@hamedb89/localghost 0.1.6 → 0.1.8

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli.ts
-import { existsSync as existsSync6, readFileSync as readFileSync6, unlinkSync } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, unlinkSync } from "fs";
 import { Command, InvalidArgumentError } from "commander";
 
 // src/activity.ts
@@ -280,6 +280,16 @@ function startCaddy(path) {
     stdio: "inherit"
   });
 }
+async function trustCaddy(path) {
+  await execa("caddy", ["trust", "--config", path], {
+    cwd: dirname3(path),
+    stdio: "inherit"
+  });
+}
+
+// src/context.ts
+import { existsSync as existsSync3 } from "fs";
+import { pathToFileURL } from "url";
 
 // src/port.ts
 import { createServer } from "net";
@@ -308,6 +318,11 @@ async function findAvailablePort(startPort, options = {}) {
 }
 
 // src/context.ts
+var LOCALGHOST_PROJECT_CONFIG_FILES = [
+  "localghost.config.mjs",
+  "localghost.config.js",
+  "localghost.config.cjs"
+];
 function parsePort(value) {
   if (!value) return void 0;
   const port = Number.parseInt(value, 10);
@@ -321,6 +336,11 @@ function envDynamicPort() {
   if (!value) return void 0;
   return ["1", "true", "yes", "on"].includes(value.toLowerCase());
 }
+function envHttps() {
+  const value = process.env.LOCALGHOST_HTTPS;
+  if (!value) return void 0;
+  return ["1", "true", "yes", "on"].includes(value.toLowerCase());
+}
 function readOptionsFromContext(options) {
   return {
     cwd: options.cwd ?? process.cwd(),
@@ -338,22 +358,58 @@ function withRuntimePort(entries, requestedPort, port) {
 function uniqueHosts(entries) {
   return [...new Set(entries.map((entry) => entry.host))];
 }
+function isAliasableHost(host) {
+  return host.includes(".") && !host.startsWith("www.") && !host.includes(":");
+}
+function getDefaultWwwAlias(host) {
+  return isAliasableHost(host) ? `www.${host}` : null;
+}
+function addDefaultWwwAliases(entries) {
+  const seen = new Set(entries.map((entry) => entry.host));
+  const aliases = [];
+  for (const entry of entries) {
+    const alias = getDefaultWwwAlias(entry.host);
+    if (alias && !seen.has(alias)) {
+      aliases.push({ host: alias, port: entry.port, target: `127.0.0.1:${entry.port}` });
+      seen.add(alias);
+    }
+  }
+  return [...entries, ...aliases];
+}
+function defined(input2) {
+  return Object.fromEntries(Object.entries(input2).filter(([, value]) => typeof value !== "undefined"));
+}
+async function readProjectConfig(cwd, configFile) {
+  if (configFile === false) return {};
+  const candidates = configFile ? [configFile] : LOCALGHOST_PROJECT_CONFIG_FILES;
+  const path = candidates.map((candidate) => resolveDevHostsPath({ cwd, fileName: candidate }).path).find((candidate) => existsSync3(candidate));
+  if (!path) return {};
+  const imported = await import(`${pathToFileURL(path).href}?localghost=${Date.now()}`);
+  const config = imported.default ?? imported;
+  return { config, path };
+}
 async function resolveLocalghostContext(options = {}) {
   const cwd = options.cwd ?? process.cwd();
-  const readOptions = readOptionsFromContext({ ...options, cwd });
+  const projectConfig = await readProjectConfig(cwd, options.localghostConfig);
+  const merged = {
+    ...projectConfig.config,
+    ...defined(options)
+  };
+  const readOptions = readOptionsFromContext({ ...merged, cwd });
   const resolvedPath = resolveDevHostsPath(readOptions);
   const configEntries = readDevHosts(readOptions);
-  const requestedPort = options.port ?? envPort() ?? configEntries[0]?.port ?? 5173;
-  const dynamicPort = options.dynamicPort ?? envDynamicPort() ?? false;
-  const bindHost = options.bindHost ?? "127.0.0.1";
+  const requestedPort = merged.port ?? envPort() ?? configEntries[0]?.port ?? 5173;
+  const dynamicPort = merged.dynamicPort ?? envDynamicPort() ?? false;
+  const bindHost = merged.bindHost ?? "127.0.0.1";
   const probeHost = typeof bindHost === "string" ? bindHost : "127.0.0.1";
   const port = dynamicPort ? await findAvailablePort(requestedPort, { host: probeHost }) : requestedPort;
-  const entries = withRuntimePort(configEntries, requestedPort, port);
+  const wwwAlias = merged.wwwAlias ?? true;
+  const entries = wwwAlias ? addDefaultWwwAliases(withRuntimePort(configEntries, requestedPort, port)) : withRuntimePort(configEntries, requestedPort, port);
   const hosts = uniqueHosts(entries);
-  const primaryHost = options.primaryHost ?? entries.find((entry) => entry.port === port)?.host ?? hosts[0] ?? `${sanitizeProjectName(getProjectName(cwd))}.localhost`;
+  const primaryHost = merged.primaryHost ?? entries.find((entry) => entry.port === port)?.host ?? hosts[0] ?? `${sanitizeProjectName(getProjectName(cwd))}.localhost`;
   return {
     cwd,
-    projectName: sanitizeProjectName(options.project ?? getProjectName(cwd)),
+    projectName: sanitizeProjectName(merged.project ?? getProjectName(cwd)),
     readOptions,
     configPath: resolvedPath.path,
     configFileName: resolvedPath.fileName,
@@ -365,7 +421,9 @@ async function resolveLocalghostContext(options = {}) {
     dynamicPort,
     bindHost,
     primaryHost,
-    https: options.https === true
+    https: merged.https ?? envHttps() ?? false,
+    wwwAlias,
+    ...projectConfig.path ? { projectConfigPath: projectConfig.path } : {}
   };
 }
 
@@ -490,11 +548,11 @@ async function removeSystemHosts(projectName) {
 }
 
 // src/init.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
 import { join as join5 } from "path";
 function detectPackageManager(cwd = process.cwd()) {
-  if (existsSync3(join5(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync3(join5(cwd, "yarn.lock"))) return "yarn";
+  if (existsSync4(join5(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync4(join5(cwd, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function packageRunCommand(packageManager, script) {
@@ -538,6 +596,7 @@ function updatePackageScripts(packageJsonPath, configFile) {
     "localghost:proxy:https": scripts["localghost:proxy:https"] ?? `localghost dev${configFlag} --https`,
     "localghost:run": scripts["localghost:run"] ?? `localghost run${configFlag} --`,
     "localghost:ready": scripts["localghost:ready"] ?? `localghost status${configFlag} --ready`,
+    "localghost:trust": scripts["localghost:trust"] ?? `localghost trust${configFlag}`,
     "localghost:ps": scripts["localghost:ps"] ?? "localghost ps",
     "localghost:print": scripts["localghost:print"] ?? `localghost print${configFlag}`,
     "localghost:routes": scripts["localghost:routes"] ?? `localghost routes${configFlag}`,
@@ -566,7 +625,7 @@ function initLocalghost(options = {}) {
   const packageManager = options.packageManager ?? detectPackageManager(cwd);
   const configFile = options.configFile ?? LOCALGHOST_CONFIG_FILE;
   const configPath = join5(cwd, configFile);
-  const configExists = existsSync3(configPath);
+  const configExists = existsSync4(configPath);
   if (configExists && !options.force) {
     return {
       configPath,
@@ -587,7 +646,7 @@ function initLocalghost(options = {}) {
   return {
     configPath,
     configCreated: true,
-    ...existsSync3(packageJsonPath) ? { packageJsonPath } : {},
+    ...existsSync4(packageJsonPath) ? { packageJsonPath } : {},
     packageJsonChanged,
     packageManager,
     nextSteps: [
@@ -644,7 +703,7 @@ function formatDomainRoutes(entries, options = {}) {
 }
 
 // src/state.ts
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { join as join6 } from "path";
 var LOCALGHOST_STATE_FILE = "ops/local/localghost-state.json";
 function getLocalghostStatePath(cwd = process.cwd()) {
@@ -652,22 +711,27 @@ function getLocalghostStatePath(cwd = process.cwd()) {
 }
 function readLocalghostState(cwd = process.cwd()) {
   const path = getLocalghostStatePath(cwd);
-  if (!existsSync4(path)) return null;
+  if (!existsSync5(path)) return null;
   return JSON.parse(readTextFile(path));
 }
 function writeLocalghostState(cwd, state) {
   const path = getLocalghostStatePath(cwd);
-  writeTextFile(path, `${JSON.stringify({ version: 1, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), ...state }, null, 2)}
+  writeTextFile(path, `${JSON.stringify({ ...state, version: 1, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)}
 `);
   return path;
 }
+function patchLocalghostState(cwd, patch) {
+  const current = readLocalghostState(cwd);
+  if (!current) return null;
+  return writeLocalghostState(cwd, { ...current, ...patch });
+}
 
 // src/update-check.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname4, join as join7 } from "path";
 var LOCALGHOST_PACKAGE_NAME = "@hamedb89/localghost";
-var LOCALGHOST_VERSION = "0.1.6";
+var LOCALGHOST_VERSION = "0.1.8";
 var UPDATE_CHECK_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_CHECK_NOTIFY_TTL_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_CHECK_TIMEOUT_MS = 900;
@@ -683,7 +747,7 @@ function getUpdateCheckCachePath(env = process.env) {
   return join7(cacheRoot, "localghost", "update-check.json");
 }
 function readCache(path = getUpdateCheckCachePath()) {
-  if (!existsSync5(path)) return null;
+  if (!existsSync6(path)) return null;
   try {
     return JSON.parse(readFileSync5(path, "utf8"));
   } catch {
@@ -864,6 +928,15 @@ function parseBooleanLike(value) {
   if (["0", "false", "no", "n", "off"].includes(normalized)) return false;
   throw new InvalidArgumentError("Value must be yes or no.");
 }
+function contextOptionsFromCli(options) {
+  return {
+    cwd: options.cwd,
+    ...options.project ? { project: options.project } : {},
+    ...options.config && options.config.length > 0 ? { configFiles: options.config } : {},
+    ...options.configPattern ? { configPattern: options.configPattern } : {},
+    ...useHttps(options) ? { https: true } : {}
+  };
+}
 function readOptionsFromCli(options) {
   return {
     cwd: options.cwd,
@@ -880,10 +953,22 @@ async function assertCaddyReady() {
     "Localghost will not install it for you. No surprise spells."
   ].join("\n"));
 }
+function existingTrustMarkers(cwd) {
+  const state = readLocalghostState(cwd);
+  return {
+    ...state?.caddyTrustedAt ? { caddyTrustedAt: state.caddyTrustedAt } : {},
+    ...state?.caddyTrustPromptedAt ? { caddyTrustPromptedAt: state.caddyTrustPromptedAt } : {}
+  };
+}
 function explainHostsPassword() {
   console.log("Localghost may ask for your password to update its managed block in /etc/hosts.");
   console.log("It will only touch the lines between # localghost:start and # localghost:end.");
 }
+function explainTrustPassword() {
+  console.log("Localghost can trust Caddy's local HTTPS CA so browsers stop showing local certificate warnings.");
+  console.log("macOS may ask for your password to add that local CA to Keychain.");
+  console.log("This only affects Caddy's local development certificates on this machine.");
+}
 function useHttps(options) {
   return options.https === true || options.ssl === true;
 }
@@ -895,10 +980,10 @@ function getSetupCommand(options) {
   return `localghost setup${configFlags}${options.https ? " --https" : ""}`;
 }
 function getSetupReadiness(options) {
-  const projectName = sanitizeProjectName(options.project ?? getProjectName(options.cwd));
+  const projectName = sanitizeProjectName(options.projectName ?? options.project ?? getProjectName(options.cwd));
   const readOptions = readOptionsFromCli(options);
-  const entries = readDevHosts(readOptions);
-  const configPath = resolveDevHostsPath(readOptions).path;
+  const entries = options.entries ?? readDevHosts(readOptions);
+  const configPath = options.configPath ?? resolveDevHostsPath(readOptions).path;
   const caddyfilePath = getCaddyfilePath(options.cwd);
   const statePath = getLocalghostStatePath(options.cwd);
   const state = readLocalghostState(options.cwd);
@@ -923,7 +1008,7 @@ function getSetupReadiness(options) {
     reasons.push(`Could not read ${hostsPath}: ${message}`);
   }
   if (!options.ignoreCaddyfile) {
-    if (!existsSync6(caddyfilePath)) {
+    if (!existsSync7(caddyfilePath)) {
       reasons.push(`Missing Caddyfile at ${caddyfilePath}.`);
     } else {
       const expectedCaddyfile = renderCaddyfile(entries, { https });
@@ -959,9 +1044,42 @@ async function runSetupFromReadiness(cwd, https, readiness) {
     ...hostsResult.tempPath ? { hostsTempPath: hostsResult.tempPath } : {},
     caddyfilePath,
     caddyHttps: https,
+    ...existingTrustMarkers(cwd),
     entries: readiness.entries
   });
 }
+function wait(ms) {
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
+}
+async function runTrust(cwd, caddyfilePath) {
+  await wait(350);
+  try {
+    await trustCaddy(caddyfilePath);
+  } catch {
+    await wait(750);
+    await trustCaddy(caddyfilePath);
+  }
+  patchLocalghostState(cwd, { caddyTrustedAt: (/* @__PURE__ */ new Date()).toISOString() });
+  console.log("Local HTTPS trust is ready.");
+}
+async function maybeTrustCaddy(options) {
+  if (!options.https) return;
+  const state = readLocalghostState(options.cwd);
+  if (!options.trust && state?.caddyTrustedAt) return;
+  let shouldTrust = options.trust === true;
+  if (!shouldTrust) {
+    if (state?.caddyTrustPromptedAt || !canPrompt()) return;
+    explainTrustPassword();
+    shouldTrust = await confirm("Trust local HTTPS certificates now?", true);
+  }
+  if (!shouldTrust) {
+    patchLocalghostState(options.cwd, { caddyTrustPromptedAt: (/* @__PURE__ */ new Date()).toISOString() });
+    console.log("Okay. Localghost will still run HTTPS, but the browser may show a certificate warning.");
+    console.log("Run localghost trust when you want to trust Caddy's local CA.");
+    return;
+  }
+  await runTrust(options.cwd, options.caddyfilePath);
+}
 function maybePid(pid) {
   return typeof pid === "number" && Number.isInteger(pid) && pid > 0 ? pid : void 0;
 }
@@ -1074,11 +1192,11 @@ program.command("update").description("Check npm for a newer localghost release"
 program.command("setup").description("Update /etc/hosts and generate/validate Caddyfile").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--https", "Generate a local HTTPS Caddy proxy with Caddy local certificates").option("--ssl", "Alias for --https").action(async (options) => {
   assertLocalDevelopment("setup");
   await assertCaddyReady();
-  const https = useHttps(options);
-  const projectName = sanitizeProjectName(options.project ?? getProjectName(options.cwd));
-  const readOptions = readOptionsFromCli(options);
-  const configPath = resolveDevHostsPath(readOptions).path;
-  const entries = readDevHosts(readOptions);
+  const context = await resolveLocalghostContext({ ...contextOptionsFromCli(options), dynamicPort: false });
+  const https = context.https;
+  const projectName = context.projectName;
+  const configPath = context.configPath;
+  const entries = context.entries;
   warnAboutLocalMdns(entries);
   logDomainRoutes(entries, { https });
   explainHostsPassword();
@@ -1100,6 +1218,7 @@ program.command("setup").description("Update /etc/hosts and generate/validate Ca
     ...hostsResult.tempPath ? { hostsTempPath: hostsResult.tempPath } : {},
     caddyfilePath: caddyfile,
     caddyHttps: https,
+    ...existingTrustMarkers(options.cwd),
     entries
   });
   console.log(`Generated ${caddyfile}`);
@@ -1107,6 +1226,20 @@ program.command("setup").description("Update /etc/hosts and generate/validate Ca
   console.log(`State ${statePath}`);
   console.log("Setup complete.");
 });
+program.command("trust").description("Trust Caddy's local HTTPS CA for this project's HTTPS proxy").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--https", "Use HTTPS mode for the Caddyfile").option("--ssl", "Alias for --https").action(async (options) => {
+  assertLocalDevelopment("trust");
+  await assertCaddyReady();
+  const context = await resolveLocalghostContext({ ...contextOptionsFromCli(options), dynamicPort: false });
+  if (!context.https) {
+    throw new Error("Localghost HTTPS is not enabled for this context. Set https: true in localghost.config.mjs or pass --https.");
+  }
+  warnAboutLocalMdns(context.entries);
+  logDomainRoutes(context.entries, { https: true });
+  explainTrustPassword();
+  const caddyfile = await writeCaddyfile(context.entries, options.cwd, { https: true });
+  await validateCaddyfile(caddyfile);
+  await runTrust(options.cwd, caddyfile);
+});
 program.command("reset").description("Remove Localghost setup state without deleting .localghost").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).action(async (options) => {
   assertLocalDevelopment("reset");
   const projectName = sanitizeProjectName(options.project ?? getProjectName(options.cwd));
@@ -1114,13 +1247,13 @@ program.command("reset").description("Remove Localghost setup state without dele
   const statePath = getLocalghostStatePath(options.cwd);
   explainHostsPassword();
   const hostsResult = await removeSystemHosts(projectName);
-  if (existsSync6(caddyfilePath)) {
+  if (existsSync7(caddyfilePath)) {
     unlinkSync(caddyfilePath);
     console.log(`Removed ${caddyfilePath}`);
   } else {
     console.log(`${caddyfilePath} was not present`);
   }
-  if (existsSync6(statePath)) {
+  if (existsSync7(statePath)) {
     unlinkSync(statePath);
     console.log(`Removed ${statePath}`);
   } else {
@@ -1140,7 +1273,7 @@ program.command("teardown").description("Remove Localghost's managed /etc/hosts
   const hostsResult = await removeSystemHosts(projectName);
   const caddyfilePath = getCaddyfilePath(options.cwd);
   let caddyfileRemoved = false;
-  if (options.removeCaddyfile && existsSync6(caddyfilePath)) {
+  if (options.removeCaddyfile && existsSync7(caddyfilePath)) {
     unlinkSync(caddyfilePath);
     caddyfileRemoved = true;
   }
@@ -1164,10 +1297,17 @@ program.command("teardown").description("Remove Localghost's managed /etc/hosts
   }
   console.log(`State ${statePath}`);
 });
-program.command("status").description("Print Localghost's project-local state file").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--ready", "Exit non-zero when setup is missing or stale").option("--https", "Check setup readiness for HTTPS mode").option("--ssl", "Alias for --https").option("--json", "Print raw JSON").action((options) => {
+program.command("status").description("Print Localghost's project-local state file").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--ready", "Exit non-zero when setup is missing or stale").option("--https", "Check setup readiness for HTTPS mode").option("--ssl", "Alias for --https").option("--json", "Print raw JSON").action(async (options) => {
   const state = readLocalghostState(options.cwd);
   const statePath = getLocalghostStatePath(options.cwd);
-  const readiness = getSetupReadiness({ ...options, https: useHttps(options) });
+  const context = await resolveLocalghostContext({ ...contextOptionsFromCli(options), dynamicPort: false });
+  const readiness = getSetupReadiness({
+    ...options,
+    https: context.https,
+    entries: context.entries,
+    configPath: context.configPath,
+    projectName: context.projectName
+  });
   if (options.json) {
     console.log(JSON.stringify({ state, setup: readiness }, null, 2));
     return;
@@ -1183,6 +1323,8 @@ program.command("status").description("Print Localghost's project-local state fi
     if (state.hostsPath) console.log(`Hosts: ${state.hostsPath}`);
     if (state.caddyfilePath) console.log(`Caddyfile: ${state.caddyfilePath}`);
     if (typeof state.caddyHttps === "boolean") console.log(`Mode: ${state.caddyHttps ? "HTTPS" : "HTTP"}`);
+    if (state.caddyTrustedAt) console.log(`HTTPS trust: yes (${state.caddyTrustedAt})`);
+    if (!state.caddyTrustedAt && state.caddyTrustPromptedAt) console.log(`HTTPS trust: not enabled (asked ${state.caddyTrustPromptedAt})`);
     if (typeof state.caddyfileRemoved === "boolean") console.log(`Caddyfile removed: ${state.caddyfileRemoved}`);
   }
   if (readiness.ready) {
@@ -1198,16 +1340,23 @@ program.command("status").description("Print Localghost's project-local state fi
     process.exitCode = 1;
   }
 });
-program.command("routes").description("Print domain to upstream routes").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--http", "Print domain URLs with http instead of https").option("--https", "Print domain URLs with https").option("--ssl", "Alias for --https").action((options) => {
-  const entries = readDevHosts(readOptionsFromCli(options));
-  warnAboutLocalMdns(entries);
-  console.log(formatDomainRoutes(entries, { https: options.http ? false : useHttps(options) }));
+program.command("routes").description("Print domain to upstream routes").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--http", "Print domain URLs with http instead of https").option("--https", "Print domain URLs with https").option("--ssl", "Alias for --https").action(async (options) => {
+  const context = await resolveLocalghostContext({ ...contextOptionsFromCli(options), dynamicPort: false });
+  warnAboutLocalMdns(context.entries);
+  console.log(formatDomainRoutes(context.entries, { https: options.http ? false : context.https }));
 });
-program.command("dev").description("Run the Localghost Caddy proxy after setup").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--https", "Run a local HTTPS proxy with Caddy local certificates").option("--ssl", "Alias for --https").option("--setup", "Run setup before starting the proxy when setup is missing or stale").action(async (options) => {
+program.command("dev").description("Run the Localghost Caddy proxy after setup").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--https", "Run a local HTTPS proxy with Caddy local certificates").option("--ssl", "Alias for --https").option("--setup", "Run setup before starting the proxy when setup is missing or stale").option("--trust", "Trust Caddy's local HTTPS CA before starting the proxy").action(async (options) => {
   assertLocalDevelopment("dev");
   await assertCaddyReady();
-  const https = useHttps(options);
-  const readiness = getSetupReadiness({ ...options, https });
+  const context = await resolveLocalghostContext({ ...contextOptionsFromCli(options), dynamicPort: false });
+  const https = context.https;
+  const readiness = getSetupReadiness({
+    ...options,
+    https,
+    entries: context.entries,
+    configPath: context.configPath,
+    projectName: context.projectName
+  });
   if (!readiness.ready) {
     if (!options.setup) {
       throw new Error(
@@ -1233,6 +1382,7 @@ program.command("dev").description("Run the Localghost Caddy proxy after setup")
       ...hostsResult.tempPath ? { hostsTempPath: hostsResult.tempPath } : {},
       caddyfilePath,
       caddyHttps: https,
+      ...existingTrustMarkers(options.cwd),
       entries: readiness.entries
     });
   }
@@ -1241,6 +1391,17 @@ program.command("dev").description("Run the Localghost Caddy proxy after setup")
   const caddyfile = await writeCaddyfile(readiness.entries, options.cwd, { https });
   await validateCaddyfile(caddyfile);
   const caddy = startCaddy(caddyfile);
+  try {
+    await maybeTrustCaddy({
+      cwd: options.cwd,
+      https,
+      caddyfilePath: caddyfile,
+      ...typeof options.trust === "boolean" ? { trust: options.trust } : {}
+    });
+  } catch (error) {
+    if (!caddy.killed) caddy.kill("SIGINT");
+    throw error;
+  }
   const caddyPid = maybePid(caddy.pid);
   const runRecord = registerLocalghostRun({
     mode: "dev",
@@ -1259,20 +1420,27 @@ program.command("dev").description("Run the Localghost Caddy proxy after setup")
     cleanupRun();
   }
 });
-program.command("run").description("Run Caddy and a dev command from the same Localghost context").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--port <number>", "Initial app port", parsePort2).option("--https", "Run a local HTTPS proxy with Caddy local certificates").option("--ssl", "Alias for --https").option("--setup", "Run setup before starting when setup is missing or stale").option("--dynamic-port [yes|no]", "Use the requested port if free, otherwise continue upward", parseBooleanLike, false).argument("<command...>", "Command to run after --, for example: localghost run -- vite").action(async (command, options) => {
+program.command("run").description("Run Caddy and a dev command from the same Localghost context").option("--project <name>", "Managed /etc/hosts block name").option("--cwd <path>", "Project directory", process.cwd()).option("--config <file>", "Config file to look for. Can be repeated.", collect, []).option("--config-pattern <regex>", "Regex for config filenames in the project root").option("--port <number>", "Initial app port", parsePort2).option("--https", "Run a local HTTPS proxy with Caddy local certificates").option("--ssl", "Alias for --https").option("--setup", "Run setup before starting when setup is missing or stale").option("--trust", "Trust Caddy's local HTTPS CA before starting the child command").option("--dynamic-port [yes|no]", "Use the requested port if free, otherwise continue upward", parseBooleanLike, false).argument("<command...>", "Command to run after --, for example: localghost run -- vite").action(async (command, options) => {
   assertLocalDevelopment("run");
   await assertCaddyReady();
-  const https = useHttps(options);
   const context = await resolveLocalghostContext({
     cwd: options.cwd,
     ...options.project ? { project: options.project } : {},
     ...options.config && options.config.length > 0 ? { configFiles: options.config } : {},
     ...options.configPattern ? { configPattern: options.configPattern } : {},
     ...options.port ? { port: options.port } : {},
-    https,
+    ...useHttps(options) ? { https: true } : {},
     ...typeof options.dynamicPort === "boolean" ? { dynamicPort: options.dynamicPort } : {}
   });
-  const readiness = getSetupReadiness({ ...options, https, ignoreCaddyfile: true });
+  const https = context.https;
+  const readiness = getSetupReadiness({
+    ...options,
+    https,
+    ignoreCaddyfile: true,
+    entries: context.entries,
+    configPath: context.configPath,
+    projectName: context.projectName
+  });
   if (!readiness.ready) {
     const shouldSetup = options.setup === true || canPrompt() && await confirm("Run caddy:setup now?", true);
     if (!shouldSetup) {
@@ -1298,6 +1466,17 @@ program.command("run").description("Run Caddy and a dev command from the same Lo
   const caddyExit = caddy.catch((error) => {
     if (!caddy.killed) throw error;
   });
+  try {
+    await maybeTrustCaddy({
+      cwd: options.cwd,
+      https,
+      caddyfilePath: caddyfile,
+      ...typeof options.trust === "boolean" ? { trust: options.trust } : {}
+    });
+  } catch (error) {
+    if (!caddy.killed) caddy.kill("SIGINT");
+    throw error;
+  }
   const [binary, ...args] = command;
   if (!binary) {
     throw new Error("Missing command. Use: localghost run -- vite");