@qt4798/pi-web 0.10.5 → 0.10.6

package/.next/trace-build

@@ -1 +1 @@
-[{"name":"run-webpack","duration":57803718,"timestamp":601173715570,"id":14,"parentId":1,"tags":{},"startTime":1787227488514,"traceId":"c4e8cdc81c758c63"},{"name":"run-typescript","duration":6646529,"timestamp":601231520535,"id":996,"parentId":1,"tags":{},"startTime":1787227546317,"traceId":"c4e8cdc81c758c63"},{"name":"static-check","duration":1254069,"timestamp":601238187460,"id":999,"parentId":1,"tags":{},"startTime":1787227552983,"traceId":"c4e8cdc81c758c63"},{"name":"static-generation","duration":1941657,"timestamp":601239800716,"id":1177,"parentId":1,"tags":{},"startTime":1787227554597,"traceId":"c4e8cdc81c758c63"},{"name":"collect-build-traces","duration":17784999,"timestamp":601239443458,"id":1174,"parentId":1,"tags":{},"startTime":1787227554239,"traceId":"c4e8cdc81c758c63"},{"name":"output-standalone","duration":2229931,"timestamp":601257234824,"id":1185,"parentId":1,"tags":{},"startTime":1787227572030,"traceId":"c4e8cdc81c758c63"},{"name":"telemetry-flush","duration":14,"timestamp":601259466326,"id":1188,"parentId":1,"tags":{},"startTime":1787227574262,"traceId":"c4e8cdc81c758c63"},{"name":"next-build","duration":86277123,"timestamp":601173189221,"id":1,"tags":{"buildMode":"default","version":"16.2.12","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1787227487987,"traceId":"c4e8cdc81c758c63"}]
+[{"name":"run-webpack","duration":68112934,"timestamp":31817147685,"id":14,"parentId":1,"tags":{},"startTime":1787274921560,"traceId":"f10178ae678b2107"},{"name":"run-typescript","duration":13756892,"timestamp":31885263208,"id":1053,"parentId":1,"tags":{},"startTime":1787274989677,"traceId":"f10178ae678b2107"},{"name":"static-check","duration":3590039,"timestamp":31899050341,"id":1056,"parentId":1,"tags":{},"startTime":1787275003464,"traceId":"f10178ae678b2107"},{"name":"static-generation","duration":3514443,"timestamp":31903486412,"id":1234,"parentId":1,"tags":{},"startTime":1787275007900,"traceId":"f10178ae678b2107"},{"name":"collect-build-traces","duration":31283709,"timestamp":31902646163,"id":1231,"parentId":1,"tags":{},"startTime":1787275007060,"traceId":"f10178ae678b2107"},{"name":"output-standalone","duration":4038921,"timestamp":31933935674,"id":1242,"parentId":1,"tags":{},"startTime":1787275038350,"traceId":"f10178ae678b2107"},{"name":"telemetry-flush","duration":35,"timestamp":31937976617,"id":1245,"parentId":1,"tags":{},"startTime":1787275042391,"traceId":"f10178ae678b2107"},{"name":"next-build","duration":122263352,"timestamp":31815713305,"id":1,"tags":{"buildMode":"default","version":"16.2.12","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1787274920125,"traceId":"f10178ae678b2107"}]

package/README.md

@@ -98,6 +98,8 @@ PI_WEB_NO_OPEN=1 pi-web         # 后台服务不自动打开浏览器
 
 设置 `PI_WEB_PASSWORD` 后，所有网页接口和 API 端点都需要 HTTP Basic Auth 认证，用户名为 `pi`。不设或留空则禁用认证。
 
+> 当监听地址超出本机（如默认的 `0.0.0.0`）而未设置 `PI_WEB_PASSWORD` 时，`pi-web` 会**拒绝启动**——裸奔在局域网意味着网内任何设备都能读取会话并执行 agent 命令。可信内网确需免密时，设置 `PI_WEB_ALLOW_INSECURE_LAN=1` 显式豁免（风险自负）。
+
 > Basic Auth 不加密传输中的密码。请勿将纯 HTTP 直接暴露到公网，通过可信反向代理启用 HTTPS 或使用可信 VPN 进行远程访问。
 
 ### 从源码运行
@@ -215,6 +217,7 @@ node bin/pi-web.js -H 127.0.0.1 -p 30141 --no-open
 | 变量 | 用途 |
 | --- | --- |
 | `PI_WEB_PASSWORD` | 启用 Basic Auth；用户名固定为 `pi`。 |
+| `PI_WEB_ALLOW_INSECURE_LAN=1` | 非环回监听且未设密码时，豁免启动拒绝（仅限可信内网）。 |
 | `PI_WEB_ALLOWED_HOSTS` | 以逗号分隔的外部允许域名，例如 `piweb.example.com`。 |
 | `PI_CODING_AGENT_DIR` | 指向另一套 Pi 数据目录；默认使用 `~/.pi/agent`。 |
 | `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY` | 为服务端模型/API 请求设置代理。 |

package/bin/pi-web-options.js

@@ -9,6 +9,29 @@ function isEnabled(value) {
   return typeof value === "string" && TRUE_VALUES.has(value.trim().toLowerCase());
 }
 
+function isLoopbackHost(hostname) {
+  return hostname === "127.0.0.1" || hostname === "localhost" || hostname === "::1";
+}
+
+/**
+ * Decide how to handle a listener bound beyond loopback.
+ * Returns one of:
+ *  - "loopback"          : local-only, nothing to warn about
+ *  - "warn-plaintext"    : password set, but Basic Auth over HTTP is plaintext
+ *  - "warn-insecure-lan" : explicit PI_WEB_ALLOW_INSECURE_LAN=1 override
+ *  - "refuse"            : no password and no override — must not start
+ *
+ * An unauthenticated LAN listener hands every device on the network full read
+ * access to sessions/files plus same-origin write access (agent prompts, task
+ * shell commands), so "refuse" is the safe default.
+ */
+function assessLanExposure(hostname, env = process.env) {
+  if (isLoopbackHost(hostname)) return "loopback";
+  if (env.PI_WEB_PASSWORD) return "warn-plaintext";
+  if (isEnabled(env.PI_WEB_ALLOW_INSECURE_LAN)) return "warn-insecure-lan";
+  return "refuse";
+}
+
 function parseLaunchOptions(args = process.argv.slice(2), env = process.env) {
   const { values: cliArgs } = parseArgs({
     args,
@@ -33,4 +56,4 @@ function parseLaunchOptions(args = process.argv.slice(2), env = process.env) {
   };
 }
 
-module.exports = { parseLaunchOptions };
+module.exports = { parseLaunchOptions, assessLanExposure };

package/bin/pi-web.js

@@ -8,7 +8,7 @@ const path = require("path");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const fs = require("fs");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-const { parseLaunchOptions } = require("./pi-web-options");
+const { parseLaunchOptions, assessLanExposure } = require("./pi-web-options");
 
 // Apply the undici CVE fix (formerly a postinstall hook). Running it here —
 // before the pi agent's undici can be loaded — keeps installs quiet under
@@ -51,6 +51,20 @@ if (!fs.existsSync(nextDir)) {
   process.exit(1);
 }
 
+const lanExposure = assessLanExposure(hostname);
+if (lanExposure === "warn-plaintext") {
+  console.warn("Pi Web is exposed beyond loopback. HTTP Basic Auth does not encrypt credentials; use HTTPS or a trusted VPN.");
+} else if (lanExposure === "warn-insecure-lan") {
+  console.warn("Pi Web is exposed beyond loopback WITHOUT authentication (PI_WEB_ALLOW_INSECURE_LAN=1). Anyone on the network can run agent commands on this machine.");
+} else if (lanExposure === "refuse") {
+  // Hard fail: an unauthenticated listener on a LAN address hands every
+  // device on the network full read access to sessions/files plus
+  // same-origin write access (agent prompts, task shell commands).
+  console.error("Refusing to start: Pi Web is bound to " + hostname + " (beyond loopback) but PI_WEB_PASSWORD is not set.");
+  console.error("Set PI_WEB_PASSWORD to require HTTP Basic Auth, bind to 127.0.0.1 instead, or set PI_WEB_ALLOW_INSECURE_LAN=1 to override.");
+  process.exit(1);
+}
+
 const nextArgs = ["start", "-p", port, "-H", hostname];
 
 // Always run next's JS entry with node directly — avoids .bin symlink issues
@@ -61,14 +75,6 @@ const child = spawn(process.execPath, [nextBin, ...nextArgs], {
   env: { ...process.env, PI_WEB_HOSTNAME: hostname },
 });
 
-if (hostname !== "127.0.0.1" && hostname !== "localhost" && hostname !== "::1") {
-  if (process.env.PI_WEB_PASSWORD) {
-    console.warn("Pi Web is exposed beyond loopback. HTTP Basic Auth does not encrypt credentials; use HTTPS or a trusted VPN.");
-  } else {
-    console.warn("Pi Web is exposed beyond loopback without authentication. Use only on a trusted network.");
-  }
-}
-
 let browserOpened = false;
 const url = `http://${hostname}:${port}`;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qt4798/pi-web",
-  "version": "0.10.5",
+  "version": "0.10.6",
   "description": "Web workspace for the pi coding agent",
   "homepage": "https://github.com/t479842598/pi-web-QT#readme",
   "repository": {