@goodandready/dsh-subscriptions 0.7.23 → 0.7.24

package/lib/http.js

@@ -103,6 +103,8 @@ function configuredTrustedHosts(targetCtx) {
   return out
 }
 
+const SHELL_SESSION_COOKIE = /(?:^|;\s*)dsh-auth-[^=;\s]*=/
+
 /**
  * Reject cross-site and untrusted writes and sensitive reads.
  * Fail-closed: must be loopback, same-origin/same-site, or authentic host credentials (#374).
@@ -117,7 +119,14 @@ export function isTrustedSettingsRequest(request, targetCtx) {
   // not enough because the LAN bridge rewrites Host and connects over loopback.
   const method = String(request?.method || '').toUpperCase()
   const mutating = method !== '' && method !== 'GET' && method !== 'HEAD' && method !== 'OPTIONS'
-  if (mutating && !headers.origin && !headers.referer) return false
+  if (mutating && !headers.origin && !headers.referer) {
+    // #26: DSH Desktop validates dsh-app://app, then strips Origin/Referer
+    // before forwarding. The shell's session cookie is the only positive
+    // signal left. Presence is not a signature check: DSH still owns cookie
+    // validation, and this only relaxes the mutation gate for loopback.
+    const shellForwarded = SHELL_SESSION_COOKIE.test(String(headers.cookie || '')) && isLoopback(request)
+    if (!shellForwarded) return false
+  }
 
   // 1. Explicit cross-site fetch is always rejected
   const secFetchSite = String(headers['sec-fetch-site'] || '').toLowerCase()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-subscriptions",
-  "version": "0.7.23",
+  "version": "0.7.24",
   "description": "Use ChatGPT Codex, Claude, Grok, Antigravity, Kimi, GLM, Cursor, Kiro, Copilot, Qwen, ERNIE, Spark, JetBrains, Perplexity, Replit, and Cody subscriptions as DeepSeek Harness LLM providers via OAuth.",
   "license": "MIT",
   "type": "module",