@miraj181/ipingyou 2.1.9 → 2.1.18

package/README.md

@@ -20,7 +20,7 @@ No firewalls to configure. No port forwarding. No plaintext leakage.
 * 📺 **Terminal Mirroring**: Wrap client SSH sessions in a multiplexed `tmux` terminal. The Host can spectate connected clients in real-time right from the dashboard to audit or assist.
 * 🔄 **Reverse Port Forwarding (`ssh -R`)**: Clients can expose their *local* `localhost` development ports back to the Host through the secure tunnel.
 * 📡 **Hardware Telemetry Verification**: Clients silently generate hardware footprint reports (OS, RAM, CPU, IP), encrypt them locally with the session password, and send them to the Host for authorization.
-* 🚨 **Panic Kill-Switch**: Type `ipingyou panic` to instantly vaporize all associated keys, wipe all alias configs, and send a `SIGKILL` to every active tunnel and SSH shell.
+* 🚨 **Scoped Emergency Stop**: Type `ipingyou panic` and confirm locally to stop only processes and temporary credentials owned by the current iPingYou session.
 * 👻 **Daemonization**: Run `ipingyou service install` to quietly install and run the Host listener in the background (survives system reboots using PM2).
 * 🧭 **Approval Gate**: Require the Host to explicitly approve clients before they receive tunnel/key material.
 * 📦 **One-Time File Share**: Serve a single file/folder over SCP and revoke after use.
@@ -48,12 +48,17 @@ npx @miraj181/ipingyou connect
 
 ### Global Install
 ```bash
-npm install -g @miraj181/ipingyou
+# Install Socket Firewall once, then scan iPingYou before installation
+npm install -g sfw
+sfw npm install -g @miraj181/ipingyou
 
 # Execute globally using aliases:
 ipingyou
 # or
 securelink
+
+# Verify future in-app npm installs are firewall-protected
+ipingyou security-status
 ```
 
 ---
@@ -102,7 +107,7 @@ sequenceDiagram
 
 ## 🛡️ Security Scanner Disclaimer
 
-Because **iPingYou** is a powerful remote administration tool with features like background daemonization (via PM2), secure shell execution (`execa`), and anti-forensics capabilities (`panic` mode), automated security scanners (such as Socket.dev or enterprise EDRs) may flag this package as a **potential risk** or **malware-like**. 
+Because **iPingYou** is a remote-access tool with background daemonization and SSH process management, automated security scanners may classify it as security-sensitive. Native dependencies are never downloaded or installed automatically, and emergency cleanup is limited to resources registered by the current process.
 
 These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Network access") are **expected behavior** for a peer-to-peer tunneling utility. The source code is entirely open-source, heavily documented, and uses zero-knowledge encryption to ensure your data is safe.
 
@@ -128,7 +133,7 @@ These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Netwo
 | `ipingyou connect -u <UID>` | Connect directly to a specific UID. |
 | `ipingyou ai` | Groq-powered task assistant with guarded local/remote tools. |
 | `ipingyou doctor` | Diagnostics for dependencies, SSH, broker, SCP, AI, and tests. |
-| `ipingyou panic` | 🚨 Self-destruct mode. Wipes configs, memory, and kills all processes. |
+| `ipingyou panic` | 🚨 Confirmed emergency stop for the current iPingYou session only. |
 | `ipingyou service install` | 👻 Installs Host mode as an always-on background daemon. |
 | `ipingyou service stop` | Stops and removes the background daemon. |
 | `ipingyou service status` | Shows background daemon status. |

package/SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.1.9",
+  "version": "2.1.18",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {
@@ -13,12 +13,13 @@
     "src/lib/",
     "src/modes/",
     "README.md",
+    "SECURITY.md",
     "LICENSE"
   ],
   "scripts": {
     "start": "node src/server.js",
     "dev:cli": "node src/cli.js",
-    "test": "node test/test_ai_helpers.js",
+    "test": "node test/test_ai_helpers.js && node test/test_security_static.js && node test/test_e2e_crypto.js",
     "prepublishOnly": "node -e \"require('fs').accessSync('LICENSE')\" && node src/cli.js --help"
   },
   "keywords": [
@@ -44,22 +45,21 @@
     "url": "https://github.com/skmirajulislam/ipingyou/issues"
   },
   "dependencies": {
-    "chalk": "^5.3.0",
-    "commander": "^15.0.0",
-    "execa": "^9.5.2",
-    "inquirer": "^12.11.1",
-    "nanoid": "^5.0.9",
-    "open": "^11.0.0",
-    "ora": "^9.4.0",
-    "shell-quote": "^1.8.4",
-    "tree-kill": "^1.2.2",
-    "ws": "^8.20.1"
+    "chalk": "5.6.2",
+    "commander": "15.0.0",
+    "express": "4.22.2",
+    "express-rate-limit": "7.5.1",
+    "execa": "9.6.1",
+    "helmet": "8.2.0",
+    "inquirer": "12.11.1",
+    "ora": "9.4.1",
+    "ws": "8.21.0"
   },
   "devDependencies": {
     "nodemon": "^3.1.4"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=22.12.0"
   },
   "type": "module"
 }

package/src/cli.js

@@ -23,11 +23,13 @@ import inquirer from 'inquirer';
 import chalk from 'chalk';
 import fs from 'node:fs';
 import path from 'node:path';
+import readline from 'node:readline';
 import { fileURLToPath } from 'node:url';
 
 import { detectOS, checkDependencies } from './lib/platform.js';
 import { cleanupAll, installShutdownHandlers, executePanicMode } from './lib/cleanup.js';
 import { cleanupSessionLog } from './lib/session-log.js';
+import { getSocketFirewallStatus, runProtectedNpmInstall } from './lib/socket-firewall.js';
 import { startHostMode } from './modes/host.js';
 import { startClientMode } from './modes/client.js';
 import { startAIMode } from './modes/ai.js';
@@ -329,10 +331,19 @@ program
 
 program
   .command('panic')
-  .description('🚨 Self-destruct mode: wipe all configs, kill tunnels, and remove traces')
+  .description('🚨 Stop resources owned by the current iPingYou session')
   .action(async () => {
     try {
       showBanner();
+      const { confirmation } = await inquirer.prompt([{
+        type: 'input',
+        name: 'confirmation',
+        message: 'Type STOP CURRENT SESSION to confirm:',
+      }]);
+      if (confirmation !== 'STOP CURRENT SESSION') {
+        console.log(chalk.yellow('  Emergency shutdown cancelled.'));
+        return;
+      }
       await executePanicMode();
     } catch (err) {
       fatal('panic', err);
@@ -351,8 +362,8 @@ program
       const { execa } = await import('execa');
       
       if (action === 'install') {
-        console.log(chalk.dim('  Installing PM2 globally and starting host...'));
-        await execa('npm', ['install', '-g', 'pm2'], { stdio: 'inherit' });
+        console.log(chalk.dim('  Scanning and installing PM2 through Socket Firewall...'));
+        await runProtectedNpmInstall(['-g', 'pm2'], { stdio: 'inherit' });
         await execa('pm2', ['start', 'ipingyou', '--name', 'ipingyou-host', '--', 'host'], { stdio: 'inherit' });
         await execa('pm2', ['save'], { stdio: 'inherit' });
         await execa('pm2', ['startup'], { stdio: 'inherit' });
@@ -372,6 +383,26 @@ program
     }
   });
 
+program
+  .command('security-status')
+  .description('Check Socket Firewall protection for future npm installations')
+  .action(async () => {
+    try {
+      showBanner();
+      const status = await getSocketFirewallStatus();
+      if (!status.available) {
+        console.log(chalk.yellow('  ⚠️  Socket Firewall is not available.'));
+        console.log(chalk.dim('     Install it with: npm install -g sfw'));
+        process.exitCode = 1;
+        return;
+      }
+      console.log(chalk.green(`  ✅ Socket Firewall active${status.version ? ` (${status.version})` : ''}`));
+      console.log(chalk.dim('     In-app npm installations are routed through: sfw npm install'));
+    } catch (err) {
+      fatal('security-status', err);
+    }
+  });
+
 program
   .command('allowlist')
   .description('Manage AI command allowlist — add, remove, or list safe regex patterns')
@@ -474,26 +505,28 @@ program
         return;
       }
 
-      const raw = fs.readFileSync(logFile, 'utf8').trim();
-      if (!raw) {
-        console.log(chalk.dim('  Log file is empty.'));
-        return;
-      }
-
-      let events = raw.split('\n').map(line => {
-        try { return JSON.parse(line); } catch { return null; }
-      }).filter(Boolean);
-
-      // Filter by type if specified
-      if (commandOptions.type) {
-        const filter = commandOptions.type.toLowerCase();
-        events = events.filter(e => (e.type || '').toLowerCase().includes(filter));
+      const parsedCount = Number.parseInt(commandOptions.lines, 10);
+      const count = Number.isFinite(parsedCount) ? Math.max(1, Math.min(parsedCount, 10000)) : 25;
+      const filter = commandOptions.type?.toLowerCase();
+      const events = [];
+      let totalEvents = 0;
+      const lines = readline.createInterface({
+        input: fs.createReadStream(logFile, { encoding: 'utf8' }),
+        crlfDelay: Infinity,
+      });
+      for await (const line of lines) {
+        if (!line.trim()) continue;
+        totalEvents += 1;
+        try {
+          const event = JSON.parse(line);
+          if (filter && !(event.type || '').toLowerCase().includes(filter)) continue;
+          events.push(event);
+          if (events.length > count) events.shift();
+        } catch {
+          // Ignore incomplete or invalid log lines.
+        }
       }
 
-      // Take last N events
-      const count = parseInt(commandOptions.lines) || 25;
-      events = events.slice(-count);
-
       if (events.length === 0) {
         console.log(chalk.dim('  No matching events found.'));
         return;
@@ -526,7 +559,7 @@ program
 
       console.log('');
       console.log(chalk.dim(`  Log file: ${logFile}`));
-      console.log(chalk.dim(`  Total events in file: ${raw.split('\n').length}`));
+      console.log(chalk.dim(`  Total events in file: ${totalEvents}`));
     } catch (err) {
       fatal('history', err);
     }

package/src/lib/ai/safety.js

@@ -1,3 +1,5 @@
+import { getAllowlistRegexes } from '../allowlist.js';
+
 const SECRET_PATTERNS = [
   /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
   /\b(gsk_[A-Za-z0-9_-]{20,})\b/g,
@@ -20,6 +22,31 @@ const BLOCKED_PATH_PATTERNS = [
   /id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/,
 ];
 
+const BLOCKED_PATH_SEGMENTS = new Set([
+  '.ssh',
+  '.gnupg',
+  '.aws',
+  '.ipingyou',
+  '.kube',
+  '.docker',
+]);
+
+const BLOCKED_PATH_BASENAMES = new Set([
+  '.npmrc',
+  '.netrc',
+  '.pypirc',
+  'credentials',
+  'credentials.json',
+  'known_hosts',
+  'authorized_keys',
+  'shadow',
+  'sudoers',
+]);
+
+const PRIVATE_KEY_BASENAME = /^id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/i;
+const ENV_BASENAME = /^\.env(?:\.|$)/i;
+const CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/;
+
 const BLOCKED_COMMAND_PATTERNS = [
   /^\s*(env|printenv|set)\b/,
   /\b(export|declare)\s+-p\b/,
@@ -41,8 +68,7 @@ const DANGEROUS_COMMAND_PATTERNS = [
   /\b(curl|wget)\b/,
   />|>>|\btee\b/,
 ];
-
-import { getAllowlistRegexes } from '../allowlist.js';
+const SHELL_SYNTAX_PATTERN = /(?:[;&|`$()]|\\\r?\n)/;
 
 const READ_ONLY_COMMAND_PATTERNS = [
   /^\s*(pwd|ls|find|rg|grep|sed|cat|head|tail|wc|git status|git diff|git log|git show|node --version|npm --version|which|date|uname)\b/,
@@ -66,6 +92,33 @@ export function commandTouchesBlockedPath(command) {
   return BLOCKED_PATH_PATTERNS.some(pattern => pattern.test(command));
 }
 
+export function assertSafeReadablePath(filePath) {
+  const value = String(filePath ?? '');
+  if (!value || value.length > 4096) {
+    throw new Error('Invalid file path');
+  }
+  if (CONTROL_CHARACTERS.test(value)) {
+    throw new Error('File path contains control characters');
+  }
+
+  const normalized = value.replace(/\\/g, '/').replace(/\/+/g, '/');
+  const segments = normalized.toLowerCase().split('/').filter(Boolean);
+  const basename = segments.at(-1) || '';
+
+  if (
+    segments.some(segment => BLOCKED_PATH_SEGMENTS.has(segment))
+    || BLOCKED_PATH_BASENAMES.has(basename)
+    || PRIVATE_KEY_BASENAME.test(basename)
+    || ENV_BASENAME.test(basename)
+    || normalized.toLowerCase().includes('/.config/gh/')
+    || normalized.toLowerCase().includes('/proc/') && basename === 'environ'
+  ) {
+    throw new Error('Path references a protected secret/config location');
+  }
+
+  return value;
+}
+
 export function classifyCommand(command) {
   const text = String(command || '').trim();
   if (!text) return { blocked: true, needsApproval: true, reason: 'Empty command' };
@@ -78,16 +131,6 @@ export function classifyCommand(command) {
     };
   }
 
-  // Check user-provided allowlist first (if present)
-  try {
-    const userPatterns = getAllowlistRegexes();
-    if (Array.isArray(userPatterns) && userPatterns.some(p => p.test(text))) {
-      return { blocked: false, needsApproval: false, reason: 'Matched user allowlist' };
-    }
-  } catch {
-    // ignore allowlist errors and fall back to defaults
-  }
-
   if (BLOCKED_COMMAND_PATTERNS.some(pattern => pattern.test(text))) {
     return {
       blocked: true,
@@ -100,6 +143,20 @@ export function classifyCommand(command) {
     return { blocked: false, needsApproval: true, reason: 'Command may modify files, install packages, or access the network' };
   }
 
+  if (SHELL_SYNTAX_PATTERN.test(text)) {
+    return { blocked: false, needsApproval: true, reason: 'Command uses shell syntax and requires explicit approval' };
+  }
+
+  // User allowlists may suppress prompts only after non-bypassable safety checks.
+  try {
+    const userPatterns = getAllowlistRegexes();
+    if (Array.isArray(userPatterns) && userPatterns.some(pattern => pattern.test(text))) {
+      return { blocked: false, needsApproval: false, reason: 'Matched user allowlist' };
+    }
+  } catch {
+    // Ignore allowlist errors and fall back to defaults.
+  }
+
   if (READ_ONLY_COMMAND_PATTERNS.some(pattern => pattern.test(text))) {
     return { blocked: false, needsApproval: false, reason: 'Read-only command' };
   }

package/src/lib/broker.js

@@ -1,7 +1,7 @@
 import chalk from 'chalk';
 import os from 'node:os';
 import crypto from 'node:crypto';
-import { decrypt, encrypt } from './crypto.js';
+import { decryptAsync, encryptAsync } from './crypto.js';
 import { createSpinner, cryptoSpinner, networkSpinner } from './animations.js';
 import { logSessionEvent } from './session-log.js';
 
@@ -51,7 +51,7 @@ export async function registerWithBroker(brokerUrl, uid, tunnelUrl, password, se
   try {
     await new Promise(r => setTimeout(r, 600));
     const payload = JSON.stringify({ url: tunnelUrl, ...serviceConfig });
-    const encrypted = encrypt(payload, password);
+    const encrypted = await encryptAsync(payload, password);
     const localHostToken = crypto.randomBytes(32).toString('hex');
 
     spinner.text = 'Registering with broker...';
@@ -92,7 +92,7 @@ export async function registerWithBroker(brokerUrl, uid, tunnelUrl, password, se
 }
 
 export async function requestHostApproval(brokerUrl, uid, password, details) {
-  const encrypted = encrypt(JSON.stringify(details), password);
+  const encrypted = await encryptAsync(JSON.stringify(details), password);
   const res = await fetchWithLog('approval_request', `${brokerUrl}/approval-request/${uid}`, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
@@ -209,7 +209,7 @@ export async function resolveUID(brokerUrl, uid, password, silent = false, reque
 
     let decryptedPayload;
     try {
-      decryptedPayload = decrypt(data.iv, data.ciphertext, password, data.salt);
+      decryptedPayload = await decryptAsync(data.iv, data.ciphertext, password, data.salt);
     } catch {
       if (spinner) spinner.fail('Decryption failed — incorrect password or corrupted data');
       if (!spinner) console.error(chalk.red('  ❌ Error: Could not decrypt tunnel data. Incorrect password.'));
@@ -269,7 +269,7 @@ export async function pushTelemetry(brokerUrl, uid, password, username, action =
       time: new Date().toISOString()
     };
 
-    const { iv, ciphertext, salt } = encrypt(JSON.stringify(telemetry), password);
+    const { iv, ciphertext, salt } = await encryptAsync(JSON.stringify(telemetry), password);
 
     await fetchWithLog('telemetry', `${parsed.origin}/client-info/${encodeURIComponent(uid)}`, {
       method: 'POST',

package/src/lib/chat.js

@@ -1,6 +1,6 @@
 import http from 'node:http';
 import { WebSocketServer } from 'ws';
-import open from 'open';
+import { openUrl } from './open-url.js';
 import chalk from 'chalk';
 import { secureSensitiveUrl } from './secure-print.js';
 
@@ -97,9 +97,17 @@ const HTML_CONTENT = `
     let username = isHost ? 'Host' : prompt('Enter your name for the chat:', 'Client_' + Math.floor(Math.random()*1000));
     if (!username) username = 'Anonymous';
 
+    function showBodyMessage(text, color) {
+      const message = document.createElement('h2');
+      message.style.cssText = 'text-align:center;margin-top:20vh';
+      if (color) message.style.color = color;
+      message.textContent = text;
+      document.body.replaceChildren(message);
+    }
+
     const sessionPassword = window.location.hash.substring(1);
     if (!sessionPassword) {
-      document.body.innerHTML = '<h2 style="text-align:center; margin-top:20vh; color:red;">Fatal: Missing session password in URL hash. Cannot decrypt E2E chat.</h2>';
+      showBodyMessage('Fatal: Missing session password in URL hash. Cannot decrypt E2E chat.', 'red');
       throw new Error("Missing password");
     }
 
@@ -168,14 +176,20 @@ const HTML_CONTENT = `
         div.textContent = msg.text;
       } else {
         div.className = 'message ' + (msg.sender === username ? 'self' : 'other');
-        div.innerHTML = '<div class="message-header">' + msg.sender + ' • ' + msg.time + '</div><div>' + msg.text + '</div>';
+        const header = document.createElement('div');
+        header.className = 'message-header';
+        header.textContent = String(msg.sender || 'Unknown') + ' • ' + String(msg.time || '');
+        const body = document.createElement('div');
+        body.textContent = String(msg.text || '');
+        div.appendChild(header);
+        div.appendChild(body);
       }
       msgs.appendChild(div);
       msgs.scrollTop = msgs.scrollHeight;
     }
 
     function updateUsers(users) {
-      usersList.innerHTML = '';
+      usersList.replaceChildren();
       users.forEach(u => {
         const li = document.createElement('li');
         li.className = 'user-item';
@@ -246,7 +260,7 @@ const HTML_CONTENT = `
       } else {
         ws.close();
         window.close();
-        document.body.innerHTML = '<h2 style="text-align:center; margin-top:20vh;">You have left the chat. You can close this tab.</h2>';
+        showBodyMessage('You have left the chat. You can close this tab.');
       }
     };
   </script>
@@ -321,7 +335,7 @@ export async function startChatServer(onClose) {
 export async function openLocalChatUI(port, password) {
   try {
     const chatUrl = `http://localhost:${port}#${password}`;
-    await open(chatUrl);
+    await openUrl(chatUrl);
   } catch {
     console.log(chalk.dim(`     Unable to auto-open browser. Visit ${secureSensitiveUrl(`http://localhost:${port}`, password)}`));
   }

package/src/lib/checksum.js

@@ -1,12 +1,32 @@
 import crypto from 'node:crypto';
 import fs from 'node:fs';
+import { canUseWorkers, runWorkerTask } from './worker-runtime.js';
 
-export async function calculateChecksum(filePath) {
+const WORKER_CHECKSUM_THRESHOLD_BYTES = 2 * 1024 * 1024;
+
+async function calculateChecksumStream(filePath) {
   return new Promise((resolve) => {
     const hash = crypto.createHash('sha256');
     const stream = fs.createReadStream(filePath);
     stream.on('error', () => resolve(null));
-    stream.on('data', chunk => hash.update(chunk));
+    stream.on('data', (chunk) => hash.update(chunk));
     stream.on('end', () => resolve(hash.digest('hex')));
   });
 }
+
+export async function calculateChecksum(filePath) {
+  const stat = await fs.promises.stat(filePath).catch(() => null);
+  if (!stat || !stat.isFile()) return null;
+
+  if (canUseWorkers() && stat.size >= WORKER_CHECKSUM_THRESHOLD_BYTES) {
+    try {
+      const result = await runWorkerTask('checksum', { filePath });
+      return result.digest || null;
+    } catch (err) {
+      if (err?.code === 'WORKER_QUEUE_FULL') throw err;
+      return calculateChecksumStream(filePath);
+    }
+  }
+
+  return calculateChecksumStream(filePath);
+}