aptunnel 1.1.0 → 1.1.1

package/README.md

@@ -155,7 +155,7 @@ dev          ekaredb-redis     dev-redis  55555  DOWN    -            -      -
 ```bash
 aptunnel login                     # uses saved credentials, supports 2FA
 aptunnel login --email=x@y.com --password=secret
-aptunnel login --lifetime=14d      # custom token lifetime (default: 7d)
+aptunnel login --lifetime=7d       # custom token lifetime (max: 7d)
 aptunnel login --status            # show token info only
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aptunnel",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Cross-platform Aptible tunnel manager — multi-tunnel, auto-discovery, background process management",
   "type": "module",
   "bin": {

package/src/commands/config.js

@@ -26,8 +26,8 @@ export async function runConfig(args) {
   if (setPortArg !== -1) {
     const alias = args[setPortArg + 1];
     const port  = parseInt(args[setPortArg + 2], 10);
-    if (!alias || isNaN(port)) {
-      logger.error('Usage: aptunnel config --set-port <alias> <port>');
+    if (!alias || isNaN(port) || port < 1 || port > 65535) {
+      logger.error('Usage: aptunnel config --set-port <alias> <port>  (port must be 1–65535)');
       process.exit(1);
     }
     setPort(alias, port);

package/src/commands/tunnel.js

@@ -226,7 +226,7 @@ function printConnectionInfo(alias, port, conn) {
   logger.detail('Port:',     String(conn.port ?? port));
   logger.detail('Host:',     conn.host ?? 'localhost.aptible.in');
   logger.detail('User:',     conn.user ?? 'aptible');
-  logger.detail('Password:', conn.password ? chalk.dim(conn.password) : chalk.dim('(not parsed)'));
+  logger.detail('Password:', conn.password ? chalk.dim('*'.repeat(Math.min(conn.password.length, 12))) : chalk.dim('(not parsed)'));
   logger.detail('URL:',      conn.url ? chalk.cyan(conn.url) : chalk.dim('(not parsed)'));
   logger.detail('PID:',      String(readPid(toIdentifier(alias)) ?? '?'));
   console.log('');

package/src/lib/config-manager.js

@@ -81,13 +81,14 @@ export function savePassword(password) {
 
   if (platform() === 'win32') {
     // On Windows chmod doesn't restrict access — use icacls
-    try {
-      const username = process.env.USERNAME ?? process.env.USER ?? '';
-      if (username) {
-        spawnSync('icacls', [credsPath, '/inheritance:r', '/grant:r', `${username}:(R,W)`], { encoding: 'utf8' });
+    const username = process.env.USERNAME ?? process.env.USER ?? '';
+    if (username) {
+      const r = spawnSync('icacls', [credsPath, '/inheritance:r', '/grant:r', `${username}:(R,W)`], { encoding: 'utf8' });
+      if (r.status !== 0) {
+        process.stderr.write(`[aptunnel] Warning: could not restrict permissions on credentials file: ${credsPath}\n`);
       }
-    } catch {
-      // icacls unavailable — warn via caller
+    } else {
+      process.stderr.write(`[aptunnel] Warning: could not determine current user — credentials file may not be permission-restricted.\n`);
     }
   }
 }