@specific.dev/cli 0.1.103 → 0.1.105

package/dist/cli.js

@@ -373039,7 +373039,7 @@ function trackEvent(event, properties) {
     event,
     properties: {
       ...properties,
-      cli_version: "0.1.103",
+      cli_version: "0.1.105",
       platform: process.platform,
       node_version: process.version,
       project_id: getProjectId()
@@ -376718,7 +376718,7 @@ function compareVersions(a, b) {
   return 0;
 }
 async function checkForUpdate() {
-  const currentVersion = "0.1.103";
+  const currentVersion = "0.1.105";
   const response = await fetch(`${BINARIES_BASE_URL}/latest?t=${Date.now()}`);
   if (!response.ok) {
     throw new Error(`Failed to check for updates: HTTP ${response.status}`);
@@ -376986,7 +376986,7 @@ async function projectListCommand() {
 var program = new Command();
 var env = "production";
 var envLabel = env !== "production" ? `[${env.toUpperCase()}] ` : "";
-program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.103").enablePositionalOptions();
+program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.105").enablePositionalOptions();
 program.command("init").description("Initialize project for use with a coding agent").option("--agent <name...>", "Agents to configure (cursor, claude, codex, other)").addHelpText("after", `
 Examples:
   $ specific init

package/dist/docs/sync.md

@@ -46,6 +46,44 @@ For implementation details, see the Electric documentation:
 - Authentication and proxying: https://electric-sql.com/docs/guides/auth
 - Shapes and client usage: https://electric-sql.com/docs/guides/shapes
 - Handling writes: https://electric-sql.com/docs/guides/writes
+- Troubleshooting: https://electric-sql.com/docs/guides/troubleshooting
+
+## Proxy configuration
+
+When proxying Electric requests from your backend, you must handle headers and query parameters correctly. Getting these wrong causes silent failures — browsers block responses or serve stale cached data without clear error messages.
+
+### Expose Electric response headers
+
+Electric returns custom `electric-*` headers that the client SDK needs to follow the shape log. Browsers block JavaScript from reading non-standard response headers unless they are listed in `Access-Control-Expose-Headers`. Make sure your proxy does not strip any `electric-*` headers from the response, and expose them all:
+
+```
+Access-Control-Expose-Headers: electric-handle, electric-offset, electric-schema, electric-cursor, electric-up-to-date, electric-chunk-last-offset
+```
+
+### Strip upstream headers
+
+Electric's response includes its own CORS and caching headers. If your proxy copies these through and your CORS middleware also adds its own, the browser receives duplicate `Access-Control-Allow-Origin` values and rejects the response. Before setting your own headers, strip these from Electric's response:
+
+- `Access-Control-Allow-Origin` and other `Access-Control-*` headers
+- `Content-Encoding` and `Content-Length` (fetch decompresses the body but doesn't update these headers, which breaks browser decoding)
+- `Cache-Control` (see below)
+
+### Override caching
+
+Electric returns `Cache-Control` with `max-age` and `stale-age` for request collapsing at CDN level. During development, this can cause browsers to serve stale cached responses — for example, responses cached before CORS headers were configured correctly will keep failing even after the proxy is fixed. Override with `Cache-Control: no-store` on your proxy response to prevent this.
+
+### Control query parameters
+
+Set these server-side — never pass them through from the client:
+
+- `table` — letting clients specify the table allows access to any table
+- `where` — this is your authorization filter
+- `columns` — clients could request sensitive columns
+- `secret` — never expose the API secret to clients
+
+Only forward Electric protocol parameters from the client:
+
+- `offset`, `handle`, `live`, `live_sse`, `cursor`, `expired_handle`, `replica`, `log`
 
 ## Using the Electric TypeScript SDK
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specific.dev/cli",
-  "version": "0.1.103",
+  "version": "0.1.105",
   "description": "CLI for Specific infrastructure-as-code",
   "type": "module",
   "main": "dist/cli.js",