@nxuss/lemma 0.1.0 → 0.2.0

package/dist/esm/security/SecurityMiddleware.d.ts

@@ -0,0 +1,90 @@
+import { ApiKey } from './AuthManager';
+/**
+ * Security Middleware
+ * Integrates all security features into a single middleware
+ */
+export interface SecurityConfig {
+    auth: {
+        enabled: boolean;
+        requireApiKey: boolean;
+        allowedOrigins?: string[];
+        defaultRateLimit?: {
+            requestsPerMinute: number;
+            requestsPerHour: number;
+        };
+    };
+    rateLimit: {
+        enabled: boolean;
+        requestsPerMinute: number;
+        requestsPerHour: number;
+        blockDuration?: number;
+    };
+    sanitization: {
+        enabled: boolean;
+        maxStringLength?: number;
+        maxArrayLength?: number;
+        maxObjectDepth?: number;
+    };
+}
+export interface SecurityCheckResult {
+    allowed: boolean;
+    reason?: string;
+    apiKey?: ApiKey;
+    rateLimit?: {
+        remaining: {
+            perMinute: number;
+            perHour: number;
+        };
+        resetAt?: number;
+    };
+    sanitizedMessage?: any;
+}
+export declare class SecurityMiddleware {
+    private authManager;
+    private rateLimiter;
+    private sanitizer;
+    private config;
+    constructor(config: SecurityConfig);
+    /**
+     * Check if a request is allowed
+     * @param isConnectionCheck - true when called for the initial TCP/WS connection
+     *   (before any protocol message arrives). Skips message structure validation.
+     */
+    checkRequest(apiKey: string | undefined, origin: string | undefined, message: any, identifier: string, isConnectionCheck?: boolean): SecurityCheckResult;
+    /**
+     * Generate a new API key
+     */
+    generateApiKey(agentId: string, name: string, options?: {
+        expiresIn?: number;
+        permissions?: string[];
+        rateLimit?: {
+            requestsPerMinute: number;
+            requestsPerHour: number;
+        };
+    }): string;
+    /**
+     * Revoke an API key
+     */
+    revokeApiKey(key: string): boolean;
+    /**
+     * List API keys
+     */
+    listApiKeys(agentId?: string): ApiKey[];
+    /**
+     * Get rate limit usage
+     */
+    getRateLimitUsage(identifier: string): {
+        minuteRequests: number;
+        hourRequests: number;
+        blockedUntil?: number;
+    };
+    /**
+     * Reset rate limit for an identifier
+     */
+    resetRateLimit(identifier: string): void;
+    /**
+     * Destroy security middleware
+     */
+    destroy(): void;
+}
+//# sourceMappingURL=SecurityMiddleware.d.ts.map

package/dist/esm/security/SecurityMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMiddleware.d.ts","sourceRoot":"","sources":["../../../src/security/SecurityMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,MAAM,EAAE,MAAM,eAAe,CAAC;AAIpD;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,EAAE,OAAO,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,CAAC,EAAE;YACjB,iBAAiB,EAAE,MAAM,CAAC;YAC1B,eAAe,EAAE,MAAM,CAAC;SACzB,CAAC;KACH,CAAC;IACF,SAAS,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,YAAY,EAAE;QACZ,OAAO,EAAE,OAAO,CAAC;QACjB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,SAAS,EAAE;YACT,SAAS,EAAE,MAAM,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,gBAAgB,CAAC,EAAE,GAAG,CAAC;CACxB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAOlC;;;;OAIG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,GAAG,EACZ,UAAU,EAAE,MAAM,EAClB,iBAAiB,UAAQ,GACxB,mBAAmB;IA2GtB;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,SAAS,CAAC,EAAE;YAAE,iBAAiB,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;KACpE,GACA,MAAM;IAIT;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIlC;;OAEG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAIvC;;OAEG;IACH,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG;QACrC,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB;IAID;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,OAAO,IAAI,IAAI;CAGhB"}

package/dist/esm/security/SecurityMiddleware.js

@@ -0,0 +1,144 @@
+import { AuthManager } from './AuthManager';
+import { RateLimiter } from './RateLimiter';
+import { MessageSanitizer } from './MessageSanitizer';
+export class SecurityMiddleware {
+    constructor(config) {
+        this.config = config;
+        this.authManager = new AuthManager(config.auth);
+        this.rateLimiter = new RateLimiter();
+        this.sanitizer = new MessageSanitizer(config.sanitization);
+    }
+    /**
+     * Check if a request is allowed
+     * @param isConnectionCheck - true when called for the initial TCP/WS connection
+     *   (before any protocol message arrives). Skips message structure validation.
+     */
+    checkRequest(apiKey, origin, message, identifier, isConnectionCheck = false) {
+        // 1. Check authentication
+        if (this.config.auth.enabled) {
+            const authResult = this.authManager.validateApiKey(apiKey || '');
+            if (!authResult.valid) {
+                return {
+                    allowed: false,
+                    reason: authResult.reason || 'Authentication failed',
+                };
+            }
+            // Check origin (CORS)
+            if (origin && !this.authManager.validateOrigin(origin)) {
+                return {
+                    allowed: false,
+                    reason: 'Origin not allowed',
+                };
+            }
+            // 2. Check rate limit
+            if (this.config.rateLimit.enabled && authResult.apiKey) {
+                const rateLimit = this.authManager.getRateLimit(authResult.apiKey);
+                const rateLimitResult = this.rateLimiter.checkLimit(identifier, {
+                    ...rateLimit,
+                    blockDuration: this.config.rateLimit.blockDuration,
+                });
+                if (!rateLimitResult.allowed) {
+                    return {
+                        allowed: false,
+                        reason: 'Rate limit exceeded',
+                        rateLimit: {
+                            remaining: rateLimitResult.remaining,
+                            resetAt: rateLimitResult.resetAt,
+                        },
+                    };
+                }
+                // 3. Sanitize message
+                let sanitizedMessage = message;
+                if (this.config.sanitization.enabled && !isConnectionCheck) {
+                    const sanitizationResult = this.sanitizer.sanitizeAndValidate(message);
+                    if (!sanitizationResult.valid) {
+                        return {
+                            allowed: false,
+                            reason: `Message validation failed: ${sanitizationResult.errors?.join(', ')}`,
+                        };
+                    }
+                    sanitizedMessage = sanitizationResult.sanitized;
+                }
+                return {
+                    allowed: true,
+                    apiKey: authResult.apiKey,
+                    rateLimit: {
+                        remaining: rateLimitResult.remaining,
+                    },
+                    sanitizedMessage,
+                };
+            }
+        }
+        // If auth is disabled, still check rate limit and sanitization
+        if (this.config.rateLimit.enabled) {
+            const rateLimitResult = this.rateLimiter.checkLimit(identifier, {
+                requestsPerMinute: this.config.rateLimit.requestsPerMinute,
+                requestsPerHour: this.config.rateLimit.requestsPerHour,
+                blockDuration: this.config.rateLimit.blockDuration,
+            });
+            if (!rateLimitResult.allowed) {
+                return {
+                    allowed: false,
+                    reason: 'Rate limit exceeded',
+                    rateLimit: {
+                        remaining: rateLimitResult.remaining,
+                        resetAt: rateLimitResult.resetAt,
+                    },
+                };
+            }
+        }
+        // Sanitize message
+        let sanitizedMessage = message;
+        if (this.config.sanitization.enabled && !isConnectionCheck) {
+            const sanitizationResult = this.sanitizer.sanitizeAndValidate(message);
+            if (!sanitizationResult.valid) {
+                return {
+                    allowed: false,
+                    reason: `Message validation failed: ${sanitizationResult.errors?.join(', ')}`,
+                };
+            }
+            sanitizedMessage = sanitizationResult.sanitized;
+        }
+        return {
+            allowed: true,
+            sanitizedMessage,
+        };
+    }
+    /**
+     * Generate a new API key
+     */
+    generateApiKey(agentId, name, options) {
+        return this.authManager.generateApiKey(agentId, name, options);
+    }
+    /**
+     * Revoke an API key
+     */
+    revokeApiKey(key) {
+        return this.authManager.revokeApiKey(key);
+    }
+    /**
+     * List API keys
+     */
+    listApiKeys(agentId) {
+        return this.authManager.listApiKeys(agentId);
+    }
+    /**
+     * Get rate limit usage
+     */
+    getRateLimitUsage(identifier) {
+        return this.rateLimiter.getUsage(identifier);
+    }
+    /**
+     * Reset rate limit for an identifier
+     */
+    resetRateLimit(identifier) {
+        this.rateLimiter.reset(identifier);
+    }
+    /**
+     * Destroy security middleware
+     */
+    destroy() {
+        this.rateLimiter.destroy();
+    }
+}
+//# sourceMappingURL=SecurityMiddleware.js.map

package/dist/esm/security/SecurityMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMiddleware.js","sourceRoot":"","sources":["../../../src/security/SecurityMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAU,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAmB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AA6CtD,MAAM,OAAO,kBAAkB;IAM7B,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,YAAY,CACV,MAA0B,EAC1B,MAA0B,EAC1B,OAAY,EACZ,UAAkB,EAClB,iBAAiB,GAAG,KAAK;QAEzB,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAEjE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,uBAAuB;iBACrD,CAAC;YACJ,CAAC;YAED,sBAAsB;YACtB,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,oBAAoB;iBAC7B,CAAC;YACJ,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnE,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,EAAE;oBAC9D,GAAG,SAAS;oBACZ,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa;iBACnD,CAAC,CAAC;gBAEH,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;oBAC7B,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,qBAAqB;wBAC7B,SAAS,EAAE;4BACT,SAAS,EAAE,eAAe,CAAC,SAAS;4BACpC,OAAO,EAAE,eAAe,CAAC,OAAO;yBACjC;qBACF,CAAC;gBACJ,CAAC;gBAED,sBAAsB;gBACtB,IAAI,gBAAgB,GAAG,OAAO,CAAC;gBAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC3D,MAAM,kBAAkB,GACtB,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBAE9C,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;wBAC9B,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,MAAM,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;yBAC9E,CAAC;oBACJ,CAAC;oBAED,gBAAgB,GAAG,kBAAkB,CAAC,SAAS,CAAC;gBAClD,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,SAAS,EAAE;wBACT,SAAS,EAAE,eAAe,CAAC,SAAS;qBACrC;oBACD,gBAAgB;iBACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,EAAE;gBAC9D,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB;gBAC1D,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe;gBACtD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa;aACnD,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,qBAAqB;oBAC7B,SAAS,EAAE;wBACT,SAAS,EAAE,eAAe,CAAC,SAAS;wBACpC,OAAO,EAAE,eAAe,CAAC,OAAO;qBACjC;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAEvE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;gBAC9B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC9E,CAAC;YACJ,CAAC;YAED,gBAAgB,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAClD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,OAAe,EACf,IAAY,EACZ,OAIC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,GAAW;QACtB,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAgB;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAkB;QAKlC,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,UAAkB;QAC/B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/esm/security/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Security Module
+ * Exports all security-related components
+ */
+export { AuthManager, ApiKey, AuthConfig } from './AuthManager';
+export { RateLimiter, RateLimitConfig } from './RateLimiter';
+export { MessageSanitizer, SanitizationResult } from './MessageSanitizer';
+export { SecurityMiddleware, SecurityConfig, SecurityCheckResult } from './SecurityMiddleware';
+/**
+ * Default security configuration
+ */
+export declare const DEFAULT_SECURITY_CONFIG: {
+    auth: {
+        enabled: boolean;
+        requireApiKey: boolean;
+        allowedOrigins: string[];
+        defaultRateLimit: {
+            requestsPerMinute: number;
+            requestsPerHour: number;
+        };
+    };
+    rateLimit: {
+        enabled: boolean;
+        requestsPerMinute: number;
+        requestsPerHour: number;
+        blockDuration: number;
+    };
+    sanitization: {
+        enabled: boolean;
+        maxStringLength: number;
+        maxArrayLength: number;
+        maxObjectDepth: number;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE/F;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;CAsBnC,CAAC"}

package/dist/esm/security/index.js

@@ -0,0 +1,35 @@
+/**
+ * Security Module
+ * Exports all security-related components
+ */
+export { AuthManager } from './AuthManager';
+export { RateLimiter } from './RateLimiter';
+export { MessageSanitizer } from './MessageSanitizer';
+export { SecurityMiddleware } from './SecurityMiddleware';
+/**
+ * Default security configuration
+ */
+export const DEFAULT_SECURITY_CONFIG = {
+    auth: {
+        enabled: false, // Disabled by default for development
+        requireApiKey: false,
+        allowedOrigins: ['*'],
+        defaultRateLimit: {
+            requestsPerMinute: 60,
+            requestsPerHour: 1000,
+        },
+    },
+    rateLimit: {
+        enabled: true,
+        requestsPerMinute: 60,
+        requestsPerHour: 1000,
+        blockDuration: 60000, // 1 minute
+    },
+    sanitization: {
+        enabled: true,
+        maxStringLength: 10000,
+        maxArrayLength: 1000,
+        maxObjectDepth: 10,
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/esm/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAsB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,WAAW,EAAmB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAsB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAuC,MAAM,sBAAsB,CAAC;AAE/F;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE;QACJ,OAAO,EAAE,KAAK,EAAE,sCAAsC;QACtD,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,CAAC,GAAG,CAAC;QACrB,gBAAgB,EAAE;YAChB,iBAAiB,EAAE,EAAE;YACrB,eAAe,EAAE,IAAI;SACtB;KACF;IACD,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK,EAAE,WAAW;KAClC;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,EAAE;KACnB;CACF,CAAC"}

package/dist/esm/speculative/PredictionEngine.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Prediction Engine - Speculative Execution v2.0
+ *
+ * Analyzes historical request patterns and predicts the next 3 most probable
+ * agent requests using lightweight local models (Llama 3.2 1B/3B).
+ *
+ * Features:
+ * - Pattern analysis from request history
+ * - Confidence scoring (0.0-1.0)
+ * - Lightweight model inference
+ * - Real-time prediction updates
+ */
+import { EventEmitter } from 'events';
+export interface PredictionRequest {
+    taskType: string;
+    context: string;
+    agentId?: string;
+    timestamp: number;
+}
+export interface Prediction {
+    id: string;
+    taskType: string;
+    context: string;
+    confidence: number;
+    reasoning: string;
+    timestamp: number;
+    expiresAt: number;
+}
+export interface PredictionEngineConfig {
+    ollamaUrl?: string;
+    modelName?: string;
+    maxPredictions?: number;
+    minConfidence?: number;
+    historySize?: number;
+    predictionTTL?: number;
+}
+export interface PredictionMetrics {
+    totalPredictions: number;
+    accuratePredictions: number;
+    accuracy: number;
+    averageConfidence: number;
+    predictionTime: number;
+}
+export declare class PredictionEngine extends EventEmitter {
+    private config;
+    private requestHistory;
+    private activePredictions;
+    private metrics;
+    constructor(config?: PredictionEngineConfig);
+    /**
+     * Record a new request in the history
+     */
+    recordRequest(request: PredictionRequest): void;
+    /**
+     * Generate predictions based on current history
+     */
+    generatePredictions(): Promise<Prediction[]>;
+    /**
+     * Check if a request matches any active prediction
+     */
+    matchPrediction(request: PredictionRequest): Prediction | null;
+    /**
+     * Analyze patterns in request history
+     */
+    private analyzePatterns;
+    /**
+     * Use lightweight model to predict next requests
+     */
+    private predictNextRequests;
+    /**
+     * Build prompt for prediction model
+     */
+    private buildPredictionPrompt;
+    /**
+     * Parse predictions from model response
+     */
+    private parsePredictions;
+    /**
+     * Calculate similarity score between request and prediction
+     */
+    private calculateMatchScore;
+    /**
+     * Simple text similarity using word overlap
+     */
+    private calculateTextSimilarity;
+    /**
+     * Get current metrics
+     */
+    getMetrics(): PredictionMetrics;
+    /**
+     * Get active predictions
+     */
+    getActivePredictions(): Prediction[];
+    /**
+     * Clear all predictions and history
+     */
+    clear(): void;
+}
+//# sourceMappingURL=PredictionEngine.d.ts.map

package/dist/esm/speculative/PredictionEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PredictionEngine.d.ts","sourceRoot":"","sources":["../../../src/speculative/PredictionEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAGtC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,cAAc,CAA2B;IACjD,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,OAAO,CAMb;gBAEU,MAAM,GAAE,sBAA2B;IAY/C;;OAEG;IACI,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IActD;;OAEG;IACU,mBAAmB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IA0CzD;;OAEG;IACI,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,UAAU,GAAG,IAAI;IAsCrE;;OAEG;IACH,OAAO,CAAC,eAAe;IAqCvB;;OAEG;YACW,mBAAmB;IAiCjC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA0BxB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAU/B;;OAEG;IACI,UAAU,IAAI,iBAAiB;IAItC;;OAEG;IACI,oBAAoB,IAAI,UAAU,EAAE;IAO3C;;OAEG;IACI,KAAK,IAAI,IAAI;CAWrB"}