@holdyourvoice/hyv 2.7.0 → 2.7.1

package/dist/index.js

@@ -5094,8 +5094,7 @@ async function request2(method, path15, body) {
   if (res.status === 403)
     throw new Error("you don't have access to this feature. check your plan at holdyourvoice.com/dashboard");
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`something went wrong (${res.status}). ${text.slice(0, 150)}`);
+    throw new Error(`something went wrong (${res.status}). try again or contact support.`);
   }
   return res.json();
 }
@@ -11633,7 +11632,7 @@ async function authenticateWithLicense(licenseKey) {
 async function authenticateWithBrowser() {
   const server = http.createServer();
   const port = await new Promise((resolve8) => {
-    server.listen(0, "0.0.0.0", () => {
+    server.listen(0, "127.0.0.1", () => {
       resolve8(server.address().port);
     });
   });
@@ -14542,6 +14541,12 @@ function registerRenameCommand(program3) {
         process.exit(1);
         return;
       }
+      if (!/^[a-zA-Z0-9\s\-_'&.]+$/.test(trimmedName)) {
+        console.log(import_chalk12.default.red("\nerror: name contains invalid characters\n"));
+        console.log(import_chalk12.default.dim("  allowed: letters, numbers, spaces, hyphens, underscores, apostrophes\n"));
+        process.exit(1);
+        return;
+      }
       const token = getToken();
       if (!token) {
         console.log(import_chalk12.default.red("\nerror: you're not signed in yet\n"));
@@ -15477,6 +15482,10 @@ async function toolScan(args) {
       const fs17 = await import("fs");
       const path15 = await import("path");
       const resolved = path15.resolve(filePath);
+      const cwd = process.cwd();
+      if (!resolved.startsWith(cwd + path15.sep) && resolved !== cwd) {
+        return `Error: file must be in the current working directory (${cwd})`;
+      }
       if (!fs17.existsSync(resolved))
         return `Error: file not found: ${filePath}`;
       scanText2 = fs17.readFileSync(resolved, "utf-8");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@holdyourvoice/hyv",
-"version": "2.7.0",
+"version": "2.7.1",
   "description": "Hold Your Voice — voice gate layer for AI workflows. make your ai agent sound exactly like you! includes 220+ AI pattern detection engine.",
   "main": "dist/index.js",
   "bin": {