@hardfin/cli 0.1.1-dev.39 → 0.1.1-dev.41

package/README.md

@@ -342,6 +342,10 @@ The server is the hosted one at the authorization server's host, `https://api.ha
 by default. Every other server in an MCP config, and everything in `AGENTS.md` outside the
 markers, is left as it was. A config that does not hold JSON is skipped, never overwritten.
 
+`init` refuses an address that `config.local.json` or `.env` in the folder chose, because the
+address goes into files every agent in the project reads. Pass `--issuer-url` to use it. The
+address must be https, or this machine.
+
 The skill lives in `skills/` and the section in `templates/AGENTS.md`. Both ship in the npm
 package, so `init` writes the copy that matches the installed CLI.
 
@@ -373,7 +377,8 @@ asking and ask before anything changes.
 
 A command is a read when its endpoint's method is GET, or for `hardfin api` when no other
 `--method` is given. Anything else is a write, and `hardfin_read` refuses it by naming
-`hardfin_write`. Both tools carry a title, the read-only or destructive hint, and a link to
+`hardfin_write`. The server asks the CLI's own parser what a call would run, so a flag whose
+value is `--help`, or a `--method` given twice, is placed by what the command would do. Both tools carry a title, the read-only or destructive hint, and a link to
 the API reference, which Claude's connector directory requires.
 
 A tool call runs the CLI itself, so an agent and a person get identical parsing, output and
@@ -386,12 +391,33 @@ exit codes. Each call has these limits:
 | One argument     | 128 KiB                                 | Refused, pointing at the `input` argument  |
 | Standard input   | The call's `input` argument, or nothing | Always closed, so `--input -` never waits  |
 
+### What a call may touch on this machine
+
+An agent acts on what it reads, and a record can hold text written to steer it. So a call is
+held to rules a person at a terminal is not.
+
+| A call that                                                    | Is                                                     |
+| -------------------------------------------------------------- | ------------------------------------------------------ |
+| Names a path outside the folder the server runs in             | Refused, links followed first                          |
+| Names a hidden file or folder, such as `.env` or `.git`        | Refused                                                |
+| Names `config.local.json`, the env file, or the sign in's file | Refused                                                |
+| Writes a file that already exists                              | Refused                                                |
+| Downloads with `--output <path>`                               | A write, so it runs through `hardfin_write`            |
+| Downloads with no `--output`                                   | Refused, naming `--output -` to read the file in place |
+
+The rules cover every flag that takes a path: `--input`, `--file` and `--output`. A person
+runs the command themselves for a file the server will not reach.
+
 ### What it signs in as
 
 The server uses whatever credential this machine holds, so an agent acts as the person who
 ran `hardfin login`. Give an agent an API key through `HARDFIN_API_KEY` when it should act
 as an integration instead.
 
+A call cannot set `--api-url`, `--api-key` or `--issuer-url`. Both tools refuse them, because
+a call that chose the host could send the credential to it. Set `HARDFIN_API_URL`,
+`HARDFIN_API_KEY` or `HARDFIN_ISSUER_URL` where the server is started.
+
 ## Diagnosing a problem
 
 `hardfin status` prints everything a support request needs, and is the first thing to send.
@@ -467,7 +493,11 @@ settings, and the one nearest the top wins.
 | Config file | `config.local.json` in the working directory                          | the defaults     |
 | Default     | the published API                                                     | nothing          |
 
-An exported variable beats `.env` because Node leaves a variable that is already set alone.
+An exported variable beats `.env`, because the CLI leaves a variable that is already set alone.
+
+An env file sets only variables that begin with `HARDFIN_`. Anything else in it is ignored,
+so a `.env` in a folder you cloned cannot set a variable such as `NODE_OPTIONS` for the
+programs the CLI starts.
 
 ### What a local build writes
 

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ee01278c-9a53-5677-8abd-c28911112932")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="12877cfa-09aa-5239-8a24-ecc77a951641")}catch(e){}}();
 import module from "node:module";
 //#region src/cli.ts
 module.enableCompileCache?.();
@@ -14,7 +14,7 @@ process.on("unhandledRejection", (error) => void toCrash(error));
 try {
 	const answer = await toQuickAnswer(process.argv.slice(2));
 	if (answer === void 0) {
-		const { toCli, toParseExitCode, wasReportAttempted } = await import("./program-d7dXAbE4.js");
+		const { toCli, toParseExitCode, wasReportAttempted } = await import("./program-C1-jZp6K.js");
 		try {
 			await toCli().parseAsync(process.argv);
 		} catch (error) {
@@ -33,7 +33,7 @@ async function toCrash(error) {
 	isCrashing = true;
 	process.stderr.write(`error: ${error instanceof Error ? error.message : String(error)}\n`);
 	try {
-		const { toReported } = await import("./program-d7dXAbE4.js");
+		const { toReported } = await import("./program-C1-jZp6K.js");
 		await toReported(error, false, void 0, "fatal");
 	} finally {
 		process.exit(1);
@@ -45,10 +45,10 @@ async function toCrash(error) {
 */
 async function toQuickAnswer(args) {
 	if (args[0] !== "__complete" || args[1] !== "--") return;
-	return (await import("./completion-quick-BJHDp8OL.js")).toQuickAnswer(args.slice(2));
+	return (await import("./completion-quick-CDIRcOd5.js")).toQuickAnswer(args.slice(2));
 }
 //#endregion
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=ee01278c-9a53-5677-8abd-c28911112932
+//# debugId=12877cfa-09aa-5239-8a24-ecc77a951641

package/dist/{completion-quick-BJHDp8OL.js → completion-quick-CDIRcOd5.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a0e4ab3e-9a55-518b-a49b-37189993952e")}catch(e){}}();
-import { n as toCompletion, t as toAnswer } from "./completion-tree-rR_Rmeij.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="341721a8-c4a0-58a0-9e77-8b3adc3fcaa4")}catch(e){}}();
+import { n as toAnswer, r as toCompletion } from "./completion-tree-DLC6ARLR.js";
 import { readFileSync } from "node:fs";
 //#region src/command/completion-quick.ts
 /**
@@ -21,5 +21,5 @@ function toQuickAnswer(words, location = new URL("./completion-tree.json", impor
 //#endregion
 export { toQuickAnswer };
 
-//# sourceMappingURL=completion-quick-BJHDp8OL.js.map
-//# debugId=a0e4ab3e-9a55-518b-a49b-37189993952e
+//# sourceMappingURL=completion-quick-CDIRcOd5.js.map
+//# debugId=341721a8-c4a0-58a0-9e77-8b3adc3fcaa4

package/dist/{completion-tree-rR_Rmeij.js → completion-tree-DLC6ARLR.js}

@@ -2,7 +2,7 @@
 //#region src/command/completion-tree.ts
 /** Directive is the last line of an answer, which tells the script what to do beyond the candidates. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b5b3cdcd-37e1-50f6-880a-13e965b5e7ed")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4e67c834-5903-544d-a89c-f716e2f51582")}catch(e){}}();
 const Directive = {
 	NONE: ":0",
 	FILES: ":1"
@@ -159,7 +159,7 @@ function toLine(description) {
 	return description.replace(/\s+/g, " ").trim();
 }
 //#endregion
-export { toCompletion as n, toAnswer as t };
+export { toAnswer as n, toCompletion as r, PATH_VALUES as t };
 
-//# sourceMappingURL=completion-tree-rR_Rmeij.js.map
-//# debugId=b5b3cdcd-37e1-50f6-880a-13e965b5e7ed
+//# sourceMappingURL=completion-tree-DLC6ARLR.js.map
+//# debugId=4e67c834-5903-544d-a89c-f716e2f51582