chore(core): prune endpoint.rs and heavy deps (Phase 4)

- Delete crates/alknet-core/src/endpoint.rs (1606 lines)
- Remove pub mod endpoint from lib.rs, update doc comment
- Remove rcgen, rustls-pemfile, rustls-acme deps from Cargo.toml
- Remove acme feature
- Update fingerprint.rs doc comment references to alknet-endpoint/alknet-tls

Cargo.lock

@@ -99,10 +99,7 @@ dependencies = [
  "iroh",
  "quinn",
  "rand 0.8.6",
- "rcgen",
  "rustls",
- "rustls-acme",
- "rustls-pemfile",
  "rustls-pki-types",
  "serde",
  "serde_json",

crates/alknet-core/Cargo.toml

@@ -3,7 +3,7 @@ name = "alknet-core"
 version.workspace = true
 edition.workspace = true
 license.workspace = true
-description = "Core library for ALPN-based protocol dispatch: ProtocolHandler trait, Connection, auth, config, and multi-connectivity endpoint"
+description = "Core library for ALPN-based protocol dispatch: ProtocolHandler trait, Connection, auth, config, and transport-level credentials"
 repository.workspace = true
 
 [lib]
@@ -13,7 +13,6 @@ name = "alknet_core"
 default = ["quinn"]
 quinn = ["dep:quinn"]
 iroh = ["dep:iroh"]
-acme = ["dep:rustls-acme"]
 
 [dependencies]
 tokio = { version = "1", features = ["full"] }
@@ -21,7 +20,6 @@ quinn = { version = "0.11", optional = true }
 iroh = { version = "1.0", optional = true, default-features = false, features = ["tls-aws-lc-rs"] }
 rustls = "0.23"
 rustls-pki-types = "1"
-rustls-pemfile = "2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 toml = "0.8"
@@ -35,9 +33,7 @@ futures = "0.3"
 sha2 = "0.10"
 hex = "0.4"
 rand = "0.8"
-rcgen = "0.13"
 ed25519-dalek = { version = "2", features = ["rand_core"] }
-rustls-acme = { version = "0.12", optional = true, features = ["aws-lc-rs"] }
 
 [dev-dependencies]
 tempfile = "3"

crates/alknet-core/src/fingerprint.rs

@@ -10,9 +10,9 @@
 //!   relationship). Not used for arbitrary public APIs (those use CA
 //!   verification via `WebPkiServerVerifier`, not fingerprint pinning).
 //!
-//! Shared by the server-side endpoint (`alknet_core::endpoint`, which extracts
+//! Shared by the server-side endpoint (`alknet-endpoint`, which extracts
 //! the fingerprint from the presented client cert for `PeerEntry` resolution)
-//! and the client-side `FingerprintPinVerifier` in `alknet_call::client`
+//! and the client-side `FingerprintPinVerifier` in `alknet-tls`
 //! (which matches the server's presented cert against a pinned fingerprint).
 
 use sha2::{Digest, Sha256};

crates/alknet-core/src/lib.rs

@@ -3,13 +3,13 @@
 //! Every handler crate depends on this crate. It provides the
 //! [`ProtocolHandler`][crate::types::ProtocolHandler] trait, the
 //! [`Connection`][crate::types::Connection] wrapper, auth primitives,
-//! hot-reloadable configuration, and the [`AlknetEndpoint`][crate::endpoint::AlknetEndpoint]
+//! hot-reloadable configuration, and transport-level credential types
-//! that dispatches incoming QUIC connections by ALPN string.
+//! ([`ConnectionCredentials`][crate::credentials::ConnectionCredentials],
+//! [`RemoteIdentity`][crate::credentials::RemoteIdentity]).
 
 pub mod auth;
 pub mod config;
 pub mod credentials;
-pub mod endpoint;
 pub mod fingerprint;
 pub mod ownership;
 pub mod store;