@kya-os/checkpoint-nextjs 1.1.0 → 1.1.4

package/dist/edge-wasm-middleware.mjs

@@ -1,313 +1,22 @@
-import { NextResponse } from 'next/server';
-import { normalizeConfidence, evaluateEnforcement, shouldEnforce, toPercent } from '@kya-os/checkpoint-shared';
-
 // src/edge-wasm-middleware.ts
-var wasmExports = null;
-var wasmInitPromise = null;
-var heap = new Array(128).fill(void 0);
-heap.push(void 0, null, true, false);
-var heap_next = heap.length;
-function addHeapObject(obj) {
-  if (heap_next === heap.length) heap.push(heap.length + 1);
-  const idx = heap_next;
-  heap_next = heap[idx];
-  heap[idx] = obj;
-  return idx;
-}
-function getObject(idx) {
-  return heap[idx];
-}
-function dropObject(idx) {
-  if (idx < 132) return;
-  heap[idx] = heap_next;
-  heap_next = idx;
-}
-function takeObject(idx) {
-  const ret = getObject(idx);
-  dropObject(idx);
-  return ret;
-}
-var cachedTextDecoder = new TextDecoder("utf-8", { ignoreBOM: true, fatal: true });
-var cachedTextEncoder = new TextEncoder();
-var cachedUint8ArrayMemory0 = null;
-function getUint8ArrayMemory0() {
-  if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
-    cachedUint8ArrayMemory0 = new Uint8Array(wasmExports.memory.buffer);
-  }
-  return cachedUint8ArrayMemory0;
-}
-function getStringFromWasm0(ptr, len) {
-  ptr = ptr >>> 0;
-  return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
-}
-var WASM_VECTOR_LEN = 0;
-function passStringToWasm0(arg, malloc, realloc) {
-  if (realloc === void 0) {
-    const buf = cachedTextEncoder.encode(arg);
-    const ptr2 = malloc(buf.length, 1) >>> 0;
-    getUint8ArrayMemory0().subarray(ptr2, ptr2 + buf.length).set(buf);
-    WASM_VECTOR_LEN = buf.length;
-    return ptr2;
-  }
-  let len = arg.length;
-  let ptr = malloc(len, 1) >>> 0;
-  const mem = getUint8ArrayMemory0();
-  let offset = 0;
-  for (; offset < len; offset++) {
-    const code = arg.charCodeAt(offset);
-    if (code > 127) break;
-    mem[ptr + offset] = code;
-  }
-  if (offset !== len) {
-    if (offset !== 0) {
-      arg = arg.slice(offset);
-    }
-    ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
-    const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
-    const ret = cachedTextEncoder.encodeInto(arg, view);
-    offset += ret.written;
-  }
-  WASM_VECTOR_LEN = offset;
-  return ptr;
-}
-var cachedDataViewMemory0 = null;
-function getDataViewMemory0() {
-  if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer !== wasmExports.memory.buffer) {
-    cachedDataViewMemory0 = new DataView(wasmExports.memory.buffer);
-  }
-  return cachedDataViewMemory0;
+var MIGRATION_ERROR = "`@kya-os/checkpoint-nextjs/edge-wasm-middleware` was deprecated in Phase-D.9a (legacy `agentshield-wasm` Rust crate retirement). Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs/edge` \u2014 engine-backed via the Rust `kya-os-engine` crate (PDM-1 #2560), runs the full orchestrator including MCP-I envelope verification. See packages/checkpoint-nextjs/README.md for the canonical recipe.";
+var _edgeWasmWarned = false;
+function warnEdgeWasmDeprecated() {
+  if (_edgeWasmWarned) return;
+  _edgeWasmWarned = true;
+  if (typeof process !== "undefined" && process.env?.NODE_ENV === "production") return;
+  console.warn(`[Checkpoint] ${MIGRATION_ERROR}`);
 }
-async function initializeEdgeWasm(wasmModule) {
-  if (wasmInitPromise) {
-    return wasmInitPromise;
-  }
-  wasmInitPromise = (async () => {
-    try {
-      const imports = {
-        "./agentshield_wasm_bg.js": {
-          __wbindgen_object_drop_ref: function(arg0) {
-            dropObject(arg0);
-          },
-          __wbindgen_string_new: function(arg0, arg1) {
-            const ret = getStringFromWasm0(arg0, arg1);
-            return addHeapObject(ret);
-          },
-          __wbindgen_string_get: function(arg0, arg1) {
-            const obj = getObject(arg1);
-            const ret = typeof obj === "string" ? obj : void 0;
-            const ptr1 = ret ? passStringToWasm0(
-              ret,
-              wasmExports.__wbindgen_malloc,
-              wasmExports.__wbindgen_realloc
-            ) : 0;
-            const len1 = WASM_VECTOR_LEN;
-            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
-            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
-          },
-          __wbindgen_throw: function(arg0, arg1) {
-            throw new Error(getStringFromWasm0(arg0, arg1));
-          }
-        },
-        wbg: {
-          __wbindgen_object_drop_ref: function(arg0) {
-            dropObject(arg0);
-          },
-          __wbindgen_string_new: function(arg0, arg1) {
-            const ret = getStringFromWasm0(arg0, arg1);
-            return addHeapObject(ret);
-          },
-          __wbindgen_string_get: function(arg0, arg1) {
-            const obj = getObject(arg1);
-            const ret = typeof obj === "string" ? obj : void 0;
-            const ptr1 = ret ? passStringToWasm0(
-              ret,
-              wasmExports.__wbindgen_malloc,
-              wasmExports.__wbindgen_realloc
-            ) : 0;
-            const len1 = WASM_VECTOR_LEN;
-            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
-            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
-          },
-          __wbindgen_throw: function(arg0, arg1) {
-            throw new Error(getStringFromWasm0(arg0, arg1));
-          }
-        }
-      };
-      const instance = await WebAssembly.instantiate(wasmModule, imports);
-      wasmExports = instance.exports;
-      if (wasmExports.__wbindgen_start) {
-        wasmExports.__wbindgen_start();
-      }
-      console.log(
-        "\u2705 AgentShield: WASM module loaded successfully in Edge Runtime (95-100% confidence enabled)"
-      );
-    } catch (error) {
-      console.error("\u274C AgentShield: Failed to initialize WASM in Edge Runtime:", error);
-      throw error;
-    }
-  })();
-  return wasmInitPromise;
+function __resetEdgeWasmWarningForTests() {
+  _edgeWasmWarned = false;
 }
-async function detectWithWasm(metadata) {
-  if (!wasmExports) {
-    throw new Error("WASM not initialized. Call initializeEdgeWasm first.");
-  }
-  try {
-    const userAgent = metadata.userAgent || "";
-    const ipAddress = metadata.ipAddress || "";
-    const headers = JSON.stringify(metadata.headers);
-    const timestamp = metadata.timestamp;
-    const url = metadata.url || "";
-    const method = metadata.method || "";
-    const clientFingerprint = metadata.clientFingerprint || "";
-    const ptr0 = passStringToWasm0(
-      userAgent,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len0 = WASM_VECTOR_LEN;
-    const ptr1 = passStringToWasm0(
-      ipAddress,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len1 = WASM_VECTOR_LEN;
-    const ptr2 = passStringToWasm0(
-      headers,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len2 = WASM_VECTOR_LEN;
-    const ptr3 = passStringToWasm0(
-      timestamp,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len3 = WASM_VECTOR_LEN;
-    const ptr4 = passStringToWasm0(
-      url,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len4 = WASM_VECTOR_LEN;
-    const ptr5 = passStringToWasm0(
-      method,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len5 = WASM_VECTOR_LEN;
-    const ptr6 = passStringToWasm0(
-      clientFingerprint,
-      wasmExports.__wbindgen_malloc,
-      wasmExports.__wbindgen_realloc
-    );
-    const len6 = WASM_VECTOR_LEN;
-    const metadataPtr = wasmExports.jsrequestmetadata_new(
-      ptr0,
-      len0,
-      ptr1,
-      len1,
-      ptr2,
-      len2,
-      ptr3,
-      len3,
-      ptr4,
-      len4,
-      ptr5,
-      len5,
-      ptr6,
-      len6
-    );
-    const resultPtr = wasmExports.detect_agent(metadataPtr);
-    const result = takeObject(resultPtr);
-    wasmExports.__wbg_jsrequestmetadata_free(metadataPtr, 0);
-    const parsedResult = typeof result === "string" ? JSON.parse(result) : result;
-    return {
-      isAgent: parsedResult.is_agent || false,
-      isAiCrawler: parsedResult.is_ai_crawler || false,
-      confidence: parsedResult.confidence || 0,
-      agent: parsedResult.agent,
-      verificationMethod: parsedResult.verification_method || "wasm",
-      riskLevel: parsedResult.risk_level || "low",
-      timestamp: parsedResult.timestamp || metadata.timestamp,
-      reasons: parsedResult.reasons || []
-    };
-  } catch (error) {
-    console.error("WASM detection failed:", error);
-    return {
-      isAgent: false,
-      confidence: 0,
-      verificationMethod: "pattern",
-      riskLevel: "low",
-      timestamp: metadata.timestamp
-    };
-  }
+async function initializeEdgeWasm(_wasmModule) {
+  warnEdgeWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
-function createEdgeWasmMiddleware(config) {
-  const {
-    wasmModule,
-    onAgentDetected,
-    blockOnHighConfidence = false,
-    confidenceThreshold: configThreshold = 0.9,
-    skipPaths = [],
-    blockedResponse = {
-      status: 403,
-      message: "AI agent access restricted",
-      headers: { "Content-Type": "application/json" }
-    }
-  } = config;
-  const confidenceThreshold = normalizeConfidence(configThreshold, "confidenceThreshold");
-  const initPromise = initializeEdgeWasm(wasmModule);
-  return async function middleware(request) {
-    const path = request.nextUrl.pathname;
-    if (skipPaths.some((skip) => path.startsWith(skip))) {
-      return NextResponse.next();
-    }
-    try {
-      await initPromise;
-      const metadata = {
-        userAgent: request.headers.get("user-agent") || void 0,
-        ipAddress: request.headers.get("x-forwarded-for") || request.headers.get("x-real-ip") || void 0,
-        headers: Object.fromEntries(request.headers.entries()),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      const result = await detectWithWasm(metadata);
-      const decision = evaluateEnforcement(
-        { ...result, confidence: result.confidence * 100 },
-        {
-          confidenceThreshold: confidenceThreshold * 100,
-          defaultAction: blockOnHighConfidence ? "block" : "allow"
-        }
-      );
-      if (onAgentDetected && shouldEnforce(result)) {
-        await onAgentDetected(result);
-      }
-      if (decision.action === "block") {
-        return NextResponse.json(
-          {
-            error: blockedResponse.message,
-            agent: result.agent,
-            confidence: toPercent(result.confidence)
-            // Convert to 0-100 for display
-          },
-          {
-            status: blockedResponse.status || 403,
-            headers: blockedResponse.headers || {}
-          }
-        );
-      }
-      const response = NextResponse.next();
-      if (result.isAgent) {
-        response.headers.set("X-Agent-Detected", result.agent || "unknown");
-        response.headers.set("X-Agent-Confidence", String(toPercent(result.confidence)));
-        response.headers.set("X-Agent-Verification", result.verificationMethod);
-      }
-      return response;
-    } catch (error) {
-      console.error("Edge WASM middleware error:", error);
-      return NextResponse.next();
-    }
-  };
+function createEdgeWasmMiddleware(_config) {
+  warnEdgeWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
 
-export { createEdgeWasmMiddleware, initializeEdgeWasm };
+export { __resetEdgeWasmWarningForTests, createEdgeWasmMiddleware, initializeEdgeWasm };

package/dist/index.js

@@ -698,7 +698,9 @@ var EdgeSessionTracker = class {
    */
   async track(_request, response, result) {
     try {
-      if (!this.config.enabled || !checkpointShared.shouldEnforce(result)) {
+      const detectedName = result.detectedAgent?.name;
+      const isEnforceable = result.isAgent || result.isAiCrawler || checkpointShared.isKnownAiCrawler(detectedName);
+      if (!this.config.enabled || !isEnforceable) {
         return response;
       }
       const sessionData = {

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { verifyRequest, renderDecisionAsResponse } from '@kya-os/checkpoint-wasm-runtime/orchestrator';
 import { makeSystemClock, makePolicyEvaluator, makeReputationOracle, makeStatusListCache, makeDidResolver } from '@kya-os/checkpoint-wasm-runtime/adapters';
 import { NextResponse } from 'next/server';
-import { shouldEnforce, createEvaluationContext, evaluatePolicy, ENFORCEMENT_ACTIONS, PolicyConfigSchema, DEFAULT_POLICY, matchPath, acceptsHtml, encodeVerdictCookie, classifyResponseShape, BLOCKED_PATH, createPolicyFetcher, VERDICT_COOKIE_NAME } from '@kya-os/checkpoint-shared';
+import { isKnownAiCrawler, createEvaluationContext, evaluatePolicy, ENFORCEMENT_ACTIONS, PolicyConfigSchema, DEFAULT_POLICY, matchPath, acceptsHtml, encodeVerdictCookie, classifyResponseShape, BLOCKED_PATH, createPolicyFetcher, VERDICT_COOKIE_NAME } from '@kya-os/checkpoint-shared';
 export { DEFAULT_POLICY, ENFORCEMENT_ACTIONS, createEvaluationContext, evaluatePolicy } from '@kya-os/checkpoint-shared';
 
 // src/middleware-node.ts
@@ -697,7 +697,9 @@ var EdgeSessionTracker = class {
    */
   async track(_request, response, result) {
     try {
-      if (!this.config.enabled || !shouldEnforce(result)) {
+      const detectedName = result.detectedAgent?.name;
+      const isEnforceable = result.isAgent || result.isAiCrawler || isKnownAiCrawler(detectedName);
+      if (!this.config.enabled || !isEnforceable) {
         return response;
       }
       const sessionData = {

package/dist/nodejs-wasm-loader.d.mts

@@ -1,25 +1,42 @@
 /**
- * Node.js Runtime WASM Loader for AgentShield
+ * @deprecated Phase-D.9a — legacy Node.js WASM loader for the retired
+ * `agentshield-wasm` Rust crate. This file used `fs.readFileSync` to
+ * locate + load the legacy detector's WASM binary into the
+ * `@kya-os/checkpoint` `AgentDetector` class via `setWasmModule`. Both
+ * the WASM crate (Phase-D.9a/D.9b) and the AgentDetector class
+ * (AgentDetector-Deletion-2, next minor) are slated for deletion.
  *
- * This loader uses fs.readFileSync to load WASM in Node.js runtime.
- * It provides full cryptographic verification capabilities.
+ * Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs` — it
+ * loads the canonical `kya-os-engine` WASM automatically via
+ * `@kya-os/checkpoint-wasm-runtime`'s loaders. No manual `fs.readFileSync`
+ * needed; the runtime handles bundler resolution across Next.js Node +
+ * Edge runtimes.
  */
+/** @internal — test-only reset for the one-shot warn latch. */
+declare function __resetNodejsWasmWarningForTests(): void;
 /**
- * Load WASM module using Node.js fs module
- * This only works in Node.js runtime, not Edge Runtime
+ * @deprecated Removed in Phase-D.9a. Use `withCheckpoint` from
+ * `@kya-os/checkpoint-nextjs` — it auto-loads `kya-os-engine` WASM
+ * via `@kya-os/checkpoint-wasm-runtime`. Throws on invocation; surface
+ * exists only so static analysis sees the historical export.
  */
 declare function loadWasmNodejs(): Promise<boolean>;
 /**
- * Check if we're in Node.js runtime
+ * @deprecated Removed in Phase-D.9a. The runtime guard is no longer
+ * needed; `@kya-os/checkpoint-wasm-runtime`'s loaders auto-detect
+ * runtime via the `"node"` / `"edge-runtime"` export conditions.
+ * Throws on invocation; surface exists only for export-compatibility.
  */
 declare function isNodejsRuntime(): boolean;
 /**
- * Get the loaded WASM module
+ * @deprecated Removed in Phase-D.9a. Migrate to `withCheckpoint`.
+ * Throws on invocation; surface exists only for export-compatibility.
  */
 declare function getWasmModule(): WebAssembly.Module | null;
 /**
- * Check if WASM is initialized
+ * @deprecated Removed in Phase-D.9a. Migrate to `withCheckpoint`.
+ * Throws on invocation; surface exists only for export-compatibility.
  */
 declare function isWasmInitialized(): boolean;
 
-export { getWasmModule, isNodejsRuntime, isWasmInitialized, loadWasmNodejs };
+export { __resetNodejsWasmWarningForTests, getWasmModule, isNodejsRuntime, isWasmInitialized, loadWasmNodejs };

package/dist/nodejs-wasm-loader.d.ts

@@ -1,25 +1,42 @@
 /**
- * Node.js Runtime WASM Loader for AgentShield
+ * @deprecated Phase-D.9a — legacy Node.js WASM loader for the retired
+ * `agentshield-wasm` Rust crate. This file used `fs.readFileSync` to
+ * locate + load the legacy detector's WASM binary into the
+ * `@kya-os/checkpoint` `AgentDetector` class via `setWasmModule`. Both
+ * the WASM crate (Phase-D.9a/D.9b) and the AgentDetector class
+ * (AgentDetector-Deletion-2, next minor) are slated for deletion.
  *
- * This loader uses fs.readFileSync to load WASM in Node.js runtime.
- * It provides full cryptographic verification capabilities.
+ * Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs` — it
+ * loads the canonical `kya-os-engine` WASM automatically via
+ * `@kya-os/checkpoint-wasm-runtime`'s loaders. No manual `fs.readFileSync`
+ * needed; the runtime handles bundler resolution across Next.js Node +
+ * Edge runtimes.
  */
+/** @internal — test-only reset for the one-shot warn latch. */
+declare function __resetNodejsWasmWarningForTests(): void;
 /**
- * Load WASM module using Node.js fs module
- * This only works in Node.js runtime, not Edge Runtime
+ * @deprecated Removed in Phase-D.9a. Use `withCheckpoint` from
+ * `@kya-os/checkpoint-nextjs` — it auto-loads `kya-os-engine` WASM
+ * via `@kya-os/checkpoint-wasm-runtime`. Throws on invocation; surface
+ * exists only so static analysis sees the historical export.
  */
 declare function loadWasmNodejs(): Promise<boolean>;
 /**
- * Check if we're in Node.js runtime
+ * @deprecated Removed in Phase-D.9a. The runtime guard is no longer
+ * needed; `@kya-os/checkpoint-wasm-runtime`'s loaders auto-detect
+ * runtime via the `"node"` / `"edge-runtime"` export conditions.
+ * Throws on invocation; surface exists only for export-compatibility.
  */
 declare function isNodejsRuntime(): boolean;
 /**
- * Get the loaded WASM module
+ * @deprecated Removed in Phase-D.9a. Migrate to `withCheckpoint`.
+ * Throws on invocation; surface exists only for export-compatibility.
  */
 declare function getWasmModule(): WebAssembly.Module | null;
 /**
- * Check if WASM is initialized
+ * @deprecated Removed in Phase-D.9a. Migrate to `withCheckpoint`.
+ * Throws on invocation; surface exists only for export-compatibility.
  */
 declare function isWasmInitialized(): boolean;
 
-export { getWasmModule, isNodejsRuntime, isWasmInitialized, loadWasmNodejs };
+export { __resetNodejsWasmWarningForTests, getWasmModule, isNodejsRuntime, isWasmInitialized, loadWasmNodejs };

package/dist/nodejs-wasm-loader.js

@@ -1,92 +1,35 @@
 'use strict';
 
-var fs = require('fs');
-var path = require('path');
-var checkpoint = require('@kya-os/checkpoint');
-
-function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
-
-var fs__default = /*#__PURE__*/_interopDefault(fs);
-var path__default = /*#__PURE__*/_interopDefault(path);
-
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-var wasmInitialized = false;
-var wasmModule = null;
+// src/nodejs-wasm-loader.ts
+var MIGRATION_ERROR = "`@kya-os/checkpoint-nextjs`'s `loadWasmNodejs` / `isNodejsRuntime` / `getWasmModule` / `isWasmInitialized` were deprecated in Phase-D.9a (legacy `agentshield-wasm` Rust crate retirement). The legacy `AgentDetector` class they fed is slated for deletion in AgentDetector-Deletion-2 (next minor). Migrate to `withCheckpoint` from `@kya-os/checkpoint-nextjs` \u2014 engine-backed via the Rust `kya-os-engine` crate, with automatic WASM loading via `@kya-os/checkpoint-wasm-runtime`. See packages/checkpoint-nextjs/README.md for the canonical recipe.";
+var _nodejsWasmWarned = false;
+function warnNodejsWasmDeprecated() {
+  if (_nodejsWasmWarned) return;
+  _nodejsWasmWarned = true;
+  if (typeof process !== "undefined" && process.env?.NODE_ENV === "production") return;
+  console.warn(`[Checkpoint] ${MIGRATION_ERROR}`);
+}
+function __resetNodejsWasmWarningForTests() {
+  _nodejsWasmWarned = false;
+}
 async function loadWasmNodejs() {
-  if (wasmInitialized) {
-    return true;
-  }
-  try {
-    const possiblePaths = [
-      // In node_modules (most likely)
-      path__default.default.join(
-        process.cwd(),
-        "node_modules",
-        "@kya-os",
-        "agentshield",
-        "dist",
-        "wasm",
-        "agentshield_wasm_bg.wasm"
-      ),
-      // In project root (if user copied it)
-      path__default.default.join(process.cwd(), "agentshield_wasm_bg.wasm"),
-      // Relative to current file
-      path__default.default.join(
-        __dirname,
-        "..",
-        "..",
-        "..",
-        "agentshield",
-        "dist",
-        "wasm",
-        "agentshield_wasm_bg.wasm"
-      )
-    ];
-    let wasmBuffer = null;
-    let loadedPath = null;
-    for (const wasmPath of possiblePaths) {
-      try {
-        if (fs__default.default.existsSync(wasmPath)) {
-          wasmBuffer = fs__default.default.readFileSync(wasmPath);
-          loadedPath = wasmPath;
-          break;
-        }
-      } catch (e) {
-        continue;
-      }
-    }
-    if (!wasmBuffer) {
-      console.warn("AgentShield: WASM file not found in any expected location");
-      return false;
-    }
-    const bytes = new Uint8Array(wasmBuffer);
-    wasmModule = await WebAssembly.compile(bytes);
-    checkpoint.setWasmModule(wasmModule);
-    wasmInitialized = true;
-    console.log(`\u2705 AgentShield: WASM loaded successfully from ${loadedPath} (Node.js runtime)`);
-    console.log("\u{1F510} Cryptographic verification enabled (95-100% confidence)");
-    return true;
-  } catch (error) {
-    console.warn("\u26A0\uFE0F AgentShield: Failed to load WASM in Node.js runtime:", error);
-    console.log("\u{1F4CA} Falling back to pattern detection (85% confidence)");
-    return false;
-  }
+  warnNodejsWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
 function isNodejsRuntime() {
-  return typeof process !== "undefined" && typeof process.versions !== "undefined" && typeof process.versions.node !== "undefined" && typeof __require !== "undefined";
+  warnNodejsWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
 function getWasmModule() {
-  return wasmModule;
+  warnNodejsWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
 function isWasmInitialized() {
-  return wasmInitialized;
+  warnNodejsWasmDeprecated();
+  throw new Error(MIGRATION_ERROR);
 }
 
+exports.__resetNodejsWasmWarningForTests = __resetNodejsWasmWarningForTests;
 exports.getWasmModule = getWasmModule;
 exports.isNodejsRuntime = isNodejsRuntime;
 exports.isWasmInitialized = isWasmInitialized;