@goodandready/dsh-clinebot 0.6.25 → 0.6.27

package/CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to `@goodandready/dsh-clinebot` will be documented in this f
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.27] - 2026-11-05
+
+### Security
+- **Updater Windows environment (#289)**: the environment allowlist is case-insensitive, so Windows `Path` and `ProgramFiles(x86)` survive into the child installer.
+- **Updater registry credentials (#290)**: npm registry/proxy URL userinfo is stripped before the child installer starts.
+- **Complete write-path guard (#288)**: adapter telemetry and the models sync route no longer write stats or price caches outside `$DSH_HOME`; invalid paths fall back instead of being used.
+- **Dangling symlink guard (#291)**: `isSafeDataPath()` rejects symlinks whose target does not exist, closing the remaining symlink escape from #269.
+- **Native settings HTTPS gate (#292)**: remote chat and usage requests reject plain HTTP `baseUrl` even when the value came from native settings.
+- **Credential name allowlist (#293)**: `apiKeyEnv`, account env names and credential resolution accept only `CLINEBOT_API_KEY` names; invalid names cannot read arbitrary environment credentials.
+
+## [0.6.26] - 2026-11-05
+
+### Security
+- **Updater proxy credentials (#285)**: proxy env values are stripped of URL userinfo before being passed to install scripts.
+- **Native settings path guard (#286)**: unsafe `statsPath`, `eventLogPath`, `modelsCachePath` and `priceCatalogPath` values are ignored by startup/sync and rejected by write routes, not only by the HTTP config handler.
+- **Prototype-safe price/config dictionaries (#287)**: price catalogs, config snapshots and account snapshots keep `__proto__` as own data instead of changing object prototypes.
+
 ## [0.6.25] - 2026-11-04
 
 ### Added

package/README.md

@@ -4,7 +4,7 @@
 
 <h3>Native ClineBot / ClinePass Provider Companion for DeepSeek Harness</h3>
 
-<p><b>0.6.25</b> adds DSH <code>0.2.2-rc.1</code> support and keeps the security hardening from 0.6.24. It also keeps automatic model/free/dated catalog backfill, model-scoped credit cooldowns and 402/413 errors. Chat runs on the native <code>ctx.llm</code> adapter; the legacy <code>llm-pi-ai</code>, loopback proxy and <code>llm/stream</code> path are removed.</p>
+<p><b>0.6.27</b> completes the native-settings security boundary: HTTPS-only remote endpoints, allowlisted credential names, path-safe telemetry/price writes, dangling-symlink rejection and a Windows-safe updater environment. It keeps DSH <code>0.2.2-rc.1</code> support, automatic model/free/dated catalog backfill, model-scoped credit cooldowns and 402/413 errors. Chat runs on the native <code>ctx.llm</code> adapter; the legacy <code>llm-pi-ai</code>, loopback proxy and <code>llm/stream</code> path are removed.</p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/@goodandready/dsh-clinebot"><img src="https://img.shields.io/npm/v/@goodandready/dsh-clinebot.svg?style=for-the-badge&color=6366f1&labelColor=1e1b4b" alt="npm version"></a>

package/README.ru.md

@@ -4,7 +4,7 @@
 
 <h3>Нативное подключение провайдера ClineBot / ClinePass для DeepSeek Harness</h3>
 
-<p><b>0.6.25</b> добавляет поддержку DSH <code>0.2.2-rc.1</code> и сохраняет security-усиления 0.6.24. Также сохраняются автодобор каталога моделей/FREE/dated, cooldown недостатка кредитов для конкретной модели и ошибки 402/413. Чат работает через нативный адаптер <code>ctx.llm</code>; старые <code>llm-pi-ai</code>, loopback-прокси и <code>llm/stream</code> удалены.</p>
+<p><b>0.6.27</b> завершает security-границу native settings: HTTPS-only внешние endpoints, allowlist имён credentials, безопасные пути telemetry/price, отклонение dangling symlink и Windows-safe окружение updater. Сохраняются поддержка DSH <code>0.2.2-rc.1</code>, автодобор каталога моделей/FREE/dated, cooldown недостатка кредитов для конкретной модели и ошибки 402/413. Чат работает через нативный адаптер <code>ctx.llm</code>; старые <code>llm-pi-ai</code>, loopback-прокси и <code>llm/stream</code> удалены.</p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/@goodandready/dsh-clinebot"><img src="https://img.shields.io/npm/v/@goodandready/dsh-clinebot.svg?style=for-the-badge&color=6366f1&labelColor=1e1b4b" alt="npm version"></a>

package/README.zh.md

@@ -4,7 +4,7 @@
 
 <h3>适用于 DeepSeek Harness 的 ClineBot / ClinePass 原生模型提供商伴侣插件</h3>
 
-<p><b>0.6.25</b> 增加 DSH <code>0.2.2-rc.1</code> 支持并保留 0.6.24 的安全加固。保留模型/免费/日期变体自动补齐、按模型隔离的余额不足冷却和明确的 402/413 错误。聊天使用原生 <code>ctx.llm</code> 适配器；旧的 <code>llm-pi-ai</code>、回环代理和 <code>llm/stream</code> 已删除。</p>
+<p><b>0.6.27</b> 完善 native settings 安全边界：远程端点仅允许 HTTPS、凭据名称白名单、遥测/价格安全路径、拒绝悬空符号链接，以及 Windows 安全的 updater 环境。保留 DSH <code>0.2.2-rc.1</code> 支持、模型/免费/日期变体自动补齐、按模型隔离的余额不足冷却和明确的 402/413 错误。聊天使用原生 <code>ctx.llm</code> 适配器；旧的 <code>llm-pi-ai</code>、回环代理和 <code>llm/stream</code> 已删除。</p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/@goodandready/dsh-clinebot"><img src="https://img.shields.io/npm/v/@goodandready/dsh-clinebot.svg?style=for-the-badge&color=6366f1&labelColor=1e1b4b" alt="npm version"></a>

package/lib/account-pool.js

@@ -1,4 +1,5 @@
 import { resolveKeyValue, usageCache, clearUsageCache, clearProbeCache, DEFAULT_API_KEY_ENV, DEFAULT_BASE_URL, buildUsageCacheKey } from './cline-client.js'
+import { safeDict } from './safe-dict.js'
 
 /**
  * Resolve all accounts in pool with their status and keys.
@@ -21,7 +22,7 @@ function arraySetting(value) {
 
 function toPlainSnapshot(cfg) {
   if (!cfg || typeof cfg !== 'object') return cfg
-  const out = {}
+  const out = safeDict()
   for (const [k, v] of Object.entries(cfg)) {
     let cur = v
     while (cur && typeof cur === 'object' && !Array.isArray(cur) && typeof cur.get === 'function') {

package/lib/adapter-telemetry.js

@@ -1,6 +1,7 @@
 import { estimateCost } from './model-prices.js'
 import { recordSessionRequest } from './telemetry.js'
 import { recordUsage } from './stats-storage.js'
+import { isSafeDataPath } from './path-safety.js'
 
 /**
  * Record one attempt's session and persistent telemetry.
@@ -59,7 +60,7 @@ export function recordAttemptTelemetry({
       totalTokens,
       isError,
       is429,
-      statsPath: pub.statsPath,
+      statsPath: isSafeDataPath(pub.statsPath) ? pub.statsPath : undefined,
       sessionId: options.sessionId ? String(options.sessionId) : undefined,
       purpose: options.purpose,
       ttftMs: ttftMs ?? undefined,

package/lib/cline-client.js

@@ -1,4 +1,5 @@
 import { createHash } from 'node:crypto'
+import { isSecureRemoteBaseUrl } from './http.js'
 export {
   resolveApiKey,
   saveCredentialKey,
@@ -172,6 +173,9 @@ export async function fetchUsageLimits(baseUrl, apiKey, {
   if (!apiKey) {
     return { ok: false, error: 'API key is missing' }
   }
+  if (!isSecureRemoteBaseUrl(base)) {
+    return { ok: false, error: 'Insecure protocol: remote usage requests require https:' }
+  }
 
   const cacheKey = buildUsageCacheKey(base, apiKey)
   const now = Date.now()

package/lib/config.js

@@ -13,6 +13,7 @@ import {
   getActiveModelIds,
   migrateModelId,
 } from './models.js'
+import { setOwn } from './safe-dict.js'
 
 // DSH settings.describe only publishes fields marked volatile. Without them the
 // namespace is omitted and the configuration page stays unavailable.
@@ -150,7 +151,7 @@ export function plainConfig(cfg) {
   }
   const out = {}
   for (const key of Object.keys(cfg)) {
-    out[key] = plainConfig(cfg[key])
+    setOwn(out, key, plainConfig(cfg[key]))
   }
   return out
 }
@@ -161,7 +162,7 @@ export function volatileConfig(cfg) {
   const out = {}
   for (const [key, field] of Object.entries(Config.dict || {})) {
     if (field?.meta?.volatile && Object.hasOwn(plain, key)) {
-      out[key] = plain[key]
+      setOwn(out, key, plain[key])
     }
   }
   return out

package/lib/credential-refs.js

@@ -4,6 +4,16 @@
  */
 
 export const DEFAULT_API_KEY_ENV = 'CLINEBOT_API_KEY'
+const API_KEY_ENV_RE = /^CLINEBOT_API_KEY(_[A-Z0-9]+)?$/
+
+export function isAllowedApiKeyEnv(value) {
+  return API_KEY_ENV_RE.test(String(value || '').trim())
+}
+
+function isAllowedCredentialDeletion(value) {
+  const name = String(value || '').trim()
+  return isAllowedApiKeyEnv(name) || name === 'CLINEBOT_LOCAL_PROXY_TOKEN'
+}
 
 /**
  * Resolve the optional credentials service without tripping Cordis's
@@ -38,10 +48,11 @@ async function toCredentialRef(name) {
 }
 
 export function resolveApiKey(apiKeyEnv, env = process.env) {
-  const name = String(apiKeyEnv || DEFAULT_API_KEY_ENV).trim() || DEFAULT_API_KEY_ENV
+  const requested = String(apiKeyEnv || '').trim()
+  const name = requested || DEFAULT_API_KEY_ENV
   return {
     envName: name,
-    value: String(env[name] || ''),
+    value: isAllowedApiKeyEnv(name) ? String(env[name] || '') : '',
   }
 }
 
@@ -49,6 +60,9 @@ export async function saveCredentialKey(ctx, apiKeyEnv, apiKey) {
   const name = String(apiKeyEnv || DEFAULT_API_KEY_ENV).trim() || DEFAULT_API_KEY_ENV
   const value = String(apiKey || '').trim()
 
+  if (!isAllowedApiKeyEnv(name)) {
+    throw new Error('Disallowed apiKeyEnv: only CLINEBOT_API_KEY names are allowed')
+  }
   if (!value) {
     throw new Error('API key cannot be empty')
   }
@@ -65,7 +79,7 @@ export async function saveCredentialKey(ctx, apiKeyEnv, apiKey) {
 
 export async function deleteCredentialKey(ctx, apiKeyEnv) {
   const name = String(apiKeyEnv || '').trim()
-  if (!name) return { ok: false }
+  if (!name || !isAllowedCredentialDeletion(name)) return { ok: false }
   const credentials = credentialsService(ctx)
   if (!credentials) return { ok: false }
   try {
@@ -81,7 +95,11 @@ export async function deleteCredentialKey(ctx, apiKeyEnv) {
 }
 
 export async function resolveKeyValue(ctx, apiKeyEnv) {
-  const refName = String(apiKeyEnv || DEFAULT_API_KEY_ENV).trim() || DEFAULT_API_KEY_ENV
+  const requested = String(apiKeyEnv || '').trim()
+  const refName = requested || DEFAULT_API_KEY_ENV
+  if (!isAllowedApiKeyEnv(refName)) {
+    return { envName: refName, value: '', source: 'invalid' }
+  }
   const creds = credentialsService(ctx)
   if (creds && typeof creds.resolve === 'function') {
     try {

package/lib/http.js

@@ -53,6 +53,16 @@ function isLoopbackAddress(value) {
     || address.startsWith('::ffff:127.')
 }
 
+export function isSecureRemoteBaseUrl(value) {
+  try {
+    const url = new URL(String(value || ''))
+    return url.protocol === 'https:'
+      || (url.protocol === 'http:' && isLoopbackAddress(url.hostname))
+  } catch {
+    return false
+  }
+}
+
 export function getConnection(ctx) {
   try {
     const fromCtx = ctx?.reflect?.get

package/lib/index.js

@@ -27,6 +27,8 @@ import { loadAccountEvents, flushAccountEvents, recordAccountEvent } from './acc
 import { setAccountEventSink } from './session-router.js'
 import { service, migrateLegacyPiAiProvider } from './services.js'
 import { applyTuiSettings } from './tui-settings.js'
+import { isSafeDataPath } from './path-safety.js'
+import { safeDict, setOwn } from './safe-dict.js'
 
 export const name = '@goodandready/dsh-clinebot'
 export const inject = []
@@ -42,7 +44,7 @@ export { NS, Config, sessionStats, recordSessionRequest, resetSessionStats, rota
 
 export function apply(ctx, config) {
   let currentConfig = configReader(config)() || {}
-  const overrides = {}
+  const overrides = safeDict()
   const getConfig = () => {
     if (!currentConfig) return currentConfig
     if (Object.isFrozen(currentConfig)) {
@@ -108,10 +110,11 @@ export function apply(ctx, config) {
       })
   }
 
-  let activeStatsPath = resolvePath(publicConfig(live()).statsPath)
-  setStatsRetentionDays(publicConfig(live()).statsRetentionDays)
-  setPublicPriceCatalog(loadPublicPriceCache(publicConfig(live()).priceCatalogPath))
-  let activeEventPath = resolvePath(publicConfig(live()).eventLogPath)
+  const initial = publicConfig(live())
+  let activeStatsPath = resolvePath(isSafeDataPath(initial.statsPath) ? initial.statsPath : '~/.dsh/clinebot-stats.json')
+  setStatsRetentionDays(initial.statsRetentionDays)
+  setPublicPriceCatalog(loadPublicPriceCache(isSafeDataPath(initial.priceCatalogPath) ? initial.priceCatalogPath : '~/.dsh/clinebot-prices.json'))
+  let activeEventPath = resolvePath(isSafeDataPath(initial.eventLogPath) ? initial.eventLogPath : '~/.dsh/clinebot-events.json')
   loadAccountEvents(activeEventPath)
   setAccountEventSink(recordAccountEvent)
   loadStats(activeStatsPath)
@@ -119,14 +122,15 @@ export function apply(ctx, config) {
   const syncStatsStorage = (cfg) => {
     const pub = publicConfig(cfg)
     setStatsRetentionDays(pub.statsRetentionDays)
-    setPublicPriceCatalog(loadPublicPriceCache(pub.priceCatalogPath))
-    const nextEventPath = resolvePath(pub.eventLogPath)
+    const priceCatalogPath = isSafeDataPath(pub.priceCatalogPath) ? pub.priceCatalogPath : '~/.dsh/clinebot-prices.json'
+    setPublicPriceCatalog(loadPublicPriceCache(priceCatalogPath))
+    const nextEventPath = resolvePath(isSafeDataPath(pub.eventLogPath) ? pub.eventLogPath : '~/.dsh/clinebot-events.json')
     if (nextEventPath !== activeEventPath) {
       flushAccountEvents()
       activeEventPath = nextEventPath
       loadAccountEvents(activeEventPath)
     }
-    const nextPath = resolvePath(pub.statsPath)
+    const nextPath = resolvePath(isSafeDataPath(pub.statsPath) ? pub.statsPath : '~/.dsh/clinebot-stats.json')
     if (nextPath !== activeStatsPath) {
       switchStatsStorage(nextPath)
       activeStatsPath = nextPath
@@ -184,7 +188,7 @@ export function apply(ctx, config) {
           if (isVolatileRef(orig) || Object.getOwnPropertyDescriptor(targetConfig, key)?.get) {
             continue
           }
-          overrides[key] = value
+          setOwn(overrides, key, value)
         }
         return
       }
@@ -202,7 +206,7 @@ export function apply(ctx, config) {
           if (desc?.set) {
             targetConfig[key] = value
           } else {
-            targetConfig[key] = value
+            setOwn(targetConfig, key, value)
           }
         } catch {
           /* ignore read-only */

package/lib/path-safety.js

@@ -10,6 +10,11 @@ function realPath(target) {
   let current = target
   const missing = []
   while (!fs.existsSync(current)) {
+    try {
+      if (fs.lstatSync(current).isSymbolicLink()) return null
+    } catch {
+      /* path does not exist */
+    }
     const parent = path.dirname(current)
     if (parent === current) break
     missing.unshift(path.basename(current))
@@ -18,7 +23,7 @@ function realPath(target) {
   try {
     return path.join(fs.realpathSync(current), ...missing)
   } catch {
-    return target
+    return null
   }
 }
 
@@ -31,6 +36,7 @@ export function isSafeDataPath(value) {
     : path.resolve(raw)
   const home = realPath(dshHome())
   const realResolved = realPath(resolved)
+  if (!home || !realResolved) return false
   if (realResolved === home || !realResolved.startsWith(`${home}${path.sep}`)) return false
   const relative = path.relative(home, realResolved).toLowerCase()
   const segments = relative.split(/[\\/]+/)

package/lib/price-sync.js

@@ -2,6 +2,7 @@ import { readFileSync, writeFileSync, renameSync, mkdirSync, existsSync } from '
 import { homedir } from 'node:os'
 import path from 'node:path'
 import { normalizeModelKey, getPublicPriceCatalog, setPublicPriceCatalog } from './model-prices.js'
+import { safeDict } from './safe-dict.js'
 
 const DEFAULT_URL = 'https://models.dev/api.json'
 
@@ -63,7 +64,7 @@ function priority(provider) {
  * @param {Record<string, any>} data
  */
 export function buildPublicCatalog(data) {
-  const catalog = {}
+  const catalog = safeDict()
   for (const provider of Object.values(data || {})) {
     if (!provider || typeof provider !== 'object') continue
     const providerId = String(provider.id || '')
@@ -102,7 +103,7 @@ export function loadPublicPriceCache(cachePath) {
     const file = expandHome(cachePath)
     if (!existsSync(file)) return {}
     const parsed = JSON.parse(readFileSync(file, 'utf8'))
-    return parsed?.models && typeof parsed.models === 'object' ? parsed.models : {}
+    return parsed?.models && typeof parsed.models === 'object' ? safeDict(parsed.models) : safeDict()
   } catch {
     return {}
   }

package/lib/provider-sync.js

@@ -22,6 +22,7 @@ import { publicConfig, plainConfig, Config } from './config.js'
 import { publicUsage } from './http.js'
 import { resolveKeyValue } from './credential-refs.js'
 import { resolveAccountPool, getLastRotation } from './account-pool.js'
+import { isSafeDataPath } from './path-safety.js'
 
 export function resolvePathWithHome(p) {
   let guard = 0
@@ -193,7 +194,7 @@ export async function autoDiscoverPlanModels(ctx, { live, getSettingsApi, syncPr
   try {
     const cfg = live()
     const pub = publicConfig(cfg)
-    const cacheFile = resolvePathWithHome(pub.modelsCachePath)
+    const cacheFile = isSafeDataPath(pub.modelsCachePath) ? resolvePathWithHome(pub.modelsCachePath) : ''
     const settingsApi = getSettingsApi()
 
     // Auto-migrate obsolete IDs (e.g. deepseek-v41-flash -> deepseek-v4.1-flash)
@@ -248,7 +249,7 @@ export async function autoDiscoverPlanModels(ctx, { live, getSettingsApi, syncPr
       if (isDifferent) {
         await ensurePublicPricesForModels(usageData.dynamicModels.map((model) => model.id), {
           url: pub.priceCatalogUrl,
-          cachePath: pub.priceCatalogPath,
+          cachePath: isSafeDataPath(pub.priceCatalogPath) ? pub.priceCatalogPath : undefined,
           enabled: pub.priceAutoSync !== false,
         }).catch(() => {})
       }

package/lib/routes/models.js

@@ -6,6 +6,7 @@ import { getAllModels, saveModelsDiskCache, getOriginalModelContext, getOriginal
 import { fetchUsageLimits, smokeChat } from '../cline-client.js'
 import { publicUsage } from '../http.js'
 import { ensurePublicPricesForModels } from '../price-sync.js'
+import { isSafeDataPath } from '../path-safety.js'
 
 export function registerModelsRoutes(ctx, { live, getSettingsApi, syncProviderState }) {
   // POST /dsh-clinebot/models/sync — dynamically load models from plan
@@ -51,7 +52,7 @@ export function registerModelsRoutes(ctx, { live, getSettingsApi, syncProviderSt
         }))
         await settingsApi.replace(next)
         await syncProviderState(next)
-        const cacheFile = resolvePathWithHome(pub.modelsCachePath)
+        const cacheFile = isSafeDataPath(pub.modelsCachePath) ? resolvePathWithHome(pub.modelsCachePath) : ''
         if (cacheFile) {
           const activeAcc = await resolveActiveAccountKey(ctx, live())
           const accountRef = activeAcc?.envName || activeAcc?.apiKeyEnv || pub.activeAccount || pub.apiKeyEnv || 'CLINEBOT_API_KEY'
@@ -66,7 +67,7 @@ export function registerModelsRoutes(ctx, { live, getSettingsApi, syncProviderSt
           try {
             priceSync = await ensurePublicPricesForModels(addedModels.map((model) => model.id), {
               url: pub.priceCatalogUrl,
-              cachePath: pub.priceCatalogPath,
+              cachePath: isSafeDataPath(pub.priceCatalogPath) ? pub.priceCatalogPath : undefined,
               enabled: pub.priceAutoSync !== false,
             })
           } catch {

package/lib/routes/settings.js

@@ -235,6 +235,9 @@ export function registerSettingsRoutes(ctx, { live, getSettingsApi, syncProvider
       if (!assertTrustedSettingsRequest(req, res, ctx)) return
       try {
         const pub = publicConfig(live())
+        if (!isSafeDataPath(pub.statsPath)) {
+          return writeJson(res, 400, { ok: false, error: 'statsPath must stay inside the DSH home directory' })
+        }
         const stats = resetStats(pub.statsPath)
         writeJson(res, 200, { ok: true, stats })
       } catch (err) {
@@ -341,6 +344,9 @@ export function registerSettingsRoutes(ctx, { live, getSettingsApi, syncProvider
       if (!assertTrustedSettingsRequest(req, res, ctx)) return
       try {
         const pub = publicConfig(live())
+        if (!isSafeDataPath(pub.priceCatalogPath)) {
+          return writeJson(res, 400, { ok: false, error: 'priceCatalogPath must stay inside the DSH home directory' })
+        }
         const result = await syncPublicPrices({
           url: pub.priceCatalogUrl,
           cachePath: pub.priceCatalogPath,

package/lib/safe-dict.js

@@ -13,3 +13,13 @@ export function safeNestedDict(source) {
   }
   return out
 }
+
+export function setOwn(target, key, value) {
+  Object.defineProperty(target, key, {
+    value,
+    writable: true,
+    enumerable: true,
+    configurable: true,
+  })
+  return target
+}

package/lib/transport/cline-transport.js

@@ -7,9 +7,10 @@
  */
 
 import { createRequire } from 'node:module'
+import { isSecureRemoteBaseUrl } from '../http.js'
 
 const require = createRequire(import.meta.url)
-let packageVersion = '0.6.25'
+let packageVersion = '0.6.27'
 try {
   packageVersion = require('../../package.json').version || packageVersion
 } catch {
@@ -216,6 +217,9 @@ export async function requestChatCompletion({
   connectTimeoutMs = DEFAULT_CONNECT_TIMEOUT_MS,
   extraHeaders = {},
 }) {
+  if (!isSecureRemoteBaseUrl(baseUrl)) {
+    throw new Error('Insecure protocol: remote chat requests require https:')
+  }
   const connectCtrl = new AbortController()
   let timedOut = false
   const timer = setTimeout(() => {

package/lib/updater.js

@@ -22,13 +22,32 @@ const SAFE_ENV_KEYS = new Set([
   'PROCESSOR_ARCHITECTURE', 'PROCESSOR_IDENTIFIER', 'USER', 'USERNAME',
   'LOGNAME', 'HOSTNAME', 'DSH_HOME', 'DSH_PROFILE_DIR', 'NODE_EXTRA_CA_CERTS',
 ])
+const SAFE_ENV_KEYS_LOWER = new Set([...SAFE_ENV_KEYS].map((key) => key.toLowerCase()))
 const SAFE_NPM_ENV_RE = /^npm_config_(?:registry|proxy|https_proxy|strict_ssl|userconfig|globalconfig|cache|prefix)$/i
+const NPM_URL_ENV_RE = /^npm_config_(?:registry|proxy|https_proxy)$/i
 let latestCache = undefined
 
+function sanitizeUrlCredentials(value) {
+  try {
+    const url = new URL(String(value))
+    url.username = ''
+    url.password = ''
+    return url.toString()
+  } catch {
+    return ''
+  }
+}
+
 export function sanitizeChildEnv(env = process.env) {
   const out = {}
   for (const [key, value] of Object.entries(env)) {
-    if (SAFE_ENV_KEYS.has(key) || SAFE_NPM_ENV_RE.test(key)) out[key] = value
+    if (!SAFE_ENV_KEYS_LOWER.has(key.toLowerCase()) && !SAFE_NPM_ENV_RE.test(key)) continue
+    if (NPM_URL_ENV_RE.test(key)) {
+      const clean = sanitizeUrlCredentials(value)
+      if (clean) out[key] = clean
+    } else {
+      out[key] = value
+    }
   }
   out.NO_COLOR = '1'
   return out

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-clinebot",
-  "version": "0.6.25",
+  "version": "0.6.27",
   "description": "DeepSeek Harness companion for ClineBot / ClinePass: dynamic subscription models sync, quota exhaustion warnings, session metrics, dedicated settings page, live usage limits, and /cline slash-command.",
   "license": "MIT",
   "type": "module",