@agentguard-run/burn 0.1.1 → 0.2.0

package/dist/src/status.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * One status for the whole machine.
+ *
+ * Every host's sessions in one table, with coverage stated per plane, so an
+ * OK never masquerades as full visibility. A Cursor session shows
+ * `usage:n/a`; a proxy session shows `spawns:n/a`; a session fed by both
+ * middleware and the proxy shows full coverage, because it has it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderMachineStatus = renderMachineStatus;
+const evaluate_1 = require("./detectors/evaluate");
+const LIVE_WINDOW_MS = 30 * 60 * 1000;
+function renderMachineStatus(sessions, compute, now = Date.now()) {
+    const live = sessions.filter((s) => s.closedAt === null && now - s.state.lastEventAt <= LIVE_WINDOW_MS);
+    const totalTokens = live.reduce((n, s) => n + s.state.totalTokens, 0);
+    const lines = [];
+    lines.push(`cross-tool sessions: ${live.length} live · ${(0, evaluate_1.fmt)(totalTokens)} tokens · ${compute.inFlight} model call(s) in flight · ${Math.round(compute.occupiedMs / 1000)}s occupied in last ${Math.round(compute.windowMs / 60000)} min`);
+    if (live.length === 0) {
+        lines.push('  (none in the last 30 minutes; Claude Code sessions are tracked by the hook and listed by `replay`)');
+        return lines.join('\n');
+    }
+    lines.push('  ' + pad('HOST(S)', 22) + pad('SESSION', 20) + pad('TOKENS', 9) + pad('SPAWNS', 8) + pad('DEPTH', 7) + pad('LIVE', 6) + 'COVERAGE');
+    for (const s of live) {
+        lines.push('  ' +
+            pad(s.hosts.join('+'), 22) +
+            pad(shortId(s.sessionId), 20) +
+            pad((0, evaluate_1.fmt)(s.state.totalTokens), 9) +
+            pad(String(s.state.spawnCount), 8) +
+            pad(String(s.state.maxDepth), 7) +
+            pad(String(s.liveSpawns), 6) +
+            coverageLine(s));
+    }
+    return lines.join('\n');
+}
+function coverageLine(s) {
+    const usage = s.usage.missing > 0 ? `usage:partial(${s.usage.missing} missing)` : s.usage.authoritative > 0 ? 'usage:auth' : s.usage.estimated > 0 ? 'usage:est' : `usage:${short(s.capabilities.usage)}`;
+    return `spawns:${short(s.capabilities.spawns)} depth:${short(s.capabilities.depth)} ${usage}`;
+}
+function short(c) {
+    return c === 'authoritative' ? 'auth' : c === 'estimated' ? 'est' : 'n/a';
+}
+function pad(v, w) {
+    return v.length >= w ? `${v.slice(0, w - 1)} ` : v.padEnd(w, ' ');
+}
+function shortId(v) {
+    return v.length <= 18 ? v : `${v.slice(0, 8)}…${v.slice(-8)}`;
+}

package/dist/src/types.d.ts

@@ -8,7 +8,7 @@
  * competitors, so the policy layer has to sit above all of them.
  */
 export type Verdict = 'OK' | 'WARN' | 'STOP';
-export type Detector = 'fanout' | 'sustained_burn' | 'burn_debt' | 'spawn_rate' | 'account' | 'duplicate_work';
+export type Detector = 'fanout' | 'sustained_burn' | 'burn_debt' | 'spawn_rate' | 'account' | 'duplicate_work' | 'local_compute';
 /** One normalised observation from a host transcript. */
 export interface BurnEvent {
     /** Unix milliseconds. */
@@ -114,6 +114,19 @@ export interface Thresholds {
         windowActiveMinutes: number;
         warnConcurrentSessions: number;
     };
+    /**
+     * Local inference plane (Ollama, vLLM, LM Studio). Token dollars are close
+     * to meaningless when the GPU is yours; what runs away is concurrency and
+     * occupied time. WARN-only by default: no universal STOP is honest for
+     * hardware we cannot see. Optional so pre-0.2 policy files stay valid.
+     */
+    localCompute?: {
+        windowMs: number;
+        warnConcurrent: number;
+        stopConcurrent: number | null;
+        warnOccupiedMs: number | null;
+        stopOccupiedMs: number | null;
+    };
 }
 export type Mode = 'shadow' | 'enforce';
 export interface Policy {

package/package.json

@@ -1,17 +1,41 @@
 {
   "name": "@agentguard-run/burn",
-  "version": "0.1.1",
-  "description": "Local runaway-agent circuit breaker for AI coding agents. Detects fan-out storms and sustained token burn, blocks the next spawn, and proves what happened. Nothing leaves the machine.",
+  "version": "0.2.0",
+  "description": "Local runaway-agent circuit breaker for AI coding agents and local model runtimes. One policy across Claude Code, Cursor, Codex, Ollama, vLLM, LM Studio and raw orchestrators: detects fan-out storms and sustained token burn, blocks the next spawn, and proves what happened with content-free signed receipts. Nothing leaves the machine.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "commonjs",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    },
+    "./middleware": {
+      "types": "./dist/src/adapters/raw-api.d.ts",
+      "default": "./dist/src/adapters/raw-api.js"
+    },
+    "./proxy": {
+      "types": "./dist/src/proxy/server.d.ts",
+      "default": "./dist/src/proxy/server.js"
+    },
+    "./cursor": {
+      "types": "./dist/src/adapters/cursor.d.ts",
+      "default": "./dist/src/adapters/cursor.js"
+    },
+    "./codex": {
+      "types": "./dist/src/adapters/codex.d.ts",
+      "default": "./dist/src/adapters/codex.js"
+    },
+    "./package.json": "./package.json"
+  },
   "bin": {
     "agentguard-burn": "dist/src/cli.js"
   },
   "files": [
     "dist/src",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "engines": {
@@ -21,11 +45,10 @@
     "build": "tsc -p tsconfig.json",
     "test": "tsc -p tsconfig.json && node --test \"dist/tests/**/*.test.js\"",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "replay": "node dist/cli.js replay"
-  },
-  "dependencies": {
-    "@noble/ed25519": "^3.0.0"
+    "conformance": "tsc -p tsconfig.json && node dist/src/cli.js conformance",
+    "replay": "node dist/src/cli.js replay"
   },
+  "dependencies": {},
   "devDependencies": {
     "@types/node": "^22",
     "typescript": "^5.0.0"
@@ -33,6 +56,10 @@
   "keywords": [
     "agentguard",
     "claude-code",
+    "cursor",
+    "codex",
+    "ollama",
+    "vllm",
     "agents",
     "token-budget",
     "circuit-breaker",