orionfold-relay 0.15.2 → 0.15.3

package/dist/cli.js

@@ -25202,8 +25202,8 @@ import { execFileSync as execFileSync3 } from "child_process";
 import yaml12 from "js-yaml";
 import semver from "semver";
 function relayCoreVersion() {
-  if (semver.valid("0.15.2")) {
-    return "0.15.2";
+  if (semver.valid("0.15.3")) {
+    return "0.15.3";
   }
   try {
     const root = getAppRoot(import.meta.dirname, 3);
@@ -25645,6 +25645,12 @@ function buildNextLaunchArgs({
 function buildSidecarUrl(port, host = SIDECAR_LOOPBACK_HOST) {
   return `http://${host}:${port}`;
 }
+function isNonLoopbackHost(host) {
+  const h = host.trim().toLowerCase();
+  if (h === "localhost" || h === "::1") return false;
+  if (/^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h)) return false;
+  return true;
+}
 
 // bin/cli.ts
 init_ainative_paths();
@@ -25842,6 +25848,7 @@ Environment variables:
 
 Examples:
   node dist/cli.js --port 3210 --no-open
+  node dist/cli.js --hostname 0.0.0.0 --port 3000    # expose on the LAN (see warning)
   node dist/cli.js --data-dir ~/.relay-dogfood --port 3100
   node dist/cli.js plugin dry-run my-plugin    # print confinement policy
   node dist/cli.js pack add ./my-pack          # install a Relay pack (folder or git url)
@@ -25849,7 +25856,11 @@ Examples:
   node dist/cli.js pack remove my-pack         # uninstall a pack
 `;
 }
-program.name("relay").description("Orionfold Relay \u2014 a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.").version(pkg.version).addHelpText("after", getHelpText).option("-p, --port <number>", "port to start on", "3000").option("--data-dir <path>", "custom data directory (overrides RELAY_DATA_DIR)").option("--reset", "delete the local database before starting").option("--no-open", "don't auto-open browser").option("--safe-mode", "disable Kind-1 plugin MCP servers; Kind-5 primitives bundles still load");
+program.name("relay").description("Orionfold Relay \u2014 a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.").version(pkg.version).addHelpText("after", getHelpText).option("-p, --port <number>", "port to start on", "3000").option(
+  "--hostname <host>",
+  "host to bind to (default 127.0.0.1; use 0.0.0.0 to expose on the network)",
+  "127.0.0.1"
+).option("--data-dir <path>", "custom data directory (overrides RELAY_DATA_DIR)").option("--reset", "delete the local database before starting").option("--no-open", "don't auto-open browser").option("--safe-mode", "disable Kind-1 plugin MCP servers; Kind-5 primitives bundles still load");
 var firstArg = process.argv[2];
 var isPluginSubcommand = firstArg === "plugin";
 var isPackSubcommand = firstArg === "pack";
@@ -25979,11 +25990,18 @@ async function main() {
   }
   const nextEntrypoint = resolveNextEntrypoint(effectiveCwd);
   const isPrebuilt = existsSync12(join20(effectiveCwd, ".next", "BUILD_ID"));
+  const bindHost = opts.hostname || "127.0.0.1";
+  if (isNonLoopbackHost(bindHost)) {
+    console.warn(
+      `\u26A0 Binding to ${bindHost} \u2014 Relay will be reachable from other machines on the network. It is designed for local-first, single-user use and has no network authentication. Only do this on a trusted network, and put a reverse proxy with auth in front if exposing it more broadly.`
+    );
+  }
   const nextArgs = buildNextLaunchArgs({
     isPrebuilt,
-    port: actualPort
+    port: actualPort,
+    host: bindHost
   });
-  const sidecarUrl = buildSidecarUrl(actualPort);
+  const sidecarUrl = buildSidecarUrl(actualPort, bindHost);
   console.log(`Orionfold Relay ${pkg.version} \u2014 Community Edition`);
   console.log(`Data dir: ${DATA_DIR}`);
   console.log(`Mode: ${isPrebuilt ? "production" : "development"}`);
@@ -26002,10 +26020,11 @@ async function main() {
     }
   });
   if (opts.open !== false) {
+    const openUrl = isNonLoopbackHost(bindHost) ? buildSidecarUrl(actualPort, "127.0.0.1") : sidecarUrl;
     setTimeout(async () => {
       try {
         const open = (await import("open")).default;
-        await open(sidecarUrl);
+        await open(openUrl);
       } catch {
       }
     }, 3e3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orionfold-relay",
-  "version": "0.15.2",
+  "version": "0.15.3",
   "description": "Orionfold Relay — a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.",
   "keywords": [
     "ai",

package/src/lib/desktop/sidecar-launch.ts

@@ -83,3 +83,21 @@ export function buildNextLaunchArgs({
 export function buildSidecarUrl(port: number, host = SIDECAR_LOOPBACK_HOST): string {
   return `http://${host}:${port}`;
 }
+
+/**
+ * True when `host` is NOT a loopback address — i.e. binding to it exposes the
+ * server beyond the local machine. Relay is local-first with light auth, so the
+ * CLI warns before binding to such a host (`--hostname 0.0.0.0`, a LAN IP, a
+ * hostname, etc.). This is an advisory gate, not access control, so it errs
+ * toward warning: anything not provably loopback returns true.
+ *
+ * Loopback = `localhost`, IPv6 `::1`, or any `127.0.0.0/8` address (Linux lets
+ * you bind e.g. `127.0.0.5`). `0.0.0.0` / `::` are INADDR_ANY ("all
+ * interfaces") — the most exposing choice — and are treated as non-loopback.
+ */
+export function isNonLoopbackHost(host: string): boolean {
+  const h = host.trim().toLowerCase();
+  if (h === "localhost" || h === "::1") return false;
+  if (/^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h)) return false;
+  return true;
+}