@prohost/cli 0.12.3 → 0.12.4

package/CHANGELOG.md

@@ -4,6 +4,11 @@ Versions follow [semver](https://semver.org/). Publishing is automated: merging
 a version bump to `main` triggers `.github/workflows/npm-publish-cli.yml`, which
 builds via `prepack`, runs the suite, publishes, and tags `cli-v<version>`.
 
+## 0.12.4
+
+- Refuse redirects on credentialed API writes and pairing requests, so a validated endpoint cannot replay keys or pairing codes to another destination. Direct HTTPS and local-loopback requests keep working.
+- Reuse an existing usage or paired-agent key before reading implicit stdin. Explicit `usage connect --key -` still replaces the key from stdin; an unconnected pipe still supplies a key.
+
 ## 0.12.3
 
 - **A run stopped by the Claude usage limit says so.** It used to fail with

package/dist/agent/api.js

@@ -65,6 +65,7 @@ export async function postJson(options, path, body, idempotencyKey, captureBody
     try {
         const response = await fetchImpl(`${options.baseUrl.replace(/\/+$/, '')}${path}`, {
             method: 'POST',
+            redirect: 'error',
             headers: {
                 'Content-Type': 'application/json',
                 'X-API-Key': options.apiKey,

package/dist/agent/pair.js

@@ -127,6 +127,7 @@ export async function runPair(options) {
     try {
         response = await fetchImpl(`${baseUrl}${bound ? REDEEM_BOUND_PATH : REDEEM_PATH}`, {
             method: 'POST',
+            redirect: 'error',
             headers: { 'Content-Type': 'application/json', 'User-Agent': USER_AGENT },
             body: JSON.stringify({
                 code: options.code,

package/dist/usage/command.js

@@ -88,8 +88,8 @@ export function renderDiscovery(result, env, dryRun) {
 /**
  * The key `connect` should store, in order: `--key -` (stdin, or a hidden
  * prompt at a terminal), a literal `--key <value>` (warned about), then
- * `$PROHOST_API_KEY`, then piped stdin, then — at a terminal, with no
- * credential to fall back on — a hidden prompt. `undefined` means "none given";
+ * `$PROHOST_API_KEY`, then an existing credential, then piped stdin or — at a
+ * terminal — a hidden prompt. `undefined` means "none given";
  * `null` means a usage error that has already been printed.
  */
 async function connectKey(flags, io, env) {
@@ -109,12 +109,12 @@ async function connectKey(flags, io, env) {
     }
     if (env.PROHOST_API_KEY)
         return env.PROHOST_API_KEY.trim();
-    if (!stdin.isTTY)
-        return readPipedKey(stdin);
-    // At a terminal: prompt only when there is nothing to fall back on, so a
-    // connected machine (or one with a paired agent) is not asked again.
+    // Implicit stdin can be an open pipe without any key writer. An explicit
+    // --key - above still deliberately replaces a stored credential.
     if (resolveUsageKey(env))
         return undefined;
+    if (!stdin.isTTY)
+        return readPipedKey(stdin);
     return prompt();
 }
 async function connectCommand(flags, io) {

package/dist/version.d.ts

@@ -7,6 +7,6 @@
  * `package.json`, so a release bump that forgets this file fails the suite
  * instead of shipping a `User-Agent` that lies about which build is calling.
  */
-export declare const CLI_VERSION = "0.12.3";
+export declare const CLI_VERSION = "0.12.4";
 /** Sent on every HTTP request the CLI makes back into ProhostAI. */
-export declare const USER_AGENT = "prohost-cli/0.12.3";
+export declare const USER_AGENT = "prohost-cli/0.12.4";

package/dist/version.js

@@ -7,6 +7,6 @@
  * `package.json`, so a release bump that forgets this file fails the suite
  * instead of shipping a `User-Agent` that lies about which build is calling.
  */
-export const CLI_VERSION = '0.12.3';
+export const CLI_VERSION = '0.12.4';
 /** Sent on every HTTP request the CLI makes back into ProhostAI. */
 export const USER_AGENT = `prohost-cli/${CLI_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prohost/cli",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "description": "Run your own AI agent as a ProhostAI teammate, and stream your account's webhooks to your laptop.",
   "type": "module",
   "license": "MIT",