loopable-cli 0.2.0 → 0.2.1

package/.output/server/_ssr/{callback-D20cVD2w.mjs → access-DTttr563.mjs}

@@ -1,5 +1,4 @@
-import { networkInterfaces } from "node:os";
-//#region node_modules/.nitro/vite/services/ssr/assets/callback-D20cVD2w.js
+//#region node_modules/.nitro/vite/services/ssr/assets/access-DTttr563.js
 function configuredOrigin() {
 	return process.env.LOOPABLE_BASE_URL?.replace(/\/$/, "") || null;
 }
@@ -55,25 +54,43 @@ function registrableCallbackUrl(connectorId) {
 	if (hosted) return `${hosted}/api/connectors/${connectorId}/callback`;
 	return `http://127.0.0.1/api/connectors/${connectorId}/callback`;
 }
-/** First non-internal IPv4, preferring typical LAN ranges. */
-function lanIPv4(nics = networkInterfaces()) {
-	const found = [];
-	for (const addrs of Object.values(nics)) for (const addr of addrs ?? []) {
-		if (addr.internal) continue;
-		if (!["IPv4", "4"].includes(String(addr.family))) continue;
-		found.push(addr.address);
+var APP_ACCESS_COOKIE = "loopable_access";
+function bearer(request) {
+	const header = request.headers.get("authorization") ?? "";
+	return /^Bearer\s+(.+)$/i.exec(header)?.[1]?.trim() ?? "";
+}
+function cookieValue(header, name) {
+	if (!header) return null;
+	for (const part of header.split(";")) {
+		const [rawName, ...rest] = part.trim().split("=");
+		if (rawName === name) return decodeURIComponent(rest.join("="));
 	}
-	return found.find((ip) => ip.startsWith("192.168.")) ?? found.find((ip) => ip.startsWith("10.")) ?? found.find((ip) => {
-		const b = Number(ip.split(".")[1]);
-		return ip.startsWith("172.") && b >= 16 && b <= 31;
-	}) ?? found[0] ?? null;
+	return null;
+}
+function readAppToken(request) {
+	const fromBearer = bearer(request);
+	if (fromBearer) return fromBearer;
+	const fromQuery = new URL(request.url).searchParams.get("token")?.trim();
+	if (fromQuery) return fromQuery;
+	return cookieValue(request.headers.get("cookie"), APP_ACCESS_COOKIE);
+}
+function appAccessCookie(token) {
+	const secure = process.env.LOOPABLE_BASE_URL?.startsWith("https:") ? "; Secure" : "";
+	return `${APP_ACCESS_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax${secure}`;
+}
+/**
+* Loopback stays open. Anything else needs LOOPABLE_APP_TOKEN, or the UI is
+* on the network with no door.
+*/
+function assertAppAccess(request) {
+	if (isLoopbackHost(new URL(request.url).hostname)) return;
+	const expected = process.env.LOOPABLE_APP_TOKEN;
+	if (!expected) throw new Error("Set LOOPABLE_APP_TOKEN before exposing Loopable off loopback.");
+	if (readAppToken(request) !== expected) throw new Error("This Loopable is not open to you.");
 }
-/** Where runners should address this Loopable. A LAN IP when one exists. */
-function loopableOrigin(nics = networkInterfaces()) {
-	const configured = configuredOrigin();
-	if (configured) return configured;
-	const port = process.env.PORT ?? process.env.NITRO_PORT ?? "4321";
-	return `http://${lanIPv4(nics) ?? "127.0.0.1"}:${port}`;
+/** Runner pull and OAuth callbacks have their own tokens. */
+function isPublicApiPath(pathname) {
+	return pathname.startsWith("/api/runners/") || pathname.startsWith("/api/connectors/");
 }
 //#endregion
-export { registrableCallbackUrl as a, loopableOrigin as i, callbackUrl as n, isLoopbackHost as r, appOrigin as t };
+export { callbackUrl as a, readAppToken as c, bearer as i, registrableCallbackUrl as l, appOrigin as n, isLoopbackHost as o, assertAppAccess as r, isPublicApiPath as s, appAccessCookie as t };

package/.output/server/_ssr/{agents-Dms_6TBF.mjs → agents-C7B6RJ6-.mjs}

@@ -1,8 +1,8 @@
 import { n as createServerFn } from "./ssr.mjs";
-import { a as setDefaultAgent, i as saveAgentSettings, r as listAgents, s as testAgent } from "./agents-CrUmIQpi.mjs";
-import { c as listRunners, t as availableAgentIds } from "./runners-D-0_lfiq.mjs";
+import { a as saveAgentSettings, c as testAgent, i as listAgents, o as setDefaultAgent } from "./agents-DG643yoJ.mjs";
+import { c as listRunners, t as availableAgentIds } from "./runners-D2UAdLyj.mjs";
 import { t as createServerRpc } from "./createServerRpc-DPDrnFdH.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/agents-Dms_6TBF.js
+//#region node_modules/.nitro/vite/services/ssr/assets/agents-C7B6RJ6-.js
 async function withRunners(agents) {
 	const runners = await listRunners();
 	const available = await availableAgentIds();

package/.output/server/_ssr/{agents-CrUmIQpi.mjs → agents-DG643yoJ.mjs}

@@ -6,7 +6,7 @@ import { join } from "node:path";
 import { homedir, tmpdir } from "node:os";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
-//#region node_modules/.nitro/vite/services/ssr/assets/agents-CrUmIQpi.js
+//#region node_modules/.nitro/vite/services/ssr/assets/agents-DG643yoJ.js
 function defineAgentManifest(manifest) {
 	return manifest;
 }
@@ -654,4 +654,4 @@ async function testAgent(agentId) {
 	};
 }
 //#endregion
-export { setDefaultAgent as a, saveAgentSettings as i, agentManifest as n, settingsFor as o, listAgents as r, testAgent as s, AGENT_MANIFESTS as t };
+export { saveAgentSettings as a, testAgent as c, listAgents as i, agentManifest as n, setDefaultAgent as o, agentRuntime as r, settingsFor as s, AGENT_MANIFESTS as t };

package/.output/server/_ssr/alert-DQvzE7bu.mjs

@@ -1,7 +1,7 @@
 import "../_runtime.mjs";
 import { U as require_jsx_runtime, W as require_react } from "../_libs/@base-ui/react+[...].mjs";
 import { t as cva } from "../_libs/class-variance-authority+clsx.mjs";
-import { H as cn } from "./router-BbrBz36P.mjs";
+import { W as cn } from "./router-54IDWTVz.mjs";
 require_react();
 var import_jsx_runtime = require_jsx_runtime();
 var alertVariants = cva("group/alert relative grid w-full gap-0.5 rounded-lg border px-2.5 py-2 text-left text-sm has-data-[slot=alert-action]:relative has-data-[slot=alert-action]:pr-18 has-[>svg]:grid-cols-[auto_1fr] has-[>svg]:gap-x-2 *:[svg]:row-span-2 *:[svg]:translate-y-0.5 *:[svg]:text-current *:[svg:not([class*='size-'])]:size-4", {

package/.output/server/_ssr/connection-status-BZr3Y-IC.mjs

@@ -1,5 +1,5 @@
 import { U as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
-import { I as Badge } from "./router-BbrBz36P.mjs";
+import { R as Badge } from "./router-54IDWTVz.mjs";
 //#region node_modules/.nitro/vite/services/ssr/assets/connection-status-BZr3Y-IC.js
 var import_jsx_runtime = require_jsx_runtime();
 var LABELS = {