dsh-cindy-host 0.1.28 → 0.1.30

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.1.30 — 2026-10-29
+
+- Match Cindy native local media fetching: baseDir/workdir constraints are optional; absolute file references no longer fail with no-root. Explicit constraints, sensitive-path checks, regular-file checks and byte limits remain enforced.
+- Fix the shared parser/resolver for all file types and original, thumbnail, prepareOnly and file-peer reads; no PNG-specific workaround or controller changes.
+- Add contract regressions for 15 extensions, POSIX/Windows paths, both file/audio schemes, real filesystem preparation and rootless peer bytes/EOF.
+- Minimal patch on published 0.1.29; preserves its runtime and queue/input-delivery behavior. Requires the same DSH 0.2.1-rc.3 carrier and Node >=22.16. Linux handset end-to-end acceptance requires deployment and is not implied by publication.
+
+## 0.1.29 — 2026-10-29
+
+- Publish from a clean, committed Git source tree; preserve the accepted 0.1.28 runtime behavior.
+- Make native Android queue/ACK and durable-outbox regression tests offline and repository-contained.
+- Pin upstream Cindy test sources with Apache-2.0 LICENSE and NOTICE; exclude all fixtures from the npm package.
+- Synchronize the dependency lock and version-aware isolated smoke helper; retain current DSH SDK peers without forced upgrades.
+
 ## 0.1.28 — 2026-10-28
 
 - Fix busy input confirmation on both controllers: DSH admission no longer removes an actual pending inbox row from later projections.

package/README.md

@@ -4,14 +4,18 @@ A Host-side adapter connecting current Cindy clients to DeepSeek Harness.
 
 ## Requirements and installation
 
-Version 0.1.27 targets the verified **DSH 0.2.1-rc.3** service contracts, with **Node.js >=22.16**. Its DSH peer versions are pinned to this carrier to prevent an installer from mixing a newer prerelease SDK into the running host. The verified Desktop runtime includes Node.js 24.21. Install through the Desktop DSH plugin manager. CLI-managed profiles can use:
+Version 0.1.29 targets the verified **DSH 0.2.1-rc.3** service contracts, with **Node.js >=22.16**. Its DSH peer versions are pinned to this carrier to prevent an installer from mixing a newer prerelease SDK into the running host. The verified Desktop runtime includes Node.js 24.21. Install through the Desktop DSH plugin manager. CLI-managed profiles can use:
 
 ```sh
-dsh plugin --profile <profile> add dsh-cindy-host@0.1.28
+dsh plugin --profile <profile> add dsh-cindy-host@0.1.29
 ```
 
 Reload the Host plugin after installation. A full DSH restart is separate. Keep existing Cindy sign-in, device identity and settings; do not run two Host processes with the same identity.
 
+## 0.1.29: reproducible repository release
+
+Runtime behavior is unchanged from the phone- and desktop-accepted 0.1.28. This release synchronizes the verified source, dependency lock and offline native-client contract fixtures into Git. The pinned third-party fixtures are test-only and excluded from the npm package.
+
 ## 0.1.28: busy enqueue confirmation
 
 A real DSH pending inbox occurrence remains in pendingQueue (or steeringQueueClientIds) in enqueue replies, pushes and polling until it is actually claimed or committed. Handing input to DSH is not delivery to the user turn. This fixes 0.1.27 empty follow-up projections overwriting the busy-queue acknowledgment on Android and desktop. Regression tests execute the current Android parser and stale-ACK authority handling, not just the durable outbox state machine.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-cindy-host",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "private": false,
   "description": "Cindy 手机客户端连接 DSH 的 Host 侧插件：会话/消息/审批/todo/goal 的手机通道，以及配套的设置卡片",
   "license": "MIT",

package/src/host-media-fetch.js

@@ -8,19 +8,14 @@
  * (`apps/desktop/src/main/device-link/mediaFetch.ts`: 解析本机媒体 → 上传 OSS → 返回引用):
  *
  * ```
- * request   { url: 'xdt-file://open?path=<abs>&workdir=<abs>&maxBytes=<n>', thumbnail?, skipCache?, prepareOnly? }
+ * request   { url: 'xdt-file://open?path=<abs>', thumbnail?, skipCache?, prepareOnly? }
  * response  { ossKey, mimeType, size }            // the controller presign-gets the key
  * ```
  *
- * Two things are deliberately **stricter** than the reference, because this Host is a
- * process on somebody's desktop rather than an app with its own cache directory:
- *
- * 1. **A containment root is mandatory.** The desktop treats a missing `baseDir` as "no
- *    constraint" for old controllers; here a request that names no root (neither `baseDir`
- *    nor the `workdir` a chat image carries) is refused. Without that, any absolute path
- *    on this machine would be servable by anyone who can reach the Host.
- * 2. **Realpath on both sides.** A symlink inside the workspace must not become a way out
- *    of it, and `/tmp` vs `/private/tmp` must not make a legitimate file look outside.
+ * Directory constraints are optional, matching Cindy's native media-fetch contract.
+ * A plain absolute `path` is accepted; when `baseDir` or `workdir` is supplied, both
+ * the file and the root are realpath'd before containment checks. This prevents a
+ * symlink from escaping a supplied root and handles `/tmp` vs `/private/tmp` aliases.
  *
  * Malformed constraint parameters are refused rather than ignored: silently degrading to
  * "unconstrained" is how a constraint gets removed by a typo.
@@ -266,7 +261,6 @@ export function parseMediaFetchRequest(url) {
     if (value.trim() === '' || !isAbsoluteMediaPath(value)) return { ok: false, reason: `invalid-${key}` };
     roots.push(value);
   }
-  if (roots.length === 0) return { ok: false, reason: 'no-root' };
 
   let maxBytes = null;
   const rawMaxBytes = parsed.searchParams.get('maxBytes');
@@ -316,7 +310,7 @@ export function createLocalFileResolver({
         // A root that does not resolve cannot authorise anything; the others still can.
       }
     }
-    if (allowedRoots.length === 0 || !allowedRoots.some((root) => isInsideDirectory(real, root))) {
+    if (request.roots.length > 0 && !allowedRoots.some((root) => isInsideDirectory(real, root))) {
       return { ok: false, code: 'FORBIDDEN', message: 'the requested file is outside the directory the controller named' };
     }
     if (isBlockedMediaPath(real, blocked)) {

package/src/host-version.js

@@ -4,4 +4,4 @@
  */
 export const HOST_APP_VERSION = '0.1.82';
 /** Actual npm release, separate from the Cindy compatibility identity. */
-export const HOST_PLUGIN_VERSION = '0.1.28';
+export const HOST_PLUGIN_VERSION = '0.1.30';

package/src/host.js

@@ -227,8 +227,8 @@ export async function startHost(initialSource, settings = DEFAULT_HOST_SETTINGS,
    *
    * The chat-image path: a picture the agent produced is referenced by path in the
    * transcript, and the controller resolves it through `device-link:media:fetch`. Same
-   * uploader as the file browser's export ops, stricter request handling
-   * (`host-media-fetch.js`): a containment root is mandatory and both sides are realpath'd.
+   * uploader as the file browser's export ops. Directory constraints are optional, as
+   * in Cindy; when supplied, both the file and the root are realpath'd before checking.
    */
   const fetchLocalMedia = createLocalMediaFetcher({ uploader: uploadMedia });
   const resolvePeerFile = createLocalFileResolver({ maxBytes: FILE_PEER_MAX_BYTES });