@sovr/engine 1.2.0 → 2.0.0

package/dist/index.d.mts

@@ -179,12 +179,34 @@ declare const DEFAULT_RULES: PolicyRule[];
  * }
  * ```
  */
+type EngineTier = 'free' | 'personal' | 'starter' | 'pro' | 'enterprise';
+interface EngineTierLimits {
+    evaluationsPerMonth: number;
+    irreversibleAllowsPerMonth: number;
+}
 declare class PolicyEngine {
     private rules;
     private defaultVerdict;
     private auditLog;
     private onAudit?;
-    constructor(config: EngineConfig);
+    private _tier;
+    private _usage;
+    constructor(config: EngineConfig & {
+        tier?: EngineTier;
+    });
+    /** Set the current tier (e.g., after API key verification) */
+    setTier(tier: EngineTier): void;
+    /** Get current tier */
+    get tier(): EngineTier;
+    /** Get tier limits */
+    get tierLimits(): EngineTierLimits;
+    /** Get current usage */
+    get usage(): {
+        evaluations: number;
+        irreversibleAllows: number;
+        monthKey: string;
+    };
+    private _resetMonthIfNeeded;
     /**
      * Evaluate an action against the policy rules.
      * Returns a decision with verdict, risk score, and matched rules.
@@ -215,4 +237,4 @@ declare class PolicyEngine {
     }): void;
 }
 
-export { type AuditEvent, type Channel, DEFAULT_RULES, type EngineConfig, type EvalRequest, type EvalResult, type ExecContext, type HttpContext, type McpContext, PolicyEngine, type PolicyRule, type RiskLevel, type RuleCondition, type SqlContext, type Verdict, PolicyEngine as default };
+export { type AuditEvent, type Channel, DEFAULT_RULES, type EngineConfig, type EngineTier, type EngineTierLimits, type EvalRequest, type EvalResult, type ExecContext, type HttpContext, type McpContext, PolicyEngine, type PolicyRule, type RiskLevel, type RuleCondition, type SqlContext, type Verdict, PolicyEngine as default };

package/dist/index.d.ts

@@ -179,12 +179,34 @@ declare const DEFAULT_RULES: PolicyRule[];
  * }
  * ```
  */
+type EngineTier = 'free' | 'personal' | 'starter' | 'pro' | 'enterprise';
+interface EngineTierLimits {
+    evaluationsPerMonth: number;
+    irreversibleAllowsPerMonth: number;
+}
 declare class PolicyEngine {
     private rules;
     private defaultVerdict;
     private auditLog;
     private onAudit?;
-    constructor(config: EngineConfig);
+    private _tier;
+    private _usage;
+    constructor(config: EngineConfig & {
+        tier?: EngineTier;
+    });
+    /** Set the current tier (e.g., after API key verification) */
+    setTier(tier: EngineTier): void;
+    /** Get current tier */
+    get tier(): EngineTier;
+    /** Get tier limits */
+    get tierLimits(): EngineTierLimits;
+    /** Get current usage */
+    get usage(): {
+        evaluations: number;
+        irreversibleAllows: number;
+        monthKey: string;
+    };
+    private _resetMonthIfNeeded;
     /**
      * Evaluate an action against the policy rules.
      * Returns a decision with verdict, risk score, and matched rules.
@@ -215,4 +237,4 @@ declare class PolicyEngine {
     }): void;
 }
 
-export { type AuditEvent, type Channel, DEFAULT_RULES, type EngineConfig, type EvalRequest, type EvalResult, type ExecContext, type HttpContext, type McpContext, PolicyEngine, type PolicyRule, type RiskLevel, type RuleCondition, type SqlContext, type Verdict, PolicyEngine as default };
+export { type AuditEvent, type Channel, DEFAULT_RULES, type EngineConfig, type EngineTier, type EngineTierLimits, type EvalRequest, type EvalResult, type ExecContext, type HttpContext, type McpContext, PolicyEngine, type PolicyRule, type RiskLevel, type RuleCondition, type SqlContext, type Verdict, PolicyEngine as default };

package/dist/index.js

@@ -258,22 +258,75 @@ var RISK_SCORES = {
   high: 70,
   critical: 95
 };
+var ENGINE_TIER_LIMITS = {
+  free: { evaluationsPerMonth: 50, irreversibleAllowsPerMonth: 0 },
+  personal: { evaluationsPerMonth: 5e3, irreversibleAllowsPerMonth: 500 },
+  starter: { evaluationsPerMonth: 5e4, irreversibleAllowsPerMonth: 5e3 },
+  pro: { evaluationsPerMonth: 5e5, irreversibleAllowsPerMonth: 5e4 },
+  enterprise: { evaluationsPerMonth: -1, irreversibleAllowsPerMonth: -1 }
+};
 var PolicyEngine = class {
   rules;
   defaultVerdict;
   auditLog;
   onAudit;
+  _tier = "free";
+  _usage = { evaluations: 0, irreversibleAllows: 0, monthKey: "" };
   constructor(config) {
     this.rules = config.rules.map((r) => ({ ...r, conditions: r.conditions ? [...r.conditions] : void 0 })).sort((a, b) => b.priority - a.priority);
     this.defaultVerdict = config.default_verdict ?? "allow";
     this.auditLog = config.audit_log ?? false;
     this.onAudit = config.on_audit;
+    this._tier = config.tier ?? "free";
+    const now = /* @__PURE__ */ new Date();
+    this._usage.monthKey = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
+  }
+  /** Set the current tier (e.g., after API key verification) */
+  setTier(tier) {
+    this._tier = tier;
+  }
+  /** Get current tier */
+  get tier() {
+    return this._tier;
+  }
+  /** Get tier limits */
+  get tierLimits() {
+    return ENGINE_TIER_LIMITS[this._tier];
+  }
+  /** Get current usage */
+  get usage() {
+    return { ...this._usage };
+  }
+  _resetMonthIfNeeded() {
+    const now = /* @__PURE__ */ new Date();
+    const mk = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
+    if (this._usage.monthKey !== mk) {
+      this._usage = { evaluations: 0, irreversibleAllows: 0, monthKey: mk };
+    }
   }
   /**
    * Evaluate an action against the policy rules.
    * Returns a decision with verdict, risk score, and matched rules.
    */
   evaluate(request) {
+    this._resetMonthIfNeeded();
+    this._usage.evaluations++;
+    const evalLimit = ENGINE_TIER_LIMITS[this._tier].evaluationsPerMonth;
+    if (evalLimit >= 0 && this._usage.evaluations > evalLimit) {
+      return {
+        decision_id: generateDecisionId(),
+        verdict: "deny",
+        allowed: false,
+        requires_approval: false,
+        reason: `Evaluation quota exceeded (${evalLimit}/month for ${this._tier} tier). Upgrade at https://sovr.inc/pricing`,
+        risk_score: 0,
+        matched_rules: [],
+        risk_level: "none",
+        channel: request.channel,
+        trace_id: request.trace_id || generateTraceId(),
+        timestamp: Date.now()
+      };
+    }
     const traceId = request.trace_id || generateTraceId();
     const decisionId = generateDecisionId();
     const matchedRules = [];
@@ -339,6 +392,14 @@ var PolicyEngine = class {
       Promise.resolve(this.onAudit(event)).catch(() => {
       });
     }
+    if (this._tier === "free") {
+      return {
+        ...result,
+        risk_score: 0,
+        matched_rules: [],
+        reason: "[UPGRADE to Personal+ for detailed evaluation results] https://sovr.inc/pricing"
+      };
+    }
     return result;
   }
   /**

package/dist/index.mjs

@@ -232,22 +232,75 @@ var RISK_SCORES = {
   high: 70,
   critical: 95
 };
+var ENGINE_TIER_LIMITS = {
+  free: { evaluationsPerMonth: 50, irreversibleAllowsPerMonth: 0 },
+  personal: { evaluationsPerMonth: 5e3, irreversibleAllowsPerMonth: 500 },
+  starter: { evaluationsPerMonth: 5e4, irreversibleAllowsPerMonth: 5e3 },
+  pro: { evaluationsPerMonth: 5e5, irreversibleAllowsPerMonth: 5e4 },
+  enterprise: { evaluationsPerMonth: -1, irreversibleAllowsPerMonth: -1 }
+};
 var PolicyEngine = class {
   rules;
   defaultVerdict;
   auditLog;
   onAudit;
+  _tier = "free";
+  _usage = { evaluations: 0, irreversibleAllows: 0, monthKey: "" };
   constructor(config) {
     this.rules = config.rules.map((r) => ({ ...r, conditions: r.conditions ? [...r.conditions] : void 0 })).sort((a, b) => b.priority - a.priority);
     this.defaultVerdict = config.default_verdict ?? "allow";
     this.auditLog = config.audit_log ?? false;
     this.onAudit = config.on_audit;
+    this._tier = config.tier ?? "free";
+    const now = /* @__PURE__ */ new Date();
+    this._usage.monthKey = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
+  }
+  /** Set the current tier (e.g., after API key verification) */
+  setTier(tier) {
+    this._tier = tier;
+  }
+  /** Get current tier */
+  get tier() {
+    return this._tier;
+  }
+  /** Get tier limits */
+  get tierLimits() {
+    return ENGINE_TIER_LIMITS[this._tier];
+  }
+  /** Get current usage */
+  get usage() {
+    return { ...this._usage };
+  }
+  _resetMonthIfNeeded() {
+    const now = /* @__PURE__ */ new Date();
+    const mk = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
+    if (this._usage.monthKey !== mk) {
+      this._usage = { evaluations: 0, irreversibleAllows: 0, monthKey: mk };
+    }
   }
   /**
    * Evaluate an action against the policy rules.
    * Returns a decision with verdict, risk score, and matched rules.
    */
   evaluate(request) {
+    this._resetMonthIfNeeded();
+    this._usage.evaluations++;
+    const evalLimit = ENGINE_TIER_LIMITS[this._tier].evaluationsPerMonth;
+    if (evalLimit >= 0 && this._usage.evaluations > evalLimit) {
+      return {
+        decision_id: generateDecisionId(),
+        verdict: "deny",
+        allowed: false,
+        requires_approval: false,
+        reason: `Evaluation quota exceeded (${evalLimit}/month for ${this._tier} tier). Upgrade at https://sovr.inc/pricing`,
+        risk_score: 0,
+        matched_rules: [],
+        risk_level: "none",
+        channel: request.channel,
+        trace_id: request.trace_id || generateTraceId(),
+        timestamp: Date.now()
+      };
+    }
     const traceId = request.trace_id || generateTraceId();
     const decisionId = generateDecisionId();
     const matchedRules = [];
@@ -313,6 +366,14 @@ var PolicyEngine = class {
       Promise.resolve(this.onAudit(event)).catch(() => {
       });
     }
+    if (this._tier === "free") {
+      return {
+        ...result,
+        risk_score: 0,
+        matched_rules: [],
+        reason: "[UPGRADE to Personal+ for detailed evaluation results] https://sovr.inc/pricing"
+      };
+    }
     return result;
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sovr/engine",
-  "version": "1.2.0",
+  "version": "2.0.0",
   "description": "Unified Policy Engine for SOVR — the single decision plane for all proxy channels",
   "main": "dist/index.js",
   "module": "dist/index.mjs",