@lmzhen/dsh-evolution-threat 0.32.5 → 0.33.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -11
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -1,19 +1,17 @@
|
|
|
1
1
|
# @lmzhen/dsh-evolution-threat
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
Write-time threat guard for the family model-writing tools. It is enabled by default and runs even when ordinary write approval is disabled.
|
|
4
4
|
|
|
5
|
-
##
|
|
5
|
+
## Actual coverage
|
|
6
6
|
|
|
7
|
-
|
|
7
|
+
The guard scans calls whose tool name belongs to the family `EVOLUTION_WRITE_TOOLS` set. Memory calls scan `facts` and `content`, including entries in `operations[]`; skill calls scan `content`, `file_content`, and `new_string`. A matching threat label denies the allowed execution through `tools.guard`.
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
This is not a scan of every internal write. Curator jobs, merge orchestration, direct provider calls, generic file tools, and other paths outside the guarded tool set are not covered by this package.
|
|
10
10
|
|
|
11
|
-
|
|
11
|
+
## Configuration and limits
|
|
12
12
|
|
|
13
|
-
|
|
13
|
+
- `enabled`: mounts the guard; default `true`.
|
|
14
|
+
- `maxScanChars`: normalized characters scanned per field; default 65,536. Values below the overlap-safe floor fall back to the default.
|
|
15
|
+
- `threatExemptLabels`: deployment-declared benign labels; default empty. These labels affect the scan and must be treated as security configuration.
|
|
14
16
|
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
## 边界
|
|
18
|
-
|
|
19
|
-
规则集手工维护，不保证穷尽。
|
|
17
|
+
The rule set is manually maintained and is not exhaustive. It is one write-control layer, not a general sandbox or a guarantee that every secret, injection, or exfiltration attempt will be detected.
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@lmzhen/dsh-evolution-threat",
|
|
3
3
|
"description": "Write-time threat guard for evolution tools (community build)",
|
|
4
|
-
"version": "0.
|
|
4
|
+
"version": "0.33.0",
|
|
5
5
|
"publishConfig": {
|
|
6
6
|
"access": "public"
|
|
7
7
|
},
|
|
@@ -27,7 +27,7 @@
|
|
|
27
27
|
"license": "MIT",
|
|
28
28
|
"dependencies": {
|
|
29
29
|
"@deepseek-ai/schemastery": "^3.18.5",
|
|
30
|
-
"@lmzhen/dsh-evolution-core": "^0.
|
|
30
|
+
"@lmzhen/dsh-evolution-core": "^0.33.0"
|
|
31
31
|
},
|
|
32
32
|
"peerDependencies": {
|
|
33
33
|
"@deepseek-ai/cordis": "^4.0.5",
|
|
@@ -36,7 +36,7 @@
|
|
|
36
36
|
"devDependencies": {
|
|
37
37
|
"@deepseek-ai/dsh-agent-loop-testkit": "^0.2.1-rc.2",
|
|
38
38
|
"@deepseek-ai/dsh-tools": "^0.2.1-rc.2",
|
|
39
|
-
"@lmzhen/dsh-evolution-core": "^0.
|
|
39
|
+
"@lmzhen/dsh-evolution-core": "^0.33.0"
|
|
40
40
|
},
|
|
41
41
|
"engines": {
|
|
42
42
|
"dsh": ">=0.2.1-rc.2 <0.2.2-0"
|