@faable/faable 4.13.0 → 4.14.0

package/dist/commands/deploy/domains/check.js

@@ -2,7 +2,7 @@ import { requireApi } from '../../../api/context.js';
 import { print_json, json_option } from '../../../lib/listing.js';
 import { log } from '../../../log.js';
 import { resolve_app_id } from '../resolve_app_id.js';
-import { find_by_fqdn, acme_record, cname_target, dns_badge } from './format.js';
+import { find_by_fqdn, acme_record, cname_target, dns_badge, tls_line } from './format.js';
 
 const domains_check = {
     command: 'check <fqdn>',
@@ -54,6 +54,7 @@ const domains_check = {
                 ? '✅ in place: the certificate is issued without waiting for the CNAME'
                 : '(optional; for a domain live elsewhere, so the move has no TLS gap)'}`);
         }
+        log.info(`  Certificate:    ${tls_line(domain)}`);
         if (status?.dns_checked_at) {
             log.info(`  Last checked:   ${status.dns_checked_at}`);
         }

package/dist/commands/deploy/domains/format.js

@@ -28,6 +28,18 @@ const acme_record = (domain) => ({
     target: domain.status?.acme_expected?.[0] ?? `${domain.id}.acme.faable.com`,
     ready: domain.status?.acme_state === 'ok'
 });
+// The certificate line of `domains check`: what the edge serves today.
+const tls_line = (domain) => {
+    if (!domain.tls)
+        return 'off (tls: false)';
+    if (domain.status?.tls_state === 'ok') {
+        const until = domain.status.tls_expires_at?.slice(0, 10);
+        return `✅ served${until ? `, valid until ${until}` : ''}`;
+    }
+    return domain.status?.acme_state === 'ok' || domain.status?.dns_state === 'ok'
+        ? '⏳ being issued — usually a couple of minutes'
+        : '⏳ issued once the CNAME (or the pre-validation record) is in place';
+};
 const find_by_fqdn = (domains, fqdn) => domains.find(d => d.fqdn.toLowerCase() === fqdn.toLowerCase());
 
-export { acme_record, cname_target, dns_badge, find_by_fqdn };
+export { acme_record, cname_target, dns_badge, find_by_fqdn, tls_line };

package/dist/mcp/tools.js

@@ -352,7 +352,7 @@ const TOOLS = [
     {
         name: 'check_domain',
         title: 'Check a domain',
-        description: 'DNS diagnostic of one custom domain: the CNAME it expects, what DNS answers today, and why it is not verified yet. `prevalidation_cname.ready` says whether the optional `_acme-challenge` record is in place, so the certificate is issued without waiting for the CNAME.',
+        description: 'DNS diagnostic of one custom domain: the CNAME it expects, what DNS answers today, and why it is not verified yet. `prevalidation_cname.ready` says whether the optional `_acme-challenge` record is in place, so the certificate is issued without waiting for the CNAME; `status.tls_state` is `ok` once the edge serves a valid certificate for the domain (`status.tls_expires_at`).',
         input: {
             app,
             project,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/faable",
-  "version": "4.13.0",
+  "version": "4.14.0",
   "main": "dist/index.js",
   "license": "MIT",
   "author": "Marc Pomar <marc@faable.com>",