From cbb329b44b5aadba14c131af0cb863dfcb2bc018 Mon Sep 17 00:00:00 2001
From: wanjinhao1 <394959433@qq.com>
Date: Sat, 10 Oct 2026 20:11:01 +0800
Subject: [PATCH 1/4] Add nodes.lan_bind_all opt-in before binding the LAN
 listener to 0.0.0.0

Fixes #177: the LAN device listener now binds loopback unless the new
nodes.lan_bind_all flag opts into all interfaces. Exposure is surfaced as a
warning in `sentient doctor` (lan listener row) and the desktop Settings
Advanced section, and lan_status reports bind_all.
---
 .../features/settings/sections/Advanced.tsx   | 11 ++++
 desktop/src/lib/types.ts                      |  9 ++++
 sentient/cli.py                               | 12 +++++
 sentient/config/schema.py                     |  5 ++
 sentient/nodes/lan.py                         |  2 +-
 sentient/nodes/service.py                     | 18 ++++++-
 tests/nodes/test_lan_bind.py                  | 50 +++++++++++++++++++
 7 files changed, 104 insertions(+), 3 deletions(-)
 create mode 100644 tests/nodes/test_lan_bind.py

diff --git a/desktop/src/features/settings/sections/Advanced.tsx b/desktop/src/features/settings/sections/Advanced.tsx
index 31c56d185..d9a7a54dc 100644
--- a/desktop/src/features/settings/sections/Advanced.tsx
+++ b/desktop/src/features/settings/sections/Advanced.tsx
@@ -56,6 +56,17 @@ export function AdvancedSection({ query }: SectionProps) {
             {backend.state === 'ready' ? (socket === 'open' ? 'Running · live connection open' : 'Running · reconnecting') : backend.state}
           </span>
         </FormRow>
+        {config.data?.nodes?.lan_enabled && config.data?.nodes?.lan_bind_all && (
+          <FormRow
+            label="LAN listener"
+            description="The device listener is bound to every network interface (nodes.lan_bind_all). Devices must pair first, but any host on your network can reach it."
+          >
+            <span className="flex items-center gap-2 text-sm text-fg-muted">
+              <StatusDot tone="warning" />
+              Exposed to your network
+            </span>
+          </FormRow>
+        )}
         <FormRow label="Restart engine" description="Stops and starts Sentient's background engine. Chats in progress are interrupted.">
           <Button
             size="sm"
diff --git a/desktop/src/lib/types.ts b/desktop/src/lib/types.ts
index 06395ad8e..7f2cbb2f0 100644
--- a/desktop/src/lib/types.ts
+++ b/desktop/src/lib/types.ts
@@ -297,6 +297,15 @@ export interface SentientConfig {
   proactivity: ProactivityConfig
   voice: VoiceConfig
   ui: UIConfig
+  nodes?: NodesConfig
+}
+
+export interface NodesConfig {
+  enabled: boolean
+  lan_enabled: boolean
+  lan_port: number
+  /** Bind the LAN listener to 0.0.0.0 instead of loopback. */
+  lan_bind_all?: boolean
 }
 
 export type ConfigSection = keyof SentientConfig
diff --git a/sentient/cli.py b/sentient/cli.py
index daf86dc6d..30f61db24 100644
--- a/sentient/cli.py
+++ b/sentient/cli.py
@@ -144,6 +144,18 @@ def row(name: str, ok: bool | None, detail: str = ""):
         row("sqlite-vec", s.store.vec_available, "semantic memory " + ("enabled" if s.store.vec_available else "DISABLED"))
         row("tools", True, f"{len(s.registry.tools())} tools from {len(s.registry.plugins())} plugins")
         row("skills", True, f"{len(s.skills.list())} active, {len(s.skills.list_pending())} pending review")
+        try:
+            lan = s.nodes.lan_status()
+            if lan["enabled"]:
+                row(
+                    "lan listener",
+                    not lan["bind_all"],
+                    f"port {lan['port']}, bound to all interfaces (nodes.lan_bind_all) — any host on the network can reach it, pairing required"
+                    if lan["bind_all"]
+                    else f"port {lan['port']}, this computer only (loopback)",
+                )
+        except Exception as exc:
+            row("lan listener", False, str(exc))
         try:
             text = ""
             async for chunk in s.llm.stream("primary", [{"role": "user", "content": "Reply with the single word: ready"}]):
diff --git a/sentient/config/schema.py b/sentient/config/schema.py
index 3049d3f6c..514047798 100644
--- a/sentient/config/schema.py
+++ b/sentient/config/schema.py
@@ -813,6 +813,11 @@ class NodesConfig(BaseModel):
         False, description="Accept devices on your local network (encrypted, pairing code required)."
     )
     lan_port: int = Field(7778, ge=1024, le=65535, description="Port devices on your network connect to.")
+    lan_bind_all: bool = Field(
+        False,
+        description="Bind the device listener to every network interface (0.0.0.0) instead of this computer only "
+        "(loopback). Off by default: enable it only if devices cannot reach Sentient, and keep pairing on.",
+    )
     mdns_enabled: bool = Field(
         True,
         description="Announce Sentient on your network (mDNS) so glasses and phones find it without typing an address.",
diff --git a/sentient/nodes/lan.py b/sentient/nodes/lan.py
index 3b78dfaf3..af626f60d 100644
--- a/sentient/nodes/lan.py
+++ b/sentient/nodes/lan.py
@@ -167,7 +167,7 @@ async def run() -> None:
             self.error = f"Could not listen on port {port}. Another program may be using it."
             return
         self.running = True
-        log.info("LAN device listener on https://0.0.0.0:%s (sha256 %s)", port, cert.fingerprint)
+        log.info("LAN device listener on https://%s:%s (sha256 %s)", host, port, cert.fingerprint)
         if mdns:
             await self._advertise()
 
diff --git a/sentient/nodes/service.py b/sentient/nodes/service.py
index 37d44e5ed..8262c5b46 100644
--- a/sentient/nodes/service.py
+++ b/sentient/nodes/service.py
@@ -176,7 +176,7 @@ def __init__(self, app):
         self._uploads: dict[str, tuple[Path, str, str, float]] = {}  # id -> (path, node_id, mime, created)
         self._lan_lock = asyncio.Lock()
         self.lan: LanListener | None = None
-        self.lan_host = "0.0.0.0"  # tests bind loopback
+        self.lan_host = "0.0.0.0" if self.cfg.lan_bind_all else "127.0.0.1"  # tests bind loopback explicitly
         # authenticates the LAN app's internal hop into the voice socket; never leaves the process
         self.lan_secret = secrets.token_urlsafe(32)
         self._schema_ready = False
@@ -234,13 +234,26 @@ async def apply_config(self) -> None:
         async with self._lan_lock:
             lan = self.lan
             if want_lan:
-                if lan is None or not lan.running or lan.port != cfg.lan_port or lan.mdns_wanted != cfg.mdns_enabled:
+                host = "0.0.0.0" if cfg.lan_bind_all else "127.0.0.1"
+                if (
+                    lan is None
+                    or not lan.running
+                    or lan.port != cfg.lan_port
+                    or lan.mdns_wanted != cfg.mdns_enabled
+                    or self.lan_host != host
+                ):
                     if lan is not None:
                         await lan.stop()
                     from sentient.nodes.lan import LanListener
 
                     self.lan = LanListener(self)
+                    self.lan_host = host
                     await self.lan.start(cfg.lan_port, mdns=cfg.mdns_enabled, host=self.lan_host)
+                    if host == "0.0.0.0":
+                        log.warning(
+                            "nodes: LAN listener bound to ALL interfaces (nodes.lan_bind_all); "
+                            "any host on the network can reach it and pairing is required"
+                        )
             elif lan is not None:
                 await lan.stop()
                 self.lan = None
@@ -258,6 +271,7 @@ def lan_status(self) -> dict:
             "web_urls": lan.web_urls() if running and lan else [],
             "fingerprint": lan.fingerprint if lan else None,
             "mdns": bool(lan and lan.mdns),
+            "bind_all": bool(cfg.lan_bind_all),
             "error": lan.error if lan else None,
         }
 
diff --git a/tests/nodes/test_lan_bind.py b/tests/nodes/test_lan_bind.py
new file mode 100644
index 000000000..e6d8fef91
--- /dev/null
+++ b/tests/nodes/test_lan_bind.py
@@ -0,0 +1,50 @@
+"""SAFE-15: binding the LAN device listener to all interfaces must be an explicit opt-in."""
+
+from __future__ import annotations
+
+import socket
+
+
+def _free_port() -> int:
+    with socket.socket() as s:
+        s.bind(("127.0.0.1", 0))
+        return s.getsockname()[1]
+
+
+def _enable_lan(core, *, bind_all: bool) -> None:
+    core.config.nodes.lan_enabled = True
+    core.config.nodes.lan_bind_all = bind_all
+    core.config.nodes.lan_port = _free_port()
+    core.config.nodes.mdns_enabled = False
+
+
+def test_lan_bind_all_defaults_off(config):
+    assert config.nodes.lan_bind_all is False
+
+
+async def test_apply_config_binds_loopback_by_default(nodes_client):
+    client = nodes_client()
+    core = client.core
+    _enable_lan(core, bind_all=False)
+    await core.nodes.apply_config()
+    try:
+        assert core.nodes.lan and core.nodes.lan.running
+        assert core.nodes.lan_host == "127.0.0.1"
+        status = core.nodes.lan_status()
+        assert status["bind_all"] is False  # not exposed beyond this computer
+    finally:
+        await core.nodes.lan.stop()
+
+
+async def test_apply_config_requires_opt_in_to_bind_all_interfaces(nodes_client):
+    client = nodes_client()
+    core = client.core
+    _enable_lan(core, bind_all=True)
+    await core.nodes.apply_config()
+    try:
+        assert core.nodes.lan and core.nodes.lan.running
+        assert core.nodes.lan_host == "0.0.0.0"
+        status = core.nodes.lan_status()
+        assert status["bind_all"] is True  # surfaces the exposure warning in doctor and Settings
+    finally:
+        await core.nodes.lan.stop()

From 02f09d84e74c091805d8c758cd880edd91c0748d Mon Sep 17 00:00:00 2001
From: itsskofficial <itsskofficial03@gmail.com>
Date: Sun, 18 Oct 2026 13:59:26 +0530
Subject: [PATCH 2/4] docs(nodes): document bind_all, add the changelog entry
 and plain wording for the network row

---
 changes/177.security.md                             | 2 ++
 desktop/src/features/settings/sections/Advanced.tsx | 2 +-
 desktop/src/lib/types.ts                            | 2 ++
 docs/API.md                                         | 4 +++-
 sentient/cli.py                                     | 2 +-
 5 files changed, 9 insertions(+), 3 deletions(-)
 create mode 100644 changes/177.security.md

diff --git a/changes/177.security.md b/changes/177.security.md
new file mode 100644
index 000000000..cfc976b5c
--- /dev/null
+++ b/changes/177.security.md
@@ -0,0 +1,2 @@
+**Sentient no longer opens itself to your whole network on its own.** Listening beyond this computer for devices
+now needs its own opt-in (`nodes.lan_bind_all`), and Settings and `sentient doctor` warn while it is on.
diff --git a/desktop/src/features/settings/sections/Advanced.tsx b/desktop/src/features/settings/sections/Advanced.tsx
index 6fde50de0..997c267db 100644
--- a/desktop/src/features/settings/sections/Advanced.tsx
+++ b/desktop/src/features/settings/sections/Advanced.tsx
@@ -61,7 +61,7 @@ export function AdvancedSection({ query }: SectionProps) {
         {config.data?.nodes?.lan_enabled && config.data?.nodes?.lan_bind_all && (
           <FormRow
             label="LAN listener"
-            description="The device listener is bound to every network interface (nodes.lan_bind_all). Devices must pair first, but any host on your network can reach it."
+            description="Devices on your network can reach Sentient. They still have to pair first."
           >
             <span className="flex items-center gap-2 text-sm text-fg-muted">
               <StatusDot tone="warning" />
diff --git a/desktop/src/lib/types.ts b/desktop/src/lib/types.ts
index 70f086833..b835dfc06 100644
--- a/desktop/src/lib/types.ts
+++ b/desktop/src/lib/types.ts
@@ -1440,6 +1440,8 @@ export interface DeviceLanInfo {
   web_urls?: string[]
   fingerprint: string | null
   mdns?: boolean
+  /** True when the listener accepts connections from the whole network (`nodes.lan_bind_all`), false for this computer only. */
+  bind_all?: boolean
   error?: string | null
 }
 
diff --git a/docs/API.md b/docs/API.md
index 7ca994a3d..5660f693e 100644
--- a/docs/API.md
+++ b/docs/API.md
@@ -2668,7 +2668,9 @@ A device ("node") is a phone, a pair of smart glasses, a watch, or the desktop a
   its voice chats and what was learned in them → `{ok, forgotten: ForgetCounts}`, section 7, #153);
   `POST /api/nodes/{id}/invoke` `{capability, params, timeout_ms?}` → `{ok, data?, error?, code?}` with `code` `offline`, `unsupported`,
   `timeout`, `not_allowed` (desktop screen capture off), `bad_upload` or the device's own code;
-  `GET /api/nodes/lan` → `{enabled, running, port, urls, web_urls, fingerprint, mdns, error}`.
+  `GET /api/nodes/lan` → `{enabled, running, port, urls, web_urls, fingerprint, mdns, bind_all, error}` (`bind_all`
+  true when the listener is bound to every network interface because `nodes.lan_bind_all` is on, false when it
+  listens on this computer only, #177).
 - Domain events `node.updated` → `Node`, `node.deleted` `{node_id}`, `node.event` `{node_id, event, data}`.
 - Tools (plugin `devices`, hidden unless an online device offers a capability the tools use; the desktop node counts only for
   `screen.capture`): `device_list()` read; `device_take_photo(device="", question="")` read (effective risk `send` while
diff --git a/sentient/cli.py b/sentient/cli.py
index 735048b5a..d6e38376e 100644
--- a/sentient/cli.py
+++ b/sentient/cli.py
@@ -221,7 +221,7 @@ def row(name: str, ok: bool | None, detail: str = ""):
                 row(
                     "lan listener",
                     not lan["bind_all"],
-                    f"port {lan['port']}, bound to all interfaces (nodes.lan_bind_all) — any host on the network can reach it, pairing required"
+                    f"port {lan['port']}, bound to all interfaces (nodes.lan_bind_all); any host on the network can reach it, pairing required"
                     if lan["bind_all"]
                     else f"port {lan['port']}, this computer only (loopback)",
                 )

From 745cec83ba488b700e805e0f45dbdcb9454c778d Mon Sep 17 00:00:00 2001
From: wanjinhao1 <394959433@qq.com>
Date: Mon, 19 Oct 2026 00:05:13 +0800
Subject: [PATCH 3/4] fix(nodes): pairing switch drives lan_bind_all,
 loopback-only advertises loopback URLs, legacy LAN configs opt in

Address review items 1 and 2 on #249: the Add a device switch now sets and
clears nodes.lan_enabled together with nodes.lan_bind_all, lan_status (and the
QR pairing URLs built from it) only advertises 127.0.0.1 addresses while the
listener is loopback-only, and configs saved before lan_bind_all existed keep
treating lan_enabled=true as the 0.0.0.0 opt-in it used to be.
---
 .../src/features/devices/AddDeviceDialog.tsx  |  2 +-
 sentient/config/schema.py                     | 11 +++++++-
 sentient/nodes/service.py                     | 11 ++++++--
 tests/nodes/test_lan_bind.py                  | 26 +++++++++++++++++++
 4 files changed, 46 insertions(+), 4 deletions(-)

diff --git a/desktop/src/features/devices/AddDeviceDialog.tsx b/desktop/src/features/devices/AddDeviceDialog.tsx
index 5a8215b48..bd83f0d6e 100644
--- a/desktop/src/features/devices/AddDeviceDialog.tsx
+++ b/desktop/src/features/devices/AddDeviceDialog.tsx
@@ -91,7 +91,7 @@ function AddDeviceBody({ close }: { close: () => void }) {
   const setLan = async (enabled: boolean) => {
     setSavingLan(true)
     try {
-      if (!previewMode()) await api.config.patch({ nodes: { lan_enabled: enabled } })
+      if (!previewMode()) await api.config.patch({ nodes: { lan_enabled: enabled, lan_bind_all: enabled } })
       await qc.invalidateQueries({ queryKey: deviceKeys.lan })
       newCode()
     } catch (e) {
diff --git a/sentient/config/schema.py b/sentient/config/schema.py
index 2cec14734..e9676ffe8 100644
--- a/sentient/config/schema.py
+++ b/sentient/config/schema.py
@@ -13,7 +13,7 @@ class below and may add fields to it. Do not edit another package's section.
 
 from __future__ import annotations
 
-from typing import Annotated, Literal
+from typing import Annotated, Any, Literal
 
 from pydantic import BaseModel, Field, field_validator, model_validator
 
@@ -1058,6 +1058,15 @@ class NodesConfig(BaseModel):
         True,
         description="Announce Sentient on your network (mDNS) so glasses and phones find it without typing an address.",
     )
+
+    @model_validator(mode="before")
+    @classmethod
+    def _legacy_lan_bind_all(cls, data: Any) -> Any:
+        # Configs saved before nodes.lan_bind_all existed bound the LAN listener to every
+        # interface, so an existing lan_enabled opt-in keeps working until the user chooses otherwise.
+        if isinstance(data, dict) and "lan_bind_all" not in data and data.get("lan_enabled") is True:
+            data = {**data, "lan_bind_all": True}
+        return data
     camera_requires_approval: bool = Field(
         True, description="Ask before the assistant takes a photo or captures a screen with one of your devices."
     )
diff --git a/sentient/nodes/service.py b/sentient/nodes/service.py
index 185961015..57f3beedb 100644
--- a/sentient/nodes/service.py
+++ b/sentient/nodes/service.py
@@ -264,12 +264,19 @@ def lan_status(self) -> dict:
         cfg = self.cfg
         lan = self.lan
         running = bool(lan and lan.running)
+        if running and not cfg.lan_bind_all:
+            # Loopback-only: never advertise network addresses devices could not (and should not) reach.
+            urls = [f"wss://127.0.0.1:{cfg.lan_port}/ws/node"]
+            web_urls = [f"https://127.0.0.1:{cfg.lan_port}/node/"]
+        else:
+            urls = lan.ws_urls() if running and lan else []
+            web_urls = lan.web_urls() if running and lan else []
         return {
             "enabled": bool(cfg.enabled and cfg.lan_enabled),
             "running": running,
             "port": cfg.lan_port,
-            "urls": lan.ws_urls() if running and lan else [],
-            "web_urls": lan.web_urls() if running and lan else [],
+            "urls": urls,
+            "web_urls": web_urls,
             "fingerprint": lan.fingerprint if lan else None,
             "mdns": bool(lan and lan.mdns),
             "bind_all": bool(cfg.lan_bind_all),
diff --git a/tests/nodes/test_lan_bind.py b/tests/nodes/test_lan_bind.py
index e6d8fef91..a75995aba 100644
--- a/tests/nodes/test_lan_bind.py
+++ b/tests/nodes/test_lan_bind.py
@@ -48,3 +48,29 @@ async def test_apply_config_requires_opt_in_to_bind_all_interfaces(nodes_client)
         assert status["bind_all"] is True  # surfaces the exposure warning in doctor and Settings
     finally:
         await core.nodes.lan.stop()
+
+
+def test_legacy_lan_config_counts_as_bind_all_opt_in():
+    from sentient.config.schema import NodesConfig
+
+    legacy = NodesConfig.model_validate({"lan_enabled": True})
+    assert legacy.lan_bind_all is True  # saved before the flag existed: listener bound 0.0.0.0, keep working
+
+    explicit = NodesConfig.model_validate({"lan_enabled": True, "lan_bind_all": False})
+    assert explicit.lan_bind_all is False  # an explicit choice is never overridden
+
+    fresh = NodesConfig.model_validate({})
+    assert fresh.lan_bind_all is False  # new users stay loopback-only
+
+
+async def test_loopback_only_never_advertises_network_addresses(nodes_client):
+    client = nodes_client()
+    core = client.core
+    _enable_lan(core, bind_all=False)
+    await core.nodes.apply_config()
+    try:
+        status = core.nodes.lan_status()
+        assert status["urls"] == [f"wss://127.0.0.1:{core.config.nodes.lan_port}/ws/node"]
+        assert status["web_urls"] == [f"https://127.0.0.1:{core.config.nodes.lan_port}/node/"]
+    finally:
+        await core.nodes.lan.stop()

From 041c59fecfb0154502995b18a1f24eebc9c6c212 Mon Sep 17 00:00:00 2001
From: wanjinhao1 <394959433@qq.com>
Date: Tue, 20 Oct 2026 20:04:47 +0800
Subject: [PATCH 4/4] fix(nodes): doctor reports listener failures before bind
 scope; warn (not fail) on bind-all; exposure log only when listener started

---
 sentient/cli.py           | 26 +++++++++++++++++++-------
 sentient/nodes/service.py |  2 +-
 2 files changed, 20 insertions(+), 8 deletions(-)

diff --git a/sentient/cli.py b/sentient/cli.py
index 5819ef9cc..7074cebf9 100644
--- a/sentient/cli.py
+++ b/sentient/cli.py
@@ -221,13 +221,25 @@ def row(name: str, ok: bool | None, detail: str = ""):
         try:
             lan = s.nodes.lan_status()
             if lan["enabled"]:
-                row(
-                    "lan listener",
-                    not lan["bind_all"],
-                    f"port {lan['port']}, bound to all interfaces (nodes.lan_bind_all); any host on the network can reach it, pairing required"
-                    if lan["bind_all"]
-                    else f"port {lan['port']}, this computer only (loopback)",
-                )
+                if not lan["running"] or lan["error"]:
+                    row(
+                        "lan listener",
+                        False,
+                        f"port {lan['port']}, not running"
+                        + (f": {lan['error']}" if lan["error"] else ""),
+                    )
+                elif lan["bind_all"]:
+                    row(
+                        "lan listener",
+                        None,
+                        f"port {lan['port']}, bound to all interfaces (nodes.lan_bind_all); any host on the network can reach it, pairing required",
+                    )
+                else:
+                    row(
+                        "lan listener",
+                        True,
+                        f"port {lan['port']}, this computer only (loopback)",
+                    )
         except Exception as exc:
             row("lan listener", False, str(exc))
         try:
diff --git a/sentient/nodes/service.py b/sentient/nodes/service.py
index 4ea33db74..5c92f9fec 100644
--- a/sentient/nodes/service.py
+++ b/sentient/nodes/service.py
@@ -271,7 +271,7 @@ async def apply_config(self) -> None:
                     self.lan = LanListener(self)
                     self.lan_host = host
                     await self.lan.start(cfg.lan_port, mdns=cfg.mdns_enabled, host=self.lan_host)
-                    if host == "0.0.0.0":
+                    if host == "0.0.0.0" and self.lan.running:
                         log.warning(
                             "nodes: LAN listener bound to ALL interfaces (nodes.lan_bind_all); "
                             "any host on the network can reach it and pairing is required"