mirror of
https://github.com/przeprogramowani/10x-cli.git
synced 2026-09-19 03:30:01 +08:00
przeprogramowani
2f4ebd3b75
* docs: add corporate network allowlist for security/sysadmin teams Polish sysadmin spec plus a machine-readable host list and a source-scan test so new CLI destinations cannot land undocumented. * chore(release): prepare v1.23.1 * docs: rewrite corporate allowlist in sysadmin language (PL+EN) Plain host/port/protocol tables, matching English document, and an allowlist test that covers both language files. * docs: drop localhost from the corporate network allowlist Public DNS names only; the source scan skips IP literals and single-label hosts so local-dev URLs stay out of the sysadmin spec. --------- Co-authored-by: Claude <noreply@anthropic.com>
108 lines
3.2 KiB
JSON
108 lines
3.2 KiB
JSON
{
|
|
"version": 1,
|
|
"updated": "2026-09-18",
|
|
"description": "Hostnames that 10x-cli source may mention or contact. Keep in sync with docs/wymagania-sieciowe.md and docs/network-requirements.md. tests/network-allowlist.test.ts fails when src/ or those docs introduce an unlisted host.",
|
|
"hosts": [
|
|
{
|
|
"hostname": "10x-toolkit-api.przeprogramowani.workers.dev",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "cli_process",
|
|
"required": true,
|
|
"inDocs": true,
|
|
"when": ["login", "every_authenticated_command", "doctor"],
|
|
"purpose": "Delivery API: auth, membership, catalog, lessons, artifacts, health"
|
|
},
|
|
{
|
|
"hostname": "registry.npmjs.org",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "cli_process",
|
|
"required": true,
|
|
"inDocs": true,
|
|
"when": ["install", "update_check"],
|
|
"purpose": "Public npm registry for @przeprogramowani/10x-cli; doctor version lookup"
|
|
},
|
|
{
|
|
"hostname": "10xbench.ai",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "cli_process",
|
|
"required": false,
|
|
"inDocs": true,
|
|
"when": ["bench"],
|
|
"purpose": "Public leaderboard JSON for `10x bench`"
|
|
},
|
|
{
|
|
"hostname": "github.com",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "cli_process",
|
|
"required": false,
|
|
"inDocs": true,
|
|
"when": ["bench_kit", "optional_binary_install"],
|
|
"purpose": "git clone of 10x-bench-kit; optional GitHub Releases binary download"
|
|
},
|
|
{
|
|
"hostname": "objects.githubusercontent.com",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "browser",
|
|
"required": false,
|
|
"inDocs": true,
|
|
"when": ["optional_binary_install"],
|
|
"purpose": "Unconfirmed GitHub Releases asset CDN"
|
|
},
|
|
{
|
|
"hostname": "release-assets.githubusercontent.com",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "browser",
|
|
"required": false,
|
|
"inDocs": true,
|
|
"when": ["optional_binary_install"],
|
|
"purpose": "Unconfirmed GitHub Releases asset CDN"
|
|
},
|
|
{
|
|
"hostname": "toolkit.przeprogramowani.pl",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "browser",
|
|
"required": true,
|
|
"inDocs": true,
|
|
"when": ["login_email"],
|
|
"purpose": "Magic-link callback opened in the user's browser"
|
|
},
|
|
{
|
|
"hostname": "10xdevs.pl",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "browser",
|
|
"required": false,
|
|
"inDocs": true,
|
|
"when": ["enrollment_hint"],
|
|
"purpose": "Enrollment URL printed in error hints; CLI does not fetch it"
|
|
},
|
|
{
|
|
"hostname": "app.circle.so",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "browser",
|
|
"required": false,
|
|
"inDocs": true,
|
|
"when": ["login_circle_human"],
|
|
"purpose": "Circle web app so the user can open the login DM; CLI process does not connect"
|
|
},
|
|
{
|
|
"hostname": "git-scm.com",
|
|
"port": 443,
|
|
"protocol": "https",
|
|
"calledBy": "documentation_only",
|
|
"required": false,
|
|
"inDocs": false,
|
|
"when": ["bench_kit"],
|
|
"purpose": "Install-git hint in a bench-kit error message; CLI does not fetch it"
|
|
}
|
|
]
|
|
}
|