@sparkelf/dsh-patch-browser-auth-mode 0.2.0-rc.20 → 0.2.0-rc.21

package/package.json

@@ -4,11 +4,11 @@
     "formatVersion": 1,
     "variants": [
       {
-        "dsh": ">=0.1.6-alpha.1",
+        "dsh": ">=0.1.7-alpha.2",
         "file": "./patches/browser-auth-mode.patch",
         "id": "browser-authentication-policy-mode",
         "target": {
-          "baseRevision": "ddefc45fbc7f8e46dd73185e68295696d1297887",
+          "baseRevision": "00102833dfaee1da9f48a3a8eae9d34005a75218",
           "kind": "dsh-source",
           "paths": [
             "packages/client/connection/"
@@ -31,5 +31,5 @@
     "url": "git+https://github.com/SparkElf/deepseek-harness-plus.git"
   },
   "type": "module",
-  "version": "0.2.0-rc.20"
+  "version": "0.2.0-rc.21"
 }

package/patches/browser-auth-mode.patch

@@ -1,5 +1,5 @@
 diff --git a/packages/client/connection/src/browser-auth.ts b/packages/client/connection/src/browser-auth.ts
-index 10353d9a06..dbeb256022 100644
+index 5691180d96..823c23debf 100644
 --- a/packages/client/connection/src/browser-auth.ts
 +++ b/packages/client/connection/src/browser-auth.ts
 @@ -177,12 +177,29 @@ async function initializeSecret(credentials: CredentialProvider): Promise<Buffer
@@ -34,10 +34,10 @@ index 10353d9a06..dbeb256022 100644
    private readonly maxAgeMilliseconds: number
  
 diff --git a/packages/client/connection/src/index.ts b/packages/client/connection/src/index.ts
-index 98a4354760..b895a649c2 100644
+index 647174f743..1ee4898b58 100644
 --- a/packages/client/connection/src/index.ts
 +++ b/packages/client/connection/src/index.ts
-@@ -8,7 +8,7 @@ import type { WebRoute } from '@deepseek-ai/dsh-host-webserver'
+@@ -9,7 +9,7 @@ import type { WebRoute } from '@deepseek-ai/dsh-host-webserver'
  import { API_PATH } from './api-path.ts'
  import { bridge, DEFAULT_MAX_REQUEST_BODY_BYTES } from './http-bridge.ts'
  import { assertTrustedAuthority } from './api-request-trust.ts'
@@ -46,7 +46,7 @@ index 98a4354760..b895a649c2 100644
  import { HostConnectionService } from './rpc-host.ts'
  import { ConnectionRecoveryConfigSchema, resolveConnectionConfig, type ConnectionRecoveryConfig } from './recovery-config.ts'
  
-@@ -81,6 +81,8 @@ export interface ConnectionConfig {
+@@ -101,6 +101,8 @@ export interface ConnectionConfig {
     * bind. An entry that is not a bare, canonical authority fails plugin load.
     */
    trustedHosts?: string[]
@@ -55,7 +55,7 @@ index 98a4354760..b895a649c2 100644
    /** Absolute browser-session lifetime in days. Default: 30. */
    cookieMaxAgeDays?: number
    /** Maximum buffered JSON body for every `/api` request. Default: 300 MiB. */
-@@ -90,6 +92,7 @@ export interface ConnectionConfig {
+@@ -110,6 +112,7 @@ export interface ConnectionConfig {
  export const Config: z<ConnectionConfig> = z.object({
    recovery: ConnectionRecoveryConfigSchema.default({}),
    trustedHosts: z.array(String).default([]),
@@ -63,7 +63,7 @@ index 98a4354760..b895a649c2 100644
    cookieMaxAgeDays: z.natural().min(1).default(30),
    maxRequestBodyBytes: z.natural().min(1).default(DEFAULT_MAX_REQUEST_BODY_BYTES),
  })
-@@ -105,16 +108,21 @@ export async function apply(ctx: Context, config?: ConnectionConfig): Promise<vo
+@@ -125,16 +128,21 @@ export async function apply(ctx: Context, config?: ConnectionConfig): Promise<vo
    const recovery = resolveConnectionConfig(config?.recovery)
    // The Loader resolves schema defaults; hand-built test contexts may pass none.
    const trustedHosts = config?.trustedHosts ?? []
@@ -87,19 +87,19 @@ index 98a4354760..b895a649c2 100644
    ctx.inject(['webServer'], (webCtx) => {
      assertImageBodyCapacity(webCtx, maxRequestBodyBytes)
 diff --git a/packages/client/connection/src/rpc-host.ts b/packages/client/connection/src/rpc-host.ts
-index d74734e132..df5dc854fb 100644
+index 0f98bc1f19..1fc5c528a7 100644
 --- a/packages/client/connection/src/rpc-host.ts
 +++ b/packages/client/connection/src/rpc-host.ts
-@@ -11,7 +11,7 @@ import { clientRequestSchema } from './rpc-schema.ts'
+@@ -12,7 +12,7 @@ import { clientRequestSchema } from './rpc-schema.ts'
  import { bridge } from './http-bridge.ts'
  import { isTrustedApiRequest } from './api-request-trust.ts'
  import { API_PATH } from './api-path.ts'
 -import type { BrowserAuth } from './browser-auth.ts'
 +import type { BrowserAuthentication } from './browser-auth.ts'
+ import { OperatorPeer } from './operator-peer.ts'
  import type {
-   ConnectionIndexRequest,
-   ConnectionIndexResponse,
-@@ -65,12 +65,12 @@ export class HostConnectionService extends Service implements HostConnectionHand
+   PeerAdmission,
+@@ -70,12 +70,12 @@ export class HostConnectionService extends Service implements HostConnectionHand
     * Provide the Host half over the active HTTP server.
     * @param ctx - owning Connection plugin context.
     * @param trustedHosts - deployment authorities accepted by the Host/Origin fence.
@@ -113,4 +113,4 @@ index d74734e132..df5dc854fb 100644
 +    private readonly browserAuth: BrowserAuthentication,
    ) {
      super(ctx, 'connection')
-   }
+     this.operator = new OperatorPeer(ctx)