dsh-agy-link 0.4.85 → 0.4.86
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +18 -0
- package/dist/index.js +8 -2
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,23 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.4.86 (2026-10-29)
|
|
4
|
+
|
|
5
|
+
### English
|
|
6
|
+
|
|
7
|
+
- **Security(doctor): write the diagnostic report owner-only (dir 0700, file 0600).**
|
|
8
|
+
- `/agy doctor` wrote its (redacted) report with the default umask (typically 0644), so another local user could read config paths and any residual log text. The diagnostics dir is now `0700` and the report `0600`.
|
|
9
|
+
- **Docs(spec): add the spec index and the security-hardening invariants.**
|
|
10
|
+
- `.spec/README.md` indexes the project's truth sources; `.spec/security-hardening.md` records the MCP bridge / HTTP / doctor / media / parser security invariants and the exact test that guards each one, so future changes cannot silently relax them.
|
|
11
|
+
|
|
12
|
+
### 中文
|
|
13
|
+
|
|
14
|
+
- **安全(doctor)：诊断报告改为仅本人可读（目录 0700、文件 0600）。**
|
|
15
|
+
- `/agy doctor` 之前按默认 umask 写（通常 0644），同机其他用户可读到配置路径与残留日志。现目录 `0700`、报告 `0600`。
|
|
16
|
+
- **文档(spec)：新增 spec 索引与安全不变式文档。**
|
|
17
|
+
- `.spec/README.md` 作为真相源索引；`.spec/security-hardening.md` 记录 MCP 桥接 / HTTP / doctor / media / parser 的安全不变式与对应测试，防止后续改动静默放宽。
|
|
18
|
+
|
|
19
|
+
**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.85...v0.4.86
|
|
20
|
+
|
|
3
21
|
## 0.4.85 (2026-10-29)
|
|
4
22
|
|
|
5
23
|
### English
|
package/dist/index.js
CHANGED
|
@@ -32448,9 +32448,15 @@ function writeDoctorReport(deps) {
|
|
|
32448
32448
|
lines.push("```");
|
|
32449
32449
|
lines.push("");
|
|
32450
32450
|
const dir = join(stateDir(), "diagnostics");
|
|
32451
|
-
mkdirSync(dir, {
|
|
32451
|
+
mkdirSync(dir, {
|
|
32452
|
+
recursive: true,
|
|
32453
|
+
mode: 448
|
|
32454
|
+
});
|
|
32452
32455
|
const file = join(dir, "doctor-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[^0-9]/g, "").slice(0, 14) + ".md");
|
|
32453
|
-
writeFileSync(file, lines.join("\n"),
|
|
32456
|
+
writeFileSync(file, lines.join("\n"), {
|
|
32457
|
+
encoding: "utf8",
|
|
32458
|
+
mode: 384
|
|
32459
|
+
});
|
|
32454
32460
|
return file;
|
|
32455
32461
|
}
|
|
32456
32462
|
//#endregion
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-agy-link",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.86",
|
|
4
4
|
"description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|