ragent-cli 1.11.0 → 1.11.2

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "ragent-cli",
-      version: "1.11.0",
+      version: "1.11.2",
       description: "CLI agent for rAgent Live \u2014 browser-first terminal control plane for AI coding agents",
       main: "dist/index.js",
       bin: {
@@ -86,7 +86,6 @@ var require_package = __commonJS({
       },
       dependencies: {
         "@azure/web-pubsub-client": "^1.0.2",
-        "@ragent/transcript-protocol": "*",
         commander: "^14.0.3",
         figlet: "^1.9.3",
         "node-pty": "^1.1.0",
@@ -97,6 +96,7 @@ var require_package = __commonJS({
         "@changesets/cli": "^2.29.8",
         "@cyclonedx/cyclonedx-npm": "^4.2.1",
         "@eslint/js": "^10.0.1",
+        "@ragent/transcript-protocol": "*",
         "@types/figlet": "^1.7.0",
         "@types/node": "^25.5.0",
         "@types/ws": "^8.5.13",
@@ -5567,14 +5567,20 @@ async function runAgent(rawOptions) {
                       log15.warn("failed to decrypt input \u2014 ignoring");
                     }
                   }
-                } else if (typeof payload.data === "string") {
+                } else if (typeof payload.data === "string" && !conn.sessionKey) {
                   inputData = payload.data;
+                } else if (conn.sessionKey) {
+                  log15.warn("rejecting plaintext input frame while encrypted channel is active");
                 }
                 if (inputData !== null) {
                   const sid = typeof payload.sessionId === "string" ? payload.sessionId.trim() : "";
                   dispatcher.handleInput(inputData, sid);
                 }
               } else if (payload.type === "resize" && Number.isInteger(payload.cols) && Number.isInteger(payload.rows)) {
+                if (conn.sessionKey && !dispatcher.verifyMessageHmac(payload)) {
+                  log15.warn("rejecting resize frame \u2014 HMAC verification failed");
+                  return;
+                }
                 const sid = typeof payload.sessionId === "string" ? payload.sessionId.trim() : "";
                 dispatcher.handleResize(payload.cols, payload.rows, sid);
               } else if (payload.type === "control" && typeof payload.action === "string") {

package/dist/sbom.json

@@ -484,24 +484,6 @@
         }
       ]
     },
-    {
-      "type": "library",
-      "name": "transcript-protocol",
-      "group": "@ragent",
-      "version": "0.1.0",
-      "bom-ref": "ragent-live|@ragent/transcript-protocol@0.1.0",
-      "purl": "pkg:npm/%40ragent/transcript-protocol@0.1.0",
-      "properties": [
-        {
-          "name": "cdx:npm:package:path",
-          "value": "node_modules/@ragent/transcript-protocol"
-        },
-        {
-          "name": "cdx:npm:package:private",
-          "value": "true"
-        }
-      ]
-    },
     {
       "type": "library",
       "name": "wasm-util",
@@ -1184,8 +1166,8 @@
     {
       "type": "library",
       "name": "ragent-cli",
-      "version": "1.11.0",
-      "bom-ref": "ragent-live|ragent-cli@1.11.0",
+      "version": "1.11.2",
+      "bom-ref": "ragent-live|ragent-cli@1.11.2",
       "author": "Intellimetrics",
       "description": "CLI agent for rAgent Live — browser-first terminal control plane for AI coding agents",
       "licenses": [
@@ -1196,7 +1178,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/ragent-cli@1.11.0",
+      "purl": "pkg:npm/ragent-cli@1.11.2",
       "externalReferences": [
         {
           "url": "https://github.com/chadlindell/ragent-live/issues",
@@ -1321,7 +1303,7 @@
         "ragent-live|@emnapi/wasi-threads@1.2.1",
         "ragent-live|@pkgjs/parseargs@0.11.0",
         "ragent-live|@tybys/wasm-util@0.10.1",
-        "ragent-live|ragent-cli@1.11.0"
+        "ragent-live|ragent-cli@1.11.2"
       ]
     },
     {
@@ -1379,9 +1361,6 @@
     {
       "ref": "ragent-live|@pkgjs/parseargs@0.11.0"
     },
-    {
-      "ref": "ragent-live|@ragent/transcript-protocol@0.1.0"
-    },
     {
       "ref": "ragent-live|@tybys/wasm-util@0.10.1",
       "dependsOn": [
@@ -1457,10 +1436,9 @@
       ]
     },
     {
-      "ref": "ragent-live|ragent-cli@1.11.0",
+      "ref": "ragent-live|ragent-cli@1.11.2",
       "dependsOn": [
         "ragent-live|@azure/web-pubsub-client@1.0.4",
-        "ragent-live|@ragent/transcript-protocol@0.1.0",
         "ragent-live|commander@14.0.3",
         "ragent-live|figlet@1.11.0",
         "ragent-live|node-pty@1.1.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ragent-cli",
-  "version": "1.11.0",
+  "version": "1.11.2",
   "description": "CLI agent for rAgent Live — browser-first terminal control plane for AI coding agents",
   "main": "dist/index.js",
   "bin": {
@@ -55,7 +55,6 @@
   },
   "dependencies": {
     "@azure/web-pubsub-client": "^1.0.2",
-    "@ragent/transcript-protocol": "*",
     "commander": "^14.0.3",
     "figlet": "^1.9.3",
     "node-pty": "^1.1.0",
@@ -66,6 +65,7 @@
     "@changesets/cli": "^2.29.8",
     "@cyclonedx/cyclonedx-npm": "^4.2.1",
     "@eslint/js": "^10.0.1",
+    "@ragent/transcript-protocol": "*",
     "@types/figlet": "^1.7.0",
     "@types/node": "^25.5.0",
     "@types/ws": "^8.5.13",