@crewhaus/boundary-classifier 0.2.4 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +1 -1
- package/dist/index.js +8 -0
- package/package.json +3 -3
package/dist/index.d.ts
CHANGED
|
@@ -11,7 +11,7 @@ export declare class BoundaryClassifierError extends CrewhausError {
|
|
|
11
11
|
* Adding a new origin? Update `OriginDefaultSeverity` and the §41 doctor
|
|
12
12
|
* check at the same time.
|
|
13
13
|
*/
|
|
14
|
-
export type TrustOrigin = "user" | "mcp" | "subagent" | "channel" | "federation" | "skill" | "compaction" | "tool" | "chain";
|
|
14
|
+
export type TrustOrigin = "user" | "mcp" | "subagent" | "channel" | "federation" | "skill" | "compaction" | "tool" | "chain" | "memory";
|
|
15
15
|
export type BoundarySeverity = "block" | "warn" | "pass";
|
|
16
16
|
export type BoundaryAction = "pass" | "warn" | "redact";
|
|
17
17
|
export type ClassifyBoundaryOptions = {
|
package/dist/index.js
CHANGED
|
@@ -70,6 +70,14 @@ const ORIGIN_DEFAULT_POLICY = {
|
|
|
70
70
|
// or an event-emitting contract can plant malicious strings in event payloads
|
|
71
71
|
// that get decoded and injected into the model's context. Block by default.
|
|
72
72
|
chain: "block",
|
|
73
|
+
// Memory content (0.3.0 design §7.4): recalled wiki articles, recalled
|
|
74
|
+
// facts, and dream-synthesis output. A wiki article written in an earlier
|
|
75
|
+
// session may have absorbed attacker text (a poisoned web page STUDYed
|
|
76
|
+
// into an article, a malicious MCP response captured as a fact) — recall
|
|
77
|
+
// re-injects it across a session boundary, so it must be re-verified at
|
|
78
|
+
// read time. Block by default, same tier as "skill" (both are
|
|
79
|
+
// disk-persisted instructions-adjacent content).
|
|
80
|
+
memory: "block",
|
|
73
81
|
};
|
|
74
82
|
/**
|
|
75
83
|
* In-process LRU cache over `(sha256(content), origin)` → result. The
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@crewhaus/boundary-classifier",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.3.0",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "Pillar-3 chokepoint — classify content crossing every trust boundary (MCP / sub-agent / channel / federation / skill / compaction / tool) with origin metadata and a content-hash LRU cache",
|
|
6
6
|
"main": "dist/index.js",
|
|
@@ -15,8 +15,8 @@
|
|
|
15
15
|
"test": "bun test src"
|
|
16
16
|
},
|
|
17
17
|
"dependencies": {
|
|
18
|
-
"@crewhaus/errors": "0.
|
|
19
|
-
"@crewhaus/prompt-injection-detector": "0.
|
|
18
|
+
"@crewhaus/errors": "0.3.0",
|
|
19
|
+
"@crewhaus/prompt-injection-detector": "0.3.0"
|
|
20
20
|
},
|
|
21
21
|
"license": "Apache-2.0",
|
|
22
22
|
"author": {
|