clawsec 0.0.1

package/dist/src/detectors/purchase/spend-tracker.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Spend Tracker
+ * Monitors per-transaction and daily spending limits for purchase protection
+ */
+import type { SpendLimits } from '../../config/index.js';
+/**
+ * Record of a tracked spend transaction
+ */
+export interface SpendRecord {
+    /** Amount of the transaction */
+    amount: number;
+    /** Unix timestamp when the transaction was recorded */
+    timestamp: number;
+    /** Unique identifier for the transaction */
+    transactionId: string;
+    /** Domain where the transaction occurred */
+    domain?: string;
+    /** Whether the transaction was approved */
+    approved: boolean;
+}
+/**
+ * Result of a spend limit check
+ */
+export interface SpendLimitResult {
+    /** Whether the transaction is allowed */
+    allowed: boolean;
+    /** Which limit was exceeded, if any */
+    exceededLimit?: 'perTransaction' | 'daily';
+    /** Current total spent today */
+    currentDailyTotal: number;
+    /** Remaining amount allowed today */
+    remainingDaily: number;
+    /** Human-readable message */
+    message?: string;
+}
+/**
+ * Interface for the spend tracker
+ */
+export interface ISpendTracker {
+    /** Record a transaction (after approval) */
+    record(amount: number, metadata?: {
+        transactionId?: string;
+        domain?: string;
+    }): void;
+    /** Check if a transaction would exceed limits */
+    checkLimits(amount: number, limits: SpendLimits): SpendLimitResult;
+    /** Get current daily total */
+    getDailyTotal(): number;
+    /** Get recent transactions */
+    getTransactions(since?: number): SpendRecord[];
+    /** Reset (for testing) */
+    reset(): void;
+}
+/**
+ * Extract amount from a string value
+ * @param value String that may contain an amount
+ * @returns Parsed amount or null if not found
+ */
+export declare function extractAmount(value: string): number | null;
+/**
+ * Extract amount from tool input
+ * Searches common field names for price/amount values
+ * @param toolInput Tool input object
+ * @returns Extracted amount or null
+ */
+export declare function extractAmountFromInput(toolInput: Record<string, unknown>): number | null;
+/**
+ * SpendTracker implementation
+ * Tracks spending transactions and enforces limits
+ */
+export declare class SpendTracker implements ISpendTracker {
+    private transactions;
+    private readonly cleanupIntervalMs;
+    private lastCleanup;
+    /**
+     * Create a new SpendTracker
+     * @param cleanupIntervalMs How often to run cleanup (default: 1 hour)
+     */
+    constructor(cleanupIntervalMs?: number);
+    /**
+     * Record a transaction
+     * @param amount Transaction amount
+     * @param metadata Optional metadata (transactionId, domain)
+     */
+    record(amount: number, metadata?: {
+        transactionId?: string;
+        domain?: string;
+    }): void;
+    /**
+     * Check if a transaction would exceed limits
+     * @param amount Transaction amount
+     * @param limits Spend limits to check against
+     * @returns Result indicating if allowed and any exceeded limits
+     */
+    checkLimits(amount: number, limits: SpendLimits): SpendLimitResult;
+    /**
+     * Get total amount spent today
+     * @returns Sum of today's approved transactions
+     */
+    getDailyTotal(): number;
+    /**
+     * Get transactions since a given timestamp
+     * @param since Unix timestamp (default: start of today)
+     * @returns Array of transactions since the given time
+     */
+    getTransactions(since?: number): SpendRecord[];
+    /**
+     * Reset all tracked transactions (for testing)
+     */
+    reset(): void;
+    /**
+     * Run cleanup if enough time has passed
+     */
+    private maybeCleanup;
+    /**
+     * Remove transactions older than 24 hours
+     */
+    private cleanup;
+}
+/**
+ * Create a new SpendTracker instance
+ */
+export declare function createSpendTracker(): SpendTracker;
+/**
+ * Get the global spend tracker instance
+ */
+export declare function getGlobalSpendTracker(): SpendTracker;
+/**
+ * Reset the global spend tracker (for testing)
+ */
+export declare function resetGlobalSpendTracker(): void;
+//# sourceMappingURL=spend-tracker.d.ts.map

package/dist/src/detectors/purchase/spend-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend-tracker.d.ts","sourceRoot":"","sources":["../../../../src/detectors/purchase/spend-tracker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,aAAa,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC3C,gCAAgC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrF,iDAAiD;IACjD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACnE,8BAA8B;IAC9B,aAAa,IAAI,MAAM,CAAC;IACxB,8BAA8B;IAC9B,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAC/C,0BAA0B;IAC1B,KAAK,IAAI,IAAI,CAAC;CACf;AAkBD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA4B1D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAoGxF;AAoBD;;;GAGG;AACH,qBAAa,YAAa,YAAW,aAAa;IAChD,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,WAAW,CAAsB;IAEzC;;;OAGG;gBACS,iBAAiB,GAAE,MAAuB;IAItD;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAepF;;;;;OAKG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,gBAAgB;IAqClE;;;OAGG;IACH,aAAa,IAAI,MAAM;IAOvB;;;;OAIG;IACH,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE;IAO9C;;OAEG;IACH,KAAK,IAAI,IAAI;IAKb;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACH,OAAO,CAAC,OAAO;CAIhB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAEjD;AAOD;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,YAAY,CAKpD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAK9C"}

package/dist/src/detectors/purchase/spend-tracker.js

@@ -0,0 +1,313 @@
+/**
+ * Spend Tracker
+ * Monitors per-transaction and daily spending limits for purchase protection
+ */
+/**
+ * Amount patterns for detecting prices in text
+ */
+const AMOUNT_PATTERNS = [
+    // Currency with dollar sign: $100, $100.00, $1,000.00
+    /\$\s*([0-9]{1,3}(?:,?[0-9]{3})*(?:\.[0-9]{2})?)/,
+    // Currency with other symbols: €100, £100, ¥1000 (handle large numbers for yen)
+    /[€£¥]\s*([0-9]+(?:,?[0-9]{3})*(?:\.[0-9]{2})?)/,
+    // Labeled amounts: amount=100, price=99.99, total=50
+    /(?:amount|price|total|cost|value)\s*[=:]\s*([0-9]{1,3}(?:,?[0-9]{3})*(?:\.[0-9]{2})?)/i,
+    // USD/EUR labeled: 100 USD, 99.99 EUR
+    /([0-9]{1,3}(?:,?[0-9]{3})*(?:\.[0-9]{2})?)\s*(?:USD|EUR|GBP|CAD|AUD)/i,
+    // Plain decimal numbers (lower confidence): 99.99
+    /^([0-9]{1,6}\.[0-9]{2})$/,
+];
+/**
+ * Extract amount from a string value
+ * @param value String that may contain an amount
+ * @returns Parsed amount or null if not found
+ */
+export function extractAmount(value) {
+    if (!value || typeof value !== 'string') {
+        return null;
+    }
+    const cleanValue = value.trim();
+    for (const pattern of AMOUNT_PATTERNS) {
+        const match = cleanValue.match(pattern);
+        if (match && match[1]) {
+            // Remove commas and parse
+            const numStr = match[1].replace(/,/g, '');
+            const num = parseFloat(numStr);
+            if (!isNaN(num) && num > 0) {
+                return num;
+            }
+        }
+    }
+    // Try direct parse if it looks like a number
+    if (/^[0-9]+(?:\.[0-9]+)?$/.test(cleanValue)) {
+        const num = parseFloat(cleanValue);
+        if (!isNaN(num) && num > 0) {
+            return num;
+        }
+    }
+    return null;
+}
+/**
+ * Extract amount from tool input
+ * Searches common field names for price/amount values
+ * @param toolInput Tool input object
+ * @returns Extracted amount or null
+ */
+export function extractAmountFromInput(toolInput) {
+    // Priority field names to check
+    const amountFields = [
+        'amount',
+        'price',
+        'total',
+        'cost',
+        'value',
+        'payment_amount',
+        'paymentAmount',
+        'transaction_amount',
+        'transactionAmount',
+        'subtotal',
+        'grand_total',
+        'grandTotal',
+    ];
+    // Check priority fields first
+    for (const field of amountFields) {
+        const value = toolInput[field];
+        if (value !== undefined && value !== null) {
+            if (typeof value === 'number' && value > 0) {
+                return value;
+            }
+            if (typeof value === 'string') {
+                const parsed = extractAmount(value);
+                if (parsed !== null) {
+                    return parsed;
+                }
+            }
+        }
+    }
+    // Check URL query parameters
+    const url = toolInput.url;
+    if (typeof url === 'string') {
+        try {
+            const urlObj = new URL(url.startsWith('http') ? url : `https://${url}`);
+            for (const field of amountFields) {
+                const param = urlObj.searchParams.get(field);
+                if (param) {
+                    const parsed = extractAmount(param);
+                    if (parsed !== null) {
+                        return parsed;
+                    }
+                }
+            }
+        }
+        catch {
+            // Invalid URL, ignore
+        }
+    }
+    // Check nested form data
+    const formData = toolInput.data || toolInput.body || toolInput.formData;
+    if (formData && typeof formData === 'object') {
+        const result = extractAmountFromInput(formData);
+        if (result !== null) {
+            return result;
+        }
+    }
+    // Check fields array (Playwright form fields)
+    const fields = toolInput.fields;
+    if (Array.isArray(fields)) {
+        for (const field of fields) {
+            if (field && typeof field === 'object') {
+                const name = field.name;
+                const value = field.value;
+                if (typeof name === 'string' && amountFields.includes(name.toLowerCase())) {
+                    if (typeof value === 'number' && value > 0) {
+                        return value;
+                    }
+                    if (typeof value === 'string') {
+                        const parsed = extractAmount(value);
+                        if (parsed !== null) {
+                            return parsed;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    // Scan all string values in the input for currency patterns (last resort)
+    for (const [key, value] of Object.entries(toolInput)) {
+        // Skip non-string values and known non-amount fields
+        if (typeof value !== 'string')
+            continue;
+        if (['url', 'path', 'href', 'selector', 'ref', 'element'].includes(key))
+            continue;
+        // Look for explicit currency patterns only
+        const currencyMatch = value.match(/\$\s*([0-9]{1,3}(?:,?[0-9]{3})*(?:\.[0-9]{2})?)/);
+        if (currencyMatch && currencyMatch[1]) {
+            const parsed = extractAmount(value);
+            if (parsed !== null) {
+                return parsed;
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Generate a unique transaction ID
+ */
+function generateTransactionId() {
+    const timestamp = Date.now().toString(36);
+    const random = Math.random().toString(36).substring(2, 8);
+    return `txn_${timestamp}_${random}`;
+}
+/**
+ * Get the start of today (midnight in local timezone)
+ */
+function getStartOfDay(timestamp = Date.now()) {
+    const date = new Date(timestamp);
+    date.setHours(0, 0, 0, 0);
+    return date.getTime();
+}
+/**
+ * SpendTracker implementation
+ * Tracks spending transactions and enforces limits
+ */
+export class SpendTracker {
+    transactions = [];
+    cleanupIntervalMs;
+    lastCleanup = Date.now();
+    /**
+     * Create a new SpendTracker
+     * @param cleanupIntervalMs How often to run cleanup (default: 1 hour)
+     */
+    constructor(cleanupIntervalMs = 60 * 60 * 1000) {
+        this.cleanupIntervalMs = cleanupIntervalMs;
+    }
+    /**
+     * Record a transaction
+     * @param amount Transaction amount
+     * @param metadata Optional metadata (transactionId, domain)
+     */
+    record(amount, metadata) {
+        // Run cleanup if needed
+        this.maybeCleanup();
+        const record = {
+            amount,
+            timestamp: Date.now(),
+            transactionId: metadata?.transactionId || generateTransactionId(),
+            domain: metadata?.domain,
+            approved: true,
+        };
+        this.transactions.push(record);
+    }
+    /**
+     * Check if a transaction would exceed limits
+     * @param amount Transaction amount
+     * @param limits Spend limits to check against
+     * @returns Result indicating if allowed and any exceeded limits
+     */
+    checkLimits(amount, limits) {
+        // Run cleanup if needed
+        this.maybeCleanup();
+        const dailyTotal = this.getDailyTotal();
+        const remainingDaily = Math.max(0, limits.daily - dailyTotal);
+        // Check per-transaction limit first
+        if (amount > limits.perTransaction) {
+            return {
+                allowed: false,
+                exceededLimit: 'perTransaction',
+                currentDailyTotal: dailyTotal,
+                remainingDaily,
+                message: `Transaction amount $${amount.toFixed(2)} exceeds per-transaction limit of $${limits.perTransaction.toFixed(2)}`,
+            };
+        }
+        // Check if adding this amount would exceed daily limit
+        if (dailyTotal + amount > limits.daily) {
+            return {
+                allowed: false,
+                exceededLimit: 'daily',
+                currentDailyTotal: dailyTotal,
+                remainingDaily,
+                message: `Transaction amount $${amount.toFixed(2)} would exceed daily limit of $${limits.daily.toFixed(2)} (current total: $${dailyTotal.toFixed(2)})`,
+            };
+        }
+        // Transaction is allowed
+        return {
+            allowed: true,
+            currentDailyTotal: dailyTotal,
+            remainingDaily: remainingDaily - amount,
+        };
+    }
+    /**
+     * Get total amount spent today
+     * @returns Sum of today's approved transactions
+     */
+    getDailyTotal() {
+        const startOfDay = getStartOfDay();
+        return this.transactions
+            .filter((t) => t.timestamp >= startOfDay && t.approved)
+            .reduce((sum, t) => sum + t.amount, 0);
+    }
+    /**
+     * Get transactions since a given timestamp
+     * @param since Unix timestamp (default: start of today)
+     * @returns Array of transactions since the given time
+     */
+    getTransactions(since) {
+        const cutoff = since ?? getStartOfDay();
+        return this.transactions
+            .filter((t) => t.timestamp >= cutoff)
+            .sort((a, b) => b.timestamp - a.timestamp);
+    }
+    /**
+     * Reset all tracked transactions (for testing)
+     */
+    reset() {
+        this.transactions = [];
+        this.lastCleanup = Date.now();
+    }
+    /**
+     * Run cleanup if enough time has passed
+     */
+    maybeCleanup() {
+        const now = Date.now();
+        if (now - this.lastCleanup >= this.cleanupIntervalMs) {
+            this.cleanup();
+            this.lastCleanup = now;
+        }
+    }
+    /**
+     * Remove transactions older than 24 hours
+     */
+    cleanup() {
+        const cutoff = Date.now() - 24 * 60 * 60 * 1000;
+        this.transactions = this.transactions.filter((t) => t.timestamp >= cutoff);
+    }
+}
+/**
+ * Create a new SpendTracker instance
+ */
+export function createSpendTracker() {
+    return new SpendTracker();
+}
+/**
+ * Singleton instance for the global spend tracker
+ */
+let globalSpendTracker = null;
+/**
+ * Get the global spend tracker instance
+ */
+export function getGlobalSpendTracker() {
+    if (!globalSpendTracker) {
+        globalSpendTracker = new SpendTracker();
+    }
+    return globalSpendTracker;
+}
+/**
+ * Reset the global spend tracker (for testing)
+ */
+export function resetGlobalSpendTracker() {
+    if (globalSpendTracker) {
+        globalSpendTracker.reset();
+    }
+    globalSpendTracker = null;
+}
+//# sourceMappingURL=spend-tracker.js.map

package/dist/src/detectors/purchase/spend-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend-tracker.js","sourceRoot":"","sources":["../../../../src/detectors/purchase/spend-tracker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoDH;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,sDAAsD;IACtD,iDAAiD;IACjD,gFAAgF;IAChF,gDAAgD;IAChD,qDAAqD;IACrD,wFAAwF;IACxF,sCAAsC;IACtC,uEAAuE;IACvE,kDAAkD;IAClD,0BAA0B;CAC3B,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,0BAA0B;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAkC;IACvE,gCAAgC;IAChC,MAAM,YAAY,GAAG;QACnB,QAAQ;QACR,OAAO;QACP,OAAO;QACP,MAAM;QACN,OAAO;QACP,gBAAgB;QAChB,eAAe;QACf,oBAAoB;QACpB,mBAAmB;QACnB,UAAU;QACV,aAAa;QACb,YAAY;KACb,CAAC;IAEF,8BAA8B;IAC9B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;oBACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;wBACpB,OAAO,MAAM,CAAC;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC;IACxE,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAmC,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAI,KAAiC,CAAC,IAAI,CAAC;gBACrD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;gBACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBAC3C,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;wBACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;4BACpB,OAAO,MAAM,CAAC;wBAChB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,qDAAqD;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAElF,2CAA2C;QAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrF,IAAI,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,OAAO,SAAS,IAAI,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,YAAoB,IAAI,CAAC,GAAG,EAAE;IACnD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,YAAY,GAAkB,EAAE,CAAC;IACxB,iBAAiB,CAAS;IACnC,WAAW,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzC;;;OAGG;IACH,YAAY,oBAA4B,EAAE,GAAG,EAAE,GAAG,IAAI;QACpD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAc,EAAE,QAAsD;QAC3E,wBAAwB;QACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,MAAM,GAAgB;YAC1B,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,qBAAqB,EAAE;YACjE,MAAM,EAAE,QAAQ,EAAE,MAAM;YACxB,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,MAAc,EAAE,MAAmB;QAC7C,wBAAwB;QACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC;QAE9D,oCAAoC;QACpC,IAAI,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,gBAAgB;gBAC/B,iBAAiB,EAAE,UAAU;gBAC7B,cAAc;gBACd,OAAO,EAAE,uBAAuB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;aAC1H,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,OAAO;gBACtB,iBAAiB,EAAE,UAAU;gBAC7B,cAAc;gBACd,OAAO,EAAE,uBAAuB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;aACvJ,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,UAAU;YAC7B,cAAc,EAAE,cAAc,GAAG,MAAM;SACxC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,YAAY;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC;aACtD,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,KAAc;QAC5B,MAAM,MAAM,GAAG,KAAK,IAAI,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,YAAY;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,YAAY,EAAE,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,IAAI,kBAAkB,GAAwB,IAAI,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,IAAI,YAAY,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,kBAAkB,EAAE,CAAC;QACvB,kBAAkB,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,kBAAkB,GAAG,IAAI,CAAC;AAC5B,CAAC"}

package/dist/src/detectors/purchase/types.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Purchase Detector Types
+ * Type definitions for the purchase/transaction detection system
+ */
+import type { Severity, Action } from '../../config/index.js';
+/**
+ * Detection context passed to detectors
+ */
+export interface DetectionContext {
+    /** Name of the tool being invoked */
+    toolName: string;
+    /** Input parameters to the tool */
+    toolInput: Record<string, unknown>;
+    /** URL being accessed (for browser/navigation tools) */
+    url?: string;
+}
+/**
+ * Result of a detection operation
+ */
+export interface DetectionResult {
+    /** Whether a purchase/transaction was detected */
+    detected: boolean;
+    /** Category of the detection */
+    category: 'purchase';
+    /** Severity level of the detection */
+    severity: Severity;
+    /** Confidence score from 0 to 1 */
+    confidence: number;
+    /** Human-readable reason for the detection */
+    reason: string;
+    /** Additional metadata about the detection */
+    metadata?: {
+        /** Domain that triggered the detection */
+        domain?: string;
+        /** URL that triggered the detection */
+        url?: string;
+        /** Form fields that triggered the detection */
+        formFields?: string[];
+        /** Pattern that matched */
+        matchedPattern?: string;
+        /** Detected amount from the transaction */
+        amount?: number;
+        /** Spend limit that was exceeded */
+        exceededLimit?: 'perTransaction' | 'daily';
+        /** Current daily total at time of detection */
+        currentDailyTotal?: number;
+    };
+}
+/**
+ * Configuration for the purchase detector
+ */
+export interface PurchaseDetectorConfig {
+    /** Whether the detector is enabled */
+    enabled: boolean;
+    /** Severity level to assign to detections */
+    severity: Severity;
+    /** Action to take when purchase is detected */
+    action: Action;
+    /** Domain configuration */
+    domains?: {
+        /** Mode for domain filtering */
+        mode: 'blocklist' | 'allowlist';
+        /** Domains to block */
+        blocklist: string[];
+    };
+    /** Spending limits configuration */
+    spendLimits?: {
+        /** Maximum amount per transaction */
+        perTransaction: number;
+        /** Maximum daily spending amount */
+        daily: number;
+    };
+}
+/**
+ * Interface for the main purchase detector
+ */
+export interface PurchaseDetector {
+    /**
+     * Detect purchase/transaction attempts
+     * @param context Detection context with tool information
+     * @returns Detection result
+     */
+    detect(context: DetectionContext): Promise<DetectionResult>;
+}
+/**
+ * Interface for sub-detectors (domain, URL, form)
+ */
+export interface SubDetector {
+    /**
+     * Check if the given context matches this detector's patterns
+     * @param context Detection context
+     * @returns Detection result or null if no match
+     */
+    detect(context: DetectionContext): DetectionResult | null;
+}
+/**
+ * Domain match result with confidence
+ */
+export interface DomainMatchResult {
+    /** Whether a match was found */
+    matched: boolean;
+    /** The domain that matched */
+    domain?: string;
+    /** The pattern that matched */
+    pattern?: string;
+    /** Match type */
+    matchType?: 'exact' | 'glob' | 'keyword';
+    /** Confidence score */
+    confidence: number;
+}
+/**
+ * URL match result with confidence
+ */
+export interface UrlMatchResult {
+    /** Whether a match was found */
+    matched: boolean;
+    /** The URL that matched */
+    url?: string;
+    /** The pattern that matched */
+    pattern?: string;
+    /** Match type */
+    matchType?: 'path' | 'api';
+    /** Confidence score */
+    confidence: number;
+}
+/**
+ * Form field match result
+ */
+export interface FormFieldMatchResult {
+    /** Whether a match was found */
+    matched: boolean;
+    /** Fields that matched */
+    fields?: string[];
+    /** Patterns that matched */
+    patterns?: string[];
+    /** Confidence score */
+    confidence: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/detectors/purchase/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/detectors/purchase/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,QAAQ,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,sCAAsC;IACtC,QAAQ,EAAE,QAAQ,CAAC;IACnB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,QAAQ,CAAC,EAAE;QACT,0CAA0C;QAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,uCAAuC;QACvC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,+CAA+C;QAC/C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,2BAA2B;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,2CAA2C;QAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,oCAAoC;QACpC,aAAa,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAC3C,+CAA+C;QAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,QAAQ,EAAE,QAAQ,CAAC;IACnB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,OAAO,CAAC,EAAE;QACR,gCAAgC;QAChC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAChC,uBAAuB;QACvB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,oCAAoC;IACpC,WAAW,CAAC,EAAE;QACZ,qCAAqC;QACrC,cAAc,EAAE,MAAM,CAAC;QACvB,oCAAoC;QACpC,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,GAAG,IAAI,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB;IACjB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACzC,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,2BAA2B;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC3B,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/src/detectors/purchase/types.js

@@ -0,0 +1,6 @@
+/**
+ * Purchase Detector Types
+ * Type definitions for the purchase/transaction detection system
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/detectors/purchase/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/detectors/purchase/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/detectors/purchase/url-detector.d.ts

@@ -0,0 +1,31 @@
+/**
+ * URL Pattern Detector
+ * Detects purchase-related URL paths and API endpoints
+ */
+import type { UrlMatchResult, DetectionContext, DetectionResult, SubDetector } from './types.js';
+import type { Severity } from '../../config/index.js';
+/**
+ * Extract path from URL
+ */
+export declare function extractPath(url: string): string | null;
+/**
+ * Check URL path against known payment paths
+ */
+export declare function matchUrlPath(url: string): UrlMatchResult;
+/**
+ * URL pattern detector class
+ */
+export declare class UrlDetector implements SubDetector {
+    private severity;
+    constructor(severity?: Severity);
+    /**
+     * Extract URL from tool context
+     */
+    private extractUrl;
+    detect(context: DetectionContext): DetectionResult | null;
+}
+/**
+ * Create a URL detector with the given configuration
+ */
+export declare function createUrlDetector(severity?: Severity): UrlDetector;
+//# sourceMappingURL=url-detector.d.ts.map

package/dist/src/detectors/purchase/url-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-detector.d.ts","sourceRoot":"","sources":["../../../../src/detectors/purchase/url-detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AA0HtD;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuBtD;AAUD;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CA6ExD;AAED;;GAEG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAW;gBAEf,QAAQ,GAAE,QAAqB;IAI3C;;OAEG;IACH,OAAO,CAAC,UAAU;IAiClB,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,GAAG,IAAI;CA4B1D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,QAAqB,GAAG,WAAW,CAE9E"}