@aion0/bastion 0.1.12 → 0.1.13

package/dist/plugins/builtin/tool-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../../src/plugins/builtin/tool-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EAMP,MAAM,aAAa,CAAC;AAQrB,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CAClH;AAqFD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,OAAO,iBAAiB,EAAE,cAAc,GAAG,MAAM,CAmQjJ"}
+{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../../src/plugins/builtin/tool-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EAMP,MAAM,aAAa,CAAC;AAQrB,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CAClH;AAqFD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,OAAO,iBAAiB,EAAE,cAAc,GAAG,MAAM,CAiOjJ"}

package/dist/plugins/builtin/tool-guard.js

@@ -82,49 +82,20 @@ function createToolGuardPlugin(db, config, eventBus) {
     const auditRepo = new audit_log_js_1.AuditLogRepository(db);
     // Seed built-in rules on first init (INSERT OR IGNORE preserves user toggles)
     rulesRepo.seedBuiltins(rules_js_1.BUILTIN_RULES);
-    // ── PI escalation: track sessions flagged by pi-classifier ──
-    const escalatedSessions = new Map();
-    const ESCALATION_TTL_MS = 60 * 60 * 1000; // 1 hour
-    // Listen for pi:detected events from pi-classifier plugin
-    if (eventBus) {
-        eventBus.on('pi:detected', (data) => {
-            const event = data;
-            if (!event?.sessionId)
-                return;
-            // Escalate session: lower the blockMinSeverity to 'medium' (stricter)
-            escalatedSessions.set(event.sessionId, {
-                blockMinSeverity: 'medium',
-                expiresAt: Date.now() + ESCALATION_TTL_MS,
-            });
-            log.warn('Session escalated due to prompt injection detection', {
-                sessionId: event.sessionId,
-                escalatedBlockMinSeverity: 'medium',
-            });
-        });
-    }
-    /** Clean up expired escalations */
-    function cleanExpiredEscalations() {
-        const now = Date.now();
-        for (const [sessionId, entry] of escalatedSessions) {
-            if (entry.expiresAt <= now) {
-                escalatedSessions.delete(sessionId);
-                log.debug('Escalation expired', { sessionId });
-            }
-        }
-    }
     // Live config readers — support hot-reload from Dashboard
     const getAction = () => config.getLiveConfig ? config.getLiveConfig().action : config.action;
     const getRecordAll = () => config.getLiveConfig ? config.getLiveConfig().recordAll : config.recordAll;
     const getBlockMinSeverity = () => config.getLiveConfig ? config.getLiveConfig().blockMinSeverity : config.blockMinSeverity;
     const getAlertMinSeverity = () => config.getLiveConfig ? config.getLiveConfig().alertMinSeverity : config.alertMinSeverity;
-    /** Get effective blockMinSeverity for a session (may be escalated) */
-    function getEffectiveBlockMinSeverity(sessionId) {
-        if (sessionId) {
-            const escalation = escalatedSessions.get(sessionId);
-            if (escalation && escalation.expiresAt > Date.now()) {
-                return escalation.blockMinSeverity;
-            }
-        }
+    /** Get effective blockMinSeverity for a request context (uses threat-scorer's _threatLevel) */
+    function getEffectiveBlockMinSeverity(context) {
+        const threatLevel = context._threatLevel;
+        if (threatLevel === 'critical')
+            return 'low'; // Block all severities
+        if (threatLevel === 'high')
+            return 'medium'; // Block medium+
+        if (threatLevel === 'elevated')
+            return 'high'; // Block high+
         return getBlockMinSeverity();
     }
     function getAlertConfig() {
@@ -185,6 +156,7 @@ function createToolGuardPlugin(db, config, eventBus) {
                 (0, alert_js_1.dispatchAlert)(getAlertConfig(), tc.toolName, ruleMatch, requestId, sessionId);
                 eventBus?.emit('toolguard:alert', {
                     requestId,
+                    sessionId,
                     toolName: tc.toolName,
                     ruleId: ruleMatch.rule.id,
                     ruleName: ruleMatch.rule.name,
@@ -204,11 +176,10 @@ function createToolGuardPlugin(db, config, eventBus) {
         apiVersion: 2,
         // ── Load rules from DB and set streaming block flag ──
         async onRequest(context) {
-            cleanExpiredEscalations();
             const rules = rulesRepo.getEnabled();
             context._toolGuardRules = rules;
-            const effectiveBlockMin = getEffectiveBlockMinSeverity(context.sessionId);
-            log.debug('onRequest', { action: getAction(), recordAll: getRecordAll(), isStreaming: context.isStreaming, effectiveBlockMin });
+            const effectiveBlockMin = getEffectiveBlockMinSeverity(context);
+            log.debug('onRequest', { action: getAction(), recordAll: getRecordAll(), isStreaming: context.isStreaming, effectiveBlockMin, threatLevel: context._threatLevel });
             if (getAction() === 'block' && context.isStreaming) {
                 context._toolGuardStreamBlock = effectiveBlockMin;
             }
@@ -230,8 +201,8 @@ function createToolGuardPlugin(db, config, eventBus) {
             });
             if (matches.length === 0)
                 return;
-            // Check if any flagged call meets the block severity threshold (may be escalated)
-            const currentBlockMin = getEffectiveBlockMinSeverity(context.request.sessionId);
+            // Check if any flagged call meets the block severity threshold (may be escalated by threat level)
+            const currentBlockMin = getEffectiveBlockMinSeverity(context.request);
             const blockable = matches.filter(m => m.ruleMatch && (0, alert_js_1.shouldAlert)(m.ruleMatch.rule.severity, currentBlockMin));
             // Record all tool calls and dispatch alerts
             const flagged = recordAndAlert(matches, context.request.id, context.request.sessionId);

package/dist/plugins/builtin/tool-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-guard.js","sourceRoot":"","sources":["../../../src/plugins/builtin/tool-guard.ts"],"names":[],"mappings":";;AAkHA,sDAmQC;AA7WD,4EAA+E;AAC/E,wFAA0F;AAC1F,0EAA6E;AAC7E,gEAA2H;AAC3H,wDAA0G;AAC1G,wDAAyF;AACzF,qDAAqD;AAGrD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,YAAY,CAAC,CAAC;AAmBvC,SAAS,gBAAgB,CAAC,IAAY,EAAE,WAAoB,EAAE,KAAsB;IAClF,MAAM,SAAS,GAAG,IAAA,+BAAgB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1B,EAAE;QACF,SAAS,EAAE,IAAA,qBAAU,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;KACxD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,UAA0C,EAC1C,SAA4B;IAE5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,wCAAwC;QACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACjC,yCAAyC,CAAC,CAAC,EAAE,CAAC,QAAQ,kBAAkB,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CACjI,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa;IAElE,8DAA8D;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAA8B,EAAE,EAAE;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,EAAE,CAAC;gBACxE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,yCAAyC,KAAK,CAAC,IAAI,kBAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,KAAK,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC;gBACvL,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,wEAAwE;QACxE,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,8CAA8C;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAoC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,OAA8C,CAAC;YAClE,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAEjE,MAAM,IAAI,GAAc,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAuC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,QAA+C,CAAC;gBAC9D,MAAM,IAAI,GAAG,EAAE,EAAE,IAA0B,CAAC;gBAC5C,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;oBAC1D,QAAQ,CAAC,IAAI,CAAC,yCAAyC,IAAI,kBAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,KAAK,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,OAAO,GAAG,CAAE,GAAG,CAAC,OAAkB,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,sDAAsD;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,qBAAqB,CAAC,EAAqB,EAAE,MAAuB,EAAE,QAAmD;IACvI,MAAM,IAAI,GAAG,IAAI,mCAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,8CAAwB,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,iCAAkB,CAAC,EAAE,CAAC,CAAC;IAE7C,8EAA8E;IAC9E,SAAS,CAAC,YAAY,CAAC,wBAAa,CAAC,CAAC;IAEtC,+DAA+D;IAC/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA2D,CAAC;IAC7F,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;IAEnD,0DAA0D;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAAa,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,IAA6D,CAAC;YAC5E,IAAI,CAAC,KAAK,EAAE,SAAS;gBAAE,OAAO;YAC9B,sEAAsE;YACtE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;gBACrC,gBAAgB,EAAE,QAAQ;gBAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;aAC1C,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;gBAC9D,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,yBAAyB,EAAE,QAAQ;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,SAAS,uBAAuB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAC3B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpC,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7F,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACtG,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC3H,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAE3H,sEAAsE;IACtE,SAAS,4BAA4B,CAAC,SAAkB;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,UAAU,IAAI,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpD,OAAO,UAAU,CAAC,gBAAgB,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAED,SAAS,cAAc;QACrB,OAAO;YACL,WAAW,EAAE,mBAAmB,EAAE,IAAI,MAAM;YAC5C,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACpC,UAAU,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;SACzC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS,aAAa,CAAC,SAA2B;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,IAAA,sBAAW,EAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;YAC3F,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mFAAmF;IACnF,SAAS,cAAc,CACrB,OAA0B,EAC1B,SAAiB,EACjB,SAAkB;QAElB,MAAM,SAAS,GAAG,YAAY,EAAE,KAAK,KAAK,CAAC;QAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEvC,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ;gBAC/C,CAAC,CAAC,EAAE,CAAC,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC;gBACV,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,EAAE,CAAC,QAAQ;gBACtB,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;gBACnC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;gBAC5C,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC1C,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,UAAU,EAAE,SAAS,IAAI,IAAI;aAC9B,CAAC,CAAC;YAEH,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACvC,SAAS;oBACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;oBACzB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,OAAO,EAAE,SAAS,CAAC,WAAW;oBAC9B,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;gBAEH,IAAA,wBAAa,EAAC,cAAc,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAE9E,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE;oBAChC,SAAS;oBACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;oBACzB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;oBAC7B,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,MAAM,EAAE,YAAY;oBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,CAAC;QAEb,wDAAwD;QACxD,KAAK,CAAC,SAAS,CAAC,OAAuB;YACrC,uBAAuB,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACrC,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC;YAChC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC1E,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAChI,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACnD,OAAO,CAAC,qBAAqB,GAAG,iBAAiB,CAAC;YACpD,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,KAAK,CAAC,UAAU,CAAC,OAAiC;YAChD,MAAM,aAAa,GAAG,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrF,IAAI,aAAa,KAAK,OAAO;gBAAE,OAAO;YACtC,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,CAAC,iEAAiE;YAElG,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,SAAS,EAAE,OAAO,CAAC,MAAM;gBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;aAC7B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEjC,kFAAkF;YAClF,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAA,sBAAW,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAC5E,CAAC;YAEF,4CAA4C;YAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBACpC,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;YAC9C,CAAC;YAED,+EAA+E;YAC/E,OAAO,CAAC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAE1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAChC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CAC9E,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;gBAEnF,+DAA+D;gBAC/D,IAAI,CAAC;oBACH,SAAS,CAAC,MAAM,CAAC;wBACf,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;wBACvB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;wBAC9B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;wBACjC,YAAY,EAAE,OAAO,CAAC,IAAI;wBAC1B,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAED,4EAA4E;gBAC5E,4EAA4E;gBAC5E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBACxE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,kBAAkB,CAAC,OAAgC;YACvD,qEAAqE;YACrE,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB;gBAAE,OAAO;YAE/C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBAExE,8EAA8E;gBAC9E,IAAI,OAA0B,CAAC;gBAC/B,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,SAAS,GAAG,IAAA,+CAAgC,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACtE,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBAC7B,EAAE;wBACF,SAAS,EAAE,IAAA,qBAAU,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;qBACxD,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvE,CAAC;gBAED,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;oBAC5B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;iBAClD,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAEjC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACvF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;oBACpC,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;gBAC9C,CAAC;gBAED,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tool-guard.js","sourceRoot":"","sources":["../../../src/plugins/builtin/tool-guard.ts"],"names":[],"mappings":";;AAkHA,sDAiOC;AA3UD,4EAA+E;AAC/E,wFAA0F;AAC1F,0EAA6E;AAC7E,gEAA2H;AAC3H,wDAA0G;AAC1G,wDAAyF;AACzF,qDAAqD;AAGrD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,YAAY,CAAC,CAAC;AAmBvC,SAAS,gBAAgB,CAAC,IAAY,EAAE,WAAoB,EAAE,KAAsB;IAClF,MAAM,SAAS,GAAG,IAAA,+BAAgB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1B,EAAE;QACF,SAAS,EAAE,IAAA,qBAAU,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;KACxD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,UAA0C,EAC1C,SAA4B;IAE5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,wCAAwC;QACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACjC,yCAAyC,CAAC,CAAC,EAAE,CAAC,QAAQ,kBAAkB,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CACjI,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa;IAElE,8DAA8D;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAA8B,EAAE,EAAE;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,EAAE,CAAC;gBACxE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,yCAAyC,KAAK,CAAC,IAAI,kBAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,KAAK,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC;gBACvL,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,wEAAwE;QACxE,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,8CAA8C;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAoC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,OAA8C,CAAC;YAClE,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAEjE,MAAM,IAAI,GAAc,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAuC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,QAA+C,CAAC;gBAC9D,MAAM,IAAI,GAAG,EAAE,EAAE,IAA0B,CAAC;gBAC5C,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;oBAC1D,QAAQ,CAAC,IAAI,CAAC,yCAAyC,IAAI,kBAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,KAAK,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,OAAO,GAAG,CAAE,GAAG,CAAC,OAAkB,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,sDAAsD;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,qBAAqB,CAAC,EAAqB,EAAE,MAAuB,EAAE,QAAmD;IACvI,MAAM,IAAI,GAAG,IAAI,mCAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,8CAAwB,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,iCAAkB,CAAC,EAAE,CAAC,CAAC;IAE7C,8EAA8E;IAC9E,SAAS,CAAC,YAAY,CAAC,wBAAa,CAAC,CAAC;IAEtC,0DAA0D;IAC1D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7F,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACtG,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC3H,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAE3H,+FAA+F;IAC/F,SAAS,4BAA4B,CAAC,OAAuB;QAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,WAAW,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC,CAAO,uBAAuB;QAC3E,IAAI,WAAW,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,CAAQ,gBAAgB;QACpE,IAAI,WAAW,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,CAAM,cAAc;QAClE,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAED,SAAS,cAAc;QACrB,OAAO;YACL,WAAW,EAAE,mBAAmB,EAAE,IAAI,MAAM;YAC5C,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACpC,UAAU,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;SACzC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS,aAAa,CAAC,SAA2B;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,IAAA,sBAAW,EAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;YAC3F,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mFAAmF;IACnF,SAAS,cAAc,CACrB,OAA0B,EAC1B,SAAiB,EACjB,SAAkB;QAElB,MAAM,SAAS,GAAG,YAAY,EAAE,KAAK,KAAK,CAAC;QAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEvC,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ;gBAC/C,CAAC,CAAC,EAAE,CAAC,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC;gBACV,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,EAAE,CAAC,QAAQ;gBACtB,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;gBACnC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;gBAC5C,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC1C,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,UAAU,EAAE,SAAS,IAAI,IAAI;aAC9B,CAAC,CAAC;YAEH,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACvC,SAAS;oBACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;oBACzB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,OAAO,EAAE,SAAS,CAAC,WAAW;oBAC9B,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;gBAEH,IAAA,wBAAa,EAAC,cAAc,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAE9E,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE;oBAChC,SAAS;oBACT,SAAS;oBACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;oBACzB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;oBAC7B,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,MAAM,EAAE,YAAY;oBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,CAAC;QAEb,wDAAwD;QACxD,KAAK,CAAC,SAAS,CAAC,OAAuB;YACrC,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACrC,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC;YAChC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;YAChE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YACnK,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACnD,OAAO,CAAC,qBAAqB,GAAG,iBAAiB,CAAC;YACpD,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,KAAK,CAAC,UAAU,CAAC,OAAiC;YAChD,MAAM,aAAa,GAAG,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrF,IAAI,aAAa,KAAK,OAAO;gBAAE,OAAO;YACtC,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,CAAC,iEAAiE;YAElG,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,SAAS,EAAE,OAAO,CAAC,MAAM;gBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;aAC7B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEjC,kGAAkG;YAClG,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAA,sBAAW,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAC5E,CAAC;YAEF,4CAA4C;YAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBACpC,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;YAC9C,CAAC;YAED,+EAA+E;YAC/E,OAAO,CAAC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAE1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAChC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CAC9E,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;gBAEnF,+DAA+D;gBAC/D,IAAI,CAAC;oBACH,SAAS,CAAC,MAAM,CAAC;wBACf,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;wBACvB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;wBAC9B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;wBACjC,YAAY,EAAE,OAAO,CAAC,IAAI;wBAC1B,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAED,4EAA4E;gBAC5E,4EAA4E;gBAC5E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBACxE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,kBAAkB,CAAC,OAAgC;YACvD,qEAAqE;YACrE,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB;gBAAE,OAAO;YAE/C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBAExE,8EAA8E;gBAC9E,IAAI,OAA0B,CAAC;gBAC/B,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,SAAS,GAAG,IAAA,+CAAgC,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACtE,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBAC7B,EAAE;wBACF,SAAS,EAAE,IAAA,qBAAU,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;qBACxD,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvE,CAAC;gBAED,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;oBAC5B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;iBAClD,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAEjC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACvF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;oBACpC,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;gBAC9C,CAAC;gBAED,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/types.d.ts

@@ -26,6 +26,9 @@ export interface RequestContext {
     _toolGuardStreamBlock?: string;
     /** Internal: DB-loaded rules for streaming guard (set by tool-guard onRequest) */
     _toolGuardRules?: import('../tool-guard/rules.js').ToolGuardRule[];
+    /** Internal: set by threat-scorer for tool-guard to read */
+    _threatLevel?: 'normal' | 'elevated' | 'high' | 'critical';
+    _threatScore?: number;
 }
 export interface ResponseCompleteContext {
     request: RequestContext;

package/dist/plugins/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;mDAC+C;IAC/C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kFAAkF;IAClF,eAAe,CAAC,EAAE,OAAO,wBAAwB,EAAE,aAAa,EAAE,CAAC;CACpE;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACzE,UAAU,CAAC,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACrF,kBAAkB,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;mDAC+C;IAC/C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kFAAkF;IAClF,eAAe,CAAC,EAAE,OAAO,wBAAwB,EAAE,aAAa,EAAE,CAAC;IACnE,4DAA4D;IAC5D,YAAY,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACzE,UAAU,CAAC,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACrF,kBAAkB,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}

package/dist/storage/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAkP3C,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAqCzD"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AA8R3C,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAqCzD"}

package/dist/storage/migrations.js

@@ -223,6 +223,49 @@ const MIGRATIONS = [
     // Migration 16: DLP patterns — context_verify column for anti-pattern / entropy / code-block checks
     `
   ALTER TABLE dlp_patterns ADD COLUMN context_verify TEXT;
+  `,
+    // Migration 17: Threat Intelligence — session threat scoring, tool chain detection, taint tracking
+    `
+  CREATE TABLE IF NOT EXISTS threat_scores (
+    session_id TEXT PRIMARY KEY,
+    score REAL DEFAULT 0,
+    level TEXT DEFAULT 'normal',
+    event_count INTEGER DEFAULT 0,
+    last_event_at TEXT,
+    updated_at TEXT DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS threat_score_events (
+    id TEXT PRIMARY KEY,
+    session_id TEXT NOT NULL,
+    event_type TEXT NOT NULL,
+    source_event TEXT,
+    points REAL NOT NULL,
+    score_after REAL NOT NULL,
+    level_after TEXT NOT NULL,
+    created_at TEXT DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_tse_session ON threat_score_events(session_id);
+
+  CREATE TABLE IF NOT EXISTS tool_chain_detections (
+    id TEXT PRIMARY KEY,
+    session_id TEXT NOT NULL,
+    rule_id TEXT NOT NULL,
+    matched_sequence TEXT NOT NULL,
+    action TEXT NOT NULL,
+    created_at TEXT DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS taint_marks (
+    id TEXT PRIMARY KEY,
+    session_id TEXT NOT NULL,
+    request_id TEXT NOT NULL,
+    pattern_name TEXT NOT NULL,
+    direction TEXT NOT NULL,
+    fingerprint TEXT,
+    created_at TEXT DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_taint_session ON taint_marks(session_id);
   `,
 ];
 function runMigrations(db) {

package/dist/storage/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":";;AAkPA,sCAqCC;AArRD,MAAM,UAAU,GAAa;IAC3B,8BAA8B;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDC;IAED,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCC;IAED,6EAA6E;IAC7E;;;;;;;;;;;GAWC;IAED,0EAA0E;IAC1E;;;;;;;;;;;;;;GAcC;IAED,mEAAmE;IACnE;;GAEC;IAED,yDAAyD;IACzD;;;;GAIC;IAED,yCAAyC;IACzC;;;;;;GAMC;IAED,uDAAuD;IACvD;;;;;;;;;;;;;;;;;;;GAmBC;IAED,+DAA+D;IAC/D;;GAEC;IAED,4EAA4E;IAC5E;;;;;;;;;;;;;;;GAeC;IAED,gFAAgF;IAChF,iGAAiG;IACjG;;;;GAIC;IAED,sGAAsG;IACtG;;GAEC;IAED,gEAAgE;IAChE;;;GAGC;IAED,iEAAiE;IACjE;;;GAGC;IAED,sEAAsE;IACtE;;;;;;;;;;;;;;;;GAgBC;IAED,oGAAoG;IACpG;;GAEC;CACF,CAAC;AAEF,SAAgB,aAAa,CAAC,EAAqB;IACjD,qCAAqC;IACrC,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAE9E,CAAC;IACd,MAAM,OAAO,GAAG,cAAc,EAAE,OAAO,IAAI,CAAC,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrE,oEAAoE;gBACpE,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/E,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC;oBAAC,OAAO,OAAO,EAAE,CAAC;wBACjB,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;4BACjF,MAAM,OAAO,CAAC;wBAChB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":";;AA8RA,sCAqCC;AAjUD,MAAM,UAAU,GAAa;IAC3B,8BAA8B;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDC;IAED,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCC;IAED,6EAA6E;IAC7E;;;;;;;;;;;GAWC;IAED,0EAA0E;IAC1E;;;;;;;;;;;;;;GAcC;IAED,mEAAmE;IACnE;;GAEC;IAED,yDAAyD;IACzD;;;;GAIC;IAED,yCAAyC;IACzC;;;;;;GAMC;IAED,uDAAuD;IACvD;;;;;;;;;;;;;;;;;;;GAmBC;IAED,+DAA+D;IAC/D;;GAEC;IAED,4EAA4E;IAC5E;;;;;;;;;;;;;;;GAeC;IAED,gFAAgF;IAChF,iGAAiG;IACjG;;;;GAIC;IAED,sGAAsG;IACtG;;GAEC;IAED,gEAAgE;IAChE;;;GAGC;IAED,iEAAiE;IACjE;;;GAGC;IAED,sEAAsE;IACtE;;;;;;;;;;;;;;;;GAgBC;IAED,oGAAoG;IACpG;;GAEC;IAED,mGAAmG;IACnG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCC;CACF,CAAC;AAEF,SAAgB,aAAa,CAAC,EAAqB;IACjD,qCAAqC;IACrC,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAE9E,CAAC;IACd,MAAM,OAAO,GAAG,cAAc,EAAE,OAAO,IAAI,CAAC,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrE,oEAAoE;gBACpE,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/E,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC;oBAAC,OAAO,OAAO,EAAE,CAAC;wBACjB,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;4BACjF,MAAM,OAAO,CAAC;wBAChB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/storage/repositories/taint-marks.d.ts

@@ -0,0 +1,26 @@
+import type Database from 'better-sqlite3';
+export interface TaintMarkRecord {
+    id: string;
+    session_id: string;
+    request_id: string;
+    pattern_name: string;
+    direction: string;
+    fingerprint: string | null;
+    created_at: string;
+}
+export declare class TaintMarksRepository {
+    private db;
+    constructor(db: Database.Database);
+    insert(record: {
+        id: string;
+        session_id: string;
+        request_id: string;
+        pattern_name: string;
+        direction: string;
+        fingerprint: string | null;
+    }): void;
+    getBySession(sessionId: string): TaintMarkRecord[];
+    getActiveBySession(sessionId: string, withinMinutes?: number): TaintMarkRecord[];
+    purgeOlderThan(hours: number): number;
+}
+//# sourceMappingURL=taint-marks.d.ts.map

package/dist/storage/repositories/taint-marks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-marks.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/taint-marks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,EAAE,CAAoB;gBAElB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,MAAM,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI;IAOR,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,EAAE;IAMlD,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,GAAE,MAAW,GAAG,eAAe,EAAE;IAMpF,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}

package/dist/storage/repositories/taint-marks.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaintMarksRepository = void 0;
+class TaintMarksRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    insert(record) {
+        this.db.prepare(`
+      INSERT INTO taint_marks (id, session_id, request_id, pattern_name, direction, fingerprint)
+      VALUES (@id, @session_id, @request_id, @pattern_name, @direction, @fingerprint)
+    `).run(record);
+    }
+    getBySession(sessionId) {
+        return this.db.prepare('SELECT * FROM taint_marks WHERE session_id = ? ORDER BY created_at DESC').all(sessionId);
+    }
+    getActiveBySession(sessionId, withinMinutes = 60) {
+        return this.db.prepare(`SELECT * FROM taint_marks WHERE session_id = ? AND created_at > datetime('now', '-' || ? || ' minutes') ORDER BY created_at DESC`).all(sessionId, withinMinutes);
+    }
+    purgeOlderThan(hours) {
+        const result = this.db.prepare(`DELETE FROM taint_marks WHERE created_at < datetime('now', '-' || ? || ' hours')`).run(hours);
+        return result.changes;
+    }
+}
+exports.TaintMarksRepository = TaintMarksRepository;
+//# sourceMappingURL=taint-marks.js.map

package/dist/storage/repositories/taint-marks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-marks.js","sourceRoot":"","sources":["../../../src/storage/repositories/taint-marks.ts"],"names":[],"mappings":";;;AAYA,MAAa,oBAAoB;IACvB,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,CAAC,MAON;QACC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,yEAAyE,CAC1E,CAAC,GAAG,CAAC,SAAS,CAAsB,CAAC;IACxC,CAAC;IAED,kBAAkB,CAAC,SAAiB,EAAE,gBAAwB,EAAE;QAC9D,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,kIAAkI,CACnI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAsB,CAAC;IACvD,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,kFAAkF,CACnF,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAvCD,oDAuCC"}

package/dist/storage/repositories/threat-score-events.d.ts

@@ -0,0 +1,27 @@
+import type Database from 'better-sqlite3';
+export interface ThreatScoreEventRecord {
+    id: string;
+    session_id: string;
+    event_type: string;
+    source_event: string | null;
+    points: number;
+    score_after: number;
+    level_after: string;
+    created_at: string;
+}
+export declare class ThreatScoreEventsRepository {
+    private db;
+    constructor(db: Database.Database);
+    insert(record: {
+        id: string;
+        session_id: string;
+        event_type: string;
+        source_event: string | null;
+        points: number;
+        score_after: number;
+        level_after: string;
+    }): void;
+    getBySession(sessionId: string, limit?: number): ThreatScoreEventRecord[];
+    purgeOlderThan(hours: number): number;
+}
+//# sourceMappingURL=threat-score-events.d.ts.map

package/dist/storage/repositories/threat-score-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-score-events.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/threat-score-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,2BAA2B;IACtC,OAAO,CAAC,EAAE,CAAoB;gBAElB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,MAAM,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,IAAI;IAOR,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,sBAAsB,EAAE;IAM7E,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}

package/dist/storage/repositories/threat-score-events.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ThreatScoreEventsRepository = void 0;
+class ThreatScoreEventsRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    insert(record) {
+        this.db.prepare(`
+      INSERT INTO threat_score_events (id, session_id, event_type, source_event, points, score_after, level_after)
+      VALUES (@id, @session_id, @event_type, @source_event, @points, @score_after, @level_after)
+    `).run(record);
+    }
+    getBySession(sessionId, limit = 50) {
+        return this.db.prepare('SELECT * FROM threat_score_events WHERE session_id = ? ORDER BY created_at DESC LIMIT ?').all(sessionId, limit);
+    }
+    purgeOlderThan(hours) {
+        const result = this.db.prepare(`DELETE FROM threat_score_events WHERE created_at < datetime('now', '-' || ? || ' hours')`).run(hours);
+        return result.changes;
+    }
+}
+exports.ThreatScoreEventsRepository = ThreatScoreEventsRepository;
+//# sourceMappingURL=threat-score-events.js.map

package/dist/storage/repositories/threat-score-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-score-events.js","sourceRoot":"","sources":["../../../src/storage/repositories/threat-score-events.ts"],"names":[],"mappings":";;;AAaA,MAAa,2BAA2B;IAC9B,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,CAAC,MAQN;QACC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,SAAiB,EAAE,QAAgB,EAAE;QAChD,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,yFAAyF,CAC1F,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAA6B,CAAC;IACtD,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,0FAA0F,CAC3F,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAlCD,kEAkCC"}

package/dist/storage/repositories/threat-scores.d.ts

@@ -0,0 +1,26 @@
+import type Database from 'better-sqlite3';
+export interface ThreatScoreRecord {
+    session_id: string;
+    score: number;
+    level: string;
+    event_count: number;
+    last_event_at: string | null;
+    updated_at: string;
+}
+export declare class ThreatScoresRepository {
+    private db;
+    constructor(db: Database.Database);
+    upsert(record: {
+        session_id: string;
+        score: number;
+        level: string;
+        event_count: number;
+        last_event_at: string | null;
+    }): void;
+    get(sessionId: string): ThreatScoreRecord | null;
+    getAll(): ThreatScoreRecord[];
+    getElevated(): ThreatScoreRecord[];
+    reset(sessionId: string): void;
+    purgeOlderThan(hours: number): number;
+}
+//# sourceMappingURL=threat-scores.d.ts.map

package/dist/storage/repositories/threat-scores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-scores.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/threat-scores.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,EAAE,CAAoB;gBAElB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,MAAM,CAAC,MAAM,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG,IAAI;IAaR,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAMhD,MAAM,IAAI,iBAAiB,EAAE;IAM7B,WAAW,IAAI,iBAAiB,EAAE;IAMlC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAO9B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}

package/dist/storage/repositories/threat-scores.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ThreatScoresRepository = void 0;
+class ThreatScoresRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    upsert(record) {
+        this.db.prepare(`
+      INSERT INTO threat_scores (session_id, score, level, event_count, last_event_at, updated_at)
+      VALUES (@session_id, @score, @level, @event_count, @last_event_at, datetime('now'))
+      ON CONFLICT(session_id) DO UPDATE SET
+        score = @score,
+        level = @level,
+        event_count = @event_count,
+        last_event_at = @last_event_at,
+        updated_at = datetime('now')
+    `).run(record);
+    }
+    get(sessionId) {
+        return this.db.prepare('SELECT * FROM threat_scores WHERE session_id = ?').get(sessionId) ?? null;
+    }
+    getAll() {
+        return this.db.prepare('SELECT * FROM threat_scores ORDER BY updated_at DESC').all();
+    }
+    getElevated() {
+        return this.db.prepare("SELECT * FROM threat_scores WHERE level != 'normal' ORDER BY score DESC").all();
+    }
+    reset(sessionId) {
+        this.db.prepare(`
+      UPDATE threat_scores SET score = 0, level = 'normal', event_count = 0, updated_at = datetime('now')
+      WHERE session_id = ?
+    `).run(sessionId);
+    }
+    purgeOlderThan(hours) {
+        const result = this.db.prepare(`DELETE FROM threat_scores WHERE updated_at < datetime('now', '-' || ? || ' hours')`).run(hours);
+        return result.changes;
+    }
+}
+exports.ThreatScoresRepository = ThreatScoresRepository;
+//# sourceMappingURL=threat-scores.js.map

package/dist/storage/repositories/threat-scores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-scores.js","sourceRoot":"","sources":["../../../src/storage/repositories/threat-scores.ts"],"names":[],"mappings":";;;AAWA,MAAa,sBAAsB;IACzB,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,CAAC,MAMN;QACC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;KASf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CACrB,kDAAkD,CACnD,CAAC,GAAG,CAAC,SAAS,CAAmC,IAAI,IAAI,CAAC;IAC7D,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,sDAAsD,CACvD,CAAC,GAAG,EAAyB,CAAC;IACjC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,yEAAyE,CAC1E,CAAC,GAAG,EAAyB,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,oFAAoF,CACrF,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAzDD,wDAyDC"}

package/dist/storage/repositories/tool-chain-detections.d.ts

@@ -0,0 +1,24 @@
+import type Database from 'better-sqlite3';
+export interface ToolChainDetectionRecord {
+    id: string;
+    session_id: string;
+    rule_id: string;
+    matched_sequence: string;
+    action: string;
+    created_at: string;
+}
+export declare class ToolChainDetectionsRepository {
+    private db;
+    constructor(db: Database.Database);
+    insert(record: {
+        id: string;
+        session_id: string;
+        rule_id: string;
+        matched_sequence: string;
+        action: string;
+    }): void;
+    getRecent(limit?: number): ToolChainDetectionRecord[];
+    getBySession(sessionId: string): ToolChainDetectionRecord[];
+    purgeOlderThan(hours: number): number;
+}
+//# sourceMappingURL=tool-chain-detections.d.ts.map

package/dist/storage/repositories/tool-chain-detections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-chain-detections.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/tool-chain-detections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,6BAA6B;IACxC,OAAO,CAAC,EAAE,CAAoB;gBAElB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,MAAM,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI;IAOR,SAAS,CAAC,KAAK,GAAE,MAAW,GAAG,wBAAwB,EAAE;IAMzD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,wBAAwB,EAAE;IAM3D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}

package/dist/storage/repositories/tool-chain-detections.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ToolChainDetectionsRepository = void 0;
+class ToolChainDetectionsRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    insert(record) {
+        this.db.prepare(`
+      INSERT INTO tool_chain_detections (id, session_id, rule_id, matched_sequence, action)
+      VALUES (@id, @session_id, @rule_id, @matched_sequence, @action)
+    `).run(record);
+    }
+    getRecent(limit = 50) {
+        return this.db.prepare('SELECT * FROM tool_chain_detections ORDER BY created_at DESC LIMIT ?').all(limit);
+    }
+    getBySession(sessionId) {
+        return this.db.prepare('SELECT * FROM tool_chain_detections WHERE session_id = ? ORDER BY created_at DESC').all(sessionId);
+    }
+    purgeOlderThan(hours) {
+        const result = this.db.prepare(`DELETE FROM tool_chain_detections WHERE created_at < datetime('now', '-' || ? || ' hours')`).run(hours);
+        return result.changes;
+    }
+}
+exports.ToolChainDetectionsRepository = ToolChainDetectionsRepository;
+//# sourceMappingURL=tool-chain-detections.js.map

package/dist/storage/repositories/tool-chain-detections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-chain-detections.js","sourceRoot":"","sources":["../../../src/storage/repositories/tool-chain-detections.ts"],"names":[],"mappings":";;;AAWA,MAAa,6BAA6B;IAChC,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,CAAC,MAMN;QACC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE;QAC1B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,sEAAsE,CACvE,CAAC,GAAG,CAAC,KAAK,CAA+B,CAAC;IAC7C,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,mFAAmF,CACpF,CAAC,GAAG,CAAC,SAAS,CAA+B,CAAC;IACjD,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,4FAA4F,CAC7F,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAtCD,sEAsCC"}

package/dist/tool-guard/chain-detector.d.ts

@@ -0,0 +1,18 @@
+import type { ToolChainRule } from './chain-rules.js';
+export interface ToolCallEntry {
+    category: string;
+    timestamp: number;
+}
+export interface ToolChainMatch {
+    rule: ToolChainRule;
+    matchedSequence: string[];
+}
+export declare class ChainDetector {
+    private sessionWindows;
+    private maxWindowSize;
+    constructor(maxWindowSize?: number);
+    recordToolCall(sessionId: string, category: string): void;
+    checkChains(sessionId: string, rules: ToolChainRule[]): ToolChainMatch | null;
+    cleanup(sessionId: string): void;
+}
+//# sourceMappingURL=chain-detector.d.ts.map

package/dist/tool-guard/chain-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-detector.d.ts","sourceRoot":"","sources":["../../src/tool-guard/chain-detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAID,qBAAa,aAAa;IACxB,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,aAAa,CAAS;gBAElB,aAAa,GAAE,MAAwB;IAInD,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAazD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,cAAc,GAAG,IAAI;IAgC7E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAGjC"}

package/dist/tool-guard/chain-detector.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChainDetector = void 0;
+const MAX_WINDOW_SIZE = 50;
+class ChainDetector {
+    sessionWindows = new Map();
+    maxWindowSize;
+    constructor(maxWindowSize = MAX_WINDOW_SIZE) {
+        this.maxWindowSize = maxWindowSize;
+    }
+    recordToolCall(sessionId, category) {
+        let window = this.sessionWindows.get(sessionId);
+        if (!window) {
+            window = [];
+            this.sessionWindows.set(sessionId, window);
+        }
+        window.push({ category, timestamp: Date.now() });
+        // Trim to max window size
+        if (window.length > this.maxWindowSize) {
+            window.splice(0, window.length - this.maxWindowSize);
+        }
+    }
+    checkChains(sessionId, rules) {
+        const window = this.sessionWindows.get(sessionId);
+        if (!window || window.length < 2)
+            return null;
+        const now = Date.now();
+        for (const rule of rules) {
+            const windowMs = rule.windowSeconds * 1000;
+            // Walk backward through the window looking for the sequence in order
+            // The last element of the sequence should be the most recent matching entry
+            const seq = rule.sequence;
+            let seqIdx = seq.length - 1;
+            const matched = new Array(seq.length);
+            for (let i = window.length - 1; i >= 0 && seqIdx >= 0; i--) {
+                const entry = window[i];
+                if (now - entry.timestamp > windowMs)
+                    break; // outside time window
+                if (entry.category === seq[seqIdx]) {
+                    matched[seqIdx] = entry.category;
+                    seqIdx--;
+                }
+            }
+            if (seqIdx < 0) {
+                return { rule, matchedSequence: matched };
+            }
+        }
+        return null;
+    }
+    cleanup(sessionId) {
+        this.sessionWindows.delete(sessionId);
+    }
+}
+exports.ChainDetector = ChainDetector;
+//# sourceMappingURL=chain-detector.js.map

package/dist/tool-guard/chain-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-detector.js","sourceRoot":"","sources":["../../src/tool-guard/chain-detector.ts"],"names":[],"mappings":";;;AAYA,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,MAAa,aAAa;IAChB,cAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,aAAa,CAAS;IAE9B,YAAY,gBAAwB,eAAe;QACjD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,QAAgB;QAChD,IAAI,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjD,0BAA0B;QAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,KAAsB;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAE3C,qEAAqE;YACrE,4EAA4E;YAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC1B,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAa,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEhD,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACxB,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,QAAQ;oBAAE,MAAM,CAAC,sBAAsB;gBACnE,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;oBACjC,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;YAED,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF;AAxDD,sCAwDC"}

package/dist/tool-guard/chain-rules.d.ts

@@ -0,0 +1,10 @@
+export interface ToolChainRule {
+    id: string;
+    name: string;
+    description: string;
+    sequence: string[];
+    windowSeconds: number;
+    action: 'warn' | 'block';
+}
+export declare const BUILTIN_CHAIN_RULES: ToolChainRule[];
+//# sourceMappingURL=chain-rules.d.ts.map

package/dist/tool-guard/chain-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-rules.d.ts","sourceRoot":"","sources":["../../src/tool-guard/chain-rules.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,eAAO,MAAM,mBAAmB,EAAE,aAAa,EAyB9C,CAAC"}