@mapick/cost-firewall 0.1.0

package/dist/index.js

@@ -0,0 +1,49 @@
+/**
+ * @mapick/cost-firewall — OpenClaw plugin entry point
+ */
+import { PLUGIN_ID, PLUGIN_NAME } from "./types.js";
+import { FirewallState } from "./state.js";
+import { EventStore } from "./store.js";
+import { registerHooks } from "./hooks/index.js";
+import { registerCli } from "./cli/index.js";
+import { registerDashboard } from "./dashboard/index.js";
+import { registerProvider } from "./provider/index.js";
+import { registerTools } from "./tools/index.js";
+import { detectConfigRisks } from "./config-warn.js";
+export default {
+    id: PLUGIN_ID,
+    name: PLUGIN_NAME,
+    version: "0.1.0",
+    register(api) {
+        const config = api.config?.plugins?.entries?.[PLUGIN_ID]?.config ?? {};
+        const state = new FirewallState(config);
+        const store = new EventStore();
+        // Register Hook Layer
+        registerHooks(api, state, store);
+        // Register Provider Layer
+        registerProvider(api, state, store);
+        // Register CLI
+        registerCli(api, state, store);
+        // Register Agent Tools (/firewall status/stop/resume conversational commands)
+        registerTools(api, state, store);
+        // Config risk detection (fallback bypass etc.)
+        const warnings = detectConfigRisks(api.config);
+        for (const w of warnings) {
+            store.append({ type: "config_warning", reason: w.message, source: w.level });
+        }
+        // Register Dashboard
+        const sse = registerDashboard(api, state, store);
+        // Broadcast stats update
+        const originalUpdate = state.updateSourceStats.bind(state);
+        state.updateSourceStats = (source, cost) => {
+            originalUpdate(source, cost);
+            sse.broadcast({
+                type: "stats_update",
+                today_tokens: state.globalStats.todayTokens,
+                today_blocked: state.globalStats.todayBlocked,
+            });
+        };
+    },
+};
+export { PLUGIN_ID, PLUGIN_NAME };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,eAAe;IACb,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;IAEhB,QAAQ,CAAC,GAAQ;QACf,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;QAE/B,sBAAsB;QACtB,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEjC,0BAA0B;QAC1B,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEpC,eAAe;QACf,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAE/B,8EAA8E;QAC9E,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEjC,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEjD,yBAAyB;QACzB,MAAM,cAAc,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YACzC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC;gBACZ,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;gBAC3C,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,YAAY;aAC9C,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC"}

package/dist/pricing.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Model pricing and cost estimation
+ *
+ * OpenRouter: pass-through pricing (inherits upstream provider pricing)
+ */
+export interface TokenUsage {
+    prompt_tokens?: number;
+    completion_tokens?: number;
+}
+export declare function estimateCost(usage: TokenUsage | null | undefined, provider: string, model: string, responseStreamBytes?: number): number;
+export declare function getProviderModelKey(provider: string, model: string): string;
+//# sourceMappingURL=pricing.d.ts.map

package/dist/pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../src/pricing.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6BH,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,mBAAmB,CAAC,EAAE,MAAM,GAC3B,MAAM,CAUR;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3E"}

package/dist/pricing.js

@@ -0,0 +1,43 @@
+/**
+ * Model pricing and cost estimation
+ *
+ * OpenRouter: pass-through pricing (inherits upstream provider pricing)
+ */
+// Pricing table: $/1M tokens
+const PRICING = {
+    openai: {
+        "gpt-4o": { input: 2.5, output: 10 },
+        "gpt-4o-mini": { input: 0.15, output: 0.6 },
+        "gpt-4-turbo": { input: 10, output: 30 },
+        "gpt-3.5-turbo": { input: 0.5, output: 1.5 },
+    },
+    anthropic: {
+        "claude-sonnet-4-6": { input: 3, output: 15 },
+        "claude-sonnet-4-20250514": { input: 3, output: 15 },
+        "claude-sonnet-4-5": { input: 3, output: 15 },
+        "claude-haiku-3-5": { input: 0.8, output: 4 },
+    },
+    openrouter: {}, // pass-through pricing
+    deepseek: {
+        "deepseek-chat": { input: 0.28, output: 0.42 },
+        "deepseek-reasoner": { input: 0.55, output: 2.19 },
+    },
+    qwen: {
+        "qwen3-plus": { input: 0.5, output: 2 },
+    },
+};
+// Fallback: estimate by response bytes (assuming 1 token ≈ 4 bytes, $3/1M tokens)
+const FALLBACK_COST_PER_BYTE = 3 / 1_000_000 / 4;
+export function estimateCost(usage, provider, model, responseStreamBytes) {
+    if (usage?.prompt_tokens || usage?.completion_tokens) {
+        return (usage.prompt_tokens ?? 0) + (usage.completion_tokens ?? 0);
+    }
+    if (responseStreamBytes) {
+        return responseStreamBytes;
+    }
+    return 0;
+}
+export function getProviderModelKey(provider, model) {
+    return `${provider}/${model}`;
+}
+//# sourceMappingURL=pricing.js.map

package/dist/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../src/pricing.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6BAA6B;AAC7B,MAAM,OAAO,GAAsE;IACjF,MAAM,EAAE;QACN,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;QAC3C,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACxC,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;KAC7C;IACD,SAAS,EAAE;QACT,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7C,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7C,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;KAC9C;IACD,UAAU,EAAE,EAAE,EAAE,uBAAuB;IACvC,QAAQ,EAAE;QACR,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC9C,mBAAmB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;KACnD;IACD,IAAI,EAAE;QACJ,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;KACxC;CACF,CAAC;AAEF,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;AAOjD,MAAM,UAAU,YAAY,CAC1B,KAAoC,EACpC,QAAgB,EAChB,KAAa,EACb,mBAA4B;IAE5B,IAAI,KAAK,EAAE,aAAa,IAAI,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAAa;IACjE,OAAO,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;AAChC,CAAC"}

package/dist/provider/auth.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Upstream auth resolution
+ *
+ * Priority:
+ * 1. api.runtime.modelAuth (OpenClaw SDK)
+ * 2. api.config.models.providers (direct config read)
+ * 3. Environment variables
+ */
+export interface AuthResult {
+    apiKey: string;
+    headers?: Record<string, string>;
+}
+export declare function resolveUpstreamAuth(api: any, upstream: string, model: string): Promise<AuthResult>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/provider/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/provider/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAWD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC,CAqCrB"}

package/dist/provider/auth.js

@@ -0,0 +1,53 @@
+/**
+ * Upstream auth resolution
+ *
+ * Priority:
+ * 1. api.runtime.modelAuth (OpenClaw SDK)
+ * 2. api.config.models.providers (direct config read)
+ * 3. Environment variables
+ */
+// Environment variable name mapping
+const ENV_VAR_MAP = {
+    openai: "OPENAI_API_KEY",
+    anthropic: "ANTHROPIC_API_KEY",
+    openrouter: "OPENROUTER_API_KEY",
+    deepseek: "DEEPSEEK_API_KEY",
+    qwen: "DASHSCOPE_API_KEY",
+};
+export async function resolveUpstreamAuth(api, upstream, model) {
+    // 1. Try SDK runtime auth
+    if (api.runtime?.modelAuth?.getApiKeyForModel) {
+        try {
+            const key = await api.runtime.modelAuth.getApiKeyForModel({
+                model: { provider: upstream, id: model },
+                cfg: api.config,
+                workspaceDir: api.workspaceDir,
+            });
+            if (key)
+                return { apiKey: key };
+        }
+        catch { /* continue */ }
+    }
+    if (api.runtime?.modelAuth?.resolveApiKeyForProvider) {
+        try {
+            const key = await api.runtime.modelAuth.resolveApiKeyForProvider(upstream);
+            if (key)
+                return { apiKey: key };
+        }
+        catch { /* continue */ }
+    }
+    // 2. Read directly from config
+    const providerConfig = api.config?.models?.providers?.[upstream];
+    if (providerConfig?.apiKey) {
+        return { apiKey: providerConfig.apiKey };
+    }
+    // 3. Read from environment variables
+    const envVar = ENV_VAR_MAP[upstream];
+    if (envVar && process.env[envVar]) {
+        return { apiKey: process.env[envVar] };
+    }
+    throw new Error(`Mapick: unable to resolve API key for upstream "${upstream}". ` +
+        `Configure it in OpenClaw (models.providers.${upstream}.apiKey) ` +
+        `or set the ${ENV_VAR_MAP[upstream] ?? upstream.toUpperCase() + "_API_KEY"} environment variable.`);
+}
+//# sourceMappingURL=auth.js.map

package/dist/provider/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/provider/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,oCAAoC;AACpC,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE,oBAAoB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,IAAI,EAAE,mBAAmB;CAC1B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAQ,EACR,QAAgB,EAChB,KAAa;IAEb,0BAA0B;IAC1B,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBACxD,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE;gBACxC,GAAG,EAAE,GAAG,CAAC,MAAM;gBACf,YAAY,EAAE,GAAG,CAAC,YAAY;aAC/B,CAAC,CAAC;YACH,IAAI,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YAC3E,IAAI,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IAED,+BAA+B;IAC/B,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,cAAc,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,qCAAqC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,KAAK,CACb,mDAAmD,QAAQ,KAAK;QAChE,8CAA8C,QAAQ,WAAW;QACjE,cAAc,WAAW,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,UAAU,wBAAwB,CACnG,CAAC;AACJ,CAAC"}

package/dist/provider/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Provider registration entry point
+ *
+ * mapick/<upstream>/<model> routing
+ * - catalog: declare model catalog
+ * - resolveDynamicModel: dynamically accept any upstream model ID
+ * - createStreamFn: precheck + upstream forwarding
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+export declare function registerProvider(api: any, state: FirewallState, store: EventStore): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/provider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/provider/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAoB9C,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,GAChB,IAAI,CAuGN"}

package/dist/provider/index.js

@@ -0,0 +1,134 @@
+/**
+ * Provider registration entry point
+ *
+ * mapick/<upstream>/<model> routing
+ * - catalog: declare model catalog
+ * - resolveDynamicModel: dynamically accept any upstream model ID
+ * - createStreamFn: precheck + upstream forwarding
+ */
+import { parseMapickModelRef } from "./route.js";
+import { resolveUpstreamAuth } from "./auth.js";
+import { createBlockedStream } from "./synthetic.js";
+import { streamOpenAi, getOpenAiBaseUrl } from "./upstream/openai.js";
+import { streamAnthropic } from "./upstream/anthropic.js";
+import { estimateCost } from "../pricing.js";
+function categorizeError(err) {
+    const m = err?.message ?? String(err);
+    if (m.includes("timeout") || m.includes("ETIMEDOUT"))
+        return "timeout";
+    if (m.includes("401") || m.includes("Unauthorized"))
+        return "auth_error";
+    if (m.includes("429") || m.includes("rate"))
+        return "rate_limit";
+    if (m.includes("403") || m.includes("Forbidden"))
+        return "access_denied";
+    if (/^5\d\d/.test(m) || m.includes("server"))
+        return "server_error";
+    if (m.includes("ECONNREFUSED") || m.includes("ECONNRESET"))
+        return "connection_closed";
+    if (m.includes("fetch"))
+        return "network_error";
+    return "unknown";
+}
+export function registerProvider(api, state, store) {
+    api.registerProvider({
+        id: "mapick",
+        label: "Mapick Cost Firewall",
+        envVars: [],
+        auth: [],
+        catalog: {
+            order: "simple",
+            run: async (_ctx) => ({
+                provider: {
+                    api: "openai-completions",
+                    baseUrl: "https://api.mapick.ai/v1",
+                    apiKey: "mapick-firewall-plugin",
+                    models: [{
+                            id: "mapick-default",
+                            name: "Mapick Firewall Passthrough",
+                            reasoning: false,
+                            input: ["text"],
+                            cost: { input: 0, output: 0 },
+                            contextWindow: 200000,
+                            maxTokens: 8192,
+                        }],
+                },
+            }),
+        },
+        resolveDynamicModel: (ctx) => {
+            const modelId = ctx.modelId;
+            const fullModel = modelId.startsWith("mapick/") ? modelId.slice("mapick/".length) : modelId;
+            return {
+                id: modelId,
+                name: `Mapick → ${fullModel}`,
+                provider: "mapick",
+                api: "openai-completions",
+                baseUrl: "https://api.mapick.ai/v1",
+                reasoning: false,
+                input: ["text"],
+                cost: { input: 0, output: 0 },
+                contextWindow: 200000,
+                maxTokens: 8192,
+            };
+        },
+        createStreamFn() {
+            const self = this;
+            return async function* stream(model, context, options) {
+                // model may come from ctx, use catalog + resolveDynamicModel provided model
+                const modelId = typeof model === "string" ? model : model?.id ?? "";
+                const route = parseMapickModelRef(modelId);
+                if (!route)
+                    throw new Error(`Invalid Mapick model reference: ${modelId}`);
+                const src = route.upstream;
+                // Unified precheck
+                const result = state.precheck(src);
+                if (!result.allow) {
+                    state.globalStats.todayBlocked++;
+                    store.append({
+                        type: "blocked",
+                        provider: route.upstream,
+                        model: route.model,
+                        reason: result.reason,
+                        layer: result.layer,
+                    });
+                    yield* createBlockedStream({
+                        provider: route.upstream,
+                        model: route.model,
+                        reason: result.reason,
+                        format: route.upstream === "anthropic" ? "anthropic" : "openai",
+                    });
+                    return;
+                }
+                // Resolve upstream auth
+                const auth = await resolveUpstreamAuth(api, route.upstream, route.model);
+                let inputTokens = 0;
+                let outputTokens = 0;
+                let responseStreamBytes = 0;
+                try {
+                    const s = route.upstream === "anthropic"
+                        ? streamAnthropic({ apiKey: auth.apiKey, model: route.model, messages: context?.messages ?? [], ...options })
+                        : streamOpenAi({ baseUrl: getOpenAiBaseUrl(route.upstream), apiKey: auth.apiKey, model: route.model, messages: context?.messages ?? [], ...options });
+                    for await (const chunk of s) {
+                        responseStreamBytes += JSON.stringify(chunk).length;
+                        if (chunk.usage) {
+                            inputTokens = chunk.usage.prompt_tokens ?? inputTokens;
+                            outputTokens = chunk.usage.completion_tokens ?? outputTokens;
+                        }
+                        yield chunk;
+                    }
+                    const cost = estimateCost({ prompt_tokens: inputTokens, completion_tokens: outputTokens }, route.upstream, route.model, responseStreamBytes);
+                    store.append({ type: "model_call_ended", provider: route.upstream, model: route.model, outcome: "completed", estimatedCost: cost });
+                    state.updateSourceStats(src, cost);
+                    state.breaker.recordSuccess(src);
+                }
+                catch (err) {
+                    const msg = err?.message ?? String(err);
+                    store.append({ type: "model_call_ended", provider: route.upstream, model: route.model, outcome: "error", failureKind: categorizeError(err), reason: msg.slice(0, 200) });
+                    state.breaker.recordFailure(src);
+                    throw err;
+                }
+            };
+        },
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/provider/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/provider/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,SAAS,eAAe,CAAC,GAAU;IACjC,MAAM,CAAC,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,YAAY,CAAC;IACzE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,YAAY,CAAC;IACjE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,eAAe,CAAC;IACzE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,cAAc,CAAC;IACpE,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACvF,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC;IAChD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAQ,EACR,KAAoB,EACpB,KAAiB;IAEjB,GAAG,CAAC,gBAAgB,CAAC;QACnB,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,EAAE;QAER,OAAO,EAAE;YACP,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,KAAK,EAAE,IAAS,EAAE,EAAE,CAAC,CAAC;gBACzB,QAAQ,EAAE;oBACR,GAAG,EAAE,oBAAoB;oBACzB,OAAO,EAAE,0BAA0B;oBACnC,MAAM,EAAE,wBAAwB;oBAChC,MAAM,EAAE,CAAC;4BACP,EAAE,EAAE,gBAAgB;4BACpB,IAAI,EAAE,6BAA6B;4BACnC,SAAS,EAAE,KAAK;4BAChB,KAAK,EAAE,CAAC,MAAM,CAAC;4BACf,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;4BAC7B,aAAa,EAAE,MAAM;4BACrB,SAAS,EAAE,IAAI;yBAChB,CAAC;iBACH;aACF,CAAC;SACH;QAED,mBAAmB,EAAE,CAAC,GAAQ,EAAE,EAAE;YAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5F,OAAO;gBACL,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,YAAY,SAAS,EAAE;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,GAAG,EAAE,oBAAoB;gBACzB,OAAO,EAAE,0BAA0B;gBACnC,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,CAAC,MAAM,CAAC;gBACf,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;gBAC7B,aAAa,EAAE,MAAM;gBACrB,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,cAAc;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC;YAClB,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,KAAU,EAAE,OAAY,EAAE,OAAY;gBAClE,4EAA4E;gBAC5E,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC;gBACpE,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;gBAE1E,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAE3B,mBAAmB;gBACnB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAEnC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAClB,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;oBACjC,KAAK,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,MAAM,CAAC,MAAO;wBACtB,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB,CAAC,CAAC;oBACH,KAAK,CAAC,CAAC,mBAAmB,CAAC;wBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,MAAM,CAAC,MAAO;wBACtB,MAAM,EAAE,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;qBAChE,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,wBAAwB;gBACxB,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEzE,IAAI,WAAW,GAAG,CAAC,CAAC;gBAAC,IAAI,YAAY,GAAG,CAAC,CAAC;gBAAC,IAAI,mBAAmB,GAAG,CAAC,CAAC;gBACvE,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,KAAK,WAAW;wBACtC,CAAC,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;wBAC7G,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;oBAExJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;wBAC5B,mBAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;wBACpD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;4BAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,WAAW,CAAC;4BAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,YAAY,CAAC;wBAAC,CAAC;wBAC1I,MAAM,KAAK,CAAC;oBACd,CAAC;oBAED,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAC7I,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpI,KAAK,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACnC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnC,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;oBACxC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACzK,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/provider/route.d.ts

@@ -0,0 +1,10 @@
+/**
+ * mapick/<upstream>/<model> route resolution
+ */
+export interface RouteInfo {
+    upstream: string;
+    model: string;
+}
+export declare function parseMapickModelRef(ref: string): RouteInfo | null;
+export declare function isMapickModelRef(ref: string): boolean;
+//# sourceMappingURL=route.d.ts.map

package/dist/provider/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/provider/route.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAYjE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAErD"}

package/dist/provider/route.js

@@ -0,0 +1,19 @@
+/**
+ * mapick/<upstream>/<model> route resolution
+ */
+export function parseMapickModelRef(ref) {
+    if (!ref.startsWith("mapick/"))
+        return null;
+    const parts = ref.slice("mapick/".length).split("/");
+    if (parts.length < 2)
+        return null;
+    const upstream = parts[0];
+    const model = parts.slice(1).join("/");
+    if (!upstream || !model)
+        return null;
+    return { upstream, model };
+}
+export function isMapickModelRef(ref) {
+    return ref.startsWith("mapick/");
+}
+//# sourceMappingURL=route.js.map

package/dist/provider/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../src/provider/route.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC"}

package/dist/provider/stream.d.ts

@@ -0,0 +1,10 @@
+/**
+ * createStreamFn implementation
+ *
+ * Core: precheck before real upstream request is sent
+ * SDK convention: createStreamFn(ctx) => async function*(model, context, options)
+ */
+import type { FirewallState } from "../state.js";
+import type { EventStore } from "../store.js";
+export declare function createStreamFn(state: FirewallState, store: EventStore, api: any): (ctx: any) => (model: string, context: any, options: any) => AsyncGenerator<any, void, any>;
+//# sourceMappingURL=stream.d.ts.map

package/dist/provider/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../src/provider/stream.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C,wBAAgB,cAAc,CAC5B,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,GAAG,IAIS,KAAK,GAAG,MACO,OAAO,MAAM,EAAE,SAAS,GAAG,EAAE,SAAS,GAAG,oCAwG1E"}

package/dist/provider/stream.js

@@ -0,0 +1,120 @@
+/**
+ * createStreamFn implementation
+ *
+ * Core: precheck before real upstream request is sent
+ * SDK convention: createStreamFn(ctx) => async function*(model, context, options)
+ */
+import { parseMapickModelRef } from "./route.js";
+import { resolveUpstreamAuth } from "./auth.js";
+import { createBlockedStream } from "./synthetic.js";
+import { streamOpenAi, getOpenAiBaseUrl } from "./upstream/openai.js";
+import { streamAnthropic } from "./upstream/anthropic.js";
+import { sourceFromProviderContext } from "../source.js";
+import { estimateCost } from "../pricing.js";
+export function createStreamFn(state, store, api) {
+    // Return createStreamFn matching SDK signature
+    // OpenClaw calls createStreamFn(ctx), returns async generator function
+    return function (ctx) {
+        return async function* stream(model, context, options) {
+            const route = parseMapickModelRef(model);
+            if (!route) {
+                throw new Error(`Invalid Mapick model reference: ${model}`);
+            }
+            const source = sourceFromProviderContext({ ...context, ...ctx }, route);
+            // Precheck
+            const result = state.precheck(source);
+            if (!result.allow) {
+                store.append({
+                    type: "blocked",
+                    source,
+                    provider: route.upstream,
+                    model: route.model,
+                    reason: result.reason,
+                    layer: result.layer,
+                });
+                state.globalStats.todayBlocked++;
+                state.globalStats.todaySavedEstimate += estimateCost(null, route.upstream, route.model);
+                yield* createBlockedStream({
+                    provider: route.upstream,
+                    model: route.model,
+                    reason: result.reason,
+                    format: route.upstream === "anthropic" ? "anthropic" : "openai",
+                });
+                return;
+            }
+            // Get upstream auth
+            const auth = await resolveUpstreamAuth(api, route.upstream, route.model);
+            // Call upstream
+            let inputTokens = 0;
+            let outputTokens = 0;
+            let responseStreamBytes = 0;
+            try {
+                let upstreamStream;
+                if (route.upstream === "anthropic") {
+                    upstreamStream = streamAnthropic({
+                        apiKey: auth.apiKey,
+                        model: route.model,
+                        messages: context.messages ?? [],
+                        ...options,
+                    });
+                }
+                else {
+                    upstreamStream = streamOpenAi({
+                        baseUrl: getOpenAiBaseUrl(route.upstream),
+                        apiKey: auth.apiKey,
+                        model: route.model,
+                        messages: context.messages ?? [],
+                        ...options,
+                    });
+                }
+                for await (const chunk of upstreamStream) {
+                    responseStreamBytes += JSON.stringify(chunk).length;
+                    if (chunk.usage) {
+                        inputTokens = chunk.usage.prompt_tokens ?? inputTokens;
+                        outputTokens = chunk.usage.completion_tokens ?? outputTokens;
+                    }
+                    yield chunk;
+                }
+                const cost = estimateCost({ prompt_tokens: inputTokens, completion_tokens: outputTokens }, route.upstream, route.model, responseStreamBytes);
+                store.append({
+                    type: "model_call_ended",
+                    source,
+                    provider: route.upstream,
+                    model: route.model,
+                    outcome: "completed",
+                    estimatedCost: cost,
+                });
+                state.updateSourceStats(source, cost);
+                state.breaker.recordSuccess(source);
+            }
+            catch (err) {
+                store.append({
+                    type: "model_call_ended",
+                    source,
+                    provider: route.upstream,
+                    model: route.model,
+                    outcome: "error",
+                    failureKind: categorizeError(err),
+                });
+                state.breaker.recordFailure(source);
+                throw err;
+            }
+        };
+    };
+}
+function categorizeError(err) {
+    if (err.message.includes("timeout"))
+        return "timeout";
+    if (err.message.includes("ECONNRESET"))
+        return "connection_reset";
+    if (err.message.includes("ECONNREFUSED"))
+        return "connection_closed";
+    if (err.message.includes("401"))
+        return "auth_error";
+    if (err.message.includes("429"))
+        return "rate_limit";
+    if (err.message.includes("5"))
+        return "server_error";
+    return "unknown";
+}
+//# sourceMappingURL=stream.js.map

package/dist/provider/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/provider/stream.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,UAAU,cAAc,CAC5B,KAAoB,EACpB,KAAiB,EACjB,GAAQ;IAER,+CAA+C;IAC/C,uEAAuE;IACvE,OAAO,UAAU,GAAQ;QACvB,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,KAAa,EAAE,OAAY,EAAE,OAAY;YACrE,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YAExE,WAAW;YACX,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE,SAAS;oBACf,MAAM;oBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,MAAM,CAAC,MAAO;oBACtB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;gBACH,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBACjC,KAAK,CAAC,WAAW,CAAC,kBAAkB,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAExF,KAAK,CAAC,CAAC,mBAAmB,CAAC;oBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,MAAM,CAAC,MAAO;oBACtB,MAAM,EAAE,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;iBAChE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,oBAAoB;YACpB,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAEzE,gBAAgB;YAChB,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,mBAAmB,GAAG,CAAC,CAAC;YAE5B,IAAI,CAAC;gBACH,IAAI,cAAmC,CAAC;gBAExC,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBACnC,cAAc,GAAG,eAAe,CAAC;wBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;wBAChC,GAAG,OAAO;qBACX,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,YAAY,CAAC;wBAC5B,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;wBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;wBAChC,GAAG,OAAO;qBACX,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;oBACzC,mBAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;oBAEpD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;wBAChB,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,WAAW,CAAC;wBACvD,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,YAAY,CAAC;oBAC/D,CAAC;oBAED,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,MAAM,IAAI,GAAG,YAAY,CACvB,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAC/D,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,KAAK,EACX,mBAAmB,CACpB,CAAC;gBAEF,KAAK,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE,kBAAkB;oBACxB,MAAM;oBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,OAAO,EAAE,WAAW;oBACpB,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;gBAEH,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACtC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,KAAK,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE,kBAAkB;oBACxB,MAAM;oBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,OAAO,EAAE,OAAO;oBAChB,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC;iBAClC,CAAC,CAAC;gBAEH,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBACpC,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAU;IACjC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAClE,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACrE,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACrD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACrD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/provider/synthetic.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Blocked response generation
+ *
+ * Return synthetic stream when request is blocked by Mapick
+ */
+export interface BlockedStreamOptions {
+    provider: string;
+    model: string;
+    reason: string;
+    format?: "openai" | "anthropic";
+}
+export declare function createBlockedStream(options: BlockedStreamOptions): AsyncGenerator<any>;
+//# sourceMappingURL=synthetic.d.ts.map

package/dist/provider/synthetic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"synthetic.d.ts","sourceRoot":"","sources":["../../src/provider/synthetic.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CACjC;AAED,wBAAuB,mBAAmB,CACxC,OAAO,EAAE,oBAAoB,GAC5B,cAAc,CAAC,GAAG,CAAC,CAwDrB"}

package/dist/provider/synthetic.js

@@ -0,0 +1,59 @@
+/**
+ * Blocked response generation
+ *
+ * Return synthetic stream when request is blocked by Mapick
+ */
+export async function* createBlockedStream(options) {
+    const { provider, model, reason, format = "openai" } = options;
+    const message = `Mapick Cost Firewall: Request blocked (${reason}). Provider: ${provider}, Model: ${model}.`;
+    if (format === "anthropic") {
+        yield {
+            type: "message_start",
+            message: {
+                id: `msg_mapick_${Date.now()}`,
+                type: "message",
+                role: "assistant",
+                content: [],
+                model: "mapick-blocked",
+                stop_reason: "end_turn",
+                usage: { input_tokens: 0, output_tokens: 0 },
+            },
+        };
+        yield {
+            type: "content_block_start",
+            index: 0,
+            content_block: { type: "text", text: "" },
+        };
+        yield {
+            type: "content_block_delta",
+            index: 0,
+            delta: { type: "text_delta", text: message },
+        };
+        yield {
+            type: "content_block_stop",
+            index: 0,
+        };
+        yield {
+            type: "message_delta",
+            delta: { stop_reason: "end_turn" },
+            usage: { output_tokens: 0 },
+        };
+    }
+    else {
+        yield {
+            id: `chatcmpl_mapick_${Date.now()}`,
+            object: "chat.completion.chunk",
+            created: Math.floor(Date.now() / 1000),
+            model: "mapick-blocked",
+            choices: [
+                {
+                    index: 0,
+                    delta: { role: "assistant", content: message },
+                    finish_reason: "stop",
+                },
+            ],
+            usage: { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 },
+        };
+    }
+}
+//# sourceMappingURL=synthetic.js.map

package/dist/provider/synthetic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"synthetic.js","sourceRoot":"","sources":["../../src/provider/synthetic.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,mBAAmB,CACxC,OAA6B;IAE7B,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC/D,MAAM,OAAO,GAAG,0CAA0C,MAAM,gBAAgB,QAAQ,YAAY,KAAK,GAAG,CAAC;IAE7G,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM;YACJ,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE;gBACP,EAAE,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC9B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,gBAAgB;gBACvB,WAAW,EAAE,UAAU;gBACvB,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE;aAC7C;SACF,CAAC;QAEF,MAAM;YACJ,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,CAAC;YACR,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;SAC1C,CAAC;QAEF,MAAM;YACJ,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;SAC7C,CAAC;QAEF,MAAM;YACJ,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,CAAC;SACT,CAAC;QAEF,MAAM;YACJ,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;YAClC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;SAC5B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM;YACJ,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE;YACnC,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACtC,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE;oBAC9C,aAAa,EAAE,MAAM;iBACtB;aACF;YACD,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SACnE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/provider/upstream/anthropic.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Anthropic Messages API upstream transport
+ */
+export interface AnthropicStreamOptions {
+    apiKey: string;
+    model: string;
+    messages: any[];
+    max_tokens?: number;
+    stream?: boolean;
+    [key: string]: any;
+}
+export declare function streamAnthropic(options: AnthropicStreamOptions): AsyncGenerator<any>;
+//# sourceMappingURL=anthropic.d.ts.map