dsh-cerebrum 0.1.2 → 0.1.3

package/docs/publish.md

@@ -2,7 +2,7 @@
 
 > **发布状态（2026-10-28）**
 > - GitHub 公开仓库：https://github.com/liu-wen-wu/dsh-cerebrum（main + tag v0.1.1，SSH 推送）
-> - npm：`dsh-cerebrum@0.1.1` 已上线（latest；0.1.0 为上一版）
+> - npm：`dsh-cerebrum@0.1.2` 已上线（latest；0.1.1 上一版，含内置宠物桥接）
 > - 市场收录申请：https://github.com/polang233/dsh-plugin-index/issues/121
 > - 本地安装：`dsh-cerebrum@link:D:/workspace/dsh-cerebrum`（desktop profile，已热加载验证）
 

package/lib/api.js

@@ -18,40 +18,64 @@
 import http from 'node:http'
 import { INTERACTION_KINDS } from './core/petbrain.js'
 
-const cors = (res) => {
-  res.setHeader('Access-Control-Allow-Origin', '*')
-  res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS')
-  res.setHeader('Access-Control-Allow-Headers', 'Content-Type')
-  res.setHeader('Content-Type', 'application/json; charset=utf-8')
+const CORS_METHODS = 'GET, OPTIONS'
+const LOOPBACK = /^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/
+const LOOPBACK_ORIGIN = /^https?:\/\/(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/
+
+/**
+ * Access control for the loopback API (review feedback on dshplugin-index#121):
+ * - Host must be a loopback host (blocks DNS rebinding).
+ * - If the request carries an Origin (cross-origin browser fetch), it must also
+ *   be a loopback origin — an arbitrary website can no longer read the brain.
+ * - Optional shared token (`config.api.token`) for users who want a second lock.
+ */
+const checkAccess = (req, token) => {
+  const host = String(req.headers.host ?? '')
+  if (!LOOPBACK.test(host)) return { ok: false, status: 403, reason: 'host-not-allowed' }
+  const origin = req.headers.origin
+  if (origin && !LOOPBACK_ORIGIN.test(String(origin))) return { ok: false, status: 403, reason: 'origin-not-allowed' }
+  if (token && req.headers['x-cerebrum-token'] !== token) return { ok: false, status: 401, reason: 'token-required' }
+  return { ok: true }
 }
 
-const send = (res, status, payload) => {
-  cors(res)
+const send = (res, status, payload, origin) => {
+  if (origin) res.setHeader('Access-Control-Allow-Origin', String(origin))
+  res.setHeader('Access-Control-Allow-Methods', CORS_METHODS)
+  res.setHeader('Access-Control-Allow-Headers', 'Content-Type, x-cerebrum-token')
+  res.setHeader('Vary', 'Origin')
+  res.setHeader('Content-Type', 'application/json; charset=utf-8')
   res.statusCode = status
   res.end(JSON.stringify(payload))
 }
 
-export const startBrainApi = (service, { port = 18734, ui = { enabled: true }, logger = console } = {}) => {
+export const startBrainApi = (service, { port = 18734, ui = { enabled: true }, token = '', logger = console } = {}) => {
+  // Interaction rate limit: /interact is the only mutation; cap it to stop flooding.
+  let interactWindow = { at: 0, count: 0 }
   const server = http.createServer((req, res) => {
-    if (req.method === 'OPTIONS') return send(res, 204, {})
-    if (req.method !== 'GET') return send(res, 405, { error: 'method not allowed' })
+    const origin = req.headers.origin
+    const allowedOrigin = origin && LOOPBACK_ORIGIN.test(String(origin)) ? String(origin) : null
+    const access = checkAccess(req, token)
+    if (!access.ok) return send(res, access.status, { error: access.reason }, allowedOrigin)
+    if (req.method === 'OPTIONS') return send(res, 204, {}, allowedOrigin)
+    if (req.method !== 'GET') return send(res, 405, { error: 'method not allowed' }, allowedOrigin)
     const url = new URL(req.url, `http://127.0.0.1:${port}`)
+    const reply = (status, payload) => send(res, status, payload, allowedOrigin)
     try {
       switch (url.pathname) {
         case '/ping':
-          return send(res, 200, { ok: true, name: 'dsh-cerebrum', uptimeMs: Date.now() - service.startedAt })
+          return reply(200, { ok: true, name: 'dsh-cerebrum', uptimeMs: Date.now() - service.startedAt })
         case '/ui':
           // The client respects this: ui.enabled=false removes the chip entirely.
-          return send(res, 200, { enabled: ui.enabled !== false, drivePet: ui.drivePet !== false })
+          return reply(200, { enabled: ui.enabled !== false, drivePet: ui.drivePet !== false })
         case '/state': {
           const sessionId = url.searchParams.get('session') || undefined
-          return send(res, 200, service.state(sessionId))
+          return reply(200, service.state(sessionId))
         }
         case '/recall': {
           const query = url.searchParams.get('q') ?? ''
           const sessionId = url.searchParams.get('session') || undefined
           const hits = service.recall(query, { k: 3, sessionId })
-          return send(res, 200, {
+          return reply(200, {
             query,
             memories: hits.map((hit) => ({
               summary: hit.episode.summary,
@@ -63,21 +87,25 @@ export const startBrainApi = (service, { port = 18734, ui = { enabled: true }, l
         }
         case '/render-hints': {
           const sessionId = url.searchParams.get('session') || undefined
-          return send(res, 200, service.renderHintsFor(sessionId))
+          return reply(200, service.renderHintsFor(sessionId))
         }
         case '/interact': {
           // The only mutation the API allows: affect-only pet interactions.
+          const now = Date.now()
+          if (now - interactWindow.at > 60_000) interactWindow = { at: now, count: 0 }
+          interactWindow.count++
+          if (interactWindow.count > 30) return reply(429, { error: 'too-many-interactions' })
           const kind = url.searchParams.get('kind') ?? ''
           const sessionId = url.searchParams.get('session') || undefined
           const hints = service.interact(kind, sessionId)
-          if (!hints) return send(res, 400, { error: `unknown interaction kind, use one of ${INTERACTION_KINDS.join(', ')}` })
-          return send(res, 200, hints)
+          if (!hints) return reply(400, { error: `unknown interaction kind, use one of ${INTERACTION_KINDS.join(', ')}` })
+          return reply(200, hints)
         }
         default:
-          return send(res, 404, { error: 'unknown endpoint' })
+          return reply(404, { error: 'unknown endpoint' })
       }
     } catch (error) {
-      return send(res, 500, { error: error?.message ?? 'internal error' })
+      return reply(500, { error: error?.message ?? 'internal error' })
     }
   })
 

package/lib/config.js

@@ -45,6 +45,8 @@ export const DEFAULT_CONFIG = {
   api: {
     enabled: true,
     port: 18734,
+    /** Optional shared secret; when set, every request must send x-cerebrum-token. */
+    token: '',
   },
   /** Client UI (the brain chip/dashboard). Users who dislike it can switch it off. */
   ui: {

package/lib/index.js

@@ -57,7 +57,7 @@ export function apply(ctx, rawConfig = {}) {
 
   // Read-only loopback API powering the optional client UI (dock + dashboard).
   if (config.api.enabled) {
-    const api = startBrainApi(service, { port: config.api.port, ui: config.ui })
+    const api = startBrainApi(service, { port: config.api.port, ui: config.ui, token: config.api.token })
     ctx.effect(() => () => api.close(), 'cerebrum:brain-api')
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-cerebrum",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Brain-inspired cognitive architecture for DeepSeek Harness: hippocampal episodic memory, cortical semantic memory, spreading-activation recall, appraisal-based emotion, neuromodulator state, Big Five personality and dual-process judgment.",
   "type": "module",
   "main": "lib/index.js",
@@ -90,6 +90,8 @@
     "forecast": "node examples/forecast.mjs",
     "pet": "node examples/pet-bridge.mjs",
     "pet-hook": "node examples/pet-hook.mjs",
-    "privacy": "node scripts/privacy-check.mjs"
+    "privacy": "node scripts/privacy-check.mjs",
+    "release": "node scripts/release.mjs",
+    "market": "node scripts/check-market.mjs"
   }
 }