From ea2ce7bb9e9942683f4b776bc7de87c30e36b918 Mon Sep 17 00:00:00 2001
From: morsh-bruno <morsh@usebruno.com>
Date: Fri, 24 Jul 2026 12:10:55 +0530
Subject: [PATCH 1/2] feat: add optional disabled flag to client certificates

---
 packages/oc-schema/src/opencollection.schema.json | 8 ++++++++
 packages/oc-spec-site/src/schema.json             | 8 ++++++++
 packages/oc-types/src/config/certificates.ts      | 2 ++
 3 files changed, 18 insertions(+)

diff --git a/packages/oc-schema/src/opencollection.schema.json b/packages/oc-schema/src/opencollection.schema.json
index fe48b436..87bb265a 100644
--- a/packages/oc-schema/src/opencollection.schema.json
+++ b/packages/oc-schema/src/opencollection.schema.json
@@ -262,6 +262,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the private key (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate"
         }
       },
       "required": ["domain", "type", "certificateFilePath", "privateKeyFilePath"],
@@ -286,6 +290,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the PKCS#12 file (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate"
         }
       },
       "required": ["domain", "type", "pkcs12FilePath"],
diff --git a/packages/oc-spec-site/src/schema.json b/packages/oc-spec-site/src/schema.json
index 1926c78a..6a676924 100644
--- a/packages/oc-spec-site/src/schema.json
+++ b/packages/oc-spec-site/src/schema.json
@@ -267,6 +267,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the private key (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate"
         }
       },
       "required": ["domain", "type", "certificateFilePath", "privateKeyFilePath"],
@@ -291,6 +295,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the PKCS#12 file (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate"
         }
       },
       "required": ["domain", "type", "pkcs12FilePath"],
diff --git a/packages/oc-types/src/config/certificates.ts b/packages/oc-types/src/config/certificates.ts
index 9d5fb684..fadbd5e2 100644
--- a/packages/oc-types/src/config/certificates.ts
+++ b/packages/oc-types/src/config/certificates.ts
@@ -8,6 +8,7 @@ export interface PemCertificate {
   certificateFilePath: string;
   privateKeyFilePath: string;
   passphrase?: string;
+  disabled?: boolean;
 }
 
 export interface Pkcs12Certificate {
@@ -15,6 +16,7 @@ export interface Pkcs12Certificate {
   type: 'pkcs12';
   pkcs12FilePath: string;
   passphrase?: string;
+  disabled?: boolean;
 }
 
 export type ClientCertificate = PemCertificate | Pkcs12Certificate;

From 5081cb2de7fe0d8bf2f287820b606709302ee189 Mon Sep 17 00:00:00 2001
From: morsh-bruno <morsh@usebruno.com>
Date: Fri, 24 Jul 2026 12:19:52 +0530
Subject: [PATCH 2/2] fix: add optional descriptor for disabled flag

---
 packages/oc-schema/src/opencollection.schema.json | 4 ++--
 packages/oc-spec-site/src/schema.json             | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/packages/oc-schema/src/opencollection.schema.json b/packages/oc-schema/src/opencollection.schema.json
index 87bb265a..79df5c89 100644
--- a/packages/oc-schema/src/opencollection.schema.json
+++ b/packages/oc-schema/src/opencollection.schema.json
@@ -265,7 +265,7 @@
         },
         "disabled": {
           "type": "boolean",
-          "description": "Disables this client certificate"
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "certificateFilePath", "privateKeyFilePath"],
@@ -293,7 +293,7 @@
         },
         "disabled": {
           "type": "boolean",
-          "description": "Disables this client certificate"
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "pkcs12FilePath"],
diff --git a/packages/oc-spec-site/src/schema.json b/packages/oc-spec-site/src/schema.json
index 6a676924..12e93043 100644
--- a/packages/oc-spec-site/src/schema.json
+++ b/packages/oc-spec-site/src/schema.json
@@ -270,7 +270,7 @@
         },
         "disabled": {
           "type": "boolean",
-          "description": "Disables this client certificate"
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "certificateFilePath", "privateKeyFilePath"],
@@ -298,7 +298,7 @@
         },
         "disabled": {
           "type": "boolean",
-          "description": "Disables this client certificate"
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "pkcs12FilePath"],