dsh-runtime-kit 0.1.1 → 0.3.0

package/dist/hooks/policy.js

@@ -0,0 +1,196 @@
+// ============================================================================
+// Governance policy — pure functions (no I/O, no DSH types)
+//
+// Everything here is deliberately dependency-free and synchronous so it can be
+// unit-tested without a Host: secret redaction, injection detection, and the
+// extraction of paths/commands/URLs from arbitrary tool arguments.
+// ============================================================================
+export const DEFAULT_GOVERNANCE = {
+    enabled: true,
+    audit: true,
+    redaction: true,
+    injection: 'annotate',
+    sandbox: false,
+    profile: 'default',
+};
+export function normalizeGovernance(raw) {
+    const input = (raw ?? {});
+    const injection = input.injection === 'off' || input.injection === 'block' || input.injection === 'annotate'
+        ? input.injection
+        : DEFAULT_GOVERNANCE.injection;
+    return {
+        enabled: input.enabled !== false,
+        audit: input.audit !== false,
+        redaction: input.redaction !== false,
+        injection,
+        sandbox: input.sandbox === true,
+        profile: typeof input.profile === 'string' && input.profile ? input.profile : DEFAULT_GOVERNANCE.profile,
+    };
+}
+const SECRET_PATTERNS = [
+    // GitHub PAT / OAuth / app token
+    { name: 'github-token', re: /\bgh[pousr]_[A-Za-z0-9]{20,}\b/g },
+    // npm granular token
+    { name: 'npm-token', re: /\bnpm_[A-Za-z0-9]{30,}\b/g },
+    // AWS access key id
+    { name: 'aws-key', re: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g },
+    // Slack token
+    { name: 'slack-token', re: /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g },
+    // 常见 PEM 私钥块
+    {
+        name: 'private-key',
+        re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+    },
+    // Authorization: Bearer xxx
+    {
+        name: 'bearer',
+        re: /\bBearer\s+([A-Za-z0-9._~+/-]{16,}=*)/gi,
+        replace: () => 'Bearer [redacted:bearer]',
+    },
+    // scheme://user:password@host —— 只抹掉密码，保留 scheme 与用户名
+    {
+        name: 'url-password',
+        re: /\b([a-z][a-z0-9+.-]*:\/\/[^\s/:@]+):[^\s/@]+@/gi,
+        replace: (match, groups) => `${groups[0]}:***@`,
+    },
+];
+/** 抹掉一段文本里的凭据。没有命中时原样返回，便于调用方判断是否需要改写。 */
+export function redactSecrets(input) {
+    if (typeof input !== 'string' || input.length === 0)
+        return { text: input, hits: [] };
+    let text = input;
+    const hits = [];
+    for (const pattern of SECRET_PATTERNS) {
+        // 带捕获组的替换函数需要拿到分组，先收集再统一替换
+        text = text.replace(pattern.re, (...args) => {
+            hits.push(pattern.name);
+            if (pattern.replace) {
+                const groups = args.slice(1, -2);
+                return pattern.replace(String(args[0]), groups);
+            }
+            return `[redacted:${pattern.name}]`;
+        });
+    }
+    return { text, hits: [...new Set(hits)] };
+}
+// ============================================================================
+// 提示注入检测
+// ============================================================================
+/** 保守的高置信度模式：宁可漏报，也不要把正常代码/文档判成注入。 */
+const INJECTION_PATTERNS = [
+    { name: 'ignore-previous', re: /ignore\s+(?:all\s+)?(?:the\s+)?(?:previous|prior|above)\s+(?:instructions?|prompts?|rules?)/i },
+    { name: 'disregard-instructions', re: /disregard\s+(?:all\s+)?(?:the\s+)?(?:previous|prior|above|system)\s+(?:instructions?|prompts?)/i },
+    { name: 'ignore-zh', re: /忽略(?:以上|之前|前面|上述)(?:的)?(?:所有)?(?:指令|提示|要求|规则)/ },
+    { name: 'role-override', re: /\byou\s+are\s+now\s+(?:a|an|the)\s+[a-z]/i },
+    { name: 'system-tag', re: /<\|?im_start\|?>|<\/?system>/i },
+    { name: 'system-colon', re: /(?:^|\n)\s*system\s*(?:prompt|message)?\s*[:：]/i },
+    { name: 'reveal-prompt', re: /reveal\s+(?:your|the)\s+(?:system\s+)?(?:prompt|instructions)/i },
+    { name: 'hide-from-user', re: /do\s+not\s+(?:tell|inform|mention\s+to)\s+the\s+user/i },
+];
+/** 检测工具返回里是否夹带“让模型改行为”的指令。 */
+export function detectInjection(text) {
+    if (typeof text !== 'string' || text.length === 0)
+        return { hits: [] };
+    const hits = [];
+    for (const pattern of INJECTION_PATTERNS) {
+        if (pattern.re.test(text))
+            hits.push(pattern.name);
+    }
+    return { hits };
+}
+const PATH_KEY = /(?:^|[_-])(path|paths|file|files|filepath|filename|dir|directory|folder|target|root|cwd|workdir|workspace)$/i;
+const COMMAND_KEY = /(?:^|[_-])(command|cmd|script|shell|line)$/i;
+const URL_KEY = /(?:url|uri|endpoint|href|src)$/i;
+const MAX_DEPTH = 4;
+const MAX_ITEMS = 32;
+function looksLikePath(value) {
+    if (value.length === 0 || value.length > 4096)
+        return false;
+    if (value.startsWith('file:'))
+        return true;
+    if (/^[a-zA-Z]:[\\/]/.test(value))
+        return true;
+    if (value.startsWith('/') || value.startsWith('./') || value.startsWith('../'))
+        return true;
+    return /[\\/]/.test(value);
+}
+function looksLikeCommand(value) {
+    if (value.length === 0 || value.length > 4096)
+        return false;
+    return /^[\w./\\:-]+\s+/.test(value) || /^(?:sudo|git|npm|pnpm|node|python|pwsh|powershell|cmd|bash|sh|curl|rm|mv|cp|del)\b/i.test(value);
+}
+function looksLikeUrl(value) {
+    return /^https?:\/\//i.test(value);
+}
+/**
+ * 从工具参数里抽出可能触发沙箱规则的值。
+ *
+ * 工具的参数形状各不相同（`path` / `file_path` / `paths[]` / `cwd` …），这里按
+ * 键名与值的形态双重判断，宁可多抽几个交给规则匹配，也不漏掉真正的写操作。
+ */
+export function extractTargets(args) {
+    const out = { paths: [], commands: [], urls: [] };
+    const push = (list, value) => {
+        if (list.length < MAX_ITEMS && !list.includes(value))
+            list.push(value);
+    };
+    const walk = (value, key, depth) => {
+        if (depth > MAX_DEPTH)
+            return;
+        if (typeof value === 'string') {
+            if (looksLikeUrl(value) || URL_KEY.test(key)) {
+                if (looksLikeUrl(value))
+                    push(out.urls, value);
+                return;
+            }
+            if (COMMAND_KEY.test(key) || looksLikeCommand(value)) {
+                if (looksLikeCommand(value))
+                    push(out.commands, value);
+            }
+            if (PATH_KEY.test(key) || looksLikePath(value)) {
+                if (looksLikePath(value))
+                    push(out.paths, value);
+            }
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                walk(item, key, depth + 1);
+            return;
+        }
+        if (value && typeof value === 'object') {
+            for (const [childKey, child] of Object.entries(value)) {
+                walk(child, childKey, depth + 1);
+            }
+        }
+    };
+    walk(args, '', 0);
+    return out;
+}
+/** 工具名 → 文件操作类型（决定读/写/删三种文件规则里用哪一组）。 */
+export function inferFileOperation(toolName) {
+    const name = String(toolName ?? '');
+    if (/delete|remove|\brm\b|^rm[_-]|unlink|trash|purge/i.test(name))
+        return 'delete';
+    if (/write|edit|create|append|move|rename|patch|apply|replace|mkdir|touch/i.test(name))
+        return 'write';
+    return 'read';
+}
+/** 稳定短哈希：审计里只记参数指纹，不记原文。 */
+export function shortHash(value) {
+    // 延迟引入，避免把 crypto 拖进纯函数模块的静态依赖图
+    const text = (() => {
+        try {
+            return JSON.stringify(value ?? null);
+        }
+        catch {
+            return String(value);
+        }
+    })();
+    let h1 = 0x811c9dc5;
+    for (let i = 0; i < text.length; i++) {
+        h1 ^= text.charCodeAt(i);
+        h1 = Math.imul(h1, 0x01000193);
+    }
+    return (h1 >>> 0).toString(16).padStart(8, '0');
+}

package/dist/hooks/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/hooks/policy.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,4DAA4D;AAC5D,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,mEAAmE;AACnE,+EAA+E;AAkB/E,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IAClD,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,UAAU;IACrB,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAA8B,CAAC;IACvD,MAAM,SAAS,GACb,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU;QACxF,CAAC,CAAC,KAAK,CAAC,SAAS;QACjB,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,KAAK;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,KAAK;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK;QACpC,SAAS;QACT,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC/B,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO;KACzG,CAAC;AACJ,CAAC;AAaD,MAAM,eAAe,GAAoB;IACvC,iCAAiC;IACjC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iCAAiC,EAAE;IAC/D,qBAAqB;IACrB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACtD,oBAAoB;IACpB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,gCAAgC,EAAE;IACzD,cAAc;IACd,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,mCAAmC,EAAE;IAChE,aAAa;IACb;QACE,IAAI,EAAE,aAAa;QACnB,EAAE,EAAE,6EAA6E;KAClF;IACD,4BAA4B;IAC5B;QACE,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,yCAAyC;QAC7C,OAAO,EAAE,GAAG,EAAE,CAAC,0BAA0B;KAC1C;IACD,sDAAsD;IACtD;QACE,IAAI,EAAE,cAAc;QACpB,EAAE,EAAE,iDAAiD;QACrD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO;KAChD;CACF,CAAC;AAQF,0CAA0C;AAC1C,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtF,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,2BAA2B;QAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE;YACjD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAa,CAAC;gBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,aAAa,OAAO,CAAC,IAAI,GAAG,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,sCAAsC;AACtC,MAAM,kBAAkB,GAAwC;IAC9D,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,8FAA8F,EAAE;IAC/H,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,EAAE,iGAAiG,EAAE;IACzI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,+CAA+C,EAAE;IAC1E,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,2CAA2C,EAAE;IAC1E,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,+BAA+B,EAAE;IAC3D,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iDAAiD,EAAE;IAC/E,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,gEAAgE,EAAE;IAC/F,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,uDAAuD,EAAE;CACxF,CAAC;AAOF,8BAA8B;AAC9B,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAYD,MAAM,QAAQ,GAAG,8GAA8G,CAAC;AAChI,MAAM,WAAW,GAAG,6CAA6C,CAAC;AAClE,MAAM,OAAO,GAAG,iCAAiC,CAAC;AAClD,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,qFAAqF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5I,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAqB,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,KAAa,EAAE,EAAE;QAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,GAAW,EAAE,KAAa,EAAE,EAAE;QAC1D,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,IAAI,YAAY,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,IAAI,gBAAgB,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,IAAI,aAAa,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACjF,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3E,IAAI,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACvG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,gCAAgC;IAChC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;QACjB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC"}