likho-cli 0.3.0 → 0.3.1

package/bin/likho.js

@@ -57,6 +57,22 @@ async function answer(question) {
 const say = (line = "") => console.log(line);
 const mcpUrl = (opts, org) => `${opts.server}/mcp${org ? `?org=${encodeURIComponent(org)}` : ""}`;
 
+/**
+ * The host a "likho" entry really points at, when that isn't this Likho
+ * ("" when it is). A shared or downloaded project can carry a settings file
+ * whose "likho" leads to someone else's server; it's never trusted silently.
+ */
+function foreignHost(url, opts) {
+  try {
+    const u = new URL(url);
+    const ours = new URL(opts.server);
+    if (u.host === ours.host && u.protocol === ours.protocol && u.pathname.replace(/\/+$/, "") === "/mcp") return "";
+    return u.protocol === "https:" ? u.host : `${u.protocol}//${u.host} (not https)`;
+  } catch {
+    return String(url).slice(0, 60) || "an unreadable address";
+  }
+}
+
 /** The organization in a Likho address written by this tool ("" if none). */
 function orgOfUrl(url) {
   try {
@@ -120,9 +136,17 @@ async function connect(opts) {
     // what works. In a project, the all-projects setting is shown too: the
     // project one overrides it in this folder.
     const existing = new Map(usable.filter((t) => !t.manual).map((t) => [t.id, t.current(ctx, scope)]).filter(([, url]) => url));
+    // Entries named "likho" that point elsewhere are replaced, not kept.
+    const foreign = new Map([...existing].map(([id, url]) => [id, foreignHost(url, opts)]).filter(([, host]) => host));
+    for (const id of foreign.keys()) existing.delete(id);
+    if (foreign.size) {
+      const lines = usable.filter((t) => foreign.has(t.id)).map((t) => `${t.name}'s "likho" entry points to ${foreign.get(t.id)}, not Likho. It will be replaced.`);
+      ui.log.warn(lines.join("\n"));
+    }
     const inherited = (t) => (scope === "project" && t.global && !t.manual ? t.current(ctx, "global") : null);
     const hintFor = (t) => {
       if (t.manual) return "you add it in its settings";
+      if (foreign.has(t.id)) return `⚠ points to ${foreign.get(t.id)}, not Likho: will be replaced`;
       if (existing.has(t.id)) return `already connected → ${orgOfUrl(existing.get(t.id)) || "Likho"}`;
       const all = inherited(t);
       return all ? `connected for all projects → ${orgOfUrl(all) || "Likho"}; this would override it here` : undefined;
@@ -250,8 +274,9 @@ function status(opts) {
   for (const t of selectTools(opts, ctx)) {
     if (t.manual) continue;
     const rows = [];
-    if (t.global) rows.push(`all projects: ${t.current(ctx, "global") || "not connected"}`);
-    if (t.project && inProject) rows.push(`this project: ${t.current(ctx, "project") || "not connected"}`);
+    const show = (url) => (!url ? "not connected" : foreignHost(url, opts) ? `⚠ ${url} (not Likho: run npx likho-cli to replace it)` : url);
+    if (t.global) rows.push(`all projects: ${show(t.current(ctx, "global"))}`);
+    if (t.project && inProject) rows.push(`this project: ${show(t.current(ctx, "project"))}`);
     say(`  ${t.name.padEnd(14)} ${t.detect() ? "" : "(not installed) "}${rows.join(" · ")}`);
   }
   say();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "likho-cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Connect every AI tool on your computer (Claude Code, Codex, Cursor, VS Code, Gemini CLI, opencode, Windsurf) to Likho in one command.",
   "license": "MIT",
   "homepage": "https://likho.me",