@kya-os/agentshield-nextjs 0.2.12 → 0.3.0

package/dist/edge-runtime-loader.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-runtime-loader.ts"],"names":["exports"],"mappings":";;;AA0CA,IAAM,yBAAN,MAA6B;AAAA,EACnB,YAAA,GAA4C,IAAA;AAAA,EAC5C,UAAA,GAAwC,IAAA;AAAA,EACxC,MAAA;AAAA,EACA,WAAA,GAAc,KAAA;AAAA,EAEtB,WAAA,CAAY,MAAA,GAA4B,EAAC,EAAG;AAC1C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EAEA,MAAM,KAAK,UAAA,EAAgD;AACzD,IAAA,IAAI,KAAK,WAAA,EAAa;AAEtB,IAAA,MAAM,MAAA,GAAS,UAAA,IAAc,IAAA,CAAK,MAAA,CAAO,UAAA;AAEzC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,MAAA,CAAO,UAAA,KAAe,KAAA,EAAO;AAC9C,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,MAAA,CAAO,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,GAAA,EAAK,CAAA;AAEtE,QAAA,MAAM,OAAA,GAAU;AAAA,UACd,GAAA,EAAK;AAAA,YACH,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,cAAA,MAAM,IAAI,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,YAC3C,CAAA;AAAA,YACA,UAAA,EAAY,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxC,cAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,gBAAA,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,cACvC;AAAA,YACF;AAAA,WACF;AAAA,UACA,GAAA,EAAK;AAAA,YACH,QAAQ,IAAA,CAAK;AAAA;AACf,SACF;AAEA,QAAA,IAAA,CAAK,YAAA,GAAe,MAAM,WAAA,CAAY,WAAA,CAAY,QAAQ,OAAO,CAAA;AACjE,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAEnB,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,IAAI,qDAAgD,CAAA;AAAA,QAC9D;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,qEAA2D,KAAK,CAAA;AAC7E,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,MACrB;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEQ,UAAA,CAAW,KAAa,GAAA,EAAqB;AACnD,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,IAAgB,CAAC,KAAK,UAAA,EAAY;AAC1C,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,IAAA,CAAK,WAAW,MAAM,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,MAAM,GAAG,CAAA;AACzC,IAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AAAA,EACvC;AAAA,EAEQ,YAAY,GAAA,EAA+B;AACjD,IAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAElC,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AAC5C,IAAA,MAAM,GAAA,GAAMA,SAAA,CAAQ,iBAAA,CAAkB,OAAA,CAAQ,MAAM,CAAA;AAEpD,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAWA,SAAA,CAAQ,OAAO,MAAM,CAAA;AACnD,IAAA,MAAA,CAAO,GAAA,CAAI,SAAS,GAAG,CAAA;AAEvB,IAAA,OAAO,CAAC,GAAA,EAAK,OAAA,CAAQ,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,OAAO,OAAA,EAAgD;AAC3D,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,KAAK,IAAA,EAAK;AAAA,IAClB;AAEA,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,EAAA;AAAA,MAChD,SAAA,EAAW,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AAAA,MAClF,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS;AAAA,KACvD;AAGA,IAAA,IAAI,IAAA,CAAK,YAAA,IAAgB,IAAA,CAAK,MAAA,CAAO,eAAe,KAAA,EAAO;AACzD,MAAA,IAAI;AACF,QAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAClC,QAAA,MAAM,CAAC,KAAK,GAAG,CAAA,GAAI,KAAK,WAAA,CAAY,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA;AAE5D,QAAA,MAAM,SAAA,GAAYA,SAAA,CAAQ,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAE/C,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,IAAI,MAAA,GAAS,CAAA;AACb,QAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAYA,SAAA,CAAQ,OAA8B,MAAM,CAAA;AAG3E,QAAA,OAAO,SAAS,IAAA,EAAM;AAEpB,UAAA,MAAM,IAAA,GAAO,MAAA,CAAO,SAAA,GAAY,MAAM,CAAA;AACtC,UAAA,IAAI,IAAA,KAAS,CAAA,IAAK,IAAA,KAAS,KAAA,CAAA,EAAW;AACtC,UAAA,MAAA,EAAA;AAAA,QACF;AAEA,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,SAAA,EAAW,MAAM,CAAA;AAAA,QAC/C;AAEA,QAAAA,SAAA,CAAQ,eAAA,CAAgB,KAAK,GAAG,CAAA;AAChC,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAAA,SAAA,CAAQ,eAAA,CAAgB,WAAW,MAAM,CAAA;AAAA,QAC3C;AAEA,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnC,QAAA,MAAM,SAAA,GAA6B;AAAA,UACjC,GAAG,MAAA;AAAA,UACH,kBAAA,EAAoB,eAAA;AAAA,UACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,MAAA,CAAO,eAAA,IAAmB,SAAA,CAAU,OAAA,EAAS;AACpD,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,SAAS,CAAA;AAAA,QACvC;AAEA,QAAA,OAAO,SAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAAA,QAC/C;AAAA,MAEF;AAAA,IACF;AAGA,IAAA,OAAO,IAAA,CAAK,iBAAiB,QAAQ,CAAA;AAAA,EACvC;AAAA,EAEQ,iBAAiB,QAAA,EAIL;AAClB,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,SAAA,CAAU,WAAA,EAAY;AAGjD,IAAA,MAAM,QAAA,GAAW;AAAA;AAAA,MAEf,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,QAAA,EAAU,YAAY,IAAA,EAAK;AAAA,MAC3D,EAAE,OAAA,EAAS,cAAA,EAAgB,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MACjE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MAClE,EAAE,OAAA,EAAS,kBAAA,EAAoB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MACpE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAGlE,EAAE,OAAA,EAAS,YAAA,EAAc,IAAA,EAAM,WAAA,EAAa,YAAY,GAAA,EAAI;AAAA,MAC5D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,YAAY,GAAA,EAAI;AAAA;AAAA,MAGtD,EAAE,OAAA,EAAS,UAAA,EAAY,IAAA,EAAM,gBAAA,EAAkB,YAAY,IAAA,EAAK;AAAA,MAChE,EAAE,OAAA,EAAS,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MAC1D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,eAAA,EAAiB,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAC/D,EAAE,OAAA,EAAS,WAAA,EAAa,IAAA,EAAM,SAAA,EAAW,YAAY,GAAA,EAAI;AAAA,MACzD,EAAE,OAAA,EAAS,QAAA,EAAU,IAAA,EAAM,OAAA,EAAS,YAAY,GAAA;AAAI,KACtD;AAGA,IAAA,MAAM,oBAAoB,CAAC,WAAA,EAAa,cAAA,EAAgB,OAAA,EAAS,UAAU,QAAQ,CAAA;AAEnF,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,KAAA,MAAW,CAAC,GAAG,CAAA,IAAK,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA,EAAG;AACpD,MAAA,IAAI,iBAAA,CAAkB,IAAA,CAAK,CAAC,MAAA,KAAW,GAAA,CAAI,aAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAC5E,QAAA,WAAA,GAAc,GAAA;AACd,QAAA;AAAA,MACF;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,EAAE,OAAA,EAAS,IAAA,EAAM,UAAA,MAAgB,QAAA,EAAU;AACpD,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3B,QAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,aAAa,CAAG,CAAA;AAE9D,QAAA,MAAM,MAAA,GAA0B;AAAA,UAC9B,OAAA,EAAS,IAAA;AAAA,UACT,UAAA,EAAY,eAAA;AAAA,UACZ,KAAA,EAAO,IAAA;AAAA,UACP,kBAAA,EAAoB,SAAA;AAAA,UACpB,SAAA,EAAW,eAAA,GAAkB,GAAA,GAAM,MAAA,GAAS,QAAA;AAAA,UAC5C,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,OAAO,eAAA,EAAiB;AAC/B,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,MAAM,CAAA;AAAA,QACpC;AAEA,QAAA,OAAO,MAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAAA,EACF;AAAA,EAEA,aAAA,GAAyB;AACvB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA,EAEA,qBAAA,GAAqD;AACnD,IAAA,OAAO,IAAA,CAAK,eAAe,eAAA,GAAkB,SAAA;AAAA,EAC/C;AACF,CAAA;AAKO,SAAS,sBAAsB,MAAA,EAA4B;AAChE,EAAA,OAAO,IAAI,uBAAuB,MAAM,CAAA;AAC1C;AAKA,IAAI,eAAA,GAAiD,IAAA;AAE9C,SAAS,sBAAsB,MAAA,EAAoD;AACxF,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,eAAA,GAAkB,IAAI,uBAAuB,MAAM,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,eAAA;AACT","file":"edge-runtime-loader.js","sourcesContent":["/**\n * Edge Runtime Compatible WASM Loader for AgentShield\n *\n * This module provides a pre-built solution for loading WASM in Edge Runtime.\n * It requires the WASM file to be manually placed in the project.\n */\n\nimport type { NextRequest } from 'next/server';\n\n// User must provide the WASM module via import\n// This is intentionally not imported here to allow user control\nexport interface WasmModule {\n  default: WebAssembly.Module;\n}\n\nexport interface DetectionResult {\n  isAgent: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'cryptographic' | 'pattern';\n  riskLevel?: 'low' | 'medium' | 'high' | 'critical';\n  timestamp: string;\n}\n\nexport interface AgentShieldConfig {\n  wasmModule?: WebAssembly.Module;\n  enableWasm?: boolean;\n  onAgentDetected?: (result: DetectionResult) => void;\n  blockAgents?: boolean;\n  allowedAgents?: string[];\n  debug?: boolean;\n}\n\ninterface WasmExports {\n  detect_agent(metadataPtr: number, metadataLen: number): number;\n  get_version(): number;\n  __wbindgen_malloc(size: number): number;\n  __wbindgen_free(ptr: number, size: number): void;\n  __wbindgen_realloc(ptr: number, oldSize: number, newSize: number): number;\n  memory: WebAssembly.Memory;\n}\n\nclass EdgeRuntimeAgentShield {\n  private wasmInstance: WebAssembly.Instance | null = null;\n  private wasmMemory: WebAssembly.Memory | null = null;\n  private config: AgentShieldConfig;\n  private initialized = false;\n\n  constructor(config: AgentShieldConfig = {}) {\n    this.config = config;\n  }\n\n  async init(wasmModule?: WebAssembly.Module): Promise<void> {\n    if (this.initialized) return;\n\n    const module = wasmModule || this.config.wasmModule;\n\n    if (module && this.config.enableWasm !== false) {\n      try {\n        this.wasmMemory = new WebAssembly.Memory({ initial: 17, maximum: 256 });\n\n        const imports = {\n          wbg: {\n            __wbindgen_throw: (ptr: number, len: number) => {\n              throw new Error(this.readString(ptr, len));\n            },\n            __wbg_log_: (ptr: number, len: number) => {\n              if (this.config.debug) {\n                console.log(this.readString(ptr, len));\n              }\n            },\n          },\n          env: {\n            memory: this.wasmMemory,\n          },\n        };\n\n        this.wasmInstance = await WebAssembly.instantiate(module, imports);\n        this.initialized = true;\n\n        if (this.config.debug) {\n          console.log('✅ AgentShield WASM initialized in Edge Runtime');\n        }\n      } catch (error) {\n        console.warn('⚠️ WASM initialization failed, using pattern detection:', error);\n        this.initialized = true;\n      }\n    } else {\n      this.initialized = true;\n    }\n  }\n\n  private readString(ptr: number, len: number): string {\n    if (!this.wasmInstance || !this.wasmMemory) {\n      throw new Error('WASM not initialized');\n    }\n    const memory = new Uint8Array(this.wasmMemory.buffer);\n    const bytes = memory.slice(ptr, ptr + len);\n    return new TextDecoder().decode(bytes);\n  }\n\n  private writeString(str: string): [number, number] {\n    if (!this.wasmInstance) {\n      throw new Error('WASM not initialized');\n    }\n    const exports = this.wasmInstance.exports as unknown as WasmExports;\n\n    const encoded = new TextEncoder().encode(str);\n    const ptr = exports.__wbindgen_malloc(encoded.length);\n\n    const memory = new Uint8Array(exports.memory.buffer);\n    memory.set(encoded, ptr);\n\n    return [ptr, encoded.length];\n  }\n\n  async detect(request: NextRequest): Promise<DetectionResult> {\n    if (!this.initialized) {\n      await this.init();\n    }\n\n    const metadata = {\n      userAgent: request.headers.get('user-agent') || '',\n      ipAddress: request.ip || request.headers.get('x-forwarded-for')?.split(',')[0] || '',\n      headers: Object.fromEntries(request.headers.entries()),\n    };\n\n    // Try WASM detection first\n    if (this.wasmInstance && this.config.enableWasm !== false) {\n      try {\n        const exports = this.wasmInstance.exports as unknown as WasmExports;\n        const [ptr, len] = this.writeString(JSON.stringify(metadata));\n\n        const resultPtr = exports.detect_agent(ptr, len);\n        // Read result with dynamic size\n        let resultStr = '';\n        let offset = 0;\n        const memory = new Uint8Array((exports.memory as WebAssembly.Memory).buffer);\n\n        // Read until we find the end of the JSON string\n        while (offset < 4096) {\n          // Max 4KB result\n          const byte = memory[resultPtr + offset];\n          if (byte === 0 || byte === undefined) break;\n          offset++;\n        }\n\n        if (offset > 0) {\n          resultStr = this.readString(resultPtr, offset);\n        }\n\n        exports.__wbindgen_free(ptr, len);\n        if (offset > 0) {\n          exports.__wbindgen_free(resultPtr, offset);\n        }\n\n        const result = JSON.parse(resultStr);\n\n        const detection: DetectionResult = {\n          ...result,\n          verificationMethod: 'cryptographic',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected && detection.isAgent) {\n          this.config.onAgentDetected(detection);\n        }\n\n        return detection;\n      } catch (error) {\n        if (this.config.debug) {\n          console.error('WASM detection failed:', error);\n        }\n        // Fall through to pattern detection\n      }\n    }\n\n    // Fallback: Pattern-based detection\n    return this.patternDetection(metadata);\n  }\n\n  private patternDetection(metadata: {\n    userAgent: string;\n    ipAddress: string;\n    headers: Record<string, string>;\n  }): DetectionResult {\n    const userAgent = metadata.userAgent.toLowerCase();\n\n    // Enhanced AI agent patterns with confidence scores\n    const patterns = [\n      // High confidence - explicit AI identifiers\n      { pattern: /chatgpt-user/i, name: 'ChatGPT', confidence: 0.95 },\n      { pattern: /claude-web/i, name: 'Claude', confidence: 0.95 },\n      { pattern: /gpt-crawler/i, name: 'GPT Crawler', confidence: 0.95 },\n      { pattern: /perplexitybot/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-user/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-ai/i, name: 'Perplexity', confidence: 0.95 },\n\n      // Medium-high confidence - company identifiers\n      { pattern: /anthropic/i, name: 'Anthropic', confidence: 0.9 },\n      { pattern: /openai/i, name: 'OpenAI', confidence: 0.9 },\n\n      // Medium confidence - product names\n      { pattern: /copilot/i, name: 'GitHub Copilot', confidence: 0.85 },\n      { pattern: /bard/i, name: 'Google Bard', confidence: 0.85 },\n      { pattern: /gemini/i, name: 'Google Gemini', confidence: 0.85 },\n      { pattern: /perplexity/i, name: 'Perplexity', confidence: 0.85 }, // Fallback\n      { pattern: /you\\.com/i, name: 'You.com', confidence: 0.8 },\n      { pattern: /phind/i, name: 'Phind', confidence: 0.8 },\n    ];\n\n    // Check for suspicious headers\n    const suspiciousHeaders = ['x-openai-', 'x-anthropic-', 'x-ai-', 'x-llm-', 'x-gpt-'];\n\n    let headerBoost = 0;\n    for (const [key] of Object.entries(metadata.headers)) {\n      if (suspiciousHeaders.some((prefix) => key.toLowerCase().startsWith(prefix))) {\n        headerBoost = 0.1;\n        break;\n      }\n    }\n\n    // Check patterns - patterns are ordered by confidence (highest first: 0.95, 0.90, 0.85...)\n    // so breaking on first match returns the highest-confidence match\n    for (const { pattern, name, confidence } of patterns) {\n      if (pattern.test(userAgent)) {\n        const finalConfidence = Math.min(confidence + headerBoost, 1.0);\n\n        const result: DetectionResult = {\n          isAgent: true,\n          confidence: finalConfidence,\n          agent: name,\n          verificationMethod: 'pattern',\n          riskLevel: finalConfidence > 0.9 ? 'high' : 'medium',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected) {\n          this.config.onAgentDetected(result);\n        }\n\n        return result;\n      }\n    }\n\n    // Not detected\n    return {\n      isAgent: false,\n      confidence: 0.85,\n      verificationMethod: 'pattern',\n      timestamp: new Date().toISOString(),\n    };\n  }\n\n  isInitialized(): boolean {\n    return this.initialized;\n  }\n\n  getVerificationMethod(): 'cryptographic' | 'pattern' {\n    return this.wasmInstance ? 'cryptographic' : 'pattern';\n  }\n}\n\n/**\n * Factory function to create an AgentShield instance for Edge Runtime\n */\nexport function createEdgeAgentShield(config?: AgentShieldConfig) {\n  return new EdgeRuntimeAgentShield(config);\n}\n\n/**\n * Singleton instance for simple usage\n */\nlet defaultInstance: EdgeRuntimeAgentShield | null = null;\n\nexport function getDefaultAgentShield(config?: AgentShieldConfig): EdgeRuntimeAgentShield {\n  if (!defaultInstance) {\n    defaultInstance = new EdgeRuntimeAgentShield(config);\n  }\n  return defaultInstance;\n}\n"]}
+{"version":3,"sources":["../src/utils.ts","../src/edge-runtime-loader.ts"],"names":["exports"],"mappings":";;;AAcO,SAAS,YAAY,OAAA,EAA0C;AAEpE,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AAC1D,EAAA,IAAI,YAAA,EAAc;AAEhB,IAAA,MAAM,KAAK,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AAC5C,IAAA,IAAI,IAAI,OAAO,EAAA;AAAA,EACjB;AAGA,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AAC9C,EAAA,IAAI,QAAQ,OAAO,MAAA;AAGnB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AACnD,EAAA,IAAI,MAAM,OAAO,IAAA;AAGjB,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AAClD,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,OAAO,MAAA;AACT;;;ACQA,IAAM,yBAAN,MAA6B;AAAA,EACnB,YAAA,GAA4C,IAAA;AAAA,EAC5C,UAAA,GAAwC,IAAA;AAAA,EACxC,MAAA;AAAA,EACA,WAAA,GAAc,KAAA;AAAA,EAEtB,WAAA,CAAY,MAAA,GAA4B,EAAC,EAAG;AAC1C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EAEA,MAAM,KAAK,UAAA,EAAgD;AACzD,IAAA,IAAI,KAAK,WAAA,EAAa;AAEtB,IAAA,MAAM,MAAA,GAAS,UAAA,IAAc,IAAA,CAAK,MAAA,CAAO,UAAA;AAEzC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,MAAA,CAAO,UAAA,KAAe,KAAA,EAAO;AAC9C,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,MAAA,CAAO,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,GAAA,EAAK,CAAA;AAEtE,QAAA,MAAM,OAAA,GAAU;AAAA,UACd,GAAA,EAAK;AAAA,YACH,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,cAAA,MAAM,IAAI,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,YAC3C,CAAA;AAAA,YACA,UAAA,EAAY,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxC,cAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,gBAAA,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,cACvC;AAAA,YACF;AAAA,WACF;AAAA,UACA,GAAA,EAAK;AAAA,YACH,QAAQ,IAAA,CAAK;AAAA;AACf,SACF;AAEA,QAAA,IAAA,CAAK,YAAA,GAAe,MAAM,WAAA,CAAY,WAAA,CAAY,QAAQ,OAAO,CAAA;AACjE,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAEnB,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,IAAI,qDAAgD,CAAA;AAAA,QAC9D;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,qEAA2D,KAAK,CAAA;AAC7E,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,MACrB;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEQ,UAAA,CAAW,KAAa,GAAA,EAAqB;AACnD,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,IAAgB,CAAC,KAAK,UAAA,EAAY;AAC1C,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,IAAA,CAAK,WAAW,MAAM,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,MAAM,GAAG,CAAA;AACzC,IAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AAAA,EACvC;AAAA,EAEQ,YAAY,GAAA,EAA+B;AACjD,IAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAElC,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AAC5C,IAAA,MAAM,GAAA,GAAMA,SAAA,CAAQ,iBAAA,CAAkB,OAAA,CAAQ,MAAM,CAAA;AAEpD,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAWA,SAAA,CAAQ,OAAO,MAAM,CAAA;AACnD,IAAA,MAAA,CAAO,GAAA,CAAI,SAAS,GAAG,CAAA;AAEvB,IAAA,OAAO,CAAC,GAAA,EAAK,OAAA,CAAQ,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,OAAO,OAAA,EAAgD;AAC3D,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,KAAK,IAAA,EAAK;AAAA,IAClB;AAEA,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,EAAA;AAAA,MAChD,SAAA,EAAW,WAAA,CAAY,OAAO,CAAA,IAAK,EAAA;AAAA,MACnC,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS;AAAA,KACvD;AAGA,IAAA,IAAI,IAAA,CAAK,YAAA,IAAgB,IAAA,CAAK,MAAA,CAAO,eAAe,KAAA,EAAO;AACzD,MAAA,IAAI;AACF,QAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAClC,QAAA,MAAM,CAAC,KAAK,GAAG,CAAA,GAAI,KAAK,WAAA,CAAY,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA;AAE5D,QAAA,MAAM,SAAA,GAAYA,SAAA,CAAQ,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAE/C,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,IAAI,MAAA,GAAS,CAAA;AACb,QAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAYA,SAAA,CAAQ,OAA8B,MAAM,CAAA;AAG3E,QAAA,OAAO,SAAS,IAAA,EAAM;AAEpB,UAAA,MAAM,IAAA,GAAO,MAAA,CAAO,SAAA,GAAY,MAAM,CAAA;AACtC,UAAA,IAAI,IAAA,KAAS,CAAA,IAAK,IAAA,KAAS,KAAA,CAAA,EAAW;AACtC,UAAA,MAAA,EAAA;AAAA,QACF;AAEA,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,SAAA,EAAW,MAAM,CAAA;AAAA,QAC/C;AAEA,QAAAA,SAAA,CAAQ,eAAA,CAAgB,KAAK,GAAG,CAAA;AAChC,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAAA,SAAA,CAAQ,eAAA,CAAgB,WAAW,MAAM,CAAA;AAAA,QAC3C;AAEA,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnC,QAAA,MAAM,SAAA,GAA6B;AAAA,UACjC,GAAG,MAAA;AAAA,UACH,kBAAA,EAAoB,eAAA;AAAA,UACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,MAAA,CAAO,eAAA,IAAmB,SAAA,CAAU,OAAA,EAAS;AACpD,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,SAAS,CAAA;AAAA,QACvC;AAEA,QAAA,OAAO,SAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAAA,QAC/C;AAAA,MAEF;AAAA,IACF;AAGA,IAAA,OAAO,IAAA,CAAK,iBAAiB,QAAQ,CAAA;AAAA,EACvC;AAAA,EAEQ,iBAAiB,QAAA,EAIL;AAClB,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,SAAA,CAAU,WAAA,EAAY;AAGjD,IAAA,MAAM,QAAA,GAAW;AAAA;AAAA,MAEf,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,QAAA,EAAU,YAAY,IAAA,EAAK;AAAA,MAC3D,EAAE,OAAA,EAAS,cAAA,EAAgB,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MACjE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MAClE,EAAE,OAAA,EAAS,kBAAA,EAAoB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MACpE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAGlE,EAAE,OAAA,EAAS,YAAA,EAAc,IAAA,EAAM,WAAA,EAAa,YAAY,GAAA,EAAI;AAAA,MAC5D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,YAAY,GAAA,EAAI;AAAA;AAAA,MAGtD,EAAE,OAAA,EAAS,UAAA,EAAY,IAAA,EAAM,gBAAA,EAAkB,YAAY,IAAA,EAAK;AAAA,MAChE,EAAE,OAAA,EAAS,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MAC1D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,eAAA,EAAiB,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAC/D,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,YAAY,GAAA,EAAI;AAAA,MAC7D,EAAE,OAAA,EAAS,YAAA,EAAc,IAAA,EAAM,OAAA,EAAS,YAAY,GAAA;AAAI,KAC1D;AAGA,IAAA,MAAM,oBAAoB,CAAC,WAAA,EAAa,cAAA,EAAgB,OAAA,EAAS,UAAU,QAAQ,CAAA;AAEnF,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,KAAA,MAAW,CAAC,GAAG,CAAA,IAAK,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA,EAAG;AACpD,MAAA,IAAI,iBAAA,CAAkB,IAAA,CAAK,CAAC,MAAA,KAAW,GAAA,CAAI,aAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAC5E,QAAA,WAAA,GAAc,GAAA;AACd,QAAA;AAAA,MACF;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,EAAE,OAAA,EAAS,IAAA,EAAM,UAAA,MAAgB,QAAA,EAAU;AACpD,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3B,QAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,aAAa,CAAG,CAAA;AAE9D,QAAA,MAAM,MAAA,GAA0B;AAAA,UAC9B,OAAA,EAAS,IAAA;AAAA,UACT,UAAA,EAAY,eAAA;AAAA,UACZ,KAAA,EAAO,IAAA;AAAA,UACP,kBAAA,EAAoB,SAAA;AAAA,UACpB,SAAA,EAAW,eAAA,GAAkB,GAAA,GAAM,MAAA,GAAS,QAAA;AAAA,UAC5C,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,OAAO,eAAA,EAAiB;AAC/B,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,MAAM,CAAA;AAAA,QACpC;AAEA,QAAA,OAAO,MAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAAA,EACF;AAAA,EAEA,aAAA,GAAyB;AACvB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA,EAEA,qBAAA,GAAqD;AACnD,IAAA,OAAO,IAAA,CAAK,eAAe,eAAA,GAAkB,SAAA;AAAA,EAC/C;AACF,CAAA;AAKO,SAAS,sBAAsB,MAAA,EAA4B;AAChE,EAAA,OAAO,IAAI,uBAAuB,MAAM,CAAA;AAC1C;AAKA,IAAI,eAAA,GAAiD,IAAA;AAE9C,SAAS,sBAAsB,MAAA,EAAoD;AACxF,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,eAAA,GAAkB,IAAI,uBAAuB,MAAM,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,eAAA;AACT","file":"edge-runtime-loader.js","sourcesContent":["/**\n * Utility functions for agentshield-nextjs\n */\n\nimport type { NextRequest } from 'next/server';\n\n/**\n * Extract client IP address from a NextRequest.\n * In Next.js 15+, the `ip` property was removed from NextRequest.\n * This function uses headers to determine the client IP.\n *\n * @param request - The NextRequest object\n * @returns The client IP address or undefined if not available\n */\nexport function getClientIp(request: NextRequest): string | undefined {\n  // Check x-forwarded-for header (standard for proxies/load balancers)\n  const forwardedFor = request.headers.get('x-forwarded-for');\n  if (forwardedFor) {\n    // Take the first IP in the chain (original client)\n    const ip = forwardedFor.split(',')[0]?.trim();\n    if (ip) return ip;\n  }\n\n  // Check x-real-ip header (commonly used by nginx)\n  const realIp = request.headers.get('x-real-ip');\n  if (realIp) return realIp;\n\n  // Check cf-connecting-ip header (Cloudflare)\n  const cfIp = request.headers.get('cf-connecting-ip');\n  if (cfIp) return cfIp;\n\n  // Check x-client-ip header (some proxies use this)\n  const clientIp = request.headers.get('x-client-ip');\n  if (clientIp) return clientIp;\n\n  return undefined;\n}\n\n/**\n * Safely extract the hostname from a URL string.\n * Returns a friendly fallback when parsing fails so UX copy doesn't leak\n * \"undefined\" or similar to end users.\n */\nexport function safeHostname(url: string): string {\n  try {\n    return new URL(url).hostname;\n  } catch {\n    return 'this site';\n  }\n}\n","/**\n * Edge Runtime Compatible WASM Loader for AgentShield\n *\n * This module provides a pre-built solution for loading WASM in Edge Runtime.\n * It requires the WASM file to be manually placed in the project.\n */\n\nimport type { NextRequest } from 'next/server';\nimport { getClientIp } from './utils';\n\n// User must provide the WASM module via import\n// This is intentionally not imported here to allow user control\nexport interface WasmModule {\n  default: WebAssembly.Module;\n}\n\nexport interface DetectionResult {\n  isAgent: boolean;\n  isAiCrawler?: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'cryptographic' | 'pattern';\n  riskLevel?: 'low' | 'medium' | 'high' | 'critical';\n  timestamp: string;\n}\n\nexport interface AgentShieldConfig {\n  wasmModule?: WebAssembly.Module;\n  enableWasm?: boolean;\n  onAgentDetected?: (result: DetectionResult) => void;\n  blockAgents?: boolean;\n  allowedAgents?: string[];\n  debug?: boolean;\n}\n\ninterface WasmExports {\n  detect_agent(metadataPtr: number, metadataLen: number): number;\n  get_version(): number;\n  __wbindgen_malloc(size: number): number;\n  __wbindgen_free(ptr: number, size: number): void;\n  __wbindgen_realloc(ptr: number, oldSize: number, newSize: number): number;\n  memory: WebAssembly.Memory;\n}\n\nclass EdgeRuntimeAgentShield {\n  private wasmInstance: WebAssembly.Instance | null = null;\n  private wasmMemory: WebAssembly.Memory | null = null;\n  private config: AgentShieldConfig;\n  private initialized = false;\n\n  constructor(config: AgentShieldConfig = {}) {\n    this.config = config;\n  }\n\n  async init(wasmModule?: WebAssembly.Module): Promise<void> {\n    if (this.initialized) return;\n\n    const module = wasmModule || this.config.wasmModule;\n\n    if (module && this.config.enableWasm !== false) {\n      try {\n        this.wasmMemory = new WebAssembly.Memory({ initial: 17, maximum: 256 });\n\n        const imports = {\n          wbg: {\n            __wbindgen_throw: (ptr: number, len: number) => {\n              throw new Error(this.readString(ptr, len));\n            },\n            __wbg_log_: (ptr: number, len: number) => {\n              if (this.config.debug) {\n                console.log(this.readString(ptr, len));\n              }\n            },\n          },\n          env: {\n            memory: this.wasmMemory,\n          },\n        };\n\n        this.wasmInstance = await WebAssembly.instantiate(module, imports);\n        this.initialized = true;\n\n        if (this.config.debug) {\n          console.log('✅ AgentShield WASM initialized in Edge Runtime');\n        }\n      } catch (error) {\n        console.warn('⚠️ WASM initialization failed, using pattern detection:', error);\n        this.initialized = true;\n      }\n    } else {\n      this.initialized = true;\n    }\n  }\n\n  private readString(ptr: number, len: number): string {\n    if (!this.wasmInstance || !this.wasmMemory) {\n      throw new Error('WASM not initialized');\n    }\n    const memory = new Uint8Array(this.wasmMemory.buffer);\n    const bytes = memory.slice(ptr, ptr + len);\n    return new TextDecoder().decode(bytes);\n  }\n\n  private writeString(str: string): [number, number] {\n    if (!this.wasmInstance) {\n      throw new Error('WASM not initialized');\n    }\n    const exports = this.wasmInstance.exports as unknown as WasmExports;\n\n    const encoded = new TextEncoder().encode(str);\n    const ptr = exports.__wbindgen_malloc(encoded.length);\n\n    const memory = new Uint8Array(exports.memory.buffer);\n    memory.set(encoded, ptr);\n\n    return [ptr, encoded.length];\n  }\n\n  async detect(request: NextRequest): Promise<DetectionResult> {\n    if (!this.initialized) {\n      await this.init();\n    }\n\n    const metadata = {\n      userAgent: request.headers.get('user-agent') || '',\n      ipAddress: getClientIp(request) || '',\n      headers: Object.fromEntries(request.headers.entries()),\n    };\n\n    // Try WASM detection first\n    if (this.wasmInstance && this.config.enableWasm !== false) {\n      try {\n        const exports = this.wasmInstance.exports as unknown as WasmExports;\n        const [ptr, len] = this.writeString(JSON.stringify(metadata));\n\n        const resultPtr = exports.detect_agent(ptr, len);\n        // Read result with dynamic size\n        let resultStr = '';\n        let offset = 0;\n        const memory = new Uint8Array((exports.memory as WebAssembly.Memory).buffer);\n\n        // Read until we find the end of the JSON string\n        while (offset < 4096) {\n          // Max 4KB result\n          const byte = memory[resultPtr + offset];\n          if (byte === 0 || byte === undefined) break;\n          offset++;\n        }\n\n        if (offset > 0) {\n          resultStr = this.readString(resultPtr, offset);\n        }\n\n        exports.__wbindgen_free(ptr, len);\n        if (offset > 0) {\n          exports.__wbindgen_free(resultPtr, offset);\n        }\n\n        const result = JSON.parse(resultStr);\n\n        const detection: DetectionResult = {\n          ...result,\n          verificationMethod: 'cryptographic',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected && detection.isAgent) {\n          this.config.onAgentDetected(detection);\n        }\n\n        return detection;\n      } catch (error) {\n        if (this.config.debug) {\n          console.error('WASM detection failed:', error);\n        }\n        // Fall through to pattern detection\n      }\n    }\n\n    // Fallback: Pattern-based detection\n    return this.patternDetection(metadata);\n  }\n\n  private patternDetection(metadata: {\n    userAgent: string;\n    ipAddress: string;\n    headers: Record<string, string>;\n  }): DetectionResult {\n    const userAgent = metadata.userAgent.toLowerCase();\n\n    // Enhanced AI agent patterns with confidence scores\n    const patterns = [\n      // High confidence - explicit AI identifiers\n      { pattern: /chatgpt-user/i, name: 'ChatGPT', confidence: 0.95 },\n      { pattern: /claude-web/i, name: 'Claude', confidence: 0.95 },\n      { pattern: /gpt-crawler/i, name: 'GPT Crawler', confidence: 0.95 },\n      { pattern: /perplexitybot/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-user/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-ai/i, name: 'Perplexity', confidence: 0.95 },\n\n      // Medium-high confidence - company identifiers\n      { pattern: /anthropic/i, name: 'Anthropic', confidence: 0.9 },\n      { pattern: /openai/i, name: 'OpenAI', confidence: 0.9 },\n\n      // Medium confidence - product names\n      { pattern: /copilot/i, name: 'GitHub Copilot', confidence: 0.85 },\n      { pattern: /bard/i, name: 'Google Bard', confidence: 0.85 },\n      { pattern: /gemini/i, name: 'Google Gemini', confidence: 0.85 },\n      { pattern: /perplexity/i, name: 'Perplexity', confidence: 0.85 }, // Fallback\n      { pattern: /\\byou\\.com\\b/i, name: 'You.com', confidence: 0.8 },\n      { pattern: /\\bphind\\b/i, name: 'Phind', confidence: 0.8 },\n    ];\n\n    // Check for suspicious headers\n    const suspiciousHeaders = ['x-openai-', 'x-anthropic-', 'x-ai-', 'x-llm-', 'x-gpt-'];\n\n    let headerBoost = 0;\n    for (const [key] of Object.entries(metadata.headers)) {\n      if (suspiciousHeaders.some((prefix) => key.toLowerCase().startsWith(prefix))) {\n        headerBoost = 0.1;\n        break;\n      }\n    }\n\n    // Check patterns - patterns are ordered by confidence (highest first: 0.95, 0.90, 0.85...)\n    // so breaking on first match returns the highest-confidence match\n    for (const { pattern, name, confidence } of patterns) {\n      if (pattern.test(userAgent)) {\n        const finalConfidence = Math.min(confidence + headerBoost, 1.0);\n\n        const result: DetectionResult = {\n          isAgent: true,\n          confidence: finalConfidence,\n          agent: name,\n          verificationMethod: 'pattern',\n          riskLevel: finalConfidence > 0.9 ? 'high' : 'medium',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected) {\n          this.config.onAgentDetected(result);\n        }\n\n        return result;\n      }\n    }\n\n    // Not detected\n    return {\n      isAgent: false,\n      confidence: 0.85,\n      verificationMethod: 'pattern',\n      timestamp: new Date().toISOString(),\n    };\n  }\n\n  isInitialized(): boolean {\n    return this.initialized;\n  }\n\n  getVerificationMethod(): 'cryptographic' | 'pattern' {\n    return this.wasmInstance ? 'cryptographic' : 'pattern';\n  }\n}\n\n/**\n * Factory function to create an AgentShield instance for Edge Runtime\n */\nexport function createEdgeAgentShield(config?: AgentShieldConfig) {\n  return new EdgeRuntimeAgentShield(config);\n}\n\n/**\n * Singleton instance for simple usage\n */\nlet defaultInstance: EdgeRuntimeAgentShield | null = null;\n\nexport function getDefaultAgentShield(config?: AgentShieldConfig): EdgeRuntimeAgentShield {\n  if (!defaultInstance) {\n    defaultInstance = new EdgeRuntimeAgentShield(config);\n  }\n  return defaultInstance;\n}\n"]}

package/dist/edge-runtime-loader.mjs

@@ -1,3 +1,19 @@
+// src/utils.ts
+function getClientIp(request) {
+  const forwardedFor = request.headers.get("x-forwarded-for");
+  if (forwardedFor) {
+    const ip = forwardedFor.split(",")[0]?.trim();
+    if (ip) return ip;
+  }
+  const realIp = request.headers.get("x-real-ip");
+  if (realIp) return realIp;
+  const cfIp = request.headers.get("cf-connecting-ip");
+  if (cfIp) return cfIp;
+  const clientIp = request.headers.get("x-client-ip");
+  if (clientIp) return clientIp;
+  return void 0;
+}
+
 // src/edge-runtime-loader.ts
 var EdgeRuntimeAgentShield = class {
   wasmInstance = null;
@@ -66,7 +82,7 @@ var EdgeRuntimeAgentShield = class {
     }
     const metadata = {
       userAgent: request.headers.get("user-agent") || "",
-      ipAddress: request.ip || request.headers.get("x-forwarded-for")?.split(",")[0] || "",
+      ipAddress: getClientIp(request) || "",
       headers: Object.fromEntries(request.headers.entries())
     };
     if (this.wasmInstance && this.config.enableWasm !== false) {
@@ -126,8 +142,8 @@ var EdgeRuntimeAgentShield = class {
       { pattern: /gemini/i, name: "Google Gemini", confidence: 0.85 },
       { pattern: /perplexity/i, name: "Perplexity", confidence: 0.85 },
       // Fallback
-      { pattern: /you\.com/i, name: "You.com", confidence: 0.8 },
-      { pattern: /phind/i, name: "Phind", confidence: 0.8 }
+      { pattern: /\byou\.com\b/i, name: "You.com", confidence: 0.8 },
+      { pattern: /\bphind\b/i, name: "Phind", confidence: 0.8 }
     ];
     const suspiciousHeaders = ["x-openai-", "x-anthropic-", "x-ai-", "x-llm-", "x-gpt-"];
     let headerBoost = 0;

package/dist/edge-runtime-loader.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-runtime-loader.ts"],"names":["exports"],"mappings":";AA0CA,IAAM,yBAAN,MAA6B;AAAA,EACnB,YAAA,GAA4C,IAAA;AAAA,EAC5C,UAAA,GAAwC,IAAA;AAAA,EACxC,MAAA;AAAA,EACA,WAAA,GAAc,KAAA;AAAA,EAEtB,WAAA,CAAY,MAAA,GAA4B,EAAC,EAAG;AAC1C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EAEA,MAAM,KAAK,UAAA,EAAgD;AACzD,IAAA,IAAI,KAAK,WAAA,EAAa;AAEtB,IAAA,MAAM,MAAA,GAAS,UAAA,IAAc,IAAA,CAAK,MAAA,CAAO,UAAA;AAEzC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,MAAA,CAAO,UAAA,KAAe,KAAA,EAAO;AAC9C,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,MAAA,CAAO,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,GAAA,EAAK,CAAA;AAEtE,QAAA,MAAM,OAAA,GAAU;AAAA,UACd,GAAA,EAAK;AAAA,YACH,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,cAAA,MAAM,IAAI,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,YAC3C,CAAA;AAAA,YACA,UAAA,EAAY,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxC,cAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,gBAAA,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,cACvC;AAAA,YACF;AAAA,WACF;AAAA,UACA,GAAA,EAAK;AAAA,YACH,QAAQ,IAAA,CAAK;AAAA;AACf,SACF;AAEA,QAAA,IAAA,CAAK,YAAA,GAAe,MAAM,WAAA,CAAY,WAAA,CAAY,QAAQ,OAAO,CAAA;AACjE,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAEnB,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,IAAI,qDAAgD,CAAA;AAAA,QAC9D;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,qEAA2D,KAAK,CAAA;AAC7E,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,MACrB;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEQ,UAAA,CAAW,KAAa,GAAA,EAAqB;AACnD,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,IAAgB,CAAC,KAAK,UAAA,EAAY;AAC1C,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,IAAA,CAAK,WAAW,MAAM,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,MAAM,GAAG,CAAA;AACzC,IAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AAAA,EACvC;AAAA,EAEQ,YAAY,GAAA,EAA+B;AACjD,IAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAElC,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AAC5C,IAAA,MAAM,GAAA,GAAMA,SAAA,CAAQ,iBAAA,CAAkB,OAAA,CAAQ,MAAM,CAAA;AAEpD,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAWA,SAAA,CAAQ,OAAO,MAAM,CAAA;AACnD,IAAA,MAAA,CAAO,GAAA,CAAI,SAAS,GAAG,CAAA;AAEvB,IAAA,OAAO,CAAC,GAAA,EAAK,OAAA,CAAQ,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,OAAO,OAAA,EAAgD;AAC3D,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,KAAK,IAAA,EAAK;AAAA,IAClB;AAEA,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,EAAA;AAAA,MAChD,SAAA,EAAW,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AAAA,MAClF,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS;AAAA,KACvD;AAGA,IAAA,IAAI,IAAA,CAAK,YAAA,IAAgB,IAAA,CAAK,MAAA,CAAO,eAAe,KAAA,EAAO;AACzD,MAAA,IAAI;AACF,QAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAClC,QAAA,MAAM,CAAC,KAAK,GAAG,CAAA,GAAI,KAAK,WAAA,CAAY,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA;AAE5D,QAAA,MAAM,SAAA,GAAYA,SAAA,CAAQ,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAE/C,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,IAAI,MAAA,GAAS,CAAA;AACb,QAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAYA,SAAA,CAAQ,OAA8B,MAAM,CAAA;AAG3E,QAAA,OAAO,SAAS,IAAA,EAAM;AAEpB,UAAA,MAAM,IAAA,GAAO,MAAA,CAAO,SAAA,GAAY,MAAM,CAAA;AACtC,UAAA,IAAI,IAAA,KAAS,CAAA,IAAK,IAAA,KAAS,KAAA,CAAA,EAAW;AACtC,UAAA,MAAA,EAAA;AAAA,QACF;AAEA,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,SAAA,EAAW,MAAM,CAAA;AAAA,QAC/C;AAEA,QAAAA,SAAA,CAAQ,eAAA,CAAgB,KAAK,GAAG,CAAA;AAChC,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAAA,SAAA,CAAQ,eAAA,CAAgB,WAAW,MAAM,CAAA;AAAA,QAC3C;AAEA,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnC,QAAA,MAAM,SAAA,GAA6B;AAAA,UACjC,GAAG,MAAA;AAAA,UACH,kBAAA,EAAoB,eAAA;AAAA,UACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,MAAA,CAAO,eAAA,IAAmB,SAAA,CAAU,OAAA,EAAS;AACpD,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,SAAS,CAAA;AAAA,QACvC;AAEA,QAAA,OAAO,SAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAAA,QAC/C;AAAA,MAEF;AAAA,IACF;AAGA,IAAA,OAAO,IAAA,CAAK,iBAAiB,QAAQ,CAAA;AAAA,EACvC;AAAA,EAEQ,iBAAiB,QAAA,EAIL;AAClB,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,SAAA,CAAU,WAAA,EAAY;AAGjD,IAAA,MAAM,QAAA,GAAW;AAAA;AAAA,MAEf,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,QAAA,EAAU,YAAY,IAAA,EAAK;AAAA,MAC3D,EAAE,OAAA,EAAS,cAAA,EAAgB,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MACjE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MAClE,EAAE,OAAA,EAAS,kBAAA,EAAoB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MACpE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAGlE,EAAE,OAAA,EAAS,YAAA,EAAc,IAAA,EAAM,WAAA,EAAa,YAAY,GAAA,EAAI;AAAA,MAC5D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,YAAY,GAAA,EAAI;AAAA;AAAA,MAGtD,EAAE,OAAA,EAAS,UAAA,EAAY,IAAA,EAAM,gBAAA,EAAkB,YAAY,IAAA,EAAK;AAAA,MAChE,EAAE,OAAA,EAAS,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MAC1D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,eAAA,EAAiB,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAC/D,EAAE,OAAA,EAAS,WAAA,EAAa,IAAA,EAAM,SAAA,EAAW,YAAY,GAAA,EAAI;AAAA,MACzD,EAAE,OAAA,EAAS,QAAA,EAAU,IAAA,EAAM,OAAA,EAAS,YAAY,GAAA;AAAI,KACtD;AAGA,IAAA,MAAM,oBAAoB,CAAC,WAAA,EAAa,cAAA,EAAgB,OAAA,EAAS,UAAU,QAAQ,CAAA;AAEnF,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,KAAA,MAAW,CAAC,GAAG,CAAA,IAAK,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA,EAAG;AACpD,MAAA,IAAI,iBAAA,CAAkB,IAAA,CAAK,CAAC,MAAA,KAAW,GAAA,CAAI,aAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAC5E,QAAA,WAAA,GAAc,GAAA;AACd,QAAA;AAAA,MACF;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,EAAE,OAAA,EAAS,IAAA,EAAM,UAAA,MAAgB,QAAA,EAAU;AACpD,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3B,QAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,aAAa,CAAG,CAAA;AAE9D,QAAA,MAAM,MAAA,GAA0B;AAAA,UAC9B,OAAA,EAAS,IAAA;AAAA,UACT,UAAA,EAAY,eAAA;AAAA,UACZ,KAAA,EAAO,IAAA;AAAA,UACP,kBAAA,EAAoB,SAAA;AAAA,UACpB,SAAA,EAAW,eAAA,GAAkB,GAAA,GAAM,MAAA,GAAS,QAAA;AAAA,UAC5C,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,OAAO,eAAA,EAAiB;AAC/B,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,MAAM,CAAA;AAAA,QACpC;AAEA,QAAA,OAAO,MAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAAA,EACF;AAAA,EAEA,aAAA,GAAyB;AACvB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA,EAEA,qBAAA,GAAqD;AACnD,IAAA,OAAO,IAAA,CAAK,eAAe,eAAA,GAAkB,SAAA;AAAA,EAC/C;AACF,CAAA;AAKO,SAAS,sBAAsB,MAAA,EAA4B;AAChE,EAAA,OAAO,IAAI,uBAAuB,MAAM,CAAA;AAC1C;AAKA,IAAI,eAAA,GAAiD,IAAA;AAE9C,SAAS,sBAAsB,MAAA,EAAoD;AACxF,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,eAAA,GAAkB,IAAI,uBAAuB,MAAM,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,eAAA;AACT","file":"edge-runtime-loader.mjs","sourcesContent":["/**\n * Edge Runtime Compatible WASM Loader for AgentShield\n *\n * This module provides a pre-built solution for loading WASM in Edge Runtime.\n * It requires the WASM file to be manually placed in the project.\n */\n\nimport type { NextRequest } from 'next/server';\n\n// User must provide the WASM module via import\n// This is intentionally not imported here to allow user control\nexport interface WasmModule {\n  default: WebAssembly.Module;\n}\n\nexport interface DetectionResult {\n  isAgent: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'cryptographic' | 'pattern';\n  riskLevel?: 'low' | 'medium' | 'high' | 'critical';\n  timestamp: string;\n}\n\nexport interface AgentShieldConfig {\n  wasmModule?: WebAssembly.Module;\n  enableWasm?: boolean;\n  onAgentDetected?: (result: DetectionResult) => void;\n  blockAgents?: boolean;\n  allowedAgents?: string[];\n  debug?: boolean;\n}\n\ninterface WasmExports {\n  detect_agent(metadataPtr: number, metadataLen: number): number;\n  get_version(): number;\n  __wbindgen_malloc(size: number): number;\n  __wbindgen_free(ptr: number, size: number): void;\n  __wbindgen_realloc(ptr: number, oldSize: number, newSize: number): number;\n  memory: WebAssembly.Memory;\n}\n\nclass EdgeRuntimeAgentShield {\n  private wasmInstance: WebAssembly.Instance | null = null;\n  private wasmMemory: WebAssembly.Memory | null = null;\n  private config: AgentShieldConfig;\n  private initialized = false;\n\n  constructor(config: AgentShieldConfig = {}) {\n    this.config = config;\n  }\n\n  async init(wasmModule?: WebAssembly.Module): Promise<void> {\n    if (this.initialized) return;\n\n    const module = wasmModule || this.config.wasmModule;\n\n    if (module && this.config.enableWasm !== false) {\n      try {\n        this.wasmMemory = new WebAssembly.Memory({ initial: 17, maximum: 256 });\n\n        const imports = {\n          wbg: {\n            __wbindgen_throw: (ptr: number, len: number) => {\n              throw new Error(this.readString(ptr, len));\n            },\n            __wbg_log_: (ptr: number, len: number) => {\n              if (this.config.debug) {\n                console.log(this.readString(ptr, len));\n              }\n            },\n          },\n          env: {\n            memory: this.wasmMemory,\n          },\n        };\n\n        this.wasmInstance = await WebAssembly.instantiate(module, imports);\n        this.initialized = true;\n\n        if (this.config.debug) {\n          console.log('✅ AgentShield WASM initialized in Edge Runtime');\n        }\n      } catch (error) {\n        console.warn('⚠️ WASM initialization failed, using pattern detection:', error);\n        this.initialized = true;\n      }\n    } else {\n      this.initialized = true;\n    }\n  }\n\n  private readString(ptr: number, len: number): string {\n    if (!this.wasmInstance || !this.wasmMemory) {\n      throw new Error('WASM not initialized');\n    }\n    const memory = new Uint8Array(this.wasmMemory.buffer);\n    const bytes = memory.slice(ptr, ptr + len);\n    return new TextDecoder().decode(bytes);\n  }\n\n  private writeString(str: string): [number, number] {\n    if (!this.wasmInstance) {\n      throw new Error('WASM not initialized');\n    }\n    const exports = this.wasmInstance.exports as unknown as WasmExports;\n\n    const encoded = new TextEncoder().encode(str);\n    const ptr = exports.__wbindgen_malloc(encoded.length);\n\n    const memory = new Uint8Array(exports.memory.buffer);\n    memory.set(encoded, ptr);\n\n    return [ptr, encoded.length];\n  }\n\n  async detect(request: NextRequest): Promise<DetectionResult> {\n    if (!this.initialized) {\n      await this.init();\n    }\n\n    const metadata = {\n      userAgent: request.headers.get('user-agent') || '',\n      ipAddress: request.ip || request.headers.get('x-forwarded-for')?.split(',')[0] || '',\n      headers: Object.fromEntries(request.headers.entries()),\n    };\n\n    // Try WASM detection first\n    if (this.wasmInstance && this.config.enableWasm !== false) {\n      try {\n        const exports = this.wasmInstance.exports as unknown as WasmExports;\n        const [ptr, len] = this.writeString(JSON.stringify(metadata));\n\n        const resultPtr = exports.detect_agent(ptr, len);\n        // Read result with dynamic size\n        let resultStr = '';\n        let offset = 0;\n        const memory = new Uint8Array((exports.memory as WebAssembly.Memory).buffer);\n\n        // Read until we find the end of the JSON string\n        while (offset < 4096) {\n          // Max 4KB result\n          const byte = memory[resultPtr + offset];\n          if (byte === 0 || byte === undefined) break;\n          offset++;\n        }\n\n        if (offset > 0) {\n          resultStr = this.readString(resultPtr, offset);\n        }\n\n        exports.__wbindgen_free(ptr, len);\n        if (offset > 0) {\n          exports.__wbindgen_free(resultPtr, offset);\n        }\n\n        const result = JSON.parse(resultStr);\n\n        const detection: DetectionResult = {\n          ...result,\n          verificationMethod: 'cryptographic',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected && detection.isAgent) {\n          this.config.onAgentDetected(detection);\n        }\n\n        return detection;\n      } catch (error) {\n        if (this.config.debug) {\n          console.error('WASM detection failed:', error);\n        }\n        // Fall through to pattern detection\n      }\n    }\n\n    // Fallback: Pattern-based detection\n    return this.patternDetection(metadata);\n  }\n\n  private patternDetection(metadata: {\n    userAgent: string;\n    ipAddress: string;\n    headers: Record<string, string>;\n  }): DetectionResult {\n    const userAgent = metadata.userAgent.toLowerCase();\n\n    // Enhanced AI agent patterns with confidence scores\n    const patterns = [\n      // High confidence - explicit AI identifiers\n      { pattern: /chatgpt-user/i, name: 'ChatGPT', confidence: 0.95 },\n      { pattern: /claude-web/i, name: 'Claude', confidence: 0.95 },\n      { pattern: /gpt-crawler/i, name: 'GPT Crawler', confidence: 0.95 },\n      { pattern: /perplexitybot/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-user/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-ai/i, name: 'Perplexity', confidence: 0.95 },\n\n      // Medium-high confidence - company identifiers\n      { pattern: /anthropic/i, name: 'Anthropic', confidence: 0.9 },\n      { pattern: /openai/i, name: 'OpenAI', confidence: 0.9 },\n\n      // Medium confidence - product names\n      { pattern: /copilot/i, name: 'GitHub Copilot', confidence: 0.85 },\n      { pattern: /bard/i, name: 'Google Bard', confidence: 0.85 },\n      { pattern: /gemini/i, name: 'Google Gemini', confidence: 0.85 },\n      { pattern: /perplexity/i, name: 'Perplexity', confidence: 0.85 }, // Fallback\n      { pattern: /you\\.com/i, name: 'You.com', confidence: 0.8 },\n      { pattern: /phind/i, name: 'Phind', confidence: 0.8 },\n    ];\n\n    // Check for suspicious headers\n    const suspiciousHeaders = ['x-openai-', 'x-anthropic-', 'x-ai-', 'x-llm-', 'x-gpt-'];\n\n    let headerBoost = 0;\n    for (const [key] of Object.entries(metadata.headers)) {\n      if (suspiciousHeaders.some((prefix) => key.toLowerCase().startsWith(prefix))) {\n        headerBoost = 0.1;\n        break;\n      }\n    }\n\n    // Check patterns - patterns are ordered by confidence (highest first: 0.95, 0.90, 0.85...)\n    // so breaking on first match returns the highest-confidence match\n    for (const { pattern, name, confidence } of patterns) {\n      if (pattern.test(userAgent)) {\n        const finalConfidence = Math.min(confidence + headerBoost, 1.0);\n\n        const result: DetectionResult = {\n          isAgent: true,\n          confidence: finalConfidence,\n          agent: name,\n          verificationMethod: 'pattern',\n          riskLevel: finalConfidence > 0.9 ? 'high' : 'medium',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected) {\n          this.config.onAgentDetected(result);\n        }\n\n        return result;\n      }\n    }\n\n    // Not detected\n    return {\n      isAgent: false,\n      confidence: 0.85,\n      verificationMethod: 'pattern',\n      timestamp: new Date().toISOString(),\n    };\n  }\n\n  isInitialized(): boolean {\n    return this.initialized;\n  }\n\n  getVerificationMethod(): 'cryptographic' | 'pattern' {\n    return this.wasmInstance ? 'cryptographic' : 'pattern';\n  }\n}\n\n/**\n * Factory function to create an AgentShield instance for Edge Runtime\n */\nexport function createEdgeAgentShield(config?: AgentShieldConfig) {\n  return new EdgeRuntimeAgentShield(config);\n}\n\n/**\n * Singleton instance for simple usage\n */\nlet defaultInstance: EdgeRuntimeAgentShield | null = null;\n\nexport function getDefaultAgentShield(config?: AgentShieldConfig): EdgeRuntimeAgentShield {\n  if (!defaultInstance) {\n    defaultInstance = new EdgeRuntimeAgentShield(config);\n  }\n  return defaultInstance;\n}\n"]}
+{"version":3,"sources":["../src/utils.ts","../src/edge-runtime-loader.ts"],"names":["exports"],"mappings":";AAcO,SAAS,YAAY,OAAA,EAA0C;AAEpE,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AAC1D,EAAA,IAAI,YAAA,EAAc;AAEhB,IAAA,MAAM,KAAK,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AAC5C,IAAA,IAAI,IAAI,OAAO,EAAA;AAAA,EACjB;AAGA,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AAC9C,EAAA,IAAI,QAAQ,OAAO,MAAA;AAGnB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AACnD,EAAA,IAAI,MAAM,OAAO,IAAA;AAGjB,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AAClD,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,OAAO,MAAA;AACT;;;ACQA,IAAM,yBAAN,MAA6B;AAAA,EACnB,YAAA,GAA4C,IAAA;AAAA,EAC5C,UAAA,GAAwC,IAAA;AAAA,EACxC,MAAA;AAAA,EACA,WAAA,GAAc,KAAA;AAAA,EAEtB,WAAA,CAAY,MAAA,GAA4B,EAAC,EAAG;AAC1C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EAEA,MAAM,KAAK,UAAA,EAAgD;AACzD,IAAA,IAAI,KAAK,WAAA,EAAa;AAEtB,IAAA,MAAM,MAAA,GAAS,UAAA,IAAc,IAAA,CAAK,MAAA,CAAO,UAAA;AAEzC,IAAA,IAAI,MAAA,IAAU,IAAA,CAAK,MAAA,CAAO,UAAA,KAAe,KAAA,EAAO;AAC9C,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,MAAA,CAAO,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,GAAA,EAAK,CAAA;AAEtE,QAAA,MAAM,OAAA,GAAU;AAAA,UACd,GAAA,EAAK;AAAA,YACH,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,cAAA,MAAM,IAAI,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,YAC3C,CAAA;AAAA,YACA,UAAA,EAAY,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxC,cAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,gBAAA,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,GAAA,EAAK,GAAG,CAAC,CAAA;AAAA,cACvC;AAAA,YACF;AAAA,WACF;AAAA,UACA,GAAA,EAAK;AAAA,YACH,QAAQ,IAAA,CAAK;AAAA;AACf,SACF;AAEA,QAAA,IAAA,CAAK,YAAA,GAAe,MAAM,WAAA,CAAY,WAAA,CAAY,QAAQ,OAAO,CAAA;AACjE,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAEnB,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,IAAI,qDAAgD,CAAA;AAAA,QAC9D;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,qEAA2D,KAAK,CAAA;AAC7E,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,MACrB;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEQ,UAAA,CAAW,KAAa,GAAA,EAAqB;AACnD,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,IAAgB,CAAC,KAAK,UAAA,EAAY;AAC1C,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,IAAA,CAAK,WAAW,MAAM,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,MAAM,GAAG,CAAA;AACzC,IAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AAAA,EACvC;AAAA,EAEQ,YAAY,GAAA,EAA+B;AACjD,IAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AACA,IAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAElC,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AAC5C,IAAA,MAAM,GAAA,GAAMA,SAAA,CAAQ,iBAAA,CAAkB,OAAA,CAAQ,MAAM,CAAA;AAEpD,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAWA,SAAA,CAAQ,OAAO,MAAM,CAAA;AACnD,IAAA,MAAA,CAAO,GAAA,CAAI,SAAS,GAAG,CAAA;AAEvB,IAAA,OAAO,CAAC,GAAA,EAAK,OAAA,CAAQ,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,OAAO,OAAA,EAAgD;AAC3D,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,KAAK,IAAA,EAAK;AAAA,IAClB;AAEA,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,EAAA;AAAA,MAChD,SAAA,EAAW,WAAA,CAAY,OAAO,CAAA,IAAK,EAAA;AAAA,MACnC,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS;AAAA,KACvD;AAGA,IAAA,IAAI,IAAA,CAAK,YAAA,IAAgB,IAAA,CAAK,MAAA,CAAO,eAAe,KAAA,EAAO;AACzD,MAAA,IAAI;AACF,QAAA,MAAMA,SAAA,GAAU,KAAK,YAAA,CAAa,OAAA;AAClC,QAAA,MAAM,CAAC,KAAK,GAAG,CAAA,GAAI,KAAK,WAAA,CAAY,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA;AAE5D,QAAA,MAAM,SAAA,GAAYA,SAAA,CAAQ,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAE/C,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,IAAI,MAAA,GAAS,CAAA;AACb,QAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAYA,SAAA,CAAQ,OAA8B,MAAM,CAAA;AAG3E,QAAA,OAAO,SAAS,IAAA,EAAM;AAEpB,UAAA,MAAM,IAAA,GAAO,MAAA,CAAO,SAAA,GAAY,MAAM,CAAA;AACtC,UAAA,IAAI,IAAA,KAAS,CAAA,IAAK,IAAA,KAAS,KAAA,CAAA,EAAW;AACtC,UAAA,MAAA,EAAA;AAAA,QACF;AAEA,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,SAAA,EAAW,MAAM,CAAA;AAAA,QAC/C;AAEA,QAAAA,SAAA,CAAQ,eAAA,CAAgB,KAAK,GAAG,CAAA;AAChC,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAAA,SAAA,CAAQ,eAAA,CAAgB,WAAW,MAAM,CAAA;AAAA,QAC3C;AAEA,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnC,QAAA,MAAM,SAAA,GAA6B;AAAA,UACjC,GAAG,MAAA;AAAA,UACH,kBAAA,EAAoB,eAAA;AAAA,UACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,MAAA,CAAO,eAAA,IAAmB,SAAA,CAAU,OAAA,EAAS;AACpD,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,SAAS,CAAA;AAAA,QACvC;AAEA,QAAA,OAAO,SAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAAA,QAC/C;AAAA,MAEF;AAAA,IACF;AAGA,IAAA,OAAO,IAAA,CAAK,iBAAiB,QAAQ,CAAA;AAAA,EACvC;AAAA,EAEQ,iBAAiB,QAAA,EAIL;AAClB,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,SAAA,CAAU,WAAA,EAAY;AAGjD,IAAA,MAAM,QAAA,GAAW;AAAA;AAAA,MAEf,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,QAAA,EAAU,YAAY,IAAA,EAAK;AAAA,MAC3D,EAAE,OAAA,EAAS,cAAA,EAAgB,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MACjE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MAClE,EAAE,OAAA,EAAS,kBAAA,EAAoB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA,MACpE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAGlE,EAAE,OAAA,EAAS,YAAA,EAAc,IAAA,EAAM,WAAA,EAAa,YAAY,GAAA,EAAI;AAAA,MAC5D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,YAAY,GAAA,EAAI;AAAA;AAAA,MAGtD,EAAE,OAAA,EAAS,UAAA,EAAY,IAAA,EAAM,gBAAA,EAAkB,YAAY,IAAA,EAAK;AAAA,MAChE,EAAE,OAAA,EAAS,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,YAAY,IAAA,EAAK;AAAA,MAC1D,EAAE,OAAA,EAAS,SAAA,EAAW,IAAA,EAAM,eAAA,EAAiB,YAAY,IAAA,EAAK;AAAA,MAC9D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,YAAA,EAAc,YAAY,IAAA,EAAK;AAAA;AAAA,MAC/D,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,YAAY,GAAA,EAAI;AAAA,MAC7D,EAAE,OAAA,EAAS,YAAA,EAAc,IAAA,EAAM,OAAA,EAAS,YAAY,GAAA;AAAI,KAC1D;AAGA,IAAA,MAAM,oBAAoB,CAAC,WAAA,EAAa,cAAA,EAAgB,OAAA,EAAS,UAAU,QAAQ,CAAA;AAEnF,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,KAAA,MAAW,CAAC,GAAG,CAAA,IAAK,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA,EAAG;AACpD,MAAA,IAAI,iBAAA,CAAkB,IAAA,CAAK,CAAC,MAAA,KAAW,GAAA,CAAI,aAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAC5E,QAAA,WAAA,GAAc,GAAA;AACd,QAAA;AAAA,MACF;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,EAAE,OAAA,EAAS,IAAA,EAAM,UAAA,MAAgB,QAAA,EAAU;AACpD,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3B,QAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,aAAa,CAAG,CAAA;AAE9D,QAAA,MAAM,MAAA,GAA0B;AAAA,UAC9B,OAAA,EAAS,IAAA;AAAA,UACT,UAAA,EAAY,eAAA;AAAA,UACZ,KAAA,EAAO,IAAA;AAAA,UACP,kBAAA,EAAoB,SAAA;AAAA,UACpB,SAAA,EAAW,eAAA,GAAkB,GAAA,GAAM,MAAA,GAAS,QAAA;AAAA,UAC5C,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACpC;AAEA,QAAA,IAAI,IAAA,CAAK,OAAO,eAAA,EAAiB;AAC/B,UAAA,IAAA,CAAK,MAAA,CAAO,gBAAgB,MAAM,CAAA;AAAA,QACpC;AAEA,QAAA,OAAO,MAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAAA,EACF;AAAA,EAEA,aAAA,GAAyB;AACvB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA,EAEA,qBAAA,GAAqD;AACnD,IAAA,OAAO,IAAA,CAAK,eAAe,eAAA,GAAkB,SAAA;AAAA,EAC/C;AACF,CAAA;AAKO,SAAS,sBAAsB,MAAA,EAA4B;AAChE,EAAA,OAAO,IAAI,uBAAuB,MAAM,CAAA;AAC1C;AAKA,IAAI,eAAA,GAAiD,IAAA;AAE9C,SAAS,sBAAsB,MAAA,EAAoD;AACxF,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,eAAA,GAAkB,IAAI,uBAAuB,MAAM,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,eAAA;AACT","file":"edge-runtime-loader.mjs","sourcesContent":["/**\n * Utility functions for agentshield-nextjs\n */\n\nimport type { NextRequest } from 'next/server';\n\n/**\n * Extract client IP address from a NextRequest.\n * In Next.js 15+, the `ip` property was removed from NextRequest.\n * This function uses headers to determine the client IP.\n *\n * @param request - The NextRequest object\n * @returns The client IP address or undefined if not available\n */\nexport function getClientIp(request: NextRequest): string | undefined {\n  // Check x-forwarded-for header (standard for proxies/load balancers)\n  const forwardedFor = request.headers.get('x-forwarded-for');\n  if (forwardedFor) {\n    // Take the first IP in the chain (original client)\n    const ip = forwardedFor.split(',')[0]?.trim();\n    if (ip) return ip;\n  }\n\n  // Check x-real-ip header (commonly used by nginx)\n  const realIp = request.headers.get('x-real-ip');\n  if (realIp) return realIp;\n\n  // Check cf-connecting-ip header (Cloudflare)\n  const cfIp = request.headers.get('cf-connecting-ip');\n  if (cfIp) return cfIp;\n\n  // Check x-client-ip header (some proxies use this)\n  const clientIp = request.headers.get('x-client-ip');\n  if (clientIp) return clientIp;\n\n  return undefined;\n}\n\n/**\n * Safely extract the hostname from a URL string.\n * Returns a friendly fallback when parsing fails so UX copy doesn't leak\n * \"undefined\" or similar to end users.\n */\nexport function safeHostname(url: string): string {\n  try {\n    return new URL(url).hostname;\n  } catch {\n    return 'this site';\n  }\n}\n","/**\n * Edge Runtime Compatible WASM Loader for AgentShield\n *\n * This module provides a pre-built solution for loading WASM in Edge Runtime.\n * It requires the WASM file to be manually placed in the project.\n */\n\nimport type { NextRequest } from 'next/server';\nimport { getClientIp } from './utils';\n\n// User must provide the WASM module via import\n// This is intentionally not imported here to allow user control\nexport interface WasmModule {\n  default: WebAssembly.Module;\n}\n\nexport interface DetectionResult {\n  isAgent: boolean;\n  isAiCrawler?: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'cryptographic' | 'pattern';\n  riskLevel?: 'low' | 'medium' | 'high' | 'critical';\n  timestamp: string;\n}\n\nexport interface AgentShieldConfig {\n  wasmModule?: WebAssembly.Module;\n  enableWasm?: boolean;\n  onAgentDetected?: (result: DetectionResult) => void;\n  blockAgents?: boolean;\n  allowedAgents?: string[];\n  debug?: boolean;\n}\n\ninterface WasmExports {\n  detect_agent(metadataPtr: number, metadataLen: number): number;\n  get_version(): number;\n  __wbindgen_malloc(size: number): number;\n  __wbindgen_free(ptr: number, size: number): void;\n  __wbindgen_realloc(ptr: number, oldSize: number, newSize: number): number;\n  memory: WebAssembly.Memory;\n}\n\nclass EdgeRuntimeAgentShield {\n  private wasmInstance: WebAssembly.Instance | null = null;\n  private wasmMemory: WebAssembly.Memory | null = null;\n  private config: AgentShieldConfig;\n  private initialized = false;\n\n  constructor(config: AgentShieldConfig = {}) {\n    this.config = config;\n  }\n\n  async init(wasmModule?: WebAssembly.Module): Promise<void> {\n    if (this.initialized) return;\n\n    const module = wasmModule || this.config.wasmModule;\n\n    if (module && this.config.enableWasm !== false) {\n      try {\n        this.wasmMemory = new WebAssembly.Memory({ initial: 17, maximum: 256 });\n\n        const imports = {\n          wbg: {\n            __wbindgen_throw: (ptr: number, len: number) => {\n              throw new Error(this.readString(ptr, len));\n            },\n            __wbg_log_: (ptr: number, len: number) => {\n              if (this.config.debug) {\n                console.log(this.readString(ptr, len));\n              }\n            },\n          },\n          env: {\n            memory: this.wasmMemory,\n          },\n        };\n\n        this.wasmInstance = await WebAssembly.instantiate(module, imports);\n        this.initialized = true;\n\n        if (this.config.debug) {\n          console.log('✅ AgentShield WASM initialized in Edge Runtime');\n        }\n      } catch (error) {\n        console.warn('⚠️ WASM initialization failed, using pattern detection:', error);\n        this.initialized = true;\n      }\n    } else {\n      this.initialized = true;\n    }\n  }\n\n  private readString(ptr: number, len: number): string {\n    if (!this.wasmInstance || !this.wasmMemory) {\n      throw new Error('WASM not initialized');\n    }\n    const memory = new Uint8Array(this.wasmMemory.buffer);\n    const bytes = memory.slice(ptr, ptr + len);\n    return new TextDecoder().decode(bytes);\n  }\n\n  private writeString(str: string): [number, number] {\n    if (!this.wasmInstance) {\n      throw new Error('WASM not initialized');\n    }\n    const exports = this.wasmInstance.exports as unknown as WasmExports;\n\n    const encoded = new TextEncoder().encode(str);\n    const ptr = exports.__wbindgen_malloc(encoded.length);\n\n    const memory = new Uint8Array(exports.memory.buffer);\n    memory.set(encoded, ptr);\n\n    return [ptr, encoded.length];\n  }\n\n  async detect(request: NextRequest): Promise<DetectionResult> {\n    if (!this.initialized) {\n      await this.init();\n    }\n\n    const metadata = {\n      userAgent: request.headers.get('user-agent') || '',\n      ipAddress: getClientIp(request) || '',\n      headers: Object.fromEntries(request.headers.entries()),\n    };\n\n    // Try WASM detection first\n    if (this.wasmInstance && this.config.enableWasm !== false) {\n      try {\n        const exports = this.wasmInstance.exports as unknown as WasmExports;\n        const [ptr, len] = this.writeString(JSON.stringify(metadata));\n\n        const resultPtr = exports.detect_agent(ptr, len);\n        // Read result with dynamic size\n        let resultStr = '';\n        let offset = 0;\n        const memory = new Uint8Array((exports.memory as WebAssembly.Memory).buffer);\n\n        // Read until we find the end of the JSON string\n        while (offset < 4096) {\n          // Max 4KB result\n          const byte = memory[resultPtr + offset];\n          if (byte === 0 || byte === undefined) break;\n          offset++;\n        }\n\n        if (offset > 0) {\n          resultStr = this.readString(resultPtr, offset);\n        }\n\n        exports.__wbindgen_free(ptr, len);\n        if (offset > 0) {\n          exports.__wbindgen_free(resultPtr, offset);\n        }\n\n        const result = JSON.parse(resultStr);\n\n        const detection: DetectionResult = {\n          ...result,\n          verificationMethod: 'cryptographic',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected && detection.isAgent) {\n          this.config.onAgentDetected(detection);\n        }\n\n        return detection;\n      } catch (error) {\n        if (this.config.debug) {\n          console.error('WASM detection failed:', error);\n        }\n        // Fall through to pattern detection\n      }\n    }\n\n    // Fallback: Pattern-based detection\n    return this.patternDetection(metadata);\n  }\n\n  private patternDetection(metadata: {\n    userAgent: string;\n    ipAddress: string;\n    headers: Record<string, string>;\n  }): DetectionResult {\n    const userAgent = metadata.userAgent.toLowerCase();\n\n    // Enhanced AI agent patterns with confidence scores\n    const patterns = [\n      // High confidence - explicit AI identifiers\n      { pattern: /chatgpt-user/i, name: 'ChatGPT', confidence: 0.95 },\n      { pattern: /claude-web/i, name: 'Claude', confidence: 0.95 },\n      { pattern: /gpt-crawler/i, name: 'GPT Crawler', confidence: 0.95 },\n      { pattern: /perplexitybot/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-user/i, name: 'Perplexity', confidence: 0.95 },\n      { pattern: /perplexity-ai/i, name: 'Perplexity', confidence: 0.95 },\n\n      // Medium-high confidence - company identifiers\n      { pattern: /anthropic/i, name: 'Anthropic', confidence: 0.9 },\n      { pattern: /openai/i, name: 'OpenAI', confidence: 0.9 },\n\n      // Medium confidence - product names\n      { pattern: /copilot/i, name: 'GitHub Copilot', confidence: 0.85 },\n      { pattern: /bard/i, name: 'Google Bard', confidence: 0.85 },\n      { pattern: /gemini/i, name: 'Google Gemini', confidence: 0.85 },\n      { pattern: /perplexity/i, name: 'Perplexity', confidence: 0.85 }, // Fallback\n      { pattern: /\\byou\\.com\\b/i, name: 'You.com', confidence: 0.8 },\n      { pattern: /\\bphind\\b/i, name: 'Phind', confidence: 0.8 },\n    ];\n\n    // Check for suspicious headers\n    const suspiciousHeaders = ['x-openai-', 'x-anthropic-', 'x-ai-', 'x-llm-', 'x-gpt-'];\n\n    let headerBoost = 0;\n    for (const [key] of Object.entries(metadata.headers)) {\n      if (suspiciousHeaders.some((prefix) => key.toLowerCase().startsWith(prefix))) {\n        headerBoost = 0.1;\n        break;\n      }\n    }\n\n    // Check patterns - patterns are ordered by confidence (highest first: 0.95, 0.90, 0.85...)\n    // so breaking on first match returns the highest-confidence match\n    for (const { pattern, name, confidence } of patterns) {\n      if (pattern.test(userAgent)) {\n        const finalConfidence = Math.min(confidence + headerBoost, 1.0);\n\n        const result: DetectionResult = {\n          isAgent: true,\n          confidence: finalConfidence,\n          agent: name,\n          verificationMethod: 'pattern',\n          riskLevel: finalConfidence > 0.9 ? 'high' : 'medium',\n          timestamp: new Date().toISOString(),\n        };\n\n        if (this.config.onAgentDetected) {\n          this.config.onAgentDetected(result);\n        }\n\n        return result;\n      }\n    }\n\n    // Not detected\n    return {\n      isAgent: false,\n      confidence: 0.85,\n      verificationMethod: 'pattern',\n      timestamp: new Date().toISOString(),\n    };\n  }\n\n  isInitialized(): boolean {\n    return this.initialized;\n  }\n\n  getVerificationMethod(): 'cryptographic' | 'pattern' {\n    return this.wasmInstance ? 'cryptographic' : 'pattern';\n  }\n}\n\n/**\n * Factory function to create an AgentShield instance for Edge Runtime\n */\nexport function createEdgeAgentShield(config?: AgentShieldConfig) {\n  return new EdgeRuntimeAgentShield(config);\n}\n\n/**\n * Singleton instance for simple usage\n */\nlet defaultInstance: EdgeRuntimeAgentShield | null = null;\n\nexport function getDefaultAgentShield(config?: AgentShieldConfig): EdgeRuntimeAgentShield {\n  if (!defaultInstance) {\n    defaultInstance = new EdgeRuntimeAgentShield(config);\n  }\n  return defaultInstance;\n}\n"]}

package/dist/edge-wasm-middleware.d.mts

@@ -12,6 +12,7 @@ import { NextRequest, NextResponse } from 'next/server';
 
 interface EdgeWasmDetectionResult {
     isAgent: boolean;
+    isAiCrawler?: boolean;
     confidence: number;
     agent?: string;
     verificationMethod: 'signature' | 'pattern' | 'wasm';

package/dist/edge-wasm-middleware.d.ts

@@ -12,6 +12,7 @@ import { NextRequest, NextResponse } from 'next/server';
 
 interface EdgeWasmDetectionResult {
     isAgent: boolean;
+    isAiCrawler?: boolean;
     confidence: number;
     agent?: string;
     verificationMethod: 'signature' | 'pattern' | 'wasm';

package/dist/edge-wasm-middleware.js

@@ -226,6 +226,7 @@ async function detectWithWasm(metadata) {
     const parsedResult = typeof result === "string" ? JSON.parse(result) : result;
     return {
       isAgent: parsedResult.is_agent || false,
+      isAiCrawler: parsedResult.is_ai_crawler || false,
       confidence: parsedResult.confidence || 0,
       agent: parsedResult.agent,
       verificationMethod: parsedResult.verification_method || "wasm",
@@ -273,10 +274,17 @@ function createEdgeWasmMiddleware(config) {
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
       const result = await detectWithWasm(metadata);
-      if (onAgentDetected && result.isAgent) {
+      const decision = agentshieldShared.evaluateEnforcement(
+        { ...result, confidence: result.confidence * 100 },
+        {
+          confidenceThreshold: confidenceThreshold * 100,
+          defaultAction: blockOnHighConfidence ? "block" : "allow"
+        }
+      );
+      if (onAgentDetected && agentshieldShared.shouldEnforce(result)) {
         await onAgentDetected(result);
       }
-      if (blockOnHighConfidence && result.isAgent && result.confidence >= confidenceThreshold) {
+      if (decision.action === "block") {
         return server.NextResponse.json(
           {
             error: blockedResponse.message,

package/dist/edge-wasm-middleware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-wasm-middleware.ts"],"names":["ptr","normalizeConfidence","NextResponse","toPercent"],"mappings":";;;;;;AA8CA,IAAI,WAAA,GAAmB,IAAA;AACvB,IAAI,eAAA,GAAwC,IAAA;AAG5C,IAAM,OAAO,IAAI,KAAA,CAAM,GAAG,CAAA,CAAE,KAAK,MAAS,CAAA;AAC1C,IAAA,CAAK,IAAA,CAAK,MAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAK,CAAA;AACtC,IAAI,YAAY,IAAA,CAAK,MAAA;AAErB,SAAS,cAAc,GAAA,EAAU;AAC/B,EAAA,IAAI,cAAc,IAAA,CAAK,MAAA,OAAa,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,EAAA,MAAM,GAAA,GAAM,SAAA;AACZ,EAAA,SAAA,GAAY,KAAK,GAAG,CAAA;AACpB,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA;AACZ,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAU,GAAA,EAAa;AAC9B,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,IAAI,MAAM,GAAA,EAAK;AACf,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,SAAA;AACZ,EAAA,SAAA,GAAY,GAAA;AACd;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,UAAA,CAAW,GAAG,CAAA;AACd,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,iBAAA,GAAoB,IAAI,WAAA,CAAY,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA;AACnF,IAAM,iBAAA,GAAoB,IAAI,WAAA,EAAY;AAE1C,IAAI,uBAAA,GAA6C,IAAA;AACjD,SAAS,oBAAA,GAAuB;AAC9B,EAAA,IAAI,uBAAA,KAA4B,IAAA,IAAQ,uBAAA,CAAwB,UAAA,KAAe,CAAA,EAAG;AAChF,IAAA,uBAAA,GAA0B,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,uBAAA;AACT;AAEA,SAAS,kBAAA,CAAmB,KAAa,GAAA,EAAa;AACpD,EAAA,GAAA,GAAM,GAAA,KAAQ,CAAA;AACd,EAAA,OAAO,iBAAA,CAAkB,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,EAAK,GAAA,GAAM,GAAG,CAAC,CAAA;AACjF;AAEA,IAAI,eAAA,GAAkB,CAAA;AAEtB,SAAS,iBAAA,CAAkB,GAAA,EAAa,MAAA,EAAa,OAAA,EAAc;AACjE,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAA;AACxC,IAAA,MAAMA,IAAAA,GAAM,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,CAAC,CAAA,KAAM,CAAA;AACtC,IAAA,oBAAA,EAAqB,CAClB,SAASA,IAAAA,EAAKA,IAAAA,GAAM,IAAI,MAAM,CAAA,CAC9B,IAAI,GAAG,CAAA;AACV,IAAA,eAAA,GAAkB,GAAA,CAAI,MAAA;AACtB,IAAA,OAAOA,IAAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAM,GAAA,CAAI,MAAA;AACd,EAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,EAAK,CAAC,CAAA,KAAM,CAAA;AAE7B,EAAA,MAAM,MAAM,oBAAA,EAAqB;AAEjC,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,OAAO,MAAA,GAAS,KAAK,MAAA,EAAA,EAAU;AAC7B,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA;AAClC,IAAA,IAAI,OAAO,GAAA,EAAM;AACjB,IAAA,GAAA,CAAI,GAAA,GAAM,MAAM,CAAA,GAAI,IAAA;AAAA,EACtB;AAEA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,GAAA,GAAM,GAAA,CAAI,MAAM,MAAM,CAAA;AAAA,IACxB;AACA,IAAA,GAAA,GAAM,OAAA,CAAQ,KAAK,GAAA,EAAM,GAAA,GAAM,SAAS,GAAA,CAAI,MAAA,GAAS,CAAA,EAAI,CAAC,CAAA,KAAM,CAAA;AAChE,IAAA,MAAM,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,GAAM,MAAA,EAAQ,MAAM,GAAG,CAAA;AACpE,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,UAAA,CAAW,GAAA,EAAK,IAAI,CAAA;AAClD,IAAA,MAAA,IAAU,GAAA,CAAI,OAAA;AAAA,EAChB;AAEA,EAAA,eAAA,GAAkB,MAAA;AAClB,EAAA,OAAO,GAAA;AACT;AAEA,IAAI,qBAAA,GAAyC,IAAA;AAC7C,SAAS,kBAAA,GAAqB;AAC5B,EAAA,IACE,0BAA0B,IAAA,IAC1B,qBAAA,CAAsB,MAAA,KAAW,WAAA,CAAY,OAAO,MAAA,EACpD;AACA,IAAA,qBAAA,GAAwB,IAAI,QAAA,CAAS,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,qBAAA;AACT;AAKA,eAAsB,mBAAmB,UAAA,EAA+C;AACtF,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,eAAA,GAAA,CAAmB,YAAY;AAC7B,IAAA,IAAI;AAEF,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,0BAAA,EAA4B;AAAA,UAC1B,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA,SACF;AAAA,QACA,GAAA,EAAK;AAAA,UACH,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA;AACF,OACF;AAGA,MAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,WAAA,CAAY,YAAY,OAAO,CAAA;AAClE,MAAA,WAAA,GAAc,QAAA,CAAS,OAAA;AAGvB,MAAA,IAAI,YAAY,gBAAA,EAAkB;AAChC,QAAA,WAAA,CAAY,gBAAA,EAAiB;AAAA,MAC/B;AAEA,MAAA,OAAA,CAAQ,GAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,kEAA6D,KAAK,CAAA;AAChF,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA,GAAG;AAEH,EAAA,OAAO,eAAA;AACT;AAKA,eAAe,eAAe,QAAA,EAQO;AACnC,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,OAAO,CAAA;AAC/C,IAAA,MAAM,YAAY,QAAA,CAAS,SAAA;AAC3B,IAAA,MAAM,GAAA,GAAM,SAAS,GAAA,IAAO,EAAA;AAC5B,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,EAAA;AAClC,IAAA,MAAM,iBAAA,GAAoB,SAAS,iBAAA,IAAqB,EAAA;AAGxD,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,OAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,GAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,MAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,iBAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AAGb,IAAA,MAAM,cAAc,WAAA,CAAY,qBAAA;AAAA,MAC9B,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,YAAA,CAAa,WAAW,CAAA;AACtD,IAAA,MAAM,MAAA,GAAS,WAAW,SAAS,CAAA;AAGnC,IAAA,WAAA,CAAY,4BAAA,CAA6B,aAAa,CAAC,CAAA;AAGvD,IAAA,MAAM,eAAe,OAAO,MAAA,KAAW,WAAW,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAEvE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,aAAa,QAAA,IAAY,KAAA;AAAA,MAClC,UAAA,EAAY,aAAa,UAAA,IAAc,CAAA;AAAA,MACvC,OAAO,YAAA,CAAa,KAAA;AAAA,MACpB,kBAAA,EAAoB,aAAa,mBAAA,IAAuB,MAAA;AAAA,MACxD,SAAA,EAAW,aAAa,UAAA,IAAc,KAAA;AAAA,MACtC,SAAA,EAAW,YAAA,CAAa,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,MAC9C,OAAA,EAAS,YAAA,CAAa,OAAA,IAAW;AAAC,KACpC;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAE7C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAW,KAAA;AAAA,MACX,WAAW,QAAA,CAAS;AAAA,KACtB;AAAA,EACF;AACF;AAoBO,SAAS,yBACd,MAAA,EAGA;AACA,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,GAAwB,KAAA;AAAA,IACxB,qBAAqB,eAAA,GAAkB,GAAA;AAAA,IACvC,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,4BAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB;AAChD,GACF,GAAI,MAAA;AAGJ,EAAA,MAAM,mBAAA,GAAsBC,qCAAA,CAAoB,eAAA,EAAiB,qBAAqB,CAAA;AAGtF,EAAA,MAAM,WAAA,GAAc,mBAAmB,UAAU,CAAA;AAEjD,EAAA,OAAO,eAAe,WAAW,OAAA,EAAsB;AAErD,IAAA,MAAM,IAAA,GAAO,QAAQ,OAAA,CAAQ,QAAA;AAC7B,IAAA,IAAI,SAAA,CAAU,KAAK,CAAC,IAAA,KAAS,KAAK,UAAA,CAAW,IAAI,CAAC,CAAA,EAAG;AACnD,MAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAEA,IAAA,IAAI;AAEF,MAAA,MAAM,WAAA;AAGN,MAAA,MAAM,QAAA,GAAW;AAAA,QACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,KAAA,CAAA;AAAA,QAChD,SAAA,EACE,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,KAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IAAK,KAAA,CAAA;AAAA,QAChF,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACpC;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,QAAQ,CAAA;AAG5C,MAAA,IAAI,eAAA,IAAmB,OAAO,OAAA,EAAS;AACrC,QAAA,MAAM,gBAAgB,MAAM,CAAA;AAAA,MAC9B;AAGA,MAAA,IAAI,qBAAA,IAAyB,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,cAAc,mBAAA,EAAqB;AACvF,QAAA,OAAOA,mBAAA,CAAa,IAAA;AAAA,UAClB;AAAA,YACE,OAAO,eAAA,CAAgB,OAAA;AAAA,YACvB,OAAO,MAAA,CAAO,KAAA;AAAA,YACd,UAAA,EAAYC,2BAAA,CAAU,MAAA,CAAO,UAAU;AAAA;AAAA,WACzC;AAAA,UACA;AAAA,YACE,MAAA,EAAQ,gBAAgB,MAAA,IAAU,GAAA;AAAA,YAClC,OAAA,EAAS,eAAA,CAAgB,OAAA,IAAW;AAAC;AACvC,SACF;AAAA,MACF;AAGA,MAAA,MAAM,QAAA,GAAWD,oBAAa,IAAA,EAAK;AACnC,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,MAAA,CAAO,SAAS,SAAS,CAAA;AAClE,QAAA,QAAA,CAAS,OAAA,CAAQ,IAAI,oBAAA,EAAsB,MAAA,CAAOC,4BAAU,MAAA,CAAO,UAAU,CAAC,CAAC,CAAA;AAC/E,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,MAAA,CAAO,kBAAkB,CAAA;AAAA,MACxE;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAElD,MAAA,OAAOD,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF","file":"edge-wasm-middleware.js","sourcesContent":["/**\n * Edge Runtime Compatible WASM Middleware for AgentShield\n *\n * This module provides WASM-based AI agent detection with 95-100% confidence\n * in Next.js Edge Runtime and Vercel Edge Functions.\n *\n * IMPORTANT: WebAssembly.instantiate(module) IS supported in Edge Runtime\n * when using a pre-compiled module imported with ?module suffix.\n */\n\nimport type { NextRequest } from 'next/server';\nimport { NextResponse } from 'next/server';\nimport { toPercent, normalizeConfidence } from '@kya-os/agentshield-shared';\n\n// Type definitions\nexport interface EdgeWasmDetectionResult {\n  isAgent: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'signature' | 'pattern' | 'wasm';\n  riskLevel: 'low' | 'medium' | 'high';\n  timestamp: string;\n  reasons?: string[];\n}\n\nexport interface EdgeAgentShieldConfig {\n  onAgentDetected?: (result: EdgeWasmDetectionResult) => void | Promise<void>;\n  blockOnHighConfidence?: boolean;\n  /**\n   * Confidence threshold for blocking (0.0-1.0 scale).\n   * Detection confidence above this threshold will be blocked if blockOnHighConfidence is true.\n   * @default 0.9 (90% confidence)\n   * @example\n   * confidenceThreshold: 0.9  // Block if >= 90% confident\n   * confidenceThreshold: 0.7  // Block if >= 70% confident\n   */\n  confidenceThreshold?: number;\n  skipPaths?: string[];\n  blockedResponse?: {\n    status?: number;\n    message?: string;\n    headers?: Record<string, string>;\n  };\n}\n\n// WASM module cache\nlet wasmExports: any = null;\nlet wasmInitPromise: Promise<void> | null = null;\n\n// wasm-bindgen glue code\nconst heap = new Array(128).fill(undefined);\nheap.push(undefined, null, true, false);\nlet heap_next = heap.length;\n\nfunction addHeapObject(obj: any) {\n  if (heap_next === heap.length) heap.push(heap.length + 1);\n  const idx = heap_next;\n  heap_next = heap[idx];\n  heap[idx] = obj;\n  return idx;\n}\n\nfunction getObject(idx: number) {\n  return heap[idx];\n}\n\nfunction dropObject(idx: number) {\n  if (idx < 132) return;\n  heap[idx] = heap_next;\n  heap_next = idx;\n}\n\nfunction takeObject(idx: number) {\n  const ret = getObject(idx);\n  dropObject(idx);\n  return ret;\n}\n\nconst cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });\nconst cachedTextEncoder = new TextEncoder();\n\nlet cachedUint8ArrayMemory0: Uint8Array | null = null;\nfunction getUint8ArrayMemory0() {\n  if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {\n    cachedUint8ArrayMemory0 = new Uint8Array(wasmExports.memory.buffer);\n  }\n  return cachedUint8ArrayMemory0;\n}\n\nfunction getStringFromWasm0(ptr: number, len: number) {\n  ptr = ptr >>> 0;\n  return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));\n}\n\nlet WASM_VECTOR_LEN = 0;\n\nfunction passStringToWasm0(arg: string, malloc: any, realloc: any) {\n  if (realloc === undefined) {\n    const buf = cachedTextEncoder.encode(arg);\n    const ptr = malloc(buf.length, 1) >>> 0;\n    getUint8ArrayMemory0()\n      .subarray(ptr, ptr + buf.length)\n      .set(buf);\n    WASM_VECTOR_LEN = buf.length;\n    return ptr;\n  }\n\n  let len = arg.length;\n  let ptr = malloc(len, 1) >>> 0;\n\n  const mem = getUint8ArrayMemory0();\n\n  let offset = 0;\n\n  for (; offset < len; offset++) {\n    const code = arg.charCodeAt(offset);\n    if (code > 0x7f) break;\n    mem[ptr + offset] = code;\n  }\n\n  if (offset !== len) {\n    if (offset !== 0) {\n      arg = arg.slice(offset);\n    }\n    ptr = realloc(ptr, len, (len = offset + arg.length * 3), 1) >>> 0;\n    const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);\n    const ret = cachedTextEncoder.encodeInto(arg, view);\n    offset += ret.written!;\n  }\n\n  WASM_VECTOR_LEN = offset;\n  return ptr;\n}\n\nlet cachedDataViewMemory0: DataView | null = null;\nfunction getDataViewMemory0() {\n  if (\n    cachedDataViewMemory0 === null ||\n    cachedDataViewMemory0.buffer !== wasmExports.memory.buffer\n  ) {\n    cachedDataViewMemory0 = new DataView(wasmExports.memory.buffer);\n  }\n  return cachedDataViewMemory0;\n}\n\n/**\n * Initialize WASM module with proper imports for Edge Runtime\n */\nexport async function initializeEdgeWasm(wasmModule: WebAssembly.Module): Promise<void> {\n  if (wasmInitPromise) {\n    return wasmInitPromise;\n  }\n\n  wasmInitPromise = (async () => {\n    try {\n      // Create imports object required by wasm-bindgen\n      const imports = {\n        './agentshield_wasm_bg.js': {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n        wbg: {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n      };\n\n      // Instantiate with proper imports\n      const instance = await WebAssembly.instantiate(wasmModule, imports);\n      wasmExports = instance.exports;\n\n      // Initialize wasm-bindgen if needed\n      if (wasmExports.__wbindgen_start) {\n        wasmExports.__wbindgen_start();\n      }\n\n      console.log(\n        '✅ AgentShield: WASM module loaded successfully in Edge Runtime (95-100% confidence enabled)'\n      );\n    } catch (error) {\n      console.error('❌ AgentShield: Failed to initialize WASM in Edge Runtime:', error);\n      throw error;\n    }\n  })();\n\n  return wasmInitPromise;\n}\n\n/**\n * Detect AI agent using WASM in Edge Runtime\n */\nasync function detectWithWasm(metadata: {\n  userAgent?: string | undefined;\n  ipAddress?: string | undefined;\n  headers: Record<string, string>;\n  timestamp: string;\n  url?: string | undefined;\n  method?: string | undefined;\n  clientFingerprint?: string | undefined;\n}): Promise<EdgeWasmDetectionResult> {\n  if (!wasmExports) {\n    throw new Error('WASM not initialized. Call initializeEdgeWasm first.');\n  }\n\n  try {\n    // Create WASM request metadata\n    const userAgent = metadata.userAgent || '';\n    const ipAddress = metadata.ipAddress || '';\n    const headers = JSON.stringify(metadata.headers);\n    const timestamp = metadata.timestamp;\n    const url = metadata.url || '';\n    const method = metadata.method || '';\n    const clientFingerprint = metadata.clientFingerprint || '';\n\n    // Call WASM function directly - pass all 7 string parameters\n    const ptr0 = passStringToWasm0(\n      userAgent,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len0 = WASM_VECTOR_LEN;\n    const ptr1 = passStringToWasm0(\n      ipAddress,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len1 = WASM_VECTOR_LEN;\n    const ptr2 = passStringToWasm0(\n      headers,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len2 = WASM_VECTOR_LEN;\n    const ptr3 = passStringToWasm0(\n      timestamp,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len3 = WASM_VECTOR_LEN;\n    const ptr4 = passStringToWasm0(\n      url,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len4 = WASM_VECTOR_LEN;\n    const ptr5 = passStringToWasm0(\n      method,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len5 = WASM_VECTOR_LEN;\n    const ptr6 = passStringToWasm0(\n      clientFingerprint,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len6 = WASM_VECTOR_LEN;\n\n    // Create metadata object in WASM (7 strings = 14 parameters)\n    const metadataPtr = wasmExports.jsrequestmetadata_new(\n      ptr0,\n      len0,\n      ptr1,\n      len1,\n      ptr2,\n      len2,\n      ptr3,\n      len3,\n      ptr4,\n      len4,\n      ptr5,\n      len5,\n      ptr6,\n      len6\n    );\n\n    // Perform detection\n    const resultPtr = wasmExports.detect_agent(metadataPtr);\n    const result = takeObject(resultPtr);\n\n    // Free WASM metadata\n    wasmExports.__wbg_jsrequestmetadata_free(metadataPtr, 0);\n\n    // Parse result\n    const parsedResult = typeof result === 'string' ? JSON.parse(result) : result;\n\n    return {\n      isAgent: parsedResult.is_agent || false,\n      confidence: parsedResult.confidence || 0,\n      agent: parsedResult.agent,\n      verificationMethod: parsedResult.verification_method || 'wasm',\n      riskLevel: parsedResult.risk_level || 'low',\n      timestamp: parsedResult.timestamp || metadata.timestamp,\n      reasons: parsedResult.reasons || [],\n    };\n  } catch (error) {\n    console.error('WASM detection failed:', error);\n    // Fall back to pattern detection\n    return {\n      isAgent: false,\n      confidence: 0,\n      verificationMethod: 'pattern',\n      riskLevel: 'low',\n      timestamp: metadata.timestamp,\n    };\n  }\n}\n\n/**\n * Create Edge Runtime compatible WASM middleware\n *\n * @example\n * ```typescript\n * // middleware.ts\n * import wasmModule from '@kya-os/agentshield/wasm?module';\n * import { createEdgeWasmMiddleware } from '@kya-os/agentshield-nextjs/edge-wasm-middleware';\n *\n * export const middleware = createEdgeWasmMiddleware({\n *   wasmModule,\n *   onAgentDetected: (result) => {\n *     // Note: result.confidence is 0.0-1.0 scale\n *     console.log(`AI Agent: ${result.agent} (${Math.round(result.confidence * 100)}% confidence)`);\n *   }\n * });\n * ```\n */\nexport function createEdgeWasmMiddleware(\n  config: EdgeAgentShieldConfig & {\n    wasmModule: WebAssembly.Module;\n  }\n) {\n  const {\n    wasmModule,\n    onAgentDetected,\n    blockOnHighConfidence = false,\n    confidenceThreshold: configThreshold = 0.9,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'AI agent access restricted',\n      headers: { 'Content-Type': 'application/json' },\n    },\n  } = config;\n\n  // Normalize threshold to 0.0-1.0 scale (handles both 0.9 and 90 inputs)\n  const confidenceThreshold = normalizeConfidence(configThreshold, 'confidenceThreshold');\n\n  // Initialize WASM on first load\n  const initPromise = initializeEdgeWasm(wasmModule);\n\n  return async function middleware(request: NextRequest) {\n    // Check if path should be skipped\n    const path = request.nextUrl.pathname;\n    if (skipPaths.some((skip) => path.startsWith(skip))) {\n      return NextResponse.next();\n    }\n\n    try {\n      // Ensure WASM is initialized\n      await initPromise;\n\n      // Prepare metadata\n      const metadata = {\n        userAgent: request.headers.get('user-agent') || undefined,\n        ipAddress:\n          request.headers.get('x-forwarded-for') || request.headers.get('x-real-ip') || undefined,\n        headers: Object.fromEntries(request.headers.entries()),\n        timestamp: new Date().toISOString(),\n      };\n\n      // Perform WASM detection\n      const result = await detectWithWasm(metadata);\n\n      // Call user callback if provided\n      if (onAgentDetected && result.isAgent) {\n        await onAgentDetected(result);\n      }\n\n      // Block if configured (confidence is 0.0-1.0 scale)\n      if (blockOnHighConfidence && result.isAgent && result.confidence >= confidenceThreshold) {\n        return NextResponse.json(\n          {\n            error: blockedResponse.message,\n            agent: result.agent,\n            confidence: toPercent(result.confidence), // Convert to 0-100 for display\n          },\n          {\n            status: blockedResponse.status || 403,\n            headers: blockedResponse.headers || {},\n          }\n        );\n      }\n\n      // Add detection headers\n      const response = NextResponse.next();\n      if (result.isAgent) {\n        response.headers.set('X-Agent-Detected', result.agent || 'unknown');\n        response.headers.set('X-Agent-Confidence', String(toPercent(result.confidence)));\n        response.headers.set('X-Agent-Verification', result.verificationMethod);\n      }\n\n      return response;\n    } catch (error) {\n      console.error('Edge WASM middleware error:', error);\n      // Continue without blocking on error\n      return NextResponse.next();\n    }\n  };\n}\n"]}
+{"version":3,"sources":["../src/edge-wasm-middleware.ts"],"names":["ptr","normalizeConfidence","NextResponse","evaluateEnforcement","shouldEnforce","toPercent"],"mappings":";;;;;;AAoDA,IAAI,WAAA,GAAmB,IAAA;AACvB,IAAI,eAAA,GAAwC,IAAA;AAG5C,IAAM,OAAO,IAAI,KAAA,CAAM,GAAG,CAAA,CAAE,KAAK,MAAS,CAAA;AAC1C,IAAA,CAAK,IAAA,CAAK,MAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAK,CAAA;AACtC,IAAI,YAAY,IAAA,CAAK,MAAA;AAErB,SAAS,cAAc,GAAA,EAAU;AAC/B,EAAA,IAAI,cAAc,IAAA,CAAK,MAAA,OAAa,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,EAAA,MAAM,GAAA,GAAM,SAAA;AACZ,EAAA,SAAA,GAAY,KAAK,GAAG,CAAA;AACpB,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA;AACZ,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAU,GAAA,EAAa;AAC9B,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,IAAI,MAAM,GAAA,EAAK;AACf,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,SAAA;AACZ,EAAA,SAAA,GAAY,GAAA;AACd;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,UAAA,CAAW,GAAG,CAAA;AACd,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,iBAAA,GAAoB,IAAI,WAAA,CAAY,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA;AACnF,IAAM,iBAAA,GAAoB,IAAI,WAAA,EAAY;AAE1C,IAAI,uBAAA,GAA6C,IAAA;AACjD,SAAS,oBAAA,GAAuB;AAC9B,EAAA,IAAI,uBAAA,KAA4B,IAAA,IAAQ,uBAAA,CAAwB,UAAA,KAAe,CAAA,EAAG;AAChF,IAAA,uBAAA,GAA0B,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,uBAAA;AACT;AAEA,SAAS,kBAAA,CAAmB,KAAa,GAAA,EAAa;AACpD,EAAA,GAAA,GAAM,GAAA,KAAQ,CAAA;AACd,EAAA,OAAO,iBAAA,CAAkB,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,EAAK,GAAA,GAAM,GAAG,CAAC,CAAA;AACjF;AAEA,IAAI,eAAA,GAAkB,CAAA;AAEtB,SAAS,iBAAA,CAAkB,GAAA,EAAa,MAAA,EAAa,OAAA,EAAc;AACjE,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAA;AACxC,IAAA,MAAMA,IAAAA,GAAM,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,CAAC,CAAA,KAAM,CAAA;AACtC,IAAA,oBAAA,EAAqB,CAClB,SAASA,IAAAA,EAAKA,IAAAA,GAAM,IAAI,MAAM,CAAA,CAC9B,IAAI,GAAG,CAAA;AACV,IAAA,eAAA,GAAkB,GAAA,CAAI,MAAA;AACtB,IAAA,OAAOA,IAAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAM,GAAA,CAAI,MAAA;AACd,EAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,EAAK,CAAC,CAAA,KAAM,CAAA;AAE7B,EAAA,MAAM,MAAM,oBAAA,EAAqB;AAEjC,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,OAAO,MAAA,GAAS,KAAK,MAAA,EAAA,EAAU;AAC7B,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA;AAClC,IAAA,IAAI,OAAO,GAAA,EAAM;AACjB,IAAA,GAAA,CAAI,GAAA,GAAM,MAAM,CAAA,GAAI,IAAA;AAAA,EACtB;AAEA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,GAAA,GAAM,GAAA,CAAI,MAAM,MAAM,CAAA;AAAA,IACxB;AACA,IAAA,GAAA,GAAM,OAAA,CAAQ,KAAK,GAAA,EAAM,GAAA,GAAM,SAAS,GAAA,CAAI,MAAA,GAAS,CAAA,EAAI,CAAC,CAAA,KAAM,CAAA;AAChE,IAAA,MAAM,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,GAAM,MAAA,EAAQ,MAAM,GAAG,CAAA;AACpE,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,UAAA,CAAW,GAAA,EAAK,IAAI,CAAA;AAClD,IAAA,MAAA,IAAU,GAAA,CAAI,OAAA;AAAA,EAChB;AAEA,EAAA,eAAA,GAAkB,MAAA;AAClB,EAAA,OAAO,GAAA;AACT;AAEA,IAAI,qBAAA,GAAyC,IAAA;AAC7C,SAAS,kBAAA,GAAqB;AAC5B,EAAA,IACE,0BAA0B,IAAA,IAC1B,qBAAA,CAAsB,MAAA,KAAW,WAAA,CAAY,OAAO,MAAA,EACpD;AACA,IAAA,qBAAA,GAAwB,IAAI,QAAA,CAAS,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,qBAAA;AACT;AAKA,eAAsB,mBAAmB,UAAA,EAA+C;AACtF,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,eAAA,GAAA,CAAmB,YAAY;AAC7B,IAAA,IAAI;AAEF,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,0BAAA,EAA4B;AAAA,UAC1B,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA,SACF;AAAA,QACA,GAAA,EAAK;AAAA,UACH,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA;AACF,OACF;AAGA,MAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,WAAA,CAAY,YAAY,OAAO,CAAA;AAClE,MAAA,WAAA,GAAc,QAAA,CAAS,OAAA;AAGvB,MAAA,IAAI,YAAY,gBAAA,EAAkB;AAChC,QAAA,WAAA,CAAY,gBAAA,EAAiB;AAAA,MAC/B;AAEA,MAAA,OAAA,CAAQ,GAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,kEAA6D,KAAK,CAAA;AAChF,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA,GAAG;AAEH,EAAA,OAAO,eAAA;AACT;AAKA,eAAe,eAAe,QAAA,EAQO;AACnC,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,OAAO,CAAA;AAC/C,IAAA,MAAM,YAAY,QAAA,CAAS,SAAA;AAC3B,IAAA,MAAM,GAAA,GAAM,SAAS,GAAA,IAAO,EAAA;AAC5B,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,EAAA;AAClC,IAAA,MAAM,iBAAA,GAAoB,SAAS,iBAAA,IAAqB,EAAA;AAGxD,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,OAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,GAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,MAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,iBAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AAGb,IAAA,MAAM,cAAc,WAAA,CAAY,qBAAA;AAAA,MAC9B,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,YAAA,CAAa,WAAW,CAAA;AACtD,IAAA,MAAM,MAAA,GAAS,WAAW,SAAS,CAAA;AAGnC,IAAA,WAAA,CAAY,4BAAA,CAA6B,aAAa,CAAC,CAAA;AAGvD,IAAA,MAAM,eAAe,OAAO,MAAA,KAAW,WAAW,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAEvE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,aAAa,QAAA,IAAY,KAAA;AAAA,MAClC,WAAA,EAAa,aAAa,aAAA,IAAiB,KAAA;AAAA,MAC3C,UAAA,EAAY,aAAa,UAAA,IAAc,CAAA;AAAA,MACvC,OAAO,YAAA,CAAa,KAAA;AAAA,MACpB,kBAAA,EAAoB,aAAa,mBAAA,IAAuB,MAAA;AAAA,MACxD,SAAA,EAAW,aAAa,UAAA,IAAc,KAAA;AAAA,MACtC,SAAA,EAAW,YAAA,CAAa,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,MAC9C,OAAA,EAAS,YAAA,CAAa,OAAA,IAAW;AAAC,KACpC;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAE7C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAW,KAAA;AAAA,MACX,WAAW,QAAA,CAAS;AAAA,KACtB;AAAA,EACF;AACF;AAoBO,SAAS,yBACd,MAAA,EAGA;AACA,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,GAAwB,KAAA;AAAA,IACxB,qBAAqB,eAAA,GAAkB,GAAA;AAAA,IACvC,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,4BAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB;AAChD,GACF,GAAI,MAAA;AAGJ,EAAA,MAAM,mBAAA,GAAsBC,qCAAA,CAAoB,eAAA,EAAiB,qBAAqB,CAAA;AAGtF,EAAA,MAAM,WAAA,GAAc,mBAAmB,UAAU,CAAA;AAEjD,EAAA,OAAO,eAAe,WAAW,OAAA,EAAsB;AAErD,IAAA,MAAM,IAAA,GAAO,QAAQ,OAAA,CAAQ,QAAA;AAC7B,IAAA,IAAI,SAAA,CAAU,KAAK,CAAC,IAAA,KAAS,KAAK,UAAA,CAAW,IAAI,CAAC,CAAA,EAAG;AACnD,MAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAEA,IAAA,IAAI;AAEF,MAAA,MAAM,WAAA;AAGN,MAAA,MAAM,QAAA,GAAW;AAAA,QACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,KAAA,CAAA;AAAA,QAChD,SAAA,EACE,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,KAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IAAK,KAAA,CAAA;AAAA,QAChF,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACpC;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,QAAQ,CAAA;AAI5C,MAAA,MAAM,QAAA,GAAWC,qCAAA;AAAA,QACf,EAAE,GAAG,MAAA,EAAQ,UAAA,EAAY,MAAA,CAAO,aAAa,GAAA,EAAI;AAAA,QACjD;AAAA,UACE,qBAAqB,mBAAA,GAAsB,GAAA;AAAA,UAC3C,aAAA,EAAe,wBAAwB,OAAA,GAAU;AAAA;AACnD,OACF;AAGA,MAAA,IAAI,eAAA,IAAmBC,+BAAA,CAAc,MAAM,CAAA,EAAG;AAC5C,QAAA,MAAM,gBAAgB,MAAM,CAAA;AAAA,MAC9B;AAGA,MAAA,IAAI,QAAA,CAAS,WAAW,OAAA,EAAS;AAC/B,QAAA,OAAOF,mBAAA,CAAa,IAAA;AAAA,UAClB;AAAA,YACE,OAAO,eAAA,CAAgB,OAAA;AAAA,YACvB,OAAO,MAAA,CAAO,KAAA;AAAA,YACd,UAAA,EAAYG,2BAAA,CAAU,MAAA,CAAO,UAAU;AAAA;AAAA,WACzC;AAAA,UACA;AAAA,YACE,MAAA,EAAQ,gBAAgB,MAAA,IAAU,GAAA;AAAA,YAClC,OAAA,EAAS,eAAA,CAAgB,OAAA,IAAW;AAAC;AACvC,SACF;AAAA,MACF;AAGA,MAAA,MAAM,QAAA,GAAWH,oBAAa,IAAA,EAAK;AACnC,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,MAAA,CAAO,SAAS,SAAS,CAAA;AAClE,QAAA,QAAA,CAAS,OAAA,CAAQ,IAAI,oBAAA,EAAsB,MAAA,CAAOG,4BAAU,MAAA,CAAO,UAAU,CAAC,CAAC,CAAA;AAC/E,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,MAAA,CAAO,kBAAkB,CAAA;AAAA,MACxE;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAElD,MAAA,OAAOH,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF","file":"edge-wasm-middleware.js","sourcesContent":["/**\n * Edge Runtime Compatible WASM Middleware for AgentShield\n *\n * This module provides WASM-based AI agent detection with 95-100% confidence\n * in Next.js Edge Runtime and Vercel Edge Functions.\n *\n * IMPORTANT: WebAssembly.instantiate(module) IS supported in Edge Runtime\n * when using a pre-compiled module imported with ?module suffix.\n */\n\nimport type { NextRequest } from 'next/server';\nimport { NextResponse } from 'next/server';\nimport {\n  toPercent,\n  normalizeConfidence,\n  evaluateEnforcement,\n  shouldEnforce,\n} from '@kya-os/agentshield-shared';\n\n// Type definitions\nexport interface EdgeWasmDetectionResult {\n  isAgent: boolean;\n  isAiCrawler?: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'signature' | 'pattern' | 'wasm';\n  riskLevel: 'low' | 'medium' | 'high';\n  timestamp: string;\n  reasons?: string[];\n}\n\nexport interface EdgeAgentShieldConfig {\n  onAgentDetected?: (result: EdgeWasmDetectionResult) => void | Promise<void>;\n  blockOnHighConfidence?: boolean;\n  /**\n   * Confidence threshold for blocking (0.0-1.0 scale).\n   * Detection confidence above this threshold will be blocked if blockOnHighConfidence is true.\n   * @default 0.9 (90% confidence)\n   * @example\n   * confidenceThreshold: 0.9  // Block if >= 90% confident\n   * confidenceThreshold: 0.7  // Block if >= 70% confident\n   */\n  confidenceThreshold?: number;\n  skipPaths?: string[];\n  blockedResponse?: {\n    status?: number;\n    message?: string;\n    headers?: Record<string, string>;\n  };\n}\n\n// WASM module cache\nlet wasmExports: any = null;\nlet wasmInitPromise: Promise<void> | null = null;\n\n// wasm-bindgen glue code\nconst heap = new Array(128).fill(undefined);\nheap.push(undefined, null, true, false);\nlet heap_next = heap.length;\n\nfunction addHeapObject(obj: any) {\n  if (heap_next === heap.length) heap.push(heap.length + 1);\n  const idx = heap_next;\n  heap_next = heap[idx];\n  heap[idx] = obj;\n  return idx;\n}\n\nfunction getObject(idx: number) {\n  return heap[idx];\n}\n\nfunction dropObject(idx: number) {\n  if (idx < 132) return;\n  heap[idx] = heap_next;\n  heap_next = idx;\n}\n\nfunction takeObject(idx: number) {\n  const ret = getObject(idx);\n  dropObject(idx);\n  return ret;\n}\n\nconst cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });\nconst cachedTextEncoder = new TextEncoder();\n\nlet cachedUint8ArrayMemory0: Uint8Array | null = null;\nfunction getUint8ArrayMemory0() {\n  if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {\n    cachedUint8ArrayMemory0 = new Uint8Array(wasmExports.memory.buffer);\n  }\n  return cachedUint8ArrayMemory0;\n}\n\nfunction getStringFromWasm0(ptr: number, len: number) {\n  ptr = ptr >>> 0;\n  return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));\n}\n\nlet WASM_VECTOR_LEN = 0;\n\nfunction passStringToWasm0(arg: string, malloc: any, realloc: any) {\n  if (realloc === undefined) {\n    const buf = cachedTextEncoder.encode(arg);\n    const ptr = malloc(buf.length, 1) >>> 0;\n    getUint8ArrayMemory0()\n      .subarray(ptr, ptr + buf.length)\n      .set(buf);\n    WASM_VECTOR_LEN = buf.length;\n    return ptr;\n  }\n\n  let len = arg.length;\n  let ptr = malloc(len, 1) >>> 0;\n\n  const mem = getUint8ArrayMemory0();\n\n  let offset = 0;\n\n  for (; offset < len; offset++) {\n    const code = arg.charCodeAt(offset);\n    if (code > 0x7f) break;\n    mem[ptr + offset] = code;\n  }\n\n  if (offset !== len) {\n    if (offset !== 0) {\n      arg = arg.slice(offset);\n    }\n    ptr = realloc(ptr, len, (len = offset + arg.length * 3), 1) >>> 0;\n    const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);\n    const ret = cachedTextEncoder.encodeInto(arg, view);\n    offset += ret.written!;\n  }\n\n  WASM_VECTOR_LEN = offset;\n  return ptr;\n}\n\nlet cachedDataViewMemory0: DataView | null = null;\nfunction getDataViewMemory0() {\n  if (\n    cachedDataViewMemory0 === null ||\n    cachedDataViewMemory0.buffer !== wasmExports.memory.buffer\n  ) {\n    cachedDataViewMemory0 = new DataView(wasmExports.memory.buffer);\n  }\n  return cachedDataViewMemory0;\n}\n\n/**\n * Initialize WASM module with proper imports for Edge Runtime\n */\nexport async function initializeEdgeWasm(wasmModule: WebAssembly.Module): Promise<void> {\n  if (wasmInitPromise) {\n    return wasmInitPromise;\n  }\n\n  wasmInitPromise = (async () => {\n    try {\n      // Create imports object required by wasm-bindgen\n      const imports = {\n        './agentshield_wasm_bg.js': {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n        wbg: {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n      };\n\n      // Instantiate with proper imports\n      const instance = await WebAssembly.instantiate(wasmModule, imports);\n      wasmExports = instance.exports;\n\n      // Initialize wasm-bindgen if needed\n      if (wasmExports.__wbindgen_start) {\n        wasmExports.__wbindgen_start();\n      }\n\n      console.log(\n        '✅ AgentShield: WASM module loaded successfully in Edge Runtime (95-100% confidence enabled)'\n      );\n    } catch (error) {\n      console.error('❌ AgentShield: Failed to initialize WASM in Edge Runtime:', error);\n      throw error;\n    }\n  })();\n\n  return wasmInitPromise;\n}\n\n/**\n * Detect AI agent using WASM in Edge Runtime\n */\nasync function detectWithWasm(metadata: {\n  userAgent?: string | undefined;\n  ipAddress?: string | undefined;\n  headers: Record<string, string>;\n  timestamp: string;\n  url?: string | undefined;\n  method?: string | undefined;\n  clientFingerprint?: string | undefined;\n}): Promise<EdgeWasmDetectionResult> {\n  if (!wasmExports) {\n    throw new Error('WASM not initialized. Call initializeEdgeWasm first.');\n  }\n\n  try {\n    // Create WASM request metadata\n    const userAgent = metadata.userAgent || '';\n    const ipAddress = metadata.ipAddress || '';\n    const headers = JSON.stringify(metadata.headers);\n    const timestamp = metadata.timestamp;\n    const url = metadata.url || '';\n    const method = metadata.method || '';\n    const clientFingerprint = metadata.clientFingerprint || '';\n\n    // Call WASM function directly - pass all 7 string parameters\n    const ptr0 = passStringToWasm0(\n      userAgent,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len0 = WASM_VECTOR_LEN;\n    const ptr1 = passStringToWasm0(\n      ipAddress,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len1 = WASM_VECTOR_LEN;\n    const ptr2 = passStringToWasm0(\n      headers,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len2 = WASM_VECTOR_LEN;\n    const ptr3 = passStringToWasm0(\n      timestamp,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len3 = WASM_VECTOR_LEN;\n    const ptr4 = passStringToWasm0(\n      url,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len4 = WASM_VECTOR_LEN;\n    const ptr5 = passStringToWasm0(\n      method,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len5 = WASM_VECTOR_LEN;\n    const ptr6 = passStringToWasm0(\n      clientFingerprint,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len6 = WASM_VECTOR_LEN;\n\n    // Create metadata object in WASM (7 strings = 14 parameters)\n    const metadataPtr = wasmExports.jsrequestmetadata_new(\n      ptr0,\n      len0,\n      ptr1,\n      len1,\n      ptr2,\n      len2,\n      ptr3,\n      len3,\n      ptr4,\n      len4,\n      ptr5,\n      len5,\n      ptr6,\n      len6\n    );\n\n    // Perform detection\n    const resultPtr = wasmExports.detect_agent(metadataPtr);\n    const result = takeObject(resultPtr);\n\n    // Free WASM metadata\n    wasmExports.__wbg_jsrequestmetadata_free(metadataPtr, 0);\n\n    // Parse result\n    const parsedResult = typeof result === 'string' ? JSON.parse(result) : result;\n\n    return {\n      isAgent: parsedResult.is_agent || false,\n      isAiCrawler: parsedResult.is_ai_crawler || false,\n      confidence: parsedResult.confidence || 0,\n      agent: parsedResult.agent,\n      verificationMethod: parsedResult.verification_method || 'wasm',\n      riskLevel: parsedResult.risk_level || 'low',\n      timestamp: parsedResult.timestamp || metadata.timestamp,\n      reasons: parsedResult.reasons || [],\n    };\n  } catch (error) {\n    console.error('WASM detection failed:', error);\n    // Fall back to pattern detection\n    return {\n      isAgent: false,\n      confidence: 0,\n      verificationMethod: 'pattern',\n      riskLevel: 'low',\n      timestamp: metadata.timestamp,\n    };\n  }\n}\n\n/**\n * Create Edge Runtime compatible WASM middleware\n *\n * @example\n * ```typescript\n * // middleware.ts\n * import wasmModule from '@kya-os/agentshield/wasm?module';\n * import { createEdgeWasmMiddleware } from '@kya-os/agentshield-nextjs/edge-wasm-middleware';\n *\n * export const middleware = createEdgeWasmMiddleware({\n *   wasmModule,\n *   onAgentDetected: (result) => {\n *     // Note: result.confidence is 0.0-1.0 scale\n *     console.log(`AI Agent: ${result.agent} (${Math.round(result.confidence * 100)}% confidence)`);\n *   }\n * });\n * ```\n */\nexport function createEdgeWasmMiddleware(\n  config: EdgeAgentShieldConfig & {\n    wasmModule: WebAssembly.Module;\n  }\n) {\n  const {\n    wasmModule,\n    onAgentDetected,\n    blockOnHighConfidence = false,\n    confidenceThreshold: configThreshold = 0.9,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'AI agent access restricted',\n      headers: { 'Content-Type': 'application/json' },\n    },\n  } = config;\n\n  // Normalize threshold to 0.0-1.0 scale (handles both 0.9 and 90 inputs)\n  const confidenceThreshold = normalizeConfidence(configThreshold, 'confidenceThreshold');\n\n  // Initialize WASM on first load\n  const initPromise = initializeEdgeWasm(wasmModule);\n\n  return async function middleware(request: NextRequest) {\n    // Check if path should be skipped\n    const path = request.nextUrl.pathname;\n    if (skipPaths.some((skip) => path.startsWith(skip))) {\n      return NextResponse.next();\n    }\n\n    try {\n      // Ensure WASM is initialized\n      await initPromise;\n\n      // Prepare metadata\n      const metadata = {\n        userAgent: request.headers.get('user-agent') || undefined,\n        ipAddress:\n          request.headers.get('x-forwarded-for') || request.headers.get('x-real-ip') || undefined,\n        headers: Object.fromEntries(request.headers.entries()),\n        timestamp: new Date().toISOString(),\n      };\n\n      // Perform WASM detection\n      const result = await detectWithWasm(metadata);\n\n      // Evaluate enforcement decision\n      // Note: this middleware uses 0-1 scale internally; convert to 0-100 for evaluateEnforcement\n      const decision = evaluateEnforcement(\n        { ...result, confidence: result.confidence * 100 },\n        {\n          confidenceThreshold: confidenceThreshold * 100,\n          defaultAction: blockOnHighConfidence ? 'block' : 'allow',\n        }\n      );\n\n      // Call user callback for any enforced agent (regardless of threshold)\n      if (onAgentDetected && shouldEnforce(result)) {\n        await onAgentDetected(result);\n      }\n\n      // Block if enforcement decision says to block\n      if (decision.action === 'block') {\n        return NextResponse.json(\n          {\n            error: blockedResponse.message,\n            agent: result.agent,\n            confidence: toPercent(result.confidence), // Convert to 0-100 for display\n          },\n          {\n            status: blockedResponse.status || 403,\n            headers: blockedResponse.headers || {},\n          }\n        );\n      }\n\n      // Add detection headers\n      const response = NextResponse.next();\n      if (result.isAgent) {\n        response.headers.set('X-Agent-Detected', result.agent || 'unknown');\n        response.headers.set('X-Agent-Confidence', String(toPercent(result.confidence)));\n        response.headers.set('X-Agent-Verification', result.verificationMethod);\n      }\n\n      return response;\n    } catch (error) {\n      console.error('Edge WASM middleware error:', error);\n      // Continue without blocking on error\n      return NextResponse.next();\n    }\n  };\n}\n"]}

package/dist/edge-wasm-middleware.mjs

@@ -1,5 +1,5 @@
 import { NextResponse } from 'next/server';
-import { normalizeConfidence, toPercent } from '@kya-os/agentshield-shared';
+import { normalizeConfidence, evaluateEnforcement, shouldEnforce, toPercent } from '@kya-os/agentshield-shared';
 
 // src/edge-wasm-middleware.ts
 var wasmExports = null;
@@ -224,6 +224,7 @@ async function detectWithWasm(metadata) {
     const parsedResult = typeof result === "string" ? JSON.parse(result) : result;
     return {
       isAgent: parsedResult.is_agent || false,
+      isAiCrawler: parsedResult.is_ai_crawler || false,
       confidence: parsedResult.confidence || 0,
       agent: parsedResult.agent,
       verificationMethod: parsedResult.verification_method || "wasm",
@@ -271,10 +272,17 @@ function createEdgeWasmMiddleware(config) {
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
       const result = await detectWithWasm(metadata);
-      if (onAgentDetected && result.isAgent) {
+      const decision = evaluateEnforcement(
+        { ...result, confidence: result.confidence * 100 },
+        {
+          confidenceThreshold: confidenceThreshold * 100,
+          defaultAction: blockOnHighConfidence ? "block" : "allow"
+        }
+      );
+      if (onAgentDetected && shouldEnforce(result)) {
         await onAgentDetected(result);
       }
-      if (blockOnHighConfidence && result.isAgent && result.confidence >= confidenceThreshold) {
+      if (decision.action === "block") {
         return NextResponse.json(
           {
             error: blockedResponse.message,

package/dist/edge-wasm-middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-wasm-middleware.ts"],"names":["ptr"],"mappings":";;;;AA8CA,IAAI,WAAA,GAAmB,IAAA;AACvB,IAAI,eAAA,GAAwC,IAAA;AAG5C,IAAM,OAAO,IAAI,KAAA,CAAM,GAAG,CAAA,CAAE,KAAK,MAAS,CAAA;AAC1C,IAAA,CAAK,IAAA,CAAK,MAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAK,CAAA;AACtC,IAAI,YAAY,IAAA,CAAK,MAAA;AAErB,SAAS,cAAc,GAAA,EAAU;AAC/B,EAAA,IAAI,cAAc,IAAA,CAAK,MAAA,OAAa,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,EAAA,MAAM,GAAA,GAAM,SAAA;AACZ,EAAA,SAAA,GAAY,KAAK,GAAG,CAAA;AACpB,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA;AACZ,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAU,GAAA,EAAa;AAC9B,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,IAAI,MAAM,GAAA,EAAK;AACf,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,SAAA;AACZ,EAAA,SAAA,GAAY,GAAA;AACd;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,UAAA,CAAW,GAAG,CAAA;AACd,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,iBAAA,GAAoB,IAAI,WAAA,CAAY,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA;AACnF,IAAM,iBAAA,GAAoB,IAAI,WAAA,EAAY;AAE1C,IAAI,uBAAA,GAA6C,IAAA;AACjD,SAAS,oBAAA,GAAuB;AAC9B,EAAA,IAAI,uBAAA,KAA4B,IAAA,IAAQ,uBAAA,CAAwB,UAAA,KAAe,CAAA,EAAG;AAChF,IAAA,uBAAA,GAA0B,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,uBAAA;AACT;AAEA,SAAS,kBAAA,CAAmB,KAAa,GAAA,EAAa;AACpD,EAAA,GAAA,GAAM,GAAA,KAAQ,CAAA;AACd,EAAA,OAAO,iBAAA,CAAkB,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,EAAK,GAAA,GAAM,GAAG,CAAC,CAAA;AACjF;AAEA,IAAI,eAAA,GAAkB,CAAA;AAEtB,SAAS,iBAAA,CAAkB,GAAA,EAAa,MAAA,EAAa,OAAA,EAAc;AACjE,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAA;AACxC,IAAA,MAAMA,IAAAA,GAAM,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,CAAC,CAAA,KAAM,CAAA;AACtC,IAAA,oBAAA,EAAqB,CAClB,SAASA,IAAAA,EAAKA,IAAAA,GAAM,IAAI,MAAM,CAAA,CAC9B,IAAI,GAAG,CAAA;AACV,IAAA,eAAA,GAAkB,GAAA,CAAI,MAAA;AACtB,IAAA,OAAOA,IAAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAM,GAAA,CAAI,MAAA;AACd,EAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,EAAK,CAAC,CAAA,KAAM,CAAA;AAE7B,EAAA,MAAM,MAAM,oBAAA,EAAqB;AAEjC,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,OAAO,MAAA,GAAS,KAAK,MAAA,EAAA,EAAU;AAC7B,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA;AAClC,IAAA,IAAI,OAAO,GAAA,EAAM;AACjB,IAAA,GAAA,CAAI,GAAA,GAAM,MAAM,CAAA,GAAI,IAAA;AAAA,EACtB;AAEA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,GAAA,GAAM,GAAA,CAAI,MAAM,MAAM,CAAA;AAAA,IACxB;AACA,IAAA,GAAA,GAAM,OAAA,CAAQ,KAAK,GAAA,EAAM,GAAA,GAAM,SAAS,GAAA,CAAI,MAAA,GAAS,CAAA,EAAI,CAAC,CAAA,KAAM,CAAA;AAChE,IAAA,MAAM,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,GAAM,MAAA,EAAQ,MAAM,GAAG,CAAA;AACpE,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,UAAA,CAAW,GAAA,EAAK,IAAI,CAAA;AAClD,IAAA,MAAA,IAAU,GAAA,CAAI,OAAA;AAAA,EAChB;AAEA,EAAA,eAAA,GAAkB,MAAA;AAClB,EAAA,OAAO,GAAA;AACT;AAEA,IAAI,qBAAA,GAAyC,IAAA;AAC7C,SAAS,kBAAA,GAAqB;AAC5B,EAAA,IACE,0BAA0B,IAAA,IAC1B,qBAAA,CAAsB,MAAA,KAAW,WAAA,CAAY,OAAO,MAAA,EACpD;AACA,IAAA,qBAAA,GAAwB,IAAI,QAAA,CAAS,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,qBAAA;AACT;AAKA,eAAsB,mBAAmB,UAAA,EAA+C;AACtF,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,eAAA,GAAA,CAAmB,YAAY;AAC7B,IAAA,IAAI;AAEF,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,0BAAA,EAA4B;AAAA,UAC1B,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA,SACF;AAAA,QACA,GAAA,EAAK;AAAA,UACH,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA;AACF,OACF;AAGA,MAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,WAAA,CAAY,YAAY,OAAO,CAAA;AAClE,MAAA,WAAA,GAAc,QAAA,CAAS,OAAA;AAGvB,MAAA,IAAI,YAAY,gBAAA,EAAkB;AAChC,QAAA,WAAA,CAAY,gBAAA,EAAiB;AAAA,MAC/B;AAEA,MAAA,OAAA,CAAQ,GAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,kEAA6D,KAAK,CAAA;AAChF,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA,GAAG;AAEH,EAAA,OAAO,eAAA;AACT;AAKA,eAAe,eAAe,QAAA,EAQO;AACnC,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,OAAO,CAAA;AAC/C,IAAA,MAAM,YAAY,QAAA,CAAS,SAAA;AAC3B,IAAA,MAAM,GAAA,GAAM,SAAS,GAAA,IAAO,EAAA;AAC5B,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,EAAA;AAClC,IAAA,MAAM,iBAAA,GAAoB,SAAS,iBAAA,IAAqB,EAAA;AAGxD,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,OAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,GAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,MAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,iBAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AAGb,IAAA,MAAM,cAAc,WAAA,CAAY,qBAAA;AAAA,MAC9B,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,YAAA,CAAa,WAAW,CAAA;AACtD,IAAA,MAAM,MAAA,GAAS,WAAW,SAAS,CAAA;AAGnC,IAAA,WAAA,CAAY,4BAAA,CAA6B,aAAa,CAAC,CAAA;AAGvD,IAAA,MAAM,eAAe,OAAO,MAAA,KAAW,WAAW,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAEvE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,aAAa,QAAA,IAAY,KAAA;AAAA,MAClC,UAAA,EAAY,aAAa,UAAA,IAAc,CAAA;AAAA,MACvC,OAAO,YAAA,CAAa,KAAA;AAAA,MACpB,kBAAA,EAAoB,aAAa,mBAAA,IAAuB,MAAA;AAAA,MACxD,SAAA,EAAW,aAAa,UAAA,IAAc,KAAA;AAAA,MACtC,SAAA,EAAW,YAAA,CAAa,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,MAC9C,OAAA,EAAS,YAAA,CAAa,OAAA,IAAW;AAAC,KACpC;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAE7C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAW,KAAA;AAAA,MACX,WAAW,QAAA,CAAS;AAAA,KACtB;AAAA,EACF;AACF;AAoBO,SAAS,yBACd,MAAA,EAGA;AACA,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,GAAwB,KAAA;AAAA,IACxB,qBAAqB,eAAA,GAAkB,GAAA;AAAA,IACvC,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,4BAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB;AAChD,GACF,GAAI,MAAA;AAGJ,EAAA,MAAM,mBAAA,GAAsB,mBAAA,CAAoB,eAAA,EAAiB,qBAAqB,CAAA;AAGtF,EAAA,MAAM,WAAA,GAAc,mBAAmB,UAAU,CAAA;AAEjD,EAAA,OAAO,eAAe,WAAW,OAAA,EAAsB;AAErD,IAAA,MAAM,IAAA,GAAO,QAAQ,OAAA,CAAQ,QAAA;AAC7B,IAAA,IAAI,SAAA,CAAU,KAAK,CAAC,IAAA,KAAS,KAAK,UAAA,CAAW,IAAI,CAAC,CAAA,EAAG;AACnD,MAAA,OAAO,aAAa,IAAA,EAAK;AAAA,IAC3B;AAEA,IAAA,IAAI;AAEF,MAAA,MAAM,WAAA;AAGN,MAAA,MAAM,QAAA,GAAW;AAAA,QACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,KAAA,CAAA;AAAA,QAChD,SAAA,EACE,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,KAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IAAK,KAAA,CAAA;AAAA,QAChF,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACpC;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,QAAQ,CAAA;AAG5C,MAAA,IAAI,eAAA,IAAmB,OAAO,OAAA,EAAS;AACrC,QAAA,MAAM,gBAAgB,MAAM,CAAA;AAAA,MAC9B;AAGA,MAAA,IAAI,qBAAA,IAAyB,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,cAAc,mBAAA,EAAqB;AACvF,QAAA,OAAO,YAAA,CAAa,IAAA;AAAA,UAClB;AAAA,YACE,OAAO,eAAA,CAAgB,OAAA;AAAA,YACvB,OAAO,MAAA,CAAO,KAAA;AAAA,YACd,UAAA,EAAY,SAAA,CAAU,MAAA,CAAO,UAAU;AAAA;AAAA,WACzC;AAAA,UACA;AAAA,YACE,MAAA,EAAQ,gBAAgB,MAAA,IAAU,GAAA;AAAA,YAClC,OAAA,EAAS,eAAA,CAAgB,OAAA,IAAW;AAAC;AACvC,SACF;AAAA,MACF;AAGA,MAAA,MAAM,QAAA,GAAW,aAAa,IAAA,EAAK;AACnC,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,MAAA,CAAO,SAAS,SAAS,CAAA;AAClE,QAAA,QAAA,CAAS,OAAA,CAAQ,IAAI,oBAAA,EAAsB,MAAA,CAAO,UAAU,MAAA,CAAO,UAAU,CAAC,CAAC,CAAA;AAC/E,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,MAAA,CAAO,kBAAkB,CAAA;AAAA,MACxE;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAElD,MAAA,OAAO,aAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF","file":"edge-wasm-middleware.mjs","sourcesContent":["/**\n * Edge Runtime Compatible WASM Middleware for AgentShield\n *\n * This module provides WASM-based AI agent detection with 95-100% confidence\n * in Next.js Edge Runtime and Vercel Edge Functions.\n *\n * IMPORTANT: WebAssembly.instantiate(module) IS supported in Edge Runtime\n * when using a pre-compiled module imported with ?module suffix.\n */\n\nimport type { NextRequest } from 'next/server';\nimport { NextResponse } from 'next/server';\nimport { toPercent, normalizeConfidence } from '@kya-os/agentshield-shared';\n\n// Type definitions\nexport interface EdgeWasmDetectionResult {\n  isAgent: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'signature' | 'pattern' | 'wasm';\n  riskLevel: 'low' | 'medium' | 'high';\n  timestamp: string;\n  reasons?: string[];\n}\n\nexport interface EdgeAgentShieldConfig {\n  onAgentDetected?: (result: EdgeWasmDetectionResult) => void | Promise<void>;\n  blockOnHighConfidence?: boolean;\n  /**\n   * Confidence threshold for blocking (0.0-1.0 scale).\n   * Detection confidence above this threshold will be blocked if blockOnHighConfidence is true.\n   * @default 0.9 (90% confidence)\n   * @example\n   * confidenceThreshold: 0.9  // Block if >= 90% confident\n   * confidenceThreshold: 0.7  // Block if >= 70% confident\n   */\n  confidenceThreshold?: number;\n  skipPaths?: string[];\n  blockedResponse?: {\n    status?: number;\n    message?: string;\n    headers?: Record<string, string>;\n  };\n}\n\n// WASM module cache\nlet wasmExports: any = null;\nlet wasmInitPromise: Promise<void> | null = null;\n\n// wasm-bindgen glue code\nconst heap = new Array(128).fill(undefined);\nheap.push(undefined, null, true, false);\nlet heap_next = heap.length;\n\nfunction addHeapObject(obj: any) {\n  if (heap_next === heap.length) heap.push(heap.length + 1);\n  const idx = heap_next;\n  heap_next = heap[idx];\n  heap[idx] = obj;\n  return idx;\n}\n\nfunction getObject(idx: number) {\n  return heap[idx];\n}\n\nfunction dropObject(idx: number) {\n  if (idx < 132) return;\n  heap[idx] = heap_next;\n  heap_next = idx;\n}\n\nfunction takeObject(idx: number) {\n  const ret = getObject(idx);\n  dropObject(idx);\n  return ret;\n}\n\nconst cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });\nconst cachedTextEncoder = new TextEncoder();\n\nlet cachedUint8ArrayMemory0: Uint8Array | null = null;\nfunction getUint8ArrayMemory0() {\n  if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {\n    cachedUint8ArrayMemory0 = new Uint8Array(wasmExports.memory.buffer);\n  }\n  return cachedUint8ArrayMemory0;\n}\n\nfunction getStringFromWasm0(ptr: number, len: number) {\n  ptr = ptr >>> 0;\n  return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));\n}\n\nlet WASM_VECTOR_LEN = 0;\n\nfunction passStringToWasm0(arg: string, malloc: any, realloc: any) {\n  if (realloc === undefined) {\n    const buf = cachedTextEncoder.encode(arg);\n    const ptr = malloc(buf.length, 1) >>> 0;\n    getUint8ArrayMemory0()\n      .subarray(ptr, ptr + buf.length)\n      .set(buf);\n    WASM_VECTOR_LEN = buf.length;\n    return ptr;\n  }\n\n  let len = arg.length;\n  let ptr = malloc(len, 1) >>> 0;\n\n  const mem = getUint8ArrayMemory0();\n\n  let offset = 0;\n\n  for (; offset < len; offset++) {\n    const code = arg.charCodeAt(offset);\n    if (code > 0x7f) break;\n    mem[ptr + offset] = code;\n  }\n\n  if (offset !== len) {\n    if (offset !== 0) {\n      arg = arg.slice(offset);\n    }\n    ptr = realloc(ptr, len, (len = offset + arg.length * 3), 1) >>> 0;\n    const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);\n    const ret = cachedTextEncoder.encodeInto(arg, view);\n    offset += ret.written!;\n  }\n\n  WASM_VECTOR_LEN = offset;\n  return ptr;\n}\n\nlet cachedDataViewMemory0: DataView | null = null;\nfunction getDataViewMemory0() {\n  if (\n    cachedDataViewMemory0 === null ||\n    cachedDataViewMemory0.buffer !== wasmExports.memory.buffer\n  ) {\n    cachedDataViewMemory0 = new DataView(wasmExports.memory.buffer);\n  }\n  return cachedDataViewMemory0;\n}\n\n/**\n * Initialize WASM module with proper imports for Edge Runtime\n */\nexport async function initializeEdgeWasm(wasmModule: WebAssembly.Module): Promise<void> {\n  if (wasmInitPromise) {\n    return wasmInitPromise;\n  }\n\n  wasmInitPromise = (async () => {\n    try {\n      // Create imports object required by wasm-bindgen\n      const imports = {\n        './agentshield_wasm_bg.js': {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n        wbg: {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n      };\n\n      // Instantiate with proper imports\n      const instance = await WebAssembly.instantiate(wasmModule, imports);\n      wasmExports = instance.exports;\n\n      // Initialize wasm-bindgen if needed\n      if (wasmExports.__wbindgen_start) {\n        wasmExports.__wbindgen_start();\n      }\n\n      console.log(\n        '✅ AgentShield: WASM module loaded successfully in Edge Runtime (95-100% confidence enabled)'\n      );\n    } catch (error) {\n      console.error('❌ AgentShield: Failed to initialize WASM in Edge Runtime:', error);\n      throw error;\n    }\n  })();\n\n  return wasmInitPromise;\n}\n\n/**\n * Detect AI agent using WASM in Edge Runtime\n */\nasync function detectWithWasm(metadata: {\n  userAgent?: string | undefined;\n  ipAddress?: string | undefined;\n  headers: Record<string, string>;\n  timestamp: string;\n  url?: string | undefined;\n  method?: string | undefined;\n  clientFingerprint?: string | undefined;\n}): Promise<EdgeWasmDetectionResult> {\n  if (!wasmExports) {\n    throw new Error('WASM not initialized. Call initializeEdgeWasm first.');\n  }\n\n  try {\n    // Create WASM request metadata\n    const userAgent = metadata.userAgent || '';\n    const ipAddress = metadata.ipAddress || '';\n    const headers = JSON.stringify(metadata.headers);\n    const timestamp = metadata.timestamp;\n    const url = metadata.url || '';\n    const method = metadata.method || '';\n    const clientFingerprint = metadata.clientFingerprint || '';\n\n    // Call WASM function directly - pass all 7 string parameters\n    const ptr0 = passStringToWasm0(\n      userAgent,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len0 = WASM_VECTOR_LEN;\n    const ptr1 = passStringToWasm0(\n      ipAddress,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len1 = WASM_VECTOR_LEN;\n    const ptr2 = passStringToWasm0(\n      headers,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len2 = WASM_VECTOR_LEN;\n    const ptr3 = passStringToWasm0(\n      timestamp,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len3 = WASM_VECTOR_LEN;\n    const ptr4 = passStringToWasm0(\n      url,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len4 = WASM_VECTOR_LEN;\n    const ptr5 = passStringToWasm0(\n      method,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len5 = WASM_VECTOR_LEN;\n    const ptr6 = passStringToWasm0(\n      clientFingerprint,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len6 = WASM_VECTOR_LEN;\n\n    // Create metadata object in WASM (7 strings = 14 parameters)\n    const metadataPtr = wasmExports.jsrequestmetadata_new(\n      ptr0,\n      len0,\n      ptr1,\n      len1,\n      ptr2,\n      len2,\n      ptr3,\n      len3,\n      ptr4,\n      len4,\n      ptr5,\n      len5,\n      ptr6,\n      len6\n    );\n\n    // Perform detection\n    const resultPtr = wasmExports.detect_agent(metadataPtr);\n    const result = takeObject(resultPtr);\n\n    // Free WASM metadata\n    wasmExports.__wbg_jsrequestmetadata_free(metadataPtr, 0);\n\n    // Parse result\n    const parsedResult = typeof result === 'string' ? JSON.parse(result) : result;\n\n    return {\n      isAgent: parsedResult.is_agent || false,\n      confidence: parsedResult.confidence || 0,\n      agent: parsedResult.agent,\n      verificationMethod: parsedResult.verification_method || 'wasm',\n      riskLevel: parsedResult.risk_level || 'low',\n      timestamp: parsedResult.timestamp || metadata.timestamp,\n      reasons: parsedResult.reasons || [],\n    };\n  } catch (error) {\n    console.error('WASM detection failed:', error);\n    // Fall back to pattern detection\n    return {\n      isAgent: false,\n      confidence: 0,\n      verificationMethod: 'pattern',\n      riskLevel: 'low',\n      timestamp: metadata.timestamp,\n    };\n  }\n}\n\n/**\n * Create Edge Runtime compatible WASM middleware\n *\n * @example\n * ```typescript\n * // middleware.ts\n * import wasmModule from '@kya-os/agentshield/wasm?module';\n * import { createEdgeWasmMiddleware } from '@kya-os/agentshield-nextjs/edge-wasm-middleware';\n *\n * export const middleware = createEdgeWasmMiddleware({\n *   wasmModule,\n *   onAgentDetected: (result) => {\n *     // Note: result.confidence is 0.0-1.0 scale\n *     console.log(`AI Agent: ${result.agent} (${Math.round(result.confidence * 100)}% confidence)`);\n *   }\n * });\n * ```\n */\nexport function createEdgeWasmMiddleware(\n  config: EdgeAgentShieldConfig & {\n    wasmModule: WebAssembly.Module;\n  }\n) {\n  const {\n    wasmModule,\n    onAgentDetected,\n    blockOnHighConfidence = false,\n    confidenceThreshold: configThreshold = 0.9,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'AI agent access restricted',\n      headers: { 'Content-Type': 'application/json' },\n    },\n  } = config;\n\n  // Normalize threshold to 0.0-1.0 scale (handles both 0.9 and 90 inputs)\n  const confidenceThreshold = normalizeConfidence(configThreshold, 'confidenceThreshold');\n\n  // Initialize WASM on first load\n  const initPromise = initializeEdgeWasm(wasmModule);\n\n  return async function middleware(request: NextRequest) {\n    // Check if path should be skipped\n    const path = request.nextUrl.pathname;\n    if (skipPaths.some((skip) => path.startsWith(skip))) {\n      return NextResponse.next();\n    }\n\n    try {\n      // Ensure WASM is initialized\n      await initPromise;\n\n      // Prepare metadata\n      const metadata = {\n        userAgent: request.headers.get('user-agent') || undefined,\n        ipAddress:\n          request.headers.get('x-forwarded-for') || request.headers.get('x-real-ip') || undefined,\n        headers: Object.fromEntries(request.headers.entries()),\n        timestamp: new Date().toISOString(),\n      };\n\n      // Perform WASM detection\n      const result = await detectWithWasm(metadata);\n\n      // Call user callback if provided\n      if (onAgentDetected && result.isAgent) {\n        await onAgentDetected(result);\n      }\n\n      // Block if configured (confidence is 0.0-1.0 scale)\n      if (blockOnHighConfidence && result.isAgent && result.confidence >= confidenceThreshold) {\n        return NextResponse.json(\n          {\n            error: blockedResponse.message,\n            agent: result.agent,\n            confidence: toPercent(result.confidence), // Convert to 0-100 for display\n          },\n          {\n            status: blockedResponse.status || 403,\n            headers: blockedResponse.headers || {},\n          }\n        );\n      }\n\n      // Add detection headers\n      const response = NextResponse.next();\n      if (result.isAgent) {\n        response.headers.set('X-Agent-Detected', result.agent || 'unknown');\n        response.headers.set('X-Agent-Confidence', String(toPercent(result.confidence)));\n        response.headers.set('X-Agent-Verification', result.verificationMethod);\n      }\n\n      return response;\n    } catch (error) {\n      console.error('Edge WASM middleware error:', error);\n      // Continue without blocking on error\n      return NextResponse.next();\n    }\n  };\n}\n"]}
+{"version":3,"sources":["../src/edge-wasm-middleware.ts"],"names":["ptr"],"mappings":";;;;AAoDA,IAAI,WAAA,GAAmB,IAAA;AACvB,IAAI,eAAA,GAAwC,IAAA;AAG5C,IAAM,OAAO,IAAI,KAAA,CAAM,GAAG,CAAA,CAAE,KAAK,MAAS,CAAA;AAC1C,IAAA,CAAK,IAAA,CAAK,MAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAK,CAAA;AACtC,IAAI,YAAY,IAAA,CAAK,MAAA;AAErB,SAAS,cAAc,GAAA,EAAU;AAC/B,EAAA,IAAI,cAAc,IAAA,CAAK,MAAA,OAAa,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,EAAA,MAAM,GAAA,GAAM,SAAA;AACZ,EAAA,SAAA,GAAY,KAAK,GAAG,CAAA;AACpB,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA;AACZ,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAU,GAAA,EAAa;AAC9B,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,IAAI,MAAM,GAAA,EAAK;AACf,EAAA,IAAA,CAAK,GAAG,CAAA,GAAI,SAAA;AACZ,EAAA,SAAA,GAAY,GAAA;AACd;AAEA,SAAS,WAAW,GAAA,EAAa;AAC/B,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,UAAA,CAAW,GAAG,CAAA;AACd,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,iBAAA,GAAoB,IAAI,WAAA,CAAY,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA;AACnF,IAAM,iBAAA,GAAoB,IAAI,WAAA,EAAY;AAE1C,IAAI,uBAAA,GAA6C,IAAA;AACjD,SAAS,oBAAA,GAAuB;AAC9B,EAAA,IAAI,uBAAA,KAA4B,IAAA,IAAQ,uBAAA,CAAwB,UAAA,KAAe,CAAA,EAAG;AAChF,IAAA,uBAAA,GAA0B,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,uBAAA;AACT;AAEA,SAAS,kBAAA,CAAmB,KAAa,GAAA,EAAa;AACpD,EAAA,GAAA,GAAM,GAAA,KAAQ,CAAA;AACd,EAAA,OAAO,iBAAA,CAAkB,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,EAAK,GAAA,GAAM,GAAG,CAAC,CAAA;AACjF;AAEA,IAAI,eAAA,GAAkB,CAAA;AAEtB,SAAS,iBAAA,CAAkB,GAAA,EAAa,MAAA,EAAa,OAAA,EAAc;AACjE,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAA;AACxC,IAAA,MAAMA,IAAAA,GAAM,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,CAAC,CAAA,KAAM,CAAA;AACtC,IAAA,oBAAA,EAAqB,CAClB,SAASA,IAAAA,EAAKA,IAAAA,GAAM,IAAI,MAAM,CAAA,CAC9B,IAAI,GAAG,CAAA;AACV,IAAA,eAAA,GAAkB,GAAA,CAAI,MAAA;AACtB,IAAA,OAAOA,IAAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAM,GAAA,CAAI,MAAA;AACd,EAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,EAAK,CAAC,CAAA,KAAM,CAAA;AAE7B,EAAA,MAAM,MAAM,oBAAA,EAAqB;AAEjC,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,OAAO,MAAA,GAAS,KAAK,MAAA,EAAA,EAAU;AAC7B,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA;AAClC,IAAA,IAAI,OAAO,GAAA,EAAM;AACjB,IAAA,GAAA,CAAI,GAAA,GAAM,MAAM,CAAA,GAAI,IAAA;AAAA,EACtB;AAEA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,GAAA,GAAM,GAAA,CAAI,MAAM,MAAM,CAAA;AAAA,IACxB;AACA,IAAA,GAAA,GAAM,OAAA,CAAQ,KAAK,GAAA,EAAM,GAAA,GAAM,SAAS,GAAA,CAAI,MAAA,GAAS,CAAA,EAAI,CAAC,CAAA,KAAM,CAAA;AAChE,IAAA,MAAM,OAAO,oBAAA,EAAqB,CAAE,SAAS,GAAA,GAAM,MAAA,EAAQ,MAAM,GAAG,CAAA;AACpE,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,UAAA,CAAW,GAAA,EAAK,IAAI,CAAA;AAClD,IAAA,MAAA,IAAU,GAAA,CAAI,OAAA;AAAA,EAChB;AAEA,EAAA,eAAA,GAAkB,MAAA;AAClB,EAAA,OAAO,GAAA;AACT;AAEA,IAAI,qBAAA,GAAyC,IAAA;AAC7C,SAAS,kBAAA,GAAqB;AAC5B,EAAA,IACE,0BAA0B,IAAA,IAC1B,qBAAA,CAAsB,MAAA,KAAW,WAAA,CAAY,OAAO,MAAA,EACpD;AACA,IAAA,qBAAA,GAAwB,IAAI,QAAA,CAAS,WAAA,CAAY,MAAA,CAAO,MAAM,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,qBAAA;AACT;AAKA,eAAsB,mBAAmB,UAAA,EAA+C;AACtF,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,eAAA,GAAA,CAAmB,YAAY;AAC7B,IAAA,IAAI;AAEF,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,0BAAA,EAA4B;AAAA,UAC1B,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA,SACF;AAAA,QACA,GAAA,EAAK;AAAA,UACH,0BAAA,EAA4B,SAAU,IAAA,EAAc;AAClD,YAAA,UAAA,CAAW,IAAI,CAAA;AAAA,UACjB,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AACzC,YAAA,OAAO,cAAc,GAAG,CAAA;AAAA,UAC1B,CAAA;AAAA,UACA,qBAAA,EAAuB,SAAU,IAAA,EAAc,IAAA,EAAc;AAC3D,YAAA,MAAM,GAAA,GAAM,UAAU,IAAI,CAAA;AAC1B,YAAA,MAAM,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,GAAA,GAAM,KAAA,CAAA;AAC5C,YAAA,MAAM,OAAO,GAAA,GACT,iBAAA;AAAA,cACE,GAAA;AAAA,cACA,WAAA,CAAY,iBAAA;AAAA,cACZ,WAAA,CAAY;AAAA,aACd,GACA,CAAA;AACJ,YAAA,MAAM,IAAA,GAAO,eAAA;AACb,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AACtD,YAAA,kBAAA,GAAqB,QAAA,CAAS,IAAA,GAAO,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,CAAA;AAAA,UACxD,CAAA;AAAA,UACA,gBAAA,EAAkB,SAAU,IAAA,EAAc,IAAA,EAAc;AACtD,YAAA,MAAM,IAAI,KAAA,CAAM,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,UAChD;AAAA;AACF,OACF;AAGA,MAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,WAAA,CAAY,YAAY,OAAO,CAAA;AAClE,MAAA,WAAA,GAAc,QAAA,CAAS,OAAA;AAGvB,MAAA,IAAI,YAAY,gBAAA,EAAkB;AAChC,QAAA,WAAA,CAAY,gBAAA,EAAiB;AAAA,MAC/B;AAEA,MAAA,OAAA,CAAQ,GAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,kEAA6D,KAAK,CAAA;AAChF,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA,GAAG;AAEH,EAAA,OAAO,eAAA;AACT;AAKA,eAAe,eAAe,QAAA,EAQO;AACnC,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,SAAA,GAAY,SAAS,SAAA,IAAa,EAAA;AACxC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,OAAO,CAAA;AAC/C,IAAA,MAAM,YAAY,QAAA,CAAS,SAAA;AAC3B,IAAA,MAAM,GAAA,GAAM,SAAS,GAAA,IAAO,EAAA;AAC5B,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,EAAA;AAClC,IAAA,MAAM,iBAAA,GAAoB,SAAS,iBAAA,IAAqB,EAAA;AAGxD,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,OAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,SAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,GAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,MAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AACb,IAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,MACX,iBAAA;AAAA,MACA,WAAA,CAAY,iBAAA;AAAA,MACZ,WAAA,CAAY;AAAA,KACd;AACA,IAAA,MAAM,IAAA,GAAO,eAAA;AAGb,IAAA,MAAM,cAAc,WAAA,CAAY,qBAAA;AAAA,MAC9B,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,YAAA,CAAa,WAAW,CAAA;AACtD,IAAA,MAAM,MAAA,GAAS,WAAW,SAAS,CAAA;AAGnC,IAAA,WAAA,CAAY,4BAAA,CAA6B,aAAa,CAAC,CAAA;AAGvD,IAAA,MAAM,eAAe,OAAO,MAAA,KAAW,WAAW,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAEvE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,aAAa,QAAA,IAAY,KAAA;AAAA,MAClC,WAAA,EAAa,aAAa,aAAA,IAAiB,KAAA;AAAA,MAC3C,UAAA,EAAY,aAAa,UAAA,IAAc,CAAA;AAAA,MACvC,OAAO,YAAA,CAAa,KAAA;AAAA,MACpB,kBAAA,EAAoB,aAAa,mBAAA,IAAuB,MAAA;AAAA,MACxD,SAAA,EAAW,aAAa,UAAA,IAAc,KAAA;AAAA,MACtC,SAAA,EAAW,YAAA,CAAa,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,MAC9C,OAAA,EAAS,YAAA,CAAa,OAAA,IAAW;AAAC,KACpC;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,KAAK,CAAA;AAE7C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,kBAAA,EAAoB,SAAA;AAAA,MACpB,SAAA,EAAW,KAAA;AAAA,MACX,WAAW,QAAA,CAAS;AAAA,KACtB;AAAA,EACF;AACF;AAoBO,SAAS,yBACd,MAAA,EAGA;AACA,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,GAAwB,KAAA;AAAA,IACxB,qBAAqB,eAAA,GAAkB,GAAA;AAAA,IACvC,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,4BAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB;AAChD,GACF,GAAI,MAAA;AAGJ,EAAA,MAAM,mBAAA,GAAsB,mBAAA,CAAoB,eAAA,EAAiB,qBAAqB,CAAA;AAGtF,EAAA,MAAM,WAAA,GAAc,mBAAmB,UAAU,CAAA;AAEjD,EAAA,OAAO,eAAe,WAAW,OAAA,EAAsB;AAErD,IAAA,MAAM,IAAA,GAAO,QAAQ,OAAA,CAAQ,QAAA;AAC7B,IAAA,IAAI,SAAA,CAAU,KAAK,CAAC,IAAA,KAAS,KAAK,UAAA,CAAW,IAAI,CAAC,CAAA,EAAG;AACnD,MAAA,OAAO,aAAa,IAAA,EAAK;AAAA,IAC3B;AAEA,IAAA,IAAI;AAEF,MAAA,MAAM,WAAA;AAGN,MAAA,MAAM,QAAA,GAAW;AAAA,QACf,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,KAAA,CAAA;AAAA,QAChD,SAAA,EACE,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,KAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IAAK,KAAA,CAAA;AAAA,QAChF,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACpC;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,QAAQ,CAAA;AAI5C,MAAA,MAAM,QAAA,GAAW,mBAAA;AAAA,QACf,EAAE,GAAG,MAAA,EAAQ,UAAA,EAAY,MAAA,CAAO,aAAa,GAAA,EAAI;AAAA,QACjD;AAAA,UACE,qBAAqB,mBAAA,GAAsB,GAAA;AAAA,UAC3C,aAAA,EAAe,wBAAwB,OAAA,GAAU;AAAA;AACnD,OACF;AAGA,MAAA,IAAI,eAAA,IAAmB,aAAA,CAAc,MAAM,CAAA,EAAG;AAC5C,QAAA,MAAM,gBAAgB,MAAM,CAAA;AAAA,MAC9B;AAGA,MAAA,IAAI,QAAA,CAAS,WAAW,OAAA,EAAS;AAC/B,QAAA,OAAO,YAAA,CAAa,IAAA;AAAA,UAClB;AAAA,YACE,OAAO,eAAA,CAAgB,OAAA;AAAA,YACvB,OAAO,MAAA,CAAO,KAAA;AAAA,YACd,UAAA,EAAY,SAAA,CAAU,MAAA,CAAO,UAAU;AAAA;AAAA,WACzC;AAAA,UACA;AAAA,YACE,MAAA,EAAQ,gBAAgB,MAAA,IAAU,GAAA;AAAA,YAClC,OAAA,EAAS,eAAA,CAAgB,OAAA,IAAW;AAAC;AACvC,SACF;AAAA,MACF;AAGA,MAAA,MAAM,QAAA,GAAW,aAAa,IAAA,EAAK;AACnC,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,MAAA,CAAO,SAAS,SAAS,CAAA;AAClE,QAAA,QAAA,CAAS,OAAA,CAAQ,IAAI,oBAAA,EAAsB,MAAA,CAAO,UAAU,MAAA,CAAO,UAAU,CAAC,CAAC,CAAA;AAC/E,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,MAAA,CAAO,kBAAkB,CAAA;AAAA,MACxE;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAElD,MAAA,OAAO,aAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF","file":"edge-wasm-middleware.mjs","sourcesContent":["/**\n * Edge Runtime Compatible WASM Middleware for AgentShield\n *\n * This module provides WASM-based AI agent detection with 95-100% confidence\n * in Next.js Edge Runtime and Vercel Edge Functions.\n *\n * IMPORTANT: WebAssembly.instantiate(module) IS supported in Edge Runtime\n * when using a pre-compiled module imported with ?module suffix.\n */\n\nimport type { NextRequest } from 'next/server';\nimport { NextResponse } from 'next/server';\nimport {\n  toPercent,\n  normalizeConfidence,\n  evaluateEnforcement,\n  shouldEnforce,\n} from '@kya-os/agentshield-shared';\n\n// Type definitions\nexport interface EdgeWasmDetectionResult {\n  isAgent: boolean;\n  isAiCrawler?: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: 'signature' | 'pattern' | 'wasm';\n  riskLevel: 'low' | 'medium' | 'high';\n  timestamp: string;\n  reasons?: string[];\n}\n\nexport interface EdgeAgentShieldConfig {\n  onAgentDetected?: (result: EdgeWasmDetectionResult) => void | Promise<void>;\n  blockOnHighConfidence?: boolean;\n  /**\n   * Confidence threshold for blocking (0.0-1.0 scale).\n   * Detection confidence above this threshold will be blocked if blockOnHighConfidence is true.\n   * @default 0.9 (90% confidence)\n   * @example\n   * confidenceThreshold: 0.9  // Block if >= 90% confident\n   * confidenceThreshold: 0.7  // Block if >= 70% confident\n   */\n  confidenceThreshold?: number;\n  skipPaths?: string[];\n  blockedResponse?: {\n    status?: number;\n    message?: string;\n    headers?: Record<string, string>;\n  };\n}\n\n// WASM module cache\nlet wasmExports: any = null;\nlet wasmInitPromise: Promise<void> | null = null;\n\n// wasm-bindgen glue code\nconst heap = new Array(128).fill(undefined);\nheap.push(undefined, null, true, false);\nlet heap_next = heap.length;\n\nfunction addHeapObject(obj: any) {\n  if (heap_next === heap.length) heap.push(heap.length + 1);\n  const idx = heap_next;\n  heap_next = heap[idx];\n  heap[idx] = obj;\n  return idx;\n}\n\nfunction getObject(idx: number) {\n  return heap[idx];\n}\n\nfunction dropObject(idx: number) {\n  if (idx < 132) return;\n  heap[idx] = heap_next;\n  heap_next = idx;\n}\n\nfunction takeObject(idx: number) {\n  const ret = getObject(idx);\n  dropObject(idx);\n  return ret;\n}\n\nconst cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });\nconst cachedTextEncoder = new TextEncoder();\n\nlet cachedUint8ArrayMemory0: Uint8Array | null = null;\nfunction getUint8ArrayMemory0() {\n  if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {\n    cachedUint8ArrayMemory0 = new Uint8Array(wasmExports.memory.buffer);\n  }\n  return cachedUint8ArrayMemory0;\n}\n\nfunction getStringFromWasm0(ptr: number, len: number) {\n  ptr = ptr >>> 0;\n  return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));\n}\n\nlet WASM_VECTOR_LEN = 0;\n\nfunction passStringToWasm0(arg: string, malloc: any, realloc: any) {\n  if (realloc === undefined) {\n    const buf = cachedTextEncoder.encode(arg);\n    const ptr = malloc(buf.length, 1) >>> 0;\n    getUint8ArrayMemory0()\n      .subarray(ptr, ptr + buf.length)\n      .set(buf);\n    WASM_VECTOR_LEN = buf.length;\n    return ptr;\n  }\n\n  let len = arg.length;\n  let ptr = malloc(len, 1) >>> 0;\n\n  const mem = getUint8ArrayMemory0();\n\n  let offset = 0;\n\n  for (; offset < len; offset++) {\n    const code = arg.charCodeAt(offset);\n    if (code > 0x7f) break;\n    mem[ptr + offset] = code;\n  }\n\n  if (offset !== len) {\n    if (offset !== 0) {\n      arg = arg.slice(offset);\n    }\n    ptr = realloc(ptr, len, (len = offset + arg.length * 3), 1) >>> 0;\n    const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);\n    const ret = cachedTextEncoder.encodeInto(arg, view);\n    offset += ret.written!;\n  }\n\n  WASM_VECTOR_LEN = offset;\n  return ptr;\n}\n\nlet cachedDataViewMemory0: DataView | null = null;\nfunction getDataViewMemory0() {\n  if (\n    cachedDataViewMemory0 === null ||\n    cachedDataViewMemory0.buffer !== wasmExports.memory.buffer\n  ) {\n    cachedDataViewMemory0 = new DataView(wasmExports.memory.buffer);\n  }\n  return cachedDataViewMemory0;\n}\n\n/**\n * Initialize WASM module with proper imports for Edge Runtime\n */\nexport async function initializeEdgeWasm(wasmModule: WebAssembly.Module): Promise<void> {\n  if (wasmInitPromise) {\n    return wasmInitPromise;\n  }\n\n  wasmInitPromise = (async () => {\n    try {\n      // Create imports object required by wasm-bindgen\n      const imports = {\n        './agentshield_wasm_bg.js': {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n        wbg: {\n          __wbindgen_object_drop_ref: function (arg0: number) {\n            dropObject(arg0);\n          },\n          __wbindgen_string_new: function (arg0: number, arg1: number) {\n            const ret = getStringFromWasm0(arg0, arg1);\n            return addHeapObject(ret);\n          },\n          __wbindgen_string_get: function (arg0: number, arg1: number) {\n            const obj = getObject(arg1);\n            const ret = typeof obj === 'string' ? obj : undefined;\n            const ptr1 = ret\n              ? passStringToWasm0(\n                  ret,\n                  wasmExports.__wbindgen_malloc,\n                  wasmExports.__wbindgen_realloc\n                )\n              : 0;\n            const len1 = WASM_VECTOR_LEN;\n            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);\n            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);\n          },\n          __wbindgen_throw: function (arg0: number, arg1: number) {\n            throw new Error(getStringFromWasm0(arg0, arg1));\n          },\n        },\n      };\n\n      // Instantiate with proper imports\n      const instance = await WebAssembly.instantiate(wasmModule, imports);\n      wasmExports = instance.exports;\n\n      // Initialize wasm-bindgen if needed\n      if (wasmExports.__wbindgen_start) {\n        wasmExports.__wbindgen_start();\n      }\n\n      console.log(\n        '✅ AgentShield: WASM module loaded successfully in Edge Runtime (95-100% confidence enabled)'\n      );\n    } catch (error) {\n      console.error('❌ AgentShield: Failed to initialize WASM in Edge Runtime:', error);\n      throw error;\n    }\n  })();\n\n  return wasmInitPromise;\n}\n\n/**\n * Detect AI agent using WASM in Edge Runtime\n */\nasync function detectWithWasm(metadata: {\n  userAgent?: string | undefined;\n  ipAddress?: string | undefined;\n  headers: Record<string, string>;\n  timestamp: string;\n  url?: string | undefined;\n  method?: string | undefined;\n  clientFingerprint?: string | undefined;\n}): Promise<EdgeWasmDetectionResult> {\n  if (!wasmExports) {\n    throw new Error('WASM not initialized. Call initializeEdgeWasm first.');\n  }\n\n  try {\n    // Create WASM request metadata\n    const userAgent = metadata.userAgent || '';\n    const ipAddress = metadata.ipAddress || '';\n    const headers = JSON.stringify(metadata.headers);\n    const timestamp = metadata.timestamp;\n    const url = metadata.url || '';\n    const method = metadata.method || '';\n    const clientFingerprint = metadata.clientFingerprint || '';\n\n    // Call WASM function directly - pass all 7 string parameters\n    const ptr0 = passStringToWasm0(\n      userAgent,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len0 = WASM_VECTOR_LEN;\n    const ptr1 = passStringToWasm0(\n      ipAddress,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len1 = WASM_VECTOR_LEN;\n    const ptr2 = passStringToWasm0(\n      headers,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len2 = WASM_VECTOR_LEN;\n    const ptr3 = passStringToWasm0(\n      timestamp,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len3 = WASM_VECTOR_LEN;\n    const ptr4 = passStringToWasm0(\n      url,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len4 = WASM_VECTOR_LEN;\n    const ptr5 = passStringToWasm0(\n      method,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len5 = WASM_VECTOR_LEN;\n    const ptr6 = passStringToWasm0(\n      clientFingerprint,\n      wasmExports.__wbindgen_malloc,\n      wasmExports.__wbindgen_realloc\n    );\n    const len6 = WASM_VECTOR_LEN;\n\n    // Create metadata object in WASM (7 strings = 14 parameters)\n    const metadataPtr = wasmExports.jsrequestmetadata_new(\n      ptr0,\n      len0,\n      ptr1,\n      len1,\n      ptr2,\n      len2,\n      ptr3,\n      len3,\n      ptr4,\n      len4,\n      ptr5,\n      len5,\n      ptr6,\n      len6\n    );\n\n    // Perform detection\n    const resultPtr = wasmExports.detect_agent(metadataPtr);\n    const result = takeObject(resultPtr);\n\n    // Free WASM metadata\n    wasmExports.__wbg_jsrequestmetadata_free(metadataPtr, 0);\n\n    // Parse result\n    const parsedResult = typeof result === 'string' ? JSON.parse(result) : result;\n\n    return {\n      isAgent: parsedResult.is_agent || false,\n      isAiCrawler: parsedResult.is_ai_crawler || false,\n      confidence: parsedResult.confidence || 0,\n      agent: parsedResult.agent,\n      verificationMethod: parsedResult.verification_method || 'wasm',\n      riskLevel: parsedResult.risk_level || 'low',\n      timestamp: parsedResult.timestamp || metadata.timestamp,\n      reasons: parsedResult.reasons || [],\n    };\n  } catch (error) {\n    console.error('WASM detection failed:', error);\n    // Fall back to pattern detection\n    return {\n      isAgent: false,\n      confidence: 0,\n      verificationMethod: 'pattern',\n      riskLevel: 'low',\n      timestamp: metadata.timestamp,\n    };\n  }\n}\n\n/**\n * Create Edge Runtime compatible WASM middleware\n *\n * @example\n * ```typescript\n * // middleware.ts\n * import wasmModule from '@kya-os/agentshield/wasm?module';\n * import { createEdgeWasmMiddleware } from '@kya-os/agentshield-nextjs/edge-wasm-middleware';\n *\n * export const middleware = createEdgeWasmMiddleware({\n *   wasmModule,\n *   onAgentDetected: (result) => {\n *     // Note: result.confidence is 0.0-1.0 scale\n *     console.log(`AI Agent: ${result.agent} (${Math.round(result.confidence * 100)}% confidence)`);\n *   }\n * });\n * ```\n */\nexport function createEdgeWasmMiddleware(\n  config: EdgeAgentShieldConfig & {\n    wasmModule: WebAssembly.Module;\n  }\n) {\n  const {\n    wasmModule,\n    onAgentDetected,\n    blockOnHighConfidence = false,\n    confidenceThreshold: configThreshold = 0.9,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'AI agent access restricted',\n      headers: { 'Content-Type': 'application/json' },\n    },\n  } = config;\n\n  // Normalize threshold to 0.0-1.0 scale (handles both 0.9 and 90 inputs)\n  const confidenceThreshold = normalizeConfidence(configThreshold, 'confidenceThreshold');\n\n  // Initialize WASM on first load\n  const initPromise = initializeEdgeWasm(wasmModule);\n\n  return async function middleware(request: NextRequest) {\n    // Check if path should be skipped\n    const path = request.nextUrl.pathname;\n    if (skipPaths.some((skip) => path.startsWith(skip))) {\n      return NextResponse.next();\n    }\n\n    try {\n      // Ensure WASM is initialized\n      await initPromise;\n\n      // Prepare metadata\n      const metadata = {\n        userAgent: request.headers.get('user-agent') || undefined,\n        ipAddress:\n          request.headers.get('x-forwarded-for') || request.headers.get('x-real-ip') || undefined,\n        headers: Object.fromEntries(request.headers.entries()),\n        timestamp: new Date().toISOString(),\n      };\n\n      // Perform WASM detection\n      const result = await detectWithWasm(metadata);\n\n      // Evaluate enforcement decision\n      // Note: this middleware uses 0-1 scale internally; convert to 0-100 for evaluateEnforcement\n      const decision = evaluateEnforcement(\n        { ...result, confidence: result.confidence * 100 },\n        {\n          confidenceThreshold: confidenceThreshold * 100,\n          defaultAction: blockOnHighConfidence ? 'block' : 'allow',\n        }\n      );\n\n      // Call user callback for any enforced agent (regardless of threshold)\n      if (onAgentDetected && shouldEnforce(result)) {\n        await onAgentDetected(result);\n      }\n\n      // Block if enforcement decision says to block\n      if (decision.action === 'block') {\n        return NextResponse.json(\n          {\n            error: blockedResponse.message,\n            agent: result.agent,\n            confidence: toPercent(result.confidence), // Convert to 0-100 for display\n          },\n          {\n            status: blockedResponse.status || 403,\n            headers: blockedResponse.headers || {},\n          }\n        );\n      }\n\n      // Add detection headers\n      const response = NextResponse.next();\n      if (result.isAgent) {\n        response.headers.set('X-Agent-Detected', result.agent || 'unknown');\n        response.headers.set('X-Agent-Confidence', String(toPercent(result.confidence)));\n        response.headers.set('X-Agent-Verification', result.verificationMethod);\n      }\n\n      return response;\n    } catch (error) {\n      console.error('Edge WASM middleware error:', error);\n      // Continue without blocking on error\n      return NextResponse.next();\n    }\n  };\n}\n"]}