codex-copilot-dx 0.4.17 → 0.4.18

package/README.md

@@ -83,8 +83,9 @@ Environment variables:
 
 | Variable | Default | Description |
 |----------|---------|-------------|
-| `ADAPTER_HOST` | `127.0.0.1` | Host for the adapter; set `0.0.0.0` only if you knowingly expose it on a trusted network |
+| `ADAPTER_HOST` | `127.0.0.1` | Host for the adapter; only loopback hosts are allowed by default |
 | `ADAPTER_PORT` | `2026` | Port for the adapter |
+| `CCDX_ALLOW_LAN` | unset | Set to `1` to allow non-loopback `ADAPTER_HOST` values such as `0.0.0.0`; exposes your Copilot-backed adapter beyond this machine |
 | `CCDX_MAX_BODY_BYTES` | `134217728` | Maximum compressed/raw request body size |
 | `CCDX_MAX_DECODED_BODY_BYTES` | `268435456` | Maximum decoded request body size after decompression |
 | `CCDX_UPSTREAM_TIMEOUT_MS` | `120000` | Timeout for non-streaming upstream Copilot requests |

package/bin/cli.mjs

@@ -12,6 +12,7 @@ import { printUsageSummary } from "../src/usage.mjs";
 import { checkForUpdate, localPackageVersion } from "../src/version.mjs";
 import { runDoctor } from "../src/doctor.mjs";
 import { checkRunningAdapter } from "../src/running-adapter.mjs";
+import { assertSafeAdapterHost, isLoopbackHost } from "../src/security.mjs";
 
 const ADAPTER_PORT = parseInt(process.env.ADAPTER_PORT || "2026");
 const ADAPTER_HOST = process.env.ADAPTER_HOST || "127.0.0.1";
@@ -21,10 +22,6 @@ const LOCAL_VERSION = localPackageVersion();
 const command = process.argv[2];
 const CONFIGURE_CLAUDE_DESKTOP = command === "--configure-claude-desktop" || process.env.CCDX_CONFIGURE_CLAUDE_DESKTOP === "1";
 
-function isLoopbackHost(host) {
-  return ["127.0.0.1", "localhost", "::1"].includes(String(host).toLowerCase());
-}
-
 async function refreshClaudeDesktopModelDefs() {
   if (parseModelAliasEnv(process.env.CCDX_CLAUDE_MODEL_ALIASES).length) {
     console.log(status("info", "Using CCDX_CLAUDE_MODEL_ALIASES for Claude models"));
@@ -128,6 +125,7 @@ checkForUpdate({ currentVersion: LOCAL_VERSION }).then(({ latestVersion, updateA
 });
 
 try {
+  assertSafeAdapterHost(ADAPTER_HOST, process.env);
   if (await reuseRunningAdapterIfAvailable()) process.exit(0);
 
   // Ensure GitHub login, using device flow if no token exists.
@@ -138,7 +136,7 @@ try {
   const claudeDesktopModelDefs = await refreshClaudeDesktopModelDefs();
 
   if (!isLoopbackHost(ADAPTER_HOST)) {
-    console.log(status("warn", `ADAPTER_HOST=${ADAPTER_HOST} exposes the adapter beyond loopback. Use only on trusted networks.`));
+    console.log(status("warn", `ADAPTER_HOST=${ADAPTER_HOST} exposes the adapter beyond loopback because CCDX_ALLOW_LAN=1 is set. Use only on trusted networks.`));
   }
 
   const claudeDesktopApiKey = CONFIGURE_CLAUDE_DESKTOP

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-copilot-dx",
-  "version": "0.4.17",
+  "version": "0.4.18",
   "description": "Use Codex Desktop, Claude Code, and Claude App with GitHub Copilot",
   "type": "module",
   "bin": {

package/src/security.mjs

@@ -0,0 +1,13 @@
+export function isLoopbackHost(host) {
+  const normalized = String(host || "").toLowerCase().replace(/^\[(.*)\]$/, "$1");
+  return ["127.0.0.1", "localhost", "::1"].includes(normalized);
+}
+
+export function isLanAllowed(env = process.env) {
+  return ["1", "true", "yes"].includes(String(env.CCDX_ALLOW_LAN || "").toLowerCase());
+}
+
+export function assertSafeAdapterHost(host = "127.0.0.1", env = process.env) {
+  if (isLoopbackHost(host) || isLanAllowed(env)) return;
+  throw new Error(`Refusing to bind ADAPTER_HOST=${host} beyond loopback without CCDX_ALLOW_LAN=1. This adapter carries your GitHub Copilot access.`);
+}