mirror of
https://github.com/hansjone/oclaw.git
synced 2026-10-12 12:53:20 +08:00
oliver
df97c5e042
Emergency (fallback / sealed-box) admins lost the workspace sidebar and saw "sign-in failed / add API key" on DSH Desktop because the remote.mux opens anonymously at boot and every early call was rejected terminally. - gateway: anonymous workspace/follow reaches dsh-acl's empty baseline; anonymous streams are parked until the carrier aborts instead of failing; anonymous workspace/initializeDefault answers "nothing created" - request-auth: a dead UDS_SESSION cookie no longer shadows a valid WS ticket or bridge (sync + async variants used by all callers) - dsh-acl: /api/* waits (bounded 15s) for the gateway ACL during Host startup instead of 403, so the Desktop welcome read no longer fails - desktop-bootstrap: key/account projection is best-effort per reference - client: emit connection/reset after login so boot-time caches (settings describe mirror -> Settings > Models) re-read under the real principal - sessions: absolute lifetime fixed at 7 days (was min(ttl, 7d) = 30 min); bridge expiry slides with its session; MemoryStore persisted to sessions.json (bearer hash only, userData AES-256-GCM sealed) - README: session lifetime/persistence and DSH compatibility notes Also includes previously uncommitted uds-auth 0.3.x work in this tree. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
82 lines
2 KiB
JSON
82 lines
2 KiB
JSON
{
|
|
"name": "uds-auth",
|
|
"version": "0.3.15",
|
|
"description": "UDS authentication plugin for DeepSeek Harness — trusted single-instance access control (not strong multi-tenant isolation)",
|
|
"type": "module",
|
|
"main": "lib/index.js",
|
|
"bin": {
|
|
"uds-auth-seal-local-admin": "./scripts/seal-local-admin.mjs"
|
|
},
|
|
"exports": {
|
|
".": "./lib/index.js",
|
|
"./client": "./lib/client.js",
|
|
"./config": "./lib/config.js",
|
|
"./i18n": "./lib/i18n.js",
|
|
"./session": "./lib/session/factory.js",
|
|
"./middleware": "./lib/middleware/auth-middleware.js",
|
|
"./api": "./lib/api.js",
|
|
"./context": "./lib/context.js",
|
|
"./cordis.patch.yml": "./cordis.patch.yml",
|
|
"./package.json": "./package.json"
|
|
},
|
|
"scripts": {
|
|
"bundle:qrcode": "bun run scripts/bundle-qrcode.mjs",
|
|
"prepack": "bun run scripts/bundle-qrcode.mjs && node scripts/generate-sbom.mjs",
|
|
"pack:check": "node scripts/pack-check.mjs",
|
|
"test": "node --test test/**/*.test.js",
|
|
"sbom": "node scripts/generate-sbom.mjs"
|
|
},
|
|
"keywords": [
|
|
"dsh-plugin",
|
|
"dsh",
|
|
"deepseek-harness",
|
|
"authentication",
|
|
"uds",
|
|
"sso",
|
|
"session-management"
|
|
],
|
|
"files": [
|
|
"lib",
|
|
"skills",
|
|
"skill-helpers",
|
|
"scripts/seal-local-admin.mjs",
|
|
"scripts/pack-check.mjs",
|
|
"config.default.yaml",
|
|
"cordis.patch.yml",
|
|
"docs",
|
|
"README.md",
|
|
"README.zh.md",
|
|
"LICENSE"
|
|
],
|
|
"author": "",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": "^22.19.0 || >=24.0.0"
|
|
},
|
|
"dependencies": {},
|
|
"devDependencies": {
|
|
"qrcode": "1.5.4"
|
|
},
|
|
"peerDependencies": {
|
|
"react": "^18.2.0 || ^19.0.0"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"react": {
|
|
"optional": true
|
|
}
|
|
},
|
|
"dsh": {
|
|
"bundle": {
|
|
"patch": "./cordis.patch.yml"
|
|
},
|
|
"client": {
|
|
"platform": "web",
|
|
"immediately": true,
|
|
"inject": [
|
|
"@deepseek-ai/dsh-client-ui-slots",
|
|
"@deepseek-ai/dsh-client-locale",
|
|
"@deepseek-ai/dsh-client-ui-workspace"
|
|
]
|
|
}
|
|
}
|
|
}
|