@yadsh/dsh-prompt-firewall 0.1.0

package/lib/typert.host.js

@@ -0,0 +1,258 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+import { z } from 'zod'
+
+const _yadsh_dsh_prompt_firewall_promptFirewall_inspect_result$schema = z.object({
+  'config': z.object({
+  'enabled': z.boolean().readonly(),
+  'mode': z.union([z.literal("off"), z.literal("audit"), z.literal("blocklist"), z.literal("allowlist")]).readonly(),
+  'preset': z.union([z.literal("clean"), z.literal("strict"), z.literal("audit-only")]).readonly().optional(),
+  'blockedSections': z.array(z.string()).readonly(),
+  'allowedSections': z.array(z.string()).readonly(),
+  'blockedPrefixes': z.array(z.string()).readonly(),
+  'allowedPrefixes': z.array(z.string()).readonly(),
+  'blockedPatterns': z.array(z.string()).readonly(),
+  'allowedPatterns': z.array(z.string()).readonly(),
+  'protectedSections': z.array(z.string()).readonly(),
+  'protectCoreSections': z.boolean().readonly(),
+  'unknownPluginPolicy': z.union([z.literal("allow"), z.literal("block")]).readonly(),
+  'audit': z.object({
+  'enabled': z.boolean(),
+  'logAllowed': z.boolean(),
+  'logBlocked': z.boolean(),
+  'includePreview': z.boolean(),
+  'previewChars': z.number(),
+  'historySize': z.number(),
+  'highlightNewSections': z.boolean(),
+}).readonly(),
+  'metrics': z.object({
+  'enabled': z.boolean(),
+}).readonly(),
+}),
+  'last': z.union([z.literal(null), z.object({
+  'timestamp': z.number(),
+  'totalSections': z.number(),
+  'allowedSections': z.number(),
+  'blockedSections': z.number(),
+  'charsBefore': z.number(),
+  'charsAfter': z.number(),
+  'charsRemoved': z.number(),
+  'estimatedTokensBefore': z.number(),
+  'estimatedTokensAfter': z.number(),
+  'estimatedTokensRemoved': z.number(),
+  'sections': z.array(z.object({
+  'name': z.string(),
+  'decision': z.union([z.literal("allowed"), z.literal("blocked"), z.literal("protected")]),
+  'reason': z.string(),
+  'chars': z.number(),
+  'estimatedTokens': z.number(),
+  'preview': z.string().optional(),
+  'suspicious': z.boolean().optional(),
+  'isNew': z.boolean().optional(),
+})),
+  'bypassed': z.boolean().optional(),
+  'bypassReason': z.string().optional(),
+})]),
+  'knownSections': z.array(z.object({
+  'name': z.string(),
+  'firstSeenAt': z.number(),
+  'lastSeenAt': z.number(),
+  'observations': z.number(),
+})),
+  'metrics': z.object({
+  'requestsTotal': z.number(),
+  'sectionsTotal': z.number(),
+  'sectionsBlockedTotal': z.number(),
+  'charsRemovedTotal': z.number(),
+  'estimatedTokensRemovedTotal': z.number(),
+}),
+})
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_0$schema = z.string()
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_1$schema = z.union([z.literal("allow"), z.literal("block"), z.literal("protect"), z.literal("clear")])
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_2$schema = z.union([z.undefined(), z.number()])
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_result$schema = z.void()
+
+export const TYPERT = {
+  package: '@yadsh/dsh-prompt-firewall',
+  face: 'host',
+  schemas: [
+  ],
+  invocations: [
+    {
+      id: '@yadsh/dsh-prompt-firewall#promptFirewall/inspect',
+      service: 'promptFirewall',
+      namespace: 'promptFirewall',
+      method: 'inspect',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-prompt-firewall/types#PromptFirewallInspectorSnapshot',
+        schema: _yadsh_dsh_prompt_firewall_promptFirewall_inspect_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":120,"column":3},
+    },
+    {
+      id: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy',
+      service: 'promptFirewall',
+      namespace: 'promptFirewall',
+      method: 'setSectionPolicy',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'name',
+          wire: 'name',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:name',
+            schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_0$schema,
+          },
+        },
+        {
+          name: 'policy',
+          wire: 'policy',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-prompt-firewall/types#SectionPolicy',
+            schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_1$schema,
+          },
+        },
+        {
+          name: 'expectedRevision',
+          wire: 'expectedRevision',
+          source: 'json',
+          acceptsUndefined: true,
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:expectedRevision',
+            schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_2$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:result',
+        schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":134,"column":9},
+    },
+  ],
+  model: {
+    "services": [
+      {
+        "tags": [],
+        "key": "promptFirewall",
+        "exportName": "PromptFirewallService",
+        "members": [
+          {
+            "kind": "method",
+            "name": "inspect",
+            "signature": "inspect(): PromptFirewallInspectorSnapshot"
+          },
+          {
+            "kind": "method",
+            "name": "inspectLast",
+            "signature": "inspectLast(): PromptAuditResult | null"
+          },
+          {
+            "kind": "method",
+            "name": "inspectHistory",
+            "signature": "inspectHistory(): PromptAuditResult[]"
+          },
+          {
+            "kind": "method",
+            "name": "getKnownSections",
+            "signature": "getKnownSections(): KnownSection[]"
+          },
+          {
+            "kind": "method",
+            "name": "getMetrics",
+            "signature": "getMetrics(): PromptFirewallMetricsSnapshot"
+          },
+          {
+            "kind": "method",
+            "name": "getConfig",
+            "signature": "getConfig(): ResolvedPromptFirewallConfig"
+          },
+          {
+            "kind": "method",
+            "name": "evaluateSection",
+            "signature": "evaluateSection(section: AssembledSection): FirewallDecision"
+          },
+          {
+            "kind": "method",
+            "name": "setSectionPolicy",
+            "signature": "setSectionPolicy(name: string, policy: SectionPolicy, expectedRevision?: number): Promise<void>"
+          },
+          {
+            "kind": "method",
+            "name": "reloadRules",
+            "signature": "reloadRules(): void"
+          }
+        ],
+        "types": [
+          {
+            "name": "AuditConfig",
+            "declaration": "export interface AuditConfig {\n    enabled: boolean;\n    logAllowed: boolean;\n    logBlocked: boolean;\n    includePreview: boolean;\n    previewChars: number;\n    historySize: number;\n    highlightNewSections: boolean;\n}"
+          },
+          {
+            "name": "FirewallAction",
+            "declaration": "export type FirewallAction = 'allow' | 'block' | 'protect';"
+          },
+          {
+            "name": "FirewallDecision",
+            "declaration": "export interface FirewallDecision {\n    action: FirewallAction;\n    reason: string;\n    rule?: string;\n}"
+          },
+          {
+            "name": "FirewallMode",
+            "declaration": "export type FirewallMode = 'off' | 'audit' | 'blocklist' | 'allowlist';"
+          },
+          {
+            "name": "FirewallPreset",
+            "declaration": "export type FirewallPreset = 'clean' | 'strict' | 'audit-only';"
+          },
+          {
+            "name": "KnownSection",
+            "declaration": "export interface KnownSection {\n    name: string;\n    firstSeenAt: number;\n    lastSeenAt: number;\n    observations: number;\n}"
+          },
+          {
+            "name": "MetricsConfig",
+            "declaration": "export interface MetricsConfig {\n    enabled: boolean;\n}"
+          },
+          {
+            "name": "PromptAuditResult",
+            "declaration": "export interface PromptAuditResult {\n    timestamp: number;\n    totalSections: number;\n    allowedSections: number;\n    blockedSections: number;\n    charsBefore: number;\n    charsAfter: number;\n    charsRemoved: number;\n    estimatedTokensBefore: number;\n    estimatedTokensAfter: number;\n    estimatedTokensRemoved: number;\n    sections: PromptSectionAudit[];\n    bypassed?: boolean;\n    bypassReason?: string;\n}"
+          },
+          {
+            "name": "PromptFirewallInspectorSnapshot",
+            "declaration": "export interface PromptFirewallInspectorSnapshot {\n    config: ResolvedPromptFirewallConfig;\n    last: PromptAuditResult | null;\n    knownSections: KnownSection[];\n    metrics: PromptFirewallMetricsSnapshot;\n}"
+          },
+          {
+            "name": "PromptFirewallMetricsSnapshot",
+            "declaration": "export interface PromptFirewallMetricsSnapshot {\n    requestsTotal: number;\n    sectionsTotal: number;\n    sectionsBlockedTotal: number;\n    charsRemovedTotal: number;\n    estimatedTokensRemovedTotal: number;\n}"
+          },
+          {
+            "name": "PromptSectionAudit",
+            "declaration": "export interface PromptSectionAudit {\n    name: string;\n    decision: 'allowed' | 'blocked' | 'protected';\n    reason: string;\n    chars: number;\n    estimatedTokens: number;\n    preview?: string;\n    suspicious?: boolean;\n    isNew?: boolean;\n}"
+          },
+          {
+            "name": "ResolvedPromptFirewallConfig",
+            "declaration": "export interface ResolvedPromptFirewallConfig {\n    readonly enabled: boolean;\n    readonly mode: FirewallMode;\n    readonly preset?: FirewallPreset;\n    readonly blockedSections: readonly string[];\n    readonly allowedSections: readonly string[];\n    readonly blockedPrefixes: readonly string[];\n    readonly allowedPrefixes: readonly string[];\n    readonly blockedPatterns: readonly string[];\n    readonly allowedPatterns: readonly string[];\n    readonly protectedSections: readonly string[];\n    readonly protectCoreSections: boolean;\n    readonly unknownPluginPolicy: UnknownPluginPolicy;\n    readonly audit: Readonly<AuditConfig>;\n    readonly metrics: Readonly<MetricsConfig>;\n}"
+          },
+          {
+            "name": "SectionPolicy",
+            "declaration": "export type SectionPolicy = FirewallAction | 'clear';"
+          },
+          {
+            "name": "UnknownPluginPolicy",
+            "declaration": "export type UnknownPluginPolicy = 'allow' | 'block';"
+          }
+        ]
+      }
+    ],
+    "events": [],
+    "objects": []
+  },
+}

package/lib/typert.remote-client.d.ts

@@ -0,0 +1,24 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import type {
+  RemoteResult,
+  TypertRemoteContribution,
+} from '@deepseek-ai/dsh-typert-protocol'
+import type { PromptFirewallInspectorSnapshot, SectionPolicy } from '@yadsh/dsh-prompt-firewall/types'
+
+declare module '@deepseek-ai/dsh-typert-protocol' {
+  interface TypertRemoteNamespace$70726f6d70744669726577616c6c {
+    inspect: () => Promise<RemoteResult<PromptFirewallInspectorSnapshot>>
+    setSectionPolicy: (name: string, policy: SectionPolicy, expectedRevision?: number) => Promise<RemoteResult<void>>
+  }
+  interface TypertRemoteMap {
+    'promptFirewall/inspect': () => Promise<RemoteResult<PromptFirewallInspectorSnapshot>>
+    'promptFirewall/setSectionPolicy': (name: string, policy: SectionPolicy, expectedRevision?: number) => Promise<RemoteResult<void>>
+  }
+  interface TypertRemoteNamespaceMap {
+    'promptFirewall': TypertRemoteNamespace$70726f6d70744669726577616c6c
+  }
+}
+
+export declare const TYPERT_REMOTE: TypertRemoteContribution
+export default TYPERT_REMOTE
+//# sourceMappingURL=typert.remote-client.d.ts.map

package/lib/typert.remote-client.js

@@ -0,0 +1,141 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import { z } from 'zod'
+
+const _yadsh_dsh_prompt_firewall_promptFirewall_inspect_result$schema = z.object({
+  'config': z.object({
+  'enabled': z.boolean().readonly(),
+  'mode': z.union([z.literal("off"), z.literal("audit"), z.literal("blocklist"), z.literal("allowlist")]).readonly(),
+  'preset': z.union([z.literal("clean"), z.literal("strict"), z.literal("audit-only")]).readonly().optional(),
+  'blockedSections': z.array(z.string()).readonly(),
+  'allowedSections': z.array(z.string()).readonly(),
+  'blockedPrefixes': z.array(z.string()).readonly(),
+  'allowedPrefixes': z.array(z.string()).readonly(),
+  'blockedPatterns': z.array(z.string()).readonly(),
+  'allowedPatterns': z.array(z.string()).readonly(),
+  'protectedSections': z.array(z.string()).readonly(),
+  'protectCoreSections': z.boolean().readonly(),
+  'unknownPluginPolicy': z.union([z.literal("allow"), z.literal("block")]).readonly(),
+  'audit': z.object({
+  'enabled': z.boolean(),
+  'logAllowed': z.boolean(),
+  'logBlocked': z.boolean(),
+  'includePreview': z.boolean(),
+  'previewChars': z.number(),
+  'historySize': z.number(),
+  'highlightNewSections': z.boolean(),
+}).readonly(),
+  'metrics': z.object({
+  'enabled': z.boolean(),
+}).readonly(),
+}),
+  'last': z.union([z.literal(null), z.object({
+  'timestamp': z.number(),
+  'totalSections': z.number(),
+  'allowedSections': z.number(),
+  'blockedSections': z.number(),
+  'charsBefore': z.number(),
+  'charsAfter': z.number(),
+  'charsRemoved': z.number(),
+  'estimatedTokensBefore': z.number(),
+  'estimatedTokensAfter': z.number(),
+  'estimatedTokensRemoved': z.number(),
+  'sections': z.array(z.object({
+  'name': z.string(),
+  'decision': z.union([z.literal("allowed"), z.literal("blocked"), z.literal("protected")]),
+  'reason': z.string(),
+  'chars': z.number(),
+  'estimatedTokens': z.number(),
+  'preview': z.string().optional(),
+  'suspicious': z.boolean().optional(),
+  'isNew': z.boolean().optional(),
+})),
+  'bypassed': z.boolean().optional(),
+  'bypassReason': z.string().optional(),
+})]),
+  'knownSections': z.array(z.object({
+  'name': z.string(),
+  'firstSeenAt': z.number(),
+  'lastSeenAt': z.number(),
+  'observations': z.number(),
+})),
+  'metrics': z.object({
+  'requestsTotal': z.number(),
+  'sectionsTotal': z.number(),
+  'sectionsBlockedTotal': z.number(),
+  'charsRemovedTotal': z.number(),
+  'estimatedTokensRemovedTotal': z.number(),
+}),
+})
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_0$schema = z.string()
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_1$schema = z.union([z.literal("allow"), z.literal("block"), z.literal("protect"), z.literal("clear")])
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_2$schema = z.union([z.undefined(), z.number()])
+const _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_result$schema = z.void()
+
+export const TYPERT_REMOTE = {
+  package: '@yadsh/dsh-prompt-firewall',
+  descriptors: [
+    {
+      id: '@yadsh/dsh-prompt-firewall#promptFirewall/inspect',
+      service: 'promptFirewall',
+      namespace: 'promptFirewall',
+      method: 'inspect',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-prompt-firewall/types#PromptFirewallInspectorSnapshot',
+        schema: _yadsh_dsh_prompt_firewall_promptFirewall_inspect_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":120,"column":3},
+    },
+    {
+      id: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy',
+      service: 'promptFirewall',
+      namespace: 'promptFirewall',
+      method: 'setSectionPolicy',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'name',
+          wire: 'name',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:name',
+            schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_0$schema,
+          },
+        },
+        {
+          name: 'policy',
+          wire: 'policy',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-prompt-firewall/types#SectionPolicy',
+            schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_1$schema,
+          },
+        },
+        {
+          name: 'expectedRevision',
+          wire: 'expectedRevision',
+          source: 'json',
+          acceptsUndefined: true,
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:expectedRevision',
+            schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_parameter_2$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:result',
+        schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":134,"column":9},
+    },
+  ],
+}
+
+export default TYPERT_REMOTE

package/lib/types/audit.d.ts

@@ -0,0 +1,17 @@
+import type { AuditConfig, FirewallDecision, FirewallSection, KnownSection, PromptAuditResult, PromptSectionAudit } from './types.js';
+export declare function estimateTokens(chars: number): number;
+export declare function looksLikeAnnouncement(text: string): boolean;
+export declare function createSectionAudit(section: FirewallSection, decision: FirewallDecision, config: Readonly<AuditConfig>): PromptSectionAudit;
+export declare function createAuditResult(sections: readonly FirewallSection[], decisions: readonly FirewallDecision[], config: Readonly<AuditConfig>, bypassReason?: string): PromptAuditResult;
+export declare class AuditStore {
+    private historySize;
+    private highlightNewSections;
+    private readonly history;
+    private readonly known;
+    constructor(historySize: number, highlightNewSections: boolean);
+    configure(historySize: number, highlightNewSections?: boolean): void;
+    record(result: PromptAuditResult): void;
+    last(): PromptAuditResult | null;
+    entries(): PromptAuditResult[];
+    knownSections(): KnownSection[];
+}

package/lib/types/client/index.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const inject: string[];
+/** Mount the generated Remote contribution and register the native Settings card. */
+export declare function apply(ctx: Context): Promise<() => Promise<void>>;

package/lib/types/client/styles.d.ts

@@ -0,0 +1 @@
+export declare const styles: string;

package/lib/types/config.d.ts

@@ -0,0 +1,8 @@
+import z from '@deepseek-ai/schemastery';
+import type { AuditConfig, MetricsConfig, PromptFirewallConfig, ResolvedPromptFirewallConfig } from './types.js';
+export declare const DEFAULT_AUDIT_CONFIG: Readonly<AuditConfig>;
+export declare const DEFAULT_METRICS_CONFIG: Readonly<MetricsConfig>;
+export declare const DEFAULT_CONFIG: ResolvedPromptFirewallConfig;
+/** Runtime schema consumed by the Cordis loader. */
+export declare const ConfigSchema: z<PromptFirewallConfig>;
+export declare function resolveConfig(config?: PromptFirewallConfig): ResolvedPromptFirewallConfig;

package/lib/types/firewall.d.ts

@@ -0,0 +1,17 @@
+import type { PromptAssembly } from '@deepseek-ai/dsh-system-prompt';
+import { AuditStore } from './audit.js';
+import type { FirewallMetrics } from './metrics.js';
+import type { FirewallDecision, FirewallLogger, FirewallSection, ResolvedPromptFirewallConfig } from './types.js';
+export type SectionEvaluator = (section: FirewallSection) => FirewallDecision;
+export interface ApplyFirewallOptions {
+    config: ResolvedPromptFirewallConfig;
+    auditStore?: AuditStore;
+    metrics?: FirewallMetrics;
+    logger?: FirewallLogger;
+    evaluate?: SectionEvaluator;
+}
+/**
+ * Filter an already assembled DSH prompt. Any internal error is contained and
+ * returns the exact original object (fail-open).
+ */
+export declare function applyFirewall(assembly: PromptAssembly, options: ApplyFirewallOptions): PromptAssembly;

package/lib/types/index.d.ts

@@ -0,0 +1,46 @@
+import { Context } from '@deepseek-ai/cordis';
+import type { AssembledSection } from '@deepseek-ai/dsh-system-prompt';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import type { FirewallDecision, KnownSection, PromptAuditResult, PromptFirewallConfig, PromptFirewallInspectorSnapshot, PromptFirewallMetricsSnapshot, PromptFirewallService, ResolvedPromptFirewallConfig, SectionPolicy } from './types.js';
+export * from './audit.js';
+export * from './config.js';
+export * from './firewall.js';
+export * from './metrics.js';
+export * from './presets.js';
+export * from './rules.js';
+export * from './types.js';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        /** Inspect and evaluate prompt firewall state without accessing internals. */
+        promptFirewall: PromptFirewallService;
+    }
+}
+/** Cordis plugin ID. */
+export declare const name = "prompt-firewall";
+export declare const inject: string[];
+export declare const PROMPT_FIREWALL_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+export type Config = PromptFirewallConfig;
+export declare const Config: import("@deepseek-ai/schemastery").default<PromptFirewallConfig>;
+/** DSH Host plugin, public firewall service, and browser Remote owner. */
+export declare class PromptFirewall extends TypertRemoteService implements PromptFirewallService {
+    static inject: string[];
+    static Config: import("@deepseek-ai/schemastery").default<PromptFirewallConfig>;
+    private readonly entryConfig;
+    private configSource;
+    private resolvedConfig;
+    private compiledRules;
+    private readonly audits;
+    private readonly metrics;
+    constructor(ctx: Context, config?: PromptFirewallConfig);
+    inspectLast(): PromptAuditResult | null;
+    inspectHistory(): PromptAuditResult[];
+    getKnownSections(): KnownSection[];
+    getMetrics(): PromptFirewallMetricsSnapshot;
+    getConfig(): ResolvedPromptFirewallConfig;
+    /** Return one consistent, content-safe browser inspector projection. */
+    inspect(): PromptFirewallInspectorSnapshot;
+    evaluateSection(section: AssembledSection): FirewallDecision;
+    setSectionPolicy(name: string, policy: SectionPolicy, expectedRevision?: number): Promise<void>;
+    reloadRules(): void;
+}
+export default PromptFirewall;

package/lib/types/metrics.d.ts

@@ -0,0 +1,16 @@
+import type { PromptAuditResult, PromptFirewallMetricsSnapshot } from './types.js';
+export declare const METRIC_NAMES: Readonly<{
+    readonly requestsTotal: 'dsh_prompt_firewall_requests_total';
+    readonly sectionsTotal: 'dsh_prompt_firewall_sections_total';
+    readonly sectionsBlockedTotal: 'dsh_prompt_firewall_sections_blocked_total';
+    readonly charsRemovedTotal: 'dsh_prompt_firewall_chars_removed_total';
+    readonly estimatedTokensRemovedTotal: 'dsh_prompt_firewall_estimated_tokens_removed_total';
+}>;
+export type PromptFirewallMetricName = typeof METRIC_NAMES[keyof typeof METRIC_NAMES];
+/** Backend-neutral, label-free counters suitable for UI or an OTel adapter. */
+export declare class FirewallMetrics {
+    private counters;
+    record(result: PromptAuditResult): void;
+    snapshot(): PromptFirewallMetricsSnapshot;
+    namedSnapshot(): Readonly<Record<PromptFirewallMetricName, number>>;
+}

package/lib/types/presets.d.ts

@@ -0,0 +1,4 @@
+import type { FirewallPreset, PromptFirewallConfig } from './types.js';
+export declare const CLEAN_BLOCKED_SECTIONS: readonly ["plugin:dsh-liangshen", "plugin:dsh-ssh", "plugin:task-board", "plugin:dsh-desktop-launcher"];
+export declare const PRESETS: Readonly<Record<FirewallPreset, Readonly<PromptFirewallConfig>>>;
+export declare function getPreset(name: FirewallPreset | undefined): Readonly<PromptFirewallConfig>;

package/lib/types/rules.d.ts

@@ -0,0 +1,25 @@
+import type { FirewallDecision, FirewallSection, ResolvedPromptFirewallConfig } from './types.js';
+/**
+ * Verified against the upstream DSH registry. `harness:` and `deployment:` are
+ * emitted by dsh-system-prompt; `tool:` and `tools:` are used for tool guidance.
+ * The remaining conservative namespaces are retained for compatible hosts.
+ */
+export declare const CORE_SECTION_PREFIXES: readonly ["harness:", "deployment:", "tool:", "tools:", "runtime:", "system:"];
+interface CompiledPattern {
+    readonly source: string;
+    readonly expression: RegExp;
+}
+export interface CompiledRules {
+    readonly config: ResolvedPromptFirewallConfig;
+    readonly protectedSections: ReadonlySet<string>;
+    readonly allowedSections: ReadonlySet<string>;
+    readonly blockedSections: ReadonlySet<string>;
+    readonly allowedPrefixes: readonly string[];
+    readonly blockedPrefixes: readonly string[];
+    readonly allowedPatterns: readonly CompiledPattern[];
+    readonly blockedPatterns: readonly CompiledPattern[];
+}
+export declare function globToRegExp(glob: string): RegExp;
+export declare function compileRules(config: ResolvedPromptFirewallConfig): CompiledRules;
+export declare function evaluateSection(section: FirewallSection, rules: CompiledRules): FirewallDecision;
+export {};