dsh-web-fetch-enhanced 0.0.4 → 0.0.5

package/README.en.md

@@ -30,11 +30,12 @@ With an empty CIDR allowlist, the security boundary remains equivalent to the na
 - **Anonymous bounded GET requests** — no cookies, Authorization header, or URL credentials;
 - **Resource limits** — URL length, response bytes, decoded characters, redirects, and time are bounded;
 - **IPv4 and IPv6 coverage** — including IPv4-mapped IPv6 and active DNS64 / NAT64 checks;
-- **Outbound HTTP proxy alignment** — seamlessly respects DSH global proxy routes (`HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY`), while refusing unvalidated private IP literals from bypassing address checks through the proxy.
+- **Outbound HTTP proxy alignment** — seamlessly respects DSH global proxy routes (`HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY`), while refusing unvalidated private IP literals from bypassing address checks through the proxy;
+- **Dynamic system prompt alignment** — automatically injects explicit authorization guidance into the system prompt when non-public allowlists are configured, eliminating LLM refusal hallucinations when fetching authorized private destinations.
 
 ## Compatibility & Support Policy
 
-- **Minimum Supported DSH Version**: `0.1.2-rc.1`
+- **Minimum Supported DSH Version**: `0.1.5-rc.2`
 - **Support Policy**: This plugin **only supports DeepSeek Harness RC (Release Candidate) releases and future stable releases**. Compatibility is not maintained for rapid-moving Alpha or development snapshot versions.
 
 ## Quick start

package/README.md

@@ -30,11 +30,12 @@ DeepSeek Harness 原生 HTTP provider 默认拒绝所有非公网地址，这是
 - **受限匿名请求**：只发送无 Cookie、无 Authorization、无 URL 凭据的 GET 请求；
 - **完整资源上限**：限制 URL、响应字节、解码字符、重定向次数和超时时间；
 - **IPv4 / IPv6 防护**：覆盖 IPv4-mapped IPv6 与活动 DNS64 / NAT64 目标检查；
-- **全局出站代理协同**：无缝对接 DSH 全局 HTTP 代理路由（`HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY`），同时严格禁止非公网 IP 字面量越权走代理，杜绝内网 SSRF 风险。
+- **全局出站代理协同**：无缝对接 DSH 全局 HTTP 代理路由（`HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY`），同时严格禁止非公网 IP 字面量越权走代理，杜绝内网 SSRF 风险；
+- **动态系统提示词协同**：当管理员配置了非公网白名单时，自动向模型系统提示词注入显式授权声明，消除模型因默认安全准则而产生“无法访问内网”的拒答幻觉。
 
 ## 版本兼容性与支持策略
 
-- **最低支持的 DSH 版本**：`0.1.2-rc.1`
+- **最低支持的 DSH 版本**：`0.1.5-rc.2`
 - **版本支持策略**：本插件**仅对 DeepSeek Harness 的 RC（Release Candidate）候选发布版本及后续稳定正式版提供支持**。由于 Alpha 或开发快照版本更迭频繁且缺乏稳定的 API 保证，本插件不再对 Alpha 等非 RC 阶段版本进行维护与适配。
 
 ## 快速开始

package/lib/index.js

@@ -4,6 +4,7 @@ import ipaddr from "ipaddr.js";
 import { WebError } from "@deepseek-ai/dsh-web";
 import { deadline, timeoutOf } from "@deepseek-ai/dsh-timeout";
 import { lookup } from "node:dns/promises";
+import { proxyRouteFor } from "@deepseek-ai/dsh-http-proxy";
 //#region lib/types/address-policy.js
 /**
 * Immutable address policy. Public unicast remains allowed. A non-public address
@@ -223,20 +224,14 @@ function embeddedIpv4Address(bytes, prefixLength) {
 	return [...bytes.slice(prefixBytes, prefixBytes + beforeReservedOctet), ...bytes.slice(9, 13 - beforeReservedOctet)].join(".");
 }
 /**
-* Default proxy route resolver: safely resolves proxy route via @deepseek-ai/dsh-http-proxy if available,
-* gracefully degrading to direct routing if the module is absent.
+* Default proxy route resolver: resolves proxy route via @deepseek-ai/dsh-http-proxy.
 */
-async function defaultProxyRoute(url) {
-	try {
-		const { proxyRouteFor } = await import("@deepseek-ai/dsh-http-proxy");
-		const route = proxyRouteFor(url);
-		return route.proxied ? {
-			proxied: true,
-			dispatcher: route.dispatcher
-		} : { proxied: false };
-	} catch {
-		return { proxied: false };
-	}
+function defaultProxyRoute(url) {
+	const route = proxyRouteFor(url);
+	return route.proxied ? {
+		proxied: true,
+		dispatcher: route.dispatcher
+	} : { proxied: false };
 }
 /** Fetch while preserving the URL hostname for Host and TLS SNI. */
 async function requestPinned(url, addresses, headers, signal) {
@@ -628,6 +623,16 @@ const Config = z.object({
 	maxRedirects: z.number().default(5),
 	userAgent: z.string().default(DEFAULT_USER_AGENT)
 });
+/** Build prompt guidance copy informing the model of authorized non-public destinations. */
+function formatAllowlistPrompt(config) {
+	const cidrs = config.allowCidrs ?? [];
+	const hostnames = config.allowHostnames ?? [];
+	if (cidrs.length === 0 && hostnames.length === 0) return "";
+	const items = [];
+	if (cidrs.length > 0) items.push(`CIDRs: ${cidrs.join(", ")}`);
+	if (hostnames.length > 0) items.push(`hostnames: ${hostnames.join(", ")}`);
+	return `The operator has explicitly authorized web_fetch access to the following non-public destinations: [${items.join("; ")}]. You can safely fetch these endpoints.`;
+}
 /** Construct the provider without mounting it, useful for tests and custom compositions. */
 function createProvider(config = {}, proxyResolver) {
 	const resolved = resolveConfig(config);
@@ -664,7 +669,9 @@ function apply(ctx, config) {
 				setSource: (source) => {
 					current = source;
 				},
-				onChange: () => {},
+				onChange: () => {
+					ctx.emit("system-prompt/change");
+				},
 				validate: (value) => {
 					if (resolveConfig(value).providerId !== providerId) throw new Error("web-fetch-enhanced: providerId cannot be changed through live settings");
 					createProvider(value);
@@ -683,6 +690,14 @@ function apply(ctx, config) {
 		settingsCtx.effect(() => () => {
 			if (isUnloading(ctx)) return;
 			current = () => config;
+			ctx.emit("system-prompt/change");
+		});
+	});
+	ctx.inject(["systemPrompt"], (promptCtx) => {
+		promptCtx.systemPrompt.section({
+			name: "web-fetch-enhanced:allowlist",
+			order: 2105,
+			text: () => formatAllowlistPrompt(current())
 		});
 	});
 	const dynamicProvider = {
@@ -720,4 +735,4 @@ function assertNonNegativeInteger(field, value) {
 	if (!Number.isInteger(value) || value < 0) throw new Error(`web-fetch-enhanced: ${field} must be a non-negative integer`);
 }
 //#endregion
-export { Config, DEFAULT_PROVIDER_ID, DEFAULT_USER_AGENT, SETTINGS_NAMESPACE, apply, createProvider, defaultProxyRoute, inject, isNonPublicIpLiteral, name };
+export { Config, DEFAULT_PROVIDER_ID, DEFAULT_USER_AGENT, SETTINGS_NAMESPACE, apply, createProvider, defaultProxyRoute, formatAllowlistPrompt, inject, isNonPublicIpLiteral, name };

package/lib/types/client/AllowlistCard.d.ts

@@ -1,4 +1,4 @@
-import type { SettingsScope } from '@deepseek-ai/dsh-client-runtime/client';
+import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
 import type { LocaleKey } from './locales.ts';
 export interface AllowlistSettings {
     allowCidrs?: string[];

package/lib/types/index.d.ts

@@ -39,6 +39,23 @@ export interface Config {
     userAgent?: string;
 }
 export declare const Config: z<Config>;
+interface SystemPromptSeam {
+    section(section: {
+        name: string;
+        order: number;
+        text: string | ((context?: unknown) => string);
+    }): () => void;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        systemPrompt?: SystemPromptSeam;
+    }
+    interface Events {
+        'system-prompt/change'(): void;
+    }
+}
+/** Build prompt guidance copy informing the model of authorized non-public destinations. */
+export declare function formatAllowlistPrompt(config: Config): string;
 /** Construct the provider without mounting it, useful for tests and custom compositions. */
 export declare function createProvider(config?: Config, proxyResolver?: ProxyRouteResolver): EnhancedHttpFetchProvider;
 export { isNonPublicIpLiteral } from './address-policy.ts';

package/lib/types/resolver.d.ts

@@ -33,10 +33,9 @@ export type ProxyRouteResult = {
 /** Function deciding whether a URL should be routed through an outbound proxy. */
 export type ProxyRouteResolver = (url: URL) => Promise<ProxyRouteResult> | ProxyRouteResult;
 /**
- * Default proxy route resolver: safely resolves proxy route via @deepseek-ai/dsh-http-proxy if available,
- * gracefully degrading to direct routing if the module is absent.
+ * Default proxy route resolver: resolves proxy route via @deepseek-ai/dsh-http-proxy.
  */
-export declare function defaultProxyRoute(url: URL): Promise<ProxyRouteResult>;
+export declare function defaultProxyRoute(url: URL): ProxyRouteResult;
 /** Fetch while preserving the URL hostname for Host and TLS SNI. */
 export declare function requestPinned(url: URL, addresses: readonly ValidatedAddress[], headers: Record<string, string>, signal: AbortSignal): Promise<PinnedResponse>;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-web-fetch-enhanced",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Configurable non-public address allowlists for DeepSeek Harness web_fetch",
   "type": "module",
   "main": "./lib/index.js",
@@ -65,25 +65,20 @@
     "access": "public"
   },
   "engines": {
-    "node": "^22.19.0 || >=24.0.0"
+    "node": "^22.19.0 || >=24.0.0",
+    "dsh": ">=0.1.5-rc.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1 || ^4.0.2",
-    "@deepseek-ai/dsh-timeout": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-web": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-http-proxy": "^0.1.2-rc.1"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-http-proxy": {
-      "optional": true
-    }
+    "@deepseek-ai/dsh-timeout": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-web": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-http-proxy": "^0.1.5-rc.2"
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1 || ^3.18.2",
@@ -91,16 +86,16 @@
     "undici": "^8.10.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-timeout": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-web": "^0.1.1-rc.2",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-timeout": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-web": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-http-proxy": "^0.1.5-rc.2",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.19.13",
     "@types/react": "~18.3.1",