@devrouter/cli 0.0.36 → 0.0.37

package/dist/devrouter.js

@@ -2049,7 +2049,7 @@ function loadRepoConfig(repoPath) {
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.36" : "0.0.0-dev";
+    const cliVersion = true ? "0.0.37" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -5794,7 +5794,7 @@ async function buildDoctorReport(options = {}) {
       const config = runtimeConfig.config;
       loadedConfig = config;
       loadedWorkspace = runtimeConfig.workspace;
-      const cliVersion = true ? "0.0.36" : "0.0.0-dev";
+      const cliVersion = true ? "0.0.37" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       if (configVersion && cliVersion !== "0.0.0-dev" && compareSemver(configVersion, cliVersion) > 0) {
         addCheck(checks, {
@@ -6457,7 +6457,8 @@ function probeHttpRoute(host, options = {}) {
     String(options.maxTimeSeconds ?? 5)
   ];
   if (tlsEnabled) {
-    args.push("--cacert", getMkcertRootCAPath({ repoPath: options.repoPath }));
+    getMkcertRootCAPath({ repoPath: options.repoPath });
+    args.push("--cacert", CERT_FILE);
   }
   args.push(url);
   const result = (0, import_node_child_process13.spawnSync)("curl", args, { encoding: "utf-8" });
@@ -11424,7 +11425,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.0.36" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.0.37" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.0.36",
+  "version": "0.0.37",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.0.37.md

@@ -0,0 +1,30 @@
+# Upgrade to devrouter 0.0.37
+
+Devrouter HTTPS readiness probes now pin curl to the exact certificate served
+by the local Traefik router. This avoids a macOS SecureTransport failure while
+retaining hostname verification, SNI, and the existing route status contract.
+
+1. Install `@devrouter/cli@0.0.37` on the host and bump `.devrouter.yml` to
+   `devrouter.version: 0.0.37`.
+2. No schema or data migration is required.
+3. Re-run `devrouter doctor --repo <checkout> --json` and then use
+   `devrouter ensure <checkout> --json` for managed startup. The readiness
+   probe still requires the existing mkcert setup and does not use an
+   insecure certificate bypass.
+
+Verification:
+
+- Run `devrouter -V --repo <checkout>` and confirm both the installed CLI and
+  local repository report `0.0.37`.
+- Run `devrouter repo devcontainer verify --repo <checkout> --json` and confirm
+  the static checks pass.
+- Run `devrouter ensure <checkout> --json` and confirm the HTTPS route reaches
+  the existing status contract (`100..499` accepted, `5xx` rejected).
+
+Report template:
+
+- CLI/config version: `0.0.37`
+- mkcert setup and certificate readiness: `<passed or details>`
+- Static verification: `<passed or details>`
+- Managed HTTPS readiness: `<passed or details>`
+- Remaining blockers: `<none or details>`