agentshield-sdk 7.3.0 → 8.0.0

package/src/production.js

@@ -21,7 +21,7 @@ const { scanText } = require('./detector-core');
 class SamplingScanner {
   constructor(options = {}) {
     this.sampleRate = options.sampleRate !== undefined ? options.sampleRate : 0.1; // 10% default
-    this.scanFn = options.scanFn || ((text) => scanText(text, options.sensitivity || 'high'));
+    this.scanFn = options.scanFn || ((text) => scanText(text, { sensitivity: options.sensitivity || 'high' }));
     this.stats = { total: 0, sampled: 0, threats: 0, extrapolatedThreats: 0 };
   }
 
@@ -44,7 +44,9 @@ class SamplingScanner {
     }
 
     // Extrapolate
-    this.stats.extrapolatedThreats = Math.round(this.stats.threats / this.sampleRate);
+    this.stats.extrapolatedThreats = this.sampleRate > 0
+      ? Math.round(this.stats.threats / this.sampleRate)
+      : 0;
 
     return { sampled: true, ...result };
   }
@@ -72,8 +74,8 @@ class SamplingScanner {
 
 class ShadowComparison {
   constructor(options = {}) {
-    this.primaryScanFn = options.primary || ((text) => scanText(text, 'high'));
-    this.candidateScanFn = options.candidate || ((text) => scanText(text, 'high'));
+    this.primaryScanFn = options.primary || ((text) => scanText(text, { sensitivity: 'high' }));
+    this.candidateScanFn = options.candidate || ((text) => scanText(text, { sensitivity: 'high' }));
     this.results = [];
     this.maxResults = options.maxResults || 5000;
   }
@@ -152,7 +154,7 @@ class ShadowComparison {
 
 class GracefulScanner {
   constructor(options = {}) {
-    this.scanFn = options.scanFn || ((text) => scanText(text, options.sensitivity || 'high'));
+    this.scanFn = options.scanFn || ((text) => scanText(text, { sensitivity: options.sensitivity || 'high' }));
     this.fallbackPolicy = options.fallbackPolicy || 'allow'; // 'allow' or 'block'
     this.timeoutMs = options.timeoutMs || 100;
     this.onError = options.onError || null;
@@ -174,6 +176,7 @@ class GracefulScanner {
       if (elapsed > this.timeoutMs) {
         this.stats.timeouts++;
         if (this.onTimeout) this.onTimeout({ elapsed, text: text.substring(0, 100) });
+        // Note: _fallback increments stats.fallbacks
         return this._fallback('timeout', elapsed);
       }
 
@@ -181,7 +184,6 @@ class GracefulScanner {
       return result;
     } catch (error) {
       this.stats.errors++;
-      this.stats.fallbacks++;
       if (this.onError) this.onError({ error: error.message, text: text.substring(0, 100) });
       return this._fallback('error', 0, error.message);
     }
@@ -322,8 +324,9 @@ class ThreatReplay {
 // =========================================================================
 
 class AttackAttributionChain {
-  constructor() {
+  constructor(options = {}) {
     this.conversations = new Map();
+    this.maxConversations = options.maxConversations || 10000;
   }
 
   /**
@@ -339,6 +342,12 @@ class AttackAttributionChain {
       });
     }
 
+    // Evict oldest conversation if at capacity
+    if (this.conversations.size > this.maxConversations) {
+      const oldestKey = this.conversations.keys().next().value;
+      this.conversations.delete(oldestKey);
+    }
+
     const conv = this.conversations.get(conversationId);
     const hasThreat = scanResult.threats && scanResult.threats.length > 0;
 
@@ -424,8 +433,9 @@ class AttackAttributionChain {
 // =========================================================================
 
 class DiffReporter {
-  constructor() {
+  constructor(options = {}) {
     this.snapshots = [];
+    this.maxSnapshots = options.maxSnapshots || 1000;
   }
 
   /**
@@ -437,6 +447,9 @@ class DiffReporter {
       timestamp: new Date().toISOString(),
       stats: JSON.parse(JSON.stringify(stats))
     });
+    while (this.snapshots.length > this.maxSnapshots) {
+      this.snapshots.shift();
+    }
     return this.snapshots.length - 1;
   }
 
@@ -445,7 +458,7 @@ class DiffReporter {
    */
   compare(indexA, indexB) {
     const a = this.snapshots[indexA];
-    const b = this.snapshots[indexB || this.snapshots.length - 1];
+    const b = this.snapshots[indexB !== undefined ? indexB : this.snapshots.length - 1];
     if (!a || !b) return null;
 
     const diff = {};