usertrust 1.2.5 → 1.4.0

package/README.md

@@ -10,13 +10,13 @@ import Anthropic from "@anthropic-ai/sdk";
 // Audit chain and policy engine still run.
 const client = await trust(new Anthropic(), { dryRun: true, budget: 50_000 });
 
-const { response, governance } = await client.messages.create({
-  model: "claude-sonnet-4.6",
+const { response, receipt } = await client.messages.create({
+  model: "claude-sonnet-4-6",
   max_tokens: 1024,
   messages: [{ role: "user", content: "Analyze this contract" }],
 });
 
-console.log(governance);
+console.log(receipt);
 
 // REQUIRED — process hangs without this
 await client.destroy();
@@ -26,7 +26,7 @@ That's it. One function wraps any supported LLM client. Every call is metered, a
 
 ### Expected Output
 
-The `governance` receipt returned from every call:
+The `receipt` returned from every call:
 
 ```
 {
@@ -35,7 +35,7 @@ The `governance` receipt returned from every call:
   transferId: "tx_m4k7p2_a1b2c3",
   auditHash: "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
   settled: true,
-  model: "claude-sonnet-4.6",
+  model: "claude-sonnet-4-6",
   provider: "anthropic",
   inputTokens: 12,
   outputTokens: 28
@@ -61,11 +61,11 @@ import OpenAI from "openai";
 
 // Anthropic
 const anthropic = await trust(new Anthropic());
-const { response, governance } = await anthropic.messages.create({ ... });
+const { response, receipt } = await anthropic.messages.create({ ... });
 
 // OpenAI
 const openai = await trust(new OpenAI());
-const { response, governance } = await openai.chat.completions.create({ ... });
+const { response, receipt } = await openai.chat.completions.create({ ... });
 
 // With options (full mode — requires TigerBeetle)
 const client = await trust(new Anthropic(), {
@@ -73,7 +73,7 @@ const client = await trust(new Anthropic(), {
 });
 ```
 
-Every call returns `{ response, governance }` where `governance` is a receipt:
+Every call returns `{ response, receipt }`:
 
 ```typescript
 {
@@ -82,7 +82,7 @@ Every call returns `{ response, governance }` where `governance` is a receipt:
   budgetRemaining: 49_858,
   auditHash: "a3f8...",
   settled: true,
-  model: "claude-sonnet-4.6",
+  model: "claude-sonnet-4-6",
   provider: "anthropic",
   timestamp: "2026-03-16T12:00:00.000Z"
 }

package/dist/anomaly/detector.d.ts

@@ -0,0 +1,17 @@
+import type { AnomalyConfig, AnomalyDetectorOptions, AnomalyDetectorState, AnomalyEvent, AnomalyVerdict, ResolvedAnomalyConfig } from "./types.js";
+/** Resolve a partial AnomalyConfig with defaults. */
+export declare function resolveAnomalyConfig(cfg?: AnomalyConfig): ResolvedAnomalyConfig;
+export interface AnomalyDetector {
+    readonly config: ResolvedAnomalyConfig;
+    readonly state: Readonly<AnomalyDetectorState>;
+    /** Observe a chunk or injection event. */
+    observe(event: AnomalyEvent): void;
+    /** Check current state. Returns the most-severe tripped verdict, or {tripped:false}. */
+    check(): AnomalyVerdict;
+    /** Manually reset the detector to a clean state. */
+    reset(): void;
+    /** True if currently tripped (and not yet auto-recovered via cooldown). */
+    isTripped(): boolean;
+}
+export declare function createAnomalyDetector(cfg?: AnomalyConfig, options?: AnomalyDetectorOptions): AnomalyDetector;
+//# sourceMappingURL=detector.d.ts.map

package/dist/anomaly/detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/anomaly/detector.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAEX,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EAGZ,cAAc,EACd,qBAAqB,EACrB,MAAM,YAAY,CAAC;AAIpB,qDAAqD;AACrD,wBAAgB,oBAAoB,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,qBAAqB,CAQ/E;AAWD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC/C,0CAA0C;IAC1C,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,wFAAwF;IACxF,KAAK,IAAI,cAAc,CAAC;IACxB,oDAAoD;IACpD,KAAK,IAAI,IAAI,CAAC;IACd,2EAA2E;IAC3E,SAAS,IAAI,OAAO,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CACpC,GAAG,CAAC,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,sBAAsB,GAC9B,eAAe,CAuKjB"}

package/dist/anomaly/detector.js

@@ -0,0 +1,174 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+/**
+ * detector.ts — AnomalyDetector
+ *
+ * Mental model:
+ *   - One detector instance per intercepted streaming call (or shared across
+ *     a "conversation" when injection-cascade tracking is needed).
+ *   - The streaming pipeline calls observe(event) for each chunk; the detector
+ *     updates per-signal state and check() returns a verdict.
+ *   - On tripped verdict: caller throws AnomalyError, which propagates through
+ *     the existing wrapStream onError → VOID flow → upstream caller. An audit
+ *     event `anomaly_detected` is appended via the existing hash-chain.
+ *   - After cooldownMs the detector auto-resets; reset() can be called manually.
+ *
+ * Defaults are tuned conservatively (500 tok/s sustained, $1/min, 3 injections in 60s).
+ * Detection is opt-in (anomaly.enabled=true) — when off, observe/check are no-ops.
+ */
+import { estimateCost } from "../ledger/pricing.js";
+import { createInjectionCascadeSignal, resolveInjectionCascadeConfig, } from "./signals/injection-cascade.js";
+import { createSpendVelocitySignal, resolveSpendVelocityConfig, } from "./signals/spend-velocity.js";
+import { createTokenRateSignal, resolveTokenRateConfig, } from "./signals/token-rate.js";
+const DEFAULT_COOLDOWN_MS = 30_000;
+/** Resolve a partial AnomalyConfig with defaults. */
+export function resolveAnomalyConfig(cfg) {
+    return {
+        enabled: cfg?.enabled ?? false,
+        tokenRate: resolveTokenRateConfig(cfg?.tokenRate),
+        spendVelocity: resolveSpendVelocityConfig(cfg?.spendVelocity),
+        injectionCascade: resolveInjectionCascadeConfig(cfg?.injectionCascade),
+        cooldownMs: cfg?.cooldownMs ?? DEFAULT_COOLDOWN_MS,
+    };
+}
+/** USD value of one usertoken. 1 usertoken = $0.0001 (one basis point of a cent). */
+const USERTOKENS_PER_DOLLAR = 10_000;
+function defaultCostCalculator(model, inputTokens, outputTokens) {
+    // estimateCost returns usertokens; convert to dollars.
+    const usertokens = estimateCost(model, inputTokens, outputTokens);
+    return usertokens / USERTOKENS_PER_DOLLAR;
+}
+export function createAnomalyDetector(cfg, options) {
+    const config = resolveAnomalyConfig(cfg);
+    const now = options?.now ?? (() => Date.now());
+    const model = options?.model ?? "unknown";
+    const costCalculator = options?.costCalculator ?? defaultCostCalculator;
+    const tokenRate = createTokenRateSignal(config.tokenRate);
+    const spendVelocity = createSpendVelocitySignal(config.spendVelocity);
+    const injectionCascade = createInjectionCascadeSignal(config.injectionCascade);
+    const state = {
+        tripped: false,
+        trippedAt: null,
+        trippedKind: null,
+    };
+    function maybeAutoRecover() {
+        if (!state.tripped || state.trippedAt == null)
+            return;
+        if (now() - state.trippedAt >= config.cooldownMs) {
+            doReset();
+        }
+    }
+    function observeChunk(ev) {
+        const t = ev.at ?? now();
+        tokenRate.observe(ev.deltaTokens, t);
+        const dollars = costCalculator(model, ev.cumulativeInputTokens, ev.cumulativeOutputTokens);
+        spendVelocity.observe(dollars, t);
+    }
+    function observeInjection(ev) {
+        injectionCascade.observe(ev.at ?? now());
+    }
+    function observe(event) {
+        if (!config.enabled)
+            return;
+        maybeAutoRecover();
+        if (event.kind === "chunk") {
+            observeChunk(event);
+        }
+        else {
+            observeInjection(event);
+        }
+    }
+    function check() {
+        if (!config.enabled)
+            return { tripped: false };
+        maybeAutoRecover();
+        // If already tripped (still in cooldown), keep returning the trip verdict
+        // so the caller's check is idempotent during the same call.
+        if (state.tripped && state.trippedKind != null) {
+            return buildKnownTrip(state.trippedKind);
+        }
+        const t = now();
+        // Check signals in priority order: token-rate first (cheapest), spend-velocity, then injection.
+        const tr = tokenRate.check(t);
+        if (tr.tripped) {
+            return markTripped("token_rate", `tokens/s ${tr.metric.toFixed(1)} >= ${tr.threshold}`, tr.metric, tr.threshold);
+        }
+        const sv = spendVelocity.check(t);
+        if (sv.tripped) {
+            return markTripped("spend_velocity", `$/min ${sv.metric.toFixed(4)} >= ${sv.threshold}`, sv.metric, sv.threshold);
+        }
+        const ic = injectionCascade.check(t);
+        if (ic.tripped) {
+            return markTripped("injection_cascade", `injection events ${ic.metric} >= ${ic.threshold} within window`, ic.metric, ic.threshold);
+        }
+        return { tripped: false };
+    }
+    function buildKnownTrip(kind) {
+        // Re-check the tripped signal so metric reflects the most recent value.
+        const t = now();
+        switch (kind) {
+            case "token_rate": {
+                const r = tokenRate.check(t);
+                return {
+                    tripped: true,
+                    kind,
+                    message: `tokens/s ${r.metric.toFixed(1)} >= ${r.threshold}`,
+                    metric: r.metric,
+                    threshold: r.threshold,
+                };
+            }
+            case "spend_velocity": {
+                const r = spendVelocity.check(t);
+                return {
+                    tripped: true,
+                    kind,
+                    message: `$/min ${r.metric.toFixed(4)} >= ${r.threshold}`,
+                    metric: r.metric,
+                    threshold: r.threshold,
+                };
+            }
+            case "injection_cascade": {
+                const r = injectionCascade.check(t);
+                return {
+                    tripped: true,
+                    kind,
+                    message: `injection events ${r.metric} >= ${r.threshold} within window`,
+                    metric: r.metric,
+                    threshold: r.threshold,
+                };
+            }
+        }
+    }
+    function markTripped(kind, message, metric, threshold) {
+        state.tripped = true;
+        state.trippedAt = now();
+        state.trippedKind = kind;
+        return { tripped: true, kind, message, metric, threshold };
+    }
+    function doReset() {
+        state.tripped = false;
+        state.trippedAt = null;
+        state.trippedKind = null;
+        tokenRate.reset();
+        spendVelocity.reset();
+        injectionCascade.reset();
+    }
+    function isTripped() {
+        // Run a check first so that signals which have crossed thresholds since
+        // the last observe() are reflected. Then handle auto-recovery.
+        if (!state.tripped && config.enabled) {
+            check();
+        }
+        maybeAutoRecover();
+        return state.tripped;
+    }
+    return {
+        config,
+        state,
+        observe,
+        check,
+        reset: doReset,
+        isTripped,
+    };
+}
+//# sourceMappingURL=detector.js.map

package/dist/anomaly/detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/anomaly/detector.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAEN,4BAA4B,EAC5B,6BAA6B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEN,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,qBAAqB,EACrB,sBAAsB,GACtB,MAAM,yBAAyB,CAAC;AAajC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACvD,OAAO;QACN,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK;QAC9B,SAAS,EAAE,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC;QACjD,aAAa,EAAE,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC;QAC7D,gBAAgB,EAAE,6BAA6B,CAAC,GAAG,EAAE,gBAAgB,CAAC;QACtE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,mBAAmB;KAClD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,SAAS,qBAAqB,CAAC,KAAa,EAAE,WAAmB,EAAE,YAAoB;IACtF,uDAAuD;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO,UAAU,GAAG,qBAAqB,CAAC;AAC3C,CAAC;AAeD,MAAM,UAAU,qBAAqB,CACpC,GAAmB,EACnB,OAAgC;IAEhC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,SAAS,CAAC;IAC1C,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,qBAAqB,CAAC;IAExE,MAAM,SAAS,GAAoB,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAwB,yBAAyB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3F,MAAM,gBAAgB,GAA2B,4BAA4B,CAC5E,MAAM,CAAC,gBAAgB,CACvB,CAAC;IAEF,MAAM,KAAK,GAAyB;QACnC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;KACjB,CAAC;IAEF,SAAS,gBAAgB;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QACtD,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAED,SAAS,YAAY,CAAC,EAAqB;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC;QAC3F,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,SAAS,gBAAgB,CAAC,EAAyB;QAClD,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,SAAS,OAAO,CAAC,KAAmB;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,gBAAgB,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACP,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED,SAAS,KAAK;QACb,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,gBAAgB,EAAE,CAAC;QACnB,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAChD,OAAO,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAEhB,gGAAgG;QAChG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,YAAY,EACZ,YAAY,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EACrD,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,gBAAgB,EAChB,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EAClD,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CACjB,mBAAmB,EACnB,oBAAoB,EAAE,CAAC,MAAM,OAAO,EAAE,CAAC,SAAS,gBAAgB,EAChE,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,cAAc,CAAC,IAAiB;QACxC,wEAAwE;QACxE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE;oBAC5D,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACvB,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjC,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE;oBACzD,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBAC1B,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpC,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,OAAO,EAAE,oBAAoB,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,SAAS,gBAAgB;oBACvE,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACtB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,SAAS,WAAW,CACnB,IAAiB,EACjB,OAAe,EACf,MAAc,EACd,SAAiB;QAEjB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5D,CAAC;IAED,SAAS,OAAO;QACf,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,aAAa,CAAC,KAAK,EAAE,CAAC;QACtB,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,SAAS,SAAS;QACjB,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,EAAE,CAAC;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO;QACN,MAAM;QACN,KAAK;QACL,OAAO;QACP,KAAK;QACL,KAAK,EAAE,OAAO;QACd,SAAS;KACT,CAAC;AACH,CAAC"}

package/dist/anomaly/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * anomaly/index.ts — Public exports for streaming anomaly governance.
+ */
+export { createAnomalyDetector, resolveAnomalyConfig } from "./detector.js";
+export type { AnomalyDetector } from "./detector.js";
+export type { AnomalyChunkEvent, AnomalyConfig, AnomalyDetectorOptions, AnomalyDetectorState, AnomalyEvent, AnomalyInjectionEvent, AnomalyKind, AnomalyVerdict, InjectionCascadeConfig, ResolvedAnomalyConfig, SpendVelocityConfig, TokenRateConfig, } from "./types.js";
+export { AnomalyError } from "../shared/errors.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/anomaly/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anomaly/index.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC5E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EACX,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/anomaly/index.js

@@ -0,0 +1,8 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+/**
+ * anomaly/index.ts — Public exports for streaming anomaly governance.
+ */
+export { createAnomalyDetector, resolveAnomalyConfig } from "./detector.js";
+export { AnomalyError } from "../shared/errors.js";
+//# sourceMappingURL=index.js.map

package/dist/anomaly/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anomaly/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAgB5E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/anomaly/signals/injection-cascade.d.ts

@@ -0,0 +1,31 @@
+/**
+ * injection-cascade.ts — Injection-cascade anomaly signal.
+ *
+ * Detects when N injection signals fire within an M-second rolling window.
+ * Useful for catching agents under sustained adversarial pressure.
+ *
+ * Default: 3 events in 60s.
+ */
+import type { InjectionCascadeConfig } from "../types.js";
+export interface InjectionCascadeSignalState {
+    /** Timestamps (ms since epoch) of injection events within the active window. */
+    eventTimes: number[];
+}
+export interface InjectionCascadeSignal {
+    state: Readonly<InjectionCascadeSignalState>;
+    observe(nowMs: number): void;
+    check(nowMs: number): {
+        tripped: boolean;
+        metric: number;
+        threshold: number;
+    };
+    reset(): void;
+}
+export interface ResolvedInjectionCascadeConfig {
+    eventCount: number;
+    windowMs: number;
+}
+export declare const INJECTION_CASCADE_DEFAULTS: ResolvedInjectionCascadeConfig;
+export declare function resolveInjectionCascadeConfig(cfg?: InjectionCascadeConfig): ResolvedInjectionCascadeConfig;
+export declare function createInjectionCascadeSignal(cfg: ResolvedInjectionCascadeConfig): InjectionCascadeSignal;
+//# sourceMappingURL=injection-cascade.d.ts.map

package/dist/anomaly/signals/injection-cascade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-cascade.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/injection-cascade.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,2BAA2B;IAC3C,gFAAgF;IAChF,UAAU,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACtC,KAAK,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,8BAA8B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,0BAA0B,EAAE,8BAGxC,CAAC;AAEF,wBAAgB,6BAA6B,CAC5C,GAAG,CAAC,EAAE,sBAAsB,GAC1B,8BAA8B,CAKhC;AAED,wBAAgB,4BAA4B,CAC3C,GAAG,EAAE,8BAA8B,GACjC,sBAAsB,CAwCxB"}

package/dist/anomaly/signals/injection-cascade.js

@@ -0,0 +1,46 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+export const INJECTION_CASCADE_DEFAULTS = {
+    eventCount: 3,
+    windowMs: 60_000,
+};
+export function resolveInjectionCascadeConfig(cfg) {
+    return {
+        eventCount: cfg?.eventCount ?? INJECTION_CASCADE_DEFAULTS.eventCount,
+        windowMs: cfg?.windowMs ?? INJECTION_CASCADE_DEFAULTS.windowMs,
+    };
+}
+export function createInjectionCascadeSignal(cfg) {
+    const state = {
+        eventTimes: [],
+    };
+    function pruneOlderThan(cutoffMs) {
+        while (state.eventTimes.length > 0) {
+            const head = state.eventTimes[0];
+            if (head !== undefined && head < cutoffMs) {
+                state.eventTimes.shift();
+            }
+            else {
+                break;
+            }
+        }
+    }
+    function observe(nowMs) {
+        pruneOlderThan(nowMs - cfg.windowMs);
+        state.eventTimes.push(nowMs);
+    }
+    function check(nowMs) {
+        pruneOlderThan(nowMs - cfg.windowMs);
+        const count = state.eventTimes.length;
+        return {
+            tripped: count >= cfg.eventCount,
+            metric: count,
+            threshold: cfg.eventCount,
+        };
+    }
+    function reset() {
+        state.eventTimes.length = 0;
+    }
+    return { state, observe, check, reset };
+}
+//# sourceMappingURL=injection-cascade.js.map

package/dist/anomaly/signals/injection-cascade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-cascade.js","sourceRoot":"","sources":["../../../src/anomaly/signals/injection-cascade.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAkCjC,MAAM,CAAC,MAAM,0BAA0B,GAAmC;IACzE,UAAU,EAAE,CAAC;IACb,QAAQ,EAAE,MAAM;CAChB,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAC5C,GAA4B;IAE5B,OAAO;QACN,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,0BAA0B,CAAC,UAAU;QACpE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,0BAA0B,CAAC,QAAQ;KAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC3C,GAAmC;IAEnC,MAAM,KAAK,GAAgC;QAC1C,UAAU,EAAE,EAAE;KACd,CAAC;IAEF,SAAS,cAAc,CAAC,QAAgB;QACvC,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBAC3C,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IAED,SAAS,OAAO,CAAC,KAAa;QAC7B,cAAc,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,KAAK,CAAC,KAAa;QAK3B,cAAc,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACtC,OAAO;YACN,OAAO,EAAE,KAAK,IAAI,GAAG,CAAC,UAAU;YAChC,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,GAAG,CAAC,UAAU;SACzB,CAAC;IACH,CAAC;IAED,SAAS,KAAK;QACb,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC"}

package/dist/anomaly/signals/spend-velocity.d.ts

@@ -0,0 +1,41 @@
+/**
+ * spend-velocity.ts — Spend-velocity anomaly signal.
+ *
+ * Tracks $/min over a rolling window. Each observation records the
+ * cumulative cost (in dollars). The signal trips when the rolling
+ * dollars-per-minute exceeds the configured ceiling.
+ *
+ * Default: $1.00/min over a 10s rolling window.
+ *
+ * Cost is computed via a `costCalculator` callback so the signal stays
+ * decoupled from the SDK's pricing module.
+ */
+import type { SpendVelocityConfig } from "../types.js";
+interface CostSample {
+    tMs: number;
+    cumulativeDollars: number;
+}
+export interface SpendVelocitySignalState {
+    samples: CostSample[];
+    lastDollarsPerMin: number;
+}
+export interface SpendVelocitySignal {
+    state: Readonly<SpendVelocitySignalState>;
+    /** Record cumulative dollars at time `nowMs`. */
+    observe(cumulativeDollars: number, nowMs: number): void;
+    check(nowMs: number): {
+        tripped: boolean;
+        metric: number;
+        threshold: number;
+    };
+    reset(): void;
+}
+export interface ResolvedSpendVelocityConfig {
+    thresholdDollarsPerMin: number;
+    windowMs: number;
+}
+export declare const SPEND_VELOCITY_DEFAULTS: ResolvedSpendVelocityConfig;
+export declare function resolveSpendVelocityConfig(cfg?: SpendVelocityConfig): ResolvedSpendVelocityConfig;
+export declare function createSpendVelocitySignal(cfg: ResolvedSpendVelocityConfig): SpendVelocitySignal;
+export {};
+//# sourceMappingURL=spend-velocity.d.ts.map

package/dist/anomaly/signals/spend-velocity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend-velocity.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/spend-velocity.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,UAAU,UAAU;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACxC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC1C,iDAAiD;IACjD,OAAO,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B;IAC3C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,uBAAuB,EAAE,2BAGrC,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,2BAA2B,CAMjG;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,GAAG,mBAAmB,CAkF/F"}

package/dist/anomaly/signals/spend-velocity.js

@@ -0,0 +1,90 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+export const SPEND_VELOCITY_DEFAULTS = {
+    thresholdDollarsPerMin: 1.0,
+    windowMs: 10_000,
+};
+export function resolveSpendVelocityConfig(cfg) {
+    return {
+        thresholdDollarsPerMin: cfg?.thresholdDollarsPerMin ?? SPEND_VELOCITY_DEFAULTS.thresholdDollarsPerMin,
+        windowMs: cfg?.windowMs ?? SPEND_VELOCITY_DEFAULTS.windowMs,
+    };
+}
+export function createSpendVelocitySignal(cfg) {
+    const state = {
+        samples: [],
+        lastDollarsPerMin: 0,
+    };
+    function pruneOlderThan(cutoffMs) {
+        // Keep at least one sample older than the cutoff so we can compute deltas.
+        // Find the most recent sample at or before cutoffMs and drop everything before it.
+        let lastBeforeCutoff = -1;
+        for (let i = 0; i < state.samples.length; i++) {
+            const sample = state.samples[i];
+            if (sample !== undefined && sample.tMs <= cutoffMs) {
+                lastBeforeCutoff = i;
+            }
+            else {
+                break;
+            }
+        }
+        if (lastBeforeCutoff > 0) {
+            state.samples.splice(0, lastBeforeCutoff);
+        }
+    }
+    function observe(cumulativeDollars, nowMs) {
+        // Reject NaN/negative deltas — keep the cumulative monotonic non-decreasing.
+        if (!Number.isFinite(cumulativeDollars) || cumulativeDollars < 0)
+            return;
+        const last = state.samples[state.samples.length - 1];
+        if (last !== undefined && cumulativeDollars < last.cumulativeDollars) {
+            // Provider regressed (shouldn't happen) — clamp to last
+            state.samples.push({ tMs: nowMs, cumulativeDollars: last.cumulativeDollars });
+        }
+        else {
+            state.samples.push({ tMs: nowMs, cumulativeDollars });
+        }
+        pruneOlderThan(nowMs - cfg.windowMs);
+    }
+    function check(nowMs) {
+        pruneOlderThan(nowMs - cfg.windowMs);
+        if (state.samples.length < 2) {
+            return {
+                tripped: false,
+                metric: 0,
+                threshold: cfg.thresholdDollarsPerMin,
+            };
+        }
+        const first = state.samples[0];
+        const last = state.samples[state.samples.length - 1];
+        if (first === undefined || last === undefined) {
+            return {
+                tripped: false,
+                metric: 0,
+                threshold: cfg.thresholdDollarsPerMin,
+            };
+        }
+        const dollarsDelta = last.cumulativeDollars - first.cumulativeDollars;
+        const minutesDelta = (last.tMs - first.tMs) / 60_000;
+        if (minutesDelta <= 0) {
+            return {
+                tripped: false,
+                metric: 0,
+                threshold: cfg.thresholdDollarsPerMin,
+            };
+        }
+        const dollarsPerMin = dollarsDelta / minutesDelta;
+        state.lastDollarsPerMin = dollarsPerMin;
+        return {
+            tripped: dollarsPerMin >= cfg.thresholdDollarsPerMin,
+            metric: dollarsPerMin,
+            threshold: cfg.thresholdDollarsPerMin,
+        };
+    }
+    function reset() {
+        state.samples.length = 0;
+        state.lastDollarsPerMin = 0;
+    }
+    return { state, observe, check, reset };
+}
+//# sourceMappingURL=spend-velocity.js.map

package/dist/anomaly/signals/spend-velocity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend-velocity.js","sourceRoot":"","sources":["../../../src/anomaly/signals/spend-velocity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AA4CjC,MAAM,CAAC,MAAM,uBAAuB,GAAgC;IACnE,sBAAsB,EAAE,GAAG;IAC3B,QAAQ,EAAE,MAAM;CAChB,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,GAAyB;IACnE,OAAO;QACN,sBAAsB,EACrB,GAAG,EAAE,sBAAsB,IAAI,uBAAuB,CAAC,sBAAsB;QAC9E,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;KAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAgC;IACzE,MAAM,KAAK,GAA6B;QACvC,OAAO,EAAE,EAAE;QACX,iBAAiB,EAAE,CAAC;KACpB,CAAC;IAEF,SAAS,cAAc,CAAC,QAAgB;QACvC,2EAA2E;QAC3E,mFAAmF;QACnF,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACpD,gBAAgB,GAAG,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACF,CAAC;IAED,SAAS,OAAO,CAAC,iBAAyB,EAAE,KAAa;QACxD,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC;YAAE,OAAO;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS,IAAI,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtE,wDAAwD;YACxD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,cAAc,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,SAAS,KAAK,CAAC,KAAa;QAK3B,cAAc,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,sBAAsB;aACrC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,sBAAsB;aACrC,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACtE,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACrD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,sBAAsB;aACrC,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,GAAG,YAAY,CAAC;QAClD,KAAK,CAAC,iBAAiB,GAAG,aAAa,CAAC;QACxC,OAAO;YACN,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,sBAAsB;YACpD,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,GAAG,CAAC,sBAAsB;SACrC,CAAC;IACH,CAAC;IAED,SAAS,KAAK;QACb,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC"}

package/dist/anomaly/signals/token-rate.d.ts

@@ -0,0 +1,46 @@
+/**
+ * token-rate.ts — Token-rate anomaly signal.
+ *
+ * Buckets observed chunks into fixed-width windows (default 2 s) and counts
+ * tokens-per-second within each window. Trips when N consecutive windows
+ * exceed the configured threshold (default 500 tok/s, 3 windows).
+ *
+ * Brief spikes (1-2 hot windows) are ignored — only sustained runaway
+ * behavior trips the circuit.
+ */
+import type { TokenRateConfig } from "../types.js";
+export interface TokenRateSignalState {
+    /** Per-window tokens accumulated in the current bucket. */
+    currentWindowTokens: number;
+    /** Start time of the current window. */
+    currentWindowStartMs: number;
+    /** Number of consecutive completed windows that exceeded threshold. */
+    consecutiveHotWindows: number;
+    /** Last computed peak rate (for the most recently closed window). */
+    lastWindowRateTokPerSec: number;
+}
+export interface TokenRateSignal {
+    state: Readonly<TokenRateSignalState>;
+    /** Observe a chunk's delta tokens at time `nowMs`. */
+    observe(deltaTokens: number, nowMs: number): void;
+    /**
+     * Check if the threshold has been crossed.
+     * Returns the metric (peak window rate) when tripped, else null.
+     */
+    check(nowMs: number): {
+        tripped: boolean;
+        metric: number;
+        threshold: number;
+        hotWindows: number;
+    };
+    reset(): void;
+}
+export interface ResolvedTokenRateConfig {
+    thresholdTokPerSec: number;
+    windowMs: number;
+    consecutiveWindows: number;
+}
+export declare const TOKEN_RATE_DEFAULTS: ResolvedTokenRateConfig;
+export declare function resolveTokenRateConfig(cfg?: TokenRateConfig): ResolvedTokenRateConfig;
+export declare function createTokenRateSignal(cfg: ResolvedTokenRateConfig): TokenRateSignal;
+//# sourceMappingURL=token-rate.d.ts.map

package/dist/anomaly/signals/token-rate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-rate.d.ts","sourceRoot":"","sources":["../../../src/anomaly/signals/token-rate.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,oBAAoB;IACpC,2DAA2D;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,uBAAuB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACtC,sDAAsD;IACtD,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,mBAAmB,EAAE,uBAIjC,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,uBAAuB,CAMrF;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,uBAAuB,GAAG,eAAe,CAmFnF"}