coderouter-cli 2.7.4__py3-none-any.whl → 2.7.5__py3-none-any.whl

coderouter/cli.py

@@ -10,6 +10,36 @@ import uvicorn
 
 from coderouter import __version__
 
+# Bind addresses that keep the server loopback-only. Anything else means the
+# operator is deliberately exposing CodeRouter beyond this machine, at which
+# point the v2.7.0 Host-header validation (DNS-rebinding guard) will 403 every
+# request whose Host is not allow-listed — a combination that has confused
+# real users ("worked on 2.6, LAN access broken on 2.7").
+_LOOPBACK_BIND_HOSTS = frozenset({"127.0.0.1", "localhost", "::1", "[::1]"})
+
+
+def _external_bind_warning(host: str, allowed_hosts_env: str | None) -> str | None:
+    """Return a startup warning when binding beyond loopback needs config.
+
+    Fires only for the confusing combination: non-loopback bind (the operator
+    wants LAN/external access) while ``CODEROUTER_ALLOWED_HOSTS`` is unset
+    (so every non-loopback Host header will be rejected with 403). Returns
+    the warning text, or None when the configuration is coherent.
+    """
+    if host in _LOOPBACK_BIND_HOSTS:
+        return None
+    if allowed_hosts_env and allowed_hosts_env.strip():
+        return None
+    return (
+        f"serve: binding on {host!r} but CODEROUTER_ALLOWED_HOSTS is not set. "
+        "Requests whose Host header is not loopback will be rejected with 403 "
+        "(v2.7.0 DNS-rebinding guard). To allow LAN access, set "
+        "CODEROUTER_ALLOWED_HOSTS=<THIS machine's address as it appears in the "
+        "client's URL bar, e.g. 192.168.x.x — NOT the client's own IP> "
+        "(comma-separated, no port). Note the chat endpoints have no "
+        "authentication — do not expose CodeRouter directly to the internet."
+    )
+
 
 def _build_parser() -> argparse.ArgumentParser:
     parser = argparse.ArgumentParser(
@@ -366,6 +396,15 @@ def main(argv: list[str] | None = None) -> int:
             if stripped:
                 os.environ["CODEROUTER_MODE"] = stripped
 
+        # v2.7.5: warn about the "bound beyond loopback but Host validation
+        # will reject everything" trap BEFORE uvicorn takes over the console,
+        # so the hint is the first thing an operator sees.
+        warning = _external_bind_warning(
+            args.host, os.environ.get("CODEROUTER_ALLOWED_HOSTS")
+        )
+        if warning:
+            print(f"WARNING: {warning}", file=sys.stderr)
+
         uvicorn.run(
             "coderouter.ingress.app:create_app",
             factory=True,

{coderouter_cli-2.7.4.dist-info → coderouter_cli-2.7.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: coderouter-cli
-Version: 2.7.4
+Version: 2.7.5
 Summary: Local-first, free-first, fallback-built-in LLM router. Claude Code / OpenAI compatible.
 Project-URL: Homepage, https://github.com/zephel01/CodeRouter
 Project-URL: Repository, https://github.com/zephel01/CodeRouter
@@ -98,7 +98,7 @@ Description-Content-Type: text/markdown
 | backend が落ちたらセッション終了 | ローカル → 無料 → 有料へ自動フォールバック |
 | 長時間で context 溢れ・drift・ループ | 6 系統ガード + self-healing |
 | モデル名がハードコード (リタイアで即エラー) | プロファイルで抽象化、差し替え 1 行 |
-| 何が悪いか分からない | `doctor` 6 プローブ + `/dashboard` + audit/replay |
+| 何が悪いか分からない | `doctor` 7 プローブ + `/dashboard` + audit/replay |
 
 直結で困っていないなら CodeRouter は不要です。**長時間・無人・弱いモデル**のどれかに当てはまったら、戻ってきてください。
 
@@ -167,14 +167,14 @@ ANTHROPIC_BASE_URL=http://localhost:8088 ANTHROPIC_AUTH_TOKEN=dummy claude
 | **Drift Detection** | モデルの応答品質が徐々に劣化 → 別 provider に切替 or KV cache flush (6 シグナル、`goal_mode` で目標達成停滞も検知) |
 | **Self-healing** | backend が落ちた → 自動除外 + restart + 回復 probe で自動復帰 |
 | **Tool Loop Guard** | 同じツールを無限に呼び続ける → 検知して停止 |
-| **Memory Pressure** | GPU メモリ不足を検知 → 軽量モデルに切替 |
+| **Memory Pressure** | OOM を出した backend を一時除外 → チェーンの次の provider へフォールスルー |
 | **Mid-stream Guard** | 応答途中で落ちた → 溜まったテキストを安全に返却 |
 
 ### 診断と可視化
 
 | 機能 | 何がわかるか |
 |---|---|
-| **`coderouter doctor`** | プロバイダの問題を 6 プローブで即診断 + 修正パッチ出力 |
+| **`coderouter doctor`** | プロバイダの問題を 7 プローブで即診断 + 修正パッチ出力 |
 | **`/dashboard`** | ブラウザで今何が起きてるかリアルタイム確認 |
 | **`coderouter audit`** | guard 発火履歴を検索 |
 | **`coderouter replay`** | provider 切替の効果を統計比較 (A/B 分析) / `--suggest-rules` でルール最適化提案 |
@@ -281,6 +281,7 @@ providers:
 | 無料で回す | [無料枠ガイド](./docs/guides/free-tier-guide.md) |
 | llama.cpp / vllm を GUI で起動 | [Launcher ガイド](./docs/backends/launcher.md) |
 | 言語税を計測・回避する | [言語税ガイド](./docs/guides/language-tax.md) |
+| 別の PC から安全に繋ぐ | [リモートアクセスガイド](./docs/guides/remote-access.md) |
 | 詰まった | [トラブルシューティング](./docs/guides/troubleshooting.md) |
 | 設計を知りたい | [アーキテクチャ詳細](./docs/concepts/architecture.md) |
 | 全リリース履歴 | [CHANGELOG](./CHANGELOG.md) |
@@ -307,7 +308,7 @@ English: [Quickstart](./docs/start/quickstart.en.md) · [Usage guide](./docs/gui
 ## 技術スペック
 
 - **ランタイム依存**: `fastapi` / `uvicorn` / `httpx` / `pydantic` / `pyyaml` の 5 個のみ
-- **テスト**: 964 本 (41 sub-release 連続で依存追加なし)
+- **テスト**: 1,500+ 本(ランタイム依存 5 個は v1 系から不変)
 - **対応 OS**: macOS (Apple Silicon 推奨) / Linux / Windows WSL2
 - **対応 backend**: Ollama / llama.cpp / LM Studio / vLLM / MLX-LM / OpenRouter / NVIDIA NIM / Anthropic API
 - **ライセンス**: MIT

{coderouter_cli-2.7.4.dist-info → coderouter_cli-2.7.5.dist-info}/RECORD

@@ -1,6 +1,6 @@
 coderouter/__init__.py,sha256=ghdjPrLtnRzY8fyQ4CJZI1UJKADyNTLtA3G7se8H7Ns,696
 coderouter/__main__.py,sha256=-LCgxJnvgUV240HjQKv7ly-mn2NuKHpC4nCpvTHjeSU,130
-coderouter/cli.py,sha256=KE49IACJVw692H6dlfu1tAah1jQgbwH92F4lCkhRk6U,28168
+coderouter/cli.py,sha256=7zxt6riKPTpHGiDms9SVaPbe-n4ytfCrhIVtuPII-oU,30173
 coderouter/cli_stats.py,sha256=CCjzc1G4hTRHZ2gG1XhxhDpUkJnnl3NXbcbp1T18jpg,29894
 coderouter/cost.py,sha256=32h6uzb4nxh2eA5d2Hn3kD9yJbtis6CFDAbeIy5KRkM,7431
 coderouter/doctor.py,sha256=2luNk6BHSRvpQStJnHcqzNvNi-SKdOuKV0WZdorZhVk,82854
@@ -67,8 +67,8 @@ coderouter/translation/__init__.py,sha256=PYXN7XVEwpG1uC8RLy6fvnGbzEZhhrEuUapH8I
 coderouter/translation/anthropic.py,sha256=aZkcYH4x82b0x7efJgJb9RWn9Hbyc9pEOthXe4vjUdU,11113
 coderouter/translation/convert.py,sha256=VV4kpu4dvLmGBmJfQnCLY5ryy_AnQcV2NuwjqRtaR8Q,52633
 coderouter/translation/tool_repair.py,sha256=DGOKArM53yfVbIfiAveoul1vGq9NEKmjagf43Qh4IkM,57630
-coderouter_cli-2.7.4.dist-info/METADATA,sha256=55ucKwRohGC6WEQr_NyGWjRjzhVgE7rOYgl4rfDNNkw,15388
-coderouter_cli-2.7.4.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
-coderouter_cli-2.7.4.dist-info/entry_points.txt,sha256=-dnLfD1YZ2WjH2zSdNCvlO65wYltM9bsHt9Fhg3yGss,51
-coderouter_cli-2.7.4.dist-info/licenses/LICENSE,sha256=wkEzoR86jFw33jvfOHjULqmkGEfxTFMgMaJnpR8mPRw,1065
-coderouter_cli-2.7.4.dist-info/RECORD,,
+coderouter_cli-2.7.5.dist-info/METADATA,sha256=VsPe8Z7VLlfIRAm5OHEP8VP-gE6CZmWcQFDqWlxiXIE,15546
+coderouter_cli-2.7.5.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
+coderouter_cli-2.7.5.dist-info/entry_points.txt,sha256=-dnLfD1YZ2WjH2zSdNCvlO65wYltM9bsHt9Fhg3yGss,51
+coderouter_cli-2.7.5.dist-info/licenses/LICENSE,sha256=wkEzoR86jFw33jvfOHjULqmkGEfxTFMgMaJnpR8mPRw,1065
+coderouter_cli-2.7.5.dist-info/RECORD,,