@stacksjs/rpx 0.11.19 → 0.11.20

package/dist/cert-inspect.d.ts

@@ -1,14 +1,16 @@
 /**
- * Normalize openssl / security fingerprint output to uppercase hex without separators.
+ * Normalize an X509 fingerprint (`AA:BB:..`) or a `security`-listing hash to
+ * uppercase hex without separators, so values from different sources compare.
  */
 export declare function normalizeSha256Fingerprint(raw: string): string;
 export declare function readCertSha256Fingerprint(certPath: string): string | null;
 export declare function readCertCommonName(certPath: string): string | null;
 export declare function certIncludesSanHostnames(certPath: string, hostnames: string[]): boolean;
 /**
- * True when :443 (or `port`) presents a chain trusted by `caPath` for `domain`.
+ * True when the live server at `domain:port` presents a chain trusted by `caPath`
+ * — a real TLS handshake pinned to the CA (tlsx `verifyServerChain`; no openssl).
  */
-export declare function verifyHttpsChain(domain: string, caPath: string, port?: number): boolean;
+export declare function verifyHttpsChain(domain: string, caPath: string, port?: number): Promise<boolean>;
 /**
  * Parse `security find-certificate -Z` listing lines into SHA-256 hashes.
  */

package/dist/{chunk-83dqq28c.js → chunk-bs9e342s.js}

@@ -1 +1 @@
-import{Aa as n,Ba as o,na as a,oa as b,pa as c,qa as d,ra as e,sa as f,ta as g,ua as h,va as i,wa as j,xa as k,ya as l,za as m}from"./chunk-rs8gqpax.js";import"./chunk-w888yhnp.js";export{m as tearDownDevelopmentDns,l as syncDevelopmentDnsFromRegistry,d as stopDnsServer,c as startDnsServer,i as setupResolver,k as setupDevelopmentDns,g as resolverFilePath,n as removeResolver,j as removeLegacyTldResolvers,o as reconcileStaleDevelopmentDns,f as isRpxDevelopmentDnsAnswering,e as isDnsServerRunning,h as contentLooksLikeRpxResolver,b as RPX_RESOLVER_MARKER,a as DNS_PORT};
+import{Aa as n,Ba as o,na as a,oa as b,pa as c,qa as d,ra as e,sa as f,ta as g,ua as h,va as i,wa as j,xa as k,ya as l,za as m}from"./chunk-vxj1ckdm.js";import"./chunk-w888yhnp.js";export{m as tearDownDevelopmentDns,l as syncDevelopmentDnsFromRegistry,d as stopDnsServer,c as startDnsServer,i as setupResolver,k as setupDevelopmentDns,g as resolverFilePath,n as removeResolver,j as removeLegacyTldResolvers,o as reconcileStaleDevelopmentDns,f as isRpxDevelopmentDnsAnswering,e as isDnsServerRunning,h as contentLooksLikeRpxResolver,b as RPX_RESOLVER_MARKER,a as DNS_PORT};