Miles Ward
b8001cbebd
No code change from 0.5.0. The 0.2.2-alpha.2 review found the allow path's bundles byte-identical, the webserver's new resource route kind orthogonal to the interceptor, and the frontend static bundle's resource rewrite still emitting webserver/index-inject. Full probe matrix (11/11) and Files pane checks pass against a sandbox of the published release; README records the new dsh web --host wildcard refusal.
46 lines
1.3 KiB
JSON
46 lines
1.3 KiB
JSON
{
|
|
"name": "dsh-trustworthy",
|
|
"version": "0.5.1",
|
|
"description": "Removes the untrusted-origin restriction from DeepSeek Harness while keeping its own session check: every browser window is treated as if it were running on the harness machine itself, so no declared trusted host and no per-plugin origin fence refuse it. One interceptor answers every request with the loopback authority, and the one-time launch token is exchanged for a 30-day cookie exactly as on the loopback host.",
|
|
"type": "module",
|
|
"main": "lib/index.js",
|
|
"exports": {
|
|
".": "./lib/index.js",
|
|
"./authority": "./lib/authority.js",
|
|
"./handover": "./lib/handover.js",
|
|
"./package.json": "./package.json",
|
|
"./shims": "./lib/shims.js",
|
|
"./web-runtime": "./lib/web-runtime.js"
|
|
},
|
|
"files": [
|
|
"lib/",
|
|
"cordis.patch.yml",
|
|
"README.md",
|
|
"LICENSE"
|
|
],
|
|
"license": "MIT",
|
|
"engines": {
|
|
"dsh": ">=0.1.7-rc.2 <0.3.0-0"
|
|
},
|
|
"keywords": [
|
|
"dsh",
|
|
"dsh-plugin",
|
|
"deepseek-harness",
|
|
"lan",
|
|
"remote",
|
|
"untrusted-origin",
|
|
"trusted-host"
|
|
],
|
|
"dsh": {
|
|
"bundle": {
|
|
"patch": "./cordis.patch.yml"
|
|
},
|
|
"compatibility": {
|
|
"dsh": ">=0.1.7-rc.2 <0.3.0-0"
|
|
}
|
|
},
|
|
"peerDependencies": {
|
|
"@deepseek-ai/schemastery": "^3.18.1"
|
|
}
|
|
}
|