@mapick/cost-firewall 0.1.0

package/dist/dashboard/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../src/dashboard/html.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,mBAAmB,CAAC,MAAW;IAC7C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA83BD,CAAC;AACT,CAAC"}

package/dist/dashboard/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Dashboard HTTP route registration
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+import { SseManager } from "./sse.js";
+export declare function registerDashboard(api: any, state: FirewallState, store: EventStore): SseManager;
+//# sourceMappingURL=index.d.ts.map

package/dist/dashboard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAkBtC,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,GAChB,UAAU,CAiJZ"}

package/dist/dashboard/index.js

@@ -0,0 +1,163 @@
+/**
+ * Dashboard HTTP route registration
+ */
+import { getStatus } from "../cli/index.js";
+import { renderDashboardHtml } from "./html.js";
+import { SseManager } from "./sse.js";
+import { writeFile, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { homedir } from "node:os";
+function getConfigPath() {
+    return process.env.OPENCLAW_CONFIG_PATH
+        ?? join(process.env.OPENCLAW_STATE_DIR ?? join(homedir(), ".openclaw"), "openclaw.json");
+}
+function readBody(req) {
+    return new Promise((resolve) => {
+        let data = "";
+        req.on("data", (chunk) => { data += chunk; });
+        req.on("end", () => resolve(data));
+    });
+}
+export function registerDashboard(api, state, store) {
+    const sse = new SseManager();
+    const corsHeaders = {
+        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+        "Access-Control-Allow-Headers": "Content-Type, Authorization",
+    };
+    // Dashboard HTML
+    api.registerHttpRoute({
+        path: "/mapick/dashboard",
+        auth: "plugin",
+        handler: async (_req, res) => {
+            const stats = await getStatus(state, store);
+            res.writeHead(200, {
+                ...corsHeaders,
+                "Content-Type": "text/html; charset=utf-8",
+                "Cache-Control": "no-cache, no-store, must-revalidate",
+                "Pragma": "no-cache",
+                "Expires": "0",
+            });
+            res.end(renderDashboardHtml(stats));
+        },
+    });
+    // Stats API
+    api.registerHttpRoute({
+        path: "/mapick/api/stats",
+        auth: "plugin",
+        handler: async (_req, res) => {
+            const stats = await getStatus(state, store);
+            res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+            res.end(JSON.stringify(stats));
+        },
+    });
+    // SSE
+    api.registerHttpRoute({
+        path: "/mapick/api/live",
+        auth: "plugin",
+        handler: (req, res) => {
+            res.writeHead(200, { ...corsHeaders, "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive" });
+            const unsubscribe = sse.subscribe((data) => res.write(data));
+            req.on("close", unsubscribe);
+        },
+    });
+    // Emergency Stop
+    api.registerHttpRoute({
+        path: "/mapick/api/stop",
+        auth: "plugin",
+        handler: (_req, res) => {
+            state.setEmergencyStop(true);
+            res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true, emergency_stop: true }));
+        },
+    });
+    // Resume
+    api.registerHttpRoute({
+        path: "/mapick/api/resume",
+        auth: "plugin",
+        handler: (_req, res) => {
+            state.setEmergencyStop(false);
+            res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true, emergency_stop: false }));
+        },
+    });
+    // Reset source
+    api.registerHttpRoute({
+        path: "/mapick/api/reset-source",
+        auth: "plugin",
+        handler: (req, res) => {
+            const url = new URL(req.url, "http://localhost");
+            const source = url.searchParams.get("source") || "";
+            if (source) {
+                state.breaker.reset(source);
+                res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+                res.end(JSON.stringify({ ok: true, source }));
+            }
+            else {
+                res.writeHead(400, { ...corsHeaders, "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "missing source param" }));
+            }
+        },
+    });
+    // Events API
+    api.registerHttpRoute({
+        path: "/mapick/api/events",
+        auth: "plugin",
+        handler: async (_req, res) => {
+            try {
+                const raw = await readFile(store.getEventsFilePath(), "utf-8");
+                const events = raw.trim().split("\n").slice(-30).map((l) => {
+                    try {
+                        return JSON.parse(l);
+                    }
+                    catch {
+                        return null;
+                    }
+                }).filter(Boolean);
+                res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+                res.end(JSON.stringify(events));
+            }
+            catch {
+                res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+                res.end(JSON.stringify([]));
+            }
+        },
+    });
+    // Config update (POST JSON)
+    api.registerHttpRoute({
+        path: "/mapick/api/config",
+        auth: "plugin",
+        handler: async (req, res) => {
+            try {
+                const body = await readBody(req);
+                const cfg = JSON.parse(body);
+                const configPath = getConfigPath();
+                const raw = await readFile(configPath, "utf-8");
+                const openclawConfig = JSON.parse(raw);
+                const entry = openclawConfig?.plugins?.entries?.["mapick-firewall"];
+                const current = entry?.config || {};
+                if (cfg.mode) {
+                    state.setMode(cfg.mode);
+                }
+                if (cfg.dailyTokenLimit !== undefined) {
+                    current.dailyTokenLimit = cfg.dailyTokenLimit;
+                    state.config.dailyTokenLimit = cfg.dailyTokenLimit;
+                }
+                if (cfg.breaker) {
+                    current.breaker = { ...current.breaker, ...cfg.breaker };
+                    state.config.breaker = { ...state.config.breaker, ...cfg.breaker };
+                }
+                entry.config = current;
+                await writeFile(configPath, JSON.stringify(openclawConfig, null, 2));
+                res.writeHead(200, { ...corsHeaders, "Content-Type": "application/json" });
+                res.end(JSON.stringify({ ok: true, config: current }));
+            }
+            catch (e) {
+                res.writeHead(400, { ...corsHeaders, "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: e.message }));
+            }
+        },
+    });
+    return sse;
+}
+//# sourceMappingURL=index.js.map

package/dist/dashboard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,QAAQ,CAAC,GAAQ;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAAQ,EACR,KAAoB,EACpB,KAAiB;IAEjB,MAAM,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IAE7B,MAAM,WAAW,GAAG;QAClB,6BAA6B,EAAE,GAAG;QAClC,8BAA8B,EAAE,oBAAoB;QACpD,8BAA8B,EAAE,6BAA6B;KAC9D,CAAC;IAEF,iBAAiB;IACjB,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,KAAK,EAAE,IAAS,EAAE,GAAQ,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,GAAG,WAAW;gBACd,cAAc,EAAE,0BAA0B;gBAC1C,eAAe,EAAE,qCAAqC;gBACtD,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;KACF,CAAC,CAAC;IAEH,YAAY;IACZ,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,KAAK,EAAE,IAAS,EAAE,GAAQ,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;KACF,CAAC,CAAC;IAEH,MAAM;IACN,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;YAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;YACnI,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;IAEH,iBAAiB;IACjB,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,IAAS,EAAE,GAAQ,EAAE,EAAE;YAC/B,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC,CAAC;IAEH,SAAS;IACT,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,IAAS,EAAE,GAAQ,EAAE,EAAE;YAC/B,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC,CAAC;IAEH,eAAe;IACf,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,aAAa;IACb,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,KAAK,EAAE,IAAS,EAAE,GAAQ,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE;oBACjE,IAAI,CAAC;wBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,OAAO,IAAI,CAAC;oBAAC,CAAC;gBACtD,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACnB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,4BAA4B;IAC5B,GAAG,CAAC,iBAAiB,CAAC;QACpB,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;gBAEpC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBACD,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;oBACtC,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;oBAC7C,KAAK,CAAC,MAAc,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;gBAC9D,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChB,OAAO,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;oBACxD,KAAK,CAAC,MAAc,CAAC,OAAO,GAAG,EAAE,GAAI,KAAK,CAAC,MAAc,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;gBACvF,CAAC;gBAED,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC;gBACvB,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/dashboard/sse.d.ts

@@ -0,0 +1,9 @@
+/**
+ * SSE real-time push
+ */
+export declare class SseManager {
+    private clients;
+    subscribe(send: (data: string) => void): () => void;
+    broadcast(data: object): void;
+}
+//# sourceMappingURL=sse.d.ts.map

package/dist/dashboard/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../src/dashboard/sse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAqC;IAEpD,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAKnD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAU9B"}

package/dist/dashboard/sse.js

@@ -0,0 +1,22 @@
+/**
+ * SSE real-time push
+ */
+export class SseManager {
+    clients = new Set();
+    subscribe(send) {
+        this.clients.add(send);
+        return () => this.clients.delete(send);
+    }
+    broadcast(data) {
+        const message = `data: ${JSON.stringify(data)}\n\n`;
+        for (const send of this.clients) {
+            try {
+                send(message);
+            }
+            catch {
+                this.clients.delete(send);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sse.js.map

package/dist/dashboard/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../src/dashboard/sse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEpD,SAAS,CAAC,IAA4B;QACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,MAAM,OAAO,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/hooks/agent-end.d.ts

@@ -0,0 +1,18 @@
+/**
+ * agent_end hook handler
+ *
+ * Responsibilities:
+ * - Run finalization stats
+ * - Delayed cleanup of run state
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+export interface AgentEndEvent {
+    runId?: string;
+    agentId?: string;
+    sessionId?: string;
+    sessionKey?: string;
+    outcome?: "success" | "error";
+}
+export declare function createAgentEndHandler(state: FirewallState, store: EventStore): (event: AgentEndEvent, ctx: any) => void;
+//# sourceMappingURL=agent-end.d.ts.map

package/dist/hooks/agent-end.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-end.d.ts","sourceRoot":"","sources":["../../src/hooks/agent-end.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;CAC/B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,IAGf,OAAO,aAAa,EACpB,KAAK,GAAG,KACP,IAAI,CAgBR"}

package/dist/hooks/agent-end.js

@@ -0,0 +1,25 @@
+/**
+ * agent_end hook handler
+ *
+ * Responsibilities:
+ * - Run finalization stats
+ * - Delayed cleanup of run state
+ */
+export function createAgentEndHandler(state, store) {
+    return function handleAgentEnd(event, ctx) {
+        const runId = event.runId ?? ctx?.runId;
+        if (!runId)
+            return;
+        const run = state.getRun(runId);
+        if (!run)
+            return;
+        store.append({
+            type: "agent_end",
+            runId,
+            source: run.source,
+            outcome: event.outcome,
+        });
+        state.cleanupRun(runId);
+    };
+}
+//# sourceMappingURL=agent-end.js.map

package/dist/hooks/agent-end.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-end.js","sourceRoot":"","sources":["../../src/hooks/agent-end.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,MAAM,UAAU,qBAAqB,CACnC,KAAoB,EACpB,KAAiB;IAEjB,OAAO,SAAS,cAAc,CAC5B,KAAoB,EACpB,GAAQ;QAER,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,KAAK,CAAC,MAAM,CAAC;YACX,IAAI,EAAE,WAAW;YACjB,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QAEH,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC;AACJ,CAAC"}

package/dist/hooks/before-agent-reply.d.ts

@@ -0,0 +1,29 @@
+/**
+ * before_agent_reply hook handler
+ *
+ * Responsibilities:
+ * - Emergency Stop blocking
+ * - Daily Budget blocking
+ * - Source Cooldown blocking
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+export interface BeforeAgentReplyEvent {
+    agentId?: string;
+    sessionId?: string;
+    sessionKey?: string;
+}
+export interface BeforeAgentReplyCtx {
+    agentId?: string;
+    sessionId?: string;
+}
+export interface HandledReply {
+    handled: true;
+    reply: {
+        text: string;
+        isError: boolean;
+    };
+    reason: string;
+}
+export declare function createBeforeAgentReplyHandler(state: FirewallState, store: EventStore): (event: BeforeAgentReplyEvent, ctx: BeforeAgentReplyCtx) => Promise<HandledReply | undefined>;
+//# sourceMappingURL=before-agent-reply.d.ts.map

package/dist/hooks/before-agent-reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"before-agent-reply.d.ts","sourceRoot":"","sources":["../../src/hooks/before-agent-reply.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,IAGf,OAAO,qBAAqB,EAC5B,KAAK,mBAAmB,KACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAoCrC"}

package/dist/hooks/before-agent-reply.js

@@ -0,0 +1,42 @@
+/**
+ * before_agent_reply hook handler
+ *
+ * Responsibilities:
+ * - Emergency Stop blocking
+ * - Daily Budget blocking
+ * - Source Cooldown blocking
+ */
+export function createBeforeAgentReplyHandler(state, store) {
+    return async function handleBeforeAgentReply(event, ctx) {
+        const source = event.agentId ?? event.sessionKey ?? "unknown";
+        // Unified precheck
+        const result = state.precheck(source);
+        if (!result.allow) {
+            store.append({
+                type: "blocked",
+                source,
+                reason: result.reason,
+                layer: result.layer,
+            });
+            state.globalStats.todayBlocked++;
+            const messages = {
+                emergency_stop: "Mapick Cost Firewall: all AI calls are paused.",
+                daily_token_limit: "Mapick Cost Firewall: today's token limit has been reached.",
+                source_cooldown: "Mapick Cost Firewall: this source is cooling down.",
+                consecutive_failures: "Mapick Cost Firewall: this source is cooling down due to consecutive failures.",
+                token_velocity: "Mapick Cost Firewall: this source is cooling down due to high token velocity.",
+                call_frequency: "Mapick Cost Firewall: this source is cooling down due to high call frequency.",
+            };
+            return {
+                handled: true,
+                reply: {
+                    text: messages[result.reason] ?? "Mapick Cost Firewall: request blocked.",
+                    isError: true,
+                },
+                reason: result.reason,
+            };
+        }
+        return undefined;
+    };
+}
+//# sourceMappingURL=before-agent-reply.js.map

package/dist/hooks/before-agent-reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"before-agent-reply.js","sourceRoot":"","sources":["../../src/hooks/before-agent-reply.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyBH,MAAM,UAAU,6BAA6B,CAC3C,KAAoB,EACpB,KAAiB;IAEjB,OAAO,KAAK,UAAU,sBAAsB,CAC1C,KAA4B,EAC5B,GAAwB;QAExB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QAE9D,mBAAmB;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE,SAAS;gBACf,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAO;gBACtB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAEjC,MAAM,QAAQ,GAA2B;gBACvC,cAAc,EAAE,gDAAgD;gBAChE,iBAAiB,EAAE,6DAA6D;gBAChF,eAAe,EAAE,oDAAoD;gBACrE,oBAAoB,EAAE,gFAAgF;gBACtG,cAAc,EAAE,+EAA+E;gBAC/F,cAAc,EAAE,+EAA+E;aAChG,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAO,CAAC,IAAI,wCAAwC;oBAC1E,OAAO,EAAE,IAAI;iBACd;gBACD,MAAM,EAAE,MAAM,CAAC,MAAO;aACvB,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/hooks/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Hook registration entry point
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+export declare function registerHooks(api: any, state: FirewallState, store: EventStore): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,wBAAgB,aAAa,CAC3B,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,GAChB,IAAI,CAUN"}

package/dist/hooks/index.js

@@ -0,0 +1,17 @@
+/**
+ * Hook registration entry point
+ */
+import { createBeforeAgentReplyHandler } from "./before-agent-reply.js";
+import { createModelCallStartedHandler, createModelCallEndedHandler } from "./model-call.js";
+import { createAgentEndHandler } from "./agent-end.js";
+export function registerHooks(api, state, store) {
+    api.on("before_agent_reply", createBeforeAgentReplyHandler(state, store));
+    api.on("model_call_started", createModelCallStartedHandler(state, store));
+    api.on("model_call_ended", createModelCallEndedHandler(state, store));
+    api.on("agent_end", createAgentEndHandler(state, store));
+    if (state.config.privacy?.enableRawConversationHooks) {
+        // llm_input/output — opt-in only
+        // To be implemented in future versions
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/hooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,UAAU,aAAa,CAC3B,GAAQ,EACR,KAAoB,EACpB,KAAiB;IAEjB,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAEzD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,CAAC;QACrD,iCAAiC;QACjC,uCAAuC;IACzC,CAAC;AACH,CAAC"}

package/dist/hooks/model-call.d.ts

@@ -0,0 +1,39 @@
+/**
+ * model_call_started / model_call_ended hook handler
+ *
+ * Responsibilities:
+ * - Record metadata for each LLM call
+ * - Estimate cost
+ * - Update breaker state
+ * - Write event log
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+export interface ModelCallStartedEvent {
+    runId: string;
+    callId: string;
+    sessionKey?: string;
+    sessionId?: string;
+    provider: string;
+    model: string;
+    api?: string;
+    transport?: string;
+}
+export interface ModelCallEndedEvent extends ModelCallStartedEvent {
+    durationMs: number;
+    outcome: "completed" | "error";
+    errorCategory?: string;
+    failureKind?: "aborted" | "connection_closed" | "connection_reset" | "terminated" | "timeout";
+    requestPayloadBytes?: number;
+    responseStreamBytes?: number;
+    timeToFirstByteMs?: number;
+    upstreamRequestIdHash?: string;
+    usage?: {
+        prompt_tokens?: number;
+        completion_tokens?: number;
+        total_tokens?: number;
+    };
+}
+export declare function createModelCallStartedHandler(state: FirewallState, store: EventStore): (event: ModelCallStartedEvent, ctx: any) => void;
+export declare function createModelCallEndedHandler(state: FirewallState, store: EventStore): (event: ModelCallEndedEvent, ctx: any) => void;
+//# sourceMappingURL=model-call.d.ts.map

package/dist/hooks/model-call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-call.d.ts","sourceRoot":"","sources":["../../src/hooks/model-call.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,SAAS,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,YAAY,GAAG,SAAS,CAAC;IAC9F,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE;QACN,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,IAGf,OAAO,qBAAqB,EAC5B,KAAK,GAAG,KACP,IAAI,CAeR;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,IAGf,OAAO,mBAAmB,EAC1B,KAAK,GAAG,KACP,IAAI,CAmGR"}

package/dist/hooks/model-call.js

@@ -0,0 +1,120 @@
+/**
+ * model_call_started / model_call_ended hook handler
+ *
+ * Responsibilities:
+ * - Record metadata for each LLM call
+ * - Estimate cost
+ * - Update breaker state
+ * - Write event log
+ */
+import { sourceFromModelCall } from "../source.js";
+export function createModelCallStartedHandler(state, store) {
+    return function handleModelCallStarted(event, ctx) {
+        const source = sourceFromModelCall(event, ctx);
+        const run = state.getOrCreateRun(event.runId, source, event.sessionId, event.sessionKey);
+        state.addCallToRun(event.runId, event.callId, {
+            callId: event.callId,
+            provider: event.provider,
+            model: event.model,
+            api: event.api,
+            transport: event.transport,
+            startedAt: Date.now(),
+        });
+        run.llmCallTimestamps.push(Date.now());
+    };
+}
+export function createModelCallEndedHandler(state, store) {
+    return function handleModelCallEnded(event, ctx) {
+        const source = sourceFromModelCall(event, ctx);
+        const run = state.getOrCreateRun(event.runId, source, event.sessionId, event.sessionKey);
+        // Use precise usage if available from the event, otherwise fallback to bytes/4 estimation
+        let estimatedTokens;
+        if (event.usage?.prompt_tokens || event.usage?.completion_tokens) {
+            // Precise token count from upstream provider
+            estimatedTokens = (event.usage.prompt_tokens ?? 0) + (event.usage.completion_tokens ?? 0);
+        }
+        else {
+            // Fallback: 1 token ≈ 4 bytes
+            const totalBytes = (event.requestPayloadBytes ?? 0) + (event.responseStreamBytes ?? 0);
+            estimatedTokens = Math.round(totalBytes / 4);
+        }
+        const call = run.calls.get(event.callId);
+        if (call) {
+            call.durationMs = event.durationMs;
+            call.outcome = event.outcome;
+            call.errorCategory = event.errorCategory;
+            call.failureKind = event.failureKind;
+            call.requestPayloadBytes = event.requestPayloadBytes;
+            call.responseStreamBytes = event.responseStreamBytes;
+            call.estimatedCost = estimatedTokens;
+        }
+        if (event.outcome === "error") {
+            state.breaker.recordFailure(source);
+        }
+        else {
+            state.breaker.recordSuccess(source);
+        }
+        state.updateRunCost(event.runId, estimatedTokens);
+        state.updateSourceStats(source, estimatedTokens);
+        // Token velocity + call frequency + zero output detection
+        if (event.outcome === "completed") {
+            state.breaker.recordTokens(source, estimatedTokens);
+            // Zero output detection: spent tokens but output is zero
+            if (estimatedTokens > 0 && event.responseStreamBytes && event.responseStreamBytes < 100) {
+                store.append({
+                    type: "zero_output_warning",
+                    source,
+                    provider: event.provider,
+                    model: event.model,
+                    estimatedCost: estimatedTokens,
+                });
+            }
+        }
+        state.breaker.recordCall(source);
+        // RunState status detection: cumulative tokens / call count / repeated prompts
+        const runTokens = run.cumulativeCost + estimatedTokens;
+        const runCalls = run.llmCallTimestamps.length;
+        const prevStatus = run.status;
+        if (runTokens > 500000) {
+            run.status = "danger";
+            run.reason = "run_tokens_exceeded";
+        }
+        else if (runCalls > 50) {
+            run.status = "warning";
+            run.reason = "run_calls_high";
+        }
+        if (run.status !== prevStatus) {
+            store.append({
+                type: "run_status_change",
+                runId: event.runId,
+                source,
+                cumulativeTokens: runTokens,
+                runCalls,
+                status: run.status,
+                reason: run.reason,
+            });
+        }
+        // Single run cumulative token warning
+        const runCumulative = run.cumulativeCost + estimatedTokens;
+        if (runCumulative > 200000) {
+            store.append({
+                type: "run_token_warning",
+                runId: event.runId,
+                source,
+                cumulativeTokens: runCumulative,
+            });
+        }
+        store.append({
+            type: "model_call_ended",
+            runId: event.runId,
+            callId: event.callId,
+            source,
+            provider: event.provider,
+            model: event.model,
+            outcome: event.outcome,
+            failureKind: event.failureKind,
+            estimatedCost: estimatedTokens,
+        });
+    };
+}
+//# sourceMappingURL=model-call.js.map

package/dist/hooks/model-call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-call.js","sourceRoot":"","sources":["../../src/hooks/model-call.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AA6BnD,MAAM,UAAU,6BAA6B,CAC3C,KAAoB,EACpB,KAAiB;IAEjB,OAAO,SAAS,sBAAsB,CACpC,KAA4B,EAC5B,GAAQ;QAER,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzF,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAoB,EACpB,KAAiB;IAEjB,OAAO,SAAS,oBAAoB,CAClC,KAA0B,EAC1B,GAAQ;QAER,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzF,0FAA0F;QAC1F,IAAI,eAAuB,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,EAAE,aAAa,IAAI,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACjE,6CAA6C;YAC7C,eAAe,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACN,8BAA8B;YAC9B,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAC;YACvF,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACzC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACrC,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;YACrD,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;YACrD,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAClD,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAEjD,0DAA0D;QAC1D,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACpD,yDAAyD;YACzD,IAAI,eAAe,GAAG,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,mBAAmB,GAAG,GAAG,EAAE,CAAC;gBACxF,KAAK,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE,qBAAqB;oBAC3B,MAAM;oBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,aAAa,EAAE,eAAe;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEjC,+EAA+E;QAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,GAAG,eAAe,CAAC;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAE9B,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;YACtB,GAAG,CAAC,MAAM,GAAG,qBAAqB,CAAC;QACrC,CAAC;aAAM,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YACvB,GAAG,CAAC,MAAM,GAAG,gBAAgB,CAAC;QAChC,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM;gBACN,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ;gBACR,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,GAAG,eAAe,CAAC;QAC3D,IAAI,aAAa,GAAG,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM;gBACN,gBAAgB,EAAE,aAAa;aAChC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC;YACX,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,eAAe;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @mapick/cost-firewall — OpenClaw plugin entry point
+ */
+import { PLUGIN_ID, PLUGIN_NAME } from "./types.js";
+declare const _default: {
+    id: string;
+    name: string;
+    version: string;
+    register(api: any): void;
+};
+export default _default;
+export { PLUGIN_ID, PLUGIN_NAME };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;;;;;kBAepC,GAAG;;AALnB,wBA0CE;AAEF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC"}