shellward 0.5.7 → 0.5.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shellward",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "AI Agent Security Middleware — 8-layer defense against prompt injection, data exfiltration & dangerous commands. DLP model: use data freely, block external leaks. Zero dependencies. SDK + OpenClaw plugin. Supports LangChain, AutoGPT, Claude Code, Cursor, OpenAI Agents.",
   "keywords": [
     "shellward",

package/src/core/engine.ts

@@ -377,6 +377,22 @@ export class ShellWard {
       return { allowed: false, level: 'CRITICAL', reason, ruleId: 'no_payment' }
     }
 
+    // Block outbound actions when sensitive data was recently accessed (DLP via Gate)
+    const outboundActions = ['send_email', 'send_message', 'post_tweet', 'http_post', 'curl_post']
+    if (outboundActions.includes(action) && this.hasSensitiveData) {
+      const reason = this.locale === 'zh'
+        ? `数据外泄拦截: 近期访问了敏感数据，禁止通过 ${action} 向外部发送`
+        : `Data exfiltration blocked: sensitive data recently accessed, ${action} denied`
+      this.log.write({
+        level: 'CRITICAL',
+        layer: 'L5',
+        action: 'block',
+        detail: `Gate denied (DLP): ${action}`,
+        pattern: 'gate_data_exfil',
+      })
+      return { allowed: false, level: 'CRITICAL', reason, ruleId: 'gate_data_exfil' }
+    }
+
     this.log.write({
       level: 'INFO',
       layer: 'L5',

package/src/index.ts

@@ -20,7 +20,7 @@ import { registerAllCommands } from './commands/index'
 import { checkForUpdate } from './update-check'
 import { runAutoCheckOnStartup } from './auto-check'
 
-const CURRENT_VERSION = '0.5.7'
+const CURRENT_VERSION = '0.5.8'
 
 // Re-export core engine for SDK usage
 export { ShellWard } from './core/engine'