@camstack/system 1.2.274 → 1.2.276

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.274",
+  "version": "1.2.276",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -415,6 +415,7 @@
   },
   "devDependencies": {
     "@camstack/types": "*",
+    "@peculiar/x509": "^1.14.3",
     "@types/bcryptjs": "^2.4.6",
     "@types/better-sqlite3": "^7.6.13",
     "@types/js-yaml": "^4.0.9",

package/dist/tls/cert-openssl.d.ts

@@ -1,23 +0,0 @@
-import { CertIdentity } from './cert-identity.js';
-/** Subject of the local root. Distinct from the leaf's CN by construction. */
-export declare const CA_COMMON_NAME = "CamStack Local CA";
-export interface CaMaterialPaths {
-    readonly caCertPath: string;
-    readonly caKeyPath: string;
-}
-export interface LeafMaterialPaths {
-    readonly certPath: string;
-    readonly keyPath: string;
-}
-/**
- * A local root: 10 years, `pathlen:0` so it can sign leaves and nothing
- * else, and **no EKU** — Apple rejects an anchor asserting
- * `anyExtendedKeyUsage`, and a root with no EKU constrains nothing.
- */
-export declare function generateCa(tmpDir: string): Promise<CaMaterialPaths>;
-/**
- * A server leaf signed by the local root: `CA:FALSE`, and
- * `extendedKeyUsage=serverAuth` — not `anyExtendedKeyUsage`, which
- * Apple's `testAppTrustRoot_AnyEKU_AfterJul2019` asserts must fail.
- */
-export declare function issueLeaf(tmpDir: string, ca: CaMaterialPaths, identity: CertIdentity, commonName: string, validDays: number): Promise<LeafMaterialPaths>;