@silmaril-security/sdk 0.4.2 → 0.5.1

package/dist/adapters/vercel.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/exceptions.ts","../../src/hooks.ts","../../src/adapters/vercel.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const shadowMode = options.shadowMode ?? firewall.shadowMode;\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      toolName !== undefined ? { hook, toolName } : { hook },\n    );\n    const threshold = result.threshold;\n    const blocked = result.score >= threshold;\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      shadowMode,\n    });\n    if (!blocked || shadowMode) {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n"],"mappings":";AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAST;AACD,UAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,SAAK,OAAO;AACZ,SAAK,QAAQ,OAAO;AACpB,SAAK,YAAY,OAAO;AACxB,SAAK,aAAa,OAAO;AACzB,SAAK,QAAQ,OAAO;AACpB,SAAK,OAAO,OAAO;AACnB,SAAK,WAAW,OAAO;AACvB,SAAK,aAAa,OAAO;AACzB,SAAK,SAAS,OAAO;AACrB,WAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,EAChE;AAAA,EAEA,OAAe,cAAc,QAIlB;AACT,UAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,WACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,EAEjB;AACF;;;AC9DO,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ACArF,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,aAAa,QAAQ,cAAc,SAAS;AAElD,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA,aAAa,SAAY,EAAE,MAAM,SAAS,IAAI,EAAE,KAAK;AAAA,IACvD;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,WAAW,YAAY;AAC1B;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAA,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;","names":["text"]}
+{"version":3,"sources":["../../src/exceptions.ts","../../src/hooks.ts","../../src/adapters/vercel.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const shadowMode = options.shadowMode ?? firewall.shadowMode;\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      toolName !== undefined ? { hook, toolName } : { hook },\n    );\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\";\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      shadowMode,\n    });\n    if (!blocked || shadowMode) {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n"],"mappings":";AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAST;AACD,UAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,SAAK,OAAO;AACZ,SAAK,QAAQ,OAAO;AACpB,SAAK,YAAY,OAAO;AACxB,SAAK,aAAa,OAAO;AACzB,SAAK,QAAQ,OAAO;AACpB,SAAK,OAAO,OAAO;AACnB,SAAK,WAAW,OAAO;AACvB,SAAK,aAAa,OAAO;AACzB,SAAK,SAAS,OAAO;AACrB,WAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,EAChE;AAAA,EAEA,OAAe,cAAc,QAIlB;AACT,UAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,WACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,EAEjB;AACF;;;AC9DO,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ACArF,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,aAAa,QAAQ,cAAc,SAAS;AAElD,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA,aAAa,SAAY,EAAE,MAAM,SAAS,IAAI,EAAE,KAAK;AAAA,IACvD;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe;AACtC,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,WAAW,YAAY;AAC1B;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAA,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;","names":["text"]}

package/dist/{firewall-DfZCCDU6.d.cts → firewall-D2doJsD5.d.cts}

@@ -33,6 +33,12 @@ declare const Outcome: {
     readonly ControlAbuse: "control_abuse";
     readonly SystemCompromise: "system_compromise";
     readonly ServiceDisruption: "service_disruption";
+    readonly CodeGeneration: "code_generation";
+    readonly StoryScriptGeneration: "story_script_generation";
+    readonly GameGeneration: "game_generation";
+    readonly WebsiteGeneration: "website_generation";
+    readonly ClickUpTermsViolation: "clickup_terms_violation";
+    readonly TraditionalAiAbuse: "traditional_ai_abuse";
 };
 declare const unknownOutcomeBrand: unique symbol;
 type KnownPrimaryOutcome = (typeof Outcome)[keyof typeof Outcome];
@@ -42,8 +48,8 @@ type UnknownOutcome = string & {
 };
 type PrimaryOutcome = KnownPrimaryOutcome | UnknownOutcome;
 type HarmfulOutcome = KnownHarmfulOutcome | UnknownOutcome;
-declare const PRIMARY_OUTCOMES: readonly ["benign", "information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption"];
-declare const HARMFUL_OUTCOMES: readonly ["information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption"];
+declare const PRIMARY_OUTCOMES: readonly ["benign", "information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption", "code_generation", "story_script_generation", "game_generation", "website_generation", "clickup_terms_violation", "traditional_ai_abuse"];
+declare const HARMFUL_OUTCOMES: readonly ["information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption", "code_generation", "story_script_generation", "game_generation", "website_generation", "clickup_terms_violation", "traditional_ai_abuse"];
 declare const OUTCOME_DESCRIPTIONS: {
     readonly benign: "No harmful firewall outcome detected.";
     readonly information_disclosure: "Exposes private data, documents, internal context, logs, traces, customer data, SQL rows, topology, or similar non-secret sensitive information.";
@@ -51,6 +57,12 @@ declare const OUTCOME_DESCRIPTIONS: {
     readonly control_abuse: "Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.";
     readonly system_compromise: "Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.";
     readonly service_disruption: "Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.";
+    readonly code_generation: "Requests generation or material modification of executable code, scripts, workflows, or configuration.";
+    readonly story_script_generation: "Requests generation of narrative prose, dialogue, scripts, or story artifacts.";
+    readonly game_generation: "Requests generation of a game, quest, level, mechanic, or playable experience.";
+    readonly website_generation: "Requests generation of a website, landing page, storefront, or web experience.";
+    readonly clickup_terms_violation: "Requests content or actions that violate the configured ClickUp tenant policy.";
+    readonly traditional_ai_abuse: "Requests unsafe AI assistance outside the concrete security outcome classes.";
 };
 declare function isPrimaryOutcome(value: unknown): value is KnownPrimaryOutcome;
 declare function isHarmfulOutcome(value: unknown): value is KnownHarmfulOutcome;
@@ -72,7 +84,6 @@ interface FirewallOptions {
     apiKey: string;
     apiUrl: string;
     timeoutMs?: number;
-    chunkConcurrency?: number;
     shadowMode?: boolean;
 }
 type ClassificationMetadata = Readonly<Record<string, unknown>>;
@@ -177,12 +188,10 @@ interface FirewallMiddleware {
 declare function createMiddleware(firewall: Firewall, options?: MiddlewareOptions): FirewallMiddleware;
 
 declare const DEFAULT_TIMEOUT_MS = 10000;
-declare const DEFAULT_CHUNK_CONCURRENCY = 8;
 declare class Firewall {
     readonly apiKey: string;
     readonly apiUrl: string;
     readonly timeoutMs: number;
-    readonly chunkConcurrency: number;
     readonly shadowMode: boolean;
     private readonly headers;
     constructor(options: FirewallOptions);
@@ -191,7 +200,7 @@ declare class Firewall {
     asLangChainHandler<THandler = LangChainFirewallHandler>(options?: LangChainAdapterOptions): Promise<THandler>;
     asMiddleware(options?: MiddlewareOptions): FirewallMiddleware;
     private postWithRetry;
-    private classifySingleChunk;
+    private classifySingle;
 }
 
-export { ALL_HOOKS as A, type BlockResult as B, type ClassificationMetadata as C, DEFAULT_CHUNK_CONCURRENCY as D, FIREWALL_HOOK_TO_LABEL as F, HookLabel as H, INPUT_HOOKS as I, type KnownHarmfulOutcome as K, type LangChainAdapterOptions as L, type MiddlewareOptions as M, OUTCOME_DESCRIPTIONS as O, PRIMARY_OUTCOMES as P, type UnknownOutcome as U, type ClassifyBatchOptions as a, type ClassifyEvent as b, type ClassifyOptions as c, DEFAULT_HOOKS as d, DEFAULT_TIMEOUT_MS as e, Firewall as f, FirewallHook as g, type FirewallMiddleware as h, type FirewallOptions as i, HARMFUL_OUTCOMES as j, type HarmfulOutcome as k, type KnownPrimaryOutcome as l, type LangChainFirewallHandler as m, OUTPUT_HOOKS as n, Outcome as o, type Prediction as p, type PrimaryOutcome as q, isHarmfulOutcome as r, isPrimaryOutcome as s, normalizeHarmfulOutcome as t, normalizeHarmfulOutcomeMap as u, normalizePrimaryOutcome as v, prependHook as w, prependToolName as x, resolveHooks as y, createMiddleware as z };
+export { ALL_HOOKS as A, type BlockResult as B, type ClassificationMetadata as C, DEFAULT_HOOKS as D, FIREWALL_HOOK_TO_LABEL as F, HookLabel as H, INPUT_HOOKS as I, type KnownHarmfulOutcome as K, type LangChainAdapterOptions as L, type MiddlewareOptions as M, OUTCOME_DESCRIPTIONS as O, PRIMARY_OUTCOMES as P, type UnknownOutcome as U, type ClassifyBatchOptions as a, type ClassifyEvent as b, type ClassifyOptions as c, DEFAULT_TIMEOUT_MS as d, Firewall as e, FirewallHook as f, type FirewallMiddleware as g, type FirewallOptions as h, HARMFUL_OUTCOMES as i, type HarmfulOutcome as j, type KnownPrimaryOutcome as k, type LangChainFirewallHandler as l, OUTPUT_HOOKS as m, Outcome as n, type Prediction as o, type PrimaryOutcome as p, isHarmfulOutcome as q, isPrimaryOutcome as r, normalizeHarmfulOutcome as s, normalizeHarmfulOutcomeMap as t, normalizePrimaryOutcome as u, prependHook as v, prependToolName as w, resolveHooks as x, createMiddleware as y };

package/dist/{firewall-DfZCCDU6.d.ts → firewall-D2doJsD5.d.ts}

@@ -33,6 +33,12 @@ declare const Outcome: {
     readonly ControlAbuse: "control_abuse";
     readonly SystemCompromise: "system_compromise";
     readonly ServiceDisruption: "service_disruption";
+    readonly CodeGeneration: "code_generation";
+    readonly StoryScriptGeneration: "story_script_generation";
+    readonly GameGeneration: "game_generation";
+    readonly WebsiteGeneration: "website_generation";
+    readonly ClickUpTermsViolation: "clickup_terms_violation";
+    readonly TraditionalAiAbuse: "traditional_ai_abuse";
 };
 declare const unknownOutcomeBrand: unique symbol;
 type KnownPrimaryOutcome = (typeof Outcome)[keyof typeof Outcome];
@@ -42,8 +48,8 @@ type UnknownOutcome = string & {
 };
 type PrimaryOutcome = KnownPrimaryOutcome | UnknownOutcome;
 type HarmfulOutcome = KnownHarmfulOutcome | UnknownOutcome;
-declare const PRIMARY_OUTCOMES: readonly ["benign", "information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption"];
-declare const HARMFUL_OUTCOMES: readonly ["information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption"];
+declare const PRIMARY_OUTCOMES: readonly ["benign", "information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption", "code_generation", "story_script_generation", "game_generation", "website_generation", "clickup_terms_violation", "traditional_ai_abuse"];
+declare const HARMFUL_OUTCOMES: readonly ["information_disclosure", "secret_exposure", "control_abuse", "system_compromise", "service_disruption", "code_generation", "story_script_generation", "game_generation", "website_generation", "clickup_terms_violation", "traditional_ai_abuse"];
 declare const OUTCOME_DESCRIPTIONS: {
     readonly benign: "No harmful firewall outcome detected.";
     readonly information_disclosure: "Exposes private data, documents, internal context, logs, traces, customer data, SQL rows, topology, or similar non-secret sensitive information.";
@@ -51,6 +57,12 @@ declare const OUTCOME_DESCRIPTIONS: {
     readonly control_abuse: "Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.";
     readonly system_compromise: "Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.";
     readonly service_disruption: "Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.";
+    readonly code_generation: "Requests generation or material modification of executable code, scripts, workflows, or configuration.";
+    readonly story_script_generation: "Requests generation of narrative prose, dialogue, scripts, or story artifacts.";
+    readonly game_generation: "Requests generation of a game, quest, level, mechanic, or playable experience.";
+    readonly website_generation: "Requests generation of a website, landing page, storefront, or web experience.";
+    readonly clickup_terms_violation: "Requests content or actions that violate the configured ClickUp tenant policy.";
+    readonly traditional_ai_abuse: "Requests unsafe AI assistance outside the concrete security outcome classes.";
 };
 declare function isPrimaryOutcome(value: unknown): value is KnownPrimaryOutcome;
 declare function isHarmfulOutcome(value: unknown): value is KnownHarmfulOutcome;
@@ -72,7 +84,6 @@ interface FirewallOptions {
     apiKey: string;
     apiUrl: string;
     timeoutMs?: number;
-    chunkConcurrency?: number;
     shadowMode?: boolean;
 }
 type ClassificationMetadata = Readonly<Record<string, unknown>>;
@@ -177,12 +188,10 @@ interface FirewallMiddleware {
 declare function createMiddleware(firewall: Firewall, options?: MiddlewareOptions): FirewallMiddleware;
 
 declare const DEFAULT_TIMEOUT_MS = 10000;
-declare const DEFAULT_CHUNK_CONCURRENCY = 8;
 declare class Firewall {
     readonly apiKey: string;
     readonly apiUrl: string;
     readonly timeoutMs: number;
-    readonly chunkConcurrency: number;
     readonly shadowMode: boolean;
     private readonly headers;
     constructor(options: FirewallOptions);
@@ -191,7 +200,7 @@ declare class Firewall {
     asLangChainHandler<THandler = LangChainFirewallHandler>(options?: LangChainAdapterOptions): Promise<THandler>;
     asMiddleware(options?: MiddlewareOptions): FirewallMiddleware;
     private postWithRetry;
-    private classifySingleChunk;
+    private classifySingle;
 }
 
-export { ALL_HOOKS as A, type BlockResult as B, type ClassificationMetadata as C, DEFAULT_CHUNK_CONCURRENCY as D, FIREWALL_HOOK_TO_LABEL as F, HookLabel as H, INPUT_HOOKS as I, type KnownHarmfulOutcome as K, type LangChainAdapterOptions as L, type MiddlewareOptions as M, OUTCOME_DESCRIPTIONS as O, PRIMARY_OUTCOMES as P, type UnknownOutcome as U, type ClassifyBatchOptions as a, type ClassifyEvent as b, type ClassifyOptions as c, DEFAULT_HOOKS as d, DEFAULT_TIMEOUT_MS as e, Firewall as f, FirewallHook as g, type FirewallMiddleware as h, type FirewallOptions as i, HARMFUL_OUTCOMES as j, type HarmfulOutcome as k, type KnownPrimaryOutcome as l, type LangChainFirewallHandler as m, OUTPUT_HOOKS as n, Outcome as o, type Prediction as p, type PrimaryOutcome as q, isHarmfulOutcome as r, isPrimaryOutcome as s, normalizeHarmfulOutcome as t, normalizeHarmfulOutcomeMap as u, normalizePrimaryOutcome as v, prependHook as w, prependToolName as x, resolveHooks as y, createMiddleware as z };
+export { ALL_HOOKS as A, type BlockResult as B, type ClassificationMetadata as C, DEFAULT_HOOKS as D, FIREWALL_HOOK_TO_LABEL as F, HookLabel as H, INPUT_HOOKS as I, type KnownHarmfulOutcome as K, type LangChainAdapterOptions as L, type MiddlewareOptions as M, OUTCOME_DESCRIPTIONS as O, PRIMARY_OUTCOMES as P, type UnknownOutcome as U, type ClassifyBatchOptions as a, type ClassifyEvent as b, type ClassifyOptions as c, DEFAULT_TIMEOUT_MS as d, Firewall as e, FirewallHook as f, type FirewallMiddleware as g, type FirewallOptions as h, HARMFUL_OUTCOMES as i, type HarmfulOutcome as j, type KnownPrimaryOutcome as k, type LangChainFirewallHandler as l, OUTPUT_HOOKS as m, Outcome as n, type Prediction as o, type PrimaryOutcome as p, isHarmfulOutcome as q, isPrimaryOutcome as r, normalizeHarmfulOutcome as s, normalizeHarmfulOutcomeMap as t, normalizePrimaryOutcome as u, prependHook as v, prependToolName as w, resolveHooks as x, createMiddleware as y };

package/dist/index.cjs

@@ -5,8 +5,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -295,7 +300,7 @@ async function createLangChainHandler(firewall, options = {}) {
       return;
     }
     const threshold = result.threshold;
-    const blocked = result.score >= threshold;
+    const blocked = result.prediction === "MALICIOUS";
     const commonEventFields = {
       hook: hookLabel,
       ...toolName !== void 0 ? { toolName } : {},
@@ -426,11 +431,6 @@ var init_langchain = __esm({
 var src_exports = {};
 __export(src_exports, {
   ALL_HOOKS: () => ALL_HOOKS,
-  CHUNK_OVERLAP: () => CHUNK_OVERLAP,
-  CHUNK_OVERLAP_CHARS: () => CHUNK_OVERLAP_CHARS,
-  CHUNK_WINDOW: () => CHUNK_WINDOW,
-  CHUNK_WINDOW_CHARS: () => CHUNK_WINDOW_CHARS,
-  DEFAULT_CHUNK_CONCURRENCY: () => DEFAULT_CHUNK_CONCURRENCY,
   DEFAULT_HOOKS: () => DEFAULT_HOOKS,
   DEFAULT_TIMEOUT_MS: () => DEFAULT_TIMEOUT_MS,
   FIREWALL_HOOK_TO_LABEL: () => FIREWALL_HOOK_TO_LABEL,
@@ -440,15 +440,12 @@ __export(src_exports, {
   HARMFUL_OUTCOMES: () => HARMFUL_OUTCOMES,
   HookLabel: () => HookLabel,
   INPUT_HOOKS: () => INPUT_HOOKS,
-  MAX_INPUT_CHARS: () => MAX_INPUT_CHARS,
-  MAX_INPUT_TOKENS: () => MAX_INPUT_TOKENS,
   OUTCOME_DESCRIPTIONS: () => OUTCOME_DESCRIPTIONS,
   OUTPUT_HOOKS: () => OUTPUT_HOOKS,
   Outcome: () => Outcome,
   PRIMARY_OUTCOMES: () => PRIMARY_OUTCOMES,
   PromptBlockedException: () => PromptBlockedException,
   SilmarilApiError: () => SilmarilApiError,
-  chunkText: () => chunkText,
   isHarmfulOutcome: () => isHarmfulOutcome,
   isPrimaryOutcome: () => isPrimaryOutcome,
   normalizeHarmfulOutcome: () => normalizeHarmfulOutcome,
@@ -456,8 +453,7 @@ __export(src_exports, {
   normalizePrimaryOutcome: () => normalizePrimaryOutcome,
   prependHook: () => prependHook,
   prependToolName: () => prependToolName,
-  resolveHooks: () => resolveHooks,
-  sanitizeText: () => sanitizeText
+  resolveHooks: () => resolveHooks
 });
 module.exports = __toCommonJS(src_exports);
 
@@ -553,7 +549,7 @@ function createMiddleware(firewall, options = {}) {
       toolName !== void 0 ? { hook, toolName } : { hook }
     );
     const threshold = result.threshold;
-    const blocked = result.score >= threshold;
+    const blocked = result.prediction === "MALICIOUS";
     const commonEventFields = {
       hook,
       ...toolName !== void 0 ? { toolName } : {},
@@ -679,78 +675,6 @@ function createMiddleware(firewall, options = {}) {
   };
 }
 
-// src/chunking.ts
-var CHARS_PER_TOKEN = 4;
-var MAX_INPUT_TOKENS = 81920;
-var CHUNK_WINDOW = 400;
-var CHUNK_OVERLAP = 64;
-var MAX_INPUT_CHARS = MAX_INPUT_TOKENS * CHARS_PER_TOKEN;
-var CHUNK_WINDOW_CHARS = CHUNK_WINDOW * CHARS_PER_TOKEN;
-var CHUNK_OVERLAP_CHARS = CHUNK_OVERLAP * CHARS_PER_TOKEN;
-var CHUNK_STRIDE_CHARS = CHUNK_WINDOW_CHARS - CHUNK_OVERLAP_CHARS;
-function isHighSurrogate(code) {
-  return code >= 55296 && code <= 56319;
-}
-function isLowSurrogate(code) {
-  return code >= 56320 && code <= 57343;
-}
-function sanitizeText(text) {
-  let out = "";
-  for (let i = 0; i < text.length; i++) {
-    const code = text.charCodeAt(i);
-    if (isHighSurrogate(code)) {
-      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {
-        out += text[i];
-        out += text[i + 1];
-        i++;
-      }
-      continue;
-    }
-    if (isLowSurrogate(code)) {
-      continue;
-    }
-    out += text[i];
-  }
-  return out;
-}
-function safeChunkStart(text, start) {
-  if (start > 0 && start < text.length && isLowSurrogate(text.charCodeAt(start)) && isHighSurrogate(text.charCodeAt(start - 1))) {
-    return start + 1;
-  }
-  return start;
-}
-function safeChunkEnd(text, end) {
-  if (end > 0 && end < text.length && isHighSurrogate(text.charCodeAt(end - 1)) && isLowSurrogate(text.charCodeAt(end))) {
-    return end - 1;
-  }
-  return end;
-}
-function chunkText(text) {
-  text = sanitizeText(text);
-  const n = text.length;
-  if (n > MAX_INPUT_CHARS) {
-    throw new Error(
-      `Input has ~${Math.floor(n / CHARS_PER_TOKEN)} tokens (${n} chars); max is ${MAX_INPUT_TOKENS} tokens (${MAX_INPUT_CHARS} chars)`
-    );
-  }
-  if (n <= CHUNK_WINDOW_CHARS) {
-    return [text];
-  }
-  const chunks = [];
-  for (let start = 0; start < n; start += CHUNK_STRIDE_CHARS) {
-    const safeStart = safeChunkStart(text, start);
-    if (safeStart >= n) {
-      break;
-    }
-    const end = safeChunkEnd(text, safeStart + CHUNK_WINDOW_CHARS);
-    chunks.push(text.slice(safeStart, end));
-    if (end >= n) {
-      break;
-    }
-  }
-  return chunks;
-}
-
 // src/firewall.ts
 init_exceptions();
 
@@ -761,7 +685,13 @@ var Outcome = {
   SecretExposure: "secret_exposure",
   ControlAbuse: "control_abuse",
   SystemCompromise: "system_compromise",
-  ServiceDisruption: "service_disruption"
+  ServiceDisruption: "service_disruption",
+  CodeGeneration: "code_generation",
+  StoryScriptGeneration: "story_script_generation",
+  GameGeneration: "game_generation",
+  WebsiteGeneration: "website_generation",
+  ClickUpTermsViolation: "clickup_terms_violation",
+  TraditionalAiAbuse: "traditional_ai_abuse"
 };
 var PRIMARY_OUTCOMES = [
   Outcome.Benign,
@@ -769,14 +699,26 @@ var PRIMARY_OUTCOMES = [
   Outcome.SecretExposure,
   Outcome.ControlAbuse,
   Outcome.SystemCompromise,
-  Outcome.ServiceDisruption
+  Outcome.ServiceDisruption,
+  Outcome.CodeGeneration,
+  Outcome.StoryScriptGeneration,
+  Outcome.GameGeneration,
+  Outcome.WebsiteGeneration,
+  Outcome.ClickUpTermsViolation,
+  Outcome.TraditionalAiAbuse
 ];
 var HARMFUL_OUTCOMES = [
   Outcome.InformationDisclosure,
   Outcome.SecretExposure,
   Outcome.ControlAbuse,
   Outcome.SystemCompromise,
-  Outcome.ServiceDisruption
+  Outcome.ServiceDisruption,
+  Outcome.CodeGeneration,
+  Outcome.StoryScriptGeneration,
+  Outcome.GameGeneration,
+  Outcome.WebsiteGeneration,
+  Outcome.ClickUpTermsViolation,
+  Outcome.TraditionalAiAbuse
 ];
 var OUTCOME_DESCRIPTIONS = {
   [Outcome.Benign]: "No harmful firewall outcome detected.",
@@ -784,7 +726,13 @@ var OUTCOME_DESCRIPTIONS = {
   [Outcome.SecretExposure]: "Exposes credentials, tokens, API keys, cookies, passwords, signing keys, OAuth secrets, session material, or webhook secrets.",
   [Outcome.ControlAbuse]: "Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.",
   [Outcome.SystemCompromise]: "Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.",
-  [Outcome.ServiceDisruption]: "Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence."
+  [Outcome.ServiceDisruption]: "Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.",
+  [Outcome.CodeGeneration]: "Requests generation or material modification of executable code, scripts, workflows, or configuration.",
+  [Outcome.StoryScriptGeneration]: "Requests generation of narrative prose, dialogue, scripts, or story artifacts.",
+  [Outcome.GameGeneration]: "Requests generation of a game, quest, level, mechanic, or playable experience.",
+  [Outcome.WebsiteGeneration]: "Requests generation of a website, landing page, storefront, or web experience.",
+  [Outcome.ClickUpTermsViolation]: "Requests content or actions that violate the configured ClickUp tenant policy.",
+  [Outcome.TraditionalAiAbuse]: "Requests unsafe AI assistance outside the concrete security outcome classes."
 };
 var PRIMARY_OUTCOME_SET = new Set(PRIMARY_OUTCOMES);
 var HARMFUL_OUTCOME_SET = new Set(HARMFUL_OUTCOMES);
@@ -824,14 +772,42 @@ function normalizeHarmfulOutcomeMap(values, fieldName) {
   return Object.freeze(out);
 }
 
+// src/sanitization.ts
+function isHighSurrogate(code) {
+  return code >= 55296 && code <= 56319;
+}
+function isLowSurrogate(code) {
+  return code >= 56320 && code <= 57343;
+}
+function sanitizeText(text) {
+  let out = "";
+  for (let i = 0; i < text.length; i++) {
+    const code = text.charCodeAt(i);
+    if (isHighSurrogate(code)) {
+      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {
+        out += text[i];
+        out += text[i + 1];
+        i++;
+      }
+      continue;
+    }
+    if (!isLowSurrogate(code)) {
+      out += text[i];
+    }
+  }
+  return out;
+}
+
 // src/firewall.ts
-var SDK_VERSION = "0.4.2";
+var SDK_VERSION = "0.5.1";
 var DEFAULT_TIMEOUT_MS = 1e4;
-var DEFAULT_CHUNK_CONCURRENCY = 8;
 var DEFAULT_MAX_RETRIES = 5;
 var MAX_BACKOFF_SECONDS = 30;
 var MAX_ERROR_BODY_BYTES = 1 << 16;
 function blockResultFromResponse(data) {
+  if (data.prediction !== "BENIGN" && data.prediction !== "MALICIOUS") {
+    throw new Error("Firewall: response prediction must be BENIGN or MALICIOUS");
+  }
   const result = {
     prediction: data.prediction,
     score: Number(data.score),
@@ -874,9 +850,7 @@ function withSdkMetadata(metadata, info) {
     sdk_language: "typescript",
     sdk_version: SDK_VERSION,
     request_id: info.requestId,
-    input_index: info.inputIndex,
-    chunk_index: info.chunkIndex,
-    chunk_count: info.chunkCount
+    ...info.inputIndex === void 0 ? {} : { input_index: info.inputIndex }
   };
   return payload;
 }
@@ -917,36 +891,10 @@ async function readCappedErrorBody(response) {
   }
   return new TextDecoder().decode(body);
 }
-async function mapWithConcurrency(items, concurrency, task) {
-  const results = new Array(items.length);
-  let nextIndex = 0;
-  let firstError;
-  const workerCount = Math.min(concurrency, items.length);
-  async function worker() {
-    for (; ; ) {
-      const index = nextIndex;
-      nextIndex += 1;
-      if (index >= items.length) {
-        return;
-      }
-      try {
-        results[index] = await task(items[index], index);
-      } catch (err) {
-        firstError ??= err;
-      }
-    }
-  }
-  await Promise.all(Array.from({ length: workerCount }, () => worker()));
-  if (firstError !== void 0) {
-    throw firstError;
-  }
-  return results;
-}
 var Firewall = class {
   apiKey;
   apiUrl;
   timeoutMs;
-  chunkConcurrency;
   shadowMode;
   headers;
   constructor(options) {
@@ -962,12 +910,6 @@ var Firewall = class {
     if (typeof this.timeoutMs !== "number" || !Number.isFinite(this.timeoutMs) || this.timeoutMs < 0) {
       throw new Error(`Firewall: timeoutMs must be a finite non-negative number, got ${this.timeoutMs}`);
     }
-    this.chunkConcurrency = options.chunkConcurrency ?? DEFAULT_CHUNK_CONCURRENCY;
-    if (!Number.isInteger(this.chunkConcurrency) || this.chunkConcurrency < 1) {
-      throw new Error(
-        `Firewall: chunkConcurrency must be an integer >= 1, got ${this.chunkConcurrency}`
-      );
-    }
     this.shadowMode = options.shadowMode ?? false;
     this.headers = Object.freeze({
       "x-api-key": this.apiKey,
@@ -975,27 +917,8 @@ var Firewall = class {
     });
   }
   async classify(text, options = {}) {
-    const chunks = chunkText(text);
     const requestId = options.requestId ?? (0, import_node_crypto.randomUUID)();
-    if (chunks.length === 1) {
-      return this.classifySingleChunk(chunks[0], options, {
-        requestId,
-        inputIndex: 0,
-        chunkIndex: 0,
-        chunkCount: 1
-      });
-    }
-    const results = await mapWithConcurrency(
-      chunks,
-      this.chunkConcurrency,
-      (chunk, index) => this.classifySingleChunk(chunk, options, {
-        requestId,
-        inputIndex: 0,
-        chunkIndex: index,
-        chunkCount: chunks.length
-      })
-    );
-    return results.reduce((best, r) => r.score > best.score ? r : best);
+    return this.classifySingle(sanitizeText(text), options, { requestId });
   }
   async classifyBatch(texts, options = {}) {
     if (texts.length === 0) {
@@ -1029,9 +952,7 @@ var Firewall = class {
     payload.metadata = texts.map(
       (_, index) => withSdkMetadata(options.metadata?.[index], {
         requestId,
-        inputIndex: index,
-        chunkIndex: 0,
-        chunkCount: 1
+        inputIndex: index
       })
     );
     const data = await this.postWithRetry(payload);
@@ -1070,7 +991,7 @@ var Firewall = class {
     }
     throw new Error("Firewall: exhausted retries (unreachable)");
   }
-  async classifySingleChunk(text, options, metadataInfo) {
+  async classifySingle(text, options, metadataInfo) {
     const payload = { text };
     if (options.hook !== void 0) {
       payload.hook = options.hook;
@@ -1090,11 +1011,6 @@ init_hooks();
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ALL_HOOKS,
-  CHUNK_OVERLAP,
-  CHUNK_OVERLAP_CHARS,
-  CHUNK_WINDOW,
-  CHUNK_WINDOW_CHARS,
-  DEFAULT_CHUNK_CONCURRENCY,
   DEFAULT_HOOKS,
   DEFAULT_TIMEOUT_MS,
   FIREWALL_HOOK_TO_LABEL,
@@ -1104,15 +1020,12 @@ init_hooks();
   HARMFUL_OUTCOMES,
   HookLabel,
   INPUT_HOOKS,
-  MAX_INPUT_CHARS,
-  MAX_INPUT_TOKENS,
   OUTCOME_DESCRIPTIONS,
   OUTPUT_HOOKS,
   Outcome,
   PRIMARY_OUTCOMES,
   PromptBlockedException,
   SilmarilApiError,
-  chunkText,
   isHarmfulOutcome,
   isPrimaryOutcome,
   normalizeHarmfulOutcome,
@@ -1120,7 +1033,6 @@ init_hooks();
   normalizePrimaryOutcome,
   prependHook,
   prependToolName,
-  resolveHooks,
-  sanitizeText
+  resolveHooks
 });
 //# sourceMappingURL=index.cjs.map