@plori/cli 0.7.4 → 0.7.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +24 -3
  2. package/package.json +6 -6
package/README.md CHANGED
@@ -68,7 +68,7 @@ For CI or another headless environment, keep using an API key created at
68
68
  <https://plori.ai/dashboard/settings>:
69
69
 
70
70
  ```sh
71
- plori login --key plori_sk_…
71
+ plori login --key - < /path/to/api-key
72
72
  # or, without writing a file:
73
73
  export PLORI_API_KEY=plori_sk_…
74
74
  ```
@@ -76,6 +76,27 @@ export PLORI_API_KEY=plori_sk_…
76
76
  `PLORI_BASE_URL` (or `--base-url`) points the CLI at a non-production
77
77
  API server, e.g. a local `uat-server`.
78
78
 
79
+ With `PLORI_API_KEY` set, `plori login` stores that key.
80
+
81
+ Secrets can come from environment variables or stdin:
82
+
83
+ | Flag | Environment variable |
84
+ | --- | --- |
85
+ | `--api-key` and `login --key` | `PLORI_API_KEY` |
86
+ | `--tenant-key` | `PLORI_TENANT_KEY` |
87
+ | `--callback-secret` | `PLORI_WORKER_CALLBACK_SECRET` |
88
+
89
+ Use `-` as the flag value to read a secret from stdin. Only one secret can use
90
+ stdin per command. Use an environment variable if the command also reads input
91
+ from stdin. Literal secret values in these flags produce a warning on stderr
92
+ because process listings and shell history can expose them.
93
+
94
+ The CLI sends credentials over HTTPS. HTTP is allowed for loopback hosts,
95
+ including `localhost`, `*.localhost` and loopback IP addresses.
96
+ Stored credentials are bound to the base URL used at login. To use another server,
97
+ run `plori login --base-url URL` for that server. Older config files use their
98
+ configured default as the credential's server.
99
+
79
100
  ### Which sign-in can approve actions
80
101
 
81
102
  Both sign-in methods give the CLI the authority of the account owner:
@@ -423,8 +444,8 @@ Advanced storage mutations require `--idempotency-key`. Workspace creation, runs
423
444
  generate a key when you omit it. Reuse the
424
445
  same key and request when retrying. Do not reuse a key for changed input.
425
446
  Optional worker callbacks use `--callback-url`. Prefer the
426
- `PLORI_WORKER_CALLBACK_SECRET` environment variable over `--callback-secret`,
427
- which can appear in process listings. Callback fields require the server's
447
+ `PLORI_WORKER_CALLBACK_SECRET` environment variable over `--callback-secret`. You can
448
+ also use `--callback-secret -` to read it from stdin. Callback fields require the server's
428
449
  Workspace worker callback support.
429
450
 
430
451
  Read and write a selected copy without starting a run:
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@plori/cli",
3
3
  "description": "Plori runs AI agents that collaborate on one product in the cloud.",
4
- "version": "0.7.4",
4
+ "version": "0.7.5",
5
5
  "license": "MIT",
6
6
  "homepage": "https://plori.ai",
7
7
  "repository": {
@@ -26,10 +26,10 @@
26
26
  "node": ">=18"
27
27
  },
28
28
  "optionalDependencies": {
29
- "@plori/cli-darwin-arm64": "0.7.4",
30
- "@plori/cli-darwin-x64": "0.7.4",
31
- "@plori/cli-linux-x64": "0.7.4",
32
- "@plori/cli-linux-arm64": "0.7.4",
33
- "@plori/cli-win32-x64": "0.7.4"
29
+ "@plori/cli-darwin-arm64": "0.7.5",
30
+ "@plori/cli-darwin-x64": "0.7.5",
31
+ "@plori/cli-linux-x64": "0.7.5",
32
+ "@plori/cli-linux-arm64": "0.7.5",
33
+ "@plori/cli-win32-x64": "0.7.5"
34
34
  }
35
35
  }