@camstack/server 1.2.489 → 1.2.490

package/dist/agent/agent-http.js

@@ -385,10 +385,11 @@ async function createAgentHttpServer(getBroker, config) {
     // eslint-disable-next-line oxc/no-async-endpoint-handlers
     app.post('/api/agent/config', async (req, reply) => {
         // `joinToken` is redeemed, never stored; `meshTls` only ever comes from an
-        // enrollment, never from a request body.
+        // enrollment (or is cleared via `clearMeshTls`), never pasted as PEM.
         const body = req.body ?? {};
         const joinToken = body['joinToken'];
-        const patch = Object.fromEntries(Object.entries(body).filter(([k]) => k !== 'joinToken' && k !== 'meshTls'));
+        const clearMeshTls = body['clearMeshTls'] === true;
+        const patch = Object.fromEntries(Object.entries(body).filter(([k]) => k !== 'joinToken' && k !== 'meshTls' && k !== 'clearMeshTls'));
         const existing = readConfigFile(config.configPath);
         // Join-token enrollment (mesh mTLS Release A): the hub address comes from
         // the token and wins over a `hubAddress` posted in the same form. Nothing is
@@ -411,6 +412,9 @@ async function createAgentHttpServer(getBroker, config) {
             merged['hubAddress'] = enrolled.hubAddress;
             merged['meshTls'] = enrolled.meshTls;
         }
+        else if (clearMeshTls) {
+            delete merged['meshTls'];
+        }
         writeConfigFile(config.configPath, merged);
         if (enrolled !== null) {
             console.log(`[Agent] Enrolled in the mesh CA via join token — hub ${enrolled.hubAddress}, ` +
@@ -432,11 +436,13 @@ async function createAgentHttpServer(getBroker, config) {
         // false-positive "Restart required" prompts on no-op saves.
         const reconnectRelevant = ['hubAddress', 'secret'];
         const needsReconnect = enrolled !== null ||
+            clearMeshTls ||
             reconnectRelevant.some((k) => Object.prototype.hasOwnProperty.call(patch, k) && patch[k] !== existing[k]);
         return {
             success: true,
             restartRequired: needsReconnect,
             ...(enrolled !== null ? { enrolled: true } : {}),
+            ...(clearMeshTls ? { clearedMeshTls: true } : {}),
         };
     });
     // -- Agent reconnect (applies new hub/secret config) ----------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.489",
+  "version": "1.2.490",
   "license": "MIT",
   "private": false,
   "files": [
@@ -37,8 +37,8 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.362",
-    "@camstack/addon-agent-ui": "1.2.197",
+    "@camstack/addon-admin-ui": "1.2.363",
+    "@camstack/addon-agent-ui": "1.2.198",
     "@camstack/addon-auth": "1.2.135",
     "@camstack/addon-decoder-nodeav": "1.2.122",
     "@camstack/addon-notifiers": "1.2.129",
@@ -48,7 +48,7 @@
     "@camstack/sdk": "1.2.128",
     "@camstack/system": "1.2.384",
     "@camstack/types": "1.2.334",
-    "@camstack/ui-library": "1.2.255",
+    "@camstack/ui-library": "1.2.256",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",