@kya-os/agentshield-nextjs 0.1.7

package/dist/middleware.js

@@ -0,0 +1,120 @@
+'use strict';
+
+var server = require('next/server');
+var agentshield = require('@kya-os/agentshield');
+
+// src/middleware.ts
+function createAgentShieldMiddleware(config = {}) {
+  const detector = new agentshield.AgentDetector(config);
+  if (config.events) {
+    Object.entries(config.events).forEach(([event, handler]) => {
+      detector.on(event, handler);
+    });
+  }
+  const {
+    onAgentDetected = "log",
+    onDetection,
+    skipPaths = [],
+    blockedResponse = {
+      status: 403,
+      message: "Access denied: Automated agent detected",
+      headers: { "Content-Type": "application/json" }
+    },
+    redirectUrl = "/blocked",
+    rewriteUrl = "/blocked"
+  } = config;
+  return async (request) => {
+    try {
+      const shouldSkip = skipPaths.some((pattern) => {
+        if (typeof pattern === "string") {
+          return request.nextUrl.pathname.startsWith(pattern);
+        }
+        return pattern.test(request.nextUrl.pathname);
+      });
+      if (shouldSkip) {
+        request.agentShield = { skipped: true };
+        return server.NextResponse.next();
+      }
+      const context = {
+        userAgent: request.headers.get("user-agent") ?? void 0,
+        ipAddress: request.ip ?? request.headers.get("x-forwarded-for") ?? void 0,
+        headers: Object.fromEntries(request.headers.entries()),
+        url: request.url,
+        method: request.method,
+        timestamp: /* @__PURE__ */ new Date()
+      };
+      const result = await detector.analyze(context);
+      if (result.isAgent && result.confidence >= (config.confidenceThreshold ?? 0.7)) {
+        if (onDetection) {
+          const customResponse = await onDetection(request, result);
+          if (customResponse) {
+            return customResponse;
+          }
+        }
+        switch (onAgentDetected) {
+          case "block": {
+            const response2 = server.NextResponse.json(
+              {
+                error: blockedResponse.message,
+                detected: true,
+                confidence: result.confidence,
+                timestamp: result.timestamp
+              },
+              { status: blockedResponse.status }
+            );
+            if (blockedResponse.headers) {
+              Object.entries(blockedResponse.headers).forEach(
+                ([key, value]) => {
+                  response2.headers.set(key, value);
+                }
+              );
+            }
+            detector.emit("agent.blocked", result, context);
+            return response2;
+          }
+          case "redirect":
+            return server.NextResponse.redirect(new URL(redirectUrl, request.url));
+          case "rewrite":
+            return server.NextResponse.rewrite(new URL(rewriteUrl, request.url));
+          case "log":
+            console.warn("AgentShield: Agent detected", {
+              ipAddress: context.ipAddress,
+              userAgent: context.userAgent,
+              confidence: result.confidence,
+              reasons: result.reasons,
+              pathname: request.nextUrl.pathname
+            });
+            break;
+          case "allow":
+          default:
+            if (result.isAgent && result.confidence >= (config.confidenceThreshold ?? 0.7)) {
+              detector.emit("agent.allowed", result, context);
+            }
+            break;
+        }
+      }
+      request.agentShield = {
+        result,
+        skipped: false
+      };
+      const response = server.NextResponse.next();
+      response.headers.set("x-agentshield-detected", result.isAgent.toString());
+      response.headers.set(
+        "x-agentshield-confidence",
+        result.confidence.toString()
+      );
+      return response;
+    } catch (error) {
+      console.error("AgentShield middleware error:", error);
+      return server.NextResponse.next();
+    }
+  };
+}
+function agentShield(config = {}) {
+  return createAgentShieldMiddleware(config);
+}
+
+exports.agentShield = agentShield;
+exports.createAgentShieldMiddleware = createAgentShieldMiddleware;
+//# sourceMappingURL=middleware.js.map
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"names":["AgentDetector","NextResponse","response"],"mappings":";;;;;;AAWO,SAAS,2BAAA,CACd,MAAA,GAA0C,EAAC,EAC3C;AACA,EAAA,MAAM,QAAA,GAAW,IAAIA,yBAAA,CAAc,MAAM,CAAA;AAGzC,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAA,CAAO,OAAA,CAAQ,OAAO,MAAM,CAAA,CAAE,QAAQ,CAAC,CAAC,KAAA,EAAO,OAAO,CAAA,KAAM;AAC1D,MAAA,QAAA,CAAS,EAAA,CAAG,OAAc,OAAc,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM;AAAA,IACJ,eAAA,GAAkB,KAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,yCAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,KAChD;AAAA,IACA,WAAA,GAAc,UAAA;AAAA,IACd,UAAA,GAAa;AAAA,GACf,GAAI,MAAA;AAEJ,EAAA,OAAO,OAAO,OAAA,KAAgD;AAC5D,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,SAAA,CAAU,IAAA,CAAK,CAAA,OAAA,KAAW;AAC3C,QAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,UAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,UAAA,CAAW,OAAO,CAAA;AAAA,QACpD;AACA,QAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,MAC9C,CAAC,CAAA;AAED,MAAA,IAAI,UAAA,EAAY;AAEd,QAAC,OAAA,CAAgB,WAAA,GAAc,EAAE,OAAA,EAAS,IAAA,EAAK;AAC/C,QAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,MAC3B;AAGA,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,KAAA,CAAA;AAAA,QAChD,WAAW,OAAA,CAAQ,EAAA,IAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,IAAK,KAAA,CAAA;AAAA,QACnE,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,KAAK,OAAA,CAAQ,GAAA;AAAA,QACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,SAAA,sBAAe,IAAA;AAAK,OACtB;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,OAAA,CAAQ,OAAO,CAAA;AAG7C,MAAA,IACE,OAAO,OAAA,IACP,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EACpD;AAEA,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,MAAM,cAAA,GAAiB,MAAM,WAAA,CAAY,OAAA,EAAS,MAAM,CAAA;AACxD,UAAA,IAAI,cAAA,EAAgB;AAClB,YAAA,OAAO,cAAA;AAAA,UACT;AAAA,QACF;AAGA,QAAA,QAAQ,eAAA;AAAiB,UACvB,KAAK,OAAA,EAAS;AACZ,YAAA,MAAMC,YAAWD,mBAAA,CAAa,IAAA;AAAA,cAC5B;AAAA,gBACE,OAAO,eAAA,CAAgB,OAAA;AAAA,gBACvB,QAAA,EAAU,IAAA;AAAA,gBACV,YAAY,MAAA,CAAO,UAAA;AAAA,gBACnB,WAAW,MAAA,CAAO;AAAA,eACpB;AAAA,cACA,EAAE,MAAA,EAAQ,eAAA,CAAgB,MAAA;AAAO,aACnC;AAEA,YAAA,IAAI,gBAAgB,OAAA,EAAS;AAC3B,cAAA,MAAA,CAAO,OAAA,CAAQ,eAAA,CAAgB,OAAO,CAAA,CAAE,OAAA;AAAA,gBACtC,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAChB,kBAAAC,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,gBACjC;AAAA,eACF;AAAA,YACF;AAGA,YAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAE9C,YAAA,OAAOA,SAAAA;AAAA,UACT;AAAA,UAEA,KAAK,UAAA;AACH,YAAA,OAAOD,oBAAa,QAAA,CAAS,IAAI,IAAI,WAAA,EAAa,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAEhE,KAAK,SAAA;AACH,YAAA,OAAOA,oBAAa,OAAA,CAAQ,IAAI,IAAI,UAAA,EAAY,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAE9D,KAAK,KAAA;AACH,YAAA,OAAA,CAAQ,KAAK,6BAAA,EAA+B;AAAA,cAC1C,WAAW,OAAA,CAAQ,SAAA;AAAA,cACnB,WAAW,OAAA,CAAQ,SAAA;AAAA,cACnB,YAAY,MAAA,CAAO,UAAA;AAAA,cACnB,SAAS,MAAA,CAAO,OAAA;AAAA,cAChB,QAAA,EAAU,QAAQ,OAAA,CAAQ;AAAA,aAC3B,CAAA;AACD,YAAA;AAAA,UAEF,KAAK,OAAA;AAAA,UACL;AAEE,YAAA,IAAI,OAAO,OAAA,IAAW,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EAAM;AAC9E,cAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAAA,YAChD;AAEA,YAAA;AAAA;AACJ,MACF;AAGA,MAAC,QAAgB,WAAA,GAAc;AAAA,QAC7B,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACX;AAGA,MAAA,MAAM,QAAA,GAAWA,oBAAa,IAAA,EAAK;AACnC,MAAA,QAAA,CAAS,QAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA;AACxE,MAAA,QAAA,CAAS,OAAA,CAAQ,GAAA;AAAA,QACf,0BAAA;AAAA,QACA,MAAA,CAAO,WAAW,QAAA;AAAS,OAC7B;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,MAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF;AAKO,SAAS,WAAA,CAAY,MAAA,GAA0C,EAAC,EAAG;AACxE,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"middleware.js","sourcesContent":["/**\n * Next.js middleware for AgentShield\n */\n\nimport { NextRequest, NextResponse } from 'next/server';\nimport { AgentDetector } from '@kya-os/agentshield';\nimport type { NextJSMiddlewareConfig } from './types';\n\n/**\n * Create AgentShield middleware for Next.js\n */\nexport function createAgentShieldMiddleware(\n  config: Partial<NextJSMiddlewareConfig> = {}\n) {\n  const detector = new AgentDetector(config);\n  \n  // Wire up event handlers if provided\n  if (config.events) {\n    Object.entries(config.events).forEach(([event, handler]) => {\n      detector.on(event as any, handler as any);\n    });\n  }\n\n  const {\n    onAgentDetected = 'log',\n    onDetection,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'Access denied: Automated agent detected',\n      headers: { 'Content-Type': 'application/json' },\n    },\n    redirectUrl = '/blocked',\n    rewriteUrl = '/blocked',\n  } = config;\n\n  return async (request: NextRequest): Promise<NextResponse> => {\n    try {\n      // Check if path should be skipped\n      const shouldSkip = skipPaths.some(pattern => {\n        if (typeof pattern === 'string') {\n          return request.nextUrl.pathname.startsWith(pattern);\n        }\n        return pattern.test(request.nextUrl.pathname);\n      });\n\n      if (shouldSkip) {\n        // Mark as skipped in request\n        (request as any).agentShield = { skipped: true };\n        return NextResponse.next();\n      }\n\n      // Prepare request context\n      const context = {\n        userAgent: request.headers.get('user-agent') ?? undefined,\n        ipAddress: request.ip ?? request.headers.get('x-forwarded-for') ?? undefined,\n        headers: Object.fromEntries(request.headers.entries()),\n        url: request.url,\n        method: request.method,\n        timestamp: new Date(),\n      };\n\n      // Analyze request\n      const result = await detector.analyze(context);\n\n      // Handle detection result\n      if (\n        result.isAgent &&\n        result.confidence >= (config.confidenceThreshold ?? 0.7)\n      ) {\n        // Call custom detection handler if provided\n        if (onDetection) {\n          const customResponse = await onDetection(request, result);\n          if (customResponse) {\n            return customResponse;\n          }\n        }\n\n        // Handle based on configuration\n        switch (onAgentDetected) {\n          case 'block': {\n            const response = NextResponse.json(\n              {\n                error: blockedResponse.message,\n                detected: true,\n                confidence: result.confidence,\n                timestamp: result.timestamp,\n              },\n              { status: blockedResponse.status }\n            );\n\n            if (blockedResponse.headers) {\n              Object.entries(blockedResponse.headers).forEach(\n                ([key, value]) => {\n                  response.headers.set(key, value);\n                }\n              );\n            }\n            \n            // Emit blocked event\n            detector.emit('agent.blocked', result, context);\n\n            return response;\n          }\n\n          case 'redirect':\n            return NextResponse.redirect(new URL(redirectUrl, request.url));\n\n          case 'rewrite':\n            return NextResponse.rewrite(new URL(rewriteUrl, request.url));\n\n          case 'log':\n            console.warn('AgentShield: Agent detected', {\n              ipAddress: context.ipAddress,\n              userAgent: context.userAgent,\n              confidence: result.confidence,\n              reasons: result.reasons,\n              pathname: request.nextUrl.pathname,\n            });\n            break;\n\n          case 'allow':\n          default:\n            // Emit allowed event for high-confidence agents\n            if (result.isAgent && result.confidence >= (config.confidenceThreshold ?? 0.7)) {\n              detector.emit('agent.allowed', result, context);\n            }\n            // Continue processing\n            break;\n        }\n      }\n\n      // Add detection result to request for API routes\n      (request as any).agentShield = {\n        result,\n        skipped: false,\n      };\n\n      // Add detection result to response headers for debugging\n      const response = NextResponse.next();\n      response.headers.set('x-agentshield-detected', result.isAgent.toString());\n      response.headers.set(\n        'x-agentshield-confidence',\n        result.confidence.toString()\n      );\n\n      return response;\n    } catch (error) {\n      console.error('AgentShield middleware error:', error);\n      return NextResponse.next(); // Continue on error\n    }\n  };\n}\n\n/**\n * Convenience function for basic setup\n */\nexport function agentShield(config: Partial<NextJSMiddlewareConfig> = {}) {\n  return createAgentShieldMiddleware(config);\n}\n"]}

package/dist/middleware.mjs

@@ -0,0 +1,117 @@
+import { NextResponse } from 'next/server';
+import { AgentDetector } from '@kya-os/agentshield';
+
+// src/middleware.ts
+function createAgentShieldMiddleware(config = {}) {
+  const detector = new AgentDetector(config);
+  if (config.events) {
+    Object.entries(config.events).forEach(([event, handler]) => {
+      detector.on(event, handler);
+    });
+  }
+  const {
+    onAgentDetected = "log",
+    onDetection,
+    skipPaths = [],
+    blockedResponse = {
+      status: 403,
+      message: "Access denied: Automated agent detected",
+      headers: { "Content-Type": "application/json" }
+    },
+    redirectUrl = "/blocked",
+    rewriteUrl = "/blocked"
+  } = config;
+  return async (request) => {
+    try {
+      const shouldSkip = skipPaths.some((pattern) => {
+        if (typeof pattern === "string") {
+          return request.nextUrl.pathname.startsWith(pattern);
+        }
+        return pattern.test(request.nextUrl.pathname);
+      });
+      if (shouldSkip) {
+        request.agentShield = { skipped: true };
+        return NextResponse.next();
+      }
+      const context = {
+        userAgent: request.headers.get("user-agent") ?? void 0,
+        ipAddress: request.ip ?? request.headers.get("x-forwarded-for") ?? void 0,
+        headers: Object.fromEntries(request.headers.entries()),
+        url: request.url,
+        method: request.method,
+        timestamp: /* @__PURE__ */ new Date()
+      };
+      const result = await detector.analyze(context);
+      if (result.isAgent && result.confidence >= (config.confidenceThreshold ?? 0.7)) {
+        if (onDetection) {
+          const customResponse = await onDetection(request, result);
+          if (customResponse) {
+            return customResponse;
+          }
+        }
+        switch (onAgentDetected) {
+          case "block": {
+            const response2 = NextResponse.json(
+              {
+                error: blockedResponse.message,
+                detected: true,
+                confidence: result.confidence,
+                timestamp: result.timestamp
+              },
+              { status: blockedResponse.status }
+            );
+            if (blockedResponse.headers) {
+              Object.entries(blockedResponse.headers).forEach(
+                ([key, value]) => {
+                  response2.headers.set(key, value);
+                }
+              );
+            }
+            detector.emit("agent.blocked", result, context);
+            return response2;
+          }
+          case "redirect":
+            return NextResponse.redirect(new URL(redirectUrl, request.url));
+          case "rewrite":
+            return NextResponse.rewrite(new URL(rewriteUrl, request.url));
+          case "log":
+            console.warn("AgentShield: Agent detected", {
+              ipAddress: context.ipAddress,
+              userAgent: context.userAgent,
+              confidence: result.confidence,
+              reasons: result.reasons,
+              pathname: request.nextUrl.pathname
+            });
+            break;
+          case "allow":
+          default:
+            if (result.isAgent && result.confidence >= (config.confidenceThreshold ?? 0.7)) {
+              detector.emit("agent.allowed", result, context);
+            }
+            break;
+        }
+      }
+      request.agentShield = {
+        result,
+        skipped: false
+      };
+      const response = NextResponse.next();
+      response.headers.set("x-agentshield-detected", result.isAgent.toString());
+      response.headers.set(
+        "x-agentshield-confidence",
+        result.confidence.toString()
+      );
+      return response;
+    } catch (error) {
+      console.error("AgentShield middleware error:", error);
+      return NextResponse.next();
+    }
+  };
+}
+function agentShield(config = {}) {
+  return createAgentShieldMiddleware(config);
+}
+
+export { agentShield, createAgentShieldMiddleware };
+//# sourceMappingURL=middleware.mjs.map
+//# sourceMappingURL=middleware.mjs.map

package/dist/middleware.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"names":["response"],"mappings":";;;;AAWO,SAAS,2BAAA,CACd,MAAA,GAA0C,EAAC,EAC3C;AACA,EAAA,MAAM,QAAA,GAAW,IAAI,aAAA,CAAc,MAAM,CAAA;AAGzC,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAA,CAAO,OAAA,CAAQ,OAAO,MAAM,CAAA,CAAE,QAAQ,CAAC,CAAC,KAAA,EAAO,OAAO,CAAA,KAAM;AAC1D,MAAA,QAAA,CAAS,EAAA,CAAG,OAAc,OAAc,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM;AAAA,IACJ,eAAA,GAAkB,KAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,yCAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,KAChD;AAAA,IACA,WAAA,GAAc,UAAA;AAAA,IACd,UAAA,GAAa;AAAA,GACf,GAAI,MAAA;AAEJ,EAAA,OAAO,OAAO,OAAA,KAAgD;AAC5D,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,SAAA,CAAU,IAAA,CAAK,CAAA,OAAA,KAAW;AAC3C,QAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,UAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,UAAA,CAAW,OAAO,CAAA;AAAA,QACpD;AACA,QAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,MAC9C,CAAC,CAAA;AAED,MAAA,IAAI,UAAA,EAAY;AAEd,QAAC,OAAA,CAAgB,WAAA,GAAc,EAAE,OAAA,EAAS,IAAA,EAAK;AAC/C,QAAA,OAAO,aAAa,IAAA,EAAK;AAAA,MAC3B;AAGA,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,KAAA,CAAA;AAAA,QAChD,WAAW,OAAA,CAAQ,EAAA,IAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,IAAK,KAAA,CAAA;AAAA,QACnE,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,KAAK,OAAA,CAAQ,GAAA;AAAA,QACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,SAAA,sBAAe,IAAA;AAAK,OACtB;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,OAAA,CAAQ,OAAO,CAAA;AAG7C,MAAA,IACE,OAAO,OAAA,IACP,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EACpD;AAEA,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,MAAM,cAAA,GAAiB,MAAM,WAAA,CAAY,OAAA,EAAS,MAAM,CAAA;AACxD,UAAA,IAAI,cAAA,EAAgB;AAClB,YAAA,OAAO,cAAA;AAAA,UACT;AAAA,QACF;AAGA,QAAA,QAAQ,eAAA;AAAiB,UACvB,KAAK,OAAA,EAAS;AACZ,YAAA,MAAMA,YAAW,YAAA,CAAa,IAAA;AAAA,cAC5B;AAAA,gBACE,OAAO,eAAA,CAAgB,OAAA;AAAA,gBACvB,QAAA,EAAU,IAAA;AAAA,gBACV,YAAY,MAAA,CAAO,UAAA;AAAA,gBACnB,WAAW,MAAA,CAAO;AAAA,eACpB;AAAA,cACA,EAAE,MAAA,EAAQ,eAAA,CAAgB,MAAA;AAAO,aACnC;AAEA,YAAA,IAAI,gBAAgB,OAAA,EAAS;AAC3B,cAAA,MAAA,CAAO,OAAA,CAAQ,eAAA,CAAgB,OAAO,CAAA,CAAE,OAAA;AAAA,gBACtC,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAChB,kBAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,gBACjC;AAAA,eACF;AAAA,YACF;AAGA,YAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAE9C,YAAA,OAAOA,SAAAA;AAAA,UACT;AAAA,UAEA,KAAK,UAAA;AACH,YAAA,OAAO,aAAa,QAAA,CAAS,IAAI,IAAI,WAAA,EAAa,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAEhE,KAAK,SAAA;AACH,YAAA,OAAO,aAAa,OAAA,CAAQ,IAAI,IAAI,UAAA,EAAY,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAE9D,KAAK,KAAA;AACH,YAAA,OAAA,CAAQ,KAAK,6BAAA,EAA+B;AAAA,cAC1C,WAAW,OAAA,CAAQ,SAAA;AAAA,cACnB,WAAW,OAAA,CAAQ,SAAA;AAAA,cACnB,YAAY,MAAA,CAAO,UAAA;AAAA,cACnB,SAAS,MAAA,CAAO,OAAA;AAAA,cAChB,QAAA,EAAU,QAAQ,OAAA,CAAQ;AAAA,aAC3B,CAAA;AACD,YAAA;AAAA,UAEF,KAAK,OAAA;AAAA,UACL;AAEE,YAAA,IAAI,OAAO,OAAA,IAAW,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EAAM;AAC9E,cAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAAA,YAChD;AAEA,YAAA;AAAA;AACJ,MACF;AAGA,MAAC,QAAgB,WAAA,GAAc;AAAA,QAC7B,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACX;AAGA,MAAA,MAAM,QAAA,GAAW,aAAa,IAAA,EAAK;AACnC,MAAA,QAAA,CAAS,QAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA;AACxE,MAAA,QAAA,CAAS,OAAA,CAAQ,GAAA;AAAA,QACf,0BAAA;AAAA,QACA,MAAA,CAAO,WAAW,QAAA;AAAS,OAC7B;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,MAAA,OAAO,aAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF;AAKO,SAAS,WAAA,CAAY,MAAA,GAA0C,EAAC,EAAG;AACxE,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"middleware.mjs","sourcesContent":["/**\n * Next.js middleware for AgentShield\n */\n\nimport { NextRequest, NextResponse } from 'next/server';\nimport { AgentDetector } from '@kya-os/agentshield';\nimport type { NextJSMiddlewareConfig } from './types';\n\n/**\n * Create AgentShield middleware for Next.js\n */\nexport function createAgentShieldMiddleware(\n  config: Partial<NextJSMiddlewareConfig> = {}\n) {\n  const detector = new AgentDetector(config);\n  \n  // Wire up event handlers if provided\n  if (config.events) {\n    Object.entries(config.events).forEach(([event, handler]) => {\n      detector.on(event as any, handler as any);\n    });\n  }\n\n  const {\n    onAgentDetected = 'log',\n    onDetection,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'Access denied: Automated agent detected',\n      headers: { 'Content-Type': 'application/json' },\n    },\n    redirectUrl = '/blocked',\n    rewriteUrl = '/blocked',\n  } = config;\n\n  return async (request: NextRequest): Promise<NextResponse> => {\n    try {\n      // Check if path should be skipped\n      const shouldSkip = skipPaths.some(pattern => {\n        if (typeof pattern === 'string') {\n          return request.nextUrl.pathname.startsWith(pattern);\n        }\n        return pattern.test(request.nextUrl.pathname);\n      });\n\n      if (shouldSkip) {\n        // Mark as skipped in request\n        (request as any).agentShield = { skipped: true };\n        return NextResponse.next();\n      }\n\n      // Prepare request context\n      const context = {\n        userAgent: request.headers.get('user-agent') ?? undefined,\n        ipAddress: request.ip ?? request.headers.get('x-forwarded-for') ?? undefined,\n        headers: Object.fromEntries(request.headers.entries()),\n        url: request.url,\n        method: request.method,\n        timestamp: new Date(),\n      };\n\n      // Analyze request\n      const result = await detector.analyze(context);\n\n      // Handle detection result\n      if (\n        result.isAgent &&\n        result.confidence >= (config.confidenceThreshold ?? 0.7)\n      ) {\n        // Call custom detection handler if provided\n        if (onDetection) {\n          const customResponse = await onDetection(request, result);\n          if (customResponse) {\n            return customResponse;\n          }\n        }\n\n        // Handle based on configuration\n        switch (onAgentDetected) {\n          case 'block': {\n            const response = NextResponse.json(\n              {\n                error: blockedResponse.message,\n                detected: true,\n                confidence: result.confidence,\n                timestamp: result.timestamp,\n              },\n              { status: blockedResponse.status }\n            );\n\n            if (blockedResponse.headers) {\n              Object.entries(blockedResponse.headers).forEach(\n                ([key, value]) => {\n                  response.headers.set(key, value);\n                }\n              );\n            }\n            \n            // Emit blocked event\n            detector.emit('agent.blocked', result, context);\n\n            return response;\n          }\n\n          case 'redirect':\n            return NextResponse.redirect(new URL(redirectUrl, request.url));\n\n          case 'rewrite':\n            return NextResponse.rewrite(new URL(rewriteUrl, request.url));\n\n          case 'log':\n            console.warn('AgentShield: Agent detected', {\n              ipAddress: context.ipAddress,\n              userAgent: context.userAgent,\n              confidence: result.confidence,\n              reasons: result.reasons,\n              pathname: request.nextUrl.pathname,\n            });\n            break;\n\n          case 'allow':\n          default:\n            // Emit allowed event for high-confidence agents\n            if (result.isAgent && result.confidence >= (config.confidenceThreshold ?? 0.7)) {\n              detector.emit('agent.allowed', result, context);\n            }\n            // Continue processing\n            break;\n        }\n      }\n\n      // Add detection result to request for API routes\n      (request as any).agentShield = {\n        result,\n        skipped: false,\n      };\n\n      // Add detection result to response headers for debugging\n      const response = NextResponse.next();\n      response.headers.set('x-agentshield-detected', result.isAgent.toString());\n      response.headers.set(\n        'x-agentshield-confidence',\n        result.confidence.toString()\n      );\n\n      return response;\n    } catch (error) {\n      console.error('AgentShield middleware error:', error);\n      return NextResponse.next(); // Continue on error\n    }\n  };\n}\n\n/**\n * Convenience function for basic setup\n */\nexport function agentShield(config: Partial<NextJSMiddlewareConfig> = {}) {\n  return createAgentShieldMiddleware(config);\n}\n"]}

package/package.json

@@ -0,0 +1,90 @@
+{
+  "name": "@kya-os/agentshield-nextjs",
+  "version": "0.1.7",
+  "description": "Next.js middleware for AgentShield AI agent detection",
+  "keywords": [
+    "nextjs",
+    "middleware",
+    "ai",
+    "agent",
+    "detection",
+    "security",
+    "react"
+  ],
+  "license": "MIT OR Apache-2.0",
+  "author": "KnowThat.ai",
+  "homepage": "https://github.com/knowthat-ai/reputation-engine#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/knowthat-ai/reputation-engine.git",
+    "directory": "packages/nextjs"
+  },
+  "bugs": {
+    "url": "https://github.com/knowthat-ai/reputation-engine/issues"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    },
+    "./middleware": {
+      "types": "./dist/middleware.d.ts",
+      "import": "./dist/middleware.mjs",
+      "require": "./dist/middleware.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "build:watch": "tsup --watch",
+    "dev": "tsup --watch",
+    "clean": "rimraf dist .tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src --ext .ts,.tsx",
+    "lint:fix": "eslint src --ext .ts,.tsx --fix",
+    "format": "prettier --write \"src/**/*.{ts,tsx,json,md}\"",
+    "format:check": "prettier --check \"src/**/*.{ts,tsx,json,md}\"",
+    "prepublishOnly": "pnpm build && pnpm test"
+  },
+  "devDependencies": {
+    "@testing-library/react": "^14.2.1",
+    "@testing-library/react-hooks": "^8.0.1",
+    "@types/node": "^20.11.24",
+    "@types/react": "^18.2.61",
+    "@vitest/coverage-v8": "^1.3.1",
+    "jsdom": "^24.0.0",
+    "next": "^14.1.2",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "rimraf": "^5.0.5",
+    "tsup": "^8.0.2",
+    "typescript": "^5.4.2",
+    "vitest": "^1.3.1"
+  },
+  "peerDependencies": {
+    "next": ">=13.0.0",
+    "react": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "dependencies": {
+    "@kya-os/agentshield": "workspace:0.1.7"
+  }
+}