fix(launcher): coexist with another MITM via ca-trust.d instead of clobbering NODE_EXTRA_CA_CERTS - #283

Merged

vsits-proxy-builder[bot] merged 8 commits into

cnighswonger:mainfrom

codeslake:ca-trust-upstream

Aug 1, 2026

Commits on Aug 1, 2026

fix(launcher): publish our CA to ca-trust.d and read a merged bundle, instead of clobbering NODE_EXTRA_CA_CERTS

codeslake
and
claude
committed
fix(launcher): reject a torn merged CA bundle, and publish our own pem atomically

codeslake
and
claude
committed
refactor(test): hoist the wrapper fork/collect helper, drop a duplicated comment

codeslake
and
claude
committed
docs: document the ca-trust.d contract and what a consumer can actually check

codeslake
and
claude
committed
fix(launcher): parse the CA bundle instead of matching substrings; isolate tests

codeslake
and
claude
committed
refactor: trim duplicated comment tables; keep the assertion that earns its place

codeslake
and
claude
committed
docs: genericize sibling-component references for upstream

codeslake
and
claude
committed
fix(launcher): age-gate the temp reaper; drop the publish-dir override

codeslake
and
claude
committed