@goodandready/dsh-opencode-provider 0.5.13 → 0.5.15

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.5.15
+
+- **Write security**: all write endpoints now require a same-origin `Origin` or `Referer` whose host matches `Host`; a request with neither is rejected with 403 instead of being treated as local. Regression tests cover missing headers, Referer fallback and the DSH LAN bridge path.
+- **Release tooling**: `prepare` sends tsdown output to stderr, so `npm pack --json` emits parseable JSON for preflight.
+- 102 tests.
+
+## 0.5.14
+
+- **DSH WEB compatibility**: same-origin requests from a literal local interface address (for example `192.168.1.111`) are accepted alongside loopback. DNS-rebinding hostnames are still rejected. This restores Settings, sidebar quota, analytics and update status on DSH Web accessed at its trusted LAN URL.
+- Config/key writes from that trusted same-origin host are enabled; `Origin` must match `Host`, and cross-site fetch metadata is rejected. Auto-update POST remains loopback-only.
+- **UI lifecycle**: the injected style tag now uses the canonical `data-dsh-plugin` marker and lookup.
+- 101 tests.
+
 ## 0.5.13
 
 - Removed the unused `LEGACY_CONSOLE_PROVIDER` constant and the dead `settings.models.provider-card` slot declaration left by the custom provider-card removal.

package/README.md

@@ -130,12 +130,12 @@ npm pack
 Install the **packed tarball** into a profile:
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.13.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.15.tgz
 # DSH Desktop:
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.13.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.15.tgz
 
 # Or install the published package:
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.13
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.15
 ```
 
 Restart dsh (or DSH Desktop), then pick **OpenCode (plugin)** or **OpenCode Go (plugin)** in the model picker.

package/README.ru.md

@@ -129,12 +129,12 @@ npm pack
 Установка из **упакованного tarball**:
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.13.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.15.tgz
 # DSH Desktop:
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.13.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.15.tgz
 
 # Либо установка опубликованного пакета из npm:
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.13
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.15
 ```
 
 После установки перезапустите dsh (или DSH Desktop) и выберите **OpenCode (plugin)** или **OpenCode Go (plugin)** в списке моделей.

package/README.zh.md

@@ -124,12 +124,12 @@ npm pack
 通过**打包文件 (.tgz)**安装：
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.13.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.15.tgz
 # DSH 桌面端：
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.13.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.15.tgz
 
 # 或从 npm 安装已发布版本：
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.13
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.15
 ```
 
 安装完成后重启 dsh 或 DSH 桌面端，在模型选择器中选择 **OpenCode (plugin)** 或 **OpenCode Go (plugin)** 即可。

package/lib/client.js

@@ -2977,9 +2977,9 @@ window.__ModuleLoader__.load({
 		//#region src/client/index.tsx
 		function injectCss() {
 			if (typeof document === "undefined") return () => {};
-			if (document.querySelector(`style[data-plugin-css="dsh-opencode-provider"]`) !== null) return () => {};
+			if (document.querySelector(`style[data-dsh-plugin="dsh-opencode-provider"]`) !== null) return () => {};
 			const tag = document.createElement("style");
-			tag.dataset.plugin = "dsh-opencode-provider";
+			tag.dataset.dshPlugin = "dsh-opencode-provider";
 			tag.dataset.pluginCss = CSS_ID;
 			tag.textContent = CSS;
 			document.head.appendChild(tag);

package/lib/index.js

@@ -1,7 +1,7 @@
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { appendFile, mkdir, readFile, readdir, stat, writeFile } from "node:fs/promises";
-import { homedir } from "node:os";
+import { homedir, networkInterfaces } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, attributionHeaders, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import z from "@deepseek-ai/schemastery";
@@ -9,6 +9,7 @@ import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
+import { isIP } from "node:net";
 //#region src/config.ts
 const NS = "llm-opencode";
 const DEFAULT_API_KEY_ENV = "OPENCODE_API_KEY";
@@ -17,7 +18,7 @@ const DEFAULT_GO_API_BASE = "https://opencode.ai/inference/go";
 const DEFAULT_GO_ZEN_BASE = "https://opencode.ai/zen/go/v1";
 const DEFAULT_USAGE_URL = "https://opencode.ai/zen/go/v1/usage";
 const DEFAULT_AUTH_ENTRY = "opencode-go";
-const DEFAULT_USER_AGENT = "dsh-opencode-provider/0.5.13";
+const DEFAULT_USER_AGENT = "dsh-opencode-provider/0.5.15";
 const DEFAULT_CONTEXT_WINDOW = 262144;
 const DEFAULT_MAX_TOKENS = 32768;
 const DEFAULT_GENERATE_MAX_TOKENS = 32768;
@@ -3854,6 +3855,48 @@ function createKeyResolver(ctx, config) {
 	return createKeyPool(ctx, config).resolve;
 }
 //#endregion
+//#region src/local-host.ts
+const LOOPBACK = /* @__PURE__ */ new Set([
+	"localhost",
+	"localhost.",
+	"::1",
+	"[::1]"
+]);
+function normalize(value) {
+	return value.toLowerCase().replace(/^\[|\]$/g, "").replace(/%.+$/, "");
+}
+function isLoopbackHostname(value) {
+	const hostname = normalize(value);
+	return LOOPBACK.has(hostname) || hostname.startsWith("127.") || hostname.startsWith("::ffff:127.");
+}
+function localAddresses() {
+	const addresses = /* @__PURE__ */ new Set();
+	for (const entries of Object.values(networkInterfaces())) for (const entry of entries ?? []) addresses.add(normalize(entry.address));
+	return addresses;
+}
+function isLocalHostname(value) {
+	const hostname = normalize(value);
+	if (isLoopbackHostname(hostname)) return true;
+	if (isIP(hostname) === 0) return false;
+	return localAddresses().has(hostname);
+}
+function authorityHostname(value) {
+	if (value === void 0 || value === "") return void 0;
+	try {
+		return normalize(new URL(`http://${value}`).hostname);
+	} catch {
+		return;
+	}
+}
+function sameOrigin(authority, origin) {
+	try {
+		const parsed = new URL(origin);
+		return (parsed.protocol === "http:" || parsed.protocol === "https:") && parsed.host.toLowerCase() === authority.toLowerCase();
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/plugin-updater.ts
 const UPDATE_HEADER = "x-dsh-plugin-update";
 const UPDATE_TIMEOUT_MS = 6e5;
@@ -3882,26 +3925,16 @@ function isTrustedUpdateRequest(request) {
 		return false;
 	}
 }
-/** Local, loopback-only reads for the update card; blocks DNS-rebinding hosts. */
+/** Status reads from a local Host, including a trusted DSH Web LAN address. */
 function isTrustedReadRequest(request) {
-	if (!isLoopback(request.socket?.remoteAddress)) return false;
 	const host = header(request, "host");
 	if (host === void 0) return false;
-	try {
-		if (!isLoopback(new URL(`http://${host}`).hostname)) return false;
-	} catch {
-		return false;
-	}
+	const hostname = authorityHostname(host);
+	if (hostname === void 0 || !isLocalHostname(hostname)) return false;
 	const site = header(request, "sec-fetch-site");
-	if (site !== void 0 && site !== "same-origin") return false;
+	if (site !== void 0 && site !== "same-origin" && site !== "none") return false;
 	const origin = header(request, "origin");
-	if (origin === void 0) return true;
-	try {
-		const url = new URL(origin);
-		return (url.protocol === "http:" || url.protocol === "https:") && isLoopback(url.hostname) && url.host === host;
-	} catch {
-		return false;
-	}
+	return origin === void 0 || sameOrigin(host, origin);
 }
 function validProfileName(value) {
 	return typeof value === "string" && value !== "" && value !== "." && value !== ".." && !value.includes("/") && !value.includes("\\") && !/[\0-\x1f\x7f]/.test(value);
@@ -4539,29 +4572,24 @@ function json(res, status, value) {
 function allowedOrigin(req) {
 	const origin = req.headers.origin;
 	if (origin === void 0 || origin === "") return true;
-	try {
-		const parsed = new URL(origin);
-		const host = req.headers.host;
-		if (host !== void 0 && parsed.host === host) return true;
-		return parsed.hostname === "127.0.0.1" || parsed.hostname === "localhost" || parsed.hostname === "::1" || parsed.hostname === "[::1]";
-	} catch {
-		return false;
-	}
+	const host = req.headers.host;
+	return host !== void 0 && sameOrigin(host, origin);
 }
 /**
 * DNS rebinding keeps the browser's `Host` pointing at the attacker's name
-* while the socket reaches loopback. Same-origin checks alone cannot catch
-* that, so write endpoints accept only a literal loopback Host.
+* while the socket reaches loopback. A trusted Host must therefore be either
+* loopback or one of this machine's literal interface addresses; a hostname
+* cannot pass on same-origin checks alone.
 */
-function loopbackHost(req) {
+function trustedHost(req) {
+	const hostname = authorityHostname(req.headers.host);
+	return hostname !== void 0 && isLocalHostname(hostname);
+}
+function writeOrigin(req) {
 	const host = req.headers.host;
-	if (host === void 0 || host === "") return false;
-	try {
-		const hostname = new URL(`http://${host}`).hostname;
-		return hostname === "127.0.0.1" || hostname === "localhost" || hostname === "::1" || hostname === "[::1]";
-	} catch {
-		return false;
-	}
+	const source = req.headers.origin ?? req.headers.referer;
+	if (host === void 0 || source === void 0 || source === "") return false;
+	return sameOrigin(host, source);
 }
 async function readJson(req) {
 	const chunks = [];
@@ -4582,17 +4610,17 @@ function requirePost(req, res) {
 		json(res, 405, { error: "POST required" });
 		return false;
 	}
-	if (!loopbackHost(req)) {
-		json(res, 403, { error: "non-loopback Host refused" });
+	if (!trustedHost(req)) {
+		json(res, 403, { error: "non-local Host refused" });
 		return false;
 	}
-	if (!allowedOrigin(req)) {
-		json(res, 403, { error: "cross-origin request refused" });
+	if (!writeOrigin(req)) {
+		json(res, 403, { error: "same-origin Origin or Referer required" });
 		return false;
 	}
-	const remote = req.socket.remoteAddress ?? "";
-	if (!(remote === "127.0.0.1" || remote === "::1" || remote === "::ffff:127.0.0.1")) {
-		json(res, 403, { error: "write endpoints are restricted to the local machine" });
+	const site = req.headers["sec-fetch-site"];
+	if (site !== void 0 && site !== "same-origin" && site !== "none") {
+		json(res, 403, { error: "cross-site request refused" });
 		return false;
 	}
 	if (!(req.headers["content-type"] ?? "").includes("application/json")) {
@@ -4773,8 +4801,8 @@ function applyRoutes(ctx, web, deps) {
 			json(res, 405, { error: "GET required" });
 			return;
 		}
-		if (!loopbackHost(req)) {
-			json(res, 403, { error: "non-loopback Host refused" });
+		if (!trustedHost(req)) {
+			json(res, 403, { error: "non-local Host refused" });
 			return;
 		}
 		if (!allowedOrigin(req)) {
@@ -4792,8 +4820,8 @@ function applyRoutes(ctx, web, deps) {
 			json(res, 405, { error: "GET required" });
 			return;
 		}
-		if (!loopbackHost(req)) {
-			json(res, 403, { error: "non-loopback Host refused" });
+		if (!trustedHost(req)) {
+			json(res, 403, { error: "non-local Host refused" });
 			return;
 		}
 		if (!allowedOrigin(req)) {
@@ -4818,8 +4846,8 @@ function applyRoutes(ctx, web, deps) {
 			json(res, 405, { error: "GET required" });
 			return;
 		}
-		if (!loopbackHost(req)) {
-			json(res, 403, { error: "non-loopback Host refused" });
+		if (!trustedHost(req)) {
+			json(res, 403, { error: "non-local Host refused" });
 			return;
 		}
 		if (!allowedOrigin(req)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-opencode-provider",
-  "version": "0.5.13",
+  "version": "0.5.15",
   "description": "OpenCode / OpenCode Go LLM provider plugin for DeepSeek Harness (dsh).",
   "license": "MIT",
   "type": "module",
@@ -66,7 +66,7 @@
   },
   "scripts": {
     "build": "tsdown",
-    "prepare": "tsdown",
+    "prepare": "tsdown 1>&2",
     "typecheck": "tsc --noEmit",
     "test": "node --import tsx --test tests/core.test.ts tests/routes.test.ts tests/limits.test.ts tests/analytics.test.ts tests/adapter.test.ts tests/usage.test.ts tests/request-log.test.ts tests/account-rules.test.ts tests/commands.test.ts tests/tool-schema.test.ts tests/tui-settings.test.ts tests/plan-filter.test.ts tests/image-budget.test.ts tests/tools.test.ts tests/plugin-updater.test.ts tests/client-render.test.tsx",
     "check": "npm run typecheck && npm test && npm run build",