atabey 0.0.13 → 0.0.15

package/dist/framework-mcp/src/utils/context-optimizer.js

@@ -0,0 +1,157 @@
+/**
+ * ─── CONTEXT OPTIMIZER ─────────────────────────────────────────────
+ *
+ * Prevents context poisoning and runaway token consumption by AI CLIs.
+ * Acts as a Circuit Breaker at the MCP middleware layer.
+ *
+ * Features:
+ * - Token Budget Enforcer: Max tokens per tool call response
+ * - File Read Limiter: Auto-truncate large file reads
+ * - Token-Based Rate Limiter: Max token spend per window
+ * - Response Size Governor: Truncates oversized responses
+ *
+ * [KVKK/GDPR] Also prevents PII leakage via oversized responses.
+ */
+// ─── Configuration ────────────────────────────────────────────────
+const CONFIG = {
+    /** Max tokens allowed in a single tool response */
+    MAX_TOKENS_PER_CALL: parseInt(process.env.MCP_MAX_TOKENS_PER_CALL || "4000", 10),
+    /** Max tokens per minute across all calls for an agent */
+    MAX_TOKENS_PER_MINUTE: parseInt(process.env.MCP_MAX_TOKENS_PER_MINUTE || "20000", 10),
+    /** Max tokens per hour across all calls for an agent */
+    MAX_TOKENS_PER_HOUR: parseInt(process.env.MCP_MAX_TOKENS_PER_HOUR || "100000", 10),
+    /** Max file size in bytes before auto-truncation (100KB) */
+    MAX_FILE_READ_SIZE: parseInt(process.env.MCP_MAX_FILE_READ_SIZE || "102400", 10),
+    /** Max lines to return for truncated files */
+    MAX_FILE_LINES: parseInt(process.env.MCP_MAX_FILE_LINES || "200", 10),
+    /** Token estimation ratio (chars per token) */
+    CHARS_PER_TOKEN: 4,
+};
+const agentBudgets = new Map();
+function getOrCreateBudget(agent) {
+    if (!agentBudgets.has(agent)) {
+        agentBudgets.set(agent, {
+            records: [],
+            totalTokens: 0,
+            lastWarning: 0,
+            blockedUntil: null,
+        });
+    }
+    return agentBudgets.get(agent);
+}
+function pruneOldRecords(agent) {
+    const oneHourAgo = Date.now() - 3600000;
+    agent.records = agent.records.filter(r => r.timestamp > oneHourAgo);
+}
+function sumTokensInWindow(agent, windowMs) {
+    const cutoff = Date.now() - windowMs;
+    return agent.records
+        .filter(r => r.timestamp > cutoff)
+        .reduce((sum, r) => sum + r.tokens, 0);
+}
+/**
+ * Estimate token count from text.
+ * Uses 4 chars per token as a conservative estimate.
+ */
+export function estimateTokens(text) {
+    if (!text)
+        return 0;
+    return Math.ceil(text.length / CONFIG.CHARS_PER_TOKEN);
+}
+/**
+ * Check if a tool response is within token budget.
+ * Returns null if allowed, or an error message if blocked.
+ */
+export function checkTokenBudget(agent, toolName, responseText) {
+    const budget = getOrCreateBudget(agent);
+    // Check if agent is currently blocked
+    if (budget.blockedUntil && Date.now() < budget.blockedUntil) {
+        const remaining = Math.ceil((budget.blockedUntil - Date.now()) / 1000);
+        return `[TOKEN BUDGET] Agent ${agent} is blocked for ${remaining}s. Token limit exceeded.`;
+    }
+    const estimatedTokens = estimateTokens(responseText);
+    // 1. Check per-call limit
+    if (estimatedTokens > CONFIG.MAX_TOKENS_PER_CALL) {
+        return `[TOKEN BUDGET] Response too large: ~${estimatedTokens} tokens (max: ${CONFIG.MAX_TOKENS_PER_CALL}). Truncate your request.`;
+    }
+    // Record the token usage
+    budget.records.push({
+        tokens: estimatedTokens,
+        timestamp: Date.now(),
+        toolName,
+    });
+    budget.totalTokens += estimatedTokens;
+    // Prune old records
+    pruneOldRecords(budget);
+    // 2. Check per-minute limit
+    const minuteTokens = sumTokensInWindow(budget, 60000);
+    if (minuteTokens > CONFIG.MAX_TOKENS_PER_MINUTE) {
+        budget.blockedUntil = Date.now() + 30000; // 30s cooldown
+        return `[TOKEN BUDGET] Agent ${agent} exceeded ${CONFIG.MAX_TOKENS_PER_MINUTE} tokens/min. Cooldown 30s.`;
+    }
+    // 3. Check per-hour limit
+    const hourTokens = sumTokensInWindow(budget, 3600000);
+    if (hourTokens > CONFIG.MAX_TOKENS_PER_HOUR) {
+        budget.blockedUntil = Date.now() + 120000; // 2min cooldown
+        return `[TOKEN BUDGET] Agent ${agent} exceeded ${CONFIG.MAX_TOKENS_PER_HOUR} tokens/hour. Cooldown 2min.`;
+    }
+    // 4. Warning at 80% of per-minute limit
+    if (minuteTokens > CONFIG.MAX_TOKENS_PER_MINUTE * 0.8) {
+        const now = Date.now();
+        if (now - budget.lastWarning > 10000) { // Throttle warnings to once per 10s
+            budget.lastWarning = now;
+            process.stderr.write(`[TOKEN BUDGET WARNING] Agent ${agent} at ${Math.round(minuteTokens / CONFIG.MAX_TOKENS_PER_MINUTE * 100)}% of minute token budget.\n`);
+        }
+    }
+    return null;
+}
+/**
+ * Truncate file content to fit within token budget.
+ * Returns truncated content with a header note.
+ */
+export function truncateFileContent(content, filePath, maxTokens = CONFIG.MAX_TOKENS_PER_CALL) {
+    const estimatedTokens = estimateTokens(content);
+    if (estimatedTokens <= maxTokens)
+        return content;
+    const lines = content.split("\n");
+    const maxLines = Math.min(CONFIG.MAX_FILE_LINES, Math.floor(maxTokens * CONFIG.CHARS_PER_TOKEN / 80));
+    const truncated = lines.slice(0, maxLines).join("\n");
+    const remaining = lines.length - maxLines;
+    return `[TRUNCATED] File "${filePath}" is too large (~${estimatedTokens} tokens). Showing first ${maxLines}/${lines.length} lines.\n\n${truncated}\n\n[... ${remaining} more lines truncated. Use grep_search for targeted queries.]`;
+}
+/**
+ * Get token budget stats for an agent.
+ */
+export function getTokenBudgetStats(agent) {
+    const budget = agentBudgets.get(agent);
+    if (!budget) {
+        return { totalTokens: 0, recentMinute: 0, recentHour: 0, blocked: false, blockedRemaining: 0, callCount: 0 };
+    }
+    pruneOldRecords(budget);
+    return {
+        totalTokens: budget.totalTokens,
+        recentMinute: sumTokensInWindow(budget, 60000),
+        recentHour: sumTokensInWindow(budget, 3600000),
+        blocked: budget.blockedUntil !== null && Date.now() < budget.blockedUntil,
+        blockedRemaining: budget.blockedUntil ? Math.max(0, budget.blockedUntil - Date.now()) : 0,
+        callCount: budget.records.length,
+    };
+}
+/**
+ * Get all agents' token budget stats.
+ */
+export function getAllTokenBudgetStats() {
+    const stats = {};
+    for (const [agent] of agentBudgets) {
+        stats[agent] = getTokenBudgetStats(agent);
+    }
+    return stats;
+}
+/**
+ * Reset all token budgets.
+ */
+export function resetTokenBudgets() {
+    agentBudgets.clear();
+}
+export { CONFIG as TokenBudgetConfig };
+//# sourceMappingURL=context-optimizer.js.map

package/dist/framework-mcp/src/utils/context-optimizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-optimizer.js","sourceRoot":"","sources":["../../../../framework-mcp/src/utils/context-optimizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,qEAAqE;AAErE,MAAM,MAAM,GAAG;IACX,mDAAmD;IACnD,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC;IAChF,0DAA0D;IAC1D,qBAAqB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,EAAE,EAAE,CAAC;IACrF,wDAAwD;IACxD,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,QAAQ,EAAE,EAAE,CAAC;IAClF,4DAA4D;IAC5D,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ,EAAE,EAAE,CAAC;IAChF,8CAA8C;IAC9C,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,KAAK,EAAE,EAAE,CAAC;IACrE,+CAA+C;IAC/C,eAAe,EAAE,CAAC;CACrB,CAAC;AAiBF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEzD,SAAS,iBAAiB,CAAC,KAAa;IACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE;YACpB,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,IAAI;SACrB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACxC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAuB,EAAE,QAAgB;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC;SACjC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC5B,KAAa,EACb,QAAgB,EAChB,YAAoB;IAEpB,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAExC,sCAAsC;IACtC,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,OAAO,wBAAwB,KAAK,mBAAmB,SAAS,0BAA0B,CAAC;IAC/F,CAAC;IAED,MAAM,eAAe,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAErD,0BAA0B;IAC1B,IAAI,eAAe,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/C,OAAO,uCAAuC,eAAe,iBAAiB,MAAM,CAAC,mBAAmB,2BAA2B,CAAC;IACxI,CAAC;IAED,yBAAyB;IACzB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAChB,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,QAAQ;KACX,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,IAAI,eAAe,CAAC;IAEtC,oBAAoB;IACpB,eAAe,CAAC,MAAM,CAAC,CAAC;IAExB,4BAA4B;IAC5B,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,YAAY,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAC9C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,eAAe;QACzD,OAAO,wBAAwB,KAAK,aAAa,MAAM,CAAC,qBAAqB,4BAA4B,CAAC;IAC9G,CAAC;IAED,0BAA0B;IAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC1C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,gBAAgB;QAC3D,OAAO,wBAAwB,KAAK,aAAa,MAAM,CAAC,mBAAmB,8BAA8B,CAAC;IAC9G,CAAC;IAED,wCAAwC;IACxC,IAAI,YAAY,GAAG,MAAM,CAAC,qBAAqB,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,KAAK,EAAE,CAAC,CAAC,oCAAoC;YACxE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,qBAAqB,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACjK,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAC/B,OAAe,EACf,QAAgB,EAChB,YAAoB,MAAM,CAAC,mBAAmB;IAE9C,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,eAAe,IAAI,SAAS;QAAE,OAAO,OAAO,CAAC;IAEjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC;IAEtG,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;IAE1C,OAAO,qBAAqB,QAAQ,oBAAoB,eAAe,2BAA2B,QAAQ,IAAI,KAAK,CAAC,MAAM,cAAc,SAAS,YAAY,SAAS,+DAA+D,CAAC;AAC1O,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAQ7C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACjH,CAAC;IAED,eAAe,CAAC,MAAM,CAAC,CAAC;IAExB,OAAO;QACH,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;QAC9C,UAAU,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC;QAC9C,OAAO,EAAE,MAAM,CAAC,YAAY,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,YAAY;QACzE,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;KACnC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IAOlC,MAAM,KAAK,GAA2D,EAAE,CAAC;IACzE,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACjC,KAAK,CAAC,KAAK,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC7B,YAAY,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,OAAO,EAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/framework-mcp/src/utils/discipline.d.ts

@@ -0,0 +1,68 @@
+/**
+ * ─── AI DISCIPLINE ENGINE ─────────────────────────────────────────
+ *
+ * Enforces strict rules on AI behavior at the MCP middleware layer.
+ * Unlike agent instructions (which AI can ignore), these are enforced
+ * at the tool level - AI cannot bypass them.
+ *
+ * Features:
+ * - Tool call rate limiting (prevents abuse)
+ * - File size limits (prevents reading/writing huge files)
+ * - Call frequency tracking (detects loops)
+ * - Tool blacklist per agent
+ * - Agent-based tool whitelist
+ * - Response content validation
+ * - Max concurrent operations
+ */
+declare const CONFIG: {
+    MAX_CALLS_PER_MINUTE: number;
+    MAX_TOTAL_CALLS: number;
+    MAX_FILE_SIZE: number;
+    MAX_ARGS_SIZE: number;
+    COOLDOWN_MS: number;
+    MAX_RESPONSE_SIZE: number;
+    MAX_CONSECUTIVE_SAME_TOOL: number;
+    RESTRICTED_TOOLS: string[];
+    AGENT_TOOL_WHITELIST: Map<string, Set<string>>;
+};
+/**
+ * Enforce discipline on a tool call before execution.
+ * Returns error message if blocked, null if allowed.
+ */
+export declare function enforceDiscipline(agent: string, toolName: string, args: Record<string, unknown>): Promise<string | null>;
+/**
+ * Validate tool response content before returning to AI.
+ * Returns error message if blocked, null if allowed.
+ */
+export declare function validateResponse(toolName: string, result: {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+}): string | null;
+/**
+ * Get discipline stats for an agent.
+ */
+export declare function getDisciplineStats(agent: string): {
+    totalCalls: number;
+    recentCalls: number;
+    inCooldown: boolean;
+    cooldownRemaining: number;
+    violations: number;
+    lastViolation: string | null;
+};
+/**
+ * Get all agents' discipline stats.
+ */
+export declare function getAllDisciplineStats(): Record<string, {
+    totalCalls: number;
+    recentCalls: number;
+    inCooldown: boolean;
+    violations: number;
+    lastViolation: string | null;
+}>;
+/**
+ * Reset discipline for all agents.
+ */
+export declare function resetDiscipline(): void;
+export { CONFIG as DisciplineConfig };

package/dist/framework-mcp/src/utils/discipline.js

@@ -0,0 +1,218 @@
+/**
+ * ─── AI DISCIPLINE ENGINE ─────────────────────────────────────────
+ *
+ * Enforces strict rules on AI behavior at the MCP middleware layer.
+ * Unlike agent instructions (which AI can ignore), these are enforced
+ * at the tool level - AI cannot bypass them.
+ *
+ * Features:
+ * - Tool call rate limiting (prevents abuse)
+ * - File size limits (prevents reading/writing huge files)
+ * - Call frequency tracking (detects loops)
+ * - Tool blacklist per agent
+ * - Agent-based tool whitelist
+ * - Response content validation
+ * - Max concurrent operations
+ */
+import fs from "fs";
+import path from "path";
+// Per-agent discipline tracking
+const agentDiscipline = new Map();
+// ─── Configuration (from env or defaults) ─────────────────────────
+const CONFIG = {
+    MAX_CALLS_PER_MINUTE: parseInt(process.env.MCP_MAX_CALLS_PER_MINUTE || "60", 10),
+    MAX_TOTAL_CALLS: parseInt(process.env.MCP_MAX_TOTAL_CALLS || "500", 10),
+    MAX_FILE_SIZE: parseInt(process.env.MCP_MAX_FILE_SIZE || "1048576", 10),
+    MAX_ARGS_SIZE: parseInt(process.env.MCP_MAX_ARGS_SIZE || "102400", 10),
+    COOLDOWN_MS: parseInt(process.env.MCP_COOLDOWN_MS || "30000", 10),
+    MAX_RESPONSE_SIZE: parseInt(process.env.MCP_MAX_RESPONSE_SIZE || "512000", 10), // 500KB max response
+    MAX_CONSECUTIVE_SAME_TOOL: parseInt(process.env.MCP_MAX_CONSECUTIVE_SAME_TOOL || "10", 10),
+    RESTRICTED_TOOLS: (process.env.MCP_RESTRICTED_TOOLS || "")
+        .split(",").map(t => t.trim()).filter(Boolean),
+    // Agent-based tool whitelist (format: agent1:tool1,tool2;agent2:tool3,tool4)
+    AGENT_TOOL_WHITELIST: parseAgentWhitelist(process.env.MCP_AGENT_TOOL_WHITELIST || ""),
+};
+function parseAgentWhitelist(input) {
+    const map = new Map();
+    if (!input)
+        return map;
+    input.split(";").forEach(pair => {
+        const [agent, tools] = pair.split(":");
+        if (agent && tools) {
+            map.set(agent.trim(), new Set(tools.split(",").map(t => t.trim())));
+        }
+    });
+    return map;
+}
+const cooldowns = new Map();
+function getOrCreateAgent(agent) {
+    if (!agentDiscipline.has(agent)) {
+        const whitelist = CONFIG.AGENT_TOOL_WHITELIST.get(agent) || null;
+        agentDiscipline.set(agent, {
+            totalCalls: 0,
+            calls: [],
+            lastReset: Date.now(),
+            blacklistedTools: new Set(),
+            whitelistedTools: whitelist,
+            violations: 0,
+            lastViolation: null,
+        });
+    }
+    return agentDiscipline.get(agent);
+}
+function pruneOldCalls(agent, windowMs = 60000) {
+    const cutoff = Date.now() - windowMs;
+    agent.calls = agent.calls.filter(c => c.timestamp > cutoff);
+}
+function isInCooldown(agent) {
+    const until = cooldowns.get(agent);
+    if (!until)
+        return false;
+    if (Date.now() > until) {
+        cooldowns.delete(agent);
+        return false;
+    }
+    return true;
+}
+function recordViolation(agent, reason) {
+    const discipline = agentDiscipline.get(agent);
+    if (discipline) {
+        discipline.violations++;
+        discipline.lastViolation = reason;
+    }
+}
+/**
+ * Enforce discipline on a tool call before execution.
+ * Returns error message if blocked, null if allowed.
+ */
+export async function enforceDiscipline(agent, toolName, args) {
+    const discipline = getOrCreateAgent(agent);
+    // 1. Check cooldown
+    if (isInCooldown(agent)) {
+        const until = cooldowns.get(agent);
+        const remaining = Math.ceil((until - Date.now()) / 1000);
+        return `[DISCIPLINE] Agent ${agent} is in cooldown for ${remaining}s. Too many requests.`;
+    }
+    // 2. Check restricted tools (global blacklist)
+    if (CONFIG.RESTRICTED_TOOLS.includes(toolName)) {
+        recordViolation(agent, `Attempted to use restricted tool: ${toolName}`);
+        return `[DISCIPLINE] Tool "${toolName}" is restricted. Agent ${agent} cannot use it.`;
+    }
+    // 3. Check agent-specific whitelist
+    if (discipline.whitelistedTools && !discipline.whitelistedTools.has(toolName)) {
+        recordViolation(agent, `Attempted to use non-whitelisted tool: ${toolName}`);
+        const allowed = Array.from(discipline.whitelistedTools).join(", ");
+        return `[DISCIPLINE] Agent ${agent} is not allowed to use "${toolName}". Allowed tools: ${allowed}`;
+    }
+    // 4. Check total call limit
+    if (discipline.totalCalls >= CONFIG.MAX_TOTAL_CALLS) {
+        cooldowns.set(agent, Date.now() + CONFIG.COOLDOWN_MS);
+        recordViolation(agent, `Exceeded max total calls (${CONFIG.MAX_TOTAL_CALLS})`);
+        return `[DISCIPLINE] Agent ${agent} exceeded max total calls (${CONFIG.MAX_TOTAL_CALLS}). Cooldown ${CONFIG.COOLDOWN_MS / 1000}s.`;
+    }
+    // 5. Check rate limit (calls per minute)
+    pruneOldCalls(discipline);
+    if (discipline.calls.length >= CONFIG.MAX_CALLS_PER_MINUTE) {
+        cooldowns.set(agent, Date.now() + CONFIG.COOLDOWN_MS);
+        recordViolation(agent, `Rate limit exceeded (${CONFIG.MAX_CALLS_PER_MINUTE}/min)`);
+        return `[DISCIPLINE] Agent ${agent} exceeded rate limit (${CONFIG.MAX_CALLS_PER_MINUTE}/min). Cooldown ${CONFIG.COOLDOWN_MS / 1000}s.`;
+    }
+    // 6. Check consecutive same tool (prevents loops)
+    if (discipline.calls.length >= CONFIG.MAX_CONSECUTIVE_SAME_TOOL) {
+        const lastCalls = discipline.calls.slice(-CONFIG.MAX_CONSECUTIVE_SAME_TOOL);
+        const allSame = lastCalls.every(c => c.tool === toolName);
+        if (allSame) {
+            cooldowns.set(agent, Date.now() + CONFIG.COOLDOWN_MS);
+            recordViolation(agent, `Consecutive same tool limit: ${toolName} x${CONFIG.MAX_CONSECUTIVE_SAME_TOOL}`);
+            return `[DISCIPLINE] Agent ${agent} called "${toolName}" ${CONFIG.MAX_CONSECUTIVE_SAME_TOOL} times in a row. Possible loop. Cooldown.`;
+        }
+    }
+    // 7. Check args size
+    const argsStr = JSON.stringify(args);
+    if (argsStr.length > CONFIG.MAX_ARGS_SIZE) {
+        recordViolation(agent, `Args too large: ${argsStr.length} bytes`);
+        return `[DISCIPLINE] Tool call args too large (${argsStr.length} bytes, max: ${CONFIG.MAX_ARGS_SIZE}).`;
+    }
+    // 8. Check file size for read/write operations
+    if ((toolName === "read_file" || toolName === "write_file") && args.path) {
+        try {
+            const projectRoot = process.env.ATABEY_PROJECT_ROOT || process.cwd();
+            const filePath = path.resolve(projectRoot, args.path);
+            if (fs.existsSync(filePath)) {
+                const stat = fs.statSync(filePath);
+                if (stat.size > CONFIG.MAX_FILE_SIZE) {
+                    return `[DISCIPLINE] File too large (${(stat.size / 1024 / 1024).toFixed(1)}MB, max: ${(CONFIG.MAX_FILE_SIZE / 1024 / 1024).toFixed(1)}MB). Use grep_search instead.`;
+                }
+            }
+        }
+        catch { /* ignore */ }
+    }
+    // Record the call
+    discipline.totalCalls++;
+    discipline.calls.push({
+        tool: toolName,
+        timestamp: Date.now(),
+        argsSize: argsStr.length,
+    });
+    return null;
+}
+/**
+ * Validate tool response content before returning to AI.
+ * Returns error message if blocked, null if allowed.
+ */
+export function validateResponse(toolName, result) {
+    if (!result || !result.content)
+        return null;
+    for (const block of result.content) {
+        if (block.type !== "text" || !block.text)
+            continue;
+        // Check response size
+        if (block.text.length > CONFIG.MAX_RESPONSE_SIZE) {
+            return `[DISCIPLINE] Response too large (${(block.text.length / 1024).toFixed(1)}KB, max: ${(CONFIG.MAX_RESPONSE_SIZE / 1024).toFixed(1)}KB).`;
+        }
+        // Block binary/gibberish content in text responses
+        const nonPrintable = (block.text.match(/[^\x20-\x7E\n\r\t]/g) || []).length;
+        if (nonPrintable > block.text.length * 0.3) {
+            return `[DISCIPLINE] Response contains too much binary data (${nonPrintable} non-printable chars). Blocked.`;
+        }
+    }
+    return null;
+}
+/**
+ * Get discipline stats for an agent.
+ */
+export function getDisciplineStats(agent) {
+    const discipline = agentDiscipline.get(agent);
+    if (!discipline) {
+        return { totalCalls: 0, recentCalls: 0, inCooldown: false, cooldownRemaining: 0, violations: 0, lastViolation: null };
+    }
+    pruneOldCalls(discipline);
+    const cooldownUntil = cooldowns.get(agent);
+    return {
+        totalCalls: discipline.totalCalls,
+        recentCalls: discipline.calls.length,
+        inCooldown: isInCooldown(agent),
+        cooldownRemaining: cooldownUntil ? Math.max(0, cooldownUntil - Date.now()) : 0,
+        violations: discipline.violations,
+        lastViolation: discipline.lastViolation,
+    };
+}
+/**
+ * Get all agents' discipline stats.
+ */
+export function getAllDisciplineStats() {
+    const stats = {};
+    for (const [agent] of agentDiscipline) {
+        stats[agent] = getDisciplineStats(agent);
+    }
+    return stats;
+}
+/**
+ * Reset discipline for all agents.
+ */
+export function resetDiscipline() {
+    agentDiscipline.clear();
+    cooldowns.clear();
+}
+export { CONFIG as DisciplineConfig };
+//# sourceMappingURL=discipline.js.map

package/dist/framework-mcp/src/utils/discipline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discipline.js","sourceRoot":"","sources":["../../../../framework-mcp/src/utils/discipline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAkBxB,gCAAgC;AAChC,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE3D,qEAAqE;AAErE,MAAM,MAAM,GAAG;IACX,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,EAAE,EAAE,CAAC;IAChF,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAAE,EAAE,CAAC;IACvE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,EAAE,EAAE,CAAC;IACvE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,QAAQ,EAAE,EAAE,CAAC;IACtE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,CAAC;IACjE,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,QAAQ,EAAE,EAAE,CAAC,EAAE,qBAAqB;IACrG,yBAAyB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,IAAI,EAAE,EAAE,CAAC;IAE1F,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;SACrD,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAElD,6EAA6E;IAC7E,oBAAoB,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;CACxF,CAAC;AAEF,SAAS,mBAAmB,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC5B,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE5C,SAAS,gBAAgB,CAAC,KAAa;IACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACjE,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE;YACvB,UAAU,EAAE,CAAC;YACb,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,gBAAgB,EAAE,IAAI,GAAG,EAAE;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,IAAI;SACtB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB,EAAE,WAAmB,KAAK;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IACrC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,MAAc;IAClD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,UAAU,EAAE,CAAC;QACb,UAAU,CAAC,UAAU,EAAE,CAAC;QACxB,UAAU,CAAC,aAAa,GAAG,MAAM,CAAC;IACtC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,KAAa,EACb,QAAgB,EAChB,IAA6B;IAE7B,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE3C,oBAAoB;IACpB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,OAAO,sBAAsB,KAAK,uBAAuB,SAAS,uBAAuB,CAAC;IAC9F,CAAC;IAED,+CAA+C;IAC/C,IAAI,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,eAAe,CAAC,KAAK,EAAE,qCAAqC,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,sBAAsB,QAAQ,0BAA0B,KAAK,iBAAiB,CAAC;IAC1F,CAAC;IAED,oCAAoC;IACpC,IAAI,UAAU,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,eAAe,CAAC,KAAK,EAAE,0CAA0C,QAAQ,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,sBAAsB,KAAK,2BAA2B,QAAQ,qBAAqB,OAAO,EAAE,CAAC;IACxG,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAU,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAClD,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACtD,eAAe,CAAC,KAAK,EAAE,6BAA6B,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;QAC/E,OAAO,sBAAsB,KAAK,8BAA8B,MAAM,CAAC,eAAe,eAAe,MAAM,CAAC,WAAW,GAAC,IAAI,IAAI,CAAC;IACrI,CAAC;IAED,yCAAyC;IACzC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACzD,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACtD,eAAe,CAAC,KAAK,EAAE,wBAAwB,MAAM,CAAC,oBAAoB,OAAO,CAAC,CAAC;QACnF,OAAO,sBAAsB,KAAK,yBAAyB,MAAM,CAAC,oBAAoB,mBAAmB,MAAM,CAAC,WAAW,GAAC,IAAI,IAAI,CAAC;IACzI,CAAC;IAED,kDAAkD;IAClD,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACV,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,eAAe,CAAC,KAAK,EAAE,gCAAgC,QAAQ,KAAK,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACxG,OAAO,sBAAsB,KAAK,YAAY,QAAQ,KAAK,MAAM,CAAC,yBAAyB,2CAA2C,CAAC;QAC3I,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QACxC,eAAe,CAAC,KAAK,EAAE,mBAAmB,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;QAClE,OAAO,0CAA0C,OAAO,CAAC,MAAM,gBAAgB,MAAM,CAAC,aAAa,IAAI,CAAC;IAC5G,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAc,CAAC,CAAC;YAChE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;oBACnC,OAAO,gCAAgC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;gBAC1K,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAED,kBAAkB;IAClB,UAAU,CAAC,UAAU,EAAE,CAAC;IACxB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,MAAM;KAC3B,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAA0D;IACzG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,SAAS;QAEnD,sBAAsB;QACtB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,OAAO,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACnJ,CAAC;QAED,mDAAmD;QACnD,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzC,OAAO,wDAAwD,YAAY,iCAAiC,CAAC;QACjH,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAQ5C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1H,CAAC;IAED,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE3C,OAAO;QACH,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;QACpC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC;QAC/B,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,aAAa,EAAE,UAAU,CAAC,aAAa;KAC1C,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IAOjC,MAAM,KAAK,GAA0D,EAAE,CAAC;IACxE,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QACpC,KAAK,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC3B,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,SAAS,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC"}

package/dist/framework-mcp/src/utils/finops.d.ts

@@ -0,0 +1,143 @@
+/**
+ * ─── FINOPS / BUDGET ENFORCEMENT ──────────────────────────────────
+ *
+ * Enterprise budget management for AI token consumption.
+ * Enforces strict cost limits per team, agent, or project.
+ *
+ * Features:
+ * - Team-based budget allocation (monthly/quarterly)
+ * - Per-agent spending limits
+ * - Automatic shutdown when budget exceeded
+ * - Central server sync for budget policies
+ * - Real-time cost tracking
+ * - Budget alerts at configurable thresholds (50%, 80%, 90%, 100%)
+ *
+ * Architecture:
+ *   [Local MCP] → Budget Check → [Enterprise Server] → Shutdown Signal
+ *
+ * Environment Variables:
+ *   ATABEY_BUDGET_TEAM       - Team name for budget grouping
+ *   ATABEY_BUDGET_MONTHLY    - Monthly budget in USD (local override)
+ *   ATABEY_BUDGET_AGENT_MAX  - Max spend per agent in USD
+ *   ATABEY_BUDGET_SYNC_URL   - Enterprise server URL for budget sync
+ */
+declare const CONFIG: {
+    /** Team name for budget grouping */
+    TEAM: string;
+    /** Monthly budget in USD (0 = unlimited) */
+    MONTHLY_BUDGET: number;
+    /** Max spend per agent in USD (0 = unlimited) */
+    AGENT_MAX_BUDGET: number;
+    /** Enterprise server URL for budget policy sync */
+    SYNC_URL: string;
+    /** Sync token */
+    SYNC_TOKEN: string;
+    /** Budget alert thresholds (percentages) */
+    ALERT_THRESHOLDS: number[];
+    /** Cost per 1K tokens (USD) – default: $0.003 for Claude */
+    COST_PER_1K_TOKENS: number;
+    /** Sync interval in ms */
+    SYNC_INTERVAL_MS: number;
+    /** Enable/disable budget enforcement */
+    ENABLED: boolean;
+};
+export interface BudgetState {
+    team: string;
+    /** Total spend this month in USD */
+    monthlySpend: number;
+    /** Per-agent spend this month */
+    agentSpend: Record<string, number>;
+    /** Budget period start (ISO date) */
+    periodStart: string;
+    /** Budget period end (ISO date) */
+    periodEnd: string;
+    /** Whether this team/agent is blocked */
+    blocked: boolean;
+    /** Block reason if blocked */
+    blockReason: string | null;
+    /** Last alert thresholds triggered */
+    triggeredAlerts: number[];
+    /** Last sync timestamp */
+    lastSync: string | null;
+}
+interface BudgetPolicy {
+    team: string;
+    monthlyBudget: number;
+    agentMaxBudget: number;
+    blocked: boolean;
+    blockReason: string | null;
+    updatedAt: string;
+}
+export declare class BudgetManager {
+    private static instance;
+    private state;
+    private syncTimer;
+    private localMetricsPath;
+    private constructor();
+    static getInstance(): BudgetManager;
+    /**
+     * Start the budget manager.
+     * Begins periodic sync with enterprise server.
+     */
+    start(): void;
+    /**
+     * Stop the budget manager.
+     */
+    stop(): void;
+    /**
+     * Record token usage and check budget.
+     * Returns error message if budget exceeded, null if allowed.
+     */
+    recordUsage(agent: string, tokens: number): string | null;
+    /**
+     * Check if an agent is within budget without recording usage.
+     */
+    checkBudget(agent: string): {
+        allowed: boolean;
+        monthlySpend: number;
+        monthlyBudget: number;
+        agentSpend: number;
+        agentMaxBudget: number;
+        usagePercent: number;
+        blocked: boolean;
+        blockReason: string | null;
+    };
+    /**
+     * Get full budget state.
+     */
+    getState(): BudgetState;
+    /**
+     * Reset budget for new period.
+     */
+    resetPeriod(): void;
+    /**
+     * Apply a budget policy from the enterprise server.
+     */
+    applyPolicy(policy: BudgetPolicy): void;
+    /**
+     * Sync budget state with enterprise server.
+     */
+    private syncWithServer;
+    /**
+     * Recalculate spend from local metrics file.
+     */
+    private recalculateFromLocalMetrics;
+    /**
+     * Trigger a budget alert.
+     */
+    private triggerAlert;
+    /**
+     * Save budget state to disk.
+     */
+    private saveState;
+    /**
+     * Reset the singleton instance (for testing).
+     */
+    static resetInstance(): void;
+    /**
+     * Load budget state from disk.
+     */
+    private loadState;
+}
+export declare const budgetManager: BudgetManager;
+export { CONFIG as FinOpsConfig };