@proxy-checkout/cli 0.1.0-prx-128.114.1 → 0.1.0-prx-128.115.1

package/README.md

@@ -45,7 +45,7 @@ proxy listen \
 
 The listener has a two-minute lease renewed every 30 seconds. Proxy prepares the canonical body and signature headers, the CLI forwards those exact bytes to the loopback URL, and the server records the real local outcome in its normal attempt/retry state machine. The source HTTPS endpoint continues to receive its independent normal delivery. Only `localhost`, `127.0.0.1`, and `::1` HTTP(S) destinations are allowed.
 
-Control-C closes the listener. Logout closes resources owned by the credential. The server expires abandoned listeners after a crash.
+Control-C closes the listener. Logout closes resources owned by the credential. If a device or local credential is lost, an authorized Portal user can revoke the CLI credential from API Keys; remote revocation also closes its active local listeners and temporary Stripe ingress. The server expires abandoned listeners after a crash.
 
 ## Optional Stripe CLI orchestration
 

package/dist/cjs/auth.d.cts

@@ -37,4 +37,9 @@ export declare function logout(input: {
     signal?: AbortSignal;
     token: string;
 }): Promise<void>;
+export declare function validateVerificationUrl(value: string): string;
+export declare function browserOpenCommand(operatingSystem: NodeJS.Platform, url: string): {
+    args: string[];
+    command: string;
+};
 export {};

package/dist/cjs/auth.d.ts

@@ -37,4 +37,9 @@ export declare function logout(input: {
     signal?: AbortSignal;
     token: string;
 }): Promise<void>;
+export declare function validateVerificationUrl(value: string): string;
+export declare function browserOpenCommand(operatingSystem: NodeJS.Platform, url: string): {
+    args: string[];
+    command: string;
+};
 export {};

package/dist/cjs/auth.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.login = login;
 exports.status = status;
 exports.logout = logout;
+exports.validateVerificationUrl = validateVerificationUrl;
+exports.browserOpenCommand = browserOpenCommand;
 const node_child_process_1 = require("node:child_process");
 const node_os_1 = require("node:os");
 const errors_js_1 = require("./errors.js");
@@ -243,7 +245,8 @@ function validateVerificationUrl(value) {
     catch {
         throw new errors_js_1.CliError("Proxy returned an invalid browser approval URL", "cli_invalid_auth_response", errors_js_1.cliExitCodes.network);
     }
-    const loopback = ["127.0.0.1", "::1", "localhost"].includes(url.hostname);
+    const hostname = url.hostname.replace(/^\[|\]$/g, "");
+    const loopback = ["127.0.0.1", "::1", "localhost"].includes(hostname);
     if ((url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) ||
         url.username ||
         url.password) {
@@ -252,8 +255,7 @@ function validateVerificationUrl(value) {
     return url.toString();
 }
 async function openBrowser(url) {
-    const command = (0, node_os_1.platform)() === "darwin" ? "open" : (0, node_os_1.platform)() === "win32" ? "cmd" : "xdg-open";
-    const args = (0, node_os_1.platform)() === "win32" ? ["/c", "start", "", url] : [url];
+    const { args, command } = browserOpenCommand((0, node_os_1.platform)(), url);
     return new Promise((resolve) => {
         const child = (0, node_child_process_1.spawn)(command, args, { detached: true, shell: false, stdio: "ignore" });
         child.once("error", () => resolve(false));
@@ -263,6 +265,17 @@ async function openBrowser(url) {
         });
     });
 }
+function browserOpenCommand(operatingSystem, url) {
+    if (operatingSystem === "darwin") {
+        return { args: [url], command: "open" };
+    }
+    if (operatingSystem === "win32") {
+        // Avoid cmd.exe entirely: even with shell=false, `cmd /c start` reparses URL
+        // metacharacters. Explorer receives the URL as one process argument.
+        return { args: [url], command: "explorer.exe" };
+    }
+    return { args: [url], command: "xdg-open" };
+}
 function deviceExpired() {
     return new errors_js_1.CliError("Device authorization expired", "cli_device_authorization_expired", errors_js_1.cliExitCodes.authentication);
 }

package/dist/cjs/cli.d.cts

@@ -1,6 +1,6 @@
 import { CliConfigStore } from "./config.js";
 import { type CliIo } from "./output.js";
-export declare const cliVersion = "0.1.0-prx-128.114.1";
+export declare const cliVersion = "0.1.0-prx-128.115.1";
 export interface RunCliOptions {
     configStore?: CliConfigStore;
     environment?: NodeJS.ProcessEnv;

package/dist/cjs/cli.d.ts

@@ -1,6 +1,6 @@
 import { CliConfigStore } from "./config.js";
 import { type CliIo } from "./output.js";
-export declare const cliVersion = "0.1.0-prx-128.114.1";
+export declare const cliVersion = "0.1.0-prx-128.115.1";
 export interface RunCliOptions {
     configStore?: CliConfigStore;
     environment?: NodeJS.ProcessEnv;

package/dist/cjs/cli.js

@@ -9,7 +9,7 @@ const config_js_1 = require("./config.js");
 const errors_js_1 = require("./errors.js");
 const output_js_1 = require("./output.js");
 const webhooks_js_1 = require("./webhooks.js");
-exports.cliVersion = "0.1.0-prx-128.114.1";
+exports.cliVersion = "0.1.0-prx-128.115.1";
 async function runCli(argv, options = {}) {
     const io = options.io ?? {
         isTTY: Boolean(process.stdin.isTTY && process.stdout.isTTY),

package/dist/cjs/config.js

@@ -46,6 +46,8 @@ function run() {
   if (operation === "read") {
     query.setObjectForKey(true, $("r_Data"));
     query.setObjectForKey($("m_LimitOne"), $("m_Limit"));
+    // In JXA's Objective-C bridge, nullary $() creates the mutable CFTypeRef
+    // out reference that SecItemCopyMatching fills with the returned NSData.
     const result = $();
     const status = $.SecItemCopyMatching(query, result);
     if (status === -25300) return "missing";

package/dist/cjs/webhooks.js

@@ -169,6 +169,7 @@ async function runListener(input) {
     }
 }
 async function forwardSelectedDelivery(input) {
+    const destination = validateLoopbackDestination(input.forwardTo);
     const claim = await input.client.claim(input.listenerId, {
         ...(input.deliveryId ? { deliveryId: input.deliveryId } : {}),
         ...(input.replayOutboxEventId ? { replayOutboxEventId: input.replayOutboxEventId } : {}),
@@ -176,7 +177,7 @@ async function forwardSelectedDelivery(input) {
     if (!claim) {
         throw new errors_js_1.CliError("Selected delivery or replay is not currently claimable", "cli_delivery_not_claimable", errors_js_1.cliExitCodes.conflict);
     }
-    const completion = await forwardClaim(input.client, claim, validateLoopbackDestination(input.forwardTo), input.signal);
+    const completion = await forwardClaim(input.client, claim, destination, input.signal);
     return {
         attempt_id: claim.attempt_id,
         attempt_number: claim.attempt_number,

package/dist/esm/auth.d.ts

@@ -37,4 +37,9 @@ export declare function logout(input: {
     signal?: AbortSignal;
     token: string;
 }): Promise<void>;
+export declare function validateVerificationUrl(value: string): string;
+export declare function browserOpenCommand(operatingSystem: NodeJS.Platform, url: string): {
+    args: string[];
+    command: string;
+};
 export {};

package/dist/esm/auth.js

@@ -230,7 +230,7 @@ function normalizeCredentialName(name) {
     }
     return value;
 }
-function validateVerificationUrl(value) {
+export function validateVerificationUrl(value) {
     let url;
     try {
         url = new URL(value);
@@ -238,7 +238,8 @@ function validateVerificationUrl(value) {
     catch {
         throw new CliError("Proxy returned an invalid browser approval URL", "cli_invalid_auth_response", cliExitCodes.network);
     }
-    const loopback = ["127.0.0.1", "::1", "localhost"].includes(url.hostname);
+    const hostname = url.hostname.replace(/^\[|\]$/g, "");
+    const loopback = ["127.0.0.1", "::1", "localhost"].includes(hostname);
     if ((url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) ||
         url.username ||
         url.password) {
@@ -247,8 +248,7 @@ function validateVerificationUrl(value) {
     return url.toString();
 }
 async function openBrowser(url) {
-    const command = platform() === "darwin" ? "open" : platform() === "win32" ? "cmd" : "xdg-open";
-    const args = platform() === "win32" ? ["/c", "start", "", url] : [url];
+    const { args, command } = browserOpenCommand(platform(), url);
     return new Promise((resolve) => {
         const child = spawn(command, args, { detached: true, shell: false, stdio: "ignore" });
         child.once("error", () => resolve(false));
@@ -258,6 +258,17 @@ async function openBrowser(url) {
         });
     });
 }
+export function browserOpenCommand(operatingSystem, url) {
+    if (operatingSystem === "darwin") {
+        return { args: [url], command: "open" };
+    }
+    if (operatingSystem === "win32") {
+        // Avoid cmd.exe entirely: even with shell=false, `cmd /c start` reparses URL
+        // metacharacters. Explorer receives the URL as one process argument.
+        return { args: [url], command: "explorer.exe" };
+    }
+    return { args: [url], command: "xdg-open" };
+}
 function deviceExpired() {
     return new CliError("Device authorization expired", "cli_device_authorization_expired", cliExitCodes.authentication);
 }

package/dist/esm/cli.d.ts

@@ -1,6 +1,6 @@
 import { CliConfigStore } from "./config.js";
 import { type CliIo } from "./output.js";
-export declare const cliVersion = "0.1.0-prx-128.114.1";
+export declare const cliVersion = "0.1.0-prx-128.115.1";
 export interface RunCliOptions {
     configStore?: CliConfigStore;
     environment?: NodeJS.ProcessEnv;

package/dist/esm/cli.js

@@ -5,7 +5,7 @@ import { CliConfigStore } from "./config.js";
 import { asCliError, CliError, cliExitCodes, usageError } from "./errors.js";
 import { CliOutput } from "./output.js";
 import { forwardSelectedDelivery, ProxyWebhooksClient, runListener, } from "./webhooks.js";
-export const cliVersion = "0.1.0-prx-128.114.1";
+export const cliVersion = "0.1.0-prx-128.115.1";
 export async function runCli(argv, options = {}) {
     const io = options.io ?? {
         isTTY: Boolean(process.stdin.isTTY && process.stdout.isTTY),

package/dist/esm/config.js

@@ -41,6 +41,8 @@ function run() {
   if (operation === "read") {
     query.setObjectForKey(true, $("r_Data"));
     query.setObjectForKey($("m_LimitOne"), $("m_Limit"));
+    // In JXA's Objective-C bridge, nullary $() creates the mutable CFTypeRef
+    // out reference that SecItemCopyMatching fills with the returned NSData.
     const result = $();
     const status = $.SecItemCopyMatching(query, result);
     if (status === -25300) return "missing";

package/dist/esm/webhooks.js

@@ -163,6 +163,7 @@ export async function runListener(input) {
     }
 }
 export async function forwardSelectedDelivery(input) {
+    const destination = validateLoopbackDestination(input.forwardTo);
     const claim = await input.client.claim(input.listenerId, {
         ...(input.deliveryId ? { deliveryId: input.deliveryId } : {}),
         ...(input.replayOutboxEventId ? { replayOutboxEventId: input.replayOutboxEventId } : {}),
@@ -170,7 +171,7 @@ export async function forwardSelectedDelivery(input) {
     if (!claim) {
         throw new CliError("Selected delivery or replay is not currently claimable", "cli_delivery_not_claimable", cliExitCodes.conflict);
     }
-    const completion = await forwardClaim(input.client, claim, validateLoopbackDestination(input.forwardTo), input.signal);
+    const completion = await forwardClaim(input.client, claim, destination, input.signal);
     return {
         attempt_id: claim.attempt_id,
         attempt_number: claim.attempt_number,

package/package.json

@@ -7,7 +7,7 @@
   "sideEffects": false,
   "type": "module",
   "types": "./dist/esm/index.d.ts",
-  "version": "0.1.0-prx-128.114.1",
+  "version": "0.1.0-prx-128.115.1",
   "bin": {
     "proxy": "./dist/esm/bin.js"
   },