@agentprojectcontext/apx 1.15.4 → 1.15.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentprojectcontext/apx",
-  "version": "1.15.4",
+  "version": "1.15.5",
   "description": "APX — unified CLI + daemon for the Agent Project Context (APC) standard.",
   "publishConfig": {
     "access": "public"

package/src/cli/http.js

@@ -11,6 +11,12 @@ const __dirname = path.dirname(__filename);
 const DEFAULT_PORT = parseInt(process.env.APX_PORT || "7430", 10);
 const DEFAULT_HOST = process.env.APX_HOST || "127.0.0.1";
 
+const TOKEN_PATH = path.join(os.homedir(), ".apx", "daemon.token");
+
+function readToken() {
+  try { return fs.readFileSync(TOKEN_PATH, "utf8").trim(); } catch { return ""; }
+}
+
 function baseUrl() {
   return `http://${DEFAULT_HOST}:${DEFAULT_PORT}`;
 }
@@ -71,9 +77,13 @@ async function request(method, path, body, opts = {}) {
   else if (!(await ping())) {
     throw new Error(`apx daemon not running (no response on ${baseUrl()})`);
   }
+  const token = readToken();
   const res = await fetch(`${baseUrl()}${path}`, {
     method,
-    headers: body ? { "content-type": "application/json" } : {},
+    headers: {
+      ...(body ? { "content-type": "application/json" } : {}),
+      ...(token ? { "authorization": `Bearer ${token}` } : {}),
+    },
     body: body ? JSON.stringify(body) : undefined,
     signal: opts.signal,
   });
@@ -98,9 +108,13 @@ async function streamRequest(method, path, body, onEvent, opts = {}) {
     throw new Error(`apx daemon not running (no response on ${baseUrl()})`);
   }
 
+  const token = readToken();
   const res = await fetch(`${baseUrl()}${path}`, {
     method,
-    headers: body ? { "content-type": "application/json" } : {},
+    headers: {
+      ...(body ? { "content-type": "application/json" } : {}),
+      ...(token ? { "authorization": `Bearer ${token}` } : {}),
+    },
     body: body ? JSON.stringify(body) : undefined,
     signal: opts.signal,
   });

package/src/core/config.js

@@ -8,6 +8,7 @@ export const CONFIG_PATH = path.join(APX_HOME, "config.json");
 export const PID_PATH = path.join(APX_HOME, "daemon.pid");
 export const LOG_PATH = path.join(APX_HOME, "daemon.log");
 export const TELEGRAM_STATE_PATH = path.join(APX_HOME, "telegram-state.json");
+export const TOKEN_PATH = path.join(APX_HOME, "daemon.token");
 // Global channel messages (telegram, direct, whatsapp, …) live here,
 // separated from any project.  Structure: ~/.apx/messages/<channel>/YYYY-MM-DD.jsonl
 export const GLOBAL_MESSAGES_DIR = path.join(APX_HOME, "messages");

package/src/daemon/api.js

@@ -78,7 +78,7 @@ function appendSuperAgentErrorTrace(req, error, details = {}) {
   });
 }
 
-export function buildApi({ projects, registries, plugins, scheduler, version, startedAt, addProjectGlobally, config }) {
+export function buildApi({ projects, registries, plugins, scheduler, version, startedAt, addProjectGlobally, config, token }) {
   const telegram = plugins?.get("telegram");
 
   const app = express();
@@ -89,6 +89,17 @@ export function buildApi({ projects, registries, plugins, scheduler, version, st
     next();
   });
 
+  // Token auth — skip only /health so the CLI can ping before reading the token.
+  if (token) {
+    app.use((req, res, next) => {
+      if (req.path === "/health") return next();
+      const auth = req.get("authorization") || "";
+      const provided = auth.startsWith("Bearer ") ? auth.slice(7) : "";
+      if (provided !== token) return res.status(401).json({ error: "unauthorized" });
+      next();
+    });
+  }
+
   // ---- Tool routers (fetch / browser / search / glob / grep / registry) ----
   // fetch  = native HTTP, no Chromium  → fast, cheap, default for REST/HTML
   // browser = Puppeteer-backed         → heavy, lazy-launched, for JS-rendered pages

package/src/daemon/index.js

@@ -3,6 +3,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { randomBytes } from "node:crypto";
 import {
   readConfig,
   writeConfig,
@@ -12,6 +13,7 @@ import {
   PID_PATH,
   LOG_PATH,
   APX_HOME,
+  TOKEN_PATH,
 } from "../core/config.js";
 import { ProjectManager } from "./db.js";
 import { McpRegistry } from "./mcp-runner.js";
@@ -76,6 +78,12 @@ function clearPid() {
   } catch {}
 }
 
+function generateToken() {
+  const token = randomBytes(32).toString("hex");
+  fs.writeFileSync(TOKEN_PATH, token, { mode: 0o600 });
+  return token;
+}
+
 class RegistryCache {
   constructor() {
     this.byProjectId = new Map();
@@ -98,6 +106,7 @@ class RegistryCache {
 async function main() {
   ensureHome();
   claimSingleton();
+  const token = generateToken();
 
   const cfg = readConfig();
   const host = effectiveHost(cfg);
@@ -138,6 +147,7 @@ async function main() {
     plugins,
     scheduler,
     config: cfg,
+    token,
     version: PKG.version,
     startedAt,
     addProjectGlobally: (absPath) => {

package/src/daemon/tools/fetch.js

@@ -33,6 +33,22 @@ async function getFetch() {
 const DEFAULT_TIMEOUT = 30000;
 const MAX_BODY_BYTES  = 5 * 1024 * 1024; // 5MB
 
+// Block private/link-local ranges and cloud metadata endpoints to prevent SSRF.
+const BLOCKED_HOST_RE = /^(localhost|metadata\.google\.internal\.?)$/i;
+const PRIVATE_IP_RE   = /^(127\.\d+\.\d+\.\d+|0\.0\.0\.0|::1|10\.\d+\.\d+\.\d+|172\.(1[6-9]|2\d|3[01])\.\d+\.\d+|192\.168\.\d+\.\d+|169\.254\.\d+\.\d+|fd[0-9a-f]{2}:)/i;
+
+function validateUrl(rawUrl) {
+  let parsed;
+  try { parsed = new URL(rawUrl); } catch { throw new Error("Invalid URL"); }
+  if (!["http:", "https:"].includes(parsed.protocol)) {
+    throw new Error(`Protocol "${parsed.protocol}" is not allowed; use http or https`);
+  }
+  const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (BLOCKED_HOST_RE.test(host) || PRIVATE_IP_RE.test(host)) {
+    throw new Error(`Requests to private or link-local addresses are blocked`);
+  }
+}
+
 async function readBody(response, jsonHint) {
   const ctype = response.headers.get("content-type") || "";
   const wantsJson = jsonHint || ctype.includes("application/json");
@@ -57,6 +73,7 @@ async function readBody(response, jsonHint) {
 
 async function doRequest({ url, method = "GET", headers = {}, body = null, timeout_ms = DEFAULT_TIMEOUT, json = false } = {}) {
   if (!url) throw new Error("url required");
+  validateUrl(url);
   const fetch = await getFetch();
 
   const controller = new AbortController();