@nekzus/liop-studio 1.0.0-alpha.6 → 1.0.0-alpha.7

package/dist/index.d.ts

@@ -74,6 +74,7 @@ declare function validateHttpTarget(targetUrl: string): URL;
 declare const sanitizeUrl: typeof validateHttpTarget;
 /**
  * Validates Host headers to prevent DNS Rebinding attacks on local ports.
+ * Supports IPv4, localhost and IPv6 loopback ([::1] / ::1).
  */
 declare function validateHostHeader(host: string | undefined, allowedHosts?: string[]): boolean;
 
@@ -173,4 +174,6 @@ declare class StdioTransport implements StudioTransport {
 
 declare function createTransport(config: TargetConnectionConfig): StudioTransport;
 
-export { EnrichedTool, ExecutionResult, GrpcTransport, type GrpcTransportOptions, HttpTransport, type HttpTransportOptions, MeshTransport, type MeshTransportOptions, NetworkDiscoveryEngine, ScanReport, ScannedTargetNode, StdioTransport, type StdioTransportOptions, StudioTransport, TargetConnectionConfig, TargetTransportType, createTransport, formatScanTable, resolveTargetConfig, runScan, sanitizeCommand, sanitizeUrl, validateHostHeader, validateHttpTarget };
+declare const STUDIO_VERSION: string;
+
+export { EnrichedTool, ExecutionResult, GrpcTransport, type GrpcTransportOptions, HttpTransport, type HttpTransportOptions, MeshTransport, type MeshTransportOptions, NetworkDiscoveryEngine, STUDIO_VERSION, ScanReport, ScannedTargetNode, StdioTransport, type StdioTransportOptions, StudioTransport, TargetConnectionConfig, TargetTransportType, createTransport, formatScanTable, resolveTargetConfig, runScan, sanitizeCommand, sanitizeUrl, validateHostHeader, validateHttpTarget };

package/dist/index.js

@@ -817,10 +817,29 @@ function validateHttpTarget(targetUrl) {
   return parsed;
 }
 var sanitizeUrl = validateHttpTarget;
-function validateHostHeader(host, allowedHosts = ["localhost", "127.0.0.1", "0.0.0.0"]) {
+function validateHostHeader(host, allowedHosts = [
+  "localhost",
+  "127.0.0.1",
+  "0.0.0.0",
+  "::1",
+  "[::1]"
+]) {
   if (!host) return false;
-  const hostname = host.split(":")[0].toLowerCase();
-  return allowedHosts.includes(hostname);
+  const trimmed = host.trim();
+  let hostname;
+  if (trimmed.startsWith("[")) {
+    const closingIndex = trimmed.indexOf("]");
+    hostname = closingIndex !== -1 ? trimmed.slice(0, closingIndex + 1) : trimmed;
+  } else if (trimmed.includes(":") && trimmed.indexOf(":") !== trimmed.lastIndexOf(":")) {
+    hostname = trimmed;
+  } else {
+    hostname = trimmed.split(":")[0];
+  }
+  hostname = hostname.toLowerCase();
+  return allowedHosts.some((allowed) => {
+    const normAllowed = allowed.toLowerCase();
+    return normAllowed === hostname || hostname === "[::1]" && normAllowed === "::1" || hostname === "::1" && normAllowed === "[::1]";
+  });
 }
 
 // src/transports/http.transport.ts
@@ -1187,9 +1206,7 @@ var MeshTransport = class {
       if (!this.isConnected()) {
         await this.connect();
       }
-      const clientAny = this.client;
-      const peerId = clientAny.meshNode?.getPeerId?.()?.toString() || "UnknownPeer";
-      const _connections = clientAny.meshNode?.node?.getConnections?.() || [];
+      const peerId = this.client.peerId ?? "UnknownPeer";
       const latencyMs = Math.max(1, Math.round(performance.now() - tStart));
       const discovery = NetworkDiscoveryEngine.getInstance();
       const meshDiscovered = await discovery.scanNetwork("127.0.0.1").catch(() => []);
@@ -2005,22 +2022,49 @@ async function runScan(targetStr, options) {
 }
 
 // src/server/index.ts
-import path from "path";
+import path2 from "path";
 import process4 from "process";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { TokenTelemetryEngine as TokenTelemetryEngine5 } from "@nekzus/liop";
 import { Hono } from "hono";
 import { streamSSE } from "hono/streaming";
+
+// src/version.ts
+import fs from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
 var __dirname = path.dirname(fileURLToPath(import.meta.url));
+function getPackageVersion() {
+  try {
+    let currentDir = __dirname;
+    for (let i = 0; i < 4; i++) {
+      const candidate = path.join(currentDir, "package.json");
+      if (fs.existsSync(candidate)) {
+        const raw = fs.readFileSync(candidate, "utf-8");
+        const parsed = JSON.parse(raw);
+        if (parsed.name === "@nekzus/liop-studio" && typeof parsed.version === "string") {
+          return parsed.version;
+        }
+      }
+      currentDir = path.dirname(currentDir);
+    }
+  } catch {
+  }
+  return "1.0.0-alpha.5";
+}
+var STUDIO_VERSION = getPackageVersion();
+
+// src/server/index.ts
+var __dirname2 = path2.dirname(fileURLToPath2(import.meta.url));
 function createStudioServer(options = {}) {
   if (!process4.env.LIOP_SUPPRESS_TLS_WARNING) {
     process4.env.LIOP_SUPPRESS_TLS_WARNING = "true";
   }
   const app = new Hono();
   const port = options.port || 16e3;
-  const distPath = options.distPath || path.resolve(__dirname, "../../ui/dist");
+  const distPath = options.distPath || path2.resolve(__dirname2, "../../ui/dist");
   let activeConfig = options.initialTarget || {
     type: "http",
     http: { url: process4.env.LIOP_MCP_URL || "http://127.0.0.1:15000/mcp" }
@@ -2053,7 +2097,7 @@ function createStudioServer(options = {}) {
     const isConnected = activeTransport.isConnected() && lastReport?.status === "online";
     return c.json({
       status: isConnected ? "healthy" : "offline",
-      version: "1.0.0",
+      version: STUDIO_VERSION,
       targetType: activeConfig.type,
       connected: isConnected
     });
@@ -2069,7 +2113,7 @@ function createStudioServer(options = {}) {
       connected: isConnected,
       toolsCount: isConnected ? lastReport?.totalTools || 0 : 0,
       latencyMs: isConnected ? lastReport?.latencyMs || 0 : 0,
-      version: "1.0.0",
+      version: STUDIO_VERSION,
       serverInfo: lastReport?.serverInfo
     });
   });
@@ -2247,6 +2291,7 @@ export {
   HttpTransport,
   MeshTransport,
   NetworkDiscoveryEngine,
+  STUDIO_VERSION,
   StdioTransport,
   createStudioServer,
   createTransport,