fix: fetch Privy app ID from companion app for all URLs

Same pattern as the callback key fix — remove localhost-only guard
and let the CLI fetch the app ID from /api/session/callback-key
for production URLs too.

Bumps CLI to 0.1.4.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: jarrodwatts

packages/agw-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abstract-foundation/agw-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "type": "module",
   "description": "Agent-first CLI for Abstract Global Wallet workflows",
   "license": "MIT",

packages/agw-cli/src/index.ts

@@ -145,7 +145,7 @@ async function main(): Promise<void> {
   program
     .name("agw-cli")
     .description("Agent-first CLI for Abstract Global Wallet workflows.")
-    .version("0.1.3")
+    .version("0.1.4")
     .showHelpAfterError();
 
   program

packages/agw-core/src/privy/client.ts

@@ -8,7 +8,6 @@ import type {
 } from "./types.js";
 
 const PRIVY_API_BASE = "https://api.privy.io";
-const LOCALHOST_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]"]);
 
 export interface PrivyWalletClientConfig {
   signerConfig: PrivySignerConfig;
@@ -45,14 +44,7 @@ export class PrivyWalletClient {
     return Buffer.from(`${appId}:${appSecret}`).toString("base64");
   }
 
-  private isLoopbackAppUrl(): boolean {
-    try {
-      const parsed = new URL(this.appUrl);
-      return LOCALHOST_HOSTS.has(parsed.hostname);
-    } catch {
-      return false;
-    }
-  }
+
 
   private async resolveRuntimeConfig(): Promise<{ appId: string; mode: "proxy" | "direct" }> {
     if (this.runtimeConfigPromise) {
@@ -75,12 +67,6 @@ export class PrivyWalletClient {
         };
       }
 
-      if (!this.isLoopbackAppUrl()) {
-        throw new Error(
-          "AGW_PRIVY_APP_ID is required for non-localhost hosted app URLs when the CLI is running without Privy server credentials.",
-        );
-      }
-
       const response = await fetch(new URL("/api/session/callback-key", this.appUrl), {
         method: "GET",
         headers: {