@falling-ts/dsh-local-no-auth 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 the dsh-local-no-auth contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.cn.md

@@ -0,0 +1,89 @@
+# dsh-local-no-auth
+
+一个 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 的
+Cordis 插件：让 `dsh web` 的**仅回环本地实例**免浏览器会话认证——不需要
+launch token、不需要 cookie——而且**不改上游源码的一个字**。
+
+| | |
+|---|---|
+| 包名 | `@falling-ts/dsh-local-no-auth` |
+| License | MIT |
+| 平台 | 纯 Host 插件（无客户端半部、无 UI） |
+
+## 适用场景
+
+`dsh web` 用"启动 URL 里的 `?token=...` 交换 + 签名 cookie"守卫全部访问。
+这在远程/共享部署下是对的；但对只监听回环的本地实例纯属仪式——能连到这个
+端口的主机，本来就是这台机器本身。
+
+## 实现原理（零源码改动）
+
+上游所有认证判定都经由 `ctx.connection` 服务**实例**的三个方法：
+
+| 方法 | 管辖 |
+|---|---|
+| `requestRejection` | `/api` 面（RPC / 流 / 网关）的 401/403 判定 |
+| `authorizeIndex` | 前端 index 请求的 token/cookie 认证 |
+| `authenticatedUrl` | 打印的启动 URL（追加 launch token） |
+
+本插件在自身 `apply` 里先读取实时 `webServer` 绑定地址：**只有回环字面量才
+继续**，否则 fail-loud 抛错拒载；然后才把这三个**实例方法**在运行时替换掉：
+
+```js
+connection.requestRejection = () => undefined   // 所有 /api 请求直接放行
+connection.authorizeIndex   = () => true        // index 立即返回
+connection.authenticatedUrl = (url) => url      // 打印的 URL 保持干净
+```
+
+各消费点（`/api` 路由、frontend-static 兜底席位、API 网关、web-app 的 URL
+公告）都是按实例引用调用这三个方法的，因此整个本地面一次性变为免 token、
+免 cookie。插件卸载（`dispose`）时恢复原方法。
+
+## 安全边界
+
+- **绑定地址闸门**：`apply` 读取实时 `webServer` 主机并校验为
+  `127.0.0.1` / `localhost` 才放行，否则抛错拒载（fail-loud，无静默兜底）。
+  上游 webserver 的 Config schema 只接受 `'127.0.0.1' | '0.0.0.0'`，因此
+  `0.0.0.0`（所有网卡）必然被拒——插件绝不会在"其它主机可达"的监听上静默生效。
+- `dsh web` 只绑回环，CLI **拒绝 `--host 0.0.0.0`**，所以本插件自身不会把
+  服务暴露给其它主机。
+- **不要**与任何让该端口可达性超出本机的手段搭配（共享机器上的 SSH 转发、
+  VLAN 回环、NAT hairpin）。
+- 若上游未来允许非回环绑定，本插件会拒绝启动，而不是静默放行。
+
+## 安装
+
+```sh
+# 本地目录安装（支持目录路径）：
+pnpm dsh plugin --profile web add <本目录绝对路径>
+
+# 发布后：
+dsh plugin --profile web add github:falling-ts/dsh-local-no-auth
+```
+
+`dsh web` 没有 `--patch` 命令行叠加；插件通过 profile 自身的
+`cordis.patch.yml` 引用本包的 `dsh.bundle.patch` 层激活。装完重启
+`dsh web`。
+
+## 验证
+
+```sh
+curl -i http://127.0.0.1:<port>/          # 200 + index.html，无需 token
+curl -i -X POST http://127.0.0.1:<port>/api/session/list \
+  -H 'content-type: application/json' \
+  -d '{"type":"client-request","rpcId":"probe","method":"session/list","payload":{}}'
+# 返回业务信封（2xx，result.ok 为 true/false）—— 绝不是 401
+```
+
+## 卸载
+
+```sh
+dsh plugin --profile web remove dsh-local-no-auth
+```
+
+## 已知限制
+
+- 放行是进程级的：同一组合里的所有插件都会看到免认证的 `/api`——这正是
+  本地开发机想要的。
+- 启动日志仍打印 `dsh web: http://...`（干净 URL）；配合
+  `--trusted-host` 的 LAN 候选地址同样以干净 URL 打印。

package/README.md

@@ -0,0 +1,97 @@
+# dsh-local-no-auth
+
+A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) Cordis
+plugin that bypasses the `dsh web` browser-session authentication for the
+**loopback-local** instance — no launch token, no cookie — **without modifying
+a single line of upstream source**.
+
+| | |
+|---|---|
+| Package | `@falling-ts/dsh-local-no-auth` |
+| License | MIT |
+| Platform | Host-only (no client half, no UI) |
+
+## Why
+
+`dsh web` guards its surface with a launch-token exchange (the `?token=...`
+on the printed URL) plus a signed browser cookie. That is correct for remote
+or shared deployments, but for a loopback-only local instance it is pure
+ceremony: any host that can reach the port is a host already on the machine.
+
+## How it works (no source changes)
+
+Upstream routes every authentication decision through the live
+`ctx.connection` service instance's methods:
+
+| method | gate |
+|---|---|
+| `requestRejection` | `/api` surface (RPC, streams, gateway) — 401/403 |
+| `authorizeIndex` | frontend index request — token/cookie exchange |
+| `authenticatedUrl` | printed startup URL — appends the launch token |
+
+This plugin, in its own `apply`, first checks the live webServer bind host and
+**refuses to start** unless it is a loopback literal, then replaces those three
+**instance methods** at runtime:
+
+```js
+connection.requestRejection = () => undefined   // every /api request proceeds
+connection.authorizeIndex   = () => true        // index serves immediately
+connection.authenticatedUrl = (url) => url      // printed URL stays clean
+```
+
+Every consumer (the `/api` route, the frontend-static fallback seat, the API
+gateway, the web-app URL announcement) calls them by instance reference, so the
+whole local surface becomes token- and cookie-free at once. On unload
+(`dispose`) the original methods are restored.
+
+## Safety boundary
+
+- **Bind-host gate:** `apply` reads the live `webServer` bind host and throws
+  (fails loud, no timeout fallback) unless it is `127.0.0.1` or `localhost`.
+  The upstream webserver Config schema only accepts `'127.0.0.1' | '0.0.0.0'`,
+  so `0.0.0.0` (all interfaces) always fails and the bypass never silently
+  activates against a reachable-by-others listen.
+- `dsh web` binds loopback and the CLI **rejects `--host 0.0.0.0`**, so this
+  bypass cannot, by itself, expose the server to other hosts.
+- Never combine with anything that makes the reach accessible beyond the local
+  machine (SSH forwarders on shared boxes, VLAN loopback, NAT hairpin).
+- Authorization of *remote* requests is unchanged only because there are none
+  on a loopback bind; if upstream ever allows non-loopback binds, this plugin
+  refuses to start rather than silently bypassing.
+
+## Install
+
+```sh
+# local development install (directory path is accepted):
+pnpm dsh plugin --profile web add <absolute-path-to-this-directory>
+
+# after publishing:
+dsh plugin --profile web add github:falling-ts/dsh-local-no-auth
+```
+
+`dsh web` has no `--patch` CLI overlay; the plugin activates through the
+profile's own `cordis.patch.yml` referencing this package's `dsh.bundle.patch`
+layer. Restart `dsh web` afterwards.
+
+## Verify
+
+```sh
+curl -i http://127.0.0.1:<port>/          # 200 + index.html, no token needed
+curl -i -X POST http://127.0.0.1:<port>/api/session/list \
+  -H 'content-type: application/json' \
+  -d '{"type":"client-request","rpcId":"probe","method":"session/list","payload":{}}'
+# a business envelope arrives (2xx, result.ok true/false) — never 401
+```
+
+## Uninstall
+
+```sh
+dsh plugin --profile web remove dsh-local-no-auth
+```
+
+## Known limitations
+
+- The bypass is process-wide: every plugin in the same composition sees
+  unauthenticated `/api`. That is the point for a local dev box.
+- Startup log line still says `dsh web: http://...` (clean URL) and, with
+  `--trusted-host` LAN candidates, prints the LAN URL clean as well.

package/cordis.patch.yml

@@ -0,0 +1,13 @@
+# Opt-in layer: mount the dsh-local-no-auth function plugin over the current
+# composition without changing shipped defaults or any upstream source.
+#
+#   pnpm dsh plugin --profile web add <this-directory>          # local dev install
+#   dsh plugin --profile web add github:falling-ts/dsh-local-no-auth   # once published
+#
+# The plugin bypasses browser-session authentication for the loopback-local dsh
+# web instance by replacing the live `connection` instance methods
+# (requestRejection / authorizeIndex / authenticatedUrl); unload restores them.
+
+- insert:
+    - id: dsh-local-no-auth
+      name: '@falling-ts/dsh-local-no-auth'

package/index.js

@@ -0,0 +1,82 @@
+/**
+ * dsh-local-no-auth — a DSH Cordis function plugin.
+ *
+ * Bypasses the dsh web browser-session authentication for the loopback-local
+ * instance WITHOUT touching any upstream source. It replaces the three
+ * authentication methods on the live `ctx.connection` service instance:
+ *
+ *   - `requestRejection` — the `/api` surface's 401/403 gate (RPC, streams, gateway)
+ *   - `authorizeIndex`   — the frontend index request's token/cookie exchange
+ *   - `authenticatedUrl` — the startup URL line (drops the launch `?token=...`)
+ *
+ * Every authentication decision in the running app goes through these instance
+ * methods by instance reference (the `/api` route, the frontend-static fallback
+ * seat, the API gateway, and the web-app URL announcement), so replacing them
+ * here makes the whole local surface token- and cookie-free:
+ *
+ *   http://127.0.0.1:<port>/   serves index.html immediately, no login round-trip
+ *   /api/*                     answers RPC without a signed browser cookie
+ *   the printed URL            stays clean (no launch token appended)
+ *
+ * Safety boundary: `apply` refuses to start unless the live webServer bind host
+ * is a loopback literal. The upstream webserver Config schema only accepts
+ * `'127.0.0.1' | '0.0.0.0'`, so in practice `127.0.0.1` passes and `0.0.0.0`
+ * (all interfaces) fails; `localhost` is kept as a loopback alias for future
+ * schema latitude. Any other value fails loud — the bypass never silently
+ * activates against a reachable-by-others listen. Never enable the plugin when
+ * the reach in question can be accessed by other hosts anyway (SSH forwarders,
+ * VLAN-reachable loopback, NAT looping). Unload restores the original methods,
+ * so a disposed plugin leaves the instance identical to an unpatched run.
+ *
+ * @module @falling-ts/dsh-local-no-auth
+ */
+
+/** Stable Cordis plugin name. */
+export const name = 'dsh-local-no-auth'
+
+/** Connection and webServer must be active before their members can be read. */
+export const inject = ['connection', 'webServer']
+
+/** The connection instance methods that own every auth decision in this app. */
+const AUTH_METHODS = ['requestRejection', 'authorizeIndex', 'authenticatedUrl']
+
+/** Bind hosts this bypass may operate under: loopback literals only. */
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost'])
+
+/**
+ * Replace the connection instance's authentication methods for this process,
+ * but only while the instance listens on a loopback-only bind host.
+ * @param {import('@deepseek-ai/cordis').Context} ctx - plugin context with `connection` and `webServer` active.
+ */
+export function apply(ctx) {
+  const connection = ctx.connection
+  if (!connection || typeof connection !== 'object') {
+    throw new Error('dsh-local-no-auth: connection service unavailable')
+  }
+  const webServer = ctx.webServer
+  const bindHost = webServer && typeof webServer.host === 'string' ? webServer.host : undefined
+  if (bindHost === undefined) {
+    throw new Error('dsh-local-no-auth: webServer bind host unavailable; refusing to start')
+  }
+  if (!LOOPBACK_HOSTS.has(bindHost)) {
+    throw new Error(
+      `dsh-local-no-auth: refusing to start — webServer bind host "${bindHost}" is not loopback-only `
+      + `(allowed: ${[...LOOPBACK_HOSTS].join(', ')}). The no-auth bypass is only safe when `
+      + `no other host can reach the instance.`,
+    )
+  }
+  const originals = {}
+  for (const method of AUTH_METHODS) {
+    if (typeof connection[method] !== 'function') {
+      throw new Error(`dsh-local-no-auth: connection.${method} is not a function; refusing to start`)
+    }
+    originals[method] = connection[method]
+  }
+  connection.requestRejection = () => undefined
+  connection.authorizeIndex = () => true
+  connection.authenticatedUrl = (baseUrl) => baseUrl
+  ctx.on('dispose', () => {
+    for (const method of AUTH_METHODS) connection[method] = originals[method]
+  })
+  console.log(`[dsh-local-no-auth] active: browser token/cookie checks bypassed; URLs printed clean (bind host "${bindHost}", loopback-only)`)
+}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@falling-ts/dsh-local-no-auth",
+  "version": "0.2.0",
+  "description": "DSH Cordis plugin: loopback-local no-auth for the dsh web GUI. Replaces the live ctx.connection instance's three authentication methods (requestRejection / authorizeIndex / authenticatedUrl) at runtime so the loopback-bound dsh web instance serves the frontend and /api without a launch token or browser cookie, and prints clean URLs. Refuses to start unless the live webServer bind host is loopback-only (127.0.0.1 / localhost). Touches no upstream source; dispose restores the original methods.",
+  "type": "module",
+  "main": "./index.js",
+  "exports": {
+    ".": "./index.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "cordis.patch.yml"
+  ],
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}