@node9/proxy 2.14.2 → 2.15.0

package/dist/dashboard.mjs

@@ -1,7 +1,12 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -4660,6 +4665,51 @@ var init_trusted_hosts = __esm({
   }
 });
 
+// src/auth/api-url.ts
+function defaultHostSuffixes() {
+  const host = new URL(DEFAULT_API_URL).hostname.toLowerCase();
+  const parent = host.split(".").slice(1).join(".");
+  return parent.includes(".") ? [host, parent] : [host];
+}
+function allowedSuffixes() {
+  const extra = (process.env[HOST_ALLOW_ENV] ?? "").split(",").map(
+    (s) => s.trim().toLowerCase().replace(/^\*?\./, "")
+  ).filter(Boolean);
+  return [...defaultHostSuffixes(), ...extra];
+}
+function validateApiUrl(raw) {
+  if (typeof raw !== "string" || raw.length === 0 || raw.length > 2048) return null;
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (u.username || u.password) return null;
+  if (u.protocol !== "https:" && u.protocol !== "http:") return null;
+  const host = u.hostname.toLowerCase();
+  if (LOOPBACK.has(host)) return u;
+  if (u.protocol !== "https:") return null;
+  const suffixes = allowedSuffixes();
+  const ok = suffixes.some((s) => host === s || host.endsWith("." + s));
+  return ok ? u : null;
+}
+function safeApiUrl(raw, onReject) {
+  const ok = validateApiUrl(raw);
+  if (ok) return typeof raw === "string" ? raw : ok.toString();
+  onReject?.(raw);
+  return DEFAULT_API_URL;
+}
+var DEFAULT_API_URL, LOOPBACK, HOST_ALLOW_ENV;
+var init_api_url = __esm({
+  "src/auth/api-url.ts"() {
+    "use strict";
+    DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
+    LOOPBACK = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "::1", "[::1]", "0.0.0.0"]);
+    HOST_ALLOW_ENV = "NODE9_API_HOST_ALLOW";
+  }
+});
+
 // src/config/index.ts
 import fs6 from "fs";
 import path7 from "path";
@@ -4678,12 +4728,26 @@ function sanitizeSsrfAllow(entries, source) {
   }
   return kept;
 }
+function noteRejectedApiUrl(raw) {
+  const key = String(raw).slice(0, 200);
+  if (rejectedApiUrlsSeen.has(key)) return;
+  rejectedApiUrlsSeen.add(key);
+  try {
+    fs6.appendFileSync(
+      path7.join(os7.homedir(), ".node9", "hook-debug.log"),
+      `[${(/* @__PURE__ */ new Date()).toISOString()}] REFUSED apiUrl, using the default instead: ${String(raw).slice(0, 200).replace(/[\r\n]+/g, " ")}
+`
+    );
+  } catch {
+  }
+}
 function getCredentials() {
-  const DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
   if (process.env.NODE9_API_KEY) {
     return {
       apiKey: process.env.NODE9_API_KEY,
-      apiUrl: process.env.NODE9_API_URL || DEFAULT_API_URL
+      // NODE9_API_URL is env, and a hook inherits the agent's env, so it is
+      // no more trusted than the file below.
+      apiUrl: safeApiUrl(process.env.NODE9_API_URL || DEFAULT_API_URL, noteRejectedApiUrl)
     };
   }
   try {
@@ -4695,14 +4759,14 @@ function getCredentials() {
       if (profile?.apiKey) {
         return {
           apiKey: profile.apiKey,
-          apiUrl: profile.apiUrl || DEFAULT_API_URL,
+          apiUrl: safeApiUrl(profile.apiUrl || DEFAULT_API_URL, noteRejectedApiUrl),
           localOnly: profile.localOnly === true || profileName !== "default"
         };
       }
       if (creds.apiKey) {
         return {
           apiKey: creds.apiKey,
-          apiUrl: creds.apiUrl || DEFAULT_API_URL,
+          apiUrl: safeApiUrl(creds.apiUrl || DEFAULT_API_URL, noteRejectedApiUrl),
           localOnly: creds.localOnly === true
         };
       }
@@ -5332,7 +5396,7 @@ ${error.replace("Invalid config:\n", "")}
   }
   return sanitized;
 }
-var DANGEROUS_WORDS, DEFAULT_CONFIG, RM_SAFE_PATH_PATTERN, VERDICT_ORDER, ADVISORY_SMART_RULES, cachedConfig, lastParsedRulesCache, CACHE_LOG_REARM_MS, cacheReadLastLoggedAt;
+var DANGEROUS_WORDS, DEFAULT_CONFIG, RM_SAFE_PATH_PATTERN, VERDICT_ORDER, ADVISORY_SMART_RULES, cachedConfig, rejectedApiUrlsSeen, lastParsedRulesCache, CACHE_LOG_REARM_MS, cacheReadLastLoggedAt;
 var init_config = __esm({
   "src/config/index.ts"() {
     "use strict";
@@ -5343,6 +5407,7 @@ var init_config = __esm({
     init_trusted_hosts();
     init_dist();
     init_dist();
+    init_api_url();
     DANGEROUS_WORDS = [
       "mkfs",
       // formats/wipes a filesystem partition
@@ -5616,6 +5681,7 @@ var init_config = __esm({
       }
     ];
     cachedConfig = null;
+    rejectedApiUrlsSeen = /* @__PURE__ */ new Set();
     lastParsedRulesCache = null;
     CACHE_LOG_REARM_MS = 5 * 60 * 1e3;
     cacheReadLastLoggedAt = 0;
@@ -6615,6 +6681,13 @@ var init_setup_pi_shim = __esm({
   }
 });
 
+// src/utils/atomic-write.ts
+var init_atomic_write = __esm({
+  "src/utils/atomic-write.ts"() {
+    "use strict";
+  }
+});
+
 // src/setup.ts
 import chalk3 from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
@@ -6627,6 +6700,7 @@ var init_setup = __esm({
     init_hook_baseline();
     init_setup_opencode_shim();
     init_setup_pi_shim();
+    init_atomic_write();
   }
 });
 
@@ -6651,6 +6725,7 @@ var init_scan_json = __esm({
 var init_scan_history = __esm({
   "src/cli/render/scan-history.ts"() {
     "use strict";
+    init_atomic_write();
   }
 });