@mapick/cost-firewall 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mapick
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,161 @@
+# @mapick/cost-firewall
+
+![Version](https://img.shields.io/github/v/tag/mapick-ai/cost-firewall?label=version&color=2563eb)
+![License](https://img.shields.io/github/license/mapick-ai/cost-firewall?color=16a34a)
+![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=fff)
+![OpenClaw Plugin](https://img.shields.io/badge/OpenClaw-Plugin-8B5CF6)
+
+AI Call Firewall — real-time monitoring, budget control, automatic circuit breaker.
+
+---
+
+## Install
+
+```bash
+openclaw plugins install @mapick/cost-firewall
+openclaw plugins enable mapick-firewall
+openclaw gateway restart
+openclaw firewall status
+```
+
+Dashboard: **http://localhost:18789/mapick/dashboard**
+
+---
+
+## Commands
+
+| In Chat | CLI | Action |
+|---|---|---|
+| `/firewall` | `openclaw firewall status` | Status |
+| `/firewall stop` | `openclaw firewall stop` | 🛑 Emergency stop |
+| `/firewall resume` | `openclaw firewall resume` | ▶️ Resume |
+| — | `openclaw firewall mode observe\|protect` | Toggle mode |
+| `/firewall budget` | `openclaw firewall budget set\|reset` | Daily token limit |
+| `/firewall log` | `openclaw firewall log` | Recent events |
+| — | `openclaw firewall reset <source>` | Clear cooldown |
+
+---
+
+## Config
+
+```jsonc
+{
+  "plugins": {
+    "entries": {
+      "mapick-firewall": {
+        "enabled": true,
+        "config": {
+          "dailyTokenLimit": null,
+          "breaker": {
+            "consecutiveFailures": 3,
+            "cooldownSec": 30,
+            "tokenVelocityThreshold": 100000,
+            "tokenVelocityWindowSec": 60,
+            "callFrequencyThreshold": 30,
+            "callFrequencyWindowSec": 60
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+---
+
+## Defaults
+
+| Rule | Threshold | Window | Cooldown |
+|---|---|---|---|
+| Consecutive Failures | 3 | — | 30s |
+| Token Velocity | 100K tokens | 60s | 30s |
+| Call Frequency | 30 calls | 60s | 30s |
+| Daily Token Limit | unlimited | — | — |
+
+---
+
+## AI Installation Checklist
+
+Use this checklist when installing the firewall automatically:
+
+```markdown
+## Installation Steps
+
+1. Install the npm package:
+   ```bash
+   openclaw plugins install @mapick/cost-firewall
+   ```
+
+2. Enable the plugin:
+   ```bash
+   openclaw plugins enable mapick-firewall
+   ```
+
+3. Verify it's registered:
+   ```bash
+   openclaw plugins list | grep mapick-firewall
+   ```
+   Expected: should show `mapick-firewall` in the list.
+
+4. Restart gateway:
+   ```bash
+   openclaw gateway restart
+   ```
+
+5. Verify it's working:
+   ```bash
+   openclaw firewall status
+   ```
+   Expected: returns JSON with mode, today_tokens, today_blocked, etc.
+
+6. Optionally, set a daily token budget:
+   ```bash
+   openclaw firewall budget set 500000
+   ```
+
+## Routing calls through the firewall
+
+To route AI calls through the firewall, configure the model with `mapick/` prefix:
+
+```json
+{
+  "agents": {
+    "defaults": {
+      "model": {
+        "primary": "mapick/deepseek/deepseek-chat",
+        "fallbacks": ["mapick/anthropic/claude-sonnet-4-20250514"]
+      }
+    }
+  }
+}
+```
+
+Format: `mapick/<upstream>/<model-id>`
+Supported upstreams: `openai`, `anthropic`, `deepseek`, `openrouter`, `qwen`
+
+## Validation
+
+After installation, the AI should verify:
+- [ ] `openclaw plugins list` shows `mapick-firewall` (enabled)
+- [ ] `openclaw firewall status` returns valid JSON
+- [ ] Dashboard accessible at http://localhost:18789/mapick/dashboard
+- [ ] Model config uses `mapick/` prefix if firewall protection is desired
+- [ ] Fallbacks also use `mapick/` prefix (non-mapick fallbacks bypass the firewall)
+```
+
+---
+
+## Development
+
+```bash
+pnpm install
+pnpm build
+pnpm test
+pnpm dev          # tsc --watch
+```
+
+See [RELEASE.md](./RELEASE.md) for release process.
+
+## License
+
+MIT

package/dist/breaker.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Breaker logic
+ *
+ * Three rules:
+ * 1. Consecutive failures (consecutiveFailures)
+ * 2. Token velocity (tokenVelocity) — token consumption exceeds threshold within window
+ * 3. Call frequency (callFrequency) — call count exceeds threshold within window
+ */
+import type { FirewallConfig, SourceKey } from "./types.js";
+export declare class Breaker {
+    private states;
+    private config;
+    constructor(config: FirewallConfig);
+    private getState;
+    recordFailure(source: SourceKey): void;
+    recordSuccess(source: SourceKey): void;
+    recordTokens(source: SourceKey, tokens: number): string | undefined;
+    recordCall(source: SourceKey): string | undefined;
+    isCoolingDown(source: SourceKey): boolean;
+    getBlockedReason(source: SourceKey): string | undefined;
+    reset(source: SourceKey): void;
+    getCooldownRemaining(source: SourceKey): number;
+    /** Return list of all cooling sources */
+    getCoolingSources(): {
+        source: string;
+        reason: string;
+        remainingSec: number;
+    }[];
+}
+//# sourceMappingURL=breaker.d.ts.map

package/dist/breaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"breaker.d.ts","sourceRoot":"","sources":["../src/breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAgB,MAAM,YAAY,CAAC;AAoB1E,qBAAa,OAAO;IAClB,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,EAAE,cAAc;IAWlC,OAAO,CAAC,QAAQ;IAchB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAStC,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAOtC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAuBnE,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAqBjD,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO;IAYzC,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAIvD,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAI9B,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM;IAM/C,yCAAyC;IACzC,iBAAiB,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE;CAchF"}

package/dist/breaker.js

@@ -0,0 +1,131 @@
+/**
+ * Breaker logic
+ *
+ * Three rules:
+ * 1. Consecutive failures (consecutiveFailures)
+ * 2. Token velocity (tokenVelocity) — token consumption exceeds threshold within window
+ * 3. Call frequency (callFrequency) — call count exceeds threshold within window
+ */
+const DEFAULT_BREAKER = {
+    consecutiveFailures: 3,
+    cooldownSec: 30,
+    tokenVelocityWindowSec: 60,
+    tokenVelocityThreshold: 100000,
+    callFrequencyWindowSec: 60,
+    callFrequencyThreshold: 30,
+};
+export class Breaker {
+    states = new Map();
+    config;
+    constructor(config) {
+        this.config = {
+            consecutiveFailures: config.breaker?.consecutiveFailures ?? DEFAULT_BREAKER.consecutiveFailures,
+            cooldownSec: config.breaker?.cooldownSec ?? DEFAULT_BREAKER.cooldownSec,
+            tokenVelocityWindowSec: config.breaker?.tokenVelocityWindowSec ?? DEFAULT_BREAKER.tokenVelocityWindowSec,
+            tokenVelocityThreshold: config.breaker?.tokenVelocityThreshold ?? DEFAULT_BREAKER.tokenVelocityThreshold,
+            callFrequencyWindowSec: config.breaker?.callFrequencyWindowSec ?? DEFAULT_BREAKER.callFrequencyWindowSec,
+            callFrequencyThreshold: config.breaker?.callFrequencyThreshold ?? DEFAULT_BREAKER.callFrequencyThreshold,
+        };
+    }
+    getState(source) {
+        if (!this.states.has(source)) {
+            this.states.set(source, {
+                source,
+                consecutiveFailures: 0,
+                tokenHistory: [],
+                callTimestamps: [],
+            });
+        }
+        return this.states.get(source);
+    }
+    // ----- Consecutive failures -----
+    recordFailure(source) {
+        const state = this.getState(source);
+        state.consecutiveFailures++;
+        if (state.consecutiveFailures >= this.config.consecutiveFailures && this.config.consecutiveFailures > 0) {
+            state.brokenUntil = Date.now() + this.config.cooldownSec * 1000;
+            state.reason = "consecutive_failures";
+        }
+    }
+    recordSuccess(source) {
+        const state = this.getState(source);
+        state.consecutiveFailures = 0;
+    }
+    // ----- Token velocity (sliding window) -----
+    recordTokens(source, tokens) {
+        const state = this.getState(source);
+        const now = Date.now();
+        const windowMs = this.config.tokenVelocityWindowSec * 1000;
+        const threshold = this.config.tokenVelocityThreshold;
+        if (threshold <= 0)
+            return undefined;
+        state.tokenHistory.push({ ts: now, tokens });
+        // Purge expired records
+        state.tokenHistory = state.tokenHistory.filter((h) => now - h.ts < windowMs);
+        const total = state.tokenHistory.reduce((sum, h) => sum + h.tokens, 0);
+        if (total >= threshold) {
+            state.brokenUntil = now + this.config.cooldownSec * 1000;
+            state.reason = "token_velocity";
+            return "token_velocity";
+        }
+        return undefined;
+    }
+    // ----- Call frequency (sliding window) -----
+    recordCall(source) {
+        const state = this.getState(source);
+        const now = Date.now();
+        const windowMs = this.config.callFrequencyWindowSec * 1000;
+        const threshold = this.config.callFrequencyThreshold;
+        if (threshold <= 0)
+            return undefined;
+        state.callTimestamps.push(now);
+        state.callTimestamps = state.callTimestamps.filter((t) => now - t < windowMs);
+        if (state.callTimestamps.length >= threshold) {
+            state.brokenUntil = now + this.config.cooldownSec * 1000;
+            state.reason = "call_frequency";
+            return "call_frequency";
+        }
+        return undefined;
+    }
+    // ----- Common -----
+    isCoolingDown(source) {
+        const state = this.getState(source);
+        if (!state.brokenUntil)
+            return false;
+        if (Date.now() > state.brokenUntil) {
+            state.brokenUntil = undefined;
+            state.reason = undefined;
+            state.consecutiveFailures = 0;
+            return false;
+        }
+        return true;
+    }
+    getBlockedReason(source) {
+        return this.isCoolingDown(source) ? this.getState(source).reason : undefined;
+    }
+    reset(source) {
+        this.states.delete(source);
+    }
+    getCooldownRemaining(source) {
+        const state = this.getState(source);
+        if (!state.brokenUntil)
+            return 0;
+        return Math.max(0, state.brokenUntil - Date.now());
+    }
+    /** Return list of all cooling sources */
+    getCoolingSources() {
+        const now = Date.now();
+        const result = [];
+        for (const [source, state] of this.states) {
+            if (state.brokenUntil && now < state.brokenUntil) {
+                result.push({
+                    source,
+                    reason: state.reason ?? "unknown",
+                    remainingSec: Math.max(0, Math.round((state.brokenUntil - now) / 1000)),
+                });
+            }
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=breaker.js.map

package/dist/breaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"breaker.js","sourceRoot":"","sources":["../src/breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,eAAe,GAAkB;IACrC,mBAAmB,EAAE,CAAC;IACtB,WAAW,EAAE,EAAE;IACf,sBAAsB,EAAE,EAAE;IAC1B,sBAAsB,EAAE,MAAM;IAC9B,sBAAsB,EAAE,EAAE;IAC1B,sBAAsB,EAAE,EAAE;CAC3B,CAAC;AAEF,MAAM,OAAO,OAAO;IACV,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,MAAM,CAAgB;IAE9B,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG;YACZ,mBAAmB,EAAE,MAAM,CAAC,OAAO,EAAE,mBAAmB,IAAI,eAAe,CAAC,mBAAmB;YAC/F,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,eAAe,CAAC,WAAW;YACvE,sBAAsB,EAAE,MAAM,CAAC,OAAO,EAAE,sBAAsB,IAAI,eAAe,CAAC,sBAAsB;YACxG,sBAAsB,EAAE,MAAM,CAAC,OAAO,EAAE,sBAAsB,IAAI,eAAe,CAAC,sBAAsB;YACxG,sBAAsB,EAAE,MAAM,CAAC,OAAO,EAAE,sBAAsB,IAAI,eAAe,CAAC,sBAAsB;YACxG,sBAAsB,EAAE,MAAM,CAAC,OAAO,EAAE,sBAAsB,IAAI,eAAe,CAAC,sBAAsB;SACzG,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,MAAiB;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;gBACtB,MAAM;gBACN,mBAAmB,EAAE,CAAC;gBACtB,YAAY,EAAE,EAAE;gBAChB,cAAc,EAAE,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;IAClC,CAAC;IAED,mCAAmC;IAEnC,aAAa,CAAC,MAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;YACxG,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YAChE,KAAK,CAAC,MAAM,GAAG,sBAAsB,CAAC;QACxC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,MAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,8CAA8C;IAE9C,YAAY,CAAC,MAAiB,EAAE,MAAc;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAErD,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAErC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,wBAAwB;QACxB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;QAE7E,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YACzD,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC;YAChC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,8CAA8C;IAE9C,UAAU,CAAC,MAAiB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAErD,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAErC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAE9E,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC7C,KAAK,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YACzD,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC;YAChC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB;IAErB,aAAa,CAAC,MAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;YAC9B,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;YACzB,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,MAAiB;QAChC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,MAAiB;QACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,oBAAoB,CAAC,MAAiB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,yCAAyC;IACzC,iBAAiB;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAA+D,EAAE,CAAC;QAC9E,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM;oBACN,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;oBACjC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;iBACxE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/cli/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * CLI command implementation
+ *
+ * Register openclaw mapick <subcommand> command group
+ */
+import type { FirewallState } from "../state.js";
+import { EventStore } from "../store.js";
+import type { FirewallEvent } from "../types.js";
+/** Aggregate today's stats from JSONL */
+export declare function aggregateFromJsonl(store: EventStore, memTokens: number, memBlocked: number): Promise<{
+    today_tokens: number;
+    today_blocked: number;
+    events: FirewallEvent[];
+}>;
+export declare function registerCli(api: any, state: FirewallState, store: EventStore): void;
+export declare function getStatus(state: FirewallState, store?: EventStore): Promise<object>;
+export declare function getLog(store: EventStore, count: number): Promise<object[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqBjD,yCAAyC;AACzC,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1G,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB,CAAC,CAmBD;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAwHnF;AAED,wBAAsB,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDzF;AAED,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAKhF"}

package/dist/cli/index.js

@@ -0,0 +1,244 @@
+/**
+ * CLI command implementation
+ *
+ * Register openclaw mapick <subcommand> command group
+ */
+import { readFile } from "node:fs/promises";
+import http from "node:http";
+const API_BASE = "http://127.0.0.1:18789";
+function apiGet(path) {
+    return new Promise((resolve) => {
+        http.get(`${API_BASE}${path}`, () => resolve()).on("error", () => resolve());
+    });
+}
+function apiPost(body) {
+    return new Promise((resolve) => {
+        const data = JSON.stringify(body);
+        const url = new URL(`${API_BASE}/mapick/api/config`);
+        const req = http.request(url, { method: "POST", headers: { "Content-Type": "application/json" } }, () => resolve());
+        req.on("error", () => resolve());
+        req.write(data);
+        req.end();
+    });
+}
+/** Aggregate today's stats from JSONL */
+export async function aggregateFromJsonl(store, memTokens, memBlocked) {
+    const todayStart = new Date();
+    todayStart.setHours(0, 0, 0, 0);
+    const todayTs = todayStart.getTime();
+    const events = [];
+    try {
+        const raw = await readFile(store.getEventsFilePath(), "utf-8");
+        for (const line of raw.trim().split("\n")) {
+            try {
+                const e = JSON.parse(line);
+                if (e.timestamp >= todayTs)
+                    events.push(e);
+            }
+            catch { /* skip */ }
+        }
+    }
+    catch { /* file not found */ }
+    const jsonlTokens = events.filter((e) => e.type === "model_call_ended").reduce((sum, e) => sum + (e.estimatedCost ?? 0), 0);
+    const jsonlBlocked = events.filter((e) => e.type === "blocked").length;
+    return { today_tokens: Math.max(memTokens, jsonlTokens), today_blocked: Math.max(memBlocked, jsonlBlocked), events };
+}
+export function registerCli(api, state, store) {
+    api.registerCli(({ program }) => {
+        const firewall = program.command("firewall").description("Mapick Cost Firewall commands");
+        firewall.command("status")
+            .description("Show firewall status")
+            .action(async () => {
+            const agg = await aggregateFromJsonl(store, state.globalStats.todayTokens, state.globalStats.todayBlocked);
+            const cooling = state.breaker.getCoolingSources();
+            console.log(JSON.stringify({
+                mode: state.globalStats.mode,
+                emergency_stop: state.globalStats.emergencyStop,
+                today_tokens: agg.today_tokens,
+                today_blocked: agg.today_blocked,
+                daily_token_limit: state.config.dailyTokenLimit,
+                cooldown_sec: state.config.breaker?.cooldownSec,
+                cooling_sources: cooling,
+            }, null, 2));
+        });
+        firewall.command("reset")
+            .description("Reset a source from cooldown")
+            .argument("<source>", "Source name to reset")
+            .action((source) => {
+            state.breaker.reset(source);
+            console.log(`Source ${source} reset.`);
+        });
+        firewall.command("mode")
+            .description("Switch mode (observe|protect)")
+            .argument("<mode>", "observe or protect")
+            .action(async (mode) => {
+            if (mode !== "observe" && mode !== "protect") {
+                console.error("Invalid mode. Use 'observe' or 'protect'.");
+                return;
+            }
+            state.setMode(mode);
+            await apiPost({ mode });
+            console.log(`Mode set to ${mode}`);
+        });
+        firewall.command("stop")
+            .description("Emergency stop all AI calls")
+            .action(async () => {
+            state.setEmergencyStop(true);
+            await apiPost({});
+            await apiGet("/mapick/api/stop");
+            console.log("Emergency stop activated.");
+        });
+        firewall.command("resume")
+            .description("Resume AI calls after emergency stop")
+            .action(async () => {
+            state.setEmergencyStop(false);
+            await apiGet("/mapick/api/resume");
+            console.log("Resumed.");
+        });
+        firewall.command("budget")
+            .description("Set or reset daily token limit")
+            .argument("<action>", "set <amount> or reset")
+            .argument("[amount]", "Token count")
+            .action(async (action, amount) => {
+            // Update via gateway's /config API (don't write file directly to avoid breaking format)
+            const http = await import("node:http");
+            let body;
+            if (action === "set" && amount) {
+                body = JSON.stringify({ dailyTokenLimit: parseInt(amount, 10) });
+                state.config.dailyTokenLimit = parseInt(amount, 10);
+            }
+            else if (action === "reset") {
+                body = JSON.stringify({ dailyTokenLimit: null });
+                state.config.dailyTokenLimit = null;
+            }
+            else {
+                console.error("Usage: firewall budget set <amount> | firewall budget reset");
+                return;
+            }
+            // Write to memory + notify gateway (fire-and-forget)
+            const url = new URL("http://127.0.0.1:18789/mapick/api/config");
+            const req = http.request(url, { method: "POST", headers: { "Content-Type": "application/json" } }, (res) => {
+                let data = "";
+                res.on("data", (c) => data += c);
+                res.on("end", () => {
+                    try {
+                        const d = JSON.parse(data);
+                        console.log(d.ok ? "Saved." : "Error: " + (d.error || "unknown"));
+                    }
+                    catch {
+                        console.log("Config updated.");
+                    }
+                });
+            });
+            req.on("error", () => console.log("Config updated (gateway unreachable, memory only)."));
+            req.write(body);
+            req.end();
+        });
+        firewall.command("log")
+            .description("Show recent events")
+            .option("--last <count>", "Number of events", "10")
+            .action(async (opts) => {
+            const count = parseInt(opts.last, 10) || 10;
+            try {
+                const raw = await readFile(store.getEventsFilePath(), "utf-8");
+                const lines = raw.trim().split("\n");
+                const recent = lines.slice(-count).map((l) => {
+                    try {
+                        return JSON.parse(l);
+                    }
+                    catch {
+                        return null;
+                    }
+                }).filter(Boolean);
+                for (const e of recent) {
+                    const t = new Date(e.timestamp).toISOString().slice(11, 19);
+                    const cost = e.estimatedCost ? `${Math.round(e.estimatedCost ?? 0)}t` : "";
+                    console.log(`${t} | ${e.type.padEnd(22)} | ${(e.provider ?? "").padEnd(12)} | ${(e.model ?? "").padEnd(30)} | ${(e.outcome ?? "").padEnd(10)} | ${cost}`);
+                }
+            }
+            catch {
+                console.log("No events recorded yet.");
+            }
+        });
+    }, {
+        descriptors: [
+            { name: "firewall", description: "Mapick Cost Firewall commands", hasSubcommands: true },
+        ],
+    });
+}
+export async function getStatus(state, store) {
+    let spent = state.globalStats.todayTokens;
+    let blocked = state.globalStats.todayBlocked;
+    let coolingSources = state.breaker.getCoolingSources();
+    let activeRuns = state.getActiveRuns();
+    if (store) {
+        const agg = await aggregateFromJsonl(store, spent, blocked);
+        spent = agg.today_tokens;
+        blocked = agg.today_blocked;
+        // Aggregate cooling sources from events (source+reason of recent blocked events)
+        const recentBlocks = agg.events
+            .filter((e) => e.type === "blocked")
+            .slice(-10);
+        if (recentBlocks.length > 0 && coolingSources.length === 0) {
+            coolingSources = recentBlocks.map((e) => ({
+                source: e.source || "unknown",
+                reason: e.reason || "unknown",
+                remainingSec: 0,
+            }));
+        }
+        // Aggregate active runs from events (runs without corresponding agent_end)
+        const runEnded = new Set(agg.events.filter((e) => e.type === "agent_end").map((e) => e.runId));
+        const activeRunMap = new Map();
+        for (const e of agg.events) {
+            if (e.runId && !runEnded.has(e.runId) && (e.type === "model_call_ended" || e.type === "run_status_change")) {
+                const r = activeRunMap.get(e.runId) || { runId: e.runId, source: e.source || "", calls: 0, tokens: 0, status: "healthy" };
+                if (e.type === "model_call_ended") {
+                    r.calls++;
+                    r.tokens += (e.estimatedCost || 0);
+                }
+                if (e.type === "run_status_change" && e.status) {
+                    r.status = e.status;
+                    if (e.reason)
+                        r.reason = e.reason;
+                }
+                activeRunMap.set(e.runId, r);
+            }
+        }
+        if (activeRunMap.size > 0 && activeRuns.length === 0) {
+            activeRuns = Array.from(activeRunMap.values());
+        }
+    }
+    return {
+        mode: state.globalStats.mode,
+        emergency_stop: state.globalStats.emergencyStop,
+        today_tokens: spent,
+        today_blocked: blocked,
+        today_saved_estimate: state.globalStats.todaySavedEstimate,
+        daily_token_limit: state.config.dailyTokenLimit,
+        breaker: {
+            consecutive_failures: state.config.breaker?.consecutiveFailures,
+            cooldown_sec: state.config.breaker?.cooldownSec,
+            token_velocity_threshold: state.config.breaker?.tokenVelocityThreshold,
+            token_velocity_window_sec: state.config.breaker?.tokenVelocityWindowSec,
+            call_frequency_threshold: state.config.breaker?.callFrequencyThreshold,
+            call_frequency_window_sec: state.config.breaker?.callFrequencyWindowSec,
+        },
+        cooling_sources: coolingSources,
+        active_runs: activeRuns,
+    };
+}
+export async function getLog(store, count) {
+    try {
+        const raw = await readFile(store.getEventsFilePath(), "utf-8");
+        return raw.trim().split("\n").slice(-count).map((l) => { try {
+            return JSON.parse(l);
+        }
+        catch {
+            return null;
+        } }).filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAa,MAAM,kBAAkB,CAAC;AAGvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAE1C,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,QAAQ,oBAAoB,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAiB,EAAE,SAAiB,EAAE,UAAkB;IAK/F,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAkB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAEhC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5H,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAQ,EAAE,KAAoB,EAAE,KAAiB;IAC3E,GAAG,CAAC,WAAW,CACb,CAAC,EAAE,OAAO,EAAO,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;QAE1F,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;aACvB,WAAW,CAAC,sBAAsB,CAAC;aACnC,MAAM,CAAC,KAAK,IAAI,EAAE;YACjB,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC3G,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;gBAC5B,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,aAAa;gBAC/C,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe;gBAC/C,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW;gBAC/C,eAAe,EAAE,OAAO;aACzB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEL,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;aACtB,WAAW,CAAC,8BAA8B,CAAC;aAC3C,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;aAC5C,MAAM,CAAC,CAAC,MAAc,EAAE,EAAE;YACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEL,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;aACrB,WAAW,CAAC,+BAA+B,CAAC;aAC5C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;aACxC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEL,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;aACrB,WAAW,CAAC,6BAA6B,CAAC;aAC1C,MAAM,CAAC,KAAK,IAAI,EAAE;YACjB,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;YAClB,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEL,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;aACvB,WAAW,CAAC,sCAAsC,CAAC;aACnD,MAAM,CAAC,KAAK,IAAI,EAAE;YACjB,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEL,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;aACvB,WAAW,CAAC,gCAAgC,CAAC;aAC7C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;aAC7C,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;aACnC,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE;YAChD,wFAAwF;YACxF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,IAAY,CAAC;YACjB,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC/B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBAChE,KAAK,CAAC,MAAc,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,KAAK,CAAC,MAAc,CAAC,eAAe,GAAG,IAAI,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YACD,qDAAqD;YACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0CAA0C,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzG,IAAI,IAAI,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;gBACxD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC3B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC;oBACpE,CAAC;oBAAC,MAAM,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBAAC,CAAC;gBAC7C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;YACzF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEL,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;aACpB,WAAW,CAAC,oBAAoB,CAAC;aACjC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,IAAI,CAAC;aAClD,MAAM,CAAC,KAAK,EAAE,IAAS,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3C,IAAI,CAAC;wBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,OAAO,IAAI,CAAC;oBAAC,CAAC;gBACtD,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC5D,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC5J,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,EACD;QACE,WAAW,EAAE;YACX,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,+BAA+B,EAAE,cAAc,EAAE,IAAI,EAAE;SACzF;KACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAoB,EAAE,KAAkB;IACtE,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC;IAC7C,IAAI,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACvD,IAAI,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;IAEvC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;QACzB,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC;QAE5B,iFAAiF;QACjF,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM;aAC5B,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;aACxC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;gBAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;gBAC7B,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACzG,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,CAAC;gBAC3G,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBAC1H,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAAC,CAAC,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACrF,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;oBAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;oBAAC,IAAI,CAAC,CAAC,MAAM;wBAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;gBAAC,CAAC;gBAC3G,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;QAC5B,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,aAAa;QAC/C,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,OAAO;QACtB,oBAAoB,EAAE,KAAK,CAAC,WAAW,CAAC,kBAAkB;QAC1D,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe;QAC/C,OAAO,EAAE;YACP,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB;YAC/D,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW;YAC/C,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB;YACtE,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB;YACvE,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB;YACtE,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB;SACxE;QACD,eAAe,EAAE,cAAc;QAC/B,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAiB,EAAE,KAAa;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnI,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC"}

package/dist/config-warn.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Config risk detection
+ *
+ * Check at startup whether fallback config may bypass Mapick
+ */
+export interface ConfigWarning {
+    level: "warn" | "error";
+    message: string;
+}
+export declare function detectConfigRisks(config: any): ConfigWarning[];
+//# sourceMappingURL=config-warn.d.ts.map

package/dist/config-warn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-warn.d.ts","sourceRoot":"","sources":["../src/config-warn.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,GAAG,GAAG,aAAa,EAAE,CAuB9D"}