@yadsh/dsh-prompt-firewall 0.1.0

package/lib/config.js

@@ -0,0 +1,100 @@
+import z from '@deepseek-ai/schemastery';
+import { getPreset } from './presets.js';
+export const DEFAULT_AUDIT_CONFIG = Object.freeze({
+    enabled: true,
+    logAllowed: false,
+    logBlocked: true,
+    includePreview: false,
+    previewChars: 160,
+    historySize: 100,
+    highlightNewSections: true,
+});
+export const DEFAULT_METRICS_CONFIG = Object.freeze({
+    enabled: true,
+});
+export const DEFAULT_CONFIG = Object.freeze({
+    enabled: true,
+    mode: 'blocklist',
+    blockedSections: Object.freeze([]),
+    allowedSections: Object.freeze([]),
+    blockedPrefixes: Object.freeze([]),
+    allowedPrefixes: Object.freeze([]),
+    blockedPatterns: Object.freeze([]),
+    allowedPatterns: Object.freeze([]),
+    protectedSections: Object.freeze([]),
+    protectCoreSections: true,
+    unknownPluginPolicy: 'allow',
+    audit: DEFAULT_AUDIT_CONFIG,
+    metrics: DEFAULT_METRICS_CONFIG,
+});
+const nonEmptyString = z.string().min(1);
+const stringList = z.array(nonEmptyString);
+/** Runtime schema consumed by the Cordis loader. */
+export const ConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    // Keep preset-owned fields absent until resolveConfig(). Applying schema
+    // defaults here would make `preset: strict` look explicitly overridden.
+    mode: z.union(['off', 'audit', 'blocklist', 'allowlist']),
+    preset: z.union(['clean', 'strict', 'audit-only']),
+    blockedSections: stringList.default([]),
+    allowedSections: stringList.default([]),
+    blockedPrefixes: stringList.default([]),
+    allowedPrefixes: stringList.default([]),
+    blockedPatterns: stringList.default([]),
+    allowedPatterns: stringList.default([]),
+    protectedSections: stringList.default([]),
+    protectCoreSections: z.boolean().default(true),
+    unknownPluginPolicy: z.union(['allow', 'block']),
+    audit: z.object({
+        enabled: z.boolean().default(true),
+        logAllowed: z.boolean().default(false),
+        logBlocked: z.boolean().default(true),
+        includePreview: z.boolean().default(false),
+        previewChars: z.number().step(1).min(0).default(160),
+        historySize: z.number().step(1).min(0).default(100),
+        highlightNewSections: z.boolean().default(true),
+    }).default(DEFAULT_AUDIT_CONFIG),
+    metrics: z.object({
+        enabled: z.boolean().default(true),
+    }).default(DEFAULT_METRICS_CONFIG),
+});
+function mergeList(preset, configured) {
+    const result = [...new Set([...(preset ?? []), ...(configured ?? [])])];
+    if (result.some(value => value.length === 0)) {
+        throw new TypeError('firewall rules must not contain empty strings');
+    }
+    return Object.freeze(result);
+}
+export function resolveConfig(config = {}) {
+    const preset = getPreset(config.preset);
+    const resolved = {
+        enabled: config.enabled ?? DEFAULT_CONFIG.enabled,
+        mode: (config.mode ?? preset.mode ?? DEFAULT_CONFIG.mode),
+        ...(config.preset === undefined ? {} : { preset: config.preset }),
+        blockedSections: mergeList(preset.blockedSections, config.blockedSections),
+        allowedSections: mergeList(preset.allowedSections, config.allowedSections),
+        blockedPrefixes: mergeList(preset.blockedPrefixes, config.blockedPrefixes),
+        allowedPrefixes: mergeList(preset.allowedPrefixes, config.allowedPrefixes),
+        blockedPatterns: mergeList(preset.blockedPatterns, config.blockedPatterns),
+        allowedPatterns: mergeList(preset.allowedPatterns, config.allowedPatterns),
+        protectedSections: mergeList(preset.protectedSections, config.protectedSections),
+        protectCoreSections: config.protectCoreSections
+            ?? preset.protectCoreSections
+            ?? DEFAULT_CONFIG.protectCoreSections,
+        unknownPluginPolicy: (config.unknownPluginPolicy
+            ?? preset.unknownPluginPolicy
+            ?? DEFAULT_CONFIG.unknownPluginPolicy),
+        audit: Object.freeze({
+            ...DEFAULT_AUDIT_CONFIG,
+            ...preset.audit,
+            ...config.audit,
+        }),
+        metrics: Object.freeze({
+            ...DEFAULT_METRICS_CONFIG,
+            ...preset.metrics,
+            ...config.metrics,
+        }),
+    };
+    return Object.freeze(resolved);
+}
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAWxC,MAAM,CAAC,MAAM,oBAAoB,GAA0B,MAAM,CAAC,MAAM,CAAC;IACvE,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,IAAI;IAChB,cAAc,EAAE,KAAK;IACrB,YAAY,EAAE,GAAG;IACjB,WAAW,EAAE,GAAG;IAChB,oBAAoB,EAAE,IAAI;CAC3B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC3E,OAAO,EAAE,IAAI;CACd,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAiC,MAAM,CAAC,MAAM,CAAC;IACxE,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,WAAW;IACjB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,OAAO;IAC5B,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,sBAAsB;CAChC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AACxC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;AAE1C,oDAAoD;AACpD,MAAM,CAAC,MAAM,YAAY,GAA4B,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;IAClE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAU,CAAC;IAC3D,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAChD,CAAC,CAAC,OAAO,CAAC,oBAAmC,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC,CAAC,OAAO,CAAC,sBAAuC,CAAC;CACpD,CAAC,CAAA;AAEF,SAAS,SAAS,CAChB,MAAqC,EACrC,UAAyC;IAEzC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAM,GAAyB,EAAE;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO;QACjD,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAiB;QACzE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAwB,EAAE,CAAC;QACnF,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC1E,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC1E,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC1E,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC1E,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC1E,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC1E,iBAAiB,EAAE,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC;QAChF,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;eAC1C,MAAM,CAAC,mBAAmB;eAC1B,cAAc,CAAC,mBAAmB;QACvC,mBAAmB,EAAE,CAAC,MAAM,CAAC,mBAAmB;eAC3C,MAAM,CAAC,mBAAmB;eAC1B,cAAc,CAAC,mBAAmB,CAAwB;QAC/D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,oBAAoB;YACvB,GAAG,MAAM,CAAC,KAAK;YACf,GAAG,MAAM,CAAC,KAAK;SAChB,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,GAAG,sBAAsB;YACzB,GAAG,MAAM,CAAC,OAAO;YACjB,GAAG,MAAM,CAAC,OAAO;SAClB,CAAC;KACoC,CAAA;IAExC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC"}

package/lib/firewall.js

@@ -0,0 +1,88 @@
+import { AuditStore, createAuditResult } from './audit.js';
+import { compileRules, evaluateSection } from './rules.js';
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function validateAssembly(assembly) {
+    if (!Array.isArray(assembly.sections))
+        throw new TypeError('prompt assembly sections must be an array');
+    for (const section of assembly.sections) {
+        if (typeof section.name !== 'string' || section.name.length === 0) {
+            throw new TypeError('prompt section name must be a non-empty string');
+        }
+        if (typeof section.text !== 'string') {
+            throw new TypeError(`prompt section "${section.name}" text must be a string`);
+        }
+    }
+}
+function logAudit(audit, config, logger) {
+    if (logger === undefined || !config.audit.enabled)
+        return;
+    const safeLog = (level, message) => {
+        try {
+            logger[level](message);
+        }
+        catch {
+            // Observability failures must not affect prompt policy.
+        }
+    };
+    safeLog('info', `[prompt-firewall] assembled prompt: ${audit.totalSections} sections, `
+        + `${audit.charsBefore} chars, ~${audit.estimatedTokensBefore} estimated tokens`);
+    for (const section of audit.sections) {
+        if (section.decision === 'blocked' && config.audit.logBlocked) {
+            safeLog('warn', `[prompt-firewall] BLOCK ${section.name}: ${section.reason}, `
+                + `${section.chars} chars, ~${section.estimatedTokens} estimated tokens`
+                + (section.preview === undefined ? '' : `, preview=${JSON.stringify(section.preview)}`));
+        }
+        else if (section.decision !== 'blocked' && config.audit.logAllowed) {
+            safeLog('info', `[prompt-firewall] ${section.decision.toUpperCase()} ${section.name}: ${section.reason}, `
+                + `${section.chars} chars, ~${section.estimatedTokens} estimated tokens`
+                + (section.preview === undefined ? '' : `, preview=${JSON.stringify(section.preview)}`));
+        }
+    }
+    if (audit.blockedSections > 0) {
+        safeLog('info', `[prompt-firewall] result: removed ${audit.blockedSections} sections, `
+            + `${audit.charsRemoved} chars, ~${audit.estimatedTokensRemoved} estimated tokens`);
+    }
+}
+/**
+ * Filter an already assembled DSH prompt. Any internal error is contained and
+ * returns the exact original object (fail-open).
+ */
+export function applyFirewall(assembly, options) {
+    try {
+        validateAssembly(assembly);
+        const { config } = options;
+        const rules = options.evaluate === undefined ? compileRules(config) : undefined;
+        const evaluator = options.evaluate ?? (section => evaluateSection(section, rules));
+        const sections = assembly.sections;
+        const complete = sections.some(section => section.complete === true);
+        const decisions = sections.map(section => (complete
+            ? { action: 'allow', reason: 'complete-prompt-bypass' }
+            : evaluator(section)));
+        const audit = createAuditResult(sections, decisions, config.audit, complete ? 'complete prompt detected' : undefined);
+        if (config.audit.enabled)
+            options.auditStore?.record(audit);
+        if (config.metrics.enabled)
+            options.metrics?.record(audit);
+        logAudit(audit, config, options.logger);
+        if (!config.enabled || config.mode === 'off' || config.mode === 'audit' || complete)
+            return assembly;
+        if (!decisions.some(decision => decision.action === 'block'))
+            return assembly;
+        return {
+            ...assembly,
+            sections: assembly.sections.filter((_, index) => decisions[index]?.action !== 'block'),
+        };
+    }
+    catch (error) {
+        try {
+            options.logger?.error(`[prompt-firewall] internal error; allowing original prompt: ${errorMessage(error)}`);
+        }
+        catch {
+            // Logging must never turn fail-open into a request failure.
+        }
+        return assembly;
+    }
+}
+//# sourceMappingURL=firewall.js.map

package/lib/firewall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall.js","sourceRoot":"","sources":["../src/firewall.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE1D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAmB1D,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;IACvG,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CAAC,mBAAmB,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,KAA2C,EAC3C,MAAoC,EACpC,MAAkC;IAElC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;QAAE,OAAM;IACzD,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAE,OAAe,EAAQ,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC,CAAA;IACD,OAAO,CAAC,MAAM,EACZ,uCAAuC,KAAK,CAAC,aAAa,aAAa;UACnE,GAAG,KAAK,CAAC,WAAW,YAAY,KAAK,CAAC,qBAAqB,mBAAmB,CACnF,CAAA;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9D,OAAO,CAAC,MAAM,EACZ,2BAA2B,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI;kBAC1D,GAAG,OAAO,CAAC,KAAK,YAAY,OAAO,CAAC,eAAe,mBAAmB;kBACtE,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAC1F,CAAA;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACrE,OAAO,CAAC,MAAM,EACZ,qBAAqB,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI;kBACtF,GAAG,OAAO,CAAC,KAAK,YAAY,OAAO,CAAC,eAAe,mBAAmB;kBACtE,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAC1F,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,EACZ,qCAAqC,KAAK,CAAC,eAAe,aAAa;cACnE,GAAG,KAAK,CAAC,YAAY,YAAY,KAAK,CAAC,sBAAsB,mBAAmB,CACrF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAwB,EACxB,OAA6B;IAE7B,IAAI,CAAC;QACH,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,KAAM,CAAC,CAAC,CAAA;QACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA6B,CAAA;QAEvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAA;QACpE,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CACxC,QAAQ;YACN,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAW;YAChE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CACvB,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,iBAAiB,CAC7B,QAAQ,EACR,SAAS,EACT,MAAM,CAAC,KAAK,EACZ,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAClD,CAAA;QAED,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3D,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAEvC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QACpG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;YAAE,OAAO,QAAQ,CAAA;QAE7E,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;SACvF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,KAAK,CACnB,+DAA+D,YAAY,CAAC,KAAK,CAAC,EAAE,CACrF,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC"}

package/lib/index.js

@@ -0,0 +1,166 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+import { Context } from '@deepseek-ai/cordis';
+import { installSettingsSection, settingsNamespace } from '@deepseek-ai/dsh-settings';
+import { Remote, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import { AuditStore } from './audit.js';
+import { ConfigSchema, resolveConfig } from './config.js';
+import { applyFirewall } from './firewall.js';
+import { FirewallMetrics } from './metrics.js';
+import { compileRules, evaluateSection } from './rules.js';
+export * from './audit.js';
+export * from './config.js';
+export * from './firewall.js';
+export * from './metrics.js';
+export * from './presets.js';
+export * from './rules.js';
+export * from './types.js';
+/** Cordis plugin ID. */
+export const name = 'prompt-firewall';
+export const inject = ['systemPrompt'];
+export const PROMPT_FIREWALL_SETTINGS_NAMESPACE = settingsNamespace('prompt-firewall');
+export const Config = ConfigSchema;
+/** DSH Host plugin, public firewall service, and browser Remote owner. */
+let PromptFirewall = (() => {
+    let _classSuper = TypertRemoteService;
+    let _instanceExtraInitializers = [];
+    let _inspect_decorators;
+    let _setSectionPolicy_decorators;
+    return class PromptFirewall extends _classSuper {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _inspect_decorators = [Remote('inspect')];
+            _setSectionPolicy_decorators = [Remote('setSectionPolicy')];
+            __esDecorate(this, null, _inspect_decorators, { kind: "method", name: "inspect", static: false, private: false, access: { has: obj => "inspect" in obj, get: obj => obj.inspect }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _setSectionPolicy_decorators, { kind: "method", name: "setSectionPolicy", static: false, private: false, access: { has: obj => "setSectionPolicy" in obj, get: obj => obj.setSectionPolicy }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        static inject = inject;
+        static Config = ConfigSchema;
+        entryConfig = __runInitializers(this, _instanceExtraInitializers);
+        configSource;
+        resolvedConfig;
+        compiledRules;
+        audits;
+        metrics = new FirewallMetrics();
+        constructor(ctx, config = {}) {
+            super(ctx, 'promptFirewall', { namespace: 'promptFirewall' });
+            this.entryConfig = structuredClone(config);
+            this.configSource = () => this.entryConfig;
+            this.resolvedConfig = resolveConfig(config);
+            this.compiledRules = compileRules(this.resolvedConfig);
+            this.audits = new AuditStore(this.resolvedConfig.audit.historySize, this.resolvedConfig.audit.highlightNewSections);
+            installSettingsSection(ctx, PROMPT_FIREWALL_SETTINGS_NAMESPACE, ConfigSchema, this.entryConfig, {
+                setSource: current => { this.configSource = current; },
+                onChange: () => { this.reloadRules(); },
+            });
+            // Cordis has registration order plus `prepend`, not numeric priorities.
+            // Prepending makes this wrapper call downstream contributors first and
+            // apply policy while their final result unwinds back through this listener.
+            ctx.on('system-prompt/assemble', async (_assembly, _context, next) => {
+                const result = await next();
+                return applyFirewall(result, {
+                    config: this.resolvedConfig,
+                    auditStore: this.audits,
+                    metrics: this.metrics,
+                    logger: ctx.logger,
+                    evaluate: section => evaluateSection(section, this.compiledRules),
+                });
+            }, { prepend: true });
+        }
+        inspectLast() {
+            return this.audits.last();
+        }
+        inspectHistory() {
+            return this.audits.entries();
+        }
+        getKnownSections() {
+            return this.audits.knownSections();
+        }
+        getMetrics() {
+            return this.metrics.snapshot();
+        }
+        getConfig() {
+            return structuredClone(this.resolvedConfig);
+        }
+        /** Return one consistent, content-safe browser inspector projection. */
+        inspect() {
+            return {
+                config: this.getConfig(),
+                last: this.inspectLast(),
+                knownSections: this.getKnownSections(),
+                metrics: this.getMetrics(),
+            };
+        }
+        evaluateSection(section) {
+            return evaluateSection(section, this.compiledRules);
+        }
+        async setSectionPolicy(name, policy, expectedRevision) {
+            if (name.length === 0)
+                throw new TypeError('section name must be non-empty');
+            const settings = this.ctx.get('settings');
+            if (settings === undefined) {
+                throw new Error('prompt-firewall settings are unavailable; mount a DSH settings provider');
+            }
+            const current = this.configSource();
+            const without = (values) => ((values ?? []).filter(value => value !== name));
+            const allowedSections = without(current.allowedSections);
+            const blockedSections = without(current.blockedSections);
+            const protectedSections = without(current.protectedSections);
+            if (policy === 'allow')
+                allowedSections.push(name);
+            else if (policy === 'block')
+                blockedSections.push(name);
+            else if (policy === 'protect')
+                protectedSections.push(name);
+            await settings.update(PROMPT_FIREWALL_SETTINGS_NAMESPACE, {
+                allowedSections,
+                blockedSections,
+                protectedSections,
+            }, expectedRevision);
+            // The settings scope has committed synchronously by this point; refresh
+            // before the asynchronous watch callback so Remote callers observe their write.
+            this.reloadRules();
+        }
+        reloadRules() {
+            this.resolvedConfig = resolveConfig(this.configSource());
+            this.compiledRules = compileRules(this.resolvedConfig);
+            this.audits.configure(this.resolvedConfig.audit.historySize, this.resolvedConfig.audit.highlightNewSections);
+        }
+    };
+})();
+export { PromptFirewall };
+export default PromptFirewall;
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAE7C,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AACrF,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAa1D,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAS1B,wBAAwB;AACxB,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAA;AACrC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,cAAc,CAAC,CAAA;AACtC,MAAM,CAAC,MAAM,kCAAkC,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAA;AAGtF,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAA;AAElC,0EAA0E;IAC7D,cAAc;sBAAS,mBAAmB;;;;iBAA1C,cAAe,SAAQ,WAAmB;;;mCAyEpD,MAAM,CAAC,SAAS,CAAC;4CAcjB,MAAM,CAAC,kBAAkB,CAAC;YAb3B,wKAAA,OAAO,6DAON;YAOD,mMAAM,gBAAgB,6DA8BrB;;;QArHD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;QACtB,MAAM,CAAC,MAAM,GAAG,YAAY,CAAA;QAEX,WAAW,GAJjB,mDAAc,CAIyB;QAC1C,YAAY,CAA4B;QACxC,cAAc,CAA8B;QAC5C,aAAa,CAAA;QACJ,MAAM,CAAY;QAClB,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;QAEhD,YAAY,GAAY,EAAE,MAAM,GAAyB,EAAE;YACzD,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAA;YAC7D,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAA;YAC1C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACtD,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EACrC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAC/C,CAAA;YAED,sBAAsB,CACpB,GAAG,EACH,kCAAkC,EAClC,YAAY,EACZ,IAAI,CAAC,WAAW,EAChB;gBACE,SAAS,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,OAAO,CAAA,CAAC,CAAC;gBACrD,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA,CAAC,CAAC;aACvC,CACF,CAAA;YAED,wEAAwE;YACxE,uEAAuE;YACvE,4EAA4E;YAC5E,GAAG,CAAC,EAAE,CAAC,wBAAwB,EAAE,KAAK,EACpC,SAAS,EACT,QAAQ,EACR,IAAI,EACqB,EAAE;gBAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;gBAC3B,OAAO,aAAa,CAAC,MAAM,EAAE;oBAC3B,MAAM,EAAE,IAAI,CAAC,cAAc;oBAC3B,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC;iBAClE,CAAC,CAAA;YACJ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACvB,CAAC;QAED,WAAW;YACT,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3B,CAAC;QAED,cAAc;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QAC9B,CAAC;QAED,gBAAgB;YACd,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAA;QACpC,CAAC;QAED,UAAU;YACR,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;QAChC,CAAC;QAED,SAAS;YACP,OAAO,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC7C,CAAC;QAED,wEAAwE;QAExE,OAAO;YACL,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE;gBACxB,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;gBACxB,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBACtC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;aAC3B,CAAA;QACH,CAAC;QAED,eAAe,CAAC,OAAyB;YACvC,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QACrD,CAAC;QAGD,KAAK,CAAC,gBAAgB,CACpB,IAAY,EACZ,MAAqB,EACrB,gBAAyB;YAEzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAA;YAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAC5F,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,CAAC,MAAqC,EAAY,EAAE,CAAC,CACnE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAC/C,CAAA;YACD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;YACxD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;YACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;YAC5D,IAAI,MAAM,KAAK,OAAO;gBAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;iBAC7C,IAAI,MAAM,KAAK,OAAO;gBAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;iBAClD,IAAI,MAAM,KAAK,SAAS;gBAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAE3D,MAAM,QAAQ,CAAC,MAAM,CAAC,kCAAkC,EAAE;gBACxD,eAAe;gBACf,eAAe;gBACf,iBAAiB;aAClB,EAAE,gBAAgB,CAAC,CAAA;YACpB,wEAAwE;YACxE,gFAAgF;YAChF,IAAI,CAAC,WAAW,EAAE,CAAA;QACpB,CAAC;QAED,WAAW;YACT,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAA;YACxD,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CACnB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EACrC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAC/C,CAAA;QACH,CAAC;;;SA/HU,cAAc;AAkI3B,eAAe,cAAc,CAAA"}

package/lib/metrics.js

@@ -0,0 +1,38 @@
+export const METRIC_NAMES = Object.freeze({
+    requestsTotal: 'dsh_prompt_firewall_requests_total',
+    sectionsTotal: 'dsh_prompt_firewall_sections_total',
+    sectionsBlockedTotal: 'dsh_prompt_firewall_sections_blocked_total',
+    charsRemovedTotal: 'dsh_prompt_firewall_chars_removed_total',
+    estimatedTokensRemovedTotal: 'dsh_prompt_firewall_estimated_tokens_removed_total',
+});
+const ZERO_SNAPSHOT = Object.freeze({
+    requestsTotal: 0,
+    sectionsTotal: 0,
+    sectionsBlockedTotal: 0,
+    charsRemovedTotal: 0,
+    estimatedTokensRemovedTotal: 0,
+});
+/** Backend-neutral, label-free counters suitable for UI or an OTel adapter. */
+export class FirewallMetrics {
+    counters = { ...ZERO_SNAPSHOT };
+    record(result) {
+        this.counters.requestsTotal += 1;
+        this.counters.sectionsTotal += result.totalSections;
+        this.counters.sectionsBlockedTotal += result.blockedSections;
+        this.counters.charsRemovedTotal += result.charsRemoved;
+        this.counters.estimatedTokensRemovedTotal += result.estimatedTokensRemoved;
+    }
+    snapshot() {
+        return { ...this.counters };
+    }
+    namedSnapshot() {
+        return Object.freeze({
+            [METRIC_NAMES.requestsTotal]: this.counters.requestsTotal,
+            [METRIC_NAMES.sectionsTotal]: this.counters.sectionsTotal,
+            [METRIC_NAMES.sectionsBlockedTotal]: this.counters.sectionsBlockedTotal,
+            [METRIC_NAMES.charsRemovedTotal]: this.counters.charsRemovedTotal,
+            [METRIC_NAMES.estimatedTokensRemovedTotal]: this.counters.estimatedTokensRemovedTotal,
+        });
+    }
+}
+//# sourceMappingURL=metrics.js.map

package/lib/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,aAAa,EAAE,oCAAoC;IACnD,aAAa,EAAE,oCAAoC;IACnD,oBAAoB,EAAE,4CAA4C;IAClE,iBAAiB,EAAE,yCAAyC;IAC5D,2BAA2B,EAAE,oDAAoD;CACzE,CAAC,CAAA;AAIX,MAAM,aAAa,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC3E,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,CAAC;IAChB,oBAAoB,EAAE,CAAC;IACvB,iBAAiB,EAAE,CAAC;IACpB,2BAA2B,EAAE,CAAC;CAC/B,CAAC,CAAA;AAEF,+EAA+E;AAC/E,MAAM,OAAO,eAAe;IAClB,QAAQ,GAAkC,EAAE,GAAG,aAAa,EAAE,CAAA;IAEtE,MAAM,CAAC,MAAyB;QAC9B,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,MAAM,CAAC,eAAe,CAAA;QAC5D,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,MAAM,CAAC,YAAY,CAAA;QACtD,IAAI,CAAC,QAAQ,CAAC,2BAA2B,IAAI,MAAM,CAAC,sBAAsB,CAAA;IAC5E,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;IAC7B,CAAC;IAED,aAAa;QACX,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YACzD,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YACzD,CAAC,YAAY,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB;YACvE,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YACjE,CAAC,YAAY,CAAC,2BAA2B,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B;SACtF,CAAC,CAAA;IACJ,CAAC;CACF"}

package/lib/presets.js

@@ -0,0 +1,23 @@
+export const CLEAN_BLOCKED_SECTIONS = Object.freeze([
+    'plugin:dsh-liangshen',
+    'plugin:dsh-ssh',
+    'plugin:task-board',
+    'plugin:dsh-desktop-launcher',
+]);
+export const PRESETS = Object.freeze({
+    clean: Object.freeze({
+        mode: 'blocklist',
+        blockedSections: [...CLEAN_BLOCKED_SECTIONS],
+    }),
+    strict: Object.freeze({
+        mode: 'allowlist',
+        unknownPluginPolicy: 'block',
+    }),
+    'audit-only': Object.freeze({
+        mode: 'audit',
+    }),
+});
+export function getPreset(name) {
+    return name === undefined ? {} : PRESETS[name];
+}
+//# sourceMappingURL=presets.js.map

package/lib/presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../src/presets.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,sBAAsB;IACtB,gBAAgB;IAChB,mBAAmB;IACnB,6BAA6B;CACrB,CAAC,CAAA;AAEX,MAAM,CAAC,MAAM,OAAO,GAAqE,MAAM,CAAC,MAAM,CAAC;IACrG,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,CAAC,GAAG,sBAAsB,CAAC;KAC7C,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,WAAW;QACjB,mBAAmB,EAAE,OAAO;KAC7B,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,OAAO;KACd,CAAC;CACH,CAAC,CAAA;AAEF,MAAM,UAAU,SAAS,CAAC,IAAgC;IACxD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAChD,CAAC"}

package/lib/rules.js

@@ -0,0 +1,103 @@
+/**
+ * Verified against the upstream DSH registry. `harness:` and `deployment:` are
+ * emitted by dsh-system-prompt; `tool:` and `tools:` are used for tool guidance.
+ * The remaining conservative namespaces are retained for compatible hosts.
+ */
+export const CORE_SECTION_PREFIXES = Object.freeze([
+    'harness:',
+    'deployment:',
+    'tool:',
+    'tools:',
+    'runtime:',
+    'system:',
+]);
+function escapeRegExp(value) {
+    return value.replace(/[|\\{}()[\]^$+?.]/g, '\\$&');
+}
+export function globToRegExp(glob) {
+    let source = '';
+    for (const character of glob) {
+        if (character === '*')
+            source += '.*';
+        else if (character === '?')
+            source += '.';
+        else
+            source += escapeRegExp(character);
+    }
+    return new RegExp(`^${source}$`, 'u');
+}
+function compilePatterns(patterns) {
+    return Object.freeze(patterns.map(source => Object.freeze({
+        source,
+        expression: globToRegExp(source),
+    })));
+}
+export function compileRules(config) {
+    return Object.freeze({
+        config,
+        protectedSections: new Set(config.protectedSections),
+        allowedSections: new Set(config.allowedSections),
+        blockedSections: new Set(config.blockedSections),
+        allowedPrefixes: Object.freeze([...config.allowedPrefixes]),
+        blockedPrefixes: Object.freeze([...config.blockedPrefixes]),
+        allowedPatterns: compilePatterns(config.allowedPatterns),
+        blockedPatterns: compilePatterns(config.blockedPatterns),
+    });
+}
+function prefixMatch(name, prefixes) {
+    return prefixes.find(prefix => name.startsWith(prefix));
+}
+function patternMatch(name, patterns) {
+    return patterns.find(pattern => pattern.expression.test(name))?.source;
+}
+export function evaluateSection(section, rules) {
+    const { name } = section;
+    if (typeof name !== 'string' || name.length === 0) {
+        throw new TypeError('prompt section name must be a non-empty string');
+    }
+    if (rules.protectedSections.has(name)) {
+        return { action: 'protect', reason: 'exact-protect', rule: name };
+    }
+    if (rules.config.protectCoreSections) {
+        const corePrefix = prefixMatch(name, CORE_SECTION_PREFIXES);
+        if (corePrefix !== undefined) {
+            return { action: 'protect', reason: 'core-protect', rule: corePrefix };
+        }
+    }
+    if (!rules.config.enabled || rules.config.mode === 'off') {
+        return { action: 'allow', reason: 'mode-off' };
+    }
+    if (rules.config.mode === 'audit') {
+        return { action: 'allow', reason: 'mode-audit' };
+    }
+    if (rules.allowedSections.has(name)) {
+        return { action: 'allow', reason: 'exact-allow', rule: name };
+    }
+    if (rules.blockedSections.has(name)) {
+        return { action: 'block', reason: 'exact-block', rule: name };
+    }
+    const allowedPrefix = prefixMatch(name, rules.allowedPrefixes);
+    if (allowedPrefix !== undefined) {
+        return { action: 'allow', reason: 'prefix-allow', rule: allowedPrefix };
+    }
+    const blockedPrefix = prefixMatch(name, rules.blockedPrefixes);
+    if (blockedPrefix !== undefined) {
+        return { action: 'block', reason: 'prefix-block', rule: blockedPrefix };
+    }
+    const allowedPattern = patternMatch(name, rules.allowedPatterns);
+    if (allowedPattern !== undefined) {
+        return { action: 'allow', reason: 'pattern-allow', rule: allowedPattern };
+    }
+    const blockedPattern = patternMatch(name, rules.blockedPatterns);
+    if (blockedPattern !== undefined) {
+        return { action: 'block', reason: 'pattern-block', rule: blockedPattern };
+    }
+    if (rules.config.mode === 'allowlist') {
+        return { action: 'block', reason: 'allowlist-default' };
+    }
+    if (rules.config.unknownPluginPolicy === 'block' && name.startsWith('plugin:')) {
+        return { action: 'block', reason: 'unknown-plugin-policy' };
+    }
+    return { action: 'allow', reason: 'blocklist-default' };
+}
+//# sourceMappingURL=rules.js.map

package/lib/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,UAAU;IACV,aAAa;IACb,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;CACD,CAAC,CAAA;AAkBX,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,IAAI,IAAI,CAAA;aAChC,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAA;;YACpC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,QAA2B;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACxD,MAAM;QACN,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;KACjC,CAAC,CAAC,CAAC,CAAA;AACN,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,iBAAiB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACpD,eAAe,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,eAAe,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAA2B;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,QAAoC;IACtE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAwB,EAAE,KAAoB;IAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACnE,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;QAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;QACxE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAC9D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAC9D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAChE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IAC3E,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAChE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IAC3E,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;AACzD,CAAC"}

package/lib/typert.host.d.ts

@@ -0,0 +1,3 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+
+export declare const TYPERT: unknown