@goodandready/dsh-approval-gate 0.1.21 → 0.1.22

package/lib/measure-kinds.js

@@ -56,6 +56,9 @@ const SYSTEM_LEVEL_TOOLS = new Set([
  */
 export function classifyMeasureKind(execution, context = {}) {
   if (!execution) return MEASURE_KINDS.LOCAL_SINGLE;
+  if (typeof execution === "string") {
+    execution = { name: "bash", arguments: { command: execution } };
+  }
 
   const toolName = execution.name || execution.tool || "";
   const args = execution.arguments || {};

package/lib/messages.js

@@ -82,6 +82,12 @@ export const MESSAGES = Object.freeze({
     ruleAgentsMdProhibitedPath: "File modification prohibited by rules in AGENTS.md",
     askMajorVersionBump: "Package.json modification contains major dependency bump; review before allowing",
     ruleMajorVersionBump: "Unauthorized major dependency version bump",
+    askRedundantSandbox: "Redundant sandbox elevation requested for safe workspace operation; review or execute in sandboxed mode",
+    ruleRedundantSandbox: "Unnecessary sandbox elevation requested for workspace-internal task",
+    askMissingJustification: "Privilege escalation requires an explicit justification; review before allowing",
+    ruleMissingJustification: "System privilege escalation requested without justification",
+    askInsufficientJustification: "Privilege escalation justification is too brief or generic; review before allowing",
+    ruleInsufficientJustification: "Insufficient privilege escalation justification",
     hintRecursiveRm: "Specify exact target files instead of recursive deletion",
     hintPathTraversal: "Keep operations strictly within the project directory",
     hintSecretWrite: "Modify configuration via settings or environment variables, not raw file overwrite",
@@ -109,6 +115,9 @@ export const MESSAGES = Object.freeze({
     hintAgentsMdProhibited: "Review project-specific guidelines and constraints defined in AGENTS.md",
     hintMajorVersionBump: "Verify compatibility before bumping major dependency versions in package.json",
     hintUnmatchedAsk: "Unrecognized operations default to fail-closed approval under defaultVerdict='ask'",
+    hintRedundantSandbox: "Execute the command in standard sandbox mode without danger-full-access",
+    hintMissingJustification: "Provide a justification field with at least 10 non-placeholder characters",
+    hintInsufficientJustification: "Describe the specific operational reason for privilege escalation",
   },
   zh: {
     blockedPrefix: "dsh-approval-gate 规则已阻止",
@@ -190,6 +199,12 @@ export const MESSAGES = Object.freeze({
     ruleAgentsMdProhibitedPath: "文件修改被 AGENTS.md 中的规则明确禁止",
     askMajorVersionBump: "package.json 包含破坏性依赖主版本升级；请在允许前进行审查",
     ruleMajorVersionBump: "未授权的依赖包主版本升级",
+    askRedundantSandbox: "对安全的内部操作请求了冗余的沙箱提权；请在允许前审查或以标准沙箱模式执行",
+    ruleRedundantSandbox: "工作区内部任务请求了不必要的沙箱提权",
+    askMissingJustification: "特权提升需要明确的理由说明；请在允许前进行审查",
+    ruleMissingJustification: "未提供理由即请求系统提权",
+    askInsufficientJustification: "特权提升理由过短或为占位符；请在允许前进行审查",
+    ruleInsufficientJustification: "特权提升理由不充分",
     hintRecursiveRm: "请指定具体目标文件，避免递归删除",
     hintPathTraversal: "请将操作限制在项目根目录内",
     hintSecretWrite: "请通过设置或环境变量修改配置，不要直接覆盖敏感配置文件",
@@ -217,6 +232,9 @@ export const MESSAGES = Object.freeze({
     hintAgentsMdProhibited: "请核对项目根目录 AGENTS.md 中定义的安全约束和禁止指令",
     hintMajorVersionBump: "在升级 package.json 依赖主版本前请确认破坏性变更与兼容性",
     hintUnmatchedAsk: "在 defaultVerdict='ask' 模式下，未识别的操作默认需要人工审核确认",
+    hintRedundantSandbox: "在标准沙箱模式下重新执行该命令，无需申请 danger-full-access",
+    hintMissingJustification: "请提供至少10个字符的有效理由说明字段",
+    hintInsufficientJustification: "请详细说明提权操作的具体业务或技术原因",
   },
 });
 
@@ -291,6 +309,9 @@ const RULE_KEYS = Object.freeze({
   "agents-md-prohibited-command": "ruleAgentsMdProhibitedCommand",
   "agents-md-prohibited-path": "ruleAgentsMdProhibitedPath",
   "major-version-bump": "askMajorVersionBump",
+  "redundant-sandbox-privilege": "ruleRedundantSandbox",
+  "missing-escalation-justification": "ruleMissingJustification",
+  "insufficient-escalation-justification": "ruleInsufficientJustification",
 });
 
 const HINT_KEYS = Object.freeze({
@@ -322,6 +343,9 @@ const HINT_KEYS = Object.freeze({
   "agents-md-prohibited-path": "hintAgentsMdProhibited",
   "major-version-bump": "hintMajorVersionBump",
   "unmatched-ask": "hintUnmatchedAsk",
+  "redundant-sandbox-privilege": "hintRedundantSandbox",
+  "missing-escalation-justification": "hintMissingJustification",
+  "insufficient-escalation-justification": "hintInsufficientJustification",
 });
 
 const ASK_KEYS = Object.freeze({
@@ -329,6 +353,9 @@ const ASK_KEYS = Object.freeze({
   "unknown-format": "askUnknownFormat",
   "unknown-write-target": "askUnknownWriteTarget",
   "unmatched-ask": "askUnmatched",
+  "redundant-sandbox-privilege": "askRedundantSandbox",
+  "missing-escalation-justification": "askMissingJustification",
+  "insufficient-escalation-justification": "askInsufficientJustification",
   "dynamic-command": "askDynamicCommand",
   "dynamic-arguments": "askDynamicArguments",
   "dynamic-redirect": "askDynamicRedirect",

package/package.json

@@ -1,55 +1,55 @@
-{
-  "name": "@goodandready/dsh-approval-gate",
-  "version": "0.1.21",
-  "description": "Host-only command safety gate for DeepSeek Harness: blocks recognized dangerous operations and requests DSH approval when a command cannot be inspected.",
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": "./lib/index.js",
-    "./package.json": "./package.json",
-    "./cordis.patch.yml": "./cordis.patch.yml"
-  },
-  "files": [
-    "lib",
-    "rules",
-    "cordis.patch.yml",
-    "README.md",
-    "README.zh.md",
-    "README.ru.md",
-    "CHANGELOG.md",
-    "LICENSE"
-  ],
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    }
-  },
-  "license": "MIT",
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/schemastery": "^3.18.1"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/GooDAnDReaDY/dsh-approval-gate.git"
-  },
-  "homepage": "https://github.com/GooDAnDReaDY/dsh-approval-gate#readme",
-  "bugs": {
-    "url": "https://github.com/GooDAnDReaDY/dsh-approval-gate/issues"
-  },
-  "scripts": {
-    "test": "node --test test/*.test.mjs"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org",
-    "access": "public"
-  },
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "security",
-    "approval-gate",
-    "safety"
-  ]
-}
+{
+  "name": "@goodandready/dsh-approval-gate",
+  "version": "0.1.22",
+  "description": "Host-only command safety gate for DeepSeek Harness: blocks recognized dangerous operations and requests DSH approval when a command cannot be inspected.",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./package.json": "./package.json",
+    "./cordis.patch.yml": "./cordis.patch.yml"
+  },
+  "files": [
+    "lib",
+    "rules",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md",
+    "README.ru.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/schemastery": "^3.18.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/GooDAnDReaDY/dsh-approval-gate.git"
+  },
+  "homepage": "https://github.com/GooDAnDReaDY/dsh-approval-gate#readme",
+  "bugs": {
+    "url": "https://github.com/GooDAnDReaDY/dsh-approval-gate/issues"
+  },
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "security",
+    "approval-gate",
+    "safety"
+  ]
+}