@clawnitor/plugin 1.0.0

package/dist/kill-switch/kill-state.d.ts

@@ -0,0 +1,16 @@
+export interface KillStateData {
+    killed: boolean;
+    reason?: string;
+    killedAt?: Date;
+}
+declare class KillState {
+    private state;
+    isKilled(): boolean;
+    getReason(): string | undefined;
+    setKilled(reason: string): void;
+    clearKilled(): void;
+    getState(): Readonly<KillStateData>;
+}
+export declare const killState: KillState;
+export {};
+//# sourceMappingURL=kill-state.d.ts.map

package/dist/kill-switch/kill-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-state.d.ts","sourceRoot":"","sources":["../../src/kill-switch/kill-state.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,IAAI,CAAC;CACjB;AAED,cAAM,SAAS;IACb,OAAO,CAAC,KAAK,CAAoC;IAEjD,QAAQ,IAAI,OAAO;IAInB,SAAS,IAAI,MAAM,GAAG,SAAS;IAI/B,SAAS,CAAC,MAAM,EAAE,MAAM;IAQxB,WAAW;IAIX,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC;CAGpC;AAGD,eAAO,MAAM,SAAS,WAAkB,CAAC"}

package/dist/kill-switch/kill-state.js

@@ -0,0 +1,25 @@
+class KillState {
+    state = { killed: false };
+    isKilled() {
+        return this.state.killed;
+    }
+    getReason() {
+        return this.state.reason;
+    }
+    setKilled(reason) {
+        this.state = {
+            killed: true,
+            reason,
+            killedAt: new Date(),
+        };
+    }
+    clearKilled() {
+        this.state = { killed: false };
+    }
+    getState() {
+        return { ...this.state };
+    }
+}
+// Singleton
+export const killState = new KillState();
+//# sourceMappingURL=kill-state.js.map

package/dist/kill-switch/kill-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-state.js","sourceRoot":"","sources":["../../src/kill-switch/kill-state.ts"],"names":[],"mappings":"AAMA,MAAM,SAAS;IACL,KAAK,GAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEjD,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,KAAK,GAAG;YACX,MAAM,EAAE,IAAI;YACZ,MAAM;YACN,QAAQ,EAAE,IAAI,IAAI,EAAE;SACrB,CAAC;IACJ,CAAC;IAED,WAAW;QACT,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,YAAY;AACZ,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/dist/kill-switch/local-failsafe.d.ts

@@ -0,0 +1,19 @@
+import type { PluginConfig } from "../config.js";
+interface FailsafeResult {
+    block: boolean;
+    reason: string;
+}
+export declare class LocalFailsafe {
+    private sessionSpend;
+    private rateCounter;
+    private config;
+    constructor(config: PluginConfig);
+    addSpend(costUsd: number): void;
+    recordToolCall(): void;
+    resetSession(): void;
+    check(toolName: string): FailsafeResult;
+    getSessionSpend(): number;
+    getCallsPerMinute(): number;
+}
+export {};
+//# sourceMappingURL=local-failsafe.d.ts.map

package/dist/kill-switch/local-failsafe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-failsafe.d.ts","sourceRoot":"","sources":["../../src/kill-switch/local-failsafe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,UAAU,cAAc;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAkBD,qBAAa,aAAa;IACxB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,YAAY;IAIhC,QAAQ,CAAC,OAAO,EAAE,MAAM;IAIxB,cAAc;IAId,YAAY;IAIZ,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc;IAiCvC,eAAe,IAAI,MAAM;IAIzB,iBAAiB,IAAI,MAAM;CAG5B"}

package/dist/kill-switch/local-failsafe.js

@@ -0,0 +1,64 @@
+// Sliding window rate counter
+class RateCounter {
+    timestamps = [];
+    record() {
+        this.timestamps.push(Date.now());
+    }
+    getCallsPerMinute() {
+        const now = Date.now();
+        const oneMinuteAgo = now - 60_000;
+        this.timestamps = this.timestamps.filter((t) => t > oneMinuteAgo);
+        return this.timestamps.length;
+    }
+}
+export class LocalFailsafe {
+    sessionSpend = 0;
+    rateCounter = new RateCounter();
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    addSpend(costUsd) {
+        this.sessionSpend += costUsd;
+    }
+    recordToolCall() {
+        this.rateCounter.record();
+    }
+    resetSession() {
+        this.sessionSpend = 0;
+    }
+    check(toolName) {
+        // 1. Spend circuit breaker
+        if (this.sessionSpend >= this.config.spendLimit) {
+            return {
+                block: true,
+                reason: `Clawnitor: Spend limit reached ($${this.sessionSpend.toFixed(2)} >= $${this.config.spendLimit}). Agent paused.`,
+            };
+        }
+        // 2. Rate limiter
+        const callsPerMin = this.rateCounter.getCallsPerMinute();
+        if (callsPerMin >= this.config.rateLimit) {
+            return {
+                block: true,
+                reason: `Clawnitor: Rate limit reached (${callsPerMin} calls/min >= ${this.config.rateLimit}). Agent paused.`,
+            };
+        }
+        // 3. Tool blocklist
+        const normalizedTool = toolName.toLowerCase();
+        const blocked = this.config.toolBlocklist.some((t) => t.toLowerCase() === normalizedTool);
+        if (blocked) {
+            return {
+                block: true,
+                reason: `Clawnitor: Tool "${toolName}" is blocklisted. Agent paused.`,
+            };
+        }
+        return { block: false, reason: "" };
+    }
+    getSessionSpend() {
+        return this.sessionSpend;
+    }
+    getCallsPerMinute() {
+        return this.rateCounter.getCallsPerMinute();
+    }
+}
+//# sourceMappingURL=local-failsafe.js.map

package/dist/kill-switch/local-failsafe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-failsafe.js","sourceRoot":"","sources":["../../src/kill-switch/local-failsafe.ts"],"names":[],"mappings":"AAOA,8BAA8B;AAC9B,MAAM,WAAW;IACP,UAAU,GAAa,EAAE,CAAC;IAElC,MAAM;QACJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,iBAAiB;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,GAAG,GAAG,MAAM,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IAChB,YAAY,GAAG,CAAC,CAAC;IACjB,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,CAAe;IAE7B,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC;IAC/B,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY;QACV,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,2BAA2B;QAC3B,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,oCAAoC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,kBAAkB;aACzH,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACzD,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,kCAAkC,WAAW,iBAAiB,IAAI,CAAC,MAAM,CAAC,SAAS,kBAAkB;aAC9G,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAC1C,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,oBAAoB,QAAQ,iCAAiC;aACtE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;IAC9C,CAAC;CACF"}

package/dist/redaction.d.ts

@@ -0,0 +1,3 @@
+export declare const DEFAULT_PATTERNS: string[];
+export declare function redact(text: string, patterns: string[]): string;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,UA+B5B,CAAC;AAEF,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAW/D"}

package/dist/redaction.js

@@ -0,0 +1,46 @@
+export const DEFAULT_PATTERNS = [
+    // OpenAI
+    "sk-[a-zA-Z0-9]{20,}",
+    "sk-proj-[a-zA-Z0-9]{20,}",
+    // Anthropic
+    "sk-ant-[a-zA-Z0-9\\-]{20,}",
+    // Stripe
+    "sk_live_[a-zA-Z0-9]{20,}",
+    "sk_test_[a-zA-Z0-9]{20,}",
+    "pk_live_[a-zA-Z0-9]{20,}",
+    "pk_test_[a-zA-Z0-9]{20,}",
+    // Bearer tokens / JWTs
+    "Bearer\\s+[a-zA-Z0-9._\\-]{20,}",
+    "eyJ[a-zA-Z0-9_\\-]{10,}\\.[a-zA-Z0-9_\\-]{10,}\\.[a-zA-Z0-9_\\-]{10,}",
+    // AWS
+    "AKIA[0-9A-Z]{16}",
+    // GitHub
+    "ghp_[a-zA-Z0-9]{36}",
+    "gho_[a-zA-Z0-9]{36}",
+    "github_pat_[a-zA-Z0-9_]{20,}",
+    // Slack
+    "xoxb-[a-zA-Z0-9\\-]+",
+    "xoxp-[a-zA-Z0-9\\-]+",
+    // Private keys
+    "-----BEGIN\\s+(RSA\\s+)?PRIVATE\\s+KEY-----",
+    // Passwords in URLs/config
+    "password\\s*[=:]\\s*\\S+",
+    // Database connection strings with passwords
+    "(?:postgres|mysql|mongodb)://[^:]+:[^@]+@",
+    // Generic secret assignments
+    "(?:secret|token|api_key|apikey)\\s*[=:]\\s*\\S{8,}",
+];
+export function redact(text, patterns) {
+    let result = text;
+    for (const pattern of patterns) {
+        try {
+            const regex = new RegExp(pattern, "gi");
+            result = result.replace(regex, "[REDACTED]");
+        }
+        catch {
+            // Skip invalid regex patterns
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,SAAS;IACT,qBAAqB;IACrB,0BAA0B;IAC1B,YAAY;IACZ,4BAA4B;IAC5B,SAAS;IACT,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,uBAAuB;IACvB,iCAAiC;IACjC,uEAAuE;IACvE,MAAM;IACN,kBAAkB;IAClB,SAAS;IACT,qBAAqB;IACrB,qBAAqB;IACrB,8BAA8B;IAC9B,QAAQ;IACR,sBAAsB;IACtB,sBAAsB;IACtB,eAAe;IACf,6CAA6C;IAC7C,2BAA2B;IAC3B,0BAA0B;IAC1B,6CAA6C;IAC7C,2CAA2C;IAC3C,6BAA6B;IAC7B,oDAAoD;CACrD,CAAC;AAEF,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,QAAkB;IACrD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/rule-cache.d.ts

@@ -0,0 +1,42 @@
+import type { PluginConfig } from "./config.js";
+export interface CachedRule {
+    id: string;
+    name: string;
+    rule_type: string;
+    config: any;
+    enabled: boolean;
+}
+interface RuleCheckResult {
+    blocked: boolean;
+    ruleName?: string;
+    reason?: string;
+}
+interface EventRecord {
+    timestamp: number;
+    toolName?: string;
+    eventType?: string;
+    costUsd?: number;
+    action?: string;
+    target?: string;
+    rawSnippet?: string;
+}
+export declare class RuleCache {
+    private rules;
+    private config;
+    private fetchTimer;
+    private recentEvents;
+    private readonly MAX_RECENT_EVENTS;
+    constructor(config: PluginConfig);
+    start(): void;
+    stop(): void;
+    private fetchRules;
+    recordEvent(event: EventRecord): void;
+    checkBeforeToolCall(toolName: string, params?: Record<string, unknown>): RuleCheckResult;
+    private evaluateRule;
+    private evaluateKeyword;
+    private evaluateRate;
+    private evaluateThreshold;
+    getRuleCount(): number;
+}
+export {};
+//# sourceMappingURL=rule-cache.d.ts.map

package/dist/rule-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-cache.d.ts","sourceRoot":"","sources":["../src/rule-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAGD,UAAU,WAAW;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAO;gBAE7B,MAAM,EAAE,YAAY;IAIhC,KAAK;IAML,IAAI;YAOU,UAAU;IAiBxB,WAAW,CAAC,KAAK,EAAE,WAAW;IAS9B,mBAAmB,CACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,eAAe;IAelB,OAAO,CAAC,YAAY;IAsBpB,OAAO,CAAC,eAAe;IAgCvB,OAAO,CAAC,YAAY;IA4BpB,OAAO,CAAC,iBAAiB;IA8BzB,YAAY,IAAI,MAAM;CAGvB"}

package/dist/rule-cache.js

@@ -0,0 +1,138 @@
+export class RuleCache {
+    rules = [];
+    config;
+    fetchTimer = null;
+    recentEvents = [];
+    MAX_RECENT_EVENTS = 500;
+    constructor(config) {
+        this.config = config;
+    }
+    start() {
+        // Fetch immediately, then every 60s
+        this.fetchRules();
+        this.fetchTimer = setInterval(() => this.fetchRules(), 60_000);
+    }
+    stop() {
+        if (this.fetchTimer) {
+            clearInterval(this.fetchTimer);
+            this.fetchTimer = null;
+        }
+    }
+    async fetchRules() {
+        try {
+            const res = await fetch(`${this.config.backendUrl}/api/rules`, {
+                headers: {
+                    Authorization: `Bearer ${this.config.apiKey}`,
+                },
+                signal: AbortSignal.timeout(5000),
+            });
+            if (res.ok) {
+                const data = await res.json();
+                this.rules = (data.rules || []).filter((r) => r.enabled);
+            }
+        }
+        catch {
+            // Keep existing cached rules on fetch failure
+        }
+    }
+    recordEvent(event) {
+        this.recentEvents.push(event);
+        // Trim to max size
+        if (this.recentEvents.length > this.MAX_RECENT_EVENTS) {
+            this.recentEvents = this.recentEvents.slice(-this.MAX_RECENT_EVENTS);
+        }
+    }
+    // Evaluate all cached pattern rules against the current tool call + recent history
+    checkBeforeToolCall(toolName, params) {
+        const paramsStr = params ? JSON.stringify(params).slice(0, 500) : "";
+        for (const rule of this.rules) {
+            if (rule.rule_type === "nl")
+                continue; // Can't evaluate locally
+            const result = this.evaluateRule(rule, toolName, paramsStr);
+            if (result.blocked) {
+                return result;
+            }
+        }
+        return { blocked: false };
+    }
+    evaluateRule(rule, toolName, paramsStr) {
+        const config = rule.config;
+        if (rule.rule_type === "keyword") {
+            return this.evaluateKeyword(rule, toolName, paramsStr);
+        }
+        if (rule.rule_type === "rate") {
+            return this.evaluateRate(rule);
+        }
+        if (rule.rule_type === "threshold") {
+            return this.evaluateThreshold(rule);
+        }
+        return { blocked: false };
+    }
+    evaluateKeyword(rule, toolName, paramsStr) {
+        const config = rule.config;
+        const keywords = config.keywords || [];
+        const caseSensitive = config.caseSensitive || false;
+        const matchMode = config.matchMode || "any";
+        const searchable = [toolName, paramsStr].join(" ");
+        const text = caseSensitive ? searchable : searchable.toLowerCase();
+        const matched = keywords.filter((kw) => {
+            const k = caseSensitive ? kw : kw.toLowerCase();
+            return text.includes(k);
+        });
+        const triggered = matchMode === "any" ? matched.length > 0 : matched.length === keywords.length;
+        if (triggered) {
+            return {
+                blocked: true,
+                ruleName: rule.name,
+                reason: `Clawnitor: Rule "${rule.name}" blocked — keyword match: ${matched.join(", ")}`,
+            };
+        }
+        return { blocked: false };
+    }
+    evaluateRate(rule) {
+        const config = rule.config;
+        const windowMs = (config.windowMinutes || 10) * 60 * 1000;
+        const maxCount = config.maxCount || 100;
+        const now = Date.now();
+        let filtered = this.recentEvents.filter((e) => e.timestamp > now - windowMs);
+        if (config.eventType) {
+            filtered = filtered.filter((e) => e.eventType === config.eventType);
+        }
+        if (config.toolName) {
+            filtered = filtered.filter((e) => e.toolName === config.toolName);
+        }
+        if (filtered.length >= maxCount) {
+            return {
+                blocked: true,
+                ruleName: rule.name,
+                reason: `Clawnitor: Rule "${rule.name}" blocked — ${filtered.length} events in ${config.windowMinutes}min (max: ${maxCount})`,
+            };
+        }
+        return { blocked: false };
+    }
+    evaluateThreshold(rule) {
+        const config = rule.config;
+        const windowMs = (config.windowMinutes || 60) * 60 * 1000;
+        const now = Date.now();
+        const recentInWindow = this.recentEvents.filter((e) => e.timestamp > now - windowMs);
+        let sum = 0;
+        for (const event of recentInWindow) {
+            if (config.field === "cost_usd" && event.costUsd) {
+                sum += event.costUsd;
+            }
+        }
+        const triggered = config.operator === "gt" ? sum > config.value : sum < config.value;
+        if (triggered) {
+            return {
+                blocked: true,
+                ruleName: rule.name,
+                reason: `Clawnitor: Rule "${rule.name}" blocked — ${config.field} = ${sum.toFixed(4)} (${config.operator} ${config.value})`,
+            };
+        }
+        return { blocked: false };
+    }
+    getRuleCount() {
+        return this.rules.length;
+    }
+}
+//# sourceMappingURL=rule-cache.js.map

package/dist/rule-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-cache.js","sourceRoot":"","sources":["../src/rule-cache.ts"],"names":[],"mappings":"AA2BA,MAAM,OAAO,SAAS;IACZ,KAAK,GAAiB,EAAE,CAAC;IACzB,MAAM,CAAe;IACrB,UAAU,GAA0C,IAAI,CAAC;IACzD,YAAY,GAAkB,EAAE,CAAC;IACxB,iBAAiB,GAAG,GAAG,CAAC;IAEzC,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK;QACH,oCAAoC;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,YAAY,EAAE;gBAC7D,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;iBAC9C;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,KAAkB;QAC5B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,mBAAmB;QACnB,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,mBAAmB,CACjB,QAAgB,EAChB,MAAgC;QAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAErE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,SAAS,CAAC,yBAAyB;YAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY,CAClB,IAAgB,EAChB,QAAgB,EAChB,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE3B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,eAAe,CACrB,IAAgB,EAChB,QAAgB,EAChB,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAa,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;QAE5C,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAEnE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;YACrC,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GACb,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC;QAEhF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,oBAAoB,IAAI,CAAC,IAAI,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACxF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY,CAAC,IAAgB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,CACpC,CAAC;QAEF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,oBAAoB,IAAI,CAAC,IAAI,eAAe,QAAQ,CAAC,MAAM,cAAc,MAAM,CAAC,aAAa,aAAa,QAAQ,GAAG;aAC9H,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,iBAAiB,CAAC,IAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,CACpC,CAAC;QAEF,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACjD,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC;YACvB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;QAErE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,oBAAoB,IAAI,CAAC,IAAI,eAAe,MAAM,CAAC,KAAK,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,GAAG;aAC5H,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;CACF"}

package/dist/severity.d.ts

@@ -0,0 +1,8 @@
+import type { EventType, SeverityHint } from "@clawnitor/shared";
+export interface RateTracker {
+    getRate(): number;
+    record(): void;
+}
+export declare function createRateTracker(): RateTracker;
+export declare function assignSeverity(eventType: EventType, metadata: Record<string, unknown>, rateTracker?: RateTracker): SeverityHint;
+//# sourceMappingURL=severity.d.ts.map

package/dist/severity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.d.ts","sourceRoot":"","sources":["../src/severity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjE,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,MAAM,CAAC;IAClB,MAAM,IAAI,IAAI,CAAC;CAChB;AAED,wBAAgB,iBAAiB,IAAI,WAAW,CAkB/C;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,WAAW,CAAC,EAAE,WAAW,GACxB,YAAY,CAqBd"}

package/dist/severity.js

@@ -0,0 +1,38 @@
+export function createRateTracker() {
+    const window = []; // timestamps
+    const WINDOW_MS = 5 * 60 * 1000; // 5 minutes
+    return {
+        getRate() {
+            const now = Date.now();
+            // Remove entries outside window
+            while (window.length > 0 && window[0] < now - WINDOW_MS) {
+                window.shift();
+            }
+            // Convert to per-minute rate
+            return window.length / 5;
+        },
+        record() {
+            window.push(Date.now());
+        },
+    };
+}
+export function assignSeverity(eventType, metadata, rateTracker) {
+    // Critical: error in metadata
+    if (metadata.error) {
+        return "elevated";
+    }
+    // Critical: high spend
+    if (typeof metadata.cost_usd === "number" && metadata.cost_usd > 1) {
+        return "elevated";
+    }
+    // Rate-based: flag elevated if tool call rate exceeds 30/min
+    // (normal agents do 5-15/min, 30+ suggests a loop or runaway)
+    if (rateTracker && eventType === "tool_use") {
+        const rate = rateTracker.getRate();
+        if (rate > 30) {
+            return "elevated";
+        }
+    }
+    return "normal";
+}
+//# sourceMappingURL=severity.js.map

package/dist/severity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.js","sourceRoot":"","sources":["../src/severity.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC,CAAC,aAAa;IAC1C,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;IAE7C,OAAO;QACL,OAAO;YACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,gCAAgC;YAChC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,EAAE,CAAC;gBACxD,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YACD,6BAA6B;YAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM;YACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,SAAoB,EACpB,QAAiC,EACjC,WAAyB;IAEzB,8BAA8B;IAC9B,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,uBAAuB;IACvB,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,6DAA6D;IAC7D,8DAA8D;IAC9D,IAAI,WAAW,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACd,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/transport/https-sender.d.ts

@@ -0,0 +1,18 @@
+import type { ClawnitorEvent } from "@clawnitor/shared";
+import type { PluginConfig } from "../config.js";
+export declare class HttpsSender {
+    private buffer;
+    private timer;
+    private config;
+    private onKillState?;
+    private onFlushFail?;
+    constructor(config: PluginConfig, opts?: {
+        onKillState?: (killed: boolean, reason?: string) => void;
+        onFlushFail?: (events: ClawnitorEvent[]) => void;
+    });
+    start(): void;
+    stop(): void;
+    enqueue(event: ClawnitorEvent): void;
+    private flush;
+}
+//# sourceMappingURL=https-sender.d.ts.map

package/dist/transport/https-sender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-sender.d.ts","sourceRoot":"","sources":["../../src/transport/https-sender.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,mBAAmB,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAC,CAA6C;IACjE,OAAO,CAAC,WAAW,CAAC,CAAqC;gBAGvD,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE;QACL,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACzD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,IAAI,CAAC;KAClD;IAOH,KAAK;IAIL,IAAI;IASJ,OAAO,CAAC,KAAK,EAAE,cAAc;YAOf,KAAK;CA+BpB"}

package/dist/transport/https-sender.js

@@ -0,0 +1,62 @@
+import { EVENT_BATCH_SIZE, EVENT_BATCH_INTERVAL_MS } from "@clawnitor/shared";
+export class HttpsSender {
+    buffer = [];
+    timer = null;
+    config;
+    onKillState;
+    onFlushFail;
+    constructor(config, opts) {
+        this.config = config;
+        this.onKillState = opts?.onKillState;
+        this.onFlushFail = opts?.onFlushFail;
+    }
+    start() {
+        this.timer = setInterval(() => this.flush(), EVENT_BATCH_INTERVAL_MS);
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+        // Final flush
+        this.flush();
+    }
+    enqueue(event) {
+        this.buffer.push(event);
+        if (this.buffer.length >= EVENT_BATCH_SIZE) {
+            this.flush();
+        }
+    }
+    async flush() {
+        if (this.buffer.length === 0)
+            return;
+        const batch = this.buffer.splice(0, EVENT_BATCH_SIZE);
+        try {
+            const response = await fetch(`${this.config.backendUrl}/api/events`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${this.config.apiKey}`,
+                },
+                body: JSON.stringify({ events: batch }),
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (response.ok) {
+                const data = (await response.json());
+                if (this.onKillState) {
+                    this.onKillState(data.kill_state.killed, data.kill_state.reason);
+                }
+            }
+            else if (response.status >= 500) {
+                // Server error — cache for retry
+                this.onFlushFail?.(batch);
+            }
+            // 4xx errors are dropped (bad data, auth issues)
+        }
+        catch {
+            // Network error — cache for retry
+            this.onFlushFail?.(batch);
+        }
+    }
+}
+//# sourceMappingURL=https-sender.js.map

package/dist/transport/https-sender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-sender.js","sourceRoot":"","sources":["../../src/transport/https-sender.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG9E,MAAM,OAAO,WAAW;IACd,MAAM,GAAqB,EAAE,CAAC;IAC9B,KAAK,GAA0C,IAAI,CAAC;IACpD,MAAM,CAAe;IACrB,WAAW,CAA8C;IACzD,WAAW,CAAsC;IAEzD,YACE,MAAoB,EACpB,IAGC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACxE,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,cAAc;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,OAAO,CAAC,KAAqB;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,aAAa,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;iBAC9C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;gBAC7D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,iCAAiC;gBACjC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,iDAAiD;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;YAClC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}

package/dist/transport/sqlite-cache.d.ts

@@ -0,0 +1,12 @@
+import type { ClawnitorEvent } from "@clawnitor/shared";
+export declare class SqliteCache {
+    private db;
+    constructor(dbPath?: string);
+    cache(events: ClawnitorEvent[]): void;
+    flush(limit?: number): ClawnitorEvent[];
+    count(): number;
+    sizeBytes(): number;
+    prune(): void;
+    close(): void;
+}
+//# sourceMappingURL=sqlite-cache.d.ts.map

package/dist/transport/sqlite-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-cache.d.ts","sourceRoot":"","sources":["../../src/transport/sqlite-cache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKxD,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAoB;gBAElB,MAAM,CAAC,EAAE,MAAM;IAa3B,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI;IAarC,KAAK,CAAC,KAAK,GAAE,MAAW,GAAG,cAAc,EAAE;IAkB3C,KAAK,IAAI,MAAM;IAOf,SAAS,IAAI,MAAM;IASnB,KAAK,IAAI,IAAI;IAkBb,KAAK,IAAI,IAAI;CAGd"}

package/dist/transport/sqlite-cache.js

@@ -0,0 +1,74 @@
+import Database from "better-sqlite3";
+import { CACHE_SIZE_LIMIT, CACHE_AGE_LIMIT } from "@clawnitor/shared";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+export class SqliteCache {
+    db;
+    constructor(dbPath) {
+        const path = dbPath || join(tmpdir(), "clawnitor-cache.db");
+        this.db = new Database(path);
+        this.db.pragma("journal_mode = WAL");
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS cached_events (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        payload TEXT NOT NULL,
+        created_at INTEGER NOT NULL DEFAULT (unixepoch())
+      )
+    `);
+    }
+    cache(events) {
+        const insert = this.db.prepare("INSERT INTO cached_events (payload) VALUES (?)");
+        const tx = this.db.transaction((evts) => {
+            for (const event of evts) {
+                insert.run(JSON.stringify(event));
+            }
+        });
+        tx(events);
+        this.prune();
+    }
+    flush(limit = 50) {
+        const rows = this.db
+            .prepare("SELECT id, payload FROM cached_events ORDER BY id ASC LIMIT ?")
+            .all(limit);
+        if (rows.length === 0)
+            return [];
+        const events = rows.map((r) => JSON.parse(r.payload));
+        const ids = rows.map((r) => r.id);
+        const placeholders = ids.map(() => "?").join(",");
+        this.db
+            .prepare(`DELETE FROM cached_events WHERE id IN (${placeholders})`)
+            .run(...ids);
+        return events;
+    }
+    count() {
+        const row = this.db
+            .prepare("SELECT COUNT(*) as count FROM cached_events")
+            .get();
+        return row.count;
+    }
+    sizeBytes() {
+        const row = this.db
+            .prepare("SELECT COALESCE(SUM(LENGTH(payload)), 0) as size FROM cached_events")
+            .get();
+        return row.size;
+    }
+    prune() {
+        // Age-based eviction
+        const maxAge = Math.floor((Date.now() - CACHE_AGE_LIMIT) / 1000);
+        this.db
+            .prepare("DELETE FROM cached_events WHERE created_at < ?")
+            .run(maxAge);
+        // Size-based eviction
+        while (this.sizeBytes() > CACHE_SIZE_LIMIT) {
+            const deleted = this.db
+                .prepare("DELETE FROM cached_events WHERE id IN (SELECT id FROM cached_events ORDER BY id ASC LIMIT 100)")
+                .run();
+            if (deleted.changes === 0)
+                break;
+        }
+    }
+    close() {
+        this.db.close();
+    }
+}
+//# sourceMappingURL=sqlite-cache.js.map

package/dist/transport/sqlite-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-cache.js","sourceRoot":"","sources":["../../src/transport/sqlite-cache.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,OAAO,WAAW;IACd,EAAE,CAAoB;IAE9B,YAAY,MAAe;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;KAMZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAwB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,gDAAgD,CACjD,CAAC;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAsB,EAAE,EAAE;YACxD,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAgB,EAAE;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,KAAK,CAAsC,CAAC;QAEnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAmB,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAElC,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,0CAA0C,YAAY,GAAG,CAAC;aAClE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAEf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,6CAA6C,CAAC;aACtD,GAAG,EAAuB,CAAC;QAC9B,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,SAAS;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,qEAAqE,CACtE;aACA,GAAG,EAAsB,CAAC;QAC7B,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,KAAK;QACH,qBAAqB;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,gDAAgD,CAAC;aACzD,GAAG,CAAC,MAAM,CAAC,CAAC;QAEf,sBAAsB;QACtB,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;iBACpB,OAAO,CACN,gGAAgG,CACjG;iBACA,GAAG,EAAE,CAAC;YACT,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAM;QACnC,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}