dsh-agy-link 0.4.79 → 0.4.81

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 0.4.81 (2026-10-29)
+
+### English
+
+- **Fix(parser): bound a runaway un-newline-terminated stdout buffer.**
+  - `StreamJsonParser.feed()` only split on `\n`, so a malformed/runaway stream that produced megabytes with no newline (or one giant partial line) grew the internal buffer without bound. A partial line over `MAX_STREAM_LINE_BYTES` (8 MiB) is now dropped and surfaced as a `garbage` event, keeping memory bounded; well-formed newline-delimited events are unaffected. Adds a regression test.
+
+### 中文
+
+- **修复(parser)：限制无换行结尾的超大 stdout 缓冲。**
+  - `StreamJsonParser.feed()` 只按 `\n` 切分，若输出异常/失控产生数 MB 且不含换行（或一整条超长未完成的行），内部缓冲会无界增长。现在超过 `MAX_STREAM_LINE_BYTES`（8 MiB）的未完成行会被丢弃并以 `garbage` 事件上报，内存保持有界；正常的按行 NDJSON 事件不受影响。补充回归测试。
+
+**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.80...v0.4.81
+
+## 0.4.80 (2026-10-29)
+
+### English
+
+- **Security(doctor): redact OIDC/JWT id_tokens and more provider secret shapes in `/agy doctor`.**
+  - `redactLine()` already stripped `ya29.*`, `1//0…` refresh tokens, `AIza…` keys, `Bearer` headers, `4/` codes and proxy credentials, but a Google `id_token` (a JWT `header.payload.signature`), `sk-…` provider keys, and `GOCSPX-…` OAuth client secrets passed through verbatim when agy echoed them into the log ring buffer. All three are now redacted; ordinary text is preserved. Adds regression tests.
+
+### 中文
+
+- **安全(doctor)：`/agy doctor` 额外脱敏 OIDC/JWT id_token 及更多密钥形态。**
+  - `redactLine()` 原本已脱敏 `ya29.*`、`1//0…` refresh token、`AIza…` key、`Bearer` 头、`4/` 授权码与代理凭证，但 Google `id_token`（JWT `header.payload.signature`）、`sk-…` 提供方密钥、`GOCSPX-…` OAuth client secret 在 agy 回显进日志环时仍会原样落入报告。现三类均已脱敏，普通文本保持不变。补充回归测试。
+
+**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.79...v0.4.80
+
 ## 0.4.79 (2026-10-29)
 
 ### English

package/dist/index.js

@@ -2728,6 +2728,16 @@ var StreamJsonParser = class {
 			const ev = this.takeLine(line);
 			if (ev) out.push(ev);
 		}
+		if (this.buffer.length > 8388608) {
+			const dropped = this.buffer.length;
+			this.buffer = "";
+			this.stats.garbage++;
+			this.stats.consecutiveGarbage++;
+			out.push({
+				kind: "garbage",
+				line: "<dropped over-long line: " + dropped + " bytes>"
+			});
+		}
 		return out;
 	}
 	/** Flush a trailing line without a newline (agy killed mid-write). */
@@ -32399,6 +32409,9 @@ function redactLine(line) {
 	out = out.replace(/Bearer\s+\S+/gi, "Bearer <redacted>");
 	out = out.replace(/\b1\/\/0[A-Za-z0-9._-]{10,}/g, "<oauth-refresh-token-redacted>");
 	out = out.replace(/\bAIza[0-9A-Za-z_-]{30,}\b/g, "<api-key-redacted>");
+	out = out.replace(/\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/g, "<jwt-redacted>");
+	out = out.replace(/\bsk-[A-Za-z0-9_-]{16,}\b/g, "<api-key-redacted>");
+	out = out.replace(/\bGOCSPX-[A-Za-z0-9_-]{10,}\b/g, "<api-key-redacted>");
 	out = out.replace(/\b(?:https?|socks[45]):\/\/[^\s/]*:[^\s/@]*@[^\s]+/gi, "<proxy-url-redacted>");
 	return out;
 }

package/docs/SECURITY-NOTES.md

@@ -42,8 +42,10 @@ choice, not a fallback applied by this plugin.
 ## Report hygiene
 
 `/agy doctor` writes its report with redaction: Google auth URLs,
-`4/...` authorization codes, `ya29.*` tokens, and `Bearer` headers are
-stripped before the file hits disk. Still read it before attaching.
+`4/...` authorization codes, `ya29.*` access tokens, `1//0…` refresh tokens,
+OIDC/JWT `id_token`s, `AIza…`/`sk-…`/`GOCSPX-…` API keys, credentialed proxy
+URLs, and `Bearer` headers are stripped before the file hits disk. Still read it
+before attaching.
 
 ## HTTP surfaces and request-body caps
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.79",
+  "version": "0.4.81",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",