@logictan/dsh-imagegen 2.0.3 → 2.0.4

package/lib/index.js

@@ -135,7 +135,7 @@ function installSettingsSectionCompat(ctx, ns, schema, entry, hooks) {
 */
 /** Settings namespace this plugin owns (host settings seam + bridge). */
 const IMAGEGEN_SETTINGS_NAMESPACE = "imagegen";
-/** Same-origin route family (loopback-only, mirroring the dsh-ssh fence). */
+/** Same-origin route family (fenced by the composition's connection service). */
 const SETTINGS_API = {
 	describe: "/api/dsh-imagegen/settings/describe",
 	mutate: "/api/dsh-imagegen/settings/mutate"
@@ -189,7 +189,7 @@ const PROMPT_ENHANCE_API = {
 const IMAGE_MODEL_API = { models: "/api/dsh-imagegen/image-models" };
 /** Host-served built-in provider catalog (channels the user can instantiate). */
 const PRESETS_API = "/api/dsh-imagegen/presets";
-/** Loopback-only image reader for Agent tool-result previews. */
+/** Image reader for Agent tool-result previews (fenced by the connection service). */
 const AGENT_IMAGE_API = "/api/dsh-imagegen/agent-image";
 /** Store the current composer image for the direct edit_image command. */
 const CONVERSATION_IMAGE_API = "/api/dsh-imagegen/conversation-image";
@@ -1967,27 +1967,33 @@ function presetById(id) {
 //#region src/routes.ts
 /** Cap on JSON request bodies (settings ops and generate payloads are small). */
 const MAX_JSON_BODY_BYTES = 24 * 1024 * 1024;
-/** Loopback literal check plus browser same-origin markers (mirrors dsh-ssh). */
-function isLoopbackRequest(request) {
-	const address = request.socket.remoteAddress;
-	if (address !== "127.0.0.1" && address !== "::1" && address !== "::ffff:127.0.0.1") return false;
-	const host = request.headers.host;
-	if (typeof host !== "string") return false;
-	let hostUrl;
-	try {
-		hostUrl = new URL(`http://${host}`);
-	} catch {
-		return false;
-	}
-	if (hostUrl.hostname !== "127.0.0.1" && hostUrl.hostname !== "localhost" && hostUrl.hostname !== "[::1]") return false;
-	if (request.headers["sec-fetch-site"] === "cross-site") return false;
-	const origin = request.headers.origin;
-	if (origin === void 0) return true;
-	try {
-		return new URL(origin).host === hostUrl.host;
-	} catch {
-		return false;
+/**
+* Ask the composition whether one request may be served.
+*
+* `connection.requestRejection` is the deployment's single trust fence: it
+* applies the Host/Origin checks (loopback plus the LAN authorities the
+* deployment declares) and the browser authentication that rides with them.
+* This plugin answers with the verdict instead of re-deriving it, because the
+* declared LAN authorities live in `connection`'s config and a local check
+* cannot see them.
+*
+* A missing `connection` refuses rather than serves: these routes sit in front
+* of Connection's `/api` prefix route, so serving them without its fence would
+* serve them unfenced.
+* @param connection - the composition's Connection service, when it is up.
+* @param req - the incoming request.
+* @param res - the response, written to when the request is refused.
+* @returns whether the request was refused.
+*/
+function refuseUntrusted(connection, req, res) {
+	if (connection === void 0) {
+		writeJson(res, 403, { error: "forbidden" });
+		return true;
 	}
+	const rejection = connection.requestRejection(req);
+	if (rejection === void 0) return false;
+	writeJson(res, rejection, { error: rejection === 401 ? "unauthorized" : "forbidden" });
+	return true;
 }
 /** One JSON response. */
 function writeJson(res, status, body) {
@@ -2277,10 +2283,7 @@ function makeRoutes(deps) {
 		};
 	};
 	const guard = (req, res, method) => {
-		if (!isLoopbackRequest(req)) {
-			writeJson(res, 403, { error: "forbidden: loopback-only" });
-			return false;
-		}
+		if (refuseUntrusted(deps.connection(), req, res)) return false;
 		if (req.method !== method) {
 			writeJson(res, 405, { error: `method not allowed: ${req.method}` });
 			return false;
@@ -2325,10 +2328,7 @@ function makeRoutes(deps) {
 			kind: "prefix",
 			path: AGENT_IMAGE_API,
 			handler: async (req, res) => {
-				if (!isLoopbackRequest(req)) {
-					writeJson(res, 403, { error: "forbidden: loopback-only" });
-					return;
-				}
+				if (refuseUntrusted(deps.connection(), req, res)) return;
 				if (req.method !== "GET") {
 					writeJson(res, 405, { error: `method not allowed: ${req.method}` });
 					return;
@@ -3476,6 +3476,7 @@ function apply(ctx, config) {
 		};
 		sctx.effect(() => {
 			const disposers = makeRoutes({
+				connection: () => sctx.get("connection"),
 				settings: seam,
 				credentials: credentialsSeam,
 				resolve: () => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@logictan/dsh-imagegen",
   "description": "Chat-invoked AI image generation for the dsh web GUI: text-to-image and image-to-image through configurable provider channels (gpt-image-2 / grok-imagine-image / nanobanana series / seedream-5.0-pro / dall-e-3, with native xAI Grok Imagine, Google Nano Banana and ByteDance Seedream request shaping) and per-channel model catalogs.",
-  "version": "2.0.3",
+  "version": "2.0.4",
   "type": "module",
   "main": "lib/index.js",
   "exports": {
@@ -31,6 +31,14 @@
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.4"
   },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-client-connection": "^0.1.5-alpha.1 || ^0.1.6-alpha.1 || ^0.1.7-alpha.1 || ^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.0-rc.2"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-client-connection": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
     "@deepseek-ai/dsh-api-remotes": "^0.2.0-rc.2",