@lmzhen/dsh-evolution-threat 0.1.0-rc.1

package/README.md

@@ -0,0 +1,24 @@
+# @deepseek-ai/dsh-evolution-threat
+
+Write-time threat guard for evolution tools
+
+## Model Experience
+
+### Indirect model surface
+
+#### What the model sees
+
+`@deepseek-ai/dsh-evolution-threat` registers no direct prompt or tool schema itself. Model-visible effects are owned by the packages that consume this service.
+
+#### Token effect
+
+Zero direct token effect from this package; consumers add any model-visible tokens.
+
+#### KV Cache effect
+
+Independent of request-prefix construction. This package does not alter the assembled prompt or tool list.
+
+## Known Limitations and Deferred Work
+
+
+- No known durable consumer gaps at this time. Runtime contracts are covered by package and boundary tests.

package/lib/index.js

@@ -0,0 +1,57 @@
+import z from "@deepseek-ai/schemastery";
+import { scanContentThreats, scanMemoryThreats } from "@lmzhen/dsh-evolution-core";
+//#region lib/types/index.js
+/**
+* Write-time threat guard for evolution tools.
+* @module @lmzhen/dsh-evolution-threat
+*/
+const name = "evolution-threat";
+const inject = ["tools"];
+const Config = z.object({
+	enabled: z.boolean().default(true),
+	maxScanChars: z.number().default(65536)
+});
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function scanArgs(toolName, args, maxScanChars) {
+	if (toolName !== "memory" && toolName !== "skill_manage") return null;
+	const record = asRecord(args);
+	if (toolName === "memory") {
+		for (const text of [record.facts, record.content]) if (typeof text === "string") {
+			const hit = scanMemoryThreats(text, maxScanChars);
+			if (hit) return hit;
+		}
+		if (Array.isArray(record.operations)) for (const op of record.operations) {
+			const text = asRecord(op).facts ?? asRecord(op).content;
+			if (typeof text === "string") {
+				const hit = scanMemoryThreats(text, maxScanChars);
+				if (hit) return hit;
+			}
+		}
+		return null;
+	}
+	for (const text of [
+		record.content,
+		record.file_content,
+		record.new_string
+	]) if (typeof text === "string") {
+		const hit = scanContentThreats(text, maxScanChars);
+		if (hit) return hit;
+	}
+	return null;
+}
+function apply(ctx, rawConfig = {}) {
+	if (!(rawConfig.enabled ?? true)) return;
+	const maxScanChars = rawConfig.maxScanChars ?? 65536;
+	ctx.on("tools/pre-execute", async (exec, next) => {
+		const hit = scanArgs(exec.name, exec.arguments, maxScanChars);
+		if (hit) return {
+			kind: "deny",
+			reason: hit
+		};
+		return next();
+	});
+}
+//#endregion
+export { Config, apply, inject, name };

package/lib/invariant.js

@@ -0,0 +1,8 @@
+//#region lib/types/invariant.js
+const PACKAGE_NAME = "@deepseek-ai/dsh-evolution-threat";
+const name = "evolution-threat-invariant";
+const inject = ["invariants"];
+const install = () => {};
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Write-time threat guard for evolution tools.
+ * @module @deepseek-ai/dsh-evolution-threat
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+export declare const name = "evolution-threat";
+export declare const inject: string[];
+export interface Config {
+    enabled?: boolean;
+    /** Maximum normalized characters scanned per write field. */
+    maxScanChars?: number;
+}
+export declare const Config: z<Config>;
+export declare function apply(ctx: Context, rawConfig?: Config): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "evolution-threat-invariant";
+export declare const inject: string[];
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@lmzhen/dsh-evolution-threat",
+  "description": "Write-time threat guard for evolution tools (community build)",
+  "version": "0.1.0-rc.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lmzhen/dsh-evolution.git",
+    "directory": "packages/dsh-evolution-threat"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "lib/types/**/*.d.ts",
+    "lib/types/invariant.d.ts"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "@lmzhen/dsh-evolution-core": "^0.1.0-rc.1"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
+    "@lmzhen/dsh-evolution-core": "^0.1.0-rc.1"
+  }
+}