nestor-sh 2.0.5 → 2.0.6

package/dist/nestor.mjs

@@ -1976,6 +1976,7 @@ var init_store = __esm({
       db;
       dbPath;
       fts5Available = false;
+      _inTransaction = false;
       encryptor;
       static sqlJsPromise = null;
       /**
@@ -2054,6 +2055,8 @@ var init_store = __esm({
        * Save the database to disk (no-op for in-memory databases).
        */
       save() {
+        if (this._inTransaction)
+          return;
         if (this.dbPath) {
           const data = this.db.export();
           fs.writeFileSync(this.dbPath, Buffer.from(data));
@@ -2067,14 +2070,20 @@ var init_store = __esm({
        * Run a function inside a transaction. Rolls back on error.
        */
       transaction(fn) {
+        this._inTransaction = true;
         this.db.run("BEGIN TRANSACTION");
         try {
           const result = fn();
           this.db.run("COMMIT");
+          this._inTransaction = false;
           this.save();
           return result;
         } catch (err) {
-          this.db.run("ROLLBACK");
+          try {
+            this.db.run("ROLLBACK");
+          } catch {
+          }
+          this._inTransaction = false;
           throw err;
         }
       }
@@ -6189,6 +6198,7 @@ function csrfProtection(options = {}) {
   const secret = options.secret ?? randomBytes3(32).toString("hex");
   const skipPaths = new Set(options.skipPaths ?? []);
   const skipBearerAuth = options.skipBearerAuth ?? true;
+  const skipLocalhost = options.skipLocalhost ?? false;
   function generateToken() {
     const nonce = randomBytes3(16).toString("hex");
     const signature = createHmac("sha256", secret).update(nonce).digest("hex");
@@ -6225,6 +6235,10 @@ function csrfProtection(options = {}) {
       next();
       return;
     }
+    if (skipLocalhost) {
+      next();
+      return;
+    }
     if (skipPaths.has(req.path)) {
       next();
       return;
@@ -10024,7 +10038,7 @@ var SERVER_VERSION, startTime;
 var init_health = __esm({
   "../server/dist/routes/health.js"() {
     "use strict";
-    SERVER_VERSION = "0.1.0";
+    SERVER_VERSION = "2.0.6";
     startTime = Date.now();
   }
 });
@@ -142945,9 +142959,11 @@ function createApp(config2) {
   app.use(securityHeaders());
   app.use(apiVersion("1"));
   app.use(rateLimit({ windowMs: 6e4, max: 60 }));
+  const isLocalhost = !config2.host || config2.host === "127.0.0.1" || config2.host === "localhost";
   app.use(csrfProtection({
     skipPaths: ["/api/auth/token", "/api/health"],
-    skipBearerAuth: true
+    skipBearerAuth: true,
+    skipLocalhost: isLocalhost
   }));
   app.use(otelTracingMiddleware());
   app.use((req, res, next) => {
@@ -143129,6 +143145,7 @@ function createApp(config2) {
       res.sendFile(join16(studioDistDir, "index.html"));
     });
     app.use("/studio", express.static(studioDistDir, { index: false }));
+    app.use(express.static(studioDistDir, { index: false }));
     app.get("/studio/*", (req, res) => {
       if (!studioState.enabled) {
         return res.status(403).json({ error: { code: "STUDIO_DISABLED", message: "Studio is disabled." } });
@@ -143153,6 +143170,17 @@ function createApp(config2) {
       });
     });
   }
+  if (studioDistDir) {
+    app.get("*", (req, res, next) => {
+      if (req.path.startsWith("/api/") || req.path.startsWith("/ws")) {
+        return next();
+      }
+      if (!studioState.enabled) {
+        return res.status(403).json({ error: { code: "STUDIO_DISABLED", message: "Studio is disabled." } });
+      }
+      res.sendFile(join16(studioDistDir, "index.html"));
+    });
+  }
   app.use(errorHandler());
   return app;
 }
@@ -157417,7 +157445,7 @@ var init_server = __esm({
     MCP_PROTOCOL_VERSION = "2024-11-05";
     SERVER_INFO = {
       name: "nestor",
-      version: "0.1.0"
+      version: "2.0.6"
     };
     SERVER_CAPABILITIES = {
       tools: { listChanged: false },
@@ -163659,7 +163687,7 @@ if (command2 && !["--help", "-h", "--version", "-V", "install"].includes(command
   }
 }
 var program = new Command();
-program.name("nestor-sh").description("Nestor AI Agent Platform \u2014 orchestrate, secure and monitor AI agents").version("2.0.5");
+program.name("nestor-sh").description("Nestor AI Agent Platform \u2014 orchestrate, secure and monitor AI agents").version("2.0.6");
 registerStartCommand(program);
 registerInstallCommand(program);
 registerAgentCommand(program);