@miraj181/ipingyou 2.1.3 → 2.1.4

package/README.md

@@ -25,7 +25,7 @@ No firewalls to configure. No port forwarding. No plaintext leakage.
 * 🧭 **Approval Gate**: Require the Host to explicitly approve clients before they receive tunnel/key material.
 * 📦 **One-Time File Share**: Serve a single file/folder over SCP and revoke after use.
 * 🌐 **HTTP & TCP Exposure**: Share a local web app or any TCP service (DB/RDP/VNC) beyond SSH.
-* 📂 **Shared Drop Folder**: Auto-prepared dropbox folder for safe file transfers (macOS friendly).
+* 📂 **Shared Drop Folder**: Auto-prepared dropbox folder for safe file transfers (macOS friendly), removed on exit.
 * 🧾 **Live Session Logs**: Host/client/broker write ephemeral per-session logs with actions and request/response status, removed on exit.
 
 ---
@@ -60,22 +60,43 @@ securelink
 
 ## 🔒 Zero-Knowledge Architecture
 
-The public broker server exists solely to rendezvous connections. It is fundamentally a **"Dumb Pipe"**.
+The public broker server exists solely to rendezvous connections and approvals. It is fundamentally a **"Dumb Pipe"**.
+
+### Session Bootstrap & Data Path
 
 ```mermaid
 graph LR
-    H[Host CLI] -->|AES-256-CBC Encrypted Payload| B((Broker Relay))
-    B -->|Encrypted Payload| C[Client CLI]
+    H[Host CLI] -->|AES-256-CBC Encrypted Session Payload| B((Broker Relay))
+    H -->|Host Auth Token for approvals and telemetry| B
+    B -->|Encrypted Session Payload| C[Client CLI]
     C -->|Locally Decrypts Password| C
-    C -->|Direct Cloudflare SSH| H
+    C -->|Direct Cloudflare SSH/TCP| H
     C -->|E2E AES-GCM WebSockets| H
 ```
 
-1. **Host** starts up, spawns `cloudflared` tunnels for SSH and Chat, and generates a random, offline **AES-256 Session Password**.
-2. **Host** encrypts the tunnel data with the password and sends the *ciphertext* to the Broker alongside a short UID.
+1. **Host** starts up, spawns `cloudflared` tunnels for SSH/HTTP/TCP and Chat, then generates a random **AES-256 Session Password** plus a **host-only auth token**.
+2. **Host** encrypts the session payload with the password and registers the ciphertext (plus the host token) with the Broker under a short UID.
 3. **Client** runs `ipingyou connect`, enters the UID and Password.
-4. **Client** fetches the ciphertext, decrypts it locally, and connects directly via SSH and WebSockets.
-5. On `Ctrl+C`, `tree-kill` initiates a graceful shutdown, revokes the UID from the broker, and scrubs `/tmp` memory.
+4. **Client** fetches the ciphertext, decrypts it locally, and connects directly via SSH or WebSockets.
+5. On `Ctrl+C`, `tree-kill` initiates a graceful shutdown, revokes the UID from the broker, and removes session artifacts.
+
+### Approval Gate Flow (Optional)
+
+```mermaid
+sequenceDiagram
+    participant C as Client CLI
+    participant B as Broker Relay
+    participant H as Host CLI
+    C->>B: approval-request encrypted metadata
+    H->>B: fetch approvals with x-host-token
+    H->>B: approve/deny with x-host-token
+    C->>B: poll approval status
+    B-->>C: approved/denied
+```
+
+1. **Client** submits encrypted approval metadata (username, host, intent) to the Broker.
+2. **Host** lists and decides approvals using its host-only auth token; the Broker never shares this token with clients.
+3. **Client** polls for approval status and proceeds only when approved.
 
 ---
 
@@ -111,6 +132,8 @@ These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Netwo
 | `ipingyou service install` | 👻 Installs Host mode as an always-on background daemon. |
 | `ipingyou service stop` | Stops and removes the background daemon. |
 | `ipingyou service status` | Shows background daemon status. |
+| `ipingyou allowlist` | Manage the AI command allowlist (list/add/remove). |
+| `ipingyou history` | View session event logs from `~/.ipingyou/logs`. |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.1.3",
+  "version": "2.1.4",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {

package/src/cli.js

@@ -122,6 +122,8 @@ function showRichHelp() {
   console.log(`    • Cloudflare Tunnels punch through NAT/Firewalls securely.`);
   console.log(`    • ${chalk.green('End-to-End Encryption')}: Tunnel URLs are AES-256 encrypted locally.`);
   console.log(`    • The Broker never sees your plaintext URL, only ciphertext.`);
+  console.log(`    • ${chalk.green('Host Auth Token')}: Host-only token gates approvals & telemetry access.`);
+  console.log(`    • ${chalk.green('Approval Gate')}: Clients submit encrypted metadata; Host approves/denies.`);
   console.log('');
 
   console.log(chalk.bold.white('  🔥 Advanced Features:'));
@@ -130,6 +132,8 @@ function showRichHelp() {
   console.log(`    • ${chalk.green('E2E Chat Room')}      : Real-time Web Crypto AES-GCM secure chat UI for Host & Clients.`);
   console.log(`    • ${chalk.green('Daemonization')}      : Run Host mode as a background service via PM2.`);
   console.log(`    • ${chalk.green('Panic Kill-Switch')}  : Instantly purge all processes, configurations, and traces.`);
+  console.log(`    • ${chalk.green('Shared Drop Folder')} : Session dropbox auto-removed on exit.`);
+  console.log(`    • ${chalk.green('Live Session Logs')}  : Host/client/broker events written per session.`);
   console.log('');
 
   console.log(chalk.bold.white('  💡 Examples:'));

package/src/modes/host.js

@@ -193,6 +193,23 @@ async function prepareSharedDropFolder(uid) {
   return dropPath;
 }
 
+async function cleanupSharedDropFolder(dropPath, uid) {
+  if (!dropPath) return;
+  const expectedPath = path.join(os.homedir(), `ipingyou-dropbox-${uid}`);
+  if (path.resolve(dropPath) !== path.resolve(expectedPath)) {
+    console.log(chalk.yellow('     Skipping drop folder cleanup (unexpected path).'));
+    return;
+  }
+  try {
+    const stat = await fs.promises.lstat(dropPath).catch(() => null);
+    if (!stat || !stat.isDirectory() || stat.isSymbolicLink()) return;
+    console.log(chalk.dim('     Removing shared drop folder...'));
+    await fs.promises.rm(dropPath, { recursive: true, force: true });
+  } catch (err) {
+    console.log(chalk.yellow(`     Could not remove drop folder: ${err.message}`));
+  }
+}
+
 function showMacPrivacyPreflight(sharedDropPath) {
   if (process.platform !== 'darwin') return;
 
@@ -953,6 +970,7 @@ export async function startHostMode() {
       serviceConfig.sharedDropPath = await prepareSharedDropFolder(uid);
       console.log(chalk.green(`  ✓ Shared drop folder ready: ${serviceConfig.sharedDropPath}`));
       showMacPrivacyPreflight(serviceConfig.sharedDropPath);
+      addCleanupHook(() => cleanupSharedDropFolder(serviceConfig.sharedDropPath, uid));
     } catch (err) {
       console.log(chalk.yellow(`  ⚠️  Could not prepare shared drop folder: ${err.message}`));
     }