@node9/policy-engine 1.65.0 → 1.66.0

package/dist/index.d.mts

@@ -329,6 +329,9 @@ interface PolicyConfig {
         dlp: {
             enabled: boolean;
             scanIgnoredTools: boolean;
+            /** Inline-ask v2: 'block' upgrades review-severity DLP matches to a hard
+             *  block. Optional for back-compat with callers that don't set it. */
+            reviewAction?: 'review' | 'block';
         };
         /** Egress / destination control (GAP-5). Optional for back-compat with
          *  callers/tests that build a PolicyConfig without it. */

package/dist/index.d.ts

@@ -329,6 +329,9 @@ interface PolicyConfig {
         dlp: {
             enabled: boolean;
             scanIgnoredTools: boolean;
+            /** Inline-ask v2: 'block' upgrades review-severity DLP matches to a hard
+             *  block. Optional for back-compat with callers that don't set it. */
+            reviewAction?: 'review' | 'block';
         };
         /** Egress / destination control (GAP-5). Optional for back-compat with
          *  callers/tests that build a PolicyConfig without it. */

package/dist/index.js

@@ -2262,7 +2262,10 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
     const dlpMatch = args !== void 0 ? scanArgs(args) : null;
     if (dlpMatch) {
       return {
-        decision: dlpMatch.severity,
+        // reviewAction:'block' (inline-ask v2): the admin upgraded
+        // review-severity matches to a hard block — every evaluatePolicy
+        // caller (orchestrator, explain, gateway) must agree with the gate.
+        decision: dlpMatch.severity === "block" || config.policy.dlp.reviewAction === "block" ? "block" : "review",
         blockedByLabel: `DLP: ${dlpMatch.patternName}`,
         reason: `${dlpMatch.patternName} detected in ${dlpMatch.fieldPath}`
       };

package/dist/index.mjs

@@ -2152,7 +2152,10 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
     const dlpMatch = args !== void 0 ? scanArgs(args) : null;
     if (dlpMatch) {
       return {
-        decision: dlpMatch.severity,
+        // reviewAction:'block' (inline-ask v2): the admin upgraded
+        // review-severity matches to a hard block — every evaluatePolicy
+        // caller (orchestrator, explain, gateway) must agree with the gate.
+        decision: dlpMatch.severity === "block" || config.policy.dlp.reviewAction === "block" ? "block" : "review",
         blockedByLabel: `DLP: ${dlpMatch.patternName}`,
         reason: `${dlpMatch.patternName} detected in ${dlpMatch.fieldPath}`
       };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/policy-engine",
-  "version": "1.65.0",
+  "version": "1.66.0",
   "description": "Shared policy evaluation engine for node9 — DLP, smart rules, AST shell parsing, shields, loop detection. Pure functions, no I/O. Used by both node9-proxy and the node9 SaaS firewall.",
   "license": "Apache-2.0",
   "homepage": "https://node9.ai",