clawsec 0.0.1

package/dist/src/engine/analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../../src/engine/analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EAEd,SAAS,EACT,eAAe,EACf,cAAc,EAIf,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,oBAAoB,CAAC;AA2HlE;;GAEG;AACH,qBAAa,cAAe,YAAW,QAAQ;IAC7C,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,YAAY,CAAU;IAC9B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAC,CAAY;IAG9B,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,oBAAoB,CAAwB;gBAExC,cAAc,EAAE,cAAc;IAiC1C;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IA+EhE;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,aAAa,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IAOnD;;OAEG;YACW,mBAAmB;IAWjC;;OAEG;YACW,kBAAkB;IAWhC;;OAEG;YACW,sBAAsB;IAWpC;;OAEG;YACW,kBAAkB;IAWhC;;OAEG;YACW,uBAAuB;IAWrC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;OAEG;YACW,kBAAkB;IAoBhC;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAkB5B;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ,CAOjG;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,QAAQ,CAmEhD;AAGD,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC"}

package/dist/src/engine/analyzer.js

@@ -0,0 +1,427 @@
+/**
+ * Hybrid Detection Engine Analyzer
+ * Main engine that orchestrates all 5 detectors and produces unified results
+ *
+ * Architecture:
+ * Tool Call -> Pattern Matching (≤5ms) -> BLOCK/ALLOW
+ *                                    |
+ *              ambiguous -------------+
+ *                   |
+ *                   v
+ *           LLM Analysis (~500ms) -> BLOCK/CONFIRM
+ */
+import { compareSeverity } from './types.js';
+import { createCache, createNoOpCache, generateCacheKey, DEFAULT_CACHE_TTL_MS } from './cache.js';
+// Import detector factories
+import { createDefaultPurchaseDetector, createPurchaseDetector } from '../detectors/purchase/index.js';
+import { createDefaultWebsiteDetector, createWebsiteDetector } from '../detectors/website/index.js';
+import { createDefaultDestructiveDetector, createDestructiveDetector } from '../detectors/destructive/index.js';
+import { createDefaultSecretsDetector, createSecretsDetector } from '../detectors/secrets/index.js';
+import { createDefaultExfiltrationDetector, createExfiltrationDetector } from '../detectors/exfiltration/index.js';
+/**
+ * Convert a detector-specific result to a unified Detection
+ */
+function toDetection(result) {
+    if (!result.detected) {
+        return null;
+    }
+    return {
+        category: result.category,
+        severity: result.severity,
+        confidence: result.confidence,
+        reason: result.reason,
+        metadata: result.metadata,
+    };
+}
+/**
+ * Determine the recommended action based on detections
+ *
+ * Action determination logic:
+ * - critical + confidence > 0.8 -> block
+ * - critical + confidence < 0.8 -> confirm (needs LLM)
+ * - high + confidence > 0.7 -> confirm
+ * - high + confidence < 0.7 -> warn (needs LLM consideration)
+ * - medium -> warn
+ * - low -> log (allow with warning)
+ * - no detections -> allow
+ */
+function determineAction(detections, config) {
+    if (detections.length === 0) {
+        return { action: 'allow', requiresLLM: false };
+    }
+    // Get primary detection (highest severity, highest confidence)
+    const primary = detections[0];
+    const { severity, confidence } = primary;
+    // Check if LLM is enabled in config
+    const llmEnabled = config.llm?.enabled ?? false;
+    // Determine action based on severity and confidence
+    switch (severity) {
+        case 'critical':
+            if (confidence > 0.8) {
+                // High confidence critical -> block immediately
+                return { action: 'block', requiresLLM: false };
+            }
+            else {
+                // Lower confidence critical -> confirm, may need LLM
+                // Ambiguous range: 0.5-0.8
+                const isAmbiguous = confidence >= 0.5 && confidence <= 0.8;
+                return { action: 'confirm', requiresLLM: llmEnabled && isAmbiguous };
+            }
+        case 'high':
+            if (confidence > 0.7) {
+                // High confidence high severity -> confirm
+                return { action: 'confirm', requiresLLM: false };
+            }
+            else {
+                // Lower confidence high -> warn, may need LLM
+                const isAmbiguous = confidence >= 0.5 && confidence <= 0.7;
+                return { action: 'warn', requiresLLM: llmEnabled && isAmbiguous };
+            }
+        case 'medium':
+            // Medium severity -> warn
+            // May need LLM if confidence is ambiguous
+            const isAmbiguousMedium = confidence >= 0.5 && confidence <= 0.8;
+            return { action: 'warn', requiresLLM: llmEnabled && isAmbiguousMedium };
+        case 'low':
+            // Low severity -> allow with logging
+            return { action: 'allow', requiresLLM: false };
+        default:
+            return { action: 'allow', requiresLLM: false };
+    }
+}
+/**
+ * Sort detections by severity (highest first), then by confidence (highest first)
+ */
+function sortDetections(detections) {
+    return [...detections].sort((a, b) => {
+        // First compare by severity (descending)
+        const severityDiff = compareSeverity(b.severity, a.severity);
+        if (severityDiff !== 0) {
+            return severityDiff;
+        }
+        // Then by confidence (descending)
+        return b.confidence - a.confidence;
+    });
+}
+/**
+ * Main hybrid detection engine implementation
+ */
+export class HybridAnalyzer {
+    config;
+    cache;
+    cacheEnabled;
+    cacheTtlMs;
+    llmClient;
+    // Detectors
+    purchaseDetector;
+    websiteDetector;
+    destructiveDetector;
+    secretsDetector;
+    exfiltrationDetector;
+    constructor(analyzerConfig) {
+        this.config = analyzerConfig.config;
+        this.cacheEnabled = analyzerConfig.enableCache ?? true;
+        this.cacheTtlMs = analyzerConfig.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
+        this.llmClient = analyzerConfig.llmClient;
+        // Initialize cache
+        this.cache = this.cacheEnabled
+            ? createCache(this.cacheTtlMs)
+            : createNoOpCache();
+        // Initialize detectors from config
+        this.purchaseDetector = this.config.rules.purchase
+            ? createPurchaseDetector(this.config.rules.purchase)
+            : createDefaultPurchaseDetector();
+        this.websiteDetector = this.config.rules.website
+            ? createWebsiteDetector(this.config.rules.website)
+            : createDefaultWebsiteDetector();
+        this.destructiveDetector = this.config.rules.destructive
+            ? createDestructiveDetector(this.config.rules.destructive)
+            : createDefaultDestructiveDetector();
+        this.secretsDetector = this.config.rules.secrets
+            ? createSecretsDetector(this.config.rules.secrets)
+            : createDefaultSecretsDetector();
+        this.exfiltrationDetector = this.config.rules.exfiltration
+            ? createExfiltrationDetector(this.config.rules.exfiltration)
+            : createDefaultExfiltrationDetector();
+    }
+    /**
+     * Analyze a tool call and return the result
+     */
+    async analyze(context) {
+        const startTime = Date.now();
+        // Check if globally disabled
+        if (!this.config.global?.enabled) {
+            return {
+                action: 'allow',
+                detections: [],
+                requiresLLM: false,
+                cached: false,
+                durationMs: Date.now() - startTime,
+            };
+        }
+        // Generate cache key
+        const cacheKey = generateCacheKey(context.toolName, context.toolInput);
+        // Check cache first
+        if (this.cacheEnabled) {
+            const cachedResult = this.cache.get(cacheKey);
+            if (cachedResult) {
+                return {
+                    ...cachedResult,
+                    durationMs: Date.now() - startTime,
+                };
+            }
+        }
+        // Run all detectors in parallel
+        const detectionResults = await Promise.all([
+            this.runPurchaseDetector(context),
+            this.runWebsiteDetector(context),
+            this.runDestructiveDetector(context),
+            this.runSecretsDetector(context),
+            this.runExfiltrationDetector(context),
+        ]);
+        // Convert to unified detections and filter out non-detections
+        const detections = detectionResults
+            .map(toDetection)
+            .filter((d) => d !== null);
+        // Sort by severity (critical > high > medium > low) and confidence
+        const sortedDetections = sortDetections(detections);
+        // Determine action based on highest severity detection
+        let { action, requiresLLM } = determineAction(sortedDetections, this.config);
+        // If LLM analysis is needed and we have an LLM client, perform analysis
+        let llmResult;
+        if (requiresLLM && this.llmClient && this.llmClient.isAvailable() && sortedDetections[0]) {
+            llmResult = await this.performLLMAnalysis(sortedDetections[0], context);
+            // Adjust action based on LLM result
+            const adjustedAction = this.adjustActionFromLLM(action, llmResult);
+            action = adjustedAction;
+            // LLM has made its determination, no longer needs LLM
+            requiresLLM = false;
+        }
+        // Build result
+        const result = {
+            action,
+            detections: sortedDetections,
+            primaryDetection: sortedDetections[0],
+            requiresLLM,
+            cached: false,
+            durationMs: Date.now() - startTime,
+        };
+        // Cache the result (unless it still requires LLM - those shouldn't be cached)
+        if (this.cacheEnabled && !requiresLLM) {
+            this.cache.set(cacheKey, result);
+        }
+        return result;
+    }
+    /**
+     * Clear the detection cache
+     */
+    clearCache() {
+        this.cache.clear();
+    }
+    /**
+     * Get cache statistics
+     */
+    getCacheStats() {
+        return {
+            size: this.cache.size(),
+            enabled: this.cacheEnabled,
+        };
+    }
+    /**
+     * Run purchase detector if enabled
+     */
+    async runPurchaseDetector(context) {
+        if (!this.config.rules.purchase?.enabled) {
+            return this.createNoDetection('purchase');
+        }
+        return this.purchaseDetector.detect({
+            toolName: context.toolName,
+            toolInput: context.toolInput,
+            url: context.url,
+        });
+    }
+    /**
+     * Run website detector if enabled
+     */
+    async runWebsiteDetector(context) {
+        if (!this.config.rules.website?.enabled) {
+            return this.createNoDetection('website');
+        }
+        return this.websiteDetector.detect({
+            toolName: context.toolName,
+            toolInput: context.toolInput,
+            url: context.url,
+        });
+    }
+    /**
+     * Run destructive detector if enabled
+     */
+    async runDestructiveDetector(context) {
+        if (!this.config.rules.destructive?.enabled) {
+            return this.createNoDetection('destructive');
+        }
+        return this.destructiveDetector.detect({
+            toolName: context.toolName,
+            toolInput: context.toolInput,
+            url: context.url,
+        });
+    }
+    /**
+     * Run secrets detector if enabled
+     */
+    async runSecretsDetector(context) {
+        if (!this.config.rules.secrets?.enabled) {
+            return this.createNoDetection('secrets');
+        }
+        return this.secretsDetector.detect({
+            toolName: context.toolName,
+            toolInput: context.toolInput,
+            toolOutput: context.toolOutput,
+        });
+    }
+    /**
+     * Run exfiltration detector if enabled
+     */
+    async runExfiltrationDetector(context) {
+        if (!this.config.rules.exfiltration?.enabled) {
+            return this.createNoDetection('exfiltration');
+        }
+        return this.exfiltrationDetector.detect({
+            toolName: context.toolName,
+            toolInput: context.toolInput,
+            url: context.url,
+        });
+    }
+    /**
+     * Create a no-detection result for disabled detectors
+     */
+    createNoDetection(category) {
+        return {
+            detected: false,
+            category,
+            severity: 'low',
+            confidence: 0,
+            reason: `${category} detection disabled`,
+        };
+    }
+    /**
+     * Perform LLM analysis on an ambiguous detection
+     */
+    async performLLMAnalysis(detection, context) {
+        try {
+            return await this.llmClient.analyze({
+                detection,
+                context,
+            });
+        }
+        catch {
+            // Return uncertain on error - don't block the flow
+            return {
+                determination: 'uncertain',
+                confidence: 0.5,
+                reasoning: 'LLM analysis failed',
+                suggestedAction: 'confirm',
+            };
+        }
+    }
+    /**
+     * Adjust the action based on LLM analysis result
+     */
+    adjustActionFromLLM(currentAction, llmResult) {
+        // Map LLM suggested action to AnalysisAction
+        switch (llmResult.suggestedAction) {
+            case 'block':
+                return 'block';
+            case 'allow':
+                // Only allow if LLM is confident it's safe
+                return llmResult.confidence >= 0.7 ? 'allow' : 'warn';
+            case 'confirm':
+                return 'confirm';
+            default:
+                // Fall back to original action if LLM result is unexpected
+                return currentAction;
+        }
+    }
+}
+/**
+ * Create an analyzer from configuration
+ */
+export function createAnalyzer(config, options) {
+    return new HybridAnalyzer({
+        config,
+        enableCache: options?.enableCache,
+        cacheTtlMs: options?.cacheTtlMs,
+        llmClient: options?.llmClient,
+    });
+}
+/**
+ * Create an analyzer with default configuration
+ */
+export function createDefaultAnalyzer() {
+    const defaultConfig = {
+        version: '1.0',
+        global: {
+            enabled: true,
+            logLevel: 'info',
+        },
+        llm: {
+            enabled: true,
+            model: null,
+        },
+        rules: {
+            purchase: {
+                enabled: true,
+                severity: 'critical',
+                action: 'block',
+                spendLimits: { perTransaction: 100, daily: 500 },
+                domains: { mode: 'blocklist', blocklist: [] },
+            },
+            website: {
+                enabled: true,
+                mode: 'blocklist',
+                severity: 'high',
+                action: 'block',
+                blocklist: [],
+                allowlist: [],
+            },
+            destructive: {
+                enabled: true,
+                severity: 'critical',
+                action: 'confirm',
+                shell: { enabled: true },
+                cloud: { enabled: true },
+                code: { enabled: true },
+            },
+            secrets: {
+                enabled: true,
+                severity: 'critical',
+                action: 'block',
+            },
+            exfiltration: {
+                enabled: true,
+                severity: 'high',
+                action: 'block',
+            },
+            sanitization: {
+                enabled: true,
+                severity: 'high',
+                action: 'block',
+                minConfidence: 0.5,
+                redactMatches: false,
+                categories: {
+                    instructionOverride: true,
+                    systemLeak: true,
+                    jailbreak: true,
+                    encodedPayload: true,
+                },
+            },
+        },
+        approval: {
+            native: { enabled: true, timeout: 300 },
+            agentConfirm: { enabled: true, parameterName: '_clawsec_confirm' },
+            webhook: { enabled: false, url: undefined, timeout: 30, headers: {} },
+        },
+    };
+    return new HybridAnalyzer({ config: defaultConfig });
+}
+//# sourceMappingURL=analyzer.js.map

package/dist/src/engine/analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../../src/engine/analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAcH,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGlG,4BAA4B;AAC5B,OAAO,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAChH,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAmBnH;;GAEG;AACH,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAA0B;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAA+C;KACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CACtB,UAAuB,EACvB,MAAqB;IAErB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,+DAA+D;IAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAEzC,oCAAoC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC;IAEhD,oDAAoD;IACpD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACrB,gDAAgD;gBAChD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,qDAAqD;gBACrD,2BAA2B;gBAC3B,MAAM,WAAW,GAAG,UAAU,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG,CAAC;gBAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,IAAI,WAAW,EAAE,CAAC;YACvE,CAAC;QAEH,KAAK,MAAM;YACT,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACrB,2CAA2C;gBAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,MAAM,WAAW,GAAG,UAAU,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG,CAAC;gBAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,IAAI,WAAW,EAAE,CAAC;YACpE,CAAC;QAEH,KAAK,QAAQ;YACX,0BAA0B;YAC1B,0CAA0C;YAC1C,MAAM,iBAAiB,GAAG,UAAU,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAE1E,KAAK,KAAK;YACR,qCAAqC;YACrC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAEjD;YACE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,UAAuB;IAC7C,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,yCAAyC;QACzC,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,kCAAkC;QAClC,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAgB;IACtB,KAAK,CAAiB;IACtB,YAAY,CAAU;IACtB,UAAU,CAAS;IACnB,SAAS,CAAa;IAE9B,YAAY;IACJ,gBAAgB,CAAmB;IACnC,eAAe,CAAkB;IACjC,mBAAmB,CAAsB;IACzC,eAAe,CAAkB;IACjC,oBAAoB,CAAwB;IAEpD,YAAY,cAA8B;QACxC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,cAAc,CAAC,WAAW,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,UAAU,IAAI,oBAAoB,CAAC;QACpE,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC;QAE1C,mBAAmB;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY;YAC5B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9B,CAAC,CAAC,eAAe,EAAE,CAAC;QAEtB,mCAAmC;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;YAChD,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YACpD,CAAC,CAAC,6BAA6B,EAAE,CAAC;QAEpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YAC9C,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAClD,CAAC,CAAC,4BAA4B,EAAE,CAAC;QAEnC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;YACtD,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1D,CAAC,CAAC,gCAAgC,EAAE,CAAC;QAEvC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YAC9C,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAClD,CAAC,CAAC,4BAA4B,EAAE,CAAC;QAEnC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY;YACxD,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5D,CAAC,CAAC,iCAAiC,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,6BAA6B;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAEvE,oBAAoB;QACpB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,GAAG,YAAY;oBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;SACtC,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,UAAU,GAAG,gBAAgB;aAChC,GAAG,CAAC,WAAW,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAE7C,mEAAmE;QACnE,MAAM,gBAAgB,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEpD,uDAAuD;QACvD,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7E,wEAAwE;QACxE,IAAI,SAAwC,CAAC;QAC7C,IAAI,WAAW,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAExE,oCAAoC;YACpC,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACnE,MAAM,GAAG,cAAc,CAAC;YAExB,sDAAsD;YACtD,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;QAED,eAAe;QACf,MAAM,MAAM,GAAmB;YAC7B,MAAM;YACN,UAAU,EAAE,gBAAgB;YAC5B,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACrC,WAAW;YACX,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;QAEF,8EAA8E;QAC9E,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACvB,OAAO,EAAE,IAAI,CAAC,YAAY;SAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAAC,OAAwB;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAAwB;QACvD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAAC,OAAwB;QAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAAwB;QACvD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CAAC,OAAwB;QAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAwB;QAChD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ;YACR,QAAQ,EAAE,KAAiB;YAC3B,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,GAAG,QAAQ,qBAAqB;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC9B,SAAoB,EACpB,OAAwB;QAExB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAU,CAAC,OAAO,CAAC;gBACnC,SAAS;gBACT,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,OAAO;gBACL,aAAa,EAAE,WAAW;gBAC1B,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,qBAAqB;gBAChC,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,aAA6B,EAC7B,SAA4B;QAE5B,6CAA6C;QAC7C,QAAQ,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,KAAK,OAAO;gBACV,OAAO,OAAO,CAAC;YACjB,KAAK,OAAO;gBACV,2CAA2C;gBAC3C,OAAO,SAAS,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACxD,KAAK,SAAS;gBACZ,OAAO,SAAS,CAAC;YACnB;gBACE,2DAA2D;gBAC3D,OAAO,aAAa,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,OAAiC;IACrF,OAAO,IAAI,cAAc,CAAC;QACxB,MAAM;QACN,WAAW,EAAE,OAAO,EAAE,WAAW;QACjC,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,KAAK;QACd,MAAM,EAAE;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM;SACjB;QACD,GAAG,EAAE;YACH,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;SACZ;QACD,KAAK,EAAE;YACL,QAAQ,EAAE;gBACR,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;gBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE;aAC9C;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,EAAE;aACd;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxB,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aACxB;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,OAAO;aAChB;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,OAAO;aAChB;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,OAAO;gBACf,aAAa,EAAE,GAAG;gBAClB,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE;oBACV,mBAAmB,EAAE,IAAI;oBACzB,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;iBACrB;aACF;SACF;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE;YACvC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,kBAAkB,EAAE;YAClE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;SACtE;KACF,CAAC;IAEF,OAAO,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/src/engine/cache.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Detection Result Cache
+ * Simple in-memory cache with TTL-based expiration
+ */
+import type { AnalysisResult, DetectionCache } from './types.js';
+/**
+ * Default cache TTL: 5 minutes
+ */
+export declare const DEFAULT_CACHE_TTL_MS: number;
+/**
+ * Maximum cache size to prevent memory issues
+ */
+export declare const MAX_CACHE_SIZE = 10000;
+/**
+ * Generate a cache key from tool name and input
+ * Uses SHA256 hash of the JSON-serialized input
+ */
+export declare function generateCacheKey(toolName: string, toolInput: Record<string, unknown>): string;
+/**
+ * In-memory detection cache implementation
+ */
+export declare class InMemoryCache implements DetectionCache {
+    private cache;
+    private defaultTtl;
+    constructor(defaultTtlMs?: number);
+    /**
+     * Get a cached result by key
+     * Returns undefined if not found or expired
+     */
+    get(key: string): AnalysisResult | undefined;
+    /**
+     * Set a cached result
+     * @param key Cache key
+     * @param result Analysis result to cache
+     * @param ttl Optional TTL in milliseconds (uses default if not provided)
+     */
+    set(key: string, result: AnalysisResult, ttl?: number): void;
+    /**
+     * Check if a key exists and is not expired
+     */
+    has(key: string): boolean;
+    /**
+     * Clear all entries
+     */
+    clear(): void;
+    /**
+     * Delete a specific entry
+     */
+    delete(key: string): boolean;
+    /**
+     * Get the number of entries (including expired)
+     */
+    size(): number;
+    /**
+     * Get the number of valid (non-expired) entries
+     */
+    validSize(): number;
+    /**
+     * Check if an entry is expired
+     */
+    private isExpired;
+    /**
+     * Evict all expired entries
+     */
+    private evictExpired;
+    /**
+     * Evict the oldest n entries
+     */
+    private evictOldest;
+}
+/**
+ * Create a new cache instance
+ */
+export declare function createCache(defaultTtlMs?: number): DetectionCache;
+/**
+ * Create a no-op cache that doesn't store anything
+ * Used when caching is disabled
+ */
+export declare function createNoOpCache(): DetectionCache;
+//# sourceMappingURL=cache.d.ts.map

package/dist/src/engine/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/engine/cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAc,cAAc,EAAE,MAAM,YAAY,CAAC;AAG7E;;GAEG;AACH,eAAO,MAAM,oBAAoB,QAAgB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAG7F;AAED;;GAEG;AACH,qBAAa,aAAc,YAAW,cAAc;IAClD,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,UAAU,CAAS;gBAEf,YAAY,GAAE,MAA6B;IAKvD;;;OAGG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAoB5C;;;;;OAKG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAoB5D;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAezB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B;;OAEG;IACH,IAAI,IAAI,MAAM;IAId;;OAEG;IACH,SAAS,IAAI,MAAM;IAanB;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAUpB;;OAEG;IACH,OAAO,CAAC,WAAW;CAQpB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,cAAc,CAEjE;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,cAAc,CAShD"}