@vorionsys/security 1.0.0

package/dist/cognigate/index.js

@@ -0,0 +1,404 @@
+/**
+ * Cognigate - Constrained Execution Runtime
+ *
+ * Executes approved intents within defined constraints and resource limits.
+ * Features:
+ * - Resource limiting (memory, CPU, timeout, network, filesystem)
+ * - Output validation with PII detection and sanitization
+ * - Distributed state tracking via Redis
+ * - Prometheus metrics for observability
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../common/logger.js';
+import { secureRandomString } from '../common/random.js';
+// Import resource tracking components
+import { ResourceTracker, createResourceTracker } from './resource-tracker.js';
+import { createResourceStateProvider, RedisResourceStateProvider } from './resource-state-provider.js';
+import { createExecutionInterceptors, ResourceLimitExceededError } from './resource-interceptors.js';
+import { OutputIntegrator, createStrictOutputIntegrator, createPermissiveOutputIntegrator } from './output-integration.js';
+// Import metrics
+import { recordExecutionStart, recordExecutionComplete, recordResourceUsage, recordResourceViolation, recordTermination, recordOutputValidation, recordPIIDetection, recordOutputSanitization, recordProhibitedPattern, } from './metrics.js';
+const logger = createLogger({ component: 'cognigate' });
+export { ResourceTracker, createResourceTracker };
+export { RedisResourceStateProvider, createResourceStateProvider };
+export { ResourceLimitExceededError };
+export { OutputIntegrator, createStrictOutputIntegrator, createPermissiveOutputIntegrator };
+/**
+ * Cognigate execution gateway
+ */
+export class CognigateGateway {
+    handlers = new Map();
+    activeExecutions = new Map();
+    defaultLimits;
+    stateProvider;
+    outputIntegrator;
+    useDistributedState;
+    defaultOutputValidation;
+    defaultOutputBinding;
+    constructor(options = {}) {
+        this.defaultLimits = {
+            maxMemoryMb: 512,
+            maxCpuPercent: 50,
+            timeoutMs: 300000,
+            maxNetworkRequests: 100,
+            maxFileSystemOps: 1000,
+            ...options.defaultLimits,
+        };
+        this.useDistributedState = options.useDistributedState ?? true;
+        this.defaultOutputValidation = options.defaultOutputValidation;
+        this.defaultOutputBinding = options.defaultOutputBinding;
+        // Initialize state provider if distributed state enabled
+        if (this.useDistributedState) {
+            this.stateProvider = options.stateProvider ?? createResourceStateProvider();
+        }
+        // Initialize output integrator if validation options provided
+        if (this.defaultOutputValidation) {
+            this.outputIntegrator = new OutputIntegrator(this.defaultOutputValidation, this.defaultOutputBinding);
+        }
+        logger.info({
+            defaultLimits: this.defaultLimits,
+            useDistributedState: this.useDistributedState,
+            outputValidation: !!this.defaultOutputValidation,
+        }, 'Cognigate gateway initialized');
+    }
+    /**
+     * Register an execution handler for an intent type
+     */
+    registerHandler(intentType, handler) {
+        this.handlers.set(intentType, handler);
+        logger.info({ intentType }, 'Handler registered');
+    }
+    /**
+     * Execute an approved intent with resource limiting and output validation
+     */
+    async execute(context) {
+        const { intent, decision } = context;
+        const executionId = `exec-${secureRandomString(16)}`;
+        const startedAt = new Date().toISOString();
+        const tenantId = intent.tenantId;
+        const intentType = intent.context['type'] ?? 'default';
+        // Verify decision allows execution
+        if (decision.action !== 'allow') {
+            logger.warn({ intentId: intent.id, executionId, action: decision.action }, 'Execution blocked by decision');
+            return {
+                intentId: intent.id,
+                executionId,
+                success: false,
+                outputs: {},
+                resourceUsage: this.emptyUsage(),
+                startedAt,
+                completedAt: new Date().toISOString(),
+                error: `Execution not allowed: ${decision.action}`,
+            };
+        }
+        // Get handler
+        const handler = this.handlers.get(intentType);
+        if (!handler) {
+            logger.warn({ intentId: intent.id, executionId, intentType }, 'No handler found');
+            return {
+                intentId: intent.id,
+                executionId,
+                success: false,
+                outputs: {},
+                resourceUsage: this.emptyUsage(),
+                startedAt,
+                completedAt: new Date().toISOString(),
+                error: `No handler for intent type: ${intentType}`,
+            };
+        }
+        // Merge limits
+        const limits = { ...this.defaultLimits, ...context.resourceLimits };
+        // Create resource tracker
+        const tracker = createResourceTracker(executionId, limits, {
+            stateProvider: this.stateProvider,
+        });
+        // Track active execution
+        this.activeExecutions.set(intent.id, {
+            executionId,
+            intentId: intent.id,
+            tracker,
+            startedAt,
+        });
+        // Record execution start metric
+        recordExecutionStart(tenantId, intentType);
+        try {
+            // Start resource tracking
+            await tracker.start();
+            // Create interceptors if using distributed state
+            let interceptors;
+            if (this.stateProvider) {
+                interceptors = createExecutionInterceptors(executionId, limits, this.stateProvider, tracker.signal);
+            }
+            // Execute handler with timeout and resource monitoring
+            const execStart = performance.now();
+            let rawOutputs;
+            try {
+                rawOutputs = await this.withAbortableTimeout(handler(intent, intent.context, interceptors), limits.timeoutMs, tracker.signal);
+            }
+            catch (error) {
+                // Check if termination was due to resource limits
+                if (tracker.isTerminated()) {
+                    const terminationReason = tracker.getTerminationReason();
+                    if (terminationReason?.violation) {
+                        recordResourceViolation(tenantId, terminationReason.violation);
+                    }
+                    recordTermination(tenantId, terminationReason?.reason ?? 'unknown');
+                    throw error;
+                }
+                throw error;
+            }
+            const execEnd = performance.now();
+            const durationSeconds = (execEnd - execStart) / 1000;
+            // Stop resource tracking and get final usage
+            const resourceUsage = await tracker.stop();
+            // Validate output
+            let validatedOutputs = rawOutputs;
+            let outputValidationResult;
+            const outputValidationOptions = context.outputValidation ?? this.defaultOutputValidation;
+            if (outputValidationOptions) {
+                const integrator = context.outputValidation
+                    ? new OutputIntegrator(context.outputValidation, context.outputBinding)
+                    : this.outputIntegrator;
+                if (integrator) {
+                    const { output, validation } = await integrator.processOutput(rawOutputs);
+                    validatedOutputs = output;
+                    outputValidationResult = {
+                        valid: validation.valid,
+                        piiDetected: validation.piiDetected,
+                        piiTypes: validation.piiTypes,
+                        sanitized: validation.modified,
+                    };
+                    // Record output validation metrics
+                    recordOutputValidation(tenantId, validation.valid ? 'valid' : 'invalid', validation.mode, validation.durationMs);
+                    if (validation.piiDetected) {
+                        for (const piiType of validation.piiTypes) {
+                            recordPIIDetection(tenantId, piiType);
+                        }
+                    }
+                    if (validation.modified) {
+                        recordOutputSanitization(tenantId);
+                    }
+                    // Record prohibited patterns
+                    if (validation.details.patternScan?.detected) {
+                        for (const pattern of validation.details.patternScan.patterns) {
+                            recordProhibitedPattern(tenantId, pattern.type, pattern.severity ?? 'medium');
+                        }
+                    }
+                }
+            }
+            // Record success metrics
+            recordExecutionComplete(tenantId, intentType, 'success', durationSeconds);
+            recordResourceUsage(tenantId, intentType, resourceUsage);
+            logger.info({
+                intentId: intent.id,
+                executionId,
+                durationMs: execEnd - execStart,
+                resourceUsage,
+            }, 'Execution completed');
+            return {
+                intentId: intent.id,
+                executionId,
+                success: true,
+                outputs: validatedOutputs,
+                resourceUsage,
+                startedAt,
+                completedAt: new Date().toISOString(),
+                outputValidation: outputValidationResult,
+            };
+        }
+        catch (error) {
+            // Stop tracking
+            const resourceUsage = await tracker.stop();
+            const execEnd = performance.now();
+            const durationSeconds = (Date.now() - new Date(startedAt).getTime()) / 1000;
+            const rawErrorMessage = error instanceof Error ? error.message : 'Unknown error';
+            const isTerminated = tracker.isTerminated();
+            const terminationReason = tracker.getTerminationReason();
+            // Build actionable error message with context
+            let errorMessage = rawErrorMessage;
+            if (isTerminated && terminationReason) {
+                errorMessage = `Execution terminated: ${terminationReason.reason}. ` +
+                    `Violation: ${terminationReason.violation ?? 'none'}. ` +
+                    `Intent ID: ${intent.id}. Execution ID: ${executionId}. ` +
+                    `Duration: ${durationSeconds.toFixed(2)}s. ` +
+                    `Resource usage - Memory: ${resourceUsage.memoryPeakMb}MB, Network: ${resourceUsage.networkRequests}, FS: ${resourceUsage.fileSystemOps}`;
+            }
+            else if (rawErrorMessage === 'Unknown error') {
+                errorMessage = `Execution failed with unknown error. ` +
+                    `Intent ID: ${intent.id}. Execution ID: ${executionId}. ` +
+                    `Check application logs for stack trace and detailed diagnostics.`;
+            }
+            // Determine result type for metrics
+            const result = isTerminated ? 'terminated' : 'failure';
+            recordExecutionComplete(tenantId, intentType, result, durationSeconds);
+            recordResourceUsage(tenantId, intentType, resourceUsage);
+            if (error instanceof ResourceLimitExceededError) {
+                recordResourceViolation(tenantId, `${error.limitType}_limit_exceeded`);
+            }
+            logger.error({
+                intentId: intent.id,
+                executionId,
+                error: errorMessage,
+                terminated: isTerminated,
+                terminationReason,
+            }, 'Execution failed');
+            return {
+                intentId: intent.id,
+                executionId,
+                success: false,
+                outputs: {},
+                resourceUsage,
+                startedAt,
+                completedAt: new Date().toISOString(),
+                error: errorMessage,
+                terminated: isTerminated,
+                terminationReason,
+            };
+        }
+        finally {
+            // Remove from active executions
+            this.activeExecutions.delete(intent.id);
+        }
+    }
+    /**
+     * Execute a promise with a timeout and abort signal support.
+     */
+    withAbortableTimeout(promise, ms, signal) {
+        return new Promise((resolve, reject) => {
+            // Check if already aborted
+            if (signal.aborted) {
+                const reason = signal.reason instanceof Error
+                    ? signal.reason.message
+                    : String(signal.reason ?? 'unknown reason');
+                reject(new Error(`Execution aborted before start: ${reason}. ` +
+                    `This may be due to resource limits being exceeded or manual termination. ` +
+                    `Check resource usage and consider increasing limits if appropriate.`));
+                return;
+            }
+            let timeoutId = null;
+            let settled = false;
+            const cleanup = () => {
+                if (timeoutId !== null) {
+                    clearTimeout(timeoutId);
+                    timeoutId = null;
+                }
+            };
+            // Timeout handler
+            timeoutId = setTimeout(() => {
+                if (!settled) {
+                    settled = true;
+                    cleanup();
+                    const timeoutSeconds = Math.round(ms / 1000);
+                    reject(new Error(`Execution timeout after ${timeoutSeconds} seconds. ` +
+                        `The operation exceeded the configured time limit. ` +
+                        `To resolve: (1) Optimize the operation to complete faster, ` +
+                        `(2) Increase timeoutMs in resource limits, or ` +
+                        `(3) Break the operation into smaller chunks. ` +
+                        `Current limit: ${timeoutSeconds}s`));
+                }
+            }, ms);
+            // Abort handler
+            const onAbort = () => {
+                if (!settled) {
+                    settled = true;
+                    cleanup();
+                    const reason = signal.reason instanceof Error
+                        ? signal.reason.message
+                        : String(signal.reason ?? 'manual termination or resource limit');
+                    reject(new Error(`Execution aborted: ${reason}. ` +
+                        `The operation was terminated before completion. ` +
+                        `This may be due to: (1) Resource limit exceeded (memory, CPU, network, filesystem), ` +
+                        `(2) Manual termination request, or ` +
+                        `(3) System shutdown. Check resource usage metrics for details.`));
+                }
+            };
+            signal.addEventListener('abort', onAbort, { once: true });
+            // Promise resolution
+            promise
+                .then((result) => {
+                if (!settled) {
+                    settled = true;
+                    cleanup();
+                    signal.removeEventListener('abort', onAbort);
+                    resolve(result);
+                }
+            })
+                .catch((error) => {
+                if (!settled) {
+                    settled = true;
+                    cleanup();
+                    signal.removeEventListener('abort', onAbort);
+                    reject(error);
+                }
+            });
+        });
+    }
+    /**
+     * Create empty resource usage
+     */
+    emptyUsage() {
+        return {
+            memoryPeakMb: 0,
+            cpuTimeMs: 0,
+            wallTimeMs: 0,
+            networkRequests: 0,
+            fileSystemOps: 0,
+        };
+    }
+    /**
+     * Terminate an execution by intent ID
+     */
+    async terminate(intentId, reason) {
+        const execution = this.activeExecutions.get(intentId);
+        if (!execution) {
+            logger.warn({ intentId }, 'Terminate requested but no active execution found');
+            return false;
+        }
+        const terminationReason = reason ?? 'Manual termination requested';
+        logger.warn({ intentId, executionId: execution.executionId, reason: terminationReason }, 'Terminating execution');
+        execution.tracker.terminate(terminationReason, 'manual');
+        recordTermination(execution.intentId, 'manual');
+        return true;
+    }
+    /**
+     * Get active execution info
+     */
+    getActiveExecution(intentId) {
+        const execution = this.activeExecutions.get(intentId);
+        if (execution) {
+            return {
+                executionId: execution.executionId,
+                startedAt: execution.startedAt,
+            };
+        }
+        return undefined;
+    }
+    /**
+     * Get count of active executions
+     */
+    getActiveExecutionCount() {
+        return this.activeExecutions.size;
+    }
+    /**
+     * List all active execution IDs
+     */
+    listActiveExecutions() {
+        return Array.from(this.activeExecutions.entries()).map(([intentId, exec]) => ({
+            intentId,
+            executionId: exec.executionId,
+            startedAt: exec.startedAt,
+        }));
+    }
+}
+/**
+ * Create a new Cognigate gateway instance
+ */
+export function createGateway(options) {
+    return new CognigateGateway(options);
+}
+// Legacy compatibility - create gateway with just limits
+export function createGatewayWithLimits(defaultLimits) {
+    return new CognigateGateway({ defaultLimits });
+}
+//# sourceMappingURL=index.js.map

package/dist/cognigate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cognigate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAazD,sCAAsC;AACtC,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AACvG,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAA8B,MAAM,4BAA4B,CAAC;AACjI,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAE3H,iBAAiB;AACjB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;AAIxD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,CAAC;AA4E5F;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,QAAQ,GAAkC,IAAI,GAAG,EAAE,CAAC;IACpD,gBAAgB,GAA6B,IAAI,GAAG,EAAE,CAAC;IACvD,aAAa,CAAiB;IAC9B,aAAa,CAAyB;IACtC,gBAAgB,CAAoB;IACpC,mBAAmB,CAAU;IAC7B,uBAAuB,CAA2B;IAClD,oBAAoB,CAAiB;IAE7C,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,aAAa,GAAG;YACnB,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,MAAM;YACjB,kBAAkB,EAAE,GAAG;YACvB,gBAAgB,EAAE,IAAI;YACtB,GAAG,OAAO,CAAC,aAAa;SACzB,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;QAC/D,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;QAC/D,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAEzD,yDAAyD;QACzD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,2BAA2B,EAAE,CAAC;QAC9E,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACjC,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAC1C,IAAI,CAAC,uBAAuB,EAC5B,IAAI,CAAC,oBAAoB,CAC1B,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CACT;YACE,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB;SACjD,EACD,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,UAAkB,EAAE,OAAyB;QAC3D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAyB;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACrC,MAAM,WAAW,GAAG,QAAQ,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,UAAU,GAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAY,IAAI,SAAS,CAAC;QAEnE,mCAAmC;QACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAC7D,+BAA+B,CAChC,CAAC;YAEF,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,WAAW;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE;gBAChC,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,0BAA0B,QAAQ,CAAC,MAAM,EAAE;aACnD,CAAC;QACJ,CAAC;QAED,cAAc;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC;YAElF,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,WAAW;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE;gBAChC,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,+BAA+B,UAAU,EAAE;aACnD,CAAC;QACJ,CAAC;QAED,eAAe;QACf,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAEpE,0BAA0B;QAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE;YACzD,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;QAEH,yBAAyB;QACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;YACnC,WAAW;YACX,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO;YACP,SAAS;SACV,CAAC,CAAC;QAEH,gCAAgC;QAChC,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,0BAA0B;YAC1B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YAEtB,iDAAiD;YACjD,IAAI,YAA+C,CAAC;YACpD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,YAAY,GAAG,2BAA2B,CACxC,WAAW,EACX,MAAM,EACN,IAAI,CAAC,aAAa,EAClB,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YAED,uDAAuD;YACvD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACpC,IAAI,UAAmC,CAAC;YAExC,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC1C,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,EAC7C,MAAM,CAAC,SAAS,EAChB,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,kDAAkD;gBAClD,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;oBAC3B,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBAEzD,IAAI,iBAAiB,EAAE,SAAS,EAAE,CAAC;wBACjC,uBAAuB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;oBACjE,CAAC;oBACD,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;oBAEpE,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAClC,MAAM,eAAe,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;YAErD,6CAA6C;YAC7C,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAE3C,kBAAkB;YAClB,IAAI,gBAAgB,GAAG,UAAU,CAAC;YAClC,IAAI,sBAA2D,CAAC;YAEhE,MAAM,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,uBAAuB,CAAC;YAEzF,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB;oBACzC,CAAC,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,aAAa,CAAC;oBACvE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAE1B,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC1E,gBAAgB,GAAG,MAAiC,CAAC;oBAErD,sBAAsB,GAAG;wBACvB,KAAK,EAAE,UAAU,CAAC,KAAK;wBACvB,WAAW,EAAE,UAAU,CAAC,WAAW;wBACnC,QAAQ,EAAE,UAAU,CAAC,QAAQ;wBAC7B,SAAS,EAAE,UAAU,CAAC,QAAQ;qBAC/B,CAAC;oBAEF,mCAAmC;oBACnC,sBAAsB,CACpB,QAAQ,EACR,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EACtC,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,UAAU,CACtB,CAAC;oBAEF,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;wBAC3B,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;4BAC1C,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBACxC,CAAC;oBACH,CAAC;oBAED,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;wBACxB,wBAAwB,CAAC,QAAQ,CAAC,CAAC;oBACrC,CAAC;oBAED,6BAA6B;oBAC7B,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;wBAC7C,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;4BAC9D,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;wBAChF,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yBAAyB;YACzB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1E,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YAEzD,MAAM,CAAC,IAAI,CACT;gBACE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,WAAW;gBACX,UAAU,EAAE,OAAO,GAAG,SAAS;gBAC/B,aAAa;aACd,EACD,qBAAqB,CACtB,CAAC;YAEF,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,WAAW;gBACX,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,gBAAgB;gBACzB,aAAa;gBACb,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,gBAAgB,EAAE,sBAAsB;aACzC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB;YAChB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAClC,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;YAE5E,MAAM,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACjF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAEzD,8CAA8C;YAC9C,IAAI,YAAY,GAAG,eAAe,CAAC;YACnC,IAAI,YAAY,IAAI,iBAAiB,EAAE,CAAC;gBACtC,YAAY,GAAG,yBAAyB,iBAAiB,CAAC,MAAM,IAAI;oBAClE,cAAc,iBAAiB,CAAC,SAAS,IAAI,MAAM,IAAI;oBACvD,cAAc,MAAM,CAAC,EAAE,mBAAmB,WAAW,IAAI;oBACzD,aAAa,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;oBAC5C,4BAA4B,aAAa,CAAC,YAAY,gBAAgB,aAAa,CAAC,eAAe,SAAS,aAAa,CAAC,aAAa,EAAE,CAAC;YAC9I,CAAC;iBAAM,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBAC/C,YAAY,GAAG,uCAAuC;oBACpD,cAAc,MAAM,CAAC,EAAE,mBAAmB,WAAW,IAAI;oBACzD,kEAAkE,CAAC;YACvE,CAAC;YAED,oCAAoC;YACpC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACvD,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;YACvE,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YAEzD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAChD,uBAAuB,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,SAAS,iBAA2E,CAAC,CAAC;YACnI,CAAC;YAED,MAAM,CAAC,KAAK,CACV;gBACE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,WAAW;gBACX,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,YAAY;gBACxB,iBAAiB;aAClB,EACD,kBAAkB,CACnB,CAAC;YAEF,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,WAAW;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,aAAa;gBACb,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,YAAY;gBACxB,iBAAiB;aAClB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,gCAAgC;YAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,OAAmB,EACnB,EAAU,EACV,MAAmB;QAEnB,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,2BAA2B;YAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,YAAY,KAAK;oBAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC;gBAC9C,MAAM,CAAC,IAAI,KAAK,CACd,mCAAmC,MAAM,IAAI;oBAC7C,2EAA2E;oBAC3E,qEAAqE,CACtE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,SAAS,GAAyC,IAAI,CAAC;YAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC;YAEF,kBAAkB;YAClB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,EAAE,CAAC;oBACV,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;oBAC7C,MAAM,CAAC,IAAI,KAAK,CACd,2BAA2B,cAAc,YAAY;wBACrD,oDAAoD;wBACpD,6DAA6D;wBAC7D,gDAAgD;wBAChD,+CAA+C;wBAC/C,kBAAkB,cAAc,GAAG,CACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,EAAE,EAAE,CAAC,CAAC;YAEP,gBAAgB;YAChB,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,EAAE,CAAC;oBACV,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,YAAY,KAAK;wBAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;wBACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,sCAAsC,CAAC,CAAC;oBACpE,MAAM,CAAC,IAAI,KAAK,CACd,sBAAsB,MAAM,IAAI;wBAChC,kDAAkD;wBAClD,sFAAsF;wBACtF,qCAAqC;wBACrC,gEAAgE,CACjE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1D,qBAAqB;YACrB,OAAO;iBACJ,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7C,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,OAAO;YACL,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,CAAC;YACZ,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,CAAC;YAClB,aAAa,EAAE,CAAC;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,QAAY,EAAE,MAAe;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,mDAAmD,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,8BAA8B,CAAC;QAEnE,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAC3E,uBAAuB,CACxB,CAAC;QAEF,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACzD,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,QAAY;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAiC;IAC7D,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CACrC,aAAuC;IAEvC,OAAO,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/dist/cognigate/lua-scripts.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Cognigate Lua Scripts - Atomic Redis Operations
+ *
+ * Lua scripts for atomic resource tracking operations in Redis.
+ * These ensure consistency under concurrent access across multiple instances.
+ *
+ * @packageDocumentation
+ * @module @vorion/cognigate/lua-scripts
+ */
+/**
+ * Atomic increment with limit check.
+ *
+ * KEYS[1] - The hash key for execution state
+ * ARGV[1] - Field name to increment (e.g., 'networkRequests', 'fileSystemOps')
+ * ARGV[2] - Increment amount
+ * ARGV[3] - Maximum allowed value (limit)
+ *
+ * Returns: [allowed (0 or 1), newValue]
+ */
+export declare const INCREMENT_AND_CHECK_LUA = "\nlocal key = KEYS[1]\nlocal field = ARGV[1]\nlocal increment = tonumber(ARGV[2])\nlocal limit = tonumber(ARGV[3])\n\n-- Get current value or default to 0\nlocal current = tonumber(redis.call('HGET', key, field) or '0')\nlocal newValue = current + increment\n\n-- Check if within limit\nif newValue <= limit then\n  redis.call('HSET', key, field, tostring(newValue))\n  return {1, newValue}\nelse\n  return {0, current}\nend\n";
+/**
+ * Update peak memory (only if higher than current peak).
+ *
+ * KEYS[1] - The hash key for execution state
+ * ARGV[1] - New memory value in MB
+ *
+ * Returns: Current peak memory value
+ */
+export declare const UPDATE_MEMORY_PEAK_LUA = "\nlocal key = KEYS[1]\nlocal newMemory = tonumber(ARGV[1])\n\n-- Get current peak or default to 0\nlocal currentPeak = tonumber(redis.call('HGET', key, 'memoryPeakMb') or '0')\n\n-- Update only if new value is higher\nif newMemory > currentPeak then\n  redis.call('HSET', key, 'memoryPeakMb', tostring(newMemory))\n  return newMemory\nelse\n  return currentPeak\nend\n";
+/**
+ * Get all resource metrics atomically.
+ *
+ * KEYS[1] - The hash key for execution state
+ *
+ * Returns: [memoryPeakMb, cpuTimeMs, networkRequests, fileSystemOps, startTime]
+ */
+export declare const GET_RESOURCE_SNAPSHOT_LUA = "\nlocal key = KEYS[1]\n\nlocal memoryPeakMb = tonumber(redis.call('HGET', key, 'memoryPeakMb') or '0')\nlocal cpuTimeMs = tonumber(redis.call('HGET', key, 'cpuTimeMs') or '0')\nlocal networkRequests = tonumber(redis.call('HGET', key, 'networkRequests') or '0')\nlocal fileSystemOps = tonumber(redis.call('HGET', key, 'fileSystemOps') or '0')\nlocal startTime = tonumber(redis.call('HGET', key, 'startTime') or '0')\n\nreturn {memoryPeakMb, cpuTimeMs, networkRequests, fileSystemOps, startTime}\n";
+/**
+ * Check all resource limits atomically and return violation if any.
+ *
+ * KEYS[1] - The hash key for execution state
+ * ARGV[1] - Memory limit in MB
+ * ARGV[2] - CPU time limit in milliseconds (calculated from percent and elapsed time)
+ * ARGV[3] - Network requests limit
+ * ARGV[4] - File system operations limit
+ * ARGV[5] - Current timestamp for wall time calculation
+ * ARGV[6] - Timeout in milliseconds
+ *
+ * Returns: [shouldTerminate (0 or 1), violationType, currentValue, limit]
+ * violationType: 0=none, 1=memory, 2=cpu, 3=timeout, 4=network, 5=filesystem
+ */
+export declare const CHECK_LIMITS_LUA = "\nlocal key = KEYS[1]\nlocal memoryLimit = tonumber(ARGV[1])\nlocal cpuTimeLimit = tonumber(ARGV[2])\nlocal networkLimit = tonumber(ARGV[3])\nlocal fsLimit = tonumber(ARGV[4])\nlocal currentTime = tonumber(ARGV[5])\nlocal timeoutMs = tonumber(ARGV[6])\n\n-- Get all current values\nlocal memoryPeakMb = tonumber(redis.call('HGET', key, 'memoryPeakMb') or '0')\nlocal cpuTimeMs = tonumber(redis.call('HGET', key, 'cpuTimeMs') or '0')\nlocal networkRequests = tonumber(redis.call('HGET', key, 'networkRequests') or '0')\nlocal fileSystemOps = tonumber(redis.call('HGET', key, 'fileSystemOps') or '0')\nlocal startTime = tonumber(redis.call('HGET', key, 'startTime') or '0')\n\n-- Calculate wall time\nlocal wallTimeMs = 0\nif startTime > 0 then\n  wallTimeMs = currentTime - startTime\nend\n\n-- Check memory limit\nif memoryLimit > 0 and memoryPeakMb > memoryLimit then\n  return {1, 1, memoryPeakMb, memoryLimit}\nend\n\n-- Check CPU time limit\nif cpuTimeLimit > 0 and cpuTimeMs > cpuTimeLimit then\n  return {1, 2, cpuTimeMs, cpuTimeLimit}\nend\n\n-- Check timeout\nif timeoutMs > 0 and wallTimeMs > timeoutMs then\n  return {1, 3, wallTimeMs, timeoutMs}\nend\n\n-- Check network requests limit\nif networkLimit > 0 and networkRequests > networkLimit then\n  return {1, 4, networkRequests, networkLimit}\nend\n\n-- Check file system operations limit\nif fsLimit > 0 and fileSystemOps > fsLimit then\n  return {1, 5, fileSystemOps, fsLimit}\nend\n\n-- No violations\nreturn {0, 0, 0, 0}\n";
+/**
+ * Initialize execution state atomically.
+ *
+ * KEYS[1] - The hash key for execution state
+ * ARGV[1] - Start time timestamp
+ * ARGV[2] - TTL in seconds
+ * ARGV[3] - Memory limit in MB
+ * ARGV[4] - CPU percent limit
+ * ARGV[5] - Timeout in milliseconds
+ * ARGV[6] - Network requests limit (or -1 for unlimited)
+ * ARGV[7] - File system ops limit (or -1 for unlimited)
+ *
+ * Returns: 1 on success
+ */
+export declare const INIT_EXECUTION_LUA = "\nlocal key = KEYS[1]\nlocal startTime = ARGV[1]\nlocal ttl = tonumber(ARGV[2])\nlocal memoryLimit = ARGV[3]\nlocal cpuLimit = ARGV[4]\nlocal timeoutMs = ARGV[5]\nlocal networkLimit = ARGV[6]\nlocal fsLimit = ARGV[7]\n\n-- Set all initial values\nredis.call('HMSET', key,\n  'startTime', startTime,\n  'memoryPeakMb', '0',\n  'cpuTimeMs', '0',\n  'networkRequests', '0',\n  'fileSystemOps', '0',\n  'memoryLimit', memoryLimit,\n  'cpuLimit', cpuLimit,\n  'timeoutMs', timeoutMs,\n  'networkLimit', networkLimit,\n  'fsLimit', fsLimit,\n  'terminated', '0'\n)\n\n-- Set expiry\nredis.call('EXPIRE', key, ttl)\n\nreturn 1\n";
+/**
+ * Increment CPU time atomically.
+ *
+ * KEYS[1] - The hash key for execution state
+ * ARGV[1] - Delta CPU time in milliseconds
+ *
+ * Returns: New total CPU time
+ */
+export declare const INCREMENT_CPU_TIME_LUA = "\nlocal key = KEYS[1]\nlocal delta = tonumber(ARGV[1])\n\nlocal current = tonumber(redis.call('HGET', key, 'cpuTimeMs') or '0')\nlocal newValue = current + delta\nredis.call('HSET', key, 'cpuTimeMs', tostring(newValue))\n\nreturn newValue\n";
+/**
+ * Mark execution as terminated.
+ *
+ * KEYS[1] - The hash key for execution state
+ * ARGV[1] - Termination reason
+ * ARGV[2] - Violation type
+ *
+ * Returns: 1 if marked, 0 if already terminated
+ */
+export declare const MARK_TERMINATED_LUA = "\nlocal key = KEYS[1]\nlocal reason = ARGV[1]\nlocal violation = ARGV[2]\n\nlocal terminated = redis.call('HGET', key, 'terminated')\nif terminated == '1' then\n  return 0\nend\n\nredis.call('HMSET', key,\n  'terminated', '1',\n  'terminationReason', reason,\n  'terminationViolation', violation,\n  'terminatedAt', tostring(redis.call('TIME')[1] * 1000)\n)\n\nreturn 1\n";
+/**
+ * Cleanup and get final metrics.
+ *
+ * KEYS[1] - The hash key for execution state
+ *
+ * Returns: [memoryPeakMb, cpuTimeMs, wallTimeMs, networkRequests, fileSystemOps]
+ * (also deletes the key)
+ */
+export declare const CLEANUP_EXECUTION_LUA = "\nlocal key = KEYS[1]\n\n-- Get all values before deletion\nlocal memoryPeakMb = tonumber(redis.call('HGET', key, 'memoryPeakMb') or '0')\nlocal cpuTimeMs = tonumber(redis.call('HGET', key, 'cpuTimeMs') or '0')\nlocal networkRequests = tonumber(redis.call('HGET', key, 'networkRequests') or '0')\nlocal fileSystemOps = tonumber(redis.call('HGET', key, 'fileSystemOps') or '0')\nlocal startTime = tonumber(redis.call('HGET', key, 'startTime') or '0')\n\n-- Calculate wall time\nlocal currentTime = redis.call('TIME')\nlocal currentMs = tonumber(currentTime[1]) * 1000 + math.floor(tonumber(currentTime[2]) / 1000)\nlocal wallTimeMs = 0\nif startTime > 0 then\n  wallTimeMs = currentMs - startTime\nend\n\n-- Delete the key\nredis.call('DEL', key)\n\nreturn {memoryPeakMb, cpuTimeMs, wallTimeMs, networkRequests, fileSystemOps}\n";
+//# sourceMappingURL=lua-scripts.d.ts.map

package/dist/cognigate/lua-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lua-scripts.d.ts","sourceRoot":"","sources":["../../src/cognigate/lua-scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,+aAiBnC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,qXAclC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,ofAUrC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,s9CAiD5B,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,knBA6B9B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,qPASlC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,wXAkB/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,g0BAsBjC,CAAC"}