@askalf/dario 1.0.1 → 1.0.3

package/README.md

@@ -146,7 +146,7 @@ curl http://localhost:3456/v1/messages \
   -H "Content-Type: application/json" \
   -H "anthropic-version: 2023-06-01" \
   -d '{
-    "model": "claude-sonnet-4-6",
+    "model": "claude-opus-4-6",
     "max_tokens": 1024,
     "stream": true,
     "messages": [{"role": "user", "content": "Write a haiku about APIs"}]

package/dist/cli.js

@@ -152,7 +152,7 @@ async function help() {
     Example with curl:
       curl http://localhost:3456/v1/messages \\
         -H "Content-Type: application/json" \\
-        -d '{"model":"claude-sonnet-4-6","max_tokens":1024,"messages":[{"role":"user","content":"Hello"}]}'
+        -d '{"model":"claude-opus-4-6","max_tokens":1024,"messages":[{"role":"user","content":"Hello"}]}'
 
   Your subscription handles the billing. No API key needed.
   Tokens auto-refresh in the background — set it and forget it.

package/dist/proxy.js

@@ -62,9 +62,9 @@ export async function startProxy(opts = {}) {
             res.end(JSON.stringify(s));
             return;
         }
-        // Only allow proxying to /v1/* paths — block path traversal
+        // Only allow proxying to /v1/* paths — block path traversal and SSRF
         const urlPath = req.url?.split('?')[0] ?? '';
-        if (!urlPath.startsWith(ALLOWED_PATH_PREFIX)) {
+        if (!urlPath.startsWith(ALLOWED_PATH_PREFIX) || urlPath.includes('..') || urlPath.includes('//')) {
             res.writeHead(403, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({ error: 'Forbidden', message: `Only ${ALLOWED_PATH_PREFIX}* paths are proxied` }));
             return;
@@ -96,8 +96,18 @@ export async function startProxy(opts = {}) {
             if (verbose) {
                 console.log(`[dario] #${requestCount} ${req.method} ${req.url}`);
             }
-            // Forward to Anthropic with OAuth token + required beta flag
-            const targetUrl = `${ANTHROPIC_API}${req.url}`;
+            // Forward to Anthropic — construct URL safely to prevent SSRF
+            const targetUrl = new URL(urlPath, ANTHROPIC_API);
+            // Preserve query string from original request
+            const queryString = req.url?.includes('?') ? req.url.split('?')[1] : '';
+            if (queryString)
+                targetUrl.search = queryString;
+            // Verify the constructed URL still points to Anthropic (defense in depth)
+            if (targetUrl.origin !== ANTHROPIC_API) {
+                res.writeHead(403, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Forbidden' }));
+                return;
+            }
             // Merge any client-provided beta flags with the required oauth flag
             const clientBeta = req.headers['anthropic-beta'];
             const betaFlags = new Set(['oauth-2025-04-20']);
@@ -115,7 +125,7 @@ export async function startProxy(opts = {}) {
                 'anthropic-beta': [...betaFlags].join(','),
                 'x-app': 'cli',
             };
-            const upstream = await fetch(targetUrl, {
+            const upstream = await fetch(targetUrl.toString(), {
                 method: req.method ?? 'POST',
                 headers,
                 body: body.length > 0 ? body : undefined,
@@ -173,9 +183,10 @@ export async function startProxy(opts = {}) {
             }
         }
         catch (err) {
+            // Log full error server-side, return generic message to client
             console.error('[dario] Proxy error:', sanitizeError(err));
             res.writeHead(502, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'Proxy error', message: sanitizeError(err) }));
+            res.end(JSON.stringify({ error: 'Proxy error', message: 'Failed to reach upstream API' }));
         }
     });
     server.listen(port, LOCALHOST, () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Use your Claude subscription as an API. Two commands, no API key. OAuth bridge for Claude Max/Pro.",
   "type": "module",
   "bin": {