refactor: lower cognitive complexity ceiling

[kjanat]

Summary

• lower Biome cognitive complexity limit to 20
• extract focused helpers across validation, parsing, revocation, PKCS, docs, and tests without behavioral changes
• keep OpenSSL differential checks and Zed TypeScript settings aligned

Verification

• bun lint:biome
• bun typecheck
• bun test (1184 pass, 0 fail)

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR decomposes internal DER, cryptographic, X.509, certificate-verification, CRL, OCSP, and documentation implementations into focused helpers. It also updates editor and linter settings, test harness gating, PKITS and OpenSSL utilities, and malformed-extension test reuse. Public APIs and exported signatures remain unchanged.

Estimated code review effort: 5 (Critical) | ~120 minutes

Possibly related PRs

• kjanat/micro509#1 — Related internal crypto, DER, verification, and revocation refactors.
• kjanat/micro509#6 — Related CRL evidence freshness and revocation decision changes.
• kjanat/micro509#7 — Related name-constraints engine changes.

Suggested labels: enhancement, tests

Poem

Arrr, tidy helpers sail the code,
DER and CRLs lighten their load.
OCSP charts a cleaner sea,
Tests guard every API.
No public signatures walk the plank!

🚥 Pre-merge checks | ✅ 4 | ❌ 4

❌ Failed checks (4 warnings)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 21.36% which is insufficient. The required threshold is 30.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.
Changelog Update	⚠️ Warning	src/internal/verify/verify-path.ts changed, but CHANGELOG.md was not updated in the commit.	Add an entry under ## [Unreleased] for the code changes, or if this is a release, add the new version header and links in CHANGELOG.md.
Semver Version Bump Validation	⚠️ Warning	Source files changed in src/, but package.json stayed at 0.9.0 in both base and PR, so no SemVer bump was made.	Bump the repo version in package.json (or another allowed version file) from 0.9.0 to the next SemVer release, e.g. 0.9.1.
Agents.Md Documentation Updated	⚠️ Warning	src/internal/verify/verify-path.ts refactors internal verification architecture, but no matching src/internal/AGENTS.md change was included.	Update src/internal/AGENTS.md to cover the new verification helper split and any responsibility/ownership changes in src/internal/verify/.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise, descriptive, and matches the refactor focus of the changeset.
Description check	✅ Passed	The description clearly matches the PR’s refactor and configuration updates.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/kjanat/micro509@39

pnpm add https://pkg.pr.new/kjanat/micro509@39

bun add https://pkg.pr.new/kjanat/micro509@39

commit: 1075af5

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	micro509	1075af5	Commit Preview URL Branch Preview URL	Jul 12 2026, 05:42 PM