@mapick/cost-firewall 0.1.0

package/dist/tools/index.js

@@ -0,0 +1,63 @@
+/**
+ * Agent Tools registration — users control Cost Firewall via conversation
+ *
+ * Usage:
+ *   /firewall status  → view status
+ *   /firewall stop    → emergency breaker
+ *   /firewall resume  → resume
+ *   /firewall log     → view recent events
+ */
+import { getStatus, getLog } from "../cli/index.js";
+export function registerTools(api, state, store) {
+    api.logger?.info(`[mapick-firewall] registerTools: mode=${api.registrationMode}`);
+    // Try using api.registerCommand instead of api.registerTool
+    if (typeof api.registerCommand === "function") {
+        api.logger?.info(`[mapick-firewall] registerCommand is available`);
+        api.registerCommand({
+            name: "firewall",
+            description: "Cost Firewall commands",
+            parameters: {
+                type: "object",
+                properties: {
+                    action: {
+                        type: "string",
+                        enum: ["status", "stop", "resume", "mode", "log", "budget"],
+                        description: "Action to perform"
+                    }
+                },
+                required: ["action"]
+            },
+            async execute(_toolCallId, params) {
+                api.logger?.info(`[mapick-firewall] command executed: ${params.action}`);
+                switch (params.action) {
+                    case "status": return { content: [{ type: "text", text: JSON.stringify(await getStatus(state, store), null, 2) }] };
+                    case "stop":
+                        state.setEmergencyStop(true);
+                        return { content: [{ type: "text", text: "Emergency stop activated." }] };
+                    case "resume":
+                        state.setEmergencyStop(false);
+                        return { content: [{ type: "text", text: "Resumed." }] };
+                    case "log": return { content: [{ type: "text", text: JSON.stringify(await getLog(store, 10), null, 2) }] };
+                    case "budget": return { content: [{ type: "text", text: `Daily token limit: ${state.config.dailyTokenLimit?.toLocaleString() ?? "unlimited"} tokens` }] };
+                    case "mode": return { content: [{ type: "text", text: `Mode: ${state.globalStats.mode}` }] };
+                    default: return { content: [{ type: "text", text: `Unknown action: ${params.action}` }] };
+                }
+            },
+        });
+        api.logger?.info(`[mapick-firewall] registerCommand done`);
+    }
+    else {
+        api.logger?.warn(`[mapick-firewall] registerCommand NOT available, trying registerTool...`);
+        api.registerTool({
+            name: "firewall_status",
+            description: "View Cost Firewall status: mode, tokens used, blocked count, token limit.",
+            parameters: { type: "object", properties: {}, required: [] },
+            async execute() {
+                const s = await getStatus(state, store);
+                return { content: [{ type: "text", text: JSON.stringify(s, null, 2) }] };
+            },
+        });
+        api.logger?.info(`[mapick-firewall] registerTool done`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,UAAU,aAAa,CAAC,GAAQ,EAAE,KAAoB,EAAE,KAAiB;IAC7E,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,yCAAyC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAElF,4DAA4D;IAC5D,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC9C,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACnE,GAAG,CAAC,eAAe,CAAC;YAClB,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,wBAAwB;YACrC,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;wBAC3D,WAAW,EAAE,mBAAmB;qBACjC;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;YACD,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAAW;gBAC5C,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,uCAAuC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzE,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;oBACpH,KAAK,MAAM;wBAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;wBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC;oBACrH,KAAK,QAAQ;wBAAE,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;wBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;oBACvG,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3G,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAuB,KAAK,CAAC,MAAc,CAAC,eAAe,EAAE,cAAc,EAAE,IAAI,WAAW,SAAS,EAAE,CAAC,EAAE,CAAC;oBACnK,KAAK,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;oBAC7F,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC5F,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,yEAAyE,CAAC,CAAC;QAC5F,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,2EAA2E;YACxF,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5D,KAAK,CAAC,OAAO;gBACX,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3E,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Shared type definitions
+ */
+export type SourceKey = string;
+export interface CallState {
+    callId: string;
+    provider: string;
+    model: string;
+    api?: string;
+    transport?: string;
+    startedAt: number;
+    durationMs?: number;
+    outcome?: "completed" | "error";
+    errorCategory?: string;
+    failureKind?: string;
+    requestPayloadBytes?: number;
+    responseStreamBytes?: number;
+    estimatedCost?: number;
+}
+export interface RunState {
+    runId: string;
+    sessionId?: string;
+    sessionKey?: string;
+    source: SourceKey;
+    startedAt: number;
+    calls: Map<string, CallState>;
+    llmCallTimestamps: number[];
+    cumulativeCost: number;
+    promptHashCounts: Map<string, number>;
+    finalizeWarningEmitted?: boolean;
+    status: "healthy" | "warning" | "danger";
+    reason?: string;
+}
+export interface BreakerState {
+    source: SourceKey;
+    consecutiveFailures: number;
+    brokenUntil?: number;
+    reason?: string;
+    tokenHistory: {
+        ts: number;
+        tokens: number;
+    }[];
+    callTimestamps: number[];
+    lastCallTs?: number;
+    lastCallTokens?: number;
+}
+export interface FirewallConfig {
+    breaker?: {
+        consecutiveFailures?: number;
+        cooldownSec?: number;
+        tokenVelocityWindowSec?: number;
+        tokenVelocityThreshold?: number;
+        callFrequencyWindowSec?: number;
+        callFrequencyThreshold?: number;
+    };
+    dailyTokenLimit?: number | null;
+    privacy?: {
+        storePromptText?: boolean;
+        enableRawConversationHooks?: boolean;
+    };
+}
+export interface GlobalStats {
+    emergencyStop: boolean;
+    mode: "observe" | "protect";
+    todayTokens: number;
+    todayBlocked: number;
+    todaySavedEstimate: number;
+}
+export interface BlockDecision {
+    allow: boolean;
+    reason?: string;
+    layer: "hook" | "provider";
+}
+export interface PrecheckResult {
+    allow: boolean;
+    reason?: string;
+    layer: "hook" | "provider";
+}
+export interface FirewallEvent {
+    type: string;
+    timestamp: number;
+    runId?: string;
+    callId?: string;
+    source?: SourceKey;
+    provider?: string;
+    model?: string;
+    outcome?: string;
+    failureKind?: string;
+    estimatedCost?: number;
+    cumulativeTokens?: number;
+    reason?: string;
+    layer?: "hook" | "provider";
+    runCalls?: number;
+    status?: string;
+}
+export declare const PLUGIN_ID = "mapick-firewall";
+export declare const PLUGIN_NAME = "Mapick Cost Firewall";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAG/B,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAGD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAGD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAGD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE;QACR,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE;QACR,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,0BAA0B,CAAC,EAAE,OAAO,CAAC;KACtC,CAAC;CACH;AAGD,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;CAC5B;AAGD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;CAC5B;AAGD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAGD,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAC3C,eAAO,MAAM,WAAW,yBAAyB,CAAC"}

package/dist/types.js

@@ -0,0 +1,7 @@
+/**
+ * Shared type definitions
+ */
+// Plugin ID
+export const PLUGIN_ID = "mapick-firewall";
+export const PLUGIN_NAME = "Mapick Cost Firewall";
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8GH,YAAY;AACZ,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC"}

package/openclaw.plugin.json

@@ -0,0 +1,44 @@
+{
+  "id": "mapick-firewall",
+  "name": "Mapick Cost Firewall",
+  "description": "AI call circuit breaker — block runaway requests, see who's burning money, one-click emergency stop.",
+  "version": "0.1.0",
+  "providers": ["mapick"],
+  "contracts": {
+    "tools": ["firewall"]
+  },
+  "toolMetadata": {},
+  "modelSupport": {
+    "modelPrefixes": ["mapick/"]
+  },
+  "activation": {
+    "onStartup": true
+  },
+  "configSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "breaker": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "consecutiveFailures": { "type": "number", "default": 3 },
+          "cooldownSec": { "type": "number", "default": 30 },
+          "tokenVelocityWindowSec": { "type": "number", "default": 60 },
+          "tokenVelocityThreshold": { "type": "number", "default": 100000 },
+          "callFrequencyWindowSec": { "type": "number", "default": 60 },
+          "callFrequencyThreshold": { "type": "number", "default": 30 }
+        }
+      },
+      "dailyTokenLimit": { "type": ["number", "null"], "default": null },
+      "privacy": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "storePromptText": { "type": "boolean", "default": false },
+          "enableRawConversationHooks": { "type": "boolean", "default": false }
+        }
+      }
+    }
+  }
+}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@mapick/cost-firewall",
+  "version": "0.1.0",
+  "license": "MIT",
+  "description": "Mapick Cost Firewall — OpenClaw Plugs",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "openclaw.plugin.json"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src test"
+  },
+  "openclaw": {
+    "extensions": [
+      "./src/index.ts"
+    ],
+    "providers": ["mapick"],
+    "compat": {
+      "pluginApi": ">=2026.3.24-beta.2",
+      "minGatewayVersion": "2026.3.24-beta.2"
+    },
+    "build": {
+      "openclawVersion": "2026.3.24-beta.2",
+      "pluginSdkVersion": "2026.3.24-beta.2"
+    }
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.1.1"
+  }
+}