f79e726d03/certifi-2025.7.14-py3-none-any.whl", hash = "sha256:6b31f564a415d79ee77df69d757bb49a5bb53bd9f756cbbe24394ffd6fc1f4b2", size = 162722, upload-time = "2025-07-14T03:29:26.863Z" },
 ]
 
+[[package]]
+name = "cffi"
+version = "2.0.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "pycparser", version = "2.23", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.10' and implementation_name != 'PyPy'" },
+    { name = "pycparser", version = "3.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version >= '3.10' and implementation_name != 'PyPy'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/eb/56/b1ba7935a17738ae8453301356628e8147c79dbb825bcbc73dc7401f9846/cffi-2.0.0.tar.gz", hash = "sha256:44d1b5909021139fe36001ae048dbdde8214afa20200eda0f64c068cac5d5529", size = 523588, upload-time = "2025-09-08T23:24:04.541Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/93/d7/516d984057745a6cd96575eea814fe1edd6646ee6efd552fb7b0921dec83/cffi-2.0.0-cp310-cp310-macosx_10_13_x86_64.whl", hash = "sha256:0cf2d91ecc3fcc0625c2c530fe004f82c110405f101548512cce44322fa8ac44", size = 184283, upload-time = "2025-09-08T23:22:08.01Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/84/ad6a0b408daa859246f57c03efd28e5dd1b33c21737c2db84cae8c237aa5/cffi-2.0.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:f73b96c41e3b2adedc34a7356e64c8eb96e03a3782b535e043a986276ce12a49", size = 180504, upload-time = "2025-09-08T23:22:10.637Z" },
+    { url = "https://files.pythonhosted.org/packages/50/bd/b1a6362b80628111e6653c961f987faa55262b4002fcec42308cad1db680/cffi-2.0.0-cp310-cp310-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl", hash = "sha256:53f77cbe57044e88bbd5ed26ac1d0514d2acf0591dd6bb02a3ae37f76811b80c", size = 208811, upload-time = "2025-09-08T23:22:12.267Z" },
+    { url = "https://files.pythonhosted.org/packages/4f/27/6933a8b2562d7bd1fb595074cf99cc81fc3789f6a6c05cdabb46284a3188/cffi-2.0.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:3e837e369566884707ddaf85fc1744b47575005c0a229de3327f8f9a20f4efeb", size = 216402, upload-time = "2025-09-08T23:22:13.455Z" },
+    { url = "https://files.pythonhosted.org/packages/05/eb/b86f2a2645b62adcfff53b0dd97e8dfafb5c8aa864bd0d9a2c2049a0d551/cffi-2.0.0-cp310-cp310-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:5eda85d6d1879e692d546a078b44251cdd08dd1cfb98dfb77b670c97cee49ea0", size = 203217, upload-time = "2025-09-08T23:22:14.596Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/e0/6cbe77a53acf5acc7c08cc186c9928864bd7c005f9efd0d126884858a5fe/cffi-2.0.0-cp310-cp310-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:9332088d75dc3241c702d852d4671613136d90fa6881da7d770a483fd05248b4", size = 203079, upload-time = "2025-09-08T23:22:15.769Z" },
+    { url = "https://files.pythonhosted.org/packages/98/29/9b366e70e243eb3d14a5cb488dfd3a0b6b2f1fb001a203f653b93ccfac88/cffi-2.0.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:fc7de24befaeae77ba923797c7c87834c73648a05a4bde34b3b7e5588973a453", size = 216475, upload-time = "2025-09-08T23:22:17.427Z" },
+    { url = "https://files.pythonhosted.org/packages/21/7a/13b24e70d2f90a322f2900c5d8e1f14fa7e2a6b3332b7309ba7b2ba51a5a/cffi-2.0.0-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:cf364028c016c03078a23b503f02058f1814320a56ad535686f90565636a9495", size = 218829, upload-time = "2025-09-08T23:22:19.069Z" },
+    { url = "https://files.pythonhosted.org/packages/60/99/c9dc110974c59cc981b1f5b66e1d8af8af764e00f0293266824d9c4254bc/cffi-2.0.0-cp310-cp310-musllinux_1_2_i686.whl", hash = "sha256:e11e82b744887154b182fd3e7e8512418446501191994dbf9c9fc1f32cc8efd5", size = 211211, upload-time = "2025-09-08T23:22:20.588Z" },
+    { url = "https://files.pythonhosted.org/packages/49/72/ff2d12dbf21aca1b32a40ed792ee6b40f6dc3a9cf1644bd7ef6e95e0ac5e/cffi-2.0.0-cp310-cp310-musllinux_1_2_x86_64.whl", hash = "sha256:8ea985900c5c95ce9db1745f7933eeef5d314f0565b27625d9a10ec9881e1bfb", size = 218036, upload-time = "2025-09-08T23:22:22.143Z" },
+    { url = "https://files.pythonhosted.org/packages/e2/cc/027d7fb82e58c48ea717149b03bcadcbdc293553edb283af792bd4bcbb3f/cffi-2.0.0-cp310-cp310-win32.whl", hash = "sha256:1f72fb8906754ac8a2cc3f9f5aaa298070652a0ffae577e0ea9bd480dc3c931a", size = 172184, upload-time = "2025-09-08T23:22:23.328Z" },
+    { url = "https://files.pythonhosted.org/packages/33/fa/072dd15ae27fbb4e06b437eb6e944e75b068deb09e2a2826039e49ee2045/cffi-2.0.0-cp310-cp310-win_amd64.whl", hash = "sha256:b18a3ed7d5b3bd8d9ef7a8cb226502c6bf8308df1525e1cc676c3680e7176739", size = 182790, upload-time = "2025-09-08T23:22:24.752Z" },
+    { url = "https://files.pythonhosted.org/packages/12/4a/3dfd5f7850cbf0d06dc84ba9aa00db766b52ca38d8b86e3a38314d52498c/cffi-2.0.0-cp311-cp311-macosx_10_13_x86_64.whl", hash = "sha256:b4c854ef3adc177950a8dfc81a86f5115d2abd545751a304c5bcf2c2c7283cfe", size = 184344, upload-time = "2025-09-08T23:22:26.456Z" },
+    { url = "https://files.pythonhosted.org/packages/4f/8b/f0e4c441227ba756aafbe78f117485b25bb26b1c059d01f137fa6d14896b/cffi-2.0.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:2de9a304e27f7596cd03d16f1b7c72219bd944e99cc52b84d0145aefb07cbd3c", size = 180560, upload-time = "2025-09-08T23:22:28.197Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/b7/1200d354378ef52ec227395d95c2576330fd22a869f7a70e88e1447eb234/cffi-2.0.0-cp311-cp311-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl", hash = "sha256:baf5215e0ab74c16e2dd324e8ec067ef59e41125d3eade2b863d294fd5035c92", size = 209613, upload-time = "2025-09-08T23:22:29.475Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/56/6033f5e86e8cc9bb629f0077ba71679508bdf54a9a5e112a3c0b91870332/cffi-2.0.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:730cacb21e1bdff3ce90babf007d0a0917cc3e6492f336c2f0134101e0944f93", size = 216476, upload-time = "2025-09-08T23:22:31.063Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/7f/55fecd70f7ece178db2f26128ec41430d8720f2d12ca97bf8f0a628207d5/cffi-2.0.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:6824f87845e3396029f3820c206e459ccc91760e8fa24422f8b0c3d1731cbec5", size = 203374, upload-time = "2025-09-08T23:22:32.507Z" },
+    { url = "https://files.pythonhosted.org/packages/84/ef/a7b77c8bdc0f77adc3b46888f1ad54be8f3b7821697a7b89126e829e676a/cffi-2.0.0-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:9de40a7b0323d889cf8d23d1ef214f565ab154443c42737dfe52ff82cf857664", size = 202597, upload-time = "2025-09-08T23:22:34.132Z" },
+    { url = "https://files.pythonhosted.org/packages/d7/91/500d892b2bf36529a75b77958edfcd5ad8e2ce4064ce2ecfeab2125d72d1/cffi-2.0.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:8941aaadaf67246224cee8c3803777eed332a19d909b47e29c9842ef1e79ac26", size = 215574, upload-time = "2025-09-08T23:22:35.443Z" },
+    { url = "https://files.pythonhosted.org/packages/44/64/58f6255b62b101093d5df22dcb752596066c7e89dd725e0afaed242a61be/cffi-2.0.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:a05d0c237b3349096d3981b727493e22147f934b20f6f125a3eba8f994bec4a9", size = 218971, upload-time = "2025-09-08T23:22:36.805Z" },
+    { url = "https://files.pythonhosted.org/packages/ab/49/fa72cebe2fd8a55fbe14956f9970fe8eb1ac59e5df042f603ef7c8ba0adc/cffi-2.0.0-cp311-cp311-musllinux_1_2_i686.whl", hash = "sha256:94698a9c5f91f9d138526b48fe26a199609544591f859c870d477351dc7b2414", size = 211972, upload-time = "2025-09-08T23:22:38.436Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/28/dd0967a76aab36731b6ebfe64dec4e981aff7e0608f60c2d46b46982607d/cffi-2.0.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:5fed36fccc0612a53f1d4d9a816b50a36702c28a2aa880cb8a122b3466638743", size = 217078, upload-time = "2025-09-08T23:22:39.776Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/c0/015b25184413d7ab0a410775fdb4a50fca20f5589b5dab1dbbfa3baad8ce/cffi-2.0.0-cp311-cp311-win32.whl", hash = "sha256:c649e3a33450ec82378822b3dad03cc228b8f5963c0c12fc3b1e0ab940f768a5", size = 172076, upload-time = "2025-09-08T23:22:40.95Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/8f/dc5531155e7070361eb1b7e4c1a9d896d0cb21c49f807a6c03fd63fc877e/cffi-2.0.0-cp311-cp311-win_amd64.whl", hash = "sha256:66f011380d0e49ed280c789fbd08ff0d40968ee7b665575489afa95c98196ab5", size = 182820, upload-time = "2025-09-08T23:22:42.463Z" },
+    { url = "https://files.pythonhosted.org/packages/95/5c/1b493356429f9aecfd56bc171285a4c4ac8697f76e9bbbbb105e537853a1/cffi-2.0.0-cp311-cp311-win_arm64.whl", hash = "sha256:c6638687455baf640e37344fe26d37c404db8b80d037c3d29f58fe8d1c3b194d", size = 177635, upload-time = "2025-09-08T23:22:43.623Z" },
+    { url = "https://files.pythonhosted.org/packages/ea/47/4f61023ea636104d4f16ab488e268b93008c3d0bb76893b1b31db1f96802/cffi-2.0.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:6d02d6655b0e54f54c4ef0b94eb6be0607b70853c45ce98bd278dc7de718be5d", size = 185271, upload-time = "2025-09-08T23:22:44.795Z" },
+    { url = "https://files.pythonhosted.org/packages/df/a2/781b623f57358e360d62cdd7a8c681f074a71d445418a776eef0aadb4ab4/cffi-2.0.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:8eca2a813c1cb7ad4fb74d368c2ffbbb4789d377ee5bb8df98373c2cc0dee76c", size = 181048, upload-time = "2025-09-08T23:22:45.938Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/df/a4f0fbd47331ceeba3d37c2e51e9dfc9722498becbeec2bd8bc856c9538a/cffi-2.0.0-cp312-cp312-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl", hash = "sha256:21d1152871b019407d8ac3985f6775c079416c282e431a4da6afe7aefd2bccbe", size = 212529, upload-time = "2025-09-08T23:22:47.349Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/72/12b5f8d3865bf0f87cf1404d8c374e7487dcf097a1c91c436e72e6badd83/cffi-2.0.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:b21e08af67b8a103c71a250401c78d5e0893beff75e28c53c98f4de42f774062", size = 220097, upload-time = "2025-09-08T23:22:48.677Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/95/7a135d52a50dfa7c882ab0ac17e8dc11cec9d55d2c18dda414c051c5e69e/cffi-2.0.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:1e3a615586f05fc4065a8b22b8152f0c1b00cdbc60596d187c2a74f9e3036e4e", size = 207983, upload-time = "2025-09-08T23:22:50.06Z" },
+    { url = "https://files.pythonhosted.org/packages/3a/c8/15cb9ada8895957ea171c62dc78ff3e99159ee7adb13c0123c001a2546c1/cffi-2.0.0-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:81afed14892743bbe14dacb9e36d9e0e504cd204e0b165062c488942b9718037", size = 206519, upload-time = "2025-09-08T23:22:51.364Z" },
+    { url = "https://files.pythonhosted.org/packages/78/2d/7fa73dfa841b5ac06c7b8855cfc18622132e365f5b81d02230333ff26e9e/cffi-2.0.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:3e17ed538242334bf70832644a32a7aae3d83b57567f9fd60a26257e992b79ba", size = 219572, upload-time = "2025-09-08T23:22:52.902Z" },
+    { url = "https://files.pythonhosted.org/packages/07/e0/267e57e387b4ca276b90f0434ff88b2c2241ad72b16d31836adddfd6031b/cffi-2.0.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:3925dd22fa2b7699ed2617149842d2e6adde22b262fcbfada50e3d195e4b3a94", size = 222963, upload-time = "2025-09-08T23:22:54.518Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/75/1f2747525e06f53efbd878f4d03bac5b859cbc11c633d0fb81432d98a795/cffi-2.0.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:2c8f814d84194c9ea681642fd164267891702542f028a15fc97d4674b6206187", size = 221361, upload-time = "2025-09-08T23:22:55.867Z" },
+    { url = "https://files.pythonhosted.org/packages/7b/2b/2b6435f76bfeb6bbf055596976da087377ede68df465419d192acf00c437/cffi-2.0.0-cp312-cp312-win32.whl", hash = "sha256:da902562c3e9c550df360bfa53c035b2f241fed6d9aef119048073680ace4a18", size = 172932, upload-time = "2025-09-08T23:22:57.188Z" },
+    { url = "https://files.pythonhosted.org/packages/f8/ed/13bd4418627013bec4ed6e54283b1959cf6db888048c7cf4b4c3b5b36002/cffi-2.0.0-cp312-cp312-win_amd64.whl", hash = "sha256:da68248800ad6320861f129cd9c1bf96ca849a2771a59e0344e88681905916f5", size = 183557, upload-time = "2025-09-08T23:22:58.351Z" },
+    { url = "https://files.pythonhosted.org/packages/95/31/9f7f93ad2f8eff1dbc1c3656d7ca5bfd8fb52c9d786b4dcf19b2d02217fa/cffi-2.0.0-cp312-cp312-win_arm64.whl", hash = "sha256:4671d9dd5ec934cb9a73e7ee9676f9362aba54f7f34910956b84d727b0d73fb6", size = 177762, upload-time = "2025-09-08T23:22:59.668Z" },
+    { url = "https://files.pythonhosted.org/packages/4b/8d/a0a47a0c9e413a658623d014e91e74a50cdd2c423f7ccfd44086ef767f90/cffi-2.0.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:00bdf7acc5f795150faa6957054fbbca2439db2f775ce831222b66f192f03beb", size = 185230, upload-time = "2025-09-08T23:23:00.879Z" },
+    { url = "https://files.pythonhosted.org/packages/4a/d2/a6c0296814556c68ee32009d9c2ad4f85f2707cdecfd7727951ec228005d/cffi-2.0.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:45d5e886156860dc35862657e1494b9bae8dfa63bf56796f2fb56e1679fc0bca", size = 181043, upload-time = "2025-09-08T23:23:02.231Z" },
+    { url = "https://files.pythonhosted.org/packages/b0/1e/d22cc63332bd59b06481ceaac49d6c507598642e2230f201649058a7e704/cffi-2.0.0-cp313-cp313-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl", hash = "sha256:07b271772c100085dd28b74fa0cd81c8fb1a3ba18b21e03d7c27f3436a10606b", size = 212446, upload-time = "2025-09-08T23:23:03.472Z" },
+    { url = "https://files.pythonhosted.org/packages/a9/f5/a2c23eb03b61a0b8747f211eb716446c826ad66818ddc7810cc2cc19b3f2/cffi-2.0.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:d48a880098c96020b02d5a1f7d9251308510ce8858940e6fa99ece33f610838b", size = 220101, upload-time = "2025-09-08T23:23:04.792Z" },
+    { url = "https://files.pythonhosted.org/packages/f2/7f/e6647792fc5850d634695bc0e6ab4111ae88e89981d35ac269956605feba/cffi-2.0.0-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:f93fd8e5c8c0a4aa1f424d6173f14a892044054871c771f8566e4008eaa359d2", size = 207948, upload-time = "2025-09-08T23:23:06.127Z" },
+    { url = "https://files.pythonhosted.org/packages/cb/1e/a5a1bd6f1fb30f22573f76533de12a00bf274abcdc55c8edab639078abb6/cffi-2.0.0-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:dd4f05f54a52fb558f1ba9f528228066954fee3ebe629fc1660d874d040ae5a3", size = 206422, upload-time = "2025-09-08T23:23:07.753Z" },
+    { url = "https://files.pythonhosted.org/packages/98/df/0a1755e750013a2081e863e7cd37e0cdd02664372c754e5560099eb7aa44/cffi-2.0.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:c8d3b5532fc71b7a77c09192b4a5a200ea992702734a2e9279a37f2478236f26", size = 219499, upload-time = "2025-09-08T23:23:09.648Z" },
+    { url = "https://files.pythonhosted.org/packages/50/e1/a969e687fcf9ea58e6e2a928ad5e2dd88cc12f6f0ab477e9971f2309b57c/cffi-2.0.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:d9b29c1f0ae438d5ee9acb31cadee00a58c46cc9c0b2f9038c6b0b3470877a8c", size = 222928, upload-time = "2025-09-08T23:23:10.928Z" },
+    { url = "https://files.pythonhosted.org/packages/36/54/0362578dd2c9e557a28ac77698ed67323ed5b9775ca9d3fe73fe191bb5d8/cffi-2.0.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:6d50360be4546678fc1b79ffe7a66265e28667840010348dd69a314145807a1b", size = 221302, upload-time = "2025-09-08T23:23:12.42Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/6d/bf9bda840d5f1dfdbf0feca87fbdb64a918a69bca42cfa0ba7b137c48cb8/cffi-2.0.0-cp313-cp313-win32.whl", hash = "sha256:74a03b9698e198d47562765773b4a8309919089150a0bb17d829ad7b44b60d27", size = 172909, upload-time = "2025-09-08T23:23:14.32Z" },
+    { url = "https://files.pythonhosted.org/packages/37/18/6519e1ee6f5a1e579e04b9ddb6f1676c17368a7aba48299c3759bbc3c8b3/cffi-2.0.0-cp313-cp313-win_amd64.whl", hash = "sha256:19f705ada2530c1167abacb171925dd886168931e0a7b78f5bffcae5c6b5be75", size = 183402, upload-time = "2025-09-08T23:23:15.535Z" },
+    { url = "https://files.pythonhosted.org/packages/cb/0e/02ceeec9a7d6ee63bb596121c2c8e9b3a9e150936f4fbef6ca1943e6137c/cffi-2.0.0-cp313-cp313-win_arm64.whl", hash = "sha256:256f80b80ca3853f90c21b23ee78cd008713787b1b1e93eae9f3d6a7134abd91", size = 177780, upload-time = "2025-09-08T23:23:16.761Z" },
+    { url = "https://files.pythonhosted.org/packages/92/c4/3ce07396253a83250ee98564f8d7e9789fab8e58858f35d07a9a2c78de9f/cffi-2.0.0-cp314-cp314-macosx_10_13_x86_64.whl", hash = "sha256:fc33c5141b55ed366cfaad382df24fe7dcbc686de5be719b207bb248e3053dc5", size = 185320, upload-time = "2025-09-08T23:23:18.087Z" },
+    { url = "https://files.pythonhosted.org/packages/59/dd/27e9fa567a23931c838c6b02d0764611c62290062a6d4e8ff7863daf9730/cffi-2.0.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:c654de545946e0db659b3400168c9ad31b5d29593291482c43e3564effbcee13", size = 181487, upload-time = "2025-09-08T23:23:19.622Z" },
+    { url = "https://files.pythonhosted.org/packages/d6/43/0e822876f87ea8a4ef95442c3d766a06a51fc5298823f884ef87aaad168c/cffi-2.0.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:24b6f81f1983e6df8db3adc38562c83f7d4a0c36162885ec7f7b77c7dcbec97b", size = 220049, upload-time = "2025-09-08T23:23:20.853Z" },
+    { url = "https://files.pythonhosted.org/packages/b4/89/76799151d9c2d2d1ead63c2429da9ea9d7aac304603de0c6e8764e6e8e70/cffi-2.0.0-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:12873ca6cb9b0f0d3a0da705d6086fe911591737a59f28b7936bdfed27c0d47c", size = 207793, upload-time = "2025-09-08T23:23:22.08Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/dd/3465b14bb9e24ee24cb88c9e3730f6de63111fffe513492bf8c808a3547e/cffi-2.0.0-cp314-cp314-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:d9b97165e8aed9272a6bb17c01e3cc5871a594a446ebedc996e2397a1c1ea8ef", size = 206300, upload-time = "2025-09-08T23:23:23.314Z" },
+    { url = "https://files.pythonhosted.org/packages/47/d9/d83e293854571c877a92da46fdec39158f8d7e68da75bf73581225d28e90/cffi-2.0.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:afb8db5439b81cf9c9d0c80404b60c3cc9c3add93e114dcae767f1477cb53775", size = 219244, upload-time = "2025-09-08T23:23:24.541Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/0f/1f177e3683aead2bb00f7679a16451d302c436b5cbf2505f0ea8146ef59e/cffi-2.0.0-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:737fe7d37e1a1bffe70bd5754ea763a62a066dc5913ca57e957824b72a85e205", size = 222828, upload-time = "2025-09-08T23:23:26.143Z" },
+    { url = "https://files.pythonhosted.org/packages/c6/0f/cafacebd4b040e3119dcb32fed8bdef8dfe94da653155f9d0b9dc660166e/cffi-2.0.0-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:38100abb9d1b1435bc4cc340bb4489635dc2f0da7456590877030c9b3d40b0c1", size = 220926, upload-time = "2025-09-08T23:23:27.873Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/aa/df335faa45b395396fcbc03de2dfcab242cd61a9900e914fe682a59170b1/cffi-2.0.0-cp314-cp314-win32.whl", hash = "sha256:087067fa8953339c723661eda6b54bc98c5625757ea62e95eb4898ad5e776e9f", size = 175328, upload-time = "2025-09-08T23:23:44.61Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/92/882c2d30831744296ce713f0feb4c1cd30f346ef747b530b5318715cc367/cffi-2.0.0-cp314-cp314-win_amd64.whl", hash = "sha256:203a48d1fb583fc7d78a4c6655692963b860a417c0528492a6bc21f1aaefab25", size = 185650, upload-time = "2025-09-08T23:23:45.848Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/2c/98ece204b9d35a7366b5b2c6539c350313ca13932143e79dc133ba757104/cffi-2.0.0-cp314-cp314-win_arm64.whl", hash = "sha256:dbd5c7a25a7cb98f5ca55d258b103a2054f859a46ae11aaf23134f9cc0d356ad", size = 180687, upload-time = "2025-09-08T23:23:47.105Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/61/c768e4d548bfa607abcda77423448df8c471f25dbe64fb2ef6d555eae006/cffi-2.0.0-cp314-cp314t-macosx_10_13_x86_64.whl", hash = "sha256:9a67fc9e8eb39039280526379fb3a70023d77caec1852002b4da7e8b270c4dd9", size = 188773, upload-time = "2025-09-08T23:23:29.347Z" },
+    { url = "https://files.pythonhosted.org/packages/2c/ea/5f76bce7cf6fcd0ab1a1058b5af899bfbef198bea4d5686da88471ea0336/cffi-2.0.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:7a66c7204d8869299919db4d5069a82f1561581af12b11b3c9f48c584eb8743d", size = 185013, upload-time = "2025-09-08T23:23:30.63Z" },
+    { url = "https://files.pythonhosted.org/packages/be/b4/c56878d0d1755cf9caa54ba71e5d049479c52f9e4afc230f06822162ab2f/cffi-2.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:7cc09976e8b56f8cebd752f7113ad07752461f48a58cbba644139015ac24954c", size = 221593, upload-time = "2025-09-08T23:23:31.91Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/0d/eb704606dfe8033e7128df5e90fee946bbcb64a04fcdaa97321309004000/cffi-2.0.0-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:92b68146a71df78564e4ef48af17551a5ddd142e5190cdf2c5624d0c3ff5b2e8", size = 209354, upload-time = "2025-09-08T23:23:33.214Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/19/3c435d727b368ca475fb8742ab97c9cb13a0de600ce86f62eab7fa3eea60/cffi-2.0.0-cp314-cp314t-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:b1e74d11748e7e98e2f426ab176d4ed720a64412b6a15054378afdb71e0f37dc", size = 208480, upload-time = "2025-09-08T23:23:34.495Z" },
+    { url = "https://files.pythonhosted.org/packages/d0/44/681604464ed9541673e486521497406fadcc15b5217c3e326b061696899a/cffi-2.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:28a3a209b96630bca57cce802da70c266eb08c6e97e5afd61a75611ee6c64592", size = 221584, upload-time = "2025-09-08T23:23:36.096Z" },
+    { url = "https://files.pythonhosted.org/packages/25/8e/342a504ff018a2825d395d44d63a767dd8ebc927ebda557fecdaca3ac33a/cffi-2.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:7553fb2090d71822f02c629afe6042c299edf91ba1bf94951165613553984512", size = 224443, upload-time = "2025-09-08T23:23:37.328Z" },
+    { url = "https://files.pythonhosted.org/packages/e1/5e/b666bacbbc60fbf415ba9988324a132c9a7a0448a9a8f125074671c0f2c3/cffi-2.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:6c6c373cfc5c83a975506110d17457138c8c63016b563cc9ed6e056a82f13ce4", size = 223437, upload-time = "2025-09-08T23:23:38.945Z" },
+    { url = "https://files.pythonhosted.org/packages/a0/1d/ec1a60bd1a10daa292d3cd6bb0b359a81607154fb8165f3ec95fe003b85c/cffi-2.0.0-cp314-cp314t-win32.whl", hash = "sha256:1fc9ea04857caf665289b7a75923f2c6ed559b8298a1b8c49e59f7dd95c8481e", size = 180487, upload-time = "2025-09-08T23:23:40.423Z" },
+    { url = "https://files.pythonhosted.org/packages/bf/41/4c1168c74fac325c0c8156f04b6749c8b6a8f405bbf91413ba088359f60d/cffi-2.0.0-cp314-cp314t-win_amd64.whl", hash = "sha256:d68b6cef7827e8641e8ef16f4494edda8b36104d79773a334beaa1e3521430f6", size = 191726, upload-time = "2025-09-08T23:23:41.742Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/3a/dbeec9d1ee0844c679f6bb5d6ad4e9f198b1224f4e7a32825f47f6192b0c/cffi-2.0.0-cp314-cp314t-win_arm64.whl", hash = "sha256:0a1527a803f0a659de1af2e1fd700213caba79377e27e4693648c2923da066f9", size = 184195, upload-time = "2025-09-08T23:23:43.004Z" },
+    { url = "https://files.pythonhosted.org/packages/c0/cc/08ed5a43f2996a16b462f64a7055c6e962803534924b9b2f1371d8c00b7b/cffi-2.0.0-cp39-cp39-macosx_10_13_x86_64.whl", hash = "sha256:fe562eb1a64e67dd297ccc4f5addea2501664954f2692b69a76449ec7913ecbf", size = 184288, upload-time = "2025-09-08T23:23:48.404Z" },
+    { url = "https://files.pythonhosted.org/packages/3d/de/38d9726324e127f727b4ecc376bc85e505bfe61ef130eaf3f290c6847dd4/cffi-2.0.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:de8dad4425a6ca6e4e5e297b27b5c824ecc7581910bf9aee86cb6835e6812aa7", size = 180509, upload-time = "2025-09-08T23:23:49.73Z" },
+    { url = "https://files.pythonhosted.org/packages/9b/13/c92e36358fbcc39cf0962e83223c9522154ee8630e1df7c0b3a39a8124e2/cffi-2.0.0-cp39-cp39-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl", hash = "sha256:4647afc2f90d1ddd33441e5b0e85b16b12ddec4fca55f0d9671fef036ecca27c", size = 208813, upload-time = "2025-09-08T23:23:51.263Z" },
+    { url = "https://files.pythonhosted.org/packages/15/12/a7a79bd0df4c3bff744b2d7e52cc1b68d5e7e427b384252c42366dc1ecbc/cffi-2.0.0-cp39-cp39-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:3f4d46d8b35698056ec29bca21546e1551a205058ae1a181d871e278b0b28165", size = 216498, upload-time = "2025-09-08T23:23:52.494Z" },
+    { url = "https://files.pythonhosted.org/packages/a3/ad/5c51c1c7600bdd7ed9a24a203ec255dccdd0ebf4527f7b922a0bde2fb6ed/cffi-2.0.0-cp39-cp39-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:e6e73b9e02893c764e7e8d5bb5ce277f1a009cd5243f8228f75f842bf937c534", size = 203243, upload-time = "2025-09-08T23:23:53.836Z" },
+    { url = "https://files.pythonhosted.org/packages/32/f2/81b63e288295928739d715d00952c8c6034cb6c6a516b17d37e0c8be5600/cffi-2.0.0-cp39-cp39-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:cb527a79772e5ef98fb1d700678fe031e353e765d1ca2d409c92263c6d43e09f", size = 203158, upload-time = "2025-09-08T23:23:55.169Z" },
+    { url = "https://files.pythonhosted.org/packages/1f/74/cc4096ce66f5939042ae094e2e96f53426a979864aa1f96a621ad128be27/cffi-2.0.0-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:61d028e90346df14fedc3d1e5441df818d095f3b87d286825dfcbd6459b7ef63", size = 216548, upload-time = "2025-09-08T23:23:56.506Z" },
+    { url = "https://files.pythonhosted.org/packages/e8/be/f6424d1dc46b1091ffcc8964fa7c0ab0cd36839dd2761b49c90481a6ba1b/cffi-2.0.0-cp39-cp39-musllinux_1_2_aarch64.whl", hash = "sha256:0f6084a0ea23d05d20c3edcda20c3d006f9b6f3fefeac38f59262e10cef47ee2", size = 218897, upload-time = "2025-09-08T23:23:57.825Z" },
+    { url = "https://files.pythonhosted.org/packages/f7/e0/dda537c2309817edf60109e39265f24f24aa7f050767e22c98c53fe7f48b/cffi-2.0.0-cp39-cp39-musllinux_1_2_i686.whl", hash = "sha256:1cd13c99ce269b3ed80b417dcd591415d3372bcac067009b6e0f59c7d4015e65", size = 211249, upload-time = "2025-09-08T23:23:59.139Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/e7/7c769804eb75e4c4b35e658dba01de1640a351a9653c3d49ca89d16ccc91/cffi-2.0.0-cp39-cp39-musllinux_1_2_x86_64.whl", hash = "sha256:89472c9762729b5ae1ad974b777416bfda4ac5642423fa93bd57a09204712322", size = 218041, upload-time = "2025-09-08T23:24:00.496Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/d9/6218d78f920dcd7507fc16a766b5ef8f3b913cc7aa938e7fc80b9978d089/cffi-2.0.0-cp39-cp39-win32.whl", hash = "sha256:2081580ebb843f759b9f617314a24ed5738c51d2aee65d31e02f6f7a2b97707a", size = 172138, upload-time = "2025-09-08T23:24:01.7Z" },
+    { url = "https://files.pythonhosted.org/packages/54/8f/a1e836f82d8e32a97e6b29cc8f641779181ac7363734f12df27db803ebda/cffi-2.0.0-cp39-cp39-win_amd64.whl", hash = "sha256:b882b3df248017dba09d6b16defe9b5c407fe32fc7c65a9c69798e6175601be9", size = 182794, upload-time = "2025-09-08T23:24:02.943Z" },
+]
+
 [[package]]
 name = "cfgv"
 version = "3.4.0"
@@ -351,6 +447,20 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6", size = 25335, upload-time = "2022-10-25T02:36:20.889Z" },
 ]
 
+[[package]]
+name = "couchbase-analytics"
+version = "1.0.0.dev1"
+source = { editable = "." }
+dependencies = [
+    { name = "anyio" },
+    { name = "cryptography", version = "47.0.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version <= '3.9'" },
+    { name = "cryptography", version = "48.0.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version > '3.9'" },
+    { name = "httpx" },
+    { name = "ijson" },
+    { name = "sniffio" },
+    { name = "typing-extensions", marker = "python_full_version < '3.11'" },
+]
+
 [package.dev-dependencies]
 dev = [
     { name = "aiohttp" },
@@ -372,6 +482,7 @@ sphinx = [
 [package.metadata]
 requires-dist = [
     { name = "anyio", specifier = "~=4.9.0" },
+    { name = "cryptography", specifier = ">=41.0" },
     { name = "httpx", specifier = "~=0.28.1" },
     { name = "ijson", specifier = "~=3.4.0" },
     { name = "sniffio", specifier = "~=1.3.1" },
@@ -396,6 +507,135 @@ sphinx = [
     { name = "sphinx-toolbox", specifier = "~=3.7" },
 ]
 
+[[package]]
+name = "cryptography"
+version = "47.0.0"
+source = { registry = "https://pypi.org/simple" }
+resolution-markers = [
+    "python_full_version <= '3.9'",
+]
+dependencies = [
+    { name = "cffi", marker = "python_full_version <= '3.9' and platform_python_implementation != 'PyPy'" },
+    { name = "typing-extensions", marker = "python_full_version <= '3.9'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/ef/b2/7ffa7fe8207a8c42147ffe70c3e360b228160c1d85dc3faff16aaa3244c0/cryptography-47.0.0.tar.gz", hash = "sha256:9f8e55fe4e63613a5e1cc5819030f27b97742d720203a087802ce4ce9ceb52bb", size = 830863, upload-time = "2026-04-24T19:54:57.056Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/a4/98/40dfe932134bdcae4f6ab5927c87488754bf9eb79297d7e0070b78dd58e9/cryptography-47.0.0-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:160ad728f128972d362e714054f6ba0067cab7fb350c5202a9ae8ae4ce3ef1a0", size = 7912214, upload-time = "2026-04-24T19:53:03.864Z" },
+    { url = "https://files.pythonhosted.org/packages/34/c6/2733531243fba725f58611b918056b277692f1033373dcc8bd01af1c05d4/cryptography-47.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:b9a8943e359b7615db1a3ba587994618e094ff3d6fa5a390c73d079ce18b3973", size = 4644617, upload-time = "2026-04-24T19:53:06.909Z" },
+    { url = "https://files.pythonhosted.org/packages/00/e3/b27be1a670a9b87f855d211cf0e1174a5d721216b7616bd52d8581d912ed/cryptography-47.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:f5c15764f261394b22aef6b00252f5195f46f2ca300bec57149474e2538b31f8", size = 4668186, upload-time = "2026-04-24T19:53:09.053Z" },
+    { url = "https://files.pythonhosted.org/packages/81/b9/8443cfe5d17d482d348cee7048acf502bb89a51b6382f06240fd290d4ca3/cryptography-47.0.0-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:9c59ab0e0fa3a180a5a9c59f3a5abe3ef90d474bc56d7fadfbe80359491b615b", size = 4651244, upload-time = "2026-04-24T19:53:11.217Z" },
+    { url = "https://files.pythonhosted.org/packages/5d/5e/13ed0cdd0eb88ba159d6dd5ebfece8cb901dbcf1ae5ac4072e28b55d3153/cryptography-47.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:34b4358b925a5ea3e14384ca781a2c0ef7ac219b57bb9eacc4457078e2b19f92", size = 5252906, upload-time = "2026-04-24T19:53:13.532Z" },
+    { url = "https://files.pythonhosted.org/packages/64/16/ed058e1df0f33d440217cd120d41d5dda9dd215a80b8187f68483185af82/cryptography-47.0.0-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:0024b87d47ae2399165a6bfb20d24888881eeab83ae2566d62467c5ff0030ce7", size = 4701842, upload-time = "2026-04-24T19:53:15.618Z" },
+    { url = "https://files.pythonhosted.org/packages/02/e0/3d30986b30fdbd9e969abbdf8ba00ed0618615144341faeb57f395a084fe/cryptography-47.0.0-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:1e47422b5557bb82d3fff997e8d92cff4e28b9789576984f08c248d2b3535d93", size = 4289313, upload-time = "2026-04-24T19:53:17.755Z" },
+    { url = "https://files.pythonhosted.org/packages/df/fd/32db38e3ad0cb331f0691cb4c7a8a6f176f679124dee746b3af6633db4d9/cryptography-47.0.0-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:6f29f36582e6151d9686235e586dd35bb67491f024767d10b842e520dc6a07ac", size = 4650964, upload-time = "2026-04-24T19:53:20.062Z" },
+    { url = "https://files.pythonhosted.org/packages/86/53/5395d944dfd48cb1f67917f533c609c34347185ef15eb4308024c876f274/cryptography-47.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:a9b761f012a943b7de0e828843c5688d0de94a0578d44d6c85a1bae32f87791f", size = 5207817, upload-time = "2026-04-24T19:53:22.498Z" },
+    { url = "https://files.pythonhosted.org/packages/34/4f/e5711b28e1901f7d480a2b1b688b645aa4c77c73f10731ed17e7f7db3f0d/cryptography-47.0.0-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:4e1de79e047e25d6e9f8cea71c86b4a53aced64134f0f003bbcbf3655fd172c8", size = 4701544, upload-time = "2026-04-24T19:53:24.356Z" },
+    { url = "https://files.pythonhosted.org/packages/22/22/c8ddc25de3010fc8da447648f5a092c40e7a8fadf01dd6d255d9c0b9373d/cryptography-47.0.0-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:ef6b3634087f18d2155b1e8ce264e5345a753da2c5fa9815e7d41315c90f8318", size = 4783536, upload-time = "2026-04-24T19:53:26.665Z" },
+    { url = "https://files.pythonhosted.org/packages/66/b6/d4a68f4ea999c6d89e8498579cba1c5fcba4276284de7773b17e4fa69293/cryptography-47.0.0-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:11dbb9f50a0f1bb9757b3d8c27c1101780efb8f0bdecfb12439c22a74d64c001", size = 4926106, upload-time = "2026-04-24T19:53:28.686Z" },
+    { url = "https://files.pythonhosted.org/packages/54/ed/5f524db1fade9c013aa618e1c99c6ed05e8ffc9ceee6cda22fed22dda3f4/cryptography-47.0.0-cp311-abi3-win32.whl", hash = "sha256:7fda2f02c9015db3f42bb8a22324a454516ed10a8c29ca6ece6cdbb5efe2a203", size = 3258581, upload-time = "2026-04-24T19:53:31.058Z" },
+    { url = "https://files.pythonhosted.org/packages/b2/dc/1b901990b174786569029f67542b3edf72ac068b6c3c8683c17e6a2f5363/cryptography-47.0.0-cp311-abi3-win_amd64.whl", hash = "sha256:f5c3296dab66202f1b18a91fa266be93d6aa0c2806ea3d67762c69f60adc71aa", size = 3775309, upload-time = "2026-04-24T19:53:33.054Z" },
+    { url = "https://files.pythonhosted.org/packages/14/88/7aa18ad9c11bc87689affa5ce4368d884b517502d75739d475fc6f4a03c7/cryptography-47.0.0-cp314-cp314t-macosx_10_9_universal2.whl", hash = "sha256:be12cb6a204f77ed968bcefe68086eb061695b540a3dd05edac507a3111b25f0", size = 7904299, upload-time = "2026-04-24T19:53:35.003Z" },
+    { url = "https://files.pythonhosted.org/packages/07/55/c18f75724544872f234678fdedc871391722cb34a2aee19faa9f63100bb2/cryptography-47.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:2ebd84adf0728c039a3be2700289378e1c164afc6748df1a5ed456767bef9ba7", size = 4631180, upload-time = "2026-04-24T19:53:37.517Z" },
+    { url = "https://files.pythonhosted.org/packages/ee/65/31a5cc0eaca99cec5bafffe155d407115d96136bb161e8b49e0ef73f09a7/cryptography-47.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7f68d6fbc7fbbcfb0939fea72c3b96a9f9a6edfc0e1b1d29778a2066030418b1", size = 4653529, upload-time = "2026-04-24T19:53:39.775Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/bc/641c0519a495f3bfd0421b48d7cd325c4336578523ccd76ea322b6c29c7a/cryptography-47.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl", hash = "sha256:6651d32eff255423503aa276739da98c30f26c40cbeffcc6048e0d54ef704c0c", size = 4638570, upload-time = "2026-04-24T19:53:42.129Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/f2/300327b0a47f6dc94dd8b71b57052aefe178bb51745073d73d80604f11ab/cryptography-47.0.0-cp314-cp314t-manylinux_2_28_ppc64le.whl", hash = "sha256:3fb8fa48075fad7193f2e5496135c6a76ac4b2aa5a38433df0a539296b377829", size = 5238019, upload-time = "2026-04-24T19:53:44.577Z" },
+    { url = "https://files.pythonhosted.org/packages/e9/5a/5b5cf994391d4bf9d9c7efd4c66aabe4d95227256627f8fea6cff7dfadbd/cryptography-47.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl", hash = "sha256:11438c7518132d95f354fa01a4aa2f806d172a061a7bed18cf18cbdacdb204d7", size = 4686832, upload-time = "2026-04-24T19:53:47.015Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/2c/ae950e28fd6475c852fc21a44db3e6b5bcc1261d1e370f2b6e42fa800fef/cryptography-47.0.0-cp314-cp314t-manylinux_2_31_armv7l.whl", hash = "sha256:8c1a736bbb3288005796c3f7ccb9453360d7fed483b13b9f468aea5171432923", size = 4269301, upload-time = "2026-04-24T19:53:48.97Z" },
+    { url = "https://files.pythonhosted.org/packages/67/fb/6a39782e150ffe5cc1b0018cb6ddc48bf7ca62b498d7539ffc8a758e977d/cryptography-47.0.0-cp314-cp314t-manylinux_2_34_aarch64.whl", hash = "sha256:f1557695e5c2b86e204f6ce9470497848634100787935ab7adc5397c54abd7ab", size = 4638110, upload-time = "2026-04-24T19:53:51.011Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/d7/0b3c71090a76e5c203164a47688b697635ece006dcd2499ab3a4dbd3f0bd/cryptography-47.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl", hash = "sha256:f9a034b642b960767fb343766ae5ba6ad653f2e890ddd82955aef288ffea8736", size = 5194988, upload-time = "2026-04-24T19:53:52.962Z" },
+    { url = "https://files.pythonhosted.org/packages/63/33/63a961498a9df51721ab578c5a2622661411fc520e00bd83b0cc64eb20c4/cryptography-47.0.0-cp314-cp314t-manylinux_2_34_x86_64.whl", hash = "sha256:b1c76fca783aa7698eb21eb14f9c4aa09452248ee54a627d125025a43f83e7a7", size = 4686563, upload-time = "2026-04-24T19:53:55.274Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/bf/5ee5b145248f92250de86145d1c1d6edebbd57a7fe7caa4dedb5d4cf06a1/cryptography-47.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:4f7722c97826770bab8ae92959a2e7b20a5e9e9bf4deae68fd86c3ca457bab52", size = 4770094, upload-time = "2026-04-24T19:53:57.753Z" },
+    { url = "https://files.pythonhosted.org/packages/92/43/21d220b2da5d517773894dacdcdb5c682c28d3fffce65548cb06e87d5501/cryptography-47.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:09f6d7bf6724f8db8b32f11eccf23efc8e759924bc5603800335cf8859a3ddbd", size = 4913811, upload-time = "2026-04-24T19:54:00.236Z" },
+    { url = "https://files.pythonhosted.org/packages/31/98/dc4ad376ac5f1a1a7d4a83f7b0c6f2bcad36b5d2d8f30aeb482d3a7d9582/cryptography-47.0.0-cp314-cp314t-win32.whl", hash = "sha256:6eebcaf0df1d21ce1f90605c9b432dd2c4f4ab665ac29a40d5e3fc68f51b5e63", size = 3237158, upload-time = "2026-04-24T19:54:02.606Z" },
+    { url = "https://files.pythonhosted.org/packages/bc/da/97f62d18306b5133468bc3f8cc73a3111e8cdc8cf8d3e69474d6e5fd2d1b/cryptography-47.0.0-cp314-cp314t-win_amd64.whl", hash = "sha256:51c9313e90bd1690ec5a75ed047c27c0b8e6c570029712943d6116ef9a90620b", size = 3758706, upload-time = "2026-04-24T19:54:04.433Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/34/a4fae8ae7c3bc227460c9ae43f56abf1b911da0ec29e0ebac53bb0a4b6b7/cryptography-47.0.0-cp38-abi3-macosx_10_9_universal2.whl", hash = "sha256:14432c8a9bcb37009784f9594a62fae211a2ae9543e96c92b2a8e4c3cd5cd0c4", size = 7904072, upload-time = "2026-04-24T19:54:06.411Z" },
+    { url = "https://files.pythonhosted.org/packages/01/64/d7b1e54fdb69f22d24a64bb3e88dc718b31c7fb10ef0b9691a3cf7eeea6e/cryptography-47.0.0-cp38-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:07efe86201817e7d3c18781ca9770bc0db04e1e48c994be384e4602bc38f8f27", size = 4635767, upload-time = "2026-04-24T19:54:08.519Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/7b/cca826391fb2a94efdcdfe4631eb69306ee1cff0b22f664a412c90713877/cryptography-47.0.0-cp38-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:2b45761c6ec22b7c726d6a829558777e32d0f1c8be7c3f3480f9c912d5ee8a10", size = 4654350, upload-time = "2026-04-24T19:54:10.795Z" },
+    { url = "https://files.pythonhosted.org/packages/4c/65/4b57bcc823f42a991627c51c2f68c9fd6eb1393c1756aac876cba2accae2/cryptography-47.0.0-cp38-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:edd4da498015da5b9f26d38d3bfc2e90257bfa9cbed1f6767c282a0025ae649b", size = 4643394, upload-time = "2026-04-24T19:54:13.275Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/c4/2c5fbeea70adbbca2bbae865e1d605d6a4a7f8dbd9d33eaf69645087f06c/cryptography-47.0.0-cp38-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:9af828c0d5a65c70ec729cd7495a4bf1a67ecb66417b8f02ff125ab8a6326a74", size = 5225777, upload-time = "2026-04-24T19:54:15.18Z" },
+    { url = "https://files.pythonhosted.org/packages/7e/b8/ac57107ef32749d2b244e36069bb688792a363aaaa3acc9e3cf84c130315/cryptography-47.0.0-cp38-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:256d07c78a04d6b276f5df935a9923275f53bd1522f214447fdf365494e2d515", size = 4688771, upload-time = "2026-04-24T19:54:17.835Z" },
+    { url = "https://files.pythonhosted.org/packages/56/fc/9f1de22ff8be99d991f240a46863c52d475404c408886c5a38d2b5c3bb26/cryptography-47.0.0-cp38-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:5d0e362ff51041b0c0d219cc7d6924d7b8996f57ce5712bdcef71eb3c65a59cc", size = 4270753, upload-time = "2026-04-24T19:54:19.963Z" },
+    { url = "https://files.pythonhosted.org/packages/00/68/d70c852797aa68e8e48d12e5a87170c43f67bb4a59403627259dd57d15de/cryptography-47.0.0-cp38-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:1581aef4219f7ca2849d0250edaa3866212fb74bf5667284f46aa92f9e65c1ca", size = 4642911, upload-time = "2026-04-24T19:54:21.818Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/51/661cbee74f594c5d97ff82d34f10d5551c085ca4668645f4606ebd22bd5d/cryptography-47.0.0-cp38-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:a49a3eb5341b9503fa3000a9a0db033161db90d47285291f53c2a9d2cd1b7f76", size = 5181411, upload-time = "2026-04-24T19:54:24.376Z" },
+    { url = "https://files.pythonhosted.org/packages/94/87/f2b6c374a82cf076cfa1416992ac8e8ec94d79facc37aec87c1a5cb72352/cryptography-47.0.0-cp38-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:2207a498b03275d0051589e326b79d4cf59985c99031b05bb292ac52631c37fe", size = 4688262, upload-time = "2026-04-24T19:54:26.946Z" },
+    { url = "https://files.pythonhosted.org/packages/14/e2/8b7462f4acf21ec509616f0245018bb197194ab0b65c2ea21a0bdd53c0eb/cryptography-47.0.0-cp38-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:7a02675e2fabd0c0fc04c868b8781863cbf1967691543c22f5470500ff840b31", size = 4775506, upload-time = "2026-04-24T19:54:28.926Z" },
+    { url = "https://files.pythonhosted.org/packages/70/75/158e494e4c08dc05e039da5bb48553826bd26c23930cf8d3cd5f21fa8921/cryptography-47.0.0-cp38-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:80887c5cbd1774683cb126f0ab4184567f080071d5acf62205acb354b4b753b7", size = 4912060, upload-time = "2026-04-24T19:54:30.869Z" },
+    { url = "https://files.pythonhosted.org/packages/06/bd/0a9d3edbf5eadbac926d7b9b3cd0c4be584eeeae4a003d24d9eda4affbbd/cryptography-47.0.0-cp38-abi3-win32.whl", hash = "sha256:ed67ea4e0cfb5faa5bc7ecb6e2b8838f3807a03758eec239d6c21c8769355310", size = 3248487, upload-time = "2026-04-24T19:54:33.494Z" },
+    { url = "https://files.pythonhosted.org/packages/60/80/5681af756d0da3a599b7bdb586fac5a1540f1bcefd2717a20e611ddade45/cryptography-47.0.0-cp38-abi3-win_amd64.whl", hash = "sha256:835d2d7f47cdc53b3224e90810fb1d36ca94ea29cc1801fb4c1bc43876735769", size = 3755737, upload-time = "2026-04-24T19:54:35.408Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/a0/928c9ce0d120a40a81aa99e3ba383e87337b9ac9ef9f6db02e4d7822424d/cryptography-47.0.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:7f1207974a904e005f762869996cf620e9bf79ecb4622f148550bb48e0eb35a7", size = 3909893, upload-time = "2026-04-24T19:54:38.334Z" },
+    { url = "https://files.pythonhosted.org/packages/81/75/d691e284750df5d9569f2b1ce4a00a71e1d79566da83b2b3e5549c84917f/cryptography-47.0.0-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:1a405c08857258c11016777e11c02bacbe7ef596faf259305d282272a3a05cbe", size = 4587867, upload-time = "2026-04-24T19:54:40.619Z" },
+    { url = "https://files.pythonhosted.org/packages/07/d6/1b90f1a4e453009730b4545286f0b39bb348d805c11181fc31544e4f9a65/cryptography-47.0.0-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:20fdbe3e38fb67c385d233c89371fa27f9909f6ebca1cecc20c13518dae65475", size = 4627192, upload-time = "2026-04-24T19:54:42.849Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/53/cb358a80e9e359529f496870dd08c102aa8a4b5b9f9064f00f0d6ed5b527/cryptography-47.0.0-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:f7db373287273d8af1414cf95dc4118b13ffdc62be521997b0f2b270771fef50", size = 4587486, upload-time = "2026-04-24T19:54:44.908Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/57/aaa3d53876467a226f9a7a82fd14dd48058ad2de1948493442dfa16e2ffd/cryptography-47.0.0-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:9fe6b7c64926c765f9dff301f9c1b867febcda5768868ca084e18589113732ab", size = 4626327, upload-time = "2026-04-24T19:54:47.813Z" },
+    { url = "https://files.pythonhosted.org/packages/ab/9c/51f28c3550276bcf35660703ba0ab829a90b88be8cd98a71ef23c2413913/cryptography-47.0.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:cffbba3392df0fa8629bb7f43454ee2925059ee158e23c54620b9063912b86c8", size = 3698916, upload-time = "2026-04-24T19:54:49.782Z" },
+]
+
+[[package]]
+name = "cryptography"
+version = "48.0.0"
+source = { registry = "https://pypi.org/simple" }
+resolution-markers = [
+    "python_full_version >= '3.13'",
+    "python_full_version >= '3.11' and python_full_version < '3.13'",
+    "python_full_version == '3.10.*'",
+    "python_full_version > '3.9' and python_full_version < '3.10'",
+]
+dependencies = [
+    { name = "cffi", marker = "python_full_version > '3.9' and platform_python_implementation != 'PyPy'" },
+    { name = "typing-extensions", marker = "python_full_version > '3.9' and python_full_version < '3.11'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/9f/a9/db8f313fdcd85d767d4973515e1db101f9c71f95fced83233de224673757/cryptography-48.0.0.tar.gz", hash = "sha256:5c3932f4436d1cccb036cb0eaef46e6e2db91035166f1ad6505c3c9d5a635920", size = 832984, upload-time = "2026-05-04T22:59:38.133Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/df/3d/01f6dd9190170a5a241e0e98c2d04be3664a9e6f5b9b872cde63aff1c3dd/cryptography-48.0.0-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:0c558d2cdffd8f4bbb30fc7134c74d2ca9a476f830bb053074498fbc86f41ed6", size = 8001587, upload-time = "2026-05-04T22:57:36.803Z" },
+    { url = "https://files.pythonhosted.org/packages/b2/6e/e90527eef33f309beb811cf7c982c3aeffcce8e3edb178baa4ca3ae4a6fa/cryptography-48.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:f5333311663ea94f75dd408665686aaf426563556bb5283554a3539177e03b8c", size = 4690433, upload-time = "2026-05-04T22:57:40.373Z" },
+    { url = "https://files.pythonhosted.org/packages/90/04/673510ed51ddff56575f306cf1617d80411ee76831ccd3097599140efdfe/cryptography-48.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7995ef305d7165c3f11ae07f2517e5a4f1d5c18da1376a0a9ed496336b69e5f3", size = 4710620, upload-time = "2026-05-04T22:57:42.935Z" },
+    { url = "https://files.pythonhosted.org/packages/14/d5/e9c4ef932c8d800490c34d8bd589d64a31d5890e27ec9e9ad532be893294/cryptography-48.0.0-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:40ba1f85eaa6959837b1d51c9767e230e14612eea4ef110ee8854ada22da1bf5", size = 4696283, upload-time = "2026-05-04T22:57:45.294Z" },
+    { url = "https://files.pythonhosted.org/packages/0c/29/174b9dfb60b12d59ecfc6cfa04bc88c21b42a54f01b8aae09bb6e51e4c7f/cryptography-48.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:369a6348999f94bbd53435c894377b20ab95f25a9065c283570e70150d8abc3c", size = 5296573, upload-time = "2026-05-04T22:57:47.933Z" },
+    { url = "https://files.pythonhosted.org/packages/95/38/0d29a6fd7d0d1373f0c0c88a04ba20e359b257753ac497564cd660fc1d55/cryptography-48.0.0-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:a0e692c683f4df67815a2d258b324e66f4738bd7a96a218c826dce4f4bd05d8f", size = 4743677, upload-time = "2026-05-04T22:57:50.067Z" },
+    { url = "https://files.pythonhosted.org/packages/30/be/eef653013d5c63b6a490529e0316f9ac14a37602965d4903efed1399f32b/cryptography-48.0.0-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:18349bbc56f4743c8b12dc32e2bccb2cf83ee8b69a3bba74ef8ae857e26b3d25", size = 4330808, upload-time = "2026-05-04T22:57:52.301Z" },
+    { url = "https://files.pythonhosted.org/packages/84/9e/500463e87abb7a0a0f9f256ec21123ecde0a7b5541a15e840ea54551fd81/cryptography-48.0.0-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:7e8eac43dfca5c4cccc6dad9a80504436fca53bb9bc3100a2386d730fbe6b602", size = 4695941, upload-time = "2026-05-04T22:57:54.603Z" },
+    { url = "https://files.pythonhosted.org/packages/e3/dc/7303087450c2ec9e7fbb750e17c2abfbc658f23cbd0e54009509b7cc4091/cryptography-48.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:9ccdac7d40688ecb5a3b4a604b8a88c8002e3442d6c60aead1db2a89a041560c", size = 5252579, upload-time = "2026-05-04T22:57:57.207Z" },
+    { url = "https://files.pythonhosted.org/packages/d0/c0/7101d3b7215edcdc90c45da544961fd8ed2d6448f77577460fa75a8443f7/cryptography-48.0.0-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:bd72e68b06bb1e96913f97dd4901119bc17f39d4586a5adf2d3e47bc2b9d58b5", size = 4743326, upload-time = "2026-05-04T22:57:59.535Z" },
+    { url = "https://files.pythonhosted.org/packages/ac/d8/5b833bad13016f562ab9d063d68199a4bd121d18458e439515601d3357ec/cryptography-48.0.0-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:59baa2cb386c4f0b9905bd6eb4c2a79a69a128408fd31d32ca4d7102d4156321", size = 4826672, upload-time = "2026-05-04T22:58:01.996Z" },
+    { url = "https://files.pythonhosted.org/packages/98/e1/7074eb8bf3c135558c73fc2bcf0f5633f912e6fb87e868a55c454080ef09/cryptography-48.0.0-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:9249e3cd978541d665967ac2cb2787fd6a62bddf1e75b3e347a594d7dacf4f74", size = 4972574, upload-time = "2026-05-04T22:58:03.968Z" },
+    { url = "https://files.pythonhosted.org/packages/04/70/e5a1b41d325f797f39427aa44ef8baf0be500065ab6d8e10369d850d4a4f/cryptography-48.0.0-cp311-abi3-win32.whl", hash = "sha256:9c459db21422be75e2809370b829a87eb37f74cd785fc4aa9ea1e5f43b47cda4", size = 3294868, upload-time = "2026-05-04T22:58:06.467Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/ac/8ac51b4a5fc5932eb7ee5c517ba7dc8cd834f0048962b6b352f00f41ebf9/cryptography-48.0.0-cp311-abi3-win_amd64.whl", hash = "sha256:5b012212e08b8dd5edc78ef54da83dd9892fd9105323b3993eff6bea65dc21d7", size = 3817107, upload-time = "2026-05-04T22:58:08.845Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/84/70e3feea9feea87fd7cbe77efb2712ae1e3e6edf10749dc6e95f4e60e455/cryptography-48.0.0-cp314-cp314t-macosx_10_9_universal2.whl", hash = "sha256:3cb07a3ed6431663cd321ea8a000a1314c74211f823e4177fefa2255e057d1ec", size = 7986556, upload-time = "2026-05-04T22:58:11.172Z" },
+    { url = "https://files.pythonhosted.org/packages/89/6e/18e07a618bb5442ba10cf4df16e99c071365528aa570dfcb8c02e25a303b/cryptography-48.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:8c7378637d7d88016fa6791c159f698b3d3eed28ebf844ac36b9dc04a14dae18", size = 4684776, upload-time = "2026-05-04T22:58:13.712Z" },
+    { url = "https://files.pythonhosted.org/packages/be/6a/4ea3b4c6c6759794d5ee2103c304a5076dc4b19ae1f9fe47dba439e159e9/cryptography-48.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:cc90c0b39b2e3c65ef52c804b72e3c58f8a04ab2a1871272798e5f9572c17d20", size = 4698121, upload-time = "2026-05-04T22:58:16.448Z" },
+    { url = "https://files.pythonhosted.org/packages/2f/59/6ff6ad6cae03bb887da2a5860b2c9805f8dac969ef01ce563336c49bd1d1/cryptography-48.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl", hash = "sha256:76341972e1eff8b4bea859f09c0d3e64b96ce931b084f9b9b7db8ef364c30eff", size = 4690042, upload-time = "2026-05-04T22:58:18.544Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/b4/fc334ed8cfd705aca282fe4d8f5ae64a8e0f74932e9feecb344610cf6e4d/cryptography-48.0.0-cp314-cp314t-manylinux_2_28_ppc64le.whl", hash = "sha256:55b7718303bf06a5753dcdccf2f3945cf18ad7bffde41b61226e4db31ab89a9c", size = 5282526, upload-time = "2026-05-04T22:58:20.75Z" },
+    { url = "https://files.pythonhosted.org/packages/11/08/9f8c5386cc4cd90d8255c7cdd0f5baf459a08502a09de30dc51f553d38dc/cryptography-48.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl", hash = "sha256:a64697c641c7b1b2178e573cbc31c7c6684cd56883a478d75143dbb7118036db", size = 4733116, upload-time = "2026-05-04T22:58:23.627Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/77/99307d7574045699f8805aa500fa0fb83422d115b5400a064ddd306d7750/cryptography-48.0.0-cp314-cp314t-manylinux_2_31_armv7l.whl", hash = "sha256:561215ea3879cb1cbbf272867e2efda62476f240fb58c64de6b393ae19246741", size = 4316030, upload-time = "2026-05-04T22:58:25.581Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/36/a608b98337af3cb2aff4818e406649d30572b7031918b04c87d979495348/cryptography-48.0.0-cp314-cp314t-manylinux_2_34_aarch64.whl", hash = "sha256:ad64688338ed4bc1a6618076ba75fd7194a5f1797ac60b47afe926285adb3166", size = 4689640, upload-time = "2026-05-04T22:58:27.747Z" },
+    { url = "https://files.pythonhosted.org/packages/dd/a6/825010a291b4438aecc1f568bc428189fc1175515223632477c07dc0a6df/cryptography-48.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl", hash = "sha256:906cbf0670286c6e0044156bc7d4af9cbb0ef6db9f73e52c3ec56ba6bdde5336", size = 5237657, upload-time = "2026-05-04T22:58:29.848Z" },
+    { url = "https://files.pythonhosted.org/packages/b9/09/4e76a09b4caa29aad535ddc806f5d4c5d01885bd978bd984fbc6ca032cae/cryptography-48.0.0-cp314-cp314t-manylinux_2_34_x86_64.whl", hash = "sha256:ea8990436d914540a40ab24b6a77c0969695ed52f4a4874c5137ccf7045a7057", size = 4732362, upload-time = "2026-05-04T22:58:32.009Z" },
+    { url = "https://files.pythonhosted.org/packages/18/78/444fa04a77d0cb95f417dda20d450e13c56ba8e5220fc892a1658f44f882/cryptography-48.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:c18684a7f0cc9a3cb60328f496b8e3372def7c5d2df39ac267878b05565aaaae", size = 4819580, upload-time = "2026-05-04T22:58:34.254Z" },
+    { url = "https://files.pythonhosted.org/packages/38/85/ea67067c70a1fd4be2c63d35eeed82658023021affccc7b17705f8527dd2/cryptography-48.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:9be5aafa5736574f8f15f262adc81b2a9869e2cfe9014d52a44633905b40d52c", size = 4963283, upload-time = "2026-05-04T22:58:36.376Z" },
+    { url = "https://files.pythonhosted.org/packages/75/54/cc6d0f3deac3e81c7f847e8a189a12b6cdd65059b43dad25d4316abd849a/cryptography-48.0.0-cp314-cp314t-win32.whl", hash = "sha256:c17dfe85494deaeddc5ce251aebd1d60bbe6afc8b62071bb0b469431a000124f", size = 3270954, upload-time = "2026-05-04T22:58:38.791Z" },
+    { url = "https://files.pythonhosted.org/packages/49/67/cc947e288c0758a4e5473d1dcb743037ab7785541265a969240b8885441a/cryptography-48.0.0-cp314-cp314t-win_amd64.whl", hash = "sha256:27241b1dc9962e056062a8eef1991d02c3a24569c95975bd2322a8a52c6e5e12", size = 3797313, upload-time = "2026-05-04T22:58:40.746Z" },
+    { url = "https://files.pythonhosted.org/packages/f2/63/61d4a4e1c6b6bab6ce1e213cd36a24c415d90e76d78c5eb8577c5541d2e8/cryptography-48.0.0-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:58d00498e8933e4a194f3076aee1b4a97dfec1a6da444535755822fe5d8b0b86", size = 7983482, upload-time = "2026-05-04T22:58:43.769Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/ac/f5b5995b87770c693e2596559ffafe195b4033a57f14a82268a2842953f3/cryptography-48.0.0-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:614d0949f4790582d2cc25553abd09dd723025f0c0e7c67376a1d77196743d6e", size = 4683266, upload-time = "2026-05-04T22:58:46.064Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/c6/8b14f67e18338fbc4adb76f66c001f5c3610b3e2d1837f268f47a347dbbb/cryptography-48.0.0-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7ce4bfae76319a532a2dc68f82cc32f5676ee792a983187dac07183690e5c66f", size = 4696228, upload-time = "2026-05-04T22:58:48.22Z" },
+    { url = "https://files.pythonhosted.org/packages/ea/73/f808fbae9514bd91b47875b003f13e284c8c6bdfd904b7944e803937eec1/cryptography-48.0.0-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:2eb992bbd4661238c5a397594c83f5b4dc2bc5b848c365c8f991b6780efcc5c7", size = 4689097, upload-time = "2026-05-04T22:58:50.9Z" },
+    { url = "https://files.pythonhosted.org/packages/93/01/d86632d7d28db8ae83221995752eeb6639ffb374c2d22955648cf8d52797/cryptography-48.0.0-cp39-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:22a5cb272895dce158b2cacdfdc3debd299019659f42947dbdac6f32d68fe832", size = 5283582, upload-time = "2026-05-04T22:58:53.017Z" },
+    { url = "https://files.pythonhosted.org/packages/02/e1/50edc7a50334807cc4791fc4a0ce7468b4a1416d9138eab358bfc9a3d70b/cryptography-48.0.0-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:2b4d59804e8408e2fea7d1fbaf218e5ec984325221db76e6a241a9abd6cdd95c", size = 4730479, upload-time = "2026-05-04T22:58:55.611Z" },
+    { url = "https://files.pythonhosted.org/packages/6f/af/99a582b1b1641ff5911ac559beb45097cf79efd4ead4657f578ef1af2d47/cryptography-48.0.0-cp39-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:984a20b0f62a26f48a3396c72e4bc34c66e356d356bf370053066b3b6d54634a", size = 4326481, upload-time = "2026-05-04T22:58:57.607Z" },
+    { url = "https://files.pythonhosted.org/packages/90/ee/89aa26a06ef0a7d7611788ffd571a7c50e368cc6a4d5eef8b4884e866edb/cryptography-48.0.0-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:5a5ed8fde7a1d09376ca0b40e68cd59c69fe23b1f9768bd5824f54681626032a", size = 4688713, upload-time = "2026-05-04T22:59:00.077Z" },
+    { url = "https://files.pythonhosted.org/packages/70/ba/bcb1b0bb7a33d4c7c0c4d4c7874b4a62ae4f56113a5f4baefa362dfb1f0f/cryptography-48.0.0-cp39-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:8cd666227ef7af430aa5914a9910e0ddd703e75f039cef0825cd0da71b6b711a", size = 5238165, upload-time = "2026-05-04T22:59:02.317Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/70/ca4003b1ce5ca3dc3186ada51908c8a9b9ff7d5cab83cc0d43ee14ec144f/cryptography-48.0.0-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:9071196d81abc88b3516ac8cdfad32e2b66dd4a5393a8e68a961e9161ddc6239", size = 4729947, upload-time = "2026-05-04T22:59:05.255Z" },
+    { url = "https://files.pythonhosted.org/packages/44/a0/4ec7cf774207905aef1a8d11c3750d5a1db805eb380ee4e16df317870128/cryptography-48.0.0-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:1e2d54c8be6152856a36f0882ab231e70f8ec7f14e93cf87db8a2ed056bf160c", size = 4822059, upload-time = "2026-05-04T22:59:07.802Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/75/a2e55f99c16fcac7b5d6c1eb19ad8e00799854d6be5ca845f9259eae1681/cryptography-48.0.0-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:a5da777e32ffed6f85a7b2b3f7c5cbc88c146bfcd0a1d7baf5fcc6c52ee35dd4", size = 4960575, upload-time = "2026-05-04T22:59:09.851Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/23/6e6f32143ab5d8b36ca848a502c4bcd477ae75b9e1677e3530d669062578/cryptography-48.0.0-cp39-abi3-win32.whl", hash = "sha256:77a2ccbbe917f6710e05ba9adaa25fb5075620bf3ea6fb751997875aff4ae4bd", size = 3279117, upload-time = "2026-05-04T22:59:12.019Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/9a/0fea98a70cf1749d41d738836f6349d97945f7c89433a259a6c2642eefeb/cryptography-48.0.0-cp39-abi3-win_amd64.whl", hash = "sha256:16cd65b9330583e4619939b3a3843eec1e6e789744bb01e7c7e2e62e33c239c8", size = 3792100, upload-time = "2026-05-04T22:59:14.884Z" },
+    { url = "https://files.pythonhosted.org/packages/be/d2/024b5e06be9d44cb021fb0e1a03d34d63989cf56a0fe62f3dfbab695b9b4/cryptography-48.0.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:84cf79f0dc8b36ac5da873481716e87aef31fcfa0444f9e1d8b4b2cece142855", size = 3950391, upload-time = "2026-05-04T22:59:17.415Z" },
+    { url = "https://files.pythonhosted.org/packages/bc/17/3861e17c56fa0fd37491a14a8673fdb77c57fc5693cafe745ea8b06dba75/cryptography-48.0.0-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:fdfef35d751d510fcef5252703621574364fec16418c4a1e5e1055248401054b", size = 4637126, upload-time = "2026-05-04T22:59:20.197Z" },
+    { url = "https://files.pythonhosted.org/packages/f0/0a/7e226dbff530f21480727eb764973a7bff2b912f8e15cd4f129e71b56d1d/cryptography-48.0.0-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:0890f502ddf7d9c6426129c3f49f5c0a39278ed7cd6322c8755ffca6ee675a13", size = 4667270, upload-time = "2026-05-04T22:59:22.647Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/f2/5a72274ca9f1b2a8b44a662ee0bf1b435909deb473d6f97bcd035bcdbc71/cryptography-48.0.0-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:ecde28a596bead48b0cfd2a1b4416c3d43074c2d785e3a398d7ec1fc4d0f7fbb", size = 4636797, upload-time = "2026-05-04T22:59:24.912Z" },
+    { url = "https://files.pythonhosted.org/packages/b4/e1/48cedb2fe63626e91ded1edad159e2a4fb8b6906c4425eb7749673077ce7/cryptography-48.0.0-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:4defde8685ae324a9eb9d818717e93b4638ef67070ac9bc15b8ca85f63048355", size = 4666800, upload-time = "2026-05-04T22:59:27.474Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/ca/7e8365deec19afb2b2c7be7c1c0aa8f99633b54e90c570999acda93260fc/cryptography-48.0.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:db63bf618e5dea46c07de12e900fe1cdd2541e6dc9dbae772a70b7d4d4765f6a", size = 3739536, upload-time = "2026-05-04T22:59:29.61Z" },
+]
+
 [[package]]
 name = "cssutils"
 version = "2.11.1"
@@ -470,7 +710,7 @@ name = "exceptiongroup"
 version = "1.3.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
+    { name = "typing-extensions", marker = "python_full_version < '3.11'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/0b/9f/a65090624ecf468cdca03533906e7c69ed7588582240cfe7cc9e770b50eb/exceptiongroup-1.3.0.tar.gz", hash = "sha256:b241f5885f560bc56a59ee63ca4c6a8bfa46ae4ad651af316d4e81817bb9fd88", size = 29749, upload-time = "2025-05-10T17:42:51.123Z" }
 wheels = [
@@ -771,7 +1011,7 @@ name = "importlib-metadata"
 version = "8.7.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "zipp" },
+    { name = "zipp", marker = "python_full_version < '3.10'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/76/66/650a33bd90f786193e4de4b3ad86ea60b53c89b669a5c7be931fac31cdb0/importlib_metadata-8.7.0.tar.gz", hash = "sha256:d13b81ad223b890aa16c5471f2ac3056cf76c5f10f82d6f9292f0b415f389000", size = 56641, upload-time = "2025-04-27T15:29:01.736Z" }
 wheels = [
@@ -1283,6 +1523,33 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cc/35/cc0aaecf278bb4575b8555f2b137de5ab821595ddae9da9d3cd1da4072c7/propcache-0.3.2-py3-none-any.whl", hash = "sha256:98f1ec44fb675f5052cccc8e609c46ed23a35a1cfd18545ad4e29002d858a43f", size = 12663, upload-time = "2025-06-09T22:56:04.484Z" },
 ]
 
+[[package]]
+name = "pycparser"
+version = "2.23"
+source = { registry = "https://pypi.org/simple" }
+resolution-markers = [
+    "python_full_version > '3.9' and python_full_version < '3.10'",
+    "python_full_version <= '3.9'",
+]
+sdist = { url = "https://files.pythonhosted.org/packages/fe/cf/d2d3b9f5699fb1e4615c8e32ff220203e43b248e1dfcc6736ad9057731ca/pycparser-2.23.tar.gz", hash = "sha256:78816d4f24add8f10a06d6f05b4d424ad9e96cfebf68a4ddc99c65c0720d00c2", size = 173734, upload-time = "2025-09-09T13:23:47.91Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/a0/e3/59cd50310fc9b59512193629e1984c1f95e5c8ae6e5d8c69532ccc65a7fe/pycparser-2.23-py3-none-any.whl", hash = "sha256:e5c6e8d3fbad53479cab09ac03729e0a9faf2bee3db8208a550daf5af81a5934", size = 118140, upload-time = "2025-09-09T13:23:46.651Z" },
+]
+
+[[package]]
+name = "pycparser"
+version = "3.0"
+source = { registry = "https://pypi.org/simple" }
+resolution-markers = [
+    "python_full_version >= '3.13'",
+    "python_full_version >= '3.11' and python_full_version < '3.13'",
+    "python_full_version == '3.10.*'",
+]
+sdist = { url = "https://files.pythonhosted.org/packages/1b/7d/92392ff7815c21062bea51aa7b87d45576f649f16458d78b7cf94b9ab2e6/pycparser-3.0.tar.gz", hash = "sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29", size = 103492, upload-time = "2026-01-21T14:26:51.89Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/0c/c3/44f3fbbfa403ea2a7c779186dc20772604442dde72947e7d01069cbe98e3/pycparser-3.0-py3-none-any.whl", hash = "sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992", size = 48172, upload-time = "2026-01-21T14:26:50.693Z" },
+]
+
 [[package]]
 name = "pygments"
 version = "2.19.2"
@@ -1576,7 +1843,8 @@ version = "1.8.0"
 source = { registry = "https://pypi.org/simple" }
 resolution-markers = [
     "python_full_version == '3.10.*'",
-    "python_full_version < '3.10'",
+    "python_full_version > '3.9' and python_full_version < '3.10'",
+    "python_full_version <= '3.9'",
 ]
 dependencies = [
     { name = "docutils", marker = "python_full_version < '3.11'" },