@yadsh/dsh-prompt-firewall 0.2.1 → 0.2.2

package/lib/rules.js

@@ -4,30 +4,30 @@
  * The remaining conservative namespaces are retained for compatible hosts.
  */
 export const CORE_SECTION_PREFIXES = Object.freeze([
-    'harness:',
-    'deployment:',
-    'tool:',
-    'tools:',
-    'runtime:',
-    'system:',
+    "harness:",
+    "deployment:",
+    "tool:",
+    "tools:",
+    "runtime:",
+    "system:",
 ]);
 function escapeRegExp(value) {
-    return value.replace(/[|\\{}()[\]^$+?.]/g, '\\$&');
+    return value.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
 }
 export function globToRegExp(glob) {
-    let source = '';
+    let source = "";
     for (const character of glob) {
-        if (character === '*')
-            source += '.*';
-        else if (character === '?')
-            source += '.';
+        if (character === "*")
+            source += ".*";
+        else if (character === "?")
+            source += ".";
         else
             source += escapeRegExp(character);
     }
-    return new RegExp(`^${source}$`, 'u');
+    return new RegExp(`^${source}$`, "u");
 }
 function compilePatterns(patterns) {
-    return Object.freeze(patterns.map(source => Object.freeze({
+    return Object.freeze(patterns.map((source) => Object.freeze({
         source,
         expression: globToRegExp(source),
     })));
@@ -45,59 +45,60 @@ export function compileRules(config) {
     });
 }
 function prefixMatch(name, prefixes) {
-    return prefixes.find(prefix => name.startsWith(prefix));
+    return prefixes.find((prefix) => name.startsWith(prefix));
 }
 function patternMatch(name, patterns) {
-    return patterns.find(pattern => pattern.expression.test(name))?.source;
+    return patterns.find((pattern) => pattern.expression.test(name))?.source;
 }
 export function evaluateSection(section, rules) {
     const { name } = section;
-    if (typeof name !== 'string' || name.length === 0) {
-        throw new TypeError('prompt section name must be a non-empty string');
+    if (typeof name !== "string" || name.length === 0) {
+        throw new TypeError("prompt section name must be a non-empty string");
     }
     if (rules.protectedSections.has(name)) {
-        return { action: 'protect', reason: 'exact-protect', rule: name };
+        return { action: "protect", reason: "exact-protect", rule: name };
     }
     if (rules.config.protectCoreSections) {
         const corePrefix = prefixMatch(name, CORE_SECTION_PREFIXES);
         if (corePrefix !== undefined) {
-            return { action: 'protect', reason: 'core-protect', rule: corePrefix };
+            return { action: "protect", reason: "core-protect", rule: corePrefix };
         }
     }
-    if (!rules.config.enabled || rules.config.mode === 'off') {
-        return { action: 'allow', reason: 'mode-off' };
+    if (!rules.config.enabled || rules.config.mode === "off") {
+        return { action: "allow", reason: "mode-off" };
     }
-    if (rules.config.mode === 'audit') {
-        return { action: 'allow', reason: 'mode-audit' };
+    if (rules.config.mode === "audit") {
+        return { action: "allow", reason: "mode-audit" };
     }
     if (rules.allowedSections.has(name)) {
-        return { action: 'allow', reason: 'exact-allow', rule: name };
+        return { action: "allow", reason: "exact-allow", rule: name };
     }
     if (rules.blockedSections.has(name)) {
-        return { action: 'block', reason: 'exact-block', rule: name };
+        return { action: "block", reason: "exact-block", rule: name };
     }
     const allowedPrefix = prefixMatch(name, rules.allowedPrefixes);
     if (allowedPrefix !== undefined) {
-        return { action: 'allow', reason: 'prefix-allow', rule: allowedPrefix };
+        return { action: "allow", reason: "prefix-allow", rule: allowedPrefix };
     }
     const blockedPrefix = prefixMatch(name, rules.blockedPrefixes);
     if (blockedPrefix !== undefined) {
-        return { action: 'block', reason: 'prefix-block', rule: blockedPrefix };
+        return { action: "block", reason: "prefix-block", rule: blockedPrefix };
     }
     const allowedPattern = patternMatch(name, rules.allowedPatterns);
     if (allowedPattern !== undefined) {
-        return { action: 'allow', reason: 'pattern-allow', rule: allowedPattern };
+        return { action: "allow", reason: "pattern-allow", rule: allowedPattern };
     }
     const blockedPattern = patternMatch(name, rules.blockedPatterns);
     if (blockedPattern !== undefined) {
-        return { action: 'block', reason: 'pattern-block', rule: blockedPattern };
+        return { action: "block", reason: "pattern-block", rule: blockedPattern };
     }
-    if (rules.config.mode === 'allowlist') {
-        return { action: 'block', reason: 'allowlist-default' };
+    if (rules.config.mode === "allowlist") {
+        return { action: "block", reason: "allowlist-default" };
     }
-    if (rules.config.unknownPluginPolicy === 'block' && name.startsWith('plugin:')) {
-        return { action: 'block', reason: 'unknown-plugin-policy' };
+    if (rules.config.unknownPluginPolicy === "block" &&
+        name.startsWith("plugin:")) {
+        return { action: "block", reason: "unknown-plugin-policy" };
     }
-    return { action: 'allow', reason: 'blocklist-default' };
+    return { action: "allow", reason: "blocklist-default" };
 }
 //# sourceMappingURL=rules.js.map

package/lib/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,UAAU;IACV,aAAa;IACb,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;CACD,CAAC,CAAA;AAkBX,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,IAAI,IAAI,CAAA;aAChC,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAA;;YACpC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,QAA2B;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACxD,MAAM;QACN,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;KACjC,CAAC,CAAC,CAAC,CAAA;AACN,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,iBAAiB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACpD,eAAe,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,eAAe,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAA2B;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,QAAoC;IACtE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAwB,EAAE,KAAoB;IAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACnE,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;QAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;QACxE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAC9D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAC9D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAChE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IAC3E,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IAChE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IAC3E,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;AACzD,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,UAAU;IACV,aAAa;IACb,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;CACD,CAAC,CAAC;AAkBZ,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,IAAI,IAAI,CAAC;aACjC,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAC;;YACrC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CACtB,QAA2B;IAE3B,OAAO,MAAM,CAAC,MAAM,CAClB,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACtB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM;QACN,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;KACjC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,MAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,iBAAiB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACpD,eAAe,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,eAAe,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,QAA2B;IAE3B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,QAAoC;IAEpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAwB,EACxB,KAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC5D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACjE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACjE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1D,CAAC;IACD,IACE,KAAK,CAAC,MAAM,CAAC,mBAAmB,KAAK,OAAO;QAC5C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAC1B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAC1D,CAAC"}

package/lib/typert.host.js

@@ -90,7 +90,7 @@ export const TYPERT = {
         typeSymbol: '@yadsh/dsh-prompt-firewall/types#PromptFirewallInspectorSnapshot',
         schema: _yadsh_dsh_prompt_firewall_promptFirewall_inspect_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":136,"column":3},
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":152,"column":3},
     },
     {
       id: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy',
@@ -136,7 +136,7 @@ export const TYPERT = {
         typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:result',
         schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":150,"column":9},
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":166,"column":9},
     },
   ],
   model: {
@@ -184,7 +184,7 @@ export const TYPERT = {
           {
             "kind": "method",
             "name": "setSectionPolicy",
-            "signature": "setSectionPolicy(name: string, policy: SectionPolicy, expectedRevision?: number): Promise<void>"
+            "signature": "setSectionPolicy( name: string, policy: SectionPolicy, expectedRevision?: number, ): Promise<void>"
           },
           {
             "kind": "method",
@@ -199,7 +199,7 @@ export const TYPERT = {
           },
           {
             "name": "FirewallAction",
-            "declaration": "export type FirewallAction = 'allow' | 'block' | 'protect';"
+            "declaration": "export type FirewallAction = \"allow\" | \"block\" | \"protect\";"
           },
           {
             "name": "FirewallDecision",
@@ -207,11 +207,11 @@ export const TYPERT = {
           },
           {
             "name": "FirewallMode",
-            "declaration": "export type FirewallMode = 'off' | 'audit' | 'blocklist' | 'allowlist';"
+            "declaration": "export type FirewallMode = \"off\" | \"audit\" | \"blocklist\" | \"allowlist\";"
           },
           {
             "name": "FirewallPreset",
-            "declaration": "export type FirewallPreset = 'clean' | 'strict' | 'audit-only';"
+            "declaration": "export type FirewallPreset = \"clean\" | \"strict\" | \"audit-only\";"
           },
           {
             "name": "KnownSection",
@@ -235,7 +235,7 @@ export const TYPERT = {
           },
           {
             "name": "PromptSectionAudit",
-            "declaration": "export interface PromptSectionAudit {\n    name: string;\n    decision: 'allowed' | 'blocked' | 'protected';\n    reason: string;\n    chars: number;\n    estimatedTokens: number;\n    preview?: string;\n    suspicious?: boolean;\n    isNew?: boolean;\n}"
+            "declaration": "export interface PromptSectionAudit {\n    name: string;\n    decision: \"allowed\" | \"blocked\" | \"protected\";\n    reason: string;\n    chars: number;\n    estimatedTokens: number;\n    preview?: string;\n    suspicious?: boolean;\n    isNew?: boolean;\n}"
           },
           {
             "name": "ResolvedPromptFirewallConfig",
@@ -243,11 +243,11 @@ export const TYPERT = {
           },
           {
             "name": "SectionPolicy",
-            "declaration": "export type SectionPolicy = FirewallAction | 'clear';"
+            "declaration": "export type SectionPolicy = FirewallAction | \"clear\";"
           },
           {
             "name": "UnknownPluginPolicy",
-            "declaration": "export type UnknownPluginPolicy = 'allow' | 'block';"
+            "declaration": "export type UnknownPluginPolicy = \"allow\" | \"block\";"
           }
         ]
       }

package/lib/typert.remote-client.js

@@ -87,7 +87,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-prompt-firewall/types#PromptFirewallInspectorSnapshot',
         schema: _yadsh_dsh_prompt_firewall_promptFirewall_inspect_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":136,"column":3},
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":152,"column":3},
     },
     {
       id: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy',
@@ -133,7 +133,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-prompt-firewall#promptFirewall/setSectionPolicy:result',
         schema: _yadsh_dsh_prompt_firewall_promptFirewall_setSectionPolicy_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":150,"column":9},
+      sourceLocation: {"file":"packages/dsh-prompt-firewall/src/index.ts","line":166,"column":9},
     },
   ],
 }

package/lib/types/audit.d.ts

@@ -1,4 +1,4 @@
-import type { AuditConfig, FirewallDecision, FirewallSection, KnownSection, PromptAuditResult, PromptSectionAudit } from './types.js';
+import type { AuditConfig, FirewallDecision, FirewallSection, KnownSection, PromptAuditResult, PromptSectionAudit } from "./types.js";
 export declare function estimateTokens(chars: number): number;
 export declare function looksLikeAnnouncement(text: string): boolean;
 export declare function createSectionAudit(section: FirewallSection, decision: FirewallDecision, config: Readonly<AuditConfig>): PromptSectionAudit;

package/lib/types/client/index.d.ts

@@ -1,4 +1,4 @@
-import type { Context } from '@deepseek-ai/cordis';
+import type { Context } from "@deepseek-ai/cordis";
 export declare const inject: string[];
 /** Mount the generated Remote contribution and register the native Settings card. */
 export declare function apply(ctx: Context): Promise<() => Promise<void>>;

package/lib/types/client/sections.d.ts

@@ -1,5 +1,5 @@
-import type { PromptFirewallConfig, PromptFirewallInspectorSnapshot, SectionPolicy } from '../types.js';
-export type RuleField = 'allowedSections' | 'blockedSections' | 'protectedSections' | 'allowedPrefixes' | 'blockedPrefixes' | 'allowedPatterns' | 'blockedPatterns';
+import type { PromptFirewallConfig, PromptFirewallInspectorSnapshot, SectionPolicy } from "../types.js";
+export type RuleField = "allowedSections" | "blockedSections" | "protectedSections" | "allowedPrefixes" | "blockedPrefixes" | "allowedPatterns" | "blockedPatterns";
 export declare function Toggle(props: {
     checked: boolean;
     disabled: boolean;

package/lib/types/config.d.ts

@@ -1,5 +1,5 @@
-import z from '@deepseek-ai/schemastery';
-import type { AuditConfig, MetricsConfig, PromptFirewallConfig, ResolvedPromptFirewallConfig } from './types.js';
+import z from "@deepseek-ai/schemastery";
+import type { AuditConfig, MetricsConfig, PromptFirewallConfig, ResolvedPromptFirewallConfig } from "./types.js";
 export declare const DEFAULT_AUDIT_CONFIG: Readonly<AuditConfig>;
 export declare const DEFAULT_METRICS_CONFIG: Readonly<MetricsConfig>;
 export declare const DEFAULT_CONFIG: ResolvedPromptFirewallConfig;

package/lib/types/firewall.d.ts

@@ -1,7 +1,7 @@
-import type { PromptAssembly } from '@deepseek-ai/dsh-system-prompt';
-import { AuditStore } from './audit.js';
-import type { FirewallMetrics } from './metrics.js';
-import type { FirewallDecision, FirewallLogger, FirewallSection, ResolvedPromptFirewallConfig } from './types.js';
+import type { PromptAssembly } from "@deepseek-ai/dsh-system-prompt";
+import { AuditStore } from "./audit.js";
+import type { FirewallMetrics } from "./metrics.js";
+import type { FirewallDecision, FirewallLogger, FirewallSection, ResolvedPromptFirewallConfig } from "./types.js";
 export type SectionEvaluator = (section: FirewallSection) => FirewallDecision;
 export interface ApplyFirewallOptions {
     config: ResolvedPromptFirewallConfig;

package/lib/types/index.d.ts

@@ -1,15 +1,15 @@
-import { Context } from '@deepseek-ai/cordis';
-import type { AssembledSection } from '@deepseek-ai/dsh-system-prompt';
-import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
-import type { FirewallDecision, KnownSection, PromptAuditResult, PromptFirewallConfig, PromptFirewallInspectorSnapshot, PromptFirewallMetricsSnapshot, PromptFirewallService, ResolvedPromptFirewallConfig, SectionPolicy } from './types.js';
-export * from './audit.js';
-export * from './config.js';
-export * from './firewall.js';
-export * from './metrics.js';
-export * from './presets.js';
-export * from './rules.js';
-export * from './types.js';
-declare module '@deepseek-ai/cordis' {
+import { Context } from "@deepseek-ai/cordis";
+import type { AssembledSection } from "@deepseek-ai/dsh-system-prompt";
+import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
+import type { FirewallDecision, KnownSection, PromptAuditResult, PromptFirewallConfig, PromptFirewallInspectorSnapshot, PromptFirewallMetricsSnapshot, PromptFirewallService, ResolvedPromptFirewallConfig, SectionPolicy } from "./types.js";
+export * from "./audit.js";
+export * from "./config.js";
+export * from "./firewall.js";
+export * from "./metrics.js";
+export * from "./presets.js";
+export * from "./rules.js";
+export * from "./types.js";
+declare module "@deepseek-ai/cordis" {
     interface Context {
         /** Inspect and evaluate prompt firewall state without accessing internals. */
         promptFirewall: PromptFirewallService;

package/lib/types/metrics.d.ts

@@ -1,12 +1,12 @@
-import type { PromptAuditResult, PromptFirewallMetricsSnapshot } from './types.js';
+import type { PromptAuditResult, PromptFirewallMetricsSnapshot } from "./types.js";
 export declare const METRIC_NAMES: Readonly<{
-    readonly requestsTotal: 'dsh_prompt_firewall_requests_total';
-    readonly sectionsTotal: 'dsh_prompt_firewall_sections_total';
-    readonly sectionsBlockedTotal: 'dsh_prompt_firewall_sections_blocked_total';
-    readonly charsRemovedTotal: 'dsh_prompt_firewall_chars_removed_total';
-    readonly estimatedTokensRemovedTotal: 'dsh_prompt_firewall_estimated_tokens_removed_total';
+    readonly requestsTotal: "dsh_prompt_firewall_requests_total";
+    readonly sectionsTotal: "dsh_prompt_firewall_sections_total";
+    readonly sectionsBlockedTotal: "dsh_prompt_firewall_sections_blocked_total";
+    readonly charsRemovedTotal: "dsh_prompt_firewall_chars_removed_total";
+    readonly estimatedTokensRemovedTotal: "dsh_prompt_firewall_estimated_tokens_removed_total";
 }>;
-export type PromptFirewallMetricName = typeof METRIC_NAMES[keyof typeof METRIC_NAMES];
+export type PromptFirewallMetricName = (typeof METRIC_NAMES)[keyof typeof METRIC_NAMES];
 /** Backend-neutral, label-free counters suitable for UI or an OTel adapter. */
 export declare class FirewallMetrics {
     private counters;

package/lib/types/presets.d.ts

@@ -1,4 +1,4 @@
-import type { FirewallPreset, PromptFirewallConfig } from './types.js';
+import type { FirewallPreset, PromptFirewallConfig } from "./types.js";
 export declare const CLEAN_BLOCKED_SECTIONS: readonly ["plugin:dsh-liangshen", "plugin:dsh-ssh", "plugin:task-board", "plugin:dsh-desktop-launcher"];
 export declare const PRESETS: Readonly<Record<FirewallPreset, Readonly<PromptFirewallConfig>>>;
 export declare function getPreset(name: FirewallPreset | undefined): Readonly<PromptFirewallConfig>;

package/lib/types/rules.d.ts

@@ -1,4 +1,4 @@
-import type { FirewallDecision, FirewallSection, ResolvedPromptFirewallConfig } from './types.js';
+import type { FirewallDecision, FirewallSection, ResolvedPromptFirewallConfig } from "./types.js";
 /**
  * Verified against the upstream DSH registry. `harness:` and `deployment:` are
  * emitted by dsh-system-prompt; `tool:` and `tools:` are used for tool guidance.

package/lib/types/types.d.ts

@@ -1,7 +1,7 @@
-import type { AssembledSection, PromptAssembly } from '@deepseek-ai/dsh-system-prompt';
-export type FirewallMode = 'off' | 'audit' | 'blocklist' | 'allowlist';
-export type FirewallPreset = 'clean' | 'strict' | 'audit-only';
-export type UnknownPluginPolicy = 'allow' | 'block';
+import type { AssembledSection, PromptAssembly } from "@deepseek-ai/dsh-system-prompt";
+export type FirewallMode = "off" | "audit" | "blocklist" | "allowlist";
+export type FirewallPreset = "clean" | "strict" | "audit-only";
+export type UnknownPluginPolicy = "allow" | "block";
 export interface AuditConfig {
     enabled: boolean;
     logAllowed: boolean;
@@ -48,8 +48,8 @@ export interface ResolvedPromptFirewallConfig {
     readonly audit: Readonly<AuditConfig>;
     readonly metrics: Readonly<MetricsConfig>;
 }
-export type FirewallAction = 'allow' | 'block' | 'protect';
-export type SectionPolicy = FirewallAction | 'clear';
+export type FirewallAction = "allow" | "block" | "protect";
+export type SectionPolicy = FirewallAction | "clear";
 export interface FirewallDecision {
     action: FirewallAction;
     reason: string;
@@ -57,7 +57,7 @@ export interface FirewallDecision {
 }
 export interface PromptSectionAudit {
     name: string;
-    decision: 'allowed' | 'blocked' | 'protected';
+    decision: "allowed" | "blocked" | "protected";
     reason: string;
     chars: number;
     estimatedTokens: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-prompt-firewall",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Prompt hygiene, observability, and policy middleware for DeepSeek Harness",
   "repository": {
     "type": "git",
@@ -93,7 +93,7 @@
   },
   "dependencies": {
     "zod": "^4.4.3",
-    "@yadsh/dsh-plugin-log": "^0.3.0"
+    "@yadsh/dsh-plugin-log": "^0.3.1"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
@@ -131,6 +131,8 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "verify": "node scripts/verify-package.mjs"
+    "verify:package": "node scripts/verify-package.mjs",
+    "verify": "pnpm run verify:package",
+    "check": "pnpm run lint && pnpm run typecheck && pnpm run test && pnpm run build && pnpm run verify"
   }
 }