adom-cli

@@ -1,5 +1,5 @@ {   "name": "adom-cli",   "description": "Adom platform CLI reference: containers, repos, orgs, SSH keys, workspaces, Hydrogen settings and panels, sessions, admin.",-  "version": "4.1.0"-}+  "version": "4.1.1"+}\ No newline at end of file

@@ -1,6 +1,6 @@ --- name: adom-cli-description: Adom CLI (adom-cli), the platform CLI for everything on adom.cloud. Use for containers (create, list, inspect, resize, delete, port mappings, expose a port, SSH into a container), repos (CRUD, history, tags, forks, stars, transfer, contributors), workspaces, organizations (orgs, members, invitations, permissions, avatars), SSH keys (git access and container SSH), user profiles and avatars, public user lookup, sessions, Carbon status, Hydrogen IDE settings and keybindings, Hydrogen workspace panels (tabs, panes, splits, webviews), system notifications to the editor, admin waitlist and user invitations, and first-time auth setup. Trigger words - adom-cli, container, containers, port mapping, repo, repos, workspace, org, orgs, membership, invitation, ssh key, ssh keys, profile, avatar, session, hydrogen settings, keybindings, panel, webview tab, notify, waitlist, carbon status, adom login, adom setup.+description: Adom CLI (adom-cli), the platform CLI for everything on adom.cloud. Use for containers (create, list, inspect, resize, delete, port mappings, expose a port, SSH into a container), repos (CRUD, history, tags, forks, stars, transfer, contributors), workspaces, organizations (orgs, members, invitations, permissions, avatars), SSH keys (git access and container SSH), user profiles and avatars, public user lookup, sessions, Carbon status, Hydrogen IDE settings and keybindings, Hydrogen workspace panels (tabs, panes, splits, webviews), system notifications to the editor, admin waitlist and user invitations, and first-time auth setup. Trigger words - adom-cli, container, containers, port mapping, share a link, shareable link, share a demo, demo link, preview link, give me a link, expose a port, proxy url, repo, repos, workspace, org, orgs, membership, invitation, ssh key, ssh keys, profile, avatar, session, hydrogen settings, keybindings, panel, webview tab, notify, waitlist, carbon status, adom login, adom setup. ---  # Adom CLI

@@ -1,6 +1,6 @@ {   "slug": "adom-cli",-  "version": "4.1.0",+  "version": "4.1.1",   "type": "app",   "org": "adom",   "description": "Adom CLI \u2014 platform binary for containers, repos, workspaces, orgs, SSH keys, Hydrogen settings, and more",

@@ -1,6 +1,6 @@ {   "slug": "adom-cli",-  "version": "4.1.0",+  "version": "4.1.1",   "type": "app",   "org": "adom",   "description": "Adom CLI — platform binary for containers, repos, workspaces, orgs, SSH keys, Hydrogen settings, and more",

@@ -1,6 +1,6 @@ --- name: containers-description: "Adom Containers: Create, inspect, list, resize, and manage containers and port mappings. Includes lightweight sshd-only containers."+description: "Adom Containers: Create, inspect, list, resize, and manage containers and port mappings; make a shareable link for anything served in the container. Includes lightweight sshd-only containers. Trigger words: share a link, shareable link, share a demo, demo link, preview link, give me a link, expose a port, port mapping, proxy url, share this page." ---  # Container Management@@ -153,10 +153,16 @@ already listening on the user's container into a permanent public `*.adom.cloud` subdomain that anyone on the internet can load in a browser, no auth wall. -The default Coder proxy URL (`https://<user>-<repo>-<hash>.adom.cloud/proxy/<port>/`)-is behind the user's Adom login and can't be shared. The port mapping-created by `port-add` is the opposite: its own subdomain, anonymous, and-persistent across container restarts.+**NEVER share the Hydrogen webview proxy URL**+(`https://<user>-<repo>-<hash>.adom.cloud/proxy/<port>/`). It is not just+that it sits behind the user's Adom login and will not load for others:+the URL carries the container slug and addresses an unauthenticated local+port, so one accidental send exposes every dev service on the container.+Treat a request to "share" anything locally served as a request for a+port mapping, full stop. `/proxy/<port>/` is fine only for the user's own+in-container webview preview. The port mapping created by `port-add` is+the opposite: its own clean subdomain, anonymous, revocable+(`port-remove`), and persistent across container restarts.  **Flow:**