@goodandready/dsh-opencode-provider 0.5.32 → 0.5.33

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.33 — release 10: admin token and dependency audit
+
+- **#41 — authenticated HTTP routes**: optional owner `adminToken` (profile config or `OPENCODE_ADMIN_TOKEN`). When set, every `/dsh-opencode/*` route requires `x-opencode-token` or a Bearer token with constant-time comparison; forged Host/Origin alone no longer passes. The settings UI prompts for the token and keeps it in this browser.
+- **#42 — zod audit**: confirmed `zod` 4.4.3 is pinned by all DSH 0.2.2-rc.1 packages; GHSA-mrhx-c7xc-m3w5 affects `<4.6.6`. No DSH release with the fix exists, this plugin does not bundle zod, and no forced override was added. Residual exposure is documented and must be re-audited after the upstream update.
+- 145 tests.
+
 ## 0.5.32 — release 9: proxy auth and route switches
 
 - **#71 — authenticated proxy**: `proxyUsername` plus a password stored in the credential service enable Basic auth for HTTP/HTTPS and SOCKS5 proxies. The authenticated URL exists only in memory; `/state` returns the credential-free address and a `configured` flag, never the password.

package/README.md

@@ -133,12 +133,12 @@ npm pack
 Install the **packed tarball** into a profile:
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.32.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.33.tgz
 # DSH Desktop:
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.32.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.33.tgz
 
 # Or install the published package:
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.32
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.33
 ```
 
 Restart dsh (or DSH Desktop), then pick **OpenCode (plugin)** or **OpenCode Go (plugin)** in the model picker.
@@ -315,7 +315,8 @@ GitHub Actions runs `npm run check` and `npm pack` on push/PR (`.github/workflow
 - `opencode-direct` (Console) billing shows no per-model allowance; the Go route is the primary target.
 - The anonymous free lane (`Bearer public` + CLI impersonation) is not implemented. A keyless `big-pickle` probe on 2026-11-05 returned HTTP 429 `FreeUsageLimitError`; use the keyed Console/Zen route for free models.
 - The UI requires a web profile (the Host needs `ctx.webServer`); the TUI keeps the `/opencode` command and the model routes.
-- Write routes are loopback-only; a web profile exposed to a LAN can read state but cannot save configuration or keys until the host auth token is integrated.
+- Same-origin checks are CSRF protection, not authentication. Set an owner admin token in the profile config (`adminToken`) or `OPENCODE_ADMIN_TOKEN`; every `/dsh-opencode/*` route then requires `x-opencode-token` or `Authorization: Bearer`. The settings UI asks for the token once and keeps it in this browser. Without a token, routes retain the loopback/same-origin guard only.
+- `npm audit` still reports `zod < 4.6.6` (GHSA-mrhx-c7xc-m3w5) because every `@deepseek-ai/dsh-*` 0.2.2-rc.1 package pins `zod` 4.4.3. No DSH 0.2.2 release with 4.6.6 exists yet; this plugin does not bundle zod and no forced override is used. Re-audit after the upstream DSH update.
 
 ## License
 

package/README.ru.md

@@ -132,12 +132,12 @@ npm pack
 Установка из **упакованного tarball**:
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.32.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.33.tgz
 # DSH Desktop:
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.32.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.33.tgz
 
 # Либо установка опубликованного пакета из npm:
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.32
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.33
 ```
 
 После установки перезапустите dsh (или DSH Desktop) и выберите **OpenCode (plugin)** или **OpenCode Go (plugin)** в списке моделей.
@@ -213,7 +213,8 @@ modelAccountRules:
 
 ## Безопасность и надежность
 
-- Запросы на изменение настроек и ключей разрешены только с loopback (`127.0.0.1` / `::1`) с обязательной проверкой same-origin для защиты от DNS-rebinding атак.
+- Same-origin — это защита от CSRF, а не аутентификация. Задайте admin-токен владельца в конфиге профиля (`adminToken`) или `OPENCODE_ADMIN_TOKEN`; тогда все маршруты `/dsh-opencode/*` требуют `x-opencode-token` или `Authorization: Bearer`. UI спросит токен один раз и сохранит его в браузере. Без токена остаются только loopback и same-origin проверки.
+- `npm audit` по-прежнему показывает `zod < 4.6.6` (GHSA-mrhx-c7xc-m3w5): пакеты `@deepseek-ai/dsh-*` 0.2.2-rc.1 фиксируют zod 4.4.3. Релиза DSH 0.2.2 с 4.6.6 пока нет; плагин не бандлит zod и не применяет принудительный override. Повторить аудит после обновления DSH.
 - Тексты запросов и ответов пользователей никогда не записываются в файлы журнала.
 - При исчерпании квоты на одном ключе диалог пользователя не прерывается благодаря бесшовной ротации.
 

package/README.zh.md

@@ -127,12 +127,12 @@ npm pack
 通过**打包文件 (.tgz)**安装：
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.32.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.33.tgz
 # DSH 桌面端：
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.32.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.33.tgz
 
 # 或从 npm 安装已发布版本：
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.32
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.33
 ```
 
 安装完成后重启 dsh 或 DSH 桌面端，在模型选择器中选择 **OpenCode (plugin)** 或 **OpenCode Go (plugin)** 即可。
@@ -188,7 +188,8 @@ modelAccountRules:
 
 ## 安全规范
 
-- 写入与配置路由均要求 Loopback（`127.0.0.1` / `::1`）与同源检查，防御 DNS 重新绑定。
+- 同源检查用于防御 CSRF，并非身份认证。在配置文件（`adminToken`）或 `OPENCODE_ADMIN_TOKEN` 中设置管理员令牌后，所有 `/dsh-opencode/*` 路由都要求 `x-opencode-token` 或 `Authorization: Bearer`；设置界面会要求输入一次并保存在当前浏览器。未设置令牌时仍只有 Loopback 与同源检查。
+- `npm audit` 仍报告 `zod < 4.6.6`（GHSA-mrhx-c7xc-m3w5）：`@deepseek-ai/dsh-*` 0.2.2-rc.1 固定使用 zod 4.4.3。目前没有使用 4.6.6 的 DSH 0.2.2 版本；本插件不打包 zod，也不使用强制 override。待上游 DSH 更新后重新审计。
 - 密钥冷却状态通过 SHA-256 哈希指纹持久化，本地日志不保存提示词与明文密钥。
 
 ## 许可证

package/lib/client.js

@@ -202,6 +202,10 @@ window.__ModuleLoader__.load({
 				routeConsole: "OpenCode Console / Zen",
 				routeGo: "OpenCode Go / Go Plus",
 				enabledRoutesHint: "Disabled routes are removed from the picker; at least one route stays enabled.",
+				adminToken: "Admin token",
+				adminTokenHint: "This Host requires the admin token configured by its owner. It is stored in this browser only.",
+				adminTokenPlaceholder: "Paste the admin token",
+				continue: "Continue",
 				maxOutputTokens: "Output limit (empty = model default, 0 = omit)",
 				contextOverrideShort: "Context",
 				maxOutputOverrideShort: "Max output",
@@ -449,6 +453,10 @@ window.__ModuleLoader__.load({
 				routeConsole: "OpenCode Console / Zen",
 				routeGo: "OpenCode Go / Go Plus",
 				enabledRoutesHint: "禁用的路由会从选择器中移除；至少保留一个启用的路由。",
+				adminToken: "管理令牌",
+				adminTokenHint: "此 Host 要求所有者配置的管理令牌。令牌仅保存在当前浏览器中。",
+				adminTokenPlaceholder: "粘贴管理令牌",
+				continue: "继续",
 				maxOutputTokens: "输出上限（空 = 模型默认，0 = 省略）",
 				contextOverrideShort: "上下文",
 				maxOutputOverrideShort: "最大输出",
@@ -505,6 +513,23 @@ window.__ModuleLoader__.load({
 			}
 		};
 		const GO_PROVIDER = "opencode-go-direct";
+		// src/client/admin-token.ts
+		const KEY = "dsh-opencode-admin-token";
+		function storage() {
+			try {
+				return typeof localStorage === "undefined" ? void 0 : localStorage;
+			} catch {
+				return;
+			}
+		}
+		function getAdminToken() {
+			return storage()?.getItem(KEY) ?? "";
+		}
+		function setAdminToken(token) {
+			const value = token.trim();
+			if (value === "") storage()?.removeItem(KEY);
+			else storage()?.setItem(KEY, value);
+		}
 		// src/client/api.ts
 		async function call(path, init) {
 			const response = await fetch(path, {
@@ -513,6 +538,7 @@ window.__ModuleLoader__.load({
 				headers: {
 					accept: "application/json",
 					...init?.body === void 0 ? {} : { "content-type": "application/json" },
+					...getAdminToken() === "" ? {} : { "x-opencode-token": getAdminToken() },
 					...init?.headers ?? {}
 				}
 			});
@@ -2056,6 +2082,7 @@ window.__ModuleLoader__.load({
 			const [keyDraft, setKeyDraft] = (0, react.useState)("");
 			const [proxyPassword, setProxyPassword] = (0, react.useState)("");
 			const [proxyBusy, setProxyBusy] = (0, react.useState)(false);
+			const [tokenDraft, setTokenDraft] = (0, react.useState)("");
 			const [keyDrafts, setKeyDrafts] = (0, react.useState)({});
 			const [search, setSearch] = (0, react.useState)("");
 			const [testModel, setTestModel] = (0, react.useState)("deepseek-v4.1-flash");
@@ -2195,20 +2222,56 @@ window.__ModuleLoader__.load({
 				className: "oc-hint",
 				children: t("loading")
 			});
-			if (state === null || draft === null) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "oc-page",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: "oc-error",
-					children: error ?? t("failed")
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-					type: "button",
-					className: "oc-button",
-					onClick: () => {
-						load();
-					},
-					children: t("refresh")
-				})]
-			});
+			if (state === null || draft === null) {
+				if (error?.includes("admin token required") === true) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: "oc-page",
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "oc-card",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+								className: "oc-card-title",
+								children: t("adminToken")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "oc-hint",
+								children: t("adminTokenHint")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								className: "oc-input",
+								type: "password",
+								value: tokenDraft,
+								placeholder: t("adminTokenPlaceholder"),
+								onChange: (event) => setTokenDraft(event.target.value)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "oc-button",
+								disabled: tokenDraft.trim() === "",
+								onClick: () => {
+									setAdminToken(tokenDraft);
+									setTokenDraft("");
+									load();
+								},
+								children: t("continue")
+							})
+						]
+					})
+				});
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "oc-page",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "oc-error",
+						children: error ?? t("failed")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "oc-button",
+						onClick: () => {
+							load();
+						},
+						children: t("refresh")
+					})]
+				});
+			}
 			const dirty = !safeSame(draft, draftOf(state));
 			const activeAccount = state.accounts.find((account) => account.active);
 			const defaultAccount = state.accounts.find((account) => account.default);

package/lib/index.d.ts

@@ -24,6 +24,8 @@ interface Config {
   apiKeyEnv?: string;
   /** Literal key for composition config only; stripped from settings reads by `role('secret')`. */
   apiKey?: string;
+  /** Optional admin token for the Host HTTP routes; also read from `OPENCODE_ADMIN_TOKEN`. */
+  adminToken?: string;
   /** Console/Zen inference root; defaults to `https://opencode.ai/inference`. */
   apiBase?: string;
   /** Go inference root; defaults to `https://opencode.ai/inference/go`. */
@@ -101,6 +103,7 @@ declare const Config: z<Config>;
 interface ResolvedConfig {
   apiKeyEnv: string;
   apiKey?: string;
+  adminToken: string;
   apiBase: string;
   goApiBase: string;
   goZenBase: string;
@@ -421,6 +424,7 @@ interface RouteDeps {
   readonly heatmap?: (days: number) => Promise<RequestHeatmap>;
   readonly refreshTui?: () => void;
   readonly syncRoutes?: () => void;
+  readonly adminToken?: () => string;
   /** Test seam; defaults to the local managed-credentials registry. */
   readonly managedPath?: string;
 }

package/lib/index.js

@@ -1,5 +1,6 @@
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import { createHash } from "node:crypto";
+import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
+import { createHash, timingSafeEqual } from "node:crypto";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { appendFile, mkdir, readFile, readdir, stat, writeFile } from "node:fs/promises";
 import { homedir, networkInterfaces } from "node:os";
@@ -7,7 +8,6 @@ import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, attributionHeaders, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import z from "@deepseek-ai/schemastery";
 import { ProxyAgent, Socks5ProxyAgent } from "undici";
-import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { isIP } from "node:net";
@@ -99,7 +99,7 @@ const DEFAULT_GO_API_BASE = "https://opencode.ai/inference/go";
 const DEFAULT_GO_ZEN_BASE = "https://opencode.ai/zen/go/v1";
 const DEFAULT_USAGE_URL = "https://opencode.ai/zen/go/v1/usage";
 const DEFAULT_AUTH_ENTRY = "opencode-go";
-const DEFAULT_USER_AGENT = "dsh-opencode-provider/0.5.32";
+const DEFAULT_USER_AGENT = "dsh-opencode-provider/0.5.33";
 const DEFAULT_CONTEXT_WINDOW = 262144;
 const DEFAULT_MAX_TOKENS = 32768;
 const DEFAULT_GENERATE_MAX_TOKENS = 65536;
@@ -115,6 +115,7 @@ function markVolatile(schema) {
 const Config = z.object({
 	apiKeyEnv: markVolatile(z.string().role("credential-ref").default(DEFAULT_API_KEY_ENV)),
 	apiKey: z.string().role("secret"),
+	adminToken: z.string().role("secret").default(""),
 	apiBase: markVolatile(z.string().default(DEFAULT_API_BASE)),
 	goApiBase: markVolatile(z.string().default(DEFAULT_GO_API_BASE)),
 	goZenBase: markVolatile(z.string().default(DEFAULT_GO_ZEN_BASE)),
@@ -239,6 +240,7 @@ function resolveConfig(config) {
 	return {
 		apiKeyEnv: typeof config.apiKeyEnv === "string" && config.apiKeyEnv.trim() !== "" ? config.apiKeyEnv.trim() : DEFAULT_API_KEY_ENV,
 		...apiKey === void 0 ? {} : { apiKey },
+		adminToken: typeof config.adminToken === "string" ? config.adminToken.trim() : "",
 		apiBase: typeof config.apiBase === "string" && config.apiBase !== "" ? config.apiBase : DEFAULT_API_BASE,
 		goApiBase: typeof config.goApiBase === "string" && config.goApiBase !== "" ? config.goApiBase : DEFAULT_GO_API_BASE,
 		goZenBase: typeof config.goZenBase === "string" && config.goZenBase !== "" ? config.goZenBase : DEFAULT_GO_ZEN_BASE,
@@ -5441,6 +5443,16 @@ async function buildState(ctx, deps) {
 		revision: settingsRevision(ctx)
 	};
 }
+function adminAllowed(req, deps) {
+	const expected = deps.adminToken?.() ?? "";
+	if (expected === "") return true;
+	const header = req.headers["x-opencode-token"];
+	const authorization = req.headers.authorization;
+	const provided = typeof header === "string" && header !== "" ? header : typeof authorization === "string" && authorization.startsWith("Bearer ") ? authorization.slice(7).trim() : "";
+	const left = Buffer.from(expected);
+	const right = Buffer.from(provided);
+	return left.length === right.length && timingSafeEqual(left, right);
+}
 /** Register the Host HTTP surface consumed by the browser settings page. */
 function applyRoutes(ctx, web, deps) {
 	const disposers = [];
@@ -5448,7 +5460,16 @@ function applyRoutes(ctx, web, deps) {
 		disposers.push(web.register({
 			kind: "exact",
 			path,
-			handler
+			handler: async (req, res) => {
+				if (!adminAllowed(req, deps)) {
+					json(res, 401, {
+						error: "admin token required",
+						authRequired: true
+					});
+					return;
+				}
+				await handler(req, res);
+			}
 		}));
 	};
 	route("/dsh-opencode/state", async (req, res) => {
@@ -6311,7 +6332,8 @@ function apply(ctx, config) {
 			usage,
 			heatmap: readRequestHeatmap,
 			refreshTui: () => refreshTuiSettings?.(),
-			syncRoutes
+			syncRoutes,
+			adminToken: () => current().adminToken || launchEnvironmentOf(ctx).get("OPENCODE_ADMIN_TOKEN")?.value || ""
 		});
 		webCtx.effect(() => registerPluginUpdater(webCtx, {
 			endpoint: "/dsh-opencode/update",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-opencode-provider",
-  "version": "0.5.32",
+  "version": "0.5.33",
   "description": "OpenCode / OpenCode Go LLM provider plugin for DeepSeek Harness (dsh).",
   "license": "MIT",
   "type": "module",