v0.32.3

Fixes a certificate that could not be trusted being dropped in silence while a site was created or imported — the site warned in the browser and nothing told you why.

Fixes

You are told when a certificate is not trusted. Setting up a site issues a certificate and asks macOS to trust it. When that failed, the error was discarded and the site was served anyway, so the browser showed a security warning and neither the terminal nor the dashboard named the cause. The failure is now reported alongside the rest of setup progress, with the command that clears it (agent-local sudo).

Two sites set up at once can no longer trust each other's certificate. Trusting a certificate writes the PEM to one fixed path before handing it to the keychain. Two setups running concurrently could interleave there, each trusting the bytes the other had just written, both told they had succeeded, and one site left untrusted. That pair now runs one at a time.

A crash can no longer leave that staging lock held. The lock around the staged write and trust is now released even if the process panics inside it, so one bad call cannot wedge every later attempt to trust a certificate until the daemon is restarted.

Changes

agent-local domain and agent-local worktree can now wait for you. Both raise the macOS password dialog to trust a certificate, the same way they already do for /etc/hosts. Previously they failed quietly instead of asking. A script that calls either command may now block until the dialog is answered.

Not fixed

A certificate that already exists but is not trusted is still served without a re-trust attempt: the new warning covers certificates issued from here on. If a site has an older untrusted certificate, run agent-local sudo once, then agent-local cert <domain> --trust.

Install

brew install jefrontv/tap/agent-local
# or, no Homebrew:
curl -fsSL https://raw.githubusercontent.com/jefrontv/agent-local/main/install.sh | bash

Already installed? agent-local update

First run

agent-local doctor --fix   # installs whatever is missing (PHP, MariaDB…)
agent-local sudo           # one-time: no more password prompts
agent-local create mysite