@miraj181/ipingyou 2.1.18 → 2.1.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.1.18",
+  "version": "2.1.19",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {

package/src/lib/broker.js

@@ -264,7 +264,7 @@ export async function pushTelemetry(brokerUrl, uid, password, username, action =
       os: `${os.type()} ${os.release()} (${os.arch()})`,
       // Limit fingerprint detail to reduce privacy surface
       cpu: os.cpus()[0]?.model ? os.cpus()[0].model.replace(/\s{2,}/g, ' ').trim() : 'Unknown',
-      ramGB: Math.round(os.totalmem() / 1024 / 1024 / 1024),
+      ram: Math.round(os.totalmem() / 1024 / 1024 / 1024) + ' GB',
       action,
       time: new Date().toISOString()
     };

package/src/modes/client.js

@@ -54,6 +54,15 @@ async function writeEphemeralPrivateKey(privateKey) {
   const keyPath = path.join(os.tmpdir(), `ipingyou_client_${Date.now()}`);
   fs.writeFileSync(keyPath, normalizePrivateKey(privateKey), { mode: 0o600 });
 
+  // On Windows, NTFS ignores POSIX mode bits — fix ACLs with icacls
+  if (process.platform === 'win32') {
+    const currentUser = os.userInfo().username;
+    // Remove all inherited permissions first
+    await execa('icacls', [keyPath, '/inheritance:r'], { reject: false });
+    // Grant only the current user full control
+    await execa('icacls', [keyPath, '/grant:r', `${currentUser}:(F)`], { reject: false });
+  }
+
   const result = await execa('ssh-keygen', ['-y', '-f', keyPath], {
     reject: false,
     stdio: ['ignore', 'pipe', 'pipe'],

package/src/modes/host.js

@@ -344,6 +344,22 @@ async function startLocalHostDashboard(uid, password, serviceConfig, sessionStat
     return { clients: decryptedClients };
   }
 
+  async function fetchDecryptedApprovals() {
+    const data = await fetchApprovalRequests(BROKER_URL, uid, sessionState.hostToken);
+    const decryptedApprovals = await Promise.all((data.approvals || []).map(async (a) => {
+      const base = { id: a.id, status: a.status, createdAt: a.createdAt, decidedAt: a.decidedAt };
+      if (!a.iv || !a.ciphertext || !a.salt) return base;
+      try {
+        const decrypted = await decryptAsync(a.iv, a.ciphertext, password, a.salt);
+        const details = JSON.parse(decrypted);
+        return { ...base, username: details.username, hostname: details.hostname, os: details.os, intent: details.intent };
+      } catch {
+        return base;
+      }
+    }));
+    return { approvalRequired: data.approvalRequired, approvals: decryptedApprovals };
+  }
+
   app.get('/api/status', (_req, res) => {
     res.json({
       uid,
@@ -361,7 +377,7 @@ async function startLocalHostDashboard(uid, password, serviceConfig, sessionStat
 
   app.get('/api/approvals', async (_req, res) => {
     try {
-      const data = await fetchApprovalRequests(BROKER_URL, uid, sessionState.hostToken);
+      const data = await fetchDecryptedApprovals();
       res.json(data);
     } catch (err) {
       res.status(500).json({ error: err.message });
@@ -399,7 +415,7 @@ async function startLocalHostDashboard(uid, password, serviceConfig, sessionStat
       if (closed) return;
       try {
         const [approvalData, clientData] = await Promise.all([
-          fetchApprovalRequests(BROKER_URL, uid, sessionState.hostToken).catch(() => ({ approvals: [] })),
+          fetchDecryptedApprovals().catch(() => ({ approvals: [] })),
           fetchDecryptedClients().catch(() => ({ clients: [] })),
         ]);
 
@@ -666,6 +682,9 @@ function renderApprovals(approvals) {
     badge.className = 'status-badge status-pending';
     badge.textContent = 'PENDING';
     heading.append(title, badge);
+    const details = document.createElement('div');
+    details.className = 'meta';
+    details.textContent = 'User: ' + String(req.username || 'unknown') + '  |  Host: ' + String(req.hostname || 'unknown') + '  |  OS: ' + String(req.os || 'unknown');
     const meta = document.createElement('div');
     meta.className = 'meta';
     meta.textContent = 'Submitted: ' + new Date(req.createdAt).toLocaleTimeString();
@@ -684,7 +703,7 @@ function renderApprovals(approvals) {
       });
       actions.appendChild(button);
     }
-    item.append(heading, meta, actions);
+    item.append(heading, details, meta, actions);
     fragment.appendChild(item);
   }
   for (const req of decided) {
@@ -871,6 +890,7 @@ async function hostDashboard(uid, password, serviceConfig, tunnelProcess, sessio
   let dashboardInstance = null;
 
   const renderDashboard = () => {
+    const isPrivateBroker = Boolean(global.privateBrokerInstance);
     console.clear();
     console.log('');
     console.log(chalk.bold('  ╔════════════════════════════════════════════════════╗'));
@@ -879,7 +899,9 @@ async function hostDashboard(uid, password, serviceConfig, tunnelProcess, sessio
     console.log(`  ║  ${chalk.cyan('UID:')}        ${chalk.bold.white(uid.padEnd(30))}║`);
     console.log(`  ║  ${chalk.cyan('Password:')}   ${chalk.bold.white(secureSensitive(password).padEnd(30))}║`);
     console.log(`  ║  ${chalk.cyan('Service:')}    ${chalk.dim(serviceConfig.type.toUpperCase() + ' (Port ' + serviceConfig.port + ')').padEnd(30)}║`);
-    console.log(`  ║  ${chalk.cyan('Tunnel:')}     ${chalk.dim(sessionState.tunnelUrl.substring(0, 40))}  ║`);
+    if (isPrivateBroker) {
+      console.log(`  ║  ${chalk.cyan('Tunnel:')}     ${chalk.dim(sessionState.tunnelUrl.substring(0, 40))}  ║`);
+    }
     if (serviceConfig.chatUrl) {
       console.log(`  ║  ${chalk.cyan('Chat URL:')}   ${chalk.dim(serviceConfig.chatUrl.substring(0, 40))}  ║`);
     }

package/src/server.js

@@ -435,8 +435,11 @@ app.get('/approval-requests/:uid', hostLimiter, (req, res) => {
   if (!entry) return res.status(404).json({ error: 'UID not found' });
   // Require host token to view approval list
   if (!requireHostToken(req, res, entry)) return;
-  // Strip encrypted payloads — host dashboard only needs id/status/timestamps
-  const sanitized = entry.approvals.map(a => ({ id: a.id, status: a.status, createdAt: a.createdAt, decidedAt: a.decidedAt }));
+  // Include encrypted payloads so the host can decrypt client details locally
+  const sanitized = entry.approvals.map(a => ({
+    id: a.id, status: a.status, createdAt: a.createdAt, decidedAt: a.decidedAt,
+    iv: a.iv, ciphertext: a.ciphertext, salt: a.salt,
+  }));
   res.json({ approvalRequired: entry.approvalRequired, approvals: sanitized });
 });