@hediet/linkrpc-cli 0.0.3-next.20261025.3 → 0.0.3-next.20261025.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +12 -1
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -848,7 +848,7 @@ linkrpc hub http-export # listens on 127.0.0.1:80 and [::1]:80
|
|
|
848
848
|
| URL | Shows |
|
|
849
849
|
| --- | --- |
|
|
850
850
|
| `http://localhost/` | Services that can forward TCP (`?format=json` for JSON). |
|
|
851
|
-
| `http://hediet--tablet--compute.localhost/` | Listening ports of `hediet/tablet/compute` (needs `linkrpc.computeNode.ports`). |
|
|
851
|
+
| `http://hediet--tablet--compute.localhost/` | Listening ports of `hediet/tablet/compute` with each owning process's name, command line, and working directory (needs `linkrpc.computeNode.ports`). |
|
|
852
852
|
| `http://3000.hediet--tablet--compute.localhost/` | Port 3000 of that compute node, including WebSocket upgrades. |
|
|
853
853
|
|
|
854
854
|
A service is always exactly one label directly below `localhost`, its
|
|
@@ -880,6 +880,17 @@ bodies are not rewritten, so they fail rather than reach this machine. Bind
|
|
|
880
880
|
loopback only: anyone who can reach the listener can use the export process's
|
|
881
881
|
Hub identity to reach every forwarded port.
|
|
882
882
|
|
|
883
|
+
The gateway's own pages (`localhost` and `<service>.localhost`, HTML and JSON)
|
|
884
|
+
show command lines, which may contain secrets. They answer only top-level
|
|
885
|
+
navigations, same-origin requests, and clients that send no `Sec-Fetch-*` or
|
|
886
|
+
cross-origin `Origin` header (e.g. `curl`); other requests, including fetches,
|
|
887
|
+
scripts, and iframes from forwarded apps of the same machine, get `403`. They
|
|
888
|
+
send no CORS headers, forbid framing (`frame-ancestors 'none'`,
|
|
889
|
+
`X-Frame-Options: DENY`), and set `nosniff`, `no-store`, `no-referrer`, and
|
|
890
|
+
same-origin resource and opener policies. Command lines and working directories
|
|
891
|
+
are only shown for processes the compute node may inspect, e.g. not for
|
|
892
|
+
elevated or other users' processes on Windows.
|
|
893
|
+
|
|
883
894
|
Each service and port shares one `tcpForward.multiplex` session (up to 10
|
|
884
895
|
logical connections, 8 of them for pooled HTTP keep-alive), closed after five
|
|
885
896
|
idle minutes.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@hediet/linkrpc-cli",
|
|
3
|
-
"version": "0.0.3-next.20261025.
|
|
3
|
+
"version": "0.0.3-next.20261025.4",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|
|
@@ -23,9 +23,9 @@
|
|
|
23
23
|
"ink-text-input": "^6.0.0",
|
|
24
24
|
"react": "^18.3.1",
|
|
25
25
|
"zod": "^4.4.3",
|
|
26
|
-
"@hediet/linkrpc
|
|
27
|
-
"@hediet/linkrpc-
|
|
28
|
-
"@hediet/linkrpc": "0.0.3-next.20261025.
|
|
26
|
+
"@hediet/linkrpc": "0.0.3-next.20261025.4",
|
|
27
|
+
"@hediet/linkrpc-hub": "0.0.3-next.20261025.4",
|
|
28
|
+
"@hediet/linkrpc-infra": "0.0.3-next.20261025.4"
|
|
29
29
|
},
|
|
30
30
|
"devDependencies": {
|
|
31
31
|
"@types/node": "^20.0.0",
|
|
@@ -36,8 +36,8 @@
|
|
|
36
36
|
"tsx": "4.22.4",
|
|
37
37
|
"typescript": "^6.0.3",
|
|
38
38
|
"vitest": "^3.0.0",
|
|
39
|
-
"@hediet/linkrpc-
|
|
40
|
-
"@hediet/linkrpc-
|
|
39
|
+
"@hediet/linkrpc-hub-daemon": "0.0.1",
|
|
40
|
+
"@hediet/linkrpc-client-internal": "0.0.1"
|
|
41
41
|
},
|
|
42
42
|
"scripts": {
|
|
43
43
|
"cli": "tsx src/linkrpc.ts",
|
|
@@ -46,7 +46,7 @@
|
|
|
46
46
|
"test": "vitest --run",
|
|
47
47
|
"test:watch": "vitest"
|
|
48
48
|
},
|
|
49
|
-
"gitHead": "
|
|
49
|
+
"gitHead": "223884093d91e04e9ae036932ba1d4e4d640705a",
|
|
50
50
|
"gitDirty": false,
|
|
51
51
|
"publishConfig": {
|
|
52
52
|
"tag": "next"
|