@cantinasecurity/apex-cli 0.1.13 → 0.1.14

package/.claude/skills/apex-cli/SKILL.md

@@ -13,6 +13,8 @@ This skill is bundled with Apex CLI and can be installed into the current reposi
 
 Use Apex through the MCP server when the `apex-*` tools are available.
 
+For on-prem or other non-default Apex hosts, make sure the CLI or MCP server runs with `APEX_BASE_URL` set to the external HTTPS Bedrock origin before auth or provider connection flows.
+
 Recommended workflow:
 
 1. Start with `apex-auth-status`.

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Cantina agent plugins for security review workflows.",
-    "version": "0.1.13"
+    "version": "0.1.14"
   },
   "plugins": [
     {
@@ -14,10 +14,10 @@
       "source": {
         "source": "npm",
         "package": "@cantinasecurity/apex-cli",
-        "version": "0.1.13"
+        "version": "0.1.14"
       },
       "description": "Run Apex security scans and review findings from Claude Code.",
-      "version": "0.1.13",
+      "version": "0.1.14",
       "author": {
         "name": "Cantina",
         "email": "support@cantina.xyz"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apex-cli",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "Run Apex security scans and review findings from Claude Code.",
   "author": {
     "name": "Cantina",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apex-cli",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "Run Apex security scans and review findings from Codex.",
   "author": {
     "name": "Cantina",

package/.mcp.claude.json

@@ -5,7 +5,7 @@
       "args": [
         "-y",
         "-p",
-        "@cantinasecurity/apex-cli@0.1.13",
+        "@cantinasecurity/apex-cli@0.1.14",
         "apex-mcp"
       ],
       "env": {

package/.mcp.codex.json

@@ -4,7 +4,7 @@
     "args": [
       "-y",
       "-p",
-      "@cantinasecurity/apex-cli@0.1.13",
+      "@cantinasecurity/apex-cli@0.1.14",
       "apex-mcp"
     ],
     "env": {

package/MARKETPLACE.md

@@ -13,7 +13,7 @@ This package is prepared as both a Claude Code plugin and a Codex plugin. The pu
 The plugin MCP configs launch the pinned npm CLI package with:
 
 ```bash
-npx -y -p @cantinasecurity/apex-cli@0.1.13 apex-mcp
+npx -y -p @cantinasecurity/apex-cli@0.1.14 apex-mcp
 ```
 
 That keeps marketplace installs independent of a user's global `apex` install.

package/README.md

@@ -74,10 +74,13 @@ pnpm apex
 
 By default, the CLI targets `https://ai.cantina.xyz/`.
 
-Use `APEX_BASE_URL` only when testing against a non-production Apex host:
+Use `APEX_BASE_URL` only when targeting a non-default Apex host. For on-prem deployments,
+set it to the same external HTTPS Bedrock origin configured as `ONPREM_PUBLIC_BASE_URL`;
+browser handoffs such as `apex connect github` and `apex-connect-provider` need that
+public origin for GitHub callback and success redirects.
 
 ```bash
-APEX_BASE_URL=https://preview.cantina.xyz pnpm apex
+APEX_BASE_URL=https://bedrock.customer.example pnpm apex
 ```
 
 ## Interactive Shell
@@ -347,7 +350,7 @@ Telemetry event posts do not include bearer tokens. The telemetry endpoint is `P
     {
       "schemaVersion": 1,
       "event": "apex.invocation.completed",
-      "cliVersion": "0.1.13",
+      "cliVersion": "0.1.14",
       "invocation": {
         "surface": "mcp",
         "command": "apex-scan",
@@ -378,7 +381,7 @@ The npm package also includes marketplace-ready plugin artifacts:
 - `.claude-plugin/plugin.json` and `.mcp.claude.json` for Claude Code plugin installs
 - `.claude-plugin/marketplace.json` for a Claude marketplace entry backed by the public npm package
 
-These plugin installs launch the pinned npm package with `npx -y -p @cantinasecurity/apex-cli@0.1.13 apex-mcp`, so users do not need to install `apex` globally before enabling the plugin.
+These plugin installs launch the pinned npm package with `npx -y -p @cantinasecurity/apex-cli@0.1.14 apex-mcp`, so users do not need to install `apex` globally before enabling the plugin.
 
 The repository also includes `.agents/plugins/marketplace.json` for local Codex marketplace testing from a checkout.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cantinasecurity/apex-cli",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "Standalone CLI and MCP server for Apex.",
   "private": false,
   "type": "module",

package/skills/apex-cli/SKILL.md

@@ -11,6 +11,8 @@ Prefer the Apex MCP tools over running `apex` in the shell when the server is av
 
 `apex setup codex` configures the MCP server with client attribution so Apex can distinguish Codex MCP usage from direct CLI usage. Users can inspect or disable anonymous local usage telemetry with `apex telemetry status` and `apex telemetry disable`.
 
+For on-prem or other non-default Apex hosts, make sure the MCP server runs with `APEX_BASE_URL` set to the external HTTPS Bedrock origin before auth or provider connection flows.
+
 Workflow:
 
 1. Start with `apex-auth-status`.