@mrgoonie/multix 1.0.1 → 1.0.2

package/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.2](https://github.com/mrgoonie/multix-cli/compare/v1.0.1...v1.0.2) (2026-10-11)
+
+
+### Fixed
+
+* **fal:** only send the key to trusted queue status and response URLs ([#112](https://github.com/mrgoonie/multix-cli/issues/112)) ([92e61c5](https://github.com/mrgoonie/multix-cli/commit/92e61c547999e0bb30f1f4be6d9bbc1ce8226d24))
+
 ## [1.0.1](https://github.com/mrgoonie/multix-cli/compare/v1.0.0...v1.0.1) (2026-10-11)
 
 

package/dist/cli.js

@@ -4520,6 +4520,7 @@ var FAL_DEFAULTS = {
 };
 
 // src/providers/fal/run-helpers.ts
+init_errors();
 import fs18 from "fs";
 import path21 from "path";
 init_redact();
@@ -4528,6 +4529,34 @@ init_redact();
 init_errors();
 init_errors();
 init_redact();
+var FAL_QUEUE_HOST = "queue.fal.run";
+function parseUrl(url) {
+  try {
+    return new URL(url);
+  } catch {
+    return void 0;
+  }
+}
+function normalizedHost(u) {
+  return u.hostname.toLowerCase().replace(/\.$/, "");
+}
+function normalizedOrigin(u) {
+  return `${u.protocol}//${normalizedHost(u)}:${u.port}`;
+}
+function assertTrustedFalUrl(url, baseUrl) {
+  const target = parseUrl(url);
+  if (!target) {
+    throw new ProviderError("Refusing to send the fal key to a malformed URL", "fal");
+  }
+  const base = parseUrl(baseUrl);
+  if (base && normalizedOrigin(target) === normalizedOrigin(base)) return;
+  const host = normalizedHost(target);
+  if (target.protocol === "https:" && host === FAL_QUEUE_HOST && target.port === "") return;
+  throw new ProviderError(
+    `Refusing to send the fal key to ${host || "this URL"}: not https://${FAL_QUEUE_HOST} or the FAL_BASE_URL origin`,
+    "fal"
+  );
+}
 function requireFalKey() {
   const key = resolveRoutedKey(FAL_ROUTING);
   if (!key) {
@@ -4549,10 +4578,22 @@ var FalClient = class {
   async request(path57, opts = {}) {
     const base = this.baseUrl.replace(/\/$/, "");
     const suffix = path57.startsWith("/") ? path57 : `/${path57}`;
-    return this.requestAbsolute(base + suffix, opts);
+    return this.send(base + suffix, opts);
   }
-  /** Same auth/headers as `request`, but `url` is used verbatim (e.g. a status_url/response_url returned by submit). */
+  /**
+   * Same auth/headers as `request`, but `url` is used verbatim (e.g. a
+   * status_url/response_url returned by submit). The URL must pass
+   * {@link assertTrustedFalUrl} before the key is sent.
+   */
   async requestAbsolute(url, opts = {}) {
+    assertTrustedFalUrl(url, this.baseUrl);
+    return this.send(url, opts);
+  }
+  /** Throws a ProviderError when `url` may not receive the key (see {@link assertTrustedFalUrl}). */
+  assertTrustedUrl(url) {
+    assertTrustedFalUrl(url, this.baseUrl);
+  }
+  async send(url, opts) {
     opts.logger?.debug(`${opts.method ?? "GET"} ${redactUrl(url)}`);
     return httpJson({
       url,
@@ -4620,6 +4661,13 @@ async function submitAndWait(opts) {
   const submitRes = await client.post(submitPath(model), input, logger);
   const requestId = submitRes.request_id;
   logger.debug(`request_id: ${requestId}`);
+  for (const field of ["status_url", "response_url"]) {
+    const url = submitRes[field];
+    if (typeof url !== "string" || url === "") {
+      throw new ProviderError(`fal submit response is missing ${field}`, "fal");
+    }
+    client.assertTrustedUrl(url);
+  }
   logger.info("Polling for completion...");
   const waitTimeoutMs = opts.waitTimeoutMs ?? 48e4;
   const intervalMs = opts.pollIntervalMs ?? 3e3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrgoonie/multix",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "AI multimodal CLI — OpenAI, Gemini, MiniMax, OpenRouter, Leonardo, BytePlus, ElevenLabs, fal.ai, Atlas Cloud, Replicate, HeyGen, ffmpeg, ImageMagick, doc-to-md",
   "type": "module",
   "bin": {

package/skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multix
 description: AI multimodal CLI — generate and edit images (OpenAI, Codex driver, Gemini Nano Banana, Imagen, MiniMax, OpenRouter, Leonardo, BytePlus Seedream, Cloudflare Workers AI FLUX.1 Schnell, fal.ai FLUX, Replicate FLUX), generate video (Gemini Veo, MiniMax Hailuo, OpenRouter via Veo/Seedance/Kling, Leonardo via Motion/Veo/Kling/Hailuo/Seedance/LTX, BytePlus Seedance, Cloudflare AI Gateway via Replicate, fal.ai queue models, Replicate direct API models incl. P-Video, HeyGen Video Agent and scripted avatar videos), video translation and lipsync (HeyGen), TTS/STT/music (OpenAI, Gemini Flash TTS incl. Gemini 3.8 with delivery-style control, MiniMax, Cloudflare Workers AI MeloTTS, ElevenLabs), 3D models (BytePlus Hyper3D/Hitem3d), analyze/transcribe media, convert documents to Markdown, optimize media via ffmpeg/ImageMagick, and self-update the CLI. Use whenever the user wants to create, edit, or transform images/video/audio/3D/documents from a CLI, mentions any of: OpenAI, Codex image driver, image-to-image, i2i, image edit, watercolor/cyberpunk style transfer, reference image, OpenRouter, Nano Banana, Flux, Seedream, Veo, Hailuo, Seedance, Kling, Cloudflare Workers AI, AI Gateway, fal.ai, Atlas Cloud, Replicate, replicate.com models, Replicate predictions, HeyGen, avatar video, talking head, Video Agent, video translation, dubbing, lipsync, video generation, text-to-video, image-to-video, i2v, ElevenLabs voice cloning, updating/upgrading multix, or asks for batch media optimization.
-version: 1.0.1 # x-release-please-version
+version: 1.0.2 # x-release-please-version
 ---
 
 # multix — AI Multimodal CLI