@lmzhen/dsh-evolution-threat 0.4.1 → 0.6.0

package/lib/index.js

@@ -1,5 +1,5 @@
 import z from "@deepseek-ai/schemastery";
-import { EVOLUTION_WRITE_TOOLS, PATTERN_OVERLAP, clampedNumber, scanContentThreats, scanMemoryThreats } from "@lmzhen/dsh-evolution-core";
+import { DEFAULT_THREAT_MAX_SCAN_CHARS, EVOLUTION_WRITE_TOOLS, PATTERN_OVERLAP, clampedNumber, scanContentThreats, scanMemoryThreats } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/index.js
 /**
 * Write-time threat guard for evolution tools.
@@ -9,7 +9,7 @@ const name = "evolution-threat";
 const inject = ["tools"];
 const Config = z.object({
 	enabled: z.boolean().default(true),
-	maxScanChars: z.number().min(PATTERN_OVERLAP + 1).default(65536),
+	maxScanChars: z.number().min(PATTERN_OVERLAP + 1).default(DEFAULT_THREAT_MAX_SCAN_CHARS),
 	threatExemptLabels: z.array(z.string()).default([])
 });
 function asRecord(value) {
@@ -47,17 +47,17 @@ function scanToolArgs(toolName, args, maxScanChars, options = {}) {
 	return null;
 }
 /** Resolve the effective `maxScanChars`, clamping invalid values to the
-* default (G3.1: 0/negative/NaN/±Infinity → 65_536; V6-05: a value below
+* default (G3.1: 0/negative/NaN/±Infinity → DEFAULT_THREAT_MAX_SCAN_CHARS; V6-05: a value below
 * PATTERN_OVERLAP + 1 is out of the coverage-guarantee domain → default).
 * Exported so the clamp is directly testable; `apply` warns when a
 * user-supplied value was corrected. */
 function resolveMaxScanChars(config) {
-	return clampedNumber(config.maxScanChars ?? 65536, 65536, { min: PATTERN_OVERLAP + 1 });
+	return clampedNumber(config.maxScanChars ?? DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_THREAT_MAX_SCAN_CHARS, { min: PATTERN_OVERLAP + 1 });
 }
 function apply(ctx, rawConfig = {}) {
 	if (!(rawConfig.enabled ?? true)) return;
 	const maxScanChars = resolveMaxScanChars(rawConfig);
-	if (maxScanChars !== (rawConfig.maxScanChars ?? 65536)) ctx.logger.warn(`evolution-threat: maxScanChars=${String(rawConfig.maxScanChars)} is invalid; falling back to the default 65_536`);
+	if (maxScanChars !== (rawConfig.maxScanChars ?? DEFAULT_THREAT_MAX_SCAN_CHARS)) ctx.logger.warn(`evolution-threat: maxScanChars=${String(rawConfig.maxScanChars)} is invalid; falling back to the default ${DEFAULT_THREAT_MAX_SCAN_CHARS}`);
 	const scanOptions = { excludeLabels: rawConfig.threatExemptLabels ?? [] };
 	ctx.inject(["tools"], (toolCtx) => {
 		const tools = toolCtx.get("tools");

package/lib/types/index.d.ts

@@ -24,7 +24,7 @@ export declare const Config: z<Config>;
  * SkillLibrary/MemoryStore write gates (P2-4, v14). */
 export declare function scanToolArgs(toolName: string, args: unknown, maxScanChars: number, options?: ScanOptions): string | null;
 /** Resolve the effective `maxScanChars`, clamping invalid values to the
- * default (G3.1: 0/negative/NaN/±Infinity → 65_536; V6-05: a value below
+ * default (G3.1: 0/negative/NaN/±Infinity → DEFAULT_THREAT_MAX_SCAN_CHARS; V6-05: a value below
  * PATTERN_OVERLAP + 1 is out of the coverage-guarantee domain → default).
  * Exported so the clamp is directly testable; `apply` warns when a
  * user-supplied value was corrected. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-threat",
   "description": "Write-time threat guard for evolution tools (community build)",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "publishConfig": {
     "access": "public"
   },
@@ -27,7 +27,7 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.4.1"
+    "@lmzhen/dsh-evolution-core": "^0.6.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -36,6 +36,6 @@
   "devDependencies": {
     "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-core": "^0.4.1"
+    "@lmzhen/dsh-evolution-core": "^0.6.0"
   }
 }