@yadsh/dsh-prompt-firewall 0.1.0

package/lib/types/types.d.ts

@@ -0,0 +1,125 @@
+import type { AssembledSection, PromptAssembly } from '@deepseek-ai/dsh-system-prompt';
+export type FirewallMode = 'off' | 'audit' | 'blocklist' | 'allowlist';
+export type FirewallPreset = 'clean' | 'strict' | 'audit-only';
+export type UnknownPluginPolicy = 'allow' | 'block';
+export interface AuditConfig {
+    enabled: boolean;
+    logAllowed: boolean;
+    logBlocked: boolean;
+    includePreview: boolean;
+    previewChars: number;
+    historySize: number;
+    highlightNewSections: boolean;
+}
+export interface MetricsConfig {
+    enabled: boolean;
+}
+/** User-facing configuration. Every field is optional at the Cordis boundary. */
+export interface PromptFirewallConfig {
+    enabled?: boolean;
+    mode?: FirewallMode;
+    preset?: FirewallPreset;
+    blockedSections?: string[];
+    allowedSections?: string[];
+    blockedPrefixes?: string[];
+    allowedPrefixes?: string[];
+    blockedPatterns?: string[];
+    allowedPatterns?: string[];
+    protectedSections?: string[];
+    protectCoreSections?: boolean;
+    unknownPluginPolicy?: UnknownPluginPolicy;
+    audit?: Partial<AuditConfig>;
+    metrics?: Partial<MetricsConfig>;
+}
+/** Fully materialized, immutable runtime configuration. */
+export interface ResolvedPromptFirewallConfig {
+    readonly enabled: boolean;
+    readonly mode: FirewallMode;
+    readonly preset?: FirewallPreset;
+    readonly blockedSections: readonly string[];
+    readonly allowedSections: readonly string[];
+    readonly blockedPrefixes: readonly string[];
+    readonly allowedPrefixes: readonly string[];
+    readonly blockedPatterns: readonly string[];
+    readonly allowedPatterns: readonly string[];
+    readonly protectedSections: readonly string[];
+    readonly protectCoreSections: boolean;
+    readonly unknownPluginPolicy: UnknownPluginPolicy;
+    readonly audit: Readonly<AuditConfig>;
+    readonly metrics: Readonly<MetricsConfig>;
+}
+export type FirewallAction = 'allow' | 'block' | 'protect';
+export type SectionPolicy = FirewallAction | 'clear';
+export interface FirewallDecision {
+    action: FirewallAction;
+    reason: string;
+    rule?: string;
+}
+export interface PromptSectionAudit {
+    name: string;
+    decision: 'allowed' | 'blocked' | 'protected';
+    reason: string;
+    chars: number;
+    estimatedTokens: number;
+    preview?: string;
+    suspicious?: boolean;
+    isNew?: boolean;
+}
+export interface PromptAuditResult {
+    timestamp: number;
+    totalSections: number;
+    allowedSections: number;
+    blockedSections: number;
+    charsBefore: number;
+    charsAfter: number;
+    charsRemoved: number;
+    estimatedTokensBefore: number;
+    estimatedTokensAfter: number;
+    estimatedTokensRemoved: number;
+    sections: PromptSectionAudit[];
+    bypassed?: boolean;
+    bypassReason?: string;
+}
+export interface KnownSection {
+    name: string;
+    firstSeenAt: number;
+    lastSeenAt: number;
+    observations: number;
+}
+export interface PromptFirewallService {
+    inspect(): PromptFirewallInspectorSnapshot;
+    inspectLast(): PromptAuditResult | null;
+    inspectHistory(): PromptAuditResult[];
+    getKnownSections(): KnownSection[];
+    getMetrics(): PromptFirewallMetricsSnapshot;
+    getConfig(): ResolvedPromptFirewallConfig;
+    evaluateSection(section: AssembledSection): FirewallDecision;
+    setSectionPolicy(name: string, policy: SectionPolicy, expectedRevision?: number): Promise<void>;
+    reloadRules(): void;
+}
+/** JSON-safe state exposed to the browser Prompt Inspector. */
+export interface PromptFirewallInspectorSnapshot {
+    config: ResolvedPromptFirewallConfig;
+    last: PromptAuditResult | null;
+    knownSections: KnownSection[];
+    metrics: PromptFirewallMetricsSnapshot;
+}
+export interface PromptFirewallMetricsSnapshot {
+    requestsTotal: number;
+    sectionsTotal: number;
+    sectionsBlockedTotal: number;
+    charsRemovedTotal: number;
+    estimatedTokensRemovedTotal: number;
+}
+export interface FirewallLogger {
+    info(message: string): unknown;
+    warn(message: string): unknown;
+    error(message: string): unknown;
+}
+/** Upstream currently strips `complete` before the waterfall; kept for compatible hosts. */
+export type FirewallSection = AssembledSection & {
+    complete?: boolean;
+};
+export type FirewallAssembly = PromptAssembly & {
+    sections: FirewallSection[];
+};

package/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,124 @@
+{
+  "name": "@yadsh/dsh-prompt-firewall",
+  "version": "0.1.0",
+  "description": "Prompt hygiene, observability, and policy middleware for DeepSeek Harness",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xarleyn/dsh-plugins.git",
+    "directory": "plugins/dsh-prompt-firewall"
+  },
+  "homepage": "https://github.com/xarleyn/dsh-plugins/tree/main/plugins/dsh-prompt-firewall#readme",
+  "bugs": {
+    "url": "https://github.com/xarleyn/dsh-plugins/issues"
+  },
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./remote": {
+      "types": "./lib/typert.remote-client.d.ts",
+      "default": "./lib/typert.remote-client.js"
+    },
+    "./typert": {
+      "types": "./lib/typert.host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
+    "./types": {
+      "types": "./lib/types/types.d.ts",
+      "default": "./lib/types.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "external": [
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "inject": [
+        "@deepseek-ai/dsh-api-gateway",
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-settings-plugins"
+      ],
+      "platform": "web"
+    }
+  },
+  "files": [
+    "lib/**/*.js",
+    "lib/**/*.js.map",
+    "lib/**/*.d.ts",
+    "lib/client.js",
+    "cordis.patch.yml",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "node scripts/generate-typert.mjs && tsc -p tsconfig.build.json && tsdown",
+    "lint": "eslint src tests scripts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "verify": "node scripts/verify-package.mjs"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "prompt",
+    "firewall",
+    "cordis"
+  ],
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "catalog:dsh",
+    "@deepseek-ai/schemastery": "catalog:dsh",
+    "@deepseek-ai/dsh-api-gateway": "catalog:dsh",
+    "@deepseek-ai/dsh-client-runtime": "catalog:dsh",
+    "@deepseek-ai/dsh-client-ui-settings": "catalog:dsh",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "catalog:dsh",
+    "@deepseek-ai/dsh-client-ui-slots": "catalog:dsh",
+    "@deepseek-ai/dsh-settings": "catalog:dsh",
+    "@deepseek-ai/dsh-system-prompt": "catalog:dsh",
+    "@deepseek-ai/dsh-typert-protocol": "catalog:dsh",
+    "react": ">=18.2.0 <20"
+  },
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "catalog:dsh-dev",
+    "@deepseek-ai/schemastery": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-api-gateway": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-client-runtime": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-client-ui-settings": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-client-ui-slots": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-settings": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-system-prompt": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-typert-generator": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-typert-protocol": "catalog:dsh-dev",
+    "@types/node": "catalog:tooling",
+    "@types/react": "catalog:frontend-dev",
+    "react": "catalog:frontend-dev",
+    "eslint": "catalog:tooling",
+    "tsdown": "catalog:tooling",
+    "typescript": "catalog:plugin-tooling",
+    "vitest": "catalog:tooling"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}