@maxceem/agw 0.6.4 → 0.7.0

package/dist/agw.mjs

@@ -6,7 +6,7 @@ var __export = (target, all) => {
 };
 
 // <define:__AGW_MANIFEST__>
-var define_AGW_MANIFEST_default = { version: "0.6.4", wrangler: "4.96.0", upgradeFrom: ["0.6.4", "0.6.3", "0.6.2", "0.6.1", "0.6.0", "0.5.2", "0.5.1", "0.5.0", "0.4.0"], release: { url: "https://github.com/maxceem/app-ai-gateway/releases/download/v0.6.4/gateway-0.6.4.tar.gz", sha256: "cd40eaa3809e18174d57091191363f14cf5ca5c00850e826ccb0d5710f7ce80c", manifest: "bdb9f85fc16464e81f03c0f14d3127b804e06ad97f4d31f0d50f8d205d1d1e7c" } };
+var define_AGW_MANIFEST_default = { version: "0.7.0", wrangler: "4.96.0", upgradeFrom: ["0.7.0", "0.6.4", "0.6.3", "0.6.2", "0.6.1", "0.6.0", "0.5.2", "0.5.1", "0.5.0", "0.4.0"], release: { url: "https://github.com/maxceem/app-ai-gateway/releases/download/v0.7.0/gateway-0.7.0.tar.gz", sha256: "9cbcb05a1b611470c03e522af7e34d786a4d7e9889b589bac7603695187575bd", manifest: "707e02868d2133307ff4d71a3fbcb7abe6d0b62cbc9498fab5b7d3f6d2d96fb0" } };
 
 // src/main.ts
 import { Writable as Writable2 } from "node:stream";
@@ -19059,7 +19059,7 @@ var CATALOG = {
     path: "/v1/cli/bootstrap",
     tags: ["CLI"],
     summary: "Initialize a recoverable CLI account",
-    description: "Persist the random token before sending: its digest is the operation's id, and an identical retry returns the same account and protected credential during its exchange window. Cloud initialization is public and rate limited. Self-hosted initialization is public too and creates the deployment's single initial account, so whoever initializes an empty deployment first owns it, exactly as its first console registration does; it is not rate limited, because the only thing a limit could refuse on a deployment nobody owns yet is its own installer retrying, and every caller after the first is refused permanently anyway. All responses are no-store.",
+    description: "Persist the random token before sending: its digest is the operation's id, and an identical retry returns the same account and protected credential during its exchange window. Cloud initialization is public and rate limited. Self-hosted initialization creates the deployment's single unclaimed account, and only for the token whose SHA-256 the deploying CLI stored as the Worker secret `CLI_BOOTSTRAP_TOKEN_DIGEST`; any other token, or a deployment without that secret, is refused with 403. It is not rate limited, because only the deploying CLI can pass it, and a limit would refuse that CLI retrying a deployment whose storage has not come up yet. All responses are no-store.",
     security: "public",
     request: CliBootstrapRequestSchema,
     response: CliOperationSchema,
@@ -20308,7 +20308,7 @@ async function openBrowser(url2) {
 }
 
 // src/deployment.ts
-import { randomUUID } from "node:crypto";
+import { createHash as createHash4, randomUUID } from "node:crypto";
 import { writeFile as writeFile3, unlink as unlink2 } from "node:fs/promises";
 import { join as join4 } from "node:path";
 
@@ -20850,7 +20850,7 @@ async function configFile(ctx, journal, artifact) {
     ],
     vars: {
       ...artifact.config.vars,
-      ALLOW_ADDITIONAL_REGISTRATIONS: "false",
+      ALLOWED_REGISTRATION_EMAILS: "",
       ...journal.vars,
       DEPLOYMENT_ID: journal.id
     },
@@ -21201,7 +21201,10 @@ async function install(ctx, cf, journal, artifact, url2, domain2) {
   });
   const secrets = {
     ...journal.secrets,
-    SECRET_VAULT_LOCAL_KEK_V1: await ctx.store.vaultKey(journal.id)
+    SECRET_VAULT_LOCAL_KEK_V1: await ctx.store.vaultKey(journal.id),
+    // The Worker creates its account only for the token this digest is of, so
+    // the account is this CLI's however soon anyone else finds the address.
+    CLI_BOOTSTRAP_TOKEN_DIGEST: createHash4("sha256").update(journal.bootstrap.token).digest("hex")
   };
   const secretPath = join4(file2.directory, "secrets.json");
   await writeFile3(secretPath, JSON.stringify(secrets), {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxceem/agw",
-  "version": "0.6.4",
+  "version": "0.7.0",
   "type": "module",
   "description": "Manage App AI Gateway from a terminal or coding agent: providers, iOS and server apps, usage, and self-hosted deployment on Cloudflare",
   "keywords": [
@@ -25,7 +25,7 @@
     "directory": "cli"
   },
   "bugs": "https://github.com/maxceem/app-ai-gateway/issues",
-  "upgradeFrom": ["0.6.3", "0.6.2", "0.6.1", "0.6.0", "0.5.2", "0.5.1", "0.5.0", "0.4.0"],
+  "upgradeFrom": ["0.6.4", "0.6.3", "0.6.2", "0.6.1", "0.6.0", "0.5.2", "0.5.1", "0.5.0", "0.4.0"],
   "license": "Apache-2.0",
   "bin": {
     "agw": "dist/agw.mjs"