@encorearia/install 1.1.1 → 1.2.0

package/bin/install.mjs

@@ -6,9 +6,11 @@ import { atomicInstall } from '../lib/atomic-install.mjs';
 import { loadCredentials } from '../lib/credentials.mjs';
 import { detectTargets, targetRoot } from '../lib/targets.mjs';
 import { loadTrustedKeys, verifyPackage } from '../lib/verify.mjs';
+import { bindApiOrigin } from '../lib/credentials.mjs';
 
 const args = process.argv.slice(2);
 const baseURL = String(valueAfter('--api') || process.env.ENCOREARIA_API_BASE || 'https://encorearia.com').replace(/\/$/, '');
+bindApiOrigin(baseURL);
 const targetArg = valueAfter('--target');
 const installerVersion = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
 

package/lib/credentials.mjs

@@ -2,10 +2,30 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 
+import { createHash } from 'node:crypto';
+
 const service = 'encorearia-agent';
-const account = 'default';
+export const OFFICIAL_API = 'https://encorearia.com';
+let originSuffix = '';
+
+// 凭据按 API 来源隔离：官方地址用默认文件；其它地址仅限本机调试或显式允许，
+// 且各用独立文件——防止 `--api` 指向任意第三方后把官方登录凭据发过去（钓鱼偷 token）。
+export function bindApiOrigin(baseURL) {
+  let canonical;
+  try { canonical = new URL(String(baseURL || '')).origin; } catch { canonical = String(baseURL || '').replace(/\/+$/, ''); }
+  if (canonical === OFFICIAL_API) { originSuffix = ''; return; }
+  let host = '';
+  try { host = new URL(canonical).hostname; } catch { host = ''; }
+  const loopback = host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]';
+  if (!loopback && process.env.ENCOREARIA_ALLOW_CUSTOM_API !== '1') {
+    throw new Error('--api 只允许官方地址或本机调试地址；如确需自定义请设 ENCOREARIA_ALLOW_CUSTOM_API=1（凭据将与官方隔离）');
+  }
+  originSuffix = '-' + createHash('sha256').update(canonical).digest('hex').slice(0, 12);
+}
+
+const account = () => 'default' + originSuffix;
 export const credentialsDirectory = () => process.env.ENCOREARIA_CONFIG_DIR || path.join(os.homedir(), '.encorearia');
-const file = () => path.join(credentialsDirectory(), 'credentials.json');
+const file = () => path.join(credentialsDirectory(), 'credentials' + originSuffix + '.json');
 
 async function keytar() {
   try { return (await import('keytar')).default; } catch { return null; }
@@ -14,7 +34,7 @@ async function keytar() {
 export async function loadCredentials() {
   const keychain = await keytar();
   if (keychain) {
-    const raw = await keychain.getPassword(service, account);
+    const raw = await keychain.getPassword(service, account());
     if (raw) return JSON.parse(raw);
   }
   try { return JSON.parse(await fs.readFile(file(), 'utf8')); } catch { return null; }
@@ -23,7 +43,7 @@ export async function loadCredentials() {
 export async function saveCredentials(value) {
   const keychain = await keytar();
   if (keychain) {
-    await keychain.setPassword(service, account, JSON.stringify(value));
+    await keychain.setPassword(service, account(), JSON.stringify(value));
     return;
   }
   const dir = path.dirname(file());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@encorearia/install",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "description": "Verify and install signed Encore Aria call-shell skills for Codex and Claude Code.",
   "type": "module",
   "bin": {