@goodandready/dsh-approval-gate 0.1.16 → 0.1.18

package/lib/index.js

@@ -2,6 +2,7 @@ import { SecurityEngine } from "./engine.js";
 import { BandsEngine } from "./bands.js";
 import { AuditLogger } from "./audit-log.js";
 import { DeclarativeRulesEngine } from "./rules-loader.js";
+import { LlmClassifier } from "./classifier.js";
 import Schema from "@deepseek-ai/schemastery";
 
 if (typeof Schema.prototype?.volatile !== "function") {
@@ -217,6 +218,26 @@ export const Config = Schema.object({
   auditFailClosed: Schema.boolean().default(false).volatile(),
   /** Optional custom declarative rules YAML file path (#38). */
   rulesFile: Schema.string().default("").volatile(),
+  /** Semantic LLM classifier endpoint URL (#127). */
+  classifierEndpoint: Schema.string().default("").volatile(),
+  /** API key for classifier endpoint (#115). */
+  classifierApiKey: Schema.string().default("").volatile(),
+  /** Model name for semantic classification. */
+  classifierModel: Schema.string().default("gpt-4o-mini").volatile(),
+  /** Request timeout in ms for classifier (#118). */
+  classifierTimeout: Schema.number().default(3000).volatile(),
+  /** Policy on classifier timeout: 'strict' or 'permissive' (#118). */
+  classifierTimeoutPolicy: Schema.union(["strict", "permissive"]).default("strict").volatile(),
+  /** Maximum context characters for classifier prompt (#117). */
+  classifierMaxContext: Schema.number().default(1000).volatile(),
+  /** Maximum payload bytes for tool arguments (#71). */
+  maxPayloadBytes: Schema.number().default(65536).volatile(),
+  /** Isolate temporary directories to workspace/.dsh/tmp (#102). */
+  isolateTempRoots: Schema.boolean().default(true).volatile(),
+  /** Maximum allowed created files per session to prevent overengineering (#89). */
+  maxFilesPerSession: Schema.number().default(10).volatile(),
+  /** Task contract boundary rules (#87). */
+  taskContract: Schema.any().volatile(),
   /** Security engine instance (internal/testing). */
   engine: Schema.any().hidden(),
 });
@@ -256,9 +277,30 @@ export function apply(ctx, config) {
   };
   const unattendedPolicies = cfg.unattendedPolicies || DEFAULT_UNATTENDED_POLICIES.slice();
   const forcedUnattended = cfg.unattended === true;
+  const classifier = cfg.classifierEndpoint
+    ? new LlmClassifier({
+        endpoint: cfg.classifierEndpoint,
+        apiKey: cfg.classifierApiKey,
+        model: cfg.classifierModel,
+        timeoutMs: cfg.classifierTimeout,
+        timeoutPolicy: cfg.classifierTimeoutPolicy,
+        maxContextChars: cfg.classifierMaxContext,
+      })
+    : null;
+
   const engine = (config && config.engine) || cfg.engine || new SecurityEngine({
-    inspectConfig: { toolName: toolName, fileWriteTools: fileWriteTools, workspaceDir: cfg.workspaceDir || "" },
+    inspectConfig: {
+      toolName: toolName,
+      fileWriteTools: fileWriteTools,
+      workspaceDir: cfg.workspaceDir || "",
+      maxPayloadBytes: cfg.maxPayloadBytes !== undefined ? cfg.maxPayloadBytes : 65536,
+      isolateTempRoots: cfg.isolateTempRoots !== false,
+    },
+    taskContract: cfg.taskContract || undefined,
+    maxFilesPerSession: cfg.maxFilesPerSession !== undefined ? cfg.maxFilesPerSession : 10,
     bands: new BandsEngine({ toolRegistry: ctx && ctx.tools }),
+    classifier,
+    timeoutPolicy: cfg.classifierTimeoutPolicy || "strict",
     defaultVerdict: cfg.defaultVerdict || "allow",
     dryRun: Boolean(cfg.dryRun || cfg.shadowMode),
     auditFailClosed: Boolean(cfg.auditFailClosed),
@@ -288,6 +330,8 @@ export function apply(ctx, config) {
       active: true,
       dryRun: Boolean(cfg.dryRun || cfg.shadowMode),
       auditFailClosed: Boolean(cfg.auditFailClosed),
+      classifierActive: Boolean(classifier || engine.classifier),
+      timeoutPolicy: engine.timeoutPolicy || "strict",
       counters: engine.getCounters(),
       rulesCount: engine.declarativeRules ? engine.declarativeRules.count() : 0,
       cacheStats: engine.cache ? engine.cache.stats() : null,
@@ -519,3 +563,15 @@ export {
   WORKSPACE_RULES_REL,
   USER_RULES_REL,
 } from "./rules-loader.js";
+export {
+  normalizeChatCompletionsUrl,
+  withLlmRetry,
+  sanitizeClassifierInput,
+  truncateClassifierContext,
+  isLowRiskExecution,
+  LlmClassifier,
+} from "./classifier.js";
+export { ContractGuard } from "./contract-guard.js";
+export { OverengineeringGuard, DEFAULT_MAX_FILES_PER_SESSION } from "./overengineering.js";
+export { resolveTempRoot, isGlobalTempPath, checkTempIsolation } from "./paths.js";
+export { computePayloadSize, scanPromptInjection } from "./inspect.js";