dsh-agy-link 0.4.86 → 0.4.87
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/dist/index.js +6 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,19 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.4.87 (2026-10-29)
|
|
4
|
+
|
|
5
|
+
### English
|
|
6
|
+
|
|
7
|
+
- **Security(doctor): tighten existing diagnostics dir/file to 0700/0600 on every write.**
|
|
8
|
+
- v0.4.86 set `mode` only at creation, so a pre-existing `diagnostics/` directory (0755 from an older version) stayed world-readable, and an overwritten report kept its old mode. `writeDoctorReport()` now `chmod`s the dir to `0700` and the file to `0600` after writing (best-effort). Adds a regression test.
|
|
9
|
+
|
|
10
|
+
### 中文
|
|
11
|
+
|
|
12
|
+
- **安全(doctor)：每次写入都把已存在的诊断目录/文件收紧到 0700/0600。**
|
|
13
|
+
- 0.4.86 只在创建时设 `mode`，因此已存在的 `diagnostics/`（旧版本创建的 0755）仍可被他人读取，覆盖写同名报告也保留旧权限。现 `writeDoctorReport()` 写完后显式 `chmod` 目录为 `0700`、文件为 `0600`（best-effort）。补充回归测试。
|
|
14
|
+
|
|
15
|
+
**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.86...v0.4.87
|
|
16
|
+
|
|
3
17
|
## 0.4.86 (2026-10-29)
|
|
4
18
|
|
|
5
19
|
### English
|
package/dist/index.js
CHANGED
|
@@ -32452,11 +32452,17 @@ function writeDoctorReport(deps) {
|
|
|
32452
32452
|
recursive: true,
|
|
32453
32453
|
mode: 448
|
|
32454
32454
|
});
|
|
32455
|
+
try {
|
|
32456
|
+
chmodSync(dir, 448);
|
|
32457
|
+
} catch {}
|
|
32455
32458
|
const file = join(dir, "doctor-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[^0-9]/g, "").slice(0, 14) + ".md");
|
|
32456
32459
|
writeFileSync(file, lines.join("\n"), {
|
|
32457
32460
|
encoding: "utf8",
|
|
32458
32461
|
mode: 384
|
|
32459
32462
|
});
|
|
32463
|
+
try {
|
|
32464
|
+
chmodSync(file, 384);
|
|
32465
|
+
} catch {}
|
|
32460
32466
|
return file;
|
|
32461
32467
|
}
|
|
32462
32468
|
//#endregion
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-agy-link",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.87",
|
|
4
4
|
"description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|