artifacty 0.16.0 → 0.16.1

package/docs/ko/network-sharing.md

@@ -4,6 +4,23 @@
 
 # 네트워크 공유
 
+## IP 대역과 공유 링크
+
+**관리자 → 접근 관리 → 네트워크 접근**에서 허용할 IP 또는 CIDR을 한 줄에
+하나씩 입력합니다. 쉼표로 구분해도 됩니다. 비워두면 모든 주소를 허용합니다.
+현재 접속 IP를 포함해 저장한 뒤 120초 안에 확정하세요. 확정하지 않으면
+기한이 지난 후 다음 접근 시 이전 설정으로 돌아갑니다.
+
+**허용 IP 대역 밖에서도 공유 링크 열람 허용**은 기본적으로 꺼져 있습니다.
+켜면 허용 대역 밖에서도 유효한 공유 링크로 해당 아티팩트를 읽을 수 있습니다.
+예외는 공유 페이지와 해당 원본 콘텐츠에만 적용합니다. 대시보드·검색·API·MCP와
+일반 아티팩트 주소는 계속 제한합니다. 만료되거나 취소된 링크는 사용할 수
+없습니다. 비공개 모드에서는 별도의 비공개 모드 공유 허용 설정도 켜야 합니다.
+이 옵션도 IP 대역과 함께 저장하며, 같은 확정·되돌리기 절차를 따릅니다.
+
+접근 판단에는 전달 헤더가 아닌 직접 연결된 IP를 사용합니다. 리버스 프록시를
+거치면 프록시 IP를 보므로, 필요한 경우 프록시에서 클라이언트 IP를 제한하세요.
+
 Artifacty는 아티팩트를 로컬에 저장합니다. 기본적으로 서버는 한 컴퓨터에서 사용하도록 `127.0.0.1`에 바인딩합니다. 짧은 공유 세션을 위해 로컬 외부 주소에 바인딩할 수 있습니다. 이 경우 다른 컴퓨터에서도 서버에 접근할 수 있습니다.
 
 ## 권장 기본 설정

package/docs/network-sharing.md

@@ -44,6 +44,24 @@ Artifacty does not terminate TLS. Do not expose it directly on the public intern
 
 If Artifacty binds outside loopback, startup output warns that other machines can reach the server. The warning also states that Artifacty does not provide TLS. Background `serve` returns the warning in JSON. Foreground `serve` and `src/server.js` also write it to stderr.
 
+## IP ranges and shared links
+
+In **Administration → Access → Network access**, enter one allowed IP address
+or CIDR per line. Commas also work. An empty list allows all addresses. Include
+your current connection IP, save, then confirm within 120 seconds. Otherwise,
+the previous policy is restored on the next access after the deadline.
+
+**Allow shared links outside these IP ranges** is off by default. Enable it to
+let people outside the allowed ranges read an artifact through its valid shared
+link. Only the shared page and its raw content are exempt. The dashboard,
+search, API, MCP, and ordinary artifact URLs remain restricted. Expired or
+revoked links do not grant access. Private mode still requires the separate
+setting that permits shared links in private mode. Saving this option uses the
+same confirmation and rollback process as the IP ranges.
+
+Rules use the direct socket peer, not forwarded IP headers. With a reverse
+proxy, that peer is the proxy; enforce client IP ranges at the proxy when needed.
+
 ## Browser Write Behavior
 
 Remote browsers can read pages allowed by the current access mode and artifact permissions. To submit a browser form, the request origin must match the Artifacty host. For example, `Origin: http://10.0.0.50:8787` matches `Host: 10.0.0.50:8787`. Routes that change data reject cross-origin browser requests to reduce CSRF risk. For scripts and agents, use API or MCP writes with an explicit token header.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "artifacty",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Local artifact exchange for heterogeneous LLM agents via HTTP and MCP.",
   "type": "module",
   "keywords": [

package/src/lib/i18n.js

@@ -361,6 +361,8 @@ export const TRANSLATIONS = {
     "access.networkHelp": "Applies in both modes. Enter one IPv4 or IPv6 address or CIDR per line. Leave blank to allow all addresses. Uses the direct connection IP, not forwarded headers. The list must include your current address.",
     "access.currentIp": "Your connection IP",
     "access.allowedCidrs": "Allowed addresses and CIDRs",
+    "access.allowSharedLinks": "Allow shared links outside these IP ranges",
+    "access.sharedNetworkHelp": "Off by default. A valid shared link grants read-only access to that artifact. The dashboard and APIs stay restricted. Link expiry, revocation, and private-mode sharing rules still apply.",
     "access.saveNetwork": "Save network access",
 
     "access.title": "Access",
@@ -914,6 +916,8 @@ export const TRANSLATIONS = {
     "access.networkHelp": "두 모드 모두에 적용됩니다. IPv4 또는 IPv6 주소나 CIDR을 한 줄에 하나씩 입력하세요. 비워두면 모든 주소를 허용합니다. 전달 헤더 대신 직접 연결된 IP를 사용합니다. 현재 접속 주소를 반드시 포함해야 합니다.",
     "access.currentIp": "현재 접속 IP",
     "access.allowedCidrs": "허용할 주소 및 CIDR",
+    "access.allowSharedLinks": "허용 IP 대역 밖에서도 공유 링크 열람 허용",
+    "access.sharedNetworkHelp": "기본값은 꺼짐입니다. 유효한 공유 링크로 해당 아티팩트만 읽을 수 있습니다. 대시보드와 API는 계속 차단하며, 링크 만료·취소와 비공개 모드의 공유 제한은 그대로 적용합니다.",
     "access.saveNetwork": "네트워크 접근 저장",
 
     "access.title": "접근 관리",

package/src/lib/network-policy.js

@@ -87,10 +87,10 @@ export function isAddressAllowed(address, allowedCidrs = []) {
 
 function readPolicy(db) {
   const row = db.prepare("SELECT value FROM meta WHERE key = 'network_policy'").get();
-  if (!row) return { allowedCidrs: [] };
+  if (!row) return { allowedCidrs: [], allowSharedLinks: false };
   const policy = JSON.parse(row.value);
   if (!policy || !Object.hasOwn(policy, "allowedCidrs")) throw policyError("Stored network policy is invalid.");
-  return { allowedCidrs: normalizeAllowedNetworks(policy.allowedCidrs) };
+  return validatePolicy(policy);
 }
 
 function readPending(db) {
@@ -99,7 +99,7 @@ function readPending(db) {
 }
 
 function publicPending(pending) {
-  return pending ? { id: pending.id, expiresAt: pending.expiresAt, allowedCidrs: pending.allowedCidrs } : null;
+  return pending ? { id: pending.id, expiresAt: pending.expiresAt, allowedCidrs: pending.allowedCidrs, allowSharedLinks: pending.allowSharedLinks === true } : null;
 }
 
 function writePolicy(db, policy, action, audit, metadata = {}) {
@@ -124,7 +124,8 @@ function requireAdmin(db, access) {
 
 function validatePolicy(policy, remoteAddress) {
   if (!policy || !Object.hasOwn(policy, "allowedCidrs")) throw policyError("Allowed networks are required.");
-  const normalized = { allowedCidrs: normalizeAllowedNetworks(policy.allowedCidrs) };
+  if (policy.allowSharedLinks !== undefined && typeof policy.allowSharedLinks !== "boolean") throw policyError("Shared-link access must be a boolean.");
+  const normalized = { allowedCidrs: normalizeAllowedNetworks(policy.allowedCidrs), allowSharedLinks: policy.allowSharedLinks === true };
   if (remoteAddress !== undefined && !isAddressAllowed(remoteAddress, normalized.allowedCidrs)) {
     throw policyError("Allowed networks must include your current IP address.", "NETWORK_POLICY_LOCKOUT");
   }
@@ -189,7 +190,7 @@ export function stageNetworkPolicy(store = createStore(), policy = {}, { access,
       const normalized = validatePolicy(policy, remoteAddress);
       const pending = {
         id: randomUUID(), expiresAt: new Date(Date.now() + timeoutMs).toISOString(),
-        allowedCidrs: normalized.allowedCidrs, previousPolicy: readPolicy(db)
+        allowedCidrs: normalized.allowedCidrs, allowSharedLinks: normalized.allowSharedLinks, previousPolicy: readPolicy(db)
       };
       db.prepare("INSERT INTO meta (key, value) VALUES ('network_policy_pending', ?)").run(JSON.stringify(pending));
       writePolicy(db, normalized, "network-policy-stage", { ...audit, actor: audit.actor || access.userId }, { pendingId: pending.id, expiresAt: pending.expiresAt });
@@ -211,7 +212,7 @@ function finishPending(store, id, { access, audit = {}, remoteAddress } = {}, co
       if (confirm && (!parseAddress(remoteAddress) || !isAddressAllowed(remoteAddress, pending.allowedCidrs))) {
         throw policyError("Confirmation requires access from an allowed IP address.", "IP_NOT_ALLOWED", 403);
       }
-      const policy = confirm ? { allowedCidrs: pending.allowedCidrs } : pending.previousPolicy;
+      const policy = validatePolicy(confirm ? { allowedCidrs: pending.allowedCidrs, allowSharedLinks: pending.allowSharedLinks } : pending.previousPolicy);
       writePolicy(db, policy, confirm ? "network-policy-confirm" : "network-policy-rollback", { ...audit, actor: audit.actor || access.userId }, { pendingId: pending.id });
       db.prepare("DELETE FROM meta WHERE key = 'network_policy_pending'").run();
       return policy;

package/src/lib/render.js

@@ -900,6 +900,8 @@ export function renderAdminAccessPage({ baseUrl, user, mode, teams = [], users =
           <p>${view.text("access.currentIp")}: <code>${escapeHtml(currentIp)}</code></p>
           <form class="editor-form" method="post" action="/admin/access/network">${localeInput(view.locale)}
             <label class="field"><span>${view.text("access.allowedCidrs")}</span><textarea name="allowedCidrs" rows="5" class="form-control">${escapeHtml((networkPolicy.allowedCidrs || []).join("\n"))}</textarea></label>
+            <label><input type="checkbox" name="allowSharedLinks" value="true"${networkPolicy.allowSharedLinks ? " checked" : ""} class="form-check-input" aria-describedby="shared-network-help"> ${view.text("access.allowSharedLinks")}</label>
+            <p id="shared-network-help" class="muted">${view.text("access.sharedNetworkHelp")}</p>
             <button type="submit" class="btn btn-primary">${view.text("access.saveNetwork")}</button>
           </form>
         </section>

package/src/server.js

@@ -325,14 +325,22 @@ function isBrowserPath(pathname) {
 
 export async function handleRequest(args) {
   const { request, store } = args;
-  await assertNetworkAccess(store, request.socket.remoteAddress);
+  let networkSharedArtifact;
+  try { assertNetworkAccess(store, request.socket.remoteAddress); }
+  catch (cause) {
+    const match = /^\/s\/([A-Za-z0-9_-]{43})(?:\/raw)?$/.exec(new URL(request.url, "http://artifacty.local").pathname);
+    if (cause.code !== "IP_NOT_ALLOWED" || !["GET", "HEAD"].includes(request.method) || !match || !getNetworkPolicy(store).allowSharedLinks) throw cause;
+    // Authenticate the capability before admitting an otherwise blocked peer.
+    networkSharedArtifact = await resolveShareLink(store, match[1]);
+  }
+  args = { ...args, networkSharedArtifact };
   const pathname = decodeURIComponent(new URL(request.url, "http://artifacty.local").pathname);
   if (!isBrowserPath(pathname)) return handleScopedRequest(args);
   const settings = await getLanguageSettings(store);
   return runWithLanguageSettings(settings, () => handleScopedRequest(args));
 }
 
-async function handleScopedRequest({ request, response, store, host, port, security = securityConfig(), mcpHttp = false, webUpdater, smtpSender = sendSmtpMail }) {
+async function handleScopedRequest({ request, response, store, host, port, security = securityConfig(), mcpHttp = false, webUpdater, smtpSender = sendSmtpMail, networkSharedArtifact }) {
   const url = new URL(request.url, `http://${request.headers.host || `${host}:${port}`}`);
   const pathname = decodeURIComponent(url.pathname);
   const baseUrl = `http://${host}:${port}`;
@@ -381,7 +389,7 @@ async function handleScopedRequest({ request, response, store, host, port, secur
 
   const publicShareMatch = /^\/s\/([^/]+)(\/raw)?$/.exec(pathname);
   if (publicShareMatch && method === "GET") {
-    const shared = await resolveShareLink(store, publicShareMatch[1]);
+    const shared = networkSharedArtifact || await resolveShareLink(store, publicShareMatch[1]);
     response.setHeader("referrer-policy", "no-referrer");
     response.setHeader("cache-control", "no-store");
     if (publicShareMatch[2]) {
@@ -729,7 +737,7 @@ async function handleScopedRequest({ request, response, store, host, port, secur
       } else if (pathname === "/admin/access") {
         await setAccessMode(store, body.mode, options);
       } else if (pathname === "/admin/access/network") {
-        await stageNetworkPolicy(store, { allowedCidrs: body.allowedCidrs || "" }, options);
+        await stageNetworkPolicy(store, { allowedCidrs: body.allowedCidrs || "", allowSharedLinks: body.allowSharedLinks === "true" || body.allowSharedLinks === "on" }, options);
       } else if (pathname === "/admin/access/network/confirm") {
         await confirmNetworkPolicy(store, body.id, options);
       } else if (pathname === "/admin/access/network/rollback") {