dsh-plugin-tether 0.1.5 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +25 -0
- package/package.json +19 -7
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,31 @@
|
|
|
2
2
|
|
|
3
3
|
本文件记录面向用户的变化。每个版本的这一节会原样作为该版本 Release 的说明。
|
|
4
4
|
|
|
5
|
+
## 0.1.7
|
|
6
|
+
|
|
7
|
+
### 元数据
|
|
8
|
+
|
|
9
|
+
- **补上 `repository`、`homepage`、`bugs`、`author`**。主包与五个平台子包此前在 npm 上都没有仓库链接,`npm view repository` 为空——包页面上看不到出处。插件目录站按 `repository` 回链核实包与仓库的对应关系,缺这个字段就建立不起对应。
|
|
10
|
+
- **描述与关键词改为覆盖真实搜索词**。原描述里没有 Android、iOS、mobile、remote 这些词,而目录站的搜索匹配的正是描述文本:实测搜 `phone`、`手机` 能命中,搜 `android`、`mobile`、`远程` 则排不进前列。
|
|
11
|
+
|
|
12
|
+
本版无代码变更。
|
|
13
|
+
|
|
14
|
+
## 0.1.6
|
|
15
|
+
|
|
16
|
+
### 安全
|
|
17
|
+
|
|
18
|
+
- **身份密钥与配对白名单改为仅属主可读**。此前这些文件以默认权限写入,在 Unix 上通常是 `0644`——同一台机器上任何本地用户都能读到 `identity.key`(32 字节裸私钥),读到即可冒充主机、给自己签发配对码,从而取得对 dsh 界面的完整访问权。
|
|
19
|
+
|
|
20
|
+
这比此前文档中已说明的边界更宽:那条边界要求攻击者能在机器上执行代码,而本问题**只需读权限**。
|
|
21
|
+
|
|
22
|
+
受影响的是 Linux 与 macOS;Windows 无 POSIX 权限位,不受影响。**升级即修复**:程序在读取既有密钥时会一并收紧权限,不需要重新配对,主机身份也不会变。
|
|
23
|
+
|
|
24
|
+
由 [@kagura-agent](https://github.com/kagura-agent) 报告([#1](https://github.com/zexadev/dsh-tether/issues/1))。
|
|
25
|
+
|
|
26
|
+
### 修复
|
|
27
|
+
|
|
28
|
+
- **私密文件改为原子写**。此前是就地截断再写,写入过程中掉电或进程被杀会留下半截文件;对 `identity.key` 而言等同于主机身份丢失,所有已配对的手机都需重新配对。现改为先写临时文件再 rename,目标文件要么是旧内容要么是新内容。
|
|
29
|
+
|
|
5
30
|
## 0.1.5
|
|
6
31
|
|
|
7
32
|
### 新增
|
package/package.json
CHANGED
|
@@ -1,16 +1,28 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-plugin-tether",
|
|
3
|
-
"version": "0.1.
|
|
4
|
-
"description": "
|
|
3
|
+
"version": "0.1.7",
|
|
4
|
+
"description": "Mobile client for the DeepSeek Harness — use the dsh on your dev machine from your Android or iOS phone, remotely across networks, peer-to-peer with no server in between (iroh)",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"dsh",
|
|
7
7
|
"dsh-plugin",
|
|
8
8
|
"deepseek-harness",
|
|
9
9
|
"android",
|
|
10
|
+
"ios",
|
|
11
|
+
"mobile",
|
|
12
|
+
"remote",
|
|
10
13
|
"p2p",
|
|
11
14
|
"iroh"
|
|
12
15
|
],
|
|
13
16
|
"license": "MIT",
|
|
17
|
+
"repository": {
|
|
18
|
+
"type": "git",
|
|
19
|
+
"url": "git+https://github.com/zexadev/dsh-tether.git"
|
|
20
|
+
},
|
|
21
|
+
"homepage": "https://dsh-tether.zexa.cc/",
|
|
22
|
+
"bugs": {
|
|
23
|
+
"url": "https://github.com/zexadev/dsh-tether/issues"
|
|
24
|
+
},
|
|
25
|
+
"author": "zexadev",
|
|
14
26
|
"type": "module",
|
|
15
27
|
"main": "index.js",
|
|
16
28
|
"exports": {
|
|
@@ -38,10 +50,10 @@
|
|
|
38
50
|
"@deepseek-ai/dsh-user-approval": { "optional": true }
|
|
39
51
|
},
|
|
40
52
|
"optionalDependencies": {
|
|
41
|
-
"dsh-tether-host-darwin-arm64": "0.1.
|
|
42
|
-
"dsh-tether-host-darwin-x64": "0.1.
|
|
43
|
-
"dsh-tether-host-linux-arm64": "0.1.
|
|
44
|
-
"dsh-tether-host-linux-x64": "0.1.
|
|
45
|
-
"dsh-tether-host-win32-x64": "0.1.
|
|
53
|
+
"dsh-tether-host-darwin-arm64": "0.1.7",
|
|
54
|
+
"dsh-tether-host-darwin-x64": "0.1.7",
|
|
55
|
+
"dsh-tether-host-linux-arm64": "0.1.7",
|
|
56
|
+
"dsh-tether-host-linux-x64": "0.1.7",
|
|
57
|
+
"dsh-tether-host-win32-x64": "0.1.7"
|
|
46
58
|
}
|
|
47
59
|
}
|