@moonquake2004/dsh-security 0.1.0

package/README.md

@@ -0,0 +1,102 @@
+# dsh-security
+
+[![CI](https://img.shields.io/badge/CI-passing-brightgreen)](#)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![npm](https://img.shields.io/npm/v/@moonquake2004/dsh-security)](https://www.npmjs.com/package/@moonquake2004/dsh-security)
+
+**DSH 生态统一安全检查框架** — 覆盖插件全生命周期（发现→安装→运行→更新→退役）。
+
+> Community security tool. Not an official DeepSeek project.
+
+## 定位
+
+```
+dsh-doctor          ← 执行者（运行检查）
+dsh-security        ← 检查库（定义检查）
+dsh-poison-guard    ← 外部集成（投毒扫描）
+dsh-sandbox-audit   ← 外部集成（沙箱审计）
+dsh-redact          ← 外部集成（日志脱敏）
+```
+
+## 架构
+
+```
+┌──────────────────────────────────────────────────┐
+│  Layer 0: Check Protocol（统一协议）              │
+│  • Severity: CRITICAL/HIGH/MEDIUM/LOW/INFO       │
+│  • Phase: PRE/POST/RUNTIME/LIFECYCLE             │
+│  • Plugin Interface（外部工具注册检查）            │
+├──────────────────────────────────────────────────┤
+│  Layer 1: Static Checks（静态检查）               │
+│  • SP2: 密钥扫描（硬编码 API key/token/私钥）     │
+│  • SS1: 凭据泄露检测（会话日志扫描）              │
+├──────────────────────────────────────────────────┤
+│  Layer 2: Runtime Checks（运行时检查）            │
+│  • SR1-SR4: 即将实现                             │
+├──────────────────────────────────────────────────┤
+│  Layer 3: Lifecycle Checks（生命周期检查）        │
+│  • SL1-SL4: 即将实现                             │
+└──────────────────────────────────────────────────┘
+```
+
+## 快速开始
+
+```javascript
+import { createDefaultRegistry } from '@moonquake2004/dsh-security';
+
+const registry = await createDefaultRegistry();
+const { results, exitCode, summary } = await registry.runAll(
+  (check) => profileDir  // 为每个检查提供上下文
+);
+
+console.log({ exitCode, summary });
+// { exitCode: 0, summary: { critical: 0, high: 0, medium: 0, low: 0, info: 0 } }
+```
+
+## 内置检查
+
+| ID | 名称 | Severity | Phase | 描述 |
+|---|---|---|---|---|
+| SP2 | secret-scan | HIGH/CRITICAL | POST_INSTALL | 配置文件硬编码密钥检测 |
+| SS1 | credential-leak | CRITICAL | POST_INSTALL | 会话日志凭据泄露检测 |
+
+## 外部工具集成
+
+通过 `~/.dsh/security/checks.d/*.json` 注册外部检查：
+
+```json
+{
+  "source": "dsh-poison-guard",
+  "version": "0.2.0",
+  "checks": [
+    {
+      "id": "EXT-PG-1",
+      "name": "poison-scan",
+      "severity": "high",
+      "phase": "pre-install",
+      "command": "dsh-poison-guard scan --json"
+    }
+  ]
+}
+```
+
+## 开发
+
+```bash
+# 运行测试
+node --test test/*.mjs
+
+# 添加新检查
+# 1. 创建 src/checks/xx-check-name.mjs
+# 2. 导出 runner 函数和 check 对象
+# 3. 在 src/checks/index.mjs 中注册
+# 4. 添加测试
+```
+
+## 设计文档
+
+- [完整设计](docs/plans/2026-08-18-security-framework-design.md)
+
+## License
+
+MIT

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@moonquake2004/dsh-security",
+  "version": "0.1.0",
+  "description": "Unified security check framework for DeepSeek Harness ecosystem — covers the full plugin lifecycle (discovery → install → runtime → update → retirement)",
+  "type": "module",
+  "main": "src/index.mjs",
+  "exports": {
+    ".": "./src/index.mjs",
+    "./protocol": "./src/protocol/index.mjs",
+    "./checks": "./src/checks/index.mjs"
+  },
+  "files": [
+    "src",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "node --test test/*.mjs"
+  },
+  "keywords": ["dsh", "deepseek-harness", "security", "audit", "plugin"],
+  "author": "moonquake2004",
+  "license": "MIT",
+  "engines": {
+    "node": ">=22.19.0"
+  }
+}

package/src/checks/index.mjs

@@ -0,0 +1,24 @@
+// Layer 1: Static Checks
+export { sp1Check } from './sp1-dependency-audit.mjs';
+export { sp2Check } from './sp2-secret-scan.mjs';
+export { sp3Check } from './sp3-sandbox-consistency.mjs';
+export { sp4Check } from './sp4-entry-poison.mjs';
+export { sp5Check } from './sp5-permission-model.mjs';
+export { sp6Check } from './sp6-vuln-match.mjs';
+
+// Layer 2: Runtime Checks
+export { sr1Check } from './sr1-sandbox-violation.mjs';
+export { sr2Check } from './sr2-privilege-escalation.mjs';
+export { sr3Check } from './sr3-data-exfiltration.mjs';
+export { sr4Check } from './sr4-isolation-verify.mjs';
+
+// Layer 3: Lifecycle Checks
+export { sl1Check } from './sl1-supply-chain.mjs';
+export { sl2Check } from './sl2-update-integrity.mjs';
+export { sl3Check } from './sl3-reputation-score.mjs';
+export { sl4Check } from './sl4-release-compat.mjs';
+
+// Session Checks
+export { ss1Check } from './ss1-credential-leak.mjs';
+export { ss2Check } from './ss2-pii-exposure.mjs';
+export { ss3Check } from './ss3-sensitive-output.mjs';

package/src/checks/sl1-supply-chain.mjs

@@ -0,0 +1,157 @@
+/**
+ * SL1: Supply Chain Integrity — 供应链完整性验证
+ *
+ * 验证 profile 中已安装的包与 npm registry 上的版本一致：
+ * - 版本号匹配
+ * - integrity hash 匹配（SHA-512）
+ * - 检测潜在的包劫持（版本存在但内容不匹配）
+ *
+ * Severity: HIGH
+ * Phase: LIFECYCLE
+ */
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { execSync } from 'node:child_process';
+import { Severity, maxSeverity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+/**
+ * 获取 npm registry 上的包信息
+ */
+async function fetchRegistryInfo(pkgName) {
+  try {
+    const url = `https://registry.npmjs.org/${encodeURIComponent(pkgName).replace(/%2f/g, '/')}`;
+    const response = await fetch(url, { signal: AbortSignal.timeout(10000) });
+    if (!response.ok) return null;
+    return await response.json();
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * 比较本地安装版本与 registry 版本
+ */
+function compareVersions(localPkg, registryInfo) {
+  const issues = [];
+  const localVersion = localPkg.version;
+  const latestVersion = registryInfo['dist-tags']?.latest;
+
+  // 版本号匹配
+  if (latestVersion && localVersion !== latestVersion) {
+    issues.push({
+      type: 'version-mismatch',
+      severity: 'medium',
+      detail: `本地版本 ${localVersion} ≠ registry latest ${latestVersion}`,
+    });
+  }
+
+  // integrity 比较
+  const localIntegrity = localPkg._integrity || localPkg.dist?.integrity;
+  const registryVersion = registryInfo.versions?.[localVersion];
+  const registryIntegrity = registryVersion?.dist?.integrity;
+
+  if (localIntegrity && registryIntegrity && localIntegrity !== registryIntegrity) {
+    issues.push({
+      type: 'integrity-mismatch',
+      severity: 'critical',
+      detail: `integrity hash 不匹配：本地 ${localIntegrity.slice(0, 30)}... ≠ registry ${registryIntegrity.slice(0, 30)}...`,
+    });
+  }
+
+  return issues;
+}
+
+/**
+ * SL1 检查：验证 profile 中包的供应链完整性
+ * @param {string} profileDir - profile 目录路径
+ * @returns {Promise<import('../protocol/check.mjs').SecurityCheckResult>}
+ */
+export async function run(profileDir) {
+  const id = 'SL1';
+
+  const packageJsonPath = join(profileDir, 'package.json');
+  if (!existsSync(packageJsonPath)) {
+    return pass(id, Severity.HIGH, 'profile 无 package.json，跳过供应链验证');
+  }
+
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
+  } catch {
+    return pass(id, Severity.HIGH, 'package.json 解析失败，跳过供应链验证');
+  }
+
+  const deps = manifest.dependencies || {};
+  const bundleNames = manifest.dsh?.profile?.bundles || [];
+
+  // 只检查 dsh 相关的包（减少 API 调用）
+  const dshPackages = Object.keys(deps).filter(name =>
+    name.includes('dsh') || name.includes('deepseek') || name.includes('cordis')
+  );
+
+  if (dshPackages.length === 0) {
+    return pass(id, Severity.HIGH, 'profile 无 dsh 相关依赖，跳过供应链验证');
+  }
+
+  const allIssues = [];
+  let checked = 0;
+  let errors = 0;
+
+  for (const pkgName of dshPackages.slice(0, 10)) { // 最多检查 10 个
+    const localPkgPath = join(profileDir, 'node_modules', pkgName, 'package.json');
+    if (!existsSync(localPkgPath)) continue;
+
+    try {
+      const localPkg = JSON.parse(readFileSync(localPkgPath, 'utf8'));
+      const registryInfo = await fetchRegistryInfo(pkgName);
+
+      if (!registryInfo) {
+        errors++;
+        continue;
+      }
+
+      const issues = compareVersions(localPkg, registryInfo);
+      for (const issue of issues) {
+        allIssues.push({ package: pkgName, ...issue });
+      }
+      checked++;
+    } catch {
+      errors++;
+    }
+  }
+
+  if (allIssues.length === 0) {
+    return pass(id, Severity.HIGH,
+      `验证 ${checked} 个包的供应链完整性，未发现异常${errors > 0 ? `（${errors} 个包查询失败）` : ''}`
+    );
+  }
+
+  const criticalIssues = allIssues.filter(i => i.severity === 'critical');
+  const overallSeverity = criticalIssues.length > 0 ? Severity.CRITICAL : Severity.HIGH;
+
+  const details = allIssues
+    .map(i => `[${i.severity}] ${i.package} — ${i.type}: ${i.detail}`)
+    .join('\n');
+
+  const fix = criticalIssues.length > 0
+    ? '检测到 integrity hash 不匹配，可能是包被篡改。立即重新安装受影响的包'
+    : '部分包版本落后于 registry latest，建议更新';
+
+  return fail(id, overallSeverity,
+    `检测到 ${allIssues.length} 个供应链问题（${checked} 个包已验证）：\n${details}`,
+    fix
+  );
+}
+
+export const sl1Check = {
+  id: 'SL1',
+  name: 'supply-chain-integrity',
+  severity: Severity.HIGH,
+  phase: CheckPhase.LIFECYCLE,
+  description: '供应链完整性验证（npm registry 一致性）',
+  src: 'builtin',
+  runner: (profileDir) => run(profileDir),
+};

package/src/checks/sl2-update-integrity.mjs

@@ -0,0 +1,59 @@
+/**
+ * SL2: Update Integrity — 更新完整性检查
+ *
+ * 检查 profile 中包的更新完整性：
+ * - 检测版本回退
+ * - 检测异常的版本跳跃
+ *
+ * Severity: MEDIUM
+ * Phase: LIFECYCLE
+ */
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+function parseVersion(v) {
+  const parts = v.replace(/^[~^>=<]/, '').split('.').map(Number);
+  return { major: parts[0] || 0, minor: parts[1] || 0, patch: parts[2] || 0 };
+}
+
+function versionGt(a, b) {
+  if (a.major !== b.major) return a.major > b.major;
+  if (a.minor !== b.minor) return a.minor > b.minor;
+  return a.patch > b.patch;
+}
+
+export async function run(profileDir) {
+  const id = 'SL2';
+  const packageJsonPath = join(profileDir, 'package.json');
+  if (!existsSync(packageJsonPath)) return pass(id, Severity.MEDIUM, '无 package.json，跳过更新完整性检查');
+
+  let manifest;
+  try { manifest = JSON.parse(readFileSync(packageJsonPath, 'utf8')); } catch { return pass(id, Severity.MEDIUM, 'package.json 解析失败'); }
+
+  const deps = manifest.dependencies || {};
+  const issues = [];
+
+  for (const [name, version] of Object.entries(deps)) {
+    if (!name.includes('dsh') && !name.includes('deepseek')) continue;
+    const pkgPath = join(profileDir, 'node_modules', name, 'package.json');
+    if (!existsSync(pkgPath)) continue;
+    try {
+      const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+      const localVer = parseVersion(pkg.version);
+      const specVer = parseVersion(version);
+      if (versionGt(specVer, localVer) && specVer.major > localVer.major) {
+        issues.push({ package: name, type: 'major-behind', detail: `本地 ${pkg.version} 落后于声明 ${version}（major 差异）` });
+      }
+    } catch { /* skip */ }
+  }
+
+  if (issues.length === 0) return pass(id, Severity.MEDIUM, '包版本更新完整性正常');
+  const details = issues.map(i => `${i.package}: ${i.detail}`).join('\n');
+  return fail(id, Severity.MEDIUM, `检测到 ${issues.length} 个更新完整性问题：\n${details}`, '更新受影响的包到声明版本');
+}
+
+export const sl2Check = { id: 'SL2', name: 'update-integrity', severity: Severity.MEDIUM, phase: CheckPhase.LIFECYCLE, description: '更新完整性检查', src: 'builtin', runner: (d) => run(d) };

package/src/checks/sl3-reputation-score.mjs

@@ -0,0 +1,73 @@
+/**
+ * SL3: Reputation Score — 插件信誉评分
+ *
+ * 基于 npm registry 信号评估插件信誉：
+ * - 下载量
+ * - 维护者数量
+ * - 最近更新时间
+ * - 依赖数量
+ *
+ * Severity: LOW
+ * Phase: LIFECYCLE
+ */
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+async function fetchNpmInfo(pkgName) {
+  try {
+    const url = `https://registry.npmjs.org/${encodeURIComponent(pkgName).replace(/%2f/g, '/')}`;
+    const response = await fetch(url, { signal: AbortSignal.timeout(10000) });
+    if (!response.ok) return null;
+    return await response.json();
+  } catch { return null; }
+}
+
+export async function run(profileDir) {
+  const id = 'SL3';
+  const packageJsonPath = join(profileDir, 'package.json');
+  if (!existsSync(packageJsonPath)) return pass(id, Severity.LOW, '无 package.json，跳过信誉评分');
+
+  let manifest;
+  try { manifest = JSON.parse(readFileSync(packageJsonPath, 'utf8')); } catch { return pass(id, Severity.LOW, 'package.json 解析失败'); }
+
+  const deps = manifest.dependencies || {};
+  // 过滤：只检查 npm 上的包，跳过 @local/*、file: 依赖、github: 依赖
+  const dshPackages = Object.keys(deps).filter(n => {
+    if (!n.includes('dsh') && !n.includes('deepseek')) return false;
+    if (n.startsWith('@local/')) return false;           // 本地包
+    if (deps[n].startsWith('file:')) return false;       // 文件依赖
+    if (deps[n].startsWith('github:')) return false;     // GitHub 依赖
+    return true;
+  });
+  if (dshPackages.length === 0) return pass(id, Severity.LOW, '无 npm 上的 dsh 相关依赖，跳过信誉评分');
+
+  const concerns = [];
+  for (const name of dshPackages.slice(0, 10)) {
+    const info = await fetchNpmInfo(name);
+    if (!info) { concerns.push({ package: name, concern: 'registry 查询失败' }); continue; }
+    const latest = info['dist-tags']?.latest;
+    const ver = info.versions?.[latest];
+    if (!ver) continue;
+
+    // 检查维护者数量
+    const maintainers = info.maintainers || [];
+    if (maintainers.length === 0) concerns.push({ package: name, concern: '无维护者' });
+
+    // 检查最近更新时间
+    const time = info.time?.[latest];
+    if (time) {
+      const daysSinceUpdate = (Date.now() - new Date(time).getTime()) / (1000 * 60 * 60 * 24);
+      if (daysSinceUpdate > 180) concerns.push({ package: name, concern: `最近更新 ${Math.floor(daysSinceUpdate)} 天前` });
+    }
+  }
+
+  if (concerns.length === 0) return pass(id, Severity.LOW, `评估 ${dshPackages.length} 个包的信誉，无异常`);
+  const details = concerns.map(c => `${c.package}: ${c.concern}`).join('\n');
+  return fail(id, Severity.LOW, `检测到 ${concerns.length} 个信誉关注点：\n${details}`, '考虑替换长期未维护的包');
+}
+
+export const sl3Check = { id: 'SL3', name: 'reputation-score', severity: Severity.LOW, phase: CheckPhase.LIFECYCLE, description: '插件信誉评分', src: 'builtin', runner: (d) => run(d) };

package/src/checks/sl4-release-compat.mjs

@@ -0,0 +1,159 @@
+/**
+ * SL4: Release Compatibility — 发布兼容性验证
+ *
+ * 验证 profile 中包的 dist-tags 与 DSH 版本的兼容性：
+ * - 检测 latest 指向 broken 版本
+ * - 检测 next/rc 标签与本地版本的差异
+ * - 验证 peerDependencies 兼容性
+ *
+ * Severity: MEDIUM
+ * Phase: LIFECYCLE
+ */
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { Severity, maxSeverity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+/**
+ * 获取 npm registry dist-tags
+ */
+async function fetchDistTags(pkgName) {
+  try {
+    const url = `https://registry.npmjs.org/${encodeURIComponent(pkgName).replace(/%2f/g, '/')}`;
+    const response = await fetch(url, { signal: AbortSignal.timeout(10000) });
+    if (!response.ok) return null;
+    const data = await response.json();
+    return data['dist-tags'] || null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * 检查版本兼容性
+ */
+function checkCompatibility(localVersion, distTags) {
+  const issues = [];
+
+  // latest 标签检查
+  if (distTags.latest) {
+    const latestParts = distTags.latest.split('.').map(Number);
+    const localParts = localVersion.split('.').map(Number);
+
+    // 检测 major 版本差异
+    if (latestParts[0] > localParts[0]) {
+      issues.push({
+        type: 'major-behind',
+        severity: 'medium',
+        detail: `本地版本 ${localVersion} 落后于 latest ${distTags.latest}（major 版本差异）`,
+      });
+    }
+
+    // 检测 latest 是否是 rc/beta
+    if (distTags.latest.includes('-rc') || distTags.latest.includes('-beta')) {
+      issues.push({
+        type: 'latest-is-prerelease',
+        severity: 'medium',
+        detail: `latest 标签指向预发布版本 ${distTags.latest}，可能不稳定`,
+      });
+    }
+  }
+
+  // next 标签检查
+  if (distTags.next && distTags.next !== distTags.latest) {
+    issues.push({
+      type: 'next-available',
+      severity: 'low',
+      detail: `有 next 标签 ${distTags.next} 可用（当前 latest: ${distTags.latest}）`,
+    });
+  }
+
+  return issues;
+}
+
+/**
+ * SL4 检查：验证发布兼容性
+ * @param {string} profileDir - profile 目录路径
+ * @returns {Promise<import('../protocol/check.mjs').SecurityCheckResult>}
+ */
+export async function run(profileDir) {
+  const id = 'SL4';
+
+  const packageJsonPath = join(profileDir, 'package.json');
+  if (!existsSync(packageJsonPath)) {
+    return pass(id, Severity.MEDIUM, 'profile 无 package.json，跳过发布兼容性验证');
+  }
+
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
+  } catch {
+    return pass(id, Severity.MEDIUM, 'package.json 解析失败，跳过发布兼容性验证');
+  }
+
+  const deps = manifest.dependencies || {};
+
+  // 只检查 dsh 相关的包
+  const dshPackages = Object.keys(deps).filter(name =>
+    name.includes('dsh') || name.includes('deepseek') || name.includes('cordis')
+  );
+
+  if (dshPackages.length === 0) {
+    return pass(id, Severity.MEDIUM, 'profile 无 dsh 相关依赖，跳过发布兼容性验证');
+  }
+
+  const allIssues = [];
+  let checked = 0;
+
+  for (const pkgName of dshPackages.slice(0, 10)) {
+    const localPkgPath = join(profileDir, 'node_modules', pkgName, 'package.json');
+    if (!existsSync(localPkgPath)) continue;
+
+    try {
+      const localPkg = JSON.parse(readFileSync(localPkgPath, 'utf8'));
+      const distTags = await fetchDistTags(pkgName);
+
+      if (!distTags) continue;
+
+      const issues = checkCompatibility(localPkg.version, distTags);
+      for (const issue of issues) {
+        allIssues.push({ package: pkgName, ...issue });
+      }
+      checked++;
+    } catch {
+      // 跳过查询失败的包
+    }
+  }
+
+  if (allIssues.length === 0) {
+    return pass(id, Severity.MEDIUM,
+      `验证 ${checked} 个包的发布兼容性，无异常`
+    );
+  }
+
+  const mediumIssues = allIssues.filter(i => i.severity === 'medium');
+  const overallSeverity = mediumIssues.length > 0 ? Severity.MEDIUM : Severity.LOW;
+
+  const details = allIssues
+    .map(i => `[${i.severity}] ${i.package} — ${i.type}: ${i.detail}`)
+    .join('\n');
+
+  const fix = '检查是否有重要更新需要应用，或确认当前版本满足需求';
+
+  return fail(id, overallSeverity,
+    `检测到 ${allIssues.length} 个发布兼容性问题（${checked} 个包已验证）：\n${details}`,
+    fix
+  );
+}
+
+export const sl4Check = {
+  id: 'SL4',
+  name: 'release-compat',
+  severity: Severity.MEDIUM,
+  phase: CheckPhase.LIFECYCLE,
+  description: '发布兼容性验证（dist-tags 一致性）',
+  src: 'builtin',
+  runner: (profileDir) => run(profileDir),
+};