spectoflow 0.29.0 → 0.30.0

package/README.md

@@ -198,6 +198,12 @@ spectoflow dashboard                     # → http://localhost:4319 (or --port=
 dashboard already running on the port). `spectoflow status` tells you whether one is up. Zero
 dependencies, updates live via SSE + file watching.
 
+**It only answers this machine.** The hub can launch agents and write your project files, so it listens
+on the loopback interfaces only (`127.0.0.1`, `::1`) and refuses any request whose `Host` isn't local or
+that another website sent — a malicious page, a DNS-rebinding trick, or a tunnel/proxy you run on the same
+machine can't drive it. Clicking a link to it from another site still opens it. To reach your projects from
+another device, use the online dashboard ([below](#going-online-optional-local-hub-vs-relay-server)).
+
 ### One hub, every project
 
 There is only ever **one dashboard process on your machine**, no matter how many projects you have.
@@ -388,7 +394,7 @@ agents then read and grow your second brain through that server: nothing is copi
   that output also carries command output and file contents, so a line hidden in a repository can't slip
   in unseen.
 - **Private:** the Second brain tab and its API answer this machine only — not the online dashboard
-  (`server/` refuses them for everyone, the project owner included), and not other machines on your network.
+  (`server/` refuses them for everyone, the project owner included), and not other machines or websites.
   A run started from either of those can't write into it, and a learned fact never goes into a project's chat
   log.
 

package/lib/dashboard/handlers.js

@@ -29,12 +29,19 @@ const { ROUTES, findRoute } = require('./routes');
 const LOOPBACK = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1']);
 const LOCAL_HOSTNAMES = new Set(['localhost', '127.0.0.1', '[::1]']);
 const isLoopback = (addr) => !!addr && (LOOPBACK.has(addr) || addr.startsWith('127.') || addr.startsWith('::ffff:127.'));
-function isLocalRequest(req) {
+// allowNavigation: the hub's own gate lets a top-level GET navigation from another site through (a link to
+// the dashboard clicked elsewhere) — the linking page can't read what it opens. Ops never allow it.
+function isLocalRequest(req, { allowNavigation = false } = {}) {
   if (!isLoopback(req.socket && req.socket.remoteAddress)) return false;
   const host = String(req.headers.host || '');
   let hostname;
   try { hostname = new URL(`http://${host}`).hostname; } catch { return false; }
   if (!LOCAL_HOSTNAMES.has(hostname)) return false;
+  const site = req.headers['sec-fetch-site'];
+  if (site === 'cross-site' || site === 'same-site') {
+    const navigation = req.headers['sec-fetch-mode'] === 'navigate' && (req.method === 'GET' || req.method === 'HEAD');
+    if (!(allowNavigation && navigation)) return false;
+  }
   const origin = req.headers.origin;
   if (origin === undefined) return true;
   try { return new URL(origin).host === host; } catch { return false; }

package/lib/dashboard/hub-server.js

@@ -283,7 +283,16 @@ function clearLock(){ try{ const l=JSON.parse(fs.readFileSync(LOCK,'utf8')); if(
 process.on('exit', clearLock);
 ['SIGINT','SIGTERM'].forEach((s)=> process.on(s, ()=>{ if (connector) connector.stop(); clearLock(); process.exit(0); }));
 
+const { isLocalRequest } = require('./handlers');
 const server = http.createServer(async (req, res) => {
+  // This machine only (D74). The hub runs agents and writes project files: it listens on the loopback
+  // interfaces only, and still refuses a request whose Host isn't local (DNS rebinding, a tunnel or proxy
+  // on this machine) or that another site sent (cross-site fetch/POST). Reaching a project from elsewhere
+  // is what the online dashboard (server/) is for.
+  if (!isLocalRequest(req, { allowNavigation: true })) {
+    res.writeHead(403, { 'Content-Type': 'text/plain; charset=utf-8' });
+    return res.end(`spectoflow: this dashboard only answers this machine — open http://localhost:${PORT}`);
+  }
   const u = new URL(req.url, `http://localhost:${PORT}`);
   const p = u.pathname;
   try {
@@ -358,4 +367,8 @@ function watchBrain() {
   } catch (_) {}
 }
 
-server.listen(PORT, () => { watchBrain(); writeLock(); console.log(`spectoflow · hub → http://localhost:${PORT}${migrated.movedRegistry ? '  (moved your project list into the workspace)' : ''}`); startConnector(); });
+// IPv6 loopback too, best effort: `localhost` may resolve to ::1 first. No ::1 on this machine → IPv4 only.
+const server6 = http.createServer((req, res) => server.emit('request', req, res));
+server6.on('error', () => {});
+server.on('listening', () => server6.listen(PORT, '::1'));
+server.listen(PORT, '127.0.0.1', () => { watchBrain(); writeLock(); console.log(`spectoflow · hub → http://localhost:${PORT}${migrated.movedRegistry ? '  (moved your project list into the workspace)' : ''}`); startConnector(); });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spectoflow",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "description": "Agent-agnostic spec-driven development framework + real-time local control plane. Markdown artifacts, intent router, workflow-by-scope.",
   "keywords": [
     "spec-driven-development",