@lmzhen/dsh-evolution-threat 0.3.83 → 0.4.0

package/README.md

@@ -1,44 +1,28 @@
 # @lmzhen/dsh-evolution-threat
 
-Write-time threat guard for evolution tools
+Write-time threat guard for evolution tools: one monotonic `tools.guard()` scans the payload of
+every evolution write tool and refuses the call on a pattern hit. It registers no prompt or tool
+schema — a denial is its only model-visible effect.
 
-## Model Experience
+## Model surface
 
-### Indirect model surface
+- **Model-visible:** nothing of its own: a refused write is the only thing the model notices.
+- **Prompt prefix / KV cache:** unchanged by this package: family-level rules single-sourced in `packages/README.md` §"Model-visible prompt prefix and the KV cache".
+- **Mount it?** yes — the `evolution-threat` row, in `evolution-host`/`evolution-all`/one-click `evolution-preset`.
 
-#### What the model sees
+## Configuration
 
-`@lmzhen/dsh-evolution-threat` registers no direct prompt or tool schema itself. Model-visible effects are owned by the packages that consume this service.
-
-#### Token effect
-
-Zero direct token effect from this package; consumers add any model-visible tokens.
-
-#### KV Cache effect
-
-Independent of request-prefix construction. This package does not alter the assembled prompt or tool list.
-
-## Config
-
-- `maxScanChars` (default 65536): the scan window size in normalized characters.
-  Legal range is `>= 4097` — a smaller window cannot guarantee full-coverage
-  scanning (the overlap floor is `PATTERN_OVERLAP + 1` in evolution-core), so
-  the schema rejects it at load and the assembly clamp falls back to the
-  default. The whole text is always scanned in overlapping windows; this value
-  is not a total cap.
-
-- `threatExemptLabels` (default `[]`): pattern labels the deployment knows to
-  be benign. P2-4 (v14) closed the store-vs-guard asymmetry for the STORE
-  gates (`SkillLibrary`/`MemoryStore` options) — but the exemption surface is
-  per config site: this guard row, the tool-skill-manage row, the
-  evolution-commands row (its own SkillLibrary for the command write paths),
-  and the memory store options each carry their OWN list and must be set
-  separately. A label exempted only on the store side still blocks here.
-  (v17 audit: the evolution-commands site was missing from this enumeration.)
-
-## Known Limitations and Deferred Work
+- `enabled` (default `true`): master switch; off installs no guard.
+- `maxScanChars` — `65536` — the scan window size in normalized characters. Legal range is `>= 4097` — a smaller window cannot guarantee full-coverage scanning (the overlap floor is `PATTERN_OVERLAP + 1` in evolution-core), so the schema rejects it at load and the assembly clamp falls back to the default. The whole text is always scanned in overlapping windows; this value is not a total cap.
+- `threatExemptLabels` (default `[]`): pattern labels the deployment knows to be benign. The exemption surface is per config site: this guard row, the tool-skill-manage row, the evolution-commands row (its own SkillLibrary for the command write paths), the evolution-learning-graph row (its own SkillLibrary for the graph edit/delete write channel) and the memory store options each carry their OWN list and must be set separately. A label exempted only on the store side still blocks here.
 
+## Known limitations
 
 - No known durable consumer gaps at this time. Runtime contracts are covered by package and boundary tests.
 
 **Runtime invariant:** No companion is published. The platform auto-assembles nothing and the family mounts no `<pkg>/invariant` cordis row, so a companion here would never execute (v37 S2.1 / I-3).
+
+## Notes and history
+
+- P2-4 (v14) closed the store-vs-guard asymmetry for the STORE gates (`SkillLibrary`/`MemoryStore` options)
+- (v17 audit: the evolution-commands site was missing from this enumeration; the evolution-learning-graph site was missing from it as well.)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-threat",
   "description": "Write-time threat guard for evolution tools (community build)",
-  "version": "0.3.83",
+  "version": "0.4.0",
   "publishConfig": {
     "access": "public"
   },
@@ -27,7 +27,7 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.3.83"
+    "@lmzhen/dsh-evolution-core": "^0.4.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -36,6 +36,6 @@
   "devDependencies": {
     "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-core": "^0.3.83"
+    "@lmzhen/dsh-evolution-core": "^0.4.0"
   }
 }