@salimassili/ai-costguard 1.1.3

package/dist/core/StateStore.js

@@ -0,0 +1,336 @@
+"use strict";
+/**
+ * StateStore.ts - Unified State Management
+ *
+ * This is the SINGLE source of truth for all state in AI Execution Firewall.
+ * Handles: request history, hashing, persistence (file-based)
+ * Used ONLY by DetectionEngine - no direct access from CLI/SDK/Proxy
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stateStore = exports.StateStore = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const crypto_1 = require("crypto");
+const perf_hooks_1 = require("perf_hooks");
+const AIFW_DIR = path.join(os.homedir(), '.aifw');
+const HISTORY_FILE = path.join(AIFW_DIR, 'history.jsonl');
+const REDIS_HISTORY_KEY = 'aifw:history';
+const HISTORY_RETENTION_MS = 86400000;
+class FilePersistence {
+    constructor() {
+        this.name = 'file';
+    }
+    initialize() {
+        if (!fs.existsSync(AIFW_DIR)) {
+            fs.mkdirSync(AIFW_DIR, { recursive: true });
+        }
+    }
+    load() {
+        if (!fs.existsSync(HISTORY_FILE)) {
+            return [];
+        }
+        const lines = fs.readFileSync(HISTORY_FILE, 'utf-8').split('\n');
+        const records = [];
+        for (const line of lines) {
+            if (!line.trim())
+                continue;
+            try {
+                const record = JSON.parse(line);
+                records.push(record);
+            }
+            catch {
+                // skip corrupted line
+            }
+        }
+        return records;
+    }
+    append(record) {
+        fs.appendFileSync(HISTORY_FILE, JSON.stringify(record) + '\n');
+    }
+    clear() {
+        if (fs.existsSync(HISTORY_FILE)) {
+            fs.unlinkSync(HISTORY_FILE);
+        }
+    }
+}
+class RedisPersistence {
+    constructor() {
+        this.name = 'redis';
+        this.client = null;
+        this.fallback = new FilePersistence();
+        this.ready = false;
+    }
+    async initialize() {
+        this.fallback.initialize();
+        try {
+            // Optional dependency: if missing or unavailable, fallback to file persistence.
+            const redisModule = require('redis');
+            const url = process.env.REDIS_URL;
+            if (!url) {
+                return;
+            }
+            this.client = redisModule.createClient({ url });
+            if (!this.client.isOpen) {
+                await this.client.connect();
+            }
+            this.ready = true;
+        }
+        catch {
+            this.ready = false;
+        }
+    }
+    async load() {
+        if (!this.ready || !this.client) {
+            return this.fallback.load();
+        }
+        try {
+            const lines = await this.client.lRange(REDIS_HISTORY_KEY, 0, -1);
+            const records = [];
+            for (const line of lines) {
+                try {
+                    records.push(JSON.parse(line));
+                }
+                catch {
+                    // skip malformed redis entries
+                }
+            }
+            return records;
+        }
+        catch {
+            return this.fallback.load();
+        }
+    }
+    append(record) {
+        // Always persist to local file for fallback and observability.
+        this.fallback.append(record);
+        if (!this.ready || !this.client) {
+            return;
+        }
+        void this.client.rPush(REDIS_HISTORY_KEY, JSON.stringify(record)).catch(() => undefined);
+    }
+    clear() {
+        this.fallback.clear();
+        if (!this.ready || !this.client) {
+            return;
+        }
+        void this.client.del(REDIS_HISTORY_KEY).catch(() => undefined);
+    }
+}
+/**
+ * Unified StateStore - Singleton
+ * All state lives here. All persistence happens here.
+ */
+class StateStore {
+    constructor() {
+        this.cache = new Map();
+        this.initialized = false;
+        this.persistence = this.createPersistence();
+        void this.initialize();
+    }
+    static getInstance() {
+        if (!StateStore.instance) {
+            StateStore.instance = new StateStore();
+        }
+        return StateStore.instance;
+    }
+    /**
+     * Initialize storage directory and load existing history
+     */
+    initialize() {
+        if (this.initialized)
+            return;
+        this.persistence.initialize();
+        void this.loadHistory();
+        this.initialized = true;
+    }
+    /**
+     * Load all history from disk into memory cache
+     */
+    async loadHistory() {
+        const records = await this.persistence.load();
+        const now = Date.now();
+        for (const record of records) {
+            if (now - record.timestamp >= HISTORY_RETENTION_MS) {
+                continue;
+            }
+            if (!this.cache.has(record.promptHash)) {
+                this.cache.set(record.promptHash, []);
+            }
+            this.cache.get(record.promptHash).push(record);
+        }
+    }
+    /**
+     * Generate hash for prompt + context
+     */
+    generateHash(prompt, context) {
+        return (0, crypto_1.createHash)('sha256').update(prompt + (context || '')).digest('hex');
+    }
+    /**
+     * Get recent requests by hash within time window
+     */
+    getRecentByHash(hash, windowMs = 30000) {
+        const now = Date.now();
+        const records = this.cache.get(hash) || [];
+        return records.filter(r => (now - r.timestamp) < windowMs);
+    }
+    /**
+     * Get all recent requests within time window
+     */
+    getAllRecent(windowMs = 3600000) {
+        const now = Date.now();
+        const allRecords = [];
+        for (const records of this.cache.values()) {
+            allRecords.push(...records.filter(r => (now - r.timestamp) < windowMs));
+        }
+        return allRecords.sort((a, b) => b.timestamp - a.timestamp);
+    }
+    /**
+     * Add a record to state (memory + disk)
+     */
+    addRecord(record) {
+        // Add to cache
+        if (!this.cache.has(record.promptHash)) {
+            this.cache.set(record.promptHash, []);
+        }
+        this.cache.get(record.promptHash).push(record);
+        this.persistence.append(record);
+    }
+    /**
+     * Get statistics for time window
+     */
+    getStats(hours = 24) {
+        const windowMs = hours * 3600000;
+        const now = Date.now();
+        const records = this.getAllRecent(windowMs);
+        return {
+            totalRequests: records.length,
+            blockedRequests: records.filter(r => r.wasBlocked).length,
+            warnedRequests: records.filter(r => r.wasWarned && !r.wasBlocked).length,
+            totalCost: records.reduce((sum, r) => sum + r.estimatedCost, 0),
+            preventedCost: records.filter(r => r.wasBlocked).reduce((sum, r) => sum + r.estimatedCost, 0),
+        };
+    }
+    /**
+     * Get blocked requests
+     */
+    getBlocked(limit = 10) {
+        return this.getAllRecent(86400000)
+            .filter(r => r.wasBlocked)
+            .slice(0, limit);
+    }
+    /**
+     * Calculate similarity between two strings (Levenshtein)
+     */
+    calculateSimilarity(str1, str2) {
+        if (!str1 || !str2)
+            return 0;
+        if (str1 === str2)
+            return 1;
+        const len1 = Math.min(str1.length, 500);
+        const len2 = Math.min(str2.length, 500);
+        const s1 = str1.substring(0, len1);
+        const s2 = str2.substring(0, len2);
+        const matrix = [];
+        for (let i = 0; i <= len1; i++) {
+            matrix[i] = [i];
+        }
+        for (let j = 0; j <= len2; j++) {
+            matrix[0][j] = j;
+        }
+        for (let i = 1; i <= len1; i++) {
+            for (let j = 1; j <= len2; j++) {
+                const cost = s1[i - 1] === s2[j - 1] ? 0 : 1;
+                matrix[i][j] = Math.min(matrix[i - 1][j] + 1, matrix[i][j - 1] + 1, matrix[i - 1][j - 1] + cost);
+            }
+        }
+        const distance = matrix[len1][len2];
+        const maxLength = Math.max(len1, len2);
+        return 1 - distance / maxLength;
+    }
+    /**
+     * Clear all history (for testing)
+     */
+    clear() {
+        this.cache.clear();
+        this.persistence.clear();
+    }
+    /**
+     * Reload state from disk (for testing)
+     */
+    reload() {
+        this.cache.clear();
+        this.initialized = false;
+        this.initialize();
+    }
+    /**
+     * Reset for testing - fully restore initial state
+     */
+    reset() {
+        this.cache.clear();
+        this.initialized = false;
+        this.persistence.clear();
+        this.initialize();
+    }
+    getPersistenceMode() {
+        return this.persistence.name;
+    }
+    createPersistence() {
+        const mode = (process.env.AIFW_STORAGE_BACKEND || 'file').toLowerCase();
+        if (mode === 'redis') {
+            return new RedisPersistence();
+        }
+        return new FilePersistence();
+    }
+    getOperationalMetrics(hours = 24) {
+        const start = perf_hooks_1.performance.now();
+        const stats = this.getStats(hours);
+        const falsePositiveIndicator = stats.warnedRequests > 0
+            ? Number((stats.warnedRequests / Math.max(1, stats.warnedRequests + stats.blockedRequests)).toFixed(4))
+            : 0;
+        return {
+            total_cost_saved: Number(stats.preventedCost.toFixed(4)),
+            blocked_requests_count: stats.blockedRequests,
+            false_positive_indicator: falsePositiveIndicator,
+            avg_analysis_latency_ms: Number((perf_hooks_1.performance.now() - start).toFixed(4)),
+            storage_backend: this.persistence.name,
+        };
+    }
+}
+exports.StateStore = StateStore;
+// Export singleton instance
+exports.stateStore = StateStore.getInstance();
+//# sourceMappingURL=StateStore.js.map

package/dist/core/StateStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StateStore.js","sourceRoot":"","sources":["../../src/core/StateStore.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,mCAAoC;AACpC,2CAAyC;AA0BzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAClD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC1D,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAUtC,MAAM,eAAe;IAArB;QACE,SAAI,GAAW,MAAM,CAAC;IAmCxB,CAAC;IAjCC,UAAU;QACR,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,MAAqB;QAC1B,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,KAAK;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAUD,MAAM,gBAAgB;IAAtB;QACE,SAAI,GAAY,OAAO,CAAC;QAChB,WAAM,GAA2B,IAAI,CAAC;QAC7B,aAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QAC1C,UAAK,GAAG,KAAK,CAAC;IA2DxB,CAAC;IAzDC,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,gFAAgF;YAChF,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAElC,CAAC;YACF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,OAAO,GAAoB,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,+BAA+B;gBACjC,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAqB;QAC1B,+DAA+D;QAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;GAGG;AACH,MAAa,UAAU;IAMrB;QAJQ,UAAK,GAAiC,IAAI,GAAG,EAAE,CAAC;QAChD,gBAAW,GAAG,KAAK,CAAC;QAI1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,GAAG,IAAI,UAAU,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,oBAAoB,EAAE,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc,EAAE,OAAgB;QAC3C,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAY,EAAE,WAAmB,KAAK;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,WAAmB,OAAO;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAoB,EAAE,CAAC;QAEvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAqB;QAC7B,eAAe;QACf,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB,EAAE;QACzB,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5C,OAAO;YACL,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM;YACzD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM;YACxE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YAC/D,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;SAC9F,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB,EAAE;QAC3B,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;aACzB,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,IAAY,EAAE,IAAY;QAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CACrB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EACpB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EACpB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAEO,iBAAiB;QACvB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACxE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,gBAAgB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,eAAe,EAAE,CAAC;IAC/B,CAAC;IAED,qBAAqB,CAAC,QAAgB,EAAE;QAOtC,MAAM,KAAK,GAAG,wBAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,sBAAsB,GAC1B,KAAK,CAAC,cAAc,GAAG,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACvG,CAAC,CAAC,CAAC,CAAC;QACR,OAAO;YACL,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACxD,sBAAsB,EAAE,KAAK,CAAC,eAAe;YAC7C,wBAAwB,EAAE,sBAAsB;YAChD,uBAAuB,EAAE,MAAM,CAAC,CAAC,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACvE,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;SACvC,CAAC;IACJ,CAAC;CACF;AAlND,gCAkNC;AAED,4BAA4B;AACf,QAAA,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,3 @@
+export * from './DetectionEngine';
+export * from './StateStore';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./DetectionEngine"), exports);
+__exportStar(require("./StateStore"), exports);
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,+CAA6B"}

package/dist/core/types.d.ts

@@ -0,0 +1,26 @@
+export interface FirewallMetadata {
+    orgId?: string;
+    teamId?: string;
+    appId?: string;
+    userId?: string;
+    sessionId?: string;
+    agentId?: string;
+    workflowId?: string;
+    apiKeyId?: string;
+    requestId?: string;
+    provider?: string;
+    integration?: string;
+    model?: string;
+    [key: string]: string | number | boolean | undefined;
+}
+export interface TokenBreakdown {
+    inputTokens?: number;
+    outputTokens?: number;
+    totalTokens?: number;
+    cachedInputTokens?: number;
+    reasoningTokens?: number;
+    audioInputTokens?: number;
+    audioOutputTokens?: number;
+    imageUnits?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/core/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":""}

package/dist/cost-guard.d.ts

@@ -0,0 +1,41 @@
+/**
+ * CostGuard - AI Agent Cost Prevention SDK
+ *
+ * ONE PURPOSE: Prevent cost explosions BEFORE they happen.
+ * THREE RULES: Loop detection, cost limits, deduplication.
+ * ONE LINE: Wraps your SDK client.
+ *
+ * NO ML. NO PROXY. NO INFRA. NO PLATFORM.
+ * Just in-process deterministic cost prevention.
+ */
+export interface GuardConfig {
+    maxCostPerSession?: number;
+    maxStepsPerSession?: number;
+    maxDuplicateCalls?: number;
+    failOpen?: boolean;
+}
+export interface GuardResult {
+    allowed: boolean;
+    reason?: string;
+    blockedCost?: number;
+    latencyMs: number;
+}
+export interface CallContext {
+    sessionId: string;
+    step: number;
+    operation: string;
+    estimatedCost: number;
+    inputHash: string;
+}
+export declare function initGuard(config?: GuardConfig): void;
+/**
+ * Wrap an OpenAI/Anthropic client with cost protection.
+ *
+ * ONE LINE INTEGRATION:
+ * ```typescript
+ * const client = guard(new OpenAI({ apiKey }));
+ * ```
+ */
+export declare function guard<T extends object>(client: T, sessionId?: string): T;
+export declare function check(sessionId: string, operation: string, estimatedCost: number, input: string): GuardResult;
+//# sourceMappingURL=cost-guard.d.ts.map

package/dist/cost-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-guard.d.ts","sourceRoot":"","sources":["../src/cost-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,WAAW,WAAW;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AA2ND,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAEpD;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,CAkDxE;AAmBD,wBAAgB,KAAK,CACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,WAAW,CAkBb"}