@aion0/bastion 0.1.7

package/dist/plugins/builtin/metrics-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-collector.js","sourceRoot":"","sources":["../../../src/plugins/builtin/metrics-collector.ts"],"names":[],"mappings":";;AA+CA,oEAgEC;AA9GD,6DAA4D;AAC5D,wEAA4E;AAC5E,wEAA4E;AAC5E,mEAAqE;AACrE,qDAAqD;AAErD,yCAAqC;AAErC,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,gBAAgB,CAAC,CAAC;AAE3C;;;GAGG;AACH,SAAS,kBAAkB,CAAC,UAAmC;IAC7D,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,UAAU,IAAI,KAAK,CAAC;iBAC9C,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,UAAU,GAAG,OAAO,CAAC;iBACjD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;wBAAE,UAAU,IAAI,KAAK,CAAC;yBAC9C,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC;gBAC9F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACxE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAElC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,4BAA4B,CAAC,EAAqB;IAChE,MAAM,YAAY,GAAG,IAAI,gCAAkB,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,gCAAkB,CAAC,EAAE,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,CAAC;QAEb,KAAK,CAAC,kBAAkB,CAAC,OAAgC;YACvD,mEAAmE;YACnE,IAAI,IAAA,8BAAgB,EAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO;YAE7E,MAAM,OAAO,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;YAEpD,YAAY,CAAC,MAAM,CAAC;gBAClB,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACtB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;gBAC5B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;gBAC9B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;gBAC1B,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,YAAY,EAAE,OAAO,CAAC,WAAW;gBACjC,aAAa,EAAE,OAAO,CAAC,YAAY;gBACnC,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;gBAClD,iBAAiB,EAAE,OAAO,CAAC,eAAe;gBAC1C,QAAQ,EAAE,OAAO,CAAC,OAAO;gBACzB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,MAAM,EAAE,CAAC;gBACT,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI;gBAC7C,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC;gBAC9C,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI;aACjD,CAAC,CAAC;YAEH,4CAA4C;YAC5C,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBACnE,IAAI,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,IAAA,oBAAQ,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACvD,kEAAkE;oBAClE,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;wBAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;wBACpC,KAAK,GAAG,KAAK,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC1E,CAAC;oBACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;oBACvD,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC/G,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACpC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACtB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;gBAC5B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAChC,OAAO,EAAE,OAAO,CAAC,SAAS;gBAC1B,SAAS;aACV,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/builtin/token-optimizer.d.ts

@@ -0,0 +1,10 @@
+import type { Plugin } from '../types.js';
+import type Database from 'better-sqlite3';
+export interface TokenOptimizerConfig {
+    cache: boolean;
+    cacheTtlSeconds?: number;
+    trimWhitespace: boolean;
+    reorderForCache: boolean;
+}
+export declare function createTokenOptimizerPlugin(db: Database.Database, config: TokenOptimizerConfig): Plugin;
+//# sourceMappingURL=token-optimizer.d.ts.map

package/dist/plugins/builtin/token-optimizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-optimizer.d.ts","sourceRoot":"","sources":["../../../src/plugins/builtin/token-optimizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAgE,MAAM,aAAa,CAAC;AAQxG,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAsBD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,oBAAoB,GAAG,MAAM,CA2GtG"}

package/dist/plugins/builtin/token-optimizer.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTokenOptimizerPlugin = createTokenOptimizerPlugin;
+const cache_js_1 = require("../../optimizer/cache.js");
+const trimmer_js_1 = require("../../optimizer/trimmer.js");
+const reorder_js_1 = require("../../optimizer/reorder.js");
+const estimator_js_1 = require("../../optimizer/estimator.js");
+const optimizer_events_js_1 = require("../../storage/repositories/optimizer-events.js");
+const classify_js_1 = require("../../proxy/providers/classify.js");
+const logger_js_1 = require("../../utils/logger.js");
+const log = (0, logger_js_1.createLogger)('optimizer-plugin');
+/**
+ * Check if a request is part of an agentic loop (contains tool_result).
+ * These should not be cached because the same tool call may produce different results.
+ */
+function isAgenticRequest(parsedBody) {
+    const messages = parsedBody.messages;
+    if (!Array.isArray(messages))
+        return false;
+    for (const msg of messages) {
+        // Anthropic format: content array with tool_result blocks
+        if (Array.isArray(msg.content)) {
+            for (const block of msg.content) {
+                if (block?.type === 'tool_result')
+                    return true;
+            }
+        }
+        // OpenAI format: role === 'tool'
+        if (msg.role === 'tool')
+            return true;
+    }
+    return false;
+}
+function createTokenOptimizerPlugin(db, config) {
+    const ttl = config.cacheTtlSeconds ?? 300;
+    const cache = config.cache ? new cache_js_1.ResponseCache(db, ttl) : null;
+    const optimizerRepo = new optimizer_events_js_1.OptimizerEventsRepository(db);
+    return {
+        name: 'token-optimizer',
+        priority: 30,
+        version: '1.0.0',
+        apiVersion: 2,
+        async onRequest(context) {
+            // GET/HEAD have no request body to optimize/cache
+            if (context.method === 'GET' || context.method === 'HEAD')
+                return;
+            const originalLength = context.body.length;
+            // Skip cache for non-LLM providers, streaming requests, and agentic loops
+            // Only optimize/cache LLM providers — skip messaging platforms entirely
+            if (!(0, classify_js_1.isLLMProvider)(context.provider))
+                return;
+            const skipCache = context.isStreaming || isAgenticRequest(context.parsedBody);
+            // Check cache first
+            if (cache && !skipCache) {
+                const cached = cache.get(context.provider, context.model, context.body);
+                if (cached) {
+                    log.info('Serving cached response', { requestId: context.id, model: context.model });
+                    // Record cache hit event
+                    optimizerRepo.insert({
+                        id: crypto.randomUUID(),
+                        request_id: context.id,
+                        cache_hit: 1,
+                        original_length: originalLength,
+                        trimmed_length: originalLength,
+                        chars_saved: 0,
+                        tokens_saved_estimate: 0,
+                    });
+                    return {
+                        shortCircuit: {
+                            statusCode: 200,
+                            headers: { 'content-type': 'application/json', 'x-bastion-cache': 'hit' },
+                            body: cached,
+                        },
+                    };
+                }
+            }
+            let modifiedBody = context.body;
+            // Trim whitespace
+            if (config.trimWhitespace) {
+                const { trimmed, savedChars } = (0, trimmer_js_1.trimContent)(modifiedBody);
+                if (savedChars > 0) {
+                    log.debug('Trimmed whitespace', { savedChars });
+                    modifiedBody = trimmed;
+                }
+            }
+            // Reorder for cache optimization
+            if (config.reorderForCache) {
+                modifiedBody = (0, reorder_js_1.reorderForCache)(modifiedBody, context.provider);
+            }
+            const charsSaved = originalLength - modifiedBody.length;
+            if (charsSaved > 0 || modifiedBody !== context.body) {
+                // Record optimization event
+                optimizerRepo.insert({
+                    id: crypto.randomUUID(),
+                    request_id: context.id,
+                    cache_hit: 0,
+                    original_length: originalLength,
+                    trimmed_length: modifiedBody.length,
+                    chars_saved: Math.max(0, charsSaved),
+                    tokens_saved_estimate: Math.max(0, (0, estimator_js_1.estimateTokens)(context.body) - (0, estimator_js_1.estimateTokens)(modifiedBody)),
+                });
+            }
+            if (modifiedBody !== context.body) {
+                return { modifiedBody };
+            }
+        },
+        async onResponseComplete(context) {
+            // Cache successful non-streaming, non-agentic responses
+            if (cache &&
+                (0, classify_js_1.isLLMProvider)(context.request.provider) &&
+                !context.isStreaming &&
+                context.statusCode === 200 &&
+                context.body &&
+                !isAgenticRequest(context.request.parsedBody)) {
+                cache.set(context.request.provider, context.request.model, context.request.body, context.body, context.usage.inputTokens, context.usage.outputTokens);
+            }
+        },
+    };
+}
+//# sourceMappingURL=token-optimizer.js.map

package/dist/plugins/builtin/token-optimizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-optimizer.js","sourceRoot":"","sources":["../../../src/plugins/builtin/token-optimizer.ts"],"names":[],"mappings":";;AAuCA,gEA2GC;AAjJD,uDAAyD;AACzD,2DAAyD;AACzD,2DAA6D;AAC7D,+DAA8D;AAC9D,wFAA2F;AAC3F,mEAAkE;AAClE,qDAAqD;AAGrD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,kBAAkB,CAAC,CAAC;AAS7C;;;GAGG;AACH,SAAS,gBAAgB,CAAC,UAAmC;IAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,0DAA0D;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa;oBAAE,OAAO,IAAI,CAAC;YACjD,CAAC;QACH,CAAC;QACD,iCAAiC;QACjC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,0BAA0B,CAAC,EAAqB,EAAE,MAA4B;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,wBAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,+CAAyB,CAAC,EAAE,CAAC,CAAC;IAExD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,CAAC;QAEb,KAAK,CAAC,SAAS,CAAC,OAAuB;YACrC,kDAAkD;YAClD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO;YAElE,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAE3C,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,CAAC,IAAA,2BAAa,EAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAE9E,oBAAoB;YACpB,IAAI,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxE,IAAI,MAAM,EAAE,CAAC;oBACX,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAErF,yBAAyB;oBACzB,aAAa,CAAC,MAAM,CAAC;wBACnB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;wBACvB,UAAU,EAAE,OAAO,CAAC,EAAE;wBACtB,SAAS,EAAE,CAAC;wBACZ,eAAe,EAAE,cAAc;wBAC/B,cAAc,EAAE,cAAc;wBAC9B,WAAW,EAAE,CAAC;wBACd,qBAAqB,EAAE,CAAC;qBACzB,CAAC,CAAC;oBAEH,OAAO;wBACL,YAAY,EAAE;4BACZ,UAAU,EAAE,GAAG;4BACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,KAAK,EAAE;4BACzE,IAAI,EAAE,MAAM;yBACb;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;YAEhC,kBAAkB;YAClB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAA,wBAAW,EAAC,YAAY,CAAC,CAAC;gBAC1D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACnB,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;oBAChD,YAAY,GAAG,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC3B,YAAY,GAAG,IAAA,4BAAe,EAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC;YAExD,IAAI,UAAU,GAAG,CAAC,IAAI,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBACpD,4BAA4B;gBAC5B,aAAa,CAAC,MAAM,CAAC;oBACnB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;oBACvB,UAAU,EAAE,OAAO,CAAC,EAAE;oBACtB,SAAS,EAAE,CAAC;oBACZ,eAAe,EAAE,cAAc;oBAC/B,cAAc,EAAE,YAAY,CAAC,MAAM;oBACnC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;oBACpC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAA,6BAAc,EAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAA,6BAAc,EAAC,YAAY,CAAC,CAAC;iBAChG,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,OAAgC;YACvD,wDAAwD;YACxD,IACE,KAAK;gBACL,IAAA,2BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACvC,CAAC,OAAO,CAAC,WAAW;gBACpB,OAAO,CAAC,UAAU,KAAK,GAAG;gBAC1B,OAAO,CAAC,IAAI;gBACZ,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAC7C,CAAC;gBACD,KAAK,CAAC,GAAG,CACP,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,OAAO,CAAC,OAAO,CAAC,KAAK,EACrB,OAAO,CAAC,OAAO,CAAC,IAAI,EACpB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/builtin/tool-guard.d.ts

@@ -0,0 +1,20 @@
+import type { Plugin } from '../types.js';
+import type Database from 'better-sqlite3';
+export interface ToolGuardConfig {
+    enabled: boolean;
+    action: 'audit' | 'block';
+    recordAll: boolean;
+    blockMinSeverity: string;
+    alertMinSeverity: string;
+    alertDesktop: boolean;
+    alertWebhookUrl: string;
+    /** Live getter — when provided, overrides static fields for hot-reload */
+    getLiveConfig?: () => {
+        action: string;
+        recordAll: boolean;
+        blockMinSeverity: string;
+        alertMinSeverity: string;
+    };
+}
+export declare function createToolGuardPlugin(db: Database.Database, config: ToolGuardConfig): Plugin;
+//# sourceMappingURL=tool-guard.d.ts.map

package/dist/plugins/builtin/tool-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../../src/plugins/builtin/tool-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EAMP,MAAM,aAAa,CAAC;AAQrB,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CAClH;AAqFD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,GAAG,MAAM,CA2M5F"}

package/dist/plugins/builtin/tool-guard.js

@@ -0,0 +1,259 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createToolGuardPlugin = createToolGuardPlugin;
+const tool_calls_js_1 = require("../../storage/repositories/tool-calls.js");
+const tool_guard_rules_js_1 = require("../../storage/repositories/tool-guard-rules.js");
+const audit_log_js_1 = require("../../storage/repositories/audit-log.js");
+const extractor_js_1 = require("../../tool-guard/extractor.js");
+const rules_js_1 = require("../../tool-guard/rules.js");
+const alert_js_1 = require("../../tool-guard/alert.js");
+const logger_js_1 = require("../../utils/logger.js");
+const log = (0, logger_js_1.createLogger)('tool-guard');
+function analyzeToolCalls(body, isStreaming, rules) {
+    const toolCalls = (0, extractor_js_1.extractToolCalls)(body, isStreaming);
+    return toolCalls.map(tc => ({
+        tc,
+        ruleMatch: (0, rules_js_1.matchRules)(tc.toolName, tc.toolInput, rules),
+    }));
+}
+/**
+ * Replace blocked tool_use blocks with text warnings in the response body.
+ * Supports Anthropic (content[].type=tool_use) and OpenAI (choices[].message.tool_calls) formats.
+ */
+function replaceBlockedToolCalls(parsedBody, blockable) {
+    const blockedNames = new Set(blockable.map(m => m.tc.toolName));
+    if (!parsedBody) {
+        // Can't parse — return a simple warning
+        const warnings = blockable.map(m => `[BLOCKED by Bastion Tool Guard] Tool "${m.tc.toolName}" was blocked: ${m.ruleMatch.rule.name} (${m.ruleMatch.rule.severity})`);
+        return JSON.stringify({ type: 'error', error: { type: 'tool_guard_blocked', message: warnings.join('; ') } });
+    }
+    const body = JSON.parse(JSON.stringify(parsedBody)); // deep clone
+    // Anthropic format: content[] array with type=tool_use blocks
+    if (Array.isArray(body.content)) {
+        body.content = body.content.map((block) => {
+            if (block.type === 'tool_use' && blockedNames.has(block.name)) {
+                const match = blockable.find(m => m.tc.toolName === block.name);
+                const warning = `[BLOCKED by Bastion Tool Guard] Tool "${block.name}" was blocked: ${match?.ruleMatch?.rule.name ?? 'unknown rule'} (${match?.ruleMatch?.rule.severity ?? 'unknown'})`;
+                return { type: 'text', text: warning };
+            }
+            return block;
+        });
+        // Change stop_reason from tool_use to end_turn since tools were removed
+        if (body.stop_reason === 'tool_use') {
+            body.stop_reason = 'end_turn';
+        }
+        return JSON.stringify(body);
+    }
+    // OpenAI format: choices[].message.tool_calls
+    if (Array.isArray(body.choices)) {
+        const warnings = [];
+        for (const choice of body.choices) {
+            const msg = choice.message;
+            if (!msg?.tool_calls || !Array.isArray(msg.tool_calls))
+                continue;
+            const kept = [];
+            for (const tc of msg.tool_calls) {
+                const fn = tc.function;
+                const name = fn?.name;
+                if (name && blockedNames.has(name)) {
+                    const match = blockable.find(m => m.tc.toolName === name);
+                    warnings.push(`[BLOCKED by Bastion Tool Guard] Tool "${name}" was blocked: ${match?.ruleMatch?.rule.name ?? 'unknown rule'} (${match?.ruleMatch?.rule.severity ?? 'unknown'})`);
+                }
+                else {
+                    kept.push(tc);
+                }
+            }
+            msg.tool_calls = kept.length > 0 ? kept : undefined;
+            if (warnings.length > 0) {
+                msg.content = (msg.content ?? '') + '\n' + warnings.join('\n');
+            }
+            if (kept.length === 0) {
+                choice.finish_reason = 'stop';
+            }
+        }
+        return JSON.stringify(body);
+    }
+    // Unknown format — return body with warning prepended
+    return JSON.stringify(body);
+}
+function createToolGuardPlugin(db, config) {
+    const repo = new tool_calls_js_1.ToolCallsRepository(db);
+    const rulesRepo = new tool_guard_rules_js_1.ToolGuardRulesRepository(db);
+    const auditRepo = new audit_log_js_1.AuditLogRepository(db);
+    // Seed built-in rules on first init (INSERT OR IGNORE preserves user toggles)
+    rulesRepo.seedBuiltins(rules_js_1.BUILTIN_RULES);
+    // Live config readers — support hot-reload from Dashboard
+    const getAction = () => config.getLiveConfig ? config.getLiveConfig().action : config.action;
+    const getRecordAll = () => config.getLiveConfig ? config.getLiveConfig().recordAll : config.recordAll;
+    const getBlockMinSeverity = () => config.getLiveConfig ? config.getLiveConfig().blockMinSeverity : config.blockMinSeverity;
+    const getAlertMinSeverity = () => config.getLiveConfig ? config.getLiveConfig().alertMinSeverity : config.alertMinSeverity;
+    function getAlertConfig() {
+        return {
+            minSeverity: getAlertMinSeverity() ?? 'high',
+            desktop: config.alertDesktop ?? true,
+            webhookUrl: config.alertWebhookUrl ?? '',
+        };
+    }
+    /**
+     * Determine the action result for a tool call:
+     * - 'block' if action=block and severity meets blockMinSeverity
+     * - 'flag' if rule matched but not blocked
+     * - 'pass' if no rule matched
+     */
+    function resolveAction(ruleMatch) {
+        if (!ruleMatch)
+            return 'pass';
+        if (getAction() === 'block' && (0, alert_js_1.shouldAlert)(ruleMatch.rule.severity, getBlockMinSeverity())) {
+            return 'block';
+        }
+        return 'flag';
+    }
+    /** Record tool calls to DB and dispatch alerts. Returns count of flagged calls. */
+    function recordAndAlert(matches, requestId, sessionId) {
+        const recordAll = getRecordAll() !== false;
+        let flaggedCount = 0;
+        for (const { tc, ruleMatch } of matches) {
+            if (!ruleMatch && !recordAll)
+                continue;
+            const inputStr = typeof tc.toolInput === 'string'
+                ? tc.toolInput
+                : JSON.stringify(tc.toolInput);
+            const actionResult = resolveAction(ruleMatch);
+            repo.insert({
+                id: crypto.randomUUID(),
+                request_id: requestId,
+                tool_name: tc.toolName,
+                tool_input: inputStr,
+                rule_id: ruleMatch?.rule.id ?? null,
+                rule_name: ruleMatch?.rule.name ?? null,
+                severity: ruleMatch?.rule.severity ?? 'info',
+                category: ruleMatch?.rule.category ?? null,
+                action: actionResult,
+                provider: tc.provider,
+                session_id: sessionId ?? null,
+            });
+            if (ruleMatch) {
+                flaggedCount++;
+                log.warn('Dangerous tool call detected', {
+                    requestId,
+                    toolName: tc.toolName,
+                    ruleId: ruleMatch.rule.id,
+                    severity: ruleMatch.rule.severity,
+                    matched: ruleMatch.matchedText,
+                    action: actionResult,
+                });
+                (0, alert_js_1.dispatchAlert)(getAlertConfig(), tc.toolName, ruleMatch, requestId, sessionId);
+            }
+        }
+        return flaggedCount;
+    }
+    return {
+        name: 'tool-guard',
+        priority: 15,
+        version: '1.0.0',
+        apiVersion: 2,
+        // ── Load rules from DB and set streaming block flag ──
+        async onRequest(context) {
+            const rules = rulesRepo.getEnabled();
+            context._toolGuardRules = rules;
+            log.debug('onRequest', { action: getAction(), recordAll: getRecordAll(), isStreaming: context.isStreaming });
+            if (getAction() === 'block' && context.isStreaming) {
+                context._toolGuardStreamBlock = getBlockMinSeverity();
+            }
+        },
+        // ── Pre-send: block dangerous tool calls in non-streaming responses ──
+        async onResponse(context) {
+            const currentAction = getAction();
+            log.debug('onResponse', { action: currentAction, isStreaming: context.isStreaming });
+            if (currentAction !== 'block')
+                return;
+            if (context.isStreaming)
+                return; // streaming handled in onResponseComplete (post-send audit only)
+            const rules = context.request._toolGuardRules ?? rulesRepo.getEnabled();
+            const matches = analyzeToolCalls(context.body, false, rules);
+            log.debug('onResponse analysis', {
+                requestId: context.request.id,
+                toolCalls: matches.length,
+                bodyLen: context.body.length,
+            });
+            if (matches.length === 0)
+                return;
+            // Check if any flagged call meets the block severity threshold
+            const currentBlockMin = getBlockMinSeverity();
+            const blockable = matches.filter(m => m.ruleMatch && (0, alert_js_1.shouldAlert)(m.ruleMatch.rule.severity, currentBlockMin));
+            // Record all tool calls and dispatch alerts
+            const flagged = recordAndAlert(matches, context.request.id, context.request.sessionId);
+            if (flagged > 0) {
+                context.request.toolGuardHit = true;
+                context.request.toolGuardFindings = flagged;
+            }
+            // Mark that onResponse already recorded these (so onResponseComplete can skip)
+            context.request._toolGuardRecorded = true;
+            if (blockable.length > 0) {
+                const reasons = blockable.map(m => `${m.tc.toolName}: ${m.ruleMatch.rule.name} (${m.ruleMatch.rule.severity})`);
+                log.warn('Blocking response', { requestId: context.request.id, blocked: reasons });
+                // Auto-audit on tool-guard block (same pattern as DLP scanner)
+                try {
+                    auditRepo.insert({
+                        id: crypto.randomUUID(),
+                        request_id: context.request.id,
+                        requestBody: context.request.body,
+                        responseBody: context.body,
+                        toolGuardHit: true,
+                    });
+                }
+                catch (err) {
+                    log.warn('Failed to write tool-guard auto-audit', { error: err.message });
+                }
+                // Replace dangerous tool_use blocks with text warnings in the response body
+                // (consistent with streaming guard behavior — client sees warning, not 403)
+                const modified = replaceBlockedToolCalls(context.parsedBody, blockable);
+                return { modifiedBody: modified };
+            }
+        },
+        // ── Post-send: audit all tool calls (streaming + non-streaming fallback) ──
+        async onResponseComplete(context) {
+            // Skip if onResponse already recorded (non-streaming + action=block)
+            if (context.request._toolGuardRecorded)
+                return;
+            try {
+                const rules = context.request._toolGuardRules ?? rulesRepo.getEnabled();
+                // Use pre-parsed SSE events when available (avoids expensive body re-parsing)
+                let matches;
+                if (context.sseEvents && context.sseEvents.length > 0) {
+                    const toolCalls = (0, extractor_js_1.extractToolCallsFromParsedEvents)(context.sseEvents);
+                    matches = toolCalls.map(tc => ({
+                        tc,
+                        ruleMatch: (0, rules_js_1.matchRules)(tc.toolName, tc.toolInput, rules),
+                    }));
+                }
+                else {
+                    matches = analyzeToolCalls(context.body, context.isStreaming, rules);
+                }
+                log.debug('onResponseComplete', {
+                    requestId: context.request.id,
+                    isStreaming: context.isStreaming,
+                    toolCalls: matches.length,
+                    bodyLen: context.body.length,
+                    usedPreParsed: Boolean(context.sseEvents?.length),
+                });
+                if (matches.length === 0)
+                    return;
+                const flagged = recordAndAlert(matches, context.request.id, context.request.sessionId);
+                if (flagged > 0) {
+                    context.request.toolGuardHit = true;
+                    context.request.toolGuardFindings = flagged;
+                }
+                log.debug('Tool calls recorded', {
+                    requestId: context.request.id,
+                    total: matches.length,
+                    flagged,
+                });
+            }
+            catch (err) {
+                log.warn('Tool guard processing failed', { error: err.message });
+            }
+        },
+    };
+}
+//# sourceMappingURL=tool-guard.js.map

package/dist/plugins/builtin/tool-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.js","sourceRoot":"","sources":["../../../src/plugins/builtin/tool-guard.ts"],"names":[],"mappings":";;AAkHA,sDA2MC;AArTD,4EAA+E;AAC/E,wFAA0F;AAC1F,0EAA6E;AAC7E,gEAA2H;AAC3H,wDAA0G;AAC1G,wDAAyF;AACzF,qDAAqD;AAGrD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,YAAY,CAAC,CAAC;AAmBvC,SAAS,gBAAgB,CAAC,IAAY,EAAE,WAAoB,EAAE,KAAsB;IAClF,MAAM,SAAS,GAAG,IAAA,+BAAgB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1B,EAAE;QACF,SAAS,EAAE,IAAA,qBAAU,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;KACxD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,UAA0C,EAC1C,SAA4B;IAE5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,wCAAwC;QACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACjC,yCAAyC,CAAC,CAAC,EAAE,CAAC,QAAQ,kBAAkB,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CACjI,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa;IAElE,8DAA8D;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAA8B,EAAE,EAAE;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,EAAE,CAAC;gBACxE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,yCAAyC,KAAK,CAAC,IAAI,kBAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,KAAK,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC;gBACvL,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,wEAAwE;QACxE,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,8CAA8C;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAoC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,OAA8C,CAAC;YAClE,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAEjE,MAAM,IAAI,GAAc,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAuC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,QAA+C,CAAC;gBAC9D,MAAM,IAAI,GAAG,EAAE,EAAE,IAA0B,CAAC;gBAC5C,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;oBAC1D,QAAQ,CAAC,IAAI,CAAC,yCAAyC,IAAI,kBAAkB,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,KAAK,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,OAAO,GAAG,CAAE,GAAG,CAAC,OAAkB,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,sDAAsD;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,qBAAqB,CAAC,EAAqB,EAAE,MAAuB;IAClF,MAAM,IAAI,GAAG,IAAI,mCAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,8CAAwB,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,iCAAkB,CAAC,EAAE,CAAC,CAAC;IAE7C,8EAA8E;IAC9E,SAAS,CAAC,YAAY,CAAC,wBAAa,CAAC,CAAC;IAEtC,0DAA0D;IAC1D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7F,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACtG,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC3H,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAE3H,SAAS,cAAc;QACrB,OAAO;YACL,WAAW,EAAE,mBAAmB,EAAE,IAAI,MAAM;YAC5C,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACpC,UAAU,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;SACzC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS,aAAa,CAAC,SAA2B;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,IAAA,sBAAW,EAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;YAC3F,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mFAAmF;IACnF,SAAS,cAAc,CACrB,OAA0B,EAC1B,SAAiB,EACjB,SAAkB;QAElB,MAAM,SAAS,GAAG,YAAY,EAAE,KAAK,KAAK,CAAC;QAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEvC,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ;gBAC/C,CAAC,CAAC,EAAE,CAAC,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC;gBACV,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,EAAE,CAAC,QAAQ;gBACtB,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;gBACnC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;gBAC5C,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC1C,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,UAAU,EAAE,SAAS,IAAI,IAAI;aAC9B,CAAC,CAAC;YAEH,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACvC,SAAS;oBACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;oBACzB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;oBACjC,OAAO,EAAE,SAAS,CAAC,WAAW;oBAC9B,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;gBAEH,IAAA,wBAAa,EAAC,cAAc,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,CAAC;QAEb,wDAAwD;QACxD,KAAK,CAAC,SAAS,CAAC,OAAuB;YACrC,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACrC,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7G,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACnD,OAAO,CAAC,qBAAqB,GAAG,mBAAmB,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,KAAK,CAAC,UAAU,CAAC,OAAiC;YAChD,MAAM,aAAa,GAAG,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrF,IAAI,aAAa,KAAK,OAAO;gBAAE,OAAO;YACtC,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,CAAC,iEAAiE;YAElG,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,SAAS,EAAE,OAAO,CAAC,MAAM;gBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;aAC7B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEjC,+DAA+D;YAC/D,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAA,sBAAW,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAC5E,CAAC;YAEF,4CAA4C;YAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBACpC,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;YAC9C,CAAC;YAED,+EAA+E;YAC/E,OAAO,CAAC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAE1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAChC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CAC9E,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;gBAEnF,+DAA+D;gBAC/D,IAAI,CAAC;oBACH,SAAS,CAAC,MAAM,CAAC;wBACf,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;wBACvB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;wBAC9B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;wBACjC,YAAY,EAAE,OAAO,CAAC,IAAI;wBAC1B,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAED,4EAA4E;gBAC5E,4EAA4E;gBAC5E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBACxE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,kBAAkB,CAAC,OAAgC;YACvD,qEAAqE;YACrE,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB;gBAAE,OAAO;YAE/C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBAExE,8EAA8E;gBAC9E,IAAI,OAA0B,CAAC;gBAC/B,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,SAAS,GAAG,IAAA,+CAAgC,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACtE,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBAC7B,EAAE;wBACF,SAAS,EAAE,IAAA,qBAAU,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;qBACxD,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvE,CAAC;gBAED,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;oBAC5B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;iBAClD,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAEjC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACvF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;oBACpC,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;gBAC9C,CAAC;gBAED,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/context.d.ts

@@ -0,0 +1,8 @@
+import type { PluginContext } from '../plugin-api/index.js';
+import type { PluginEventBus } from './event-bus.js';
+import type { PluginEventsRepository } from '../storage/repositories/plugin-events.js';
+export interface PluginContextInternal extends PluginContext {
+    _getState<T>(key: string): T | undefined;
+}
+export declare function createPluginContext(pluginName: string, config: Record<string, unknown>, repo: PluginEventsRepository, eventBus: PluginEventBus): PluginContextInternal;
+//# sourceMappingURL=context.d.ts.map

package/dist/plugins/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/plugins/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAGvF,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;CAC1C;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE,cAAc,GACvB,qBAAqB,CA4BvB"}

package/dist/plugins/context.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPluginContext = createPluginContext;
+const logger_js_1 = require("../utils/logger.js");
+function createPluginContext(pluginName, config, repo, eventBus) {
+    const logger = (0, logger_js_1.createLogger)(`plugin:${pluginName}`);
+    const state = new Map();
+    return {
+        _getState(key) {
+            return state.get(key);
+        },
+        config,
+        logger,
+        db: {
+            insertEvent(event) {
+                repo.insertEvent(pluginName, null, event);
+            },
+        },
+        getPluginState(key) {
+            return state.get(key);
+        },
+        setPluginState(key, value) {
+            state.set(key, value);
+        },
+        emit(event, data) {
+            eventBus.emit(event, data);
+        },
+        on(event, handler) {
+            eventBus.on(event, handler);
+        },
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/plugins/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/plugins/context.ts"],"names":[],"mappings":";;AASA,kDAiCC;AAvCD,kDAAkD;AAMlD,SAAgB,mBAAmB,CACjC,UAAkB,EAClB,MAA+B,EAC/B,IAA4B,EAC5B,QAAwB;IAExB,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,UAAU,UAAU,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEzC,OAAO;QACL,SAAS,CAAI,GAAW;YACtB,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAkB,CAAC;QACzC,CAAC;QACD,MAAM;QACN,MAAM;QACN,EAAE,EAAE;YACF,WAAW,CAAC,KAAkB;gBAC5B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;SACF;QACD,cAAc,CAAI,GAAW;YAC3B,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAkB,CAAC;QACzC,CAAC;QACD,cAAc,CAAI,GAAW,EAAE,KAAQ;YACrC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAa,EAAE,IAAa;YAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,EAAE,CAAC,KAAa,EAAE,OAAgC;YAChD,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/event-bus.d.ts

@@ -0,0 +1,9 @@
+export declare class PluginEventBus {
+    private emitter;
+    constructor();
+    emit(event: string, data: unknown): void;
+    on(event: string, handler: (data: unknown) => void): void;
+    off(event: string, handler: (data: unknown) => void): void;
+    removeAllListeners(event?: string): void;
+}
+//# sourceMappingURL=event-bus.d.ts.map

package/dist/plugins/event-bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.d.ts","sourceRoot":"","sources":["../../src/plugins/event-bus.ts"],"names":[],"mappings":"AAEA,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAe;;IAO9B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAIxC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAIzD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAI1D,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;CAGzC"}

package/dist/plugins/event-bus.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PluginEventBus = void 0;
+const node_events_1 = require("node:events");
+class PluginEventBus {
+    emitter;
+    constructor() {
+        this.emitter = new node_events_1.EventEmitter();
+        this.emitter.setMaxListeners(50);
+    }
+    emit(event, data) {
+        this.emitter.emit(event, data);
+    }
+    on(event, handler) {
+        this.emitter.on(event, handler);
+    }
+    off(event, handler) {
+        this.emitter.off(event, handler);
+    }
+    removeAllListeners(event) {
+        this.emitter.removeAllListeners(event);
+    }
+}
+exports.PluginEventBus = PluginEventBus;
+//# sourceMappingURL=event-bus.js.map

package/dist/plugins/event-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.js","sourceRoot":"","sources":["../../src/plugins/event-bus.ts"],"names":[],"mappings":";;;AAAA,6CAA2C;AAE3C,MAAa,cAAc;IACjB,OAAO,CAAe;IAE9B;QACE,IAAI,CAAC,OAAO,GAAG,IAAI,0BAAY,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,IAAa;QAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,EAAE,CAAC,KAAa,EAAE,OAAgC;QAChD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,KAAa,EAAE,OAAgC;QACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,kBAAkB,CAAC,KAAc;QAC/B,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;CACF;AAvBD,wCAuBC"}

package/dist/plugins/index.d.ts

@@ -0,0 +1,18 @@
+import type { Plugin, PluginRequestResult, PluginResponseResult, RequestContext, ResponseInterceptContext, ResponseCompleteContext } from './types.js';
+export declare class PluginManager {
+    private plugins;
+    private disabledPlugins;
+    private timeoutMs;
+    private failMode;
+    constructor(timeoutMs?: number, failMode?: 'open' | 'closed');
+    setFailMode(mode: 'open' | 'closed'): void;
+    register(plugin: Plugin): void;
+    getPlugins(): Plugin[];
+    disable(name: string): boolean;
+    enable(name: string): boolean;
+    isDisabled(name: string): boolean;
+    runOnRequest(context: RequestContext): Promise<PluginRequestResult>;
+    runOnResponse(context: ResponseInterceptContext): Promise<PluginResponseResult>;
+    runOnResponseComplete(context: ResponseCompleteContext): Promise<void>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAMvJ,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAA0B;IACjD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAoB;gBAExB,SAAS,GAAE,MAAW,EAAE,QAAQ,GAAE,MAAM,GAAG,QAAiB;IAKxE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAK1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAM9B,UAAU,IAAI,MAAM,EAAE;IAItB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAQ9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAQ7B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI3B,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmDnE,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2C/E,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;CAqB7E"}