@goodandready/dsh-approval-gate 0.1.17 → 0.1.18

package/lib/messages.js

@@ -67,6 +67,14 @@ export const MESSAGES = Object.freeze({
     ruleClassifierTimeoutPermissive: "Semantic classifier timed out; allowed by low-risk fallback policy",
     askClassifierTimeout: "Semantic classifier request timed out; human confirmation required",
     askClassifierError: "Semantic classifier error; human confirmation required",
+    askPayloadTooLarge: "Command arguments exceed maximum payload size limit; review before allowing",
+    ruleReviewerInjectionAttempt: "Prompt instruction injection detected in tool arguments",
+    askContractViolation: "Operation falls outside task contract boundaries; review before allowing",
+    ruleContractViolation: "Execution violated task contract boundaries",
+    askUnisolatedTempPath: "Target path uses global /tmp instead of isolated project temp directory; review before allowing",
+    ruleUnisolatedTempPath: "Target path uses unisolated global temp directory",
+    askOverengineeringLimit: "Session file creation limit exceeded; potential overengineering requires review before allowing",
+    ruleOverengineeringLimit: "Session exceeded maximum allowed created files limit",
     hintRecursiveRm: "Specify exact target files instead of recursive deletion",
     hintPathTraversal: "Keep operations strictly within the project directory",
     hintSecretWrite: "Modify configuration via settings or environment variables, not raw file overwrite",
@@ -83,6 +91,11 @@ export const MESSAGES = Object.freeze({
     hintFailClosedAudit: "Ensure the audit log directory is writable and disk space is available",
     hintLockedAskUnattended: "Switch to an interactive session or request explicit human confirmation",
     hintClassifierTimeout: "Check external LLM connectivity or review timeout policy settings",
+    hintPayloadTooLarge: "Reduce input payload size or chunk data into smaller batches",
+    hintReviewerInjectionAttempt: "Remove adversarial prompt override directives from input",
+    hintContractViolation: "Confine operations to permitted task tools and project scope",
+    hintUnisolatedTempPath: "Use workspace-isolated temporary directory (<workspace>/.dsh/tmp)",
+    hintOverengineeringLimit: "Reuse existing files and avoid creating redundant abstractions or boilerplate",
   },
   zh: {
     blockedPrefix: "dsh-approval-gate 规则已阻止",
@@ -149,6 +162,14 @@ export const MESSAGES = Object.freeze({
     ruleClassifierTimeoutPermissive: "语义分类器超时；根据低风险容错策略放行",
     askClassifierTimeout: "语义分类器请求超时；需要人工审查",
     askClassifierError: "语义分类器发生异常；需要人工审查",
+    askPayloadTooLarge: "命令参数超过最大负载大小限制；请在允许前进行审查",
+    ruleReviewerInjectionAttempt: "在工具参数中检测到提示词指令注入尝试",
+    askContractViolation: "操作超出任务契约范围；请在允许前进行审查",
+    ruleContractViolation: "执行违反了任务契约边界",
+    askUnisolatedTempPath: "目标路径使用全局 /tmp 而非隔离的项目临时目录；请在允许前进行审查",
+    ruleUnisolatedTempPath: "目标路径使用未隔离的全局临时目录",
+    askOverengineeringLimit: "会话创建文件数超过限制；潜在的过度工程需要人工审查",
+    ruleOverengineeringLimit: "会话超出最大允许创建文件数限制",
     hintRecursiveRm: "请指定具体目标文件，避免递归删除",
     hintPathTraversal: "请将操作限制在项目根目录内",
     hintSecretWrite: "请通过设置或环境变量修改配置，不要直接覆盖敏感配置文件",
@@ -165,6 +186,11 @@ export const MESSAGES = Object.freeze({
     hintFailClosedAudit: "请确保审计日志目录可写且磁盘空间充足",
     hintLockedAskUnattended: "请切换到交互式会话或请求人工显式确认",
     hintClassifierTimeout: "请检查外部 LLM 服务连通性或调整分类器超时容错策略",
+    hintPayloadTooLarge: "减小输入参数大小或分批传输数据",
+    hintReviewerInjectionAttempt: "从输入中移除对抗性指令覆盖指令",
+    hintContractViolation: "将操作限制在允许的任务工具和项目范围内",
+    hintUnisolatedTempPath: "使用工作区隔离的临时目录 (<workspace>/.dsh/tmp)",
+    hintOverengineeringLimit: "复用现有文件，避免创建多余的抽象或样板代码",
   },
 });
 
@@ -230,6 +256,10 @@ const RULE_KEYS = Object.freeze({
   "classifier-timeout-strict": "ruleClassifierTimeoutStrict",
   "classifier-timeout-fallback-strict": "ruleClassifierTimeoutStrict",
   "classifier-timeout-fallback-permissive": "ruleClassifierTimeoutPermissive",
+  "reviewer-injection-attempt": "ruleReviewerInjectionAttempt",
+  "contract-violation": "ruleContractViolation",
+  "unisolated-temp-path": "ruleUnisolatedTempPath",
+  "overengineering-file-limit": "ruleOverengineeringLimit",
 });
 
 const HINT_KEYS = Object.freeze({
@@ -250,6 +280,11 @@ const HINT_KEYS = Object.freeze({
   "locked-ask-unattended-denied": "hintLockedAskUnattended",
   "classifier-timeout-strict": "hintClassifierTimeout",
   "classifier-timeout-fallback-strict": "hintClassifierTimeout",
+  "payload-too-large": "hintPayloadTooLarge",
+  "reviewer-injection-attempt": "hintReviewerInjectionAttempt",
+  "contract-violation": "hintContractViolation",
+  "unisolated-temp-path": "hintUnisolatedTempPath",
+  "overengineering-file-limit": "hintOverengineeringLimit",
 });
 
 const ASK_KEYS = Object.freeze({
@@ -268,6 +303,10 @@ const ASK_KEYS = Object.freeze({
   "classifier-timeout-strict": "askClassifierTimeout",
   "classifier-timeout-fallback-strict": "askClassifierTimeout",
   "classifier-error": "askClassifierError",
+  "payload-too-large": "askPayloadTooLarge",
+  "contract-violation": "askContractViolation",
+  "unisolated-temp-path": "askUnisolatedTempPath",
+  "overengineering-file-limit": "askOverengineeringLimit",
 });
 
 const DETAIL_KEYS = Object.freeze({

package/lib/overengineering.js

@@ -0,0 +1,97 @@
+// lib/overengineering.js
+// Overengineering guard limiting excessive file creation per session (#89).
+
+export const DEFAULT_MAX_FILES_PER_SESSION = 10;
+
+/**
+ * Tracks and limits file creation within agent sessions to prevent codebase bloat and overengineering (#89).
+ */
+export class OverengineeringGuard {
+  /**
+   * @param {{ maxFilesPerSession?: number }} [options]
+   */
+  constructor(options = {}) {
+    this.maxFilesPerSession =
+      typeof options.maxFilesPerSession === "number" && options.maxFilesPerSession > 0
+        ? options.maxFilesPerSession
+        : (typeof options.maxCreatedFilesPerSession === "number" && options.maxCreatedFilesPerSession > 0
+            ? options.maxCreatedFilesPerSession
+            : DEFAULT_MAX_FILES_PER_SESSION);
+    this.maxCreatedFilesPerSession = this.maxFilesPerSession;
+    this._sessionFiles = new Map();
+  }
+
+  /**
+   * Gets or initializes the Set of files created in this session.
+   * @private
+   */
+  _getSessionSet(sessionId) {
+    const key = sessionId || "default";
+    if (!this._sessionFiles.has(key)) {
+      this._sessionFiles.set(key, new Set());
+    }
+    return this._sessionFiles.get(key);
+  }
+
+  /**
+   * Checks file creation against threshold and records new files.
+   *
+   * @param {string} sessionId
+   * @param {string} filePath
+   * @returns {{ allowed: boolean, reason?: string, count: number, limit: number, detail?: string }}
+   */
+  checkAndRecord(sessionId, filePath) {
+    if (!filePath || typeof filePath !== "string") {
+      return { allowed: true, count: this.getCount(sessionId), limit: this.maxFilesPerSession };
+    }
+
+    const cleanPath = filePath.trim().replace(/\\/g, "/");
+    const set = this._getSessionSet(sessionId);
+
+    // If file was already created/tracked in this session, modifying it is permitted
+    if (set.has(cleanPath)) {
+      return { allowed: true, count: set.size, limit: this.maxFilesPerSession };
+    }
+
+    // Check if adding this file exceeds limit
+    if (set.size >= this.maxCreatedFilesPerSession) {
+      return {
+        allowed: false,
+        reason: "overengineering-file-limit",
+        count: set.size + 1,
+        limit: this.maxCreatedFilesPerSession,
+        detail: `Created ${set.size + 1} files in session, exceeding limit of ${this.maxCreatedFilesPerSession} files (#89)`,
+      };
+    }
+
+    set.add(cleanPath);
+    return { allowed: true, count: set.size, limit: this.maxFilesPerSession };
+  }
+
+  /**
+   * Returns current count of created files in session.
+   * @param {string} sessionId
+   * @returns {number}
+   */
+  getCount(sessionId) {
+    const key = sessionId || "default";
+    const set = this._sessionFiles.get(key);
+    return set ? set.size : 0;
+  }
+
+  /**
+   * Clears session tracked files.
+   * @param {string} sessionId
+   */
+  reset(sessionId) {
+    const key = sessionId || "default";
+    this._sessionFiles.delete(key);
+  }
+
+  /**
+   * Clears all session tracking.
+   */
+  clear() {
+    this._sessionFiles.clear();
+  }
+}