@agentguard-run/burn 0.1.1 → 0.2.1

package/dist/src/status.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * One status for the whole machine.
+ *
+ * Every host's sessions in one table, with coverage stated per plane, so an
+ * OK never masquerades as full visibility. A Cursor session shows
+ * `usage:n/a`; a proxy session shows `spawns:n/a`; a session fed by both
+ * middleware and the proxy shows full coverage, because it has it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readHookSessions = readHookSessions;
+exports.renderHostHealth = renderHostHealth;
+exports.renderMachineStatus = renderMachineStatus;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const evaluate_1 = require("./detectors/evaluate");
+const events_1 = require("./events");
+const pre_tool_use_1 = require("./hook/pre-tool-use");
+const LIVE_WINDOW_MS = 30 * 60 * 1000;
+/**
+ * Claude Code sessions live in the hook's own files (they carry a transcript
+ * cursor the gateway sessions do not). Read them into the same view so the
+ * table shows every host, not just the new ones.
+ */
+function readHookSessions(home) {
+    const dir = (0, node_path_1.join)(home, 'sessions');
+    const out = [];
+    let names = [];
+    try {
+        names = (0, node_fs_1.readdirSync)(dir).filter((n) => n.endsWith('.json') && !n.startsWith('gw-'));
+    }
+    catch {
+        return out;
+    }
+    for (const name of names) {
+        try {
+            const raw = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(dir, name), 'utf8'));
+            if (!raw.cursor || !raw.state)
+                continue;
+            const state = (0, pre_tool_use_1.inflateHookSession)(raw);
+            out.push({
+                sessionId: state.sessionId,
+                hosts: ['claude-code'],
+                capabilities: events_1.CAPABILITIES['claude-code'],
+                state,
+                liveSpawns: 0,
+                usage: { authoritative: state.totalTokens > 0 ? 1 : 0, estimated: 0, missing: 0 },
+                decisions: 0,
+                wouldBlock: 0,
+                closedAt: null,
+            });
+        }
+        catch {
+            /* half-written or foreign file: skip */
+        }
+    }
+    return out;
+}
+function renderHostHealth(hosts) {
+    const lines = ['hosts:'];
+    for (const h of hosts) {
+        const name = h.host === 'claude' ? 'claude-code' : h.host;
+        let state;
+        if (!h.installed)
+            state = h.hostPresent ? `not installed  (agentguard-burn init ${h.host} --write)` : 'not present on this machine';
+        else if (!h.commandExists)
+            state = `INSTALLED BUT BROKEN: hook command not found on disk, host will fail open  (re-run: agentguard-burn init ${h.host} --write)`;
+        else
+            state = `installed, hook command ok  (${h.file.replace(process.env.HOME ?? '', '~')})`;
+        lines.push(`  ${name.padEnd(13)} ${state}`);
+    }
+    return lines.join('\n');
+}
+function renderMachineStatus(sessions, compute, now = Date.now()) {
+    const live = sessions.filter((s) => s.closedAt === null && now - s.state.lastEventAt <= LIVE_WINDOW_MS).sort((a, b) => b.state.lastEventAt - a.state.lastEventAt);
+    const totalTokens = live.reduce((n, s) => n + s.state.totalTokens, 0);
+    const lines = [];
+    lines.push(`sessions: ${live.length} active in the last 30 min · ${(0, evaluate_1.fmt)(totalTokens)} tokens · ${compute.inFlight} model call(s) in flight · ${Math.round(compute.occupiedMs / 1000)}s occupied in last ${Math.round(compute.windowMs / 60000)} min`);
+    if (live.length === 0) {
+        lines.push('  (none)');
+        return lines.join('\n');
+    }
+    lines.push('  ' + pad('HOST(S)', 22) + pad('SESSION', 20) + pad('TOKENS', 9) + pad('SPAWNS', 8) + pad('DEPTH', 7) + pad('LAST', 8) + 'COVERAGE');
+    for (const s of live) {
+        lines.push('  ' +
+            pad(s.hosts.join('+'), 22) +
+            pad(shortId(s.sessionId), 20) +
+            pad((0, evaluate_1.fmt)(s.state.totalTokens), 9) +
+            pad(String(s.state.spawnCount), 8) +
+            pad(String(s.state.maxDepth), 7) +
+            pad(ago(now - s.state.lastEventAt), 8) +
+            coverageLine(s));
+    }
+    return lines.join('\n');
+}
+function ago(ms) {
+    const m = Math.floor(ms / 60000);
+    return m < 1 ? 'now' : `${m}m ago`;
+}
+function coverageLine(s) {
+    const usage = s.usage.missing > 0 ? `usage:partial(${s.usage.missing} missing)` : s.usage.authoritative > 0 ? 'usage:auth' : s.usage.estimated > 0 ? 'usage:est' : `usage:${short(s.capabilities.usage)}`;
+    return `spawns:${short(s.capabilities.spawns)} depth:${short(s.capabilities.depth)} ${usage}`;
+}
+function short(c) {
+    return c === 'authoritative' ? 'auth' : c === 'estimated' ? 'est' : 'n/a';
+}
+function pad(v, w) {
+    return v.length >= w ? `${v.slice(0, w - 1)} ` : v.padEnd(w, ' ');
+}
+function shortId(v) {
+    return v.length <= 18 ? v : `${v.slice(0, 8)}…${v.slice(-8)}`;
+}

package/dist/src/types.d.ts

@@ -8,7 +8,7 @@
  * competitors, so the policy layer has to sit above all of them.
  */
 export type Verdict = 'OK' | 'WARN' | 'STOP';
-export type Detector = 'fanout' | 'sustained_burn' | 'burn_debt' | 'spawn_rate' | 'account' | 'duplicate_work';
+export type Detector = 'fanout' | 'sustained_burn' | 'burn_debt' | 'spawn_rate' | 'account' | 'duplicate_work' | 'local_compute';
 /** One normalised observation from a host transcript. */
 export interface BurnEvent {
     /** Unix milliseconds. */
@@ -114,6 +114,19 @@ export interface Thresholds {
         windowActiveMinutes: number;
         warnConcurrentSessions: number;
     };
+    /**
+     * Local inference plane (Ollama, vLLM, LM Studio). Token dollars are close
+     * to meaningless when the GPU is yours; what runs away is concurrency and
+     * occupied time. WARN-only by default: no universal STOP is honest for
+     * hardware we cannot see. Optional so pre-0.2 policy files stay valid.
+     */
+    localCompute?: {
+        windowMs: number;
+        warnConcurrent: number;
+        stopConcurrent: number | null;
+        warnOccupiedMs: number | null;
+        stopOccupiedMs: number | null;
+    };
 }
 export type Mode = 'shadow' | 'enforce';
 export interface Policy {

package/fixtures/codex-0.151.0-pretooluse.json

@@ -0,0 +1,49 @@
+{
+  "captured_from": "codex-cli 0.151.0, 2026-09-03, codex exec with -c hooks.PreToolUse inline; --dangerously-bypass-hook-trust",
+  "payloads": [
+    {
+      "session_id": "01a069d3-5fc8-7470-8c95-1b42e7206746",
+      "turn_id": "01a069d3-6018-7523-a26e-eea10123676c",
+      "transcript_path": "/Users/example/.codex/sessions/2026/09/03/rollout-example.jsonl",
+      "cwd": "/Users/example/project",
+      "hook_event_name": "PreToolUse",
+      "model": "gpt-5.4-mini",
+      "permission_mode": "bypassPermissions",
+      "tool_name": "Bash",
+      "tool_input": {
+        "command": "echo CANARY_OK"
+      },
+      "tool_use_id": "call_NmxrZob0I2KFC8ChNe2PduGX"
+    },
+    {
+      "session_id": "01a069d4-d356-73b3-9440-1c4440319de8",
+      "turn_id": "01a069d4-d3b2-7593-85ec-8a0281f51bf1",
+      "transcript_path": "/Users/example/.codex/sessions/2026/09/03/rollout-example.jsonl",
+      "cwd": "/Users/example/project",
+      "hook_event_name": "PreToolUse",
+      "model": "gpt-5.4-mini",
+      "permission_mode": "bypassPermissions",
+      "tool_name": "spawn_agent",
+      "tool_input": {
+        "message": "<redacted>",
+        "fork_context": "<redacted>"
+      },
+      "tool_use_id": "call_oktUPQ5jcosNPOcGnEaWqRcv"
+    },
+    {
+      "session_id": "01a069d4-d356-73b3-9440-1c4440319de8",
+      "turn_id": "01a069d4-d3b2-7593-85ec-8a0281f51bf1",
+      "transcript_path": "/Users/example/.codex/sessions/2026/09/03/rollout-example.jsonl",
+      "cwd": "/Users/example/project",
+      "hook_event_name": "PreToolUse",
+      "model": "gpt-5.4-mini",
+      "permission_mode": "bypassPermissions",
+      "tool_name": "multi_agent_v1wait_agent",
+      "tool_input": {
+        "targets": "<redacted>",
+        "timeout_ms": "<redacted>"
+      },
+      "tool_use_id": "call_RK95A6i4UUhTigIGXF24gMMO"
+    }
+  ]
+}

package/package.json

@@ -1,17 +1,42 @@
 {
   "name": "@agentguard-run/burn",
-  "version": "0.1.1",
-  "description": "Local runaway-agent circuit breaker for AI coding agents. Detects fan-out storms and sustained token burn, blocks the next spawn, and proves what happened. Nothing leaves the machine.",
+  "version": "0.2.1",
+  "description": "Local runaway-agent circuit breaker for AI coding agents and local model runtimes. One policy across Claude Code, Cursor, Codex, Ollama, vLLM, LM Studio and raw orchestrators: detects fan-out storms and sustained token burn, blocks the next spawn, and proves what happened with content-free signed receipts. Nothing leaves the machine.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "commonjs",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    },
+    "./middleware": {
+      "types": "./dist/src/adapters/raw-api.d.ts",
+      "default": "./dist/src/adapters/raw-api.js"
+    },
+    "./proxy": {
+      "types": "./dist/src/proxy/server.d.ts",
+      "default": "./dist/src/proxy/server.js"
+    },
+    "./cursor": {
+      "types": "./dist/src/adapters/cursor.d.ts",
+      "default": "./dist/src/adapters/cursor.js"
+    },
+    "./codex": {
+      "types": "./dist/src/adapters/codex.d.ts",
+      "default": "./dist/src/adapters/codex.js"
+    },
+    "./package.json": "./package.json"
+  },
   "bin": {
     "agentguard-burn": "dist/src/cli.js"
   },
   "files": [
     "dist/src",
+    "fixtures",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "engines": {
@@ -21,11 +46,10 @@
     "build": "tsc -p tsconfig.json",
     "test": "tsc -p tsconfig.json && node --test \"dist/tests/**/*.test.js\"",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "replay": "node dist/cli.js replay"
-  },
-  "dependencies": {
-    "@noble/ed25519": "^3.0.0"
+    "conformance": "tsc -p tsconfig.json && node dist/src/cli.js conformance",
+    "replay": "node dist/src/cli.js replay"
   },
+  "dependencies": {},
   "devDependencies": {
     "@types/node": "^22",
     "typescript": "^5.0.0"
@@ -33,6 +57,10 @@
   "keywords": [
     "agentguard",
     "claude-code",
+    "cursor",
+    "codex",
+    "ollama",
+    "vllm",
     "agents",
     "token-budget",
     "circuit-breaker",