@anvia/studio 1.3.17 → 1.3.19

package/README.md

@@ -37,8 +37,17 @@ await new Studio([agent]).serve({ port: 4021 });
 - Knowledge-graph exploration and browser sandbox viewing with human takeover.
 - Optional SQLite session storage and graceful server shutdown.
 
+The knowledge inspector returns HTTP 400 `bad_request` with message `Invalid cursor` for invalid
+static-context cursors or when a dynamic context/tool store raises `VectorInspectCursorError`.
+
 Session storage is in memory by default; configure SQLite to persist it across restarts. Studio is intended for local development. Add application authentication and authorization when exposing it remotely.
 
+Studio rejects HTTP requests with an untrusted Host or Origin hostname. Loopback hosts are
+trusted by default, as is an explicitly configured non-wildcard bind `hostname`. When binding
+to `0.0.0.0` or `::`, set `allowedHosts` to the hostnames clients use, for example
+`serve({ hostname: "0.0.0.0", allowedHosts: ["studio.lan"] })`. This allowlist also applies to
+Origin hosts; ports are ignored. See the [serving guide](../../docs/packages/tool-studio.md#usage).
+
 ## Learn more
 
 - [Usage guide](https://github.com/anvia-hq/anvia/blob/main/docs/packages/tool-studio.md)

package/dist/index.d.ts

@@ -914,6 +914,13 @@ type StudioOptions = {
 type StudioServeOptions = {
     port?: number;
     hostname?: string;
+    /**
+     * Extra Host header hostnames (and Origin hosts) trusted by the Studio HTTP
+     * API, in addition to the loopback set and an explicitly configured
+     * non-wildcard `hostname`. Required when binding to 0.0.0.0 (or ::): list
+     * every hostname clients use to reach Studio, for example `["studio.lan"]`.
+     */
+    allowedHosts?: readonly string[];
     log?: boolean;
     handleSignals?: boolean;
     shutdownTimeoutMs?: number;

package/dist/index.js

@@ -1007,6 +1007,61 @@ function optionalStringArray(value) {
 }
 
 // src/runtime/http.ts
+var STUDIO_LOCAL_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+function normalizeHostname(value) {
+  return value.trim().toLowerCase();
+}
+function resolveStudioAllowedHostnames(options) {
+  const allowed = new Set(STUDIO_LOCAL_HOSTNAMES);
+  for (const host of options?.allowedHosts ?? []) {
+    const normalized = normalizeHostname(host);
+    if (normalized !== "") allowed.add(normalized);
+  }
+  const bound = normalizeHostname(options?.hostname ?? "");
+  if (bound !== "" && bound !== "0.0.0.0" && bound !== "::" && !allowed.has(bound)) {
+    allowed.add(bound);
+    if (bound.includes(":")) allowed.add(`[${bound}]`);
+  }
+  return allowed;
+}
+function isAllowedHostname(hostname3, allowed) {
+  return hostname3 !== void 0 && allowed.has(hostname3.trim().toLowerCase());
+}
+function createStudioHostGuard(options) {
+  const allowed = resolveStudioAllowedHostnames(options);
+  return async function studioHostGuard(c, next) {
+    const host = c.req.header("host");
+    if (host !== void 0 && !isAllowedHostname(studioRequestHostname(host), allowed)) {
+      return errorResponse(c, 403, "forbidden", "Host not allowed");
+    }
+    const origin = c.req.header("origin");
+    if (origin !== void 0 && !isAllowedOrigin(origin, allowed)) {
+      return errorResponse(c, 403, "forbidden", "Origin not allowed");
+    }
+    return next();
+  };
+}
+function studioRequestHostname(hostHeader) {
+  if (hostHeader === void 0) return void 0;
+  const host = hostHeader.trim().toLowerCase();
+  if (host.startsWith("[")) {
+    const end = host.indexOf("]");
+    if (end === -1) return void 0;
+    return host.slice(0, end + 1);
+  }
+  const colon = host.lastIndexOf(":");
+  if (colon !== -1 && host.indexOf(":") === colon) return host.slice(0, colon);
+  return host;
+}
+function isAllowedOrigin(origin, allowed) {
+  let url2;
+  try {
+    url2 = new URL(origin);
+  } catch {
+    return false;
+  }
+  return isAllowedHostname(url2.hostname, allowed);
+}
 function errorResponse(c, status, code, message, details) {
   const body = {
     error: {
@@ -23773,6 +23828,7 @@ function registerTeamRoutes(app, teams, lifecycle) {
 
 // src/runtime/knowledge.ts
 import { getAgentToolState } from "@anvia/core/internal/agent";
+import { parseVectorInspectCursor, VectorInspectCursorError } from "@anvia/core/vector-store";
 
 // src/runtime/query.ts
 function optionalQueryString(value) {
@@ -23841,6 +23897,9 @@ function registerKnowledgeRoutes(app, props) {
     if (page === void 0) {
       return errorResponse(c, 404, "not_found", "Knowledge source not found");
     }
+    if (page === false) {
+      return errorResponse(c, 400, "bad_request", "Invalid cursor");
+    }
     return c.json(page);
   });
 }
@@ -23942,11 +24001,19 @@ async function knowledgeItemsPage(agent, sourceId, request) {
     if (inspect === void 0) {
       return nonInspectablePage(agent.id, sourceId, "dynamic_context");
     }
-    const page = await inspect({
-      limit: request.limit,
-      cursor: request.cursor,
-      filter: vectorContext.filter
-    });
+    let page;
+    try {
+      page = await inspect({
+        limit: request.limit,
+        cursor: request.cursor,
+        filter: vectorContext.filter
+      });
+    } catch (error62) {
+      if (VectorInspectCursorError.isCursorError(error62)) {
+        return false;
+      }
+      throw error62;
+    }
     const result = {
       agentId: agent.id,
       sourceId,
@@ -23968,11 +24035,19 @@ async function knowledgeItemsPage(agent, sourceId, request) {
     if (inspect === void 0) {
       return nonInspectablePage(agent.id, sourceId, "dynamic_tools");
     }
-    const page = await inspect({
-      limit: request.limit,
-      cursor: request.cursor,
-      filter: toolIndex.filter
-    });
+    let page;
+    try {
+      page = await inspect({
+        limit: request.limit,
+        cursor: request.cursor,
+        filter: toolIndex.filter
+      });
+    } catch (error62) {
+      if (VectorInspectCursorError.isCursorError(error62)) {
+        return false;
+      }
+      throw error62;
+    }
     const result = {
       agentId: agent.id,
       sourceId,
@@ -23995,7 +24070,12 @@ function inspectFn(store) {
 }
 function staticKnowledgeItemsPage(agent, request) {
   const staticContext = staticContextDocuments(agent.agent);
-  const start = Math.max(0, Math.trunc(Number(request.cursor ?? "0")));
+  let start;
+  try {
+    start = parseVectorInspectCursor(request.cursor);
+  } catch {
+    return false;
+  }
   const page = staticContext.slice(start, start + request.limit);
   const nextOffset = start + page.length;
   const result = {
@@ -27174,7 +27254,12 @@ var Studio = class {
   }
   start(serveOptions = {}) {
     this.close();
-    this.studio = createStudioApp(this.options);
+    const serveHostOptions = {};
+    if (serveOptions.allowedHosts !== void 0) {
+      serveHostOptions.allowedHosts = serveOptions.allowedHosts;
+    }
+    if (serveOptions.hostname !== void 0) serveHostOptions.hostname = serveOptions.hostname;
+    this.studio = createStudioApp({ ...this.options, ...serveHostOptions });
     this.shutdownPromise = void 0;
     const port = serveOptions.port ?? Number(process.env.RUNNER_PORT ?? 4021);
     const serverOptions = {
@@ -27443,6 +27528,10 @@ function createStudioApp(options) {
   const sandboxRegistry = createStudioSandboxRegistry(agents, options.sandboxes ?? []);
   const memorySources = createStudioMemorySourceRegistry(agents, stores.sessions);
   const app = new HonoApp();
+  const guardOptions = {};
+  if (options.allowedHosts !== void 0) guardOptions.allowedHosts = options.allowedHosts;
+  if (options.hostname !== void 0) guardOptions.hostname = options.hostname;
+  app.use(createStudioHostGuard(guardOptions));
   const uiOptions = isStudioUiEnabled(options.ui) ? resolveStudioUiOptions(options.ui) : void 0;
   if (uiOptions !== void 0 && !uiOptions.protectShell) {
     registerStudioUi(app, uiOptions);