Add NPMplus SSL checks and token refresh

handlers/system.py

@@ -9,6 +9,7 @@ from services.http_checks import get_url_checks, check_url
 from services.queue import enqueue
 from services.updates import list_updates, apply_updates
 from services.runner import run_cmd
+from services.npmplus import fetch_certificates, format_certificates
 import state
 from state import UPDATES_CACHE, REBOOT_PENDING
 from services.metrics import summarize
@@ -67,6 +68,24 @@ async def metrics(msg: Message):
     await msg.answer(summarize(state.METRICS_STORE, minutes=15), reply_markup=system_kb)
 
 
+@dp.message(F.text == "🔒 SSL")
+async def ssl_certs(msg: Message):
+    if not is_admin_msg(msg):
+        return
+
+    await msg.answer("⏳ Checking SSL certificates…", reply_markup=system_kb)
+
+    async def worker():
+        try:
+            certs = await asyncio.to_thread(fetch_certificates, cfg)
+            text = format_certificates(certs)
+        except Exception as e:
+            text = f"⚠️ NPMplus error: {e}"
+        await msg.answer(text, reply_markup=system_kb)
+
+    asyncio.create_task(worker())
+
+
 @dp.message(F.text == "📦 Updates")
 async def updates_list(msg: Message):
     if not is_admin_msg(msg):