@canner-ca/cli 0.5.7 → 0.5.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canner-ca/cli",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "Canner deploy CLI — git push from any terminal, no GitHub required",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -28,7 +28,7 @@ import { randomUUID } from 'node:crypto';
 import { stdin as input, stdout as output } from 'node:process';
 import { create as tarCreate } from 'tar';
 
-const VERSION = '0.5.7';
+const VERSION = '0.5.8';
 const DEFAULT_API_BASE = 'https://api.canner.ca';
 const CONFIG_DIR = join(homedir(), '.canner');
 const CREDENTIALS_PATH = join(CONFIG_DIR, 'credentials');
@@ -828,7 +828,13 @@ async function cmdDomains(args) {
     if (JSON_MODE) return emitJSON(body);
     const d = body?.domain ?? {};
     info(`${green('added')} ${bold(d.hostname ?? hostname)} ${dim(`(${d.status ?? 'pending'})`)}`);
-    if (body?.platform_ip) muted(`Point an A record at ${body.platform_ip}, then run \`canner domains verify ${hostname}\`.`);
+    if (body?.acme_cname) {
+      // A wildcard (*.example.com) needs two records: the wildcard itself, and the certificate delegation.
+      const host = d.hostname ?? hostname;
+      muted(`Add these two DNS records, then run \`canner domains verify '${host}'\`:`);
+      muted(`  CNAME  ${host}  ->  ${body.cname_target}`);
+      muted(`  CNAME  ${body.acme_cname.name}  ->  ${body.acme_cname.target}   (lets us issue and renew the certificate; keep it in place)`);
+    } else if (body?.platform_ip) muted(`Point an A record at ${body.platform_ip}, then run \`canner domains verify ${hostname}\`.`);
     return;
   }