v1.4.0

AIHelper v1.4.0

This release adds one-command setup for five AI coding agents and extends the
credential vault to GitHub and GitLab workflows while keeping secret values out
of MCP calls and command logs.

Highlights

• Configure Claude Code, Codex, Gemini, Cursor, or GitHub Copilot with
  ah ai install, including stdio, loopback HTTP, and managed Windows MCP
  transports.
• Use vault-backed GitHub and GitLab tokens from the direct CLI or MCP without
  putting token values into agent requests.
• Complete secret setup in a protected browser form with responsive styling,
  strict content security policy, and a confirmation page.

What's Changed

✨ New

• ah ai install, ah ai uninstall, and ah ai status manage the aihelper
  MCP registration and a bounded rules block for claude, codex, gemini,
  cursor, and copilot. Installation supports --scope,
  --transport <stdio|http|managed>, --url, component-only modes,
  confirmation, and dry-run output.
• Direct CLI commands can select vault entries with --credential SLOT=ID
  whenever their command catalog declares a matching secret slot.
• Secret kinds github-token and gitlab-token provide the optional token
  credential slot used by all GitHub and GitLab commands.
• Protected browser secret setup now provides light and dark themes, responsive
  layout, redacted success metadata, and a Close action.

🚀 Improvements

• CLI and MCP credential execution share the plugin's normal parser and
  BindResolvedSecrets validation path instead of maintaining a separate
  CLI-to-typed conversion path.
• GitHub and GitLab ambient environment tokens and Git credential-helper output
  are limited to the default API host, the detected remote host, or loopback.
  Caller-selected API hosts require an explicit token.
• MCP rejects inline GitHub and GitLab token arguments and requires the vault
  credential slot; direct --token flags and provider environment variables
  remain available for CLI use.
• Managed AI-agent installation uses the endpoint reported by
  ah mcp service status, starts or installs the service only when explicitly
  selected, and refuses drifted registrations.

🐛 Fixes

• Browser secret submission no longer fails with LOCAL_REQUEST_REJECTED when
  the form posts back to the local setup endpoint.
• GitHub and GitLab refuse to send tokens to cleartext non-loopback endpoints;
  GitLab also withholds tokens from a GraphQL endpoint on another host.
• Git credential-helper execution is bounded, drains output while waiting, and
  always reaps the child process.
• Credential parsing stops at --, secret-like option values remain redacted,
  and AH_VAULT_MASTER_KEY rejects non-hexadecimal input.
• AI-agent installation validates a plain HTTP loopback URL ending exactly in
  /mcp and restores the prior CLI registration when replacement fails.
• PostgreSQL tool.* commands reject database credentials rather than silently
  ignoring them.

⚠️ Compatibility

• Released CLI, JSON/MCP, plugin ABI, and C ABI contracts remain backward
  compatible. The removed CLI-to-typed sidecar API was not part of a published
  release.
• Existing direct GitHub and GitLab --token flags and the GITHUB_TOKEN,
  GH_TOKEN, GITLAB_TOKEN, and GL_TOKEN environment variables continue to
  work.

Downloads

Platform	Archive
Windows x64	ah-windows-x64.zip
Linux x64	ah-linux-x64.zip
macOS ARM64	ah-macos-arm64.zip

Each archive contains the ah executable and its executable-relative
plugins/ directory. Keep them together after extraction.

Full Changelog

v1.3.2...v1.4.0