@corenel/sidecar

A small local capability server for Prompd. Run it next to the web app and the browser can reach your machine — most usefully, your local LLMs (Ollama, LM Studio, vLLM) without CORS, plus your filesystem and (opt-in) shell.

It runs only while the command is open, binds to loopback by default, and pairs with a token the app reads once.

Use

In Prompd, open Connect a sidecar and follow the steps, or run it directly:

npx @corenel/sidecar --allow-origin https://prompd.app

It prints a pairing token; paste that into the app. The --allow-origin flag must match the site you're connecting from (the app fills it in for you).

Options

| Flag | Default | What | |------|---------|------| | --allow-origin <url> | (none) | Browser origin allowed to connect. Required for a web page. Repeatable. | | --port <n> | 4858 | Port to listen on. | | --root <dir> | cwd | Root the file tools are confined to. | | --allow-shell | off | Enable the shell_exec tool (RCE on your machine — opt-in). | | --host <addr> | 127.0.0.1 | Bind address. Non-loopback is reachable off-box; keep the token secret. | | --tls-cert <f> --tls-key <f> | (none) | Serve wss:// (needed for a remote sidecar from an https page). |

Security

• Loopback by default; a browser connection requires both the pairing token and an allowed Origin.
• The HTTP proxy (for local LLMs) only reaches loopback hosts — it can't be used as an SSRF pivot to internal services.
• shell_exec is off unless you pass --allow-shell.

Licensed under Elastic-2.0.