devchain-cli 0.12.2 → 0.12.4

package/README.md

@@ -89,6 +89,9 @@ devchain start --project /path/to/your/project
 # Run in foreground with logs
 devchain start --foreground
 
+# Bind to all interfaces for VM/remote browser access (prints loud security warning)
+devchain start --host 0.0.0.0
+
 # Stop the server
 devchain stop
 ```
@@ -108,6 +111,7 @@ On first run, import a template from the project page to provision your agent te
 | Option | Description |
 |--------|-------------|
 | `-p, --port <number>` | Port to run on (default: 3000 or next available) |
+| `--host <address>` | Bind address (default: `127.0.0.1`; use `0.0.0.0` for remote/VM access — see [docs/setup.md](docs/setup.md)) |
 | `-f, --foreground` | Run in foreground with visible logs |
 | `--no-open` | Don't open browser automatically |
 | `--db <path>` | Custom database directory path |

package/dist/cli.js

@@ -62,6 +62,87 @@ function isNewerVersion(latest, current) {
   return false;
 }
 
+// ── Host normalization + URL builder helpers ──────────────────────────────────
+
+function normalizeHost(input) {
+  const raw = input ?? '';
+
+  // Check for control characters before trimming (trim strips \n, \t, etc.)
+  for (let i = 0; i < raw.length; i++) {
+    const code = raw.charCodeAt(i);
+    if (code < 0x20 || code === 0x7f) {
+      throw new Error(`Invalid host: contains control characters`);
+    }
+  }
+
+  const trimmed = raw.trim();
+  if (!trimmed) return '127.0.0.1';
+
+  if (/^https?:\/\//i.test(trimmed)) {
+    throw new Error(`Invalid host "${trimmed}": pass a hostname or IP, not a URL`);
+  }
+
+  if (trimmed === '*') {
+    throw new Error(
+      'Invalid host "*": use 0.0.0.0 for all IPv4 interfaces or :: for all IPv6 interfaces',
+    );
+  }
+
+  if (/^\[.*\]$/.test(trimmed)) {
+    const inner = trimmed.slice(1, -1);
+    throw new Error(`Invalid host "${trimmed}": drop the brackets — use ${inner}`);
+  }
+
+  // Distinguish IPv6 from host:port — IPv6 has 2+ colons or starts with : or contains ::
+  const colonCount = (trimmed.match(/:/g) || []).length;
+  const looksLikeIpv6 = colonCount >= 2 || trimmed.startsWith(':') || trimmed.includes('::');
+
+  if (!looksLikeIpv6 && colonCount === 1) {
+    throw new Error(
+      `Invalid host "${trimmed}": looks like host:port — pass only the host part`,
+    );
+  }
+
+  return trimmed;
+}
+
+function isWildcardHost(host) {
+  return host === '0.0.0.0' || host === '::';
+}
+
+function isNonLoopbackHost(host) {
+  if (isWildcardHost(host)) return true;
+  const lower = host.toLowerCase();
+  return lower !== '127.0.0.1' && lower !== '::1' && lower !== 'localhost';
+}
+
+function connectableHost(host) {
+  if (host === '0.0.0.0') return '127.0.0.1';
+  if (host === '::') return '::1';
+  return host;
+}
+
+function formatHostForUrl(host) {
+  if (/^\[.*\]$/.test(host)) {
+    throw new Error(`formatHostForUrl received already-bracketed input: ${host}`);
+  }
+  // IPv6 detection: contains colon(s)
+  if (host.includes(':')) return `[${host}]`;
+  return host;
+}
+
+function buildInternalBaseUrl({ host, port }) {
+  return `http://${formatHostForUrl(connectableHost(host))}:${port}`;
+}
+
+function buildDisplayUrls({ host, port }) {
+  return {
+    primary: buildInternalBaseUrl({ host, port }),
+  };
+}
+
+// ── End host helpers ──────────────────────────────────────────────────────────
+
 function getChangelogBetweenVersions(changelog, fromVersion, toVersion) {
   if (!changelog || typeof changelog !== 'object') return [];
 
@@ -486,7 +567,7 @@ function resolveDevchainApiBaseUrlForRestart({
     );
   }
 
-  return `http://127.0.0.1:${port}`;
+  return buildInternalBaseUrl({ host: pidData.host || '127.0.0.1', port });
 }
 
 function normalizeWorktreeListPayload(payload) {
@@ -956,9 +1037,9 @@ function getPidFilePath() {
   return join(devchainDir, 'devchain.pid');
 }
 
-function writePidFile(port) {
+function writePidFile(port, host) {
   const pidFile = getPidFilePath();
-  const data = JSON.stringify({ pid: process.pid, port, timestamp: Date.now() });
+  const data = JSON.stringify({ pid: process.pid, port, host: host || '127.0.0.1', timestamp: Date.now() });
   writeFileSync(pidFile, data, 'utf8');
 }
 
@@ -969,7 +1050,9 @@ function readPidFile() {
   }
   try {
     const data = readFileSync(pidFile, 'utf8');
-    return JSON.parse(data);
+    const parsed = JSON.parse(data);
+    if (parsed && !parsed.host) parsed.host = '127.0.0.1';
+    return parsed;
   } catch {
     return null;
   }
@@ -1287,6 +1370,7 @@ async function main(argv) {
     .command('start [args...]')
     .description('Start the Devchain local app')
     .option('-p, --port <number>', 'Port to listen on (default: 3000 or next free)')
+    .option('--host <address>', 'Host/bind address (default: 127.0.0.1; use 0.0.0.0 for all IPv4 interfaces, :: for all IPv6)')
     .option('-f, --foreground', 'Run in foreground (attached to terminal). Shows startup output with colors and spinners.')
     .option('-d, --detach', 'Run in background as a detached process (default). Use "devchain stop" to stop it.')
     .option('--no-open', 'Do not open a browser window')
@@ -1337,7 +1421,7 @@ async function main(argv) {
         const existingPid = readPidFile();
         if (existingPid && isProcessRunning(existingPid.pid)) {
           console.error(`Devchain is already running (PID ${existingPid.pid}, port ${existingPid.port})`);
-          console.error(`Access it at: http://127.0.0.1:${existingPid.port}`);
+          console.error(`Access it at: ${buildDisplayUrls({ host: existingPid.host || '127.0.0.1', port: existingPid.port }).primary}`);
           console.error('Use "devchain stop" to stop it first.');
           process.exit(1);
         }
@@ -1435,6 +1519,35 @@ async function main(argv) {
         port = await getPort({ port: preferPort });
       }
 
+      // Resolve effective host before detach so child inherits normalized HOST env.
+      // The --host flag also flows through childArgs (detach filter only strips --port
+      // and --detach), so the child receives the effective host via two independent paths.
+      let effectiveHost;
+      try {
+        effectiveHost = normalizeHost(opts.host ?? process.env.HOST ?? '');
+      } catch (e) {
+        console.error(e.message);
+        process.exit(1);
+      }
+      process.env.HOST = effectiveHost;
+
+      // Security warning for non-loopback bind (before detach so parent terminal sees it)
+      if (!worktreeRuntimeMode && isNonLoopbackHost(effectiveHost)) {
+        console.error('');
+        console.error(`⚠  DevChain is binding to ${effectiveHost}. There is no remote authentication`);
+        console.error('   boundary; the API, terminals, MCP, and project files are exposed');
+        console.error('   to anyone who can reach this address. Use only on a trusted');
+        console.error('   network, VPN, or behind firewall rules.');
+        if (opts.dev) {
+          console.error('');
+          console.error('   Note: --dev mode runs the UI on a separate Vite dev server bound to');
+          console.error('   127.0.0.1 only. Remote access affects the API server only. For full');
+          console.error('   remote access including the UI dev server, use production mode');
+          console.error('   (no --dev flag).');
+        }
+        console.error('');
+      }
+
       // === DETACH POINT ===
       // All interactive prompts are done. Now spawn the detached child if needed.
       if (shouldDetach) {
@@ -1473,9 +1586,8 @@ async function main(argv) {
         process.exit(0);
       }
 
-      // Apply env before requiring the server
+      // Apply env before requiring the server (HOST already set pre-detach)
       process.env.PORT = String(port);
-      process.env.HOST = process.env.HOST || '127.0.0.1';
       process.env.NODE_ENV = process.env.NODE_ENV || 'production';
       const dbEnv = parseDbPath(opts.db);
       if (dbEnv.DB_PATH) process.env.DB_PATH = dbEnv.DB_PATH;
@@ -1505,20 +1617,36 @@ async function main(argv) {
         cli.info('Starting API (dev mode)...');
         cli.blank();
 
-        // Helper to kill process group (all children)
-        const killProcessGroup = (proc) => {
+        // Signal entire process group (all children). On Unix, a negative PID
+        // targets the PG; on Windows we fall back to signalling the child directly.
+        const signalProcessGroup = (proc, signal) => {
           if (!proc || !proc.pid) return;
           try {
-            // On Unix, negative PID kills the entire process group
             if (platform() !== 'win32') {
-              process.kill(-proc.pid, 'SIGTERM');
+              process.kill(-proc.pid, signal);
             } else {
-              proc.kill('SIGTERM');
+              proc.kill(signal);
             }
           } catch (e) {
             // Process may already be dead
           }
         };
+        const killProcessGroup = (proc) => signalProcessGroup(proc, 'SIGTERM');
+
+        // Resolve when the child process emits 'exit' (or immediately if it
+        // already exited). Lets cleanup await actual termination.
+        const waitForExit = (proc) => new Promise((resolve) => {
+          if (!proc || proc.exitCode !== null || proc.signalCode !== null) {
+            resolve();
+            return;
+          }
+          proc.once('exit', () => resolve());
+        });
+
+        const waitWithTimeout = (promise, ms) => Promise.race([
+          promise,
+          new Promise((resolve) => setTimeout(resolve, ms)),
+        ]);
 
         // Spawn NestJS in watch mode (detached to create process group)
         const devSpawnConfig = getDevModeSpawnConfig({
@@ -1534,10 +1662,11 @@ async function main(argv) {
           detached: platform() !== 'win32', // Create process group on Unix
         });
 
-        const baseUrl = `http://${process.env.HOST}:${port}`;
+        const internalBaseUrl = buildInternalBaseUrl({ host: effectiveHost, port });
+        const displayUrl = buildDisplayUrls({ host: effectiveHost, port }).primary;
 
         // Wait for API to be ready (longer timeout for dev mode compilation)
-        const ready = await waitForHealth(`${baseUrl}/health`, { timeoutMs: 60000 });
+        const ready = await waitForHealth(`${internalBaseUrl}/health`, { timeoutMs: 60000 });
         if (!ready) {
           cli.error('API did not become ready in time');
           killProcessGroup(nestProcess);
@@ -1545,8 +1674,8 @@ async function main(argv) {
         }
 
         cli.blank();
-        cli.success(`API ready at ${baseUrl}`);
-        cli.info(`API docs: ${baseUrl}/api/docs`);
+        cli.success(`API ready at ${displayUrl}`);
+        cli.info(`API docs: ${displayUrl}/api/docs`);
 
         // Ensure provider rows exist
         if (
@@ -1554,7 +1683,7 @@ async function main(argv) {
           && opts.__providersDetected
           && opts.__providersDetected.size > 0
         ) {
-          await ensureProvidersInDb(baseUrl, opts.__providersDetected, log);
+          await ensureProvidersInDb(internalBaseUrl, opts.__providersDetected, log);
         }
 
         // Determine startup path for MCP validation
@@ -1564,7 +1693,7 @@ async function main(argv) {
 
         // Validate MCP for all providers
         if (!worktreeRuntimeMode) {
-          await validateMcpForProviders(baseUrl, cli, opts, log, startupPath);
+          await validateMcpForProviders(internalBaseUrl, cli, opts, log, startupPath);
         }
 
         // Note: Claude bypass prompt already handled before server start
@@ -1585,19 +1714,49 @@ async function main(argv) {
         cli.blank();
         cli.success('Development servers running');
         cli.info(`${devUiConfig.logLabel}: ${devUiConfig.url}`);
-        cli.info(`API: ${baseUrl}`);
+        cli.info(`API: ${displayUrl}`);
         cli.blank();
 
         // Write PID file for top-level runtime only
         if (!worktreeRuntimeMode) {
-          writePidFile(port);
+          writePidFile(port, effectiveHost);
         }
 
-        // Handle cleanup on exit - kill entire process groups
-        const cleanup = () => {
+        // Handle cleanup on exit - kill entire process groups, then wait for
+        // children to actually exit before removing the PID file and exiting.
+        // Re-entrancy: a second Ctrl+C escalates to SIGKILL immediately instead
+        // of waiting again.
+        let cleanupStarted = false;
+        const SIGTERM_GRACE_MS = 5000;
+        const SIGKILL_GRACE_MS = 2000;
+        const cleanup = async () => {
+          if (cleanupStarted) {
+            // Second signal: stop being polite
+            signalProcessGroup(nestProcess, 'SIGKILL');
+            signalProcessGroup(viteProcess, 'SIGKILL');
+            return;
+          }
+          cleanupStarted = true;
           console.log('\nShutting down development servers...');
+
+          const nestExited = waitForExit(nestProcess);
+          const viteExited = waitForExit(viteProcess);
+
           killProcessGroup(nestProcess);
           killProcessGroup(viteProcess);
+
+          await waitWithTimeout(Promise.all([nestExited, viteExited]), SIGTERM_GRACE_MS);
+
+          // Anything still alive after the grace period gets SIGKILL.
+          const stillAlive = [nestProcess, viteProcess].filter(
+            (p) => p && p.exitCode === null && p.signalCode === null,
+          );
+          if (stillAlive.length > 0) {
+            console.log(`Forcing shutdown of ${stillAlive.length} unresponsive process(es)...`);
+            for (const p of stillAlive) signalProcessGroup(p, 'SIGKILL');
+            await waitWithTimeout(Promise.all([nestExited, viteExited]), SIGKILL_GRACE_MS);
+          }
+
           if (!worktreeRuntimeMode) {
             removePidFile();
           }
@@ -1640,10 +1799,11 @@ async function main(argv) {
       // eslint-disable-next-line @typescript-eslint/no-var-requires
       require(serverEntry);
 
-      const baseUrl = `http://${process.env.HOST}:${port}`;
-      const ready = await waitForHealth(`${baseUrl}/health`);
+      const internalBaseUrl = buildInternalBaseUrl({ host: effectiveHost, port });
+      const displayUrl = buildDisplayUrls({ host: effectiveHost, port }).primary;
+      const ready = await waitForHealth(`${internalBaseUrl}/health`);
       if (!ready) {
-        log('error', 'Server did not become ready in time', { url: baseUrl });
+        log('error', 'Server did not become ready in time', { url: internalBaseUrl });
         if (spinner) {
           spinner.stop('✗ timeout');
           cli.blank();
@@ -1656,15 +1816,15 @@ async function main(argv) {
       }
 
       if (opts.foreground) {
-        log('info', `Devchain is running at ${baseUrl}`);
-        log('info', `API docs: ${baseUrl}/api/docs`);
-        console.log(`\nDevchain is running at ${baseUrl}`);
-        console.log(`API docs: ${baseUrl}/api/docs`);
+        log('info', `Devchain is running at ${displayUrl}`);
+        log('info', `API docs: ${displayUrl}/api/docs`);
+        console.log(`\nDevchain is running at ${displayUrl}`);
+        console.log(`API docs: ${displayUrl}/api/docs`);
         console.log('Press Ctrl+C to stop.\n');
       } else {
         cli.blank();
-        cli.success(`Server ready at ${baseUrl}`);
-        cli.info(`API docs: ${baseUrl}/api/docs`);
+        cli.success(`Server ready at ${displayUrl}`);
+        cli.info(`API docs: ${displayUrl}/api/docs`);
       }
 
       // Ensure provider rows exist (idempotent) before opening UI
@@ -1673,7 +1833,7 @@ async function main(argv) {
         && opts.__providersDetected
         && opts.__providersDetected.size > 0
       ) {
-        await ensureProvidersInDb(baseUrl, opts.__providersDetected, log);
+        await ensureProvidersInDb(internalBaseUrl, opts.__providersDetected, log);
       }
 
       // Determine startup path for MCP validation and URL
@@ -1683,19 +1843,19 @@ async function main(argv) {
 
       // Validate MCP for all providers (with project context)
       if (!worktreeRuntimeMode) {
-        await validateMcpForProviders(baseUrl, cli, opts, log, startupPath);
+        await validateMcpForProviders(internalBaseUrl, cli, opts, log, startupPath);
       }
 
       // Note: Claude bypass prompt already handled before server start (in parent process for detach mode)
 
       // Determine URL to open based on project path
-      let urlToOpen = baseUrl;
+      let urlToOpen = displayUrl;
       try {
-        const byPathUrl = `${baseUrl}/api/projects/by-path?path=${encodeURIComponent(startupPath)}`;
+        const byPathUrl = `${internalBaseUrl}/api/projects/by-path?path=${encodeURIComponent(startupPath)}`;
         const resByPath = await fetchWithTimeout(byPathUrl, {}, 2500);
         if (resByPath.ok) {
           const project = await resByPath.json();
-          urlToOpen = `${baseUrl}/projects?projectId=${encodeURIComponent(project.id)}`;
+          urlToOpen = `${displayUrl}/projects?projectId=${encodeURIComponent(project.id)}`;
           if (opts.foreground) {
             log('info', 'Resolved startup path to existing project', { startupPath, projectId: project.id });
           } else if (opts.open) {
@@ -1703,7 +1863,7 @@ async function main(argv) {
           }
         } else {
           // 404 or invalid — fall back to newProjectPath to prefill dialog
-          urlToOpen = `${baseUrl}/projects?newProjectPath=${encodeURIComponent(startupPath)}`;
+          urlToOpen = `${displayUrl}/projects?newProjectPath=${encodeURIComponent(startupPath)}`;
           if (opts.foreground) {
             log('info', 'No project at startup path; prefill create dialog', { startupPath });
           } else if (opts.open) {
@@ -1712,7 +1872,7 @@ async function main(argv) {
         }
       } catch (e) {
         // Network/timeouts: still prefer prefilled create dialog
-        urlToOpen = `${baseUrl}/projects?newProjectPath=${encodeURIComponent(startupPath)}`;
+        urlToOpen = `${displayUrl}/projects?newProjectPath=${encodeURIComponent(startupPath)}`;
         if (opts.foreground) {
           log('warn', 'Failed to resolve startup path; opening create dialog', {
             error: e instanceof Error ? e.message : String(e),
@@ -1736,7 +1896,7 @@ async function main(argv) {
 
       if (!worktreeRuntimeMode) {
         // Write PID file for stop command
-        writePidFile(port);
+        writePidFile(port, effectiveHost);
 
         // Clean up PID file on exit (main.ts handles SIGINT/SIGTERM and graceful shutdown)
         process.on('exit', () => {
@@ -1820,7 +1980,7 @@ async function main(argv) {
         console.log('No running Devchain instance found.');
         process.exit(1);
       } else {
-        const { pid, port } = pidData;
+        const { pid, port, host } = pidData;
 
         if (!isProcessRunning(pid)) {
           console.log(`Devchain process (PID ${pid}) is not running. Cleaning up stale PID file.`);
@@ -1877,6 +2037,13 @@ module.exports = {
   main,
   normalizeCliArgv,
   __test__: {
+    normalizeHost,
+    isWildcardHost,
+    isNonLoopbackHost,
+    connectableHost,
+    formatHostForUrl,
+    buildInternalBaseUrl,
+    buildDisplayUrls,
     ensureDockerAvailable,
     isDockerAvailable,
     deriveRepoRootFromGit,

package/dist/server/common/config/env.config.d.ts

@@ -2,7 +2,7 @@ import { z } from 'zod';
 declare const envSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     NODE_ENV: z.ZodDefault<z.ZodEnum<["development", "production", "test"]>>;
     PORT: z.ZodDefault<z.ZodEffects<z.ZodString, number, string>>;
-    HOST: z.ZodDefault<z.ZodString>;
+    HOST: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodDefault<z.ZodString>, string, string | undefined>, string, string | undefined>, string, string | undefined>, string, string | undefined>;
     LOG_LEVEL: z.ZodDefault<z.ZodEnum<["silent", "fatal", "error", "warn", "info", "debug", "trace"]>>;
     DEVCHAIN_MODE: z.ZodDefault<z.ZodEnum<["normal", "main"]>>;
     DATABASE_URL: z.ZodOptional<z.ZodString>;

package/dist/server/common/config/env.config.js

@@ -44,7 +44,15 @@ const envSchema = zod_1.z
     .object({
     NODE_ENV: zod_1.z.enum(['development', 'production', 'test']).default('development'),
     PORT: zod_1.z.string().regex(/^\d+$/).transform(Number).default('3000'),
-    HOST: zod_1.z.string().default('127.0.0.1'),
+    HOST: zod_1.z
+        .string()
+        .default('127.0.0.1')
+        .transform((v) => v.trim())
+        .refine((v) => v.length > 0, { message: 'HOST must not be empty' })
+        .refine((v) => v !== '*', { message: 'HOST must not be "*"' })
+        .refine((v) => !/[\x00-\x1f\x7f]/.test(v), {
+        message: 'HOST must not contain control characters',
+    }),
     LOG_LEVEL: zod_1.z
         .enum(['silent', 'fatal', 'error', 'warn', 'info', 'debug', 'trace'])
         .default('info'),

package/dist/server/common/config/env.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.config.js","sourceRoot":"","sources":["../../../src/common/config/env.config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,oCAcC;AAED,wCAEC;AA/ED,6BAAwB;AACxB,+CAAiC;AACjC,2BAAgC;AAChC,+BAA+B;AAE/B,MAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,MAAM,SAAS,GAAG,OAAC;KAChB,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACrC,SAAS,EAAE,OAAC;SACT,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACpE,OAAO,CAAC,MAAM,CAAC;IAClB,aAAa,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAGxB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,gBAAgB,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,IAAA,eAAU,EAAC,gBAAgB,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,kCAAkC,gBAAgB,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;KACD,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO;QACL,GAAG,GAAG;QACN,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE,GAAG,CAAC,cAAc;YAChC,CAAC,CAAC,IAAA,cAAO,EAAC,GAAG,CAAC,cAAc,CAAC;YAC7B,CAAC,CAAC,IAAA,cAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;QAC/C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;YAC1C,CAAC,CAAC,IAAA,cAAO,EAAC,GAAG,CAAC,mBAAmB,CAAC;YAClC,CAAC,CAAC,IAAA,cAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC;KACrD,CAAC;AACJ,CAAC,CAAC,CAAC;AAIL,IAAI,YAAY,GAAqB,IAAI,CAAC;AAE1C,SAAgB,YAAY;IAC1B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,cAAc;IAC5B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC"}
+{"version":3,"file":"env.config.js","sourceRoot":"","sources":["../../../src/common/config/env.config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqEA,oCAcC;AAED,wCAEC;AAvFD,6BAAwB;AACxB,+CAAiC;AACjC,2BAAgC;AAChC,+BAA+B;AAE/B,MAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,MAAM,SAAS,GAAG,OAAC;KAChB,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,OAAO,CAAC,WAAW,CAAC;SACpB,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;SAClE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,EAAE,0CAA0C;KACpD,CAAC;IACJ,SAAS,EAAE,OAAC;SACT,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACpE,OAAO,CAAC,MAAM,CAAC;IAClB,aAAa,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAGxB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,gBAAgB,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,IAAA,eAAU,EAAC,gBAAgB,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,kCAAkC,gBAAgB,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;KACD,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO;QACL,GAAG,GAAG;QACN,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE,GAAG,CAAC,cAAc;YAChC,CAAC,CAAC,IAAA,cAAO,EAAC,GAAG,CAAC,cAAc,CAAC;YAC7B,CAAC,CAAC,IAAA,cAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;QAC/C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;YAC1C,CAAC,CAAC,IAAA,cAAO,EAAC,GAAG,CAAC,mBAAmB,CAAC;YAClC,CAAC,CAAC,IAAA,cAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC;KACrD,CAAC;AACJ,CAAC,CAAC,CAAC;AAIL,IAAI,YAAY,GAAqB,IAAI,CAAC;AAE1C,SAAgB,YAAY;IAC1B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,cAAc;IAC5B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC"}

package/dist/server/common/config/host-helpers.d.ts

@@ -0,0 +1,7 @@
+export declare function isWildcardHost(host: string): boolean;
+export declare function connectableHost(host: string): string;
+export declare function formatHostForUrl(host: string): string;
+export declare function getRuntimeInternalBaseUrl(config: {
+    HOST: string;
+    PORT: number;
+}): string;

package/dist/server/common/config/host-helpers.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isWildcardHost = isWildcardHost;
+exports.connectableHost = connectableHost;
+exports.formatHostForUrl = formatHostForUrl;
+exports.getRuntimeInternalBaseUrl = getRuntimeInternalBaseUrl;
+const IPV4_WILDCARDS = new Set(['0.0.0.0', '']);
+const IPV6_WILDCARDS = new Set(['::', '[::]']);
+function isWildcardHost(host) {
+    const trimmed = host.trim().toLowerCase();
+    return IPV4_WILDCARDS.has(trimmed) || IPV6_WILDCARDS.has(trimmed);
+}
+function connectableHost(host) {
+    const trimmed = host.trim();
+    if (isWildcardHost(trimmed)) {
+        if (IPV6_WILDCARDS.has(trimmed.toLowerCase())) {
+            return '::1';
+        }
+        return '127.0.0.1';
+    }
+    const unwrapped = trimmed.startsWith('[') && trimmed.endsWith(']') ? trimmed.slice(1, -1) : trimmed;
+    return unwrapped;
+}
+function formatHostForUrl(host) {
+    if (host.includes(':') && !host.startsWith('[')) {
+        return `[${host}]`;
+    }
+    return host;
+}
+function getRuntimeInternalBaseUrl(config) {
+    const host = connectableHost(config.HOST);
+    return `http://${formatHostForUrl(host)}:${config.PORT}`;
+}
+//# sourceMappingURL=host-helpers.js.map

package/dist/server/common/config/host-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-helpers.js","sourceRoot":"","sources":["../../../src/common/config/host-helpers.ts"],"names":[],"mappings":";;AAGA,wCAGC;AAED,0CAWC;AAED,4CAKC;AAED,8DAGC;AA/BD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AAChD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/C,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,SAAS,GACb,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,IAAI,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,yBAAyB,CAAC,MAAsC;IAC9E,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,UAAU,gBAAgB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3D,CAAC"}

package/dist/server/main.js

@@ -38,6 +38,7 @@ const platform_fastify_1 = require("@nestjs/platform-fastify");
 const swagger_1 = require("@nestjs/swagger");
 const common_1 = require("@nestjs/common");
 const env_config_1 = require("./common/config/env.config");
+const host_helpers_1 = require("./common/config/host-helpers");
 const logger_1 = require("./common/logging/logger");
 const path_1 = require("path");
 const fs_1 = require("fs");
@@ -144,13 +145,14 @@ async function bootstrap() {
             appLogger.error({ error, portFile: config.RUNTIME_PORT_FILE }, 'Failed to write runtime port file');
         }
     }
+    const displayUrl = (0, host_helpers_1.getRuntimeInternalBaseUrl)({ HOST: config.HOST, PORT: actualPort });
     appLogger.info({
         mode,
         port: actualPort,
-        host: config.HOST,
+        bindHost: config.HOST,
         env: config.NODE_ENV,
-    }, `Application is running on: http://${config.HOST}:${actualPort}`);
-    appLogger.info(`API Documentation: http://${config.HOST}:${actualPort}/api/docs`);
+    }, `Application is running on: ${displayUrl}`);
+    appLogger.info(`API Documentation: ${displayUrl}/api/docs`);
 }
 bootstrap().catch((error) => {
     logger_1.logger.fatal(error, 'Failed to start application');

package/dist/server/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAA2C;AAC3C,+DAAkF;AAClF,6CAAiE;AACjE,2CAAgD;AAChD,2DAA0D;AAC1D,oDAA+D;AAC/D,+BAA4B;AAC5B,2BAAgC;AAEhC,KAAK,UAAU,SAAS;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtE,MAAM,UAAU,GACd,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,CAAC,wDAAa,mBAAmB,GAAC,CAAC,CAAC,aAAa;QACnD,CAAC,CAAC,CAAC,wDAAa,qBAAqB,GAAC,CAAC,CAAC,eAAe,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAA,yBAAY,GAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAI5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,MAAM,CAAC;IAChE,MAAM,SAAS,GAAkE,CAAC,GAAG,EAAE;QACrF,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO;gBACV,OAAO,KAAK,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,KAAK,MAAM;gBACT,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,KAAK,MAAM,CAAC;YACZ,KAAK,KAAK;gBACR,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAClC,KAAK,OAAO;gBACV,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,KAAK,OAAO,CAAC;YACb,KAAK,SAAS;gBACZ,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtD;gBACE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAIL,MAAM,aAAa,GACjB,QAAQ,KAAK,OAAO;QAClB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC;YACE,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;SAC9E,CAAC;IAER,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAClC,UAAU,EACV,IAAI,iCAAc,CAAC;QACjB,MAAM,EAAE,aAAa;QACrB,iBAAiB,EAAE,WAAW;QAC9B,qBAAqB,EAAE,QAAQ,KAAK,OAAO;KAC5C,CAAC,EACF;QACE,MAAM,EAAE,SAAS;KAClB,CACF,CAAC;IAGF,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC;IAEtD,IAAI,YAAY,IAAI,IAAA,eAAU,EAAC,MAAM,CAAC,EAAE,CAAC;QAEvC,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;YAC7C,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,GAAG;YACX,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC5F,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAChF,CAAC;IAGD,GAAG,CAAC,cAAc,CAChB,IAAI,uBAAc,CAAC;QACjB,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CACH,CAAC;IAGF,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QAChD,IAAI,cAAc;YAAE,OAAO;QAC3B,cAAc,GAAG,IAAI,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,yDAAyD,CAAC,CAAC;QACtF,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAGzD,MAAM,aAAa,GAAG,IAAI,yBAAe,EAAE;SACxC,QAAQ,CAAC,wBAAwB,CAAC;SAClC,cAAc,CAAC,wCAAwC,CAAC;SACxD,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,KAAK,EAAE,CAAC;IAEX,MAAM,QAAQ,GAAG,uBAAa,CAAC,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClE,uBAAa,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAG/C,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAG3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;IACpD,MAAM,UAAU,GACd,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAGxF,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;QACzC,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,aAAa,CACX,MAAM,CAAC,iBAAiB,EACxB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CACjF,CAAC;YACF,SAAS,CAAC,IAAI,CACZ,EAAE,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,UAAU,EAAE,EAClD,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,KAAK,CACb,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAC7C,mCAAmC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAI,CACZ;QACE,IAAI;QACJ,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,QAAQ;KACrB,EACD,qCAAqC,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CACjE,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,IAAI,IAAI,UAAU,WAAW,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,eAAM,CAAC,KAAK,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAA2C;AAC3C,+DAAkF;AAClF,6CAAiE;AACjE,2CAAgD;AAChD,2DAA0D;AAC1D,+DAAyE;AACzE,oDAA+D;AAC/D,+BAA4B;AAC5B,2BAAgC;AAEhC,KAAK,UAAU,SAAS;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtE,MAAM,UAAU,GACd,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,CAAC,wDAAa,mBAAmB,GAAC,CAAC,CAAC,aAAa;QACnD,CAAC,CAAC,CAAC,wDAAa,qBAAqB,GAAC,CAAC,CAAC,eAAe,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAA,yBAAY,GAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAI5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,MAAM,CAAC;IAChE,MAAM,SAAS,GAAkE,CAAC,GAAG,EAAE;QACrF,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO;gBACV,OAAO,KAAK,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,KAAK,MAAM;gBACT,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,KAAK,MAAM,CAAC;YACZ,KAAK,KAAK;gBACR,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAClC,KAAK,OAAO;gBACV,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,KAAK,OAAO,CAAC;YACb,KAAK,SAAS;gBACZ,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtD;gBACE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAIL,MAAM,aAAa,GACjB,QAAQ,KAAK,OAAO;QAClB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC;YACE,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;SAC9E,CAAC;IAER,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAClC,UAAU,EACV,IAAI,iCAAc,CAAC;QACjB,MAAM,EAAE,aAAa;QACrB,iBAAiB,EAAE,WAAW;QAC9B,qBAAqB,EAAE,QAAQ,KAAK,OAAO;KAC5C,CAAC,EACF;QACE,MAAM,EAAE,SAAS;KAClB,CACF,CAAC;IAGF,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC;IAEtD,IAAI,YAAY,IAAI,IAAA,eAAU,EAAC,MAAM,CAAC,EAAE,CAAC;QAEvC,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;YAC7C,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,GAAG;YACX,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC5F,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAChF,CAAC;IAGD,GAAG,CAAC,cAAc,CAChB,IAAI,uBAAc,CAAC;QACjB,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CACH,CAAC;IAGF,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QAChD,IAAI,cAAc;YAAE,OAAO;QAC3B,cAAc,GAAG,IAAI,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,yDAAyD,CAAC,CAAC;QACtF,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAGzD,MAAM,aAAa,GAAG,IAAI,yBAAe,EAAE;SACxC,QAAQ,CAAC,wBAAwB,CAAC;SAClC,cAAc,CAAC,wCAAwC,CAAC;SACxD,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,KAAK,EAAE,CAAC;IAEX,MAAM,QAAQ,GAAG,uBAAa,CAAC,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClE,uBAAa,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAG/C,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAG3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;IACpD,MAAM,UAAU,GACd,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAGxF,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;QACzC,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,aAAa,CACX,MAAM,CAAC,iBAAiB,EACxB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CACjF,CAAC;YACF,SAAS,CAAC,IAAI,CACZ,EAAE,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,UAAU,EAAE,EAClD,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,KAAK,CACb,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAC7C,mCAAmC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,wCAAyB,EAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,SAAS,CAAC,IAAI,CACZ;QACE,IAAI;QACJ,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,GAAG,EAAE,MAAM,CAAC,QAAQ;KACrB,EACD,8BAA8B,UAAU,EAAE,CAC3C,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,sBAAsB,UAAU,WAAW,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,eAAM,CAAC,KAAK,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server/modules/core/core-normal.module.js

@@ -11,6 +11,7 @@ const common_1 = require("@nestjs/common");
 const preflight_controller_1 = require("./controllers/preflight.controller");
 const preflight_service_1 = require("./services/preflight.service");
 const provider_mcp_ensure_service_1 = require("./services/provider-mcp-ensure.service");
+const gemini_trusted_folders_service_1 = require("./services/gemini-trusted-folders.service");
 const storage_module_1 = require("../storage/storage.module");
 const mcp_module_1 = require("../mcp/mcp.module");
 const adapters_1 = require("../providers/adapters");
@@ -21,8 +22,8 @@ exports.CoreNormalModule = CoreNormalModule = __decorate([
     (0, common_1.Module)({
         imports: [storage_module_1.StorageModule, (0, common_1.forwardRef)(() => mcp_module_1.McpModule), adapters_1.ProviderAdaptersModule],
         controllers: [preflight_controller_1.PreflightController],
-        providers: [preflight_service_1.PreflightService, provider_mcp_ensure_service_1.ProviderMcpEnsureService],
-        exports: [preflight_service_1.PreflightService, provider_mcp_ensure_service_1.ProviderMcpEnsureService],
+        providers: [preflight_service_1.PreflightService, provider_mcp_ensure_service_1.ProviderMcpEnsureService, gemini_trusted_folders_service_1.GeminiTrustedFoldersService],
+        exports: [preflight_service_1.PreflightService, provider_mcp_ensure_service_1.ProviderMcpEnsureService, gemini_trusted_folders_service_1.GeminiTrustedFoldersService],
     })
 ], CoreNormalModule);
 //# sourceMappingURL=core-normal.module.js.map

package/dist/server/modules/core/core-normal.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-normal.module.js","sourceRoot":"","sources":["../../../src/modules/core/core-normal.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAoD;AACpD,6EAAyE;AACzE,oEAAgE;AAChE,wFAAkF;AAClF,8DAA0D;AAC1D,kDAA8C;AAC9C,oDAA+D;AAQxD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;CAAG,CAAA;AAAnB,4CAAgB;2BAAhB,gBAAgB;IAN5B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,8BAAa,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,sBAAS,CAAC,EAAE,iCAAsB,CAAC;QAC7E,WAAW,EAAE,CAAC,0CAAmB,CAAC;QAClC,SAAS,EAAE,CAAC,oCAAgB,EAAE,sDAAwB,CAAC;QACvD,OAAO,EAAE,CAAC,oCAAgB,EAAE,sDAAwB,CAAC;KACtD,CAAC;GACW,gBAAgB,CAAG"}
+{"version":3,"file":"core-normal.module.js","sourceRoot":"","sources":["../../../src/modules/core/core-normal.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAoD;AACpD,6EAAyE;AACzE,oEAAgE;AAChE,wFAAkF;AAClF,8FAAwF;AACxF,8DAA0D;AAC1D,kDAA8C;AAC9C,oDAA+D;AAQxD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;CAAG,CAAA;AAAnB,4CAAgB;2BAAhB,gBAAgB;IAN5B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,8BAAa,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,sBAAS,CAAC,EAAE,iCAAsB,CAAC;QAC7E,WAAW,EAAE,CAAC,0CAAmB,CAAC;QAClC,SAAS,EAAE,CAAC,oCAAgB,EAAE,sDAAwB,EAAE,4DAA2B,CAAC;QACpF,OAAO,EAAE,CAAC,oCAAgB,EAAE,sDAAwB,EAAE,4DAA2B,CAAC;KACnF,CAAC;GACW,gBAAgB,CAAG"}

package/dist/server/modules/core/services/gemini-trusted-folders.service.d.ts

@@ -0,0 +1,26 @@
+type TrustLevel = 'TRUST_FOLDER' | 'TRUST_PARENT' | 'DO_NOT_TRUST';
+export type EffectiveTrust = {
+    kind: 'trusted';
+    via: 'exact' | 'ancestor' | 'parent_rule';
+} | {
+    kind: 'distrusted';
+    via: 'exact' | 'ancestor';
+} | {
+    kind: 'no_rule';
+};
+export type EnsureTrustResult = {
+    success: boolean;
+    action: 'added' | 'already_trusted' | 'distrusted_warning' | 'malformed_warning';
+    message: string;
+    warnings?: string[];
+};
+export declare function getEffectiveTrust(projectPath: string, rules: Record<string, TrustLevel>): EffectiveTrust;
+export declare class GeminiTrustedFoldersService {
+    private writeTail;
+    private get filePath();
+    ensure(projectPath: string): Promise<EnsureTrustResult>;
+    private doEnsure;
+    private atomicWrite;
+    private normalizePath;
+}
+export {};