{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"zhujunpeng12-dsh-memory-system","slug":"zhujunpeng12-dsh-memory-system","rank":342,"url":"https://github.com/zhujunpeng12/dsh-memory-system","name":"zhujunpeng12/dsh-memory-system","category":"memory","description":{"zh":"面向 DeepSeek Harness 的本地优先持久记忆：在 pre-step 注入有预算上限的热记忆，使用精确匹配与中文二元 BM25 召回冷层，提供六个 Agent 工具，并以审批门禁、租约锁、恢复回执和只读治理与轨迹复盘候选保护写入。","en":"Local-first persistent memory for DeepSeek Harness: bounded pre-step hot-memory injection, exact and Chinese-bigram BM25 cold recall, six agent tools, approval-gated lease-lock writes with recovery receipts, and read-only governance and trajectory-review candidates."},"stars":8,"starsCheckedAt":"2026-08-21","repository":{"owner":"zhujunpeng12","repo":"dsh-memory-system","requestedRef":null,"subpath":""},"npm":"@zhujunpeng12/dsh-memory-system","downloads":120,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add @zhujunpeng12/dsh-memory-system","tarball":"https://github.com/zhujunpeng12/dsh-memory-system/releases/download/v0.1.1/zhujunpeng12-dsh-memory-system-0.1.1.tgz","added":"2026-08-21","page":"https://awesome-dsh-plugin.com/p/zhujunpeng12/dsh-memory-system/","screenshots":["https://raw.githubusercontent.com/zhujunpeng12/dsh-memory-system/master/assets/social-preview.png","https://raw.githubusercontent.com/zhujunpeng12/dsh-memory-system/master/docs/memory-system-flowchart.png"],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"zhujunpeng12-dsh-memory-system","slug":"zhujunpeng12-dsh-memory-system","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:23:57.776Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"71d48bd105a91d0196e6c7489839dabd049182d4","commitDate":"2026-08-21T11:05:33+08:00","artifactDigest":"sha256:dbf6cf9121812a11701a17025f82b8492be7dbbf00cfecfa0f2b6fc27dbb09d2","downloadUrl":"https://github.com/zhujunpeng12/dsh-memory-system/archive/71d48bd105a91d0196e6c7489839dabd049182d4.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add @zhujunpeng12/dsh-memory-system","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"@zhujunpeng12/dsh-memory-system","packageVersion":"0.1.1","bundle":{"patch":"./cordis.patch.yml"},"client":null,"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"@zhujunpeng12/dsh-memory-system","manifestName":"@zhujunpeng12/dsh-memory-system","nameMatch":true,"npm":{"name":"@zhujunpeng12/dsh-memory-system","latestVersion":"0.1.0","publishedAt":"2026-08-15T07:26:20.752Z","createdAt":"2026-08-15T07:26:20.454Z","versionCount":1,"maintainers":1,"repository":"git+https://github.com/zhujunpeng12/dsh-memory-system.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":"github-release","versionMatch":"differs"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-memory-system","name":"@zhujunpeng12/dsh-memory-system","path":"cordis.patch.yml","disabled":false},{"id":"agent-teams","name":"@nanmicoder/dsh-agent-teams","path":"plugins/agent-teams/cordis.patch.yml","disabled":false},{"id":"evidence-ledger","name":"evidence-ledger","path":"plugins/evidence-ledger/cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":null,"parseErrors":[]},"capabilities":["agent-control","browser-ui","environment","filesystem","host-bundle","network","session","subprocess","telemetry"],"outboundHosts":[],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"index.js","pathClass":"source","line":22,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"b447e259cd9305ea45943b5c"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"plugins/evidence-ledger/index.js","pathClass":"source","line":16,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"b7aa8f9afbc3dd29525b10eb"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"test_package_smoke.test.mjs","pathClass":"test-example-docs","line":7,"evidence":"execFileSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"c4cf3c547f0be476ebcf0256"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"test_package_smoke.test.mjs","pathClass":"test-example-docs","line":7,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"0b64a2e4dff466317b3118e5"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"test_plugin_bridge.test.mjs","pathClass":"test-example-docs","line":16,"evidence":"execFileSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"e9addf5ef289c71c738a244e"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"test_plugin_bridge.test.mjs","pathClass":"test-example-docs","line":16,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"81d67fc3e7b08a38fd760f1a"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"vault-guard/bootstrap.py","pathClass":"source","line":65,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"473cd2107d44b137a95efc34"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"vault-guard/check.py","pathClass":"source","line":120,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"7a89121fedef524afa605541"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"vault-guard/hook-first-prompt.py","pathClass":"source","line":201,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"071340db528e0491ee5f6c86"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"vault-guard/hook-session-start.py","pathClass":"source","line":50,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"192ef6e5873a4fcd4dde4fb0"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"vault-guard/test_hook_first_prompt.py","pathClass":"test-example-docs","line":21,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"7267875eb0dd355559a79a40"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"vault-guard/test_memory_tools.py","pathClass":"test-example-docs","line":117,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"8c9d977aedb8ed7fed97dfdb"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"vault-guard/test_memory_v3.py","pathClass":"test-example-docs","line":63,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"5b47c9304881f681174c10ec"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"vault-guard/test_memory_v3.py","pathClass":"test-example-docs","line":70,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"5b47c9304881f681174c10ec"}],"counts":{"critical":0,"high":0,"medium":0,"low":6},"rawCounts":{"critical":0,"high":0,"medium":0,"low":14},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":82,"bytesScanned":579863,"truncated":false,"lockfiles":[],"pathClasses":{"test-example-docs":15,"markdown":15,"source":41,"cordis":3,"data":5,"manifest":3}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:23:57.776Z","commit":"71d48bd105a91d0196e6c7489839dabd049182d4","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:23:50.591Z","commit":"71d48bd105a91d0196e6c7489839dabd049182d4","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:52:36.094Z","commit":"71d48bd105a91d0196e6c7489839dabd049182d4","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"71d48bd105a91d0196e6c7489839dabd049182d4","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:23:57.776Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"71d48bd105a91d0196e6c7489839dabd049182d4","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:23:50.591Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"71d48bd105a91d0196e6c7489839dabd049182d4","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:52:36.094Z"}]}