@kya-os/checkpoint-nextjs 1.1.0 → 1.1.4

package/dist/edge-wasm-middleware.d.mts

@@ -1,15 +1,25 @@
 import { NextRequest, NextResponse } from 'next/server';
 
 /**
- * Edge Runtime Compatible WASM Middleware for AgentShield
+ * @deprecated Phase-D.9a — legacy Edge Runtime WASM middleware wrapping
+ * the retired `agentshield-wasm` Rust crate. This file shipped hand-
+ * written wasm-bindgen glue code that loaded the legacy detector's
+ * WASM binary; PR #2599's SSOT consolidation + PDM-1 #2560's engine
+ * move + AgentDetector-Deletion-1 PR #2610's class-deprecation made
+ * it structural dead weight.
  *
- * This module provides WASM-based AI agent detection with 95-100% confidence
- * in Next.js Edge Runtime and Vercel Edge Functions.
+ * Phase-D.9a converts the exports to throw-stubs (same precedent as
+ * PR #2610's `createWasmAgentShieldMiddleware` deprecation). Phase-D.9b
+ * (follow-up) deletes the underlying `agentshield-wasm` Rust crate
+ * after migrating the production Cloudflare gateway worker.
  *
- * IMPORTANT: WebAssembly.instantiate(module) IS supported in Edge Runtime
- * when using a pre-compiled module imported with ?module suffix.
+ * Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs/edge` —
+ * engine-backed, runs the full kya-os-engine orchestrator including
+ * MCP-I envelope verification. See `packages/checkpoint-nextjs/README.md`
+ * for the canonical recipe.
  */
 
+/** @deprecated See file header. Type-only surface preservation. */
 interface EdgeWasmDetectionResult {
     isAgent: boolean;
     isAiCrawler?: boolean;
@@ -20,17 +30,10 @@ interface EdgeWasmDetectionResult {
     timestamp: string;
     reasons?: string[];
 }
+/** @deprecated See file header. Type-only surface preservation. */
 interface EdgeAgentShieldConfig {
     onAgentDetected?: (result: EdgeWasmDetectionResult) => void | Promise<void>;
     blockOnHighConfidence?: boolean;
-    /**
-     * Confidence threshold for blocking (0.0-1.0 scale).
-     * Detection confidence above this threshold will be blocked if blockOnHighConfidence is true.
-     * @default 0.9 (90% confidence)
-     * @example
-     * confidenceThreshold: 0.9  // Block if >= 90% confident
-     * confidenceThreshold: 0.7  // Block if >= 70% confident
-     */
     confidenceThreshold?: number;
     skipPaths?: string[];
     blockedResponse?: {
@@ -39,30 +42,21 @@ interface EdgeAgentShieldConfig {
         headers?: Record<string, string>;
     };
 }
+/** @internal — test-only reset for the one-shot warn latch. */
+declare function __resetEdgeWasmWarningForTests(): void;
 /**
- * Initialize WASM module with proper imports for Edge Runtime
+ * @deprecated Removed in Phase-D.9a. Use `withCheckpoint` from
+ * `@kya-os/checkpoint-nextjs/edge` instead. Throws on invocation;
+ * surface exists only so static analysis sees the historical export.
  */
-declare function initializeEdgeWasm(wasmModule: WebAssembly.Module): Promise<void>;
+declare function initializeEdgeWasm(_wasmModule: WebAssembly.Module): Promise<void>;
 /**
- * Create Edge Runtime compatible WASM middleware
- *
- * @example
- * ```typescript
- * // middleware.ts
- * import wasmModule from '@kya-os/checkpoint/wasm?module';
- * import { createEdgeWasmMiddleware } from '@kya-os/checkpoint-nextjs/edge-wasm-middleware';
- *
- * export const middleware = createEdgeWasmMiddleware({
- *   wasmModule,
- *   onAgentDetected: (result) => {
- *     // Note: result.confidence is 0.0-1.0 scale
- *     console.log(`AI Agent: ${result.agent} (${Math.round(result.confidence * 100)}% confidence)`);
- *   }
- * });
- * ```
+ * @deprecated Removed in Phase-D.9a. Use `withCheckpoint` from
+ * `@kya-os/checkpoint-nextjs/edge` instead. Throws on invocation;
+ * surface exists only so static analysis sees the historical export.
  */
-declare function createEdgeWasmMiddleware(config: EdgeAgentShieldConfig & {
+declare function createEdgeWasmMiddleware(_config: EdgeAgentShieldConfig & {
     wasmModule: WebAssembly.Module;
-}): (request: NextRequest) => Promise<NextResponse<unknown>>;
+}): (request: NextRequest) => Promise<NextResponse>;
 
-export { type EdgeAgentShieldConfig, type EdgeWasmDetectionResult, createEdgeWasmMiddleware, initializeEdgeWasm };
+export { type EdgeAgentShieldConfig, type EdgeWasmDetectionResult, __resetEdgeWasmWarningForTests, createEdgeWasmMiddleware, initializeEdgeWasm };

package/dist/edge-wasm-middleware.d.ts

@@ -1,15 +1,25 @@
 import { NextRequest, NextResponse } from 'next/server';
 
 /**
- * Edge Runtime Compatible WASM Middleware for AgentShield
+ * @deprecated Phase-D.9a — legacy Edge Runtime WASM middleware wrapping
+ * the retired `agentshield-wasm` Rust crate. This file shipped hand-
+ * written wasm-bindgen glue code that loaded the legacy detector's
+ * WASM binary; PR #2599's SSOT consolidation + PDM-1 #2560's engine
+ * move + AgentDetector-Deletion-1 PR #2610's class-deprecation made
+ * it structural dead weight.
  *
- * This module provides WASM-based AI agent detection with 95-100% confidence
- * in Next.js Edge Runtime and Vercel Edge Functions.
+ * Phase-D.9a converts the exports to throw-stubs (same precedent as
+ * PR #2610's `createWasmAgentShieldMiddleware` deprecation). Phase-D.9b
+ * (follow-up) deletes the underlying `agentshield-wasm` Rust crate
+ * after migrating the production Cloudflare gateway worker.
  *
- * IMPORTANT: WebAssembly.instantiate(module) IS supported in Edge Runtime
- * when using a pre-compiled module imported with ?module suffix.
+ * Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs/edge` —
+ * engine-backed, runs the full kya-os-engine orchestrator including
+ * MCP-I envelope verification. See `packages/checkpoint-nextjs/README.md`
+ * for the canonical recipe.
  */
 
+/** @deprecated See file header. Type-only surface preservation. */
 interface EdgeWasmDetectionResult {
     isAgent: boolean;
     isAiCrawler?: boolean;
@@ -20,17 +30,10 @@ interface EdgeWasmDetectionResult {
     timestamp: string;
     reasons?: string[];
 }
+/** @deprecated See file header. Type-only surface preservation. */
 interface EdgeAgentShieldConfig {
     onAgentDetected?: (result: EdgeWasmDetectionResult) => void | Promise<void>;
     blockOnHighConfidence?: boolean;
-    /**
-     * Confidence threshold for blocking (0.0-1.0 scale).
-     * Detection confidence above this threshold will be blocked if blockOnHighConfidence is true.
-     * @default 0.9 (90% confidence)
-     * @example
-     * confidenceThreshold: 0.9  // Block if >= 90% confident
-     * confidenceThreshold: 0.7  // Block if >= 70% confident
-     */
     confidenceThreshold?: number;
     skipPaths?: string[];
     blockedResponse?: {
@@ -39,30 +42,21 @@ interface EdgeAgentShieldConfig {
         headers?: Record<string, string>;
     };
 }
+/** @internal — test-only reset for the one-shot warn latch. */
+declare function __resetEdgeWasmWarningForTests(): void;
 /**
- * Initialize WASM module with proper imports for Edge Runtime
+ * @deprecated Removed in Phase-D.9a. Use `withCheckpoint` from
+ * `@kya-os/checkpoint-nextjs/edge` instead. Throws on invocation;
+ * surface exists only so static analysis sees the historical export.
  */
-declare function initializeEdgeWasm(wasmModule: WebAssembly.Module): Promise<void>;
+declare function initializeEdgeWasm(_wasmModule: WebAssembly.Module): Promise<void>;
 /**
- * Create Edge Runtime compatible WASM middleware
- *
- * @example
- * ```typescript
- * // middleware.ts
- * import wasmModule from '@kya-os/checkpoint/wasm?module';
- * import { createEdgeWasmMiddleware } from '@kya-os/checkpoint-nextjs/edge-wasm-middleware';
- *
- * export const middleware = createEdgeWasmMiddleware({
- *   wasmModule,
- *   onAgentDetected: (result) => {
- *     // Note: result.confidence is 0.0-1.0 scale
- *     console.log(`AI Agent: ${result.agent} (${Math.round(result.confidence * 100)}% confidence)`);
- *   }
- * });
- * ```
+ * @deprecated Removed in Phase-D.9a. Use `withCheckpoint` from
+ * `@kya-os/checkpoint-nextjs/edge` instead. Throws on invocation;
+ * surface exists only so static analysis sees the historical export.
  */
-declare function createEdgeWasmMiddleware(config: EdgeAgentShieldConfig & {
+declare function createEdgeWasmMiddleware(_config: EdgeAgentShieldConfig & {
     wasmModule: WebAssembly.Module;
-}): (request: NextRequest) => Promise<NextResponse<unknown>>;
+}): (request: NextRequest) => Promise<NextResponse>;
 
-export { type EdgeAgentShieldConfig, type EdgeWasmDetectionResult, createEdgeWasmMiddleware, initializeEdgeWasm };
+export { type EdgeAgentShieldConfig, type EdgeWasmDetectionResult, __resetEdgeWasmWarningForTests, createEdgeWasmMiddleware, initializeEdgeWasm };

package/dist/edge-wasm-middleware.js

@@ -1,316 +1,26 @@
 'use strict';
 
-var server = require('next/server');
-var checkpointShared = require('@kya-os/checkpoint-shared');
-
 // src/edge-wasm-middleware.ts
-var wasmExports = null;
-var wasmInitPromise = null;
-var heap = new Array(128).fill(void 0);
-heap.push(void 0, null, true, false);
-var heap_next = heap.length;
-function addHeapObject(obj) {
-  if (heap_next === heap.length) heap.push(heap.length + 1);
-  const idx = heap_next;
-  heap_next = heap[idx];
-  heap[idx] = obj;
-  return idx;
-}
-function getObject(idx) {
-  return heap[idx];
-}
-function dropObject(idx) {
-  if (idx < 132) return;
-  heap[idx] = heap_next;
-  heap_next = idx;
-}
-function takeObject(idx) {
-  const ret = getObject(idx);
-  dropObject(idx);
-  return ret;
-}
-var cachedTextDecoder = new TextDecoder("utf-8", { ignoreBOM: true, fatal: true });
-var cachedTextEncoder = new TextEncoder();
-var cachedUint8ArrayMemory0 = null;
-function getUint8ArrayMemory0() {
-  if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
-    cachedUint8ArrayMemory0 = new Uint8Array(wasmExports.memory.buffer);
-  }
-  return cachedUint8ArrayMemory0;
-}
-function getStringFromWasm0(ptr, len) {
-  ptr = ptr >>> 0;
-  return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
-}
-var WASM_VECTOR_LEN = 0;
-function passStringToWasm0(arg, malloc, realloc) {
-  if (realloc === void 0) {
-    const buf = cachedTextEncoder.encode(arg);
-    const ptr2 = malloc(buf.length, 1) >>> 0;
-    getUint8ArrayMemory0().subarray(ptr2, ptr2 + buf.length).set(buf);
-    WASM_VECTOR_LEN = buf.length;
-    return ptr2;
-  }
-  let len = arg.length;
-  let ptr = malloc(len, 1) >>> 0;
-  const mem = getUint8ArrayMemory0();
-  let offset = 0;
-  for (; offset < len; offset++) {
-    const code = arg.charCodeAt(offset);
-    if (code > 127) break;
-    mem[ptr + offset] = code;
-  }
-  if (offset !== len) {
-    if (offset !== 0) {
-      arg = arg.slice(offset);
-    }
-    ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
-    const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
-    const ret = cachedTextEncoder.encodeInto(arg, view);
-    offset += ret.written;
-  }
-  WASM_VECTOR_LEN = offset;
-  return ptr;
-}
-var cachedDataViewMemory0 = null;
-function getDataViewMemory0() {
-  if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer !== wasmExports.memory.buffer) {
-    cachedDataViewMemory0 = new DataView(wasmExports.memory.buffer);
-  }
-  return cachedDataViewMemory0;
+var MIGRATION_ERROR = "`@kya-os/checkpoint-nextjs/edge-wasm-middleware` was deprecated in Phase-D.9a (legacy `agentshield-wasm` Rust crate retirement). Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs/edge` \u2014 engine-backed via the Rust `kya-os-engine` crate (PDM-1 #2560), runs the full orchestrator including MCP-I envelope verification. See packages/checkpoint-nextjs/README.md for the canonical recipe.";
+var _edgeWasmWarned = false;
+function warnEdgeWasmDeprecated() {
+  if (_edgeWasmWarned) return;
+  _edgeWasmWarned = true;
+  if (typeof process !== "undefined" && process.env?.NODE_ENV === "production") return;
+  console.warn(`[Checkpoint] ${MIGRATION_ERROR}`);
 }
-async function initializeEdgeWasm(wasmModule) {
-  if (wasmInitPromise) {
-    return wasmInitPromise;
-  }
-  wasmInitPromise = (async () => {
-    try {
-      const imports = {
-        "./agentshield_wasm_bg.js": {
-          __wbindgen_object_drop_ref: function(arg0) {
-            dropObject(arg0);
-          },
-          __wbindgen_string_new: function(arg0, arg1) {
-            const ret = getStringFromWasm0(arg0, arg1);
-            return addHeapObject(ret);
-          },
-          __wbindgen_string_get: function(arg0, arg1) {
-            const obj = getObject(arg1);
-            const ret = typeof obj === "string" ? obj : void 0;
-            const ptr1 = ret ? passStringToWasm0(
-              ret,
-              wasmExports.__wbindgen_malloc,
-              wasmExports.__wbindgen_realloc
-            ) : 0;
-            const len1 = WASM_VECTOR_LEN;
-            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
-            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
-          },
-          __wbindgen_throw: function(arg0, arg1) {
-            throw new Error(getStringFromWasm0(arg0, arg1));
-          }
-        },
-        wbg: {
-          __wbindgen_object_drop_ref: function(arg0) {
-            dropObject(arg0);
-          },
-          __wbindgen_string_new: function(arg0, arg1) {
-            const ret = getStringFromWasm0(arg0, arg1);
-            return addHeapObject(ret);
-          },
-          __wbindgen_string_get: function(arg0, arg1) {
-            const obj = getObject(arg1);
-            const ret = typeof obj === "string" ? obj : void 0;
-            const ptr1 = ret ? passStringToWasm0(
-              ret,
-              wasmExports.__wbindgen_malloc,
-              wasmExports.__wbindgen_realloc
-            ) : 0;
-            const len1 = WASM_VECTOR_LEN;
-            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
-            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
-          },
-          __wbindgen_throw: function(arg0, arg1) {
-            throw new Error(getStringFromWasm0(arg0, arg1));
-          }
-        }
-      };
-      const instance = await WebAssembly.instantiate(wasmModule, imports);
-      wasmExports = instance.exports;
-      if (wasmExports.__wbindgen_start) {
-        wasmExports.__wbindgen_start();
-      }
-      console.log(
-        "\u2705 AgentShield: WASM module loaded successfully in Edge Runtime (95-100% confidence enabled)"
-      );
-    } catch (error) {
-      console.error("\u274C AgentShield: Failed to initialize WASM in Edge Runtime:", error);
-      throw error;
-    }
-  })();
-  return wasmInitPromise;
+function __resetEdgeWasmWarningForTests() {
+  _edgeWasmWarned = false;
 }
-async function detectWithWasm(metadata) {
-  if (!wasmExports) {
-    throw new Error("WASM not initialized. Call initializeEdgeWasm first.");
-  }
-  try {
-    const userAgent = metadata.userAgent || "";
-    const ipAddress = metadata.ipAddress || "";
-    const headers = JSON.stringify(metadata.headers);
-    const timestamp = metadata.timestamp;
-    const url = metadata.url || "";
-    const method = metadata.method || "";
-    const clientFingerprint = metadata.clientFingerprint || "";
-    const ptr0 = passStringToWasm0(
-      userAgent,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len0 = WASM_VECTOR_LEN;
-    const ptr1 = passStringToWasm0(
-      ipAddress,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len1 = WASM_VECTOR_LEN;
-    const ptr2 = passStringToWasm0(
-      headers,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len2 = WASM_VECTOR_LEN;
-    const ptr3 = passStringToWasm0(
-      timestamp,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len3 = WASM_VECTOR_LEN;
-    const ptr4 = passStringToWasm0(
-      url,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len4 = WASM_VECTOR_LEN;
-    const ptr5 = passStringToWasm0(
-      method,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len5 = WASM_VECTOR_LEN;
-    const ptr6 = passStringToWasm0(
-      clientFingerprint,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len6 = WASM_VECTOR_LEN;
-    const metadataPtr = wasmExports.jsrequestmetadata_new(
-      ptr0,
-      len0,
-      ptr1,
-      len1,
-      ptr2,
-      len2,
-      ptr3,
-      len3,
-      ptr4,
-      len4,
-      ptr5,
-      len5,
-      ptr6,
-      len6
-    );
-    const resultPtr = wasmExports.detect_agent(metadataPtr);
-    const result = takeObject(resultPtr);
-    wasmExports.__wbg_jsrequestmetadata_free(metadataPtr, 0);
-    const parsedResult = typeof result === "string" ? JSON.parse(result) : result;
-    return {
-      isAgent: parsedResult.is_agent || false,
-      isAiCrawler: parsedResult.is_ai_crawler || false,
-      confidence: parsedResult.confidence || 0,
-      agent: parsedResult.agent,
-      verificationMethod: parsedResult.verification_method || "wasm",
-      riskLevel: parsedResult.risk_level || "low",
-      timestamp: parsedResult.timestamp || metadata.timestamp,
-      reasons: parsedResult.reasons || []
-    };
-  } catch (error) {
-    console.error("WASM detection failed:", error);
-    return {
-      isAgent: false,
-      confidence: 0,
-      verificationMethod: "pattern",
-      riskLevel: "low",
-      timestamp: metadata.timestamp
-    };
-  }
+async function initializeEdgeWasm(_wasmModule) {
+  warnEdgeWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
-function createEdgeWasmMiddleware(config) {
-  const {
-    wasmModule,
-    onAgentDetected,
-    blockOnHighConfidence = false,
-    confidenceThreshold: configThreshold = 0.9,
-    skipPaths = [],
-    blockedResponse = {
-      status: 403,
-      message: "AI agent access restricted",
-      headers: { "Content-Type": "application/json" }
-    }
-  } = config;
-  const confidenceThreshold = checkpointShared.normalizeConfidence(configThreshold, "confidenceThreshold");
-  const initPromise = initializeEdgeWasm(wasmModule);
-  return async function middleware(request) {
-    const path = request.nextUrl.pathname;
-    if (skipPaths.some((skip) => path.startsWith(skip))) {
-      return server.NextResponse.next();
-    }
-    try {
-      await initPromise;
-      const metadata = {
-        userAgent: request.headers.get("user-agent") || void 0,
-        ipAddress: request.headers.get("x-forwarded-for") || request.headers.get("x-real-ip") || void 0,
-        headers: Object.fromEntries(request.headers.entries()),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      const result = await detectWithWasm(metadata);
-      const decision = checkpointShared.evaluateEnforcement(
-        { ...result, confidence: result.confidence * 100 },
-        {
-          confidenceThreshold: confidenceThreshold * 100,
-          defaultAction: blockOnHighConfidence ? "block" : "allow"
-        }
-      );
-      if (onAgentDetected && checkpointShared.shouldEnforce(result)) {
-        await onAgentDetected(result);
-      }
-      if (decision.action === "block") {
-        return server.NextResponse.json(
-          {
-            error: blockedResponse.message,
-            agent: result.agent,
-            confidence: checkpointShared.toPercent(result.confidence)
-            // Convert to 0-100 for display
-          },
-          {
-            status: blockedResponse.status || 403,
-            headers: blockedResponse.headers || {}
-          }
-        );
-      }
-      const response = server.NextResponse.next();
-      if (result.isAgent) {
-        response.headers.set("X-Agent-Detected", result.agent || "unknown");
-        response.headers.set("X-Agent-Confidence", String(checkpointShared.toPercent(result.confidence)));
-        response.headers.set("X-Agent-Verification", result.verificationMethod);
-      }
-      return response;
-    } catch (error) {
-      console.error("Edge WASM middleware error:", error);
-      return server.NextResponse.next();
-    }
-  };
+function createEdgeWasmMiddleware(_config) {
+  warnEdgeWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
 
+exports.__resetEdgeWasmWarningForTests = __resetEdgeWasmWarningForTests;
 exports.createEdgeWasmMiddleware = createEdgeWasmMiddleware;
 exports.initializeEdgeWasm = initializeEdgeWasm;