@kubitnodes/stellaris 0.3.25 → 0.3.26

package/dist/cli/index.js

@@ -2084,7 +2084,7 @@ var RunnerConfigSchema = z13.object({
 });
 
 // packages/shared/dist/version.js
-var STELLARIS_VERSION = "0.3.25";
+var STELLARIS_VERSION = "0.3.26";
 
 // packages/shared/dist/mentions.js
 import { parse, postprocess, preprocess } from "micromark";

package/dist/server/index.js

@@ -2257,7 +2257,7 @@ var RunnerConfigSchema = z13.object({
 });
 
 // packages/shared/dist/version.js
-var STELLARIS_VERSION = "0.3.25";
+var STELLARIS_VERSION = "0.3.26";
 
 // packages/shared/dist/mentions.js
 import { parse, postprocess, preprocess } from "micromark";
@@ -12418,9 +12418,21 @@ function githubAvatar(url) {
     return void 0;
   }
 }
+var BOARD_ORIGIN = "https://board.invalid";
 function safeNext(next) {
-  return next !== void 0 && /^\/(?![/\\])/.test(next) ? next : "/";
+  if (next === void 0 || !next.startsWith("/")) {
+    return "/";
+  }
+  let url;
+  try {
+    url = new URL(next, BOARD_ORIGIN);
+  } catch {
+    return "/";
+  }
+  const path11 = `${url.pathname}${url.search}`;
+  return url.origin === BOARD_ORIGIN && /^\/(?![/\\])/.test(path11) ? path11 : "/";
 }
+var APP_LANDING = "stellaris://signin";
 function land(c, next, fragment) {
   return c.redirect(`${next}#${fragment}`, 302);
 }
@@ -12441,7 +12453,8 @@ function githubAuthRoutes(options) {
       }
     }
     const state = randomBytes2(24).toString("base64url");
-    states.set(state, { next: safeNext(c.req.query("next")), expiresAt: now() + STATE_TTL_MS });
+    const next = c.req.query("landing") === "app" ? APP_LANDING : safeNext(c.req.query("next"));
+    states.set(state, { next, expiresAt: now() + STATE_TTL_MS });
     const authorize = new URL("https://github.com/login/oauth/authorize");
     authorize.searchParams.set("client_id", github.clientId);
     authorize.searchParams.set("state", state);

package/package.json

@@ -8,7 +8,7 @@
     "codex",
     "multi-agent"
   ],
-  "version": "0.3.25",
+  "version": "0.3.26",
   "license": "MIT",
   "homepage": "https://github.com/kr4t0n/stellaris",
   "repository": {