avantgate 1.8.0 → 1.9.0

package/dist/index.mjs

@@ -809,19 +809,20 @@ var AvantGateControlLayer = class {
       this.config.emergencyFallback
     ].filter((provider) => Boolean(provider?.client));
   };
-  executeSimulation = (query, systemPrompt) => {
+  executeSimulation = (query, systemPrompt, modelOverride) => {
+    const targetModel = modelOverride ?? this.config.primary.model;
     const promptTokens = Math.ceil(((systemPrompt?.length ?? 0) + query.length) / 4);
     const completionTokens = 50;
-    const cost = this.calculateCost(this.config.primary.model, promptTokens, completionTokens);
+    const cost = this.calculateCost(targetModel, promptTokens, completionTokens);
     return {
-      text: `[AvantGate In-Process Engine] Response simulation for model: ${this.config.primary.model}`,
+      text: `[AvantGate In-Process Engine] Response simulation for model: ${targetModel}`,
       tokens: {
         prompt: promptTokens,
         completion: completionTokens,
         total: promptTokens + completionTokens
       },
       costUSD: cost,
-      modelUsed: this.config.primary.model,
+      modelUsed: targetModel,
       failoverOccurred: false,
       attempts: 1
     };
@@ -901,9 +902,6 @@ var AvantGateControlLayer = class {
       attempts: result.attempts
     });
   };
-  /**
-   * Exécute une requête avec garde d'entrée, masquage PII, garde pré-vol et calcul des coûts.
-   */
   execute = async (options) => {
     const sanitizedQuery = this.applySecurityGuards(options.userQuery);
     const messages = this.buildMessages(options.systemPrompt, sanitizedQuery);
@@ -926,9 +924,6 @@ var AvantGateControlLayer = class {
     await this.notifyAuditSink(result);
     return result;
   };
-  /**
-   * Exécute une requête et valide/répare le résultat selon un schéma Zod.
-   */
   executeStructured = async (options) => {
     const rawResult = await this.execute({
       userQuery: options.userQuery,
@@ -952,107 +947,147 @@ var AvantGateControlLayer = class {
       failoverOccurred: rawResult.failoverOccurred
     };
   };
-  /**
-   * Méthode unifiée de premier niveau pour l'extraction structurée sans code boilerplate.
-   * Gère le failover multi-fournisseurs, les retries, la validation Zod et la normalisation financière.
-   */
-  generateStructuredOutput = async (options) => {
-    const maxRetries = options.maxRetries ?? this.config.retryOptions?.maxRetries ?? 2;
-    const modelToUse = options.model ?? this.config.primary.model;
-    const processedMessages = options.messages.map((msg) => {
+  sanitizeIncomingMessages = (messages) => {
+    return messages.map((msg) => {
       if (msg.role === "user") {
         return { ...msg, content: this.applySecurityGuards(msg.content) };
       }
       return msg;
     });
-    const promptLength = processedMessages.reduce((sum, msg) => sum + msg.content.length, 0);
+  };
+  verifyPromptBudget = async (messages, model) => {
+    const promptLength = messages.reduce((sum, msg) => sum + msg.content.length, 0);
     const estimatedPromptTokens = Math.ceil(promptLength / 4);
-    await this.checkPreflightBudget(estimatedPromptTokens, modelToUse);
+    await this.checkPreflightBudget(estimatedPromptTokens, model);
+  };
+  dispatchOverrideAttempt = async (override, messages, model, temperature) => {
+    const res = await override.complete({ model, messages, temperature: temperature ?? 0.1 });
+    const usage = this.resolveTokens(res.usage, JSON.stringify(messages), res.text);
+    return {
+      responseText: res.text,
+      promptTokens: usage.promptTokens,
+      completionTokens: usage.completionTokens,
+      modelUsed: model,
+      failoverOccurred: false
+    };
+  };
+  dispatchSimulatedAttempt = (messages, modelOverride) => {
+    if (!this.config.mockSimulation) {
+      throw new ConfigurationError(
+        "[AvantGate Configuration Error] No active LLM provider configured. Provide a client implementing LLMProviderPort or configure credentials (apiKey / baseUrl)."
+      );
+    }
+    const sim = this.executeSimulation(JSON.stringify(messages), void 0, modelOverride);
+    const responseText = sim.text.includes("{") ? sim.text : JSON.stringify({ simulation: true, model: sim.modelUsed });
+    return {
+      responseText,
+      promptTokens: sim.tokens.prompt,
+      completionTokens: sim.tokens.completion,
+      modelUsed: sim.modelUsed,
+      failoverOccurred: false
+    };
+  };
+  dispatchPipelineAttempt = async (messages, modelOverride, temperature) => {
+    const output = await this.executeProviderPipeline(
+      messages,
+      JSON.stringify(messages),
+      temperature ?? 0.1,
+      modelOverride
+    );
+    return {
+      responseText: output.responseText,
+      promptTokens: output.usage.promptTokens,
+      completionTokens: output.usage.completionTokens,
+      modelUsed: output.modelUsed,
+      failoverOccurred: output.failoverOccurred
+    };
+  };
+  dispatchProviderAttempt = async (options, messages, targetModel) => {
+    if (options.providerOverride) {
+      return this.dispatchOverrideAttempt(options.providerOverride, messages, targetModel, options.temperature);
+    }
+    if (this.getProviderChain().length === 0) {
+      return this.dispatchSimulatedAttempt(messages, options.model);
+    }
+    return this.dispatchPipelineAttempt(messages, options.model ?? targetModel, options.temperature);
+  };
+  parseAndValidateStructuredResult = (rawText, options) => {
+    const sanitizedResponse = this.applyOutputSecurityGuards(rawText);
+    const isFinancial = options.financialNormalizer ?? Boolean(
+      this.config.features?.finance?.enableFrenchAccounting || this.config.features?.finance
+    );
+    const parsedData = validateWithZod(sanitizedResponse, options.schema, {
+      financialNormalizer: isFinancial,
+      jurisdiction: this.config.features?.finance?.jurisdiction
+    });
+    return { parsedData, sanitizedResponse };
+  };
+  buildStructuredResult = (params) => {
+    const totalTokens = params.promptTokens + params.completionTokens;
+    const costUSD = this.calculateCost(params.modelUsed, params.promptTokens, params.completionTokens);
+    this.checkPostExecutionBudget(totalTokens, costUSD);
+    return {
+      data: params.data,
+      rawText: params.rawText,
+      tokens: {
+        prompt: params.promptTokens,
+        completion: params.completionTokens,
+        total: totalTokens
+      },
+      costUSD,
+      modelUsed: params.modelUsed,
+      failoverOccurred: params.failoverOccurred
+    };
+  };
+  notifyAuditSinkSafe = async (sanitizedText, result, attempts) => {
+    await this.notifyAuditSink({
+      text: sanitizedText,
+      tokens: result.tokens,
+      costUSD: result.costUSD,
+      modelUsed: result.modelUsed,
+      failoverOccurred: result.failoverOccurred,
+      attempts
+    });
+  };
+  waitRetryBackoff = async (attempt, maxRetries) => {
+    if (attempt >= maxRetries) {
+      return;
+    }
+    const initialDelay = this.config.retryOptions?.initialDelayMs ?? 200;
+    const factor = this.config.retryOptions?.backoffFactor ?? 1.5;
+    const delay = initialDelay * Math.pow(factor, attempt);
+    await new Promise((resolve) => setTimeout(resolve, delay));
+  };
+  generateStructuredOutput = async (options) => {
+    const maxRetries = options.maxRetries ?? this.config.retryOptions?.maxRetries ?? 2;
+    const targetModel = options.model ?? this.config.primary.model;
+    const processedMessages = this.sanitizeIncomingMessages(options.messages);
+    await this.verifyPromptBudget(processedMessages, targetModel);
     let lastError;
     let accumulatedPromptTokens = 0;
     let accumulatedCompletionTokens = 0;
-    let failoverOccurred = false;
-    let modelUsed = modelToUse;
     for (let attempt = 0; attempt <= maxRetries; attempt++) {
       try {
-        let responseText = "";
-        let attemptPromptTokens = 0;
-        let attemptCompletionTokens = 0;
-        if (options.providerOverride) {
-          const res = await options.providerOverride.complete({
-            model: modelToUse,
-            messages: processedMessages,
-            temperature: options.temperature ?? 0.1
-          });
-          responseText = res.text;
-          const usage = this.resolveTokens(res.usage, JSON.stringify(processedMessages), responseText);
-          attemptPromptTokens = usage.promptTokens;
-          attemptCompletionTokens = usage.completionTokens;
-          modelUsed = modelToUse;
-        } else if (this.getProviderChain().length === 0) {
-          if (this.config.mockSimulation) {
-            const sim = this.executeSimulation(JSON.stringify(processedMessages));
-            responseText = sim.text;
-            attemptPromptTokens = sim.tokens.prompt;
-            attemptCompletionTokens = sim.tokens.completion;
-          } else {
-            throw new ConfigurationError(
-              "[AvantGate Configuration Error] No active LLM provider configured. Provide a client implementing LLMProviderPort or configure credentials (apiKey / baseUrl)."
-            );
-          }
-        } else {
-          const output = await this.executeProviderPipeline(
-            processedMessages,
-            JSON.stringify(processedMessages),
-            options.temperature ?? 0.1,
-            options.model
-          );
-          responseText = output.responseText;
-          attemptPromptTokens = output.usage.promptTokens;
-          attemptCompletionTokens = output.usage.completionTokens;
-          modelUsed = output.modelUsed;
-          failoverOccurred = output.failoverOccurred;
-        }
-        accumulatedPromptTokens += attemptPromptTokens;
-        accumulatedCompletionTokens += attemptCompletionTokens;
-        const sanitizedResponse = this.applyOutputSecurityGuards(responseText);
-        const isFinancial = options.financialNormalizer ?? Boolean(
-          this.config.features?.finance?.enableFrenchAccounting || this.config.features?.finance
+        const output = await this.dispatchProviderAttempt(options, processedMessages, targetModel);
+        accumulatedPromptTokens += output.promptTokens;
+        accumulatedCompletionTokens += output.completionTokens;
+        const { parsedData, sanitizedResponse } = this.parseAndValidateStructuredResult(
+          output.responseText,
+          options
         );
-        const parsedData = validateWithZod(sanitizedResponse, options.schema, {
-          financialNormalizer: isFinancial,
-          jurisdiction: this.config.features?.finance?.jurisdiction
-        });
-        const totalTokens = accumulatedPromptTokens + accumulatedCompletionTokens;
-        const costUSD = this.calculateCost(modelUsed, accumulatedPromptTokens, accumulatedCompletionTokens);
-        this.checkPostExecutionBudget(totalTokens, costUSD);
-        const result = {
+        const result = this.buildStructuredResult({
           data: parsedData,
           rawText: sanitizedResponse,
-          tokens: {
-            prompt: accumulatedPromptTokens,
-            completion: accumulatedCompletionTokens,
-            total: totalTokens
-          },
-          costUSD,
-          modelUsed,
-          failoverOccurred
-        };
-        await this.notifyAuditSink({
-          text: responseText,
-          tokens: result.tokens,
-          costUSD: result.costUSD,
-          modelUsed: result.modelUsed,
-          failoverOccurred: result.failoverOccurred,
-          attempts: attempt + 1
+          promptTokens: accumulatedPromptTokens,
+          completionTokens: accumulatedCompletionTokens,
+          modelUsed: output.modelUsed,
+          failoverOccurred: output.failoverOccurred
         });
+        await this.notifyAuditSinkSafe(sanitizedResponse, result, attempt + 1);
         return result;
       } catch (err) {
         lastError = err;
-        if (attempt < maxRetries) {
-          const delay = (this.config.retryOptions?.initialDelayMs ?? 200) * Math.pow(this.config.retryOptions?.backoffFactor ?? 1.5, attempt);
-          await new Promise((resolve) => setTimeout(resolve, delay));
-        }
+        await this.waitRetryBackoff(attempt, maxRetries);
       }
     }
     throw lastError;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "avantgate",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Zero-infrastructure, in-process AI Application Firewall (AI-WAF) & privacy control plane for TypeScript: real-time prompt guardrails, zero-egress PII redaction, agent tool isolation, anti-IDOR defense, pre-flight token budgets, and multi-model failover.",
   "author": "Gatewall Team",
   "license": "MIT",
@@ -90,18 +90,19 @@
     "test:pii": "tsx tests/pii-extended.test.ts",
     "test:agent": "tsx tests/agent/step-runner.test.ts && tsx tests/agent/isolated-tool.test.ts && tsx tests/agent/dto-pattern.test.ts && tsx tests/agent/tool-patterns.test.ts && tsx tests/agent/storage-adapters.test.ts && tsx tests/agent/tool-aliasing.test.ts && tsx tests/agent/tool-chaining.test.ts && tsx tests/agent/tool-storage.test.ts && tsx tests/agent/telemetry-exporter.test.ts && tsx tests/agent/platform-adapter.test.ts && tsx tests/agent/tool-governance.test.ts && tsx tests/agent/tool-impact.test.ts",
     "test:workflow": "tsx tests/workflow/workflow-saga.test.ts && tsx tests/workflow/workflow-abort.test.ts",
-    "test:client": "tsx tests/client/browser-exporter.test.ts",
+    "test:client": "tsx tests/client/browser-exporter.test.ts && tsx tests/client/use-avantgate-task.test.ts && tsx tests/client/task-runner.test.ts",
     "test:demo": "tsx tests/agent/prospect-ai-demo-scenario.test.ts",
     "gatewall": "npm --prefix gatewall run dev",
     "gatewall:dev": "npm --prefix gatewall run dev",
     "gatewall:build": "npm --prefix gatewall run build",
+    "gatewall:seed": "npm --prefix gatewall run seed:mock",
     "gatewall:start": "npm --prefix gatewall run start",
     "gatewall:docker": "docker compose up -d",
     "lint": "tsc --noEmit",
     "prepublishOnly": "npm run build && npm test"
   },
   "dependencies": {
-    "zod": "^3.23.0 || ^4.0.0"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "@types/node": "^26.6.2",

package/dist/client/useAvantGateTelemetry.d.ts

@@ -1,14 +0,0 @@
-import { type TrackSecurityAlertDetails, type TrackDataRenderedOptions, type TrackFeedbackOptions } from "./client";
-import type { BrowserTelemetryExporterConfig, ClientSecurityAlertEvent } from "./types";
-export type { TrackSecurityAlertDetails, TrackDataRenderedOptions, TrackFeedbackOptions, };
-/**
- * Lightweight React Hook for front-end telemetry and client-side security event tracking.
- * Encapsulates lifecycle management, useRef persistence, useCallback and useMemo optimization.
- */
-export declare const useAvantGateTelemetry: (config: BrowserTelemetryExporterConfig) => {
-    trackSecurityAlert: (alertType: ClientSecurityAlertEvent["alertType"], details: TrackSecurityAlertDetails) => void;
-    trackClientDataRendered: (toolId: string, options?: TrackDataRenderedOptions) => void;
-    trackFeedback: (feedback: TrackFeedbackOptions) => void;
-    exporter: import("./browser-exporter").BrowserTelemetryExporter | undefined;
-};
-//# sourceMappingURL=useAvantGateTelemetry.d.ts.map

package/dist/client/useAvantGateTelemetry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAvantGateTelemetry.d.ts","sourceRoot":"","sources":["../../src/client/useAvantGateTelemetry.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAEjB,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,GACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,8BAA8B;oCAuB3D,wBAAwB,CAAC,WAAW,CAAC,WACvC,yBAAyB,KACjC,IAAI;sCAQG,MAAM,YACJ,wBAAwB,KACjC,IAAI;8BAOI,oBAAoB,KAAG,IAAI;;CAezC,CAAC"}