pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-07-31 12:22:14 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat(authz): mark traffic-inspector LOCAL_ONLY + SPAWN_CAPABLE (F6)

Browse Source
This commit is contained in:
diegosouzapw
2026-05-28 01:24:08 -03:00
parent cb6a8c1641
commit 1d6fcfd0c4
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/server/authz/routeGuard.ts
View File

@@ -31,6 +31,8 @@ export const LOCAL_ONLY_API_PREFIXES: ReadonlyArray<string> = [
"/api/services/", // T-10: embedded service lifecycle (spawn child processes)
"/dashboard/providers/services/", // T-07: reverse proxy to embedded service UIs
"/api/copilot/", // unauthenticated LLM driver — CLI-only by default; admins can opt-in to remote access via manage-scope bypass
"/api/tools/agent-bridge/", // F5: start/stop MITM server + DNS edits
"/api/tools/traffic-inspector/", // F6: http-proxy listener + system proxy
];
/**
@@ -51,6 +53,8 @@ export const LOCAL_ONLY_API_PREFIXES: ReadonlyArray<string> = [
export const SPAWN_CAPABLE_PREFIXES: ReadonlyArray<string> = [
"/api/cli-tools/runtime/",
"/api/services/", // T-10: can run npm install + spawn node processes
"/api/tools/agent-bridge/", // start/stop MITM server + DNS edits
"/api/tools/traffic-inspector/", // http-proxy listener + system proxy
];
/**