@lasso-ai/cli 1.4.3 → 1.4.5

package/dist/cli/host/certificates.js

@@ -214,6 +214,7 @@ async function ensureHostCertificate(onProgress) {
     // Check if certificate exists and is trusted
     if (hasCertificate()) {
         const certStatus = hostCertificateStatus();
+        console.log(`[Lasso] Certificate exists, trusted: ${certStatus.trusted}`);
         // If certificate exists but is not trusted and mkcert is available, regenerate it
         if (!certStatus.trusted && isMkcertInstalled()) {
             onProgress?.("Regenerating certificate with mkcert for trusted SSL...");
@@ -231,23 +232,28 @@ async function ensureHostCertificate(onProgress) {
     // Try mkcert first - it creates system-trusted certificates
     if (!isMkcertInstalled()) {
         onProgress?.("mkcert not found, installing...");
+        console.log("[Lasso] mkcert not found, attempting installation...");
         const installResult = await installMkcert();
         if (!installResult.ok) {
             console.warn(`[Lasso] ${installResult.error}`);
             console.warn("[Lasso] Falling back to OpenSSL (certificate will show as not secure)");
         }
     }
+    else {
+        console.log("[Lasso] mkcert is installed");
+    }
     if (isMkcertInstalled()) {
         try {
             onProgress?.("Creating trusted certificate with mkcert...");
             const mkcertPath = getMkcertPath();
+            console.log(`[Lasso] Using mkcert at: ${mkcertPath}`);
             (0, node_child_process_1.execFileSync)(mkcertPath, ["-cert-file", exports.TLS_CERT_FILE, "-key-file", exports.TLS_KEY_FILE, "localhost", "127.0.0.1", "::1", "*.lasso"], { stdio: "ignore" });
             node_fs_1.default.chmodSync(exports.TLS_KEY_FILE, 0o600);
             onProgress?.("✓ SSL certificate ready (trusted)");
             return { ok: true, trusted: true };
         }
         catch (mkcertError) {
-            console.warn("[Lasso] mkcert failed, falling back to OpenSSL");
+            console.warn("[Lasso] mkcert failed, falling back to OpenSSL:", mkcertError);
         }
     }
     // Fallback to OpenSSL - creates self-signed certificate (not trusted by browsers)
@@ -276,12 +282,13 @@ function hostCertificateStatus() {
     let trusted = false;
     if (hasCertificate()) {
         try {
-            const certContent = node_fs_1.default.readFileSync(exports.TLS_CERT_FILE, "utf8");
-            // mkcert certificates include "mkcert" in the issuer
-            trusted = certContent.includes("mkcert");
+            // Use openssl to check the issuer of the certificate
+            const result = (0, node_child_process_1.execFileSync)("openssl", ["x509", "-noout", "-issuer", "-in", exports.TLS_CERT_FILE], { encoding: "utf8" });
+            // mkcert certificates have "mkcert" in the issuer
+            trusted = result.toLowerCase().includes("mkcert");
         }
         catch {
-            // If we can't read the cert, assume not trusted
+            // If openssl fails, assume not trusted
         }
     }
     return { present: hasCertificate(), certificate: exports.TLS_CERT_FILE, key: exports.TLS_KEY_FILE, trusted };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lasso-ai/cli",
-  "version": "1.4.3",
+  "version": "1.4.5",
   "description": "Select any part of your running app, describe a change, and let AI edit the real source code.",
   "type": "commonjs",
   "main": "dist/cli/index.js",