codiedev 0.9.38 → 0.9.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/security.js +6 -1
- package/package.json +1 -1
package/dist/security.js
CHANGED
|
@@ -368,9 +368,12 @@ function buildSecurityWorkflowEvent(input, phase, source, now = Date.now) {
|
|
|
368
368
|
*/
|
|
369
369
|
function buildSecurityPromptEvent(input, source, now = Date.now, policy) {
|
|
370
370
|
const sessionId = input.session_id ?? input.sessionId ?? "";
|
|
371
|
-
if (!sessionId || !input.prompt
|
|
371
|
+
if (!sessionId || !input.prompt) {
|
|
372
372
|
return null;
|
|
373
373
|
}
|
|
374
|
+
const decision = evaluatePromptSecurity(input.prompt, policy, source);
|
|
375
|
+
if (decision.action === "block")
|
|
376
|
+
return null;
|
|
374
377
|
const sanitized = redact({ prompt: input.prompt });
|
|
375
378
|
return {
|
|
376
379
|
schemaVersion: 1,
|
|
@@ -382,6 +385,8 @@ function buildSecurityPromptEvent(input, source, now = Date.now, policy) {
|
|
|
382
385
|
observedAt: now(),
|
|
383
386
|
payload: sanitized.value,
|
|
384
387
|
redactionCount: sanitized.count,
|
|
388
|
+
localDecision: decision.action === "alert" ? "alert" : undefined,
|
|
389
|
+
localCategory: decision.action === "alert" ? decision.category : undefined,
|
|
385
390
|
};
|
|
386
391
|
}
|
|
387
392
|
/** Audit-safe evidence for a blocked prompt. The secret-bearing prompt is
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "codiedev",
|
|
3
|
-
"version": "0.9.
|
|
3
|
+
"version": "0.9.39",
|
|
4
4
|
"description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
|
|
5
5
|
"bin": {
|
|
6
6
|
"codiedev": "dist/cli.js",
|