@ik-firewall/core 2.3.6 → 2.4.0

package/dist/index.cjs

@@ -202,6 +202,7 @@ var ConfigManager = class {
   config;
   registry;
   hooks;
+  blockedInstances = /* @__PURE__ */ new Set();
   constructor(initialConfig, hooks) {
     this.config = initialConfig;
     this.hooks = hooks;
@@ -308,11 +309,27 @@ var ConfigManager = class {
     if (instanceId && this.config.instanceConfigs?.[instanceId]) {
       merged = { ...merged, ...this.config.instanceConfigs[instanceId] };
     }
+    if (instanceId && this.blockedInstances.has(instanceId)) {
+      merged.billingStatus = "blocked";
+    }
     if (override) {
       merged = { ...merged, ...override };
     }
     return merged;
   }
+  /**
+   * Updates the live blocked status for an instance (Kill-Switch).
+   * This is used by UsageTracker when it receives a response from the central server.
+   */
+  setBlockedStatus(instanceId, blocked) {
+    if (blocked) {
+      this.blockedInstances.add(instanceId);
+      this.setInstanceConfig(instanceId, { billingStatus: "blocked" });
+    } else {
+      this.blockedInstances.delete(instanceId);
+      this.setInstanceConfig(instanceId, { billingStatus: "active" });
+    }
+  }
   updateConfig(newConfig) {
     this.config = {
       ...this.config,
@@ -1528,8 +1545,14 @@ var UsageTracker = class {
     try {
       await this.sendBatch(payload);
     } catch (error) {
-      console.error("[IK_TRACKER] Batch send failed, queuing for retry:", error);
-      this.handleFailure(payload);
+      console.error("[IK_TRACKER] Batch send failed:", error.message);
+      const isAuthError = error.message?.includes("401");
+      if (!isAuthError) {
+        console.log("[IK_TRACKER] Queuing for retry...");
+        this.handleFailure(payload);
+      } else {
+        console.warn("[IK_TRACKER] Unauthorized: Please check your IK_FIREWALL_SECRET and License Key. Discarding batch.");
+      }
     } finally {
       this.flushInProgress = false;
     }
@@ -1538,6 +1561,9 @@ var UsageTracker = class {
     const baseUrl = this.config.get("centralReportEndpoint") || "https://ik-firewall.vercel.app";
     const endpoint = `${baseUrl.replace(/\/$/, "")}/api/v1/report`;
     const hmacSecret = this.config.get("hmacSecret") || process.env.IK_FIREWALL_SECRET;
+    if (process.env.IK_FIREWALL_DISABLED === "true" || process.env.NEXT_PUBLIC_IK_FIREWALL_DISABLED === "true") {
+      return;
+    }
     if (hmacSecret) {
       try {
         const crypto = typeof window === "undefined" ? (await import("crypto")).default : null;
@@ -1558,6 +1584,16 @@ var UsageTracker = class {
     if (!response.ok) {
       throw new Error(`HTTP Error: ${response.status} ${response.statusText}`);
     }
+    try {
+      const data = await response.json();
+      if (data && (data.status === "blocked" || data.billingStatus === "blocked")) {
+        this.config.setBlockedStatus(payload.instanceId, true);
+        console.warn(`[IK_TRACKER] \u{1F6E1}\uFE0F Kill-Switch triggered for ${payload.instanceId}: Subscription inactive/blocked.`);
+      } else if (data && (data.status === "active" || data.billingStatus === "active" || data.status === "trial")) {
+        this.config.setBlockedStatus(payload.instanceId, false);
+      }
+    } catch (e) {
+    }
     this.hooks?.onFlushSuccess?.(payload);
   }
   async handleFailure(payload) {
@@ -1860,16 +1896,11 @@ var IKFirewallCore = class _IKFirewallCore {
     }
     if (instanceId) {
       this.configManager.ensureInstanceConfig(instanceId);
-      this.configManager.syncRemoteConfig(instanceId).catch((err) => {
-        console.warn("[IK_CORE] Heartbeat sync failed:", err);
-      });
     }
     const mergedConfig = this.configManager.getMergedConfig(instanceId);
-    if (instanceId && mergedConfig?.isVerified === false) {
-      if (mergedConfig?.billingStatus === "blocked") {
-        this.hooks?.onStatus?.("\u26A0\uFE0F [IK_FIREWALL] Subscription inactive. Optimization bypassed (Fail-Safe mode).");
-        return this.getEmptyMetrics();
-      }
+    if (instanceId && mergedConfig?.billingStatus === "blocked") {
+      this.hooks?.onStatus?.("\u26A0\uFE0F [IK_FIREWALL] Subscription inactive. Optimization bypassed (Fail-Safe mode).");
+      return this.getEmptyMetrics();
     }
     let auditProvider = this.localProvider;
     let overrideProvider = null;

package/dist/index.js

@@ -160,6 +160,7 @@ var ConfigManager = class {
   config;
   registry;
   hooks;
+  blockedInstances = /* @__PURE__ */ new Set();
   constructor(initialConfig, hooks) {
     this.config = initialConfig;
     this.hooks = hooks;
@@ -266,11 +267,27 @@ var ConfigManager = class {
     if (instanceId && this.config.instanceConfigs?.[instanceId]) {
       merged = { ...merged, ...this.config.instanceConfigs[instanceId] };
     }
+    if (instanceId && this.blockedInstances.has(instanceId)) {
+      merged.billingStatus = "blocked";
+    }
     if (override) {
       merged = { ...merged, ...override };
     }
     return merged;
   }
+  /**
+   * Updates the live blocked status for an instance (Kill-Switch).
+   * This is used by UsageTracker when it receives a response from the central server.
+   */
+  setBlockedStatus(instanceId, blocked) {
+    if (blocked) {
+      this.blockedInstances.add(instanceId);
+      this.setInstanceConfig(instanceId, { billingStatus: "blocked" });
+    } else {
+      this.blockedInstances.delete(instanceId);
+      this.setInstanceConfig(instanceId, { billingStatus: "active" });
+    }
+  }
   updateConfig(newConfig) {
     this.config = {
       ...this.config,
@@ -1486,8 +1503,14 @@ var UsageTracker = class {
     try {
       await this.sendBatch(payload);
     } catch (error) {
-      console.error("[IK_TRACKER] Batch send failed, queuing for retry:", error);
-      this.handleFailure(payload);
+      console.error("[IK_TRACKER] Batch send failed:", error.message);
+      const isAuthError = error.message?.includes("401");
+      if (!isAuthError) {
+        console.log("[IK_TRACKER] Queuing for retry...");
+        this.handleFailure(payload);
+      } else {
+        console.warn("[IK_TRACKER] Unauthorized: Please check your IK_FIREWALL_SECRET and License Key. Discarding batch.");
+      }
     } finally {
       this.flushInProgress = false;
     }
@@ -1496,6 +1519,9 @@ var UsageTracker = class {
     const baseUrl = this.config.get("centralReportEndpoint") || "https://ik-firewall.vercel.app";
     const endpoint = `${baseUrl.replace(/\/$/, "")}/api/v1/report`;
     const hmacSecret = this.config.get("hmacSecret") || process.env.IK_FIREWALL_SECRET;
+    if (process.env.IK_FIREWALL_DISABLED === "true" || process.env.NEXT_PUBLIC_IK_FIREWALL_DISABLED === "true") {
+      return;
+    }
     if (hmacSecret) {
       try {
         const crypto = typeof window === "undefined" ? (await import("crypto")).default : null;
@@ -1516,6 +1542,16 @@ var UsageTracker = class {
     if (!response.ok) {
       throw new Error(`HTTP Error: ${response.status} ${response.statusText}`);
     }
+    try {
+      const data = await response.json();
+      if (data && (data.status === "blocked" || data.billingStatus === "blocked")) {
+        this.config.setBlockedStatus(payload.instanceId, true);
+        console.warn(`[IK_TRACKER] \u{1F6E1}\uFE0F Kill-Switch triggered for ${payload.instanceId}: Subscription inactive/blocked.`);
+      } else if (data && (data.status === "active" || data.billingStatus === "active" || data.status === "trial")) {
+        this.config.setBlockedStatus(payload.instanceId, false);
+      }
+    } catch (e) {
+    }
     this.hooks?.onFlushSuccess?.(payload);
   }
   async handleFailure(payload) {
@@ -1818,16 +1854,11 @@ var IKFirewallCore = class _IKFirewallCore {
     }
     if (instanceId) {
       this.configManager.ensureInstanceConfig(instanceId);
-      this.configManager.syncRemoteConfig(instanceId).catch((err) => {
-        console.warn("[IK_CORE] Heartbeat sync failed:", err);
-      });
     }
     const mergedConfig = this.configManager.getMergedConfig(instanceId);
-    if (instanceId && mergedConfig?.isVerified === false) {
-      if (mergedConfig?.billingStatus === "blocked") {
-        this.hooks?.onStatus?.("\u26A0\uFE0F [IK_FIREWALL] Subscription inactive. Optimization bypassed (Fail-Safe mode).");
-        return this.getEmptyMetrics();
-      }
+    if (instanceId && mergedConfig?.billingStatus === "blocked") {
+      this.hooks?.onStatus?.("\u26A0\uFE0F [IK_FIREWALL] Subscription inactive. Optimization bypassed (Fail-Safe mode).");
+      return this.getEmptyMetrics();
     }
     let auditProvider = this.localProvider;
     let overrideProvider = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ik-firewall/core",
-  "version": "2.3.6",
+  "version": "2.4.0",
   "type": "module",
   "description": "The core IK Firewall engine for semantic-driven AI optimization.",
   "main": "./dist/index.js",