mtech-ai-local-runner 0.1.103 → 0.1.104

package/README.md

@@ -1,3 +1,9 @@
+## 0.1.104: the token prompt is hidden
+
+`setup --claude-token` no longer prints the pasted token. If you used it on 0.1.103, revoke that token and store a
+fresh one. Released in 0.1.104; its Local Fix receipt must be listed on the Gateway before a runner on it prepares a
+Local Fix.
+
 ## 0.1.103: Claude logs in with the runner's own token
 
 Run `npx mtech-ai-local-runner@latest setup --claude-token` once and paste the token from `claude setup-token`. Local

package/dist/src/commands/claude-token.js

@@ -1,29 +1,33 @@
 import { execFileSync } from "node:child_process";
-import readline from "node:readline/promises";
+import readline from "node:readline";
 import { ClaudeRunnerTokenStore, normalizeClaudeRunnerToken } from "../safety/claude-runner-token.js";
 export const CLAUDE_TOKEN_FLAG = "--claude-token";
 export const CLAUDE_TOKEN_RESET_FLAG = "--claude-token-reset";
+/** Reads pasted lines without ever writing them back: readline gets no output stream and runs as a non-terminal, and
+ * terminal echo is off while it reads. Lines are joined, so a wrapped paste is fine; an empty line ends the input. */
+export async function readHiddenLines(input, output, prompt, setEcho = () => undefined) {
+    output.write(prompt);
+    setEcho(false);
+    const rl = readline.createInterface({ input, terminal: false });
+    try {
+        let value = "";
+        for await (const raw of rl) {
+            const line = raw.replace(/\s+/g, "");
+            if (line === "" && value !== "")
+                break;
+            value += line;
+        }
+        return value;
+    }
+    finally {
+        rl.close();
+        setEcho(true);
+        output.write("\n");
+    }
+}
 export const terminalHiddenReader = {
     isInteractive: () => process.stdin.isTTY === true,
-    async readHiddenLines(prompt) {
-        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-        process.stdout.write(prompt);
-        execFileSync("/bin/stty", ["-echo"], { stdio: "inherit" });
-        try {
-            let value = "";
-            for (;;) {
-                const line = (await rl.question("")).replace(/\s+/g, "");
-                if (line === "" && value !== "")
-                    return value;
-                value += line;
-            }
-        }
-        finally {
-            execFileSync("/bin/stty", ["echo"], { stdio: "inherit" });
-            process.stdout.write("\n");
-            rl.close();
-        }
-    },
+    readHiddenLines: prompt => readHiddenLines(process.stdin, process.stdout, prompt, on => execFileSync("/bin/stty", [on ? "echo" : "-echo"], { stdio: "inherit" })),
 };
 export async function runClaudeTokenCommand(input) {
     const store = input.store ?? new ClaudeRunnerTokenStore({ stateRoot: input.stateRoot });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.103",
+  "version": "0.1.104",
   "private": false,
   "license": "UNLICENSED",
   "bin": {