@salimassili/ai-costguard 1.1.3

package/dist/saas/UserStore.d.ts

@@ -0,0 +1,49 @@
+/**
+ * UserStore.ts - SaaS User Management
+ *
+ * Minimal, focused user system:
+ * - Email OR anonymous accounts
+ * - API key generation
+ * - Session management
+ * - Usage tracking per user
+ */
+export interface User {
+    id: string;
+    email: string | null;
+    anonymous: boolean;
+    createdAt: number;
+    lastActiveAt: number;
+}
+export interface ApiKey {
+    id: string;
+    userId: string;
+    key: string;
+    name: string;
+    createdAt: number;
+    lastUsedAt: number | null;
+}
+export interface Session {
+    token: string;
+    userId: string;
+    createdAt: number;
+    expiresAt: number;
+}
+export declare class UserStore {
+    private users;
+    private apiKeys;
+    private sessions;
+    private emailIndex;
+    createUser(email: string): User;
+    createAnonymousUser(): User;
+    findByEmail(email: string): User | undefined;
+    getUser(id: string): User | undefined;
+    createApiKey(userId: string, name: string): ApiKey;
+    getApiKeys(userId: string): ApiKey[];
+    findApiKey(key: string): ApiKey | undefined;
+    updateApiKeyLastUsed(id: string): void;
+    createSession(userId: string): Session;
+    getSession(token: string): Session | undefined;
+    private generateId;
+}
+export declare const userStore: UserStore;
+//# sourceMappingURL=UserStore.d.ts.map

package/dist/saas/UserStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStore.d.ts","sourceRoot":"","sources":["../../src/saas/UserStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,QAAQ,CAAmC;IACnD,OAAO,CAAC,UAAU,CAAkC;IAEpD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAiB/B,mBAAmB,IAAI,IAAI;IAgB3B,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAK5C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAIrC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAiBlD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAMpC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI3C,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKtC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAgBtC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAI9C,OAAO,CAAC,UAAU;CAGnB;AAED,eAAO,MAAM,SAAS,WAAkB,CAAC"}

package/dist/saas/UserStore.js

@@ -0,0 +1,137 @@
+"use strict";
+/**
+ * UserStore.ts - SaaS User Management
+ *
+ * Minimal, focused user system:
+ * - Email OR anonymous accounts
+ * - API key generation
+ * - Session management
+ * - Usage tracking per user
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userStore = exports.UserStore = void 0;
+const crypto = __importStar(require("crypto"));
+class UserStore {
+    constructor() {
+        this.users = new Map();
+        this.apiKeys = new Map();
+        this.sessions = new Map();
+        this.emailIndex = new Map();
+    }
+    createUser(email) {
+        const id = this.generateId();
+        const now = Date.now();
+        const user = {
+            id,
+            email,
+            anonymous: false,
+            createdAt: now,
+            lastActiveAt: now,
+        };
+        this.users.set(id, user);
+        this.emailIndex.set(email, id);
+        return user;
+    }
+    createAnonymousUser() {
+        const id = this.generateId();
+        const now = Date.now();
+        const user = {
+            id,
+            email: null,
+            anonymous: true,
+            createdAt: now,
+            lastActiveAt: now,
+        };
+        this.users.set(id, user);
+        return user;
+    }
+    findByEmail(email) {
+        const id = this.emailIndex.get(email);
+        return id ? this.users.get(id) : undefined;
+    }
+    getUser(id) {
+        return this.users.get(id);
+    }
+    createApiKey(userId, name) {
+        const id = this.generateId();
+        const key = 'ak_live_' + crypto.randomBytes(24).toString('base64url');
+        const apiKey = {
+            id,
+            userId,
+            key,
+            name,
+            createdAt: Date.now(),
+            lastUsedAt: null,
+        };
+        this.apiKeys.set(id, apiKey);
+        return apiKey;
+    }
+    getApiKeys(userId) {
+        return Array.from(this.apiKeys.values())
+            .filter(k => k.userId === userId)
+            .sort((a, b) => b.createdAt - a.createdAt);
+    }
+    findApiKey(key) {
+        return Array.from(this.apiKeys.values()).find(k => k.key === key);
+    }
+    updateApiKeyLastUsed(id) {
+        const key = this.apiKeys.get(id);
+        if (key)
+            key.lastUsedAt = Date.now();
+    }
+    createSession(userId) {
+        const token = crypto.randomBytes(32).toString('base64url');
+        const now = Date.now();
+        const expiresAt = now + (7 * 24 * 60 * 60 * 1000); // 7 days
+        const session = {
+            token,
+            userId,
+            createdAt: now,
+            expiresAt,
+        };
+        this.sessions.set(token, session);
+        return session;
+    }
+    getSession(token) {
+        return this.sessions.get(token);
+    }
+    generateId() {
+        return crypto.randomBytes(12).toString('base64url');
+    }
+}
+exports.UserStore = UserStore;
+exports.userStore = new UserStore();
+//# sourceMappingURL=UserStore.js.map

package/dist/saas/UserStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStore.js","sourceRoot":"","sources":["../../src/saas/UserStore.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AA0BjC,MAAa,SAAS;IAAtB;QACU,UAAK,GAAsB,IAAI,GAAG,EAAE,CAAC;QACrC,YAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;QACzC,aAAQ,GAAyB,IAAI,GAAG,EAAE,CAAC;QAC3C,eAAU,GAAwB,IAAI,GAAG,EAAE,CAAC;IAmGtD,CAAC;IAjGC,UAAU,CAAC,KAAa;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,IAAI,GAAS;YACjB,EAAE;YACF,KAAK;YACL,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,GAAG;SAClB,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;QACjB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,IAAI,GAAS;YACjB,EAAE;YACF,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,GAAG;SAClB,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,IAAY;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAW;YACrB,EAAE;YACF,MAAM;YACN,GAAG;YACH,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;aAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,oBAAoB,CAAC,EAAU;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,GAAG;YAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAE5D,MAAM,OAAO,GAAY;YACvB,KAAK;YACL,MAAM;YACN,SAAS,EAAE,GAAG;YACd,SAAS;SACV,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,UAAU;QAChB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;CACF;AAvGD,8BAuGC;AAEY,QAAA,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/dist/saas/billingMetrics.d.ts

@@ -0,0 +1,14 @@
+import { TelemetryStore } from './telemetry';
+import { UsageSnapshot } from './usageMeter';
+export interface DashboardMetrics {
+    apiKey: string;
+    totalSavedUsd: number;
+    estimatedSpendUsd: number;
+    roiRatio: number;
+    blockedVsAllowedRatio: number;
+}
+export declare class BillingMetrics {
+    compute(apiKey: string, telemetry: TelemetryStore, usage: UsageSnapshot, monthlyProductCostUsd?: number): DashboardMetrics;
+    exportDashboardJson(metrics: DashboardMetrics): string;
+}
+//# sourceMappingURL=billingMetrics.d.ts.map

package/dist/saas/billingMetrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billingMetrics.d.ts","sourceRoot":"","sources":["../../src/saas/billingMetrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,qBAAa,cAAc;IACzB,OAAO,CACL,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,aAAa,EACpB,qBAAqB,SAAK,GACzB,gBAAgB;IAenB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM;CAGvD"}

package/dist/saas/billingMetrics.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BillingMetrics = void 0;
+class BillingMetrics {
+    compute(apiKey, telemetry, usage, monthlyProductCostUsd = 99) {
+        const summary = telemetry.getSummary();
+        const totalSavedUsd = summary.costSavedEstimateUsd;
+        const estimatedSpendUsd = usage.monthlyCostUsd;
+        const roiRatio = monthlyProductCostUsd === 0 ? 0 : totalSavedUsd / monthlyProductCostUsd;
+        return {
+            apiKey,
+            totalSavedUsd: Number(totalSavedUsd.toFixed(6)),
+            estimatedSpendUsd: Number(estimatedSpendUsd.toFixed(6)),
+            roiRatio: Number(roiRatio.toFixed(4)),
+            blockedVsAllowedRatio: Number(summary.blockedVsAllowedRatio.toFixed(4)),
+        };
+    }
+    exportDashboardJson(metrics) {
+        return JSON.stringify(metrics, null, 2);
+    }
+}
+exports.BillingMetrics = BillingMetrics;
+//# sourceMappingURL=billingMetrics.js.map

package/dist/saas/billingMetrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billingMetrics.js","sourceRoot":"","sources":["../../src/saas/billingMetrics.ts"],"names":[],"mappings":";;;AAWA,MAAa,cAAc;IACzB,OAAO,CACL,MAAc,EACd,SAAyB,EACzB,KAAoB,EACpB,qBAAqB,GAAG,EAAE;QAE1B,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACnD,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC;QAC/C,MAAM,QAAQ,GAAG,qBAAqB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,qBAAqB,CAAC;QAEzF,OAAO;YACL,MAAM;YACN,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACrC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACxE,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,OAAyB;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;CACF;AAxBD,wCAwBC"}

package/dist/saas/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * SaaS Layer - Production AI Cost Protection Infrastructure
+ *
+ * Production-grade infrastructure:
+ * - ProductionSaaS: Enterprise API server
+ * - LiveProtection: Real-time interception engine
+ * - UserStore: Account management
+ */
+export { ProductionSaaS, SaaSConfig, productionSaaS, startProductionSaaS, } from './ProductionSaaS';
+export { UserStore, User, ApiKey, Session, userStore, } from './UserStore';
+export { runLiveProtection, ProtectionResult, ProtectionMode, getLiveProtectionConfig, setProtectionMode, } from './LiveProtection';
+//# sourceMappingURL=index.d.ts.map

package/dist/saas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/saas/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,IAAI,EACJ,MAAM,EACN,OAAO,EACP,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC"}

package/dist/saas/index.js

@@ -0,0 +1,23 @@
+"use strict";
+/**
+ * SaaS Layer - Production AI Cost Protection Infrastructure
+ *
+ * Production-grade infrastructure:
+ * - ProductionSaaS: Enterprise API server
+ * - LiveProtection: Real-time interception engine
+ * - UserStore: Account management
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setProtectionMode = exports.getLiveProtectionConfig = exports.runLiveProtection = exports.userStore = exports.UserStore = exports.startProductionSaaS = exports.productionSaaS = exports.ProductionSaaS = void 0;
+var ProductionSaaS_1 = require("./ProductionSaaS");
+Object.defineProperty(exports, "ProductionSaaS", { enumerable: true, get: function () { return ProductionSaaS_1.ProductionSaaS; } });
+Object.defineProperty(exports, "productionSaaS", { enumerable: true, get: function () { return ProductionSaaS_1.productionSaaS; } });
+Object.defineProperty(exports, "startProductionSaaS", { enumerable: true, get: function () { return ProductionSaaS_1.startProductionSaaS; } });
+var UserStore_1 = require("./UserStore");
+Object.defineProperty(exports, "UserStore", { enumerable: true, get: function () { return UserStore_1.UserStore; } });
+Object.defineProperty(exports, "userStore", { enumerable: true, get: function () { return UserStore_1.userStore; } });
+var LiveProtection_1 = require("./LiveProtection");
+Object.defineProperty(exports, "runLiveProtection", { enumerable: true, get: function () { return LiveProtection_1.runLiveProtection; } });
+Object.defineProperty(exports, "getLiveProtectionConfig", { enumerable: true, get: function () { return LiveProtection_1.getLiveProtectionConfig; } });
+Object.defineProperty(exports, "setProtectionMode", { enumerable: true, get: function () { return LiveProtection_1.setProtectionMode; } });
+//# sourceMappingURL=index.js.map

package/dist/saas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/saas/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,mDAK0B;AAJxB,gHAAA,cAAc,OAAA;AAEd,gHAAA,cAAc,OAAA;AACd,qHAAA,mBAAmB,OAAA;AAGrB,yCAMqB;AALnB,sGAAA,SAAS,OAAA;AAIT,sGAAA,SAAS,OAAA;AAGX,mDAM0B;AALxB,mHAAA,iBAAiB,OAAA;AAGjB,yHAAA,uBAAuB,OAAA;AACvB,mHAAA,iBAAiB,OAAA"}

package/dist/saas/telemetry.d.ts

@@ -0,0 +1,24 @@
+import { GuardDecision } from '../firewall/types';
+export interface TelemetryEvent {
+    apiKey: string;
+    requestId: string;
+    decision: GuardDecision;
+    estimatedCostUsd: number;
+    costAvoidedUsd: number;
+    latencyMs: number;
+    at: number;
+}
+export declare class TelemetryStore {
+    private events;
+    capture(event: TelemetryEvent): void;
+    getSummary(): {
+        totalDecisions: number;
+        blocked: number;
+        allowed: number;
+        throttled: number;
+        blockedVsAllowedRatio: number;
+        costSavedEstimateUsd: number;
+        avgLatencyImpactMs: number;
+    };
+}
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/saas/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/saas/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAwB;IAEtC,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAIpC,UAAU;;;;;;;;;CAmBX"}

package/dist/saas/telemetry.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryStore = void 0;
+class TelemetryStore {
+    constructor() {
+        this.events = [];
+    }
+    capture(event) {
+        this.events.push(event);
+    }
+    getSummary() {
+        const total = this.events.length;
+        const blocked = this.events.filter(e => e.decision === 'block').length;
+        const allowed = this.events.filter(e => e.decision === 'allow').length;
+        const throttled = this.events.filter(e => e.decision === 'throttle').length;
+        const costSavedEstimate = this.events.reduce((sum, e) => sum + e.costAvoidedUsd, 0);
+        const avgLatencyMs = total === 0 ? 0 : this.events.reduce((sum, e) => sum + e.latencyMs, 0) / total;
+        return {
+            totalDecisions: total,
+            blocked,
+            allowed,
+            throttled,
+            blockedVsAllowedRatio: allowed === 0 ? blocked : blocked / allowed,
+            costSavedEstimateUsd: Number(costSavedEstimate.toFixed(6)),
+            avgLatencyImpactMs: Number(avgLatencyMs.toFixed(3)),
+        };
+    }
+}
+exports.TelemetryStore = TelemetryStore;
+//# sourceMappingURL=telemetry.js.map

package/dist/saas/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/saas/telemetry.ts"],"names":[],"mappings":";;;AAYA,MAAa,cAAc;IAA3B;QACU,WAAM,GAAqB,EAAE,CAAC;IAyBxC,CAAC;IAvBC,OAAO,CAAC,KAAqB;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,UAAU;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAC5E,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,YAAY,GAChB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QAEjF,OAAO;YACL,cAAc,EAAE,KAAK;YACrB,OAAO;YACP,OAAO;YACP,SAAS;YACT,qBAAqB,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO;YAClE,oBAAoB,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1D,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACpD,CAAC;IACJ,CAAC;CACF;AA1BD,wCA0BC"}

package/dist/saas/usageMeter.d.ts

@@ -0,0 +1,28 @@
+export interface UsageRecord {
+    apiKey: string;
+    at: number;
+    estimatedCostUsd: number;
+}
+export interface UsageLimitConfig {
+    dailyRequestLimit: number;
+    monthlyRequestLimit: number;
+    dailyCostLimitUsd: number;
+    monthlyCostLimitUsd: number;
+}
+export interface UsageSnapshot {
+    apiKey: string;
+    dailyRequests: number;
+    monthlyRequests: number;
+    dailyCostUsd: number;
+    monthlyCostUsd: number;
+    exceedsDailyLimit: boolean;
+    exceedsMonthlyLimit: boolean;
+}
+export declare class UsageMeter {
+    private records;
+    private readonly limits;
+    constructor(limits?: Partial<UsageLimitConfig>);
+    track(apiKey: string, estimatedCostUsd: number, at?: number): UsageSnapshot;
+    getSnapshot(apiKey: string, now?: number): UsageSnapshot;
+}
+//# sourceMappingURL=usageMeter.d.ts.map

package/dist/saas/usageMeter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usageMeter.d.ts","sourceRoot":"","sources":["../../src/saas/usageMeter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AASD,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;gBAE9B,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM;IAIlD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,SAAa,GAAG,aAAa;IAO/E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,aAAa;CAoB7D"}

package/dist/saas/usageMeter.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UsageMeter = void 0;
+const DEFAULT_LIMITS = {
+    dailyRequestLimit: 10000,
+    monthlyRequestLimit: 250000,
+    dailyCostLimitUsd: 100,
+    monthlyCostLimitUsd: 2000,
+};
+class UsageMeter {
+    constructor(limits = {}) {
+        this.records = new Map();
+        this.limits = { ...DEFAULT_LIMITS, ...limits };
+    }
+    track(apiKey, estimatedCostUsd, at = Date.now()) {
+        const list = this.records.get(apiKey) ?? [];
+        list.push({ apiKey, at, estimatedCostUsd });
+        this.records.set(apiKey, list);
+        return this.getSnapshot(apiKey, at);
+    }
+    getSnapshot(apiKey, now = Date.now()) {
+        const list = this.records.get(apiKey) ?? [];
+        const dayAgo = now - 86400000;
+        const monthAgo = now - 30 * 86400000;
+        const day = list.filter(r => r.at >= dayAgo);
+        const month = list.filter(r => r.at >= monthAgo);
+        const dailyCost = day.reduce((sum, item) => sum + item.estimatedCostUsd, 0);
+        const monthlyCost = month.reduce((sum, item) => sum + item.estimatedCostUsd, 0);
+        return {
+            apiKey,
+            dailyRequests: day.length,
+            monthlyRequests: month.length,
+            dailyCostUsd: Number(dailyCost.toFixed(6)),
+            monthlyCostUsd: Number(monthlyCost.toFixed(6)),
+            exceedsDailyLimit: day.length > this.limits.dailyRequestLimit || dailyCost > this.limits.dailyCostLimitUsd,
+            exceedsMonthlyLimit: month.length > this.limits.monthlyRequestLimit || monthlyCost > this.limits.monthlyCostLimitUsd,
+        };
+    }
+}
+exports.UsageMeter = UsageMeter;
+//# sourceMappingURL=usageMeter.js.map

package/dist/saas/usageMeter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usageMeter.js","sourceRoot":"","sources":["../../src/saas/usageMeter.ts"],"names":[],"mappings":";;;AAuBA,MAAM,cAAc,GAAqB;IACvC,iBAAiB,EAAE,KAAM;IACzB,mBAAmB,EAAE,MAAO;IAC5B,iBAAiB,EAAE,GAAG;IACtB,mBAAmB,EAAE,IAAK;CAC3B,CAAC;AAEF,MAAa,UAAU;IAIrB,YAAY,SAAoC,EAAE;QAH1C,YAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;QAIjD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,gBAAwB,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,WAAW,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,GAAG,QAAU,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,GAAG,EAAE,GAAG,QAAU,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAEhF,OAAO;YACL,MAAM;YACN,aAAa,EAAE,GAAG,CAAC,MAAM;YACzB,eAAe,EAAE,KAAK,CAAC,MAAM;YAC7B,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1C,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9C,iBAAiB,EAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC1G,mBAAmB,EACjB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB;SAClG,CAAC;IACJ,CAAC;CACF;AAnCD,gCAmCC"}

package/dist/security/TrustBoundaryValidator.d.ts

@@ -0,0 +1,105 @@
+/**
+ * TrustBoundaryValidator.ts - Enterprise API Security Layer
+ *
+ * Stripe-level API discipline:
+ * - HMAC-signed API requests (prevents tampering)
+ * - Request expiration timestamps (prevents replay attacks)
+ * - Rate limiting per API key (hard enforcement)
+ * - Idempotency keys (prevents duplicate processing)
+ * - Environment isolation (dev/staging/production)
+ * - Schema validation at runtime
+ * - Unsafe payload blocking
+ *
+ * Core principle: Trust nothing, validate everything
+ */
+export interface SignedRequest {
+    apiKey: string;
+    timestamp: number;
+    signature: string;
+    idempotencyKey?: string;
+    bodyHash?: string;
+}
+export interface ValidationResult {
+    valid: boolean;
+    rejected: boolean;
+    reason?: string;
+    code: 'VALID' | 'INVALID_SIGNATURE' | 'EXPIRED_REQUEST' | 'RATE_LIMITED' | 'IDEMPOTENCY_CONFLICT' | 'MALFORMED_PAYLOAD' | 'INVALID_ENVIRONMENT';
+    apiKeyId?: string;
+    userId?: string;
+    environment: 'dev' | 'staging' | 'production';
+    rateLimitRemaining?: number;
+    idempotencyKey?: string;
+}
+export interface RateLimitState {
+    count: number;
+    resetAt: number;
+    windowMs: number;
+}
+export interface EnvironmentConfig {
+    name: 'dev' | 'staging' | 'production';
+    strictMode: boolean;
+    requestMaxAgeMs: number;
+    rateLimitWindowMs: number;
+    rateLimitMaxRequests: number;
+    requireIdempotency: boolean;
+    requireBodyHash: boolean;
+}
+/**
+ * TrustBoundaryValidator - Enterprise-grade API security
+ *
+ * Behaves like Stripe: every request is signed, timestamped, and rate-limited.
+ * No request crosses the boundary without validation.
+ */
+export declare class TrustBoundaryValidator {
+    private apiKeySecrets;
+    private rateLimits;
+    private idempotencyStore;
+    private environments;
+    private requestLog;
+    constructor();
+    /**
+     * Validate incoming request against trust boundary
+     * This is the ONLY entry point for API requests
+     */
+    validateRequest(params: {
+        apiKey: string;
+        signature: string;
+        timestamp: number;
+        idempotencyKey?: string;
+        bodyHash?: string;
+        body?: string;
+        path: string;
+        method: string;
+    }): ValidationResult;
+    /**
+     * Register idempotency key as processed
+     */
+    recordIdempotency(key: string, result: unknown): void;
+    /**
+     * Register API key with its signing secret
+     */
+    registerApiKey(apiKey: string, userId: string, environment: 'dev' | 'staging' | 'production'): void;
+    /**
+     * Generate signed request (for client SDK)
+     */
+    generateSignedRequest(apiKey: string, body: string, idempotencyKey?: string): SignedRequest;
+    /**
+     * Get current rate limit status
+     */
+    getRateLimitStatus(apiKey: string): {
+        remaining: number;
+        resetAt: number;
+        windowMs: number;
+    };
+    private setupEnvironments;
+    private detectEnvironment;
+    private extractKeyId;
+    private extractUserId;
+    private computeHMAC;
+    private checkRateLimit;
+    private validatePayloadSchema;
+    private reject;
+}
+export declare const trustBoundary: TrustBoundaryValidator;
+export declare function createTrustBoundary(): TrustBoundaryValidator;
+//# sourceMappingURL=TrustBoundaryValidator.d.ts.map

package/dist/security/TrustBoundaryValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustBoundaryValidator.d.ts","sourceRoot":"","sources":["../../src/security/TrustBoundaryValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,cAAc,GAAG,sBAAsB,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;IAChJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;IACvC,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,UAAU,CAA0C;IAC5D,OAAO,CAAC,gBAAgB,CAAoE;IAC5F,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,UAAU,CAA0B;;IAM5C;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,gBAAgB;IAiFpB;;OAEG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAUrD;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI;IAMnG;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,aAAa;IAmB3F;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAsB5F,OAAO,CAAC,iBAAiB;IAgCzB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,MAAM;CAiBf;AAGD,eAAO,MAAM,aAAa,wBAA+B,CAAC;AAC1D,wBAAgB,mBAAmB,IAAI,sBAAsB,CAE5D"}