@holin-work/holin-cli 1.1.1 → 1.1.3

package/bin/holin-cli.js

@@ -123,9 +123,30 @@ async function pingVerify(apiKey) {
 
 function createProxyServer() {
   const server = http.createServer((req, res) => {
+    // Block OAuth discovery probes — return 401 so platform knows auth is required
+    if (req.url.startsWith("/.well-known/")) {
+      const body = JSON.stringify({ error: "unauthorized" });
+      res.writeHead(401, { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(body) });
+      res.end(body);
+      return;
+    }
+
+    // Read credentials on every request (hot-reload support)
+    const creds = readCredentials();
+    if (!creds?.api_key) {
+      // No credentials: return 401 so platform knows auth is required (not "no auth needed")
+      const body = JSON.stringify({ error: "unauthorized", message: "Run 'holin-cli auth login' first." });
+      res.writeHead(401, {
+        "Content-Type": "application/json",
+        "Content-Length": Buffer.byteLength(body),
+        "WWW-Authenticate": "Bearer realm=\"Holin API\"",
+      });
+      res.end(body);
+      return;
+    }
+
     // Health check endpoint
     if (req.method === "GET" && req.url === "/health") {
-      const creds = readCredentials();
       const body = JSON.stringify({
         status: "ok",
         authenticated: !!(creds && creds.api_key),
@@ -142,18 +163,6 @@ function createProxyServer() {
       return;
     }
 
-    // Read credentials on every request (hot-reload support)
-    const creds = readCredentials();
-    if (!creds?.api_key) {
-      const body = JSON.stringify({ error: "not_authenticated", message: "Run 'holin-cli auth login' first." });
-      res.writeHead(401, {
-        "Content-Type": "application/json",
-        "Content-Length": Buffer.byteLength(body),
-      });
-      res.end(body);
-      return;
-    }
-
     // Build upstream request
     // MCP streamable-http has a single endpoint; forward directly to upstream path.
     // Accio requests http://127.0.0.1:18787/mcp → upstream https://api.holin.work/icbu/mcp
@@ -246,9 +255,9 @@ async function cmdAuthLogin() {
   writeCredentials(creds);
   console.log(`[holin-cli] Connected: ${creds.customer_name || creds.customer_id} (${creds.plan})`);
 
-  // Auto-start proxy in background (detached)
+  // Auto-start proxy in background (detached), wait until it's listening
   try {
-    startProxyDaemon();
+    await startProxyDaemon();
     console.log("[holin-cli] Local proxy started at http://127.0.0.1:18787/mcp");
   } catch (err) {
     console.error(`[holin-cli] Warning: Failed to start local proxy — ${err.message}`);
@@ -329,23 +338,35 @@ function cmdProxyStart() {
 }
 
 function startProxyDaemon() {
-  if (isProxyRunning()) return;
+  return new Promise((resolve, reject) => {
+    if (isProxyRunning()) {
+      resolve();
+      return;
+    }
 
-  ensureConfigDir();
-  const logFd = openSync(LOG_FILE, "a");
+    ensureConfigDir();
+    const logFd = openSync(LOG_FILE, "a");
 
-  const child = spawn(process.execPath, [process.argv[1], "proxy", "start", "--daemon"], {
-    detached: true,
-    stdio: ["ignore", logFd, logFd],
-  });
+    const child = spawn(process.execPath, [process.argv[1], "proxy", "start", "--daemon"], {
+      detached: true,
+      stdio: ["ignore", logFd, logFd],
+    });
 
-  child.unref();
-  // Give it a moment to start and write pid file
-  setTimeout(() => {
-    if (!isProxyRunning()) {
-      console.error("[holin-cli] Warning: Proxy failed to start. Check log:", LOG_FILE);
-    }
-  }, 1000);
+    child.unref();
+
+    // Poll for pid file up to 3s to confirm proxy is listening
+    let attempts = 0;
+    const poll = setInterval(() => {
+      attempts++;
+      if (isProxyRunning()) {
+        clearInterval(poll);
+        resolve();
+      } else if (attempts >= 15) {
+        clearInterval(poll);
+        reject(new Error(`Proxy did not start within 3s. Check log: ${LOG_FILE}`));
+      }
+    }, 200);
+  });
 }
 
 function cmdProxyStop() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@holin-work/holin-cli",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "description": "Holin CLI — Accio plugin authorization tool for ICBU batch listing",
   "type": "module",
   "bin": {