@salimassili/ai-costguard 1.1.3

package/dist/cost-guard.js

@@ -0,0 +1,274 @@
+"use strict";
+/**
+ * CostGuard - AI Agent Cost Prevention SDK
+ *
+ * ONE PURPOSE: Prevent cost explosions BEFORE they happen.
+ * THREE RULES: Loop detection, cost limits, deduplication.
+ * ONE LINE: Wraps your SDK client.
+ *
+ * NO ML. NO PROXY. NO INFRA. NO PLATFORM.
+ * Just in-process deterministic cost prevention.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initGuard = initGuard;
+exports.guard = guard;
+exports.check = check;
+const perf_hooks_1 = require("perf_hooks");
+const crypto_1 = require("crypto");
+class SessionStore {
+    constructor() {
+        this.sessions = new Map();
+        this.maxSessions = 10000;
+        this.ttlMs = 60 * 60 * 1000; // 1 hour
+        setInterval(() => this.cleanup(), 60000);
+    }
+    get(sessionId) {
+        let session = this.sessions.get(sessionId);
+        if (!session) {
+            if (this.sessions.size >= this.maxSessions) {
+                this.evictOldest();
+            }
+            session = { totalCost: 0, steps: 0, callHashes: [], lastActivity: Date.now() };
+            this.sessions.set(sessionId, session);
+        }
+        session.lastActivity = Date.now();
+        return session;
+    }
+    recordCall(sessionId, inputHash, cost) {
+        const session = this.get(sessionId);
+        session.steps++;
+        session.totalCost += cost;
+        session.callHashes.push(inputHash);
+        // Keep only last 20 hashes for dedup
+        if (session.callHashes.length > 20) {
+            session.callHashes.shift();
+        }
+    }
+    countDuplicates(sessionId, inputHash) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return 0;
+        return session.callHashes.filter(h => h === inputHash).length;
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [id, session] of this.sessions) {
+            if (now - session.lastActivity > this.ttlMs) {
+                this.sessions.delete(id);
+            }
+        }
+    }
+    evictOldest() {
+        let oldest = null;
+        for (const [id, session] of this.sessions) {
+            if (!oldest || session.lastActivity < oldest.time) {
+                oldest = { id, time: session.lastActivity };
+            }
+        }
+        if (oldest)
+            this.sessions.delete(oldest.id);
+    }
+}
+class RuleEngine {
+    constructor(config) {
+        this.config = {
+            maxCostPerSession: 10,
+            maxStepsPerSession: 50,
+            maxDuplicateCalls: 3,
+            failOpen: true,
+            ...config,
+        };
+    }
+    // RULE 1: Cost Limit
+    checkCost(session, estimatedCost) {
+        const projected = session.totalCost + estimatedCost;
+        if (projected > this.config.maxCostPerSession) {
+            return {
+                triggered: true,
+                reason: `Cost limit: $${projected.toFixed(2)} > $${this.config.maxCostPerSession}`,
+                blockedCost: estimatedCost,
+            };
+        }
+        return { triggered: false };
+    }
+    // RULE 2: Loop Detection (step limit)
+    checkLoop(session) {
+        if (session.steps >= this.config.maxStepsPerSession) {
+            return {
+                triggered: true,
+                reason: `Step limit: ${session.steps} >= ${this.config.maxStepsPerSession}`,
+                blockedCost: 0,
+            };
+        }
+        return { triggered: false };
+    }
+    // RULE 3: Deduplication
+    checkDuplicate(duplicateCount, estimatedCost) {
+        if (duplicateCount >= this.config.maxDuplicateCalls) {
+            return {
+                triggered: true,
+                reason: `Duplicate limit: ${duplicateCount} >= ${this.config.maxDuplicateCalls}`,
+                blockedCost: estimatedCost,
+            };
+        }
+        return { triggered: false };
+    }
+    getConfig() {
+        return this.config;
+    }
+}
+// ═══════════════════════════════════════════════════════════════
+// COMPONENT 3: GUARD CORE (<5ms execution)
+// ═══════════════════════════════════════════════════════════════
+class GuardCore {
+    constructor(config = {}) {
+        this.store = new SessionStore();
+        this.rules = new RuleEngine(config);
+    }
+    check(context) {
+        const start = perf_hooks_1.performance.now();
+        try {
+            const session = this.store.get(context.sessionId);
+            // Check Rule 1: Cost
+            const costCheck = this.rules.checkCost(session, context.estimatedCost);
+            if (costCheck.triggered) {
+                return {
+                    allowed: false,
+                    reason: costCheck.reason,
+                    blockedCost: costCheck.blockedCost,
+                    latencyMs: perf_hooks_1.performance.now() - start,
+                };
+            }
+            // Check Rule 2: Loop
+            const loopCheck = this.rules.checkLoop(session);
+            if (loopCheck.triggered) {
+                return {
+                    allowed: false,
+                    reason: loopCheck.reason,
+                    blockedCost: loopCheck.blockedCost,
+                    latencyMs: perf_hooks_1.performance.now() - start,
+                };
+            }
+            // Check Rule 3: Duplicate
+            const dupCount = this.store.countDuplicates(context.sessionId, context.inputHash);
+            const dupCheck = this.rules.checkDuplicate(dupCount, context.estimatedCost);
+            if (dupCheck.triggered) {
+                return {
+                    allowed: false,
+                    reason: dupCheck.reason,
+                    blockedCost: dupCheck.blockedCost,
+                    latencyMs: perf_hooks_1.performance.now() - start,
+                };
+            }
+            // All checks passed - record the call
+            this.store.recordCall(context.sessionId, context.inputHash, context.estimatedCost);
+            return {
+                allowed: true,
+                latencyMs: perf_hooks_1.performance.now() - start,
+            };
+        }
+        catch (error) {
+            // Fail open on error
+            return {
+                allowed: this.rules.getConfig().failOpen,
+                reason: `Guard error: ${error instanceof Error ? error.message : 'unknown'}`,
+                latencyMs: perf_hooks_1.performance.now() - start,
+            };
+        }
+    }
+    getSessionCost(sessionId) {
+        return this.store.get(sessionId).totalCost;
+    }
+}
+// ═══════════════════════════════════════════════════════════════
+// COMPONENT 4: SDK WRAPPER (one-line integration)
+// ═══════════════════════════════════════════════════════════════
+// Global guard instance
+let globalGuard = null;
+function initGuard(config) {
+    globalGuard = new GuardCore(config);
+}
+/**
+ * Wrap an OpenAI/Anthropic client with cost protection.
+ *
+ * ONE LINE INTEGRATION:
+ * ```typescript
+ * const client = guard(new OpenAI({ apiKey }));
+ * ```
+ */
+function guard(client, sessionId) {
+    if (!globalGuard) {
+        globalGuard = new GuardCore();
+    }
+    const sid = sessionId || `session-${Date.now()}`;
+    let step = 0;
+    return new Proxy(client, {
+        get(target, prop) {
+            if (typeof prop !== 'string')
+                return target[prop];
+            const value = target[prop];
+            // Intercept method calls
+            if (typeof value === 'function') {
+                return async (...args) => {
+                    step++;
+                    // Estimate cost from arguments
+                    const estimatedCost = estimateCost(prop, args);
+                    const inputHash = hashArgs(args);
+                    // Check guard
+                    const result = globalGuard.check({
+                        sessionId: sid,
+                        step,
+                        operation: prop,
+                        estimatedCost,
+                        inputHash,
+                    });
+                    if (!result.allowed) {
+                        const error = new Error(`CostGuard blocked: ${result.reason}`);
+                        error.guardResult = result;
+                        throw error;
+                    }
+                    // Execute
+                    return value.apply(target, args);
+                };
+            }
+            // Handle nested objects (like client.chat.completions)
+            if (typeof value === 'object' && value !== null) {
+                return guard(value, sid);
+            }
+            return value;
+        },
+    });
+}
+// Helper: Estimate cost from operation + args
+function estimateCost(operation, args) {
+    // Simple heuristic: $0.03 per 1K tokens for completion
+    if (operation.includes('create') || operation.includes('generate')) {
+        const tokens = args[0]?.max_tokens || 1000;
+        return (tokens / 1000) * 0.03;
+    }
+    return 0.01; // Default for other operations
+}
+// Helper: Hash arguments for dedup
+function hashArgs(args) {
+    const str = JSON.stringify(args);
+    return (0, crypto_1.createHash)('sha256').update(str).digest('hex').substring(0, 16);
+}
+// Helper: Manual guard check (non-SDK usage)
+function check(sessionId, operation, estimatedCost, input) {
+    if (!globalGuard) {
+        globalGuard = new GuardCore();
+    }
+    const inputHash = (0, crypto_1.createHash)('sha256').update(input).digest('hex').substring(0, 16);
+    // Estimate step from session
+    const session = globalGuard.store.get(sessionId);
+    const step = session.steps + 1;
+    return globalGuard.check({
+        sessionId,
+        step,
+        operation,
+        estimatedCost,
+        inputHash,
+    });
+}
+// Types already exported at top of file
+//# sourceMappingURL=cost-guard.js.map

package/dist/cost-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-guard.js","sourceRoot":"","sources":["../src/cost-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAwPH,8BAEC;AAUD,sBAkDC;AAmBD,sBAuBC;AA9VD,2CAAyC;AACzC,mCAAoC;AAuCpC,MAAM,YAAY;IAKhB;QAJQ,aAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC3C,gBAAW,GAAG,KAAK,CAAC;QACpB,UAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;QAGvC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,CAAC;YACD,OAAO,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,SAAiB,EAAE,IAAY;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnC,qCAAqC;QACrC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACnC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,eAAe,CAAC,SAAiB,EAAE,SAAiB;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAChE,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,MAAM,GAAwC,IAAI,CAAC;QACvD,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF;AAQD,MAAM,UAAU;IAGd,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG;YACZ,iBAAiB,EAAE,EAAE;YACrB,kBAAkB,EAAE,EAAE;YACtB,iBAAiB,EAAE,CAAC;YACpB,QAAQ,EAAE,IAAI;YACd,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,SAAS,CAAC,OAAqB,EAAE,aAAqB;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;QACpD,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,gBAAgB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE;gBAClF,WAAW,EAAE,aAAa;aAC3B,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,sCAAsC;IACtC,SAAS,CAAC,OAAqB;QAC7B,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACpD,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,eAAe,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;gBAC3E,WAAW,EAAE,CAAC;aACf,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,wBAAwB;IACxB,cAAc,CAAC,cAAsB,EAAE,aAAqB;QAC1D,IAAI,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACpD,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,oBAAoB,cAAc,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE;gBAChF,WAAW,EAAE,aAAa;aAC3B,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,kEAAkE;AAClE,2CAA2C;AAC3C,kEAAkE;AAElE,MAAM,SAAS;IAIb,YAAY,SAAsB,EAAE;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAoB;QACxB,MAAM,KAAK,GAAG,wBAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAElD,qBAAqB;YACrB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YACvE,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS,EAAE,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK;iBACrC,CAAC;YACJ,CAAC;YAED,qBAAqB;YACrB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS,EAAE,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK;iBACrC,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5E,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,SAAS,EAAE,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK;iBACrC,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAEnF,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK;aACrC,CAAC;QAEJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qBAAqB;YACrB,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ;gBACxC,MAAM,EAAE,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;gBAC5E,SAAS,EAAE,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;CACF;AAED,kEAAkE;AAClE,kDAAkD;AAClD,kEAAkE;AAElE,wBAAwB;AACxB,IAAI,WAAW,GAAqB,IAAI,CAAC;AAEzC,SAAgB,SAAS,CAAC,MAAoB;IAC5C,WAAW,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,KAAK,CAAmB,MAAS,EAAE,SAAkB;IACnE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,IAAI,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,MAAM,EAAE,IAAqB;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAe,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAe,CAAC,CAAC;YAEtC,yBAAyB;YACzB,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChC,OAAO,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE;oBAC9B,IAAI,EAAE,CAAC;oBAEP,+BAA+B;oBAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,IAAc,EAAE,IAAI,CAAC,CAAC;oBACzD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAEjC,cAAc;oBACd,MAAM,MAAM,GAAG,WAAY,CAAC,KAAK,CAAC;wBAChC,SAAS,EAAE,GAAG;wBACd,IAAI;wBACJ,SAAS,EAAE,IAAc;wBACzB,aAAa;wBACb,SAAS;qBACV,CAAC,CAAC;oBAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC9D,KAAa,CAAC,WAAW,GAAG,MAAM,CAAC;wBACpC,MAAM,KAAK,CAAC;oBACd,CAAC;oBAED,UAAU;oBACV,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnC,CAAC,CAAC;YACJ,CAAC;YAED,uDAAuD;YACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,OAAO,KAAK,CAAC,KAAU,EAAE,GAAG,CAAC,CAAC;YAChC,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,SAAS,YAAY,CAAC,SAAiB,EAAE,IAAW;IAClD,uDAAuD;IACvD,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;QAC3C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,+BAA+B;AAC9C,CAAC;AAED,mCAAmC;AACnC,SAAS,QAAQ,CAAC,IAAW;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,6CAA6C;AAC7C,SAAgB,KAAK,CACnB,SAAiB,EACjB,SAAiB,EACjB,aAAqB,EACrB,KAAa;IAEb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,IAAI,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpF,6BAA6B;IAC7B,MAAM,OAAO,GAAI,WAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAE/B,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,SAAS;QACT,IAAI;QACJ,SAAS;QACT,aAAa;QACb,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,wCAAwC"}

package/dist/dashboard/roiDashboard.d.ts

@@ -0,0 +1,12 @@
+import { DemoResult } from '../demo/demoRunner';
+export interface RoiDashboard {
+    total_requests: number;
+    blocked_requests: number;
+    cost_before_firewall: number;
+    cost_after_firewall: number;
+    total_cost_saved_usd: number;
+    efficiency_percentage: number;
+}
+export declare function toRoiDashboard(result: DemoResult): RoiDashboard;
+export declare function formatRoiDashboardHuman(dashboard: RoiDashboard): string;
+//# sourceMappingURL=roiDashboard.d.ts.map

package/dist/dashboard/roiDashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roiDashboard.d.ts","sourceRoot":"","sources":["../../src/dashboard/roiDashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAW/D;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,YAAY,GAAG,MAAM,CAWvE"}

package/dist/dashboard/roiDashboard.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toRoiDashboard = toRoiDashboard;
+exports.formatRoiDashboardHuman = formatRoiDashboardHuman;
+function toRoiDashboard(result) {
+    const efficiency = result.costBeforeFirewall === 0 ? 0 : (result.totalCostSavedUsd / result.costBeforeFirewall) * 100;
+    return {
+        total_requests: result.totalRequests,
+        blocked_requests: result.blockedRequests,
+        cost_before_firewall: Number(result.costBeforeFirewall.toFixed(6)),
+        cost_after_firewall: Number(result.costAfterFirewall.toFixed(6)),
+        total_cost_saved_usd: Number(result.totalCostSavedUsd.toFixed(6)),
+        efficiency_percentage: Number(efficiency.toFixed(2)),
+    };
+}
+function formatRoiDashboardHuman(dashboard) {
+    return [
+        'ROI DASHBOARD',
+        '=============',
+        `total_requests: ${dashboard.total_requests}`,
+        `blocked_requests: ${dashboard.blocked_requests}`,
+        `cost_before_firewall: $${dashboard.cost_before_firewall.toFixed(2)}`,
+        `cost_after_firewall:  $${dashboard.cost_after_firewall.toFixed(2)}`,
+        `total_cost_saved_usd: $${dashboard.total_cost_saved_usd.toFixed(2)}`,
+        `efficiency_percentage: ${dashboard.efficiency_percentage.toFixed(2)}%`,
+    ].join('\n');
+}
+//# sourceMappingURL=roiDashboard.js.map

package/dist/dashboard/roiDashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roiDashboard.js","sourceRoot":"","sources":["../../src/dashboard/roiDashboard.ts"],"names":[],"mappings":";;AAWA,wCAWC;AAED,0DAWC;AAxBD,SAAgB,cAAc,CAAC,MAAkB;IAC/C,MAAM,UAAU,GACd,MAAM,CAAC,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC;IACrG,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,gBAAgB,EAAE,MAAM,CAAC,eAAe;QACxC,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjE,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,SAAuB;IAC7D,OAAO;QACL,eAAe;QACf,eAAe;QACf,mBAAmB,SAAS,CAAC,cAAc,EAAE;QAC7C,qBAAqB,SAAS,CAAC,gBAAgB,EAAE;QACjD,0BAA0B,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACrE,0BAA0B,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACpE,0BAA0B,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACrE,0BAA0B,SAAS,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;KACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/demo/compareExecution.d.ts

@@ -0,0 +1,9 @@
+export interface CompareExecutionResult {
+    costWithoutFirewall: number;
+    costWithFirewall: number;
+    loopsDetected: number;
+    savingsDifference: number;
+}
+export declare function compareExecution(beforeFn: () => Promise<number[]>, afterFn: () => Promise<number[]>): Promise<CompareExecutionResult>;
+export declare function compareWithGuard(costSeries: number[]): CompareExecutionResult;
+//# sourceMappingURL=compareExecution.d.ts.map

package/dist/demo/compareExecution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compareExecution.d.ts","sourceRoot":"","sources":["../../src/demo/compareExecution.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,EACjC,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAYjC;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAuB7E"}

package/dist/demo/compareExecution.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareExecution = compareExecution;
+exports.compareWithGuard = compareWithGuard;
+const executionGuard_1 = require("../firewall/executionGuard");
+async function compareExecution(beforeFn, afterFn) {
+    const before = await beforeFn();
+    const after = await afterFn();
+    const costWithoutFirewall = before.reduce((sum, n) => sum + n, 0);
+    const costWithFirewall = after.reduce((sum, n) => sum + n, 0);
+    const loopsDetected = Math.max(0, before.length - after.length);
+    return {
+        costWithoutFirewall: Number(costWithoutFirewall.toFixed(6)),
+        costWithFirewall: Number(costWithFirewall.toFixed(6)),
+        loopsDetected,
+        savingsDifference: Number((costWithoutFirewall - costWithFirewall).toFixed(6)),
+    };
+}
+function compareWithGuard(costSeries) {
+    const guard = new executionGuard_1.ExecutionGuard({ loopThreshold: 3, loopWindowMs: 12000, strict: true });
+    const before = [...costSeries];
+    const after = [];
+    for (const cost of costSeries) {
+        const result = guard.evaluate({
+            model: 'gpt-4o-mini',
+            prompt: 'looping-agent-step',
+            maxOutputTokens: Math.max(1, Math.ceil(cost * 1000)),
+            metadata: { sessionId: 'compare-session' },
+        });
+        if (result.decision !== 'block') {
+            after.push(cost);
+        }
+    }
+    const costWithoutFirewall = before.reduce((sum, n) => sum + n, 0);
+    const costWithFirewall = after.reduce((sum, n) => sum + n, 0);
+    return {
+        costWithoutFirewall: Number(costWithoutFirewall.toFixed(6)),
+        costWithFirewall: Number(costWithFirewall.toFixed(6)),
+        loopsDetected: before.length - after.length,
+        savingsDifference: Number((costWithoutFirewall - costWithFirewall).toFixed(6)),
+    };
+}
+//# sourceMappingURL=compareExecution.js.map

package/dist/demo/compareExecution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compareExecution.js","sourceRoot":"","sources":["../../src/demo/compareExecution.ts"],"names":[],"mappings":";;AASA,4CAeC;AAED,4CAuBC;AAjDD,+DAA4D;AASrD,KAAK,UAAU,gBAAgB,CACpC,QAAiC,EACjC,OAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;IAC9B,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAChE,OAAO;QACL,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrD,aAAa;QACb,iBAAiB,EAAE,MAAM,CAAC,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,UAAoB;IACnD,MAAM,KAAK,GAAG,IAAI,+BAAc,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,KAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC5B,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,oBAAoB;YAC5B,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACpD,QAAQ,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE;SAC3C,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrD,aAAa,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QAC3C,iBAAiB,EAAE,MAAM,CAAC,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC"}

package/dist/demo/demoRunner.d.ts

@@ -0,0 +1,16 @@
+export interface DemoResult {
+    trace: string[];
+    totalRequests: number;
+    blockedRequests: number;
+    costBeforeFirewall: number;
+    costAfterFirewall: number;
+    totalCostSavedUsd: number;
+    durationMs: number;
+    loopDetected: boolean;
+}
+/**
+ * This product is valuable only if users can SEE money saved instantly.
+ */
+export declare function runDemo(): DemoResult;
+export declare function formatDemoOutput(result: DemoResult): string;
+//# sourceMappingURL=demoRunner.d.ts.map

package/dist/demo/demoRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoRunner.d.ts","sourceRoot":"","sources":["../../src/demo/demoRunner.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,OAAO,IAAI,UAAU,CAgDpC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAiB3D"}

package/dist/demo/demoRunner.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDemo = runDemo;
+exports.formatDemoOutput = formatDemoOutput;
+const perf_hooks_1 = require("perf_hooks");
+const client_1 = require("../client");
+/**
+ * This product is valuable only if users can SEE money saved instantly.
+ */
+function runDemo() {
+    const start = perf_hooks_1.performance.now();
+    const client = (0, client_1.createClient)({
+        apiKey: 'demo_key',
+        policy: { loopThreshold: 3, loopWindowMs: 12000, strict: true, maxCostUsd: 0.3, throttleCostUsd: 0.15 },
+    });
+    const simulatedCosts = [0.12, 0.18, 0.31, 0.44, 0.52];
+    const trace = [];
+    let costBeforeFirewall = 0;
+    let costAfterFirewall = 0;
+    let blockedRequests = 0;
+    let loopDetected = false;
+    for (let i = 0; i < simulatedCosts.length; i++) {
+        const callNumber = i + 1;
+        const cost = simulatedCosts[i];
+        costBeforeFirewall += cost;
+        const result = client.evaluate({
+            model: 'gpt-4o',
+            prompt: 'agent-step-loop-prompt',
+            maxOutputTokens: Math.max(1, Math.ceil(cost * 1000)),
+            metadata: { sessionId: 'demo-loop', requestId: `demo-${callNumber}` },
+        });
+        if (result.decision === 'block') {
+            blockedRequests++;
+            loopDetected = loopDetected || result.ruleTriggered === 'loop-protection-v1';
+            trace.push(`Agent Call #${callNumber} -> $${cost.toFixed(2)} (blocked: ${result.reason})`);
+        }
+        else {
+            costAfterFirewall += cost;
+            trace.push(`Agent Call #${callNumber} -> $${cost.toFixed(2)} (allowed)`);
+        }
+    }
+    const totalCostSavedUsd = Number((costBeforeFirewall - costAfterFirewall).toFixed(6));
+    const durationMs = Number((perf_hooks_1.performance.now() - start).toFixed(2));
+    return {
+        trace,
+        totalRequests: simulatedCosts.length,
+        blockedRequests,
+        costBeforeFirewall: Number(costBeforeFirewall.toFixed(6)),
+        costAfterFirewall: Number(costAfterFirewall.toFixed(6)),
+        totalCostSavedUsd,
+        durationMs,
+        loopDetected,
+    };
+}
+function formatDemoOutput(result) {
+    const lines = [];
+    lines.push('AI FIREWALL DEMO TIMELINE');
+    lines.push('========================');
+    lines.push(...result.trace);
+    lines.push('');
+    lines.push('FIREWALL TRIGGERED:');
+    lines.push(`- LOOP DETECTED: ${result.loopDetected ? 'YES' : 'NO'}`);
+    lines.push(`- BLOCKED REQUESTS: ${result.blockedRequests}/${result.totalRequests}`);
+    lines.push('');
+    lines.push('ROI SNAPSHOT');
+    lines.push('------------');
+    lines.push(`COST BEFORE: $${result.costBeforeFirewall.toFixed(2)}`);
+    lines.push(`COST AFTER:  $${result.costAfterFirewall.toFixed(2)}`);
+    lines.push(`SAVED VALUE: $${result.totalCostSavedUsd.toFixed(2)}`);
+    lines.push(`TIME SPENT:  ${(result.durationMs / 1000).toFixed(2)}s`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=demoRunner.js.map

package/dist/demo/demoRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoRunner.js","sourceRoot":"","sources":["../../src/demo/demoRunner.ts"],"names":[],"mappings":";;AAiBA,0BAgDC;AAED,4CAiBC;AApFD,2CAAyC;AACzC,sCAAyC;AAazC;;GAEG;AACH,SAAgB,OAAO;IACrB,MAAM,KAAK,GAAG,wBAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC;QAC1B,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,KAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE;KACzG,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,kBAAkB,IAAI,IAAI,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC7B,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,wBAAwB;YAChC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACpD,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,EAAE;SACtE,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,eAAe,EAAE,CAAC;YAClB,YAAY,GAAG,YAAY,IAAI,MAAM,CAAC,aAAa,KAAK,oBAAoB,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,QAAQ,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,iBAAiB,IAAI,IAAI,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,QAAQ,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,wBAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO;QACL,KAAK;QACL,aAAa,EAAE,cAAc,CAAC,MAAM;QACpC,eAAe;QACf,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,iBAAiB;QACjB,UAAU;QACV,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAkB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/firewall/costEstimator.d.ts

@@ -0,0 +1,3 @@
+import { CostEstimate } from './types';
+export declare function estimateCost(model: string, prompt: string, maxOutputTokens?: number): CostEstimate;
+//# sourceMappingURL=costEstimator.d.ts.map

package/dist/firewall/costEstimator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"costEstimator.d.ts","sourceRoot":"","sources":["../../src/firewall/costEstimator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAavC,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,SAAM,GAAG,YAAY,CAa/F"}

package/dist/firewall/costEstimator.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.estimateCost = estimateCost;
+const MODEL_PRICES = {
+    'gpt-4o': { inUsdPer1k: 0.005, outUsdPer1k: 0.015 },
+    'gpt-4o-mini': { inUsdPer1k: 0.00015, outUsdPer1k: 0.0006 },
+    'gpt-4.1-mini': { inUsdPer1k: 0.0008, outUsdPer1k: 0.0032 },
+};
+const FALLBACK_PRICE = { inUsdPer1k: 0.002, outUsdPer1k: 0.008 };
+const CHARS_PER_TOKEN = 4;
+function estimateCost(model, prompt, maxOutputTokens = 512) {
+    const inputTokens = Math.max(1, Math.ceil(prompt.length / CHARS_PER_TOKEN));
+    const outputTokens = Math.max(1, maxOutputTokens);
+    const price = MODEL_PRICES[model] ?? FALLBACK_PRICE;
+    const estimatedUsd = (inputTokens / 1000) * price.inUsdPer1k + (outputTokens / 1000) * price.outUsdPer1k;
+    return {
+        inputTokens,
+        outputTokens,
+        estimatedUsd: Number(estimatedUsd.toFixed(6)),
+    };
+}
+//# sourceMappingURL=costEstimator.js.map

package/dist/firewall/costEstimator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"costEstimator.js","sourceRoot":"","sources":["../../src/firewall/costEstimator.ts"],"names":[],"mappings":";;AAaA,oCAaC;AAtBD,MAAM,YAAY,GAA0B;IAC1C,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;IACnD,aAAa,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;IAC3D,cAAc,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;CAC5D,CAAC;AAEF,MAAM,cAAc,GAAU,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACxE,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,SAAgB,YAAY,CAAC,KAAa,EAAE,MAAc,EAAE,eAAe,GAAG,GAAG;IAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC;IAEpD,MAAM,YAAY,GAChB,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IAEtF,OAAO;QACL,WAAW;QACX,YAAY;QACZ,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/firewall/executionGuard.d.ts

@@ -0,0 +1,18 @@
+import { DecisionExplanation, GuardPolicy, GuardRequest, GuardResult } from './types';
+/**
+ * This is not a framework.
+ * It is a pre-execution cost + safety enforcement layer for AI systems.
+ */
+export declare class ExecutionGuard {
+    private readonly policy;
+    private readonly loops;
+    private readonly minuteWindow;
+    constructor(policyOverrides?: Partial<GuardPolicy>);
+    evaluate(request: GuardRequest): GuardResult;
+    getPolicy(): GuardPolicy;
+    reset(): void;
+    explainDecision(result: GuardResult): DecisionExplanation;
+    private isRateLimited;
+    private result;
+}
+//# sourceMappingURL=executionGuard.d.ts.map

package/dist/firewall/executionGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionGuard.d.ts","sourceRoot":"","sources":["../../src/firewall/executionGuard.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtF;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;gBAEhD,eAAe,GAAE,OAAO,CAAC,WAAW,CAAM;IAKtD,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,WAAW;IA+D5C,SAAS,IAAI,WAAW;IAIxB,KAAK,IAAI,IAAI;IAKb,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB;IASzD,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,MAAM;CAsBf"}

package/dist/firewall/executionGuard.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionGuard = void 0;
+const perf_hooks_1 = require("perf_hooks");
+const costEstimator_1 = require("./costEstimator");
+const loopDetector_1 = require("./loopDetector");
+const policy_1 = require("./policy");
+/**
+ * This is not a framework.
+ * It is a pre-execution cost + safety enforcement layer for AI systems.
+ */
+class ExecutionGuard {
+    constructor(policyOverrides = {}) {
+        this.minuteWindow = new Map();
+        this.policy = (0, policy_1.createPolicy)(policyOverrides);
+        this.loops = new loopDetector_1.LoopDetector(this.policy.loopWindowMs, this.policy.loopThreshold);
+    }
+    evaluate(request) {
+        const start = perf_hooks_1.performance.now();
+        const normalizedPrompt = request.prompt?.trim();
+        if (!normalizedPrompt) {
+            return this.result('block', 'empty prompt', 0, 0, start, undefined, 'input-validation-v1');
+        }
+        const estimate = (0, costEstimator_1.estimateCost)(request.model, normalizedPrompt, request.maxOutputTokens);
+        const scopeKey = String(request.metadata?.sessionId ?? request.metadata?.userId ?? 'default');
+        const loop = this.loops.inspect(scopeKey, normalizedPrompt);
+        if (loop.isLooping) {
+            return this.result('block', `loop detected (${loop.loopCount} repeats in ${(this.policy.loopWindowMs / 1000).toFixed(0)}s)`, estimate.estimatedUsd, loop.loopCount, start, undefined, 'loop-protection-v1');
+        }
+        if (this.isRateLimited(scopeKey)) {
+            return this.result('throttle', 'burst traffic detected', estimate.estimatedUsd, loop.loopCount, start, 500, 'rate-limit-v1');
+        }
+        if (estimate.estimatedUsd >= this.policy.maxCostUsd) {
+            return this.result('block', 'predicted cost exceeds max policy', estimate.estimatedUsd, loop.loopCount, start, undefined, 'cost-cap-v1');
+        }
+        if (estimate.estimatedUsd >= this.policy.throttleCostUsd) {
+            return this.result('throttle', 'predicted cost near budget threshold', estimate.estimatedUsd, loop.loopCount, start, this.policy.strict ? 0 : 300, 'cost-throttle-v1');
+        }
+        return this.result('allow', 'request approved', estimate.estimatedUsd, loop.loopCount, start, undefined, 'allow-v1');
+    }
+    getPolicy() {
+        return { ...this.policy };
+    }
+    reset() {
+        this.loops.reset();
+        this.minuteWindow.clear();
+    }
+    explainDecision(result) {
+        return {
+            decision: result.decision,
+            reason: result.reason,
+            costAvoided: result.costAvoidedUsd,
+            ruleTriggered: result.ruleTriggered,
+        };
+    }
+    isRateLimited(scopeKey) {
+        const now = Date.now();
+        const history = this.minuteWindow.get(scopeKey) ?? [];
+        const recent = history.filter(at => now - at <= 60000);
+        recent.push(now);
+        this.minuteWindow.set(scopeKey, recent);
+        return recent.length > this.policy.requestsPerMinute;
+    }
+    result(decision, reason, estimatedCostUsd, loopCount, start, throttleMs, ruleTriggered = 'policy-v1') {
+        const costAvoidedUsd = decision === 'allow' ? 0 : estimatedCostUsd;
+        return {
+            decision,
+            reason,
+            estimatedCostUsd,
+            costAvoidedUsd,
+            loopCount,
+            throttleMs,
+            ruleTriggered,
+            policy: this.getPolicy(),
+            latencyMs: Number((perf_hooks_1.performance.now() - start).toFixed(3)),
+        };
+    }
+}
+exports.ExecutionGuard = ExecutionGuard;
+//# sourceMappingURL=executionGuard.js.map