@goodandready/dsh-moa 0.2.59 → 0.2.60

package/lib/access.js

@@ -136,6 +136,19 @@ export function getReadRejectionStatus(req, ctx = null) {
     return 403
   }
 
+  const host = String(req.headers.host || '').trim().toLowerCase()
+  const origin = req.headers.origin
+  if (origin && origin !== 'null') {
+    try {
+      const u = new URL(origin)
+      if (host && u.host.toLowerCase() !== host) {
+        return 403
+      }
+    } catch {
+      return 403
+    }
+  }
+
   // 2. Reverse-proxy / forwarded client verification (#257)
   const xff = req.headers['x-forwarded-for']
   let isForwardedRemote = false
@@ -149,7 +162,18 @@ export function getReadRejectionStatus(req, ctx = null) {
     }
   }
 
-  // 3. Authoritative DSH connection service check (#257)
+  // 3. Genuine loopback / in-process callers are admitted (#2, #271)
+  // Direct loopback traffic (127.0.0.1 / ::1 / localhost) not forwarded from a remote proxy
+  // cannot originate from the external network. In-process callers, CLI commands, and
+  // adjacent DSH plugins do not carry browser session cookies.
+  const rawRemote = req?.socket?.remoteAddress || req?.connection?.remoteAddress || ''
+  const cleanRemote = String(rawRemote).trim().toLowerCase().replace(/^::ffff:/, '')
+
+  if (cleanRemote && isLoopbackIp(cleanRemote) && !isForwardedRemote) {
+    return undefined
+  }
+
+  // 4. Authoritative DSH connection service check (#257)
   const conn = getConnection(ctx) || req?.connectionService || ctx?.connection
   if (conn && typeof conn.requestRejection === 'function') {
     let rejection
@@ -167,10 +191,7 @@ export function getReadRejectionStatus(req, ctx = null) {
     return undefined
   }
 
-  // 4. Network boundary evaluation when connection service is absent
-  const rawRemote = req?.socket?.remoteAddress || req?.connection?.remoteAddress || ''
-  const cleanRemote = String(rawRemote).trim().toLowerCase().replace(/^::ffff:/, '')
-
+  // 5. Network boundary evaluation when connection service is absent
   if (cleanRemote && !isLoopbackIp(cleanRemote)) {
     return 401
   }
@@ -179,7 +200,6 @@ export function getReadRejectionStatus(req, ctx = null) {
     return 401
   }
 
-  const host = String(req.headers.host || '').trim().toLowerCase()
   if (!cleanRemote && host) {
     const hostName = host.split(':')[0]
     if (!isLoopbackIp(hostName)) {

package/lib/index.js

@@ -324,6 +324,7 @@ export function apply(ctx, config) {
   }, 'dsh-moa: llm stream interceptor')
 }
 
+export { runMoAPipeline } from './moa-runner.js'
 export { executeTestGateForCandidates, runCandidateTestGate } from './moa-test-gate.js'
 export {
   COMPANION_PLUGINS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-moa",
-  "version": "0.2.59",
+  "version": "0.2.60",
   "description": "Mixture of Agents (MoA) plugin for DeepSeek Harness with /moa slash command",
   "type": "module",
   "main": "lib/index.js",