mirror of
https://github.com/Dvorinka/Primora.git
synced 2026-10-28 15:51:23 +00:00
Tomas DvorakandDevin
2d6135121e
Stress-test remediation across MCP, CLI, and backend:
- primora_vault_exec rewritten as an allow-list (was deny-list):
colon-form single-token commands bypassed it, leaking every vault
secret; verbatim env-name injection allowed NODE_OPTIONS=--require
host RCE. Now fixed read-mostly command set, arg/path deny regex,
strict env-name grammar, loader-hook name blocklist. All prior
bypasses verified denied; allowed commands still inject.
- SSRF: webhook/job URL validation now blocks cloud metadata IPs
(169.254.169.254, fd00:ec2::254) inside the link-local allowance
and non-canonical IP encodings (decimal/hex bare hosts) smuggled
as "docker service names".
- Path params encodeURIComponent in all client consumers — encodeURI
left ?#& intact, smuggling query segments through {name} params.
- primora_upload_object strict-validates contentBase64 — Buffer.from
silently dropped invalid chars.
- MCP no-creds startup degrades instead of crashing mid-handshake.
- GET /api/v1/context — API-key self-discovery; fixes the CLI dead
end (login --api-key validates the key + seeds org/project,
use/context/whoami work under key auth).
- CLI: unknown commands / bare group exit 1 with hints; mri numeric
coercion reversed via raw-argv restore (007 stays "007");
login --json; orgs:rm / projects:rm / buckets:rm behind --yes;
fetch-failed errors name the cause.
- Error hygiene: pgx.ErrNoRows -> 404, pgconn codes -> clean
400/409 without SQLSTATE leaks, validator failures formatted,
services.InputError maps input faults to 400 (webhook URL/event
errors were 500s), presign on local driver -> 400.
- Webhook events accept wildcard patterns (*, ns.*, custom.*)
matched via SQL LIKE — client-published events can be webhooked.
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
60 lines
1.9 KiB
TypeScript
60 lines
1.9 KiB
TypeScript
/* generated using openapi-typescript-codegen -- do not edit */
|
|
/* istanbul ignore file */
|
|
/* tslint:disable */
|
|
/* eslint-disable */
|
|
import type { ActorContext } from '../models/ActorContext';
|
|
import type { BootstrapRequest } from '../models/BootstrapRequest';
|
|
import type { BootstrapResponse } from '../models/BootstrapResponse';
|
|
import type { MeResponse } from '../models/MeResponse';
|
|
import type { CancelablePromise } from '../core/CancelablePromise';
|
|
import { OpenAPI } from '../core/OpenAPI';
|
|
import { request as __request } from '../core/request';
|
|
export class PlatformService {
|
|
/**
|
|
* @returns MeResponse Current authenticated user and tenancy summary
|
|
* @throws ApiError
|
|
*/
|
|
public static getMe(): CancelablePromise<MeResponse> {
|
|
return __request(OpenAPI, {
|
|
method: 'GET',
|
|
url: '/me',
|
|
errors: {
|
|
401: `Error response`,
|
|
},
|
|
});
|
|
}
|
|
/**
|
|
* Caller scope — self-discovery for API keys, which cannot call /me
|
|
* @returns ActorContext Actor type, scopes, and resolved org/project for API keys
|
|
* @throws ApiError
|
|
*/
|
|
public static getActorContext(): CancelablePromise<ActorContext> {
|
|
return __request(OpenAPI, {
|
|
method: 'GET',
|
|
url: '/context',
|
|
errors: {
|
|
401: `Error response`,
|
|
},
|
|
});
|
|
}
|
|
/**
|
|
* @returns BootstrapResponse Platform bootstrapped
|
|
* @throws ApiError
|
|
*/
|
|
public static bootstrapPlatform({
|
|
requestBody,
|
|
}: {
|
|
requestBody: BootstrapRequest,
|
|
}): CancelablePromise<BootstrapResponse> {
|
|
return __request(OpenAPI, {
|
|
method: 'POST',
|
|
url: '/bootstrap',
|
|
body: requestBody,
|
|
mediaType: 'application/json',
|
|
errors: {
|
|
409: `Error response`,
|
|
},
|
|
});
|
|
}
|
|
}
|