@wilm-ai/wilma-cli 1.6.0 → 1.6.1

package/README.md

@@ -99,6 +99,34 @@ If you've saved your TOTP secret via interactive setup, `--totp-secret` is not n
 Local config is stored in `~/.config/wilmai/config.json` (or `$XDG_CONFIG_HOME/wilmai/config.json`).
 Use `wilma config clear` to remove it. Override with `WILMAI_CONFIG_PATH`.
 
+## Troubleshooting: TLS errors on a managed laptop
+
+A TLS certificate error means the network is intercepting TLS and re-signing with a
+private root CA (common behind a corporate secure web gateway). Node ignores the OS
+trust store, so `curl` and your browser keep working while every Wilma request fails.
+A successful `npm install` is not evidence that TLS is healthy — the npm registry is
+commonly exempt from inspection.
+
+```bash
+NODE_USE_SYSTEM_CA=1 wilma summary --json                        # Node >=22.19 / >=24.6
+node --use-system-ca "$(command -v wilma)" summary --json        # Node >=22.15
+NODE_EXTRA_CA_CERTS=/path/to/root-ca.pem wilma summary --json    # explicit root
+```
+
+Never use `NODE_TLS_REJECT_UNAUTHORIZED=0` — it turns verification off entirely.
+
+With `--json`, transport failures carry a `code` and a `hint` alongside `status` and
+`message`, so agents can branch on the cause:
+
+```json
+{
+  "status": "error",
+  "message": "TLS certificate verification failed for https://example.inschool.fi (UNABLE_TO_GET_ISSUER_CERT_LOCALLY)",
+  "code": "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+  "hint": "..."
+}
+```
+
 ## Notes
 - Credentials and TOTP secrets are stored with lightweight obfuscation for convenience.
 - For multi-child accounts, you can pass `--student <id|name>` or `--all-students`.

package/dist/index.js

@@ -6,7 +6,7 @@ import { readFile, writeFile, mkdir, open, rm } from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { homedir } from "node:os";
 import { dirname, resolve } from "node:path";
-import { WilmaClient, MfaRequiredError, listTenants, } from "@wilm-ai/wilma-client";
+import { WilmaClient, MfaRequiredError, NetworkError, listTenants, } from "@wilm-ai/wilma-client";
 import { clearConfig, getConfigPath, loadConfig, obfuscateSecret, revealSecret, saveConfig, } from "./config.js";
 // Enable keypress events for escape key detection
 if (process.stdin.isTTY) {
@@ -2008,11 +2008,21 @@ main().catch((err) => {
         process.exit(1);
     }
     const message = err instanceof Error ? err.message : String(err);
+    const isNetwork = err instanceof NetworkError;
     if (process.argv.includes("--json")) {
-        console.log(JSON.stringify({ status: "error", message }, null, 2));
+        console.log(JSON.stringify({
+            status: "error",
+            message,
+            ...(isNetwork && err.code ? { code: err.code } : {}),
+            ...(isNetwork && err.hint ? { hint: err.hint } : {}),
+        }, null, 2));
     }
     else {
         console.error("CLI error:", message);
+        if (isNetwork && err.hint) {
+            console.error("");
+            console.error(err.hint);
+        }
     }
     process.exit(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wilm-ai/wilma-cli",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,9 +8,17 @@
     "wilmai": "dist/index.js",
     "wilma": "dist/index.js"
   },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "echo 'add lint'",
+    "test": "pnpm --filter @wilm-ai/wilma-client build && pnpm run build && node test/news-resources.mjs",
+    "start": "node dist/index.js",
+    "prepack": "pnpm --filter @wilm-ai/wilma-client build && pnpm --filter @wilm-ai/wilma-cli build",
+    "test:live": "tsc -p tsconfig.json && node test/live.spec.mjs"
+  },
   "dependencies": {
     "@inquirer/prompts": "^5.3.8",
-    "@wilm-ai/wilma-client": "^1.5.0"
+    "@wilm-ai/wilma-client": "^1.5.1"
   },
   "devDependencies": {
     "typescript": "^5.6.3"
@@ -21,12 +29,5 @@
   ],
   "publishConfig": {
     "access": "public"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "lint": "echo 'add lint'",
-    "test": "pnpm --filter @wilm-ai/wilma-client build && pnpm run build && node test/news-resources.mjs",
-    "start": "node dist/index.js",
-    "test:live": "tsc -p tsconfig.json && node test/live.spec.mjs"
   }
-}
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Wilm.ai
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.