dsh-dlp 0.1.0 → 0.3.0

package/lib/types/sink.d.ts

@@ -28,7 +28,7 @@ export declare function newDecisionId(): DecisionId;
 /** Payload version carried inside every record this plugin writes. */
 export declare const RECORD_VERSION = 1;
 /** What produced one audit record. */
-export type AuditKind = 'guard-deny' | 'pre-execute-deny' | 'result-redaction' | 'telemetry-redaction' | 'audit-failure';
+export type AuditKind = 'guard-deny' | 'pre-execute-deny' | 'execution-mutation' | 'result-redaction' | 'telemetry-redaction' | 'assistant-image-neutralized' | 'audit-failure';
 /** One durable record. Never carries matched secret text. */
 export interface AuditRecord {
     readonly v: number;
@@ -54,8 +54,25 @@ export interface AuditRecord {
     readonly spans?: readonly RedactedSpan[];
     /** Set when the scanned input exceeded the byte cap. */
     readonly truncatedScan?: boolean;
+    /**
+     * Runs of each invisible-character class the scanned text carried, by rule
+     * id. Counts only: the characters themselves are content, and a hidden
+     * instruction is exactly the content this file must not repeat.
+     */
+    readonly unicode?: Readonly<Record<string, number>>;
     /** Telemetry record channel, for `telemetry-redaction`. */
     readonly channel?: string;
+    /** Fields another plugin rewrote after the call was logged, for `execution-mutation`. */
+    readonly mutatedFields?: readonly string[];
+    /** Tool name the session log recorded, when a rewrite changed it. */
+    readonly originalTool?: string;
+    /**
+     * Hostname of a neutralised remote image destination, for
+     * `assistant-image-neutralized`. The hostname only: a path and a query
+     * string are where an exfiltration payload rides, and this file must not
+     * carry it.
+     */
+    readonly host?: string;
 }
 /** Append-only JSONL sink for this plugin's decisions. */
 export declare class AuditSink {

package/lib/types/telemetry.d.ts

@@ -25,9 +25,24 @@
  * workspace path.
  * @module dsh-dlp/telemetry
  */
-import type { SessionTelemetryRecord } from '@deepseek-ai/dsh-session-telemetry';
+import type { SessionTelemetryRecord, SessionTelemetrySharingStatus } from '@deepseek-ai/dsh-session-telemetry';
 import type { ResolvedPolicy } from './policy.ts';
 import { type RedactedSpan, type SpanHasher } from './redaction.ts';
+/**
+ * What to tell the operator when the redaction seam will never dispatch.
+ *
+ * A `session-telemetry/record` listener mounts successfully and never runs
+ * unless a backend built a coordinator, and the shipped default builds none:
+ * the mode is `DISABLED`, so nothing is exported and nothing is dispatched.
+ * That is the safe posture, not a leak — but an operator who mounts a redactor
+ * under it sees every signal of success and has verified nothing. The
+ * backend's own `sharing` disclosure is the resolved answer, so this never
+ * guesses at `DSH_TELEMETRY_MODE`, which is only the base patch's default
+ * expression for a `mode` a deployment can also set directly.
+ * @param sharing - the mounted backend's disclosure, or `undefined` when no backend is mounted.
+ * @returns the line to report, or `undefined` when the seam does dispatch.
+ */
+export declare function telemetrySeamNotice(sharing: SessionTelemetrySharingStatus | undefined): string | undefined;
 /** Rule identity recorded when a workspace path is replaced. */
 export declare const WORKSPACE_PATH_RULE = "dsh-dlp/telemetry-workspace-path";
 /** One redacted telemetry record and what was replaced in it. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-dlp",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction",
   "license": "MIT",
   "author": "Ivan Tyshchenko <nsof@protonmail.com>",
@@ -27,6 +27,9 @@
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
+  "bin": {
+    "dsh-dlp": "lib/cli.js"
+  },
   "exports": {
     ".": {
       "types": "./lib/types/index.d.ts",