dsh-cerebrum 0.1.1 → 0.1.3

package/README.md

@@ -57,6 +57,7 @@ dsh plugin --profile desktop add D:\workspace\dsh-cerebrum
 
 - **不喜欢可以关掉**：面板里的 🙈 隐藏芯片（点小 🧠 恢复）；彻底关闭用配置 `ui.enabled: false`（重启宿主生效，芯片完全不出现）；
 - 面板可**拖动**（按住标题栏）、可 **📌 固定**到输入栏上方成横条；
+- **宠物联动（免配置）**：检测到同源的 `dsh-pet`（`/dsh-pet-7340`）时，情绪变化会自动推给桌宠——加锁 → 让宠物说一句大脑台词 → 释放锁；不需要用户配置。不想要联动可设 `ui.drivePet: false`；
 - 数据来自宿主内置的 127.0.0.1 只读 API（`http://127.0.0.1:18734`，端口可配 `config.api.port`）；
 - UI 只读：修改记忆/情绪仍通过 `cerebrum_*` 工具；
 - 免构建 client bundle（`lib/client.js`），与宿主同一个安装包——**装一个插件，大脑 + 面板都有**。

package/docs/publish.md

@@ -1,5 +1,11 @@
 # 发布 dsh-cerebrum 到 DSH 插件市场
 
+> **发布状态（2026-10-28）**
+> - GitHub 公开仓库：https://github.com/liu-wen-wu/dsh-cerebrum（main + tag v0.1.1，SSH 推送）
+> - npm：`dsh-cerebrum@0.1.2` 已上线（latest；0.1.1 上一版，含内置宠物桥接）
+> - 市场收录申请：https://github.com/polang233/dsh-plugin-index/issues/121
+> - 本地安装：`dsh-cerebrum@link:D:/workspace/dsh-cerebrum`（desktop profile，已热加载验证）
+
 > 目标市场：dshopen.org（DSH 应用内「插件市场/Discover」读取的社区索引，`https://dshopen.org/index.json`）。
 > 收录流程由 [dsh-plugin-index](https://github.com/polang233/dsh-plugin-index) 人工审核：**公开仓库 + 可安装的 npm 版本 + 明确许可证**，三样齐全后提 issue 收录。
 

package/lib/api.js

@@ -18,40 +18,64 @@
 import http from 'node:http'
 import { INTERACTION_KINDS } from './core/petbrain.js'
 
-const cors = (res) => {
-  res.setHeader('Access-Control-Allow-Origin', '*')
-  res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS')
-  res.setHeader('Access-Control-Allow-Headers', 'Content-Type')
-  res.setHeader('Content-Type', 'application/json; charset=utf-8')
+const CORS_METHODS = 'GET, OPTIONS'
+const LOOPBACK = /^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/
+const LOOPBACK_ORIGIN = /^https?:\/\/(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/
+
+/**
+ * Access control for the loopback API (review feedback on dshplugin-index#121):
+ * - Host must be a loopback host (blocks DNS rebinding).
+ * - If the request carries an Origin (cross-origin browser fetch), it must also
+ *   be a loopback origin — an arbitrary website can no longer read the brain.
+ * - Optional shared token (`config.api.token`) for users who want a second lock.
+ */
+const checkAccess = (req, token) => {
+  const host = String(req.headers.host ?? '')
+  if (!LOOPBACK.test(host)) return { ok: false, status: 403, reason: 'host-not-allowed' }
+  const origin = req.headers.origin
+  if (origin && !LOOPBACK_ORIGIN.test(String(origin))) return { ok: false, status: 403, reason: 'origin-not-allowed' }
+  if (token && req.headers['x-cerebrum-token'] !== token) return { ok: false, status: 401, reason: 'token-required' }
+  return { ok: true }
 }
 
-const send = (res, status, payload) => {
-  cors(res)
+const send = (res, status, payload, origin) => {
+  if (origin) res.setHeader('Access-Control-Allow-Origin', String(origin))
+  res.setHeader('Access-Control-Allow-Methods', CORS_METHODS)
+  res.setHeader('Access-Control-Allow-Headers', 'Content-Type, x-cerebrum-token')
+  res.setHeader('Vary', 'Origin')
+  res.setHeader('Content-Type', 'application/json; charset=utf-8')
   res.statusCode = status
   res.end(JSON.stringify(payload))
 }
 
-export const startBrainApi = (service, { port = 18734, ui = { enabled: true }, logger = console } = {}) => {
+export const startBrainApi = (service, { port = 18734, ui = { enabled: true }, token = '', logger = console } = {}) => {
+  // Interaction rate limit: /interact is the only mutation; cap it to stop flooding.
+  let interactWindow = { at: 0, count: 0 }
   const server = http.createServer((req, res) => {
-    if (req.method === 'OPTIONS') return send(res, 204, {})
-    if (req.method !== 'GET') return send(res, 405, { error: 'method not allowed' })
+    const origin = req.headers.origin
+    const allowedOrigin = origin && LOOPBACK_ORIGIN.test(String(origin)) ? String(origin) : null
+    const access = checkAccess(req, token)
+    if (!access.ok) return send(res, access.status, { error: access.reason }, allowedOrigin)
+    if (req.method === 'OPTIONS') return send(res, 204, {}, allowedOrigin)
+    if (req.method !== 'GET') return send(res, 405, { error: 'method not allowed' }, allowedOrigin)
     const url = new URL(req.url, `http://127.0.0.1:${port}`)
+    const reply = (status, payload) => send(res, status, payload, allowedOrigin)
     try {
       switch (url.pathname) {
         case '/ping':
-          return send(res, 200, { ok: true, name: 'dsh-cerebrum', uptimeMs: Date.now() - service.startedAt })
+          return reply(200, { ok: true, name: 'dsh-cerebrum', uptimeMs: Date.now() - service.startedAt })
         case '/ui':
           // The client respects this: ui.enabled=false removes the chip entirely.
-          return send(res, 200, { enabled: ui.enabled !== false })
+          return reply(200, { enabled: ui.enabled !== false, drivePet: ui.drivePet !== false })
         case '/state': {
           const sessionId = url.searchParams.get('session') || undefined
-          return send(res, 200, service.state(sessionId))
+          return reply(200, service.state(sessionId))
         }
         case '/recall': {
           const query = url.searchParams.get('q') ?? ''
           const sessionId = url.searchParams.get('session') || undefined
           const hits = service.recall(query, { k: 3, sessionId })
-          return send(res, 200, {
+          return reply(200, {
             query,
             memories: hits.map((hit) => ({
               summary: hit.episode.summary,
@@ -63,21 +87,25 @@ export const startBrainApi = (service, { port = 18734, ui = { enabled: true }, l
         }
         case '/render-hints': {
           const sessionId = url.searchParams.get('session') || undefined
-          return send(res, 200, service.renderHintsFor(sessionId))
+          return reply(200, service.renderHintsFor(sessionId))
         }
         case '/interact': {
           // The only mutation the API allows: affect-only pet interactions.
+          const now = Date.now()
+          if (now - interactWindow.at > 60_000) interactWindow = { at: now, count: 0 }
+          interactWindow.count++
+          if (interactWindow.count > 30) return reply(429, { error: 'too-many-interactions' })
           const kind = url.searchParams.get('kind') ?? ''
           const sessionId = url.searchParams.get('session') || undefined
           const hints = service.interact(kind, sessionId)
-          if (!hints) return send(res, 400, { error: `unknown interaction kind, use one of ${INTERACTION_KINDS.join(', ')}` })
-          return send(res, 200, hints)
+          if (!hints) return reply(400, { error: `unknown interaction kind, use one of ${INTERACTION_KINDS.join(', ')}` })
+          return reply(200, hints)
         }
         default:
-          return send(res, 404, { error: 'unknown endpoint' })
+          return reply(404, { error: 'unknown endpoint' })
       }
     } catch (error) {
-      return send(res, 500, { error: error?.message ?? 'internal error' })
+      return reply(500, { error: error?.message ?? 'internal error' })
     }
   })
 

package/lib/client.js

@@ -86,17 +86,82 @@ window.__ModuleLoader__.load({
       })
       var panelRef = useRef(null)
       var dragRef = useRef(null)
+      var petRef = useRef({ key: '', at: 0 })
+      var uiRef = useRef({ enabled: true, drivePet: true })
 
       useEffect(function () {
         var alive = true
         // The host decides whether users opted out of the whole chip.
         get('/ui').then(function (data) {
-          if (alive && data && data.enabled === false) setUiEnabled(false)
+          if (data) {
+            uiRef.current = { enabled: data.enabled !== false, drivePet: data.drivePet !== false }
+            if (!alive) return
+            if (data.enabled === false) setUiEnabled(false)
+          }
         })
+
+        /**
+         * Built-in pet bridge: no setup required. When a dsh-pet instance is
+         * detected on this origin, emotion changes are pushed to it as a
+         * locked "performance" (bubble line), then the lock is released.
+         */
+        var drivePet = function (hints) {
+          if (uiRef.current.drivePet === false) return
+          var key = (hints.emotionKey || '') + '|' + (hints.line || '')
+          var now = Date.now()
+          if (petRef.current.key === key) return
+          if (now - petRef.current.at < 20000) return
+          if ((hints.intensity || 0) < 0.25) return
+          petRef.current.key = key
+          petRef.current.at = now
+          fetch('/dsh-pet-7340/state')
+            .then(function (r) { return r.ok ? r.json() : null })
+            .then(function (st) {
+              if (!st || !st.pets) return
+              var id = Object.keys(st.pets)[0]
+              if (!id) return
+              var attempt = function (surface) {
+                var q = '?pet=' + encodeURIComponent(id) + '&surface=' + surface
+                return fetch('/dsh-pet-7340/lock' + q, {
+                  method: 'POST',
+                  headers: { 'Content-Type': 'application/json' },
+                  body: JSON.stringify({ ttl: 8000, surface: surface }),
+                })
+                  .then(function (r) { return r.json() })
+                  .then(function (lock) {
+                    if (!lock || lock.ok === false || !lock.lockId) {
+                      if (surface === 'web') return attempt('desktop')
+                      return
+                    }
+                    var lq = q + '&lock=' + encodeURIComponent(lock.lockId)
+                    return fetch('/dsh-pet-7340/broadcast' + lq, {
+                      method: 'POST',
+                      headers: { 'Content-Type': 'application/json' },
+                      body: JSON.stringify({ text: hints.line, duration: 6000 }),
+                    })
+                      .catch(function () {})
+                      .then(function () {
+                        return fetch('/dsh-pet-7340/lock/release' + q, {
+                          method: 'POST',
+                          headers: { 'Content-Type': 'application/json' },
+                          body: JSON.stringify({ lockId: lock.lockId }),
+                        }).catch(function () {})
+                      })
+                  })
+              }
+              return attempt('web')
+            })
+            .catch(function () {})
+        }
+
         var tick = function () {
-          get('/state' + (sessionId ? '?session=' + encodeURIComponent(sessionId) : '')).then(function (data) {
+          var qs = sessionId ? '?session=' + encodeURIComponent(sessionId) : ''
+          get('/state' + qs).then(function (data) {
             if (alive && data) setState(data)
           })
+          get('/render-hints' + qs).then(function (hints) {
+            if (alive && hints) drivePet(hints)
+          })
         }
         tick()
         var timer = setInterval(tick, POLL_MS)

package/lib/config.js

@@ -45,10 +45,14 @@ export const DEFAULT_CONFIG = {
   api: {
     enabled: true,
     port: 18734,
+    /** Optional shared secret; when set, every request must send x-cerebrum-token. */
+    token: '',
   },
   /** Client UI (the brain chip/dashboard). Users who dislike it can switch it off. */
   ui: {
     enabled: true,
+    /** Built-in bridge: drive a detected dsh-pet with brain emotions. */
+    drivePet: true,
   },
   autoCapture: {
     enabled: true,
@@ -120,6 +124,7 @@ export const resolveConfig = (raw, { home = resolveHome(), cwd = process.cwd() }
   merged.api.enabled = merged.api.enabled !== false
   merged.api.port = Math.round(clampNumber(merged.api.port, 18734, 1024, 65535))
   merged.ui.enabled = merged.ui.enabled !== false
+  merged.ui.drivePet = merged.ui.drivePet !== false
   merged.autoCapture.maxTextChars = Math.round(clampNumber(merged.autoCapture.maxTextChars, 2000, 200, 20000))
   merged.autoCapture.toolResultChars = Math.round(clampNumber(merged.autoCapture.toolResultChars, 300, 40, 4000))
   merged.autoCapture.minChars = Math.round(clampNumber(merged.autoCapture.minChars, 6, 0, 500))

package/lib/index.js

@@ -57,7 +57,7 @@ export function apply(ctx, rawConfig = {}) {
 
   // Read-only loopback API powering the optional client UI (dock + dashboard).
   if (config.api.enabled) {
-    const api = startBrainApi(service, { port: config.api.port, ui: config.ui })
+    const api = startBrainApi(service, { port: config.api.port, ui: config.ui, token: config.api.token })
     ctx.effect(() => () => api.close(), 'cerebrum:brain-api')
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-cerebrum",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Brain-inspired cognitive architecture for DeepSeek Harness: hippocampal episodic memory, cortical semantic memory, spreading-activation recall, appraisal-based emotion, neuromodulator state, Big Five personality and dual-process judgment.",
   "type": "module",
   "main": "lib/index.js",
@@ -90,6 +90,8 @@
     "forecast": "node examples/forecast.mjs",
     "pet": "node examples/pet-bridge.mjs",
     "pet-hook": "node examples/pet-hook.mjs",
-    "privacy": "node scripts/privacy-check.mjs"
+    "privacy": "node scripts/privacy-check.mjs",
+    "release": "node scripts/release.mjs",
+    "market": "node scripts/check-market.mjs"
   }
 }