dsh-agy-link 0.4.84 → 0.4.86

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## 0.4.86 (2026-10-29)
+
+### English
+
+- **Security(doctor): write the diagnostic report owner-only (dir 0700, file 0600).**
+  - `/agy doctor` wrote its (redacted) report with the default umask (typically 0644), so another local user could read config paths and any residual log text. The diagnostics dir is now `0700` and the report `0600`.
+- **Docs(spec): add the spec index and the security-hardening invariants.**
+  - `.spec/README.md` indexes the project's truth sources; `.spec/security-hardening.md` records the MCP bridge / HTTP / doctor / media / parser security invariants and the exact test that guards each one, so future changes cannot silently relax them.
+
+### 中文
+
+- **安全(doctor)：诊断报告改为仅本人可读（目录 0700、文件 0600）。**
+  - `/agy doctor` 之前按默认 umask 写（通常 0644），同机其他用户可读到配置路径与残留日志。现目录 `0700`、报告 `0600`。
+- **文档(spec)：新增 spec 索引与安全不变式文档。**
+  - `.spec/README.md` 作为真相源索引；`.spec/security-hardening.md` 记录 MCP 桥接 / HTTP / doctor / media / parser 的安全不变式与对应测试，防止后续改动静默放宽。
+
+**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.85...v0.4.86
+
+## 0.4.85 (2026-10-29)
+
+### English
+
+- **Security(doctor): redact `Authorization: Basic`, `Cookie` and `X-Api-Key` headers.**
+  - `redactLine()` only masked `Bearer …` tokens, so a doctor log line carrying `Authorization: Basic <base64>`, `Cookie:` / `Set-Cookie:`, or `X-Api-Key:` values landed in the report verbatim. All auth-carrying headers are now masked (`<name>: <redacted>`) while ordinary text is preserved. Adds a regression test.
+
+### 中文
+
+- **安全(doctor)：脱敏 `Authorization: Basic`、`Cookie`、`X-Api-Key` 等头。**
+  - `redactLine()` 此前只处理 `Bearer …`，因此 doctor 日志中 `Authorization: Basic <base64>`、`Cookie:`/`Set-Cookie:`、`X-Api-Key:` 的值会原样落入报告。现将这些携带凭据的头统一脱敏为 `<name>: <redacted>`，普通文本不变。补充回归测试。
+
+**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.84...v0.4.85
+
 ## 0.4.84 (2026-10-29)
 
 ### English

package/dist/index.js

@@ -32413,6 +32413,7 @@ function redactLine(line) {
 	out = out.replace(/\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/g, "<jwt-redacted>");
 	out = out.replace(/\bsk-[A-Za-z0-9_-]{16,}\b/g, "<api-key-redacted>");
 	out = out.replace(/\bGOCSPX-[A-Za-z0-9_-]{10,}\b/g, "<api-key-redacted>");
+	out = out.replace(/\b((?:proxy-)?authorization|cookie|set-cookie|x-api-key)\s*:\s*[^\r\n]+/gi, "$1: <redacted>");
 	out = out.replace(/\b(?:https?|socks[45]):\/\/[^\s/]*:[^\s/@]*@[^\s]+/gi, "<proxy-url-redacted>");
 	return out;
 }
@@ -32447,9 +32448,15 @@ function writeDoctorReport(deps) {
 	lines.push("```");
 	lines.push("");
 	const dir = join(stateDir(), "diagnostics");
-	mkdirSync(dir, { recursive: true });
+	mkdirSync(dir, {
+		recursive: true,
+		mode: 448
+	});
 	const file = join(dir, "doctor-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[^0-9]/g, "").slice(0, 14) + ".md");
-	writeFileSync(file, lines.join("\n"), "utf8");
+	writeFileSync(file, lines.join("\n"), {
+		encoding: "utf8",
+		mode: 384
+	});
 	return file;
 }
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.84",
+  "version": "0.4.86",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",