@silmaril-security/sdk 0.3.0 → 0.4.1

package/dist/adapters/vercel.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/vercel.ts","../../src/exceptions.ts","../../src/hooks.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const shadowMode = options.shadowMode ?? firewall.shadowMode;\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      toolName !== undefined ? { hook, toolName } : { hook },\n    );\n    const threshold = result.threshold;\n    const blocked = result.score >= threshold;\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      shadowMode,\n    });\n    if (!blocked || shadowMode) {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAST;AACD,UAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,SAAK,OAAO;AACZ,SAAK,QAAQ,OAAO;AACpB,SAAK,YAAY,OAAO;AACxB,SAAK,aAAa,OAAO;AACzB,SAAK,QAAQ,OAAO;AACpB,SAAK,OAAO,OAAO;AACnB,SAAK,WAAW,OAAO;AACvB,SAAK,aAAa,OAAO;AACzB,SAAK,SAAS,OAAO;AACrB,WAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,EAChE;AAAA,EAEA,OAAe,cAAc,QAIlB;AACT,UAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,WACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,EAEjB;AACF;;;AC9DO,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;AFArF,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,aAAa,QAAQ,cAAc,SAAS;AAElD,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA,aAAa,SAAY,EAAE,MAAM,SAAS,IAAI,EAAE,KAAK;AAAA,IACvD;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,WAAW,YAAY;AAC1B;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAA,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;","names":["text"]}

package/dist/adapters/vercel.d.cts

@@ -0,0 +1 @@
+export { h as FirewallMiddleware, l as createMiddleware } from '../firewall-CEV5hItA.cjs';

package/dist/adapters/vercel.d.ts

@@ -0,0 +1 @@
+export { h as FirewallMiddleware, l as createMiddleware } from '../firewall-CEV5hItA.js';

package/dist/adapters/vercel.js

@@ -0,0 +1,294 @@
+// src/exceptions.ts
+var MAX_PROMPT_DISPLAY_LEN = 100;
+var FirewallBlockedException = class _FirewallBlockedException extends Error {
+  score;
+  threshold;
+  promptText;
+  runId;
+  hook;
+  toolName;
+  toolCallId;
+  result;
+  constructor(params) {
+    super(_FirewallBlockedException.formatMessage(params));
+    this.name = "FirewallBlockedException";
+    this.score = params.score;
+    this.threshold = params.threshold;
+    this.promptText = params.promptText;
+    this.runId = params.runId;
+    this.hook = params.hook;
+    this.toolName = params.toolName;
+    this.toolCallId = params.toolCallId;
+    this.result = params.result;
+    Object.setPrototypeOf(this, _FirewallBlockedException.prototype);
+  }
+  static formatMessage(params) {
+    const truncated = params.promptText.length > MAX_PROMPT_DISPLAY_LEN ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...` : params.promptText;
+    return `Request blocked by Silmaril Firewall (score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): '${truncated}'`;
+  }
+};
+
+// src/hooks.ts
+var HookLabel = {
+  USER_INPUT: "user_input",
+  SYSTEM_PROMPT: "system_prompt",
+  TOOL_CALL: "tool_call",
+  TOOL_RESPONSE: "tool_response",
+  LLM_OUTPUT: "llm_output",
+  UNKNOWN: "unknown"
+};
+var FirewallHook = {
+  LLM_START: "on_llm_start",
+  CHAT_MODEL_START: "on_chat_model_start",
+  TOOL_START: "on_tool_start",
+  RETRIEVER_START: "on_retriever_start",
+  LLM_END: "on_llm_end",
+  TOOL_END: "on_tool_end",
+  RETRIEVER_END: "on_retriever_end"
+};
+var DEFAULT_HOOKS = /* @__PURE__ */ new Set([
+  FirewallHook.LLM_START,
+  FirewallHook.CHAT_MODEL_START
+]);
+var INPUT_HOOKS = /* @__PURE__ */ new Set([
+  FirewallHook.LLM_START,
+  FirewallHook.CHAT_MODEL_START,
+  FirewallHook.TOOL_START,
+  FirewallHook.RETRIEVER_START
+]);
+var OUTPUT_HOOKS = /* @__PURE__ */ new Set([
+  FirewallHook.LLM_END,
+  FirewallHook.TOOL_END,
+  FirewallHook.RETRIEVER_END
+]);
+var ALL_HOOKS = /* @__PURE__ */ new Set([
+  ...INPUT_HOOKS,
+  ...OUTPUT_HOOKS
+]);
+var FIREWALL_HOOK_TO_LABEL = {
+  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,
+  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,
+  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,
+  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,
+  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,
+  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,
+  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT
+};
+var FIREWALL_HOOK_VALUES = new Set(Object.values(FirewallHook));
+
+// src/adapters/vercel.ts
+function stringifyToolValue(value) {
+  if (value === null || value === void 0) {
+    return "";
+  }
+  if (typeof value === "string") {
+    return value;
+  }
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return String(value);
+  }
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function extractContentText(content) {
+  if (typeof content === "string") {
+    return content;
+  }
+  const parts = [];
+  for (const block of content) {
+    if (typeof block === "string") {
+      parts.push(block);
+    } else if (block && block.type === "text") {
+      parts.push(block.text ?? "");
+    }
+  }
+  return parts.join(" ");
+}
+function iterateToolResultParts(message) {
+  if (typeof message.content === "string") {
+    return [];
+  }
+  const out = [];
+  for (const part of message.content) {
+    if (typeof part === "string") {
+      continue;
+    }
+    if (part.type === "tool-result") {
+      const text = stringifyToolResult(part.result !== void 0 ? part.result : part.output);
+      if (text.trim()) {
+        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });
+      }
+    }
+  }
+  return out;
+}
+function stringifyToolResult(value) {
+  if (!isRecord(value)) {
+    return stringifyToolValue(value);
+  }
+  if ((value.type === "text" || value.type === "error-text") && typeof value.value === "string") {
+    return value.value;
+  }
+  if ((value.type === "json" || value.type === "error-json") && value.value !== void 0) {
+    return stringifyToolValue(value.value);
+  }
+  if (value.type === "content" && Array.isArray(value.value)) {
+    return value.value.map((part) => isRecord(part) && part.type === "text" && typeof part.text === "string" ? part.text : "").filter((text) => text.length > 0).join(" ");
+  }
+  return stringifyToolValue(value);
+}
+function findLastUserMessage(messages) {
+  for (let i = messages.length - 1; i >= 0; i--) {
+    const msg = messages[i];
+    if (msg.role.toLowerCase() === "user") {
+      return msg;
+    }
+  }
+  return void 0;
+}
+function createMiddleware(firewall, options = {}) {
+  const scanInput = options.scanInput ?? true;
+  const scanOutput = options.scanOutput ?? false;
+  const shadowMode = options.shadowMode ?? firewall.shadowMode;
+  const classifyOrBlock = async (text, hook, context = { toolName: void 0, toolCallId: void 0 }) => {
+    if (!text.trim()) {
+      return;
+    }
+    const { toolName, toolCallId } = context;
+    const result = await firewall.classify(
+      text,
+      toolName !== void 0 ? { hook, toolName } : { hook }
+    );
+    const threshold = result.threshold;
+    const blocked = result.score >= threshold;
+    const commonEventFields = {
+      hook,
+      ...toolName !== void 0 ? { toolName } : {},
+      ...toolCallId !== void 0 ? { toolCallId } : {},
+      text,
+      result
+    };
+    options.onClassify?.({
+      ...commonEventFields,
+      blocked,
+      shadowMode
+    });
+    if (!blocked || shadowMode) {
+      return;
+    }
+    const err = new FirewallBlockedException({
+      score: result.score,
+      threshold,
+      promptText: text,
+      hook,
+      ...toolName !== void 0 ? { toolName } : {},
+      ...toolCallId !== void 0 ? { toolCallId } : {},
+      result
+    });
+    options.onBlocked?.(err);
+    throw err;
+  };
+  const scanPrompt = async (prompt) => {
+    if (prompt.length === 0) {
+      return;
+    }
+    const last = prompt[prompt.length - 1];
+    const role = last.role.toLowerCase();
+    if (role === "tool") {
+      for (const { text: text2, toolName, toolCallId } of iterateToolResultParts(last)) {
+        await classifyOrBlock(text2, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });
+      }
+      return;
+    }
+    const lastUser = findLastUserMessage(prompt);
+    if (!lastUser) {
+      return;
+    }
+    const text = extractContentText(lastUser.content).trim();
+    if (!text) {
+      return;
+    }
+    await classifyOrBlock(text, HookLabel.USER_INPUT);
+  };
+  const scanGenerateResult = async (result) => {
+    if (scanOutput && typeof result.text === "string" && result.text.length > 0) {
+      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);
+    }
+    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {
+      for (const call of result.toolCalls) {
+        if (!call || typeof call !== "object") {
+          continue;
+        }
+        const toolInput = call.args !== void 0 ? call.args : call.input;
+        const args = typeof toolInput === "string" ? toolInput : stringifyToolValue(toolInput);
+        const toolName = typeof call.toolName === "string" ? call.toolName : void 0;
+        const toolCallId = typeof call.toolCallId === "string" ? call.toolCallId : void 0;
+        if (args.trim()) {
+          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });
+        }
+      }
+    }
+  };
+  return {
+    specificationVersion: "v3",
+    middlewareVersion: "v2",
+    async wrapGenerate({
+      params,
+      doGenerate
+    }) {
+      if (scanInput) {
+        await scanPrompt(params.prompt ?? []);
+      }
+      const result = await doGenerate();
+      await scanGenerateResult(result);
+      return result;
+    },
+    async wrapStream({
+      params,
+      doStream
+    }) {
+      if (scanInput) {
+        await scanPrompt(params.prompt ?? []);
+      }
+      const { stream, ...rest } = await doStream();
+      if (!scanOutput) {
+        return { stream, ...rest };
+      }
+      let buffered = "";
+      const transformed = stream.pipeThrough(
+        new TransformStream({
+          transform(chunk, controller) {
+            const part = chunk;
+            if (part && part.type === "text-delta") {
+              const delta = part.textDelta ?? part.delta ?? "";
+              buffered += delta;
+            }
+            controller.enqueue(chunk);
+          },
+          async flush(controller) {
+            if (!buffered.trim()) {
+              return;
+            }
+            try {
+              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);
+            } catch (err) {
+              if (err instanceof FirewallBlockedException) {
+                controller.enqueue({ type: "error", error: err });
+                return;
+              }
+              throw err;
+            }
+          }
+        })
+      );
+      return { stream: transformed, ...rest };
+    }
+  };
+}
+export {
+  createMiddleware
+};
+//# sourceMappingURL=vercel.js.map

package/dist/adapters/vercel.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/exceptions.ts","../../src/hooks.ts","../../src/adapters/vercel.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const shadowMode = options.shadowMode ?? firewall.shadowMode;\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      toolName !== undefined ? { hook, toolName } : { hook },\n    );\n    const threshold = result.threshold;\n    const blocked = result.score >= threshold;\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      shadowMode,\n    });\n    if (!blocked || shadowMode) {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n"],"mappings":";AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAST;AACD,UAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,SAAK,OAAO;AACZ,SAAK,QAAQ,OAAO;AACpB,SAAK,YAAY,OAAO;AACxB,SAAK,aAAa,OAAO;AACzB,SAAK,QAAQ,OAAO;AACpB,SAAK,OAAO,OAAO;AACnB,SAAK,WAAW,OAAO;AACvB,SAAK,aAAa,OAAO;AACzB,SAAK,SAAS,OAAO;AACrB,WAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,EAChE;AAAA,EAEA,OAAe,cAAc,QAIlB;AACT,UAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,WACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,EAEjB;AACF;;;AC9DO,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ACArF,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,aAAa,QAAQ,cAAc,SAAS;AAElD,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA,aAAa,SAAY,EAAE,MAAM,SAAS,IAAI,EAAE,KAAK;AAAA,IACvD;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,WAAW,YAAY;AAC1B;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAA,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;","names":["text"]}

package/dist/firewall-CEV5hItA.d.cts

@@ -0,0 +1,165 @@
+declare const HookLabel: {
+    readonly USER_INPUT: "user_input";
+    readonly SYSTEM_PROMPT: "system_prompt";
+    readonly TOOL_CALL: "tool_call";
+    readonly TOOL_RESPONSE: "tool_response";
+    readonly LLM_OUTPUT: "llm_output";
+    readonly UNKNOWN: "unknown";
+};
+type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];
+declare const FirewallHook: {
+    readonly LLM_START: "on_llm_start";
+    readonly CHAT_MODEL_START: "on_chat_model_start";
+    readonly TOOL_START: "on_tool_start";
+    readonly RETRIEVER_START: "on_retriever_start";
+    readonly LLM_END: "on_llm_end";
+    readonly TOOL_END: "on_tool_end";
+    readonly RETRIEVER_END: "on_retriever_end";
+};
+type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];
+declare const DEFAULT_HOOKS: ReadonlySet<FirewallHook>;
+declare const INPUT_HOOKS: ReadonlySet<FirewallHook>;
+declare const OUTPUT_HOOKS: ReadonlySet<FirewallHook>;
+declare const ALL_HOOKS: ReadonlySet<FirewallHook>;
+declare const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>>;
+declare function resolveHooks(hooks: Iterable<FirewallHook | string> | undefined): ReadonlySet<FirewallHook>;
+declare function prependHook(text: string, hook: HookLabel | string | undefined | null): string;
+declare function prependToolName(text: string, toolName: string | undefined | null): string;
+
+type Prediction = "BENIGN" | "MALICIOUS";
+interface BlockResult {
+    readonly prediction: Prediction;
+    readonly score: number;
+    readonly threshold: number;
+    readonly primaryOutcome?: string;
+    readonly outcomeScores?: Readonly<Record<string, number>>;
+    readonly detectorScores?: Readonly<Record<string, number>>;
+    readonly detectorCounts?: Readonly<Record<string, number>>;
+}
+interface FirewallOptions {
+    apiKey: string;
+    apiUrl: string;
+    timeoutMs?: number;
+    chunkConcurrency?: number;
+    shadowMode?: boolean;
+}
+type ClassificationMetadata = Readonly<Record<string, unknown>>;
+interface ClassifyOptions {
+    hook?: HookLabel;
+    toolName?: string;
+    metadata?: ClassificationMetadata;
+    requestId?: string;
+}
+interface ClassifyBatchOptions {
+    hooks?: readonly HookLabel[];
+    toolNames?: readonly (string | undefined)[];
+    metadata?: readonly (ClassificationMetadata | undefined)[];
+    requestId?: string;
+}
+interface LangChainAdapterOptions {
+    hooks?: ReadonlySet<FirewallHook>;
+    includeSystem?: boolean;
+    includeTool?: boolean;
+    failOpen?: boolean;
+    logger?: (message: string, error: unknown) => void;
+    shadowMode?: boolean;
+    onClassify?: (event: ClassifyEvent) => void;
+}
+interface LangChainFirewallHandler {
+    readonly name: string;
+    readonly raiseError: boolean;
+    readonly awaitHandlers: boolean;
+    handleChatModelStart?: (...args: unknown[]) => unknown;
+    handleLLMStart?: (...args: unknown[]) => unknown;
+    handleToolStart?: (...args: unknown[]) => unknown;
+    handleRetrieverStart?: (...args: unknown[]) => unknown;
+    handleLLMEnd?: (...args: unknown[]) => unknown;
+    handleToolEnd?: (...args: unknown[]) => unknown;
+    handleRetrieverEnd?: (...args: unknown[]) => unknown;
+}
+interface ClassifyEvent {
+    readonly hook: HookLabel;
+    readonly toolName?: string;
+    readonly toolCallId?: string;
+    readonly runId?: string;
+    readonly text: string;
+    readonly result: BlockResult;
+    readonly blocked: boolean;
+    readonly shadowMode: boolean;
+}
+interface MiddlewareOptions {
+    scanInput?: boolean;
+    scanOutput?: boolean;
+    scanToolCalls?: boolean;
+    shadowMode?: boolean;
+    onBlocked?: (err: Error) => void;
+    onClassify?: (event: ClassifyEvent) => void;
+}
+
+interface VercelContentPart {
+    type?: string;
+    text?: string;
+    toolCallId?: string;
+    toolName?: string;
+    args?: unknown;
+    output?: unknown;
+    result?: unknown;
+}
+interface VercelPromptMessage {
+    role: string;
+    content: string | ReadonlyArray<VercelContentPart | string>;
+}
+interface VercelToolCall {
+    toolCallType?: string;
+    toolCallId?: string;
+    toolName?: string;
+    args?: unknown;
+    input?: unknown;
+}
+interface VercelGenerateResult {
+    text?: string;
+    toolCalls?: ReadonlyArray<VercelToolCall>;
+}
+interface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {
+    params: {
+        prompt?: ReadonlyArray<VercelPromptMessage>;
+    } & Record<string, unknown>;
+    doGenerate: () => PromiseLike<TResult>;
+}
+interface WrapStreamArgs<TResult extends {
+    stream: ReadableStream<unknown>;
+} & Record<string, unknown>> {
+    params: {
+        prompt?: ReadonlyArray<VercelPromptMessage>;
+    } & Record<string, unknown>;
+    doStream: () => PromiseLike<TResult>;
+}
+interface FirewallMiddleware {
+    readonly specificationVersion: "v3";
+    readonly middlewareVersion: "v2";
+    wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(args: WrapGenerateArgs<TResult>) => Promise<TResult>;
+    wrapStream: <TResult extends {
+        stream: ReadableStream<unknown>;
+    } & Record<string, unknown>>(args: WrapStreamArgs<TResult>) => Promise<TResult>;
+}
+declare function createMiddleware(firewall: Firewall, options?: MiddlewareOptions): FirewallMiddleware;
+
+declare const DEFAULT_TIMEOUT_MS = 10000;
+declare const DEFAULT_CHUNK_CONCURRENCY = 8;
+declare class Firewall {
+    readonly apiKey: string;
+    readonly apiUrl: string;
+    readonly timeoutMs: number;
+    readonly chunkConcurrency: number;
+    readonly shadowMode: boolean;
+    private readonly headers;
+    constructor(options: FirewallOptions);
+    classify(text: string, options?: ClassifyOptions): Promise<BlockResult>;
+    classifyBatch(texts: readonly string[], options?: ClassifyBatchOptions): Promise<BlockResult[]>;
+    asLangChainHandler<THandler = LangChainFirewallHandler>(options?: LangChainAdapterOptions): Promise<THandler>;
+    asMiddleware(options?: MiddlewareOptions): FirewallMiddleware;
+    private postWithRetry;
+    private classifySingleChunk;
+}
+
+export { ALL_HOOKS as A, type BlockResult as B, type ClassificationMetadata as C, DEFAULT_CHUNK_CONCURRENCY as D, FIREWALL_HOOK_TO_LABEL as F, HookLabel as H, INPUT_HOOKS as I, type LangChainAdapterOptions as L, type MiddlewareOptions as M, OUTPUT_HOOKS as O, type Prediction as P, type ClassifyBatchOptions as a, type ClassifyEvent as b, type ClassifyOptions as c, DEFAULT_HOOKS as d, DEFAULT_TIMEOUT_MS as e, Firewall as f, FirewallHook as g, type FirewallMiddleware as h, type FirewallOptions as i, type LangChainFirewallHandler as j, prependToolName as k, createMiddleware as l, prependHook as p, resolveHooks as r };