@lasso-ai/cli 1.4.2 → 1.4.4

package/dist/cli/host/certificates.js

@@ -211,31 +211,49 @@ async function installMkcert() {
 }
 async function ensureHostCertificate(onProgress) {
     node_fs_1.default.mkdirSync(paths_1.HOST_DIR, { recursive: true, mode: 0o700 });
+    // Check if certificate exists and is trusted
     if (hasCertificate()) {
         const certStatus = hostCertificateStatus();
-        return { ok: true, trusted: certStatus.trusted };
+        console.log(`[Lasso] Certificate exists, trusted: ${certStatus.trusted}`);
+        // If certificate exists but is not trusted and mkcert is available, regenerate it
+        if (!certStatus.trusted && isMkcertInstalled()) {
+            onProgress?.("Regenerating certificate with mkcert for trusted SSL...");
+            try {
+                node_fs_1.default.unlinkSync(exports.TLS_CERT_FILE);
+                node_fs_1.default.unlinkSync(exports.TLS_KEY_FILE);
+            }
+            catch { }
+        }
+        else {
+            return { ok: true, trusted: certStatus.trusted };
+        }
     }
     onProgress?.("Generating SSL certificate...");
     // Try mkcert first - it creates system-trusted certificates
     if (!isMkcertInstalled()) {
         onProgress?.("mkcert not found, installing...");
+        console.log("[Lasso] mkcert not found, attempting installation...");
         const installResult = await installMkcert();
         if (!installResult.ok) {
             console.warn(`[Lasso] ${installResult.error}`);
             console.warn("[Lasso] Falling back to OpenSSL (certificate will show as not secure)");
         }
     }
+    else {
+        console.log("[Lasso] mkcert is installed");
+    }
     if (isMkcertInstalled()) {
         try {
             onProgress?.("Creating trusted certificate with mkcert...");
             const mkcertPath = getMkcertPath();
+            console.log(`[Lasso] Using mkcert at: ${mkcertPath}`);
             (0, node_child_process_1.execFileSync)(mkcertPath, ["-cert-file", exports.TLS_CERT_FILE, "-key-file", exports.TLS_KEY_FILE, "localhost", "127.0.0.1", "::1", "*.lasso"], { stdio: "ignore" });
             node_fs_1.default.chmodSync(exports.TLS_KEY_FILE, 0o600);
             onProgress?.("✓ SSL certificate ready (trusted)");
             return { ok: true, trusted: true };
         }
         catch (mkcertError) {
-            console.warn("[Lasso] mkcert failed, falling back to OpenSSL");
+            console.warn("[Lasso] mkcert failed, falling back to OpenSSL:", mkcertError);
         }
     }
     // Fallback to OpenSSL - creates self-signed certificate (not trusted by browsers)
@@ -264,8 +282,8 @@ function hostCertificateStatus() {
     let trusted = false;
     if (hasCertificate()) {
         try {
-            const certContent = node_fs_1.default.readFileSync(exports.TLS_CERT_FILE, "utf8");
-            // mkcert certificates include "mkcert" in the issuer
+            const certContent = node_fs_1.default.readFileSync(exports.TLS_CERT_FILE, "utf8").toLowerCase();
+            // mkcert certificates include "mkcert" in the issuer or subject (case-insensitive)
             trusted = certContent.includes("mkcert");
         }
         catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lasso-ai/cli",
-  "version": "1.4.2",
+  "version": "1.4.4",
   "description": "Select any part of your running app, describe a change, and let AI edit the real source code.",
   "type": "commonjs",
   "main": "dist/cli/index.js",