quickwin 3.0.0 → 3.0.1

package/lib/windows/version.d.ts

@@ -0,0 +1,27 @@
+/** 取文件版本资源大小
+ *  @returns 字节数（0 = 文件无版本资源）
+ *  @param args_0 lptstrFilename 文件路径（禁空）
+ *  @param args_1 lpdwHandle 出参槽（Info 步的入参句柄，MSDN 恒 0 但仍须传），
+ *                PtrArrayBuffer(4) + Uint32Array 读回 */
+export declare const GetFileVersionInfoSize: (args_0: string | (number & {
+    readonly ptrBrand: "WCHAR";
+}), args_1: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">) => number;
+/** 读版本资源进缓冲
+ *  @returns 成功 → 非 0
+ *  @param args_0 lptstrFilename 文件路径（禁空）
+ *  @param args_1 dwHandle Size 步读回的句柄（恒 0）
+ *  @param args_2 dwLen 缓冲字节数（= Size 返回值）
+ *  @param args_3 lpData 接收缓冲（PtrArrayBuffer(dwLen)） */
+export declare const GetFileVersionInfo: (args_0: string | (number & {
+    readonly ptrBrand: "WCHAR";
+}), args_1: number, args_2: number, args_3: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">) => number;
+/** 在版本资源缓冲内查询子块
+ *  @returns 成功 → 非 0
+ *  @param args_0 pBlock Info 步的资源缓冲（PtrArrayBuffer 直传）
+ *  @param args_1 lpszSubBlock 子块路径（禁空）：'\\' = 根块 VS_FIXEDFILEINFO、
+ *                '\\StringFileInfo\\040904B0\\FileVersion' 等字符串表项
+ *  @param args_2 lplpBuffer 出参槽（块内偏移指针写回），PtrArrayBuffer(8)
+ *  @param args_3 puLen 出参槽（块字节数，VS_FIXEDFILEINFO = 52），PtrArrayBuffer(4) */
+export declare const VerQueryValue: (args_0: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_1: string | (number & {
+    readonly ptrBrand: "WCHAR";
+}), args_2: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_3: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">) => number;

package/lib/windows/{winspool.ts → winspool.d.ts}

@@ -1,19 +1,3 @@
-// winspool.drv 绑定（打印后台处理：枚举 / 能力查询 / 原始作业链；品牌约定见
-// lib/windows/user32.ts 头注释）：
-//   - 打印机句柄（OpenPrinter 的 HPRINTER* 出参槽写回）位宽无关：出参槽 = <BYTE>ptr
-//     收 PtrArrayBuffer(8) + readPtr 读回 number，作业链句柄位 <>ptr 收宽（批 5 HKey 同型）
-//   - 结构位按方向分流（结构定义见 ./structs.ts）：DOC_INFO_1W 纯入参位注册 encoder →
-//     对象直传；PRINTER_INFO_2W 出参数组不注册 → structArray(PRINTER_INFO_2W).decode
-//     (buf, count) 读回（缓冲尾部含字符串，须显式 count），指针字段跟进读字符串
-//   - 枚举标注：DeviceCap 是单选查询位标枚举；PrinterEnum 是 LOCAL|CONNECTIONS 可组合
-//     flags → 裸 u32 + JSDoc（组合 OR 结果不是枚举成员，位标枚举反而传不进）
-import { bind, type CodecMap } from '../ffi/bind.js'
-import { DOC_INFO_1W } from './structs.js'
-
-// dll 名部分应用（工厂转调保泛型 infer，见 lib/windows/user32.ts 头注释）
-const b = <const S extends string, const LE extends CodecMap = {}>(name: string, sig: S, encoders?: LE) =>
-    bind('winspool.drv', name, sig, encoders)
-
 /** 枚举打印队列（Level=2 → PRINTER_INFO_2W 数组）；两段式：先
  *  NULL+cbBuf 0 拿 pcbNeeded，再按需分配缓冲重调
  *  @returns 成功 → 非 0
@@ -25,15 +9,12 @@ const b = <const S extends string, const LE extends CodecMap = {}>(name: string,
  *  @param args_4 cbBuf 缓冲字节数
  *  @param args_5 pcbNeeded 出参槽（需求字节数）PtrArrayBuffer(4)
  *  @param args_6 pcReturned 出参槽（返回条数）PtrArrayBuffer(4) */
-export const EnumPrinters = /*@__PURE__*/ b('EnumPrintersW',
-    'u32 <WCHAR>ptr u32 <BYTE>ptr u32 <BYTE>ptr <BYTE>ptr -> i32')
-
+export declare const EnumPrinters: (args_0: number, args_1: string | import("../ffi/ctype.js").MaybePtr<"WCHAR">, args_2: number, args_3: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_4: number, args_5: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_6: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">) => number;
 /** 取默认打印机名
  *  @returns 成功 → 非 0，0 = 失败（缓冲不足时 pcchBuffer 带回所需长度）
  *  @param args_0 pszBuffer 出参缓冲，WCHAR.alloc(n)、WCHAR.decode 读回
  *  @param args_1 pcchBuffer 出入长度槽（入 = 缓冲 WCHAR 容量，出 = 实际长度），PtrArrayBuffer(4) */
-export const GetDefaultPrinter = /*@__PURE__*/ b('GetDefaultPrinterW', '<BYTE>ptr <BYTE>ptr -> i32')
-
+export declare const GetDefaultPrinter: (args_0: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_1: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">) => number;
 /** 查设备能力；nCapability 单选 DeviceCap.*
  *  @returns 返回值随能力（数值能力 = 数值，
  *  -1 = 失败）
@@ -42,39 +23,44 @@ export const GetDefaultPrinter = /*@__PURE__*/ b('GetDefaultPrinterW', '<BYTE>pt
  *  @param args_2 nCapability 能力码（DeviceCap.HORZRES 等单选）
  *  @param args_3 pOutput 字符串列表型能力的缓冲；数值型查询传 NULL
  *  @param args_4 pDevmode DEVMODE，传 NULL */
-export const DeviceCapabilities = /*@__PURE__*/ b('DeviceCapabilitiesW',
-    '<WCHAR>ptr! <WCHAR>ptr u32@DeviceCap <BYTE>ptr <>ptr -> i32')
-
+export declare const DeviceCapabilities: (args_0: string | (number & {
+    readonly ptrBrand: "WCHAR";
+}), args_1: string | import("../ffi/ctype.js").MaybePtr<"WCHAR">, args_2: import("../../constants.js").DeviceCap, args_3: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_4: import("../ffi/ctype.js").MaybePtr<"">) => number;
 /** 打开打印机对象（不产生打印作业）
  *  @returns 成功 → 非 0，hPrinter 写回
  *  @param args_0 pPrinterName 打印机名（禁空）
  *  @param args_1 phPrinter 出参槽（句柄写回），PtrArrayBuffer(8) + readPtr 读回
  *  @param args_2 pDefault 默认值（Datatype/DevMode/DesiredAccess），传 NULL 全默认 */
-export const OpenPrinter = /*@__PURE__*/ b('OpenPrinterW', '<WCHAR>ptr! <BYTE>ptr <>ptr -> i32')
+export declare const OpenPrinter: (args_0: string | (number & {
+    readonly ptrBrand: "WCHAR";
+}), args_1: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_2: import("../ffi/ctype.js").MaybePtr<"">) => number;
 /** 关闭打印机句柄
  *  @returns 成功 → 非 0 */
-export const ClosePrinter = /*@__PURE__*/ b('ClosePrinter', '<>ptr -> i32')
+export declare const ClosePrinter: (args_0: import("../ffi/ctype.js").MaybePtr<"">) => number;
 /** 起打印作业
  *  @returns 作业 id（0 = 失败）
  *  @param args_0 hPrinter 打印机句柄
  *  @param args_1 dwLevel 固定 1（DOC_INFO_1W）
  *  @param args_2 pDocInfo DOC_INFO_1W 对象（指针字段收裸地址 number：WCHAR.encode(s).ptr，
  *                PAB 须在调用返回前保持引用） */
-export const StartDocPrinter = /*@__PURE__*/ b('StartDocPrinterW', '<>ptr u32 <DOC_INFO_1W>ptr -> u32',
-    { DOC_INFO_1W })
+export declare const StartDocPrinter: (args_0: import("../ffi/ctype.js").MaybePtr<"">, args_1: number, args_2: {
+    pDatatype?: import("../ffi/ctype.js").MaybePtr<""> | undefined;
+    pDocName?: import("../ffi/ctype.js").MaybePtr<""> | undefined;
+    pOutputFile?: import("../ffi/ctype.js").MaybePtr<""> | undefined;
+} | import("../ffi/ctype.js").MaybePtr<"DOC_INFO_1W">) => number;
 /** 结束打印作业（提交）
  *  @returns 成功 → 非 0 */
-export const EndDocPrinter = /*@__PURE__*/ b('EndDocPrinter', '<>ptr -> i32')
+export declare const EndDocPrinter: (args_0: import("../ffi/ctype.js").MaybePtr<"">) => number;
 /** 起页
  *  @returns 成功 → 非 0 */
-export const StartPagePrinter = /*@__PURE__*/ b('StartPagePrinter', '<>ptr -> i32')
+export declare const StartPagePrinter: (args_0: import("../ffi/ctype.js").MaybePtr<"">) => number;
 /** 结束页
  *  @returns 成功 → 非 0 */
-export const EndPagePrinter = /*@__PURE__*/ b('EndPagePrinter', '<>ptr -> i32')
+export declare const EndPagePrinter: (args_0: import("../ffi/ctype.js").MaybePtr<"">) => number;
 /** 写作业数据（RAW 直写 spooler）
  *  @returns 成功 → 非 0
  *  @param args_0 hPrinter 打印机句柄
  *  @param args_1 lpBuffer 数据缓冲（<BYTE>ptr，PtrArrayBuffer）
  *  @param args_2 nNumberOfBytesToWrite 写入字节数
  *  @param args_3 lpNumberOfBytesWritten 出参槽，PtrArrayBuffer(4) 读实际写入字节数 */
-export const WritePrinter = /*@__PURE__*/ b('WritePrinter', '<>ptr <BYTE>ptr u32 <BYTE>ptr -> i32')
+export declare const WritePrinter: (args_0: import("../ffi/ctype.js").MaybePtr<"">, args_1: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">, args_2: number, args_3: import("../ffi/ctype.js").PtrArrayBuffer<any> | import("../ffi/ctype.js").MaybePtr<"BYTE">) => number;

package/package.json

@@ -1,7 +1,7 @@
 {
   "type": "module",
   "name": "quickwin",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "QuickJS Win32 runtime — GUI, networking, WASM, FFI, and more",
   "bin": {
     "quickwin": "qwin.exe",
@@ -34,18 +34,27 @@
     "type": "git",
     "url": "git+https://github.com/quickwinlabs/quickwin.git"
   },
+  "dependencies": {
+    "@types/react-reconciler": "^0.33.0",
+    "react-reconciler": "^0.33.0"
+  },
+  "peerDependencies": {
+    "@types/react": "^19.2.17",
+    "react": "^19.2.7"
+  },
+  "peerDependenciesMeta": {
+    "@types/react": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@quickwinlabs/mupdf-wasm": "^1.28.0",
     "@types/node": "^24.13.2",
     "@types/react": "^19.2.17",
-    "@types/react-reconciler": "^0.33.0",
     "@types/ws": "^8.18.1",
     "esbuild": "^0.28.0",
-    "typescript": "^7.0.2"
-  },
-  "dependencies": {
     "react": "^19.2.7",
-    "react-reconciler": "^0.33.0",
+    "typescript": "^7.0.2",
     "web-streams-polyfill": "^4.3.0",
     "ws": "^8.21.0"
   }

package/lib/abort.ts

@@ -1,69 +0,0 @@
-// ── Minimal AbortSignal / AbortController ──
-//
-// quickwin has no EventTarget/DOM runtime, so this is a self-contained,
-// dependency-free subset of the WHATWG API used for client-disconnect
-// notifications on the HTTP server (and fetch cancellation).
-//
-// Semantics mirror the web platform on the points that matter:
-//   - abort() fires listeners synchronously (same call stack), once, idempotently;
-//   - listeners registered AFTER the signal already aborted are ignored
-//     (late listeners are never called); consumers must pre-check signal.aborted.
-
-export interface AbortEvent {
-    readonly type: 'abort'
-    readonly target: unknown
-}
-
-export class AbortSignal {
-    private _aborted = false
-    private _reason: unknown = undefined
-    private _listeners: ((e: AbortEvent) => void)[] = []
-    onabort: ((e: AbortEvent) => void) | null = null
-
-    get aborted(): boolean {
-        return this._aborted
-    }
-
-    get reason(): unknown {
-        return this._reason
-    }
-
-    addEventListener(type: string, listener: (e: AbortEvent) => void): void {
-        if (this._aborted || type !== 'abort') return
-        this._listeners.push(listener)
-    }
-
-    removeEventListener(type: string, listener: (e: AbortEvent) => void): void {
-        if (this._aborted || type !== 'abort') return
-        const i = this._listeners.indexOf(listener)
-        if (i >= 0) this._listeners.splice(i, 1)
-    }
-
-    /** @internal fired by AbortController.abort() */
-    _fire(reason: unknown): void {
-        if (this._aborted) return
-        this._aborted = true
-        this._reason = reason
-        const ev: AbortEvent = { type: 'abort', target: this }
-        const ls = this._listeners
-        this._listeners = []
-        if (this.onabort) {
-            try { this.onabort(ev) } catch (e) { console.error('[abort] onabort handler error:', e) }
-        }
-        for (const l of ls) {
-            try { l(ev) } catch (e) { console.error('[abort] listener error:', e) }
-        }
-    }
-
-    throwIfAborted(): void {
-        if (this._aborted) throw this._reason
-    }
-}
-
-export class AbortController {
-    readonly signal = new AbortSignal()
-
-    abort(reason?: unknown): void {
-        this.signal._fire(reason)
-    }
-}

package/lib/assert.ts

@@ -1,7 +0,0 @@
-export function assertNonNullable<T>(v: T, msg?: string): asserts v is NonNullable<T> {
-    if (v === null || v === undefined) throw new Error(msg ?? `Assert failed: unexpected ${v}`)
-}
-
-export function assertArrayBuffer(v: ArrayBufferLike): asserts v is ArrayBuffer {
-    if (!(v instanceof ArrayBuffer)) throw new Error('Assert failed: expected ArrayBuffer')
-}

package/lib/bitmap.ts

@@ -1,39 +0,0 @@
-// 按像素建位图 —— gui 模块下沉到 JS 层的复合逻辑（原 js_createBitmapFromPixels）。
-// 旧 C 体是 CreateDIBSection + memcpy 直写位数据；FFI 侧没有「JS 缓冲 → 原生地址」的
-// 批量写原语（ffi 只导出 readBytes / writeByte，逐字节循环不值当），改用 GDI 自带的
-// SetDIBits 把调用方缓冲装进 DIB 段：ColorUse.RGB_COLORS 下 hdc 被忽略（MSDN：
-// "used only if the DIB_PAL_COLORS constant is set ... otherwise it is ignored"），
-// 双机实测传 NULL 可用、GetDIBits 读回逐字节一致（含 alpha），与旧 C 的 memcpy 等价。
-import { NULL, PtrArrayBuffer, type MaybePtr } from './ffi/ctype.js'
-import { CreateDIBSection, DeleteObject, SetDIBits } from './windows/gdi32.js'
-import { BITMAPINFOHEADER } from './windows/structs.js'
-import { ColorUse } from '../constants'
-
-/** 建 32bpp 自顶向下 DIB 段位图（像素为 BGRA，[B,G,R,A] 字节序，alpha 保留 —— 可喂
- *  ImageListAdd(ILC_COLOR32) 等）。width/height ≤ 0 或像素缓冲不足 width*height*4 →
- *  NULL（同旧 gui.CreateBitmapFromPixels 语义：非法入参静默返空，由调用方按「无图」处理）；
- *  GDI 失败同样返 NULL（已建的位图当场回收）。
- *  位图归调用方所有：用完 DeleteObject。 */
-export function createBitmapFromPixels(width: number, height: number, pixels: ArrayBuffer): MaybePtr<'HGDIOBJ'> {
-    if (width <= 0 || height <= 0) return NULL
-    const len = width * height * 4
-    if (pixels.byteLength < len) return NULL
-    // 32bpp BI_RGB：头部即全部（无颜色表）；负 biHeight = 自顶向下，与 JS 缓冲行序一致
-    const bi = BITMAPINFOHEADER.encode({
-        biSize: BITMAPINFOHEADER.size,
-        biWidth: width,
-        biHeight: -height,
-        biPlanes: 1,
-        biBitCount: 32,
-    })
-    const hbm = CreateDIBSection(NULL, bi.ptr, ColorUse.RGB_COLORS, NULL, NULL, 0)
-    if (!hbm) return NULL
-    // 像素先落自有原生缓冲（BYTE.encode 需带 .ptr 的缓冲），再让 GDI 装进 DIB 段
-    const src = new PtrArrayBuffer<'BYTE'>(len)
-    new Uint8Array(src).set(new Uint8Array(pixels, 0, len))
-    if (SetDIBits(NULL, hbm, 0, height, src, bi.ptr, ColorUse.RGB_COLORS) !== height) {
-        DeleteObject(hbm)
-        return NULL
-    }
-    return hbm
-}

package/lib/cache-utils.ts

@@ -1,40 +0,0 @@
-// ── INI-format cache helpers ──
-
-export interface IniCache {
-    headers: Record<string, string>
-    meta: Record<string, string>
-}
-
-export function parseIni(text: string): IniCache {
-    const headers: Record<string, string> = {}
-    const meta: Record<string, string> = {}
-    let section = ''
-    for (const line of text.split('\n')) {
-        const trimmed = line.trim()
-        if (trimmed === '[headers]') { section = 'headers'; continue }
-        if (trimmed === '[meta]') { section = 'meta'; continue }
-        if (!section || !trimmed) continue
-        const colon = trimmed.indexOf(':')
-        if (colon < 0) continue
-        const key = trimmed.slice(0, colon).trim()
-        const val = trimmed.slice(colon + 1).trim()
-        if (section === 'headers') headers[key] = val
-        else if (section === 'meta') meta[key] = val
-    }
-    return { headers, meta }
-}
-
-export function toIni(headers: Record<string, string>, meta: Record<string, string>): string {
-    let s = ''
-    if (Object.keys(headers).length > 0) {
-        s += '[headers]\n'
-        for (const k in headers) {
-            s += k + ': ' + headers[k] + '\n'
-        }
-    }
-    s += '[meta]\n'
-    for (const k in meta) {
-        s += k + ': ' + meta[k] + '\n'
-    }
-    return s
-}

package/lib/certs.ts

@@ -1,258 +0,0 @@
-// ── Trusted CA bundle ──
-//
-// XP SP3 ships a root store frozen in 2008, so modern chains terminate
-// in roots the OS does not know. Those roots are inlined here instead of
-// being read from disk at handshake time: they travel inside the JS
-// bundle and are pushed into wolfSSL's process-wide trust store as soon
-// as this module is imported.
-//
-// The process-wide store has a fixed QW_CA_SLOTS (16) capacity; this
-// bundle uses 8, leaving headroom for future anchors. If the bundle
-// ever outgrows it, raise QW_CA_SLOTS in src/quickjs-wolfssl.c first —
-// a full store throws at import time.
-//
-// Each anchor covers a different root hierarchy, and none is
-// interchangeable: wolfSSL resolves a CA by AKID/SKID and does not walk
-// every candidate, so a missing anchor fails the handshake with
-// ASN_NO_SIGNER_E rather than falling back.
-//
-//   * GLOBALSIGN_R3 — cross-signed R3 (issued by R1, notAfter 2028-01-28,
-//     SHA256 44:5E:EC:78:...:94:3D:4E:BB, RSA 2048). This is what the
-//     post-2018 GlobalSign intermediates chain to: baidu.com, cdn.jsdelivr,
-//     bilibili.com, jd.com.
-//   * GLOBALSIGN_R1 — self-signed R1, the signer of the cross-signed R3.
-//   * USERTRUST_ECC_CA — cross-signature parent of Sectigo Root E46
-//     (github.com), EC P-384.
-//   * DIGICERT_GLOBAL_G2 — cross-signature parent of Microsoft TLS RSA Root
-//     G2 (bing.com), RSA 2048.
-//   * GLOBALSIGN_R46, ISRG_X1, ISRG_X2 — the newer GlobalSign R46 and
-//     Let's Encrypt hierarchies (taobao.com, qq.com).
-//   * GTS_R4 — cross-signed GTS Root R4 (issued by GlobalSign Root CA,
-//     notAfter 2028-01-28, EC P-256). unpkg.com and other properties
-//     whose chains terminate at Google Trust Services (WE1/E5/E6
-//     intermediates).
-//
-// Known limitation (wolfSSL, not the bundle): GLOBALSIGN_R46 and ISRG_X1
-// are RSA 4096, and this wolfSSL build compiles the SP bignum with
-// SP_INT_BITS=3072 (the default when no FFDHE >= 4096 is enabled, see
-// wolfcrypt/sp_int.h), so RSA_MAX_SIZE resolves to 3072 and wc_RsaVerify
-// rejects a 4096-bit key with WC_KEY_SIZE_E (-234). asn.c flattens every
-// crypto failure to ASN_SIG_CONFIRM_E, so those handshakes surface as
-// -155. Raising SP_INT_BITS to 4096 in WOLFSSL_CMAKE_OPTS clears it; until
-// then taobao.com, qq.com and bing.com fail.
-//
-// Import this module wherever the bundle needs to trust the public web.
-// It is a no-op side effect: entries are registered at import time and
-// picked up lazily by fetch()/WebSocket/the C module loader.
-
-import * as wolfssl from 'wolfssl'
-
-const GLOBALSIGN_R3 = `-----BEGIN CERTIFICATE-----
-MIIETjCCAzagAwIBAgINAe5fFp3/lzUrZGXWajANBgkqhkiG9w0BAQsFADBXMQsw
-CQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UECxMH
-Um9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTE4MDkxOTAw
-MDAwMFoXDTI4MDEyODEyMDAwMFowTDEgMB4GA1UECxMXR2xvYmFsU2lnbiBSb290
-IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2JhbFNp
-Z24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJXaQeQZ4Ihb1wIO2
-hMoonv0FdhHFrYhy/EYCQ8eyip0EXyTLLkvhYIJG4VKrDIFHcGzdZNHr9SyjD4I9
-DCuul9e2FIYQebs7E4B3jAjhSdJqYi8fXvqWaN+JJ5U4nwbXPsnLJlkNc96wyOkm
-DoMVxu9bi9IEYMpJpij2aTv2y8gokeWdimFXN6x0FNx04Druci8unPvQu7/1PQDh
-BjPogiuuU6Y6FnOM3UEOIDrAtKeh6bJPkC4yYOlXy7kEkmho5TgmYHWyn3f/kRTv
-riBJ/K1AFUjRAjFhGV64l++td7dkmnq/X8ET75ti+w1s4FRpFqkD2m7pg5NxdsZp
-hYIXAgMBAAGjggEiMIIBHjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB
-/zAdBgNVHQ4EFgQUj/BLf6guRSSuTVD6Y5qL3uLdG7wwHwYDVR0jBBgwFoAUYHtm
-GkUNl8qJUC99BM00qP/8/UswPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFo
-dHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9yb290cjEwMwYDVR0fBCwwKjAooCag
-JIYiaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LmNybDBHBgNVHSAEQDA+
-MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
-b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACNw6c/ivvVZrpRCb8RD
-M6rNPzq5ZBfyYgZLSPFAiAYXof6r0V88xjPy847dHx0+zBpgmYILrMf8fpqHKqV9
-D6ZX7qw7aoXW3r1AY/itpsiIsBL89kHfDwmXHjjqU5++BfQ+6tOfUBJ2vgmLwgtI
-fR4uUfaNU9OrH0Abio7tfftPeVZwXwzTjhuzp3ANNyuXlava4BJrHEDOxcd+7cJi
-WOx37XMiwor1hkOIreoTbv3Y/kIvuX1erRjvlJDKPSerJpSZdcfL03v3ykzTr1Eh
-kluEfSufFT90y1HonoMOFm8b50bOI7355KKL0jlrqnkckSziYSQtjipIcJDEHsXo
-4HA=
------END CERTIFICATE-----
- `
-
-const GLOBALSIGN_R1 = `-----BEGIN CERTIFICATE-----
-MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG
-A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv
-b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw
-MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i
-YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT
-aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ
-jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp
-xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp
-1Wrjsok6Vjk4bwY8iGlbKk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdG
-snUOhugZitVtbNV4FpWi6cgKOOvyJBNPc1STE4U6G7weNLWLBYy5d4ux2x8gkasJ
-U26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrXgzT/LCrBbBlDSgeF59N8
-9iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E
-BTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0B
-AQUFAAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOz
-yj1hTdNGCbM+w6DjY1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE
-38NflNUVyRRBnMRddWQVDf9VMOyGj/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymP
-AbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXUad
-DKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME
-HMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==
------END CERTIFICATE-----
-`
-
-const USERTRUST_ECC_CA = `-----BEGIN CERTIFICATE-----
-MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDEL
-MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl
-eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT
-JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAwMjAx
-MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
-Ck5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVUaGUg
-VVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlm
-aWNhdGlvbiBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqflo
-I+d61SRvU8Za2EurxtW20eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinng
-o4N+LZfQYcTxmdwlkWOrfzCjtHDix6EznPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0G
-A1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNVHQ8BAf8EBAMCAQYwDwYD
-VR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBBHU6+4WMB
-zzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbW
-RNZu9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg=
------END CERTIFICATE-----`
-
-const DIGICERT_GLOBAL_G2 = `-----BEGIN CERTIFICATE-----
-MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
-MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
-2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
-1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
-q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
-tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
-vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP
-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV
-5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY
-1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4
-NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG
-Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91
-8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe
-pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
-MrY=
------END CERTIFICATE-----`
-
-const GLOBALSIGN_R46 = `-----BEGIN CERTIFICATE-----
-MIIFWjCCA0KgAwIBAgISEdK7udcjGJ5AXwqdLdDfJWfRMA0GCSqGSIb3DQEBDAUA
-MEYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYD
-VQQDExNHbG9iYWxTaWduIFJvb3QgUjQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMy
-MDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYt
-c2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQCsrHQy6LNl5brtQyYdpokNRbopiLKkHWPd08EsCVeJ
-OaFV6Wc0dwxu5FUdUiXSE2te4R2pt32JMl8Nnp8semNgQB+msLZ4j5lUlghYruQG
-vGIFAha/r6gjA7aUD7xubMLL1aa7DOn2wQL7Id5m3RerdELv8HQvJfTqa1VbkNud
-316HCkD7rRlr+/fKYIje2sGP1q7Vf9Q8g+7XFkyDRTNrJ9CG0Bwta/OrffGFqfUo
-0q3v84RLHIf8E6M6cqJaESvWJ3En7YEtbWaBkoe0G1h6zD8K+kZPTXhc+CtI4wSE
-y132tGqzZfxCnlEmIyDLPRT5ge1lFgBPGmSXZgjPjHvjK8Cd+RTyG/FWaha/LIWF
-zXg4mutCagI0GIMXTpRW+LaCtfOW3T3zvn8gdz57GSNrLNRyc0NXfeD412lPFzYE
-+cCQYDdF3uYM2HSNrpyibXRdQr4G9dlkbgIQrImwTDsHTUB+JMWKmIJ5jqSngiCN
-I/onccnfxkF0oE32kRbcRoxfKWMxWXEM2G/CtjJ9++ZdU6Z+Ffy7dXxd7Pj2Fxzs
-x2sZy/N78CsHpdlseVR2bJ0cpm4O6XkMqCNqo98bMDGfsVR7/mrLZqrcZdCinkqa
-ByFrgY/bxFn63iLABJzjqls2k+g9vXqhnQt2sQvHnf3PmKgGwvgqo6GDoLclcqUC
-4wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
-HQ4EFgQUA1yrc4GHqMywptWU4jaWSf8FmSwwDQYJKoZIhvcNAQEMBQADggIBAHx4
-7PYCLLtbfpIrXTncvtgdokIzTfnvpCo7RGkerNlFo048p9gkUbJUHJNOxO97k4Vg
-JuoJSOD1u8fpaNK7ajFxzHmuEajwmf3lH7wvqMxX63bEIaZHU1VNaL8FpO7XJqti
-2kM3S+LGteWygxk6x9PbTZ4IevPuzz5i+6zoYMzRx6Fcg0XERczzF2sUyQQCPtIk
-pnnpHs6i58FZFZ8d4kuaPp92CC1r2LpXFNqD6v6MVenQTqnMdzGxRBF6XLE+0xRF
-FRhiJBPSy03OXIPBNvIQtQ6IbbjhVp+J3pZmOUdkLG5NrmJ7v2B0GbhWrJKsFjLt
-rWhV/pi60zTe9Mlhww6G9kuEYO4Ne7UyWHmRVSyBQ7N0H3qqJZ4d16GLuc1CLgSk
-ZoNNiTW2bKg2SnkheCLQQrzRQDGQob4Ez8pn7fXwgNNgyYMqIgXQBztSvwyeqiv5
-u+YfjyW6hY0XHgL+XVAEV8/+LbzvXMAaq7afJMbfc2hIkCwU9D9SGuTSyxTDYWnP
-4vkYxboznxSjBF25cfe1lNj2M8FawTSLfJvdkzrnE6JwYZ+vj+vYxXX4M2bUdGc6
-N3ec592kD3ZDZopD8p/7DEJ4Y9HiD2971KE9dJeFt0g5QdYg/NA6s/rob8SKunE3
-vouXsXgxT7PntgMTzlSdriVZzH81Xwj3QEUxeCp6
------END CERTIFICATE-----`
-
-const ISRG_X1 = `-----BEGIN CERTIFICATE-----
-MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
-WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
-ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
-h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
-0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
-A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
-T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
-B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
-B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
-KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
-OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
-jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
-qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
-rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
-hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
-ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
-3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
-NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
-ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
-TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
-jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
-oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
-4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
-mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
-emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
------END CERTIFICATE-----`
-
-const ISRG_X2 = `-----BEGIN CERTIFICATE-----
-MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw
-CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg
-R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00
-MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT
-ZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw
-EAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW
-+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9
-ItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T
-AQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI
-zj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW
-tL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1
-/q4AaOeMSQ+2b1tbFfLn
------END CERTIFICATE-----`
-
-const GTS_R4 = `-----BEGIN CERTIFICATE-----
-MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX
-MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE
-CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx
-NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT
-GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0
-MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube
-Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e
-WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd
-BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd
-BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN
-l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw
-Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v
-Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG
-SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ
-odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY
-+SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs
-kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep
-8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1
-vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl
------END CERTIFICATE-----`
-
-// Register at import time. Importers of this module get the anchors
-// without writing any code themselves. addTrustedCA only returns the
-// slot count (-1 when full/empty); the fatal-vs-not decision is ours.
-function trust(pem: string): void {
-    if (wolfssl.addTrustedCA(pem) < 0)
-        throw new Error('certs: trust store full or empty PEM')
-}
-trust(GLOBALSIGN_R3)
-trust(GLOBALSIGN_R1)
-trust(USERTRUST_ECC_CA)
-trust(DIGICERT_GLOBAL_G2)
-trust(GLOBALSIGN_R46)
-trust(ISRG_X1)
-trust(ISRG_X2)
-trust(GTS_R4)
-
-export const TRUSTED_CA_COUNT = 8

package/lib/dpi.ts

@@ -1,31 +0,0 @@
-// DPI 与系统字体 —— gui 模块下沉到 JS 层的两处复合逻辑（原 js_getScaleFactor /
-// js_createSystemDpiFont）。两者都只按「一次操作一次」调用，FFI 的固定溢价无感；
-// 留在 C 只会与 lib/windows 的绑定重复一层，遂收在此处单点实现。
-import { NULL, type Ptr } from './ffi/ctype.js'
-import { GetDC, ReleaseDC, SystemParametersInfo } from './windows/user32.js'
-import { GetDeviceCaps, CreateFontIndirect } from './windows/gdi32.js'
-import { NONCLIENTMETRICSW } from './windows/structs.js'
-import { DeviceCap, Spi } from '../constants'
-
-/** 屏幕缩放系数（96 DPI = 1）：GetDC(NULL) → GetDeviceCaps(LOGPIXELSX) → ReleaseDC 成对释放 */
-export function getScaleFactor(): number {
-    const hdc = GetDC(NULL)
-    const dpi = hdc ? GetDeviceCaps(hdc, DeviceCap.LOGPIXELSX) : 96
-    if (hdc) ReleaseDC(NULL, hdc)
-    return dpi / 96
-}
-
-/** 系统消息字体（CreateFontIndirectW(NONCLIENTMETRICS.lfMessageFont)）——界面控件的默认字体；
- *  出参位不注册 encoder：encode({cbSize}) 建缓冲带初值 → 传 .ptr → decode 读回。
- *  cbSize/uiParam 必须与系统认知的结构尺寸一致：Vista+ 为 504（含尾部 iPaddedBorderWidth）、
- *  XP/2003 为 500 —— 先按 504 试，失败退回 500（lfMessageFont 落在前 500 字节内，尾部留 0）；
- *  两次都失败 → NULL，调用方按「无字体」处理（控件回落系统默认字体）。 */
-export function createSystemDpiFont(): Ptr<'HGDIOBJ'> | NULL {
-    const ncm = NONCLIENTMETRICSW.encode({ cbSize: NONCLIENTMETRICSW.size })
-    if (!SystemParametersInfo(Spi.GETNONCLIENTMETRICS, NONCLIENTMETRICSW.size, ncm, 0)) {
-        const legacySize = NONCLIENTMETRICSW.size - 4
-        NONCLIENTMETRICSW.encode({ cbSize: legacySize }, ncm)
-        if (!SystemParametersInfo(Spi.GETNONCLIENTMETRICS, legacySize, ncm, 0)) return NULL
-    }
-    return CreateFontIndirect(NONCLIENTMETRICSW.decode(ncm).lfMessageFont)
-}