@goodandready/dsh-approval-gate 0.1.17 → 0.1.19

package/lib/index.js

@@ -3,6 +3,7 @@ import { BandsEngine } from "./bands.js";
 import { AuditLogger } from "./audit-log.js";
 import { DeclarativeRulesEngine } from "./rules-loader.js";
 import { LlmClassifier } from "./classifier.js";
+import { ClassifierLatencyTracker } from "./latency.js";
 import Schema from "@deepseek-ai/schemastery";
 
 if (typeof Schema.prototype?.volatile !== "function") {
@@ -230,6 +231,16 @@ export const Config = Schema.object({
   classifierTimeoutPolicy: Schema.union(["strict", "permissive"]).default("strict").volatile(),
   /** Maximum context characters for classifier prompt (#117). */
   classifierMaxContext: Schema.number().default(1000).volatile(),
+  /** Maximum payload bytes for tool arguments (#71). */
+  maxPayloadBytes: Schema.number().default(65536).volatile(),
+  /** Isolate temporary directories to workspace/.dsh/tmp (#102). */
+  isolateTempRoots: Schema.boolean().default(true).volatile(),
+  /** Maximum allowed created files per session to prevent overengineering (#89). */
+  maxFilesPerSession: Schema.number().default(10).volatile(),
+  /** Maximum latency in ms before classifier degrades to deterministic rules (#57). */
+  classifierSlaMs: Schema.number().default(2000).volatile(),
+  /** Task contract boundary rules (#87). */
+  taskContract: Schema.any().volatile(),
   /** Security engine instance (internal/testing). */
   engine: Schema.any().hidden(),
 });
@@ -281,10 +292,21 @@ export function apply(ctx, config) {
     : null;
 
   const engine = (config && config.engine) || cfg.engine || new SecurityEngine({
-    inspectConfig: { toolName: toolName, fileWriteTools: fileWriteTools, workspaceDir: cfg.workspaceDir || "" },
+    inspectConfig: {
+      toolName: toolName,
+      fileWriteTools: fileWriteTools,
+      workspaceDir: cfg.workspaceDir || "",
+      maxPayloadBytes: cfg.maxPayloadBytes !== undefined ? cfg.maxPayloadBytes : 65536,
+      isolateTempRoots: cfg.isolateTempRoots !== false,
+    },
+    taskContract: cfg.taskContract || undefined,
+    maxFilesPerSession: cfg.maxFilesPerSession !== undefined ? cfg.maxFilesPerSession : 10,
     bands: new BandsEngine({ toolRegistry: ctx && ctx.tools }),
     classifier,
     timeoutPolicy: cfg.classifierTimeoutPolicy || "strict",
+    latencyTracker: new ClassifierLatencyTracker({
+      slaMs: cfg.classifierSlaMs !== undefined ? cfg.classifierSlaMs : 2000,
+    }),
     defaultVerdict: cfg.defaultVerdict || "allow",
     dryRun: Boolean(cfg.dryRun || cfg.shadowMode),
     auditFailClosed: Boolean(cfg.auditFailClosed),
@@ -310,6 +332,8 @@ export function apply(ctx, config) {
     getCounters: () => engine.getCounters(),
     resetCounters: () => engine.resetCounters(),
     getLedgerSummary: (sessionId) => engine.getLedgerSummary(sessionId),
+    getLatencyMetrics: () => (engine.getLatencyMetrics ? engine.getLatencyMetrics() : null),
+    resetLatencyTracker: () => (engine.resetLatencyTracker ? engine.resetLatencyTracker() : undefined),
     getSnapshot: () => ({
       active: true,
       dryRun: Boolean(cfg.dryRun || cfg.shadowMode),
@@ -320,6 +344,7 @@ export function apply(ctx, config) {
       rulesCount: engine.declarativeRules ? engine.declarativeRules.count() : 0,
       cacheStats: engine.cache ? engine.cache.stats() : null,
       breakerState: engine.breaker ? engine.breaker.getState() : null,
+      latencyMetrics: engine.getLatencyMetrics ? engine.getLatencyMetrics() : null,
     }),
   };
   if (ctx && typeof ctx === "object") {
@@ -520,27 +545,11 @@ export {
   DEFAULT_RETAIN_LINES,
   auditRotateContent,
 } from "./audit-log.js";
-export {
-  BlockCounters,
-  categorizeReason,
-} from "./counters.js";
-export {
-  isCriticalOperation,
-} from "./engine.js";
-export {
-  parseYaml,
-  parseScalar,
-  stripComment,
-} from "./yaml-parser.js";
-export {
-  matchConditionValue,
-  evaluateWhen,
-} from "./when-matcher.js";
-export {
-  HotwordsMatcher,
-  DEFAULT_HOTWORDS,
-  extractWords,
-} from "./hotwords.js";
+export { BlockCounters, categorizeReason } from "./counters.js";
+export { isCriticalOperation } from "./engine.js";
+export { parseYaml, parseScalar, stripComment } from "./yaml-parser.js";
+export { matchConditionValue, evaluateWhen } from "./when-matcher.js";
+export { HotwordsMatcher, DEFAULT_HOTWORDS, extractWords } from "./hotwords.js";
 export {
   DeclarativeRulesEngine,
   BUILTIN_RULES_FILE,
@@ -553,5 +562,16 @@ export {
   sanitizeClassifierInput,
   truncateClassifierContext,
   isLowRiskExecution,
+  isShapeRejectError,
+  extractJsonPayload,
+  ClassifierVerdictSchema,
+  validateClassifierResponse,
   LlmClassifier,
 } from "./classifier.js";
+export { ContractGuard } from "./contract-guard.js";
+export { OverengineeringGuard, DEFAULT_MAX_FILES_PER_SESSION } from "./overengineering.js";
+export { resolveTempRoot, isGlobalTempPath, checkTempIsolation } from "./paths.js";
+export { computePayloadSize, scanPromptInjection } from "./inspect.js";
+export { RISK_BUCKETS, RISK_TAGS, categorizeRiskBucket, extractRiskTags } from "./risk.js";
+export { ClassifierLatencyTracker, DEFAULT_CLASSIFIER_SLA_MS } from "./latency.js";
+