3 Commits

Author	SHA1	Message	Date
hsiegeln	f6657f811b	feat(license-minter): --verify round-trips before shipping ... Adds --verify (requires --public-key) to LicenseMinterCli. After writing the output file the CLI parses the freshly-minted token through LicenseValidator against the supplied public key. On verify failure the output file is deleted (so the bad token is not accidentally shipped) and the CLI exits 3. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-26 10:57:05 +02:00
hsiegeln	7300424a49	feat(license-minter): add LicenseMinterCli (without --verify) ... Reads PEM or base64 PKCS#8 Ed25519 private key, maps --max-foo-bar flags to max_foo_bar limit keys, parses --expires as a UTC date, defaults --grace-days to 0. Unknown flags fail fast with exit 2. --verify path is added in the next task. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-26 10:56:02 +02:00
hsiegeln	1ae5a1a27e	feat(license-minter): implement LicenseMinter library ... Pure signing primitive: serialises LicenseInfo to canonical JSON (sorted top-level keys via ORDER_MAP_ENTRIES_BY_KEYS plus a TreeMap for the limits sub-object) then signs with Ed25519. Round-trips through LicenseValidator and is byte-stable across runs for identical inputs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-26 10:55:11 +02:00