dsh-minimax-voice 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.2.1 — 2026-11-07
+
+### Fixed
+
+- **`/mmvoice/api` now passes the host trust fence.** Every request goes through `connection.requestRejection()` (Host/Origin checks plus an authenticated browser session or API token) and is answered with `401`/`403` when it fails; if the `connection` service is unavailable, only loopback same-origin requests are accepted. Previously the local routes were unauthenticated, so a page on another origin could clone voices, synthesize audio or change the key.
+
+### Added
+
+- Marketplace badge in both READMEs, linking to the plugin's page in [awesome-dsh-plugin](https://awesome-dsh-plugin.com), the catalog behind the DSH plugin market.
+
 ## 0.2.0 — 2026-11-07
 
 ### Added

package/README.md

@@ -12,6 +12,7 @@
 
 [![npm](https://img.shields.io/npm/v/dsh-minimax-voice.svg?label=npm)](https://www.npmjs.com/package/dsh-minimax-voice)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/Sunshine334419520/dsh-minimax-voice/)
 [![DSH Plugin](https://img.shields.io/badge/DSH-Plugin-0f766e.svg)](https://github.com/deepseek-ai/deepseek-harness)
 [![Node.js 22+](https://img.shields.io/badge/Node.js-22%2B-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)
 
@@ -206,6 +207,10 @@ Check [MiniMax pricing](https://www.minimax.io/price) for current numbers. The p
 - Audio and text are sent to MiniMax to do the work; nothing else leaves the machine.
 - `remove()` deletes the local registry entry and preview only. Delete on MiniMax's side from the console if you also want the voice gone there.
 
+## Local API security
+
+`/mmvoice/api` can read the API key, write audio files and trigger billed calls, so every request passes the harness trust fence: [`connection.requestRejection()`](https://github.com/deepseek-ai/deepseek-harness) checks the Host/Origin pair (DNS rebinding) and requires an authenticated browser session or API token. A request that fails is answered with `401` or `403`. If the `connection` service is unavailable, only loopback, same-origin requests are accepted. Another website therefore cannot reach these routes to spend your MiniMax balance or swap the key.
+
 ## Troubleshooting
 
 | Symptom | Fix |
@@ -213,6 +218,7 @@ Check [MiniMax pricing](https://www.minimax.io/price) for current numbers. The p
 | `configured: false` | No key found; save one in the panel or export `MINIMAX_API_KEY` |
 | Panel missing after install | Toggle the plugin off/on in **Plugins**, or restart the app |
 | `mmvoice/api/status` returns 404 | Plugin is not loaded in this profile — check `dsh plugin --profile <name> list` |
+| `mmvoice/api/*` returns 401 | No authenticated session for that request; open the panel from the harness UI (the routes are not open to other origins) |
 | New voice shows `未激活` | Expected. It is never been synthesized yet, so the fee is not paid |
 | Clone fails with 400 | Sample too short/long/quiet, or the account has no voice-cloning permission |
 | Transcription returns empty text | Language hint conflicts with the audio, or the file is mostly music |

package/README.zh-CN.md

@@ -12,6 +12,7 @@
 
 [![npm](https://img.shields.io/npm/v/dsh-minimax-voice.svg?label=npm)](https://www.npmjs.com/package/dsh-minimax-voice)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/Sunshine334419520/dsh-minimax-voice/)
 [![DSH Plugin](https://img.shields.io/badge/DSH-Plugin-0f766e.svg)](https://github.com/deepseek-ai/deepseek-harness)
 [![Node.js 22+](https://img.shields.io/badge/Node.js-22%2B-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)
 
@@ -206,6 +207,10 @@ export function apply(ctx) {
 - 音频和文本会发给 MiniMax 完成处理，其余数据不出本机。
 - `remove()` 只删本地注册表和试听文件；要连账号侧一起删，请去 MiniMax 控制台。
 
+## 本地接口安全
+
+`/mmvoice/api` 能读 API Key、写音频文件、触发计费调用，所以每个请求都要过宿主的信任栅栏：[`connection.requestRejection()`](https://github.com/deepseek-ai/deepseek-harness) 会校验 Host/Origin（防 DNS 重绑定），并要求已认证的浏览器会话或 API 令牌；不通过就返回 `401` 或 `403`。拿不到 `connection` 服务时，只接受回环地址的同源请求。别的网页因此够不到这些接口，无法花你的 MiniMax 余额或换掉 Key。
+
 ## 常见问题
 
 | 现象 | 处理 |
@@ -213,6 +218,7 @@ export function apply(ctx) {
 | `configured: false` | 没找到 Key，去面板保存或导出 `MINIMAX_API_KEY` |
 | 装完设置页没出现 | 在「插件」里关掉再打开，或重启应用 |
 | `/mmvoice/api/status` 返回 404 | 这个 profile 没加载插件，`dsh plugin --profile <name> list` 看看 |
+| `/mmvoice/api/*` 返回 401 | 该请求没有已认证的会话；从 harness 界面里打开面板使用（接口不对其他来源开放） |
 | 新音色显示 `未激活` | 正常。还没合成过，所以那 9.9 元也没收 |
 | 复刻报 400 | 样本太短 / 太长 / 太安静，或账号没开通复刻权限 |
 | 转写结果为空 | 语种提示与音频不符，或者文件基本是纯音乐 |

package/index.js

@@ -32,6 +32,60 @@ const DEFAULT_PREVIEW_TEXT = '你好，这是复刻音色的试听效果，听
 const MAX_BODY_BYTES = 24 * 1024 * 1024
 const ROUTE_PREFIX = '/mmvoice/api'
 
+/* ------------------------------------------------------------ trust fence */
+
+/**
+ * `/mmvoice/api` 能读写 API Key、音色样本、生成的音频，并会触发计费调用，
+ * 所以它必须接宿主的浏览器认证，而不是"只监听回环所以安全"。
+ * dsh 的 connection 服务提供 `requestRejection({ headers }): 401 | 403 | undefined`，
+ * 它同时做 Host/Origin 校验（防 DNS 重绑定）和浏览器会话认证。
+ * 拿不到该服务时退化为只接受回环地址的同源请求（fail closed）。
+ */
+function serviceOf(ctx, name) {
+  try {
+    return ctx.get(name)
+  } catch {
+    return undefined
+  }
+}
+
+function isLoopbackRequest(req) {
+  const host = String((req && req.headers && req.headers.host) || '').toLowerCase()
+  const address = String((req && req.socket && req.socket.remoteAddress) || '')
+  const hostOk = /^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/.test(host)
+  const peerOk =
+    address === '' || address === '127.0.0.1' || address === '::1' || address === '::ffff:127.0.0.1'
+  return hostOk && peerOk
+}
+
+function trustRejection(ctx, req) {
+  const connection = serviceOf(ctx, 'connection')
+  if (connection && typeof connection.requestRejection === 'function') {
+    try {
+      const code = connection.requestRejection(req)
+      if (code === undefined) return 0
+      return typeof code === 'number' ? code : 403
+    } catch {
+      return 403
+    }
+  }
+  return isLoopbackRequest(req) ? 0 : 403
+}
+
+function denyRequest(res, status) {
+  try {
+    const body = JSON.stringify({ error: status === 401 ? 'unauthorized' : 'forbidden' })
+    res.writeHead(status, {
+      'content-type': 'application/json; charset=utf-8',
+      'content-length': String(Buffer.byteLength(body)),
+      'cache-control': 'no-store',
+    })
+    res.end(body)
+  } catch {
+    /* the connection is already gone */
+  }
+}
+
 /* ------------------------------------------------------------------ utils */
 
 function text(value) {
@@ -958,8 +1012,16 @@ export function apply(ctx, config = {}) {
   const claimRoute = (webServer) => {
     if (routeRegistered || !webServer) return
     routeRegistered = true
+    const handler = (req, res) => {
+      const rejection = trustRejection(ctx, req)
+      if (rejection) {
+        denyRequest(res, rejection)
+        return
+      }
+      void voice.handleHttp(req, res)
+    }
     ctx.effect(
-      () => webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler: (req, res) => void voice.handleHttp(req, res) }),
+      () => webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }),
       'minimax-voice: http route',
     )
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-minimax-voice",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Voice cloning, text-to-speech and speech-to-text for DeepSeek Harness, powered by MiniMax · DeepSeek Harness 的 MiniMax 音色复刻 / 文本转音频 / 语音转文字插件",
   "type": "module",
   "license": "MIT",