@nekzus/liop-studio 1.0.0-alpha.2 → 1.0.0-alpha.21

package/dist/{index-DLA-Sm4s.d.ts → index-Cl7IupN0.d.ts}

@@ -1,6 +1,7 @@
 import * as _hono_node_server from '@hono/node-server';
 import * as hono_types from 'hono/types';
 import { Hono } from 'hono';
+import { LiopTlsOptions } from '@nekzus/liop';
 
 type TargetTransportType = "stdio" | "http" | "grpc" | "mesh";
 interface TargetConnectionConfig {
@@ -19,6 +20,7 @@ interface TargetConnectionConfig {
         target: string;
         useTls?: boolean;
         token?: string;
+        tls?: LiopTlsOptions;
     };
     mesh?: {
         bootstrapNodes?: string[];

package/dist/index.d.ts

@@ -1,5 +1,6 @@
-import { T as TargetConnectionConfig, S as ScanReport, a as ScannedTargetNode, E as EnrichedTool, b as StudioTransport, c as TargetTransportType, d as ExecutionResult } from './index-DLA-Sm4s.js';
-export { e as ExecutionTelemetry, f as ServerOptions, g as createStudioServer } from './index-DLA-Sm4s.js';
+import { T as TargetConnectionConfig, S as ScanReport, a as ScannedTargetNode, E as EnrichedTool, b as StudioTransport, c as TargetTransportType, d as ExecutionResult } from './index-Cl7IupN0.js';
+export { e as ExecutionTelemetry, f as ServerOptions, g as createStudioServer } from './index-Cl7IupN0.js';
+import { LiopTlsOptions } from '@nekzus/liop';
 import '@hono/node-server';
 import 'hono/types';
 import 'hono';
@@ -73,6 +74,7 @@ declare function validateHttpTarget(targetUrl: string): URL;
 declare const sanitizeUrl: typeof validateHttpTarget;
 /**
  * Validates Host headers to prevent DNS Rebinding attacks on local ports.
+ * Supports IPv4, localhost and IPv6 loopback ([::1] / ::1).
  */
 declare function validateHostHeader(host: string | undefined, allowedHosts?: string[]): boolean;
 
@@ -80,6 +82,7 @@ interface GrpcTransportOptions {
     target: string;
     useTls?: boolean;
     token?: string;
+    tls?: LiopTlsOptions;
 }
 declare class GrpcTransport implements StudioTransport {
     readonly type: TargetTransportType;
@@ -87,6 +90,7 @@ declare class GrpcTransport implements StudioTransport {
     private connected;
     private target;
     private token?;
+    private tlsConfig?;
     constructor(options: GrpcTransportOptions);
     isConnected(): boolean;
     connect(): Promise<void>;
@@ -170,4 +174,6 @@ declare class StdioTransport implements StudioTransport {
 
 declare function createTransport(config: TargetConnectionConfig): StudioTransport;
 
-export { EnrichedTool, ExecutionResult, GrpcTransport, type GrpcTransportOptions, HttpTransport, type HttpTransportOptions, MeshTransport, type MeshTransportOptions, NetworkDiscoveryEngine, ScanReport, ScannedTargetNode, StdioTransport, type StdioTransportOptions, StudioTransport, TargetConnectionConfig, TargetTransportType, createTransport, formatScanTable, resolveTargetConfig, runScan, sanitizeCommand, sanitizeUrl, validateHostHeader, validateHttpTarget };
+declare const STUDIO_VERSION: string;
+
+export { EnrichedTool, ExecutionResult, GrpcTransport, type GrpcTransportOptions, HttpTransport, type HttpTransportOptions, MeshTransport, type MeshTransportOptions, NetworkDiscoveryEngine, STUDIO_VERSION, ScanReport, ScannedTargetNode, StdioTransport, type StdioTransportOptions, StudioTransport, TargetConnectionConfig, TargetTransportType, createTransport, formatScanTable, resolveTargetConfig, runScan, sanitizeCommand, sanitizeUrl, validateHostHeader, validateHttpTarget };

package/dist/index.js

@@ -23,7 +23,8 @@ var DEFAULT_PRESET_PROFILES = [
     role: "Clinical Healthcare & EHR Patient Records",
     isolation: "pnet Swarm Key (PSK) + HIPAA Strict Mode",
     dataset: "2,500 clinical EHR patient records",
-    defaultTool: "Analyze_Synthetic_Medical_Records"
+    defaultTool: "Analyze_Synthetic_Medical_Records",
+    defaultTools: ["Analyze_Synthetic_Medical_Records"]
   },
   {
     id: "bank",
@@ -35,7 +36,8 @@ var DEFAULT_PRESET_PROFILES = [
     role: "Core Banking & Financial Settlement",
     isolation: "pnet Swarm Key (PSK) + Differential Privacy",
     dataset: "1,500 synthetic accounts ($148M balance)",
-    defaultTool: "Analyze_Synthetic_Bank_Transactions"
+    defaultTool: "Analyze_Synthetic_Bank_Transactions",
+    defaultTools: ["Analyze_Synthetic_Bank_Transactions"]
   },
   {
     id: "blg",
@@ -46,7 +48,12 @@ var DEFAULT_PRESET_PROFILES = [
     tierLabel: "Tier 1: Sovereign Enclaves (In-Situ Origin)",
     role: "Dual-NIC Perimeter Security Bridge (Tier 1 <-> Tier 2)",
     isolation: "6-Layer Zero-Trust + AST Guardian + Egress Shield",
-    defaultTool: "BLG_Inspect_Enclave_Perimeter"
+    defaultTool: "BLG_Inspect_Enclave_Perimeter",
+    defaultTools: [
+      "BLG_Inspect_Enclave_Perimeter",
+      "BLG_Execute_Healthcare_Analytics",
+      "BLG_Execute_Banking_Analytics"
+    ]
   },
   {
     id: "oracle",
@@ -58,7 +65,8 @@ var DEFAULT_PRESET_PROFILES = [
     role: "Real-time High Frequency Trading Market Simulator",
     isolation: "Consortium Node + 50ms Tick Streaming Buffer",
     dataset: "8 Instruments + L2 Orderbook",
-    defaultTool: "Analyze_HFT_Market_Data"
+    defaultTool: "Analyze_HFT_Market_Data",
+    defaultTools: ["Analyze_HFT_Market_Data", "LiopMeshStatus"]
   },
   {
     id: "relay",
@@ -68,7 +76,8 @@ var DEFAULT_PRESET_PROFILES = [
     tierLabel: "Tier 2: Consortium Routing & Gateways",
     role: "Kademlia DHT & libp2p Circuit Relay v2 Node",
     isolation: "Public Swarm Mesh Relay",
-    defaultTool: "LiopMeshStatus"
+    defaultTool: "LiopMeshStatus",
+    defaultTools: ["LiopMeshStatus"]
   },
   {
     id: "nexus",
@@ -78,7 +87,8 @@ var DEFAULT_PRESET_PROFILES = [
     tierLabel: "Tier 2: Consortium Routing & Gateways",
     role: "OAuth 2.1 RFC 8707 Auth Server & Mesh Authority",
     isolation: "Zero-Trust Identity Provider",
-    defaultTool: "Authenticate_Client"
+    defaultTool: "Authenticate_Client",
+    defaultTools: ["Authenticate_Client"]
   },
   {
     id: "edge",
@@ -90,7 +100,8 @@ var DEFAULT_PRESET_PROFILES = [
     role: "Edge Telemetry & Hostile 3G WAN Industrial Node",
     isolation: "WAN Jitter/Loss Resistant Client",
     dataset: "Edge Telemetry Sensors (Pressure, RPM, Temp)",
-    defaultTool: "Analyze_IoT_Sensor_Data"
+    defaultTool: "Analyze_IoT_Sensor_Data",
+    defaultTools: ["Analyze_IoT_Sensor_Data"]
   }
 ];
 var NetworkDiscoveryEngine = class _NetworkDiscoveryEngine {
@@ -123,7 +134,7 @@ var NetworkDiscoveryEngine = class _NetworkDiscoveryEngine {
   /**
    * Probe a specific HTTP/Health endpoint dynamically.
    */
-  async probeHttpNode(host, port, timeoutMs = 1200) {
+  async probeHttpNode(host, port, timeoutMs = 3500) {
     const url = `http://${host}:${port}`;
     const t0 = performance.now();
     const controller = new AbortController();
@@ -210,7 +221,7 @@ var NetworkDiscoveryEngine = class _NetworkDiscoveryEngine {
             peerId: probe.peerId || `peer-${profile.id}`,
             multiaddrs: probe.multiaddrs || [],
             version: probe.version || "2.5.0",
-            tools: probe.tools && probe.tools.length > 0 ? probe.tools : [],
+            tools: probe.tools && probe.tools.length > 0 ? probe.tools : profile.defaultTools || (profile.defaultTool ? [profile.defaultTool] : []),
             role: profile.role,
             isolation: profile.isolation,
             dataset: profile.dataset,
@@ -232,7 +243,7 @@ var NetworkDiscoveryEngine = class _NetworkDiscoveryEngine {
             peerId: `peer-${profile.id}`,
             multiaddrs: [],
             version: "2.5.0",
-            tools: [],
+            tools: profile.defaultTools || (profile.defaultTool ? [profile.defaultTool] : []),
             role: profile.role,
             isolation: profile.isolation,
             dataset: profile.dataset,
@@ -270,7 +281,7 @@ var NetworkDiscoveryEngine = class _NetworkDiscoveryEngine {
       const probe = await this.probeHttpNode(host, matchedProfile.httpPort);
       const isOnline = status === "online" || Boolean(probe?.tools) && (probe?.tools?.length ?? 0) > 0;
       const nodeName = probe?.name?.replace("PRODUCTION-", "").replace(/-/g, " ") || matchedProfile.defaultName;
-      const defaultTools = matchedProfile.defaultTool ? [matchedProfile.defaultTool] : ["Execute_WASI_Logic"];
+      const defaultTools = matchedProfile.defaultTools || (matchedProfile.defaultTool ? [matchedProfile.defaultTool] : ["Execute_WASI_Logic"]);
       const tools = isOnline ? probe?.tools && probe.tools.length > 0 ? probe.tools : defaultTools : [];
       const enriched = isOnline && probe?.enrichedTools && probe.enrichedTools.length > 0 ? probe.enrichedTools : tools.map((t) => ({
         name: t,
@@ -388,16 +399,22 @@ var GrpcTransport = class {
   connected = false;
   target;
   token;
+  tlsConfig;
   constructor(options) {
     this.target = options.target.replace(/^grpc:\/\//, "");
     this.token = options.token;
+    this.tlsConfig = options.tls;
   }
   isConnected() {
     return this.connected && this.client !== null;
   }
   async connect() {
     const tokenProvider = this.token || createStudioTokenProvider();
-    this.client = new LiopRpcClient(this.target, void 0, tokenProvider);
+    const tls = this.tlsConfig || {
+      insecure: true,
+      suppressWarning: true
+    };
+    this.client = new LiopRpcClient(this.target, tls, tokenProvider);
     this.connected = true;
   }
   async disconnect() {
@@ -800,10 +817,29 @@ function validateHttpTarget(targetUrl) {
   return parsed;
 }
 var sanitizeUrl = validateHttpTarget;
-function validateHostHeader(host, allowedHosts = ["localhost", "127.0.0.1", "0.0.0.0"]) {
+function validateHostHeader(host, allowedHosts = [
+  "localhost",
+  "127.0.0.1",
+  "0.0.0.0",
+  "::1",
+  "[::1]"
+]) {
   if (!host) return false;
-  const hostname = host.split(":")[0].toLowerCase();
-  return allowedHosts.includes(hostname);
+  const trimmed = host.trim();
+  let hostname;
+  if (trimmed.startsWith("[")) {
+    const closingIndex = trimmed.indexOf("]");
+    hostname = closingIndex !== -1 ? trimmed.slice(0, closingIndex + 1) : trimmed;
+  } else if (trimmed.includes(":") && trimmed.indexOf(":") !== trimmed.lastIndexOf(":")) {
+    hostname = trimmed;
+  } else {
+    hostname = trimmed.split(":")[0];
+  }
+  hostname = hostname.toLowerCase();
+  return allowedHosts.some((allowed) => {
+    const normAllowed = allowed.toLowerCase();
+    return normAllowed === hostname || hostname === "[::1]" && normAllowed === "::1" || hostname === "::1" && normAllowed === "[::1]";
+  });
 }
 
 // src/transports/http.transport.ts
@@ -1170,9 +1206,7 @@ var MeshTransport = class {
       if (!this.isConnected()) {
         await this.connect();
       }
-      const clientAny = this.client;
-      const peerId = clientAny.meshNode?.getPeerId?.()?.toString() || "UnknownPeer";
-      const _connections = clientAny.meshNode?.node?.getConnections?.() || [];
+      const peerId = this.client.peerId ?? "UnknownPeer";
       const latencyMs = Math.max(1, Math.round(performance.now() - tStart));
       const discovery = NetworkDiscoveryEngine.getInstance();
       const meshDiscovered = await discovery.scanNetwork("127.0.0.1").catch(() => []);
@@ -1945,7 +1979,11 @@ function resolveTargetConfig(target, options = {}) {
   if (isGrpcExplicit || /^([a-zA-Z0-9.-]+):(\d+)$/.test(trimmed) || trimmed.startsWith("grpc://")) {
     return {
       type: "grpc",
-      grpc: { target: trimmed, token }
+      grpc: {
+        target: trimmed,
+        token,
+        tls: { insecure: true, suppressWarning: true }
+      }
     };
   }
   const parts = trimmed.split(/\s+/);
@@ -1958,6 +1996,9 @@ function resolveTargetConfig(target, options = {}) {
   };
 }
 async function runScan(targetStr, options) {
+  if (!process3.env.LIOP_SUPPRESS_TLS_WARNING) {
+    process3.env.LIOP_SUPPRESS_TLS_WARNING = "true";
+  }
   const config = resolveTargetConfig(targetStr, options.token);
   const transport = createTransport(config);
   try {
@@ -1981,19 +2022,49 @@ async function runScan(targetStr, options) {
 }
 
 // src/server/index.ts
-import path from "path";
+import path2 from "path";
 import process4 from "process";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { TokenTelemetryEngine as TokenTelemetryEngine5 } from "@nekzus/liop";
 import { Hono } from "hono";
 import { streamSSE } from "hono/streaming";
+
+// src/version.ts
+import fs from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
 var __dirname = path.dirname(fileURLToPath(import.meta.url));
+function getPackageVersion() {
+  try {
+    let currentDir = __dirname;
+    for (let i = 0; i < 4; i++) {
+      const candidate = path.join(currentDir, "package.json");
+      if (fs.existsSync(candidate)) {
+        const raw = fs.readFileSync(candidate, "utf-8");
+        const parsed = JSON.parse(raw);
+        if (parsed.name === "@nekzus/liop-studio" && typeof parsed.version === "string") {
+          return parsed.version;
+        }
+      }
+      currentDir = path.dirname(currentDir);
+    }
+  } catch {
+  }
+  return "1.0.0-alpha.5";
+}
+var STUDIO_VERSION = getPackageVersion();
+
+// src/server/index.ts
+var __dirname2 = path2.dirname(fileURLToPath2(import.meta.url));
 function createStudioServer(options = {}) {
+  if (!process4.env.LIOP_SUPPRESS_TLS_WARNING) {
+    process4.env.LIOP_SUPPRESS_TLS_WARNING = "true";
+  }
   const app = new Hono();
   const port = options.port || 16e3;
-  const distPath = options.distPath || path.resolve(__dirname, "../../ui/dist");
+  const distPath = options.distPath || path2.resolve(__dirname2, "../../ui/dist");
   let activeConfig = options.initialTarget || {
     type: "http",
     http: { url: process4.env.LIOP_MCP_URL || "http://127.0.0.1:15000/mcp" }
@@ -2013,7 +2084,7 @@ function createStudioServer(options = {}) {
   app.use(
     "/*",
     serveStatic({
-      root: path.relative(process4.cwd(), distPath).replace(/\\/g, "/"),
+      root: distPath,
       rewriteRequestPath: (pathStr) => {
         if (!pathStr.includes(".") && !pathStr.startsWith("/api") && pathStr !== "/health") {
           return "/index.html";
@@ -2026,7 +2097,7 @@ function createStudioServer(options = {}) {
     const isConnected = activeTransport.isConnected() && lastReport?.status === "online";
     return c.json({
       status: isConnected ? "healthy" : "offline",
-      version: "1.0.0",
+      version: STUDIO_VERSION,
       targetType: activeConfig.type,
       connected: isConnected
     });
@@ -2042,7 +2113,7 @@ function createStudioServer(options = {}) {
       connected: isConnected,
       toolsCount: isConnected ? lastReport?.totalTools || 0 : 0,
       latencyMs: isConnected ? lastReport?.latencyMs || 0 : 0,
-      version: "1.0.0",
+      version: STUDIO_VERSION,
       serverInfo: lastReport?.serverInfo
     });
   });
@@ -2220,6 +2291,7 @@ export {
   HttpTransport,
   MeshTransport,
   NetworkDiscoveryEngine,
+  STUDIO_VERSION,
   StdioTransport,
   createStudioServer,
   createTransport,