@defai.digital/mcp-runtime 13.0.3

package/dist/guard/runtime-guard.d.ts

@@ -0,0 +1,98 @@
+import type { MCPCacheStats, MCPRequestLimits } from '@defai.digital/contracts';
+export type GuardStatus = 'PASS' | 'WARN' | 'FAIL';
+export interface GuardCheckResult {
+    status: GuardStatus;
+    gate: string;
+    message: string;
+    details?: Record<string, unknown>;
+    /** Suggested action when check fails */
+    suggestion?: string;
+    /** Audit data for logging */
+    audit?: Record<string, unknown>;
+}
+export interface RuntimeGuardResult {
+    /** Overall status (FAIL if any gate fails) */
+    status: GuardStatus;
+    /** Individual gate results */
+    gates: GuardCheckResult[];
+    /** Human-readable summary */
+    summary: string;
+    /** Whether the request should proceed */
+    allowed: boolean;
+    /** Timestamp of check */
+    timestamp: string;
+}
+export interface RuntimeGuardConfig {
+    /** Enable memory pressure checks */
+    checkMemoryPressure: boolean;
+    /** Enable request validation */
+    checkRequestLimits: boolean;
+    /** Block on critical memory pressure */
+    blockOnCriticalPressure: boolean;
+    /** Block on validation failures */
+    blockOnValidationFailure: boolean;
+    /** Custom request limits */
+    requestLimits?: MCPRequestLimits;
+}
+export declare const DEFAULT_GUARD_CONFIG: RuntimeGuardConfig;
+export interface RuntimeGuardContext {
+    /** Tool being called */
+    toolName: string;
+    /** Tool arguments */
+    args: unknown;
+    /** Current cache stats (optional) */
+    cacheStats?: MCPCacheStats | undefined;
+    /** Request size in bytes (optional) */
+    requestSizeBytes?: number | undefined;
+    /** Request ID for tracing */
+    requestId?: string | undefined;
+}
+/**
+ * Runtime guard for MCP operations.
+ *
+ * Enforces runtime governance policies:
+ * - Memory pressure checks
+ * - Request size and array limits
+ * - Timeout tracking (via audit)
+ *
+ * Invariants:
+ * - INV-MCP-GUARD-001: Critical pressure blocks operations
+ * - INV-MCP-GUARD-002: Invalid requests rejected before processing
+ * - INV-MCP-GUARD-003: All checks logged for audit
+ */
+export declare class RuntimeGuard {
+    private readonly config;
+    private readonly limits;
+    constructor(config?: Partial<RuntimeGuardConfig>);
+    /**
+     * Run all guard checks for a request.
+     */
+    check(context: RuntimeGuardContext): Promise<RuntimeGuardResult>;
+    /**
+     * Check memory pressure.
+     * INV-MCP-GUARD-001: Critical pressure blocks operations.
+     */
+    private checkMemoryPressure;
+    /**
+     * Check request limits.
+     * INV-MCP-GUARD-002: Invalid requests rejected before processing.
+     */
+    private checkRequestLimits;
+    /**
+     * Determine if request should be allowed based on results.
+     */
+    private shouldAllow;
+    /**
+     * Generate human-readable summary.
+     */
+    private generateSummary;
+}
+/**
+ * Create a runtime guard instance.
+ */
+export declare function createRuntimeGuard(config?: Partial<RuntimeGuardConfig>): RuntimeGuard;
+/**
+ * Quick check helper for common use case.
+ */
+export declare function quickGuardCheck(toolName: string, args: unknown, cacheStats?: MCPCacheStats): Promise<RuntimeGuardResult>;
+//# sourceMappingURL=runtime-guard.d.ts.map

package/dist/guard/runtime-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-guard.d.ts","sourceRoot":"","sources":["../../src/guard/runtime-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAEjB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,8CAA8C;IAC9C,MAAM,EAAE,WAAW,CAAC;IACpB,8BAA8B;IAC9B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,kBAAkB;IACjC,oCAAoC;IACpC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gCAAgC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wCAAwC;IACxC,uBAAuB,EAAE,OAAO,CAAC;IACjC,mCAAmC;IACnC,wBAAwB,EAAE,OAAO,CAAC;IAClC,4BAA4B;IAC5B,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,eAAO,MAAM,oBAAoB,EAAE,kBAKlC,CAAC;AAMF,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,qCAAqC;IACrC,UAAU,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACvC,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAMD;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;gBAE1C,MAAM,GAAE,OAAO,CAAC,kBAAkB,CAAM;IAKpD;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAuDtE;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IA8C3B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IA8B1B;;OAEG;IACH,OAAO,CAAC,WAAW;IAsBnB;;OAEG;IACH,OAAO,CAAC,eAAe;CAexB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACnC,YAAY,CAEd;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,UAAU,CAAC,EAAE,aAAa,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAG7B"}

package/dist/guard/runtime-guard.js

@@ -0,0 +1,204 @@
+import { validateRequest } from '../validation/request-validator.js';
+export const DEFAULT_GUARD_CONFIG = {
+    checkMemoryPressure: true,
+    checkRequestLimits: true,
+    blockOnCriticalPressure: true,
+    blockOnValidationFailure: true,
+};
+// ============================================================================
+// Guard Implementation
+// ============================================================================
+/**
+ * Runtime guard for MCP operations.
+ *
+ * Enforces runtime governance policies:
+ * - Memory pressure checks
+ * - Request size and array limits
+ * - Timeout tracking (via audit)
+ *
+ * Invariants:
+ * - INV-MCP-GUARD-001: Critical pressure blocks operations
+ * - INV-MCP-GUARD-002: Invalid requests rejected before processing
+ * - INV-MCP-GUARD-003: All checks logged for audit
+ */
+export class RuntimeGuard {
+    config;
+    limits;
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_GUARD_CONFIG, ...config };
+        this.limits = config.requestLimits;
+    }
+    /**
+     * Run all guard checks for a request.
+     */
+    async check(context) {
+        const gates = [];
+        let hasFailure = false;
+        let hasWarning = false;
+        // Memory pressure check
+        if (this.config.checkMemoryPressure && context.cacheStats) {
+            const pressureResult = this.checkMemoryPressure(context.cacheStats);
+            gates.push(pressureResult);
+            if (pressureResult.status === 'FAIL') {
+                hasFailure = true;
+            }
+            else if (pressureResult.status === 'WARN') {
+                hasWarning = true;
+            }
+        }
+        // Request validation check
+        if (this.config.checkRequestLimits) {
+            const validationResult = this.checkRequestLimits(context.toolName, context.args);
+            gates.push(validationResult);
+            if (validationResult.status === 'FAIL') {
+                hasFailure = true;
+            }
+            else if (validationResult.status === 'WARN') {
+                hasWarning = true;
+            }
+        }
+        // Determine overall status
+        let status = 'PASS';
+        if (hasFailure) {
+            status = 'FAIL';
+        }
+        else if (hasWarning) {
+            status = 'WARN';
+        }
+        // Determine if request should proceed
+        const allowed = this.shouldAllow(status, gates);
+        // Generate summary
+        const summary = this.generateSummary(status, gates);
+        return {
+            status,
+            gates,
+            summary,
+            allowed,
+            timestamp: new Date().toISOString(),
+        };
+    }
+    /**
+     * Check memory pressure.
+     * INV-MCP-GUARD-001: Critical pressure blocks operations.
+     */
+    checkMemoryPressure(stats) {
+        const { pressureLevel, currentSizeBytes, maxSizeBytes, hitRate } = stats;
+        if (pressureLevel === 'critical') {
+            return {
+                status: this.config.blockOnCriticalPressure ? 'FAIL' : 'WARN',
+                gate: 'memory_pressure',
+                message: `Memory pressure is critical (${Math.round((currentSizeBytes / maxSizeBytes) * 100)}% used)`,
+                details: {
+                    pressureLevel,
+                    usagePercent: (currentSizeBytes / maxSizeBytes) * 100,
+                    currentSizeBytes,
+                    maxSizeBytes,
+                    hitRate,
+                },
+                suggestion: 'Wait for cache eviction or increase maxSizeBytes',
+            };
+        }
+        if (pressureLevel === 'high') {
+            return {
+                status: 'WARN',
+                gate: 'memory_pressure',
+                message: `Memory pressure is high (${Math.round((currentSizeBytes / maxSizeBytes) * 100)}% used)`,
+                details: {
+                    pressureLevel,
+                    usagePercent: (currentSizeBytes / maxSizeBytes) * 100,
+                    currentSizeBytes,
+                    maxSizeBytes,
+                    hitRate,
+                },
+                suggestion: 'Consider reducing cache usage or increasing limits',
+            };
+        }
+        return {
+            status: 'PASS',
+            gate: 'memory_pressure',
+            message: `Memory pressure is ${pressureLevel}`,
+            details: {
+                pressureLevel,
+                usagePercent: (currentSizeBytes / maxSizeBytes) * 100,
+            },
+        };
+    }
+    /**
+     * Check request limits.
+     * INV-MCP-GUARD-002: Invalid requests rejected before processing.
+     */
+    checkRequestLimits(toolName, args) {
+        const result = validateRequest(toolName, args, this.limits);
+        if (!result.valid) {
+            const errors = result.errors;
+            const errorMessages = errors.map((e) => e.message).join('; ');
+            return {
+                status: this.config.blockOnValidationFailure ? 'FAIL' : 'WARN',
+                gate: 'request_limits',
+                message: `Request validation failed: ${errorMessages}`,
+                details: {
+                    errors,
+                    toolName,
+                },
+                suggestion: 'Reduce array sizes or split into multiple requests',
+            };
+        }
+        return {
+            status: 'PASS',
+            gate: 'request_limits',
+            message: 'Request validation passed',
+            details: { toolName },
+        };
+    }
+    /**
+     * Determine if request should be allowed based on results.
+     */
+    shouldAllow(status, gates) {
+        if (status === 'PASS' || status === 'WARN') {
+            return true;
+        }
+        // Check if any blocking failures exist
+        for (const gate of gates) {
+            if (gate.status === 'FAIL') {
+                // Memory pressure failure
+                if (gate.gate === 'memory_pressure' && this.config.blockOnCriticalPressure) {
+                    return false;
+                }
+                // Validation failure
+                if (gate.gate === 'request_limits' && this.config.blockOnValidationFailure) {
+                    return false;
+                }
+            }
+        }
+        return true;
+    }
+    /**
+     * Generate human-readable summary.
+     */
+    generateSummary(status, gates) {
+        const passCount = gates.filter((g) => g.status === 'PASS').length;
+        const warnCount = gates.filter((g) => g.status === 'WARN').length;
+        const failCount = gates.filter((g) => g.status === 'FAIL').length;
+        if (status === 'PASS') {
+            return `All ${gates.length} checks passed`;
+        }
+        if (status === 'WARN') {
+            return `${passCount} passed, ${warnCount} warnings`;
+        }
+        return `${failCount} failed, ${warnCount} warnings, ${passCount} passed`;
+    }
+}
+/**
+ * Create a runtime guard instance.
+ */
+export function createRuntimeGuard(config) {
+    return new RuntimeGuard(config);
+}
+/**
+ * Quick check helper for common use case.
+ */
+export async function quickGuardCheck(toolName, args, cacheStats) {
+    const guard = createRuntimeGuard();
+    return guard.check({ toolName, args, cacheStats });
+}
+//# sourceMappingURL=runtime-guard.js.map

package/dist/guard/runtime-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-guard.js","sourceRoot":"","sources":["../../src/guard/runtime-guard.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAiDrE,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,uBAAuB,EAAE,IAAI;IAC7B,wBAAwB,EAAE,IAAI;CAC/B,CAAC;AAmBF,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IACN,MAAM,CAAqB;IAC3B,MAAM,CAA+B;IAEtD,YAAY,SAAsC,EAAE;QAClD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,OAA4B;QACtC,MAAM,KAAK,GAAuB,EAAE,CAAC;QACrC,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,wBAAwB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAE3B,IAAI,cAAc,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACrC,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,IAAI,cAAc,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAC9C,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,IAAI,CACb,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAE7B,IAAI,gBAAgB,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvC,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,IAAI,gBAAgB,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,GAAgB,MAAM,CAAC;QACjC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,mBAAmB;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEpD,OAAO;YACL,MAAM;YACN,KAAK;YACL,OAAO;YACP,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,KAAoB;QAC9C,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAEzE,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC7D,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,gCAAgC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,SAAS;gBACrG,OAAO,EAAE;oBACP,aAAa;oBACb,YAAY,EAAE,CAAC,gBAAgB,GAAG,YAAY,CAAC,GAAG,GAAG;oBACrD,gBAAgB;oBAChB,YAAY;oBACZ,OAAO;iBACR;gBACD,UAAU,EAAE,kDAAkD;aAC/D,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,4BAA4B,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,SAAS;gBACjG,OAAO,EAAE;oBACP,aAAa;oBACb,YAAY,EAAE,CAAC,gBAAgB,GAAG,YAAY,CAAC,GAAG,GAAG;oBACrD,gBAAgB;oBAChB,YAAY;oBACZ,OAAO;iBACR;gBACD,UAAU,EAAE,oDAAoD;aACjE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,sBAAsB,aAAa,EAAE;YAC9C,OAAO,EAAE;gBACP,aAAa;gBACb,YAAY,EAAE,CAAC,gBAAgB,GAAG,YAAY,CAAC,GAAG,GAAG;aACtD;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,QAAgB,EAChB,IAAa;QAEb,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,MAAM,GAAsB,MAAM,CAAC,MAAM,CAAC;YAChD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE/E,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC9D,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,8BAA8B,aAAa,EAAE;gBACtD,OAAO,EAAE;oBACP,MAAM;oBACN,QAAQ;iBACT;gBACD,UAAU,EAAE,oDAAoD;aACjE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,2BAA2B;YACpC,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,MAAmB,EAAE,KAAyB;QAChE,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,0BAA0B;gBAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;oBAC3E,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,qBAAqB;gBACrB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;oBAC3E,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,MAAmB,EAAE,KAAyB;QACpE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAElE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;QAC7C,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,GAAG,SAAS,YAAY,SAAS,WAAW,CAAC;QACtD,CAAC;QAED,OAAO,GAAG,SAAS,YAAY,SAAS,cAAc,SAAS,SAAS,CAAC;IAC3E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAoC;IAEpC,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,IAAa,EACb,UAA0B;IAE1B,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { LRUCache, createLRUCache } from './cache/index.js';
+export { DEFAULT_TIMEOUT_CONFIG, TimeoutError, withTimeout, withToolTimeout, createTimeoutWrapper, getToolCategory, isTimeoutResult, isSuccessResult, unwrapResult, } from './timeout/index.js';
+export { type MCPToolResult, type SuccessResponseData, type ErrorResponseData, type ResponseData, createSuccessResponse, createErrorResponse, createListResponse, createNotFoundResponse, createValidationErrorResponse, createTimeoutResponse, createMemoryPressureResponse, createInternalErrorResponse, truncateString, truncateResponse, } from './response/index.js';
+export { validateRequest, createValidationMiddleware, isValidRequest, formatValidationErrors, } from './validation/index.js';
+export { type GuardStatus, type GuardCheckResult, type RuntimeGuardResult, type RuntimeGuardConfig, type RuntimeGuardContext, DEFAULT_GUARD_CONFIG, RuntimeGuard, createRuntimeGuard, quickGuardCheck, } from './guard/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAG5D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAGjB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAG3B,cAAc,EACd,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,cAAc,EACd,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EAGxB,oBAAoB,EAGpB,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAChB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+// Cache module
+export { LRUCache, createLRUCache } from './cache/index.js';
+// Timeout module
+export { DEFAULT_TIMEOUT_CONFIG, TimeoutError, withTimeout, withToolTimeout, createTimeoutWrapper, getToolCategory, isTimeoutResult, isSuccessResult, unwrapResult, } from './timeout/index.js';
+// Response module
+export { 
+// Response helpers
+createSuccessResponse, createErrorResponse, createListResponse, createNotFoundResponse, createValidationErrorResponse, createTimeoutResponse, createMemoryPressureResponse, createInternalErrorResponse, 
+// Truncation helpers
+truncateString, truncateResponse, } from './response/index.js';
+// Validation module
+export { validateRequest, createValidationMiddleware, isValidRequest, formatValidationErrors, } from './validation/index.js';
+// Guard module
+export { 
+// Constants
+DEFAULT_GUARD_CONFIG, 
+// Class and helpers
+RuntimeGuard, createRuntimeGuard, quickGuardCheck, } from './guard/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE5D,iBAAiB;AACjB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,kBAAkB;AAClB,OAAO;AAOL,mBAAmB;AACnB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B;AAE3B,qBAAqB;AACrB,cAAc,EACd,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,oBAAoB;AACpB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,cAAc,EACd,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,eAAe;AACf,OAAO;AAQL,YAAY;AACZ,oBAAoB;AAEpB,oBAAoB;AACpB,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAChB,MAAM,kBAAkB,CAAC"}

package/dist/response/helpers.d.ts

@@ -0,0 +1,118 @@
+import type { MCPErrorCode, MCPStructuredError, MCPResponseMetadata, MCPResponseLimits } from '@defai.digital/contracts';
+export interface MCPToolResult {
+    content: {
+        type: 'text';
+        text: string;
+    }[];
+    isError?: boolean;
+}
+export interface SuccessResponseData<T> {
+    success: true;
+    data: T;
+    metadata?: MCPResponseMetadata;
+}
+export interface ErrorResponseData {
+    success: false;
+    error: MCPStructuredError;
+    metadata?: MCPResponseMetadata;
+}
+export type ResponseData<T> = SuccessResponseData<T> | ErrorResponseData;
+/**
+ * Create a success response.
+ *
+ * INV-MCP-RESP-001: Uses consistent envelope structure.
+ * INV-MCP-RESP-005: Includes duration tracking.
+ */
+export declare function createSuccessResponse<T>(data: T, options?: {
+    startTime?: number;
+    cached?: boolean;
+    truncated?: boolean;
+    originalSizeBytes?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Create an error response.
+ *
+ * INV-MCP-RESP-001: Uses consistent envelope structure.
+ * INV-MCP-RESP-002: Includes error code.
+ * INV-MCP-RESP-006: Sets retryable based on error code.
+ */
+export declare function createErrorResponse(code: MCPErrorCode, message: string, options?: {
+    context?: Record<string, unknown>;
+    startTime?: number;
+    retryAfterMs?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Create a list response with pagination.
+ *
+ * INV-MCP-RESP-003: Enforces list item limits.
+ */
+export declare function createListResponse<T>(items: T[], options?: {
+    total?: number;
+    limit?: number;
+    offset?: number;
+    startTime?: number;
+    requestId?: string;
+    limits?: MCPResponseLimits;
+}): MCPToolResult;
+/**
+ * Create a not found error response.
+ */
+export declare function createNotFoundResponse(resourceType: string, resourceId: string, options?: {
+    startTime?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Create a validation error response.
+ */
+export declare function createValidationErrorResponse(message: string, errors: {
+    path: string;
+    message: string;
+}[], options?: {
+    startTime?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Create a timeout error response.
+ */
+export declare function createTimeoutResponse(timeoutMs: number, options?: {
+    startTime?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Create a memory pressure error response.
+ */
+export declare function createMemoryPressureResponse(pressureLevel: string, options?: {
+    startTime?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Create an internal error response.
+ */
+export declare function createInternalErrorResponse(error: Error, options?: {
+    startTime?: number;
+    requestId?: string;
+}): MCPToolResult;
+/**
+ * Truncate a string to max length.
+ *
+ * INV-MCP-RESP-003: Enforces string length limits.
+ * INV-MCP-RESP-004: Adds truncation indicator.
+ */
+export declare function truncateString(str: string, maxLength: number, suffix?: string): {
+    text: string;
+    truncated: boolean;
+};
+/**
+ * Truncate response data to fit within size limits.
+ *
+ * INV-MCP-RESP-003: Enforces response size limits.
+ * INV-MCP-RESP-004: Sets truncated flag.
+ */
+export declare function truncateResponse<T>(data: T, limits?: MCPResponseLimits): {
+    data: T;
+    truncated: boolean;
+    originalSizeBytes: number;
+};
+//# sourceMappingURL=helpers.d.ts.map

package/dist/response/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/response/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAYlC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,EAAE,CAAC;IACJ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;IACR,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;AAMzE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,IAAI,EAAE,CAAC,EACP,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACf,GACL,aAAa,CAyBf;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACf,GACL,aAAa,CAiCf;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,KAAK,EAAE,CAAC,EAAE,EACV,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,iBAAiB,CAAC;CACvB,GACL,aAAa,CAoCf;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,aAAa,CAef;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,EAC3C,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,aAAa,CAef;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,aAAa,CAmBf;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,aAAa,CAuBf;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,aAAa,CAqBf;AAMD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,SAAoB,GACzB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAUtC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAChC,IAAI,EAAE,CAAC,EACP,MAAM,GAAE,iBAA2C,GAClD;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAqC5D"}