sliccy 6.87.2 → 6.87.3

package/dist/node-server/_shared/index.d.ts

@@ -5,6 +5,7 @@ export * from './cdp-frame-unmask.js';
 export * from './content-type.js';
 export * from './electron-overlay-route.js';
 export * from './fetch-proxy-protocol.js';
+export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
 export * from './runtime-env.js';

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -6,6 +6,7 @@ export * from './cdp-frame-unmask.js';
 export * from './content-type.js';
 export * from './electron-overlay-route.js';
 export * from './fetch-proxy-protocol.js';
+export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
 export * from './runtime-env.js';

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}

package/dist/node-server/_shared/loopback.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Canonical loopback-host detection shared across security gates
+ * (bridge-token exemption, localhost-only endpoints, http: allowlists,
+ * OAuth redirect branching). One accepted set — do not reimplement.
+ *
+ * Accepts:
+ * - `localhost`
+ * - the entire `127.0.0.0/8` block (e.g. `127.0.0.1`, `127.0.0.2`)
+ * - IPv6 loopback, bracketed or bare (`[::1]`, `::1`)
+ */
+/** True when `hostname` is a loopback name (no URL parse — host only). */
+export declare function isLoopbackHostname(hostname: string): boolean;
+/**
+ * True when `origin` parses as a URL whose hostname is loopback.
+ * Returns false for missing / empty / unparseable values.
+ */
+export declare function isLoopbackOrigin(origin: string | undefined | null): boolean;
+//# sourceMappingURL=loopback.d.ts.map

package/dist/node-server/_shared/loopback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback.d.ts","sourceRoot":"","sources":["../src/loopback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAW5D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAO3E"}

package/dist/node-server/_shared/loopback.js

@@ -0,0 +1,41 @@
+/**
+ * Canonical loopback-host detection shared across security gates
+ * (bridge-token exemption, localhost-only endpoints, http: allowlists,
+ * OAuth redirect branching). One accepted set — do not reimplement.
+ *
+ * Accepts:
+ * - `localhost`
+ * - the entire `127.0.0.0/8` block (e.g. `127.0.0.1`, `127.0.0.2`)
+ * - IPv6 loopback, bracketed or bare (`[::1]`, `::1`)
+ */
+/** True when `hostname` is a loopback name (no URL parse — host only). */
+export function isLoopbackHostname(hostname) {
+    if (!hostname)
+        return false;
+    // WHATWG URL keeps brackets on IPv6 hostnames (`http://[::1]` → `[::1]`);
+    // socket addresses and some callers pass bare `::1`. Accept both.
+    const host = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;
+    if (host === 'localhost')
+        return true;
+    if (host === '::1')
+        return true;
+    // 127.0.0.0/8 — octet shape only (same as the former webapp plugin gate).
+    if (/^127(\.\d{1,3}){3}$/.test(host))
+        return true;
+    return false;
+}
+/**
+ * True when `origin` parses as a URL whose hostname is loopback.
+ * Returns false for missing / empty / unparseable values.
+ */
+export function isLoopbackOrigin(origin) {
+    if (!origin)
+        return false;
+    try {
+        return isLoopbackHostname(new URL(origin).hostname);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=loopback.js.map

package/dist/node-server/_shared/loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback.js","sourceRoot":"","sources":["../src/loopback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,IAAI,GACR,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxF,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,0EAA0E;IAC1E,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/node-server/bridge-security.d.ts

@@ -42,12 +42,15 @@ export declare const BRIDGE_ALLOWED_ORIGINS: readonly string[];
  */
 export declare function isAllowedBridgeOrigin(origin: string | undefined | null): boolean;
 /**
- * True iff `origin` is a loopback host (localhost / 127.0.0.1 / ::1).
+ * True iff `origin` is a loopback host.
  * Loopback allowlisted origins (e.g. the locally-served OAuth callback
  * page at `http://localhost:5710/auth/callback` posting to
  * `/api/oauth-result`) are exempt from the bridge-token requirement —
  * the token's threat model is "remote allowlisted origin (sliccy.ai)
  * with a hostile script", not "local server talking to itself".
+ *
+ * Canonical set: `@slicc/shared-ts` `isLoopbackOrigin` (localhost,
+ * 127.0.0.0/8, bracketed/bare ::1).
  */
 export declare function isLoopbackBridgeOrigin(origin: string | undefined | null): boolean;
 /**

package/dist/node-server/bridge-security.js

@@ -19,7 +19,7 @@
  * testable from `tests/bridge-security.test.ts`.
  */
 import { randomUUID, timingSafeEqual } from 'node:crypto';
-import { BRIDGE_SUBPROTOCOL_PREFIX, BRIDGE_TOKEN_HEADER, BRIDGE_TOKEN_QUERY_PARAM, BRIDGE_WS_QUERY_PARAM, SLICC_HOSTED_ORIGIN, SLICC_STAGING_HUB_ORIGIN, } from './_shared/index.js';
+import { BRIDGE_SUBPROTOCOL_PREFIX, BRIDGE_TOKEN_HEADER, BRIDGE_TOKEN_QUERY_PARAM, BRIDGE_WS_QUERY_PARAM, isLoopbackOrigin, SLICC_HOSTED_ORIGIN, SLICC_STAGING_HUB_ORIGIN, } from './_shared/index.js';
 // Re-exported so the many existing bridge-security importers (index.ts,
 // launch-url.ts, electron-controller.ts, tests) keep their import surface.
 // Canonical definitions: packages/shared-ts/src/bridge-protocol.ts.
@@ -144,28 +144,18 @@ export function isAllowedBridgeOrigin(origin) {
     return BRIDGE_DEV_ALLOWED_ORIGINS.has(normalized);
 }
 /**
- * True iff `origin` is a loopback host (localhost / 127.0.0.1 / ::1).
+ * True iff `origin` is a loopback host.
  * Loopback allowlisted origins (e.g. the locally-served OAuth callback
  * page at `http://localhost:5710/auth/callback` posting to
  * `/api/oauth-result`) are exempt from the bridge-token requirement —
  * the token's threat model is "remote allowlisted origin (sliccy.ai)
  * with a hostile script", not "local server talking to itself".
+ *
+ * Canonical set: `@slicc/shared-ts` `isLoopbackOrigin` (localhost,
+ * 127.0.0.0/8, bracketed/bare ::1).
  */
 export function isLoopbackBridgeOrigin(origin) {
-    if (!origin)
-        return false;
-    try {
-        const url = new URL(origin);
-        // Node's WHATWG URL parser keeps the brackets on IPv6 hostnames
-        // (`http://[::1]:5710` → `[::1]`); accept both bracketed and bare.
-        return (url.hostname === 'localhost' ||
-            url.hostname === '127.0.0.1' ||
-            url.hostname === '::1' ||
-            url.hostname === '[::1]');
-    }
-    catch {
-        return false;
-    }
+    return isLoopbackOrigin(origin);
 }
 /**
  * Constant-time compare for the bridge token. `presented` may be missing

package/dist/node-server/cloud-status.d.ts

@@ -15,6 +15,9 @@ export interface CloudStatusPayload {
  * Reject non-loopback requests. The sandbox is a private execution boundary,
  * but defense in depth: someone might wire a port-forward and we want this
  * endpoint to be unreachable from the outside.
+ *
+ * Socket addresses may be IPv4-mapped IPv6 (`::ffff:127.0.0.1`); strip that
+ * prefix then use the shared loopback hostname check.
  */
 export declare function requireLoopback(req: Request, res: Response, next: NextFunction): void;
 export declare function registerCloudStatusEndpoint(app: Express, options: CloudStatusEndpointOptions): void;

package/dist/node-server/cloud-status.js

@@ -1,4 +1,5 @@
 import { promises as fs } from 'node:fs';
+import { isLoopbackHostname } from './_shared/index.js';
 import express from 'express';
 /** The optional string fields validated when present but never required. */
 const OPTIONAL_STRING_FIELDS = [
@@ -25,11 +26,14 @@ function isCloudStatusPayload(x) {
  * Reject non-loopback requests. The sandbox is a private execution boundary,
  * but defense in depth: someone might wire a port-forward and we want this
  * endpoint to be unreachable from the outside.
+ *
+ * Socket addresses may be IPv4-mapped IPv6 (`::ffff:127.0.0.1`); strip that
+ * prefix then use the shared loopback hostname check.
  */
 export function requireLoopback(req, res, next) {
     const addr = req.socket.remoteAddress ?? '';
-    const isLoopback = addr === '127.0.0.1' || addr === '::1' || addr === '::ffff:127.0.0.1' || addr === 'localhost';
-    if (!isLoopback) {
+    const normalized = addr.toLowerCase().startsWith('::ffff:') ? addr.slice('::ffff:'.length) : addr;
+    if (!isLoopbackHostname(normalized)) {
         res.status(403).json({ error: 'localhost only' });
         return;
     }

package/dist/node-server/routes/fetch-proxy.js

@@ -1,6 +1,6 @@
 import { Readable, Transform } from 'node:stream';
 import { StringDecoder } from 'node:string_decoder';
-import { HMAC_SIGN_HEADER, isTextContentType } from '../_shared/index.js';
+import { HMAC_SIGN_HEADER, isLoopbackOrigin, isTextContentType } from '../_shared/index.js';
 import { FETCH_PROXY_CONTENT_LENGTH_HEADER, FETCH_PROXY_SKIP_HEADERS, FETCH_PROXY_SKIP_RESPONSE_HEADERS, FETCH_PROXY_SKIP_RESPONSE_PREFIXES, } from '../fetch-proxy-headers.js';
 import { AgentActivityTracker, registerAgentActivityRoute } from './agent-activity.js';
 /** Pick the first value of a possibly-multi-valued request header. */
@@ -9,21 +9,6 @@ function firstHeaderValue(value) {
         return undefined;
     return Array.isArray(value) ? value[0] : value;
 }
-/** True when an origin/referer value points at localhost (any family). */
-function isLocalhostOrigin(origin) {
-    if (!origin)
-        return false;
-    try {
-        const url = new URL(origin);
-        return (url.hostname === 'localhost' ||
-            url.hostname === '127.0.0.1' ||
-            url.hostname === '::1' ||
-            url.hostname === '[::1]');
-    }
-    catch {
-        return false;
-    }
-}
 /** Get the body — either from express.json()'s parsed body or raw chunks. */
 async function collectRawBody(req) {
     if (req.body && typeof req.body === 'object' && Object.keys(req.body).length > 0) {
@@ -58,7 +43,7 @@ function buildForwardHeaders(req, targetUrl) {
     if (proxyOrigin) {
         headers.origin = proxyOrigin;
     }
-    else if (isLocalhostOrigin(headers.origin)) {
+    else if (isLoopbackOrigin(headers.origin)) {
         // Only strip the browser's auto-added localhost origin; preserve legitimate origins.
         delete headers.origin;
     }
@@ -77,7 +62,7 @@ function buildForwardHeaders(req, targetUrl) {
     if (proxyReferer) {
         headers.referer = proxyReferer;
     }
-    else if (isLocalhostOrigin(headers.referer)) {
+    else if (isLoopbackOrigin(headers.referer)) {
         delete headers.referer;
     }
     // Restore any X-Proxy-Proxy-* transport headers as Proxy-* headers