@genspark/cli 1.0.13 → 1.0.16

package/dist/commands/design.d.ts

@@ -0,0 +1,37 @@
+/**
+ * `gsk design [path]` — local cc-bridge daemon for Genspark Designer V2 / V3.
+ *
+ * Hosts two HTTP servers on 127.0.0.1, mirroring the protocol Tiffany's
+ * private Anthropic CC binary speaks to claude.ai/design. Once the URL is
+ * opened in the user's browser, the FE side of cc-bridge (see
+ * `frontend-nuxt/utils/cc_bridge.ts`) redeems the nonce, registers the 6
+ * cc_* tool handlers in the client-tool dispatcher, and dispatches LLM
+ * tool calls over this bridge.
+ *
+ * Servers:
+ *   - Exchange: port 47820 (well-known), POST /exchange {nonce} →
+ *     {port, token, prompt, cwd, ls_tree}. Single-use — second hit on
+ *     the same nonce returns 410 Gone.
+ *   - Data: random port, bearer-authenticated routes
+ *     /ls /read /grep /exec /back_to_cc /context. Auth = Authorization:
+ *     Bearer + X-Bridge-Token (both headers must match the issued token,
+ *     to force a fetch/CORS preflight and block <form>/<img> CSRF).
+ *
+ * Security:
+ *   - Bind 127.0.0.1 only — never 0.0.0.0.
+ *   - Origin allowlist enforced via CORS preflight (`https://www.genspark.ai`
+ *     + `http://localhost:3000-3099` for dev).
+ *   - Host header strict-check: must be `127.0.0.1:<port>` or
+ *     `localhost:<port>` — blocks DNS rebinding.
+ *   - Path inputs are normalized + rejected on `..`, absolute paths,
+ *     NUL bytes. Symlink escape blocked via realpath check.
+ *   - cc_exec allowlist defaults to read-only inspection commands;
+ *     `--allow-build-tools` opens up build CLIs (git/npm/python/etc).
+ *     Per-arg blocklist refuses `-c`, `--exec`, shell metacharacters
+ *     and newlines regardless of allowlist.
+ *   - 30s exec timeout (overridable per call up to 300s), 900 KB
+ *     stdout/stderr cap, 5 req/sec rate limit on /exec.
+ */
+import { Command } from 'commander';
+export declare function registerDesignCommand(program: Command): void;
+//# sourceMappingURL=design.d.ts.map

package/dist/commands/design.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"design.d.ts","sourceRoot":"","sources":["../../src/commands/design.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAujCnC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmC5D"}