@nekzus/liop-studio 1.0.0-alpha.5 → 1.0.0-alpha.7

package/dist/cli/index.js

@@ -5,9 +5,9 @@ import { Command } from "commander";
 import pc2 from "picocolors";
 
 // src/server/index.ts
-import path from "path";
+import path2 from "path";
 import process3 from "process";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { TokenTelemetryEngine as TokenTelemetryEngine5 } from "@nekzus/liop";
@@ -63,10 +63,29 @@ function validateHttpTarget(targetUrl) {
   }
   return parsed;
 }
-function validateHostHeader(host, allowedHosts = ["localhost", "127.0.0.1", "0.0.0.0"]) {
+function validateHostHeader(host, allowedHosts = [
+  "localhost",
+  "127.0.0.1",
+  "0.0.0.0",
+  "::1",
+  "[::1]"
+]) {
   if (!host) return false;
-  const hostname = host.split(":")[0].toLowerCase();
-  return allowedHosts.includes(hostname);
+  const trimmed = host.trim();
+  let hostname;
+  if (trimmed.startsWith("[")) {
+    const closingIndex = trimmed.indexOf("]");
+    hostname = closingIndex !== -1 ? trimmed.slice(0, closingIndex + 1) : trimmed;
+  } else if (trimmed.includes(":") && trimmed.indexOf(":") !== trimmed.lastIndexOf(":")) {
+    hostname = trimmed;
+  } else {
+    hostname = trimmed.split(":")[0];
+  }
+  hostname = hostname.toLowerCase();
+  return allowedHosts.some((allowed) => {
+    const normAllowed = allowed.toLowerCase();
+    return normAllowed === hostname || hostname === "[::1]" && normAllowed === "::1" || hostname === "::1" && normAllowed === "[::1]";
+  });
 }
 
 // src/transports/grpc.transport.ts
@@ -467,16 +486,22 @@ var GrpcTransport = class {
   connected = false;
   target;
   token;
+  tlsConfig;
   constructor(options) {
     this.target = options.target.replace(/^grpc:\/\//, "");
     this.token = options.token;
+    this.tlsConfig = options.tls;
   }
   isConnected() {
     return this.connected && this.client !== null;
   }
   async connect() {
     const tokenProvider = this.token || createStudioTokenProvider();
-    this.client = new LiopRpcClient(this.target, void 0, tokenProvider);
+    const tls = this.tlsConfig || {
+      insecure: true,
+      suppressWarning: true
+    };
+    this.client = new LiopRpcClient(this.target, tls, tokenProvider);
     this.connected = true;
   }
   async disconnect() {
@@ -1191,9 +1216,7 @@ var MeshTransport = class {
       if (!this.isConnected()) {
         await this.connect();
       }
-      const clientAny = this.client;
-      const peerId = clientAny.meshNode?.getPeerId?.()?.toString() || "UnknownPeer";
-      const _connections = clientAny.meshNode?.node?.getConnections?.() || [];
+      const peerId = this.client.peerId ?? "UnknownPeer";
       const latencyMs = Math.max(1, Math.round(performance.now() - tStart));
       const discovery = NetworkDiscoveryEngine.getInstance();
       const meshDiscovered = await discovery.scanNetwork("127.0.0.1").catch(() => []);
@@ -1878,12 +1901,40 @@ function createTransport(config) {
   }
 }
 
-// src/server/index.ts
+// src/version.ts
+import fs from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
 var __dirname = path.dirname(fileURLToPath(import.meta.url));
+function getPackageVersion() {
+  try {
+    let currentDir = __dirname;
+    for (let i = 0; i < 4; i++) {
+      const candidate = path.join(currentDir, "package.json");
+      if (fs.existsSync(candidate)) {
+        const raw = fs.readFileSync(candidate, "utf-8");
+        const parsed = JSON.parse(raw);
+        if (parsed.name === "@nekzus/liop-studio" && typeof parsed.version === "string") {
+          return parsed.version;
+        }
+      }
+      currentDir = path.dirname(currentDir);
+    }
+  } catch {
+  }
+  return "1.0.0-alpha.5";
+}
+var STUDIO_VERSION = getPackageVersion();
+
+// src/server/index.ts
+var __dirname2 = path2.dirname(fileURLToPath2(import.meta.url));
 function createStudioServer(options = {}) {
+  if (!process3.env.LIOP_SUPPRESS_TLS_WARNING) {
+    process3.env.LIOP_SUPPRESS_TLS_WARNING = "true";
+  }
   const app = new Hono();
   const port = options.port || 16e3;
-  const distPath = options.distPath || path.resolve(__dirname, "../../ui/dist");
+  const distPath = options.distPath || path2.resolve(__dirname2, "../../ui/dist");
   let activeConfig = options.initialTarget || {
     type: "http",
     http: { url: process3.env.LIOP_MCP_URL || "http://127.0.0.1:15000/mcp" }
@@ -1916,7 +1967,7 @@ function createStudioServer(options = {}) {
     const isConnected = activeTransport.isConnected() && lastReport?.status === "online";
     return c.json({
       status: isConnected ? "healthy" : "offline",
-      version: "1.0.0",
+      version: STUDIO_VERSION,
       targetType: activeConfig.type,
       connected: isConnected
     });
@@ -1932,7 +1983,7 @@ function createStudioServer(options = {}) {
       connected: isConnected,
       toolsCount: isConnected ? lastReport?.totalTools || 0 : 0,
       latencyMs: isConnected ? lastReport?.latencyMs || 0 : 0,
-      version: "1.0.0",
+      version: STUDIO_VERSION,
       serverInfo: lastReport?.serverInfo
     });
   });
@@ -2197,7 +2248,11 @@ function resolveTargetConfig(target, options = {}) {
   if (isGrpcExplicit || /^([a-zA-Z0-9.-]+):(\d+)$/.test(trimmed) || trimmed.startsWith("grpc://")) {
     return {
       type: "grpc",
-      grpc: { target: trimmed, token }
+      grpc: {
+        target: trimmed,
+        token,
+        tls: { insecure: true, suppressWarning: true }
+      }
     };
   }
   const parts = trimmed.split(/\s+/);
@@ -2210,6 +2265,9 @@ function resolveTargetConfig(target, options = {}) {
   };
 }
 async function runScan(targetStr, options) {
+  if (!process4.env.LIOP_SUPPRESS_TLS_WARNING) {
+    process4.env.LIOP_SUPPRESS_TLS_WARNING = "true";
+  }
   const config = resolveTargetConfig(targetStr, options.token);
   const transport = createTransport(config);
   try {
@@ -2237,14 +2295,24 @@ async function main() {
   const program = new Command();
   program.name("liop-studio").description(
     "LIOP Sovereign Studio & Mesh Scanner (Universal MCP / LIOP Inspector)"
-  ).version("1.0.0-alpha.0").option("-p, --port <port>", "Port to bind local Studio server", "16000").option("--no-open", "Do not automatically open browser on launch").option(
+  ).version(STUDIO_VERSION).option("-p, --port <port>", "Port to bind local Studio server", "16000").option("--no-open", "Do not automatically open browser on launch").option(
     "--stdio <command>",
     "Initial target: Stdio command (e.g. 'node server.js')"
   ).option("--http <url>", "Initial target: HTTP / SSE MCP URL").option("--grpc <target>", "Initial target: Native LIOP gRPC endpoint").option("--mesh <multiaddr>", "Initial target: Libp2p P2P bootstrap node").option(
     "--token <token>",
     "Bearer or access token for target authentication"
+  ).option("--tls-ca <path>", "Path to root CA certificate for gRPC target").option(
+    "--tls-cert <path>",
+    "Path to client certificate chain for gRPC target"
+  ).option("--tls-key <path>", "Path to client private key for gRPC target").option(
+    "--insecure",
+    "Explicitly permit unencrypted gRPC credentials",
+    true
   ).action(async (options) => {
     const port = Number.parseInt(options.port, 10) || 16e3;
+    if (!options.tlsCa && !options.tlsCert && !options.tlsKey) {
+      process5.env.LIOP_SUPPRESS_TLS_WARNING = "true";
+    }
     let initialTarget;
     if (options.stdio) {
       const parts = options.stdio.trim().split(/\s+/);
@@ -2260,7 +2328,18 @@ async function main() {
     } else if (options.grpc) {
       initialTarget = {
         type: "grpc",
-        grpc: { target: options.grpc, token: options.token }
+        grpc: {
+          target: options.grpc,
+          token: options.token,
+          tls: options.tlsCa ? {
+            rootCert: options.tlsCa,
+            certChain: options.tlsCert,
+            privateKey: options.tlsKey
+          } : {
+            insecure: true,
+            suppressWarning: true
+          }
+        }
       };
     } else if (options.mesh) {
       initialTarget = {