dock-spreadsheet 0.1.0 → 0.1.1

package/lib/index.js

@@ -2,7 +2,15 @@ import { open } from "node:fs/promises";
 import { extname, isAbsolute, resolve } from "node:path";
 //#region src/index.ts
 const name = "dock-spreadsheet";
-const inject = ["webServer", "webRuntime"];
+/**
+* Services required before mounting.
+*
+* The declared-authority list these routes fence with used to be injected here
+* as `webRuntime`. DSH renamed that service to `webStartup` in 0.2.1, so the
+* list is resolved lazily through `declaredTrustedHosts` instead: a renamed
+* service can no longer park this plugin, and older hosts still mount.
+*/
+const inject = ["webServer"];
 const MAX_FILE_BYTES = 20971520;
 const MAX_REQUEST_BYTES = 8192;
 const EXTENSIONS = /* @__PURE__ */ new Set([
@@ -21,6 +29,28 @@ var ReadError = class extends Error {
 		this.code = code;
 	}
 };
+/**
+* Authorities this deployment declared besides loopback.
+*
+* DSH publishes them as `trustedHosts` on `webStartup` (0.2.1+); `webRuntime`
+* is the same service under its 0.1.x / 0.2.0 name, and a host that exposes
+* only the connection RPC carries the list on `connection`. Probe all three
+* lazily: a host with none of them keeps the loopback-only fence, and no
+* rename can park this plugin on a missing service again.
+*/
+function declaredTrustedHosts(ctx) {
+	if (typeof ctx.get !== "function") return [];
+	for (const name of [
+		"webStartup",
+		"webRuntime",
+		"connection"
+	]) {
+		const declared = ctx.get(name)?.trustedHosts;
+		if (!Array.isArray(declared)) continue;
+		return declared.filter((entry) => typeof entry === "string");
+	}
+	return [];
+}
 function trusted(req, trustedHosts) {
 	const host = req.headers.host;
 	if (!host || req.headers["sec-fetch-site"] === "cross-site") return false;
@@ -94,7 +124,7 @@ function apply(ctx) {
 		kind: "prefix",
 		path: "/dock-spreadsheet",
 		handler: async (req, res) => {
-			if (!trusted(req, ctx.webRuntime.trustedHosts)) return fail(res, 403, "forbidden", "forbidden");
+			if (!trusted(req, declaredTrustedHosts(ctx))) return fail(res, 403, "forbidden", "forbidden");
 			if (req.method !== "POST" || new URL(req.url ?? "/", "http://dsh.internal").pathname !== "/dock-spreadsheet/read") return fail(res, 404, "not-found", "unknown route");
 			try {
 				const bytes = await readSpreadsheet(await requestPath(req));

package/lib/types/index.d.ts

@@ -1,5 +1,13 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
 export declare const name = "dock-spreadsheet";
+/**
+ * Services required before mounting.
+ *
+ * The declared-authority list these routes fence with used to be injected here
+ * as `webRuntime`. DSH renamed that service to `webStartup` in 0.2.1, so the
+ * list is resolved lazily through `declaredTrustedHosts` instead: a renamed
+ * service can no longer park this plugin, and older hosts still mount.
+ */
 export declare const inject: string[];
 export declare const MAX_FILE_BYTES: number;
 interface Context {
@@ -10,9 +18,14 @@ interface Context {
             handler: (req: IncomingMessage, res: ServerResponse) => Promise<void>;
         }): () => void;
     };
-    webRuntime: {
-        trustedHosts: readonly string[];
-    };
+    /**
+     * Read a service without declaring a hard dependency on it.
+     *
+     * Used for the optional `webStartup` / `webRuntime` / `connection` services:
+     * a host that provides none of them keeps the loopback-only fence instead of
+     * failing to mount.
+     */
+    get?(name: string): unknown;
     effect(fn: () => void | (() => void), label?: string): void;
 }
 export declare class ReadError extends Error {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dock-spreadsheet",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Read-only XLSX, XLS, ODS, CSV and TSV viewer for the DSH dock workbench",
   "keywords": ["deepseek-harness", "dsh", "dock", "spreadsheet", "xlsx", "csv", "viewer"],
   "repository": {